What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

[Resolved] System Folder pops up and possible malware

6 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
Hi!Recently I have a problem that is a system folder pops up everytime during startup. And also I have a feeling that my computer is infected with malware.

Here is the HijackThis log..Pls help me..

Logfile of HijackThis v1.99.1
Scan saved at 11:06:01 PM, on 7/15/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\windows\system\hpsysdrv.exe
C:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\HP DVD\Umbrella\DVDTray.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Razer\razertra.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Creative\Creative ZEN\ZEN Media Explorer\CTCheck.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\SpeedBit Video Accelerator\VideoAccelerator.exe
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Microsoft Office\Office\OSA.EXE
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\Nakido\nakido.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\SPEEDB~1\VideoAcceleratorService.exe
C:\PROGRA~1\SPEEDB~1\VideoAcceleratorEngine.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://sg.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = file://C:\PROGRA~1\SPEEDB~1\proxy.pac
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 200.238.92.106:3128
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
F3 - REG:win.ini: load=System
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,System
O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files\Orbitdownloader\orbitcth.dll
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll (file missing)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: TBSB07218 - {3AF93A29-A296-4AB0-9011-D85A559203B3} - C:\Program Files\TurboUpload\TurboUpload Toolbar\turboupload.dll
O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: ADSTechnology module - {831CBAC0-8283-4653-9D81-FEB9F3F6E47C} - C:\Program Files\ADSTechnology\ADSTechnology.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [CamMonitor] c:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [Home Theater SchSvr] "C:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe"
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [DVDTray] "C:\Program Files\HP DVD\Umbrella\DVDTray.exe"
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [razertra] C:\Program Files\Razer\razertra.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [CTCheck] C:\Program Files\Creative\Creative ZEN\ZEN Media Explorer\CTCheck.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [eTrust PestPatrol Active Protection] none
O4 - HKLM\..\Run: [SpeedBitVideoAccelerator] "C:\Program Files\SpeedBit Video Accelerator\VideoAccelerator.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [BackupNotify] c:\Program Files\HP\Digital Imaging\bin\backupnotify.exe
O4 - HKCU\..\Run: [CTSyncU.exe] "C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide
O4 - HKCU\..\Run: [kava] C:\WINDOWS\system32\kavo.exe
O4 - HKCU\..\Run: [kamsoft] C:\WINDOWS\system32\ckvo.exe
O4 - HKCU\..\RunOnce: [Shockwave Updater] C:\WINDOWS\system32\Adobe\SHOCKW~1\SWHELP~1.EXE -Update -1100429 -Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; TurboUpload.com Toolbar v. 1.2; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 1.1.4322; MEGAUPLOAD 1.0; .NET CLR 2.0.50727; MEGAUPLOAD 2.0; Alexa Toolbar)
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Find Fast.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
O4 - Global Startup: Office Startup.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE
O8 - Extra context menu item: &Download by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/201
O8 - Extra context menu item: &Grab video by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/204
O8 - Extra context menu item: Do&wnload selected by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/203
O8 - Extra context menu item: Down&load all by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/202
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/SU/SU1.5/ocx/15030/CTSUEng.cab
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS…er.cab31267.cab
O16 - DPF: {48884C41-EFAC-433D-958A-9FADAC41408E} (EGamesPlugin Class) - https://www.e-games.com.my/com/EGamesPlugin.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/pr02/resources/MSNPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/EN-SG/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {62789780-B744-11D0-986B-00609731A21D} (Autodesk MapGuide ActiveX Control) - http://www.can.com.sg/mwf/mgaxctrl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co…b?1114309379109
O16 - DPF: {6C269571-C6D7-4818-BCA4-32A035E8C884} (Creative Software AutoUpdate) - http://www.creative.com/softwareupdate/su/…101/CTSUEng.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1135323109546
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.putfile.com/includes/ImageUploader4.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe…nt.cab31267.cab
O16 - DPF: {8EF27A70-DD04-11D6-B7F6-00A0C9CD5F8A} - http://www.quikshield.com/qshsetup.exe
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse…pDownloader.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe…nt.cab56907.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://www.popcap.com/games/popcaploader_v6.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/softwareupdate/su/…15102/CTPID.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/Solit…wn.cab31267.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: avldr - avldr.dll (file missing)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Nakido - Nakido - C:\Program Files\Nakido\nakido.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
O23 - Service: VideoAcceleratorService - Speedbit Ltd. - C:\PROGRA~1\SPEEDB~1\VideoAcceleratorService.exe
Post #2
[external image: Posted Image]

It doesn't sound like this issue is malware/spyware but we'll have a look.


Stay with this topic until I give you the all clean post.

You might want to print these instructions out.

I suggest you do this:

Double-click My Computer.
Click the Tools menu, and then click Folder Options.
Click the View tab.
Clear "Hide file extensions for known file types."
Under the "Hidden files" folder, select "Show hidden files and folders."
Clear "Hide protected operating system files."
Click Apply, and then click OK.


Please do not delete anything unless instructed to.


Please download ATF Cleaner by Atribune.
Download - ATF Cleaner»
Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.

(If you use FireFox or the Opera browser
To keep saved passwords, click No at the prompt.)

It's normal after running ATF cleaner that the PC will be slower to boot the first time or two.

Next:

Please download Malwarebytes' Anti-Malware to your desktop.

  • Double-click mbam-setup.exe and follow the prompts to install the program.
  • At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select Perform quick scan, then click Scan.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Be sure that everything is checked, and click Remove Selected .
  • When completed, a log will open in Notepad. Please save it to a convenient location and post the results.
  • Note: If you receive a notice that some of the items couldn't be removed, that they have been added to the delete on reboot list, please reboot.
Also "copy/paste" a new HijackThis log file into this thread.

Also please describe how your computer behaves at the moment.
Post #3
Here it is..the malwarebytes anti-malware log report..
Well,the system folder still pops up during startup..Other than that,the checkbox for the show hidden folder can now be checked..last time,it auto check back on the do not show hidden fil..possibly the registry value has been changed..Aniwae thanx for the reply to my thread =D

Malwarebytes' Anti-Malware 1.23
Database version: 1001
Windows 5.1.2600 Service Pack 2

11:38:26 PM 7/28/2008
mbam-log-7-28-2008 (23-38-25).txt

Scan type: Quick Scan
Objects scanned: 55817
Time elapsed: 13 minute(s), 13 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 2
Registry Keys Infected: 27
Registry Values Infected: 3
Registry Data Items Infected: 1
Folders Infected: 8
Files Infected: 72

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
C:\Program Files\ADSTechnology\ADSTechnology.dll (Trojan.BHO) -> Delete on reboot.
C:\WINDOWS\system32\kavo0.dll (Spyware.OnlineGames) -> Delete on reboot.

Registry Keys Infected:
HKEY_CLASSES_ROOT\CLSID\{831cbac0-8283-4653-9d81-feb9f3f6e47c}

(Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{831cbac2-8283-4653-9d81-feb9f3f6e47c}

(Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{831cbac4-8283-4653-9d81-feb9f3f6e47c}

(Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Brow

ser Helper Objects\{831cbac0-8283-4653-9d81-feb9f3f6e47c} (Trojan.BHO) ->

Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{831cbac3-8283-4653-9d81-feb9f3f6e47c}

(Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\adstechnology.adstechnology (Trojan.BHO) -> Quarantined and

deleted successfully.
HKEY_CLASSES_ROOT\adstechnology.adstechnology.1 (Trojan.BHO) -> Quarantined

and deleted successfully.
HKEY_CLASSES_ROOT\activationmanager.activationmanager (Trojan.BHO) ->

Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\activationmanager.activationmanager.1 (Trojan.BHO) ->

Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{86a44ef7-78fc-4e18-a564-b18f806f7f56} (Trojan.BHO)

-> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86a4

4ef7-78fc-4e18-a564-b18f806f7f56} (Trojan.BHO) -> Quarantined and deleted

successfully.
HKEY_CLASSES_ROOT\Interface\{e4e3e0f8-cd30-4380-8ce9-b96904bdefca}

(Adware.PopCap) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{fe8a736f-4124-4d9c-b4b1-3b12381efabe}

(Adware.PopCap) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{c9c5deaf-0a1f-4660-8279-9edfad6fefe1}

(Adware.PopCap) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\

c:/windows/downloaded program files/popcaploader.dll (Adware.PopCap) -> Quarantined

and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{df780f87-ff2b-4df8-92d0-73db16a1543a}

(Adware.PopCap) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution

Units\{df780f87-ff2b-4df8-92d0-73db16a1543a} (Adware.PopCap) -> Quarantined and

deleted successfully.
HKEY_CLASSES_ROOT\popcaploader.popcaploaderctrl2 (Adware.PopCap) ->

Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\popcaploader.popcaploaderctrl2.1 (Adware.PopCap) ->

Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{86a44ef9-78fc-4e18-a564-b18f806f7f56}

(Trojan.MultiDefender) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\tbsb07218.ietoolbar (Adware.SoftMate) -> Quarantined and

deleted successfully.
HKEY_CLASSES_ROOT\tbsb07218.ietoolbar.1 (Adware.SoftMate) -> Quarantined and

deleted successfully.
HKEY_CLASSES_ROOT\tbsb07218.tbsb07218 (Adware.SoftMate) -> Quarantined and

deleted successfully.
HKEY_CLASSES_ROOT\tbsb07218.tbsb07218.3 (Adware.SoftMate) -> Quarantined and

deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\ErrorDoctor (Rogue.ErrorDoctor) -> Quarantined

and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Trymedia Systems (Adware.Trymedia) ->

Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\ActivationManager (Trojan.MultiDefender) ->

Quarantined and deleted successfully.

Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C

:\WINDOWS\Downloaded Program Files\popcaploader.dll (Adware.PopCap) ->

Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\kava

(Spyware.OnlineGames) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\kamsoft

(Trojan.Agent) -> Quarantined and deleted successfully.

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Adva

nced\Folder\Hidden\SHOWALL\CheckedValue (Hijack.System.Hidden) -> Bad: (0) Good:

(1) -> Quarantined and deleted successfully.

Folders Infected:
C:\Program Files\ActivationManager (Trojan.MultiDefender) -> Quarantined and deleted

successfully.
C:\Program Files\Web Technologies (Trojan.Zlob) -> Quarantined and deleted successfully.
C:\Program Files\SoftwareDoctor (Rogue.Multiple) -> Quarantined and deleted

successfully.
C:\Program Files\SoftwareDoctor\ErrorDoctor (Rogue.Multiple) -> Quarantined and deleted

successfully.
C:\Program Files\SoftwareDoctor\ErrorDoctor\Registry Backups (Rogue.Multiple) ->

Quarantined and deleted successfully.
C:\Program Files\ADSTechnology (Trojan.BHO) -> Delete on reboot.
C:\Documents and Settings\All Users\Start Menu\Programs\ADSTechnology (Trojan.BHO)

-> Quarantined and deleted successfully.
C:\WINDOWS\system32\219725 (Trojan.BHO) -> Quarantined and deleted successfully.

Files Infected:
C:\Program Files\ADSTechnology\ADSTechnology.dll (Trojan.BHO) -> Delete on reboot.
C:\WINDOWS\Downloaded Program Files\popcaploader.dll (Adware.PopCap) ->

Quarantined and deleted successfully.
C:\WINDOWS\MDM.EXE (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\n6j6pc0.com (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\l3v.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\Documents and Settings\Owner\Local Settings\Temp\f.dll (Spyware.OnlineGames) ->

Quarantined and deleted successfully.
C:\Documents and Settings\Owner\Local Settings\Temp\tru91.tmp (Spyware.OnlineGames)

-> Quarantined and deleted successfully.
C:\Documents and Settings\Owner\Local Settings\Temp\tru93.tmp (Spyware.OnlineGames)

-> Quarantined and deleted successfully.
C:\Documents and Settings\Owner\Local Settings\Temp\tru94.tmp (Spyware.OnlineGames)

-> Quarantined and deleted successfully.
C:\Documents and Settings\Owner\Local Settings\Temp\tru95.tmp (Spyware.OnlineGames)

-> Quarantined and deleted successfully.
C:\Documents and Settings\Owner\Local Settings\Temp\truC2.tmp (Trojan.Vaklik) ->

Quarantined and deleted successfully.
C:\Documents and Settings\Owner\Local Settings\Temp\truC3.tmp (Trojan.Vaklik) ->

Quarantined and deleted successfully.
C:\Documents and Settings\Owner\Local Settings\Temp\truC4.tmp (Trojan.Vaklik) ->

Quarantined and deleted successfully.
C:\Documents and Settings\Owner\Local Settings\Temp\truC5.tmp (Trojan.Agent) ->

Quarantined and deleted successfully.
C:\Documents and Settings\Owner\Local Settings\Temp\truC6.tmp (Trojan.Agent) ->

Quarantined and deleted successfully.
C:\Documents and Settings\Owner\Local Settings\Temp\truCC.tmp (Trojan.Vaklik) ->

Quarantined and deleted successfully.
C:\Documents and Settings\Owner\Local Settings\Temp\truCE.tmp (Trojan.Vaklik) ->

Quarantined and deleted successfully.
C:\Documents and Settings\Owner\Local Settings\Temp\truD0.tmp (Trojan.Vaklik) ->

Quarantined and deleted successfully.
C:\Documents and Settings\Owner\Local Settings\Temp\truD5.tmp (Trojan.Vaklik) ->

Quarantined and deleted successfully.
C:\Documents and Settings\Owner\Local Settings\Temp\truD6.tmp (Trojan.Vaklik) ->

Quarantined and deleted successfully.
C:\Documents and Settings\Owner\Local Settings\Temp\truD7.tmp (Trojan.Vaklik) ->

Quarantined and deleted successfully.
C:\Documents and Settings\Owner\Local Settings\Temp\truD8.tmp (Trojan.Agent) ->

Quarantined and deleted successfully.
C:\Documents and Settings\Owner\Local Settings\Temp\truD9.tmp (Trojan.Vaklik) ->

Quarantined and deleted successfully.
C:\Documents and Settings\Owner\Local Settings\Temp\truDA.tmp (Trojan.Agent) ->

Quarantined and deleted successfully.
C:\Documents and Settings\Owner\Local Settings\Temp\truDB.tmp (Trojan.Agent) ->

Quarantined and deleted successfully.
C:\Documents and Settings\Owner\Local Settings\Temp\truDC.tmp (Trojan.Agent) ->

Quarantined and deleted successfully.
C:\Documents and Settings\Owner\Local Settings\Temp\truDD.tmp (Trojan.Agent) ->

Quarantined and deleted successfully.
C:\Documents and Settings\Owner\Local Settings\Temp\twye.dll (Trojan.Agent) ->

Quarantined and deleted successfully.
C:\Program Files\ActivationManager\Uninstall.exe (Trojan.MultiDefender) -> Quarantined

and deleted successfully.
C:\Program Files\Web Technologies\iebr.dll (Trojan.Zlob) -> Quarantined and deleted

successfully.
C:\Program Files\Web Technologies\iebt.dll (Trojan.Zlob) -> Quarantined and deleted

successfully.
C:\Program Files\Web Technologies\iebtm.exe (Trojan.Zlob) -> Quarantined and deleted

successfully.
C:\Program Files\Web Technologies\iebtmm.exe (Trojan.Zlob) -> Quarantined and deleted

successfully.
C:\Program Files\Web Technologies\iebtu.exe (Trojan.Zlob) -> Quarantined and deleted

successfully.
C:\Program Files\Web Technologies\iebu.exe (Trojan.Zlob) -> Quarantined and deleted

successfully.
C:\Program Files\Web Technologies\myd.ico (Trojan.Zlob) -> Quarantined and deleted

successfully.
C:\Program Files\Web Technologies\mym.ico (Trojan.Zlob) -> Quarantined and deleted

successfully.
C:\Program Files\Web Technologies\myp.ico (Trojan.Zlob) -> Quarantined and deleted

successfully.
C:\Program Files\Web Technologies\myv.ico (Trojan.Zlob) -> Quarantined and deleted

successfully.
C:\Program Files\Web Technologies\ot.ico (Trojan.Zlob) -> Quarantined and deleted

successfully.
C:\Program Files\Web Technologies\ts.ico (Trojan.Zlob) -> Quarantined and deleted

successfully.
C:\Program Files\Web Technologies\wcm.exe (Trojan.Zlob) -> Quarantined and deleted

successfully.
C:\Program Files\Web Technologies\wcs.exe (Trojan.Zlob) -> Quarantined and deleted

successfully.
C:\Program Files\Web Technologies\wcu.exe (Trojan.Zlob) -> Quarantined and deleted

successfully.
C:\Program Files\SoftwareDoctor\ErrorDoctor\ignore.lst (Rogue.Multiple) -> Quarantined

and deleted successfully.
C:\Program Files\SoftwareDoctor\ErrorDoctor\Registry Backups\2006-10-08_19-15-12.reg

(Rogue.Multiple) -> Quarantined and deleted successfully.
C:\Program Files\ADSTechnology\ADSTechnology.exe (Trojan.BHO) -> Quarantined and

deleted successfully.
C:\Program Files\ADSTechnology\Uninstall.exe (Trojan.BHO) -> Quarantined and deleted

successfully.
C:\Documents and Settings\All Users\Start

Menu\Programs\ADSTechnology\ADSTechnology.lnk (Trojan.BHO) -> Quarantined and

deleted successfully.
C:\Documents and Settings\All Users\Start Menu\Programs\ADSTechnology\Uninstall.lnk

(Trojan.BHO) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\219725\219725.dll (Trojan.BHO) -> Quarantined and deleted

successfully.
C:\WINDOWS\system32\kavo0.dll (Spyware.OnlineGames) -> Delete on reboot.
C:\WINDOWS\system32\kavo1.dll (Spyware.OnlineGames) -> Quarantined and deleted

successfully.
C:\WINDOWS\system32\kavo.exe (Spyware.OnlineGames) -> Quarantined and deleted

successfully.
C:\WINDOWS\system32\ckvo.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\1aq1obb.bat (Trojan.Agent) -> Quarantined and deleted successfully.
C:\33gmhso.bat (Trojan.Agent) -> Quarantined and deleted successfully.
C:\ivcvknr.bat (Trojan.Agent) -> Quarantined and deleted successfully.
C:\lgrncie.bat (Trojan.Agent) -> Quarantined and deleted successfully.
C:\o6opnro.bat (Trojan.Agent) -> Quarantined and deleted successfully.
C:\ocbqsqj.bat (Trojan.Agent) -> Quarantined and deleted successfully.
C:\imt8.cmd (Trojan.Agent) -> Quarantined and deleted successfully.
C:\ipy.cmd (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\acrsecB.fon (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\acrsecI.fon (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\cxbrk.dll (Trojan.Zlob) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\ubpr01.exe (Trojan.Zlob) -> Quarantined and deleted

successfully.
C:\Documents and Settings\Owner\My Documents\My Music\My Music.url (Trojan.Zlob) ->

Quarantined and deleted successfully.
C:\Documents and Settings\Owner\My Documents\My Pictures\My Pictures.url (Trojan.Zlob)

-> Quarantined and deleted successfully.
C:\Documents and Settings\Owner\My Documents\My Videos\My Video.url (Trojan.Zlob) ->

Quarantined and deleted successfully.
C:\Documents and Settings\Owner\My Documents\My Documents.url (Trojan.Zlob) ->

Quarantined and deleted successfully.
C:\Documents and Settings\Owner\Favorites\Antivirus Scan.url (Rogue.Link) -> Quarantined

and deleted successfully.

—————————————-

Logfile of HijackThis v1.99.1
Scan saved at 11:55:20 PM, on 7/28/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\Nakido\nakido.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\SPEEDB~1\VideoAcceleratorService.exe
C:\PROGRA~1\SPEEDB~1\VideoAcceleratorEngine.exe
C:\windows\system\hpsysdrv.exe
C:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\HP DVD\Umbrella\DVDTray.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Razer\razertra.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Creative\Creative ZEN\ZEN Media Explorer\CTCheck.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\SpeedBit Video Accelerator\VideoAccelerator.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Microsoft Office\Office\OSA.EXE
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://sg.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = file://C:\PROGRA~1\SPEEDB~1\proxy.pac
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 200.238.92.106:3128
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
F3 - REG:win.ini: load=System
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,System,
O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files\Orbitdownloader\orbitcth.dll
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll (file missing)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: TBSB07218 - {3AF93A29-A296-4AB0-9011-D85A559203B3} - C:\Program Files\TurboUpload\TurboUpload Toolbar\turboupload.dll
O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [CamMonitor] c:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [Home Theater SchSvr] "C:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe"
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [DVDTray] "C:\Program Files\HP DVD\Umbrella\DVDTray.exe"
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [razertra] C:\Program Files\Razer\razertra.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [CTCheck] C:\Program Files\Creative\Creative ZEN\ZEN Media Explorer\CTCheck.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [eTrust PestPatrol Active Protection] none
O4 - HKLM\..\Run: [SpeedBitVideoAccelerator] "C:\Program Files\SpeedBit Video Accelerator\VideoAccelerator.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [BackupNotify] c:\Program Files\HP\Digital Imaging\bin\backupnotify.exe
O4 - HKCU\..\Run: [CTSyncU.exe] "C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide
O4 - HKCU\..\RunOnce: [Shockwave Updater] C:\WINDOWS\system32\Adobe\SHOCKW~1\SWHELP~1.EXE -Update -1100429 -Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; TurboUpload.com Toolbar v. 1.2; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 1.1.4322; MEGAUPLOAD 1.0; .NET CLR 2.0.50727; MEGAUPLOAD 2.0; Alexa Toolbar)
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Find Fast.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
O4 - Global Startup: Office Startup.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE
O8 - Extra context menu item: &Download by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/201
O8 - Extra context menu item: &Grab video by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/204
O8 - Extra context menu item: Do&wnload selected by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/203
O8 - Extra context menu item: Down&load all by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/202
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/SU/SU1.5/ocx/15030/CTSUEng.cab
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS…er.cab31267.cab
O16 - DPF: {48884C41-EFAC-433D-958A-9FADAC41408E} (EGamesPlugin Class) - https://www.e-games.com.my/com/EGamesPlugin.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/pr02/resources/MSNPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/EN-SG/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {62789780-B744-11D0-986B-00609731A21D} (Autodesk MapGuide ActiveX Control) - http://www.can.com.sg/mwf/mgaxctrl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co…b?1114309379109
O16 - DPF: {6C269571-C6D7-4818-BCA4-32A035E8C884} (Creative Software AutoUpdate) - http://www.creative.com/softwareupdate/su/…101/CTSUEng.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1135323109546
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.putfile.com/includes/ImageUploader4.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe…nt.cab31267.cab
O16 - DPF: {8EF27A70-DD04-11D6-B7F6-00A0C9CD5F8A} - http://www.quikshield.com/qshsetup.exe
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse…pDownloader.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe…nt.cab56907.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/softwareupdate/su/…15102/CTPID.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/Solit…wn.cab31267.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: avldr - avldr.dll (file missing)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Nakido - Nakido - C:\Program Files\Nakido\nakido.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
O23 - Service: VideoAcceleratorService - Speedbit Ltd. - C:\PROGRA~1\SPEEDB~1\VideoAcceleratorService.exe
Post #4
Open Notepad, click on Format and uncheck Word Wrap.

Next:

Download ComboFix from Here or Here to your Desktop.
**Note: In the event you already have Combofix, please delete it from your desktop and download this new version . It is important that it is saved directly to your desktop**
——————————————————————–
  • Close any open browsers and make sure you are disconnected from the net. Unplug the cable if need be before running combofix.
  • WARNING: IF you have not already done so Combofix will disconnect your machine from the Internet when it starts
  • Please do not re-connect your machine back to the Internet until Combofix has completely finished.
——————————————————————–

Double click on combofix.exe & follow the prompts.
When finished, it will produce a report for you.
Please post the "C:\ComboFix.txt" along with a new HijackThis log for further review

****Note: Do not mouseclick combofix's window while it's running. That may cause it to stall or freeze ****

*If there is no internet connection when Combofix has completely finished then restart your computer to restore back the connections.

Give it atleast 20-30 minutes to finish
Post #5
ComboFix 08-07-28.6 - Owner 2008-07-30 0:56:32.2 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.160 [GMT 8:00]
Running from: C:\Downloads\ComboFix.exe
* Created a new restore point
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\1rfw8hjr.com
C:\DOCUME~1\Owner\LOCALS~1\Temp\2i9.dll
C:\DOCUME~1\Owner\LOCALS~1\Temp\scw.dll
C:\DOCUME~1\Owner\LOCALS~1\Temp\zb5ok.dll
C:\Documents and Settings\Owner\Application Data\macromedia\Flash Player\#SharedObjects\2V6PCQSV\interclick.com
C:\Documents and Settings\Owner\Application Data\macromedia\Flash Player\#SharedObjects\2V6PCQSV\interclick.com\ud.sol
C:\Documents and Settings\Owner\Application Data\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#interclick.com
C:\Documents and Settings\Owner\Application Data\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#interclick.com\settings.sol
C:\ffojc.com
C:\g.exe
C:\hgu.bat
C:\k6wkwon2.exe
C:\m.exe
C:\p0sc9t.cmd
C:\WINDOWS\config\svchost.exe
C:\WINDOWS\Downloaded Program Files\setup.inf
C:\WINDOWS\system32\ckvo0.dll
C:\WINDOWS\system32\Config.ini
C:\WINDOWS\system32\kjllm.bak1
C:\WINDOWS\system32\kjllm.bak2
C:\WINDOWS\system32\kjllm.ini
C:\WINDOWS\system32\kjllm.ini2
D:\hgu.bat

.
((((((((((((((((((((((((( Files Created from 2008-06-28 to 2008-07-29 )))))))))))))))))))))))))))))))
.

2008-07-29 01:57 . 2008-06-30 20:13 99,442 –a—— C:\Sex.Is.Zero.2.2007.DVDRip.XviD.AC3.srt
2008-07-28 23:20 . 2008-07-28 23:54 d——– C:\Program Files\Malwarebytes' Anti-Malware
2008-07-28 23:20 . 2008-07-23 20:09 38,472 –a—— C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2008-07-28 23:20 . 2008-07-23 20:09 17,144 –a—— C:\WINDOWS\system32\drivers\mbam.sys
2008-07-24 00:23 . 2008-07-26 11:18 87,297 -r-hs—- C:\g2pfnid.com
2008-07-23 00:22 . 2008-07-23 18:45 118,757 -r-hs—- C:\6.bat
2008-07-21 23:35 . 2008-07-22 00:04 117,520 -r-hs—- C:\e9ehn1m8.com
2008-07-19 23:21 . 2008-07-21 05:45 133,157 -r-hs—- C:\jix9a.bat
2008-07-19 12:51 . 2008-07-21 17:44 118,782 -r-hs—- C:\ybj8df.exe
2008-07-18 07:53 . 2008-07-18 07:53 d——– C:\Documents and Settings\Owner\Application Data\Malwarebytes
2008-07-18 07:53 . 2008-07-18 07:53 d——– C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-07-17 10:03 . 2008-07-17 11:10 115,233 -r-hs—- C:\p83gjy.exe
2008-07-15 06:40 . 2008-07-17 10:02 133,840 -r-hs—- C:\31n3b2h.exe
2008-07-15 01:18 . 2008-07-15 01:19 d——– C:\RDOGS_FILES
2008-07-14 18:11 . 2008-07-15 07:09 118,512 -r-hs—- C:\fi.cmd
2008-07-11 00:23 . 2008-07-11 00:23 132,594 -r-hs—- C:\y.com
2008-07-11 00:23 . 2008-07-11 23:24 117,053 -r-hs—- C:\0gjn3yw.exe
2008-07-10 04:49 . 2008-07-10 04:49 77,312 -r-hs—- C:\WINDOWS\system32\ckvo2.dll
2008-07-08 18:37 . 2008-07-28 21:41 79,360 -r-hs—- C:\WINDOWS\system32\ckvo1.dll
2008-07-07 03:11 . 2008-07-07 03:11 d——– C:\Documents and Settings\Owner\Application Data\PE Explorer
2008-07-07 02:51 . 2008-07-07 23:27 d——– C:\Program Files\AVIConverter.biz
2008-07-07 02:30 . 2008-07-07 02:30 d——– C:\Program Files\Deskshare
2008-07-07 02:21 . 2008-07-07 02:30 d——– C:\Program Files\Fx Video Converter
2008-07-07 02:21 . 2003-05-21 23:50 156,910 –a—— C:\WINDOWS\WMSysPr8.prx
2008-07-07 02:21 . 2000-06-13 00:00 2,493 –a—— C:\WINDOWS\system32\COMCTL32.DEP
2008-07-07 02:06 . 2008-07-07 02:07 9,286,164 –a—— C:\ACAB_Now n Again.avi
2008-07-07 02:05 . 2008-07-07 02:21 d——– C:\Program Files\cheapestsoft
2008-07-07 02:04 . 2008-07-07 02:04 d——– C:\Program Files\Cucusoft
2008-07-07 02:04 . 2008-07-07 02:04 d——– C:\ConverterOutput
2008-07-07 02:04 . 2004-10-12 14:40 2,255,360 –a—— C:\WINDOWS\system32\libavcodec.dll
2008-07-07 02:04 . 2004-10-12 14:46 1,761,280 –a—— C:\WINDOWS\system32\ffdshow.ax
2008-07-07 02:04 . 2004-10-05 16:16 395,776 –a—— C:\WINDOWS\system32\libmplayer.dll
2008-07-07 02:04 . 2004-10-12 14:42 262,144 –a—— C:\WINDOWS\system32\TomsMoComp_ff.dll
2008-07-07 02:04 . 2004-10-04 01:50 112,640 –a—— C:\WINDOWS\system32\libmpeg2_ff.dll
2008-07-07 01:58 . 2003-10-17 00:00 3,423,744 –a—— C:\WINDOWS\system32\libfilefmt-1.1.0.dll
2008-07-07 01:58 . 2003-10-17 00:00 706,048 –a—— C:\WINDOWS\system32\libmcl-3.1.1.dll
2008-07-07 01:58 . 2003-10-17 00:00 20,480 –a—— C:\WINDOWS\system32\libavi-dd-1.2.0.dll
2008-06-29 20:07 . 2008-07-03 00:58 128,754 -r-hs—- C:\vmhr.bat

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-07-29 16:53 ——— d—–w C:\Documents and Settings\Owner\Application Data\Orbit
2008-07-29 16:47 ——— d—–w C:\Documents and Settings\Owner\Application Data\MegauploadToolbar
2008-07-29 16:24 ——— d—–w C:\Program Files\Nakido
2008-07-28 23:05 ——— d—a-w C:\Documents and Settings\All Users\Application Data\TEMP
2008-07-28 16:50 ——— d–h–w C:\Program Files\InstallShield Installation Information
2008-07-27 18:27 ——— d—–w C:\Documents and Settings\Owner\Application Data\Any Video Converter Professional
2008-07-19 09:59 ——— d—–w C:\Program Files\Warcraft III
2008-07-18 17:09 ——— d—–w C:\Program Files\Gabest
2008-07-16 03:27 116,862 –sh–r C:\k.com
2008-07-15 10:25 ——— d—–w C:\Program Files\Common Files\Panda Software
2008-07-14 23:02 ——— d—–w C:\Program Files\Java
2008-06-28 13:02 124,698 –sh–r C:\hxt9.bat
2008-06-26 22:52 ——— d—–w C:\Program Files\Any Video Converter Professional
2008-06-25 10:25 124,804 –sh–r C:\leb.com
2008-06-24 09:49 125,264 –sh–r C:\br1e.com
2008-06-23 23:19 ——— d—–w C:\Program Files\New Folder (2)
2008-06-23 22:37 123,013 –sh–r C:\uwlmj.com
2008-06-20 10:45 360,320 —-a-w C:\WINDOWS\system32\drivers\tcpip.sys
2008-06-20 10:44 138,368 —-a-w C:\WINDOWS\system32\drivers\afd.sys
2008-06-20 09:52 225,920 —-a-w C:\WINDOWS\system32\drivers\tcpip6.sys
2008-06-19 22:57 123,769 –sh–r C:\s2vgyp.exe
2008-06-19 09:08 124,324 –sh–r C:\n.com
2008-06-17 01:11 ——— d—–w C:\Program Files\Auto Shutdown
2008-06-15 08:42 127,490 –sh–r C:\pkxfkrki.bat
2008-06-13 13:10 272,128 ——w C:\WINDOWS\system32\drivers\bthport.sys
2008-06-06 01:37 ——— d—–w C:\Program Files\Unlocker
2008-06-03 16:12 ——— d—–w C:\Program Files\Delta
2008-06-03 08:44 122,302 –sh–r C:\p1t.bat
2008-06-03 03:43 ——— d—–w C:\Documents and Settings\Owner\Application Data\SmartFTP
2008-06-03 03:37 ——— d—–w C:\Documents and Settings\All Users\Application Data\GlobalSCAPE
2008-05-29 22:36 122,875 –sh–r C:\yp.bat
2008-05-29 16:17 ——— d—–w C:\Documents and Settings\Owner\Application Data\dvdcss
2008-05-29 14:53 ——— d—–w C:\Program Files\ImTOO
2008-05-28 10:53 121,077 –sh–r C:\sdc.bat
2008-05-19 10:02 117,805 –sh–r C:\lgnaqil.exe
2008-05-18 01:30 117,831 –sh–r C:\w2qagd.com
2008-05-14 02:55 117,926 –sh–r C:\w3dn9f.bat
2008-05-12 05:49 117,833 –sh–r C:\uqb0julr.bat
2008-05-10 03:44 117,386 –sh–r C:\ka1nk.bat
2008-05-07 12:09 119,068 –sh–r C:\qjatw9aj.exe
2008-05-06 09:50 119,007 –sh–r C:\qpe6.com
2008-05-04 02:41 119,274 –sh–r C:\x.bat
2007-03-31 04:38 12,585,829 —-a-w C:\Program Files\Muscle Museum (download).wmv
2007-03-31 04:37 10,802,949 —-a-w C:\Program Files\Hysteria (download).wmv
2007-03-30 08:45 14,708 —-a-w C:\Program Files\The.Fast.And.The.Furious-Tokyo.Drift[2006]DvDrip[Eng]_{_www.IPTorrents.com_}_^mininova.org^'.torrent
2007-03-03 12:12 8,192 -csha-w C:\Program Files\Thumbs.db
2006-10-05 15:49 7,357,020 —-a-w C:\Program Files\Nightmare of You - I Want To Be Buried In Your Backyard.mp3
2006-09-07 13:13 6,033,408 —-a-w C:\Program Files\Izwan_Pilus_-_06_Kembali_Senyum.mp3
2006-09-04 21:55 4,299,150 —-a-w C:\Program Files\OST_Heart_-_Irwansyah_&_Acha_Septriasa_-_My_Heart.mp3
2006-08-25 12:27 6,979,584 —-a-w C:\Program Files\02 - Oag - Sabtuday.mp3
2006-07-10 21:23 5,128,192 —-a-w C:\Program Files\Nitrus_-_Rasa.mp3
2006-05-08 18:26 5,167,733 —-a-w C:\Program Files\Fotograf - Dialam Fana Cintamu.mp3
2006-04-24 21:29 3,837,155 —-a-w C:\Program Files\Kanye West - Late Registration - Diamonds Are Forever.mp3
2006-04-24 04:03 10,392,764 —-a-w C:\Program Files\DJ Igal - Hip Hop Remixes 2005 Vol 7 - July 2005 Mixtape - Lil' Jon Feat. Pitbull, Elephant Man, Sean Paul - Culo (MegaMix).mp3
2006-01-22 16:47 2,349,056 —-a-w C:\Program Files\Kaer_-_Kini.mp3
2006-01-22 16:43 6,733,824 —-a-w C:\Program Files\Farah_-_Antara_Dua_-_01_-_Jalan_Terakhir.mp3
2005-12-11 17:28 3,048,680 —-a-w C:\Program Files\Daniel_(Malaysian_Idol)_-_Mimpi.mp3
2005-11-11 14:44 1,517 —-a-w C:\Program Files\TrustyFiles Downloads and Sharing.lnk
2005-10-26 01:15 8,192 —-a-w C:\Documents and Settings\Owner\w3l.exe
2005-07-07 18:17 2,782,195 —-a-w C:\Program Files\Weezer - Butterfly.mp3
2005-06-20 00:02 4,311,921 —-a-w C:\Program Files\Hazami - Kata.mp3
2005-06-11 12:32 5,737,914 —-a-w C:\Program Files\Malique_&_D'essentials_Ft[1]._Camelia_-_Sampai_Kapan.mp3
2005-05-29 12:29 3,405,731 —-a-w C:\Program Files\Fara, Nana, Nila, Linda (DJEra) - Bahu Ke Bahu.mp3
2005-04-23 14:41 1,073,152 —-a-w C:\Program Files\Krisya - Keluang Man.mp3
2005-03-26 01:15 4,040,022 —-a-w C:\Program Files\Bee Voice - Di Mana Cinta (Soundtrack Begitulah Cinta).mp3
2005-03-25 20:37 5,448,484 —-a-w C:\Program Files\Kelly Clarkson - Since You've Been Gone.mp3
2005-01-25 08:13 2,237,422 —-a-r C:\Program Files\Gerhana SkaCinta - Antara Anyir Dan Jakarta (Feat. Lady Arosa).mp3
2004-12-10 16:27 8,217,901 —-a-w C:\Program Files\Snow Patrol - Run.mp3
2004-11-22 00:00 4,012,953 —-a-w C:\Program Files\Innuendo - Gemawan.mp3
2004-11-02 03:56 3,333 —-a-w C:\Program Files\INSTALL.LOG
2004-07-28 12:39 2,658,432 —-a-w C:\Program Files\jamrud_surti_dan_tejo.mp3
2002-07-26 09:02 153,088 —-a-w C:\Program Files\UNWISE.EXE
2004-07-03 07:48 32 -csha-w C:\WINDOWS\{3D569514-6772-4728-8C2A-B376F2A686CA}.dat
2004-10-07 01:58 32 -csha-w C:\WINDOWS\{EC8309B8-A719-4EB2-9911-8985519E88C0}.dat
2007-03-13 07:08 74,240 –sha-w C:\WINDOWS\system32\Recycler.exe
2007-06-30 14:04 4,388,896 –sha-w C:\WINDOWS\system32\drivers\fidbox.dat
2007-06-30 14:04 116,768 –sha-w C:\WINDOWS\system32\drivers\fidbox2.dat
.

((((((((((((((((((((((((((((( snapshot_2007-09-21_ 00242.03 )))))))))))))))))))))))))))))))))))))))))
.
+ 2007-05-17 11:25:21 549,888 —-a-w C:\WINDOWS\$hf_mig$\KB921503\SP2QFE\oleaut32.dll
+ 2005-10-12 23:12:25 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB921503\spmsg.dll
+ 2005-10-12 23:12:26 213,216 —-a-w C:\WINDOWS\$hf_mig$\KB921503\spuninst.exe
+ 2005-10-12 23:12:25 22,752 —-a-w C:\WINDOWS\$hf_mig$\KB921503\update\spcustom.dll
+ 2005-10-12 23:12:29 716,000 —-a-w C:\WINDOWS\$hf_mig$\KB921503\update\update.exe
+ 2005-10-12 23:12:34 371,424 —-a-w C:\WINDOWS\$hf_mig$\KB921503\update\updspapi.dll
+ 2007-05-16 15:32:55 86,528 —-a-w C:\WINDOWS\$hf_mig$\KB929123\SP2QFE\directdb.dll
+ 2007-05-16 15:32:55 683,520 —-a-w C:\WINDOWS\$hf_mig$\KB929123\SP2QFE\inetcomm.dll
+ 2007-05-16 15:32:56 1,314,816 —-a-w C:\WINDOWS\$hf_mig$\KB929123\SP2QFE\msoe.dll
+ 2007-05-16 15:32:56 510,976 —-a-w C:\WINDOWS\$hf_mig$\KB929123\SP2QFE\wab32.dll
+ 2007-05-16 15:32:56 85,504 —-a-w C:\WINDOWS\$hf_mig$\KB929123\SP2QFE\wabimp.dll
+ 2006-01-19 19:29:19 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB929123\spmsg.dll
+ 2006-01-19 19:29:19 213,216 —-a-w C:\WINDOWS\$hf_mig$\KB929123\spuninst.exe
+ 2006-01-19 19:29:19 22,752 —-a-w C:\WINDOWS\$hf_mig$\KB929123\update\spcustom.dll
+ 2006-01-19 19:29:19 716,000 —-a-w C:\WINDOWS\$hf_mig$\KB929123\update\update.exe
+ 2006-01-19 19:29:19 371,424 —-a-w C:\WINDOWS\$hf_mig$\KB929123\update\updspapi.dll
+ 2008-02-26 11:48:44 297,984 —-a-w C:\WINDOWS\$hf_mig$\KB932823-v3\SP2QFE\msctf.dll
+ 2007-03-06 01:22:36 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB932823-v3\spmsg.dll
+ 2007-03-06 01:22:41 213,216 —-a-w C:\WINDOWS\$hf_mig$\KB932823-v3\spuninst.exe
+ 2007-03-06 01:22:34 22,752 —-a-w C:\WINDOWS\$hf_mig$\KB932823-v3\update\spcustom.dll
+ 2007-03-06 01:22:59 716,000 —-a-w C:\WINDOWS\$hf_mig$\KB932823-v3\update\update.exe
+ 2007-03-06 01:23:51 371,424 —-a-w C:\WINDOWS\$hf_mig$\KB932823-v3\update\updspapi.dll
+ 2007-07-18 10:33:06 60,416 —-a-w C:\WINDOWS\$hf_mig$\KB933360\SP2QFE\tzchange.exe
+ 2007-03-06 01:22:36 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB933360\spmsg.dll
+ 2007-03-06 01:22:41 213,216 —-a-w C:\WINDOWS\$hf_mig$\KB933360\spuninst.exe
+ 2007-03-06 01:22:34 22,752 —-a-w C:\WINDOWS\$hf_mig$\KB933360\update\spcustom.dll
+ 2007-03-06 01:22:59 716,000 —-a-w C:\WINDOWS\$hf_mig$\KB933360\update\update.exe
+ 2007-03-06 01:23:51 371,424 —-a-w C:\WINDOWS\$hf_mig$\KB933360\update\updspapi.dll
+ 2007-04-16 16:07:27 986,112 —-a-w C:\WINDOWS\$hf_mig$\KB935839\SP2QFE\kernel32.dll
+ 2005-10-12 23:12:25 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB935839\spmsg.dll
+ 2005-10-12 23:12:26 213,216 —-a-w C:\WINDOWS\$hf_mig$\KB935839\spuninst.exe
+ 2005-10-12 23:12:25 22,752 —-a-w C:\WINDOWS\$hf_mig$\KB935839\update\spcustom.dll
+ 2005-10-12 23:12:29 716,000 —-a-w C:\WINDOWS\$hf_mig$\KB935839\update\update.exe
+ 2005-10-12 23:12:34 371,424 —-a-w C:\WINDOWS\$hf_mig$\KB935839\update\updspapi.dll
+ 2007-04-25 20:32:22 144,896 —-a-w C:\WINDOWS\$hf_mig$\KB935840\SP2QFE\schannel.dll
+ 2006-01-19 19:29:19 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB935840\spmsg.dll
+ 2006-01-19 19:29:19 213,216 —-a-w C:\WINDOWS\$hf_mig$\KB935840\spuninst.exe
+ 2006-01-19 19:29:19 22,752 —-a-w C:\WINDOWS\$hf_mig$\KB935840\update\spcustom.dll
+ 2006-01-19 19:29:19 716,000 —-a-w C:\WINDOWS\$hf_mig$\KB935840\update\update.exe
+ 2006-01-19 19:29:19 371,424 —-a-w C:\WINDOWS\$hf_mig$\KB935840\update\updspapi.dll
+ 2007-06-26 06:06:12 1,104,896 —-a-w C:\WINDOWS\$hf_mig$\KB936021\SP2QFE\msxml3.dll
+ 2005-10-12 23:12:25 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB936021\spmsg.dll
+ 2005-10-12 23:12:26 213,216 —-a-w C:\WINDOWS\$hf_mig$\KB936021\spuninst.exe
+ 2005-10-12 23:12:25 22,752 —-a-w C:\WINDOWS\$hf_mig$\KB936021\update\spcustom.dll
+ 2005-10-12 23:12:29 716,000 —-a-w C:\WINDOWS\$hf_mig$\KB936021\update\update.exe
+ 2005-10-12 23:12:34 371,424 —-a-w C:\WINDOWS\$hf_mig$\KB936021\update\updspapi.dll
+ 2007-04-23 10:14:23 364,160 —-a-w C:\WINDOWS\$hf_mig$\KB936357\SP2QFE\update.sys
+ 2006-01-19 19:29:19 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB936357\spmsg.dll
+ 2006-01-19 19:29:19 213,216 —-a-w C:\WINDOWS\$hf_mig$\KB936357\spuninst.exe
+ 2006-01-19 19:29:19 22,752 —-a-w C:\WINDOWS\$hf_mig$\KB936357\update\spcustom.dll
+ 2006-01-19 19:29:19 716,000 —-a-w C:\WINDOWS\$hf_mig$\KB936357\update\update.exe
+ 2006-01-19 19:29:19 371,424 —-a-w C:\WINDOWS\$hf_mig$\KB936357\update\updspapi.dll
+ 2007-07-12 23:28:55 765,952 —-a-w C:\WINDOWS\$hf_mig$\KB938127-IE7\SP2QFE\vgx.dll
+ 2007-03-06 01:22:36 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB938127-IE7\spmsg.dll
+ 2007-03-06 01:22:41 213,216 —-a-w C:\WINDOWS\$hf_mig$\KB938127-IE7\spuninst.exe
+ 2007-03-06 01:22:34 22,752 —-a-w C:\WINDOWS\$hf_mig$\KB938127-IE7\update\spcustom.dll
+ 2007-03-06 01:22:59 716,000 —-a-w C:\WINDOWS\$hf_mig$\KB938127-IE7\update\update.exe
+ 2007-03-06 01:23:51 371,424 —-a-w C:\WINDOWS\$hf_mig$\KB938127-IE7\update\updspapi.dll
+ 2007-06-13 11:26:03 1,033,216 —-a-w C:\WINDOWS\$hf_mig$\KB938828\SP2QFE\explorer.exe
+ 2005-10-12 23:12:25 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB938828\spmsg.dll
+ 2005-10-12 23:12:26 213,216 —-a-w C:\WINDOWS\$hf_mig$\KB938828\spuninst.exe
+ 2005-10-12 23:12:25 22,752 —-a-w C:\WINDOWS\$hf_mig$\KB938828\update\spcustom.dll
+ 2005-10-12 23:12:29 716,000 —-a-w C:\WINDOWS\$hf_mig$\KB938828\update\update.exe
+ 2005-10-12 23:12:34 371,424 —-a-w C:\WINDOWS\$hf_mig$\KB938828\update\updspapi.dll
+ 2007-06-19 13:37:21 282,112 —-a-w C:\WINDOWS\$hf_mig$\KB938829\SP2QFE\gdi32.dll
+ 2006-01-19 19:29:19 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB938829\spmsg.dll
+ 2006-01-19 19:29:19 213,216 —-a-w C:\WINDOWS\$hf_mig$\KB938829\spuninst.exe
+ 2006-01-19 19:29:19 22,752 —-a-w C:\WINDOWS\$hf_mig$\KB938829\update\spcustom.dll
+ 2006-01-19 19:29:19 716,000 —-a-w C:\WINDOWS\$hf_mig$\KB938829\update\update.exe
+ 2006-01-19 19:29:19 371,424 —-a-w C:\WINDOWS\$hf_mig$\KB938829\update\updspapi.dll
+ 2007-08-20 10:02:09 124,928 —-a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\advpack.dll
+ 2007-08-20 10:02:11 214,528 —-a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\dxtrans.dll
+ 2007-08-20 10:02:09 132,608 —-a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\extmgr.dll
+ 2007-08-20 10:02:09 63,488 —-a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\icardie.dll
+ 2007-08-17 10:12:34 70,656 —-a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\ie4uinit.exe
+ 2007-08-20 10:02:09 153,088 —-a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\ieakeng.dll
+ 2007-08-20 10:02:09 230,400 —-a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\ieaksie.dll
+ 2007-08-17 07:29:55 161,792 —-a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\ieakui.dll
+ 2007-04-17 09:24:57 2,455,488 —-a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\ieapfltr.dat
+ 2007-08-20 10:02:09 383,488 —-a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\ieapfltr.dll
+ 2007-08-20 10:02:09 387,584 —-a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\iedkcs32.dll
+ 2007-08-20 10:02:10 6,066,176 —-a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\ieframe.dll
+ 2007-08-20 10:02:10 44,544 —-a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\iernonce.dll
+ 2007-08-20 10:02:10 267,776 —-a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\iertutil.dll
+ 2007-08-17 10:12:35 13,824 —-a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\ieudinit.exe
+ 2007-08-17 10:12:49 625,152 —-a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\iexplore.exe
+ 2007-08-20 10:02:10 27,648 —-a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\jsproxy.dll
+ 2007-08-20 10:02:10 459,264 —-a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\msfeeds.dll
+ 2007-08-20 10:02:10 52,224 —-a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\msfeedsbs.dll
+ 2007-08-20 10:02:11 3,592,192 —-a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\mshtml.dll
+ 2007-08-20 10:02:11 478,208 —-a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\mshtmled.dll
+ 2007-08-20 10:02:11 193,024 —-a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\msrating.dll
+ 2007-08-20 10:02:11 671,232 —-a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\mstime.dll
+ 2007-08-20 10:02:11 102,400 —-a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\occache.dll
+ 2007-08-20 10:02:11 105,984 —-a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\url.dll
+ 2007-08-20 10:02:11 1,161,728 —-a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\urlmon.dll
+ 2007-08-20 10:02:11 232,960 —-a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\webcheck.dll
+ 2007-08-20 10:02:11 825,344 —-a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\wininet.dll
+ 2007-03-06 01:22:36 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\spmsg.dll
+ 2007-03-06 01:22:41 213,216 —-a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\spuninst.exe
+ 2007-03-06 01:22:34 22,752 —-a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\update\spcustom.dll
+ 2007-03-06 01:22:59 716,000 —-a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\update\update.exe
+ 2007-03-06 01:23:51 371,424 —-a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\update\updspapi.dll
+ 2007-08-21 06:25:02 683,520 —-a-w C:\WINDOWS\$hf_mig$\KB941202\SP2QFE\inetcomm.dll
+ 2007-03-06 01:22:36 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB941202\spmsg.dll
+ 2007-03-06 01:22:41 213,216 —-a-w C:\WINDOWS\$hf_mig$\KB941202\spuninst.exe
+ 2007-03-06 01:22:34 22,752 —-a-w C:\WINDOWS\$hf_mig$\KB941202\update\spcustom.dll
+ 2007-03-06 01:22:59 716,000 —-a-w C:\WINDOWS\$hf_mig$\KB941202\update\update.exe
+ 2007-03-06 01:23:51 371,424 —-a-w C:\WINDOWS\$hf_mig$\KB941202\update\updspapi.dll
+ 2007-10-29 22:35:13 1,287,680 —-a-w C:\WINDOWS\$hf_mig$\KB941568\SP2QFE\quartz.dll
+ 2007-03-06 01:22:36 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB941568\spmsg.dll
+ 2007-03-06 01:22:41 213,216 —-a-w C:\WINDOWS\$hf_mig$\KB941568\spuninst.exe
+ 2007-03-06 01:22:34 22,752 —-a-w C:\WINDOWS\$hf_mig$\KB941568\update\spcustom.dll
+ 2007-03-06 01:22:59 716,000 —-a-w C:\WINDOWS\$hf_mig$\KB941568\update\update.exe
+ 2007-03-06 01:23:51 371,424 —-a-w C:\WINDOWS\$hf_mig$\KB941568\update\updspapi.dll
+ 2007-10-30 16:53:32 360,832 —-a-w C:\WINDOWS\$hf_mig$\KB941644\SP2QFE\tcpip.sys
+ 2007-03-06 01:22:36 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB941644\spmsg.dll
+ 2007-03-06 01:22:41 213,216 —-a-w C:\WINDOWS\$hf_mig$\KB941644\spuninst.exe
+ 2007-03-06 01:22:34 22,752 —-a-w C:\WINDOWS\$hf_mig$\KB941644\update\spcustom.dll
+ 2007-03-06 01:22:59 716,000 —-a-w C:\WINDOWS\$hf_mig$\KB941644\update\update.exe
+ 2007-03-06 01:23:51 371,424 —-a-w C:\WINDOWS\$hf_mig$\KB941644\update\updspapi.dll
+ 2008-03-19 09:40:27 1,845,888 —-a-w C:\WINDOWS\$hf_mig$\KB941693\SP2QFE\win32k.sys
+ 2007-03-06 01:22:36 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB941693\spmsg.dll
+ 2007-03-06 01:22:41 213,216 —-a-w C:\WINDOWS\$hf_mig$\KB941693\spuninst.exe
+ 2007-03-06 01:22:34 22,752 —-a-w C:\WINDOWS\$hf_mig$\KB941693\update\spcustom.dll
+ 2007-03-06 01:22:59 716,000 —-a-w C:\WINDOWS\$hf_mig$\KB941693\update\update.exe
+ 2007-03-06 01:23:51 371,424 —-a-w C:\WINDOWS\$hf_mig$\KB941693\update\updspapi.dll
+ 2007-10-10 23:47:27 124,928 —-a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\advpack.dll
+ 2007-10-10 23:47:27 214,528 —-a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\dxtrans.dll
+ 2007-10-10 23:47:27 132,608 —-a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\extmgr.dll
+ 2007-10-10 23:47:27 63,488 —-a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\icardie.dll
+ 2007-10-10 08:16:47 70,656 —-a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\ie4uinit.exe
+ 2007-10-10 23:47:27 153,088 —-a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\ieakeng.dll
+ 2007-10-10 23:47:27 230,400 —-a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\ieaksie.dll
+ 2007-10-10 05:47:20 161,792 —-a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\ieakui.dll
+ 2007-04-17 09:32:38 2,455,488 —-a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\ieapfltr.dat
+ 2007-10-10 23:47:27 383,488 —-a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\ieapfltr.dll
+ 2007-10-10 23:47:27 388,096 —-a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\iedkcs32.dll
+ 2007-10-10 23:47:27 6,067,200 —-a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\ieframe.dll
+ 2007-10-10 23:47:27 44,544 —-a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\iernonce.dll
+ 2007-10-10 23:47:27 267,776 —-a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\iertutil.dll
+ 2007-10-10 08:16:47 13,824 —-a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\ieudinit.exe
+ 2007-10-10 08:16:56 625,664 —-a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\iexplore.exe
+ 2007-10-10 23:47:28 27,648 —-a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\jsproxy.dll
+ 2007-10-10 23:47:28 459,264 —-a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\msfeeds.dll
+ 2007-10-10 23:47:28 52,224 —-a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\msfeedsbs.dll
+ 2007-10-30 23:48:49 3,593,216 —-a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\mshtml.dll
+ 2007-10-10 23:47:28 478,208 —-a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\mshtmled.dll
+ 2007-10-10 23:47:28 193,024 —-a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\msrating.dll
+ 2007-10-10 23:47:28 671,232 —-a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\mstime.dll
+ 2007-10-10 23:47:28 102,912 —-a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\occache.dll
+ 2007-10-10 23:47:28 105,984 —-a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\url.dll
+ 2007-10-10 23:47:29 1,162,240 —-a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\urlmon.dll
+ 2007-10-10 23:47:29 233,472 —-a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\webcheck.dll
+ 2007-10-10 23:47:29 825,344 —-a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\wininet.dll
+ 2007-03-06 01:22:36 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\spmsg.dll
+ 2007-03-06 01:22:41 213,216 —-a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\spuninst.exe
+ 2007-03-06 01:22:34 22,752 —-a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\update\spcustom.dll
+ 2007-03-06 01:22:59 716,000 —-a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\update\update.exe
+ 2007-03-06 01:23:51 371,424 —-a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\update\updspapi.dll
+ 2007-11-13 11:02:46 60,416 —-a-w C:\WINDOWS\$hf_mig$\KB942763\SP2QFE\tzchange.exe
+ 2007-03-06 01:22:36 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB942763\spmsg.dll
+ 2007-03-06 01:22:41 213,216 —-a-w C:\WINDOWS\$hf_mig$\KB942763\spuninst.exe
+ 2007-03-06 01:22:34 22,752 —-a-w C:\WINDOWS\$hf_mig$\KB942763\update\spcustom.dll
+ 2007-03-06 01:22:59 716,000 —-a-w C:\WINDOWS\$hf_mig$\KB942763\update\update.exe
+ 2007-03-06 01:23:51 371,424 —-a-w C:\WINDOWS\$hf_mig$\KB942763\update\updspapi.dll
+ 2007-12-04 18:29:10 551,936 —-a-w C:\WINDOWS\$hf_mig$\KB943055\SP2QFE\oleaut32.dll
+ 2007-03-06 01:22:36 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB943055\spmsg.dll
+ 2007-03-06 01:22:41 213,216 —-a-w C:\WINDOWS\$hf_mig$\KB943055\spuninst.exe
+ 2007-03-06 01:22:34 22,752 —-a-w C:\WINDOWS\$hf_mig$\KB943055\update\spcustom.dll
+ 2007-03-06 01:22:59 716,000 —-a-w C:\WINDOWS\$hf_mig$\KB943055\update\update.exe
+ 2007-03-06 01:23:51 371,424 —-a-w C:\WINDOWS\$hf_mig$\KB943055\update\updspapi.dll
+ 2007-11-07 09:50:47 727,040 —-a-w C:\WINDOWS\$hf_mig$\KB943485\SP2QFE\lsasrv.dll
+ 2007-03-06 01:22:36 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB943485\spmsg.dll
+ 2007-03-06 01:22:41 213,216 —-a-w C:\WINDOWS\$hf_mig$\KB943485\spuninst.exe
+ 2007-03-06 01:22:34 22,752 —-a-w C:\WINDOWS\$hf_mig$\KB943485\update\spcustom.dll
+ 2007-03-06 01:22:59 716,000 —-a-w C:\WINDOWS\$hf_mig$\KB943485\update\update.exe
+ 2007-03-06 01:23:51 371,424 —-a-w C:\WINDOWS\$hf_mig$\KB943485\update\updspapi.dll
+ 2007-12-07 02:01:07 124,928 —-a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\advpack.dll
+ 2007-12-19 22:57:52 347,136 —-a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\dxtmsft.dll
+ 2007-12-07 02:01:07 214,528 —-a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\dxtrans.dll
+ 2007-12-07 02:01:07 133,120 —-a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\extmgr.dll
+ 2007-12-07 02:01:07 63,488 —-a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\icardie.dll
+ 2007-12-06 08:34:28 70,656 —-a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\ie4uinit.exe
+ 2007-12-07 02:01:08 153,088 —-a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\ieakeng.dll
+ 2007-12-07 02:01:08 230,400 —-a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\ieaksie.dll
+ 2007-12-06 05:00:02 161,792 —-a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\ieakui.dll
+ 2007-04-17 09:32:38 2,455,488 —-a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\ieapfltr.dat
+ 2007-12-07 02:01:08 383,488 —-a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\ieapfltr.dll
+ 2007-12-07 02:01:08 388,096 —-a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\iedkcs32.dll
+ 2007-12-07 02:01:10 6,067,200 —-a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\ieframe.dll
+ 2007-12-07 02:01:10 44,544 —-a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\iernonce.dll
+ 2007-12-07 02:01:11 267,776 —-a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\iertutil.dll
+ 2007-12-06 08:34:29 13,824 —-a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\ieudinit.exe
+ 2007-12-06 08:34:45 625,664 —-a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\iexplore.exe
+ 2007-12-07 02:01:11 27,648 —-a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\jsproxy.dll
+ 2007-12-07 02:01:11 459,264 —-a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\msfeeds.dll
+ 2007-12-07 02:01:11 52,224 —-a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\msfeedsbs.dll
+ 2007-12-07 02:01:12 3,593,216 —-a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\mshtml.dll
+ 2007-12-07 02:01:12 478,208 —-a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\mshtmled.dll
+ 2007-12-07 02:01:13 193,024 —-a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\msrating.dll
+ 2007-12-07 02:01:13 671,232 —-a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\mstime.dll
+ 2007-12-07 02:01:13 102,912 —-a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\occache.dll
+ 2008-01-11 05:57:26 44,544 —-a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\pngfilt.dll
+ 2007-12-07 02:01:13 105,984 —-a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\url.dll
+ 2007-12-07 02:01:13 1,162,752 —-a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\urlmon.dll
+ 2007-12-07 02:01:13 233,472 —-a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\webcheck.dll
+ 2007-12-07 02:01:13 825,344 —-a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\wininet.dll
+ 2007-03-06 01:22:36 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\spmsg.dll
+ 2007-03-06 01:22:41 213,216 —-a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\spuninst.exe
+ 2007-03-06 01:22:34 22,752 —-a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\update\spcustom.dll
+ 2007-03-06 01:22:59 716,000 —-a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\update\update.exe
+ 2007-03-06 01:23:51 371,424 —-a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\update\updspapi.dll
+ 2007-11-13 08:47:45 20,480 —-a-w C:\WINDOWS\$hf_mig$\KB944653\SP2QFE\secdrv.sys
+ 2007-03-06 01:22:36 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB944653\spmsg.dll
+ 2007-03-06 01:22:41 213,216 —-a-w C:\WINDOWS\$hf_mig$\KB944653\spuninst.exe
+ 2007-03-06 01:22:34 22,752 —-a-w C:\WINDOWS\$hf_mig$\KB944653\update\spcustom.dll
+ 2007-03-06 01:22:59 716,000 —-a-w C:\WINDOWS\$hf_mig$\KB944653\update\update.exe
+ 2007-03-06 01:23:51 371,424 —-a-w C:\WINDOWS\$hf_mig$\KB944653\update\updspapi.dll
+ 2008-02-20 05:19:35 147,968 —-a-w C:\WINDOWS\$hf_mig$\KB945553\SP2QFE\dnsapi.dll
+ 2008-02-20 18:49:36 45,568 —-a-w C:\WINDOWS\$hf_mig$\KB945553\SP2QFE\dnsrslvr.dll
+ 2007-03-06 01:22:36 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB945553\spmsg.dll
+ 2007-03-06 01:22:41 213,216 —-a-w C:\WINDOWS\$hf_mig$\KB945553\spuninst.exe
+ 2007-03-06 01:22:34 22,752 —-a-w C:\WINDOWS\$hf_mig$\KB945553\update\spcustom.dll
+ 2007-03-06 01:22:59 716,000 —-a-w C:\WINDOWS\$hf_mig$\KB945553\update\update.exe
+ 2007-03-06 01:23:51 371,424 —-a-w C:\WINDOWS\$hf_mig$\KB945553\update\updspapi.dll
+ 2007-12-18 09:38:59 179,712 —-a-w C:\WINDOWS\$hf_mig$\KB946026\SP2QFE\mrxdav.sys
+ 2007-03-06 01:22:36 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB946026\spmsg.dll
+ 2007-03-06 01:22:41 213,216 —-a-w C:\WINDOWS\$hf_mig$\KB946026\spuninst.exe
+ 2007-03-06 01:22:34 22,752 —-a-w C:\WINDOWS\$hf_mig$\KB946026\update\spcustom.dll
+ 2007-03-06 01:22:59 716,000 —-a-w C:\WINDOWS\$hf_mig$\KB946026\update\update.exe
+ 2007-03-06 01:23:51 371,424 —-a-w C:\WINDOWS\$hf_mig$\KB946026\update\updspapi.dll
+ 2008-03-01 13:03:00 124,928 —-a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\advpack.dll
+ 2008-03-01 13:03:00 347,136 —-a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\dxtmsft.dll
+ 2008-03-01 13:03:00 214,528 —-a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\dxtrans.dll
+ 2008-03-01 13:03:00 132,608 —-a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\extmgr.dll
+ 2008-03-01 13:03:00 63,488 —-a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\icardie.dll
+ 2008-02-22 09:39:56 70,656 —-a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\ie4uinit.exe
+ 2008-03-01 13:03:00 153,088 —-a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\ieakeng.dll
+ 2008-03-01 13:03:00 230,400 —-a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\ieaksie.dll
+ 2008-02-15 05:44:25 161,792 —-a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\ieakui.dll
+ 2007-04-17 09:32:38 2,455,488 —-a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\ieapfltr.dat
+ 2008-03-01 13:03:00 383,488 —-a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\ieapfltr.dll
+ 2008-03-01 13:03:00 388,608 —-a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\iedkcs32.dll
+ 2008-03-01 13:03:01 6,067,712 —-a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\ieframe.dll
+ 2008-03-01 13:03:01 44,544 —-a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\iernonce.dll
+ 2008-03-01 13:03:01 267,776 —-a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\iertutil.dll
+ 2008-02-22 09:39:56 13,824 —-a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\ieudinit.exe
+ 2008-02-22 09:40:22 625,664 —-a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\iexplore.exe
+ 2008-03-01 13:03:01 27,648 —-a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\jsproxy.dll
+ 2008-03-01 13:03:01 459,264 —-a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\msfeeds.dll
+ 2008-03-01 13:03:01 52,224 —-a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\msfeedsbs.dll
+ 2008-03-01 13:03:01 3,593,216 —-a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\mshtml.dll
+ 2008-03-01 13:03:01 478,208 —-a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\mshtmled.dll
+ 2008-03-01 13:03:01 193,024 —-a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\msrating.dll
+ 2008-03-01 13:03:01 671,232 —-a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\mstime.dll
+ 2008-03-01 13:03:01 102,912 —-a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\occache.dll
+ 2008-03-01 13:03:01 44,544 —-a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\pngfilt.dll
+ 2008-03-01 13:03:02 105,984 —-a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\url.dll
+ 2008-03-01 13:03:02 1,162,752 —-a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\urlmon.dll
+ 2008-03-01 13:03:02 233,472 —-a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\webcheck.dll
+ 2008-03-01 13:03:02 827,392 —-a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\wininet.dll
+ 2007-03-06 01:22:33 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\spmsg.dll
+ 2007-03-06 01:22:39 213,216 —-a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\spuninst.exe
+ 2007-03-06 01:22:31 22,752 —-a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\update\spcustom.dll
+ 2007-03-06 01:22:56 716,000 —-a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\update\update.exe
+ 2007-03-06 01:23:51 371,424 —-a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\update\updspapi.dll
+ 2008-02-20 06:52:43 282,624 —-a-w C:\WINDOWS\$hf_mig$\KB948590\SP2QFE\gdi32.dll
+ 2007-03-06 01:22:36 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB948590\spmsg.dll
+ 2007-03-06 01:22:41 213,216 —-a-w C:\WINDOWS\$hf_mig$\KB948590\spuninst.exe
+ 2007-03-06 01:22:34 22,752 —-a-w C:\WINDOWS\$hf_mig$\KB948590\update\spcustom.dll
+ 2007-03-06 01:22:59 716,000 —-a-w C:\WINDOWS\$hf_mig$\KB948590\update\update.exe
+ 2007-03-06 01:23:51 371,424 —-a-w C:\WINDOWS\$hf_mig$\KB948590\update\updspapi.dll
+ 2007-03-06 01:22:33 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB948881\spmsg.dll
+ 2007-03-06 01:22:39 213,216 —-a-w C:\WINDOWS\$hf_mig$\KB948881\spuninst.exe
+ 2007-03-06 01:22:31 22,752 —-a-w C:\WINDOWS\$hf_mig$\KB948881\update\spcustom.dll
+ 2007-03-06 01:22:56 716,000 —-a-w C:\WINDOWS\$hf_mig$\KB948881\update\update.exe
+ 2007-03-06 01:23:47 371,424 —-a-w C:\WINDOWS\$hf_mig$\KB948881\update\updspapi.dll
+ 2008-01-23 04:56:21 554,008 —-a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\dao360.dll
+ 2007-12-10 12:41:11 518,944 —-a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msexch40.dll
+ 2007-12-10 12:41:11 326,432 —-a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msexcl40.dll
+ 2007-12-10 12:41:11 1,516,568 —-a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjet40.dll
+ 2007-12-10 12:41:11 355,112 —-a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjetol1.dll
+ 2008-03-27 07:39:13 151,583 —-a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjint40.dll
+ 2007-12-10 12:41:12 60,192 —-a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjter40.dll
+ 2007-12-10 12:41:12 248,608 —-a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjtes40.dll
+ 2007-12-10 12:41:12 219,936 —-a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msltus40.dll
+ 2007-12-10 12:41:12 355,104 —-a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mspbde40.dll
+ 2007-12-10 12:41:13 432,928 —-a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msrd2x40.dll
+ 2007-12-10 12:41:13 322,336 —-a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msrd3x40.dll
+ 2007-12-10 12:41:13 559,904 —-a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msrepl40.dll
+ 2007-12-10 12:41:13 264,992 —-a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mstext40.dll
+ 2007-12-10 12:41:13 838,432 —-a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mswdat10.dll
+ 2007-12-10 12:41:14 621,344 —-a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mswstr10.dll
+ 2007-12-10 12:41:14 355,104 —-a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msxbde40.dll
+ 2007-03-06 01:22:36 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB950749\spmsg.dll
+ 2007-03-06 01:22:41 213,216 —-a-w C:\WINDOWS\$hf_mig$\KB950749\spuninst.exe
+ 2007-03-06 01:22:34 22,752 —-a-w C:\WINDOWS\$hf_mig$\KB950749\update\spcustom.dll
+ 2007-03-06 01:22:59 716,000 —-a-w C:\WINDOWS\$hf_mig$\KB950749\update\update.exe
+ 2007-03-06 01:23:51 371,424 —-a-w C:\WINDOWS\$hf_mig$\KB950749\update\updspapi.dll
+ 2008-04-23 03:35:35 124,928 —-a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\advpack.dll
+ 2008-04-23 03:35:35 347,136 —-a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\dxtmsft.dll
+ 2008-04-23 03:35:35 214,528 —-a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\dxtrans.dll
+ 2008-04-23 03:35:35 132,608 —-a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\extmgr.dll
+ 2008-04-23 03:35:35 63,488 —-a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\icardie.dll
+ 2008-04-22 08:02:19 70,656 —-a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\ie4uinit.exe
+ 2008-04-23 03:35:35 153,088 —-a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\ieakeng.dll
+ 2008-04-23 03:35:35 230,400 —-a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\ieaksie.dll
+ 2008-04-20 05:07:38 161,792 —-a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\ieakui.dll
+ 2007-04-17 09:32:38 2,455,488 —-a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\ieapfltr.dat
+ 2008-04-23 03:35:35 383,488 —-a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\ieapfltr.dll
+ 2008-04-23 03:35:35 388,608 —-a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\iedkcs32.dll
+ 2008-04-23 03:35:36 6,068,224 —-a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\ieframe.dll
+ 2008-04-23 03:35:36 44,544 —-a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\iernonce.dll
+ 2008-04-23 03:35:36 267,776 —-a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\iertutil.dll
+ 2008-04-22 08:02:19 13,824 —-a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\ieudinit.exe
+ 2008-04-22 08:02:46 625,664 —-a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\iexplore.exe
+ 2008-04-23 03:35:36 27,648 —-a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\jsproxy.dll
+ 2008-04-23 03:35:36 459,264 —-a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\msfeeds.dll
+ 2008-04-23 03:35:36 52,224 —-a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\msfeedsbs.dll
+ 2008-04-23 03:35:36 3,593,728 —-a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\mshtml.dll
+ 2008-04-23 03:35:36 478,208 —-a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\mshtmled.dll
+ 2008-04-23 03:35:36 193,024 —-a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\msrating.dll
+ 2008-04-23 03:35:36 671,232 —-a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\mstime.dll
+ 2008-04-23 03:35:36 102,912 —-a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\occache.dll
+ 2008-04-23 03:35:36 44,544 —-a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\pngfilt.dll
+ 2008-04-23 03:35:36 105,984 —-a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\url.dll
+ 2008-04-23 03:35:36 1,162,752 —-a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\urlmon.dll
+ 2008-04-23 03:35:36 233,472 —-a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\webcheck.dll
+ 2008-04-23 03:35:36 827,392 —-a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\wininet.dll
+ 2007-03-06 01:22:33 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\spmsg.dll
+ 2007-03-06 01:22:39 213,216 —-a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\spuninst.exe
+ 2007-03-06 01:22:31 22,752 —-a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\update\spcustom.dll
+ 2007-03-06 01:22:56 716,000 —-a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\update\update.exe
+ 2007-03-06 01:23:51 371,424 —-a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\update\updspapi.dll
+ 2007-11-30 12:39:22 17,272 —-a-w C:\WINDOWS\$hf_mig$\KB950760\spmsg.dll
+ 2007-11-30 12:39:22 231,288 —-a-w C:\WINDOWS\$hf_mig$\KB950760\spuninst.exe
+ 2007-11-30 12:39:22 26,488 —-a-w C:\WINDOWS\$hf_mig$\KB950760\update\spcustom.dll
+ 2007-11-30 12:39:22 755,576 —-a-w C:\WINDOWS\$hf_mig$\KB950760\update\update.exe
+ 2007-11-30 12:39:22 382,840 —-a-w C:\WINDOWS\$hf_mig$\KB950760\update\updspapi.dll
+ 2008-05-08 12:14:51 203,008 —-a-w C:\WINDOWS\$hf_mig$\KB950762\SP2QFE\rmcast.sys
+ 2008-05-08 14:02:52 203,136 —-a-w C:\WINDOWS\$hf_mig$\KB950762\SP3GDR\rmcast.sys
+ 2008-05-08 13:58:17 203,136 —-a-w C:\WINDOWS\$hf_mig$\KB950762\SP3QFE\rmcast.sys
+ 2007-11-30 12:39:22 17,272 —-a-w C:\WINDOWS\$hf_mig$\KB950762\spmsg.dll
+ 2007-11-30 12:39:22 231,288 —-a-w C:\WINDOWS\$hf_mig$\KB950762\spuninst.exe
+ 2007-11-30 12:39:22 26,488 —-a-w C:\WINDOWS\$hf_mig$\KB950762\update\spcustom.dll
+ 2007-11-30 12:39:22 755,576 —-a-w C:\WINDOWS\$hf_mig$\KB950762\update\update.exe
+ 2007-11-30 12:39:22 382,840 —-a-w C:\WINDOWS\$hf_mig$\KB950762\update\updspapi.dll
+ 2008-06-13 09:52:16 272,128 —-a-w C:\WINDOWS\$hf_mig$\KB951376-v2\SP2QFE\bthport.sys
+ 2008-06-13 11:05:51 272,128 —-a-w C:\WINDOWS\$hf_mig$\KB951376-v2\SP3GDR\bthport.sys
+ 2008-06-13 11:27:43 272,128 —-a-w C:\WINDOWS\$hf_mig$\KB951376-v2\SP3QFE\bthport.sys
+ 2007-11-30 11:18:51 17,272 —-a-w C:\WINDOWS\$hf_mig$\KB951376-v2\spmsg.dll
+ 2007-11-30 11:18:51 231,288 —-a-w C:\WINDOWS\$hf_mig$\KB951376-v2\spuninst.exe
+ 2007-11-30 11:18:51 26,488 —-a-w C:\WINDOWS\$hf_mig$\KB951376-v2\update\spcustom.dll
+ 2007-11-30 11:18:51 755,576 —-a-w C:\WINDOWS\$hf_mig$\KB951376-v2\update\update.exe
+ 2007-11-30 11:18:51 382,840 —-a-w C:\WINDOWS\$hf_mig$\KB951376-v2\update\updspapi.dll
+ 2008-04-14 11:00:16 272,128 —-a-w C:\WINDOWS\$hf_mig$\KB951376\SP2QFE\bthport.sys
+ 2008-04-14 12:30:49 272,128 —-a-w C:\WINDOWS\$hf_mig$\KB951376\SP3GDR\bthport.sys
+ 2008-04-14 12:36:35 272,128 —-a-w C:\WINDOWS\$hf_mig$\KB951376\SP3QFE\bthport.sys
+ 2007-11-30 11:18:51 17,272 —-a-w C:\WINDOWS\$hf_mig$\KB951376\spmsg.dll
+ 2007-11-30 11:18:51 231,288 —-a-w C:\WINDOWS\$hf_mig$\KB951376\spuninst.exe
+ 2007-11-30 11:18:51 26,488 —-a-w C:\WINDOWS\$hf_mig$\KB951376\update\spcustom.dll
+ 2007-11-30 11:18:51 755,576 —-a-w C:\WINDOWS\$hf_mig$\KB951376\update\update.exe
+ 2007-11-30 11:18:51 382,840 —-a-w C:\WINDOWS\$hf_mig$\KB951376\update\updspapi.dll
+ 2008-05-07 04:55:40 1,288,192 —-a-w C:\WINDOWS\$hf_mig$\KB951698\SP2QFE\quartz.dll
+ 2008-05-07 05:12:40 1,288,192 —-a-w C:\WINDOWS\$hf_mig$\KB951698\SP3GDR\quartz.dll
+ 2008-05-07 05:04:15 1,288,192 —-a-w C:\WINDOWS\$hf_mig$\KB951698\SP3QFE\quartz.dll
+ 2007-11-30 11:18:51 17,272 —-a-w C:\WINDOWS\$hf_mig$\KB951698\spmsg.dll
+ 2007-11-30 11:18:51 231,288 —-a-w C:\WINDOWS\$hf_mig$\KB951698\spuninst.exe
+ 2007-11-30 11:18:51 26,488 —-a-w C:\WINDOWS\$hf_mig$\KB951698\update\spcustom.dll
+ 2007-11-30 12:39:22 755,576 —-a-w C:\WINDOWS\$hf_mig$\KB951698\update\update.exe
+ 2007-11-30 12:39:22 382,840 —-a-w C:\WINDOWS\$hf_mig$\KB951698\update\updspapi.dll
+ 2006-08-16 12:08:32 100,352 —-a-w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\6to4svc.dll
+ 2008-06-20 10:44:08 138,368 —-a-w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\afd.sys
+ 2008-06-20 17:36:11 147,968 —-a-w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\dnsapi.dll
+ 2008-06-20 17:36:11 245,248 —-a-w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\mswsock.dll
+ 2008-06-20 10:44:42 360,960 —-a-w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip.sys
+ 2008-06-20 09:32:39 225,920 —-a-w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip6.sys
+ 2008-06-20 11:40:08 138,496 —-a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\afd.sys
+ 2008-06-20 17:46:57 147,968 —-a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\dnsapi.dll
+ 2008-06-20 17:46:57 245,248 —-a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\mswsock.dll
+ 2008-06-20 11:51:12 361,600 —-a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip.sys
+ 2008-06-20 11:08:27 225,856 —-a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip6.sys
+ 2008-06-20 11:48:03 138,496 —-a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\afd.sys
+ 2008-06-20 17:43:05 147,968 —-a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\dnsapi.dll
+ 2008-06-20 17:43:05 245,248 —-a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\mswsock.dll
+ 2008-06-20 11:59:02 361,600 —-a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys
+ 2008-06-20 11:16:44 225,856 —-a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip6.sys
+ 2007-11-30 12:39:22 17,272 —-a-w C:\WINDOWS\$hf_mig$\KB951748\spmsg.dll
+ 2007-11-30 12:39:22 231,288 —-a-w C:\WINDOWS\$hf_mig$\KB951748\spuninst.exe
+ 2007-11-30 12:39:22 26,488 —-a-w C:\WINDOWS\$hf_mig$\KB951748\update\spcustom.dll
+ 2007-11-30 12:39:18 755,576 —-a-w C:\WINDOWS\$hf_mig$\KB951748\update\update.exe
+ 2007-11-30 12:39:19 382,840 —-a-w C:\WINDOWS\$hf_mig$\KB951748\update\updspapi.dll
+ 2002-08-28 17:32:34 2,816 -c—-w C:\WINDOWS\$NtServicePackUninstall$\drmkaud.sys
+ 2003-08-16 01:59:52 184,320 -c—-w C:\WINDOWS\$NtServicePackUninstall$\msh261.drv
+ 2002-08-28 19:41:32 286,720 -c—-w C:\WINDOWS\$NtServicePackUninstall$\msh263.drv
+ 2003-08-16 10:22:58 22,016 -c—-w C:\WINDOWS\$NtServicePackUninstall$\wdmaud.drv
+ 2003-08-16 01:55:30 132,096 -c—-w C:\WINDOWS\$NtServicePackUninstall$\winspool.drv
+ 2004-08-04 07:56:44 553,472 -c—-w C:\WINDOWS\$NtUninstallKB921503$\oleaut32.dll
+ 2005-10-12 23:12:26 213,216 -c—-w C:\WINDOWS\$NtUninstallKB921503$\spuninst\spuninst.exe
+ 2005-10-12 23:12:34 371,424 -c—-w C:\WINDOWS\$NtUninstallKB921503$\spuninst\updspapi.dll
+ 2006-11-08 05:06:13 86,528 -c—-w C:\WINDOWS\$NtUninstallKB929123$\directdb.dll
+ 2006-11-08 05:06:13 1,314,816 -c—-w C:\WINDOWS\$NtUninstallKB929123$\msoe.dll
+ 2006-01-19 19:29:19 213,216 -c—-w C:\WINDOWS\$NtUninstallKB929123$\spuninst\spuninst.exe
+ 2006-01-19 19:29:19 371,424 -c—-w C:\WINDOWS\$NtUninstallKB929123$\spuninst\updspapi.dll
+ 2006-11-08 05:06:13 510,976 -c—-w C:\WINDOWS\$NtUninstallKB929123$\wab32.dll
+ 2006-11-08 05:06:13 85,504 -c—-w C:\WINDOWS\$NtUninstallKB929123$\wabimp.dll
+ 2004-08-04 07:56:42 294,400 -c—-w C:\WINDOWS\$NtUninstallKB932823-v3$\msctf.dll
+ 2007-03-06 01:22:41 213,216 -c—-w C:\WINDOWS\$NtUninstallKB932823-v3$\spuninst\spuninst.exe
+ 2007-03-06 01:23:51 371,424 -c—-w C:\WINDOWS\$NtUninstallKB932823-v3$\spuninst\updspapi.dll
+ 2007-03-06 01:22:41 213,216 -c—-w C:\WINDOWS\$NtUninstallKB933360$\spuninst\spuninst.exe
+ 2007-03-06 01:23:51 371,424 -c—-w C:\WINDOWS\$NtUninstallKB933360$\spuninst\updspapi.dll
+ 2007-01-29 08:58:06 60,416 -c—-w C:\WINDOWS\$NtUninstallKB933360$\tzchange.exe
+ 2004-08-04 07:56:44 581,120 -c—-w C:\WINDOWS\$NtUninstallKB933729$\rpcrt4.dll
+ 2005-10-12 23:12:26 213,216 -c—-w C:\WINDOWS\$NtUninstallKB933729$\spuninst\spuninst.exe
+ 2005-10-12 23:12:33 371,424 -c—-w C:\WINDOWS\$NtUninstallKB933729$\spuninst\updspapi.dll
+ 2007-03-09 11:28:00 248,320 -c—-w C:\WINDOWS\$NtUninstallKB933729$\xpsp3res.dll
+ 2006-07-05 10:55:01 984,064 -c—-w C:\WINDOWS\$NtUninstallKB935839$\kernel32.dll
+ 2005-10-12 23:12:26 213,216 -c—-w C:\WINDOWS\$NtUninstallKB935839$\spuninst\spuninst.exe
+ 2005-10-12 23:12:34 371,424 -c—-w C:\WINDOWS\$NtUninstallKB935839$\spuninst\updspapi.dll
+ 2004-08-04 07:56:44 144,896 -c—-w C:\WINDOWS\$NtUninstallKB935840$\schannel.dll
+ 2006-01-19 19:29:19 213,216 -c—-w C:\WINDOWS\$NtUninstallKB935840$\spuninst\spuninst.exe
+ 2006-01-19 19:29:19 371,424 -c—-w C:\WINDOWS\$NtUninstallKB935840$\spuninst\updspapi.dll
+ 2006-09-13 05:01:56 1,084,416 -c—-w C:\WINDOWS\$NtUninstallKB936021$\msxml3.dll
+ 2005-10-12 23:12:26 213,216 -c—-w C:\WINDOWS\$NtUninstallKB936021$\spuninst\spuninst.exe
+ 2005-10-12 23:12:34 371,424 -c—-w C:\WINDOWS\$NtUninstallKB936021$\spuninst\updspapi.dll
+ 2006-01-19 19:29:19 213,216 -c—-w C:\WINDOWS\$NtUninstallKB936357$\spuninst\spuninst.exe
+ 2006-01-19 19:29:19 371,424 -c—-w C:\WINDOWS\$NtUninstallKB936357$\spuninst\updspapi.dll
+ 2004-08-04 05:58:32 209,408 -c—-w C:\WINDOWS\$NtUninstallKB936357$\update.sys
+ 2005-06-28 02:23:26 213,216 -c—-w C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe
+ 2005-06-28 02:23:54 371,424 -c—-w C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\updspapi.dll
+ 2006-10-18 13:47:20 10,834,432 -c—-w C:\WINDOWS\$NtUninstallKB936782_WMP11$\wmp.dll
+ 2004-08-04 07:56:49 1,032,192 -c—-w C:\WINDOWS\$NtUninstallKB938828$\explorer.exe
+ 2005-10-12 23:12:26 213,216 -c—-w C:\WINDOWS\$NtUninstallKB938828$\spuninst\spuninst.exe
+ 2005-10-12 23:12:34 371,424 -c—-w C:\WINDOWS\$NtUninstallKB938828$\spuninst\updspapi.dll
+ 2007-03-08 15:36:28 281,600 -c—-w C:\WINDOWS\$NtUninstallKB938829$\gdi32.dll
+ 2006-01-19 19:29:19 213,216 -c—-w C:\WINDOWS\$NtUninstallKB938829$\spuninst\spuninst.exe
+ 2006-01-19 19:29:19 371,424 -c—-w C:\WINDOWS\$NtUninstallKB938829$\spuninst\updspapi.dll
+ 2005-06-28 02:23:26 213,216 -c—-w C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe
+ 2005-06-28 02:23:54 371,424 -c—-w C:\WINDOWS\$NtUninstallKB939683$\spuninst\updspapi.dll
+ 2006-11-01 10:31:34 315,904 -c—-w C:\WINDOWS\$NtUninstallKB939683$\unregmp2.exe
+ 2006-11-08 05:06:13 679,424 -c—-w C:\WINDOWS\$NtUninstallKB941202$\inetcomm.dll
+ 2007-03-06 01:22:41 213,216 -c—-w C:\WINDOWS\$NtUninstallKB941202$\spuninst\spuninst.exe
+ 2007-03-06 01:23:51 371,424 -c—-w C:\WINDOWS\$NtUninstallKB941202$\spuninst\updspapi.dll
+ 2005-08-30 03:54:26 1,287,168 -c—-w C:\WINDOWS\$NtUninstallKB941568$\quartz.dll
+ 2007-03-06 01:22:41 213,216 -c—-w C:\WINDOWS\$NtUninstallKB941568$\spuninst\spuninst.exe
+ 2007-03-06 01:23:51 371,424 -c—-w C:\WINDOWS\$NtUninstallKB941568$\spuninst\updspapi.dll
+ 2007-10-27 08:39:36 213,216 -c—-w C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe
+ 2007-10-27 08:39:46 371,424 -c—-w C:\WINDOWS\$NtUninstallKB941569$\spuninst\updspapi.dll
+ 2006-10-18 13:47:18 222,208 -c—-w C:\WINDOWS\$NtUninstallKB941569$\wmasf.dll
+ 2007-03-06 01:22:41 213,216 -c—-w C:\WINDOWS\$NtUninstallKB941644$\spuninst\spuninst.exe
+ 2007-03-06 01:23:51 371,424 -c—-w C:\WINDOWS\$NtUninstallKB941644$\spuninst\updspapi.dll
+ 2006-04-20 11:51:50 359,808 -c—-w C:\WINDOWS\$NtUninstallKB941644$\tcpip.sys
+ 2006-04-20 11:51:50 359,808 -c—-w C:\WINDOWS\$NtUninstallKB941644$\tcpip.sys.000
+ 2007-03-06 01:22:41 213,216 -c—-w C:\WINDOWS\$NtUninstallKB941693$\spuninst\spuninst.exe
+ 2007-03-06 01:23:51 371,424 -c—-w C:\WINDOWS\$NtUninstallKB941693$\spuninst\updspapi.dll
+ 2007-03-08 13:47:48 1,843,584 -c—-w C:\WINDOWS\$NtUninstallKB941693$\win32k.sys
+ 2007-03-06 01:22:41 213,216 -c—-w C:\WINDOWS\$NtUninstallKB942763$\spuninst\spuninst.exe
+ 2007-03-06 01:23:51 371,424 -c—-w C:\WINDOWS\$NtUninstallKB942763$\spuninst\updspapi.dll
+ 2007-07-18 12:42:22 60,416 -c—-w C:\WINDOWS\$NtUninstallKB942763$\tzchange.exe
+ 2007-05-17 11:28:05 549,376 -c—-w C:\WINDOWS\$NtUninstallKB943055$\oleaut32.dll
+ 2007-03-06 01:22:41 213,216 -c—-w C:\WINDOWS\$NtUninstallKB943055$\spuninst\spuninst.exe
+ 2007-03-06 01:23:51 371,424 -c—-w C:\WINDOWS\$NtUninstallKB943055$\spuninst\updspapi.dll
+ 2006-12-19 21:52:18 8,453,632 -c—-w C:\WINDOWS\$NtUninstallKB943460$\shell32.dll
+ 2007-03-06 01:22:39 213,216 -c—-w C:\WINDOWS\$NtUninstallKB943460$\spuninst\spuninst.exe
+ 2007-03-06 01:23:47 371,424 -c—-w C:\WINDOWS\$NtUninstallKB943460$\spuninst\updspapi.dll
+ 2007-06-19 07:24:36 350,720 -c—-w C:\WINDOWS\$NtUninstallKB943460$\xpsp3res.dll
+ 2006-08-17 12:28:27 721,920 -c—-w C:\WINDOWS\$NtUninstallKB943485$\lsasrv.dll
+ 2007-03-06 01:22:41 213,216 -c—-w C:\WINDOWS\$NtUninstallKB943485$\spuninst\spuninst.exe
+ 2007-03-06 01:23:51 371,424 -c—-w C:\WINDOWS\$NtUninstallKB943485$\spuninst\updspapi.dll
+ 2007-02-16 12:50:10 12,400 -c—-w C:\WINDOWS\$NtUninstallKB944653$\secdrv.sys
+ 2007-03-06 01:22:41 213,216 -c—-w C:\WINDOWS\$NtUninstallKB944653$\spuninst\spuninst.exe
+ 2007-03-06 01:23:51 371,424 -c—-w C:\WINDOWS\$NtUninstallKB944653$\spuninst\updspapi.dll
+ 2006-06-26 17:37:10 148,480 -c—-w C:\WINDOWS\$NtUninstallKB945553$\dnsapi.dll
+ 2004-08-04 07:56:42 45,568 -c—-w C:\WINDOWS\$NtUninstallKB945553$\dnsrslvr.dll
+ 2007-03-06 01:22:41 213,216 -c—-w C:\WINDOWS\$NtUninstallKB945553$\spuninst\spuninst.exe
+ 2007-03-06 01:23:51 371,424 -c—-w C:\WINDOWS\$NtUninstallKB945553$\spuninst\updspapi.dll
+ 2004-08-04 06:00:56 181,248 -c—-w C:\WINDOWS\$NtUninstallKB946026$\mrxdav.sys
+ 2007-03-06 01:22:41 213,216 -c—-w C:\WINDOWS\$NtUninstallKB946026$\spuninst\spuninst.exe
+ 2007-03-06 01:23:51 371,424 -c—-w C:\WINDOWS\$NtUninstallKB946026$\spuninst\updspapi.dll
+ 2007-06-19 13:31:19 282,112 -c—-w C:\WINDOWS\$NtUninstallKB948590$\gdi32.dll
+ 2007-03-06 01:22:41 213,216 -c—-w C:\WINDOWS\$NtUninstallKB948590$\spuninst\spuninst.exe
+ 2007-03-06 01:23:51 371,424 -c—-w C:\WINDOWS\$NtUninstallKB948590$\spuninst\updspapi.dll
+ 2007-03-06 01:22:39 213,216 -c—-w C:\WINDOWS\$NtUninstallKB948881$\spuninst\spuninst.exe
+ 2007-03-06 01:23:47 371,424 -c—-w C:\WINDOWS\$NtUninstallKB948881$\spuninst\updspapi.dll
+ 2004-08-04 07:56:42 561,179 -c—-w C:\WINDOWS\$NtUninstallKB950749$\dao360.dll
+ 2004-08-04 07:56:43 512,029 -c—-w C:\WINDOWS\$NtUninstallKB950749$\msexch40.dll
+ 2004-08-04 07:56:43 319,517 -c—-w C:\WINDOWS\$NtUninstallKB950749$\msexcl40.dll
+ 2004-08-04 07:56:43 1,507,356 -c—-w C:\WINDOWS\$NtUninstallKB950749$\msjet40.dll
+ 2004-03-01 18:52:15 358,976 -c—-w C:\WINDOWS\$NtUninstallKB950749$\msjetol1.dll
+ 2004-03-01 18:52:15 358,976 -c—-w C:\WINDOWS\$NtUninstallKB950749$\msjetoledb40.dll
+ 2004-08-04 07:56:43 151,583 -c—-w C:\WINDOWS\$NtUninstallKB950749$\msjint40.dll
+ 2004-08-04 07:56:43 53,279 -c—-w C:\WINDOWS\$NtUninstallKB950749$\msjter40.dll
+ 2004-08-04 07:56:43 241,693 -c—-w C:\WINDOWS\$NtUninstallKB950749$\msjtes40.dll
+ 2004-08-04 07:56:43 213,023 -c—-w C:\WINDOWS\$NtUninstallKB950749$\msltus40.dll
+ 2004-08-04 07:56:43 348,189 -c—-w C:\WINDOWS\$NtUninstallKB950749$\mspbde40.dll
+ 2004-08-04 07:56:43 421,919 -c—-w C:\WINDOWS\$NtUninstallKB950749$\msrd2x40.dll
+ 2004-08-04 07:56:43 315,423 -c—-w C:\WINDOWS\$NtUninstallKB950749$\msrd3x40.dll
+ 2004-08-04 07:56:43 552,989 -c—-w C:\WINDOWS\$NtUninstallKB950749$\msrepl40.dll
+ 2004-08-04 07:56:43 258,077 -c—-w C:\WINDOWS\$NtUninstallKB950749$\mstext40.dll
+ 2004-08-04 07:56:44 831,519 -c—-w C:\WINDOWS\$NtUninstallKB950749$\mswdat10.dll
+ 2004-08-04 07:56:44 614,429 -c—-w C:\WINDOWS\$NtUninstallKB950749$\mswstr10.dll
+ 2004-08-04 07:56:44 348,189 -c—-w C:\WINDOWS\$NtUninstallKB950749$\msxbde40.dll
+ 2007-03-06 01:22:41 213,216 -c—-w C:\WINDOWS\$NtUninstallKB950749$\spuninst\spuninst.exe
+ 2007-03-06 01:23:51 371,424 -c—-w C:\WINDOWS\$NtUninstallKB950749$\spuninst\updspapi.dll
+ 2007-11-30 12:39:22 231,288 -c—-w C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe
+ 2007-11-30 12:39:22 382,840 -c—-w C:\WINDOWS\$NtUninstallKB950760$\spuninst\updspapi.dll
+ 2006-07-13 08:48:58 202,240 -c—-w C:\WINDOWS\$NtUninstallKB950762$\rmcast.sys
+ 2007-11-30 12:39:22 231,288 -c—-w C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe
+ 2007-11-30 12:39:22 382,840 -c—-w C:\WINDOWS\$NtUninstallKB950762$\spuninst\updspapi.dll
+ 2008-04-14 11:01:02 272,128 -c—-w C:\WINDOWS\$NtUninstallKB951376-v2$\bthport.sys
+ 2007-11-30 11:18:51 231,288 -c—-w C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe
+ 2007-11-30 11:18:51 382,840 -c—-w C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\updspapi.dll
+ 2004-08-04 06:10:37 274,304 -c—-w C:\WINDOWS\$NtUninstallKB951376$\bthport.sys
+ 2007-11-30 11:18:51 231,288 -c—-w C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe
+ 2007-11-30 11:18:51 382,840 -c—-w C:\WINDOWS\$NtUninstallKB951376$\spuninst\updspapi.dll
+ 2007-10-29 22:43:03 1,287,680 -c—-w C:\WINDOWS\$NtUninstallKB951698$\quartz.dll
+ 2007-11-30 11:18:51 231,288 -c—-w C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe
+ 2007-11-30 12:39:22 382,840 -c—-w C:\WINDOWS\$NtUninstallKB951698$\spuninst\updspapi.dll
+ 2003-10-25 11:58:58 2,206 -c–a-w C:\WINDOWS\$NtUninstallQ810565$\spuninst\spuninst.bat
- 2007-06-04 07:52:57 68,608 —-a-w C:\WINDOWS\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2008-04-11 08:48:23 69,120 —-a-w C:\WINDOWS\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2007-06-04 07:53:25 72,192 —-a-w C:\WINDOWS\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2008-04-11 08:48:33 72,192 —-a-w C:\WINDOWS\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2007-06-04 07:53:31 4,308,992 —-a-w C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2008-04-11 08:47:59 4,444,160 —-a-w C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
- 2007-06-04 07:53:40 482,304 —-a-w C:\WINDOWS\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2008-04-11 08:48:37 483,840 —-a-w C:\WINDOWS\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
- 2007-06-04 07:53:10 2,878,976 —-a-w C:\WINDOWS\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
+ 2008-04-11 08:48:12 3,036,160 —-a-w C:\WINDOWS\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
- 2007-06-04 07:52:51 258,048 —-a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2008-04-11 08:48:41 258,048 —-a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
- 2007-06-04 07:52:51 114,176 —-a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2008-04-11 08:48:41 113,664 —-a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2007-06-04 07:54:00 260,096 —-a-w C:\WINDOWS\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2008-04-11 08:48:34 261,120 —-a-w C:\WINDOWS\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
- 2007-06-04 07:53:02 5,029,888 —-a-w C:\WINDOWS\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
+ 2008-04-11 08:48:09 5,431,296 —-a-w C:\WINDOWS\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
- 2007-06-04 07:52:56 10,752 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2008-04-11 08:48:20 10,752 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
- 2007-06-04 07:52:51 503,808 —-a-w C:\WINDOWS\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2008-04-11 08:48:10 507,904 —-a-w C:\WINDOWS\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
- 2007-06-04 07:52:53 13,312 —-a-w C:\WINDOWS\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
+ 2008-04-11 08:48:22 13,312 —-a-w C:\WINDOWS\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
- 2007-06-04 07:53:19 8,192 —-a-w C:\WINDOWS\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2008-04-11 08:48:28 8,192 —-a-w C:\WINDOWS\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
- 2007-06-04 07:53:21 36,864 —-a-w C:\WINDOWS\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
+ 2008-04-11 08:48:29 77,824 —-a-w C:\WINDOWS\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
- 2007-06-04 07:53:24 5,632 —-a-w C:\WINDOWS\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
+ 2008-04-11 08:48:30 6,656 —-a-w C:\WINDOWS\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
- 2007-06-04 07:52:54 413,696 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2008-04-11 08:48:42 348,160 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
- 2007-06-04 07:52:54 36,864 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
+ 2008-04-11 08:48:43 36,864 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
- 2007-06-04 07:52:55 647,168 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
+ 2008-04-11 08:48:45 655,360 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
- 2007-06-04 07:52:55 73,728 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
+ 2008-04-11 08:48:45 77,824 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
- 2007-06-04 07:52:53 745,472 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2008-04-11 08:48:31 749,568 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
- 2007-06-04 07:54:06 110,592 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2008-04-11 08:48:28 110,592 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
- 2007-06-04 07:54:05 372,736 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
+ 2008-04-11 08:48:27 372,736 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2007-06-04 07:52:48 28,672 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
+ 2008-04-11 08:48:37 28,672 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
- 2007-06-04 07:54:03 667,648 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2008-04-11 08:48:26 671,744 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
- 2007-06-04 07:54:07 5,632 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2008-04-11 08:48:04 5,632 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2007-06-04 07:52:50 12,800 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2008-04-11 08:48:39 12,800 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
- 2007-06-04 07:52:49 32,768 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
+ 2008-04-11 08:48:25 32,768 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
- 2007-06-04 07:52:49 7,168 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
+ 2008-04-11 08:48:24 7,168 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
- 2007-06-04 07:53:50 110,592 —-a-w C:\WINDOWS\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2008-04-11 08:48:32 110,592 —-a-w C:\WINDOWS\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
- 2007-06-04 07:52:57 81,920 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
+ 2008-04-11 08:48:32 81,920 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2007-06-04 07:53:52 389,120 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2008-04-11 08:48:12 425,984 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
- 2007-06-04 07:53:42 716,800 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2008-04-11 08:48:14 741,376 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
- 2007-06-04 07:52:52 884,736 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2008-04-11 08:48:14 933,888 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
- 2007-06-04 07:53:16 5,050,368 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2008-04-11 08:48:47 5,070,848 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
- 2007-06-04 07:52:59 188,416 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2008-04-11 08:48:44 188,416 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
- 2007-06-04 07:52:58 397,312 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2008-04-11 08:48:21 401,408 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2007-06-04 07:53:00 81,920 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
+ 2008-04-11 08:48:39 81,920 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
- 2007-06-04 07:53:57 700,416 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2008-04-11 08:48:05 630,784 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
- 2007-06-04 07:53:44 368,640 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2008-04-11 08:48:40 372,736 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
- 2007-06-04 07:53:59 258,048 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2008-04-11 08:48:38 258,048 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
- 2007-06-04 07:53:46 299,008 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2008-04-11 08:48:36 299,008 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
- 2007-06-04 07:53:48 131,072 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2008-04-11 08:48:35 131,072 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
- 2007-06-04 07:52:56 258,048 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2008-04-11 08:48:06 258,048 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
- 2007-06-04 07:53:01 114,688 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2008-04-11 08:48:07 114,688 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2007-06-04 07:54:02 835,584 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2008-04-11 08:48:18 884,736 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
- 2007-06-04 07:53:03 86,016 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2008-04-11 08:48:19 90,112 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
- 2007-06-04 07:53:03 823,296 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2008-04-11 08:48:17 839,680 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
- 2007-06-04 07:53:04 5,316,608 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2008-04-11 08:48:22 5,013,504 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
- 2007-06-04 07:53:06 2,035,712 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
+ 2008-04-11 08:48:08 2,068,480 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
- 2007-06-04 07:53:55 3,018,752 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
+ 2008-04-11 08:48:16 3,076,096 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
+ 2008-04-11 13:17:17 27,136 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Accessibility\c6772fd12a581ad3be49e3f2a80b5622\Accessibility.ni.dll
+ 2008-04-11 13:17:22 884,736 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\a1d353edc300e3aff0784202f68a657b\AspNetMMCExt.ni.dll
+ 2008-04-11 13:17:56 237,568 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\c10ec9b4de2b366236ec83237dc31281\CustomMarshalers.ni.dll
+ 2008-04-11 13:17:55 15,360 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\dfsvc\837fe02bdcf637d5bf1e5ffb935ebb80\dfsvc.ni.exe
+ 2008-04-11 13:17:25 499,712 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\ICSharpCode.SharpZi#\5d5f7a08b3049c60722e1fcb4c38b98d\ICSharpCode.SharpZipLib.ni.dll
+ 2008-04-11 13:17:35 114,688 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Interop.WIA\48730a2929fb0a8f2cb8c01613b06fd7\Interop.WIA.ni.dll
+ 2008-04-11 13:17:57 876,544 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\9710a3c0d11dd264c3a6b88977699e9b\Microsoft.Build.Engine.ni.dll
+ 2008-04-11 13:17:58 81,920 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\e2858a45971fb30b0c0523dbb52c1d4e\Microsoft.Build.Framework.ni.dll
+ 2008-04-11 13:18:01 1,695,744 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\63d69ffdf3c640d2d104a4b74e8115f8\Microsoft.Build.Tasks.ni.dll
+ 2008-04-11 13:18:01 167,936 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\11cb5418c06e30100616fbf205588489\Microsoft.Build.Utilities.ni.dll
+ 2008-04-11 13:18:04 1,740,800 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\923bd55258380eae77353d36a5a1b08f\Microsoft.VisualBasic.ni.dll
+ 2008-04-11 11:11:29 11,722,752 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll
+ 2008-04-11 13:17:37 98,304 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PaintDotNet.Base\4bea2842ad862dacd8d41215cc21fe66\PaintDotNet.Base.ni.dll
+ 2008-04-11 13:17:47 1,462,272 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PaintDotNet.Core\23f4e27561e348ac5e46b66387eab598\PaintDotNet.Core.ni.dll
+ 2008-04-11 13:17:48 667,648 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PaintDotNet.Data\f0ab637a82b068195f3d98e17a8bcc03\PaintDotNet.Data.ni.dll
+ 2008-04-11 13:17:50 589,824 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PaintDotNet.Effects\b054020a6d376afd91a898151f8b1c9c\PaintDotNet.Effects.ni.dll
+ 2008-04-11 13:17:44 536,576 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PaintDotNet.Resourc#\79e338f18cbafcc66809d0853b2b18f9\PaintDotNet.Resources.ni.dll
+ 2008-04-11 13:17:43 23,040 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PaintDotNet.StylusR#\7e1e7c1817e84e2b7cb481497a35d3fb\PaintDotNet.StylusReader.ni.dll
+ 2008-04-11 13:17:43 364,544 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PaintDotNet.SystemL#\2735a79cc37e08f123fe5e2527596aa7\PaintDotNet.SystemLayer.ni.dll
+ 2008-04-11 13:17:54 2,039,808 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PaintDotNet\0c4c971d1e4050ac44780501a9d1da13\PaintDotNet.ni.exe
+ 2008-04-11 13:17:27 1,011,712 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\eee9b48577689e92db5a7b5c5de98d9b\System.Configuration.ni.dll
+ 2008-04-11 13:17:33 2,756,608 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\e59504af41afab5e04681af951d9b302\System.Data.SqlXml.ni.dll
+ 2008-04-11 11:12:39 7,049,216 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data\5f669e819da7010c1dca347a25597c42\System.Data.ni.dll
+ 2008-04-11 13:17:39 1,798,144 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Deployment\c7dea4895e1fa33d65e448c03de48d26\System.Deployment.ni.dll
+ 2008-04-11 11:13:10 10,969,088 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Design\c1e16b40e30a05c39be8aee46311841c\System.Design.ni.dll
+ 2008-04-11 13:18:07 1,224,704 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\914668b240550f529e54bb772c6fc881\System.DirectoryServices.ni.dll
+ 2008-04-11 13:18:08 512,000 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\f11bc82c09955cb8438d3885a99c297d\System.DirectoryServices.Protocols.ni.dll
+ 2008-04-11 11:13:21 229,376 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\b974f6c17d17a533adf6e7710c5a62fa\System.Drawing.Design.ni.dll
+ 2008-04-11 11:13:19 1,667,072 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll
+ 2008-04-11 13:18:09 659,456 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\646131eda5f21f4e6216733d49c22c56\System.EnterpriseServices.ni.dll
+ 2008-04-11 13:18:09 294,912 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\646131eda5f21f4e6216733d49c22c56\System.EnterpriseServices.Wrapper.dll
+ 2008-04-11 13:17:37 339,968 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\1f5cf8178029f5b959a9af75cb8cfedb\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2008-04-11 13:17:34 733,184 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Security\2b5994269cc5b996231c9b21afea9a91\System.Security.ni.dll
+ 2008-04-11 13:18:10 233,472 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\193ac978af569ad9ee45110b359961b9\System.ServiceProcess.ni.dll
+ 2008-04-11 13:18:11 679,936 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Transactions\12e0aa1030badf4524f897e3f57b037a\System.Transactions.ni.dll
+ 2008-04-11 13:18:31 2,342,912 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\37d87b3cab1c66ec4430ebb2abeaa570\System.Web.Mobile.ni.dll
+ 2008-04-11 13:18:32 237,568 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\b5b81faf46fc63c20d5339b36edd02fa\System.Web.RegularExpressions.ni.dll
+ 2008-04-11 13:18:35 1,986,560 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Services\38991368499e2109ea4099a0fe29c5a3\System.Web.Services.ni.dll
+ 2008-04-11 13:18:28 12,509,184 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\67cfb70213562afe2ca9b9066764af3a\System.Web.ni.dll
+ 2008-04-11 11:14:02 13,193,216 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll
+ 2008-04-11 11:14:29 5,771,264 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\c98cb65a79cfccb44ea727ebe4593ede\System.Xml.ni.dll
+ 2008-04-11 11:12:15 8,265,728 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll
+ 2008-04-11 13:17:55 29,184 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\WiaProxy32\7602c21af6a96880fe8fe83d3e17fb22\WiaProxy32.ni.exe
+ 2008-07-14 14:19:30 69,632 —-a-w C:\WINDOWS\Config\System.exe
- 1999-10-11 01:00:00 41,984 ——w C:\WINDOWS\Ctregrun.exe
+ 2006-10-06 06:17:34 53,248 ——w C:\WINDOWS\Ctregrun.exe
+ 2004-12-14 05:58:24 3,486,872 —-a-w C:\WINDOWS\Downloaded Program Files\MgAxCtrl.dll
+ 2007-02-28 06:21:04 131,472 —-a-w C:\WINDOWS\Downloaded Program Files\msgrchkr.dll
+ 2006-06-20 07:44:04 379,704 —-a-w C:\WINDOWS\Downloaded Program Files\MsnPUpld.dll
+ 2006-11-20 03:04:18 117,088 —-a-w C:\WINDOWS\Downloaded Program Files\PURen-sg.dll
+ 2006-06-20 07:44:02 117,560 —-a-w C:\WINDOWS\Downloaded Program Files\PURen-us.dll
+ 2008-06-13 13:10:50 272,128 ——w C:\WINDOWS\Driver Cache\i386\bthport.sys
+ 2005-10-20 12:02:28 163,328 —-a-w C:\WINDOWS\erdnt\Hiv-backup\ERDNT.EXE
+ 2006-11-29 14:09:33 1,874 -c–a-w C:\WINDOWS\eReg.dat
- 2004-08-04 07:56:49 1,032,192 —-a-w C:\WINDOWS\explorer.exe
+ 2007-06-13 10:23:07 1,033,216 —-a-w C:\WINDOWS\explorer.exe
+ 2000-08-31 00:00:00 89,504 —-a-w C:\WINDOWS\fdsv.exe
+ 2000-08-31 00:00:00 80,412 —-a-w C:\WINDOWS\grep.exe
+ 2003-08-16 08:57:46 2,589 -c—-w C:\WINDOWS\I386\RUNW32.BAT
- 2006-10-17 05:31:10 66,048 -c–a-w C:\WINDOWS\ie7\spuninst\ieResetIcons.exe
+ 2007-08-13 10:52:06 66,048 -c–a-w C:\WINDOWS\ie7\spuninst\ieResetIcons.exe
+ 2007-03-06 01:22:41 213,216 -c—-w C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe
+ 2007-03-06 01:23:51 371,424 -c—-w C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\updspapi.dll
+ 2006-12-22 02:49:12 765,952 -c—-w C:\WINDOWS\ie7updates\KB938127-IE7\vgx.dll
+ 2007-03-07 17:45:14 124,928 -c—-w C:\WINDOWS\ie7updates\KB939653-IE7\advpack.dll
+ 2006-10-17 04:57:50 214,528 -c—-w C:\WINDOWS\ie7updates\KB939653-IE7\dxtrans.dll
+ 2007-03-07 17:45:15 132,608 -c—-w C:\WINDOWS\ie7updates\KB939653-IE7\extmgr.dll
+ 2006-10-17 04:58:20 61,952 -c—-w C:\WINDOWS\ie7updates\KB939653-IE7\icardie.dll
+ 2007-03-07 08:28:17 56,832 -c—-w C:\WINDOWS\ie7updates\KB939653-IE7\ie4uinit.exe
+ 2007-03-07 17:45:15 153,088 -c—-w C:\WINDOWS\ie7updates\KB939653-IE7\ieakeng.dll
+ 2007-03-07 17:45:15 230,400 -c—-w C:\WINDOWS\ie7updates\KB939653-IE7\ieaksie.dll
+ 2007-02-21 08:00:53 161,792 -c—-w C:\WINDOWS\ie7updates\KB939653-IE7\ieakui.dll
+ 2007-04-03 04:36:20 2,453,952 -c—-w C:\WINDOWS\ie7updates\KB939653-IE7\ieapfltr.dat
+ 2007-04-03 14:46:37 383,488 -c—-w C:\WINDOWS\ie7updates\KB939653-IE7\ieapfltr.dll
+ 2007-03-07 17:45:15 384,000 -c—-w C:\WINDOWS\ie7updates\KB939653-IE7\iedkcs32.dll
+ 2007-03-07 17:45:16 6,054,400 -c—-w C:\WINDOWS\ie7updates\KB939653-IE7\ieframe.dll
+ 2007-03-07 17:45:16 44,544 -c—-w C:\WINDOWS\ie7updates\KB939653-IE7\iernonce.dll
+ 2007-03-07 17:45:16 266,752 -c—-w C:\WINDOWS\ie7updates\KB939653-IE7\iertutil.dll
+ 2007-02-27 08:20:47 13,824 -c—-w C:\WINDOWS\ie7updates\KB939653-IE7\ieudinit.exe
+ 2007-02-21 08:00:58 623,616 -c—-w C:\WINDOWS\ie7updates\KB939653-IE7\iexplore.exe
+ 2007-03-07 17:45:16 27,136 -c—-w C:\WINDOWS\ie7updates\KB939653-IE7\jsproxy.dll
+ 2007-03-07 17:45:16 458,752 -c—-w C:\WINDOWS\ie7updates\KB939653-IE7\msfeeds.dll
+ 2007-03-07 17:45:16 51,712 -c—-w C:\WINDOWS\ie7updates\KB939653-IE7\msfeedsbs.dll
+ 2007-03-07 17:45:17 3,581,952 -c—-w C:\WINDOWS\ie7updates\KB939653-IE7\mshtml.dll
+ 2007-03-07 17:45:17 477,696 -c—-w C:\WINDOWS\ie7updates\KB939653-IE7\mshtmled.dll
+ 2007-03-07 17:45:17 193,024 -c—-w C:\WINDOWS\ie7updates\KB939653-IE7\msrating.dll
+ 2007-03-07 17:45:17 670,720 -c—-w C:\WINDOWS\ie7updates\KB939653-IE7\mstime.dll
+ 2007-03-07 17:45:17 102,400 -c—-w C:\WINDOWS\ie7updates\KB939653-IE7\occache.dll
+ 2007-03-06 01:22:41 213,216 -c—-w C:\WINDOWS\ie7updates\KB939653-IE7\spuninst\spuninst.exe
+ 2007-03-06 01:23:51 371,424 -c—-w C:\WINDOWS\ie7updates\KB939653-IE7\spuninst\updspapi.dll
+ 2007-03-07 17:45:17 105,984 -c—-w C:\WINDOWS\ie7updates\KB939653-IE7\url.dll
+ 2007-03-07 17:45:18 1,150,464 -c—-w C:\WINDOWS\ie7updates\KB939653-IE7\urlmon.dll
+ 2007-03-07 17:45:18 232,960 -c—-w C:\WINDOWS\ie7updates\KB939653-IE7\webcheck.dll
+ 2007-03-07 17:45:18 822,784 -c—-w C:\WINDOWS\ie7updates\KB939653-IE7\wininet.dll
+ 2007-08-20 10:04:34 124,928 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\advpack.dll
+ 2007-08-20 10:04:34 214,528 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\dxtrans.dll
+ 2007-08-20 10:04:34 132,608 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\extmgr.dll
+ 2007-08-20 10:04:34 63,488 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\icardie.dll
+ 2007-08-17 10:20:54 63,488 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\ie4uinit.exe
+ 2007-08-20 10:04:34 153,088 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\ieakeng.dll
+ 2007-08-20 10:04:35 230,400 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\ieaksie.dll
+ 2007-08-17 07:34:25 161,792 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\ieakui.dll
+ 2007-08-20 10:04:35 383,488 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\ieapfltr.dll
+ 2007-08-20 10:04:35 384,512 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\iedkcs32.dll
+ 2007-08-20 10:04:37 6,058,496 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\ieframe.dll
+ 2007-08-20 10:04:38 44,544 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\iernonce.dll
+ 2007-08-20 10:04:38 267,776 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\iertutil.dll
+ 2007-08-17 10:20:54 13,824 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\ieudinit.exe
+ 2007-08-17 10:21:21 625,152 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\iexplore.exe
+ 2007-08-20 10:04:39 27,648 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\jsproxy.dll
+ 2007-08-20 10:04:39 459,264 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\msfeeds.dll
+ 2007-08-20 10:04:39 52,224 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\msfeedsbs.dll
+ 2007-08-20 10:04:41 3,584,512 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\mshtml.dll
+ 2007-08-20 10:04:41 477,696 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\mshtmled.dll
+ 2007-08-20 10:04:41 193,024 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\msrating.dll
+ 2007-08-20 10:04:42 671,232 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\mstime.dll
+ 2007-08-20 10:04:42 102,400 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\occache.dll
+ 2007-03-06 01:22:41 213,216 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe
+ 2007-03-06 01:23:51 371,424 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\updspapi.dll
+ 2007-08-20 10:04:42 105,984 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\url.dll
+ 2007-08-20 10:04:42 1,152,000 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\urlmon.dll
+ 2007-08-20 10:04:42 232,960 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\webcheck.dll
+ 2007-08-20 10:04:43 824,832 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\wininet.dll
+ 2007-10-10 23:55:51 124,928 -c—-w C:\WINDOWS\ie7updates\KB944533-IE7\advpack.dll
+ 2006-10-17 04:58:06 346,624 -c—-w C:\WINDOWS\ie7updates\KB944533-IE7\dxtmsft.dll
+ 2007-10-10 23:55:51 214,528 -c—-w C:\WINDOWS\ie7updates\KB944533-IE7\dxtrans.dll
+ 2007-10-10 23:55:51 132,608 -c—-w C:\WINDOWS\ie7updates\KB944533-IE7\extmgr.dll
+ 2007-10-10 23:55:51 63,488 -c—-w C:\WINDOWS\ie7updates\KB944533-IE7\icardie.dll
+ 2007-10-10 10:59:40 70,656 -c—-w C:\WINDOWS\ie7updates\KB944533-IE7\ie4uinit.exe
+ 2007-10-10 23:55:51 153,088 -c—-w C:\WINDOWS\ie7updates\KB944533-IE7\ieakeng.dll
+ 2007-10-10 23:55:51 230,400 -c—-w C:\WINDOWS\ie7updates\KB944533-IE7\ieaksie.dll
+ 2007-10-10 05:46:55 161,792 -c—-w C:\WINDOWS\ie7updates\KB944533-IE7\ieakui.dll
+ 2007-10-10 23:55:52 383,488 -c—-w C:\WINDOWS\ie7updates\KB944533-IE7\ieapfltr.dll
+ 2007-10-10 23:55:52 384,512 -c—-w C:\WINDOWS\ie7updates\KB944533-IE7\iedkcs32.dll
+ 2007-10-10 23:55:54 6,065,664 -c—-w C:\WINDOWS\ie7updates\KB944533-IE7\ieframe.dll
+ 2007-10-10 23:55:55 44,544 -c—-w C:\WINDOWS\ie7updates\KB944533-IE7\iernonce.dll
+ 2007-10-10 23:55:55 267,776 -c—-w C:\WINDOWS\ie7updates\KB944533-IE7\iertutil.dll
+ 2007-10-10 10:59:40 13,824 -c—-w C:\WINDOWS\ie7updates\KB944533-IE7\ieudinit.exe
+ 2007-10-10 10:59:52 625,152 -c—-w C:\WINDOWS\ie7updates\KB944533-IE7\iexplore.exe
+ 2007-10-10 23:55:56 27,648 -c—-w C:\WINDOWS\ie7updates\KB944533-IE7\jsproxy.dll
+ 2007-10-10 23:55:56 459,264 -c—-w C:\WINDOWS\ie7updates\KB944533-IE7\msfeeds.dll
+ 2007-10-10 23:55:56 52,224 -c—-w C:\WINDOWS\ie7updates\KB944533-IE7\msfeedsbs.dll
+ 2007-10-30 23:42:28 3,590,656 -c—-w C:\WINDOWS\ie7updates\KB944533-IE7\mshtml.dll
+ 2007-10-10 23:55:58 478,208 -c—-w C:\WINDOWS\ie7updates\KB944533-IE7\mshtmled.dll
+ 2007-10-10 23:55:58 193,024 -c—-w C:\WINDOWS\ie7updates\KB944533-IE7\msrating.dll
+ 2007-10-10 23:55:59 671,232 -c—-w C:\WINDOWS\ie7updates\KB944533-IE7\mstime.dll
+ 2007-10-10 23:55:59 102,400 -c—-w C:\WINDOWS\ie7updates\KB944533-IE7\occache.dll
+ 2006-10-17 04:58:08 44,544 -c—-w C:\WINDOWS\ie7updates\KB944533-IE7\pngfilt.dll
+ 2007-03-06 01:22:41 213,216 -c—-w C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe
+ 2007-03-06 01:23:51 371,424 -c—-w C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\updspapi.dll
+ 2007-10-10 23:55:59 105,984 -c—-w C:\WINDOWS\ie7updates\KB944533-IE7\url.dll
+ 2007-10-10 23:56:00 1,159,680 -c—-w C:\WINDOWS\ie7updates\KB944533-IE7\urlmon.dll
+ 2007-10-10 23:56:00 232,960 -c—-w C:\WINDOWS\ie7updates\KB944533-IE7\webcheck.dll
+ 2007-10-10 23:56:00 824,832 -c—-w C:\WINDOWS\ie7updates\KB944533-IE7\wininet.dll
+ 2007-12-07 02:21:45 124,928 -c—-w C:\WINDOWS\ie7updates\KB947864-IE7\advpack.dll
+ 2007-12-19 23:01:06 347,136 -c—-w C:\WINDOWS\ie7updates\KB947864-IE7\dxtmsft.dll
+ 2007-12-07 02:21:45 214,528 -c—-w C:\WINDOWS\ie7updates\KB947864-IE7\dxtrans.dll
+ 2007-12-07 02:21:45 133,120 -c—-w C:\WINDOWS\ie7updates\KB947864-IE7\extmgr.dll
+ 2007-12-07 02:21:45 63,488 -c—-w C:\WINDOWS\ie7updates\KB947864-IE7\icardie.dll
+ 2007-12-06 11:00:57 70,656 -c—-w C:\WINDOWS\ie7updates\KB947864-IE7\ie4uinit.exe
+ 2007-12-07 02:21:45 153,088 -c—-w C:\WINDOWS\ie7updates\KB947864-IE7\ieakeng.dll
+ 2007-12-07 02:21:45 230,400 -c—-w C:\WINDOWS\ie7updates\KB947864-IE7\ieaksie.dll
+ 2007-12-06 04:59:51 161,792 -c—-w C:\WINDOWS\ie7updates\KB947864-IE7\ieakui.dll
+ 2007-12-07 02:21:45 383,488 -c—-w C:\WINDOWS\ie7updates\KB947864-IE7\ieapfltr.dll
+ 2007-12-07 02:21:45 384,512 -c—-w C:\WINDOWS\ie7updates\KB947864-IE7\iedkcs32.dll
+ 2007-12-07 02:21:46 6,066,176 -c—-w C:\WINDOWS\ie7updates\KB947864-IE7\ieframe.dll
+ 2007-12-07 02:21:46 44,544 -c—-w C:\WINDOWS\ie7updates\KB947864-IE7\iernonce.dll
+ 2007-12-07 02:21:46 267,776 -c—-w C:\WINDOWS\ie7updates\KB947864-IE7\iertutil.dll
+ 2007-12-06 11:00:58 13,824 -c—-w C:\WINDOWS\ie7updates\KB947864-IE7\ieudinit.exe
+ 2007-12-06 11:01:25 625,664 -c—-w C:\WINDOWS\ie7updates\KB947864-IE7\iexplore.exe
+ 2007-12-07 02:21:47 27,648 -c—-w C:\WINDOWS\ie7updates\KB947864-IE7\jsproxy.dll
+ 2007-12-07 02:21:47 459,264 -c—-w C:\WINDOWS\ie7updates\KB947864-IE7\msfeeds.dll
+ 2007-12-07 02:21:47 52,224 -c—-w C:\WINDOWS\ie7updates\KB947864-IE7\msfeedsbs.dll
+ 2007-12-08 05:21:48 3,592,192 -c—-w C:\WINDOWS\ie7updates\KB947864-IE7\mshtml.dll
+ 2007-12-07 02:21:47 478,208 -c—-w C:\WINDOWS\ie7updates\KB947864-IE7\mshtmled.dll
+ 2007-12-07 02:21:48 193,024 -c—-w C:\WINDOWS\ie7updates\KB947864-IE7\msrating.dll
+ 2007-12-07 02:21:48 671,232 -c—-w C:\WINDOWS\ie7updates\KB947864-IE7\mstime.dll
+ 2007-12-07 02:21:48 102,912 -c—-w C:\WINDOWS\ie7updates\KB947864-IE7\occache.dll
+ 2008-01-11 05:53:32 44,544 -c—-w C:\WINDOWS\ie7updates\KB947864-IE7\pngfilt.dll
+ 2007-03-06 01:22:39 213,216 -c—-w C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe
+ 2007-03-06 01:23:51 371,424 -c—-w C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\updspapi.dll
+ 2007-12-07 02:21:48 105,984 -c—-w C:\WINDOWS\ie7updates\KB947864-IE7\url.dll
+ 2007-12-07 02:21:48 1,159,680 -c—-w C:\WINDOWS\ie7updates\KB947864-IE7\urlmon.dll
+ 2007-12-07 02:21:48 233,472 -c—-w C:\WINDOWS\ie7updates\KB947864-IE7\webcheck.dll
+ 2007-12-07 02:21:48 824,832 -c—-w C:\WINDOWS\ie7updates\KB947864-IE7\wininet.dll
+ 2008-03-01 13:06:20 124,928 -c—-w C:\WINDOWS\ie7updates\KB950759-IE7\advpack.dll
+ 2008-03-01 13:06:21 347,136 -c—-w C:\WINDOWS\ie7updates\KB950759-IE7\dxtmsft.dll
+ 2008-03-01 13:06:21 214,528 -c—-w C:\WINDOWS\ie7updates\KB950759-IE7\dxtrans.dll
+ 2008-03-01 13:06:21 133,120 -c—-w C:\WINDOWS\ie7updates\KB950759-IE7\extmgr.dll
+ 2008-03-01 13:06:21 63,488 -c—-w C:\WINDOWS\ie7updates\KB950759-IE7\icardie.dll
+ 2008-02-29 08:55:23 70,656 -c—-w C:\WINDOWS\ie7updates\KB950759-IE7\ie4uinit.exe
+ 2008-03-01 13:06:21 153,088 -c—-w C:\WINDOWS\ie7updates\KB950759-IE7\ieakeng.dll
+ 2008-03-01 13:06:21 230,400 -c—-w C:\WINDOWS\ie7updates\KB950759-IE7\ieaksie.dll
+ 2008-02-15 05:44:25 161,792 -c—-w C:\WINDOWS\ie7updates\KB950759-IE7\ieakui.dll
+ 2008-03-01 13:06:22 383,488 -c—-w C:\WINDOWS\ie7updates\KB950759-IE7\ieapfltr.dll
+ 2008-03-01 13:06:22 384,512 -c—-w C:\WINDOWS\ie7updates\KB950759-IE7\iedkcs32.dll
+ 2008-03-01 13:06:24 6,066,176 -c—-w C:\WINDOWS\ie7updates\KB950759-IE7\ieframe.dll
+ 2008-03-01 13:06:24 44,544 -c—-w C:\WINDOWS\ie7updates\KB950759-IE7\iernonce.dll
+ 2008-03-01 13:06:25 267,776 -c—-w C:\WINDOWS\ie7updates\KB950759-IE7\iertutil.dll
+ 2008-02-22 10:00:51 13,824 -c—-w C:\WINDOWS\ie7updates\KB950759-IE7\ieudinit.exe
+ 2008-02-29 08:55:46 625,664 -c—-w C:\WINDOWS\ie7updates\KB950759-IE7\iexplore.exe
+ 2008-03-01 13:06:25 27,648 -c—-w C:\WINDOWS\ie7updates\KB950759-IE7\jsproxy.dll
+ 2008-03-01 13:06:26 459,264 -c—-w C:\WINDOWS\ie7updates\KB950759-IE7\msfeeds.dll
+ 2008-03-01 13:06:26 52,224 -c—-w C:\WINDOWS\ie7updates\KB950759-IE7\msfeedsbs.dll
+ 2008-03-01 10:36:30 3,591,680 -c—-w C:\WINDOWS\ie7updates\KB950759-IE7\mshtml.dll
+ 2008-03-01 13:06:28 478,208 -c—-w C:\WINDOWS\ie7updates\KB950759-IE7\mshtmled.dll
+ 2008-03-01 13:06:28 193,024 -c—-w C:\WINDOWS\ie7updates\KB950759-IE7\msrating.dll
+ 2008-03-01 13:06:29 671,232 -c—-w C:\WINDOWS\ie7updates\KB950759-IE7\mstime.dll
+ 2008-03-01 13:06:29 102,912 -c—-w C:\WINDOWS\ie7updates\KB950759-IE7\occache.dll
+ 2008-03-01 13:06:29 44,544 -c—-w C:\WINDOWS\ie7updates\KB950759-IE7\pngfilt.dll
+ 2007-03-06 01:22:39 213,216 -c—-w C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe
+ 2007-03-06 01:23:51 371,424 -c—-w C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\updspapi.dll
+ 2008-03-01 13:06:29 105,984 -c—-w C:\WINDOWS\ie7updates\KB950759-IE7\url.dll
+ 2008-03-01 13:06:30 1,159,680 -c—-w C:\WINDOWS\ie7updates\KB950759-IE7\urlmon.dll
+ 2008-03-01 13:06:30 233,472 -c—-w C:\WINDOWS\ie7updates\KB950759-IE7\webcheck.dll
+ 2008-03-01 13:06:31 826,368 -c—-w C:\WINDOWS\ie7updates\KB950759-IE7\wininet.dll
- 2006-11-01 10:31:34 315,904 —-a-w C:\WINDOWS\inf\unregmp2.exe
+ 2007-06-26 14:10:26 317,440 —-a-w C:\WINDOWS\inf\unregmp2.exe
+ 2004-07-16 17:09:16 2,998 -c–a-r C:\WINDOWS\Installer\{2F7655DD-793E-40C6-B348-DE67C109F6FF}\ARPPRODUCTICON.exe
+ 2004-05-22 16:15:18 2,238 -c–a-r C:\WINDOWS\Installer\{A19486F6-6A77-4D68-96D3-DE8E3DF98E81}\LimeWireStartupShortcut.exe
+ 2007-10-28 16:43:05 32,768 —-a-r C:\WINDOWS\Installer\{C04E32E0-0416-434D-AFB9-6969D703A9EF}\icon.exe
- 2005-09-22 23:28:52 72,704 —-a-w C:\WINDOWS\Microsoft.NET\Framework\NETFXSBS10.exe
+ 2007-10-23 17:47:38 82,944 —-a-w C:\WINDOWS\Microsoft.NET\Framework\NETFXSBS10.exe
- 2005-09-22 23:28:52 7,680 —-a-w C:\WINDOWS\Microsoft.NET\Framework\sbscmp10.dll
+ 2007-10-23 17:47:38 16,896 —-a-w C:\WINDOWS\Microsoft.NET\Framework\sbscmp10.dll
- 2005-09-22 23:28:56 7,680 —-a-w C:\WINDOWS\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
+ 2007-10-23 17:47:40 16,896 —-a-w C:\WINDOWS\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
- 2005-09-22 23:28:58 7,680 —-a-w C:\WINDOWS\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
+ 2007-10-23 17:47:42 16,896 —-a-w C:\WINDOWS\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
- 2005-09-22 23:28:56 7,680 —-a-w C:\WINDOWS\Microsoft.NET\Framework\SharedReg12.dll
+ 2007-10-23 17:47:40 16,896 —-a-w C:\WINDOWS\Microsoft.NET\Framework\SharedReg12.dll
- 2005-09-22 23:28:52 86,528 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll
+ 2007-10-23 17:47:38 97,280 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll
+ 2003-02-20 18:19:32 253,952 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1348\aspnet_isapi.dll
+ 2003-02-20 18:09:08 77,824 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1348\CORPerfMonExt.dll
+ 2003-02-20 18:06:20 282,624 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1348\fusion.dll
+ 2003-02-20 18:06:32 311,296 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1348\mscorjit.dll
+ 2003-02-21 06:26:34 2,088,960 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1348\mscorlib.dll
+ 2003-02-20 18:09:18 77,824 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1348\mscorsn.dll
+ 2003-02-20 18:07:34 2,494,464 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1348\mscorsvr.dll
+ 2003-02-20 18:08:32 2,482,176 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1348\mscorwks.dll
+ 2003-02-21 03:42:22 348,160 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1348\msvcr71.dll
+ 2003-02-20 18:09:30 90,112 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1348\PerfCounter.dll
+ 2003-02-20 18:19:32 253,952 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3676\aspnet_isapi.dll
+ 2003-02-20 18:09:08 77,824 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3676\CORPerfMonExt.dll
+ 2003-02-20 18:06:20 282,624 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3676\fusion.dll
+ 2003-02-20 18:06:32 311,296 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3676\mscorjit.dll
+ 2003-02-21 06:26:34 2,088,960 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3676\mscorlib.dll
+ 2003-02-20 18:09:18 77,824 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3676\mscorsn.dll
+ 2003-02-20 18:07:34 2,494,464 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3676\mscorsvr.dll
+ 2003-02-20 18:08:32 2,482,176 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3676\mscorwks.dll
+ 2003-02-21 03:42:22 348,160 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3676\msvcr71.dll
+ 2003-02-20 18:09:30 90,112 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3676\PerfCounter.dll
+ 2003-02-20 18:19:32 253,952 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW4024\_aspnet_isapi.dll
+ 2003-02-20 18:09:08 77,824 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW4024\_CORPerfMonExt.dll
+ 2003-02-20 18:06:20 282,624 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW4024\_fusion.dll
+ 2003-02-20 18:06:32 311,296 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW4024\_mscorjit.dll
+ 2003-02-21 06:26:34 2,088,960 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW4024\_mscorlib.dll
+ 2003-02-20 18:09:18 77,824 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW4024\_mscorsn.dll
+ 2003-02-20 18:07:34 2,494,464 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW4024\_mscorsvr.dll
+ 2003-02-20 18:08:32 2,482,176 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW4024\_mscorwks.dll
+ 2003-02-21 03:42:22 348,160 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW4024\_msvcr71.dll
+ 2003-02-20 18:09:30 90,112 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW4024\_PerfCounter.dll
+ 2003-02-20 18:19:32 253,952 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW552\aspnet_isapi.dll
+ 2003-02-20 18:09:08 77,824 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW552\CORPerfMonExt.dll
+ 2003-02-20 18:06:20 282,624 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW552\fusion.dll
+ 2003-02-20 18:06:32 311,296 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW552\mscorjit.dll
+ 2003-02-21 06:26:34 2,088,960 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW552\mscorlib.dll
+ 2003-02-20 18:09:18 77,824 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW552\mscorsn.dll
+ 2003-02-20 18:07:34 2,494,464 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW552\mscorsvr.dll
+ 2003-02-20 18:08:32 2,482,176 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW552\mscorwks.dll
+ 2003-02-21 03:42:22 348,160 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW552\msvcr71.dll
+ 2003-02-20 18:09:30 90,112 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW552\PerfCounter.dll
+ 2003-02-20 18:19:32 253,952 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW580\_aspnet_isapi.dll
+ 2003-02-20 18:09:08 77,824 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW580\_CORPerfMonExt.dll
+ 2003-02-20 18:06:20 282,624 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW580\_fusion.dll
+ 2003-02-20 18:06:32 311,296 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW580\_mscorjit.dll
+ 2003-02-21 06:26:34 2,088,960 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW580\_mscorlib.dll
+ 2003-02-20 18:09:18 77,824 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW580\_mscorsn.dll
+ 2003-02-20 18:07:34 2,494,464 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW580\_mscorsvr.dll
+ 2003-02-20 18:08:32 2,482,176 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW580\_mscorwks.dll
+ 2003-02-21 03:42:22 348,160 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW580\_msvcr71.dll
+ 2003-02-20 18:09:30 90,112 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW580\_PerfCounter.dll
- 2005-09-22 23:28:36 18,944 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll
+ 2007-10-23 17:47:26 28,672 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll
- 2005-09-22 23:28:42 136,192 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll
+ 2007-10-23 17:47:30 145,408 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll
- 2005-09-22 23:28:44 4,608 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll
+ 2007-10-23 17:47:32 13,824 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll
- 2005-09-22 23:29:04 183,808 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll
+ 2007-10-23 17:47:48 193,016 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll
- 2005-09-22 23:28:28 208,896 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll
+ 2007-10-23 17:47:20 218,112 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll
- 2005-09-22 23:28:56 10,752 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
+ 2007-10-23 17:47:40 10,752 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
- 2005-09-22 23:28:58 138,240 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll
+ 2007-10-23 17:47:42 147,968 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll
- 2005-09-22 23:28:36 87,552 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\alink.dll
+ 2007-10-23 17:47:26 99,320 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\alink.dll
- 2005-09-22 23:28:58 55,488 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
+ 2007-10-23 17:47:42 59,392 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
- 2005-09-22 23:28:32 36,864 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
+ 2007-10-23 17:47:22 36,864 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
- 2006-04-13 22:08:30 10,752 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll
+ 2007-10-23 17:47:22 22,024 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll
- 2005-09-22 23:28:32 8,192 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll
+ 2007-10-23 17:47:22 17,928 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll
- 2005-09-22 23:28:32 23,552 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll
+ 2007-10-23 17:47:22 33,288 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll
- 2005-09-22 23:28:32 70,656 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll
+ 2007-10-23 17:47:22 84,480 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll
- 2005-09-22 23:28:32 13,824 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
+ 2007-10-23 17:47:22 24,576 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
- 2005-09-22 23:28:32 26,824 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
+ 2007-10-23 17:47:22 32,776 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
- 2005-09-22 23:28:32 106,496 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
+ 2007-10-23 17:47:22 106,496 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
- 2005-09-22 23:28:32 29,896 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
+ 2007-10-23 17:47:22 33,800 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
- 2006-09-12 09:10:46 23,040 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
+ 2007-10-23 17:47:22 33,280 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
- 2005-09-22 23:28:32 503,808 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll
+ 2007-10-23 17:47:22 507,904 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll
- 2005-09-22 23:28:56 106,496 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
+ 2007-10-23 17:47:40 106,496 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
- 2005-09-22 23:28:56 88,576 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll
+ 2007-10-23 17:47:40 101,896 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll
- 2005-09-22 23:28:42 76,984 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\csc.exe
+ 2007-10-23 17:47:30 80,376 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\csc.exe
- 2005-09-22 23:28:42 1,144,832 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cscomp.dll
+ 2007-10-23 17:47:30 1,162,744 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cscomp.dll
- 2005-09-22 23:28:42 13,312 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
+ 2007-10-23 17:47:30 13,312 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
- 2005-09-22 23:28:58 17,920 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Culture.dll
+ 2007-10-23 17:47:42 27,136 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Culture.dll
- 2005-09-22 23:28:56 68,608 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll
+ 2007-10-23 17:47:40 69,120 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll
- 2005-09-22 23:28:44 31,936 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
+ 2007-10-23 17:47:30 35,320 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
- 2005-09-22 23:28:38 52,736 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfdll.dll
+ 2007-10-23 17:47:28 66,552 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfdll.dll
- 2005-09-22 23:28:38 4,608 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
+ 2007-10-23 17:47:28 5,120 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
- 2005-09-22 23:29:12 547,840 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
+ 2007-10-23 17:47:54 572,936 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
- 2005-09-22 23:28:56 788,992 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll
+ 2007-10-23 17:47:40 798,224 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll
- 2005-09-22 23:28:50 9,216 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fusion.dll
+ 2007-10-23 17:47:36 18,936 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fusion.dll
- 2005-09-22 23:28:56 9,728 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
+ 2007-10-23 17:47:40 9,728 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
- 2005-09-22 23:28:56 8,192 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll
+ 2007-10-23 17:47:40 8,192 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll
- 2005-09-22 23:28:56 36,864 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEHost.dll
+ 2007-10-23 17:47:40 77,824 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEHost.dll
- 2005-09-22 23:28:56 5,632 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll
+ 2007-10-23 17:47:40 6,656 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll
- 2005-09-22 23:28:56 224,952 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ilasm.exe
+ 2007-10-23 17:47:40 230,904 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ilasm.exe
- 2005-09-22 23:28:56 28,672 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
+ 2007-10-23 17:47:40 28,672 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
- 2005-09-22 23:28:56 55,296 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll
+ 2007-10-23 17:47:40 65,032 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll
- 2005-09-22 23:28:56 72,192 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
+ 2007-10-23 17:47:40 72,192 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
- 2005-09-22 23:28:48 40,960 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\jsc.exe
+ 2007-10-23 17:47:34 40,960 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\jsc.exe
- 2005-09-22 23:28:48 413,696 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll
+ 2007-10-23 17:47:36 348,160 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll
- 2005-09-22 23:28:48 36,864 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
+ 2007-10-23 17:47:36 36,864 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
- 2005-09-22 23:28:48 647,168 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll
+ 2007-10-23 17:47:36 655,360 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll
- 2005-09-22 23:28:48 73,728 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll
+ 2007-10-23 17:47:36 77,824 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll
- 2005-09-22 23:28:48 745,472 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll
+ 2007-10-23 17:47:34 749,568 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll
- 2005-09-22 23:29:10 110,592 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2007-10-23 17:47:52 110,592 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll
- 2005-09-22 23:29:10 372,736 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll
+ 2007-10-23 17:47:52 372,736 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll
- 2005-09-22 23:29:08 667,648 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll
+ 2007-10-23 17:47:50 671,744 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll
- 2005-09-22 23:28:30 28,672 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
+ 2007-10-23 17:47:20 28,672 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
- 2005-09-22 23:29:10 5,632 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll
+ 2007-10-23 17:47:52 5,632 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll
- 2005-09-22 23:28:30 32,768 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
+ 2007-10-23 17:47:20 32,768 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
- 2005-09-22 23:28:30 12,800 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2007-10-23 17:47:20 12,800 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
- 2005-09-22 23:28:30 7,168 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll
+ 2007-10-23 17:47:20 7,168 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll
- 2005-09-22 23:28:32 87,552 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
+ 2007-10-23 17:47:22 97,792 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
- 2005-09-22 23:28:48 69,632 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
+ 2007-10-23 17:47:36 69,632 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
- 2005-09-22 23:28:56 800,768 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
+ 2007-10-23 17:47:40 822,280 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
- 2005-09-22 23:28:56 73,216 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll
+ 2007-10-23 17:47:40 83,456 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll
- 2005-09-22 23:28:56 288,768 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll
+ 2007-10-23 17:47:40 308,224 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll
- 2005-09-22 23:28:56 36,864 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorie.dll
+ 2007-10-23 17:47:40 47,104 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorie.dll
- 2005-09-22 23:28:56 326,144 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
+ 2007-10-23 17:47:40 348,672 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
- 2005-09-22 23:28:56 81,408 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorld.dll
+ 2007-10-23 17:47:40 94,208 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorld.dll
- 2005-09-22 23:28:56 4,308,992 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
+ 2007-10-23 17:47:40 4,444,160 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
- 2005-09-22 23:28:56 102,400 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll
+ 2007-10-23 17:47:40 114,688 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll
- 2005-09-22 23:29:00 330,752 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll
+ 2007-10-23 17:47:44 340,992 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll
- 2005-09-22 23:28:56 67,072 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
+ 2007-10-23 17:47:40 77,312 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
- 2005-09-22 23:28:50 9,216 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll
+ 2007-10-23 17:47:36 18,944 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll
- 2005-09-22 23:28:56 226,816 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll
+ 2007-10-23 17:47:40 242,688 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll
- 2005-09-22 23:28:56 66,240 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
+ 2007-10-23 17:47:40 70,144 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
- 2005-09-22 23:28:56 10,240 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscortim.dll
+ 2007-10-23 17:47:40 19,456 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscortim.dll
- 2005-09-22 23:28:50 5,615,616 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
+ 2007-10-23 17:47:36 5,814,784 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
- 2005-09-22 23:29:00 22,528 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MUI\0409\mscorsecr.dll
+ 2007-10-23 17:47:44 31,744 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MUI\0409\mscorsecr.dll
- 2005-09-22 23:28:56 96,440 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ngen.exe
+ 2007-10-23 17:47:40 101,880 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ngen.exe
- 2005-09-22 23:28:56 14,848 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\normalization.dll
+ 2007-10-23 17:47:40 24,584 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\normalization.dll
- 2005-09-22 23:28:56 78,336 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll
+ 2007-10-23 17:47:40 89,096 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll
- 2005-09-22 23:28:50 136,192 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\peverify.dll
+ 2007-10-23 17:47:36 144,896 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\peverify.dll
- 2005-09-22 23:28:56 53,248 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
+ 2007-10-23 17:47:40 53,248 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
- 2005-09-22 23:28:56 32,768 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
+ 2007-10-23 17:47:40 32,768 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
- 2005-09-22 23:29:02 59,072 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe
+ 2007-10-23 17:47:46 61,952 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe
- 2005-09-22 23:28:58 7,680 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
+ 2007-10-23 17:47:42 16,896 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
- 2005-09-22 23:28:56 107,520 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\shfusion.dll
+ 2007-10-23 17:47:40 119,296 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\shfusion.dll
- 2005-09-22 23:29:00 85,504 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll
+ 2007-10-23 17:47:44 95,232 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll
- 2005-09-22 23:28:56 377,344 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\SOS.dll
+ 2007-10-23 17:47:40 392,696 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\SOS.dll
- 2005-09-22 23:28:56 110,592 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
+ 2007-10-23 17:47:40 110,592 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
- 2005-09-22 23:28:58 389,120 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll
+ 2007-10-23 17:47:42 425,984 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll
- 2005-09-22 23:28:56 81,920 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
+ 2007-10-23 17:47:40 81,920 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
- 2005-09-22 23:28:56 2,878,976 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.dll
+ 2007-10-23 17:47:40 3,036,160 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.dll
- 2005-09-22 23:28:56 482,304 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll
+ 2007-10-23 17:47:40 483,840 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll
- 2005-09-22 23:28:56 716,800 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll
+ 2007-10-23 17:47:40 741,376 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll
- 2005-09-22 23:28:38 884,736 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll
+ 2007-10-23 17:47:28 933,888 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll
- 2005-09-22 23:28:56 5,050,368 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
+ 2007-10-23 17:47:40 5,070,848 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
- 2005-09-22 23:28:56 397,312 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll
+ 2007-10-23 17:47:40 401,408 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll
- 2005-09-22 23:28:56 188,416 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll
+ 2007-10-23 17:47:40 188,416 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll
- 2005-09-22 23:28:56 3,018,752 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.dll
+ 2007-10-23 17:47:40 3,076,096 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.dll
- 2005-09-22 23:28:56 81,920 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
+ 2007-10-23 17:47:40 81,920 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
- 2005-09-22 23:28:56 700,416 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
+ 2007-10-23 17:47:40 630,784 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
- 2005-09-22 23:28:56 258,048 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll
+ 2007-10-23 17:47:40 258,048 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll
- 2005-09-22 23:28:56 47,616 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll
+ 2007-10-23 17:47:40 57,392 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll
- 2005-09-22 23:28:56 114,176 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll
+ 2007-10-23 17:47:40 113,664 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll
- 2005-09-22 23:28:56 368,640 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Management.dll
+ 2007-10-23 17:47:40 372,736 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Management.dll
- 2005-09-22 23:28:56 258,048 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll
+ 2007-10-23 17:47:40 258,048 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll
- 2005-09-22 23:28:56 299,008 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll
+ 2007-10-23 17:47:40 299,008 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll
- 2005-09-22 23:28:56 131,072 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
+ 2007-10-23 17:47:40 131,072 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
- 2005-09-22 23:28:56 258,048 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
+ 2007-10-23 17:47:40 258,048 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
- 2005-09-22 23:28:56 114,688 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll
+ 2007-10-23 17:47:40 114,688 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll
- 2005-09-22 23:28:56 260,096 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll
+ 2007-10-23 17:47:40 261,120 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll
- 2006-09-12 09:11:12 5,029,888 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
+ 2007-10-23 17:47:40 5,431,296 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
- 2005-09-22 23:28:56 835,584 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll
+ 2007-10-23 17:47:40 884,736 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll
- 2005-09-22 23:28:56 86,016 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll
+ 2007-10-23 17:47:40 90,112 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll
- 2005-09-22 23:28:56 823,296 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll
+ 2007-10-23 17:47:40 839,680 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll
- 2005-09-22 23:28:56 5,316,608 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
+ 2007-10-23 17:47:40 5,013,504 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
- 2005-09-22 23:28:56 2,035,712 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.XML.dll
+ 2007-10-23 17:47:40 2,068,480 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.XML.dll
- 2005-09-22 23:28:56 71,680 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL
+ 2007-10-23 17:47:40 81,400 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL
- 2005-09-22 23:29:06 1,140,920 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\vbc.exe
+ 2007-10-23 17:47:48 1,172,472 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\vbc.exe
- 2005-09-22 23:28:30 1,306,624 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll
+ 2007-10-23 17:47:20 1,344,000 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll
- 2006-09-12 09:10:46 300,032 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\webengine.dll
+ 2007-10-23 17:47:22 434,688 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\webengine.dll
- 2005-09-22 23:28:56 28,160 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
+ 2007-10-23 17:47:40 37,896 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
- 2007-06-16 16:11:58 51,200 —-a-w C:\WINDOWS\NirCmd.exe
+ 2000-08-31 00:00:00 28,672 —-a-w C:\WINDOWS\NirCmd.exe
+ 2000-08-31 00:00:00 98,816 —-a-w C:\WINDOWS\sed.exe
+ 2004-08-04 08:07:21 1,788 -c—-w C:\WINDOWS\ServicePackFiles\i386\dcache.bin
+ 2004-08-04 06:07:57 2,944 -c—-w C:\WINDOWS\ServicePackFiles\i386\drmkaud.sys
+ 2004-08-04 07:56:57 188,416 -c—-w C:\WINDOWS\ServicePackFiles\i386\msh261.drv
+ 2004-08-04 07:56:57 294,912 -c—-w C:\WINDOWS\ServicePackFiles\i386\msh263.drv
+ 2004-08-04 07:56:57 23,552 -c—-w C:\WINDOWS\ServicePackFiles\i386\wdmaud.drv
+ 2004-08-04 07:56:57 146,432 -c—-w C:\WINDOWS\ServicePackFiles\i386\winspool.drv
- 2007-06-30 14:28:45 249,856 ——w C:\WINDOWS\Setup1.exe
+ 2008-04-04 05:58:49 249,856 ——w C:\WINDOWS\Setup1.exe
+ 2006-06-07 02:56:19 2,016 -c–a-w C:\WINDOWS\SoftwareDistribution\EventCache\{B806CE24-EC92-4DFA-9BD0-A82BA90D51BA}.bin
+ 2008-07-17 22:55:48 3,522 —-a-w C:\WINDOWS\SoftwareDistribution\EventCache\{E580FA61-B982-41A5-BFFB-B2E600325306}.bin
- 2007-06-30 14:28:44 73,216 —-a-w C:\WINDOWS\ST6UNST.EXE
+ 2008-04-04 05:58:44 73,216 —-a-w C:\WINDOWS\ST6UNST.EXE
+ 2000-08-31 00:00:00 161,792 —-a-w C:\WINDOWS\swreg.exe
+ 2000-08-31 00:00:00 136,704 —-a-w C:\WINDOWS\swsc.exe
+ 2000-08-31 00:00:00 212,480 —-a-w C:\WINDOWS\swxcacls.exe
+ 2003-08-16 02:10:50 2,000 -c–a-w C:\WINDOWS\system\KEYBOARD.DRV
+ 2003-08-16 01:51:44 73,376 -c–a-w C:\WINDOWS\system\MCIAVI.DRV
+ 2003-08-16 01:54:06 25,264 -c–a-w C:\WINDOWS\system\MCISEQ.DRV
+ 2003-08-16 01:53:46 28,160 -c–a-w C:\WINDOWS\system\MCIWAVE.DRV
+ 2003-08-16 01:57:54 2,032 -c–a-w C:\WINDOWS\system\MOUSE.DRV
+ 2003-08-16 02:01:42 1,744 -c–a-w C:\WINDOWS\system\SOUND.DRV
+ 2003-08-16 01:57:42 3,360 -c–a-w C:\WINDOWS\system\SYSTEM.DRV
+ 2003-08-16 02:06:32 4,048 -c–a-w C:\WINDOWS\system\TIMER.DRV
+ 2003-08-16 01:59:22 2,176 -c–a-w C:\WINDOWS\system\VGA.DRV
+ 2003-08-16 08:24:54 13,600 -c–a-w C:\WINDOWS\system\WFWNET.DRV
+ 2004-08-04 07:56:57 146,432 -c–a-w C:\WINDOWS\system\winspool.drv
- 2006-10-17 05:01:08 71,680 —-a-w C:\WINDOWS\system32\admparse.dll
+ 2007-08-13 10:39:20 71,680 —-a-w C:\WINDOWS\system32\admparse.dll
+ 2008-03-19 11:23:20 114,688 —-a-w C:\WINDOWS\system32\Adobe\Director\np32dsw.dll
+ 2008-03-19 11:36:22 202,168 —-a-w C:\WINDOWS\system32\Adobe\Director\swdir.dll
+ 2008-03-19 11:36:40 67,000 —-a-w C:\WINDOWS\system32\Adobe\Director\SwDnld.exe
+ 2008-03-19 11:24:02 487,424 —-a-w C:\WINDOWS\system32\Adobe\Shockwave 11\Control.dll
+ 2008-03-19 10:46:26 1,798,144 —-a-w C:\WINDOWS\system32\Adobe\Shockwave 11\dirapi.dll
+ 2008-03-19 11:24:04 9,216 —-a-w C:\WINDOWS\system32\Adobe\Shockwave 11\DynaPlayer.dll
+ 2008-03-19 10:36:14 754,688 —-a-w C:\WINDOWS\system32\Adobe\Shockwave 11\gi.dll
+ 2008-03-19 10:36:16 1,145,896 —-a-w C:\WINDOWS\system32\Adobe\Shockwave 11\gt.exe
+ 2008-03-19 10:36:14 52,288 —-a-w C:\WINDOWS\system32\Adobe\Shockwave 11\gtapi.dll
+ 2008-03-19 10:42:42 892,928 —-a-w C:\WINDOWS\system32\Adobe\Shockwave 11\iml32.dll
+ 2008-03-19 11:22:34 249,856 —-a-w C:\WINDOWS\system32\Adobe\Shockwave 11\Plugin.dll
+ 2008-03-19 11:25:36 442,368 —-a-w C:\WINDOWS\system32\Adobe\Shockwave 11\Proj.dll
+ 2008-03-19 11:36:06 439,736 —-a-w C:\WINDOWS\system32\Adobe\Shockwave 11\SwHelper_1100429.exe
+ 2008-03-19 11:26:20 110,592 —-a-w C:\WINDOWS\system32\Adobe\Shockwave 11\SwInit.exe
+ 2008-03-19 11:22:22 94,208 —-a-w C:\WINDOWS\system32\Adobe\Shockwave 11\SwMenu.dll
+ 2008-03-19 10:36:14 50,808 —-a-w C:\WINDOWS\system32\Adobe\Shockwave 11\SYMCCHECKER.DLL
+ 1999-06-25 02:55:30 149,504 —-a-w C:\WINDOWS\system32\Adobe\Shockwave 11\UNWISE.EXE
- 2007-03-07 17:45:14 124,928 —-a-w C:\WINDOWS\system32\advpack.dll
+ 2008-04-23 04:16:28 124,928 —-a-w C:\WINDOWS\system32\advpack.dll
- 2005-05-25 20:16:24 75,544 —-a-w C:\WINDOWS\system32\cdm.dll
+ 2007-07-30 11:19:20 92,504 —-a-w C:\WINDOWS\system32\cdm.dll
- 2006-01-19 04:25:07 98,304 —-a-w C:\WINDOWS\system32\CmdLineExt.dll
+ 2008-04-18 10:34:13 98,304 —-a-w C:\WINDOWS\system32\CmdLineExt.dll
- 2003-08-16 02:54:06 3,584 —-a-w C:\WINDOWS\system32\comcat.dll
+ 2001-08-22 22:00:00 3,584 —-a-w C:\WINDOWS\system32\comcat.dll
+ 2003-08-16 02:54:02 10,544 —-a-w C:\WINDOWS\system32\comm.drv
+ 2004-09-06 08:28:38 2,276 -c–a-w C:\WINDOWS\system32\config\systemprofile\Application Data\funkitron\SCRABBLE Blast Deluxe\1.0\ScrabbleBlast.dat
+ 2004-08-19 13:18:53 2,868 -c–a-w C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\MSN Messenger\175216089\Backgrounds\TFR18.dat
+ 2004-04-16 14:56:06 2,868 -c–a-w C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\MSN Messenger\175216089\Backgrounds\TFR48.dat
+ 2004-06-21 04:02:39 2,868 -c–a-w C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\MSN Messenger\175216089\Backgrounds\TFR9C.dat
+ 2004-04-16 07:50:04 2,868 -c–a-w C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\MSN Messenger\2253777092\Backgrounds\TFR32.dat
+ 2004-08-06 09:37:54 2,916 -c–a-w C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\MSN Messenger\300196396\Backgrounds\TFR4B.dat
+ 2004-06-21 03:56:54 2,916 -c–a-w C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\MSN Messenger\300196396\Backgrounds\TFR86.dat
+ 2004-04-11 14:37:31 2,753 -c–a-w C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\MSN Messenger\300196396\Backgrounds\TFR93.dat
+ 2004-08-18 12:29:45 1,709 -c–a-w C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\MSN Messenger\300196396\UserTile\TFR6.dat
+ 2004-04-17 12:52:14 1,644 -c–a-w C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\MSN Messenger\300196396\UserTile\TFRF.dat
+ 2004-08-06 12:14:05 2,932 -c–a-w C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\MSN Messenger\3126251225\Backgrounds\TFR21.dat
+ 2004-06-21 13:57:58 2,932 -c–a-w C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\MSN Messenger\3126251225\Backgrounds\TFR29.dat
+ 2004-10-22 11:51:20 2,932 -c–a-w C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\MSN Messenger\3126251225\Backgrounds\TFRAE.dat
+ 2004-04-16 08:07:35 2,932 -c–a-w C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\MSN Messenger\3477553239\Backgrounds\TFR1C9.dat
+ 2004-11-01 12:09:17 2,828 -c–a-w C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\MSN Messenger\3495686080\Backgrounds\TFRC0.dat
+ 2004-04-16 14:56:32 2,916 -c–a-w C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\MSN Messenger\445456574\Backgrounds\TFR5B.dat
+ 2004-08-02 11:12:14 2,812 -c–a-w C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\MSN Messenger\880552049\Backgrounds\TFRDD.dat
+ 2004-06-24 05:24:04 1,981 -c–a-w C:\WINDOWS\system32\config\systemprofile\Application Data\Real\RealOne Player\db\playlist.dat
+ 2004-07-02 01:42:14 2,594 -c–a-w C:\WINDOWS\system32\config\systemprofile\Application Data\Real\RealOne Player\db\treestate.dat
+ 2003-10-25 16:41:30 1,705 -c–a-w C:\WINDOWS\system32\config\systemprofile\Application Data\Sonic\Update Manager\sumdb.dat
+ 2004-03-18 05:40:33 1,861 -c–a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\HP\Digital Imaging\cache\DirectoryMap.dat
- 2006-10-17 05:03:56 17,408 —-a-w C:\WINDOWS\system32\corpol.dll
+ 2007-08-13 10:42:54 17,408 —-a-w C:\WINDOWS\system32\corpol.dll
+ 2004-08-04 08:07:21 1,788 —-a-w C:\WINDOWS\system32\dcache.bin
- 2005-09-22 23:28:38 83,456 —-a-w C:\WINDOWS\system32\dfshim.dll
+ 2007-10-23 17:47:28 96,760 —-a-w C:\WINDOWS\system32\dfshim.dll
- 2007-05-31 06:44:54 740,442 —-a-w C:\WINDOWS\system32\DivX.dll
+ 2007-05-10 22:37:16 740,442 —-a-w C:\WINDOWS\system32\divx.dll
+ 2008-03-31 21:25:52 161,096 —-a-w C:\WINDOWS\system32\DivXCodecVersionChecker.exe
- 2006-10-17 05:01:08 71,680 -c–a-w C:\WINDOWS\system32\dllcache\admparse.dll
+ 2007-08-13 10:39:20 71,680 -c–a-w C:\WINDOWS\system32\dllcache\admparse.dll
- 2007-03-07 17:45:14 124,928 -c–a-w C:\WINDOWS\system32\dllcache\advpack.dll
+ 2008-04-23 04:16:28 124,928 -c–a-w C:\WINDOWS\system32\dllcache\advpack.dll
- 2004-08-04 06:14:14 138,496 -c–a-w C:\WINDOWS\system32\dllcache\afd.sys
+ 2008-06-20 10:44:38 138,368 -c–a-w C:\WINDOWS\system32\dllcache\afd.sys
- 2003-08-12 22:34:00 369,152 -c–a-w C:\WINDOWS\system32\dllcache\ati2dvag.dll
+ 2006-05-03 16:51:00 258,048 -c–a-w C:\WINDOWS\system32\dllcache\ati2dvag.dll
+ 2001-08-17 05:12:12 2,944 -c–a-w C:\WINDOWS\system32\dllcache\brfilt.sys
- 2004-08-04 06:10:37 274,304 -c–a-w C:\WINDOWS\system32\dllcache\bthport.sys
+ 2008-06-13 13:10:50 272,128 -c–a-w C:\WINDOWS\system32\dllcache\bthport.sys
- 2005-05-25 20:16:24 75,544 -c–a-w C:\WINDOWS\system32\dllcache\cdm.dll
+ 2007-07-30 11:19:20 92,504 -c–a-w C:\WINDOWS\system32\dllcache\cdm.dll
- 2003-08-16 02:54:06 3,584 -c–a-w C:\WINDOWS\system32\dllcache\comcat.dll
+ 2001-08-22 22:00:00 3,584 -c–a-w C:\WINDOWS\system32\dllcache\comcat.dll
- 2006-10-17 05:03:56 17,408 -c–a-w C:\WINDOWS\system32\dllcache\corpol.dll
+ 2007-08-13 10:42:54 17,408 -c–a-w C:\WINDOWS\system32\dllcache\corpol.dll
- 2006-10-17 05:33:40 33,792 -c–a-w C:\WINDOWS\system32\dllcache\custsat.dll
+ 2007-08-13 10:54:10 33,792 -c–a-w C:\WINDOWS\system32\dllcache\custsat.dll
- 2004-08-04 07:56:42 561,179 -c–a-w C:\WINDOWS\system32\dllcache\dao360.dll
+ 2008-03-25 04:50:25 554,008 -c–a-w C:\WINDOWS\system32\dllcache\dao360.dll
- 2006-11-08 05:06:13 86,528 -c–a-w C:\WINDOWS\system32\dllcache\directdb.dll
+ 2007-05-16 15:12:00 86,528 -c–a-w C:\WINDOWS\system32\dllcache\directdb.dll
- 2006-06-26 17:37:10 148,480 -c–a-w C:\WINDOWS\system32\dllcache\dnsapi.dll
+ 2008-06-20 17:41:10 148,992 -c–a-w C:\WINDOWS\system32\dllcache\dnsapi.dll
- 2004-08-04 07:56:42 45,568 -c–a-w C:\WINDOWS\system32\dllcache\dnsrslvr.dll
+ 2008-02-20 05:32:43 45,568 -c–a-w C:\WINDOWS\system32\dllcache\dnsrslvr.dll
+ 2004-08-04 06:07:57 2,944 -c–a-w C:\WINDOWS\system32\dllcache\drmkaud.sys
- 2006-10-17 04:58:06 346,624 -c–a-w C:\WINDOWS\system32\dllcache\dxtmsft.dll
+ 2008-04-23 04:16:28 347,136 -c–a-w C:\WINDOWS\system32\dllcache\dxtmsft.dll
- 2006-10-17 04:57:50 214,528 -c–a-w C:\WINDOWS\system32\dllcache\dxtrans.dll
+ 2008-04-23 04:16:28 214,528 -c–a-w C:\WINDOWS\system32\dllcache\dxtrans.dll
- 2004-08-04 07:56:49 1,032,192 -c–a-w C:\WINDOWS\system32\dllcache\explorer.exe
+ 2007-06-13 10:23:07 1,033,216 -c–a-w C:\WINDOWS\system32\dllcache\explorer.exe
- 2007-03-07 17:45:15 132,608 -c–a-w C:\WINDOWS\system32\dllcache\extmgr.dll
+ 2008-04-23 04:16:28 133,120 -c–a-w C:\WINDOWS\system32\dllcache\extmgr.dll
- 2007-03-08 15:36:28 281,600 -c–a-w C:\WINDOWS\system32\dllcache\gdi32.dll
+ 2008-02-20 06:51:05 282,624 -c–a-w C:\WINDOWS\system32\dllcache\gdi32.dll
+ 2001-08-17 06:02:50 2,688 -c–a-w C:\WINDOWS\system32\dllcache\hidswvd.sys
- 2006-10-17 04:44:36 60,416 -c–a-w C:\WINDOWS\system32\dllcache\hmmapi.dll
+ 2007-08-13 10:18:02 60,416 -c–a-w C:\WINDOWS\system32\dllcache\hmmapi.dll
+ 2008-04-23 04:16:28 63,488 -c—-w C:\WINDOWS\system32\dllcache\icardie.dll
- 2007-03-07 08:28:17 56,832 -c–a-w C:\WINDOWS\system32\dllcache\ie4uinit.exe
+ 2008-04-22 07:39:58 70,656 -c–a-w C:\WINDOWS\system32\dllcache\ie4uinit.exe
- 2007-03-07 17:45:15 153,088 -c–a-w C:\WINDOWS\system32\dllcache\ieakeng.dll
+ 2008-04-23 04:16:28 153,088 -c–a-w C:\WINDOWS\system32\dllcache\ieakeng.dll
- 2007-03-07 17:45:15 230,400 -c–a-w C:\WINDOWS\system32\dllcache\ieaksie.dll
+ 2008-04-23 04:16:28 230,400 -c–a-w C:\WINDOWS\system32\dllcache\ieaksie.dll
- 2007-02-21 08:00:53 161,792 -c–a-w C:\WINDOWS\system32\dllcache\ieakui.dll
+ 2008-04-20 05:07:51 161,792 -c–a-w C:\WINDOWS\system32\dllcache\ieakui.dll
- 2007-04-03 04:36:20 2,453,952 -c—-w C:\WINDOWS\system32\dllcache\ieapfltr.dat
+ 2007-04-17 09:32:38 2,455,488 -c—-w C:\WINDOWS\system32\dllcache\ieapfltr.dat
- 2007-04-03 14:46:37 383,488 -c—-w C:\WINDOWS\system32\dllcache\ieapfltr.dll
+ 2008-04-23 04:16:28 383,488 -c—-w C:\WINDOWS\system32\dllcache\ieapfltr.dll
- 2007-03-07 17:45:15 384,000 -c–a-w C:\WINDOWS\system32\dllcache\iedkcs32.dll
+ 2008-04-23 04:16:28 384,512 -c–a-w C:\WINDOWS\system32\dllcache\iedkcs32.dll
- 2006-10-17 05:04:50 69,120 -c–a-w C:\WINDOWS\system32\dllcache\iedw.exe
+ 2007-08-13 10:44:02 69,120 -c–a-w C:\WINDOWS\system32\dllcache\iedw.exe
- 2006-10-17 05:06:00 78,336 -c–a-w C:\WINDOWS\system32\dllcache\ieencode.dll
+ 2007-08-13 10:45:18 78,336 -c–a-w C:\WINDOWS\system32\dllcache\ieencode.dll
- 2007-03-07 17:45:16 6,054,400 -c—-w C:\WINDOWS\system32\dllcache\ieframe.dll
+ 2008-04-23 04:16:28 6,066,176 -c—-w C:\WINDOWS\system32\dllcache\ieframe.dll
- 2006-10-17 05:33:40 191,488 -c–a-w C:\WINDOWS\system32\dllcache\iepeers.dll
+ 2007-08-13 10:54:10 191,488 -c–a-w C:\WINDOWS\system32\dllcache\iepeers.dll
- 2007-03-07 17:45:16 44,544 -c–a-w C:\WINDOWS\system32\dllcache\iernonce.dll
+ 2008-04-23 04:16:28 44,544 -c–a-w C:\WINDOWS\system32\dllcache\iernonce.dll
- 2007-03-07 17:45:16 266,752 -c—-w C:\WINDOWS\system32\dllcache\iertutil.dll
+ 2008-04-23 04:16:28 267,776 -c—-w C:\WINDOWS\system32\dllcache\iertutil.dll
- 2006-10-17 05:01:06 55,296 -c–a-w C:\WINDOWS\system32\dllcache\iesetup.dll
+ 2007-08-13 10:39:12 55,296 -c–a-w C:\WINDOWS\system32\dllcache\iesetup.dll
- 2007-02-27 08:20:47 13,824 -c—-w C:\WINDOWS\system32\dllcache\ieudinit.exe
+ 2008-04-22 07:39:58 13,824 -c—-w C:\WINDOWS\system32\dllcache\ieudinit.exe
- 2007-02-21 08:00:58 623,616 -c–a-w C:\WINDOWS\system32\dllcache\iexplore.exe
+ 2008-04-22 07:40:18 625,664 -c–a-w C:\WINDOWS\system32\dllcache\iexplore.exe
- 2006-10-17 04:57:58 36,352 -c–a-w C:\WINDOWS\system32\dllcache\imgutil.dll
+ 2007-08-13 10:36:06 36,352 -c–a-w C:\WINDOWS\system32\dllcache\imgutil.dll
- 2006-11-08 05:06:13 679,424 -c–a-w C:\WINDOWS\system32\dllcache\inetcomm.dll
+ 2007-08-21 06:15:44 683,520 -c–a-w C:\WINDOWS\system32\dllcache\inetcomm.dll
- 2006-10-17 05:00:54 92,672 -c–a-w C:\WINDOWS\system32\dllcache\inseng.dll
+ 2007-08-13 10:39:02 92,672 -c–a-w C:\WINDOWS\system32\dllcache\inseng.dll
- 2006-10-17 05:00:00 491,520 -c–a-w C:\WINDOWS\system32\dllcache\jscript.dll
+ 2007-08-13 10:38:04 491,520 -c–a-w C:\WINDOWS\system32\dllcache\jscript.dll
- 2007-03-07 17:45:16 27,136 -c–a-w C:\WINDOWS\system32\dllcache\jsproxy.dll
+ 2008-04-23 04:16:28 27,648 -c–a-w C:\WINDOWS\system32\dllcache\jsproxy.dll
- 2006-07-05 10:55:01 984,064 -c–a-w C:\WINDOWS\system32\dllcache\kernel32.dll
+ 2007-04-16 15:52:53 984,576 -c–a-w C:\WINDOWS\system32\dllcache\kernel32.dll
+ 2003-08-16 02:10:50 2,000 -c–a-w C:\WINDOWS\system32\dllcache\keyboard.drv
- 2006-10-17 05:05:10 40,960 -c–a-w C:\WINDOWS\system32\dllcache\licmgr10.dll
+ 2007-08-13 10:44:18 40,960 -c–a-w C:\WINDOWS\system32\dllcache\licmgr10.dll
- 2006-08-17 12:28:27 721,920 -c–a-w C:\WINDOWS\system32\dllcache\lsasrv.dll
+ 2007-11-07 09:26:56 721,920 -c–a-w C:\WINDOWS\system32\dllcache\lsasrv.dll
+ 2003-08-16 09:14:32 2,560 -c–a-w C:\WINDOWS\system32\dllcache\lz32.dll
+ 2003-08-16 01:51:44 73,376 -c–a-w C:\WINDOWS\system32\dllcache\mciavi.drv
+ 2003-08-16 01:54:06 25,264 -c–a-w C:\WINDOWS\system32\dllcache\mciseq.drv
+ 2003-08-16 01:53:46 28,160 -c–a-w C:\WINDOWS\system32\dllcache\mciwave.drv
+ 2003-08-16 01:57:54 2,032 -c–a-w C:\WINDOWS\system32\dllcache\mouse.drv
- 2004-08-04 06:00:56 181,248 -c–a-w C:\WINDOWS\system32\dllcache\mrxdav.sys
+ 2007-12-18 09:51:35 179,584 -c–a-w C:\WINDOWS\system32\dllcache\mrxdav.sys
- 2004-08-04 07:56:42 294,400 -c–a-w C:\WINDOWS\system32\dllcache\msctf.dll
+ 2008-02-26 11:59:50 294,912 -c–a-w C:\WINDOWS\system32\dllcache\msctf.dll
- 2004-08-04 07:56:43 512,029 -c–a-w C:\WINDOWS\system32\dllcache\msexch40.dll
+ 2008-03-25 04:50:28 518,944 -c–a-w C:\WINDOWS\system32\dllcache\msexch40.dll
- 2004-08-04 07:56:43 319,517 -c–a-w C:\WINDOWS\system32\dllcache\msexcl40.dll
+ 2008-03-25 04:50:30 326,432 -c–a-w C:\WINDOWS\system32\dllcache\msexcl40.dll
- 2007-03-07 17:45:16 458,752 -c—-w C:\WINDOWS\system32\dllcache\msfeeds.dll
+ 2008-04-23 04:16:28 459,264 -c—-w C:\WINDOWS\system32\dllcache\msfeeds.dll
- 2007-03-07 17:45:16 51,712 -c—-w C:\WINDOWS\system32\dllcache\msfeedsbs.dll
+ 2008-04-23 04:16:28 52,224 -c—-w C:\WINDOWS\system32\dllcache\msfeedsbs.dll
- 2006-10-17 04:56:10 45,568 -c–a-w C:\WINDOWS\system32\dllcache\mshta.exe
+ 2007-08-13 10:32:30 45,568 -c–a-w C:\WINDOWS\system32\dllcache\mshta.exe
- 2007-03-07 17:45:17 3,581,952 -c–a-w C:\WINDOWS\system32\dllcache\mshtml.dll
+ 2008-04-23 14:16:30 3,591,680 -c–a-w C:\WINDOWS\system32\dllcache\mshtml.dll
- 2007-03-07 17:45:17 477,696 -c–a-w C:\WINDOWS\system32\dllcache\mshtmled.dll
+ 2008-04-23 04:16:28 478,208 -c–a-w C:\WINDOWS\system32\dllcache\mshtmled.dll
- 2006-10-17 04:28:56 48,128 -c–a-w C:\WINDOWS\system32\dllcache\mshtmler.dll
+ 2007-08-13 10:01:12 48,128 -c–a-w C:\WINDOWS\system32\dllcache\mshtmler.dll
- 2004-08-04 07:56:43 1,507,356 -c–a-w C:\WINDOWS\system32\dllcache\msjet40.dll
+ 2008-03-25 04:50:34 1,516,568 -c–a-w C:\WINDOWS\system32\dllcache\msjet40.dll
- 2004-03-01 18:52:15 358,976 -c–a-w C:\WINDOWS\system32\dllcache\msjetol1.dll
+ 2008-03-25 04:50:40 355,112 -c–a-w C:\WINDOWS\system32\dllcache\msjetol1.dll
- 2004-08-04 07:56:43 151,583 -c–a-w C:\WINDOWS\system32\dllcache\msjint40.dll
+ 2008-03-27 08:12:54 151,583 -c–a-w C:\WINDOWS\system32\dllcache\msjint40.dll
- 2004-08-04 07:56:43 53,279 -c–a-w C:\WINDOWS\system32\dllcache\msjter40.dll
+ 2008-03-25 04:50:42 60,192 -c–a-w C:\WINDOWS\system32\dllcache\msjter40.dll
- 2004-08-04 07:56:43 241,693 -c–a-w C:\WINDOWS\system32\dllcache\msjtes40.dll
+ 2008-03-25 04:50:42 248,608 -c–a-w C:\WINDOWS\system32\dllcache\msjtes40.dll
- 2006-10-17 05:33:40 156,160 -c–a-w C:\WINDOWS\system32\dllcache\msls31.dll
+ 2007-08-13 10:54:10 156,160 -c–a-w C:\WINDOWS\system32\dllcache\msls31.dll
- 2004-08-04 07:56:43 213,023 -c–a-w C:\WINDOWS\system32\dllcache\msltus40.dll
+ 2008-03-25 04:50:44 219,936 -c–a-w C:\WINDOWS\system32\dllcache\msltus40.dll
+ 2001-08-17 06:00:04 2,944 -c–a-w C:\WINDOWS\system32\dllcache\msmpu401.sys
- 2006-11-08 05:06:13 1,314,816 -c–a-w C:\WINDOWS\system32\dllcache\msoe.dll
+ 2007-05-16 15:12:08 1,314,816 -c–a-w C:\WINDOWS\system32\dllcache\msoe.dll
- 2004-08-04 07:56:43 348,189 -c–a-w C:\WINDOWS\system32\dllcache\mspbde40.dll
+ 2008-03-25 04:50:45 355,104 -c–a-w C:\WINDOWS\system32\dllcache\mspbde40.dll
- 2007-03-07 17:45:17 193,024 -c–a-w C:\WINDOWS\system32\dllcache\msrating.dll
+ 2008-04-23 04:16:28 193,024 -c–a-w C:\WINDOWS\system32\dllcache\msrating.dll
- 2004-08-04 07:56:43 421,919 -c–a-w C:\WINDOWS\system32\dllcache\msrd2x40.dll
+ 2008-03-25 04:50:47 432,928 -c–a-w C:\WINDOWS\system32\dllcache\msrd2x40.dll
- 2004-08-04 07:56:43 315,423 -c–a-w C:\WINDOWS\system32\dllcache\msrd3x40.dll
+ 2008-03-25 04:50:49 322,336 -c–a-w C:\WINDOWS\system32\dllcache\msrd3x40.dll
- 2004-08-04 07:56:43 552,989 -c–a-w C:\WINDOWS\system32\dllcache\msrepl40.dll
+ 2008-03-25 04:50:52 559,904 -c–a-w C:\WINDOWS\system32\dllcache\msrepl40.dll
- 2004-08-04 07:56:43 258,077 -c–a-w C:\WINDOWS\system32\dllcache\mstext40.dll
+ 2008-03-25 04:50:55 264,992 -c–a-w C:\WINDOWS\system32\dllcache\mstext40.dll
- 2007-03-07 17:45:17 670,720 -c–a-w C:\WINDOWS\system32\dllcache\mstime.dll
+ 2008-04-23 04:16:28 671,232 -c–a-w C:\WINDOWS\system32\dllcache\mstime.dll
- 2004-08-04 07:56:44 831,519 -c–a-w C:\WINDOWS\system32\dllcache\mswdat10.dll
+ 2008-03-25 04:50:57 838,432 -c–a-w C:\WINDOWS\system32\dllcache\mswdat10.dll
- 2004-08-04 07:56:44 245,248 -c–a-w C:\WINDOWS\system32\dllcache\mswsock.dll
+ 2008-06-20 17:41:10 245,248 -c–a-w C:\WINDOWS\system32\dllcache\mswsock.dll
- 2004-08-04 07:56:44 614,429 -c–a-w C:\WINDOWS\system32\dllcache\mswstr10.dll
+ 2008-03-25 04:50:58 621,344 -c–a-w C:\WINDOWS\system32\dllcache\mswstr10.dll
- 2004-08-04 07:56:44 348,189 -c–a-w C:\WINDOWS\system32\dllcache\msxbde40.dll
+ 2008-03-25 04:50:58 355,104 -c–a-w C:\WINDOWS\system32\dllcache\msxbde40.dll
- 2006-09-13 05:01:56 1,084,416 -c–a-w C:\WINDOWS\system32\dllcache\msxml3.dll
+ 2007-06-26 06:08:16 1,104,896 -c–a-w C:\WINDOWS\system32\dllcache\msxml3.dll
+ 2003-08-16 02:06:50 2,944 -c–a-w C:\WINDOWS\system32\dllcache\null.sys
- 2007-03-07 17:45:17 102,400 -c–a-w C:\WINDOWS\system32\dllcache\occache.dll
+ 2008-04-23 04:16:28 102,912 -c–a-w C:\WINDOWS\system32\dllcache\occache.dll
- 2004-08-04 07:56:44 553,472 -c–a-w C:\WINDOWS\system32\dllcache\oleaut32.dll
+ 2007-12-04 18:38:13 550,912 -c–a-w C:\WINDOWS\system32\dllcache\oleaut32.dll
- 2006-10-17 04:58:08 44,544 -c–a-w C:\WINDOWS\system32\dllcache\pngfilt.dll
+ 2008-04-23 04:16:28 44,544 -c–a-w C:\WINDOWS\system32\dllcache\pngfilt.dll
- 2005-08-30 03:54:26 1,287,168 -c–a-w C:\WINDOWS\system32\dllcache\quartz.dll
+ 2008-05-07 05:18:48 1,287,680 -c–a-w C:\WINDOWS\system32\dllcache\quartz.dll
- 2006-07-13 08:48:58 202,240 -c–a-w C:\WINDOWS\system32\dllcache\rmcast.sys
+ 2008-05-08 12:28:49 202,752 -c–a-w C:\WINDOWS\system32\dllcache\rmcast.sys
- 2004-08-04 07:56:44 581,120 -c–a-w C:\WINDOWS\system32\dllcache\rpcrt4.dll
+ 2007-07-09 13:16:16 582,656 -c–a-w C:\WINDOWS\system32\dllcache\rpcrt4.dll
- 2004-08-04 07:56:44 144,896 -c–a-w C:\WINDOWS\system32\dllcache\schannel.dll
+ 2007-04-25 14:21:15 144,896 -c–a-w C:\WINDOWS\system32\dllcache\schannel.dll
- 2006-12-19 21:52:18 8,453,632 -c–a-w C:\WINDOWS\system32\dllcache\shell32.dll
+ 2007-10-26 03:34:01 8,460,288 -c–a-w C:\WINDOWS\system32\dllcache\shell32.dll
+ 2003-08-16 02:01:42 1,744 -c–a-w C:\WINDOWS\system32\dllcache\sound.drv
+ 2003-08-16 01:57:42 3,360 -c–a-w C:\WINDOWS\system32\dllcache\system.drv
- 2006-04-20 11:51:50 359,808 -c–a-w C:\WINDOWS\system32\dllcache\tcpip.sys
+ 2008-06-20 10:45:13 360,320 -c–a-w C:\WINDOWS\system32\dllcache\tcpip.sys
- 2006-08-16 09:37:30 225,664 -c–a-w C:\WINDOWS\system32\dllcache\tcpip6.sys
+ 2008-06-20 09:52:06 225,920 -c–a-w C:\WINDOWS\system32\dllcache\tcpip6.sys
+ 2003-08-16 02:06:32 4,048 -c–a-w C:\WINDOWS\system32\dllcache\timer.drv
- 2006-11-01 10:31:34 315,904 -c–a-w C:\WINDOWS\system32\dllcache\unregmp2.exe
+ 2007-06-26 14:10:26 317,440 -c–a-w C:\WINDOWS\system32\dllcache\unregmp2.exe
- 2004-08-04 05:58:32 209,408 -c–a-w C:\WINDOWS\system32\dllcache\update.sys
+ 2007-04-23 10:32:54 364,160 -c–a-w C:\WINDOWS\system32\dllcache\update.sys
- 2007-03-07 17:45:17 105,984 -c–a-w C:\WINDOWS\system32\dllcache\url.dll
+ 2008-04-23 04:16:28 105,984 -c–a-w C:\WINDOWS\system32\dllcache\url.dll
- 2007-03-07 17:45:18 1,150,464 -c–a-w C:\WINDOWS\system32\dllcache\urlmon.dll
+ 2008-04-23 04:16:29 1,159,680 -c–a-w C:\WINDOWS\system32\dllcache\urlmon.dll
- 2006-10-17 05:33:40 413,696 -c–a-w C:\WINDOWS\system32\dllcache\vbscript.dll
+ 2007-08-13 10:54:10 413,696 -c–a-w C:\WINDOWS\system32\dllcache\vbscript.dll
+ 2003-08-16 01:59:22 2,176 -c–a-w C:\WINDOWS\system32\dllcache\vga.drv
- 2006-12-22 02:49:12 765,952 -c–a-w C:\WINDOWS\system32\dllcache\vgx.dll
+ 2007-07-12 23:31:54 765,952 -c–a-w C:\WINDOWS\system32\dllcache\vgx.dll
- 2006-11-08 05:06:13 510,976 -c–a-w C:\WINDOWS\system32\dllcache\wab32.dll
+ 2007-05-16 15:12:12 510,976 -c–a-w C:\WINDOWS\system32\dllcache\wab32.dll
- 2006-11-08 05:06:13 85,504 -c–a-w C:\WINDOWS\system32\dllcache\wabimp.dll
+ 2007-05-16 15:12:15 85,504 -c–a-w C:\WINDOWS\system32\dllcache\wabimp.dll
+ 2004-08-04 07:56:57 23,552 -c–a-w C:\WINDOWS\system32\dllcache\wdmaud.drv
- 2007-03-07 17:45:18 232,960 -c–a-w C:\WINDOWS\system32\dllcache\webcheck.dll
+ 2008-04-23 04:16:29 233,472 -c–a-w C:\WINDOWS\system32\dllcache\webcheck.dll
+ 2003-08-16 08:24:54 13,600 -c–a-w C:\WINDOWS\system32\dllcache\wfwnet.drv
- 2007-03-08 13:47:48 1,843,584 -c–a-w C:\WINDOWS\system32\dllcache\win32k.sys
+ 2008-03-19 09:47:00 1,845,248 -c–a-w C:\WINDOWS\system32\dllcache\win32k.sys
- 2007-03-07 17:45:18 822,784 -c–a-w C:\WINDOWS\system32\dllcache\wininet.dll
+ 2008-04-23 04:16:29 826,368 -c–a-w C:\WINDOWS\system32\dllcache\wininet.dll
+ 2003-08-16 01:55:28 2,864 -c–a-w C:\WINDOWS\system32\dllcache\winsock.dll
+ 2004-08-04 07:56:57 146,432 -c–a-w C:\WINDOWS\system32\dllcache\winspool.drv
+ 2003-08-16 01:55:28 2,112 -c–a-w C:\WINDOWS\system32\dllcache\winspool.exe
- 2006-10-18 13:47:18 222,208 -c–a-w C:\WINDOWS\system32\dllcache\WMASF.dll
+ 2007-10-27 09:40:30 222,720 -c–a-w C:\WINDOWS\system32\dllcache\wmasf.dll
- 2006-10-18 13:47:20 10,834,432 -c–a-w C:\WINDOWS\system32\dllcache\wmp.dll
+ 2007-06-11 15:51:12 10,834,944 -c–a-w C:\WINDOWS\system32\dllcache\wmp.dll
+ 2003-08-16 02:40:14 2,736 -c–a-w C:\WINDOWS\system32\dllcache\wowdeb.exe
- 2005-05-25 20:16:30 465,176 -c–a-w C:\WINDOWS\system32\dllcache\wuapi.dll
+ 2007-07-30 11:19:36 549,720 -c–a-w C:\WINDOWS\system32\dllcache\wuapi.dll
- 2005-05-25 20:16:30 124,184 -c–a-w C:\WINDOWS\system32\dllcache\wuauclt.exe
+ 2007-07-30 11:19:16 53,080 -c–a-w C:\WINDOWS\system32\dllcache\wuauclt.exe
- 2005-05-25 20:16:30 1,343,768 -c–a-w C:\WINDOWS\system32\dllcache\wuaueng.dll
+ 2007-07-30 11:19:42 1,712,984 -c–a-w C:\WINDOWS\system32\dllcache\wuaueng.dll
- 2005-05-25 20:16:30 127,256 -c–a-w C:\WINDOWS\system32\dllcache\wucltui.dll
+ 2007-07-30 11:19:32 325,976 -c–a-w C:\WINDOWS\system32\dllcache\wucltui.dll
- 2005-05-25 20:16:30 41,240 -c–a-w C:\WINDOWS\system32\dllcache\wups.dll
+ 2007-07-30 11:18:40 33,624 -c–a-w C:\WINDOWS\system32\dllcache\wups.dll
- 2005-05-25 20:16:30 173,536 -c–a-w C:\WINDOWS\system32\dllcache\wuweb.dll
+ 2007-07-30 11:19:28 203,096 -c–a-w C:\WINDOWS\system32\dllcache\wuweb.dll
- 2006-06-26 17:37:10 148,480 —-a-w C:\WINDOWS\system32\dnsapi.dll
+ 2008-06-20 17:41:10 148,992 —-a-w C:\WINDOWS\system32\dnsapi.dll
- 2004-08-04 07:56:42 45,568 —-a-w C:\WINDOWS\system32\dnsrslvr.dll
+ 2008-02-20 05:32:43 45,568 —-a-w C:\WINDOWS\system32\dnsrslvr.dll
- 2007-04-23 00:02:34 73,728 —-a-w C:\WINDOWS\system32\dpl100.dll
+ 2007-05-02 12:02:08 73,728 —-a-w C:\WINDOWS\system32\dpl100.dll
- 2007-04-23 00:02:31 294,912 —-a-w C:\WINDOWS\system32\dpu10.dll
+ 2008-03-21 20:28:50 294,912 —-a-w C:\WINDOWS\system32\dpu10.dll
- 2007-04-23 00:02:31 294,912 —-a-w C:\WINDOWS\system32\dpu11.dll
+ 2008-03-21 20:28:50 294,912 —-a-w C:\WINDOWS\system32\dpu11.dll
- 2007-04-23 00:02:33 53,248 —-a-w C:\WINDOWS\system32\dpuGUI10.dll
+ 2008-03-21 20:28:52 53,248 —-a-w C:\WINDOWS\system32\dpuGUI10.dll
- 2007-04-23 00:02:31 593,920 —-a-w C:\WINDOWS\system32\dpuGUI11.dll
+ 2008-03-21 20:28:50 593,920 —-a-w C:\WINDOWS\system32\dpuGUI11.dll
- 2007-04-23 00:02:31 344,064 —-a-w C:\WINDOWS\system32\dpus11.dll
+ 2008-03-21 20:28:50 344,064 —-a-w C:\WINDOWS\system32\dpus11.dll
- 2007-04-23 00:02:31 57,344 —-a-w C:\WINDOWS\system32\dpv11.dll
+ 2008-03-21 20:28:50 57,344 —-a-w C:\WINDOWS\system32\dpv11.dll
- 1999-09-10 04:06:00 25,244 —-a-w C:\WINDOWS\system32\drivers\ASPI32.SYS
+ 2005-11-21 05:48:20 16,512 —-a-w C:\WINDOWS\system32\drivers\ASPI32.SYS
+ 2007-01-26 01:19:00 2,432 ——w C:\WINDOWS\system32\drivers\cdr4_xp.sys
+ 2007-01-26 01:19:00 2,560 ——w C:\WINDOWS\system32\drivers\cdralw2k.sys
+ 2004-08-04 06:07:57 2,944 —-a-w C:\WINDOWS\system32\drivers\drmkaud.sys
+ 2006-03-13 10:35:12 55,216 —-a-r C:\WINDOWS\system32\drivers\k750bus.sys
+ 2006-03-13 10:35:14 6,144 —-a-r C:\WINDOWS\system32\drivers\k750cm.sys
+ 2006-03-13 10:35:14 6,144 —-a-r C:\WINDOWS\system32\drivers\k750cmnt.sys
+ 2006-03-13 10:35:18 6,576 —-a-r C:\WINDOWS\system32\drivers\k750mdfl.sys
+ 2006-03-13 10:35:20 89,872 —-a-r C:\WINDOWS\system32\drivers\k750mdm.sys
+ 2006-03-13 10:35:26 81,728 —-a-r C:\WINDOWS\system32\drivers\k750mgmt.sys
+ 2006-03-13 10:35:28 79,488 —-a-r C:\WINDOWS\system32\drivers\k750obex.sys
+ 2006-03-13 10:35:40 5,744 —-a-r C:\WINDOWS\system32\drivers\k750wh.sys
+ 2006-03-13 10:35:40 5,744 —-a-r C:\WINDOWS\system32\drivers\k750whnt.sys
- 2004-08-04 06:00:56 181,248 —-a-w C:\WINDOWS\system32\drivers\mrxdav.sys
+ 2007-12-18 09:51:35 179,584 —-a-w C:\WINDOWS\system32\drivers\mrxdav.sys
+ 2006-05-29 00:26:36 8,704 —-a-w C:\WINDOWS\system32\drivers\nmwcdc.sys
+ 2006-05-29 00:26:36 13,312 —-a-w C:\WINDOWS\system32\drivers\nmwcdcj.sys
- 2007-01-25 17:31:34 42,000 —-a-w C:\WINDOWS\system32\drivers\npf.sys
+ 2005-08-02 21:10:13 32,512 —-a-w C:\WINDOWS\system32\drivers\npf.sys
+ 2003-08-16 02:06:50 2,944 —-a-w C:\WINDOWS\system32\drivers\null.sys
- 2007-01-26 01:19:00 36,624 ——w C:\WINDOWS\system32\drivers\pxhelp20.sys
+ 2008-03-21 20:30:04 43,528 ——w C:\WINDOWS\system32\drivers\pxhelp20.sys
- 2006-07-13 08:48:58 202,240 -c–a-w C:\WINDOWS\system32\drivers\rmcast.sys
+ 2008-05-08 12:28:49 202,752 —-a-w C:\WINDOWS\system32\drivers\rmcast.sys
+ 2006-04-28 09:24:42 61,600 —-a-w C:\WINDOWS\system32\drivers\SE27bus.sys
+ 2006-04-28 09:27:46 6,240 —-a-w C:\WINDOWS\system32\drivers\SE27cm.sys
+ 2006-04-28 09:27:46 6,240 —-a-w C:\WINDOWS\system32\drivers\SE27cmnt.sys
+ 2006-04-28 09:25:40 9,360 —-a-w C:\WINDOWS\system32\drivers\SE27mdfl.sys
+ 2006-04-28 09:25:44 97,184 —-a-w C:\WINDOWS\system32\drivers\SE27mdm.sys
+ 2006-04-28 09:24:38 5,872 —-a-w C:\WINDOWS\system32\drivers\SE27wh.sys
+ 2006-04-28 09:24:38 5,872 —-a-w C:\WINDOWS\system32\drivers\SE27whnt.sys
- 2007-02-16 12:50:10 12,400 —-a-w C:\WINDOWS\system32\drivers\secdrv.sys
+ 2007-11-13 10:25:53 20,480 —-a-w C:\WINDOWS\system32\drivers\secdrv.sys
- 2004-08-04 05:58:32 209,408 —-a-w C:\WINDOWS\system32\drivers\update.sys
+ 2007-04-23 10:32:54 364,160 —-a-w C:\WINDOWS\system32\drivers\update.sys
- 2007-04-23 00:02:34 196,608 —-a-w C:\WINDOWS\system32\dtu100.dll
+ 2008-03-21 20:28:54 196,608 —-a-w C:\WINDOWS\system32\dtu100.dll
- 2006-10-17 04:58:06 346,624 —-a-w C:\WINDOWS\system32\dxtmsft.dll
+ 2008-04-23 04:16:28 347,136 —-a-w C:\WINDOWS\system32\dxtmsft.dll
- 2006-10-17 04:57:50 214,528 —-a-w C:\WINDOWS\system32\dxtrans.dll
+ 2008-04-23 04:16:28 214,528 —-a-w C:\WINDOWS\system32\dxtrans.dll
- 2007-03-07 17:45:15 132,608 —-a-w C:\WINDOWS\system32\extmgr.dll
+ 2008-04-23 04:16:28 133,120 —-a-w C:\WINDOWS\system32\extmgr.dll
- 2007-07-12 08:23:33 278,944 —-a-w C:\WINDOWS\system32\FNTCACHE.DAT
+ 2008-04-10 09:21:37 278,944 —-a-w C:\WINDOWS\system32\FNTCACHE.DAT
- 2007-03-08 15:36:28 281,600 —-a-w C:\WINDOWS\system32\gdi32.dll
+ 2008-02-20 06:51:05 282,624 —-a-w C:\WINDOWS\system32\gdi32.dll
- 2006-10-17 04:58:20 61,952 ——w C:\WINDOWS\system32\icardie.dll
+ 2008-04-23 04:16:28 63,488 —-a-w C:\WINDOWS\system32\icardie.dll
- 2007-03-07 08:28:17 56,832 —-a-w C:\WINDOWS\system32\ie4uinit.exe
+ 2008-04-22 07:39:58 70,656 —-a-w C:\WINDOWS\system32\ie4uinit.exe
- 2007-03-07 17:45:15 153,088 —-a-w C:\WINDOWS\system32\ieakeng.dll
+ 2008-04-23 04:16:28 153,088 —-a-w C:\WINDOWS\system32\ieakeng.dll
- 2007-03-07 17:45:15 230,400 —-a-w C:\WINDOWS\system32\ieaksie.dll
+ 2008-04-23 04:16:28 230,400 —-a-w C:\WINDOWS\system32\ieaksie.dll
- 2007-02-21 08:00:53 161,792 —-a-w C:\WINDOWS\system32\ieakui.dll
+ 2008-04-20 05:07:51 161,792 —-a-w C:\WINDOWS\system32\ieakui.dll
- 2007-04-03 04:36:20 2,453,952 —-a-w C:\WINDOWS\system32\ieapfltr.dat
+ 2007-04-17 09:32:38 2,455,488 —-a-w C:\WINDOWS\system32\ieapfltr.dat
- 2007-04-03 14:46:37 383,488 —-a-w C:\WINDOWS\system32\ieapfltr.dll
+ 2008-04-23 04:16:28 383,488 —-a-w C:\WINDOWS\system32\ieapfltr.dll
- 2007-03-07 17:45:15 384,000 —-a-w C:\WINDOWS\system32\iedkcs32.dll
+ 2008-04-23 04:16:28 384,512 —-a-w C:\WINDOWS\system32\iedkcs32.dll
- 2006-10-17 05:06:00 78,336 —-a-w C:\WINDOWS\system32\ieencode.dll
+ 2007-08-13 10:45:18 78,336 —-a-w C:\WINDOWS\system32\ieencode.dll
- 2007-03-07 17:45:16 6,054,400 —-a-w C:\WINDOWS\system32\ieframe.dll
+ 2008-04-23 04:16:28 6,066,176 —-a-w C:\WINDOWS\system32\ieframe.dll
- 2006-10-17 05:33:40 191,488 —-a-w C:\WINDOWS\system32\iepeers.dll
+ 2007-08-13 10:54:10 191,488 —-a-w C:\WINDOWS\system32\iepeers.dll
- 2007-03-07 17:45:16 44,544 —-a-w C:\WINDOWS\system32\iernonce.dll
+ 2008-04-23 04:16:28 44,544 —-a-w C:\WINDOWS\system32\iernonce.dll
- 2007-03-07 17:45:16 266,752 —-a-w C:\WINDOWS\system32\iertutil.dll
+ 2008-04-23 04:16:28 267,776 —-a-w C:\WINDOWS\system32\iertutil.dll
- 2006-10-17 05:01:06 55,296 —-a-w C:\WINDOWS\system32\iesetup.dll
+ 2007-08-13 10:39:12 55,296 —-a-w C:\WINDOWS\system32\iesetup.dll
- 2007-02-27 08:20:47 13,824 —-a-w C:\WINDOWS\system32\ieudinit.exe
+ 2008-04-22 07:39:58 13,824 —-a-w C:\WINDOWS\system32\ieudinit.exe
- 2006-10-17 05:33:40 180,736 ——w C:\WINDOWS\system32\ieui.dll
+ 2007-08-13 10:54:10 180,736 —-a-w C:\WINDOWS\system32\ieui.dll
+ 2006-03-13 18:26:40 53,248 —-a-w C:\WINDOWS\system32\ImageOle.dll
- 2006-10-17 04:57:58 36,352 —-a-w C:\WINDOWS\system32\imgutil.dll
+ 2007-08-13 10:36:06 36,352 —-a-w C:\WINDOWS\system32\imgutil.dll
- 2006-11-08 05:06:13 679,424 —-a-w C:\WINDOWS\system32\inetcomm.dll
+ 2007-08-21 06:15:44 683,520 —-a-w C:\WINDOWS\system32\inetcomm.dll
- 2006-10-17 05:00:54 92,672 —-a-w C:\WINDOWS\system32\inseng.dll
+ 2007-08-13 10:39:02 92,672 —-a-w C:\WINDOWS\system32\inseng.dll
- 2007-07-11 17:22:00 135,168 —-a-w C:\WINDOWS\system32\java.exe
+ 2008-06-09 17:21:01 135,168 —-a-w C:\WINDOWS\system32\java.exe
- 2007-07-11 17:22:04 135,168 —-a-w C:\WINDOWS\system32\javaw.exe
+ 2008-06-09 17:21:04 135,168 —-a-w C:\WINDOWS\system32\javaw.exe
- 2007-07-11 18:22:38 139,264 —-a-w C:\WINDOWS\system32\javaws.exe
+ 2008-06-09 18:32:34 139,264 —-a-w C:\WINDOWS\system32\javaws.exe
- 2006-10-17 05:00:00 491,520 —-a-w C:\WINDOWS\system32\jscript.dll
+ 2007-08-13 10:38:04 491,520 —-a-w C:\WINDOWS\system32\jscript.dll
- 2007-03-07 17:45:16 27,136 —-a-w C:\WINDOWS\system32\jsproxy.dll
+ 2008-04-23 04:16:28 27,648 —-a-w C:\WINDOWS\system32\jsproxy.dll
- 2006-07-05 10:55:01 984,064 —-a-w C:\WINDOWS\system32\kernel32.dll
+ 2007-04-16 15:52:53 984,576 —-a-w C:\WINDOWS\system32\kernel32.dll
+ 2003-08-16 02:10:50 2,000 —-a-w C:\WINDOWS\system32\keyboard.drv
+ 2003-10-25 17:39:20 28,672 ——w C:\WINDOWS\system32\keyvect.dll
- 2003-08-07 07:01:50 237,568 —-a-w C:\WINDOWS\system32\lame_enc.dll
+ 2002-03-17 11:18:54 221,184 —-a-w C:\WINDOWS\system32\lame_enc.dll
+ 2003-08-16 02:24:06 221,600 —-a-w C:\WINDOWS\system32\lanman.drv
- 2007-03-15 10:19:28 1,476,992 —-a-w C:\WINDOWS\system32\LegitCheckControl.dll
+ 2007-10-11 06:12:48 1,468,968 —-a-w C:\WINDOWS\system32\LegitCheckControl.dll
+ 2004-05-14 08:53:08 57,344 —-a-w C:\WINDOWS\system32\lfbmp13n.dll
+ 2004-05-14 08:53:08 401,408 —-a-w C:\WINDOWS\system32\lfcmp13n.dll
+ 2003-11-04 07:10:40 69,632 —-a-w C:\WINDOWS\system32\lfgif13n.dll
+ 2003-11-04 07:11:04 159,744 —-a-w C:\WINDOWS\system32\lfpng13n.dll
+ 2003-11-04 07:11:14 53,248 —-a-w C:\WINDOWS\system32\lftga13n.dll
- 2007-04-23 00:15:18 1,044,480 —-a-w C:\WINDOWS\system32\libdivx.dll
+ 2008-03-21 20:30:00 1,044,480 —-a-w C:\WINDOWS\system32\libdivx.dll
- 2006-10-17 05:05:10 40,960 —-a-w C:\WINDOWS\system32\licmgr10.dll
+ 2007-08-13 10:44:18 40,960 —-a-w C:\WINDOWS\system32\licmgr10.dll
- 2006-08-17 12:28:27 721,920 —-a-w C:\WINDOWS\system32\lsasrv.dll
+ 2007-11-07 09:26:56 721,920 —-a-w C:\WINDOWS\system32\lsasrv.dll
+ 2004-05-14 08:53:10 299,008 —-a-w C:\WINDOWS\system32\ltdis13n.dll
+ 2004-01-11 18:09:42 206,336 —-a-w C:\WINDOWS\system32\ltefx13n.dll
+ 2004-05-14 08:53:10 163,840 —-a-w C:\WINDOWS\system32\ltfil13n.dll
+ 2004-05-14 08:53:12 450,560 —-a-w C:\WINDOWS\system32\ltimg13n.dll
+ 2004-05-14 08:53:12 462,848 —-a-w C:\WINDOWS\system32\ltkrn13n.dll
+ 2003-08-16 09:14:32 2,560 —-a-w C:\WINDOWS\system32\lz32.dll
+ 2008-01-07 03:26:46 181,672 —-a-w C:\WINDOWS\system32\Macromed\Director\swdir_bckup.dll
+ 2008-03-25 02:32:44 218,496 —-a-r C:\WINDOWS\system32\Macromed\Flash\FlashUtil9f.exe
+ 2008-05-17 02:35:51 74,649 —-a-w C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
- 2007-04-30 09:11:28 585,728 —-a-w C:\WINDOWS\system32\Macromed\Shockwave 10\Control.dll
+ 2008-03-14 15:29:22 581,632 —-a-w C:\WINDOWS\system32\Macromed\Shockwave 10\Control.dll
- 2007-04-30 08:08:40 1,490,944 —-a-w C:\WINDOWS\system32\Macromed\Shockwave 10\dirapi.dll
+ 2008-01-03 10:01:46 1,490,944 —-a-w C:\WINDOWS\system32\Macromed\Shockwave 10\dirapi.dll
+ 2008-03-14 15:12:30 1,490,944 —-a-w C:\WINDOWS\system32\Macromed\Shockwave 10\dirapiX.dll
- 2007-04-30 08:30:38 24,576 —-a-w C:\WINDOWS\system32\Macromed\Shockwave 10\DynaPlayer.dll
+ 2008-03-14 15:29:58 24,576 —-a-w C:\WINDOWS\system32\Macromed\Shockwave 10\DynaPlayer.dll
- 2007-04-30 08:47:02 1,089,024 —-a-w C:\WINDOWS\system32\Macromed\Shockwave 10\gi.dll
+ 2008-01-08 03:57:12 1,112,576 —-a-w C:\WINDOWS\system32\Macromed\Shockwave 10\gi.dll
- 2007-04-30 07:47:42 52,288 —-a-w C:\WINDOWS\system32\Macromed\Shockwave 10\gtapi.dll
+ 2008-01-03 09:46:46 52,288 —-a-w C:\WINDOWS\system32\Macromed\Shockwave 10\gtapi.dll
+ 2008-03-14 15:10:06 606,208 —-a-w C:\WINDOWS\system32\Macromed\Shockwave 10\iml32X.dll
- 2007-04-30 09:11:22 339,968 —-a-w C:\WINDOWS\system32\Macromed\Shockwave 10\Plugin.dll
+ 2008-03-14 15:28:48 339,968 —-a-w C:\WINDOWS\system32\Macromed\Shockwave 10\Plugin.dll
- 2007-04-30 09:11:24 483,328 —-a-w C:\WINDOWS\system32\Macromed\Shockwave 10\PluginPing.dll
+ 2008-03-14 15:28:56 475,136 —-a-w C:\WINDOWS\system32\Macromed\Shockwave 10\PluginPing.dll
- 2007-04-30 09:11:30 180,224 —-a-w C:\WINDOWS\system32\Macromed\Shockwave 10\Proj.dll
+ 2008-03-14 15:21:52 180,224 —-a-w C:\WINDOWS\system32\Macromed\Shockwave 10\Proj.dll
+ 2007-08-07 09:20:28 391,144 —-a-w C:\WINDOWS\system32\Macromed\Shockwave 10\SwHelper_1020023.exe
+ 2008-01-07 03:26:28 390,568 —-a-w C:\WINDOWS\system32\Macromed\Shockwave 10\SwHelper_1030024.exe
- 2007-04-30 08:33:00 77,824 —-a-w C:\WINDOWS\system32\Macromed\Shockwave 10\SwInit.exe
+ 2008-03-14 15:31:28 77,824 —-a-w C:\WINDOWS\system32\Macromed\Shockwave 10\SwInit.exe
- 2007-04-30 08:29:00 86,016 —-a-w C:\WINDOWS\system32\Macromed\Shockwave 10\SwMenu.dll
+ 2008-01-03 10:18:50 86,016 —-a-w C:\WINDOWS\system32\Macromed\Shockwave 10\SwMenu.dll
+ 2008-03-15 03:38:08 86,016 —-a-w C:\WINDOWS\system32\Macromed\Shockwave 10\SwMenuX.dll
- 2007-04-30 08:33:00 98,304 —-a-w C:\WINDOWS\system32\Macromed\Shockwave 10\SwOnce.dll
+ 2008-03-14 15:31:28 98,304 —-a-w C:\WINDOWS\system32\Macromed\Shockwave 10\SwOnce.dll
+ 2008-01-03 09:46:44 50,808 —-a-w C:\WINDOWS\system32\Macromed\Shockwave 10\SYMCCHECKER.DLL
+ 2003-10-25 17:39:20 36,864 —-a-w C:\WINDOWS\system32\mcdirect8.dll
+ 2003-08-16 01:51:44 73,376 —-a-w C:\WINDOWS\system32\mciavi.drv
+ 2003-08-16 01:54:06 25,264 —-a-w C:\WINDOWS\system32\mciseq.drv
+ 2003-08-16 01:53:46 28,160 —-a-w C:\WINDOWS\system32\mciwave.drv
+ 2003-08-16 01:57:54 2,032 —-a-w C:\WINDOWS\system32\mouse.drv
- 2007-04-27 05:45:14 14,970,328 —-a-w C:\WINDOWS\system32\MRT.exe
+ 2008-05-29 23:35:11 17,486,968 —-a-w C:\WINDOWS\system32\MRT.exe
+ 2003-08-16 08:25:42 20,480 —-a-w C:\WINDOWS\system32\msacm32.drv
- 2005-09-22 23:28:52 270,848 —-a-w C:\WINDOWS\system32\mscoree.dll
+ 2007-10-23 17:47:38 282,112 —-a-w C:\WINDOWS\system32\mscoree.dll
- 2005-09-22 23:28:52 150,016 —-a-w C:\WINDOWS\system32\mscorier.dll
+ 2007-10-23 17:47:38 158,720 —-a-w C:\WINDOWS\system32\mscorier.dll
- 2005-09-22 23:28:52 74,240 —-a-w C:\WINDOWS\system32\mscories.dll
+ 2007-10-23 17:47:38 84,480 —-a-w C:\WINDOWS\system32\mscories.dll
- 2004-08-04 07:56:42 294,400 —-a-w C:\WINDOWS\system32\msctf.dll
+ 2008-02-26 11:59:50 294,912 —-a-w C:\WINDOWS\system32\msctf.dll
- 2004-08-04 07:56:43 512,029 —-a-w C:\WINDOWS\system32\msexch40.dll
+ 2008-03-25 04:50:28 518,944 —-a-w C:\WINDOWS\system32\msexch40.dll
- 2004-08-04 07:56:43 319,517 —-a-w C:\WINDOWS\system32\msexcl40.dll
+ 2008-03-25 04:50:30 326,432 —-a-w C:\WINDOWS\system32\msexcl40.dll
- 2007-03-07 17:45:16 458,752 —-a-w C:\WINDOWS\system32\msfeeds.dll
+ 2008-04-23 04:16:28 459,264 —-a-w C:\WINDOWS\system32\msfeeds.dll
- 2007-03-07 17:45:16 51,712 —-a-w C:\WINDOWS\system32\msfeedsbs.dll
+ 2008-04-23 04:16:28 52,224 —-a-w C:\WINDOWS\system32\msfeedsbs.dll
- 2006-10-17 04:58:32 12,288 ——w C:\WINDOWS\system32\msfeedssync.exe
+ 2007-08-13 10:36:40 12,288 —-a-w C:\WINDOWS\system32\msfeedssync.exe
+ 2004-08-04 07:56:57 188,416 —-a-w C:\WINDOWS\system32\msh261.drv
+ 2004-08-04 07:56:57 294,912 —-a-w C:\WINDOWS\system32\msh263.drv
- 2006-10-17 04:56:10 45,568 —-a-w C:\WINDOWS\system32\mshta.exe
+ 2007-08-13 10:32:30 45,568 —-a-w C:\WINDOWS\system32\mshta.exe
- 2007-03-07 17:45:17 3,581,952 —-a-w C:\WINDOWS\system32\mshtml.dll
+ 2008-04-23 14:16:30 3,591,680 —-a-w C:\WINDOWS\system32\mshtml.dll
- 2007-03-07 17:45:17 477,696 —-a-w C:\WINDOWS\system32\mshtmled.dll
+ 2008-04-23 04:16:28 478,208 —-a-w C:\WINDOWS\system32\mshtmled.dll
- 2006-10-17 04:28:56 48,128 —-a-w C:\WINDOWS\system32\mshtmler.dll
+ 2007-08-13 10:01:12 48,128 —-a-w C:\WINDOWS\system32\mshtmler.dll
- 2004-08-04 07:56:43 1,507,356 —-a-w C:\WINDOWS\system32\msjet40.dll
+ 2008-03-25 04:50:34 1,516,568 —-a-w C:\WINDOWS\system32\msjet40.dll
- 2004-03-01 18:52:15 358,976 —-a-w C:\WINDOWS\system32\msjetoledb40.dll
+ 2008-03-25 04:50:40 355,112 —-a-w C:\WINDOWS\system32\msjetoledb40.dll
- 2004-08-04 07:56:43 151,583 —-a-w C:\WINDOWS\system32\msjint40.dll
+ 2008-03-27 08:12:54 151,583 —-a-w C:\WINDOWS\system32\msjint40.dll
- 2004-08-04 07:56:43 53,279 —-a-w C:\WINDOWS\system32\msjter40.dll
+ 2008-03-25 04:50:42 60,192 —-a-w C:\WINDOWS\system32\msjter40.dll
- 2004-08-04 07:56:43 241,693 —-a-w C:\WINDOWS\system32\msjtes40.dll
+ 2008-03-25 04:50:42 248,608 —-a-w C:\WINDOWS\system32\msjtes40.dll
- 2006-10-17 05:33:40 156,160 —-a-w C:\WINDOWS\system32\msls31.dll
+ 2007-08-13 10:54:10 156,160 —-a-w C:\WINDOWS\system32\msls31.dll
- 2004-08-04 07:56:43 213,023 —-a-w C:\WINDOWS\system32\msltus40.dll
+ 2008-03-25 04:50:44 219,936 —-a-w C:\WINDOWS\system32\msltus40.dll
- 2004-08-04 07:56:43 348,189 —-a-w C:\WINDOWS\system32\mspbde40.dll
+ 2008-03-25 04:50:45 355,104 —-a-w C:\WINDOWS\system32\mspbde40.dll
- 2007-03-07 17:45:17 193,024 —-a-w C:\WINDOWS\system32\msrating.dll
+ 2008-04-23 04:16:28 193,024 —-a-w C:\WINDOWS\system32\msrating.dll
- 2004-08-04 07:56:43 421,919 —-a-w C:\WINDOWS\system32\msrd2x40.dll
+ 2008-03-25 04:50:47 432,928 —-a-w C:\WINDOWS\system32\msrd2x40.dll
- 2004-08-04 07:56:43 315,423 —-a-w C:\WINDOWS\system32\msrd3x40.dll
+ 2008-03-25 04:50:49 322,336 —-a-w C:\WINDOWS\system32\msrd3x40.dll
- 2004-08-04 07:56:43 552,989 —-a-w C:\WINDOWS\system32\msrepl40.dll
+ 2008-03-25 04:50:52 559,904 —-a-w C:\WINDOWS\system32\msrepl40.dll
- 2000-07-14 16:00:00 118,784 —-a-w C:\WINDOWS\system32\Msstdfmt.dll
+ 2004-02-22 15:00:00 119,808 —-a-w C:\WINDOWS\system32\Msstdfmt.dll
- 2004-08-04 07:56:43 258,077 —-a-w C:\WINDOWS\system32\mstext40.dll
+ 2008-03-25 04:50:55 264,992 —-a-w C:\WINDOWS\system32\mstext40.dll
- 2007-03-07 17:45:17 670,720 —-a-w C:\WINDOWS\system32\mstime.dll
+ 2008-04-23 04:16:28 671,232 —-a-w C:\WINDOWS\system32\mstime.dll
- 2002-01-04 19:40:20 487,424 —-a-w C:\WINDOWS\system32\msvcp70.dll
+ 2002-01-04 20:40:18 487,424 —-a-w C:\WINDOWS\system32\msvcp70.dll
- 2002-01-04 18:37:28 344,064 —-a-w C:\WINDOWS\system32\msvcr70.dll
+ 2002-01-04 20:37:26 344,064 —-a-w C:\WINDOWS\system32\msvcr70.dll
- 2004-08-04 07:56:44 831,519 —-a-w C:\WINDOWS\system32\mswdat10.dll
+ 2008-03-25 04:50:57 838,432 —-a-w C:\WINDOWS\system32\mswdat10.dll
- 2004-08-04 07:56:44 245,248 —-a-w C:\WINDOWS\system32\mswsock.dll
+ 2008-06-20 17:41:10 245,248 —-a-w C:\WINDOWS\system32\mswsock.dll
- 2004-08-04 07:56:44 614,429 —-a-w C:\WINDOWS\system32\mswstr10.dll
+ 2008-03-25 04:50:58 621,344 —-a-w C:\WINDOWS\system32\mswstr10.dll
- 2004-08-04 07:56:44 348,189 —-a-w C:\WINDOWS\system32\msxbde40.dll
+ 2008-03-25 04:50:58 355,104 —-a-w C:\WINDOWS\system32\msxbde40.dll
- 2006-09-13 05:01:56 1,084,416 —-a-w C:\WINDOWS\system32\msxml3.dll
+ 2007-06-26 06:08:16 1,104,896 —-a-w C:\WINDOWS\system32\msxml3.dll
- 2006-11-04 06:14:00 1,245,696 —-a-w C:\WINDOWS\system32\msxml4.dll
+ 2007-05-08 07:03:04 1,275,392 —-a-w C:\WINDOWS\system32\msxml4.dll
- 2005-05-25 20:16:24 127,208 —-a-w C:\WINDOWS\system32\mucltui.dll
+ 2007-07-30 11:19:10 271,224 —-a-w C:\WINDOWS\system32\mucltui.dll
- 2005-09-22 23:29:00 6,144 —-a-w C:\WINDOWS\system32\mui\0409\mscorees.dll
+ 2007-10-23 17:47:44 15,360 —-a-w C:\WINDOWS\system32\mui\0409\mscorees.dll
- 2005-05-25 20:19:32 178,408 —-a-w C:\WINDOWS\system32\muweb.dll
+ 2007-07-30 11:19:04 207,736 —-a-w C:\WINDOWS\system32\muweb.dll
- 2007-03-07 17:45:17 102,400 —-a-w C:\WINDOWS\system32\occache.dll
+ 2008-04-23 04:16:28 102,912 —-a-w C:\WINDOWS\system32\occache.dll
- 2004-08-04 07:56:44 553,472 ——w C:\WINDOWS\system32\oleaut32.dll
+ 2007-12-04 18:38:13 550,912 ——w C:\WINDOWS\system32\oleaut32.dll
- 2007-01-25 17:31:34 88,952 —-a-w C:\WINDOWS\system32\Packet.dll
+ 2005-08-02 21:08:09 81,920 —-a-w C:\WINDOWS\system32\Packet.dll
- 2007-09-12 13:41:45 64,518 —-a-w C:\WINDOWS\system32\perfc009.dat
+ 2008-06-17 00:14:15 65,702 —-a-w C:\WINDOWS\system32\perfc009.dat
- 2007-09-12 13:41:45 405,532 —-a-w C:\WINDOWS\system32\perfh009.dat
+ 2008-06-17 00:14:15 410,796 —-a-w C:\WINDOWS\system32\perfh009.dat
- 2005-05-20 11:11:34 278,528 —-a-w C:\WINDOWS\system32\pncrt.dll
+ 2008-01-01 10:17:32 278,528 —-a-w C:\WINDOWS\system32\pncrt.dll
- 2005-05-20 11:11:36 6,656 —-a-w C:\WINDOWS\system32\pndx5016.dll
+ 2008-01-01 10:17:39 6,656 —-a-w C:\WINDOWS\system32\pndx5016.dll
- 2005-05-20 11:11:36 5,632 —-a-w C:\WINDOWS\system32\pndx5032.dll
+ 2008-01-01 10:17:39 5,632 —-a-w C:\WINDOWS\system32\pndx5032.dll
- 2006-10-17 04:58:08 44,544 —-a-w C:\WINDOWS\system32\pngfilt.dll
+ 2008-04-23 04:16:28 44,544 —-a-w C:\WINDOWS\system32\pngfilt.dll
- 2007-01-25 17:31:36 53,299 —-a-w C:\WINDOWS\system32\pthreadVC.dll
+ 2005-08-02 21:24:01 53,299 —-a-w C:\WINDOWS\system32\pthreadVC.dll
- 2007-01-26 01:19:00 527,096 ——w C:\WINDOWS\system32\px.dll
+ 2008-03-21 20:30:04 551,672 ——w C:\WINDOWS\system32\px.dll
- 2007-01-26 01:19:00 129,784 ——w C:\WINDOWS\system32\pxafs.dll
+ 2008-03-21 20:30:04 129,784 ——w C:\WINDOWS\system32\pxafs.dll
- 2007-01-26 01:19:00 64,760 ——w C:\WINDOWS\system32\pxcpya64.exe
+ 2008-03-21 20:30:04 66,296 ——w C:\WINDOWS\system32\pxcpya64.exe
- 2007-01-26 01:19:00 116,472 ——w C:\WINDOWS\system32\pxcpyi64.exe
+ 2008-03-21 20:30:04 120,056 ——w C:\WINDOWS\system32\pxcpyi64.exe
- 2007-01-26 01:19:00 502,520 ——w C:\WINDOWS\system32\pxdrv.dll
+ 2008-03-21 20:30:04 518,904 ——w C:\WINDOWS\system32\pxdrv.dll
- 2007-01-26 01:19:00 72,440 ——w C:\WINDOWS\system32\pxhpinst.exe
+ 2008-03-21 20:30:06 72,440 ——w C:\WINDOWS\system32\pxhpinst.exe
- 2007-01-26 01:19:00 64,760 ——w C:\WINDOWS\system32\pxinsa64.exe
+ 2008-03-21 20:30:04 64,760 ——w C:\WINDOWS\system32\pxinsa64.exe
- 2007-01-26 01:19:00 118,520 ——w C:\WINDOWS\system32\pxinsi64.exe
+ 2008-03-21 20:30:04 118,520 ——w C:\WINDOWS\system32\pxinsi64.exe
- 2007-01-26 01:19:00 183,032 ——w C:\WINDOWS\system32\pxmas.dll
+ 2008-03-21 20:30:06 187,128 ——w C:\WINDOWS\system32\pxmas.dll
- 2007-01-26 01:19:00 1,329,912 ——w C:\WINDOWS\system32\pxsfs.dll
+ 2008-03-21 20:30:04 1,628,920 ——w C:\WINDOWS\system32\pxsfs.dll
- 2007-01-26 01:19:00 379,640 ——w C:\WINDOWS\system32\pxwave.dll
+ 2008-03-21 20:30:06 379,640 ——w C:\WINDOWS\system32\pxwave.dll
- 2007-04-23 00:15:29 3,596,288 —-a-w C:\WINDOWS\system32\qt-dx331.dll
+ 2007-05-02 12:04:20 3,596,288 —-a-w C:\WINDOWS\system32\qt-dx331.dll
- 2005-08-30 03:54:26 1,287,168 —-a-w C:\WINDOWS\system32\quartz.dll
+ 2008-05-07 05:18:48 1,287,680 —-a-w C:\WINDOWS\system32\quartz.dll
+ 2003-08-16 09:37:54 286,720 -c–a-w C:\WINDOWS\system32\ReinstallBackups\0019\DriverFiles\i386\msh263.drv
+ 2003-08-16 10:22:58 22,016 -c–a-w C:\WINDOWS\system32\ReinstallBackups\0022\DriverFiles\i386\wdmaud.drv
- 2005-05-20 11:11:48 176,167 —-a-w C:\WINDOWS\system32\rmoc3260.dll
+ 2008-01-01 10:17:55 185,944 —-a-w C:\WINDOWS\system32\rmoc3260.dll
- 2004-08-04 07:56:44 581,120 —-a-w C:\WINDOWS\system32\rpcrt4.dll
+ 2007-07-09 13:16:16 582,656 —-a-w C:\WINDOWS\system32\rpcrt4.dll
- 2004-08-04 07:56:44 144,896 —-a-w C:\WINDOWS\system32\schannel.dll
+ 2007-04-25 14:21:15 144,896 —-a-w C:\WINDOWS\system32\schannel.dll
- 2006-12-19 21:52:18 8,453,632 —-a-w C:\WINDOWS\system32\shell32.dll
+ 2007-10-26 03:34:01 8,460,288 —-a-w C:\WINDOWS\system32\shell32.dll
+ 2007-07-30 11:18:40 33,624 —-a-w C:\WINDOWS\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.0.6000.381\wups.dll
+ 2007-07-30 11:19:12 43,352 —-a-w C:\WINDOWS\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.0.6000.381\wups2.dll
+ 2003-08-16 02:01:42 1,744 —-a-w C:\WINDOWS\system32\sound.drv
- 2006-12-10 06:10:02 14,640 ——w C:\WINDOWS\system32\spmsg.dll
+ 2007-11-30 12:39:22 17,272 ——w C:\WINDOWS\system32\spmsg.dll
- 2007-04-23 00:15:18 200,704 —-a-w C:\WINDOWS\system32\ssldivx.dll
+ 2008-03-21 20:30:00 200,704 —-a-w C:\WINDOWS\system32\ssldivx.dll
+ 2003-08-16 01:57:42 3,360 —-a-w C:\WINDOWS\system32\system.drv
+ 2003-08-16 02:06:32 4,048 —-a-w C:\WINDOWS\system32\timer.drv
- 2007-01-29 08:58:06 60,416 ——w C:\WINDOWS\system32\tzchange.exe
+ 2007-11-13 11:31:11 60,416 ——w C:\WINDOWS\system32\tzchange.exe
- 2005-03-01 03:27:04 245,408 —-a-w C:\WINDOWS\system32\unicows.dll
+ 2004-12-07 02:11:34 258,352 —-a-w C:\WINDOWS\system32\Unicows.dll
- 2007-03-07 17:45:17 105,984 —-a-w C:\WINDOWS\system32\url.dll
+ 2008-04-23 04:16:28 105,984 —-a-w C:\WINDOWS\system32\url.dll
- 2007-03-07 17:45:18 1,150,464 —-a-w C:\WINDOWS\system32\urlmon.dll
+ 2008-04-23 04:16:29 1,159,680 —-a-w C:\WINDOWS\system32\urlmon.dll
- 2006-10-17 05:33:40 413,696 —-a-w C:\WINDOWS\system32\vbscript.dll
+ 2007-08-13 10:54:10 413,696 —-a-w C:\WINDOWS\system32\vbscript.dll
+ 2003-08-16 01:59:22 2,176 —-a-w C:\WINDOWS\system32\vga.drv
- 2007-01-26 01:19:00 39,672 ——w C:\WINDOWS\system32\VXBLOCK.dll
+ 2008-03-21 20:30:04 88,824 ——w C:\WINDOWS\system32\VXBLOCK.dll
+ 2003-12-22 00:20:26 2,272 —-a-w C:\WINDOWS\system32\W95INF16.DLL
- 2007-01-25 17:31:34 68,480 —-a-w C:\WINDOWS\system32\WanPacket.dll
+ 2005-08-02 21:08:06 61,440 —-a-w C:\WINDOWS\system32\WanPacket.dll
+ 2004-08-04 07:56:57 23,552 —-a-w C:\WINDOWS\system32\wdmaud(2)(2).drv
+ 2004-08-04 07:56:57 23,552 —-a-w C:\WINDOWS\system32\wdmaud.drv
- 2007-03-07 17:45:18 232,960 —-a-w C:\WINDOWS\system32\webcheck.dll
+ 2008-04-23 04:16:29 233,472 —-a-w C:\WINDOWS\system32\webcheck.dll
+ 2003-08-16 08:24:54 13,600 —-a-w C:\WINDOWS\system32\wfwnet.drv
- 2007-03-08 13:47:48 1,843,584 —-a-w C:\WINDOWS\system32\win32k.sys
+ 2008-03-19 09:47:00 1,845,248 —-a-w C:\WINDOWS\system32\win32k.sys
- 2006-10-17 05:05:58 206,336 ——w C:\WINDOWS\system32\WinFXDocObj.exe
+ 2007-08-13 10:45:16 206,336 —-a-w C:\WINDOWS\system32\WinFXDocObj.exe
- 2007-03-07 17:45:18 822,784 —-a-w C:\WINDOWS\system32\wininet.dll
+ 2008-04-23 04:16:29 826,368 —-a-w C:\WINDOWS\system32\wininet.dll
+ 2003-08-16 01:55:28 2,864 —-a-w C:\WINDOWS\system32\winsock.dll
+ 2004-08-04 07:56:57 146,432 —-a-w C:\WINDOWS\system32\winspool.drv
+ 2003-08-16 01:55:28 2,112 —-a-w C:\WINDOWS\system32\winspool.exe
- 2006-10-18 13:47:18 222,208 —-a-w C:\WINDOWS\system32\wmasf.dll
+ 2007-10-27 09:40:30 222,720 —-a-w C:\WINDOWS\system32\wmasf.dll
- 2006-10-18 13:47:20 10,834,432 —-a-w C:\WINDOWS\system32\wmp.dll
+ 2007-06-11 15:51:12 10,834,944 —-a-w C:\WINDOWS\system32\wmp.dll
- 1999-09-10 04:06:00 45,056 —-a-w C:\WINDOWS\system32\WNASPI32.DLL
+ 2005-11-21 05:48:20 45,056 —-a-w C:\WINDOWS\system32\WNASPI32.DLL
+ 2003-08-16 02:40:14 2,736 —-a-w C:\WINDOWS\system32\wowdeb.exe
- 2007-01-25 17:31:36 240,496 —-a-w C:\WINDOWS\system32\wpcap.dll
+ 2005-08-02 21:18:45 233,472 —-a-w C:\WINDOWS\system32\wpcap.dll
- 2005-05-25 20:16:30 465,176 —-a-w C:\WINDOWS\system32\wuapi.dll
+ 2007-07-30 11:19:36 549,720 —-a-w C:\WINDOWS\system32\wuapi.dll
- 2005-05-25 20:16:30 124,184 —-a-w C:\WINDOWS\system32\wuauclt.exe
+ 2007-07-30 11:19:16 53,080 —-a-w C:\WINDOWS\system32\wuauclt.exe
- 2005-05-25 20:16:30 1,343,768 —-a-w C:\WINDOWS\system32\wuaueng.dll
+ 2007-07-30 11:19:42 1,712,984 —-a-w C:\WINDOWS\system32\wuaueng.dll
- 2005-05-25 20:16:30 127,256 —-a-w C:\WINDOWS\system32\wucltui.dll
+ 2007-07-30 11:19:32 325,976 —-a-w C:\WINDOWS\system32\wucltui.dll
- 2005-05-25 20:16:30 41,240 —-a-w C:\WINDOWS\system32\wups.dll
+ 2007-07-30 11:18:40 33,624 —-a-w C:\WINDOWS\system32\wups.dll
- 2005-05-25 20:16:30 18,200 —-a-w C:\WINDOWS\system32\wups2.dll
+ 2007-07-30 11:19:12 43,352 —-a-w C:\WINDOWS\system32\wups2.dll
- 2005-05-25 20:16:30 173,536 —-a-w C:\WINDOWS\system32\wuweb.dll
+ 2007-07-30 11:19:28 203,096 —-a-w C:\WINDOWS\system32\wuweb.dll
- 2007-03-09 11:28:00 248,320 —-a-w C:\WINDOWS\system32\xpsp3res.dll
+ 2007-10-29 10:04:03 350,720 —-a-w C:\WINDOWS\system32\xpsp3res.dll
- 2005-12-30 12:10:30 761,856 —-a-w C:\WINDOWS\system32\xvidcore.dll
+ 2007-04-28 06:54:36 593,920 —-a-w C:\WINDOWS\system32\xvidcore.dll
- 2005-12-30 12:18:26 180,224 —-a-w C:\WINDOWS\system32\xvidvfw.dll
+ 2006-11-01 06:54:30 180,224 —-a-w C:\WINDOWS\system32\xvidvfw.dll
+ 2004-01-25 10:18:44 217,088 —-a-w C:\WINDOWS\system32\yv12vfw.dll
+ 2008-01-01 10:38:00 1,531 —-a-w C:\WINDOWS\unins000.dat
+ 2008-01-01 10:37:56 686,858 —-a-w C:\WINDOWS\unins000.exe
+ 2002-11-07 05:56:32 147,456 —-a-w C:\WINDOWS\Uninstit.exe
+ 2000-08-31 00:00:00 49,152 —-a-w C:\WINDOWS\VFind.exe
- 2007-03-27 05:15:07 73,107 -c–a-w C:\WINDOWS\War3Unin.dat
+ 2008-07-01 13:44:18 74,609 -c–a-w C:\WINDOWS\War3Unin.dat
+ 2007-03-27 04:22:06 2,829 —-a-w C:\WINDOWS\War3Unin.pif
+ 2008-04-11 08:48:28 8,192 —-a-w C:\WINDOWS\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
+ 2007-05-08 07:06:44 1,275,392 —-a-w C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9848.0_x-ww_1b897e9a\msxml4.dll
+ 2007-10-23 17:47:56 479,232 —-a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\msvcm80.dll
+ 2007-10-23 17:47:56 558,080 —-a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\msvcp80.dll
+ 2007-10-23 17:47:56 635,904 —-a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\msvcr80.dll
- 2007-06-04 07:52:51 258,048 —-a-w C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
+ 2008-04-11 08:48:41 258,048 —-a-w C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
- 2007-06-04 07:52:51 114,176 —-a-w C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
+ 2008-04-11 08:48:41 113,664 —-a-w C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
+ 2000-08-31 00:00:00 68,096 —-a-w C:\WINDOWS\zip.exe
.
– Snapshot reset to current date –
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{3AF93A29-A296-4AB0-9011-D85A559203B3}]
2007-10-09 22:33 2265088 –a—— C:\Program Files\TurboUpload\TurboUpload Toolbar\turboupload.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BackupNotify"="c:\Program Files\HP\Digital Imaging\bin\backupnotify.exe" [2003-06-22 21:25 24576]
"CTSyncU.exe"="C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe" [2007-07-17 11:03 868352]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 15:56 15360]
"Veoh"="C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" [2008-04-01 18:35 3587120]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"eTrust PestPatrol Active Protection"="none" [X]
"hpsysdrv"="c:\windows\system\hpsysdrv.exe" [1998-05-07 16:04 52736]
"HotKeysCmds"="C:\WINDOWS\System32\hkcmd.exe" [2003-04-07 07:07 114688]
"CamMonitor"="c:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exe" [2002-10-07 07:23 90112]
"KBD"="C:\HP\KBD\KBD.EXE" [2003-02-11 20:02 61440]
"UpdateManager"="C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" [2003-08-19 08:01 110592]
"Home Theater SchSvr"="C:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe" [2003-11-24 10:40 155648]
"Recguard"="C:\WINDOWS\SMINST\RECGUARD.EXE" [2002-09-13 21:42 212992]
"PS2"="C:\WINDOWS\system32\ps2.exe" [2002-10-16 16:57 81920]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2003-08-12 21:10 335872]
"DVDTray"="C:\Program Files\HP DVD\Umbrella\DVDTray.exe" [2003-07-23 10:41 65536]
"DAEMON Tools"="C:\Program Files\DAEMON Tools\daemon.exe" [2006-11-12 18:48 157592]
"razertra"="C:\Program Files\Razer\razertra.exe" [2004-02-25 23:27 208896]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 04:27 144784]
"ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" [2006-01-02 16:41 45056]
"CTCheck"="C:\Program Files\Creative\Creative ZEN\ZEN Media Explorer\CTCheck.exe" [2007-11-06 11:08 397312]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2008-01-01 18:17 185896]
"SpeedBitVideoAccelerator"="C:\Program Files\SpeedBit Video Accelerator\VideoAccelerator.exe" [2008-02-17 00:21 2283120]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2006-06-15 12:49 282624]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2004-08-04 15:56 110592 C:\WINDOWS\system32\bthprops.cpl]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 15:56 15360]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [2003-07-07 08:20:40 233472]
Microsoft Find Fast.lnk - C:\Program Files\Microsoft Office\Office\FINDFAST.EXE [1997-08-06 111376]
Office Startup.lnk - C:\Program Files\Microsoft Office\Office\OSA.EXE [1997-08-06 51984]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.yv12"= yv12vfw.dll

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk
backup=C:\WINDOWS\pss\Adobe Reader Speed Launch.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Updates from HP.lnk]
backup=C:\WINDOWS\pss\Updates from HP.lnkCommon Startup
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DownloadAccelerator
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FreeRAM XP
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
–a—— 2006-02-23 16:45 278528 C:\Program Files\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mmtask]
–a—— 2003-07-23 16:37 53248 C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
–a—— 2006-06-15 12:49 282624 C:\Program Files\QuickTime\qttask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony Ericsson PC Suite]
-ra—— 2005-10-26 17:17 159744 C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UnlockerAssistant]
–a—— 2006-09-08 01:19 15872 C:\Program Files\Unlocker\UnlockerAssistant.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Veoh]
–a—— 2008-04-01 18:35 3587120 C:\Program Files\Veoh Networks\Veoh\VeohClient.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"C:\\Program Files\\Orbitdownloader\\orbitdm.exe"=
"C:\\Program Files\\Orbitdownloader\\orbitnet.exe"=
"C:\\Program Files\\uTorrent\\uTorrent.exe"=
"C:\\Program Files\\Nakido\\nakido.exe"=

R2 Nakido;Nakido;C:\Program Files\Nakido\nakido.exe [2008-07-29 09:32]
R2 sbbotdi;sbbotdi;C:\PROGRA~1\SPEEDB~1\sbbotdi.sys [2008-02-17 00:21]
R2 VideoAcceleratorService;VideoAcceleratorService;C:\PROGRA~1\SPEEDB~1\VideoAcceleratorService.exe [2008-02-17 00:21]
R3 Cap7134;ASUS TV7134 WDM Video Capture;C:\WINDOWS\system32\DRIVERS\Cap7134.sys [2003-05-09 10:16]
R3 PhTVTune;ASUS WDM TV Tuner;C:\WINDOWS\system32\DRIVERS\PhTVTune.sys [2003-04-28 22:33]
S3 mamotou;mamotou;C:\WINDOWS\system32\DRIVERS\mamotou.sys [2005-11-07 17:50]
S3 NPF;NetGroup Packet Filter Driver;C:\WINDOWS\system32\drivers\npf.sys [2005-08-03 05:10]
S3 SIVDRIVER;SIV Kernel Driver;C:\Documents and Settings\Owner\Local Settings\Temp\wz872a\SIVX32.sys []
S3 z520bus;Sony Ericsson 520 driver (WDM);C:\WINDOWS\system32\DRIVERS\z520bus.sys [2006-03-13 18:54]
S3 z520mdfl;Sony Ericsson 520 USB WMC Modem Filter;C:\WINDOWS\system32\DRIVERS\z520mdfl.sys [2006-03-13 18:54]
S3 z520mdm;Sony Ericsson 520 USB WMC Modem Drivers;C:\WINDOWS\system32\DRIVERS\z520mdm.sys [2006-03-13 18:54]
S3 z520mgmt;Sony Ericsson 520 USB WMC Device Management Drivers;C:\WINDOWS\system32\DRIVERS\z520mgmt.sys [2006-03-13 18:54]
S3 z520obex;Sony Ericsson 520 USB WMC OBEX Interface Drivers;C:\WINDOWS\system32\DRIVERS\z520obex.sys [2006-03-13 18:54]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{12cfe265-2737-11dd-b58a-000ea652db6a}]
\Shell\AutoRun\command - M:\m.exe
\Shell\explore\Command - M:\m.exe
\Shell\open\Command - M:\m.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1a4647c6-2628-11dd-b583-000ea652db6a}]
\Shell\AutoRun\command - M:\lgnaqil.exe
\Shell\explore\Command - M:\lgnaqil.exe
\Shell\open\Command - M:\lgnaqil.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2ab6bf58-7b35-11dc-b21d-000ea652db6a}]
\Shell\Auto\command - M:\sal.xls.exe
\Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL sal.xls.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d307c394-2f6a-11dc-b0d0-000ea652db6a}]
\Shell\AutoRun\command - Autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{f962985c-d119-11db-a109-000ea652db6a}]
\Shell\AutoRun\command - M:\p0sc9t.cmd
\Shell\explore\Command - M:\p0sc9t.cmd
\Shell\open\Command - M:\p0sc9t.cmd

*Newly Created Service* - CATCHME
.
- - - - ORPHANS REMOVED - - - -

HKCU-Run-RecordNow! - (no file)
HKCU-RunOnce-Shockwave Updater - C:\WINDOWS\system32\Adobe\SHOCKW~1\SWHELP~1.EXE -Update -1100429 -Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; TurboUpload.com Toolbar v. 1.2; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 1.1.4322; MEGAUPLOAD 1.0; .NET
Notify-avldr - avldr.dll
MSConfigStartUp-!AVG Anti-Spyware - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
MSConfigStartUp-AVG7_CC - C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
MSConfigStartUp-BitTorrent - C:\Program Files\BitTorrent\bittorrent.exe
MSConfigStartUp-DiskeeperSystray - C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe
MSConfigStartUp-Free Download Manager - C:\Program Files\Free Download Manager\fdm.exe
MSConfigStartUp-PCErrorEliminator - C:\Program Files\PCErrorEliminator\PCErrorEliminator.exe
MSConfigStartUp-PcSync - C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
MSConfigStartUp-PopUpStopperFreeEdition - C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe
MSConfigStartUp-SMSystemAnalyzer - C:\Program Files\iolo\System Mechanic 6\SMSystemAnalyzer.exe
MSConfigStartUp-SUPERAntiSpyware - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe


.
——- Supplementary Scan ——-
.
R0 -: HKCU-Main,SearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
R0 -: HKCU-Main,Start Page = hxxp://sg.yahoo.com/
R1 -: HKCU-Internet Settings,ProxyOverride = localhost
R1 -: HKCU-Internet Settings,ProxyServer = 200.238.92.106:3128
R1 -: HKCU-SearchURL,(Default) = hxxp://www.google.com/keyword/%s
O8 -: &Download by Orbit - C:\Program Files\Orbitdownloader\orbitmxt.dll/201
O8 -: &Grab video by Orbit - C:\Program Files\Orbitdownloader\orbitmxt.dll/204
O8 -: Do&wnload selected by Orbit - C:\Program Files\Orbitdownloader\orbitmxt.dll/203
O8 -: Down&load all by Orbit - C:\Program Files\Orbitdownloader\orbitmxt.dll/202

O16 -: {6C269571-C6D7-4818-BCA4-32A035E8C884} - hxxp://www.creative.com/softwareupdate/su/ocx/15101/CTSUEng.cab
C:\WINDOWS\Downloaded Program Files\CTSUEng.inf
C:\WINDOWS\Downloaded Program Files\CTSUEng.ocx
C:\WINDOWS\Downloaded Program Files\CTSUEngn.ocx

O16 -: {8EF27A70-DD04-11D6-B7F6-00A0C9CD5F8A} - hxxp://www.quikshield.com/qshsetup.exe


**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-07-30 01:07:15
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2008-07-30 1:15:01
ComboFix-quarantined-files.txt 2008-07-29 17:14:55

Pre-Run: 5,251,203,072 bytes free
Post-Run: 5,647,937,536 bytes free

2159 — E O F — 2008-07-29 10:43:32


Logfile of HijackThis v1.99.1
Scan saved at 1:25:11 AM, on 7/30/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\windows\system\hpsysdrv.exe
C:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\HP DVD\Umbrella\DVDTray.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Razer\razertra.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Veoh Networks\Veoh\VeohClient.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Microsoft Office\Office\OSA.EXE
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\Nakido\nakido.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\SPEEDB~1\VideoAcceleratorService.exe
C:\PROGRA~1\SPEEDB~1\VideoAcceleratorEngine.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe
C:\Program Files\Orbitdownloader\orbitdm.exe
C:\Program Files\Orbitdownloader\orbitnet.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://sg.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = file://C:\PROGRA~1\SPEEDB~1\proxy.pac
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 200.238.92.106:3128
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files\Orbitdownloader\orbitcth.dll
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll (file missing)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: TBSB07218 - {3AF93A29-A296-4AB0-9011-D85A559203B3} - C:\Program Files\TurboUpload\TurboUpload Toolbar\turboupload.dll
O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [CamMonitor] c:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [Home Theater SchSvr] "C:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe"
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [DVDTray] "C:\Program Files\HP DVD\Umbrella\DVDTray.exe"
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [razertra] C:\Program Files\Razer\razertra.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [CTCheck] C:\Program Files\Creative\Creative ZEN\ZEN Media Explorer\CTCheck.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [eTrust PestPatrol Active Protection] none
O4 - HKLM\..\Run: [SpeedBitVideoAccelerator] "C:\Program Files\SpeedBit Video Accelerator\VideoAccelerator.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [BackupNotify] c:\Program Files\HP\Digital Imaging\bin\backupnotify.exe
O4 - HKCU\..\Run: [CTSyncU.exe] "C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Find Fast.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
O4 - Global Startup: Office Startup.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE
O8 - Extra context menu item: &Download by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/201
O8 - Extra context menu item: &Grab video by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/204
O8 - Extra context menu item: Do&wnload selected by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/203
O8 - Extra context menu item: Down&load all by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/202
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/SU/SU1.5/ocx/15030/CTSUEng.cab
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS…er.cab31267.cab
O16 - DPF: {48884C41-EFAC-433D-958A-9FADAC41408E} (EGamesPlugin Class) - https://www.e-games.com.my/com/EGamesPlugin.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/pr02/resources/MSNPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/EN-SG/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {62789780-B744-11D0-986B-00609731A21D} (Autodesk MapGuide ActiveX Control) - http://www.can.com.sg/mwf/mgaxctrl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co…b?1114309379109
O16 - DPF: {6C269571-C6D7-4818-BCA4-32A035E8C884} (Creative Software AutoUpdate) - http://www.creative.com/softwareupdate/su/…101/CTSUEng.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1135323109546
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.putfile.com/includes/ImageUploader4.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe…nt.cab31267.cab
O16 - DPF: {8EF27A70-DD04-11D6-B7F6-00A0C9CD5F8A} - http://www.quikshield.com/qshsetup.exe
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse…pDownloader.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe…nt.cab56907.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/softwareupdate/su/…15102/CTPID.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/Solit…wn.cab31267.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Nakido - Nakido - C:\Program Files\Nakido\nakido.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
O23 - Service: VideoAcceleratorService - Speedbit Ltd. - C:\PROGRA~1\SPEEDB~1\VideoAcceleratorService.exe
Post #6
We have noticed that most people seeking help from us are coming with infections contracted from the use of P2P programs.

Because of this, we felt we needed to change our policy on the use of P2P file sharing programs.

Are these legal software downloads?

C:\Sex.Is.Zero.2.2007.DVDRip.XviD.AC3.srt

C:\Program Files\The.Fast.And.The.Furious-Tokyo.Drift[2006]DvDrip[Eng]_{_www.IPTorrents.com_}_^mininova.org^'.torrent
Post #7
Oh,the .srt file is a subtitle file..Went to download it from a website to help my fren search for the subtitle of that particular movie.. and that torrent file is a very long file which has been there(dunno where is it also) for like very long time cos I nvr use any torrent animore..the srt file however,i juz recently downloaded..but its not a software.. Aniwae the prolbem has been solved..no more folder pop ups..thx! :pullhair: and yup i am aware about ur policy of using illegal software even before i post..=)
Post #8
You're not clean yet.

What are you using for an anti-virus program?


Open notepad and copy/paste the text in the Codebox below into it:

File::
C:\Sex.Is.Zero.2.2007.DVDRip.XviD.AC3.srt
C:\g2pfnid.com
C:\6.bat
C:\e9ehn1m8.com
C:\jix9a.bat
C:\ybj8df.exe
C:\p83gjy.exe
C:\31n3b2h.exe
C:\RDOGS_FILES
C:\fi.cmd
C:\y.com
C:\0gjn3yw.exe
C:\WINDOWS\system32\ckvo2.dll
C:\WINDOWS\system32\ckvo1.dll
C:\vmhr.bat
C:\k.com
C:\hxt9.bat
C:\leb.com
C:\br1e.com
C:\uwlmj.com
C:\s2vgyp.exe
C:\n.com
C:\pkxfkrki.bat
C:\p1t.bat
C:\yp.bat
C:\sdc.bat
C:\lgnaqil.exe
C:\w2qagd.com
C:\w3dn9f.bat
C:\uqb0julr.bat
C:\ka1nk.bat
C:\qjatw9aj.exe
C:\qpe6.com
C:\x.bat
C:\WINDOWS\fdsv.exe
M:\m.exe
M:\lgnaqil.exe
M:\sal.xls.exe
M:\p0sc9t.cmd

Registry::
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{12cfe265-2737-11dd-b58a-000ea652db6a}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1a4647c6-2628-11dd-b583-000ea652db6a}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2ab6bf58-7b35-11dc-b21d-000ea652db6a}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d307c394-2f6a-11dc-b0d0-000ea652db6a}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{f962985c-d119-11db-a109-000ea652db6a}]

Save this as Save this as "CFScript"


[external image: Posted Image]

Drag CFScript.txt into ComboFix.exe

Then post the results log and a new HijackThis log.


Also please describe how your computer behaves at the moment.
Post #9
ComboFix 08-07-28.6 - Owner 2008-07-31 23:55:19.3 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.158 [GMT 8:00]
Running from: C:\Downloads\ComboFix.exe
Command switches used :: C:\Documents and Settings\Owner\Desktop\CFScript.txt
* Created a new restore point
.

((((((((((((((((((((((((( Files Created from 2008-06-28 to 2008-07-31 )))))))))))))))))))))))))))))))
.

2008-07-30 01:28 . 2008-07-30 01:28 104 –a—— C:\Internet Explorer.lnk
2008-07-29 01:57 . 2008-06-30 20:13 99,442 –a—— C:\Sex.Is.Zero.2.2007.DVDRip.XviD.AC3.srt
2008-07-28 23:20 . 2008-07-28 23:54 d——– C:\Program Files\Malwarebytes' Anti-Malware
2008-07-28 23:20 . 2008-07-23 20:09 38,472 –a—— C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2008-07-28 23:20 . 2008-07-23 20:09 17,144 –a—— C:\WINDOWS\system32\drivers\mbam.sys
2008-07-24 00:23 . 2008-07-26 11:18 87,297 -r-hs—- C:\g2pfnid.com
2008-07-23 00:22 . 2008-07-23 18:45 118,757 -r-hs—- C:\6.bat
2008-07-21 23:35 . 2008-07-22 00:04 117,520 -r-hs—- C:\e9ehn1m8.com
2008-07-19 23:21 . 2008-07-21 05:45 133,157 -r-hs—- C:\jix9a.bat
2008-07-19 12:51 . 2008-07-21 17:44 118,782 -r-hs—- C:\ybj8df.exe
2008-07-18 07:53 . 2008-07-18 07:53 d——– C:\Documents and Settings\Owner\Application Data\Malwarebytes
2008-07-18 07:53 . 2008-07-18 07:53 d——– C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-07-17 10:03 . 2008-07-17 11:10 115,233 -r-hs—- C:\p83gjy.exe
2008-07-15 06:40 . 2008-07-17 10:02 133,840 -r-hs—- C:\31n3b2h.exe
2008-07-15 01:18 . 2008-07-15 01:19 d——– C:\RDOGS_FILES
2008-07-14 18:11 . 2008-07-15 07:09 118,512 -r-hs—- C:\fi.cmd
2008-07-11 00:23 . 2008-07-11 00:23 132,594 -r-hs—- C:\y.com
2008-07-11 00:23 . 2008-07-11 23:24 117,053 -r-hs—- C:\0gjn3yw.exe
2008-07-10 04:49 . 2008-07-10 04:49 77,312 -r-hs—- C:\WINDOWS\system32\ckvo2.dll
2008-07-08 18:37 . 2008-07-28 21:41 79,360 -r-hs—- C:\WINDOWS\system32\ckvo1.dll
2008-07-07 03:11 . 2008-07-07 03:11 d——– C:\Documents and Settings\Owner\Application Data\PE Explorer
2008-07-07 02:51 . 2008-07-07 23:27 d——– C:\Program Files\AVIConverter.biz
2008-07-07 02:30 . 2008-07-07 02:30 d——– C:\Program Files\Deskshare
2008-07-07 02:21 . 2008-07-07 02:30 d——– C:\Program Files\Fx Video Converter
2008-07-07 02:21 . 2003-05-21 23:50 156,910 –a—— C:\WINDOWS\WMSysPr8.prx
2008-07-07 02:21 . 2000-06-13 00:00 2,493 –a—— C:\WINDOWS\system32\COMCTL32.DEP
2008-07-07 02:06 . 2008-07-07 02:07 9,286,164 –a—— C:\ACAB_Now n Again.avi
2008-07-07 02:05 . 2008-07-07 02:21 d——– C:\Program Files\cheapestsoft
2008-07-07 02:04 . 2008-07-07 02:04 d——– C:\Program Files\Cucusoft
2008-07-07 02:04 . 2008-07-07 02:04 d——– C:\ConverterOutput
2008-07-07 02:04 . 2004-10-12 14:40 2,255,360 –a—— C:\WINDOWS\system32\libavcodec.dll
2008-07-07 02:04 . 2004-10-12 14:46 1,761,280 –a—— C:\WINDOWS\system32\ffdshow.ax
2008-07-07 02:04 . 2004-10-05 16:16 395,776 –a—— C:\WINDOWS\system32\libmplayer.dll
2008-07-07 02:04 . 2004-10-12 14:42 262,144 –a—— C:\WINDOWS\system32\TomsMoComp_ff.dll
2008-07-07 02:04 . 2004-10-04 01:50 112,640 –a—— C:\WINDOWS\system32\libmpeg2_ff.dll
2008-07-07 01:58 . 2003-10-17 00:00 3,423,744 –a—— C:\WINDOWS\system32\libfilefmt-1.1.0.dll
2008-07-07 01:58 . 2003-10-17 00:00 706,048 –a—— C:\WINDOWS\system32\libmcl-3.1.1.dll
2008-07-07 01:58 . 2003-10-17 00:00 20,480 –a—— C:\WINDOWS\system32\libavi-dd-1.2.0.dll
2008-06-29 20:07 . 2008-07-03 00:58 128,754 -r-hs—- C:\vmhr.bat
2008-06-28 21:02 . 2008-06-28 21:02 124,698 -r-hs—- C:\hxt9.bat
2008-06-27 17:20 . 2008-07-16 11:27 116,862 -r-hs—- C:\k.com
2008-06-27 06:51 . 2008-06-27 06:52 d——– C:\Program Files\Any Video Converter Professional
2008-06-27 06:51 . 2008-07-28 02:27 d——– C:\Documents and Settings\Owner\Application Data\Any Video Converter Professional
2008-06-25 18:25 . 2008-06-25 18:25 124,804 -r-hs—- C:\leb.com
2008-06-24 17:49 . 2008-06-24 17:49 125,264 -r-hs—- C:\br1e.com
2008-06-23 06:33 . 2008-06-24 06:37 123,013 -r-hs—- C:\uwlmj.com
2008-06-20 06:58 . 2008-06-20 06:57 123,769 -r-hs—- C:\s2vgyp.exe
2008-06-17 20:46 . 2008-06-19 17:08 124,324 -r-hs—- C:\n.com
2008-06-17 09:11 . 2008-06-17 09:11 d——– C:\Program Files\Auto Shutdown
2008-06-12 00:29 . 2008-06-15 16:42 127,490 -r-hs—- C:\pkxfkrki.bat
2008-06-04 00:12 . 2008-06-04 00:12 d——– C:\Program Files\Delta
2008-06-03 11:43 . 2008-06-03 11:43 d——– C:\Documents and Settings\Owner\Application Data\SmartFTP
2008-06-03 11:37 . 2008-06-03 11:37 d——– C:\Documents and Settings\All Users\Application Data\GlobalSCAPE
2008-06-02 16:49 . 2008-06-03 16:44 122,302 -r-hs—- C:\p1t.bat

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-07-31 15:53 ——— d—–w C:\Documents and Settings\Owner\Application Data\Orbit
2008-07-31 15:48 ——— d—–w C:\Documents and Settings\Owner\Application Data\MegauploadToolbar
2008-07-31 15:32 ——— d—–w C:\Program Files\Nakido
2008-07-31 15:21 ——— d—–w C:\Program Files\Warcraft III
2008-07-31 15:16 ——— d—–w C:\Program Files\Softwin
2008-07-31 15:16 ——— d—–w C:\Program Files\Common Files\Softwin
2008-07-30 22:46 ——— d—a-w C:\Documents and Settings\All Users\Application Data\TEMP
2008-07-28 16:50 ——— d–h–w C:\Program Files\InstallShield Installation Information
2008-07-18 17:09 ——— d—–w C:\Program Files\Gabest
2008-07-15 10:25 ——— d—–w C:\Program Files\Common Files\Panda Software
2008-07-14 23:02 ——— d—–w C:\Program Files\Java
2008-06-23 23:19 ——— d—–w C:\Program Files\New Folder (2)
2008-06-20 10:45 360,320 —-a-w C:\WINDOWS\system32\drivers\tcpip.sys
2008-06-20 10:44 138,368 —-a-w C:\WINDOWS\system32\drivers\afd.sys
2008-06-20 09:52 225,920 —-a-w C:\WINDOWS\system32\drivers\tcpip6.sys
2008-06-13 13:10 272,128 ——w C:\WINDOWS\system32\drivers\bthport.sys
2008-06-06 01:37 ——— d—–w C:\Program Files\Unlocker
2008-05-29 22:36 122,875 –sh–r C:\yp.bat
2008-05-29 16:17 ——— d—–w C:\Documents and Settings\Owner\Application Data\dvdcss
2008-05-29 14:53 ——— d—–w C:\Program Files\ImTOO
2008-05-28 10:53 121,077 –sh–r C:\sdc.bat
2008-05-19 10:02 117,805 –sh–r C:\lgnaqil.exe
2008-05-18 01:30 117,831 –sh–r C:\w2qagd.com
2008-05-14 02:55 117,926 –sh–r C:\w3dn9f.bat
2008-05-12 05:49 117,833 –sh–r C:\uqb0julr.bat
2008-05-10 03:44 117,386 –sh–r C:\ka1nk.bat
2008-05-07 12:09 119,068 –sh–r C:\qjatw9aj.exe
2008-05-06 09:50 119,007 –sh–r C:\qpe6.com
2008-05-04 02:41 119,274 –sh–r C:\x.bat
2008-04-04 05:58 73,216 —-a-w C:\WINDOWS\ST6UNST.EXE
2008-04-04 05:58 249,856 ——w C:\WINDOWS\Setup1.exe
2007-03-31 04:38 12,585,829 —-a-w C:\Program Files\Muscle Museum (download).wmv
2007-03-31 04:37 10,802,949 —-a-w C:\Program Files\Hysteria (download).wmv
2007-03-30 08:45 14,708 —-a-w C:\Program Files\The.Fast.And.The.Furious-Tokyo.Drift[2006]DvDrip[Eng]_{_www.IPTorrents.com_}_^mininova.org^'.torrent
2007-03-03 12:12 8,192 -csha-w C:\Program Files\Thumbs.db
2006-10-05 15:49 7,357,020 —-a-w C:\Program Files\Nightmare of You - I Want To Be Buried In Your Backyard.mp3
2006-09-07 13:13 6,033,408 —-a-w C:\Program Files\Izwan_Pilus_-_06_Kembali_Senyum.mp3
2006-09-04 21:55 4,299,150 —-a-w C:\Program Files\OST_Heart_-_Irwansyah_&_Acha_Septriasa_-_My_Heart.mp3
2006-08-25 12:27 6,979,584 —-a-w C:\Program Files\02 - Oag - Sabtuday.mp3
2006-07-10 21:23 5,128,192 —-a-w C:\Program Files\Nitrus_-_Rasa.mp3
2006-05-08 18:26 5,167,733 —-a-w C:\Program Files\Fotograf - Dialam Fana Cintamu.mp3
2006-04-24 21:29 3,837,155 —-a-w C:\Program Files\Kanye West - Late Registration - Diamonds Are Forever.mp3
2006-04-24 04:03 10,392,764 —-a-w C:\Program Files\DJ Igal - Hip Hop Remixes 2005 Vol 7 - July 2005 Mixtape - Lil' Jon Feat. Pitbull, Elephant Man, Sean Paul - Culo (MegaMix).mp3
2006-01-22 16:47 2,349,056 —-a-w C:\Program Files\Kaer_-_Kini.mp3
2006-01-22 16:43 6,733,824 —-a-w C:\Program Files\Farah_-_Antara_Dua_-_01_-_Jalan_Terakhir.mp3
2005-12-11 17:28 3,048,680 —-a-w C:\Program Files\Daniel_(Malaysian_Idol)_-_Mimpi.mp3
2005-11-11 14:44 1,517 —-a-w C:\Program Files\TrustyFiles Downloads and Sharing.lnk
2005-10-26 01:15 8,192 —-a-w C:\Documents and Settings\Owner\w3l.exe
2005-07-07 18:17 2,782,195 —-a-w C:\Program Files\Weezer - Butterfly.mp3
2005-06-20 00:02 4,311,921 —-a-w C:\Program Files\Hazami - Kata.mp3
2005-06-11 12:32 5,737,914 —-a-w C:\Program Files\Malique_&_D'essentials_Ft[1]._Camelia_-_Sampai_Kapan.mp3
2005-05-29 12:29 3,405,731 —-a-w C:\Program Files\Fara, Nana, Nila, Linda (DJEra) - Bahu Ke Bahu.mp3
2005-04-23 14:41 1,073,152 —-a-w C:\Program Files\Krisya - Keluang Man.mp3
2005-03-26 01:15 4,040,022 —-a-w C:\Program Files\Bee Voice - Di Mana Cinta (Soundtrack Begitulah Cinta).mp3
2005-03-25 20:37 5,448,484 —-a-w C:\Program Files\Kelly Clarkson - Since You've Been Gone.mp3
2005-01-25 08:13 2,237,422 —-a-r C:\Program Files\Gerhana SkaCinta - Antara Anyir Dan Jakarta (Feat. Lady Arosa).mp3
2004-12-10 16:27 8,217,901 —-a-w C:\Program Files\Snow Patrol - Run.mp3
2004-11-22 00:00 4,012,953 —-a-w C:\Program Files\Innuendo - Gemawan.mp3
2004-11-02 03:56 3,333 —-a-w C:\Program Files\INSTALL.LOG
2004-07-28 12:39 2,658,432 —-a-w C:\Program Files\jamrud_surti_dan_tejo.mp3
2002-07-26 09:02 153,088 —-a-w C:\Program Files\UNWISE.EXE
2004-07-03 07:48 32 -csha-w C:\WINDOWS\{3D569514-6772-4728-8C2A-B376F2A686CA}.dat
2004-10-07 01:58 32 -csha-w C:\WINDOWS\{EC8309B8-A719-4EB2-9911-8985519E88C0}.dat
2007-03-13 07:08 74,240 –sha-w C:\WINDOWS\system32\Recycler.exe
2007-06-30 14:04 4,388,896 –sha-w C:\WINDOWS\system32\drivers\fidbox.dat
2007-06-30 14:04 116,768 –sha-w C:\WINDOWS\system32\drivers\fidbox2.dat
.

((((((((((((((((((((((((((((( snapshot_2008-07-30_ 1.14.40.40 )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-07-31 15:17:17 61,440 —-a-r C:\WINDOWS\Installer\{CEFC581D-BEAE-4F75-989E-BD931970D8AD}\helpicon.exe
+ 2008-07-31 15:17:17 32,768 —-a-r C:\WINDOWS\Installer\{CEFC581D-BEAE-4F75-989E-BD931970D8AD}\maintenance_icon.exe
+ 2008-07-31 15:17:17 22,486 —-a-r C:\WINDOWS\Installer\{CEFC581D-BEAE-4F75-989E-BD931970D8AD}\register_icon.exe
+ 2008-07-31 15:17:17 57,344 —-a-r C:\WINDOWS\Installer\{CEFC581D-BEAE-4F75-989E-BD931970D8AD}\texticon.exe
- 2007-01-02 02:09:37 81,984 —-a-w C:\WINDOWS\system32\bdod.bin
+ 2008-07-31 16:02:50 81,984 —-a-w C:\WINDOWS\system32\bdod.bin
- 2002-01-04 20:40:18 487,424 —-a-w C:\WINDOWS\system32\msvcp70.dll
+ 2002-01-04 19:40:20 487,424 —-a-w C:\WINDOWS\system32\msvcp70.dll
- 2002-01-04 20:37:26 344,064 —-a-w C:\WINDOWS\system32\msvcr70.dll
+ 2002-01-04 18:37:28 344,064 —-a-w C:\WINDOWS\system32\msvcr70.dll
+ 2006-01-26 12:19:52 73,728 —-a-w C:\WINDOWS\system32\sockspy.dll
+ 2006-08-22 08:08:52 77,824 —-a-w C:\WINDOWS\system32\xcomm.dll
+ 2007-01-31 06:50:32 913,408 —-a-w C:\WINDOWS\system32\xreglib.dll
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{3AF93A29-A296-4AB0-9011-D85A559203B3}]
2007-10-09 22:33 2265088 –a—— C:\Program Files\TurboUpload\TurboUpload Toolbar\turboupload.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BackupNotify"="c:\Program Files\HP\Digital Imaging\bin\backupnotify.exe" [2003-06-22 21:25 24576]
"CTSyncU.exe"="C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe" [2007-07-17 11:03 868352]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 15:56 15360]
"Veoh"="C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" [2008-04-01 18:35 3587120]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"eTrust PestPatrol Active Protection"="none" [X]
"hpsysdrv"="c:\windows\system\hpsysdrv.exe" [1998-05-07 16:04 52736]
"HotKeysCmds"="C:\WINDOWS\System32\hkcmd.exe" [2003-04-07 07:07 114688]
"CamMonitor"="c:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exe" [2002-10-07 07:23 90112]
"KBD"="C:\HP\KBD\KBD.EXE" [2003-02-11 20:02 61440]
"UpdateManager"="C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" [2003-08-19 08:01 110592]
"Home Theater SchSvr"="C:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe" [2003-11-24 10:40 155648]
"Recguard"="C:\WINDOWS\SMINST\RECGUARD.EXE" [2002-09-13 21:42 212992]
"PS2"="C:\WINDOWS\system32\ps2.exe" [2002-10-16 16:57 81920]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2003-08-12 21:10 335872]
"DVDTray"="C:\Program Files\HP DVD\Umbrella\DVDTray.exe" [2003-07-23 10:41 65536]
"DAEMON Tools"="C:\Program Files\DAEMON Tools\daemon.exe" [2006-11-12 18:48 157592]
"razertra"="C:\Program Files\Razer\razertra.exe" [2004-02-25 23:27 208896]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 04:27 144784]
"ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" [2006-01-02 16:41 45056]
"CTCheck"="C:\Program Files\Creative\Creative ZEN\ZEN Media Explorer\CTCheck.exe" [2007-11-06 11:08 397312]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2008-01-01 18:17 185896]
"SpeedBitVideoAccelerator"="C:\Program Files\SpeedBit Video Accelerator\VideoAccelerator.exe" [2008-02-17 00:21 2283120]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2006-06-15 12:49 282624]
"BDMCon"="C:\Program Files\Softwin\BitDefender10\bdmcon.exe" [2007-04-02 16:48 290816]
"BDAgent"="C:\Program Files\Softwin\BitDefender10\bdagent.exe" [2007-03-26 15:49 69632]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2004-08-04 15:56 110592 C:\WINDOWS\system32\bthprops.cpl]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 15:56 15360]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [2003-07-07 08:20:40 233472]
Microsoft Find Fast.lnk - C:\Program Files\Microsoft Office\Office\FINDFAST.EXE [1997-08-06 111376]
Office Startup.lnk - C:\Program Files\Microsoft Office\Office\OSA.EXE [1997-08-06 51984]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=sockspy.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.yv12"= yv12vfw.dll

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk
backup=C:\WINDOWS\pss\Adobe Reader Speed Launch.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Updates from HP.lnk]
backup=C:\WINDOWS\pss\Updates from HP.lnkCommon Startup
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DownloadAccelerator
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FreeRAM XP
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
–a—— 2006-02-23 16:45 278528 C:\Program Files\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mmtask]
–a—— 2003-07-23 16:37 53248 C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
–a—— 2006-06-15 12:49 282624 C:\Program Files\QuickTime\qttask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony Ericsson PC Suite]
-ra—— 2005-10-26 17:17 159744 C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UnlockerAssistant]
–a—— 2006-09-08 01:19 15872 C:\Program Files\Unlocker\UnlockerAssistant.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Veoh]
–a—— 2008-04-01 18:35 3587120 C:\Program Files\Veoh Networks\Veoh\VeohClient.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"C:\\Program Files\\Orbitdownloader\\orbitdm.exe"=
"C:\\Program Files\\Orbitdownloader\\orbitnet.exe"=
"C:\\Program Files\\uTorrent\\uTorrent.exe"=
"C:\\Program Files\\Nakido\\nakido.exe"=

R2 Nakido;Nakido;C:\Program Files\Nakido\nakido.exe [2008-07-29 09:32]
R2 sbbotdi;sbbotdi;C:\PROGRA~1\SPEEDB~1\sbbotdi.sys [2008-02-17 00:21]
R2 VideoAcceleratorService;VideoAcceleratorService;C:\PROGRA~1\SPEEDB~1\VideoAcceleratorService.exe [2008-02-17 00:21]
R3 Cap7134;ASUS TV7134 WDM Video Capture;C:\WINDOWS\system32\DRIVERS\Cap7134.sys [2003-05-09 10:16]
R3 PhTVTune;ASUS WDM TV Tuner;C:\WINDOWS\system32\DRIVERS\PhTVTune.sys [2003-04-28 22:33]
S3 mamotou;mamotou;C:\WINDOWS\system32\DRIVERS\mamotou.sys [2005-11-07 17:50]
S3 NPF;NetGroup Packet Filter Driver;C:\WINDOWS\system32\drivers\npf.sys [2005-08-03 05:10]
S3 SIVDRIVER;SIV Kernel Driver;C:\Documents and Settings\Owner\Local Settings\Temp\wz872a\SIVX32.sys []
S3 z520bus;Sony Ericsson 520 driver (WDM);C:\WINDOWS\system32\DRIVERS\z520bus.sys [2006-03-13 18:54]
S3 z520mdfl;Sony Ericsson 520 USB WMC Modem Filter;C:\WINDOWS\system32\DRIVERS\z520mdfl.sys [2006-03-13 18:54]
S3 z520mdm;Sony Ericsson 520 USB WMC Modem Drivers;C:\WINDOWS\system32\DRIVERS\z520mdm.sys [2006-03-13 18:54]
S3 z520mgmt;Sony Ericsson 520 USB WMC Device Management Drivers;C:\WINDOWS\system32\DRIVERS\z520mgmt.sys [2006-03-13 18:54]
S3 z520obex;Sony Ericsson 520 USB WMC OBEX Interface Drivers;C:\WINDOWS\system32\DRIVERS\z520obex.sys [2006-03-13 18:54]
.
**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-08-01 00:03:55
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2008-08-01 0:11:28
ComboFix-quarantined-files.txt 2008-07-31 16:11:04
ComboFix2.txt 2008-07-29 17:15:03

Pre-Run: 3,096,027,136 bytes free
Post-Run: 3,105,226,752 bytes free

255 — E O F — 2008-07-31 12:39:21


Logfile of HijackThis v1.99.1
Scan saved at 12:20:42 AM, on 8/1/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\windows\system\hpsysdrv.exe
C:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\HP DVD\Umbrella\DVDTray.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Razer\razertra.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Razer\razerofa.exe
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Microsoft Office\Office\OSA.EXE
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\Nakido\nakido.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\SPEEDB~1\VideoAcceleratorService.exe
C:\PROGRA~1\SPEEDB~1\VideoAcceleratorEngine.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Orbitdownloader\orbitdm.exe
C:\Program Files\Orbitdownloader\orbitnet.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://sg.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = file://C:\PROGRA~1\SPEEDB~1\proxy.pac
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 200.238.92.106:3128
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files\Orbitdownloader\orbitcth.dll
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll (file missing)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: TBSB07218 - {3AF93A29-A296-4AB0-9011-D85A559203B3} - C:\Program Files\TurboUpload\TurboUpload Toolbar\turboupload.dll
O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [CamMonitor] c:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [Home Theater SchSvr] "C:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe"
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [DVDTray] "C:\Program Files\HP DVD\Umbrella\DVDTray.exe"
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [razertra] C:\Program Files\Razer\razertra.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [CTCheck] C:\Program Files\Creative\Creative ZEN\ZEN Media Explorer\CTCheck.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [eTrust PestPatrol Active Protection] none
O4 - HKLM\..\Run: [SpeedBitVideoAccelerator] "C:\Program Files\SpeedBit Video Accelerator\VideoAccelerator.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [BackupNotify] c:\Program Files\HP\Digital Imaging\bin\backupnotify.exe
O4 - HKCU\..\Run: [CTSyncU.exe] "C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Find Fast.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
O4 - Global Startup: Office Startup.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE
O8 - Extra context menu item: &Download by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/201
O8 - Extra context menu item: &Grab video by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/204
O8 - Extra context menu item: Do&wnload selected by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/203
O8 - Extra context menu item: Down&load all by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/202
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/SU/SU1.5/ocx/15030/CTSUEng.cab
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS…er.cab31267.cab
O16 - DPF: {48884C41-EFAC-433D-958A-9FADAC41408E} (EGamesPlugin Class) - https://www.e-games.com.my/com/EGamesPlugin.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/pr02/resources/MSNPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/EN-SG/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {62789780-B744-11D0-986B-00609731A21D} (Autodesk MapGuide ActiveX Control) - http://www.can.com.sg/mwf/mgaxctrl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co…b?1114309379109
O16 - DPF: {6C269571-C6D7-4818-BCA4-32A035E8C884} (Creative Software AutoUpdate) - http://www.creative.com/softwareupdate/su/…101/CTSUEng.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1135323109546
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.putfile.com/includes/ImageUploader4.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe…nt.cab31267.cab
O16 - DPF: {8EF27A70-DD04-11D6-B7F6-00A0C9CD5F8A} - http://www.quikshield.com/qshsetup.exe
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse…pDownloader.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe…nt.cab56907.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/softwareupdate/su/…15102/CTPID.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/Solit…wn.cab31267.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Nakido - Nakido - C:\Program Files\Nakido\nakido.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
O23 - Service: VideoAcceleratorService - Speedbit Ltd. - C:\PROGRA~1\SPEEDB~1\VideoAcceleratorService.exe

Oh I got this error when I run hijackthis scan..

An unexpected error has occurred at procedure: modRegistry_IniGetString(sFile=system.ini, sSection=boot, sValue=Shell)
Error #5 - Invalid procedure call or argument

Please email me at [removed], reporting the following:
* What you were trying to fix when the error occurred, if applicable
* How you can reproduce the error
* A complete HijackThis scan log, if possible

Windows version: Windows NT 5.01.2600
MSIE version: 7.0.5730.13
HijackThis version: 1.99.1

This message has been copied to your clipboard.
Click OK to continue the rest of the scan.

Aniwae,the .srt file is not a virus,isnt it?
Post #10
Good job :thumbup:

  • Click START then RUN
  • Now type Combofix /u in the runbox and click OK. Note the space between the X and the U, it needs to be there.

    • [external image: Posted Image]


    Here's my usual all clean post

    Log looks good :D


    • Make your Internet Explorer more secure - This can be done by following these simple instructions:
      • From within Internet Explorer click on the Tools menu and then click on Options.
      • Click once on the Security tab
      • Click once on the Internet icon so it becomes highlighted.
      • Click once on the Custom Level button.
      • Change the Download signed ActiveX controls to Prompt
      • Change the Download unsigned ActiveX controls to Disable
      • Change the Initialize and script ActiveX controls not marked as safe to Disable
      • Change the Installation of desktop items to Prompt
      • Change the Launching programs and files in an IFRAME to Prompt
      • Change the Navigate sub-frames across different domains to Prompt
      • When all these settings have been made, click on the OK button.
      • If it prompts you as to whether or not you want to save the settings, press the Yes button.
    • Next press the Apply button and then the OK to exit the Internet Properties page.
  • Update your AntiVirus Software - It is imperative that you update your Antivirus software at least once a week
    (Even more if you wish). If you do not update your antivirus software then it will not be able to catch any of the new variants that may come out.

  • Use a Firewall - I can not stress how important it is that you use a Firewall on your computer.
    Without a firewall your computer is succeptible to being hacked and taken over.
    I am very serious about this and see it happen almost every day with my clients.
    Simply using a Firewall in its default configuration can lower your risk greatly.

    For a tutorial on Firewalls and a listing of some available ones see the link below:
    Note: I no longer suggest Zone Alarm

    Understanding and Using Firewalls

  • Visit Microsoft's Windows Update Site Frequently - It is important that you visit http://www.windowsupdate.com regularly.
    This will ensure your computer has always the latest security updates available installed on your computer.
    If there are new updates to install, install them immediately, reboot your computer, and revisit the site
    until there are no more critical updates.

  • MVPS Hosts file replaces your current HOSTS file with one containing well known ad sites and other bad sites. Basically, this prevents your computer from connecting to those sites by redirecting them to 127.0.0.1 which is your local computer, meaning it will be difficult to infect yourself in the future.
  • Winpatrol

  • Update all these programs regularly - Make sure you update all the programs I have listed regularly.
    Without regular updates you WILL NOT be protected when new malicious programs are released.

Only run one Anti-Virus and Firewall program.

I would also suggest you read this:
So how did I get infected in the first place?
by Tony Klein
Post #11
Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance. If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread. Everyone else please begin a New Topic.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI