externí disk - vir

[vyosek]

Perou se tam dva antiviry - AVG a MSE - ktery dame do pryc Ja jsem pro ponechani MSE...

[pogo23]

odinstalovala jsem AVG

[vyosek]

Jeste to projedte removerem http://download.avg.com/filedir/util/su ... 1_1184.exe

Pokud nemate, tak presunte Combofix na plochu

• Spustte poznamkovy blok (Start-spustit-notepad)
• Zkopirujte skript nize

• Kód: Vybrat vše

  KillAll::
  
  Folder::
  c:\program files (x86)\Common Files\AVG Secure Search
  c:\program files (x86)\AVG Secure Search
  c:\windows\system32\drivers\AVG
  c:\programdata\AVG2012
  
  Registry::
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
  "Malwarebytes' Anti-Malware"=-
  
  Driver::
  vToolbarUpdater
  iissvcs
  apphost
  
  NetSvc::
  iissvcs
  apphost
  
  DDS::
  uStart Page = 
  
  Firefox::
  FF - ProfilePath - c:\users\Karca\AppData\Roaming\Mozilla\Firefox\Profiles\6ku0smyu.default\
  FF - prefs.js: keyword.URL - hxxp://isearch.avg.com/search?cid=%7B07 ... &sap=ku&q=
  
  RegLock::
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\Elevation]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\LocalServer32]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\TypeLib]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\ProxyStubClsid32]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\TypeLib]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
  [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
  
  Reboot::
  

• Ulozte vytvoreny TXT jako CFScript.txt
• Pretahnete vytvoreny CFScript.txt nad Combofix a pustte (viz obrazek nize)
  
• Po aplikaci skriptu (a pripadnem restartu) na Vas vypadne log, jeho obsah sem vlozte

Muze se stat, ze po aplikaci skriptu nenabehnou windows, v tomto pripade restartuje PC a mackejte F8 a zvolte Posledni znamou konfiguraci

[pogo23]

ComboFix 11-11-01.04 - Karca 01.11.2011 21:02:53.3.2 - x64
Microsoft Windows 7 Professional 6.1.7600.0.1250.420.1029.18.2046.1287 [GMT 1:00]
Spuštěný z: c:\users\Karca\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Karca\Desktop\CFScript.txt
AV: Microsoft Security Essentials *Disabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: Microsoft Security Essentials *Disabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-10-01 do 2011-11-01 )))))))))))))))))))))))))))))))
.
.
2011-11-01 20:55 . 2011-11-01 20:55 69000 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{ABFF76C9-DDCE-4306-9E2A-ECEFD93B92F6}\offreg.dll
2011-11-01 20:53 . 2011-11-01 20:53 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-11-01 20:53 . 2011-11-01 20:53 -------- d-----w- c:\users\Classic .NET AppPool\AppData\Local\temp
2011-11-01 18:25 . 2011-10-06 19:16 8570192 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{ABFF76C9-DDCE-4306-9E2A-ECEFD93B92F6}\mpengine.dll
2011-10-31 18:40 . 2011-10-31 18:40 -------- d-----w- c:\users\Karca\AppData\Roaming\com.chromaom.SeamlessStudio
2011-10-31 18:40 . 2011-10-31 18:40 -------- d-----w- c:\program files (x86)\Seamless Studio
2011-10-30 11:40 . 2011-10-30 11:41 -------- d-----w- C:\rsit
2011-10-29 13:27 . 2011-10-29 13:27 -------- d-----w- c:\users\Default\AppData\Local\Microsoft Help
2011-10-29 12:05 . 2011-04-28 03:58 552448 ----a-w- c:\windows\system32\drivers\bthport.sys
2011-10-29 12:05 . 2011-04-28 03:58 80384 ----a-w- c:\windows\system32\drivers\BTHUSB.SYS
2011-10-29 09:56 . 2011-10-29 09:56 -------- d-----w- c:\users\Karca\AppData\Roaming\Malwarebytes
2011-10-29 09:55 . 2011-10-29 09:55 -------- d-----w- c:\programdata\Malwarebytes
2011-10-29 09:55 . 2011-10-29 09:56 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2011-10-29 09:55 . 2011-08-31 15:00 25416 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-10-29 06:11 . 2011-10-29 06:11 -------- d-----w- c:\windows\SysWow64\Wat
2011-10-29 06:08 . 2011-10-29 06:11 -------- d-----w- c:\windows\system32\WAT
2011-10-29 00:56 . 2009-09-10 06:28 311808 ----a-w- c:\windows\system32\msv1_0.dll
2011-10-29 00:56 . 2009-09-10 05:52 257024 ----a-w- c:\windows\SysWow64\msv1_0.dll
2011-10-29 00:34 . 2009-11-25 10:47 99176 ----a-w- c:\windows\SysWow64\PresentationHostProxy.dll
2011-10-29 00:34 . 2009-11-25 10:47 49472 ----a-w- c:\windows\SysWow64\netfxperf.dll
2011-10-29 00:34 . 2009-11-25 10:47 297808 ----a-w- c:\windows\SysWow64\mscoree.dll
2011-10-29 00:34 . 2009-11-25 10:47 295264 ----a-w- c:\windows\SysWow64\PresentationHost.exe
2011-10-29 00:34 . 2009-11-25 10:47 1130824 ----a-w- c:\windows\SysWow64\dfshim.dll
2011-10-29 00:34 . 2009-11-25 10:47 109912 ----a-w- c:\windows\system32\PresentationHostProxy.dll
2011-10-29 00:34 . 2009-11-25 10:47 320352 ----a-w- c:\windows\system32\PresentationHost.exe
2011-10-29 00:34 . 2009-11-25 10:47 48960 ----a-w- c:\windows\system32\netfxperf.dll
2011-10-29 00:34 . 2009-11-25 10:47 444752 ----a-w- c:\windows\system32\mscoree.dll
2011-10-29 00:34 . 2009-11-25 10:47 1942856 ----a-w- c:\windows\system32\dfshim.dll
2011-10-29 00:33 . 2010-02-23 08:16 294912 ----a-w- c:\windows\system32\browserchoice.exe
2011-10-29 00:12 . 2011-10-29 11:01 -------- d-----w- C:\UsbFix
2011-10-28 19:51 . 2011-10-28 19:51 -------- d-sh--w- c:\programdata\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}
2011-10-28 09:18 . 2011-06-21 06:27 1896832 ----a-w- c:\windows\system32\drivers\tcpip.sys
2011-10-28 09:18 . 2011-07-09 05:14 2048 ----a-w- c:\windows\system32\tzres.dll
2011-10-28 09:18 . 2011-07-09 04:30 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2011-10-28 09:16 . 2010-06-29 05:02 1413632 ----a-w- c:\windows\SysWow64\ole32.dll
2011-10-28 09:15 . 2011-09-06 03:07 3134976 ----a-w- c:\windows\system32\win32k.sys
2011-10-28 09:13 . 2010-06-19 06:53 52224 ----a-w- c:\windows\system32\rtutils.dll
2011-10-28 09:13 . 2010-06-19 06:23 37376 ----a-w- c:\windows\SysWow64\rtutils.dll
2011-10-28 09:11 . 2010-08-21 06:38 1024512 ----a-w- c:\windows\system32\wmpmde.dll
2011-10-28 09:10 . 2011-07-16 05:04 5120 ---ha-w- c:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2011-10-28 09:02 . 2010-10-16 05:17 720896 ----a-w- c:\windows\system32\odbc32.dll
2011-10-28 09:02 . 2010-10-16 05:16 1425408 ----a-w- c:\program files\Common Files\System\ado\msado15.dll
2011-10-28 09:02 . 2010-10-16 04:34 573440 ----a-w- c:\windows\SysWow64\odbc32.dll
2011-10-28 09:02 . 2010-10-16 05:16 495616 ----a-w- c:\program files\Common Files\System\ado\msadox.dll
2011-10-28 09:02 . 2010-10-16 05:16 466944 ----a-w- c:\program files\Common Files\System\ado\msadomd.dll
2011-10-28 09:02 . 2010-10-16 05:16 258048 ----a-w- c:\program files\Common Files\System\msadc\msadco.dll
2011-10-28 09:02 . 2010-10-16 04:33 372736 ----a-w- c:\program files (x86)\Common Files\System\ado\msadox.dll
2011-10-28 09:02 . 2010-10-16 04:33 352256 ----a-w- c:\program files (x86)\Common Files\System\ado\msadomd.dll
2011-10-28 09:02 . 2010-10-16 04:33 987136 ----a-w- c:\program files (x86)\Common Files\System\ado\msado15.dll
2011-10-28 09:02 . 2010-10-16 04:33 208896 ----a-w- c:\program files (x86)\Common Files\System\msadc\msadco.dll
2011-10-28 09:02 . 2010-08-27 06:14 236032 ----a-w- c:\windows\system32\srvsvc.dll
2011-10-28 09:02 . 2010-08-27 05:46 9728 ----a-w- c:\windows\SysWow64\sscore.dll
2011-10-28 09:01 . 2011-06-23 05:29 5507968 ----a-w- c:\windows\system32\ntoskrnl.exe
2011-10-28 09:01 . 2011-06-23 04:38 3957120 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2011-10-28 09:01 . 2011-06-23 04:38 3902336 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2011-10-27 18:10 . 2011-10-27 19:32 -------- d-----w- c:\users\Karca\AppData\Roaming\AVG
2011-10-27 17:57 . 2011-10-29 10:58 301568 ----a-w- c:\windows\SysWow64\cmd.execf
2011-10-27 01:27 . 2009-12-29 08:03 220672 ----a-w- c:\windows\system32\wintrust.dll
2011-10-27 01:27 . 2009-12-29 06:55 172032 ----a-w- c:\windows\SysWow64\wintrust.dll
2011-10-27 01:27 . 2010-01-09 07:19 139264 ----a-w- c:\windows\system32\cabview.dll
2011-10-27 01:27 . 2010-01-09 06:52 132608 ----a-w- c:\windows\SysWow64\cabview.dll
2011-10-27 01:19 . 2011-10-06 19:16 8570192 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2011-10-27 01:18 . 2011-10-27 01:18 917840 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{2CA851D1-07B0-4C54-8ADC-3513FA0E9211}\gapaengine.dll
2011-10-27 01:17 . 2010-10-19 20:51 270720 ------w- c:\windows\system32\MpSigStub.exe
2011-10-27 01:14 . 2011-10-27 01:14 -------- d-----w- c:\program files (x86)\Microsoft Security Client
2011-10-27 01:13 . 2011-10-27 01:14 -------- d-----w- c:\program files\Microsoft Security Client
2011-10-27 01:13 . 2010-04-09 11:06 374664 ----a-w- c:\windows\system32\drivers\netio.sys
2011-10-27 01:10 . 2011-10-31 15:07 -------- d-----w- c:\programdata\MFAData
2011-10-27 01:03 . 2011-10-30 11:41 -------- d-----w- c:\program files (x86)\Trend Micro
2011-10-25 20:41 . 2011-10-25 20:44 -------- d-----w- c:\users\Karca\AppData\Roaming\GHISLER
2011-10-25 20:41 . 2011-10-25 20:41 -------- d-----w- C:\totalcmd
2011-10-25 20:41 . 2010-12-17 05:56 545 ----a-w- c:\windows\UC.PIF
2011-10-25 20:41 . 2010-12-17 05:56 545 ----a-w- c:\windows\RAR.PIF
2011-10-25 20:41 . 2010-12-17 05:56 545 ----a-w- c:\windows\NOCLOSE.PIF
2011-10-25 20:41 . 2010-12-17 05:56 545 ----a-w- c:\windows\LHA.PIF
2011-10-25 20:41 . 2010-12-17 05:56 545 ----a-w- c:\windows\ARJ.PIF
2011-10-18 14:35 . 2011-10-18 14:39 -------- d-----w- c:\windows\system32\appmgmt
2011-10-18 13:53 . 2011-10-20 19:12 -------- d-----w- c:\programdata\FLEXnet
2011-10-17 16:55 . 2011-10-17 16:57 -------- d-----w- c:\users\Karca\Adobe Flash CS4
2011-10-17 16:53 . 2011-10-17 16:54 -------- d-----w- c:\users\Karca\Adobe InDesign CS4
2011-10-17 16:50 . 2011-10-17 16:52 -------- d-----w- c:\users\Karca\Adobe Photoshop CS4 (64 Bit)
2011-10-17 16:49 . 2011-10-17 16:49 -------- d-----w- c:\users\Karca\Adobe Photoshop CS4
2011-10-17 16:47 . 2011-10-17 16:47 -------- d-----w- c:\users\Karca\Adobe Illustrator CS4
2011-10-17 16:47 . 2011-10-17 16:47 -------- d-----w- c:\programdata\ALM
2011-10-17 16:45 . 2011-10-17 16:46 -------- d-----w- c:\users\Karca\Adobe Fireworks CS4
2011-10-17 16:42 . 2011-10-17 16:44 -------- d-----w- c:\users\Karca\Adobe Dreamweaver CS4
2011-10-17 16:40 . 2008-04-07 03:38 24416 ----a-r- c:\windows\system32\AdobePDFUI.dll
2011-10-17 16:33 . 2011-10-17 16:38 -------- d-----w- c:\users\Karca\Acrobat 9.0
2011-10-17 16:26 . 2011-10-17 16:26 -------- d-----w- c:\windows\SysWow64\spool
2011-10-17 16:26 . 2011-10-17 16:26 -------- d-----w- c:\program files (x86)\Adobe Media Player
2011-10-17 16:25 . 2011-10-17 16:25 -------- d-----w- c:\users\Karca\Adobe Bridge CS4
2011-10-17 16:24 . 2011-10-31 18:40 -------- d-----w- c:\program files (x86)\Common Files\Adobe AIR
2011-10-17 16:24 . 2011-10-17 16:24 -------- d-----w- c:\users\Karca\Adobe Extension Manager CS4
2011-10-17 16:23 . 2011-10-17 16:23 -------- d-----w- c:\program files\Common Files\Macrovision Shared
2011-10-17 16:23 . 2011-10-17 16:52 -------- d-----w- c:\program files\Common Files\Adobe
2011-10-17 16:21 . 2011-10-17 16:21 -------- d-----w- c:\program files (x86)\Common Files\Macrovision Shared
2011-10-17 16:18 . 2011-10-17 16:26 -------- d-----w- c:\programdata\Protexis
2011-10-17 16:17 . 2011-10-17 16:18 -------- d-----w- c:\users\Karca\AppData\Roaming\Corel
2011-10-17 16:11 . 2011-10-17 16:11 -------- d-----w- c:\program files (x86)\Microsoft SDKs
2011-10-17 16:11 . 2011-10-17 16:11 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 9.0
2011-10-17 16:09 . 2011-10-17 16:09 -------- d-----w- c:\program files (x86)\Common Files\Corel
2011-10-17 16:08 . 2011-10-17 16:18 -------- d-----w- c:\programdata\Corel
2011-10-17 16:08 . 2011-10-17 16:08 -------- d-----w- c:\program files (x86)\Common Files\Protexis
2011-10-17 15:58 . 2011-10-17 15:58 -------- d-----w- c:\program files (x86)\Corel
2011-10-16 17:22 . 2011-10-20 19:03 -------- d-----w- c:\users\Karca\AppData\Roaming\PSpad
2011-10-16 15:45 . 2011-10-16 15:45 -------- d-----w- c:\program files (x86)\PSPad editor
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-09-26 00:03 . 2011-09-26 00:03 107832 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2011-09-12 21:50 . 2011-09-12 21:50 404640 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2011-08-16 06:48 . 2011-09-12 22:00 8862544 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{9648DB63-A206-4864-B595-556F8020C3E8}\mpengine.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2011-10-30_22.21.27 )))))))))))))))))))))))))))))))))))))))))
.
- 2009-07-14 04:54 . 2011-10-30 09:05 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-07-14 04:54 . 2011-10-31 06:43 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-07-14 04:54 . 2011-10-30 09:05 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-07-14 04:54 . 2011-10-31 06:43 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-07-14 04:54 . 2011-10-30 09:05 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-07-14 04:54 . 2011-10-31 06:43 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2011-09-12 11:33 . 2011-11-01 16:49 28508 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2009-07-14 05:10 . 2011-11-01 16:49 33398 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
+ 2011-09-12 00:44 . 2011-10-31 06:44 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2011-09-12 00:44 . 2011-10-30 12:03 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2011-09-12 00:44 . 2011-10-30 12:03 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2011-09-12 00:44 . 2011-10-31 06:44 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-07-14 04:54 . 2011-10-31 06:44 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-07-14 04:54 . 2011-10-30 12:03 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-07-14 04:46 . 2011-10-31 22:32 83984 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat
- 2011-09-12 07:12 . 2011-10-30 10:45 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2011-09-12 07:12 . 2011-11-01 20:08 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2011-09-12 07:12 . 2011-10-30 10:45 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2011-09-12 07:12 . 2011-11-01 20:08 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2011-10-31 18:39 . 2011-10-31 18:39 43520 c:\windows\Installer\291af37.msi
+ 2011-10-31 18:39 . 2011-10-31 18:39 32256 c:\windows\Installer\291af24.msi
+ 2011-09-12 23:03 . 2011-10-31 00:36 34144 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\oisicon.exe
- 2011-09-12 23:03 . 2011-10-29 13:29 34144 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\oisicon.exe
- 2011-09-12 23:03 . 2011-10-29 13:29 42848 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\msouc.exe
+ 2011-09-12 23:03 . 2011-10-31 00:36 42848 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\msouc.exe
- 2011-09-12 23:03 . 2011-10-29 13:29 19296 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\cagicon.exe
+ 2011-09-12 23:03 . 2011-10-31 00:36 19296 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\cagicon.exe
+ 2010-02-25 09:07 . 2010-02-25 09:07 49488 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\VBAJET32.DLL
+ 2010-01-09 19:47 . 2010-01-09 19:47 29528 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\THOCRAPI.DLL
+ 2010-03-22 19:30 . 2010-03-22 19:30 40296 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\RECALL.DLL
+ 2010-03-22 18:36 . 2010-03-22 18:36 82848 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\PEOPLEDATAHANDLER.DLL
+ 2010-03-23 08:57 . 2010-03-23 08:57 43352 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\OUTLRPC.DLL
+ 2010-03-23 08:57 . 2010-03-23 08:57 30560 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\OUTLACCT.DLL
+ 2010-03-22 18:36 . 2010-03-22 18:36 45984 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\OSETUPPS.DLL
+ 2010-03-22 18:36 . 2010-03-22 18:36 15776 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\OMUOPTINPS.DLL
+ 2010-02-28 00:13 . 2010-02-28 00:13 20880 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\MUOPTIN.DLL
+ 2010-03-01 03:17 . 2010-03-01 03:17 14736 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\MSOCFUIU.DLL
+ 2010-01-10 17:48 . 2010-01-10 17:48 18832 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\MSOCFU.DLL
+ 2010-03-01 03:09 . 2010-03-01 03:09 61832 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\MSAEXP30.DLL
+ 2010-03-22 19:30 . 2010-03-22 19:30 20864 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\MLSHEXT.DLL
+ 2010-03-12 22:59 . 2010-03-12 22:59 14208 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\LOBICUI.DLL
+ 2010-03-22 18:36 . 2010-03-22 18:36 58232 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\EXP_XPS.DLL
+ 2010-03-22 19:29 . 2010-03-22 19:29 87408 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\DLGSETP.DLL
+ 2010-03-22 18:51 . 2010-03-22 18:51 44480 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\ACERCLR.DLL
+ 2010-03-22 18:51 . 2010-03-22 18:51 14776 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\ACEODTXT.DLL
+ 2010-03-22 18:51 . 2010-03-22 18:51 14776 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\ACEODEXL.DLL
+ 2010-03-22 18:51 . 2010-03-22 18:51 14776 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\ACEODDBS.DLL
+ 2010-03-23 08:54 . 2010-03-23 08:54 37776 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\ACEERR.DLL
+ 2010-02-28 02:33 . 2010-02-28 02:33 93576 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\ACCOLK.DLL
+ 2011-09-12 23:01 . 2011-09-12 23:01 11656 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\ACCESSPL.DLL
+ 2011-09-12 23:01 . 2011-09-12 23:01 11656 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\ACC12PL.DLL
+ 2011-09-12 23:01 . 2011-09-12 23:01 11656 c:\windows\Installer\$PatchCache$\Managed\00004109501100000000000000F01FEC\14.0.4763\ACCESSPL.DLL
+ 2011-09-12 23:01 . 2011-09-12 23:01 11656 c:\windows\Installer\$PatchCache$\Managed\00004109501100000000000000F01FEC\14.0.4763\ACC12PL.DLL
+ 2011-10-31 06:50 . 2011-10-31 06:50 93696 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\d4add0ba0208a6ffd2573d1a9272677e\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.ni.dll
+ 2011-10-31 06:49 . 2011-10-31 06:49 43520 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\73327ffd971b116f483a5f54b0f2c0b4\Microsoft.VisualStudio.Tools.Office.Contract.v10.0.ni.dll
+ 2011-10-31 06:49 . 2011-10-31 06:49 86016 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\70a378d6837d7be1c29fd23d8d705d4d\Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.ni.dll
+ 2011-10-31 06:49 . 2011-10-31 06:49 84992 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\68ee7dc2434752fae483de6e23c19dd8\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.ni.dll
+ 2011-10-31 06:49 . 2011-10-31 06:49 44544 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\3b33e2a606362714d446421b51cbd1f5\Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.ni.dll
+ 2011-10-31 00:40 . 2011-10-31 00:40 58368 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\d4ba3060648442830ba8181caa308ef4\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.ni.dll
+ 2011-10-31 06:48 . 2011-10-31 06:48 66560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\ccda432ab11eee4a335f2c790797f748\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.ni.dll
+ 2011-10-31 00:40 . 2011-10-31 00:40 28160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\9fa13b2ec9c48a78c57dd0b4cf5a4f70\Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.ni.dll
+ 2011-10-31 00:40 . 2011-10-31 00:40 86016 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\899c5f3dd0e606c6b68da79d3e667038\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.ni.dll
+ 2011-10-31 00:40 . 2011-10-31 00:40 51712 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\81f067c81ab82b2971cc5f545c7f7d2e\Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.ni.dll
+ 2011-10-31 00:40 . 2011-10-31 00:40 28160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\6414133d645a6e56a4dcdf062492076a\Microsoft.VisualStudio.Tools.Office.Contract.v10.0.ni.dll
+ 2011-10-31 00:35 . 2011-10-31 00:35 11656 c:\windows\assembly\GAC_MSIL\Policy.12.0.Microsoft.Office.Interop.Access\14.0.0.0__71e9bce111e9429c\Policy.12.0.Microsoft.Office.Interop.Access.dll
- 2011-09-12 23:01 . 2011-09-12 23:01 11656 c:\windows\assembly\GAC_MSIL\Policy.12.0.Microsoft.Office.Interop.Access\14.0.0.0__71e9bce111e9429c\Policy.12.0.Microsoft.Office.Interop.Access.dll
+ 2011-10-31 00:35 . 2011-10-31 00:35 11656 c:\windows\assembly\GAC_MSIL\Policy.11.0.Microsoft.Office.Interop.Access\14.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Access.dll
- 2011-09-12 23:01 . 2011-09-12 23:01 11656 c:\windows\assembly\GAC_MSIL\Policy.11.0.Microsoft.Office.Interop.Access\14.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Access.dll
+ 2011-10-31 00:35 . 2011-10-31 00:35 83896 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.dll
+ 2011-10-31 00:35 . 2011-10-31 00:35 41408 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.dll
+ 2011-10-31 00:35 . 2011-10-31 00:35 63408 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.dll
+ 2011-10-31 00:35 . 2011-10-31 00:35 77752 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.dll
+ 2011-10-31 00:35 . 2011-10-31 00:35 23976 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Contract.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Contract.v10.0.dll
+ 2011-10-31 00:35 . 2011-10-31 00:35 62392 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.ContainerControl.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.ContainerControl.v10.0.dll
+ 2011-10-31 00:35 . 2011-10-31 00:35 32688 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.dll
+ 2011-10-31 00:35 . 2011-10-31 00:35 35256 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.dll
+ 2011-10-31 00:35 . 2011-10-31 00:35 24496 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Contract.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.dll
+ 2011-10-31 00:35 . 2011-10-31 00:35 41408 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.dll
+ 2011-09-14 01:37 . 2011-11-01 09:27 6470 c:\windows\system32\wdi\ERCQueuedResolutions.dat
- 2011-09-14 01:37 . 2011-10-29 06:09 6470 c:\windows\system32\wdi\ERCQueuedResolutions.dat
+ 2011-09-12 07:03 . 2011-11-01 16:49 9150 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-1792874667-415938777-445698695-1000_UserData.bin
- 2011-10-30 09:06 . 2011-10-30 09:06 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2011-11-01 20:54 . 2011-11-01 20:54 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2011-10-30 09:06 . 2011-10-30 09:06 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2011-11-01 20:54 . 2011-11-01 20:54 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2011-09-12 06:58 . 2011-11-01 08:59 240004 c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_FastS4.bin
- 2009-07-14 02:36 . 2011-10-30 18:57 796376 c:\windows\system32\perfh009.dat
+ 2009-07-14 02:36 . 2011-11-01 16:52 796376 c:\windows\system32\perfh009.dat
- 2009-07-14 15:18 . 2011-10-30 18:57 812578 c:\windows\system32\perfh005.dat
+ 2009-07-14 15:18 . 2011-11-01 16:52 812578 c:\windows\system32\perfh005.dat
+ 2009-07-14 02:36 . 2011-11-01 16:52 173832 c:\windows\system32\perfc009.dat
- 2009-07-14 02:36 . 2011-10-30 18:57 173832 c:\windows\system32\perfc009.dat
- 2009-07-14 15:18 . 2011-10-30 18:57 198338 c:\windows\system32\perfc005.dat
+ 2009-07-14 15:18 . 2011-11-01 16:52 198338 c:\windows\system32\perfc005.dat
+ 2011-10-19 06:34 . 2011-10-31 22:23 572784 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat
+ 2009-07-14 05:01 . 2011-11-01 20:54 477988 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
- 2009-07-14 05:01 . 2011-10-29 13:29 477988 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2011-04-19 03:54 . 2011-04-19 03:54 227328 c:\windows\Installer\34fabe7.msi
+ 2011-09-12 23:03 . 2011-10-31 00:36 415584 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\pubs.exe
- 2011-09-12 23:03 . 2011-10-29 13:29 415584 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\pubs.exe
+ 2011-09-12 23:03 . 2011-10-31 00:36 303456 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\outicon.exe
- 2011-09-12 23:03 . 2011-10-29 13:29 303456 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\outicon.exe
- 2011-09-12 23:03 . 2011-10-29 13:29 571232 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\misc.exe
+ 2011-09-12 23:03 . 2011-10-31 00:36 571232 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\misc.exe
- 2011-09-12 23:03 . 2011-10-29 13:29 326496 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\joticon.exe
+ 2011-09-12 23:03 . 2011-10-31 00:36 326496 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\joticon.exe
+ 2011-09-12 23:03 . 2011-10-31 00:36 469856 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\inficon.exe
- 2011-09-12 23:03 . 2011-10-29 13:29 469856 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\inficon.exe
- 2011-09-12 23:03 . 2011-10-29 13:29 178528 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
+ 2011-09-12 23:03 . 2011-10-31 00:36 178528 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
- 2011-09-12 22:55 . 2011-09-12 22:55 571232 c:\windows\Installer\{90140000-006E-0405-0000-0000000FF1CE}\misc.exe
+ 2011-10-31 00:33 . 2011-10-31 00:33 571232 c:\windows\Installer\{90140000-006E-0405-0000-0000000FF1CE}\misc.exe
+ 2009-09-04 07:02 . 2009-09-04 07:02 591680 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.6029\MSLID.DLL
+ 2010-02-28 01:13 . 2010-02-28 01:13 579968 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\VPREVIEW.EXE
+ 2010-01-09 19:47 . 2010-01-09 19:47 133512 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\TWCUTCHR.DLL
+ 2010-02-28 00:18 . 2010-02-28 00:18 105344 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\TRANSMGR.DLL
+ 2010-03-01 03:09 . 2010-03-01 03:09 524176 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\SOA.DLL
+ 2010-03-25 08:23 . 2010-03-25 08:23 203632 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\SHAREPOINTPROVIDER.DLL
+ 2010-02-28 00:13 . 2010-02-28 00:13 521616 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\SELFCERT.EXE
+ 2010-03-22 19:29 . 2010-03-22 19:29 340400 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\SCNPST64.DLL
+ 2010-03-22 19:30 . 2010-03-22 19:30 329640 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\SCNPST32.DLL
+ 2010-03-23 08:57 . 2010-03-23 08:57 415088 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\RTFHTML.DLL
+ 2010-03-01 02:56 . 2010-03-01 02:56 647552 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\PTXT9.DLL
+ 2010-03-22 19:30 . 2010-03-22 19:30 308584 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\PSTPRX32.DLL
+ 2010-02-28 00:22 . 2010-02-28 00:22 139136 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\PRTF9.DLL
+ 2010-03-23 08:57 . 2010-03-23 08:57 329104 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\OUTLPH.DLL
+ 2010-03-22 19:30 . 2010-03-22 19:30 523656 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\OUTLMIME.DLL
+ 2010-03-22 19:30 . 2010-03-22 19:30 122720 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\OUTLCTL.DLL
+ 2010-02-28 02:41 . 2010-02-28 02:41 615800 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\ONWORDADDIN.DLL
+ 2010-02-28 02:41 . 2010-02-28 02:41 560512 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\ONPPTADDIN.DLL
+ 2010-03-29 18:26 . 2010-03-29 18:26 227712 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\ONENOTEM.EXE
+ 2010-02-28 02:41 . 2010-02-28 02:41 533368 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\ONBTTNWD.DLL
+ 2010-02-28 02:41 . 2010-02-28 02:41 533376 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\ONBTTNPPT.DLL
+ 2010-03-01 03:19 . 2010-03-01 03:19 697728 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\ONBTTNOL.DLL
+ 2010-03-01 02:53 . 2010-03-01 02:53 234384 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\OMSXP32.DLL
+ 2010-03-01 02:53 . 2010-03-01 02:53 724352 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\OMSMAIN.DLL
+ 2010-02-28 00:21 . 2010-02-28 00:21 259960 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\OISGRAPH.DLL
+ 2010-02-28 00:21 . 2010-02-28 00:21 886640 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\OISAPP.DLL
+ 2010-02-28 00:21 . 2010-02-28 00:21 274280 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\OIS.EXE
+ 2010-02-28 00:09 . 2010-02-28 00:09 401784 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\OFFXML.DLL
+ 2010-03-10 22:44 . 2010-03-10 22:44 510904 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\ODEPLOY.EXE
+ 2010-01-09 19:23 . 2010-01-09 19:23 169352 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\OARPMANY.EXE
+ 2010-02-28 00:15 . 2010-02-28 00:15 702312 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\MSTORDB.EXE
+ 2010-03-29 19:47 . 2010-03-29 19:47 218464 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\MSPROOF6.DLL
+ 2010-03-16 00:58 . 2010-03-16 00:58 360824 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\MSOUC.EXE
+ 2010-03-16 00:58 . 2010-03-16 00:58 718208 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\MSOSYNC.EXE
+ 2010-03-24 18:28 . 2010-03-24 18:28 473952 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\MSOICONS.EXE
+ 2010-03-06 03:29 . 2010-03-06 03:29 501088 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\MSODCW.DLL
+ 2010-03-01 03:17 . 2010-03-01 03:17 152952 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\MSOCF.DLL
+ 2010-03-29 19:47 . 2010-03-29 19:47 787864 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\MSET7TKJP.DLL
+ 2010-03-29 19:47 . 2010-03-29 19:47 512392 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\MSET7TK.DLL
+ 2010-03-29 19:47 . 2010-03-29 19:47 543144 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\MSET7.DLL
+ 2010-03-24 18:28 . 2010-03-24 18:28 571232 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\MISC.EXE
+ 2010-03-22 19:29 . 2010-03-22 19:29 358240 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\MIMEDIR.DLL
+ 2010-02-28 00:15 . 2010-02-28 00:15 698216 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\MEDCAT.DLL
+ 2010-03-22 19:29 . 2010-03-22 19:29 272800 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\MAPIPH.DLL
+ 2011-09-12 23:02 . 2011-09-12 23:02 427904 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\LOBITOOL.DLL
+ 2011-09-12 23:02 . 2011-09-12 23:02 169856 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\LOBITOIN.DLL
+ 2010-03-12 22:58 . 2010-03-12 22:58 960384 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\LOBIOBDR.DLL
+ 2011-09-12 23:02 . 2011-09-12 23:02 960384 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\LOBIOBDA.DLL
+ 2011-09-12 23:02 . 2011-09-12 23:02 567168 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\LOBICLNT.DLL
+ 2010-03-12 22:58 . 2010-03-12 22:58 567168 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\LOBICLNR.DLL
+ 2010-03-13 12:54 . 2010-03-13 12:54 447872 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\LOBICLI.DLL
+ 2010-03-12 22:58 . 2010-03-12 22:58 518016 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\LOBIBDCR.DLL
+ 2011-09-12 23:01 . 2011-09-12 23:01 518016 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\LOBIBDCA.DLL
+ 2010-03-29 18:45 . 2010-03-29 18:45 169352 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\IPOLK.DLL
+ 2010-03-22 19:30 . 2010-03-22 19:30 135016 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\IMPMAIL.DLL
+ 2010-03-22 18:36 . 2010-03-22 18:36 178560 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\IETAG.DLL
+ 2010-02-28 02:41 . 2010-02-28 02:41 578472 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\IECONTENTSERVICE.EXE
+ 2010-03-24 19:17 . 2010-03-24 19:17 944008 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\GROOVEMN.EXE
+ 2010-02-04 02:41 . 2010-02-04 02:41 120160 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\FLTLDR.EXE
+ 2010-02-25 09:07 . 2010-02-25 09:07 452936 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\EXPSRV.DLL
+ 2010-03-23 09:03 . 2010-03-23 09:03 104824 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\EXP_PDF.DLL
+ 2010-03-22 19:30 . 2010-03-22 19:30 155008 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\ENVELOPE.DLL
+ 2010-03-22 19:30 . 2010-03-22 19:30 115584 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\EMABLT32.DLL
+ 2010-02-28 00:09 . 2010-02-28 00:09 519584 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\DWTRIG20.EXE
+ 2010-03-23 08:57 . 2010-03-23 08:57 135032 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\CONTAB32.DLL
+ 2010-03-01 03:18 . 2010-03-01 03:18 397656 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\CDLMSO.DLL
+ 2010-01-18 18:59 . 2010-01-18 18:59 998776 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\ASMAIN.DLL
+ 2010-01-18 18:59 . 2010-01-18 18:59 100280 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\ASLTS.DLL
+ 2010-03-23 08:55 . 2010-03-23 08:55 362904 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\ACEXBE.DLL
+ 2010-03-01 03:19 . 2010-03-01 03:19 247200 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\ACEWSS.DLL
+ 2010-03-23 08:54 . 2010-03-23 08:54 220560 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\ACETXT.DLL
+ 2010-03-23 08:55 . 2010-03-23 08:55 527776 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\ACEREP.DLL
+ 2010-03-22 18:51 . 2010-03-22 18:51 329624 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\ACER3X.DLL
+ 2010-03-23 08:55 . 2010-03-23 08:55 383904 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\ACEOLEDB.DLL
+ 2010-03-22 18:51 . 2010-03-22 18:51 278448 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\ACEODBC.DLL
+ 2010-03-23 08:54 . 2010-03-23 08:54 334752 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\ACEEXCH.DLL
+ 2010-03-23 08:55 . 2010-03-23 08:55 643992 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\ACEEXCL.DLL
+ 2010-03-23 08:55 . 2010-03-23 08:55 686504 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\ACEES.DLL
+ 2010-03-23 08:55 . 2010-03-23 08:55 548792 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\ACEDAO.DLL
+ 2010-02-28 02:33 . 2010-02-28 02:33 164224 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\ACCWIZ.DLL
+ 2010-03-23 08:55 . 2010-03-23 08:55 548792 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\ACACEDAO.DLL
+ 2011-10-31 06:49 . 2011-10-31 06:49 215040 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\f8fb8658572986d1b83f09c2e44d0991\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.ni.dll
+ 2011-10-31 06:50 . 2011-10-31 06:50 773120 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\ec7b27036d47df2e55c614d91c565bff\Microsoft.VisualStudio.Tools.Office.Runtime.v10.0.ni.dll
+ 2011-10-31 06:50 . 2011-10-31 06:50 229888 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\c77924b7f7939888c4fbd7d02fc3cd18\Microsoft.VisualStudio.Tools.Office.ContainerControl.v10.0.ni.dll
+ 2011-10-31 06:49 . 2011-10-31 06:49 311296 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\bf178241c659181703e8c6df8d5c3db8\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.ni.dll
+ 2011-10-31 06:49 . 2011-10-31 06:49 124928 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\8e32880602d82cc2d7487cc3d3954c5c\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.ni.dll
+ 2011-10-31 06:50 . 2011-10-31 06:50 956416 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\446169d653e075056ac6d2f91b370b56\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v10.0.ni.dll
+ 2011-10-31 06:49 . 2011-10-31 06:49 270336 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\23b4e08176ca6fbe76874c67e0c5d224\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.ni.dll
+ 2011-10-31 06:50 . 2011-10-31 06:50 495616 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\18f3595f881a98d9db04220203475ad9\Microsoft.VisualStudio.Tools.Applications.Hosting.v10.0.ni.dll
+ 2011-10-31 00:40 . 2011-10-31 00:40 134144 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\e205864faf5869dc9e21a2b39cf38eec\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.ni.dll
+ 2011-10-31 06:48 . 2011-10-31 06:48 363008 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\d688b3b2424cd007ece1723dc67ff6dd\Microsoft.VisualStudio.Tools.Applications.Hosting.v10.0.ni.dll
+ 2011-10-31 00:40 . 2011-10-31 00:40 179200 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\d3864a5de3ffde7d0252268932eae680\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.ni.dll
+ 2011-10-31 00:40 . 2011-10-31 00:40 196608 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\cea08854692d77420680f2977d27f2bd\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.ni.dll
+ 2011-10-31 06:48 . 2011-10-31 06:48 617472 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\8c8c8e9117c39c55332e7049b0d9c19b\Microsoft.VisualStudio.Tools.Office.Runtime.v10.0.ni.dll
+ 2011-10-31 06:48 . 2011-10-31 06:48 148480 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\41e49dcac41ada36af8da34a40b30b81\Microsoft.VisualStudio.Tools.Office.ContainerControl.v10.0.ni.dll
+ 2011-10-31 06:48 . 2011-10-31 06:48 650752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\1617e8c00a6d05d064c6e21c99137132\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v10.0.ni.dll
+ 2011-10-31 00:35 . 2011-10-31 00:35 363936 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Runtime.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Runtime.v10.0.dll
+ 2011-10-31 00:35 . 2011-10-31 00:35 193472 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v10.0.dll
+ 2011-10-31 00:35 . 2011-10-31 00:35 153008 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Hosting.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Hosting.v10.0.dll
+ 2011-10-31 00:35 . 2011-10-31 00:35 427904 c:\windows\assembly\GAC_MSIL\Microsoft.Office.BusinessApplications.Tools\14.0.0.0__71e9bce111e9429c\Microsoft.Office.BusinessApplications.Tools.dll
- 2011-09-12 23:02 . 2011-09-12 23:02 427904 c:\windows\assembly\GAC_MSIL\Microsoft.Office.BusinessApplications.Tools\14.0.0.0__71e9bce111e9429c\Microsoft.Office.BusinessApplications.Tools.dll
- 2011-09-12 23:02 . 2011-09-12 23:02 169856 c:\windows\assembly\GAC_MSIL\Microsoft.Office.BusinessApplications.Tools.Intl\14.0.0.0__71e9bce111e9429c\Microsoft.Office.BusinessApplications.Tools.Intl.dll
+ 2011-10-31 00:35 . 2011-10-31 00:35 169856 c:\windows\assembly\GAC_MSIL\Microsoft.Office.BusinessApplications.Tools.Intl\14.0.0.0__71e9bce111e9429c\Microsoft.Office.BusinessApplications.Tools.Intl.dll
+ 2011-10-31 00:35 . 2011-10-31 00:35 567168 c:\windows\assembly\GAC_MSIL\Microsoft.Office.BusinessApplications.Runtime\14.0.0.0__71e9bce111e9429c\Microsoft.Office.BusinessApplications.Runtime.dll
- 2011-09-12 23:01 . 2011-09-12 23:02 567168 c:\windows\assembly\GAC_MSIL\Microsoft.Office.BusinessApplications.Runtime\14.0.0.0__71e9bce111e9429c\Microsoft.Office.BusinessApplications.Runtime.dll
- 2011-09-12 23:01 . 2011-09-12 23:01 518016 c:\windows\assembly\GAC_32\Microsoft.SharePoint.BusinessData.Administration.Client\14.0.0.0__71e9bce111e9429c\Microsoft.SharePoint.BusinessData.Administration.Client.dll
+ 2011-10-31 00:35 . 2011-10-31 00:35 518016 c:\windows\assembly\GAC_32\Microsoft.SharePoint.BusinessData.Administration.Client\14.0.0.0__71e9bce111e9429c\Microsoft.SharePoint.BusinessData.Administration.Client.dll
+ 2011-10-31 00:35 . 2011-10-31 00:35 964480 c:\windows\assembly\GAC_32\Microsoft.Office.BusinessData\14.0.0.0__71e9bce111e9429c\microsoft.office.businessdata.dll
+ 2010-10-20 11:44 . 2010-10-20 11:44 1207656 c:\windows\SysWOW64\FM20.DLL
+ 2009-07-14 04:45 . 2011-10-31 06:46 3862561 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat
- 2009-07-14 04:45 . 2011-10-30 09:09 3862561 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat
+ 2011-09-12 23:35 . 2011-11-01 20:54 7815236 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-1792874667-415938777-445698695-1000-8192.dat
- 2011-09-12 23:35 . 2011-10-29 13:29 7815236 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-1792874667-415938777-445698695-1000-8192.dat
+ 2011-09-12 23:35 . 2011-10-31 22:23 7815236 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-1792874667-415938777-445698695-1000-12288.dat
+ 2011-04-28 22:33 . 2011-04-28 22:33 1211904 c:\windows\Installer\34fabdf.msp
+ 2011-04-28 22:27 . 2011-04-28 22:27 6051840 c:\windows\Installer\34fabb2.msp
+ 2011-04-28 21:28 . 2011-04-28 21:28 1211904 c:\windows\Installer\34faba4.msp
+ 2011-04-28 20:22 . 2011-04-28 20:22 4733440 c:\windows\Installer\34fa9f4.msp
+ 2011-04-28 20:04 . 2011-04-28 20:04 2441728 c:\windows\Installer\34fa9bd.msp
+ 2011-09-12 23:03 . 2011-10-31 00:36 1479520 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
- 2011-09-12 23:03 . 2011-10-29 13:29 1479520 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
+ 2011-09-12 23:03 . 2011-10-31 00:36 1858400 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
- 2011-09-12 23:03 . 2011-10-29 13:29 1858400 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
+ 2011-09-12 23:03 . 2011-10-31 00:36 3792736 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\pptico.exe
- 2011-09-12 23:03 . 2011-10-29 13:29 3792736 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\pptico.exe
+ 2011-09-12 23:03 . 2011-10-31 00:36 1449312 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\accicons.exe
- 2011-09-12 23:03 . 2011-10-29 13:29 1449312 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\accicons.exe
+ 2010-02-17 19:56 . 2010-02-17 19:56 1199008 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\WKCONV.EXE
+ 2010-02-25 09:07 . 2010-02-25 09:07 2672456 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\VBE7.DLL
+ 2010-02-28 00:55 . 2010-02-28 00:55 1040736 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\UMOUTLOOKADDIN.DLL
+ 2010-03-01 03:07 . 2010-03-01 03:07 2831768 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\STSLIST.DLL
+ 2010-03-10 22:44 . 2010-03-10 22:44 1100664 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\SETUP.EXE
+ 2010-03-09 07:57 . 2010-03-09 07:57 2162024 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\POWERPNT.EXE
+ 2010-03-10 22:44 . 2010-03-10 22:44 5789544 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\OSETUP.DLL
+ 2010-03-30 06:29 . 2010-03-30 06:29 1177968 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\ONFILTER.DLL
+ 2010-03-30 06:29 . 2010-03-30 06:29 1676128 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\ONENOTE.EXE
+ 2010-03-23 08:57 . 2010-03-23 08:57 3189120 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\OLMAPI32.DLL
+ 2010-01-09 19:24 . 2010-01-09 19:24 3483000 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\OIMG.DLL
+ 2010-02-28 00:19 . 2010-02-28 00:19 7277440 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\OFFOWC.DLL
+ 2010-03-29 19:48 . 2010-03-29 19:48 6629808 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\NL7MODELS0011.DLL
+ 2010-03-29 19:48 . 2010-03-29 19:48 2460080 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\NL7LEXICONS0011.DLL
+ 2010-03-29 19:47 . 2010-03-29 19:47 7467440 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\NL7DATA0011.DLL
+ 2011-09-12 23:02 . 2011-09-12 23:02 1689472 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\LOBISYNC.DLL
+ 2010-03-30 06:36 . 2010-03-30 06:36 5496688 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\IPEDITOR.DLL
+ 2010-03-30 06:36 . 2010-03-30 06:36 5867896 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\IPDESIGN.DLL
+ 2010-03-30 06:36 . 2010-03-30 06:36 1734000 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\INFOPATH.EXE
+ 2010-03-12 20:45 . 2010-03-12 20:45 4299648 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\GRAPH.EXE
+ 2010-03-01 03:08 . 2010-03-01 03:08 1746280 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\GFX.DLL
+ 2010-02-20 15:20 . 2010-02-20 15:20 1207144 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\FM20.DLL
+ 2010-01-18 18:59 . 2010-01-18 18:59 2182040 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\ASSAPIFE.DLL
+ 2010-03-23 08:55 . 2010-03-23 08:55 3049376 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\ACEWDAT.DLL
+ 2010-03-23 08:55 . 2010-03-23 08:55 2193800 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\ACECORE.DLL
+ 2010-03-24 18:28 . 2010-03-24 18:28 1449312 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\ACCICONS.EXE
+ 2011-09-12 23:02 . 2011-09-12 23:02 1857400 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\ACCESS.DLL
+ 2011-09-12 23:02 . 2011-09-12 23:02 1857400 c:\windows\Installer\$PatchCache$\Managed\00004109501100000000000000F01FEC\14.0.4763\ACCESS.DLL
+ 2011-10-31 00:38 . 2011-10-31 00:38 4752384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.Bu#\b747888e8d4002789b8c8348b0a1d3f2\Microsoft.Office.BusinessApplications.SyncServices.ni.dll
+ 2011-10-31 06:48 . 2011-10-31 06:48 2091008 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.Bu#\7ecf6bfe759841ab3f21fa449548a237\Microsoft.Office.BusinessApplications.RuntimeUi.ni.dll
+ 2011-10-31 00:37 . 2011-10-31 00:37 1564160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.Bu#\30ea3cb0cc3adb79635a1b6dafc69f18\Microsoft.Office.BusinessApplications.Runtime.ni.dll
+ 2011-10-31 00:38 . 2011-10-31 00:38 3236864 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.Bu#\2b5c14a0d72419ff1983a0f1d3bde456\Microsoft.Office.BusinessData.ni.dll
- 2011-09-12 23:02 . 2011-09-12 23:02 1857400 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Interop.Access\14.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Access.dll
+ 2011-10-31 00:35 . 2011-10-31 00:35 1857400 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Interop.Access\14.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Access.dll
- 2011-09-12 23:02 . 2011-09-12 23:02 1689472 c:\windows\assembly\GAC_MSIL\Microsoft.Office.BusinessApplications.SyncServices\14.0.0.0__71e9bce111e9429c\Microsoft.Office.BusinessApplications.SyncServices.dll
+ 2011-10-31 00:35 . 2011-10-31 00:35 1689472 c:\windows\assembly\GAC_MSIL\Microsoft.Office.BusinessApplications.SyncServices\14.0.0.0__71e9bce111e9429c\Microsoft.Office.BusinessApplications.SyncServices.dll
+ 2009-07-14 02:34 . 2011-11-01 17:01 10485760 c:\windows\system32\SMI\Store\Machine\SCHEMA.DAT
- 2009-07-14 02:34 . 2011-10-30 20:53 10485760 c:\windows\system32\SMI\Store\Machine\SCHEMA.DAT
+ 2011-04-28 19:34 . 2011-04-28 19:34 11155456 c:\windows\Installer\34fabd8.msp
+ 2011-04-28 22:28 . 2011-04-28 22:28 15230976 c:\windows\Installer\34fabc5.msp
+ 2011-04-28 20:50 . 2011-04-28 20:50 22049792 c:\windows\Installer\34fa9fe.msp
+ 2011-04-28 19:27 . 2011-04-28 19:27 13031936 c:\windows\Installer\34fa9e5.msp
+ 2010-03-23 08:57 . 2010-03-23 08:57 15889248 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\OUTLOOK.EXE
+ 2010-03-22 18:36 . 2010-03-22 18:36 72521600 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\MSORES.DLL
+ 2010-03-01 03:09 . 2010-03-01 03:09 13988704 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.4763\MSACCESS.EXE
+ 2011-04-28 19:33 . 2011-04-28 19:33 425345024 c:\windows\Installer\34fab9d.msp
.
-- Snímek resetován k současnému datu --
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"BCSSync"="c:\program files (x86)\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
"AvgUninstallURL"="start http://www.avg.cz/cz.special-uninstalla ... a928fc107f" [?]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"DisableStatusMessages"= 1 (0x1)
"DisableStartupSound"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R3 Adobe Version Cue CS4;Adobe Version Cue CS4;c:\program files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe [2008-08-15 284016]
R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2011-10-17 1038088]
R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files (x86)\Microsoft Office\Office14\GROOVE.EXE [2011-06-12 31125880]
R3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\system32\DRIVERS\MpNWMon.sys [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\Antimalware\NisSrv.exe [2011-04-27 288272]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R3 WMSVC;Služba webové správy;c:\windows\system32\inetsrv\wmsvc.exe [x]
R4 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-08-31 366152]
S2 MSSQL$EWAYSQL;SQL Server (EWAYSQL);c:\program files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [2010-12-10 29293408]
S2 MSSQL$SPRINXCRM;SQL Server (SPRINXCRM);c:\program files (x86)\Microsoft SQL Server\MSSQL.2\MSSQL\Binn\sqlservr.exe [2010-12-10 29293408]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
S3 RTL8023x64;Realtek 10/100 NIC Family NDIS x64 Driver;c:\windows\system32\DRIVERS\Rtnic64.sys [x]
S3 RTL8167;Ovladač Realtek 8167 NT;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
iissvcs REG_MULTI_SZ w3svc was
apphost REG_MULTI_SZ apphostsvc
.
.
--------- x86-64 -----------
.
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
IE: Převést cíl vazby do Adobe PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Převést do Adobe PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: Připojit cíl vazby k existujícímu PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Připojit k existujícímu PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
TCP: Interfaces\{71615102-96F8-4337-899B-97C218EA612A}: NameServer = 10.0.0.1
FF - ProfilePath - c:\users\Karca\AppData\Roaming\Mozilla\Firefox\Profiles\6ku0smyu.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.cz/
FF - prefs.js: network.proxy.type - 4
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
WebBrowser-{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - (no file)
.
.
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
c:\program files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
.
**************************************************************************
.
Celkový čas: 2011-11-01 22:07:57 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-11-01 21:07
ComboFix2.txt 2011-10-30 22:25
.
Před spuštěním: Volných bajtů: 47 318 425 600
Po spuštění: Volných bajtů: 46 959 132 672
.
- - End Of File - - DD78986535C084650952642ABD447F46

[vyosek]

Jak se chova PC

[pogo23]

Pořád stejně, jako před tím...

[vyosek]

Projedte PC i disk AVPTool http://www.viry.cz/forum/viewtopic.php?f=29&t=58179

[pogo23]

Spustila jsem AVPTool. Je to na 10% a vyskakuje mi z windowsu hlaska: Disk v jednotno "H" je nutné naformatovat.

[vyosek]

Bojim se, ze havet disk nejak poskodila...predpokladam, ze data budete chtit zachranit, ze

[pogo23]

Ano. Zachránit. AVPTool se zastavil na 10% a prosel 274020, ted se už přes hodinu ani nepohnul.

[vyosek]

Tak jej stopnete a zkuste jeste CureIt http://www.viry.cz/forum/viewtopic.php?f=29&t=47721

[pogo23]

CureIt mi taky zamrznul asi asi po 10 hod. jsem to restartovala, sel spustit jen správce uloh, alenesel ukončit zadny proces nebo strom procesu, vzdycky vyskocilo oknov, ze windows zamitnul pristup.

Kdyz jsem dala restart, tak se PC vypinal asi 45 min ,az kdyz jsem vyndala disk, tak se teprv vypnul a zapnul...

[vyosek]

To vypada, ze ten disk je nejaky poskozeny Zkusime zazalohovat data, da se do nej nejak dostat - treba pres Total Commander? Jinak budem muste asi jit cestou nejakeho LiveCD

[pogo23]

treba pres Total Commander: "chyba jednotka nebyla nalezena"

[vyosek]

No nevypada to s nim nejlepe

Vytvorte si bootovaci CD s Hirens dle navodu kolegy a nastavte bootovani z CD

Stažení a vypálení CD

1)Nejprve si stáhneme nejnovější verzi Hiren’s BootCD
2)Stažený archív (.zip) vyextrahujeme do libovolné složky, třeba Nová složka na Vaší pracovní ploše
3)Vložíme do své vypalovací mechaniky prázdné CD
4)Ve složce, do které jsme vyextrahovali v kroku číslo 2 soubory, najdeme soubor BurnToCD a ten spustíme. (vypálit můžeme CD pomocí vlastního programu )
5)Objeví se nám následující program



A klikneme na tlačítko Start

6) Zahájí se vypalování disku



Nyní máme vypáleno potřebné CD



Nastavení bootování CD při startu počítače

Pokud necháme CD v mechanice a při startu pc nám naběhne menu Hirens Boot CD, pak tento krok přeskočíme

Nejprve se budeme muset dostat do BIOSu, to učiníme tak, že zmáčkneme klávesu ( většinou ) DEL nebo F2 či Shift +F2



Dostaneme se do biosu, který může vypadat různě..



V menu biosu pracujeme pouze s klávesnicí, tak pomocí klávesnice najeďte na záložku Boot



Zde nastavíme, aby byla CDROM jako první



Najedeme do menu EXIT a zvolíme Exit Saving Changes a potvrdíme Enter nebo Y



Tak a máme nastavené bootování z CD mechaniky

Nabootujte toto vytvorene CD a zvolte v nabidce ktera se spusti Mini Windows XP

Tim se dostanete do prostedi podobneho WIN XP

Zapojte disk a zjistite ci jej Hirens vidi nebo ne