Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

W32/Malware!Gemini - F security

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
Gamp.G
Návštěvník
Návštěvník
Příspěvky: 69
Registrován: 14 lis 2008 19:13

W32/Malware!Gemini - F security

#1 Příspěvek od Gamp.G »

Dobrý den velmi prosím o kontrolu.
Avast mi nic nehlásí i když to dám zkontrolovat zvlášť.
Malwarebytes' Anti-Malware taky nic nenašel.
Spybot mi běží furt na pozadí.
F-sekurity on line sem dělal náhodou pro sichr protože nemožu za boha pustit online eset smart test.
Vždy se mi sekne a procesor běží na 100%.
Kontrola se nepohne ani o %.
Furt se mi zdá že běží pomalu Net už sem změnil i poskytovatele a šel z 2,4 na 5,4Gh.

Můžu přiložit fsonlinescanner_report.html

Předem díky.

Tady je log z RSIT:

Logfile of random's system information tool 1.06 (written by random/random)
Run by Stana at 2010-04-09 20:25:55
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 23 GB (30%) free of 76 GB
Total RAM: 2047 MB (64% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:26:22, on 9.4.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\VTTimer.exe
C:\Program Files\VIAudioi\SBADeck\ADeck.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\ATI Technologies\ATI HydraVision\HydraMD.exe
C:\WINDOWS\PixArt\PAC7311\Monitor.exe
C:\Program Files\Hard Disk Sentinel\HDSentinel.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI HydraVision\HydraDM.exe
C:\Program Files\Cobian Backup 10\Cobian.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\uTorrent\utorrent.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe
C:\Program Files\Cobian Backup 10\cbInterface.exe
C:\Program Files\Fractalis Software\Display Stix 2.1.1\dstix.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Documents and Settings\All Users\Data aplikací\Skype\Plugins\Plugins\61BEB79ECBDD451F9554700542EE2D92\WinampMood.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\svchost.exe
C:\Aplikace\Na viry\Rsit\RSIT.exe
C:\Aplikace\Na viry\hjt\Stana.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [AudioDeck] C:\Program Files\VIAudioi\SBADeck\ADeck.exe 1
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [HydraVisionViewport] C:\Program Files\ATI Technologies\ATI HydraVision\HydraMD.exe
O4 - HKLM\..\Run: [SpybotSnD] "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autoclose /waitstart /waitprograms
O4 - HKLM\..\Run: [PAC7311_Monitor] C:\WINDOWS\PixArt\PAC7311\Monitor.exe
O4 - HKLM\..\Run: [Hard Disk Sentinel] "C:\Program Files\Hard Disk Sentinel\HDSentinel.exe" /AUTORUN
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [HydraVisionDesktopManager] C:\Program Files\ATI Technologies\ATI HydraVision\HydraDM.exe
O4 - HKLM\..\Run: [Cobian Backup 10] "C:\Program Files\Cobian Backup 10\Cobian.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\utorrent.exe"
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Advanced SystemCare 3] "C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe" /startup
O4 - HKCU\..\Run: [Display Stix - System tray] C:\Program Files\Fractalis Software\Display Stix 2.1.1\dstix.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Download All by FlashGet - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: Spustit klienta k monitoru &1 - C:\WINDOWS\web\AOpenClient.htm
O8 - Extra context menu item: Spustit klienta k monitoru &2 - C:\WINDOWS\web\AOpenClient.htm
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) - http://www.eset.sk/buxus/docs/OnlineScanner.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

--
End of file - 7697 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\SmartDefrag.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2004-12-14 63136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5366673-E8CA-11D3-9CD9-0090271D075B}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-03-09 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-03-09 79648]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"VTTimer"=C:\WINDOWS\system32\VTTimer.exe [2004-10-22 53248]
"VTTrayp"=C:\WINDOWS\system32\VTtrayp.exe [2005-01-11 143360]
"ATIPTA"=C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [2005-05-03 344064]
"AudioDeck"=C:\Program Files\VIAudioi\SBADeck\ADeck.exe [2005-03-04 512000]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-11-25 81000]
"HydraVisionViewport"=C:\Program Files\ATI Technologies\ATI HydraVision\HydraMD.exe [2003-04-01 364544]
"SpybotSnD"=C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe [2009-01-26 5365592]
"PAC7311_Monitor"=C:\WINDOWS\PixArt\PAC7311\Monitor.exe [2006-11-03 319488]
"Hard Disk Sentinel"=C:\Program Files\Hard Disk Sentinel\HDSentinel.exe [2009-05-27 3291648]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]
"ATICCC"=C:\Program Files\ATI Technologies\ATI.ACE\cli.exe [2006-01-02 45056]
"HydraVisionDesktopManager"=C:\Program Files\ATI Technologies\ATI HydraVision\HydraDM.exe [2003-04-01 270336]
"Cobian Backup 10"=C:\Program Files\Cobian Backup 10\Cobian.exe [2010-04-06 421376]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-01-26 2144088]
"uTorrent"=C:\Program Files\uTorrent\utorrent.exe [2010-03-14 319792]
"ccleaner"=C:\Program Files\CCleaner\CCleaner.exe [2010-02-24 1771320]
"Skype"=C:\Program Files\Skype\\Phone\Skype.exe [2010-03-09 26100520]
"Advanced SystemCare 3"=C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe [2010-03-29 2343120]
"Display Stix - System tray"=C:\Program Files\Fractalis Software\Display Stix 2.1.1\dstix.exe [2004-01-12 241664]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Advanced SystemCare 3]
C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe [2010-03-29 2343120]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Cobian Backup 9 interface]
C:\Program Files\Cobian Backup 9\cbInterface.exe -service []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LGODDFU]
C:\Program Files\lg_fwupdate\fwupdate.exe [2005-04-12 229376]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBJ]
C:\Program Files\Ahead\Nero BackItUp\NBJ.exe [2005-06-02 1957888]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe [2009-06-25 1414144]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl]
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [2004-11-02 32768]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SmartRAM]
C:\Program Files\IObit\Advanced SystemCare 3\Sup_SmartRAM.exe [2009-02-19 202064]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VGAUtil]
C:\Program Files\GigaByte\VGA Utility Manager\G-VGA.exe [2004-09-17 552960]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"InCDsrv"=2
"CobianBackupAmanita"=2

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2006-05-03 61440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2007-03-15 236928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{93994DE8-8239-4655-B1D1-5F4E91300429}"=C:\Program Files\DVDIdle Pro\DVDShell.dll [2004-10-09 49152]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=
"NoDrives"=
"NoDriveAutoRun"=
"HonorAutoRunSetting"=
"NoResolveSearch"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files\Electronic Arts\Need For Speed III\nfs3.exe"="C:\Program Files\Electronic Arts\Need For Speed III\nfs3.exe:*:Disabled:Need For Speed III for Win32"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\WINDOWS\system32\sessmgr.exe"="C:\WINDOWS\system32\sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019"
"C:\Program Files\uTorrent\utorrent.exe"="C:\Program Files\uTorrent\utorrent.exe:*:Enabled:µTorrent"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\GigaByte\VGA Utility Manager\G-vga.exe"="C:\Program Files\GigaByte\VGA Utility Manager\G-vga.exe:*:Disabled:Menu"
"C:\Program Files\Java\jre6\bin\java.exe"="C:\Program Files\Java\jre6\bin\java.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\Metin2_TESTER\metin2client.bin"="C:\Program Files\Metin2_TESTER\metin2client.bin:*:Enabled:metin2client"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7da1c578-aa09-11de-a0bb-003018c2a8cb}]
shell\AutoRun\command - G:\setup.exe


======File associations======

.scr - open - C:\WINDOWS\NOTEPAD.EXE "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 months======

2010-04-09 17:42:32 ----D---- C:\Documents and Settings\All Users\Data aplikací\F-Secure
2010-04-08 21:40:30 ----D---- C:\Program Files\Cobian Backup 10
2010-04-05 11:13:47 ----D---- C:\Složka pro síť
2010-04-04 12:41:39 ----D---- C:\Documents and Settings\Stana\Data aplikací\Zoner
2010-04-04 12:40:27 ----D---- C:\Program Files\Zoner
2010-03-31 17:20:34 ----D---- C:\Documents and Settings\All Users\Data aplikací\Sun
2010-03-31 17:20:16 ----A---- C:\WINDOWS\system32\javaws.exe
2010-03-31 17:20:16 ----A---- C:\WINDOWS\system32\javaw.exe
2010-03-31 17:20:16 ----A---- C:\WINDOWS\system32\java.exe
2010-03-30 16:42:27 ----D---- C:\Program Files\Common Files\Skype
2010-03-10 14:44:04 ----HDC---- C:\WINDOWS\$NtUninstallKB975561$

======List of files/folders modified in the last 1 months======

2010-04-09 20:26:02 ----D---- C:\WINDOWS\Prefetch
2010-04-09 20:25:58 ----D---- C:\Documents and Settings\Stana\Data aplikací\uTorrent
2010-04-09 20:25:01 ----D---- C:\WINDOWS
2010-04-09 20:17:12 ----D---- C:\Documents and Settings\Stana\Data aplikací\Skype
2010-04-09 20:17:12 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2010-04-09 20:14:41 ----D---- C:\WINDOWS\Temp
2010-04-09 18:53:47 ----D---- C:\Program Files\Hard Disk Sentinel
2010-04-09 16:27:48 ----D---- C:\Documents and Settings\Stana\Data aplikací\skypePM
2010-04-09 11:07:36 ----N---- C:\WINDOWS\SchedLgU.Txt
2010-04-08 21:43:32 ----D---- C:\Program Files\Cobian Backup 9
2010-04-08 21:40:30 ----RD---- C:\Program Files
2010-04-08 14:19:14 ----D---- C:\WINDOWS\system32\CatRoot2
2010-04-08 13:14:39 ----A---- C:\WINDOWS\NeroDigital.ini
2010-04-08 13:03:28 ----D---- C:\MyWorks
2010-04-06 12:55:25 ----A---- C:\WINDOWS\DVDIdlePro.INI
2010-04-04 09:18:54 ----D---- C:\WINDOWS\system32
2010-04-04 08:51:54 ----D---- C:\Program Files\AutoCAD R14
2010-04-02 16:14:42 ----D---- C:\Program Files\Mozilla Firefox
2010-03-31 17:20:34 ----SHD---- C:\WINDOWS\Installer
2010-03-31 17:20:34 ----D---- C:\Program Files\Common Files\Java
2010-03-31 17:13:02 ----D---- C:\Program Files\Java
2010-03-31 07:07:34 ----HD---- C:\WINDOWS\inf
2010-03-31 07:07:27 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-03-31 07:07:23 ----D---- C:\Program Files\Internet Explorer
2010-03-31 07:07:14 ----D---- C:\WINDOWS\ie8updates
2010-03-31 07:06:25 ----HD---- C:\WINDOWS\$hf_mig$
2010-03-30 16:42:27 ----D---- C:\Program Files\Common Files
2010-03-29 09:38:46 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-03-24 21:46:53 ----D---- C:\Program Files\FlashGet
2010-03-15 10:58:42 ----D---- C:\Program Files\uTorrent
2010-03-10 17:44:23 ----D---- C:\WINDOWS\Debug
2010-03-10 14:44:06 ----D---- C:\Program Files\Movie Maker

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-11-25 27408]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-09-15 114768]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-11-25 48560]
R1 InCDPass;InCDPass; C:\WINDOWS\System32\DRIVERS\InCDPass.sys [2005-07-08 29696]
R1 incdrm;InCD Reader; C:\WINDOWS\system32\drivers\incdrm.sys [2005-07-08 28672]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-09-15 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-09-15 94160]
R3 Afc;PPdus ASPI Shell; C:\WINDOWS\system32\drivers\Afc.sys [2005-02-23 11776]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-11-25 23120]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2006-05-03 1540608]
R3 FET5X86V;VIA Rhine-Family Fast-Ethernet Adapter Driver Service; C:\WINDOWS\system32\DRIVERS\fetnd5bv.sys [2008-09-22 43520]
R3 PAC7311;Trust WB-3400T Webcam; C:\WINDOWS\system32\DRIVERS\PA707UCM.SYS [2007-03-14 449024]
R3 pfc;Padus ASPI Shell; C:\WINDOWS\system32\drivers\pfc.sys [2003-12-05 10368]
R3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 VIAudio;Vinyl AC'97 Audio Controller (WDM); C:\WINDOWS\system32\drivers\vinyl97.sys [2005-02-01 176128]
R3 vulfnths;VIA USB Host Controller Lower Filter; C:\WINDOWS\System32\Drivers\vulfnth.sys [2005-01-05 6912]
R3 vulfntrs;VIA USB Roothub Lower Filter; C:\WINDOWS\System32\Drivers\vulfntr.sys [2004-11-23 11264]
R4 InCDfs;InCD File System; C:\WINDOWS\system32\drivers\InCDfs.sys [2005-07-08 99584]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 cpuz132;cpuz132; \??\C:\DOCUME~1\Stana\LOCALS~1\Temp\cpuz132\cpuz132_x32.sys []
S3 FETND5BV;VIA Rhine-Family Fast Ethernet Adapter Driver Service; C:\WINDOWS\system32\DRIVERS\fetnd5bv.sys [2008-09-22 43520]
S3 FETNDIS;VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\fetnd5.sys [2001-08-17 27165]
S3 GVCplDrv;GVCplDrv; C:\WINDOWS\system32\drivers\GVCplDrv.sys [2004-05-02 23040]
S3 GVTDrv;GVTDrv; C:\WINDOWS\system32\drivers\GVTDrv.sys [2009-11-24 23524]
S3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 NTSIM;NTSIM; \??\C:\WINDOWS\system32\ntsim.sys []
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 TempLog;TempLog; \??\C:\Program Files\Hard Disk Sentinel\HDSentinel.sys []
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys []
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 viagfx;viagfx; C:\WINDOWS\system32\DRIVERS\vtmini.sys [2005-02-24 172416]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2008-03-27 503008]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-15 82688]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-11-25 18752]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2006-05-03 413696]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-11-25 138680]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-03-09 153376]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-11-25 352920]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2006-05-03 520192]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [2004-07-15 32768]
S3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-11-25 254040]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2009-06-02 637952]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 InCDsrv;InCD Helper; C:\Program Files\Ahead\InCD\InCDsrv.exe [2005-07-08 871424]

-----------------EOF-----------------

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119405
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: W32/Malware!Gemini - F security

#2 Příspěvek od Rudy »

Nic nebezpečného není vidět ani zde. Dejte log z ComboFix.
Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode, pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k nezadoucim kolizim s rezidentem antispyware
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Gamp.G
Návštěvník
Návštěvník
Příspěvky: 69
Registrován: 14 lis 2008 19:13

Re: W32/Malware!Gemini - F security

#3 Příspěvek od Gamp.G »

Dávám hlášení F-secure
a jdu udělat ten combofix.

Hlášení kontroly
Pátek, Duben 9, 2010 17:42:52 - 18:54:02

Název počítače: OEM-4E92AE28D0C
Typ kontroly: Kontrolovat systém na přítomnost malwaru, spywaru a programů rootkit
Cíl: C:\ F:\
Nalezený malware: 11
TrackingCookie.2o7 (spyware)

* Systém (Vyléčeno)

TrackingCookie.Atdmt (spyware)

* Systém (Vyléčeno)

Suspicious:W32/Malware!Gemini (spyware)

* Systém (Vyléčeno)

TrackingCookie.Revsci (spyware)

* Systém (Vyléčeno)

TrackingCookie.Adbrite (spyware)

* Systém (Vyléčeno)

TrackingCookie.Webtrends (spyware)

* Systém (Vyléčeno)

TrackingCookie.Instadia (spyware)

* Systém (Vyléčeno)

Suspicious:W32/Malware!Gemini (virus)

* C:\PROGRAM FILES\HARD DISK SENTINEL\HARDDISKSENTINELUPDATE.EXE (Nevyčištěno)

Suspicious:W32/Malware!Gemini (virus)

* C:\PROGRAM FILES\HARD DISK SENTINEL\HDSCTRL.EXE (Nevyčištěno)

Suspicious:W32/Malware!Gemini (virus)

* C:\DOCUMENTS AND SETTINGS\KATKA\LOCAL SETTINGS\TEMP\SKYPESETUP.EXE (Nevyčištěno)

Suspicious:W32/Malware!Gemini (virus)

* C:\APLIKACE\NA VIRY\ICESWORD\ICESWORD122EN\ICESWORD122EN\ICESWORD.EXE (Nevyčištěno)

Statistika
Kontrolováno:

* Soubory: 38896
* Systém: 3500
* Nekontrolováno: 378

Akce:

* Vyléčeno: 7
* Přejmenováno: 0
* Odstraněno: 0
* Nevyčištěno: 4
* Odesláno: 0

Gamp.G
Návštěvník
Návštěvník
Příspěvky: 69
Registrován: 14 lis 2008 19:13

Re: W32/Malware!Gemini - F security

#4 Příspěvek od Gamp.G »

Jak to sem mám nacpat když je povolených 60000 znaků?
Já mám 146964.
Je to normální?

Tož tady to je 1 část:

ComboFix 10-04-08.06 - Stana 09.04.2010 22:51:18.3.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.2047.1463 [GMT 2:00]
Spuštěný z: c:\documents and settings\Stana\Plocha\ComboFix.exe
AV: avast! antivirus 4.8.1368 [VPS 100409-1] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\VB6KO.DLL

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-03-09 do 2010-04-09 )))))))))))))))))))))))))))))))
.

2010-04-08 19:40 . 2010-04-08 19:41 -------- d-----w- c:\program files\Cobian Backup 10
2010-04-05 09:13 . 2010-04-05 09:13 -------- d-----w- C:\Složka pro síť
2010-04-04 10:40 . 2010-04-04 10:40 -------- d-----w- c:\program files\Zoner
2010-04-03 11:45 . 2010-04-03 19:13 -------- d-----w- c:\documents and settings\Stana\.jenny
2010-03-30 14:42 . 2010-03-30 14:42 -------- d-----w- c:\program files\Common Files\Skype

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-04-09 16:53 . 2009-05-28 15:47 -------- d-----w- c:\program files\Hard Disk Sentinel
2010-04-08 19:43 . 2009-09-25 19:30 -------- d-----w- c:\program files\Cobian Backup 9
2010-04-04 06:51 . 2006-03-31 17:46 -------- d-----w- c:\program files\AutoCAD R14
2010-03-31 15:20 . 2006-11-29 18:36 -------- d-----w- c:\program files\Common Files\Java
2010-03-31 15:13 . 2006-11-29 18:38 -------- d-----w- c:\program files\Java
2010-03-29 07:38 . 2004-08-18 12:00 61958 ----a-w- c:\windows\system32\perfc005.dat
2010-03-29 07:38 . 2004-08-18 12:00 379294 ----a-w- c:\windows\system32\perfh005.dat
2010-03-24 19:46 . 2008-10-02 17:22 -------- d-----w- c:\program files\FlashGet
2010-03-15 08:58 . 2008-10-02 18:57 -------- d-----w- c:\program files\uTorrent
2010-03-09 02:28 . 2009-07-14 15:43 411368 ----a-w- c:\windows\system32\deploytk.dll
2010-03-08 16:32 . 2010-03-08 16:32 -------- d-----w- c:\program files\SIW
2010-03-08 15:59 . 2009-05-14 20:56 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-03-08 15:55 . 2008-11-14 15:24 -------- d-----w- c:\program files\CCleaner
2010-03-08 15:52 . 2004-08-18 12:00 361600 ----a-w- c:\windows\system32\drivers\tcpip.sys
2010-02-25 06:18 . 2004-08-18 12:00 916480 ----a-w- c:\windows\system32\wininet.dll
2010-02-24 20:19 . 2010-02-24 20:19 -------- d-----w- c:\program files\Fractalis Software
2010-02-24 20:19 . 2010-02-24 20:19 720896 ----a-w- c:\windows\iun6002.exe
2010-02-17 19:46 . 2009-07-09 20:13 -------- d-----w- c:\program files\IObit
2010-02-16 20:05 . 2009-11-28 15:24 -------- d-----w- c:\program files\Metin2_TESTER
2010-02-16 20:05 . 2006-02-22 15:52 -------- d-----w- c:\program files\Easy Audio CD Burner
2010-02-12 10:03 . 2010-03-06 14:52 293376 ------w- c:\windows\system32\browserchoice.exe
2004-10-01 14:00 . 2006-02-26 18:48 40960 ----a-w- c:\program files\Uninstall_CDS.exe
.

------- Sigcheck -------

[-] 2010-03-08 . CBEEBEB899E31EF52B962CB31FC8CA5C . 361600 . . [5.1.2600.5625] . . c:\windows\system32\drivers\tcpip.sys
[7] 2008-06-20 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[7] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3GDR\tcpip.sys
[7] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\system32\dllcache\tcpip.sys
[7] 2008-06-20 . 2A5554FC5B1E04E131230E3CE035C3F9 . 360320 . . [5.1.2600.3394] . . c:\windows\$NtServicePackUninstall$\tcpip.sys
[7] 2008-06-20 . 744E57C99232201AE98C49168B918F48 . 360960 . . [5.1.2600.3394] . . c:\windows\$hf_mig$\KB951748\SP2QFE\tcpip.sys
[7] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB951748$\tcpip.sys
[7] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\tcpip.sys
[-] 2007-10-30 . 90CAFF4B094573449A0872A0F919B178 . 360064 . . [5.1.2600.3244] . . c:\windows\$NtUninstallKB951748_0$\tcpip.sys
[-] 2007-10-30 . 64798ECFA43D78C7178375FCDD16D8C8 . 360832 . . [5.1.2600.3244] . . c:\windows\$hf_mig$\KB941644\SP2QFE\tcpip.sys
[-] 2006-04-20 . B2220C618B42A2212A59D91EBD6FC4B4 . 360576 . . [5.1.2600.2892] . . c:\windows\$hf_mig$\KB917953\SP2QFE\tcpip.sys
[-] 2006-04-20 . 1DBF125862891817F374F407626967F4 . 359808 . . [5.1.2600.2892] . . c:\windows\$NtUninstallKB941644$\tcpip.sys
[7] 2004-08-18 . 9F4B36614A0FC234525BA224957DE55C . 359040 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB917953$\tcpip.sys
.
((((((((((((((((((((((((((((( SnapShot@2009-05-14_20.17.15 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-04-09 20:39 . 2010-04-09 20:39 16384 c:\windows\Temp\Perflib_Perfdata_5b8.dat
+ 2010-04-09 20:39 . 2010-04-09 20:39 16384 c:\windows\Temp\Perflib_Perfdata_198.dat
+ 2005-05-26 02:16 . 2009-08-06 17:24 44768 c:\windows\system32\wups2.dll
+ 2005-08-25 07:32 . 2009-08-06 17:24 35552 c:\windows\system32\wups.dll
+ 2005-08-25 07:32 . 2009-08-06 17:24 53472 c:\windows\system32\wuauclt.exe
+ 2004-08-18 12:00 . 2009-06-25 08:27 54272 c:\windows\system32\wdigest.dll
+ 2005-08-25 08:33 . 2006-10-27 06:26 69632 c:\windows\system32\vuins32.dll
+ 2007-01-29 08:58 . 2010-01-23 08:11 46080 c:\windows\system32\tzchange.exe
+ 2004-08-18 12:00 . 2009-06-15 10:45 78336 c:\windows\system32\telnet.exe
- 2004-08-18 12:00 . 2008-04-14 03:22 75776 c:\windows\system32\strmfilt.dll
+ 2004-08-18 12:00 . 2009-10-21 05:40 75776 c:\windows\system32\strmfilt.dll
+ 2009-10-07 10:00 . 2009-08-06 17:24 44768 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.4.7600.226\wups2.dll
+ 2009-10-07 10:00 . 2009-08-06 17:24 35552 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.4.7600.226\wups.dll
+ 2004-08-18 12:00 . 2009-06-25 08:27 56832 c:\windows\system32\secur32.dll
- 2004-08-18 12:00 . 2009-02-03 19:58 56832 c:\windows\system32\secur32.dll
+ 2009-07-25 12:35 . 2004-09-17 09:37 61440 c:\windows\system32\ReinstallBackups\0019\DriverFiles\vuins32.dll
+ 2009-07-25 12:35 . 2005-03-18 08:39 42496 c:\windows\system32\ReinstallBackups\0019\DriverFiles\fetnd5bv.sys
+ 2009-06-12 18:17 . 2005-02-22 16:33 73728 c:\windows\system32\ReinstallBackups\0018\DriverFiles\B_25699\Oemdspif.dll
+ 2009-06-12 18:17 . 2001-11-09 06:01 24064 c:\windows\system32\ReinstallBackups\0018\DriverFiles\B_25699\ativcoxx.dll
+ 2009-06-12 18:17 . 2005-02-22 16:22 17408 c:\windows\system32\ReinstallBackups\0018\DriverFiles\B_25699\atitvo32.dll
+ 2009-06-12 18:17 . 2005-02-22 16:33 94208 c:\windows\system32\ReinstallBackups\0018\DriverFiles\B_25699\atipdlxx.dll
+ 2009-06-12 18:17 . 2005-01-18 13:05 79320 c:\windows\system32\ReinstallBackups\0018\DriverFiles\B_25699\atiicdxx.dat
+ 2009-06-12 18:17 . 2005-02-22 16:33 53248 c:\windows\system32\ReinstallBackups\0018\DriverFiles\B_25699\ATIDDC.DLL
+ 2009-06-12 18:17 . 2005-02-22 16:33 25088 c:\windows\system32\ReinstallBackups\0018\DriverFiles\B_25699\Ati2mdxx.exe
+ 2009-06-12 18:17 . 2005-08-04 03:04 46080 c:\windows\system32\ReinstallBackups\0018\DriverFiles\B_25699\ati2evxx.dll
+ 2009-06-12 18:17 . 2005-02-22 16:22 36864 c:\windows\system32\ReinstallBackups\0018\DriverFiles\B_25699\ati2erec.dll
+ 2009-06-12 18:17 . 2005-08-04 03:04 39936 c:\windows\system32\ReinstallBackups\0018\DriverFiles\B_25699\ati2edxx.dll
+ 2009-11-16 20:17 . 2006-02-21 18:40 77824 c:\windows\system32\ReinstallBackups\0014\DriverFiles\B_21349\Oemdspif.dll
+ 2009-11-16 20:17 . 2001-11-09 07:01 24064 c:\windows\system32\ReinstallBackups\0014\DriverFiles\B_21349\ativcoxx.dll
+ 2009-11-16 20:17 . 2006-02-21 18:10 17408 c:\windows\system32\ReinstallBackups\0014\DriverFiles\B_21349\atitvo32.dll
+ 2009-11-16 20:17 . 2006-02-21 18:38 53248 c:\windows\system32\ReinstallBackups\0014\DriverFiles\B_21349\ATIDDC.DLL
+ 2009-11-16 20:17 . 2006-02-21 18:40 26112 c:\windows\system32\ReinstallBackups\0014\DriverFiles\B_21349\Ati2mdxx.exe
+ 2009-11-16 20:17 . 2006-02-21 18:40 61440 c:\windows\system32\ReinstallBackups\0014\DriverFiles\B_21349\ati2evxx.dll
+ 2009-11-16 20:17 . 2006-02-21 18:09 40960 c:\windows\system32\ReinstallBackups\0014\DriverFiles\B_21349\ati2erec.dll
+ 2009-11-16 20:17 . 2006-02-21 18:40 40960 c:\windows\system32\ReinstallBackups\0014\DriverFiles\B_21349\ati2edxx.dll
+ 2009-11-16 22:03 . 2006-05-03 16:45 77824 c:\windows\system32\ReinstallBackups\0002\DriverFiles\Oemdspif.dll
- 2006-02-18 21:18 . 2001-11-09 15:01 24064 c:\windows\system32\ReinstallBackups\0002\DriverFiles\ativcoxx.dll
+ 2009-11-16 22:03 . 2001-11-09 07:01 24064 c:\windows\system32\ReinstallBackups\0002\DriverFiles\ativcoxx.dll
- 2006-02-18 21:18 . 2005-05-04 01:57 17408 c:\windows\system32\ReinstallBackups\0002\DriverFiles\atitvo32.dll
+ 2009-11-16 22:03 . 2006-05-03 16:15 17408 c:\windows\system32\ReinstallBackups\0002\DriverFiles\atitvo32.dll
+ 2009-11-16 22:03 . 2006-05-03 16:43 53248 c:\windows\system32\ReinstallBackups\0002\DriverFiles\ATIDDC.DLL
- 2006-02-18 21:18 . 2005-05-04 02:22 53248 c:\windows\system32\ReinstallBackups\0002\DriverFiles\ATIDDC.DLL
+ 2009-11-16 22:03 . 2006-05-03 16:45 26112 c:\windows\system32\ReinstallBackups\0002\DriverFiles\Ati2mdxx.exe
- 2006-02-18 21:18 . 2005-08-04 03:04 46080 c:\windows\system32\ReinstallBackups\0002\DriverFiles\ati2evxx.dll
+ 2009-11-16 22:03 . 2005-08-04 03:04 46080 c:\windows\system32\ReinstallBackups\0002\DriverFiles\ati2evxx.dll
+ 2009-11-16 22:03 . 2006-05-03 16:10 40960 c:\windows\system32\ReinstallBackups\0002\DriverFiles\ati2erec.dll
- 2006-02-18 21:18 . 2005-08-04 03:04 39936 c:\windows\system32\ReinstallBackups\0002\DriverFiles\ati2edxx.dll
+ 2009-11-16 22:03 . 2005-08-04 03:04 39936 c:\windows\system32\ReinstallBackups\0002\DriverFiles\ati2edxx.dll
+ 2009-11-16 22:02 . 2005-08-04 03:04 73728 c:\windows\system32\ReinstallBackups\0001\DriverFiles\Oemdspif.dll
+ 2009-11-16 22:02 . 2001-11-09 07:01 24064 c:\windows\system32\ReinstallBackups\0001\DriverFiles\ativcoxx.dll
+ 2009-11-16 22:02 . 2005-08-04 02:08 17408 c:\windows\system32\ReinstallBackups\0001\DriverFiles\atitvo32.dll
+ 2009-11-16 22:02 . 2005-06-10 20:59 95617 c:\windows\system32\ReinstallBackups\0001\DriverFiles\atiicdxx.dat
+ 2009-11-16 22:02 . 2005-08-04 03:02 53248 c:\windows\system32\ReinstallBackups\0001\DriverFiles\ATIDDC.DLL
+ 2009-11-16 22:02 . 2005-08-04 03:04 25088 c:\windows\system32\ReinstallBackups\0001\DriverFiles\Ati2mdxx.exe
+ 2009-11-16 22:02 . 2005-08-04 03:04 46080 c:\windows\system32\ReinstallBackups\0001\DriverFiles\ati2evxx.dll
+ 2009-11-16 22:02 . 2005-08-04 02:08 40960 c:\windows\system32\ReinstallBackups\0001\DriverFiles\ati2erec.dll
+ 2009-11-16 22:02 . 2005-08-04 03:04 39936 c:\windows\system32\ReinstallBackups\0001\DriverFiles\ati2edxx.dll
- 2004-08-18 12:00 . 2008-04-14 03:21 79872 c:\windows\system32\raschap.dll
+ 2004-08-18 12:00 . 2009-10-12 13:40 79872 c:\windows\system32\raschap.dll
+ 2004-08-18 12:00 . 2010-03-29 07:38 52764 c:\windows\system32\perfc009.dat
- 2004-08-18 12:00 . 2009-04-18 14:22 52764 c:\windows\system32\perfc009.dat
+ 2004-08-18 12:00 . 2009-10-08 13:57 22528 c:\windows\system32\oleaccrc.dll
+ 2005-08-04 03:04 . 2006-05-03 16:45 77824 c:\windows\system32\Oemdspif.dll
+ 2009-01-27 16:48 . 2009-02-09 06:37 91136 c:\windows\system32\nmwcdcls.dll
- 2009-01-27 16:48 . 2009-02-09 05:37 91136 c:\windows\system32\nmwcdcls.dll
+ 2004-08-17 15:49 . 2009-11-27 17:14 17920 c:\windows\system32\msyuv.dll
+ 2004-08-18 12:00 . 2009-11-27 16:09 28672 c:\windows\system32\msvidc32.dll
+ 2004-08-18 12:00 . 2009-11-27 16:09 11264 c:\windows\system32\msrle32.dll
- 2004-08-18 12:00 . 2008-04-14 03:21 11264 c:\windows\system32\msrle32.dll
- 2006-11-07 19:03 . 2009-03-08 02:31 55296 c:\windows\system32\msfeedsbs.dll
+ 2006-11-07 19:03 . 2010-02-25 06:18 55296 c:\windows\system32\msfeedsbs.dll
+ 2004-08-18 12:00 . 2009-09-04 21:05 58880 c:\windows\system32\msasn1.dll
+ 2010-02-13 13:37 . 2010-02-13 13:37 85173 c:\windows\system32\Macromed\Flash\uninstall_plugin.exe
+ 2009-05-26 16:37 . 2009-05-26 16:37 89102 c:\windows\system32\Macromed\Flash\uninstall_activeX.exe
- 2004-08-18 12:00 . 2009-03-08 02:33 25600 c:\windows\system32\jsproxy.dll
+ 2004-08-18 12:00 . 2010-02-25 06:18 25600 c:\windows\system32\jsproxy.dll
+ 2004-08-17 15:49 . 2009-11-27 16:09 48128 c:\windows\system32\iyuv_32.dll
+ 2004-08-18 12:00 . 2009-10-21 05:40 25088 c:\windows\system32\httpapi.dll
+ 2004-08-18 12:00 . 2009-10-15 16:32 81920 c:\windows\system32\fontsub.dll
- 2009-05-06 19:44 . 2008-08-26 08:26 18816 c:\windows\system32\DRVSTORE\pccsmcfd_A3B3916E5D8138F59EE218321B27B044D3B18294\pccsmcfd.sys
+ 2009-06-24 15:14 . 2008-08-26 08:26 18816 c:\windows\system32\DRVSTORE\pccsmcfd_A3B3916E5D8138F59EE218321B27B044D3B18294\pccsmcfd.sys
+ 2009-06-24 15:13 . 2009-02-09 06:37 22016 c:\windows\system32\DRVSTORE\ccdcmbo_34CB4225E6E4893AE1D3E4443E91C2B9703B729C\ccdcmbo.sys
+ 2009-06-24 15:13 . 2009-02-09 06:37 91136 c:\windows\system32\DRVSTORE\ccdcmb_34CB4225E6E4893AE1D3E4443E91C2B9703B729C\nmwcdcls.dll
+ 2009-06-24 15:13 . 2009-02-09 06:37 17664 c:\windows\system32\DRVSTORE\ccdcmb_34CB4225E6E4893AE1D3E4443E91C2B9703B729C\ccdcmb.sys
+ 2009-06-24 15:14 . 2008-08-26 08:26 18816 c:\windows\system32\drivers\pccsmcfd.sys
- 2009-05-06 19:44 . 2008-08-26 08:26 18816 c:\windows\system32\drivers\pccsmcfd.sys
+ 2009-05-14 20:56 . 2010-01-07 15:07 38224 c:\windows\system32\drivers\mbamswissarmy.sys
+ 2009-05-14 20:56 . 2010-01-07 15:07 19160 c:\windows\system32\drivers\mbam.sys
+ 2004-08-18 12:00 . 2009-06-24 11:18 92928 c:\windows\system32\drivers\ksecdd.sys
- 2009-04-17 20:12 . 2009-05-14 06:16 23524 c:\windows\system32\drivers\GVTDrv.sys
+ 2009-11-16 20:45 . 2009-11-24 07:10 23524 c:\windows\system32\drivers\GVTDrv.sys
+ 2005-08-25 08:33 . 2008-09-22 01:41 43520 c:\windows\system32\drivers\fetnd5bv.sys
+ 2005-08-04 02:08 . 2006-05-03 16:10 40960 c:\windows\system32\drivers\ati2erec.dll
- 2005-08-04 02:08 . 2005-08-04 02:08 40960 c:\windows\system32\drivers\ati2erec.dll
+ 2006-02-20 15:44 . 2009-11-24 23:49 48560 c:\windows\system32\drivers\aswTdi.sys
+ 2006-02-20 15:44 . 2009-11-24 23:48 23120 c:\windows\system32\drivers\aswRdr.sys
+ 2006-02-20 15:44 . 2009-09-15 11:56 94160 c:\windows\system32\drivers\aswmon2.sys
+ 2006-02-20 15:44 . 2009-11-24 23:51 93424 c:\windows\system32\drivers\aswmon.sys
+ 2008-04-04 17:23 . 2009-09-15 11:55 20560 c:\windows\system32\drivers\aswFsBlk.sys
- 2008-04-04 17:23 . 2009-02-05 21:07 20560 c:\windows\system32\drivers\aswFsBlk.sys
+ 2006-02-20 15:44 . 2009-11-24 23:47 27408 c:\windows\system32\drivers\aavmker4.sys
+ 2009-06-10 04:14 . 2010-02-25 06:18 12800 c:\windows\system32\dllcache\xpshims.dll
+ 2005-08-25 07:32 . 2009-08-06 17:24 35552 c:\windows\system32\dllcache\wups.dll
+ 2005-08-25 07:32 . 2009-08-06 17:24 53472 c:\windows\system32\dllcache\wuauclt.exe
+ 2009-06-25 08:27 . 2009-06-25 08:27 54272 c:\windows\system32\dllcache\wdigest.dll
+ 2009-06-15 10:45 . 2009-06-15 10:45 78336 c:\windows\system32\dllcache\telnet.exe
+ 2009-10-21 05:40 . 2009-10-21 05:40 75776 c:\windows\system32\dllcache\strmfilt.dll
+ 2009-02-03 19:58 . 2009-06-25 08:27 56832 c:\windows\system32\dllcache\secur32.dll
- 2009-02-03 19:58 . 2009-02-03 19:58 56832 c:\windows\system32\dllcache\secur32.dll
+ 2009-10-12 13:40 . 2009-10-12 13:40 79872 c:\windows\system32\dllcache\raschap.dll
+ 2004-08-18 12:00 . 2009-10-08 13:57 22528 c:\windows\system32\dllcache\oleaccrc.dll
+ 2009-11-27 17:14 . 2009-11-27 17:14 17920 c:\windows\system32\dllcache\msyuv.dll
+ 2004-08-18 12:00 . 2009-11-27 16:09 28672 c:\windows\system32\dllcache\msvidc32.dll
+ 2009-11-27 16:09 . 2009-11-27 16:09 11264 c:\windows\system32\dllcache\msrle32.dll
+ 2007-05-09 12:15 . 2010-02-25 06:18 55296 c:\windows\system32\dllcache\msfeedsbs.dll
- 2007-05-09 12:15 . 2009-03-08 02:31 55296 c:\windows\system32\dllcache\msfeedsbs.dll
+ 2009-09-04 21:05 . 2009-09-04 21:05 58880 c:\windows\system32\dllcache\msasn1.dll
+ 2009-06-24 11:18 . 2009-06-24 11:18 92928 c:\windows\system32\dllcache\ksecdd.sys
+ 2004-08-18 12:00 . 2010-02-25 06:18 25600 c:\windows\system32\dllcache\jsproxy.dll
- 2004-08-18 12:00 . 2009-03-08 02:33 25600 c:\windows\system32\dllcache\jsproxy.dll
+ 2009-11-27 16:09 . 2009-11-27 16:09 48128 c:\windows\system32\dllcache\iyuv_32.dll
+ 2009-05-12 15:38 . 2009-10-02 04:44 92160 c:\windows\system32\dllcache\iecompat.dll
+ 2009-10-21 05:40 . 2009-10-21 05:40 25088 c:\windows\system32\dllcache\httpapi.dll
+ 2009-06-16 14:40 . 2009-10-15 16:32 81920 c:\windows\system32\dllcache\fontsub.dll
+ 2009-12-14 07:10 . 2009-12-14 07:10 33280 c:\windows\system32\dllcache\csrsrv.dll
+ 2004-08-18 12:00 . 2009-08-06 17:24 96480 c:\windows\system32\dllcache\cdm.dll
+ 2009-06-10 14:15 . 2009-11-27 16:09 84992 c:\windows\system32\dllcache\avifil32.dll
+ 2009-07-17 19:04 . 2009-07-17 19:04 58880 c:\windows\system32\dllcache\atl.dll
+ 2004-08-18 12:00 . 2009-12-14 07:10 33280 c:\windows\system32\csrsrv.dll
+ 2004-08-18 12:00 . 2009-08-06 17:24 96480 c:\windows\system32\cdm.dll
+ 2004-08-18 12:00 . 2009-11-27 16:09 84992 c:\windows\system32\avifil32.dll
- 2004-08-18 12:00 . 2008-04-14 03:21 84992 c:\windows\system32\avifil32.dll
- 2006-02-20 15:44 . 2009-02-05 21:04 97480 c:\windows\system32\AVASTSS.scr
+ 2006-02-20 15:44 . 2009-11-24 23:47 97480 c:\windows\system32\AVASTSS.scr
- 2004-08-18 12:00 . 2008-04-14 03:21 58880 c:\windows\system32\atl.dll
+ 2004-08-18 12:00 . 2009-07-17 19:04 58880 c:\windows\system32\atl.dll
- 2001-11-09 15:01 . 2001-11-09 15:01 24064 c:\windows\system32\ativcoxx.dll
+ 2001-11-09 15:01 . 2001-11-09 07:01 24064 c:\windows\system32\ativcoxx.dll
+ 2005-08-04 02:08 . 2006-05-03 16:15 17408 c:\windows\system32\atitvo32.dll
- 2005-08-04 02:08 . 2005-08-04 02:08 17408 c:\windows\system32\atitvo32.dll
+ 2005-08-04 03:02 . 2006-05-03 16:43 53248 c:\windows\system32\ATIDDC.DLL
- 2005-08-04 03:02 . 2005-08-04 03:02 53248 c:\windows\system32\ATIDDC.DLL
+ 2005-08-04 03:04 . 2006-05-03 16:45 26112 c:\windows\system32\Ati2mdxx.exe
+ 2005-08-04 03:04 . 2006-05-03 16:44 61440 c:\windows\system32\ati2evxx.dll
+ 2005-08-04 03:04 . 2006-05-03 16:45 41984 c:\windows\system32\ati2edxx.dll
+ 2009-06-24 17:56 . 2009-06-24 17:56 73728 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe
+ 2003-04-07 17:05 . 2003-04-07 17:05 23040 c:\windows\Microsoft.NET\Framework\v1.1.4322\MUI\0405\mscorsecr.dll
- 2007-04-13 18:58 . 2007-04-13 18:58 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
+ 2008-05-27 22:49 . 2008-05-27 22:49 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
+ 2008-05-27 22:49 . 2008-05-27 22:49 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
- 2007-04-13 18:57 . 2007-04-13 18:57 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
+ 2003-04-07 17:31 . 2003-04-07 17:31 61440 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\System.Web.Services.resources.dll
+ 2003-04-07 17:32 . 2003-04-07 17:32 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\System.Web.Mobile.resources.dll
+ 2003-04-07 17:24 . 2003-04-07 17:24 40960 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\System.ServiceProcess.resources.dll
+ 2003-04-07 17:24 . 2003-04-07 17:24 11776 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
+ 2003-04-07 17:24 . 2003-04-07 17:24 28672 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\System.Runtime.Remoting.resources.dll
+ 2003-04-07 17:26 . 2003-04-07 17:26 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\system.resources.dll
+ 2003-04-07 17:31 . 2003-04-07 17:31 61440 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\System.Messaging.resources.dll
+ 2003-04-07 17:26 . 2003-04-07 17:26 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\System.Management.resources.dll
+ 2003-04-07 17:31 . 2003-04-07 17:31 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\System.EnterpriseServices.resources.dll
+ 2003-04-07 17:32 . 2003-04-07 17:32 13312 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\System.Drawing.resources.dll
+ 2003-04-07 17:32 . 2003-04-07 17:32 11264 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\System.DirectoryServices.resources.dll
+ 2003-04-07 17:32 . 2003-04-07 17:32 15872 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\System.Configuration.Install.resources.dll
+ 2003-04-07 17:30 . 2003-04-07 17:30 36864 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\Microsoft.VisualBasic.resources.dll
+ 2003-04-07 17:32 . 2003-04-07 17:32 45056 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\Microsoft.JScript.resources.dll
+ 2003-04-07 17:25 . 2003-04-07 17:25 10752 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\ConfigWizards.resources.dll
+ 2003-04-07 17:25 . 2003-04-07 17:25 40960 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\caspol.resources.dll
+ 2003-04-07 17:04 . 2003-04-07 17:04 40960 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\aspnet_rc.dll
- 2007-04-13 18:57 . 2007-04-13 18:57 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
+ 2008-05-27 22:49 . 2008-05-27 22:49 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
- 2007-04-13 19:30 . 2007-04-13 19:30 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
+ 2008-05-27 23:30 . 2008-05-27 23:30 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
+ 2003-04-07 17:06 . 2003-04-07 17:06 98304 c:\windows\Microsoft.NET\Framework\v1.1.4322\1029\cscompui.dll
+ 2003-04-07 17:06 . 2003-04-07 17:06 17920 c:\windows\Microsoft.NET\Framework\v1.1.4322\1029\alinkui.dll
+ 2006-12-24 12:44 . 2006-12-24 12:44 94208 c:\windows\Installer\de364e.msi
+ 2009-07-06 07:29 . 2009-07-06 07:29 15086 c:\windows\Installer\{3D39E775-DDDA-4327-B747-0BDC5F191331}\ARPPRODUCTICON.exe
+ 2009-06-24 15:14 . 2009-06-24 15:14 10134 c:\windows\Installer\{0C973594-7DDF-4BD0-84ED-3517F7622037}\ARPPRODUCTICON.exe
+ 2010-03-31 05:07 . 2009-12-21 19:08 12800 c:\windows\ie8updates\KB980182-IE8\xpshims.dll
+ 2010-03-31 05:07 . 2009-12-21 19:08 55296 c:\windows\ie8updates\KB980182-IE8\msfeedsbs.dll
+ 2010-03-31 05:07 . 2009-12-21 19:08 25600 c:\windows\ie8updates\KB980182-IE8\jsproxy.dll
+ 2010-01-21 19:20 . 2009-10-29 07:43 12800 c:\windows\ie8updates\KB978207-IE8\xpshims.dll
+ 2010-01-21 19:20 . 2009-10-29 07:43 55296 c:\windows\ie8updates\KB978207-IE8\msfeedsbs.dll
+ 2010-01-21 19:20 . 2009-10-29 07:43 25600 c:\windows\ie8updates\KB978207-IE8\jsproxy.dll
+ 2009-12-09 21:30 . 2009-08-29 07:58 12800 c:\windows\ie8updates\KB976325-IE8\xpshims.dll
+ 2009-12-09 21:30 . 2009-08-29 07:58 55296 c:\windows\ie8updates\KB976325-IE8\msfeedsbs.dll
+ 2009-12-09 21:30 . 2009-08-29 07:58 25600 c:\windows\ie8updates\KB976325-IE8\jsproxy.dll
+ 2009-10-15 17:54 . 2009-07-03 16:59 12800 c:\windows\ie8updates\KB974455-IE8\xpshims.dll
+ 2009-10-15 17:54 . 2009-07-03 16:59 55296 c:\windows\ie8updates\KB974455-IE8\msfeedsbs.dll
+ 2009-10-15 17:54 . 2009-07-03 16:59 25600 c:\windows\ie8updates\KB974455-IE8\jsproxy.dll
+ 2009-07-29 20:07 . 2009-04-30 21:16 12800 c:\windows\ie8updates\KB972260-IE8\xpshims.dll
+ 2009-07-29 20:07 . 2009-03-08 02:31 55296 c:\windows\ie8updates\KB972260-IE8\msfeedsbs.dll
+ 2009-07-29 20:07 . 2009-04-30 21:16 25600 c:\windows\ie8updates\KB972260-IE8\jsproxy.dll
+ 2009-06-10 05:32 . 2009-03-08 02:33 12288 c:\windows\ie8updates\KB969897-IE8\xpshims.dll
+ 2009-06-10 05:32 . 2009-03-08 02:33 25600 c:\windows\ie8updates\KB969897-IE8\jsproxy.dll
+ 2009-11-27 17:14 . 2009-11-27 17:14 17920 c:\windows\Driver Cache\i386\msyuv.dll
+ 2009-11-27 16:09 . 2009-11-27 16:09 48128 c:\windows\Driver Cache\i386\iyuv_32.dll
+ 2009-10-15 17:45 . 2009-10-15 17:45 90112 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_e27d791b\System.Drawing.Design.dll
+ 2009-10-15 17:45 . 2009-10-15 17:45 61440 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_729fb13b\CustomMarshalers.dll
+ 2009-07-25 12:35 . 2009-07-25 12:35 61440 c:\windows\assembly\GAC\System.Web.Services.resources\1.0.5000.0_cs_b03f5f7f11d50a3a\System.Web.Services.resources.dll
+ 2009-07-25 12:35 . 2009-07-25 12:35 77824 c:\windows\assembly\GAC\System.Web.Mobile.resources\1.0.5000.0_cs_b03f5f7f11d50a3a\System.Web.Mobile.resources.dll
+ 2009-07-25 12:35 . 2009-07-25 12:35 40960 c:\windows\assembly\GAC\System.ServiceProcess.resources\1.0.5000.0_cs_b03f5f7f11d50a3a\System.ServiceProcess.resources.dll
+ 2009-07-25 12:35 . 2009-07-25 12:35 11776 c:\windows\assembly\GAC\System.Runtime.Serialization.Formatters.Soap.resources\1.0.5000.0_cs_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
+ 2009-07-25 12:35 . 2009-07-25 12:35 28672 c:\windows\assembly\GAC\System.Runtime.Remoting.resources\1.0.5000.0_cs_b77a5c561934e089\System.runtime.remoting.resources.dll
+ 2009-07-25 12:35 . 2009-07-25 12:35 81920 c:\windows\assembly\GAC\System.resources\1.0.5000.0_cs_b77a5c561934e089\System.resources.dll
+ 2009-07-25 12:35 . 2009-07-25 12:35 61440 c:\windows\assembly\GAC\System.Messaging.resources\1.0.5000.0_cs_b03f5f7f11d50a3a\System.Messaging.resources.dll
+ 2009-07-25 12:35 . 2009-07-25 12:35 24576 c:\windows\assembly\GAC\system.management.resources\1.0.5000.0_cs_b03f5f7f11d50a3a\System.Management.resources.dll
+ 2009-07-25 12:35 . 2009-07-25 12:35 32768 c:\windows\assembly\GAC\System.EnterpriseServices.resources\1.0.5000.0_cs_b03f5f7f11d50a3a\System.EnterpriseServices.resources.dll
+ 2009-07-25 12:35 . 2009-07-25 12:35 13312 c:\windows\assembly\GAC\System.Drawing.resources\1.0.5000.0_cs_b03f5f7f11d50a3a\System.Drawing.resources.dll
+ 2009-07-25 12:35 . 2009-07-25 12:35 11264 c:\windows\assembly\GAC\System.DirectoryServices.resources\1.0.5000.0_cs_b03f5f7f11d50a3a\System.DirectoryServices.resources.dll
+ 2009-07-25 12:35 . 2009-07-25 12:35 15872 c:\windows\assembly\GAC\System.Configuration.Install.resources\1.0.5000.0_cs_b03f5f7f11d50a3a\System.Configuration.Install.resources.dll
+ 2009-07-25 12:35 . 2009-07-25 12:35 36864 c:\windows\assembly\GAC\Microsoft.VisualBasic.resources\7.0.5000.0_cs_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dll
+ 2009-07-25 12:35 . 2009-07-25 12:35 45056 c:\windows\assembly\GAC\Microsoft.JScript.resources\7.0.5000.0_cs_b03f5f7f11d50a3a\Microsoft.Jscript.resources.dll
+ 2010-02-24 12:48 . 2009-10-28 15:07 46080 c:\windows\$NtUninstallKB979306$\tzchange.exe
+ 2010-02-24 12:48 . 2010-01-23 10:43 16896 c:\windows\$NtUninstallKB979306$\spuninst\tzchange.dll
+ 2010-02-10 20:30 . 2008-04-14 03:21 32256 c:\windows\$NtUninstallKB978037$\csrsrv.dll
+ 2010-02-10 20:29 . 2004-08-18 12:00 25600 c:\windows\$NtUninstallKB977914$\msvidc32.dll
+ 2010-02-10 20:29 . 2008-04-14 03:21 11264 c:\windows\$NtUninstallKB977914$\msrle32.dll
+ 2010-02-10 20:29 . 2008-04-14 03:21 47104 c:\windows\$NtUninstallKB977914$\iyuv_32.dll
+ 2010-02-10 20:29 . 2009-06-10 14:15 84992 c:\windows\$NtUninstallKB977914$\avifil32.dll
+ 2009-11-25 11:38 . 2009-07-14 11:03 46080 c:\windows\$NtUninstallKB976098-v2$\tzchange.exe
+ 2009-11-25 11:38 . 2009-10-29 02:05 16896 c:\windows\$NtUninstallKB976098-v2$\spuninst\tzchange.dll
+ 2010-02-10 20:29 . 2008-04-14 03:21 16896 c:\windows\$NtUninstallKB975560$\msyuv.dll
+ 2009-10-15 17:45 . 2008-04-14 03:21 57344 c:\windows\$NtUninstallKB974571$\msasn1.dll
+ 2009-12-09 21:30 . 2008-04-14 03:21 79872 c:\windows\$NtUninstallKB974318$\raschap.dll
+ 2009-08-13 14:07 . 2008-04-14 03:21 58880 c:\windows\$NtUninstallKB973507$\atl.dll
+ 2010-01-12 19:48 . 2009-06-16 14:40 81920 c:\windows\$NtUninstallKB972270$\fontsub.dll
+ 2009-08-13 14:08 . 2008-04-14 03:21 84992 c:\windows\$NtUninstallKB971557$\avifil32.dll
+ 2009-11-12 17:59 . 2004-08-18 12:00 18944 c:\windows\$NtUninstallKB971513$\oleaccrc.dll
+ 2009-08-26 13:21 . 2008-04-14 03:22 60416 c:\windows\$NtUninstallKB970653-v3$\tzchange.exe
+ 2009-08-26 13:21 . 2009-07-16 04:18 14336 c:\windows\$NtUninstallKB970653-v3$\spuninst\tzchange.dll
+ 2009-12-09 21:30 . 2008-04-14 03:22 75776 c:\windows\$NtUninstallKB970430$\strmfilt.dll
+ 2009-12-09 21:30 . 2008-04-14 03:21 24576 c:\windows\$NtUninstallKB970430$\httpapi.dll
+ 2009-08-14 21:25 . 2008-04-14 03:22 49152 c:\windows\$NtUninstallKB968389$\wdigest.dll
+ 2009-08-14 21:25 . 2009-02-03 19:58 56832 c:\windows\$NtUninstallKB968389$\secur32.dll
+ 2009-08-14 21:25 . 2008-04-13 18:31 92288 c:\windows\$NtUninstallKB968389$\ksecdd.sys
+ 2009-07-16 16:25 . 2008-04-14 03:21 80896 c:\windows\$NtUninstallKB961371$\fontsub.dll
+ 2009-08-13 14:09 . 2008-04-14 03:22 77824 c:\windows\$NtUninstallKB960859$\telnet.exe
+ 2010-02-10 20:29 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB978706\update\spcustom.dll
+ 2010-02-10 20:29 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB978706\spmsg.dll
+ 2010-02-10 20:32 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB978262\update\spcustom.dll
+ 2010-02-10 20:32 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB978262\spmsg.dll
+ 2010-02-10 20:29 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB978251\update\spcustom.dll
+ 2010-02-10 20:29 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB978251\spmsg.dll
+ 2010-01-21 19:20 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB978207-IE8\update\spcustom.dll
+ 2010-01-21 19:20 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB978207-IE8\spmsg.dll
+ 2010-01-21 19:18 . 2009-12-21 19:02 12800 c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\xpshims.dll
+ 2010-01-21 19:18 . 2009-12-21 19:02 55296 c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\msfeedsbs.dll
+ 2010-01-21 19:18 . 2009-12-21 19:02 25600 c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\jsproxy.dll
+ 2010-02-10 20:30 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB978037\update\spcustom.dll
+ 2010-02-10 20:30 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB978037\spmsg.dll
+ 2009-12-14 07:11 . 2009-12-14 07:11 33280 c:\windows\$hf_mig$\KB978037\SP3QFE\csrsrv.dll
+ 2010-02-10 20:29 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB977914\update\spcustom.dll
+ 2010-02-10 20:29 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB977914\spmsg.dll
+ 2009-11-27 16:29 . 2009-11-27 16:29 28672 c:\windows\$hf_mig$\KB977914\SP3QFE\msvidc32.dll
+ 2009-11-27 16:29 . 2009-11-27 16:29 11264 c:\windows\$hf_mig$\KB977914\SP3QFE\msrle32.dll
+ 2009-11-27 16:29 . 2009-11-27 16:29 48128 c:\windows\$hf_mig$\KB977914\SP3QFE\iyuv_32.dll
+ 2009-11-27 16:29 . 2009-11-27 16:29 84992 c:\windows\$hf_mig$\KB977914\SP3QFE\avifil32.dll
+ 2010-02-10 20:29 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB977165\update\spcustom.dll
+ 2010-02-10 20:29 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB977165\spmsg.dll
+ 2009-11-04 20:36 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB976749-IE8\update\spcustom.dll
+ 2009-11-04 20:36 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB976749-IE8\spmsg.dll
+ 2010-02-24 12:49 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB976662-IE8\update\spcustom.dll
+ 2010-02-24 12:49 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB976662-IE8\spmsg.dll
+ 2009-12-09 21:30 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB976325-IE8\update\spcustom.dll
+ 2009-12-09 21:30 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB976325-IE8\spmsg.dll
+ 2009-12-09 10:04 . 2009-10-29 07:38 12800 c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\xpshims.dll
+ 2009-12-09 10:04 . 2009-10-29 07:38 55296 c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\msfeedsbs.dll
+ 2009-12-09 10:04 . 2009-10-29 07:38 25600 c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\jsproxy.dll
+ 2010-02-10 20:30 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB975713\update\spcustom.dll
+ 2010-02-10 20:30 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB975713\spmsg.dll
+ 2010-03-10 12:44 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB975561\update\spcustom.dll
+ 2010-03-10 12:44 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB975561\spmsg.dll
+ 2010-02-10 20:29 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB975560\update\spcustom.dll
+ 2010-02-10 20:29 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB975560\spmsg.dll
+ 2009-11-27 17:25 . 2009-11-27 17:25 17920 c:\windows\$hf_mig$\KB975560\SP3QFE\msyuv.dll
+ 2009-10-15 17:41 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB975467\update\spcustom.dll
+ 2009-10-15 17:41 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB975467\spmsg.dll
+ 2009-11-12 17:56 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB975364-IE8\update\spcustom.dll
+ 2009-11-12 17:56 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB975364-IE8\spmsg.dll
+ 2009-11-12 17:53 . 2009-10-02 04:43 92160 c:\windows\$hf_mig$\KB975364-IE8\SP3QFE\iecompat.dll
+ 2009-10-15 17:46 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB975025\update\spcustom.dll
+ 2009-10-15 17:46 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB975025\spmsg.dll
+ 2009-10-15 17:45 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB974571\update\spcustom.dll
+ 2009-10-15 17:45 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB974571\spmsg.dll
+ 2009-09-04 21:01 . 2009-09-04 21:01 58880 c:\windows\$hf_mig$\KB974571\SP3QFE\msasn1.dll
+ 2009-10-15 17:54 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB974455-IE8\update\spcustom.dll
+ 2009-10-15 17:54 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB974455-IE8\spmsg.dll
+ 2009-10-15 15:04 . 2009-08-29 07:51 12800 c:\windows\$hf_mig$\KB974455-IE8\SP3QFE\xpshims.dll
+ 2009-10-15 15:04 . 2009-08-29 07:51 55296 c:\windows\$hf_mig$\KB974455-IE8\SP3QFE\msfeedsbs.dll
+ 2009-10-15 15:04 . 2009-08-29 07:51 25600 c:\windows\$hf_mig$\KB974455-IE8\SP3QFE\jsproxy.dll
+ 2009-12-09 21:30 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB974392\update\spcustom.dll
+ 2009-12-09 21:30 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB974392\spmsg.dll
+ 2009-12-09 21:30 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB974318\update\spcustom.dll
+ 2009-12-09 21:30 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB974318\spmsg.dll
+ 2009-10-12 13:33 . 2009-10-12 13:33 79872 c:\windows\$hf_mig$\KB974318\SP3QFE\raschap.dll
+ 2009-10-15 17:46 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB974112\update\spcustom.dll
+ 2009-10-15 17:46 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB974112\spmsg.dll
+ 2009-12-09 21:30 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB973904\update\spcustom.dll
+ 2009-12-09 21:30 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB973904\spmsg.dll
+ 2009-08-13 14:07 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB973869\update\spcustom.dll
+ 2009-08-13 14:07 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB973869\spmsg.dll
+ 2009-08-13 13:59 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB973815\update\spcustom.dll
+ 2009-08-13 13:59 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB973815\spmsg.dll
+ 2009-11-25 11:38 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB973687\update\spcustom.dll
+ 2009-11-25 11:38 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB973687\spmsg.dll
+ 2009-10-15 17:41 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB973525\update\spcustom.dll
+ 2009-10-15 17:41 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB973525\spmsg.dll
+ 2009-08-13 14:07 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB973507\update\spcustom.dll
+ 2009-08-13 14:07 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB973507\spmsg.dll
+ 2009-07-17 19:27 . 2009-07-17 19:27 58880 c:\windows\$hf_mig$\KB973507\SP3QFE\atl.dll
+ 2009-08-13 14:07 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB973354\update\spcustom.dll
+ 2009-08-13 14:07 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB973354\spmsg.dll
+ 2009-07-16 16:30 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB973346\update\spcustom.dll
+ 2009-07-16 16:30 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB973346\spmsg.dll
+ 2010-01-12 19:48 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB972270\update\spcustom.dll
+ 2010-01-12 19:48 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB972270\spmsg.dll
+ 2010-01-12 19:46 . 2009-10-15 16:40 81920 c:\windows\$hf_mig$\KB972270\SP3QFE\fontsub.dll
+ 2009-07-29 20:07 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB972260-IE8\update\spcustom.dll
+ 2009-07-29 20:07 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB972260-IE8\spmsg.dll
+ 2009-07-29 09:26 . 2009-07-03 17:02 12800 c:\windows\$hf_mig$\KB972260-IE8\SP3QFE\xpshims.dll
+ 2009-07-29 09:26 . 2009-07-03 17:02 55296 c:\windows\$hf_mig$\KB972260-IE8\SP3QFE\msfeedsbs.dll
+ 2009-07-29 09:26 . 2009-07-03 17:02 25600 c:\windows\$hf_mig$\KB972260-IE8\SP3QFE\jsproxy.dll
+ 2009-09-09 18:30 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB971961-IE8\update\spcustom.dll
+ 2009-09-09 18:30 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB971961-IE8\spmsg.dll
+ 2009-12-09 21:29 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB971737\update\spcustom.dll
+ 2009-12-09 21:29 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB971737\spmsg.dll
+ 2009-08-13 14:08 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB971657\update\spcustom.dll
+ 2009-08-13 14:08 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB971657\spmsg.dll
+ 2009-07-16 16:30 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB971633\update\spcustom.dll
+ 2009-07-16 16:30 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB971633\spmsg.dll
+ 2009-08-13 14:08 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB971557\update\spcustom.dll
+ 2009-08-13 14:08 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB971557\spmsg.dll
+ 2009-06-10 14:02 . 2009-06-10 14:02 84992 c:\windows\$hf_mig$\KB971557\SP3QFE\avifil32.dll
+ 2009-10-15 17:42 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB971486\update\spcustom.dll
+ 2009-10-15 17:42 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB971486\spmsg.dll
+ 2010-02-10 20:32 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB971468\update\spcustom.dll
+ 2010-02-10 20:32 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB971468\spmsg.dll
+ 2009-12-09 21:30 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB970430\update\spcustom.dll
+ 2009-12-09 21:30 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB970430\spmsg.dll
+ 2009-10-21 05:42 . 2009-10-21 05:42 75776 c:\windows\$hf_mig$\KB970430\SP3QFE\strmfilt.dll
+ 2009-10-21 05:42 . 2009-10-21 05:42 25088 c:\windows\$hf_mig$\KB970430\SP3QFE\httpapi.dll
+ 2009-06-10 05:29 . 2007-11-30 12:39 26488 c:\windows\$hf_mig$\KB970238\update\spcustom.dll
+ 2009-06-10 05:29 . 2007-11-30 12:39 18296 c:\windows\$hf_mig$\KB970238\spmsg.dll
+ 2009-11-11 21:00 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB969947\update\spcustom.dll
+ 2009-11-11 21:00 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB969947\spmsg.dll
+ 2009-06-10 05:31 . 2007-11-30 12:39 26488 c:\windows\$hf_mig$\KB969898\update\spcustom.dll
+ 2009-06-10 05:31 . 2007-11-30 12:39 18296 c:\windows\$hf_mig$\KB969898\spmsg.dll
+ 2009-06-10 05:32 . 2007-11-30 12:39 26488 c:\windows\$hf_mig$\KB969897-IE8\update\spcustom.dll
+ 2009-06-10 05:32 . 2007-11-30 12:39 18296 c:\windows\$hf_mig$\KB969897-IE8\spmsg.dll
+ 2009-06-10 04:14 . 2009-04-30 21:19 12800 c:\windows\$hf_mig$\KB969897-IE8\SP3QFE\xpshims.dll
+ 2009-06-10 04:14 . 2009-04-30 21:19 25600 c:\windows\$hf_mig$\KB969897-IE8\SP3QFE\jsproxy.dll
+ 2009-10-15 17:47 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB969059\update\spcustom.dll
+ 2009-10-15 17:47 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB969059\spmsg.dll
+ 2009-06-10 05:28 . 2008-07-09 07:36 26488 c:\windows\$hf_mig$\KB968537\update\spcustom.dll
+ 2009-06-10 05:28 . 2008-07-09 07:36 18296 c:\windows\$hf_mig$\KB968537\spmsg.dll
+ 2009-08-14 21:25 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB968389\update\spcustom.dll
+ 2009-08-14 21:25 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB968389\spmsg.dll
+ 2009-06-25 08:42 . 2009-06-25 08:42 54272 c:\windows\$hf_mig$\KB968389\SP3QFE\wdigest.dll
+ 2009-06-25 08:42 . 2009-06-25 08:42 56832 c:\windows\$hf_mig$\KB968389\SP3QFE\secur32.dll
+ 2009-06-24 10:28 . 2009-06-24 10:28 92928 c:\windows\$hf_mig$\KB968389\SP3QFE\ksecdd.sys
+ 2009-06-10 05:31 . 2008-07-09 07:36 26488 c:\windows\$hf_mig$\KB961501\update\spcustom.dll
+ 2009-06-10 05:31 . 2008-07-09 07:36 18296 c:\windows\$hf_mig$\KB961501\spmsg.dll
+ 2009-07-16 16:25 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB961371\update\spcustom.dll
+ 2009-07-16 16:25 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB961371\spmsg.dll
+ 2009-06-16 14:44 . 2009-06-16 14:44 81920 c:\windows\$hf_mig$\KB961371\SP3QFE\fontsub.dll
+ 2009-08-13 14:09 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB960859\update\spcustom.dll
+ 2009-08-13 14:09 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB960859\spmsg.dll
+ 2009-06-15 11:14 . 2009-06-15 11:14 81408 c:\windows\$hf_mig$\KB960859\SP3QFE\tlntsess.exe
+ 2009-06-15 11:14 . 2009-06-15 11:14 78336 c:\windows\$hf_mig$\KB960859\SP3QFE\telnet.exe
+ 2009-09-09 18:24 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB956844\update\spcustom.dll
+ 2009-09-09 18:24 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB956844\spmsg.dll
+ 2009-08-13 14:08 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB956744\update\spcustom.dll
+ 2009-08-13 14:08 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB956744\spmsg.dll
+ 2010-01-12 19:48 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB955759\update\spcustom.dll
+ 2010-01-12 19:48 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB955759\spmsg.dll
+ 2001-10-24 12:25 . 2009-11-27 16:09 8704 c:\windows\system32\tsbyuv.dll
+ 2003-04-07 17:05 . 2003-04-07 17:05 4096 c:\windows\system32\mui\0405\mscoreer.dll
+ 2009-06-24 15:13 . 2009-03-19 12:48 8320 c:\windows\system32\DRVSTORE\nmwcdnsuc_34CB4225E6E4893AE1D3E4443E91C2B9703B729C\nmwcdnsuc.sys
+ 2009-06-24 15:13 . 2009-02-09 06:37 7808 c:\windows\system32\DRVSTORE\ccdcmbm_34CB4225E6E4893AE1D3E4443E91C2B9703B729C\usbser_lowerflt.sys
+ 2009-06-24 15:13 . 2009-02-09 06:37 7808 c:\windows\system32\DRVSTORE\ccdcmbcj_34CB4225E6E4893AE1D3E4443E91C2B9703B729C\usbser_lowerfltj.sys
+ 2009-11-27 16:09 . 2009-11-27 16:09 8704 c:\windows\system32\dllcache\tsbyuv.dll
+ 2003-04-07 17:32 . 2003-04-07 17:32 7680 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\System.Security.resources.dll
+ 2003-04-07 17:32 . 2003-04-07 17:32 6144 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\System.Drawing.Design.resources.dll
+ 2003-04-07 17:22 . 2003-04-07 17:22 9728 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\RegCode.resources.dll
+ 2003-04-07 17:25 . 2003-04-07 17:25 9728 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\Regasm.Resources.dll
+ 2003-04-07 17:23 . 2003-04-07 17:23 8192 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\JSC.resources.dll
+ 2003-04-07 17:25 . 2003-04-07 17:25 4608 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\InstallUtil.resources.dll
+ 2009-11-16 22:10 . 2009-11-16 22:10 9158 c:\windows\Installer\{EA9FAF16-0E5C-42C4-9742-9AF8D5F6D69B}\NewShortcut5_6E06A57A67284CFBAA9A5149F9C9ADB3.exe
+ 2009-11-16 22:10 . 2009-11-16 22:10 9158 c:\windows\Installer\{EA9FAF16-0E5C-42C4-9742-9AF8D5F6D69B}\NewShortcut3_6E06A57A67284CFBAA9A5149F9C9ADB3.exe
+ 2009-11-16 22:10 . 2009-11-16 22:10 9158 c:\windows\Installer\{EA9FAF16-0E5C-42C4-9742-9AF8D5F6D69B}\NewShortcut22_6E06A57A67284CFBAA9A5149F9C9ADB3.exe
+ 2009-11-16 22:10 . 2009-11-16 22:10 9158 c:\windows\Installer\{EA9FAF16-0E5C-42C4-9742-9AF8D5F6D69B}\NewShortcut21_6E06A57A67284CFBAA9A5149F9C9ADB3.exe
+ 2009-11-16 22:10 . 2009-11-16 22:10 9158 c:\windows\Installer\{EA9FAF16-0E5C-42C4-9742-9AF8D5F6D69B}\NewShortcut2_6E06A57A67284CFBAA9A5149F9C9ADB3.exe
+ 2009-11-16 22:10 . 2009-11-16 22:10 9158 c:\windows\Installer\{EA9FAF16-0E5C-42C4-9742-9AF8D5F6D69B}\NewShortcut1_6E06A57A67284CFBAA9A5149F9C9ADB3.exe
+ 2009-11-16 22:10 . 2009-11-16 22:10 9158 c:\windows\Installer\{EA9FAF16-0E5C-42C4-9742-9AF8D5F6D69B}\ARPPRODUCTICON.exe
+ 2009-06-24 15:13 . 2009-06-24 15:13 3262 c:\windows\Installer\{52D02A2B-03D2-4E34-A358-DC5D951FD296}\ARPPRODUCTICON.exe
+ 2009-11-27 16:09 . 2009-11-27 16:09 8704 c:\windows\Driver Cache\i386\tsbyuv.dll
+ 2009-07-25 12:35 . 2009-07-25 12:35 7680 c:\windows\assembly\GAC\System.Security.resources\1.0.5000.0_cs_b03f5f7f11d50a3a\System.Security.resources.dll
+ 2009-07-25 12:35 . 2009-07-25 12:35 6144 c:\windows\assembly\GAC\System.Drawing.Design.resources\1.0.5000.0_cs_b03f5f7f11d50a3a\System.Drawing.design.resources.dll
+ 2009-07-25 12:35 . 2009-07-25 12:35 9728 c:\windows\assembly\GAC\Regcode.resources\1.0.5000.0_cs_b03f5f7f11d50a3a\RegCode.resources.dll
+ 2010-02-10 20:29 . 2004-08-18 12:00 8192 c:\windows\$NtUninstallKB977914$\tsbyuv.dll
+ 2009-11-27 16:29 . 2009-11-27 16:29 8704 c:\windows\$hf_mig$\KB977914\SP3QFE\tsbyuv.dll
+ 2005-08-25 07:32 . 2009-08-06 17:24 209632 c:\windows\system32\wuweb.dll
+ 2005-08-25 07:32 . 2009-08-06 17:24 327896 c:\windows\system32\wucltui.dll
+ 2005-08-25 07:32 . 2009-08-06 17:23 575704 c:\windows\system32\wuapi.dll
+ 2004-08-18 12:00 . 2009-04-01 21:02 604160 c:\windows\system32\wmspdmod.dll
+ 2004-08-18 12:00 . 2009-07-13 21:43 286208 c:\windows\system32\wmpdxm.dll
- 2004-08-18 12:00 . 2008-04-14 03:22 132096 c:\windows\system32\wkssvc.dll
+ 2004-08-18 12:00 . 2009-06-10 06:16 132096 c:\windows\system32\wkssvc.dll
+ 2004-08-18 12:00 . 2009-08-25 09:19 354816 c:\windows\system32\winhttp.dll
+ 2009-10-08 13:57 . 2009-10-08 13:57 613376 c:\windows\system32\uiautomationcore.dll
+ 2004-08-18 12:00 . 2009-10-15 16:32 119808 c:\windows\system32\t2embed.dll
- 2004-08-18 12:00 . 2008-10-03 10:04 247326 c:\windows\system32\strmdll.dll
+ 2004-08-18 12:00 . 2009-08-26 08:02 247326 c:\windows\system32\strmdll.dll
+ 2004-08-18 12:00 . 2009-06-25 08:27 147456 c:\windows\system32\schannel.dll
+ 2004-08-18 12:00 . 2009-12-08 09:25 474112 c:\windows\system32\shlwapi.dll
- 2004-08-18 12:00 . 2008-04-14 03:21 474112 c:\windows\system32\shlwapi.dll
+ 2004-08-18 12:00 . 2009-04-15 14:54 585216 c:\windows\system32\rpcrt4.dll
+ 2009-06-12 18:17 . 2005-08-04 02:47 639872 c:\windows\system32\ReinstallBackups\0018\DriverFiles\B_25699\ativvaxx.dll
+ 2009-06-12 18:17 . 2005-08-04 02:34 147456 c:\windows\system32\ReinstallBackups\0018\DriverFiles\B_25699\atikvmag.dll
+ 2009-06-12 18:17 . 2005-02-22 17:46 299008 c:\windows\system32\ReinstallBackups\0018\DriverFiles\B_25699\atiiiexx.dll
+ 2009-06-12 18:17 . 2005-02-22 17:18 212992 c:\windows\system32\ReinstallBackups\0018\DriverFiles\B_25699\ATIDEMGR.dll
+ 2009-06-12 18:17 . 2005-02-22 16:36 986624 c:\windows\system32\ReinstallBackups\0018\DriverFiles\B_25699\ati2mtag.sys
+ 2009-06-12 18:17 . 2005-08-04 03:02 380928 c:\windows\system32\ReinstallBackups\0018\DriverFiles\B_25699\ati2evxx.exe
+ 2009-06-12 18:17 . 2005-08-04 03:10 205312 c:\windows\system32\ReinstallBackups\0018\DriverFiles\B_25699\ati2dvag.dll
+ 2009-06-12 18:17 . 2005-08-04 02:02 212992 c:\windows\system32\ReinstallBackups\0018\DriverFiles\B_25699\ati2cqag.dll
+ 2009-11-16 20:17 . 2006-02-21 18:24 860480 c:\windows\system32\ReinstallBackups\0014\DriverFiles\B_21349\ativvaxx.dll
+ 2009-11-16 20:17 . 2006-02-21 18:41 114688 c:\windows\system32\ReinstallBackups\0014\DriverFiles\B_21349\atipdlxx.dll
+ 2009-11-16 20:17 . 2006-02-21 18:11 151552 c:\windows\system32\ReinstallBackups\0014\DriverFiles\B_21349\atikvmag.dll
+ 2009-11-16 20:17 . 2006-02-21 18:20 307200 c:\windows\system32\ReinstallBackups\0014\DriverFiles\B_21349\atiiiexx.dll
+ 2009-11-16 20:17 . 2006-02-13 11:29 121995 c:\windows\system32\ReinstallBackups\0014\DriverFiles\B_21349\atiicdxx.dat
+ 2009-11-16 20:17 . 2006-02-21 17:21 282624 c:\windows\system32\ReinstallBackups\0014\DriverFiles\B_21349\ATIDEMGR.dll
+ 2009-11-16 20:17 . 2006-02-21 18:39 405504 c:\windows\system32\ReinstallBackups\0014\DriverFiles\B_21349\ati2evxx.exe
+ 2009-11-16 20:17 . 2006-02-21 18:46 256512 c:\windows\system32\ReinstallBackups\0014\DriverFiles\B_21349\ati2dvag.dll
+ 2009-11-16 20:17 . 2006-02-21 18:04 258048 c:\windows\system32\ReinstallBackups\0014\DriverFiles\B_21349\ati2cqag.dll
+ 2009-11-16 22:03 . 2005-08-04 02:47 639872 c:\windows\system32\ReinstallBackups\0002\DriverFiles\ativvaxx.dll
+ 2009-11-16 22:03 . 2006-05-03 16:45 114688 c:\windows\system32\ReinstallBackups\0002\DriverFiles\atipdlxx.dll
- 2006-02-18 21:18 . 2005-08-04 02:34 147456 c:\windows\system32\ReinstallBackups\0002\DriverFiles\atikvmag.dll
+ 2009-11-16 22:03 . 2005-08-04 02:34 147456 c:\windows\system32\ReinstallBackups\0002\DriverFiles\atikvmag.dll
+ 2009-11-16 22:03 . 2006-05-03 16:12 286720 c:\windows\system32\ReinstallBackups\0002\DriverFiles\ATIDEMGR.dll
+ 2009-11-16 22:03 . 2005-08-04 03:02 380928 c:\windows\system32\ReinstallBackups\0002\DriverFiles\ati2evxx.exe
- 2006-02-18 21:18 . 2005-08-04 03:02 380928 c:\windows\system32\ReinstallBackups\0002\DriverFiles\ati2evxx.exe
+ 2009-11-16 22:03 . 2005-08-04 03:10 205312 c:\windows\system32\ReinstallBackups\0002\DriverFiles\ati2dvag.dll
+ 2009-11-16 22:03 . 2005-08-04 02:02 212992 c:\windows\system32\ReinstallBackups\0002\DriverFiles\ati2cqag.dll
+ 2009-11-16 22:02 . 2005-08-04 02:47 639872 c:\windows\system32\ReinstallBackups\0001\DriverFiles\ativvaxx.dll
+ 2009-11-16 22:02 . 2005-08-04 03:04 106496 c:\windows\system32\ReinstallBackups\0001\DriverFiles\atipdlxx.dll
+ 2009-11-16 22:02 . 2005-08-04 02:34 147456 c:\windows\system32\ReinstallBackups\0001\DriverFiles\atikvmag.dll
+ 2009-11-16 22:02 . 2005-08-04 06:07 307200 c:\windows\system32\ReinstallBackups\0001\DriverFiles\atiiiexx.dll
+ 2009-11-16 22:02 . 2005-08-04 05:27 249856 c:\windows\system32\ReinstallBackups\0001\DriverFiles\ATIDEMGR.dll
+ 2009-11-16 22:02 . 2005-08-04 03:02 380928 c:\windows\system32\ReinstallBackups\0001\DriverFiles\ati2evxx.exe
+ 2009-11-16 22:02 . 2005-08-04 03:10 205312 c:\windows\system32\ReinstallBackups\0001\DriverFiles\ati2dvag.dll
+ 2009-11-16 22:02 . 2005-08-04 02:02 212992 c:\windows\system32\ReinstallBackups\0001\DriverFiles\ati2cqag.dll
+ 2004-08-18 12:00 . 2009-10-12 13:40 150016 c:\windows\system32\rastls.dll
+ 2004-08-18 12:00 . 2010-03-29 07:38 380350 c:\windows\system32\perfh009.dat
- 2004-08-18 12:00 . 2009-04-18 14:22 380350 c:\windows\system32\perfh009.dat
+ 2004-08-18 12:00 . 2009-10-08 13:57 220160 c:\windows\system32\oleacc.dll
+ 2004-08-18 12:00 . 2010-02-25 06:18 206848 c:\windows\system32\occache.dll
+ 2004-08-18 12:00 . 2009-10-13 10:34 271360 c:\windows\system32\oakley.dll
- 2004-08-18 12:00 . 2008-04-14 03:21 271360 c:\windows\system32\oakley.dll
+ 2004-08-18 12:00 . 2009-08-05 09:01 205312 c:\windows\system32\mswebdvd.dll
+ 2004-08-18 12:00 . 2009-09-11 14:19 136192 c:\windows\system32\msv1_0.dll
- 2004-08-18 12:00 . 2009-03-08 02:32 611840 c:\windows\system32\mstime.dll
+ 2004-08-18 12:00 . 2010-02-25 06:18 611840 c:\windows\system32\mstime.dll
- 2005-08-25 07:30 . 2008-04-14 03:22 343552 c:\windows\system32\mspaint.exe
+ 2005-08-25 07:30 . 2009-12-17 07:42 343552 c:\windows\system32\mspaint.exe
- 2006-11-07 19:03 . 2009-03-08 02:32 594432 c:\windows\system32\msfeeds.dll
+ 2006-11-07 19:03 . 2010-02-25 06:18 594432 c:\windows\system32\msfeeds.dll
+ 2010-01-27 01:07 . 2010-01-27 01:07 256280 c:\windows\system32\Macromed\Flash\NPSWF32_FlashUtil.exe
+ 2009-02-03 02:07 . 2009-02-03 02:07 240544 c:\windows\system32\Macromed\Flash\FlashUtil10b.exe
+ 2004-08-18 12:00 . 2009-06-25 08:27 729088 c:\windows\system32\lsasrv.dll
+ 2004-08-18 12:00 . 2009-05-07 15:33 346624 c:\windows\system32\localspl.dll
+ 2004-08-18 12:00 . 2009-06-25 08:27 301568 c:\windows\system32\kerberos.dll
+ 2004-08-18 12:00 . 2009-12-09 05:55 726528 c:\windows\system32\jscript.dll
- 2004-08-18 12:00 . 2009-03-08 02:33 726528 c:\windows\system32\jscript.dll
+ 2010-03-31 15:20 . 2010-03-09 02:28 153376 c:\windows\system32\javaws.exe
+ 2010-03-31 15:20 . 2010-03-09 02:28 145184 c:\windows\system32\javaw.exe
+ 2010-03-31 15:20 . 2010-03-09 02:28 145184 c:\windows\system32\java.exe
+ 2004-08-18 12:00 . 2010-02-25 06:18 184320 c:\windows\system32\iepeers.dll
+ 2004-08-18 12:00 . 2010-02-25 06:18 387584 c:\windows\system32\iedkcs32.dll
+ 2004-08-18 12:00 . 2010-02-24 09:53 173056 c:\windows\system32\ie4uinit.exe
- 2004-08-18 12:00 . 2009-03-08 02:32 173056 c:\windows\system32\ie4uinit.exe
+ 2005-08-25 09:22 . 2010-02-25 08:11 192184 c:\windows\system32\FNTCACHE.DAT
+ 2009-06-24 15:14 . 2009-05-11 11:30 547840 c:\windows\system32\DRVSTORE

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119405
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: W32/Malware!Gemini - F security

#5 Příspěvek od Rudy »

Snapshot vynechte, nebo rozdělte na více částí.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Gamp.G
Návštěvník
Návštěvník
Příspěvky: 69
Registrován: 14 lis 2008 19:13

Re: W32/Malware!Gemini - F security

#6 Příspěvek od Gamp.G »

Druhá část:

\pccswpddri_1C34ED6F4888FC93BE68C7A31A24834F522D3CBF\PCCSWpdDriver.dll
+ 2009-06-24 15:13 . 2009-03-19 12:48 136704 c:\windows\system32\DRVSTORE\nmwcdnsu_34CB4225E6E4893AE1D3E4443E91C2B9703B729C\nmwcdnsu.sys
+ 2009-06-24 15:13 . 2009-02-09 06:37 659968 c:\windows\system32\DRVSTORE\ccdcmb_34CB4225E6E4893AE1D3E4443E91C2B9703B729C\nmwcdcocls.dll
+ 2004-08-18 12:00 . 2009-12-31 16:50 353792 c:\windows\system32\drivers\srv.sys
+ 2004-08-18 12:00 . 2009-12-04 18:22 455424 c:\windows\system32\drivers\mrxsmb.sys
+ 2004-08-18 12:00 . 2009-10-20 16:20 265728 c:\windows\system32\drivers\http.sys
+ 2008-04-04 17:23 . 2009-09-15 11:55 114768 c:\windows\system32\drivers\aswSP.sys
- 2008-04-04 17:23 . 2009-02-05 21:07 114768 c:\windows\system32\drivers\aswSP.sys
+ 2005-08-25 07:32 . 2009-08-06 17:24 209632 c:\windows\system32\dllcache\wuweb.dll
+ 2005-08-25 07:32 . 2009-08-06 17:24 327896 c:\windows\system32\dllcache\wucltui.dll
+ 2005-08-25 07:32 . 2009-08-06 17:23 575704 c:\windows\system32\dllcache\wuapi.dll
+ 2004-08-18 12:00 . 2009-04-01 21:02 604160 c:\windows\system32\dllcache\wmspdmod.dll
+ 2004-08-18 12:00 . 2009-07-13 21:43 286208 c:\windows\system32\dllcache\wmpdxm.dll
+ 2009-06-10 06:16 . 2009-06-10 06:16 132096 c:\windows\system32\dllcache\wkssvc.dll
+ 2004-08-18 12:00 . 2010-02-25 06:18 916480 c:\windows\system32\dllcache\wininet.dll
+ 2008-12-16 12:32 . 2009-08-25 09:19 354816 c:\windows\system32\dllcache\winhttp.dll
+ 2009-09-09 18:02 . 2009-06-21 21:48 153088 c:\windows\system32\dllcache\triedit.dll
+ 2009-06-16 14:40 . 2009-10-15 16:32 119808 c:\windows\system32\dllcache\t2embed.dll
- 2004-08-18 12:00 . 2008-10-03 10:04 247326 c:\windows\system32\dllcache\strmdll.dll
+ 2004-08-18 12:00 . 2009-08-26 08:02 247326 c:\windows\system32\dllcache\strmdll.dll
+ 2008-10-16 06:54 . 2009-12-31 16:50 353792 c:\windows\system32\dllcache\srv.sys
+ 2008-12-05 06:57 . 2009-06-25 08:27 147456 c:\windows\system32\dllcache\schannel.dll
+ 2009-01-07 16:20 . 2009-12-08 09:25 474112 c:\windows\system32\dllcache\shlwapi.dll
- 2009-01-07 16:20 . 2009-01-07 16:20 474112 c:\windows\system32\dllcache\shlwapi.dll
+ 2009-04-15 14:54 . 2009-04-15 14:54 585216 c:\windows\system32\dllcache\rpcrt4.dll
+ 2009-10-12 13:40 . 2009-10-12 13:40 150016 c:\windows\system32\dllcache\rastls.dll
+ 2004-08-18 12:00 . 2009-10-08 13:57 220160 c:\windows\system32\dllcache\oleacc.dll
+ 2004-08-18 12:00 . 2010-02-25 06:18 206848 c:\windows\system32\dllcache\occache.dll
+ 2009-10-13 10:34 . 2009-10-13 10:34 271360 c:\windows\system32\dllcache\oakley.dll
+ 2009-08-05 09:01 . 2009-08-05 09:01 205312 c:\windows\system32\dllcache\mswebdvd.dll
+ 2009-06-25 08:27 . 2009-09-11 14:19 136192 c:\windows\system32\dllcache\msv1_0.dll
- 2004-08-18 12:00 . 2009-03-08 02:32 611840 c:\windows\system32\dllcache\mstime.dll
+ 2004-08-18 12:00 . 2010-02-25 06:18 611840 c:\windows\system32\dllcache\mstime.dll
+ 2009-12-17 07:42 . 2009-12-17 07:42 343552 c:\windows\system32\dllcache\mspaint.exe
- 2007-05-09 12:15 . 2009-03-08 02:32 594432 c:\windows\system32\dllcache\msfeeds.dll
+ 2007-05-09 12:15 . 2010-02-25 06:18 594432 c:\windows\system32\dllcache\msfeeds.dll
+ 2008-11-12 15:25 . 2009-12-04 18:22 455424 c:\windows\system32\dllcache\mrxsmb.sys
+ 2009-04-17 14:10 . 2009-06-25 08:27 729088 c:\windows\system32\dllcache\lsasrv.dll
+ 2009-05-07 15:33 . 2009-05-07 15:33 346624 c:\windows\system32\dllcache\localspl.dll
+ 2009-06-25 08:27 . 2009-06-25 08:27 301568 c:\windows\system32\dllcache\kerberos.dll
+ 2008-05-09 10:56 . 2009-12-09 05:55 726528 c:\windows\system32\dllcache\jscript.dll
- 2008-05-09 10:56 . 2009-03-08 02:33 726528 c:\windows\system32\dllcache\jscript.dll
+ 2009-06-10 04:14 . 2010-02-25 06:18 247808 c:\windows\system32\dllcache\ieproxy.dll
+ 2004-08-18 12:00 . 2010-02-25 06:18 184320 c:\windows\system32\dllcache\iepeers.dll
+ 2004-08-18 12:00 . 2010-02-25 06:18 387584 c:\windows\system32\dllcache\iedkcs32.dll
+ 2004-08-18 12:00 . 2010-02-24 09:53 173056 c:\windows\system32\dllcache\ie4uinit.exe
- 2004-08-18 12:00 . 2009-03-08 02:32 173056 c:\windows\system32\dllcache\ie4uinit.exe
+ 2009-10-20 16:20 . 2009-10-20 16:20 265728 c:\windows\system32\dllcache\http.sys
+ 2010-01-12 19:46 . 2009-11-21 16:03 471552 c:\windows\system32\dllcache\aclayers.dll
+ 2006-11-01 21:21 . 2006-11-01 21:21 319456 c:\windows\system32\difxapi.dll
+ 2005-08-04 03:04 . 2006-05-03 16:45 114688 c:\windows\system32\atipdlxx.dll
+ 2005-08-04 02:34 . 2006-05-03 16:15 151552 c:\windows\system32\atikvmag.dll
- 2005-08-04 06:07 . 2005-08-04 06:07 307200 c:\windows\system32\atiiiexx.dll
+ 2005-08-04 06:07 . 2006-05-03 16:54 307200 c:\windows\system32\atiiiexx.dll
+ 2005-06-10 20:59 . 2006-04-28 20:05 127614 c:\windows\system32\atiicdxx.dat
+ 2005-08-04 05:27 . 2006-05-03 16:12 286720 c:\windows\system32\ATIDEMGR.dll
+ 2005-11-09 11:35 . 2006-05-03 10:57 520192 c:\windows\system32\ati2sgag.exe
+ 2005-08-04 03:02 . 2006-05-03 16:43 413696 c:\windows\system32\ati2evxx.exe
+ 2005-11-09 11:31 . 2006-05-03 16:51 258048 c:\windows\system32\ati2dvag.dll
+ 2005-11-09 11:31 . 2006-05-03 16:09 282624 c:\windows\system32\ati2cqag.dll
+ 2008-05-27 22:49 . 2008-05-27 22:49 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
- 2007-04-13 18:58 . 2007-04-13 18:58 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
+ 2008-05-27 22:48 . 2008-05-27 22:48 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
- 2007-04-13 18:56 . 2007-04-13 18:56 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
+ 2003-04-07 17:32 . 2003-04-07 17:32 110592 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\System.xml.resources.dll
+ 2003-04-07 17:23 . 2003-04-07 17:23 180224 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\System.Windows.Forms.resources.dll
+ 2003-04-07 17:31 . 2003-04-07 17:31 122880 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\System.Web.resources.dll
+ 2003-04-07 17:24 . 2003-04-07 17:24 139264 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\System.Design.resources.dll
+ 2003-04-07 17:32 . 2003-04-07 17:32 118784 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\System.Data.resources.dll
+ 2003-04-07 17:05 . 2003-04-07 17:05 122880 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\ShFusRes.dll
+ 2003-04-07 17:04 . 2003-04-07 17:04 159744 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\mscorrc.dll
+ 2003-04-07 17:32 . 2003-04-07 17:32 229376 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\mscorlib.resources.dll
+ 2003-04-07 17:25 . 2003-04-07 17:25 720896 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\mscorcfg.resources.dll
+ 2008-05-27 23:30 . 2008-05-27 23:30 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
- 2007-04-13 19:30 . 2007-04-13 19:30 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
+ 2003-04-07 17:04 . 2003-04-07 17:04 163840 c:\windows\Microsoft.NET\Framework\v1.1.4322\1029\Vsavb7rtUI.dll
+ 2003-04-07 17:06 . 2003-04-07 17:06 139264 c:\windows\Microsoft.NET\Framework\v1.1.4322\1029\vbc7ui.dll
+ 2009-01-27 16:48 . 2009-01-27 16:48 163840 c:\windows\Installer\f40dec.msi
+ 2010-03-31 15:20 . 2010-03-31 15:20 180224 c:\windows\Installer\eb4b4.msi
+ 2009-07-14 15:41 . 2009-07-14 15:41 598016 c:\windows\Installer\c53aa.msi
+ 2009-06-24 15:14 . 2009-06-24 15:14 549888 c:\windows\Installer\ae2a1.msi
+ 2009-06-24 15:13 . 2009-06-24 15:13 331264 c:\windows\Installer\ae26b.msi
+ 2009-07-06 07:29 . 2009-07-06 07:29 857088 c:\windows\Installer\a9d40.msi
+ 2009-07-25 12:35 . 2009-07-25 12:35 256512 c:\windows\Installer\1b959a.msi
+ 2007-03-05 17:36 . 2007-03-05 17:36 189952 c:\windows\Installer\1a3d1e5.msi
+ 2005-08-25 07:57 . 2005-08-25 07:57 265216 c:\windows\Installer\10fb8c.msi
+ 2010-03-30 14:42 . 2010-03-30 14:42 371272 c:\windows\Installer\{D103C4BA-F905-437A-8049-DB24763BBE36}\SkypeIcon.exe
+ 2010-03-31 05:07 . 2009-12-21 19:08 916480 c:\windows\ie8updates\KB980182-IE8\wininet.dll
+ 2010-03-31 05:07 . 2009-05-26 11:40 391032 c:\windows\ie8updates\KB980182-IE8\spuninst\updspapi.dll
+ 2010-03-31 05:07 . 2009-05-26 11:40 233848 c:\windows\ie8updates\KB980182-IE8\spuninst\spuninst.exe
+ 2010-03-31 05:07 . 2009-12-21 19:08 206848 c:\windows\ie8updates\KB980182-IE8\occache.dll
+ 2010-03-31 05:07 . 2009-03-08 02:32 611840 c:\windows\ie8updates\KB980182-IE8\mstime.dll
+ 2010-03-31 05:07 . 2009-12-21 19:08 594432 c:\windows\ie8updates\KB980182-IE8\msfeeds.dll
+ 2010-03-31 05:07 . 2009-12-21 19:08 246272 c:\windows\ie8updates\KB980182-IE8\ieproxy.dll
+ 2010-03-31 05:07 . 2009-12-21 19:08 184320 c:\windows\ie8updates\KB980182-IE8\iepeers.dll
+ 2010-03-31 05:07 . 2009-12-21 19:08 387584 c:\windows\ie8updates\KB980182-IE8\iedkcs32.dll
+ 2010-03-31 05:07 . 2009-12-21 13:18 173056 c:\windows\ie8updates\KB980182-IE8\ie4uinit.exe
+ 2010-01-21 19:20 . 2009-10-29 07:43 916480 c:\windows\ie8updates\KB978207-IE8\wininet.dll
+ 2010-01-21 19:20 . 2009-05-26 11:40 391032 c:\windows\ie8updates\KB978207-IE8\spuninst\updspapi.dll
+ 2010-01-21 19:20 . 2008-07-08 12:59 233848 c:\windows\ie8updates\KB978207-IE8\spuninst\spuninst.exe
+ 2010-01-21 19:20 . 2009-10-29 07:43 206848 c:\windows\ie8updates\KB978207-IE8\occache.dll
+ 2010-01-21 19:20 . 2009-10-29 07:43 594432 c:\windows\ie8updates\KB978207-IE8\msfeeds.dll
+ 2010-01-21 19:20 . 2009-10-29 07:43 246272 c:\windows\ie8updates\KB978207-IE8\ieproxy.dll
+ 2010-01-21 19:20 . 2009-10-29 07:43 184320 c:\windows\ie8updates\KB978207-IE8\iepeers.dll
+ 2010-01-21 19:20 . 2009-10-29 07:43 387584 c:\windows\ie8updates\KB978207-IE8\iedkcs32.dll
+ 2010-01-21 19:20 . 2009-10-28 14:40 173056 c:\windows\ie8updates\KB978207-IE8\ie4uinit.exe
+ 2009-11-04 20:36 . 2008-07-08 12:59 391032 c:\windows\ie8updates\KB976749-IE8\spuninst\updspapi.dll
+ 2009-11-04 20:36 . 2008-07-08 12:59 233848 c:\windows\ie8updates\KB976749-IE8\spuninst\spuninst.exe
+ 2010-02-24 12:49 . 2008-07-08 12:59 391032 c:\windows\ie8updates\KB976662-IE8\spuninst\updspapi.dll
+ 2010-02-24 12:49 . 2008-07-08 12:59 233848 c:\windows\ie8updates\KB976662-IE8\spuninst\spuninst.exe
+ 2010-02-24 12:49 . 2009-06-22 06:48 726528 c:\windows\ie8updates\KB976662-IE8\jscript.dll
+ 2009-12-09 21:30 . 2009-08-29 07:58 916480 c:\windows\ie8updates\KB976325-IE8\wininet.dll
+ 2009-12-09 21:30 . 2009-05-26 11:40 391032 c:\windows\ie8updates\KB976325-IE8\spuninst\updspapi.dll
+ 2009-12-09 21:30 . 2009-05-26 11:40 233848 c:\windows\ie8updates\KB976325-IE8\spuninst\spuninst.exe
+ 2009-12-09 21:30 . 2009-08-29 07:58 206848 c:\windows\ie8updates\KB976325-IE8\occache.dll
+ 2009-12-09 21:30 . 2009-08-29 07:58 594432 c:\windows\ie8updates\KB976325-IE8\msfeeds.dll
+ 2009-12-09 21:30 . 2009-08-29 07:58 246272 c:\windows\ie8updates\KB976325-IE8\ieproxy.dll
+ 2009-12-09 21:30 . 2009-08-29 07:58 184320 c:\windows\ie8updates\KB976325-IE8\iepeers.dll
+ 2009-12-09 21:30 . 2009-08-29 07:58 387584 c:\windows\ie8updates\KB976325-IE8\iedkcs32.dll
+ 2009-12-09 21:30 . 2009-08-28 10:35 173056 c:\windows\ie8updates\KB976325-IE8\ie4uinit.exe
+ 2009-11-12 17:56 . 2009-05-26 11:40 391032 c:\windows\ie8updates\KB975364-IE8\spuninst\updspapi.dll
+ 2009-11-12 17:56 . 2009-05-26 11:40 233848 c:\windows\ie8updates\KB975364-IE8\spuninst\spuninst.exe
+ 2009-11-12 17:56 . 2009-04-25 05:30 102400 c:\windows\ie8updates\KB975364-IE8\iecompat.dll
+ 2009-10-15 17:54 . 2009-07-03 16:59 915456 c:\windows\ie8updates\KB974455-IE8\wininet.dll
+ 2009-10-15 17:54 . 2009-05-26 11:40 391032 c:\windows\ie8updates\KB974455-IE8\spuninst\updspapi.dll
+ 2009-10-15 17:54 . 2008-07-08 12:59 233848 c:\windows\ie8updates\KB974455-IE8\spuninst\spuninst.exe
+ 2009-10-15 17:54 . 2009-07-03 16:59 206848 c:\windows\ie8updates\KB974455-IE8\occache.dll
+ 2009-10-15 17:54 . 2009-07-03 16:59 594432 c:\windows\ie8updates\KB974455-IE8\msfeeds.dll
+ 2009-10-15 17:54 . 2009-07-03 16:59 246272 c:\windows\ie8updates\KB974455-IE8\ieproxy.dll
+ 2009-10-15 17:54 . 2009-07-03 16:59 184320 c:\windows\ie8updates\KB974455-IE8\iepeers.dll
+ 2009-10-15 17:54 . 2009-07-03 16:59 386048 c:\windows\ie8updates\KB974455-IE8\iedkcs32.dll
+ 2009-10-15 17:54 . 2009-07-03 11:01 173056 c:\windows\ie8updates\KB974455-IE8\ie4uinit.exe
+ 2009-07-29 20:07 . 2009-05-13 05:05 915456 c:\windows\ie8updates\KB972260-IE8\wininet.dll
+ 2009-07-29 20:07 . 2009-05-26 11:40 391032 c:\windows\ie8updates\KB972260-IE8\spuninst\updspapi.dll
+ 2009-07-29 20:07 . 2009-05-26 11:40 233848 c:\windows\ie8updates\KB972260-IE8\spuninst\spuninst.exe
+ 2009-07-29 20:07 . 2009-03-08 02:34 109568 c:\windows\ie8updates\KB972260-IE8\occache.dll
+ 2009-07-29 20:07 . 2009-03-08 02:32 594432 c:\windows\ie8updates\KB972260-IE8\msfeeds.dll
+ 2009-07-29 20:07 . 2009-04-30 21:16 246272 c:\windows\ie8updates\KB972260-IE8\ieproxy.dll
+ 2009-07-29 20:07 . 2009-03-08 02:31 183808 c:\windows\ie8updates\KB972260-IE8\iepeers.dll
+ 2009-07-29 20:07 . 2009-04-30 21:16 385536 c:\windows\ie8updates\KB972260-IE8\iedkcs32.dll
+ 2009-07-29 20:07 . 2009-04-30 11:21 173056 c:\windows\ie8updates\KB972260-IE8\ie4uinit.exe
+ 2009-09-09 18:30 . 2008-07-08 12:59 391032 c:\windows\ie8updates\KB971961-IE8\spuninst\updspapi.dll
+ 2009-09-09 18:30 . 2008-07-08 12:59 233848 c:\windows\ie8updates\KB971961-IE8\spuninst\spuninst.exe
+ 2009-09-09 18:30 . 2009-03-08 02:33 726528 c:\windows\ie8updates\KB971961-IE8\jscript.dll
+ 2009-06-10 05:32 . 2009-03-08 02:34 914944 c:\windows\ie8updates\KB969897-IE8\wininet.dll
+ 2009-06-10 05:32 . 2008-07-09 07:36 391032 c:\windows\ie8updates\KB969897-IE8\spuninst\updspapi.dll
+ 2009-06-10 05:32 . 2007-11-30 12:39 233848 c:\windows\ie8updates\KB969897-IE8\spuninst\spuninst.exe
+ 2009-06-10 05:32 . 2009-03-08 02:33 246784 c:\windows\ie8updates\KB969897-IE8\ieproxy.dll
+ 2009-06-10 05:32 . 2009-03-08 12:09 391536 c:\windows\ie8updates\KB969897-IE8\iedkcs32.dll
+ 2009-06-10 05:32 . 2009-03-08 02:32 173056 c:\windows\ie8updates\KB969897-IE8\ie4uinit.exe
+ 2008-11-12 15:25 . 2009-12-04 18:22 455424 c:\windows\Driver Cache\i386\mrxsmb.sys
+ 2009-10-20 16:20 . 2009-10-20 16:20 265728 c:\windows\Driver Cache\i386\http.sys
+ 2009-10-15 17:47 . 2009-10-15 17:47 835584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_2b0c4d58\System.Drawing.dll
+ 2009-07-25 12:35 . 2009-07-25 12:35 110592 c:\windows\assembly\GAC\System.XML.resources\1.0.5000.0_cs_b77a5c561934e089\System.xml.resources.dll
+ 2009-07-25 12:35 . 2009-07-25 12:35 180224 c:\windows\assembly\GAC\System.Windows.Forms.resources\1.0.5000.0_cs_b77a5c561934e089\System.Windows.Forms.resources.dll
+ 2009-07-25 12:35 . 2009-07-25 12:35 122880 c:\windows\assembly\GAC\System.Web.resources\1.0.5000.0_cs_b03f5f7f11d50a3a\System.Web.resources.dll
+ 2009-07-25 12:35 . 2009-07-25 12:35 139264 c:\windows\assembly\GAC\System.Design.resources\1.0.5000.0_cs_b03f5f7f11d50a3a\System.Design.resources.dll
+ 2009-07-25 12:35 . 2009-07-25 12:35 118784 c:\windows\assembly\GAC\System.Data.resources\1.0.5000.0_cs_b77a5c561934e089\System.Data.resources.dll
+ 2009-07-25 12:35 . 2009-07-25 12:35 229376 c:\windows\assembly\GAC\mscorlib.resources\1.0.5000.0_cs_b77a5c561934e089\Mscorlib.resources.dll
+ 2009-07-25 12:35 . 2009-07-25 12:35 720896 c:\windows\assembly\GAC\mscorcfg.resources\1.0.5000.0_cs_b03f5f7f11d50a3a\mscorcfg.resources.dll
+ 2004-08-18 12:00 . 2009-11-21 16:03 471552 c:\windows\AppPatch\aclayers.dll
+ 2010-02-24 12:48 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB979306$\spuninst\updspapi.dll
+ 2010-02-24 12:48 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB979306$\spuninst\spuninst.exe
+ 2010-02-10 20:29 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB978706$\spuninst\updspapi.dll
+ 2010-02-10 20:29 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB978706$\spuninst\spuninst.exe
+ 2010-02-10 20:29 . 2008-04-14 03:22 343552 c:\windows\$NtUninstallKB978706$\mspaint.exe
+ 2010-02-10 20:32 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB978262$\spuninst\updspapi.dll
+ 2010-02-10 20:32 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB978262$\spuninst\spuninst.exe
+ 2010-02-10 20:29 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB978251$\spuninst\updspapi.dll
+ 2010-02-10 20:29 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB978251$\spuninst\spuninst.exe
+ 2010-02-10 20:29 . 2008-10-24 11:21 455296 c:\windows\$NtUninstallKB978251$\mrxsmb.sys
+ 2010-02-10 20:30 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB978037$\spuninst\updspapi.dll
+ 2010-02-10 20:30 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB978037$\spuninst\spuninst.exe
+ 2010-02-10 20:29 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB977914$\spuninst\updspapi.dll
+ 2010-02-10 20:29 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB977914$\spuninst\spuninst.exe
+ 2010-02-10 20:29 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB977165$\spuninst\updspapi.dll
+ 2010-02-10 20:29 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB977165$\spuninst\spuninst.exe
+ 2009-11-25 11:38 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB976098-v2$\spuninst\updspapi.dll
+ 2009-11-25 11:38 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB976098-v2$\spuninst\spuninst.exe
+ 2010-02-10 20:30 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB975713$\spuninst\updspapi.dll
+ 2010-02-10 20:30 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB975713$\spuninst\spuninst.exe
+ 2010-02-10 20:30 . 2008-04-14 03:21 474112 c:\windows\$NtUninstallKB975713$\shlwapi.dll
+ 2010-03-10 12:44 . 2009-05-26 16:10 391032 c:\windows\$NtUninstallKB975561$\spuninst\updspapi.dll
+ 2010-03-10 12:44 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB975561$\spuninst\spuninst.exe
+ 2010-02-10 20:29 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB975560$\spuninst\updspapi.dll
+ 2010-02-10 20:29 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB975560$\spuninst\spuninst.exe
+ 2009-10-15 17:40 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB975467$\spuninst\updspapi.dll
+ 2009-10-15 17:40 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB975467$\spuninst\spuninst.exe
+ 2009-10-15 17:40 . 2009-06-25 08:27 136192 c:\windows\$NtUninstallKB975467$\msv1_0.dll
+ 2009-10-15 17:46 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB975025$\spuninst\updspapi.dll
+ 2009-10-15 17:46 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB975025$\spuninst\spuninst.exe
+ 2009-10-15 17:45 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB974571$\spuninst\updspapi.dll
+ 2009-10-15 17:45 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB974571$\spuninst\spuninst.exe
+ 2009-12-09 21:30 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB974392$\spuninst\updspapi.dll
+ 2009-12-09 21:30 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB974392$\spuninst\spuninst.exe
+ 2009-12-09 21:30 . 2008-04-14 03:21 271360 c:\windows\$NtUninstallKB974392$\oakley.dll
+ 2009-12-09 21:30 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB974318$\spuninst\updspapi.dll
+ 2009-12-09 21:30 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB974318$\spuninst\spuninst.exe
+ 2009-12-09 21:30 . 2008-04-14 03:21 150528 c:\windows\$NtUninstallKB974318$\rastls.dll
+ 2009-10-15 17:46 . 2008-10-03 10:04 247326 c:\windows\$NtUninstallKB974112$\strmdll.dll
+ 2009-10-15 17:46 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB974112$\spuninst\updspapi.dll
+ 2009-10-15 17:46 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB974112$\spuninst\spuninst.exe
+ 2009-12-09 21:30 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB973904$\spuninst\updspapi.dll
+ 2009-12-09 21:30 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB973904$\spuninst\spuninst.exe
+ 2009-12-09 21:30 . 2004-08-18 12:00 116288 c:\windows\$NtUninstallKB973904$\msconv97.dll
+ 2009-08-13 14:07 . 2008-07-08 12:59 391032 c:\windows\$NtUninstallKB973869$\spuninst\updspapi.dll
+ 2009-08-13 14:07 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB973869$\spuninst\spuninst.exe
+ 2009-08-13 13:59 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB973815$\spuninst\updspapi.dll
+ 2009-08-13 13:59 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB973815$\spuninst\spuninst.exe
+ 2009-08-13 13:59 . 2008-04-14 03:21 204288 c:\windows\$NtUninstallKB973815$\mswebdvd.dll
+ 2009-11-25 11:38 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB973687$\spuninst\updspapi.dll
+ 2009-11-25 11:38 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB973687$\spuninst\spuninst.exe
+ 2009-08-13 14:06 . 2006-10-18 20:47 314880 c:\windows\$NtUninstallKB973540_WM9$\wmpdxm.dll
+ 2009-08-13 14:06 . 2007-07-27 08:41 382840 c:\windows\$NtUninstallKB973540_WM9$\spuninst\updspapi.dll
+ 2009-08-13 14:06 . 2007-07-27 06:17 233848 c:\windows\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe
+ 2009-10-15 17:41 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB973525$\spuninst\updspapi.dll
+ 2009-10-15 17:41 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB973525$\spuninst\spuninst.exe
+ 2009-08-13 14:07 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB973507$\spuninst\updspapi.dll
+ 2009-08-13 14:07 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB973507$\spuninst\spuninst.exe
+ 2009-08-13 14:07 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB973354$\spuninst\updspapi.dll
+ 2009-08-13 14:07 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB973354$\spuninst\spuninst.exe
+ 2009-07-16 16:30 . 2008-07-08 12:59 391032 c:\windows\$NtUninstallKB973346$\spuninst\updspapi.dll
+ 2009-07-16 16:30 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB973346$\spuninst\spuninst.exe
+ 2010-01-12 19:48 . 2009-06-16 14:40 119808 c:\windows\$NtUninstallKB972270$\t2embed.dll
+ 2010-01-12 19:48 . 2008-07-08 12:59 391032 c:\windows\$NtUninstallKB972270$\spuninst\updspapi.dll
+ 2010-01-12 19:48 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB972270$\spuninst\spuninst.exe
+ 2009-12-09 21:29 . 2008-12-16 12:32 354304 c:\windows\$NtUninstallKB971737$\winhttp.dll
+ 2009-12-09 21:29 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB971737$\spuninst\updspapi.dll
+ 2009-12-09 21:29 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB971737$\spuninst\spuninst.exe
+ 2009-08-13 14:08 . 2008-04-14 03:22 132096 c:\windows\$NtUninstallKB971657$\wkssvc.dll
+ 2009-08-13 14:08 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB971657$\spuninst\updspapi.dll
+ 2009-08-13 14:08 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB971657$\spuninst\spuninst.exe
+ 2009-07-16 16:30 . 2008-07-09 07:36 391032 c:\windows\$NtUninstallKB971633$\spuninst\updspapi.dll
+ 2009-07-16 16:30 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB971633$\spuninst\spuninst.exe
+ 2009-08-13 14:08 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB971557$\spuninst\updspapi.dll
+ 2009-08-13 14:08 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB971557$\spuninst\spuninst.exe
+ 2009-11-12 17:59 . 2009-03-23 09:50 391032 c:\windows\$NtUninstallKB971513$\spuninst\updspapi.dll
+ 2009-11-12 17:59 . 2009-03-23 09:50 233848 c:\windows\$NtUninstallKB971513$\spuninst\spuninst.exe
+ 2009-11-12 17:59 . 2004-08-18 12:00 163328 c:\windows\$NtUninstallKB971513$\oleacc.dll
+ 2009-10-15 17:41 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB971486$\spuninst\updspapi.dll
+ 2009-10-15 17:41 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB971486$\spuninst\spuninst.exe
+ 2010-02-10 20:32 . 2008-12-11 10:57 333952 c:\windows\$NtUninstallKB971468$\srv.sys
+ 2010-02-10 20:32 . 2008-07-08 12:59 391032 c:\windows\$NtUninstallKB971468$\spuninst\updspapi.dll
+ 2010-02-10 20:32 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB971468$\spuninst\spuninst.exe
+ 2009-08-26 13:21 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB970653-v3$\spuninst\updspapi.dll
+ 2009-08-26 13:21 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB970653-v3$\spuninst\spuninst.exe
+ 2009-12-09 21:30 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB970430$\spuninst\updspapi.dll
+ 2009-12-09 21:30 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB970430$\spuninst\spuninst.exe
+ 2009-12-09 21:30 . 2008-04-13 18:53 264832 c:\windows\$NtUninstallKB970430$\http.sys
+ 2009-06-10 05:29 . 2007-11-30 12:39 391032 c:\windows\$NtUninstallKB970238$\spuninst\updspapi.dll
+ 2009-06-10 05:29 . 2007-11-30 12:39 233848 c:\windows\$NtUninstallKB970238$\spuninst\spuninst.exe
+ 2009-06-10 05:29 . 2008-04-14 03:21 584704 c:\windows\$NtUninstallKB970238$\rpcrt4.dll
+ 2009-11-11 21:00 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB969947$\spuninst\updspapi.dll
+ 2009-11-11 21:00 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB969947$\spuninst\spuninst.exe
+ 2009-06-10 05:31 . 2007-11-30 12:39 391032 c:\windows\$NtUninstallKB969898$\spuninst\updspapi.dll
+ 2009-06-10 05:31 . 2007-11-30 12:39 233848 c:\windows\$NtUninstallKB969898$\spuninst\spuninst.exe
+ 2009-10-15 17:47 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB969059$\spuninst\updspapi.dll
+ 2009-10-15 17:47 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB969059$\spuninst\spuninst.exe
+ 2009-09-09 18:30 . 2007-07-27 08:41 382840 c:\windows\$NtUninstallKB968816_WM9$\spuninst\updspapi.dll
+ 2009-09-09 18:30 . 2007-07-27 06:17 233848 c:\windows\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe
+ 2009-06-10 05:28 . 2008-07-09 07:36 391032 c:\windows\$NtUninstallKB968537$\spuninst\updspapi.dll
+ 2009-06-10 05:28 . 2008-07-09 07:36 233848 c:\windows\$NtUninstallKB968537$\spuninst\spuninst.exe
+ 2009-08-14 21:25 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB968389$\spuninst\updspapi.dll
+ 2009-08-14 21:25 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB968389$\spuninst\spuninst.exe
+ 2009-08-14 21:25 . 2008-12-05 06:57 144896 c:\windows\$NtUninstallKB968389$\schannel.dll
+ 2009-08-14 21:25 . 2008-04-14 03:21 132608 c:\windows\$NtUninstallKB968389$\msv1_0.dll
+ 2009-08-14 21:25 . 2009-02-09 10:56 728064 c:\windows\$NtUninstallKB968389$\lsasrv.dll
+ 2009-08-14 21:25 . 2008-04-14 03:21 299520 c:\windows\$NtUninstallKB968389$\kerberos.dll
+ 2009-06-10 05:31 . 2008-07-09 07:36 391032 c:\windows\$NtUninstallKB961501$\spuninst\updspapi.dll
+ 2009-06-10 05:31 . 2008-07-09 07:36 233848 c:\windows\$NtUninstallKB961501$\spuninst\spuninst.exe
+ 2009-06-10 05:31 . 2008-04-14 03:21 344064 c:\windows\$NtUninstallKB961501$\localspl.dll
+ 2009-07-16 16:25 . 2008-04-14 03:22 117760 c:\windows\$NtUninstallKB961371$\t2embed.dll
+ 2009-07-16 16:25 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB961371$\spuninst\updspapi.dll
+ 2009-07-16 16:25 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB961371$\spuninst\spuninst.exe
+ 2009-08-13 14:09 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB960859$\spuninst\updspapi.dll
+ 2009-08-13 14:09 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB960859$\spuninst\spuninst.exe
+ 2009-10-15 17:53 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB958869$\spuninst\updspapi.dll
+ 2009-10-15 17:53 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB958869$\spuninst\spuninst.exe
+ 2009-09-09 18:24 . 2008-04-14 03:22 153088 c:\windows\$NtUninstallKB956844$\triedit.dll
+ 2009-09-09 18:24 . 2008-07-08 12:59 391032 c:\windows\$NtUninstallKB956844$\spuninst\updspapi.dll
+ 2009-09-09 18:24 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB956844$\spuninst\spuninst.exe
+ 2009-08-13 14:08 . 2008-07-08 12:59 391032 c:\windows\$NtUninstallKB956744$\spuninst\updspapi.dll
+ 2009-08-13 14:08 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB956744$\spuninst\spuninst.exe
+ 2010-01-12 19:48 . 2009-05-26 16:10 391032 c:\windows\$NtUninstallKB955759$\spuninst\updspapi.dll
+ 2010-01-12 19:48 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB955759$\spuninst\spuninst.exe
+ 2010-01-12 19:48 . 2008-04-14 03:21 451072 c:\windows\$NtUninstallKB955759$\aclayers.dll
+ 2009-10-15 17:47 . 2006-10-18 20:47 603648 c:\windows\$NtUninstallKB954155_WM9$\wmspdmod.dll
+ 2009-10-15 17:47 . 2007-07-27 08:41 382840 c:\windows\$NtUninstallKB954155_WM9$\spuninst\updspapi.dll
+ 2009-10-15 17:47 . 2007-07-27 06:17 233848 c:\windows\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe
+ 2010-02-10 20:29 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB978706\update\updspapi.dll
+ 2010-02-10 20:29 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB978706\update\update.exe
+ 2010-02-10 20:29 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB978706\spuninst.exe
+ 2009-12-17 07:39 . 2009-12-17 07:39 343552 c:\windows\$hf_mig$\KB978706\SP3QFE\mspaint.exe
+ 2010-02-10 20:32 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB978262\update\updspapi.dll
+ 2010-02-10 20:32 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB978262\update\update.exe
+ 2010-02-10 20:32 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB978262\spuninst.exe
+ 2010-02-10 20:29 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB978251\update\updspapi.dll
+ 2010-02-10 20:29 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB978251\update\update.exe
+ 2010-02-10 20:29 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB978251\spuninst.exe
+ 2010-02-10 20:27 . 2009-12-04 17:25 456832 c:\windows\$hf_mig$\KB978251\SP3QFE\mrxsmb.sys
+ 2010-01-21 19:20 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB978207-IE8\update\updspapi.dll
+ 2010-01-21 19:20 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB978207-IE8\update\update.exe
+ 2010-01-21 19:20 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB978207-IE8\spuninst.exe
+ 2010-01-21 19:18 . 2009-12-21 19:02 916480 c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\wininet.dll
+ 2010-01-21 19:18 . 2009-12-21 19:02 206848 c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\occache.dll
+ 2010-01-21 19:18 . 2009-12-21 19:02 594432 c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\msfeeds.dll
+ 2010-01-21 19:18 . 2009-12-21 19:02 246272 c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\ieproxy.dll
+ 2010-01-21 19:18 . 2009-12-21 19:02 184320 c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\iepeers.dll
+ 2010-01-21 19:18 . 2009-12-21 19:02 387584 c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\iedkcs32.dll
+ 2010-01-21 19:18 . 2009-12-21 13:22 173056 c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\ie4uinit.exe
+ 2010-02-10 20:30 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB978037\update\updspapi.dll
+ 2010-02-10 20:30 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB978037\update\update.exe
+ 2010-02-10 20:30 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB978037\spuninst.exe
+ 2010-02-10 20:29 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB977914\update\updspapi.dll
+ 2010-02-10 20:29 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB977914\update\update.exe
+ 2010-02-10 20:29 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB977914\spuninst.exe
+ 2010-02-10 20:29 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB977165\update\updspapi.dll
+ 2010-02-10 20:29 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB977165\update\update.exe
+ 2010-02-10 20:29 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB977165\spuninst.exe
+ 2009-11-04 20:36 . 2008-07-08 12:59 391032 c:\windows\$hf_mig$\KB976749-IE8\update\updspapi.dll
+ 2009-11-04 20:36 . 2008-07-08 12:59 759160 c:\windows\$hf_mig$\KB976749-IE8\update\update.exe
+ 2009-11-04 20:36 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB976749-IE8\spuninst.exe
+ 2010-02-24 12:49 . 2008-07-08 12:59 391032 c:\windows\$hf_mig$\KB976662-IE8\update\updspapi.dll
+ 2010-02-24 12:49 . 2008-07-08 12:59 759160 c:\windows\$hf_mig$\KB976662-IE8\update\update.exe
+ 2010-02-24 12:49 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB976662-IE8\spuninst.exe
+ 2010-02-24 11:03 . 2009-12-09 05:52 726528 c:\windows\$hf_mig$\KB976662-IE8\SP3QFE\jscript.dll
+ 2009-12-09 21:30 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB976325-IE8\update\updspapi.dll
+ 2009-12-09 21:30 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB976325-IE8\update\update.exe
+ 2009-12-09 21:30 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB976325-IE8\spuninst.exe
+ 2009-12-09 10:04 . 2009-10-29 07:38 916480 c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\wininet.dll
+ 2009-12-09 10:04 . 2009-10-29 07:38 206848 c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\occache.dll
+ 2009-12-09 10:04 . 2009-10-29 07:38 594432 c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\msfeeds.dll
+ 2009-12-09 10:04 . 2009-10-29 07:38 246272 c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\ieproxy.dll
+ 2009-12-09 10:04 . 2009-10-29 07:38 184320 c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\iepeers.dll
+ 2009-12-09 10:04 . 2009-10-29 07:37 387584 c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\iedkcs32.dll
+ 2009-12-09 10:04 . 2009-10-28 14:09 173056 c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\ie4uinit.exe
+ 2010-02-10 20:30 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB975713\update\updspapi.dll
+ 2010-02-10 20:30 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB975713\update\update.exe
+ 2010-02-10 20:30 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB975713\spuninst.exe
+ 2009-12-08 09:03 . 2009-12-08 09:03 474112 c:\windows\$hf_mig$\KB975713\SP3QFE\shlwapi.dll
+ 2010-03-10 12:44 . 2009-05-26 16:10 391032 c:\windows\$hf_mig$\KB975561\update\updspapi.dll
+ 2010-03-10 12:44 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB975561\update\update.exe
+ 2010-03-10 12:44 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB975561\spuninst.exe
+ 2010-02-10 20:29 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB975560\update\updspapi.dll
+ 2010-02-10 20:29 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB975560\update\update.exe
+ 2010-02-10 20:29 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB975560\spuninst.exe
+ 2009-10-15 17:41 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB975467\update\updspapi.dll
+ 2009-10-15 17:41 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB975467\update\update.exe
+ 2009-10-15 17:41 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB975467\spuninst.exe
+ 2009-09-11 14:15 . 2009-09-11 14:15 136704 c:\windows\$hf_mig$\KB975467\SP3QFE\msv1_0.dll
+ 2009-11-12 17:56 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB975364-IE8\update\updspapi.dll
+ 2009-11-12 17:56 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB975364-IE8\update\update.exe
+ 2009-11-12 17:56 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB975364-IE8\spuninst.exe
+ 2009-10-15 17:46 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB975025\update\updspapi.dll
+ 2009-10-15 17:46 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB975025\update\update.exe
+ 2009-10-15 17:46 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB975025\spuninst.exe
+ 2009-10-15 17:45 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB974571\update\updspapi.dll
+ 2009-10-15 17:45 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB974571\update\update.exe
+ 2009-10-15 17:45 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB974571\spuninst.exe
+ 2009-10-15 17:54 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB974455-IE8\update\updspapi.dll
+ 2009-10-15 17:54 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB974455-IE8\update\update.exe
+ 2009-10-15 17:54 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB974455-IE8\spuninst.exe
+ 2009-10-15 15:04 . 2009-08-29 07:51 916480 c:\windows\$hf_mig$\KB974455-IE8\SP3QFE\wininet.dll
+ 2009-10-15 15:04 . 2009-08-29 07:51 206848 c:\windows\$hf_mig$\KB974455-IE8\SP3QFE\occache.dll
+ 2009-10-15 15:04 . 2009-08-29 07:51 594432 c:\windows\$hf_mig$\KB974455-IE8\SP3QFE\msfeeds.dll
+ 2009-10-15 15:04 . 2009-08-29 07:51 246272 c:\windows\$hf_mig$\KB974455-IE8\SP3QFE\ieproxy.dll
+ 2009-10-15 15:04 . 2009-08-29 07:51 184320 c:\windows\$hf_mig$\KB974455-IE8\SP3QFE\iepeers.dll
+ 2009-10-15 15:04 . 2009-08-29 07:51 387584 c:\windows\$hf_mig$\KB974455-IE8\SP3QFE\iedkcs32.dll
+ 2009-10-15 15:04 . 2009-08-28 10:07 173056 c:\windows\$hf_mig$\KB974455-IE8\SP3QFE\ie4uinit.exe
+ 2009-12-09 21:30 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB974392\update\updspapi.dll
+ 2009-12-09 21:30 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB974392\update\update.exe
+ 2009-12-09 21:30 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB974392\spuninst.exe
+ 2009-10-13 10:39 . 2009-10-13 10:39 271360 c:\windows\$hf_mig$\KB974392\SP3QFE\oakley.dll
+ 2009-12-09 21:30 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB974318\update\updspapi.dll
+ 2009-12-09 21:30 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB974318\update\update.exe
+ 2009-12-09 21:30 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB974318\spuninst.exe
+ 2009-10-12 13:33 . 2009-10-12 13:33 150528 c:\windows\$hf_mig$\KB974318\SP3QFE\rastls.dll
+ 2009-10-15 17:46 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB974112\update\updspapi.dll
+ 2009-10-15 17:46 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB974112\update\update.exe
+ 2009-10-15 17:46 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB974112\spuninst.exe
+ 2009-08-26 08:03 . 2009-08-26 08:03 247326 c:\windows\$hf_mig$\KB974112\SP3QFE\strmdll.dll
+ 2009-12-09 21:30 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB973904\update\updspapi.dll
+ 2009-12-09 21:30 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB973904\update\update.exe
+ 2009-12-09 21:30 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB973904\spuninst.exe
+ 2009-12-09 09:58 . 2009-07-29 14:00 119648 c:\windows\$hf_mig$\KB973904\SP3QFE\msconv97.dll
+ 2009-08-13 14:07 . 2008-07-08 12:59 391032 c:\windows\$hf_mig$\KB973869\update\updspapi.dll
+ 2009-08-13 14:07 . 2008-07-08 12:59 759160 c:\windows\$hf_mig$\KB973869\update\update.exe
+ 2009-08-13 14:07 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB973869\spuninst.exe
+ 2009-08-13 13:59 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB973815\update\updspapi.dll
+ 2009-08-13 13:59 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB973815\update\update.exe
+ 2009-08-13 13:59 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB973815\spuninst.exe
+ 2009-08-05 08:53 . 2009-08-05 08:53 205312 c:\windows\$hf_mig$\KB973815\SP3QFE\mswebdvd.dll
+ 2009-11-25 11:38 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB973687\update\updspapi.dll
+ 2009-11-25 11:38 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB973687\update\update.exe
+ 2009-11-25 11:38 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB973687\spuninst.exe
+ 2009-10-15 17:41 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB973525\update\updspapi.dll
+ 2009-10-15 17:41 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB973525\update\update.exe
+ 2009-10-15 17:41 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB973525\spuninst.exe
+ 2009-08-13 14:07 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB973507\update\updspapi.dll
+ 2009-08-13 14:07 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB973507\update\update.exe
+ 2009-08-13 14:07 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB973507\spuninst.exe
+ 2009-08-13 14:07 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB973354\update\updspapi.dll
+ 2009-08-13 14:07 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB973354\update\update.exe
+ 2009-08-13 14:07 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB973354\spuninst.exe
+ 2009-07-16 16:30 . 2008-07-08 12:59 391032 c:\windows\$hf_mig$\KB973346\update\updspapi.dll
+ 2009-07-16 16:30 . 2008-07-08 12:59 759160 c:\windows\$hf_mig$\KB973346\update\update.exe
+ 2009-07-16 16:30 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB973346\spuninst.exe
+ 2010-01-12 19:48 . 2008-07-08 12:59 391032 c:\windows\$hf_mig$\KB972270\update\updspapi.dll
+ 2010-01-12 19:48 . 2008-07-08 12:59 759160 c:\windows\$hf_mig$\KB972270\update\update.exe
+ 2010-01-12 19:48 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB972270\spuninst.exe
+ 2010-01-12 19:46 . 2009-10-15 16:40 119808 c:\windows\$hf_mig$\KB972270\SP3QFE\t2embed.dll
+ 2009-07-29 20:07 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB972260-IE8\update\updspapi.dll
+ 2009-07-29 20:07 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB972260-IE8\update\update.exe
+ 2009-07-29 20:07 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB972260-IE8\spuninst.exe
+ 2009-07-29 09:26 . 2009-07-03 17:02 915456 c:\windows\$hf_mig$\KB972260-IE8\SP3QFE\wininet.dll
+ 2009-07-29 09:26 . 2009-07-03 17:02 206848 c:\windows\$hf_mig$\KB972260-IE8\SP3QFE\occache.dll

Gamp.G
Návštěvník
Návštěvník
Příspěvky: 69
Registrován: 14 lis 2008 19:13

Re: W32/Malware!Gemini - F security

#7 Příspěvek od Gamp.G »

třetí část

+ 2009-07-29 09:26 . 2009-07-03 17:02 594432 c:\windows\$hf_mig$\KB972260-IE8\SP3QFE\msfeeds.dll
+ 2009-07-29 09:26 . 2009-07-03 17:02 246272 c:\windows\$hf_mig$\KB972260-IE8\SP3QFE\ieproxy.dll
+ 2009-07-29 09:26 . 2009-07-03 17:02 184320 c:\windows\$hf_mig$\KB972260-IE8\SP3QFE\iepeers.dll
+ 2009-07-29 09:26 . 2009-07-03 17:02 386048 c:\windows\$hf_mig$\KB972260-IE8\SP3QFE\iedkcs32.dll
+ 2009-07-29 09:26 . 2009-07-03 11:37 173056 c:\windows\$hf_mig$\KB972260-IE8\SP3QFE\ie4uinit.exe
+ 2009-09-09 18:30 . 2008-07-08 12:59 391032 c:\windows\$hf_mig$\KB971961-IE8\update\updspapi.dll
+ 2009-09-09 18:30 . 2008-07-08 12:59 759160 c:\windows\$hf_mig$\KB971961-IE8\update\update.exe
+ 2009-09-09 18:30 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB971961-IE8\spuninst.exe
+ 2009-09-09 18:02 . 2009-06-22 06:50 726528 c:\windows\$hf_mig$\KB971961-IE8\SP3QFE\jscript.dll
+ 2009-12-09 21:29 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB971737\update\updspapi.dll
+ 2009-12-09 21:29 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB971737\update\update.exe
+ 2009-12-09 21:29 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB971737\spuninst.exe
+ 2009-08-25 09:31 . 2009-08-25 09:31 354816 c:\windows\$hf_mig$\KB971737\SP3QFE\winhttp.dll
+ 2009-08-13 14:08 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB971657\update\updspapi.dll
+ 2009-08-13 14:08 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB971657\update\update.exe
+ 2009-08-13 14:08 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB971657\spuninst.exe
+ 2009-06-10 06:18 . 2009-06-10 06:18 134144 c:\windows\$hf_mig$\KB971657\SP3QFE\wkssvc.dll
+ 2009-07-16 16:30 . 2008-07-09 07:36 391032 c:\windows\$hf_mig$\KB971633\update\updspapi.dll
+ 2009-07-16 16:30 . 2008-07-09 07:36 759160 c:\windows\$hf_mig$\KB971633\update\update.exe
+ 2009-07-16 16:30 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB971633\spuninst.exe
+ 2009-08-13 14:08 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB971557\update\updspapi.dll
+ 2009-08-13 14:08 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB971557\update\update.exe
+ 2009-08-13 14:08 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB971557\spuninst.exe
+ 2009-10-15 17:42 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB971486\update\updspapi.dll
+ 2009-10-15 17:42 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB971486\update\update.exe
+ 2009-10-15 17:42 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB971486\spuninst.exe
+ 2010-02-10 20:32 . 2008-07-08 12:59 391032 c:\windows\$hf_mig$\KB971468\update\updspapi.dll
+ 2010-02-10 20:32 . 2008-07-08 12:59 759160 c:\windows\$hf_mig$\KB971468\update\update.exe
+ 2010-02-10 20:32 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB971468\spuninst.exe
+ 2010-02-10 20:27 . 2010-01-01 07:58 353792 c:\windows\$hf_mig$\KB971468\SP3QFE\srv.sys
+ 2009-12-09 21:30 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB970430\update\updspapi.dll
+ 2009-12-09 21:30 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB970430\update\update.exe
+ 2009-12-09 21:30 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB970430\spuninst.exe
+ 2009-10-20 15:21 . 2009-10-20 15:21 265728 c:\windows\$hf_mig$\KB970430\SP3QFE\http.sys
+ 2009-06-10 05:29 . 2007-11-30 12:39 391032 c:\windows\$hf_mig$\KB970238\update\updspapi.dll
+ 2009-06-10 05:29 . 2007-11-30 12:39 759160 c:\windows\$hf_mig$\KB970238\update\update.exe
+ 2009-06-10 05:29 . 2007-11-30 12:39 233848 c:\windows\$hf_mig$\KB970238\spuninst.exe
+ 2009-04-15 15:25 . 2009-04-15 15:25 585216 c:\windows\$hf_mig$\KB970238\SP3QFE\rpcrt4.dll
+ 2009-11-11 21:00 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB969947\update\updspapi.dll
+ 2009-11-11 21:00 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB969947\update\update.exe
+ 2009-11-11 21:00 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB969947\spuninst.exe
+ 2009-06-10 05:31 . 2007-11-30 12:39 391032 c:\windows\$hf_mig$\KB969898\update\updspapi.dll
+ 2009-06-10 05:31 . 2007-11-30 12:39 759160 c:\windows\$hf_mig$\KB969898\update\update.exe
+ 2009-06-10 05:31 . 2007-11-30 12:39 233848 c:\windows\$hf_mig$\KB969898\spuninst.exe
+ 2009-06-10 05:32 . 2008-07-09 07:36 391032 c:\windows\$hf_mig$\KB969897-IE8\update\updspapi.dll
+ 2009-06-10 05:32 . 2007-11-30 11:18 759160 c:\windows\$hf_mig$\KB969897-IE8\update\update.exe
+ 2009-06-10 05:32 . 2007-11-30 12:39 233848 c:\windows\$hf_mig$\KB969897-IE8\spuninst.exe
+ 2009-06-10 04:14 . 2009-05-13 05:09 915456 c:\windows\$hf_mig$\KB969897-IE8\SP3QFE\wininet.dll
+ 2009-06-10 04:14 . 2009-04-30 21:19 246272 c:\windows\$hf_mig$\KB969897-IE8\SP3QFE\ieproxy.dll
+ 2009-06-10 04:13 . 2009-04-30 21:19 385536 c:\windows\$hf_mig$\KB969897-IE8\SP3QFE\iedkcs32.dll
+ 2009-06-10 04:14 . 2009-04-30 10:46 173056 c:\windows\$hf_mig$\KB969897-IE8\SP3QFE\ie4uinit.exe
+ 2009-10-15 17:47 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB969059\update\updspapi.dll
+ 2009-10-15 17:47 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB969059\update\update.exe
+ 2009-10-15 17:47 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB969059\spuninst.exe
+ 2009-06-10 05:28 . 2008-07-09 07:36 391032 c:\windows\$hf_mig$\KB968537\update\updspapi.dll
+ 2009-06-10 05:28 . 2008-07-09 07:36 759160 c:\windows\$hf_mig$\KB968537\update\update.exe
+ 2009-06-10 05:28 . 2008-07-09 07:36 233848 c:\windows\$hf_mig$\KB968537\spuninst.exe
+ 2009-08-14 21:25 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB968389\update\updspapi.dll
+ 2009-08-14 21:25 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB968389\update\update.exe
+ 2009-08-14 21:25 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB968389\spuninst.exe
+ 2009-06-25 08:42 . 2009-06-25 08:42 147456 c:\windows\$hf_mig$\KB968389\SP3QFE\schannel.dll
+ 2009-06-25 08:42 . 2009-06-25 08:42 136704 c:\windows\$hf_mig$\KB968389\SP3QFE\msv1_0.dll
+ 2009-06-26 09:42 . 2009-06-26 09:42 729088 c:\windows\$hf_mig$\KB968389\SP3QFE\lsasrv.dll
+ 2009-06-25 08:42 . 2009-06-25 08:42 301568 c:\windows\$hf_mig$\KB968389\SP3QFE\kerberos.dll
+ 2009-06-10 05:31 . 2008-07-09 07:36 391032 c:\windows\$hf_mig$\KB961501\update\updspapi.dll
+ 2009-06-10 05:31 . 2008-07-09 07:36 759160 c:\windows\$hf_mig$\KB961501\update\update.exe
+ 2009-06-10 05:31 . 2008-07-09 07:36 233848 c:\windows\$hf_mig$\KB961501\spuninst.exe
+ 2009-05-07 15:16 . 2009-05-07 15:16 347136 c:\windows\$hf_mig$\KB961501\SP3QFE\localspl.dll
+ 2009-07-16 16:25 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB961371\update\updspapi.dll
+ 2009-07-16 16:25 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB961371\update\update.exe
+ 2009-07-16 16:25 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB961371\spuninst.exe
+ 2009-06-16 14:44 . 2009-06-16 14:44 119808 c:\windows\$hf_mig$\KB961371\SP3QFE\t2embed.dll
+ 2009-08-13 14:09 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB960859\update\updspapi.dll
+ 2009-08-13 14:09 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB960859\update\update.exe
+ 2009-08-13 14:09 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB960859\spuninst.exe
+ 2009-09-09 18:24 . 2008-07-08 12:59 391032 c:\windows\$hf_mig$\KB956844\update\updspapi.dll
+ 2009-09-09 18:24 . 2008-07-08 12:59 759160 c:\windows\$hf_mig$\KB956844\update\update.exe
+ 2009-09-09 18:24 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB956844\spuninst.exe
+ 2009-09-09 18:02 . 2009-06-21 21:50 153088 c:\windows\$hf_mig$\KB956844\SP3QFE\triedit.dll
+ 2009-08-13 14:08 . 2008-07-08 12:59 391032 c:\windows\$hf_mig$\KB956744\update\updspapi.dll
+ 2009-08-13 14:08 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB956744\update\update.exe
+ 2009-08-13 14:08 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB956744\spuninst.exe
+ 2010-01-12 19:48 . 2009-05-26 16:10 391032 c:\windows\$hf_mig$\KB955759\update\updspapi.dll
+ 2010-01-12 19:48 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB955759\update\update.exe
+ 2010-01-12 19:48 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB955759\spuninst.exe
+ 2010-01-12 19:46 . 2009-11-21 15:49 471552 c:\windows\$hf_mig$\KB955759\SP3QFE\aclayers.dll
+ 2009-10-15 14:59 . 2009-08-13 13:56 1748992 c:\windows\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6001.22319_x-ww_f0b4c2df\GdiPlus.dll
+ 2005-08-25 07:32 . 2009-08-06 17:23 1929952 c:\windows\system32\wuaueng.dll
- 2004-08-18 12:00 . 2008-06-18 04:03 2458112 c:\windows\system32\WMVCore.dll
+ 2004-08-18 12:00 . 2009-05-20 02:56 2458112 c:\windows\system32\WMVCore.dll
+ 2004-08-18 12:00 . 2009-08-14 15:15 1850624 c:\windows\system32\win32k.sys
+ 2004-08-18 12:00 . 2004-08-18 12:00 1356800 c:\windows\system32\webfldrs.msi
+ 2004-08-18 12:00 . 2010-02-25 06:18 1209344 c:\windows\system32\urlmon.dll
+ 2009-06-12 18:17 . 2005-02-22 16:55 6713344 c:\windows\system32\ReinstallBackups\0018\DriverFiles\B_25699\atioglxx.dll
+ 2009-06-12 18:17 . 2005-08-04 04:46 6684672 c:\windows\system32\ReinstallBackups\0018\DriverFiles\B_25699\atioglx1.dll
+ 2009-06-12 18:17 . 2005-08-04 02:54 2365472 c:\windows\system32\ReinstallBackups\0018\DriverFiles\B_25699\ati3duag.dll
+ 2009-11-16 20:17 . 2006-02-21 18:11 5124096 c:\windows\system32\ReinstallBackups\0014\DriverFiles\B_21349\atioglxx.dll
+ 2009-11-16 20:17 . 2006-02-21 18:30 2636672 c:\windows\system32\ReinstallBackups\0014\DriverFiles\B_21349\ati3duag.dll
+ 2009-11-16 20:17 . 2006-02-21 18:46 1505792 c:\windows\system32\ReinstallBackups\0014\DriverFiles\B_21349\ati2mtag.sys
+ 2009-11-16 22:03 . 2006-05-03 16:18 5033984 c:\windows\system32\ReinstallBackups\0002\DriverFiles\atioglxx.dll
+ 2009-11-16 22:03 . 2006-05-03 16:21 6684672 c:\windows\system32\ReinstallBackups\0002\DriverFiles\atioglx1.dll
+ 2009-11-16 22:03 . 2005-08-04 02:54 2365472 c:\windows\system32\ReinstallBackups\0002\DriverFiles\ati3duag.dll
+ 2009-11-16 22:03 . 2006-05-03 16:50 1540608 c:\windows\system32\ReinstallBackups\0002\DriverFiles\ati2mtag.sys
+ 2009-11-16 22:02 . 2005-08-04 03:28 5005312 c:\windows\system32\ReinstallBackups\0001\DriverFiles\atioglxx.dll
+ 2009-11-16 22:02 . 2005-08-04 04:46 6684672 c:\windows\system32\ReinstallBackups\0001\DriverFiles\atioglx1.dll
+ 2009-11-16 22:02 . 2005-08-04 02:54 2365472 c:\windows\system32\ReinstallBackups\0001\DriverFiles\ati3duag.dll
+ 2009-11-16 22:02 . 2005-08-04 03:10 1273344 c:\windows\system32\ReinstallBackups\0001\DriverFiles\ati2mtag.sys
+ 2004-08-18 12:00 . 2009-07-17 16:17 1437696 c:\windows\system32\query.dll
- 2004-08-18 12:00 . 2008-04-14 03:21 1437696 c:\windows\system32\query.dll
+ 2004-08-18 12:00 . 2009-11-27 17:14 1294336 c:\windows\system32\quartz.dll
+ 2004-08-18 12:00 . 2009-12-09 10:11 2191360 c:\windows\system32\ntoskrnl.exe
+ 2004-08-17 15:45 . 2009-12-09 10:11 2068224 c:\windows\system32\ntkrnlpa.exe
- 2004-08-17 15:45 . 2009-02-10 17:09 2068224 c:\windows\system32\ntkrnlpa.exe
+ 2008-04-14 03:21 . 2009-07-31 09:05 1372672 c:\windows\system32\msxml6.dll
+ 2004-08-18 12:00 . 2009-07-31 04:35 1172480 c:\windows\system32\msxml3.dll
+ 2005-08-25 07:30 . 2009-06-10 07:21 2066432 c:\windows\system32\mstscax.dll
+ 2004-08-18 12:00 . 2010-02-25 06:18 5944832 c:\windows\system32\mshtml.dll
+ 2010-01-27 01:07 . 2010-01-27 01:07 3884312 c:\windows\system32\Macromed\Flash\NPSWF32.dll
+ 2006-10-17 09:57 . 2010-02-25 06:18 1985536 c:\windows\system32\iertutil.dll
+ 2009-06-24 15:14 . 2009-05-11 10:47 1302600 c:\windows\system32\DRVSTORE\pccswpddri_1C34ED6F4888FC93BE68C7A31A24834F522D3CBF\WUDFUpdate_01007.dll
+ 2009-06-24 15:13 . 2009-02-09 06:32 1112288 c:\windows\system32\DRVSTORE\ccdcmb_34CB4225E6E4893AE1D3E4443E91C2B9703B729C\wdfcoinstaller01007.dll
+ 2005-11-09 11:31 . 2006-05-03 16:50 1540608 c:\windows\system32\drivers\ati2mtag.sys
+ 2005-08-25 07:32 . 2009-08-06 17:23 1929952 c:\windows\system32\dllcache\wuaueng.dll
+ 2004-08-18 12:00 . 2009-05-20 02:56 2458112 c:\windows\system32\dllcache\WMVCore.dll
- 2004-08-18 12:00 . 2008-06-18 04:03 2458112 c:\windows\system32\dllcache\WMVCore.dll
+ 2008-10-16 06:52 . 2009-08-14 15:15 1850624 c:\windows\system32\dllcache\win32k.sys
+ 2004-08-18 12:00 . 2010-02-25 06:18 1209344 c:\windows\system32\dllcache\urlmon.dll
+ 2009-07-17 16:17 . 2009-07-17 16:17 1437696 c:\windows\system32\dllcache\query.dll
+ 2008-05-07 05:12 . 2009-11-27 17:14 1294336 c:\windows\system32\dllcache\quartz.dll
+ 2008-10-16 06:52 . 2009-12-09 10:11 2191360 c:\windows\system32\dllcache\ntoskrnl.exe
- 2008-10-16 06:52 . 2009-02-09 11:26 2025984 c:\windows\system32\dllcache\ntkrpamp.exe
+ 2008-10-16 06:52 . 2009-12-09 10:11 2025984 c:\windows\system32\dllcache\ntkrpamp.exe
+ 2008-10-16 06:52 . 2009-12-09 10:11 2068224 c:\windows\system32\dllcache\ntkrnlpa.exe
- 2008-10-16 06:52 . 2009-02-10 17:09 2068224 c:\windows\system32\dllcache\ntkrnlpa.exe
+ 2008-10-16 06:52 . 2009-12-09 10:11 2147328 c:\windows\system32\dllcache\ntkrnlmp.exe
- 2008-10-16 06:52 . 2009-02-09 11:26 2147328 c:\windows\system32\dllcache\ntkrnlmp.exe
+ 2008-04-14 03:21 . 2009-07-31 09:05 1372672 c:\windows\system32\dllcache\msxml6.dll
+ 2004-08-18 12:00 . 2009-07-31 04:35 1172480 c:\windows\system32\dllcache\msxml3.dll
+ 2005-08-25 07:30 . 2009-06-10 07:21 2066432 c:\windows\system32\dllcache\mstscax.dll
+ 2009-08-12 17:39 . 2009-07-10 13:28 1315328 c:\windows\system32\dllcache\msoe.dll
+ 2004-08-18 12:00 . 2010-02-25 06:18 5944832 c:\windows\system32\dllcache\mshtml.dll
+ 2010-03-10 08:10 . 2009-10-23 15:28 3558912 c:\windows\system32\dllcache\moviemk.exe
+ 2007-05-09 12:15 . 2010-02-25 06:18 1985536 c:\windows\system32\dllcache\iertutil.dll
+ 2005-11-09 11:31 . 2006-05-03 16:50 1540608 c:\windows\system32\dllcache\ati2mtag.sys
+ 2005-11-09 11:31 . 2006-05-03 16:29 1408000 c:\windows\system32\ativvaxx.dll
+ 2005-08-04 03:28 . 2006-05-03 16:18 5033984 c:\windows\system32\atioglxx.dll
+ 2005-08-04 04:46 . 2006-05-03 16:21 6684672 c:\windows\system32\atioglx1.dll
- 2005-08-04 04:46 . 2005-08-04 04:46 6684672 c:\windows\system32\atioglx1.dll
+ 2005-11-09 11:31 . 2006-05-03 16:35 2693280 c:\windows\system32\ati3duag.dll
+ 2006-02-20 15:44 . 2009-11-24 23:54 1280480 c:\windows\system32\aswBoot.exe
+ 2008-08-27 06:53 . 2004-08-18 12:00 1356800 c:\windows\ServicePackFiles\i386\webfldrs.msi
- 2007-04-13 19:35 . 2007-04-13 19:35 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
+ 2008-05-27 23:35 . 2008-05-27 23:35 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
- 2007-04-13 19:35 . 2007-04-13 19:35 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
+ 2008-05-27 23:35 . 2008-05-27 23:35 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
+ 2008-05-27 22:48 . 2008-05-27 22:48 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
- 2007-04-13 18:57 . 2007-04-13 18:57 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
+ 2008-05-27 22:48 . 2008-05-27 22:48 2523136 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
- 2007-04-13 18:57 . 2007-04-13 18:57 2523136 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
+ 2008-05-27 22:43 . 2008-05-27 22:43 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
- 2007-04-13 18:50 . 2007-04-13 18:50 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
+ 2005-08-25 08:04 . 2005-08-25 08:04 7152640 c:\windows\Installer\e0f2.msi
+ 2010-03-30 14:42 . 2010-03-30 14:42 1575936 c:\windows\Installer\c7d7a.msi
+ 2006-02-18 21:19 . 2006-02-18 21:19 3443712 c:\windows\Installer\974f5e.msi
+ 2008-02-14 12:45 . 2008-02-14 12:45 4041216 c:\windows\Installer\51ba6.msi
+ 2007-03-09 19:47 . 2007-03-09 19:47 2810880 c:\windows\Installer\22bb40.msi
+ 2007-04-04 20:41 . 2007-04-04 20:41 5864960 c:\windows\Installer\16655aa.msp
+ 2005-08-25 08:38 . 2005-08-25 08:38 2707456 c:\windows\Installer\15402.msi
+ 2006-02-16 18:01 . 2006-02-16 18:01 2384896 c:\windows\Installer\1311574.msi
+ 2010-03-31 05:07 . 2009-12-21 19:08 1208832 c:\windows\ie8updates\KB980182-IE8\urlmon.dll
+ 2010-03-31 05:07 . 2009-12-21 19:08 5942784 c:\windows\ie8updates\KB980182-IE8\mshtml.dll
+ 2010-03-31 05:07 . 2009-12-21 19:08 1985536 c:\windows\ie8updates\KB980182-IE8\iertutil.dll
+ 2010-01-21 19:20 . 2009-10-29 07:43 1208832 c:\windows\ie8updates\KB978207-IE8\urlmon.dll
+ 2010-01-21 19:20 . 2009-10-29 07:43 5940736 c:\windows\ie8updates\KB978207-IE8\mshtml.dll
+ 2010-01-21 19:20 . 2009-10-29 07:43 1985536 c:\windows\ie8updates\KB978207-IE8\iertutil.dll
+ 2009-11-04 20:36 . 2009-08-29 07:58 5940224 c:\windows\ie8updates\KB976749-IE8\mshtml.dll
+ 2009-12-09 21:30 . 2009-08-29 07:58 1208832 c:\windows\ie8updates\KB976325-IE8\urlmon.dll
+ 2009-12-09 21:30 . 2009-10-22 09:18 5939712 c:\windows\ie8updates\KB976325-IE8\mshtml.dll
+ 2009-12-09 21:30 . 2009-08-29 07:58 1985536 c:\windows\ie8updates\KB976325-IE8\iertutil.dll
+ 2009-10-15 17:54 . 2009-07-03 16:59 1208832 c:\windows\ie8updates\KB974455-IE8\urlmon.dll
+ 2009-10-15 17:54 . 2009-07-19 13:16 5937152 c:\windows\ie8updates\KB974455-IE8\mshtml.dll
+ 2009-10-15 17:54 . 2009-07-03 16:59 1985536 c:\windows\ie8updates\KB974455-IE8\iertutil.dll
+ 2009-07-29 20:07 . 2009-04-30 21:16 1207808 c:\windows\ie8updates\KB972260-IE8\urlmon.dll
+ 2009-07-29 20:07 . 2009-05-13 05:05 5936128 c:\windows\ie8updates\KB972260-IE8\mshtml.dll
+ 2009-07-29 20:07 . 2009-04-30 21:16 1985024 c:\windows\ie8updates\KB972260-IE8\iertutil.dll
+ 2009-06-10 05:32 . 2009-03-08 02:34 1206784 c:\windows\ie8updates\KB969897-IE8\urlmon.dll
+ 2009-06-10 05:32 . 2009-03-08 02:41 5937152 c:\windows\ie8updates\KB969897-IE8\mshtml.dll
+ 2009-06-10 05:32 . 2009-03-08 02:32 1985024 c:\windows\ie8updates\KB969897-IE8\iertutil.dll
+ 2008-10-16 06:52 . 2009-12-09 10:11 2191360 c:\windows\Driver Cache\i386\ntoskrnl.exe
+ 2008-10-16 06:52 . 2009-12-09 10:11 2025984 c:\windows\Driver Cache\i386\ntkrpamp.exe
- 2008-10-16 06:52 . 2009-02-09 11:26 2025984 c:\windows\Driver Cache\i386\ntkrpamp.exe
+ 2008-10-16 06:52 . 2009-12-09 10:11 2068224 c:\windows\Driver Cache\i386\ntkrnlpa.exe
- 2008-10-16 06:52 . 2009-02-10 17:09 2068224 c:\windows\Driver Cache\i386\ntkrnlpa.exe
- 2008-10-16 06:52 . 2009-02-09 11:26 2147328 c:\windows\Driver Cache\i386\ntkrnlmp.exe
+ 2008-10-16 06:52 . 2009-12-09 10:11 2147328 c:\windows\Driver Cache\i386\ntkrnlmp.exe
+ 2009-02-02 16:07 . 2009-02-02 16:07 1914440 c:\windows\Downloaded Program Files\FP_AX_CAB_INSTALLER.exe
+ 2008-02-14 12:45 . 2008-02-14 12:44 9119744 c:\windows\Downloaded Installations\{E03ED1B9-D31F-45DA-9AFE-37FE4F66818C}\Trust WB-3400T Webcam .msi
+ 2009-10-15 17:45 . 2009-10-15 17:45 1966080 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_17eb821e\System.dll
+ 2009-10-15 17:46 . 2009-10-15 17:46 2088960 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_5032d50c\System.Xml.dll
+ 2009-10-15 17:46 . 2009-10-15 17:46 3018752 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_6a12ad07\System.Windows.Forms.dll
+ 2009-10-15 17:46 . 2009-10-15 17:46 1466368 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_336bed4b\System.Design.dll
+ 2009-10-15 17:47 . 2009-10-15 17:47 3391488 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_1419d95f\mscorlib.dll
- 2007-07-11 12:56 . 2007-07-11 12:56 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
+ 2009-10-15 17:44 . 2009-10-15 17:44 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
- 2007-07-11 12:55 . 2007-07-11 12:55 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
+ 2009-10-15 17:44 . 2009-10-15 17:44 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
+ 2010-02-10 20:28 . 2009-08-04 20:59 2191360 c:\windows\$NtUninstallKB977165$\ntoskrnl.exe
+ 2010-02-10 20:29 . 2009-08-04 17:29 2025984 c:\windows\$NtUninstallKB977165$\ntkrpamp.exe
+ 2010-02-10 20:29 . 2009-08-04 17:29 2068224 c:\windows\$NtUninstallKB977165$\ntkrnlpa.exe
+ 2010-02-10 20:29 . 2009-08-04 17:29 2147328 c:\windows\$NtUninstallKB977165$\ntkrnlmp.exe
+ 2010-03-10 12:44 . 2008-04-14 03:22 3558912 c:\windows\$NtUninstallKB975561$\moviemk.exe
+ 2010-02-10 20:29 . 2009-06-03 19:11 1293824 c:\windows\$NtUninstallKB975560$\quartz.dll
+ 2009-11-25 11:38 . 2008-09-10 01:16 1307648 c:\windows\$NtUninstallKB973687$\msxml6.dll
+ 2009-11-25 11:38 . 2008-09-04 17:17 1106944 c:\windows\$NtUninstallKB973687$\msxml3.dll
+ 2009-08-13 14:07 . 2008-04-14 03:21 1314816 c:\windows\$NtUninstallKB973354$\msoe.dll
+ 2009-07-16 16:30 . 2008-12-20 22:15 1290752 c:\windows\$NtUninstallKB971633$\quartz.dll
+ 2009-10-15 17:41 . 2009-02-09 11:26 2191232 c:\windows\$NtUninstallKB971486$\ntoskrnl.exe
+ 2009-10-15 17:41 . 2009-02-09 11:26 2025984 c:\windows\$NtUninstallKB971486$\ntkrpamp.exe
+ 2009-10-15 17:41 . 2009-02-10 17:09 2068224 c:\windows\$NtUninstallKB971486$\ntkrnlpa.exe
+ 2009-10-15 17:41 . 2009-02-09 11:26 2147328 c:\windows\$NtUninstallKB971486$\ntkrnlmp.exe
+ 2009-11-11 21:00 . 2009-04-19 19:52 1847168 c:\windows\$NtUninstallKB969947$\win32k.sys
+ 2009-10-15 17:47 . 2008-04-14 03:21 1437696 c:\windows\$NtUninstallKB969059$\query.dll
+ 2009-09-09 18:30 . 2008-06-18 04:03 2458112 c:\windows\$NtUninstallKB968816_WM9$\wmvcore.dll
+ 2009-06-10 05:28 . 2009-02-09 14:07 1846784 c:\windows\$NtUninstallKB968537$\win32k.sys
+ 2009-08-13 14:08 . 2008-04-14 03:21 2061824 c:\windows\$NtUninstallKB956744$\mstscax.dll
+ 2010-01-21 19:18 . 2009-12-21 19:02 1209344 c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\urlmon.dll
+ 2010-01-21 19:18 . 2009-12-21 19:02 5945856 c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\mshtml.dll
+ 2010-01-21 19:18 . 2009-12-21 19:02 1986048 c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\iertutil.dll
+ 2009-12-09 14:33 . 2009-12-09 14:33 2191488 c:\windows\$hf_mig$\KB977165\SP3QFE\ntoskrnl.exe
+ 2010-02-10 20:22 . 2009-12-09 10:03 2025984 c:\windows\$hf_mig$\KB977165\SP3QFE\ntkrpamp.exe
+ 2009-12-09 14:33 . 2009-12-09 14:33 2068352 c:\windows\$hf_mig$\KB977165\SP3QFE\ntkrnlpa.exe
+ 2010-02-10 20:22 . 2009-12-09 10:03 2147328 c:\windows\$hf_mig$\KB977165\SP3QFE\ntkrnlmp.exe
+ 2009-11-04 15:34 . 2009-10-22 09:14 5943296 c:\windows\$hf_mig$\KB976749-IE8\SP3QFE\mshtml.dll
+ 2009-12-09 10:04 . 2009-10-29 07:38 1209344 c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\urlmon.dll
+ 2009-12-09 10:04 . 2009-10-29 07:38 5944320 c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\mshtml.dll
+ 2009-12-09 10:04 . 2009-10-29 07:38 1986048 c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\iertutil.dll
+ 2010-03-10 08:10 . 2009-10-23 14:53 3558912 c:\windows\$hf_mig$\KB975561\SP3QFE\moviemk.exe
+ 2009-11-27 17:25 . 2009-11-27 17:25 1294336 c:\windows\$hf_mig$\KB975560\SP3QFE\quartz.dll
+ 2009-10-15 15:04 . 2009-08-29 07:51 1209344 c:\windows\$hf_mig$\KB974455-IE8\SP3QFE\urlmon.dll
+ 2009-10-15 15:04 . 2009-08-29 07:51 5942272 c:\windows\$hf_mig$\KB974455-IE8\SP3QFE\mshtml.dll
+ 2009-10-15 15:04 . 2009-08-29 07:51 1986048 c:\windows\$hf_mig$\KB974455-IE8\SP3QFE\iertutil.dll
+ 2009-11-25 07:29 . 2009-07-31 04:30 1447424 c:\windows\$hf_mig$\KB973687\SP3QFE\msxml6.dll
+ 2009-11-25 07:29 . 2009-07-31 04:30 1172480 c:\windows\$hf_mig$\KB973687\SP3QFE\msxml3.dll
+ 2009-07-10 16:55 . 2009-07-10 16:55 1315328 c:\windows\$hf_mig$\KB973354\SP3QFE\msoe.dll
+ 2009-07-29 09:26 . 2009-07-03 17:02 1208832 c:\windows\$hf_mig$\KB972260-IE8\SP3QFE\urlmon.dll
+ 2009-07-29 09:26 . 2009-07-19 13:08 5938176 c:\windows\$hf_mig$\KB972260-IE8\SP3QFE\mshtml.dll
+ 2009-07-29 09:26 . 2009-07-03 17:02 1985536 c:\windows\$hf_mig$\KB972260-IE8\SP3QFE\iertutil.dll
+ 2009-06-03 19:12 . 2009-06-03 19:12 1293824 c:\windows\$hf_mig$\KB971633\SP3QFE\quartz.dll
+ 2009-10-15 14:56 . 2009-08-04 17:23 2191488 c:\windows\$hf_mig$\KB971486\SP3QFE\ntoskrnl.exe
+ 2009-10-15 14:56 . 2009-08-04 17:23 2025984 c:\windows\$hf_mig$\KB971486\SP3QFE\ntkrpamp.exe
+ 2009-08-04 20:53 . 2009-08-04 20:53 2068352 c:\windows\$hf_mig$\KB971486\SP3QFE\ntkrnlpa.exe
+ 2009-10-15 14:56 . 2009-08-04 17:23 2147328 c:\windows\$hf_mig$\KB971486\SP3QFE\ntkrnlmp.exe
+ 2009-08-14 16:00 . 2009-08-14 16:00 1859712 c:\windows\$hf_mig$\KB969947\SP3QFE\win32k.sys
+ 2009-06-10 04:14 . 2009-04-30 21:19 1207808 c:\windows\$hf_mig$\KB969897-IE8\SP3QFE\urlmon.dll
+ 2009-06-10 04:14 . 2009-05-13 05:09 5936128 c:\windows\$hf_mig$\KB969897-IE8\SP3QFE\mshtml.dll
+ 2009-06-10 04:14 . 2009-04-30 21:19 1985024 c:\windows\$hf_mig$\KB969897-IE8\SP3QFE\iertutil.dll
+ 2009-07-17 16:02 . 2009-07-17 16:02 1437696 c:\windows\$hf_mig$\KB969059\SP3QFE\query.dll
+ 2009-04-19 19:44 . 2009-04-19 19:44 1847808 c:\windows\$hf_mig$\KB968537\SP3QFE\win32k.sys
+ 2009-08-12 17:40 . 2009-06-09 15:23 2067968 c:\windows\$hf_mig$\KB956744\SP3QFE\lhmstscx.dll
+ 2004-08-18 12:00 . 2009-07-13 21:43 10841088 c:\windows\system32\wmp.dll
+ 2006-10-19 20:13 . 2010-03-02 05:30 31648712 c:\windows\system32\MRT.exe
+ 2006-11-07 19:03 . 2010-02-25 09:48 11070976 c:\windows\system32\ieframe.dll
+ 2004-08-18 12:00 . 2009-07-13 21:43 10841088 c:\windows\system32\dllcache\wmp.dll
+ 2007-05-09 12:15 . 2010-02-25 09:48 11070976 c:\windows\system32\dllcache\ieframe.dll
+ 2009-08-10 19:08 . 2009-08-10 19:08 11315712 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\M953297\M953297Uninstall.msp
+ 2007-07-11 12:55 . 2007-07-11 12:55 15256576 c:\windows\Installer\eb80d7.msp
+ 2009-08-10 12:09 . 2009-08-10 12:09 17254912 c:\windows\Installer\a60d9b.msp
+ 2009-11-16 22:10 . 2009-11-16 22:10 13135872 c:\windows\Installer\4ed1f3.msi
+ 2007-04-03 19:34 . 2007-04-03 19:34 19210240 c:\windows\Installer\2965e61.msp
+ 2010-03-31 05:07 . 2009-12-21 19:08 11070464 c:\windows\ie8updates\KB980182-IE8\ieframe.dll
+ 2010-01-21 19:20 . 2009-10-29 07:43 11069952 c:\windows\ie8updates\KB978207-IE8\ieframe.dll
+ 2009-12-09 21:30 . 2009-08-29 07:58 11069440 c:\windows\ie8updates\KB976325-IE8\ieframe.dll
+ 2009-10-15 17:54 . 2009-07-19 16:46 11067392 c:\windows\ie8updates\KB974455-IE8\ieframe.dll
+ 2009-07-29 20:07 . 2009-04-30 21:16 11064832 c:\windows\ie8updates\KB972260-IE8\ieframe.dll
+ 2009-06-10 05:32 . 2009-03-08 02:39 11063808 c:\windows\ie8updates\KB969897-IE8\ieframe.dll
+ 2009-08-13 14:06 . 2008-11-11 17:34 10838016 c:\windows\$NtUninstallKB973540_WM9$\wmp.dll
+ 2009-12-22 13:02 . 2009-12-22 13:02 11070976 c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\ieframe.dll
+ 2009-10-29 12:08 . 2009-10-29 12:08 11070464 c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\ieframe.dll
+ 2009-08-29 11:21 . 2009-08-29 11:21 11069952 c:\windows\$hf_mig$\KB974455-IE8\SP3QFE\ieframe.dll
+ 2009-07-29 09:25 . 2009-07-19 13:08 11068416 c:\windows\$hf_mig$\KB972260-IE8\SP3QFE\ieframe.dll
+ 2009-05-01 13:19 . 2009-05-01 13:19 11064832 c:\windows\$hf_mig$\KB969897-IE8\SP3QFE\ieframe.dll

.
-- Snímek resetován k současnému datu --
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-01-26 2144088]
"uTorrent"="c:\program files\uTorrent\utorrent.exe" [2010-03-14 319792]
"ccleaner"="c:\program files\CCleaner\CCleaner.exe" [2010-02-24 1771320]
"Skype"="c:\program files\Skype\\Phone\Skype.exe" [2010-03-09 26100520]
"Advanced SystemCare 3"="c:\program files\IObit\Advanced SystemCare 3\AWC.exe" [2010-03-29 2343120]
"Display Stix - System tray"="c:\program files\Fractalis Software\Display Stix 2.1.1\dstix.exe" [2004-01-12 241664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"VTTimer"="VTTimer.exe" [2004-10-22 53248]
"VTTrayp"="VTtrayp.exe" [2005-01-10 143360]
"ATIPTA"="c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-05-03 344064]
"AudioDeck"="c:\program files\VIAudioi\SBADeck\ADeck.exe" [2005-03-04 512000]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-11-24 81000]
"HydraVisionViewport"="c:\program files\ATI Technologies\ATI HydraVision\HydraMD.exe" [2003-04-01 364544]
"SpybotSnD"="c:\program files\Spybot - Search & Destroy\SpybotSD.exe" [2009-01-26 5365592]
"PAC7311_Monitor"="c:\windows\PixArt\PAC7311\Monitor.exe" [2006-11-03 319488]
"Hard Disk Sentinel"="c:\program files\Hard Disk Sentinel\HDSentinel.exe" [2009-05-27 3291648]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]
"ATICCC"="c:\program files\ATI Technologies\ATI.ACE\cli.exe" [2006-01-02 45056]
"HydraVisionDesktopManager"="c:\program files\ATI Technologies\ATI HydraVision\HydraDM.exe" [2003-04-01 270336]
"Cobian Backup 10"="c:\program files\Cobian Backup 10\Cobian.exe" [2010-04-06 421376]


[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{93994DE8-8239-4655-B1D1-5F4E91300429}"= "c:\program files\DVDIdle Pro\DVDShell.dll" [2004-10-09 49152]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Advanced SystemCare 3]
2010-03-29 12:54 2343120 ----a-w- c:\program files\IObit\Advanced SystemCare 3\AWC.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LGODDFU]
2005-04-12 09:11 229376 ----a-w- c:\program files\lg_fwupdate\fwupdate.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBJ]
2005-06-02 15:03 1957888 ------w- c:\program files\Ahead\Nero BackItUp\NBJ.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
2009-06-25 13:12 1414144 ----a-w- c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl]
2004-11-02 19:24 32768 ----a-w- c:\program files\CyberLink\PowerDVD\PDVDServ.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SmartRAM]
2009-02-19 13:23 202064 ----a-w- c:\program files\IObit\Advanced SystemCare 3\Sup_SmartRAM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VGAUtil]
2004-09-17 12:32 552960 ----a-w- c:\program files\GigaByte\VGA Utility Manager\G-vga.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"InCDsrv"=2 (0x2)
"CobianBackupAmanita"=2 (0x2)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\Program Files\\Electronic Arts\\Need For Speed III\\nfs3.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\WINDOWS\\system32\\sessmgr.exe"=
"c:\\Program Files\\uTorrent\\utorrent.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\GigaByte\\VGA Utility Manager\\G-vga.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\java.exe"=
"c:\\Program Files\\Metin2_TESTER\\metin2client.bin"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [4.4.2008 19:23 114768]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [4.4.2008 19:23 20560]
R3 PAC7311;Trust WB-3400T Webcam;c:\windows\system32\drivers\PA707UCM.SYS [14.3.2007 11:57 449024]
S3 GVTDrv;GVTDrv;c:\windows\system32\drivers\GVTDrv.sys [16.11.2009 22:45 23524]
S3 TempLog;TempLog;c:\program files\Hard Disk Sentinel\HDSentinel.sys [28.5.2009 17:47 3897]
.
Obsah adresáře 'Naplánované úlohy'

2010-04-03 c:\windows\Tasks\SmartDefrag.job
- c:\program files\IObit\IObit SmartDefrag\IObit SmartDefrag.exe [2010-02-17 14:30]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
IE: Download All by FlashGet - c:\program files\FlashGet\jc_all.htm
IE: Download using FlashGet - c:\program files\FlashGet\jc_link.htm
IE: Spustit klienta k monitoru &1 - c:\windows\web\AOpenClient.htm
IE: Spustit klienta k monitoru &2 - c:\windows\web\AOpenClient.htm
FF - ProfilePath - c:\documents and settings\Stana\Data aplikací\Mozilla\Firefox\Profiles\5ed95e45.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/

---- NASTAVENÍ FIREFOXU ----
FF - user.js: browser.cache.memory.capacity - 65536
FF - user.js: browser.display.show_image_placeholders - true
FF - user.js: browser.chrome.favicons - false
FF - user.js: browser.turbo.enabled - true
FF - user.js: browser.urlbar.autocomplete.enabled - true
FF - user.js: browser.urlbar.autofill - true
FF - user.js: browser.xul.error_pages.enabled - true
FF - user.js: content.interrupt.parsing - true
FF - user.js: content.max.tokenizing.time - 3000000
FF - user.js: content.maxtextrun - 8191
FF - user.js: content.notify.backoffcount - 5
FF - user.js: content.notify.interval - 750000
FF - user.js: content.notify.ontimer - true
FF - user.js: content.switch.threshold - 750000
FF - user.js: network.http.max-connections - 32
FF - user.js: network.http.max-connections-per-server - 8
FF - user.js: network.http.max-persistent-connections-per-proxy - 8
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: network.http.pipelining - true
FF - user.js: network.http.pipelining.firstrequest - true
FF - user.js: network.http.pipelining.maxrequests - 8
FF - user.js: network.http.proxy.pipelining - true
FF - user.js: network.http.request.max-start-delay - 0
FF - user.js: nglayout.initialpaint.delay - 0
FF - user.js: plugin.expose_full_path - true
FF - user.js: ui.submenuDelay - 0
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
.
.
------- Asociace souborů -------
.
.scr=AutoCADScript
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

MSConfigStartUp-Cobian Backup 9 interface - c:\program files\Cobian Backup 9\cbInterface.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-04-09 22:56
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(656)
c:\windows\system32\Ati2evxx.dll
.
Celkový čas: 2010-04-09 22:58:57
ComboFix-quarantined-files.txt 2010-04-09 20:58
ComboFix2.txt 2008-11-14 21:02

Před spuštěním: Volných bajtů: 24 032 792 576
Po spuštění: Volných bajtů: 24 000 614 400

WindowsXP-KB310994-SP2-Home-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect

Current=1 Default=1 Failed=0 LastKnownGood=4 Sets=1,2,3,4
- - End Of File - - 56403952CFD1C60BCF38EA4B7E3E23FD

Gamp.G
Návštěvník
Návštěvník
Příspěvky: 69
Registrován: 14 lis 2008 19:13

Re: W32/Malware!Gemini - F security

#8 Příspěvek od Gamp.G »

Nebylo mi jasné co mám vynechat tak je to komplet.

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119405
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: W32/Malware!Gemini - F security

#9 Příspěvek od Rudy »

1 položka smazána, zbytek logu vypadá čistý. Odinstalujte Harddisk Sentinel. Ty 2 soubory v Documents and settings jsou instalačky Skype a CCleaneru (legitimní). Mohl jste vynechat celý odstavec SnapShot@2009-05-14_20.17.15. F-Secure nepatří mezi příliš spolehlivé antiviry.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Gamp.G
Návštěvník
Návštěvník
Příspěvky: 69
Registrován: 14 lis 2008 19:13

Re: W32/Malware!Gemini - F security

#10 Příspěvek od Gamp.G »

Velmi děkuji za ochotu a odpověď.

Otázka mimo?

Znáte jiný podobný program kterým mám nahradit ten zavirovaný sentinel?

Prosím?

Dík.

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119405
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: W32/Malware!Gemini - F security

#11 Příspěvek od Rudy »

Gamp.G píše:Velmi děkuji za ochotu a odpověď.

Otázka mimo?

Znáte jiný podobný program kterým mám nahradit ten zavirovaný sentinel?

Prosím?

Dík.
Např. SpeedFan: http://www.stahuj.centrum.cz/utility_a_ ... /speedfan/ . Případně si HDD Sentinel někde znovu stáhněte a nainstalujte. Nemáte zač!
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Odpovědět