VIRY.CZ

Prosím o preventivní kontrolu logu, díky.

Logfile of random's system information tool 1.06 (written by random/random)
Run by user at 2011-01-01 11:36:52
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 18 GB (59%) free of 30 GB
Total RAM: 1023 MB (39% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:37:07, on 1.1.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrUI.exe
E:\Apps\Nitro PDF\Professional\NitroPDFPrinterMonitor.exe
E:\Apps\Adobe Acrobat 7.0\Distillr\Acrotray.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\VolumeTouch\VolumeTouch.exe
E:\Apps\CleanMem\mini_monitor.exe
C:\WINDOWS\system32\ctfmon.exe
E:\Apps\Taskbar Shuffle\taskbarshuffle.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
E:\Apps\Skype\Phone\Skype.exe
E:\Apps\Grindstone 2\Grindstone 2.exe
C:\Program Files\Secunia PSI\psi_tray.exe
E:\Apps\4t Tray Minimizer\4t-min.exe
E:\Apps\Crystal Disk Info\DiskInfo.exe
E:\Apps\NetWorx\networx.exe
E:\Apps\TrayIt\TrayIt!.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\oodag.exe
C:\Program Files\Secunia PSI\PSIA.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\Program Files\VIA\RAID\vialogsv.exe
C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrSvc.exe
E:\Apps\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Secunia PSI\sua.exe
C:\Documents and Settings\user\Plocha\RSIT.exe
C:\Program Files\trend micro\user.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Apps\Adobe Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - E:\Apps\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - E:\Apps\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [WD Drive Manager] C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrUI.exe
O4 - HKLM\..\Run: [Nitro PDF Printer Monitor] "E:\Apps\Nitro PDF\Professional\NitroPDFPrinterMonitor.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "E:\Apps\Adobe Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /installquiet
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [VolumeTouch] "C:\Program Files\VolumeTouch\VolumeTouch.exe"
O4 - HKLM\..\Run: [CleanMem Mini Monitor] E:\Apps\CleanMem\mini_monitor.exe /startup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Taskbar Shuffle] E:\Apps\Taskbar Shuffle\taskbarshuffle.exe
O4 - HKCU\..\Run: [SpywareTerminatorUpdate] "C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe"
O4 - HKCU\..\Run: [CrystalDiskInfo] "E:\Apps\Crystal Disk Info\DiskInfo.exe" /Startup
O4 - HKCU\..\Run: [Skype] "E:\Apps\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Grindstone 2] "e:\Apps\Grindstone 2\Grindstone 2.exe"
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: 4t Tray Minimizer.lnk = E:\Apps\4t Tray Minimizer\4t-min.exe
O4 - Startup: Crystal Disk Info.lnk = E:\Apps\Crystal Disk Info\DiskInfo.exe
O4 - Startup: Esmska.lnk = N:\_SOFTWARE_\esmska-0.20.0\esmska-portable.exe
O4 - Startup: EssentialPIM.lnk = N:\_SOFTWARE_\EssentialPIM Pro\EssentialPIM.exe
O4 - Startup: Miranda.lnk = N:\_SOFTWARE_\Miranda IM\miranda32.exe
O4 - Startup: NetWorx.lnk = E:\Apps\NetWorx\networx.exe
O4 - Startup: Phrase Express.lnk = N:\_SOFTWARE_\PhraseExpress\phraseexpress.exe
O4 - Startup: TrayIt!.lnk = E:\Apps\TrayIt\TrayIt!.exe
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: Secunia PSI Tray.lnk = C:\Program Files\Secunia PSI\psi_tray.exe
O8 - Extra context menu item: Convert link target to Adobe PDF - res://E:\Apps\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://E:\Apps\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://E:\Apps\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://E:\Apps\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://E:\Apps\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://E:\Apps\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://E:\Apps\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://E:\Apps\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://E:\Apps\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - E:\Apps\MICROS~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 9836744640
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: COMODO livePCsupport Service (CLPSLS) - COMODO - C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe
O23 - Service: Secunia PSI Agent - Secunia - C:\Program Files\Secunia PSI\PSIA.exe
O23 - Service: Secunia Update Agent - Secunia - C:\Program Files\Secunia PSI\sua.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: VRAID Log Service - Unknown owner - C:\Program Files\VIA\RAID\vialogsv.exe
O23 - Service: WD Drive Manager Service (WDBtnMgrSvc.exe) - WDC - C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrSvc.exe

--
End of file - 9955 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - E:\Apps\Adobe Acrobat 7.0\ActiveX\AcroIEHelper.dll [2006-12-18 59032]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - E:\Apps\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll [2006-12-18 231160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-09-15 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-09-15 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - E:\Apps\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll [2006-12-18 231160]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2009-05-14 2029640]
"SpywareTerminator"=C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe [2010-11-15 2216960]
"WD Drive Manager"=C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrUI.exe [2008-07-24 450560]
"Nitro PDF Printer Monitor"=E:\Apps\Nitro PDF\Professional\NitroPDFPrinterMonitor.exe [2009-05-27 209216]
"Acrobat Assistant 7.0"=E:\Apps\Adobe Acrobat 7.0\Distillr\Acrotray.exe [2008-04-23 483328]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2010-09-29 2500552]
"nwiz"=C:\Program Files\NVIDIA Corporation\nView\nwiz.exe [2010-07-07 1753192]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2010-07-09 110696]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2010-07-09 13923432]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"VolumeTouch"=C:\Program Files\VolumeTouch\VolumeTouch.exe [2005-07-22 184320]
"CleanMem Mini Monitor"=E:\Apps\CleanMem\mini_monitor.exe [2010-12-16 360448]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Taskbar Shuffle"=E:\Apps\Taskbar Shuffle\taskbarshuffle.exe [2008-04-17 818176]
"SpywareTerminatorUpdate"=C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe [2010-12-01 3318784]
"CrystalDiskInfo"=E:\Apps\Crystal Disk Info\DiskInfo.exe [2010-11-07 998872]
"Skype"=E:\Apps\Skype\Phone\Skype.exe [2010-12-03 14944136]
"Grindstone 2"=e:\Apps\Grindstone 2\Grindstone 2.exe [2010-12-20 1444864]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Adobe Acrobat Speed Launcher.lnk - C:\WINDOWS\Installer\{AC76BA86-1033-0000-7760-000000000002}\SC_Acrobat.exe
Secunia PSI Tray.lnk - C:\Program Files\Secunia PSI\psi_tray.exe

C:\Documents and Settings\user\Nabídka Start\Programy\Po spuštění
4t Tray Minimizer.lnk - E:\Apps\4t Tray Minimizer\4t-min.exe
Crystal Disk Info.lnk - E:\Apps\Crystal Disk Info\DiskInfo.exe
Esmska.lnk - N:\_SOFTWARE_\esmska-0.20.0\esmska-portable.exe
EssentialPIM.lnk - N:\_SOFTWARE_\EssentialPIM Pro\EssentialPIM.exe
Miranda.lnk - N:\_SOFTWARE_\Miranda IM\miranda32.exe
NetWorx.lnk - E:\Apps\NetWorx\networx.exe
Phrase Express.lnk - N:\_SOFTWARE_\PhraseExpress\phraseexpress.exe
TrayIt!.lnk - E:\Apps\TrayIt\TrayIt!.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CLPSLS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CLPSLS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveTypeAutoRun"=
"NoDriveAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe"="C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe:*:Enabled:Crawler Spyware Terminator"
"K:\uTorrent\utorrent.exe"="K:\uTorrent\utorrent.exe:*:Enabled:µTorrent"
"E:\Apps\Skype\Plugin Manager\skypePM.exe"="E:\Apps\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"E:\Apps\Skype\Phone\Skype.exe"="E:\Apps\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2fcf8d09-08f9-11e0-9d06-0011d8145c79}]
shell\AutoRun\command - M:\__DTMEDIA\DTMedia.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4f63aed2-e370-11de-9ad9-0011d8145c79}]
shell\AutoRun\command - "V:\WD SmartWare.exe" autoplay=true


======File associations======

.js - edit -
.js - open - "E:\Apps\Subtitle Workshop\subtitleworkshop.exe" /OPEN("%1")

======List of files/folders created in the last 1 months======

2010-12-30 16:49:19 ----D---- C:\Documents and Settings\user\Data aplikací\4t Niagara Software
2010-12-30 10:09:14 ----D---- C:\Documents and Settings\user\Data aplikací\Grindstone 2
2010-12-29 23:16:41 ----D---- C:\Documents and Settings\user\Data aplikací\NCH Software
2010-12-29 23:16:40 ----D---- C:\Documents and Settings\All Users\Data aplikací\NCH Software
2010-12-29 23:16:26 ----D---- C:\Program Files\NCH Software
2010-12-29 17:57:30 ----D---- C:\WINDOWS\SxsCaPendDel
2010-12-29 08:42:59 ----D---- C:\Apps
2010-12-27 11:09:37 ----D---- C:\Program Files\Common Files\Skype
2010-12-26 16:33:49 ----A---- C:\WINDOWS\resetlog.txt
2010-12-22 11:11:47 ----D---- C:\Program Files\Secunia PSI
2010-12-19 13:42:43 ----A---- C:\WINDOWS\_delis32.ini
2010-12-19 13:04:30 ----A---- C:\WINDOWS\CleanMem Uninstall Log.txt
2010-12-15 10:05:43 ----HDC---- C:\WINDOWS\$NtUninstallKB2296199$
2010-12-15 09:57:41 ----HDC---- C:\WINDOWS\$NtUninstallKB2467659$
2010-12-15 09:57:20 ----HDC---- C:\WINDOWS\$NtUninstallKB2440591$
2010-12-15 09:56:42 ----HDC---- C:\WINDOWS\$NtUninstallKB2443685$
2010-12-15 09:56:17 ----HDC---- C:\WINDOWS\$NtUninstallKB2443105$
2010-12-15 09:55:47 ----HDC---- C:\WINDOWS\$NtUninstallKB2436673$
2010-12-15 09:55:20 ----HDC---- C:\WINDOWS\$NtUninstallKB2423089$
2010-12-12 15:49:11 ----D---- C:\Documents and Settings\user\Data aplikací\ColorCop
2010-12-10 19:37:19 ----AD---- C:\Documents and Settings\All Users\Data aplikací\TEMP
2010-12-10 17:50:08 ----A---- C:\cleanmem_log.txt
2010-12-10 15:48:40 ----A---- C:\WINDOWS\system32\cleanmem_only_list.txt
2010-12-10 15:48:40 ----A---- C:\WINDOWS\system32\cleanmem_log_settings.txt
2010-12-10 15:48:40 ----A---- C:\WINDOWS\system32\cleanmem_ignore_list.txt
2010-12-10 15:48:20 ----A---- C:\WINDOWS\CleanMem Setup Log.txt
2010-12-02 21:03:31 ----D---- C:\Program Files\Zone Labs
2010-12-02 21:02:03 ----D---- C:\WINDOWS\Internet Logs

======List of files/folders modified in the last 1 months======

2011-01-01 11:37:00 ----D---- C:\WINDOWS\Prefetch
2011-01-01 11:36:54 ----D---- C:\Program Files\trend micro
2011-01-01 11:31:20 ----D---- C:\Documents and Settings\user\Data aplikací\Skype
2011-01-01 11:16:07 ----D---- C:\WINDOWS\Temp
2011-01-01 11:04:09 ----D---- C:\Documents and Settings\user\Data aplikací\skypePM
2011-01-01 11:02:38 ----D---- C:\WINDOWS
2011-01-01 11:02:36 ----D---- C:\WINDOWS\system32\CatRoot2
2010-12-31 19:17:14 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-12-31 19:14:47 ----A---- C:\WINDOWS\NeroDigital.ini
2010-12-31 19:10:23 ----A---- C:\WINDOWS\config6.ini
2010-12-31 15:40:44 ----D---- C:\WINDOWS\system32
2010-12-31 10:20:10 ----D---- C:\Documents and Settings\user\Data aplikací\Spyware Terminator
2010-12-31 09:54:22 ----SHD---- C:\WINDOWS\Installer
2010-12-31 09:53:38 ----D---- C:\Program Files\Common Files\Adobe
2010-12-31 01:07:10 ----D---- C:\Zotero
2010-12-30 16:34:26 ----RSD---- C:\WINDOWS\assembly
2010-12-30 15:45:16 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spyware Terminator
2010-12-30 02:25:52 ----A---- C:\WINDOWS\VACCA.INI
2010-12-29 23:19:01 ----SD---- C:\WINDOWS\Tasks
2010-12-29 23:16:26 ----RD---- C:\Program Files
2010-12-29 18:17:02 ----D---- C:\WINDOWS\Microsoft.NET
2010-12-29 17:58:26 ----D---- C:\WINDOWS\WinSxS
2010-12-29 08:43:05 ----D---- C:\WINDOWS\system32\drivers
2010-12-27 11:09:37 ----D---- C:\Program Files\Common Files
2010-12-27 11:09:01 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2010-12-26 17:16:44 ----D---- C:\Documents and Settings\user\Data aplikací\DeskSoft
2010-12-26 16:18:09 ----D---- C:\Program Files\Spyware Terminator
2010-12-26 11:41:38 ----A---- C:\WINDOWS\cdplayer.ini
2010-12-21 15:32:04 ----D---- C:\Documents and Settings\user\Data aplikací\dvdcss
2010-12-19 23:07:25 ----A---- C:\WINDOWS\AviSplitter.INI
2010-12-16 11:41:11 ----HD---- C:\WINDOWS\inf
2010-12-15 10:05:46 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-12-15 09:59:36 ----A---- C:\WINDOWS\system32\MRT.exe
2010-12-15 09:59:22 ----A---- C:\WINDOWS\imsins.BAK
2010-12-15 09:58:51 ----D---- C:\Program Files\Internet Explorer
2010-12-15 09:58:18 ----D---- C:\WINDOWS\ie8updates
2010-12-15 09:58:05 ----HD---- C:\WINDOWS\$hf_mig$
2010-12-15 09:55:23 ----D---- C:\Program Files\Outlook Express
2010-12-13 10:46:51 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-12-12 10:25:51 ----HD---- C:\Program Files\InstallShield Installation Information
2010-12-11 02:02:50 ----D---- C:\WINDOWS\system32\oodag
2010-12-07 12:49:29 ----D---- C:\WINDOWS\Media

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AmdK7;Ovladač procesoru AMD K7; C:\WINDOWS\system32\DRIVERS\amdk7.sys [2008-04-14 41600]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [2010-09-29 239240]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\WINDOWS\System32\DRIVERS\cmdhlp.sys [2010-09-29 25240]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2009-05-14 107256]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2009-05-14 94360]
R1 sp_rsdrv2;Spyware Terminator Driver 2; \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys []
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2009-05-14 114472]
R3 aeaudio;aeaudio; C:\WINDOWS\system32\drivers\aeaudio.sys [2002-04-01 4816]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2010-07-10 10604128]
R3 PSI;PSI; C:\WINDOWS\system32\DRIVERS\psi_mf.sys [2010-09-01 15544]
R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2003-07-15 578368]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Ovladač standardního rozbočovače USB; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\WINDOWS\system32\drivers\WmBEnum.sys [2005-04-12 10144]
R3 WmXlCore;Logitech WingMan Translation Layer Driver; C:\WINDOWS\system32\drivers\WmXlCore.sys [2005-04-12 45504]
R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Gigabit Ethernet Adapter; C:\WINDOWS\system32\DRIVERS\yukonwxp.sys [2003-11-10 174464]
S3 aq12sade;aq12sade; C:\WINDOWS\system32\drivers\aq12sade.sys []
S3 catchme;catchme; \??\C:\DOCUME~1\user\LOCALS~1\Temp\catchme.sys []
S3 CrystalSysInfo;CrystalSysInfo; \??\E:\Apps\MediaCoder\SysInfo.sys []
S3 dsnpfdMP;dsnpfdMP; C:\WINDOWS\system32\DRIVERS\dsnpfd.sys []
S3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 MEMSWEEP2;MEMSWEEP2; \??\C:\WINDOWS\system32\3B.tmp []
S3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\ccdcmb.sys [2010-02-26 18176]
S3 nmwcdc;Nokia USB Generic; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2010-02-26 22528]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent; C:\WINDOWS\system32\drivers\nmwcdnsu.sys [2010-02-26 137344]
S3 nmwcdnsuc;Nokia USB Flashing Generic; C:\WINDOWS\system32\drivers\nmwcdnsuc.sys [2010-02-26 8320]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2010-02-26 8192]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\drivers\usbser.sys [2008-04-13 26112]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2010-02-26 8192]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\WINDOWS\system32\DRIVERS\wdcsam.sys [2009-02-13 11520]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S3 WmFilter;Logitech Gaming HID Filter Driver; C:\WINDOWS\system32\drivers\WmFilter.sys [2005-04-12 22240]
S3 WmHidLo;Logitech Gaming USB Filter Driver; C:\WINDOWS\system32\drivers\WmHidLo.sys [2005-04-12 17632]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 CLPSLS;COMODO livePCsupport Service; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe [2010-02-19 148744]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2010-09-29 1901056]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2009-05-14 731840]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-09-15 153376]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2010-07-09 155752]
R2 O&O Defrag;O&O Defrag; C:\WINDOWS\system32\oodag.exe [2009-04-08 1377536]
R2 Secunia PSI Agent;Secunia PSI Agent; C:\Program Files\Secunia PSI\PSIA.exe [2010-12-21 987704]
R2 Secunia Update Agent;Secunia Update Agent; C:\Program Files\Secunia PSI\sua.exe [2010-12-21 399416]
R2 SoundMAX Agent Service (default);SoundMAX Agent Service; C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe [2002-09-20 45056]
R2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files\Spyware Terminator\sp_rsser.exe [2010-11-15 496128]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912]
R2 VRAID Log Service;VRAID Log Service; C:\Program Files\VIA\RAID\vialogsv.exe [2008-09-24 52888]
R2 WDBtnMgrSvc.exe;WD Drive Manager Service; C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrSvc.exe [2008-07-24 102400]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2009-11-05 69632]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2009-05-14 20680]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2008-12-12 537896]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2010-02-26 652800]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Dobrý večer
Co je za problém s počítačem?

Zdravím,
počítač pomaleji startuje, Firefox se občas táhne jak týden před výplatou a při větší zátěži (více aplikací běžících současně) chod počítače někdy na 30-90 sekund vytuhne, než se zase rozběhne (někdy dokonce nereaguje ani myš).
Přikládám to spíš tomu, že je počítač spíš už starožitnost (nejen procesor, ale i zoufale málo RAM) a já ho v zátěži nešetřím, ale chtěl jsem mít jistotu, že v něm není nějaká havěť.
Díky za kontrolu logu.

Stahněte MBAM z mého podpisu
-Nainstalujte,dejte úplný sken

NIC NEMAZAT
-MBAM má občas falešné detekce,proto budeme mazat až po kontrole logu.
-Log zkopírujte sem.

MBAM projíždím pravidelně. Logy jsou vždy čisté. Stejně jako tento:

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Verze databáze: 5445

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

2.1.2011 22:02:22
mbam-log-2011-01-02 (22-02-22).txt

Typ kontroly: Úplný test (C:\|)
Testované objekty: 183166
Uplynulý čas: 40 minut, 10 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 0
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
(Žádné škodlivé položky nebyly zjištěny)

Spusťte combofix podle tohoto návodu
http://www.bleepingcomputer.com/combofi ... t-combofix

Zde je log z Combofixu - part 1

ComboFix 11-01-02.02 - user 02.01.2011 23:33:15.2.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1023.536 [GMT 1:00]
Spuštěný z: c:\documents and settings\user\Plocha\ComboFix.exe
AV: ESET NOD32 Antivirus 4.0 *Disabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: COMODO Firewall *Enabled* {043803A3-4F86-4ef6-AFC5-F6E02A79969B}
.

((((((((((((((((((((((((( Soubory vytvořené od 2010-12-02 do 2011-01-02 )))))))))))))))))))))))))))))))
.

2010-12-30 15:49 . 2010-12-30 15:49 -------- d-----w- c:\documents and settings\user\Data aplikací\4t Niagara Software
2010-12-30 09:09 . 2011-01-02 22:30 -------- d-----w- c:\documents and settings\user\Data aplikací\Grindstone 2
2010-12-29 22:16 . 2010-12-29 22:16 -------- d-----w- c:\documents and settings\user\Data aplikací\NCH Software
2010-12-29 22:16 . 2010-12-29 22:16 -------- d-----w- c:\documents and settings\All Users\Data aplikací\NCH Software
2010-12-29 22:16 . 2010-12-29 22:18 -------- d-----w- c:\program files\NCH Software
2010-12-29 16:57 . 2010-12-30 08:43 -------- d-----w- c:\windows\SxsCaPendDel
2010-12-29 07:42 . 2010-12-29 07:42 -------- d-----w- C:\Apps
2010-12-27 10:09 . 2010-12-27 10:09 -------- d-----w- c:\program files\Common Files\Skype
2010-12-22 10:11 . 2010-12-22 10:11 -------- d-----w- c:\documents and settings\user\Local Settings\Data aplikací\Secunia PSI
2010-12-22 10:11 . 2011-01-02 22:32 -------- d-----w- c:\program files\Secunia PSI
2010-12-15 08:51 . 2010-11-02 15:17 40960 -c----w- c:\windows\system32\dllcache\ndproxy.sys
2010-12-15 08:50 . 2010-10-11 14:59 45568 -c----w- c:\windows\system32\dllcache\wab.exe
2010-12-12 14:49 . 2010-12-12 14:50 -------- d-----w- c:\documents and settings\user\Data aplikací\ColorCop
2010-12-10 18:37 . 2010-12-12 09:21 -------- d---a-w- c:\documents and settings\All Users\Data aplikací\TEMP

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-12-20 17:09 . 2010-05-06 17:36 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-12-20 17:08 . 2010-05-06 17:36 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-11-18 18:15 . 2009-08-06 09:39 81920 ----a-w- c:\windows\system32\isign32.dll
2010-11-16 22:41 . 2010-11-16 22:41 323624 ----a-w- c:\windows\system32\wiaaut.dll
2010-11-06 00:23 . 2004-08-18 12:00 916480 ----a-w- c:\windows\system32\wininet.dll
2010-11-06 00:23 . 2004-08-18 12:00 43520 ----a-w- c:\windows\system32\licmgr10.dll
2010-11-06 00:23 . 2004-08-18 12:00 1469440 ------w- c:\windows\system32\inetcpl.cpl
2010-11-03 12:25 . 2004-08-18 12:00 385024 ----a-w- c:\windows\system32\html.iec
2010-11-02 15:17 . 2004-08-18 12:00 40960 ----a-w- c:\windows\system32\drivers\ndproxy.sys
2010-10-28 13:09 . 2004-08-18 12:00 290048 ----a-w- c:\windows\system32\atmfd.dll
2010-10-26 13:58 . 2004-08-18 12:00 1853312 ----a-w- c:\windows\system32\win32k.sys
.

------- Sigcheck -------

[7] 2008-06-20 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[7] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\ERDNT\cache\tcpip.sys
[7] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\system32\dllcache\tcpip.sys
[-] 2008-06-20 . D24EA301E2B36C4E975FD216CA85D8E7 . 361600 . . [5.1.2600.5625] . . c:\windows\system32\drivers\tcpip.sys
[7] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB951748$\tcpip.sys
[7] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\tcpip.sys
[7] 2004-08-18 . 9F4B36614A0FC234525BA224957DE55C . 359040 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\tcpip.sys
.
((((((((((((((((((((((((((((( SnapShot@2010-07-09_18.47.55 )))))))))))))))))))))))))))))))))))))))))
.
- 2009-07-11 23:02 . 2009-07-11 23:02 51008 c:\windows\WinSxS\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_f0ccd4aa\vcomp90.dll
+ 2010-11-16 22:41 . 2010-11-16 22:41 51008 c:\windows\WinSxS\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_f0ccd4aa\vcomp90.dll
+ 2010-11-16 22:41 . 2010-11-16 22:41 56656 c:\windows\WinSxS\amd64_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_22d6ba8a\vcomp90.dll
- 2009-07-11 21:11 . 2009-07-11 21:11 56656 c:\windows\WinSxS\amd64_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_22d6ba8a\vcomp90.dll
+ 2011-01-02 22:26 . 2011-01-02 22:26 16384 c:\windows\Temp\Perflib_Perfdata_2b0.dat
- 2009-08-06 17:06 . 2010-04-21 13:28 46080 c:\windows\system32\tzchange.exe
+ 2009-08-06 17:06 . 2010-11-03 13:12 46080 c:\windows\system32\tzchange.exe
+ 2004-08-18 12:00 . 2010-08-27 05:54 99840 c:\windows\system32\srvsvc.dll
+ 2004-08-18 12:00 . 2010-08-17 13:17 58880 c:\windows\system32\spoolsv.exe
+ 2004-08-18 12:00 . 2010-12-13 09:46 71904 c:\windows\system32\perfc009.dat
- 2004-08-18 12:00 . 2010-06-24 05:43 71904 c:\windows\system32\perfc009.dat
+ 2004-08-18 12:00 . 2010-12-13 09:46 83562 c:\windows\system32\perfc005.dat
- 2004-08-18 12:00 . 2010-06-24 05:43 83562 c:\windows\system32\perfc005.dat
+ 2010-07-10 04:38 . 2010-07-10 04:38 61440 c:\windows\system32\OpenCL.dll
- 2009-07-14 11:35 . 2009-07-14 11:35 81920 c:\windows\system32\nvwddi.dll
+ 2010-07-09 15:24 . 2010-07-09 15:24 81920 c:\windows\system32\nvwddi.dll
+ 2004-08-18 12:00 . 2010-11-06 00:23 66560 c:\windows\system32\mshtmled.dll
- 2004-08-18 12:00 . 2009-03-08 02:31 66560 c:\windows\system32\mshtmled.dll
- 2009-03-08 02:31 . 2010-05-06 10:35 55296 c:\windows\system32\msfeedsbs.dll
+ 2009-03-08 02:31 . 2010-11-06 00:23 55296 c:\windows\system32\msfeedsbs.dll
+ 2004-08-18 12:00 . 2010-11-06 00:23 25600 c:\windows\system32\jsproxy.dll
- 2004-08-18 12:00 . 2010-05-06 10:35 25600 c:\windows\system32\jsproxy.dll
- 2004-08-18 12:00 . 2008-04-14 06:51 80384 c:\windows\system32\iccvid.dll
+ 2004-08-18 12:00 . 2010-06-17 14:03 80384 c:\windows\system32\iccvid.dll
+ 2010-09-01 08:30 . 2010-09-01 08:30 15544 c:\windows\system32\drivers\psi_mf.sys
+ 2010-04-08 23:25 . 2010-09-29 05:26 91560 c:\windows\system32\drivers\inspect.sys
- 2010-04-08 23:25 . 2010-06-08 06:56 25240 c:\windows\system32\drivers\cmdhlp.sys
+ 2010-04-08 23:25 . 2010-09-29 05:26 25240 c:\windows\system32\drivers\cmdhlp.sys
+ 2010-04-08 23:25 . 2010-09-29 05:26 15592 c:\windows\system32\drivers\cmderd.sys
+ 2009-08-09 07:55 . 2010-11-06 00:23 12800 c:\windows\system32\dllcache\xpshims.dll
- 2009-08-09 07:55 . 2010-05-06 10:35 12800 c:\windows\system32\dllcache\xpshims.dll
+ 2010-08-27 05:54 . 2010-08-27 05:54 99840 c:\windows\system32\dllcache\srvsvc.dll
+ 2010-08-17 13:17 . 2010-08-17 13:17 58880 c:\windows\system32\dllcache\spoolsv.exe
- 2009-03-08 02:31 . 2009-03-08 02:31 66560 c:\windows\system32\dllcache\mshtmled.dll
+ 2009-03-08 02:31 . 2010-11-06 00:23 66560 c:\windows\system32\dllcache\mshtmled.dll
+ 2009-08-09 07:55 . 2010-11-06 00:23 55296 c:\windows\system32\dllcache\msfeedsbs.dll
- 2009-08-09 07:55 . 2010-05-06 10:35 55296 c:\windows\system32\dllcache\msfeedsbs.dll
+ 2009-03-08 02:34 . 2010-11-06 00:23 43520 c:\windows\system32\dllcache\licmgr10.dll
+ 2009-03-08 02:33 . 2010-11-06 00:23 25600 c:\windows\system32\dllcache\jsproxy.dll
- 2009-03-08 02:33 . 2010-05-06 10:35 25600 c:\windows\system32\dllcache\jsproxy.dll
+ 2010-11-18 18:15 . 2010-11-18 18:15 81920 c:\windows\system32\dllcache\isign32.dll
+ 2009-09-14 14:30 . 2009-09-14 14:30 93024 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft Report Viewer Redistributable 2008 (KB971118)\install.res.3082.dll
+ 2009-09-14 14:30 . 2009-09-14 14:30 72528 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft Report Viewer Redistributable 2008 (KB971118)\install.res.2052.dll
+ 2009-09-14 14:29 . 2009-09-14 14:29 89936 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft Report Viewer Redistributable 2008 (KB971118)\install.res.1049.dll
+ 2009-09-14 15:28 . 2009-09-14 15:28 89936 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft Report Viewer Redistributable 2008 (KB971118)\install.res.1046.dll
+ 2009-09-14 14:29 . 2009-09-14 14:29 76640 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft Report Viewer Redistributable 2008 (KB971118)\install.res.1042.dll
+ 2009-09-14 14:29 . 2009-09-14 14:29 78176 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft Report Viewer Redistributable 2008 (KB971118)\install.res.1041.dll
+ 2009-09-14 14:30 . 2009-09-14 14:30 92000 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft Report Viewer Redistributable 2008 (KB971118)\install.res.1040.dll
+ 2009-09-14 14:30 . 2009-09-14 14:30 94032 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft Report Viewer Redistributable 2008 (KB971118)\install.res.1036.dll
+ 2009-09-14 14:29 . 2009-09-14 14:29 87904 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft Report Viewer Redistributable 2008 (KB971118)\install.res.1033.dll
+ 2009-09-14 14:30 . 2009-09-14 14:30 93008 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft Report Viewer Redistributable 2008 (KB971118)\install.res.1031.dll
+ 2009-09-14 14:30 . 2009-09-14 14:30 73056 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft Report Viewer Redistributable 2008 (KB971118)\install.res.1028.dll
+ 2010-09-22 07:43 . 2010-09-22 07:43 30544 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
- 2010-03-23 03:31 . 2010-03-23 03:31 30544 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
+ 2010-09-23 13:55 . 2010-09-23 13:55 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll
- 2010-04-01 09:42 . 2010-04-01 09:42 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll
- 2010-03-31 12:51 . 2010-03-31 12:51 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
+ 2010-09-23 00:26 . 2010-09-23 00:26 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
- 2010-03-31 12:51 . 2010-03-31 12:51 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
+ 2010-09-23 00:26 . 2010-09-23 00:26 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
- 2010-03-31 12:51 . 2010-03-31 12:51 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
+ 2010-09-23 00:26 . 2010-09-23 00:26 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
- 2010-03-31 13:32 . 2010-03-31 13:32 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
+ 2010-09-23 01:17 . 2010-09-23 01:17 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
- 2010-03-31 13:32 . 2010-03-31 13:32 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll
+ 2010-09-23 01:17 . 2010-09-23 01:17 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll
+ 2010-11-15 10:24 . 2010-11-15 10:24 38240 c:\windows\Installer\{90120000-0020-0409-0000-0000000FF1CE}\O12ConvIcon.exe
- 2010-06-09 18:00 . 2010-06-09 18:00 38240 c:\windows\Installer\{90120000-0020-0409-0000-0000000FF1CE}\O12ConvIcon.exe
+ 2009-08-09 16:31 . 2010-12-15 09:12 23040 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\unbndico.exe
- 2009-08-09 16:31 . 2010-06-09 18:00 23040 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\unbndico.exe
- 2009-08-09 16:31 . 2010-06-09 17:59 61440 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\pubs.exe
+ 2009-08-09 16:31 . 2010-12-15 09:12 61440 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\pubs.exe
- 2009-08-09 16:31 . 2010-06-09 17:59 27136 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\oisicon.exe
+ 2009-08-09 16:31 . 2010-12-15 09:12 27136 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\oisicon.exe
- 2009-08-09 16:31 . 2010-06-09 17:59 11264 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\mspicons.exe
+ 2009-08-09 16:31 . 2010-12-15 09:12 11264 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\mspicons.exe
- 2009-08-09 16:31 . 2010-06-09 17:59 86016 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\inficon.exe
+ 2009-08-09 16:31 . 2010-12-15 09:12 86016 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\inficon.exe
- 2009-08-09 16:31 . 2010-06-09 17:59 12288 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\cagicon.exe
+ 2009-08-09 16:31 . 2010-12-15 09:12 12288 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\cagicon.exe
+ 2010-12-29 16:58 . 2010-12-29 16:58 77610 c:\windows\Installer\{639673E9-D53F-44F4-A046-485C8A6ADA15}\_853F67D554F05449430E7E.exe
+ 2010-12-15 08:58 . 2010-09-10 05:52 12800 c:\windows\ie8updates\KB2416400-IE8\xpshims.dll
+ 2010-12-15 08:58 . 2010-09-10 05:52 66560 c:\windows\ie8updates\KB2416400-IE8\mshtmled.dll
+ 2010-12-15 08:58 . 2010-09-10 05:52 55296 c:\windows\ie8updates\KB2416400-IE8\msfeedsbs.dll
+ 2010-12-15 08:58 . 2010-09-10 05:52 43520 c:\windows\ie8updates\KB2416400-IE8\licmgr10.dll
+ 2010-12-15 08:58 . 2010-09-10 05:52 25600 c:\windows\ie8updates\KB2416400-IE8\jsproxy.dll
+ 2010-11-15 10:16 . 2010-06-24 12:27 12800 c:\windows\ie8updates\KB2360131-IE8\xpshims.dll
+ 2010-11-15 10:16 . 2009-03-08 02:31 66560 c:\windows\ie8updates\KB2360131-IE8\mshtmled.dll
+ 2010-11-15 10:16 . 2010-06-24 12:27 55296 c:\windows\ie8updates\KB2360131-IE8\msfeedsbs.dll
+ 2010-11-15 10:16 . 2009-03-08 02:34 43008 c:\windows\ie8updates\KB2360131-IE8\licmgr10.dll
+ 2010-11-15 10:16 . 2010-06-24 12:27 25600 c:\windows\ie8updates\KB2360131-IE8\jsproxy.dll
+ 2010-08-11 03:43 . 2010-05-06 10:35 12800 c:\windows\ie8updates\KB2183461-IE8\xpshims.dll
+ 2010-08-11 03:43 . 2010-05-06 10:35 55296 c:\windows\ie8updates\KB2183461-IE8\msfeedsbs.dll
+ 2010-08-11 03:43 . 2010-05-06 10:35 25600 c:\windows\ie8updates\KB2183461-IE8\jsproxy.dll
+ 2010-10-01 13:37 . 2010-10-01 13:37 90112 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_35e805d6\System.Drawing.Design.dll
+ 2010-10-01 13:37 . 2010-10-01 13:37 61440 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_d7221a11\CustomMarshalers.dll
+ 2010-08-11 04:20 . 2010-08-11 04:20 24576 c:\windows\assembly\NativeImages_v2.0.50727_32\WiaProxy32\29bbd9bef4dae05bf88181b27729cf73\WiaProxy32.ni.exe
+ 2010-12-29 17:01 . 2010-12-29 17:01 24576 c:\windows\assembly\NativeImages_v2.0.50727_32\WiaProxy32\04022b913366d31019f88a492601408e\WiaProxy32.ni.exe
+ 2010-08-11 03:47 . 2010-08-11 03:47 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\5ec9dec678303ebff0ef018edb5ec595\UIAutomationProvider.ni.dll
+ 2010-08-11 04:24 . 2010-08-11 04:24 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\46ef15b88ef577de4882c519329fc5d2\System.Windows.Presentation.ni.dll
+ 2010-10-01 13:47 . 2010-10-01 13:48 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\70ee6267f7bad40e8707d402277770c3\System.Web.DynamicData.Design.ni.dll
+ 2010-08-11 04:20 . 2010-08-11 04:20 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\2b5ff2c6358c483eb1439b99badb54fd\System.ComponentModel.DataAnnotations.ni.dll
+ 2010-08-11 04:20 . 2010-08-11 04:20 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\6125ff5a4fcd93d70a246cbff3005d42\System.AddIn.Contract.ni.dll
+ 2010-08-11 03:41 . 2010-08-11 03:41 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\de26af01222270c121788161496fcfe7\PresentationFontCache.ni.exe
+ 2010-08-11 03:36 . 2010-08-11 03:36 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\3c5adeedb70e6e052a6556c6ab9b6918\PresentationCFFRasterizer.ni.dll
+ 2010-08-11 04:22 . 2010-08-11 04:22 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\5e5176efbfeb803b7f217525beec6844\Microsoft.Vsa.ni.dll
+ 2010-12-29 16:59 . 2010-12-29 16:59 15872 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\272d51526813ea113970b8e890c92ee2\Microsoft.VisualC.ni.dll
+ 2010-08-11 04:19 . 2010-08-11 04:19 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\e1d4e0b1f112000ab33bbaf88bd9ed99\Microsoft.Build.Framework.ni.dll
+ 2010-08-11 04:20 . 2010-08-11 04:20 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\4200cf5b7f247ec1b997808c6d1ba7d1\Microsoft.Build.Framework.ni.dll
+ 2010-12-29 16:59 . 2010-12-29 16:59 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\Interop.WIA\9635ebb159cfd1fdeada9e92dbb06347\Interop.WIA.ni.dll
+ 2010-08-11 04:18 . 2010-08-11 04:18 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\50b7fc7f36c76313cbb434b10923e4e9\dfsvc.ni.exe
+ 2010-08-11 04:17 . 2010-08-11 04:17 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\5ffa548547613dbc5a92f2c5b7cad196\Accessibility.ni.dll
- 2010-06-24 05:42 . 2010-06-24 05:42 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
- 2010-06-24 05:42 . 2010-06-24 05:42 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2010-06-24 05:43 . 2010-06-24 05:43 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2010-06-24 05:42 . 2010-06-24 05:42 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
- 2010-06-24 05:42 . 2010-06-24 05:42 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
- 2010-06-24 05:42 . 2010-06-24 05:42 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
+ 2010-12-30 15:34 . 2010-12-30 15:34 53248 c:\windows\assembly\GAC_MSIL\Microsoft.ReportViewer.ProcessingObjectModel\9.0.0.0__b03f5f7f11d50a3a\Microsoft.ReportViewer.ProcessingObjectModel.dll
- 2010-06-24 05:43 . 2010-06-24 05:43 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
- 2010-06-24 05:42 . 2010-06-24 05:42 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
- 2010-06-24 05:42 . 2010-06-24 05:42 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
- 2010-06-24 05:42 . 2010-06-24 05:42 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
- 2010-06-24 05:42 . 2010-06-24 05:42 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2010-06-24 05:42 . 2010-06-24 05:42 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2010-06-24 05:42 . 2010-06-24 05:42 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2010-10-01 13:36 . 2010-10-01 13:36 81920 c:\windows\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll
- 2010-06-09 18:02 . 2010-06-09 18:02 81920 c:\windows\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll
+ 2010-08-11 03:22 . 2008-04-14 06:51 80384 c:\windows\$NtUninstallKB982665$\iccvid.dll
+ 2010-09-15 19:56 . 2008-04-14 06:52 57856 c:\windows\$NtUninstallKB2347290$\spoolsv.exe
+ 2010-11-15 10:15 . 2008-04-14 06:52 96768 c:\windows\$NtUninstallKB2345886$\srvsvc.dll
+ 2010-09-29 05:25 . 2010-04-21 13:28 46080 c:\windows\$NtUninstallKB2158563$\tzchange.exe
+ 2010-09-29 05:25 . 2010-06-23 00:57 16896 c:\windows\$NtUninstallKB2158563$\spuninst\tzchange.dll
+ 2010-09-15 19:56 . 2010-02-22 14:20 26488 c:\windows\$hf_mig$\KB982802\update\spcustom.dll
+ 2010-09-15 19:56 . 2010-02-22 14:20 18296 c:\windows\$hf_mig$\KB982802\spmsg.dll
+ 2010-08-11 03:22 . 2010-02-22 14:20 26488 c:\windows\$hf_mig$\KB982665\update\spcustom.dll
+ 2010-08-11 03:22 . 2010-02-22 14:20 18296 c:\windows\$hf_mig$\KB982665\spmsg.dll
+ 2010-06-17 14:02 . 2010-06-17 14:02 80384 c:\windows\$hf_mig$\KB982665\SP3QFE\iccvid.dll
+ 2010-08-11 03:41 . 2010-02-22 14:20 26488 c:\windows\$hf_mig$\KB982214\update\spcustom.dll
+ 2010-08-11 03:41 . 2010-02-22 14:20 18296 c:\windows\$hf_mig$\KB982214\spmsg.dll
+ 2010-11-15 10:21 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB982132\update\spcustom.dll
+ 2010-11-15 10:21 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB982132\spmsg.dll
+ 2010-08-11 03:42 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB981997\update\spcustom.dll
+ 2010-08-11 03:42 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB981997\spmsg.dll
+ 2010-11-15 10:22 . 2010-02-22 14:20 26488 c:\windows\$hf_mig$\KB981957\update\spcustom.dll
+ 2010-11-15 10:22 . 2010-02-22 14:20 18296 c:\windows\$hf_mig$\KB981957\spmsg.dll
+ 2010-08-11 03:44 . 2010-02-22 14:20 26488 c:\windows\$hf_mig$\KB981852\update\spcustom.dll
+ 2010-08-11 03:20 . 2010-06-17 13:47 16896 c:\windows\$hf_mig$\KB981852\update\mpsyschk.dll
+ 2010-08-11 03:44 . 2010-02-22 14:20 18296 c:\windows\$hf_mig$\KB981852\spmsg.dll
+ 2010-09-15 19:52 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB981322\update\spcustom.dll
+ 2010-09-15 19:52 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB981322\spmsg.dll
+ 2010-08-11 03:44 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB980436\update\spcustom.dll
+ 2010-08-11 03:44 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB980436\spmsg.dll
+ 2010-11-15 10:15 . 2010-02-22 14:20 26488 c:\windows\$hf_mig$\KB979687\update\spcustom.dll
+ 2010-11-15 10:15 . 2010-02-22 14:20 18296 c:\windows\$hf_mig$\KB979687\spmsg.dll
+ 2010-11-15 10:17 . 2010-02-22 14:20 26488 c:\windows\$hf_mig$\KB2387149\update\spcustom.dll
+ 2010-11-15 10:17 . 2010-02-22 14:20 18296 c:\windows\$hf_mig$\KB2387149\spmsg.dll
+ 2010-11-15 10:22 . 2010-02-22 14:20 26488 c:\windows\$hf_mig$\KB2360937\update\spcustom.dll
+ 2010-11-15 10:22 . 2010-02-22 14:20 18296 c:\windows\$hf_mig$\KB2360937\spmsg.dll
+ 2010-11-15 10:16 . 2010-02-22 14:20 26488 c:\windows\$hf_mig$\KB2360131-IE8\update\spcustom.dll
+ 2010-11-15 10:16 . 2010-02-22 14:20 18296 c:\windows\$hf_mig$\KB2360131-IE8\spmsg.dll
+ 2010-11-15 10:05 . 2010-09-10 05:50 12800 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\xpshims.dll
+ 2010-11-15 10:05 . 2010-09-10 05:50 66560 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\mshtmled.dll
+ 2010-11-15 10:05 . 2010-09-10 05:50 55296 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\msfeedsbs.dll
+ 2010-11-15 10:05 . 2010-09-10 05:50 43520 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\licmgr10.dll
+ 2010-11-15 10:05 . 2010-09-10 05:50 25600 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\jsproxy.dll
+ 2010-09-15 19:56 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB2347290\update\spcustom.dll
+ 2010-09-15 19:56 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB2347290\spmsg.dll
+ 2010-08-17 13:19 . 2010-08-17 13:19 58880 c:\windows\$hf_mig$\KB2347290\SP3QFE\spoolsv.exe
+ 2010-11-15 10:15 . 2010-02-22 14:20 26488 c:\windows\$hf_mig$\KB2345886\update\spcustom.dll
+ 2010-11-15 10:15 . 2010-02-22 14:20 18296 c:\windows\$hf_mig$\KB2345886\spmsg.dll
+ 2010-08-27 06:02 . 2010-08-27 06:02 99840 c:\windows\$hf_mig$\KB2345886\SP3QFE\srvsvc.dll
+ 2010-08-03 05:40 . 2010-02-22 14:20 26488 c:\windows\$hf_mig$\KB2286198\update\spcustom.dll
+ 2010-08-03 05:40 . 2010-02-22 14:20 18296 c:\windows\$hf_mig$\KB2286198\spmsg.dll
+ 2010-11-15 10:22 . 2010-02-22 14:20 26488 c:\windows\$hf_mig$\KB2279986\update\spcustom.dll
+ 2010-11-15 10:22 . 2010-02-22 14:20 18296 c:\windows\$hf_mig$\KB2279986\spmsg.dll
+ 2010-09-15 19:57 . 2009-05-26 09:01 26488 c:\windows\$hf_mig$\KB2259922\update\spcustom.dll
+ 2010-09-15 19:57 . 2009-05-26 09:01 18296 c:\windows\$hf_mig$\KB2259922\spmsg.dll
+ 2010-07-13 19:27 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB2229593\update\spcustom.dll
+ 2010-07-13 19:27 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB2229593\spmsg.dll
+ 2010-08-11 03:43 . 2009-05-26 09:01 26488 c:\windows\$hf_mig$\KB2183461-IE8\update\spcustom.dll
+ 2010-08-11 03:43 . 2009-05-26 09:01 18296 c:\windows\$hf_mig$\KB2183461-IE8\spmsg.dll
+ 2010-08-11 03:20 . 2010-06-24 12:29 12800 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\xpshims.dll
+ 2010-08-11 03:20 . 2010-06-24 12:29 55296 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\msfeedsbs.dll
+ 2010-08-11 03:20 . 2010-06-24 12:29 25600 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\jsproxy.dll
+ 2010-08-11 03:41 . 2010-02-22 14:20 26488 c:\windows\$hf_mig$\KB2160329\update\spcustom.dll
+ 2010-08-11 03:41 . 2010-02-22 14:20 18296 c:\windows\$hf_mig$\KB2160329\spmsg.dll
+ 2010-09-15 19:47 . 2010-02-22 14:20 26488 c:\windows\$hf_mig$\KB2141007\update\spcustom.dll
+ 2010-09-15 19:47 . 2010-02-22 14:20 18296 c:\windows\$hf_mig$\KB2141007\spmsg.dll
+ 2010-09-15 19:56 . 2010-02-22 14:20 26488 c:\windows\$hf_mig$\KB2121546\update\spcustom.dll
+ 2010-09-15 19:56 . 2010-02-22 14:20 18296 c:\windows\$hf_mig$\KB2121546\spmsg.dll
+ 2010-08-11 03:22 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB2115168\update\spcustom.dll
+ 2010-08-11 03:22 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB2115168\spmsg.dll
+ 2010-08-11 03:42 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB2079403\update\spcustom.dll
+ 2010-08-11 03:42 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB2079403\spmsg.dll
- 2010-06-24 05:42 . 2010-06-24 05:42 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
+ 2008-05-05 05:25 . 2010-08-27 01:43 5632 c:\windows\system32\xpsp4res.dll
+ 2009-08-09 16:31 . 2010-12-15 09:12 4096 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\opwicon.exe
- 2009-08-09 16:31 . 2010-06-09 17:59 4096 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\opwicon.exe
- 2010-06-24 05:42 . 2010-06-24 05:42 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2010-06-24 05:43 . 2010-06-24 05:43 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2010-06-24 05:42 . 2010-06-24 05:42 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
- 2010-06-24 05:42 . 2010-06-24 05:42 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2010-09-15 19:56 . 2008-05-05 05:25 3072 c:\windows\$NtUninstallKB982802$\xpsp4res.dll
+ 2010-11-15 10:15 . 2010-07-22 06:19 5632 c:\windows\$NtUninstallKB2345886$\xpsp4res.dll
+ 2010-07-22 06:19 . 2010-07-22 06:19 5632 c:\windows\$hf_mig$\KB982802\SP3QFE\sprv0405.dll
+ 2010-07-12 13:19 . 2010-07-12 13:19 5632 c:\windows\$hf_mig$\KB979687\SP3QFE\sprv0405.dll
+ 2010-11-15 10:07 . 2010-08-13 17:44 5632 c:\windows\$hf_mig$\KB2360937\SP3QFE\sprv0405.dll
+ 2010-08-27 01:43 . 2010-08-27 01:43 5632 c:\windows\$hf_mig$\KB2345886\SP3QFE\sprv0405.dll
- 2010-06-24 05:42 . 2010-06-24 05:42 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
- 2010-06-24 05:42 . 2010-06-24 05:42 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
+ 2010-11-16 22:41 . 2010-11-16 22:41 653120 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcr90.dll
- 2009-07-11 23:02 . 2009-07-11 23:02 653120 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcr90.dll
+ 2010-11-16 22:41 . 2010-11-16 22:41 569664 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcp90.dll
- 2009-07-11 23:02 . 2009-07-11 23:02 569664 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcp90.dll
- 2009-07-11 23:05 . 2009-07-11 23:05 225280 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcm90.dll
+ 2010-11-16 22:41 . 2010-11-16 22:41 225280 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcm90.dll
- 2009-07-11 23:02 . 2009-07-11 23:02 159032 c:\windows\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_353599c2\atl90.dll
+ 2010-11-16 22:41 . 2010-11-16 22:41 159032 c:\windows\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_353599c2\atl90.dll
- 2009-07-11 21:11 . 2009-07-11 21:11 624448 c:\windows\WinSxS\amd64_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_069f922e\msvcr90.dll
+ 2010-11-16 22:41 . 2010-11-16 22:41 624448 c:\windows\WinSxS\amd64_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_069f922e\msvcr90.dll
- 2009-07-11 21:11 . 2009-07-11 21:11 853312 c:\windows\WinSxS\amd64_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_069f922e\msvcp90.dll
+ 2010-11-16 22:41 . 2010-11-16 22:41 853312 c:\windows\WinSxS\amd64_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_069f922e\msvcp90.dll
- 2009-07-11 21:14 . 2009-07-11 21:14 245760 c:\windows\WinSxS\amd64_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_069f922e\msvcm90.dll
+ 2010-11-16 22:41 . 2010-11-16 22:41 245760 c:\windows\WinSxS\amd64_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_069f922e\msvcm90.dll
- 2009-07-11 21:11 . 2009-07-11 21:11 176456 c:\windows\WinSxS\amd64_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_673f7fa2\atl90.dll
+ 2010-11-16 22:41 . 2010-11-16 22:41 176456 c:\windows\WinSxS\amd64_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_673f7fa2\atl90.dll
+ 2004-08-18 12:00 . 2010-06-18 17:47 293376 c:\windows\system32\winsrv.dll
- 2004-08-18 12:00 . 2008-04-14 06:52 293376 c:\windows\system32\winsrv.dll
+ 2004-08-18 12:00 . 2010-04-16 15:38 406016 c:\windows\system32\usp10.dll
- 2004-08-18 12:00 . 2008-04-14 06:52 406016 c:\windows\system32\usp10.dll
+ 2010-11-30 17:44 . 2010-08-02 21:00 551424 c:\windows\system32\TheMatrix.scr
+ 2004-08-18 12:00 . 2010-08-27 08:03 119808 c:\windows\system32\t2embed.dll
- 2004-08-18 12:00 . 2009-10-15 16:32 119808 c:\windows\system32\t2embed.dll
+ 2004-08-18 12:00 . 2010-06-30 12:33 149504 c:\windows\system32\schannel.dll
+ 2004-08-18 12:00 . 2010-08-16 08:45 590848 c:\windows\system32\rpcrt4.dll
+ 2010-11-15 10:10 . 2009-07-14 18:54 151552 c:\windows\system32\ReinstallBackups\0011\DriverFiles\nvcod.dll
+ 2010-11-15 10:10 . 2009-07-14 18:54 868352 c:\windows\system32\ReinstallBackups\0011\DriverFiles\nvapi.dll
- 2004-08-18 12:00 . 2010-06-24 05:43 444028 c:\windows\system32\perfh009.dat
+ 2004-08-18 12:00 . 2010-12-13 09:46 444028 c:\windows\system32\perfh009.dat
- 2004-08-18 12:00 . 2010-06-24 05:43 440812 c:\windows\system32\perfh005.dat
+ 2004-08-18 12:00 . 2010-12-13 09:46 440812 c:\windows\system32\perfh005.dat
- 2004-08-18 12:00 . 2010-05-06 10:35 206848 c:\windows\system32\occache.dll
+ 2004-08-18 12:00 . 2010-11-06 00:23 206848 c:\windows\system32\occache.dll
+ 2009-08-06 10:00 . 2010-07-10 04:38 604776 c:\windows\system32\NVUNINST.EXE
+ 2009-08-06 10:00 . 2010-07-10 04:38 604776 c:\windows\system32\nvudisp.exe
+ 2010-07-09 15:24 . 2010-07-09 15:24 155752 c:\windows\system32\nvsvc32.exe
+ 2010-07-09 15:24 . 2010-07-09 15:24 110696 c:\windows\system32\nvmctray.dll
+ 2010-07-09 15:24 . 2010-07-09 15:24 277608 c:\windows\system32\nvmccs.dll
+ 2010-11-15 10:11 . 2010-12-19 22:05 233072 c:\windows\system32\nvdrsdb1.bin
+ 2010-11-15 10:11 . 2010-12-19 22:05 233072 c:\windows\system32\nvdrsdb0.bin
+ 2010-07-09 15:24 . 2010-07-09 15:24 145000 c:\windows\system32\nvcolor.exe
+ 2009-08-06 10:00 . 2010-07-10 04:38 236136 c:\windows\system32\nvcodins.dll
+ 2009-08-06 10:00 . 2010-07-10 04:38 236136 c:\windows\system32\nvcod.dll
- 2004-08-18 12:00 . 2010-05-06 10:35 611840 c:\windows\system32\mstime.dll
+ 2004-08-18 12:00 . 2010-11-06 00:23 611840 c:\windows\system32\mstime.dll
+ 2009-03-08 02:32 . 2010-11-06 00:23 602112 c:\windows\system32\msfeeds.dll
+ 2004-08-18 12:00 . 2010-04-05 09:54 384512 c:\windows\system32\mp4sdmod.dll
- 2004-08-18 12:00 . 2008-04-14 06:51 384512 c:\windows\system32\mp4sdmod.dll
+ 2004-08-18 12:00 . 2010-09-18 11:23 974848 c:\windows\system32\mfc42u.dll
+ 2004-08-18 12:00 . 2010-09-18 06:53 974848 c:\windows\system32\mfc42.dll
+ 2004-08-18 12:00 . 2010-09-18 06:53 953856 c:\windows\system32\mfc40u.dll
+ 2004-08-18 12:00 . 2010-09-18 06:53 954368 c:\windows\system32\mfc40.dll
+ 2010-11-15 15:12 . 2010-11-15 15:12 233936 c:\windows\system32\Macromed\Flash\FlashUtil10l_Plugin.exe
+ 2010-11-15 15:12 . 2010-11-15 15:12 233936 c:\windows\system32\Macromed\Flash\FlashUtil10l_ActiveX.exe
+ 2010-11-15 15:12 . 2010-11-15 15:12 311248 c:\windows\system32\Macromed\Flash\FlashUtil10l_ActiveX.dll
- 2010-04-19 13:06 . 2010-04-12 15:29 153376 c:\windows\system32\javaws.exe
+ 2010-11-15 15:10 . 2010-09-15 03:50 153376 c:\windows\system32\javaws.exe
- 2010-04-19 13:06 . 2010-04-12 15:29 145184 c:\windows\system32\javaw.exe
+ 2010-11-15 15:10 . 2010-09-15 03:50 145184 c:\windows\system32\javaw.exe
- 2010-04-19 13:06 . 2010-04-12 15:29 145184 c:\windows\system32\java.exe
+ 2010-11-15 15:10 . 2010-09-15 03:50 145184 c:\windows\system32\java.exe
+ 2009-08-06 09:39 . 2010-06-09 07:45 692736 c:\windows\system32\inetcomm.dll
- 2004-08-18 12:00 . 2010-05-06 10:35 184320 c:\windows\system32\iepeers.dll
+ 2004-08-18 12:00 . 2010-11-06 00:23 184320 c:\windows\system32\iepeers.dll
+ 2004-08-18 12:00 . 2010-11-06 00:23 387584 c:\windows\system32\iedkcs32.dll
- 2004-08-18 12:00 . 2010-05-06 10:35 387584 c:\windows\system32\iedkcs32.dll
+ 2004-08-18 12:00 . 2010-11-03 12:26 173568 c:\windows\system32\ie4uinit.exe
+ 2010-04-08 23:26 . 2010-09-29 05:26 285480 c:\windows\system32\guard32.dll
+ 2009-08-06 11:30 . 2010-12-15 10:04 140440 c:\windows\system32\FNTCACHE.DAT
- 2009-08-06 11:30 . 2010-06-09 18:59 140440 c:\windows\system32\FNTCACHE.DAT
+ 2004-08-18 12:00 . 2010-08-26 13:39 357248 c:\windows\system32\drivers\srv.sys
+ 2009-08-09 16:17 . 2010-07-23 09:50 691696 c:\windows\system32\drivers\sptd.sys
+ 2010-04-08 23:25 . 2010-09-29 05:26 239240 c:\windows\system32\drivers\cmdGuard.sys
+ 2009-08-08 18:19 . 2010-07-16 11:58 219136 c:\windows\system32\dllcache\wordpad.exe
+ 2010-06-18 17:47 . 2010-06-18 17:47 293376 c:\windows\system32\dllcache\winsrv.dll
- 2009-06-26 16:51 . 2010-05-06 10:35 916480 c:\windows\system32\dllcache\wininet.dll
+ 2009-06-26 16:51 . 2010-11-06 00:23 916480 c:\windows\system32\dllcache\wininet.dll
+ 2010-04-16 15:38 . 2010-04-16 15:38 406016 c:\windows\system32\dllcache\usp10.dll
+ 2009-06-16 14:40 . 2010-08-27 08:03 119808 c:\windows\system32\dllcache\t2embed.dll
- 2009-06-16 14:40 . 2009-10-15 16:32 119808 c:\windows\system32\dllcache\t2embed.dll
+ 2009-08-08 18:21 . 2010-08-26 13:39 357248 c:\windows\system32\dllcache\srv.sys
+ 2008-12-05 06:57 . 2010-06-30 12:33 149504 c:\windows\system32\dllcache\schannel.dll
+ 2009-04-15 14:54 . 2010-08-16 08:45 590848 c:\windows\system32\dllcache\rpcrt4.dll
+ 2009-03-08 02:34 . 2010-11-06 00:23 206848 c:\windows\system32\dllcache\occache.dll
- 2009-03-08 02:34 . 2010-05-06 10:35 206848 c:\windows\system32\dllcache\occache.dll
+ 2009-03-08 02:32 . 2010-11-06 00:23 611840 c:\windows\system32\dllcache\mstime.dll
- 2009-03-08 02:32 . 2010-05-06 10:35 611840 c:\windows\system32\dllcache\mstime.dll
+ 2009-08-09 07:55 . 2010-11-06 00:23 602112 c:\windows\system32\dllcache\msfeeds.dll
+ 2004-08-18 12:00 . 2010-04-05 09:54 384512 c:\windows\system32\dllcache\mp4sdmod.dll
- 2004-08-18 12:00 . 2008-04-14 06:51 384512 c:\windows\system32\dllcache\mp4sdmod.dll
+ 2010-09-18 11:23 . 2010-09-18 11:23 974848 c:\windows\system32\dllcache\mfc42u.dll
+ 2010-11-15 10:05 . 2010-09-18 06:53 974848 c:\windows\system32\dllcache\mfc42.dll
+ 2010-11-15 10:05 . 2010-09-18 06:53 953856 c:\windows\system32\dllcache\mfc40u.dll
+ 2004-08-18 12:00 . 2010-09-18 06:53 954368 c:\windows\system32\dllcache\mfc40.dll
+ 2009-08-08 18:22 . 2010-06-09 07:45 692736 c:\windows\system32\dllcache\inetcomm.dll
+ 2009-08-09 07:55 . 2010-11-06 00:23 247808 c:\windows\system32\dllcache\ieproxy.dll
- 2009-08-09 07:55 . 2010-05-06 10:35 247808 c:\windows\system32\dllcache\ieproxy.dll
+ 2009-03-08 02:31 . 2010-11-06 00:23 184320 c:\windows\system32\dllcache\iepeers.dll
- 2009-03-08 02:31 . 2010-05-06 10:35 184320 c:\windows\system32\dllcache\iepeers.dll
+ 2010-06-09 04:54 . 2010-11-06 00:23 743424 c:\windows\system32\dllcache\iedvtool.dll
- 2010-06-09 04:54 . 2010-05-06 10:35 743424 c:\windows\system32\dllcache\iedvtool.dll
+ 2009-03-08 12:09 . 2010-11-06 00:23 387584 c:\windows\system32\dllcache\iedkcs32.dll
- 2009-03-08 12:09 . 2010-05-06 10:35 387584 c:\windows\system32\dllcache\iedkcs32.dll
+ 2009-03-08 02:32 . 2010-11-03 12:26 173568 c:\windows\system32\dllcache\ie4uinit.exe
+ 2010-07-13 19:24 . 2010-06-14 14:31 744448 c:\windows\system32\dllcache\helpsvc.exe
+ 2010-11-15 10:04 . 2010-08-23 16:12 617472 c:\windows\system32\dllcache\comctl32.dll
+ 2010-04-20 05:32 . 2010-10-28 13:09 290048 c:\windows\system32\dllcache\atmfd.dll
+ 2010-04-19 13:06 . 2010-09-15 03:50 472808 c:\windows\system32\deployJava1.dll
- 2004-08-18 12:00 . 2008-04-14 06:51 617472 c:\windows\system32\comctl32.dll
+ 2004-08-18 12:00 . 2010-08-23 16:12 617472 c:\windows\system32\comctl32.dll
- 2009-08-06 09:39 . 2008-04-14 06:52 744448 c:\windows\pchealth\helpctr\binaries\helpsvc.exe
+ 2009-08-06 09:39 . 2010-06-14 14:31 744448 c:\windows\pchealth\helpctr\binaries\helpsvc.exe
- 2010-03-23 03:31 . 2010-03-23 03:31 435024 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
+ 2010-09-22 07:43 . 2010-09-22 07:43 435024 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
+ 2010-05-11 04:40 . 2010-05-11 04:40 388936 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
- 2009-08-07 21:51 . 2009-08-07 21:51 989016 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
+ 2010-05-11 04:40 . 2010-05-11 04:40 989016 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
+ 2009-09-14 15:33 . 2009-09-14 15:33 147968 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft Report Viewer Redistributable 2008 (KB971118)\VB_ROS.MSI
+ 2009-09-14 15:28 . 2009-09-14 15:28 244560 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft Report Viewer Redistributable 2008 (KB971118)\unicows.dll
+ 2009-09-14 14:29 . 2009-09-14 14:29 559424 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft Report Viewer Redistributable 2008 (KB971118)\install.exe
+ 2010-09-23 00:26 . 2010-09-23 00:26 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
- 2010-03-31 12:51 . 2010-03-31 12:51 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
- 2010-03-31 12:49 . 2010-03-31 12:49 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
+ 2010-09-23 00:25 . 2010-09-23 00:25 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
- 2010-03-31 13:32 . 2010-03-31 13:32 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
+ 2010-09-23 01:17 . 2010-09-23 01:17 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
+ 2010-11-12 10:24 . 2010-11-12 10:24 884224 c:\windows\Installer\61bfea.msp
+ 2010-09-23 19:02 . 2010-09-23 19:02 798208 c:\windows\Installer\3c65c8.msp
+ 2010-11-15 15:11 . 2010-11-15 15:11 180224 c:\windows\Installer\33f808.msi
+ 2010-12-29 16:58 . 2010-12-29 16:58 490496 c:\windows\Installer\334484.msi
+ 2010-12-30 15:34 . 2010-12-30 15:34 144384 c:\windows\Installer\177aa3c.msi
+ 2010-12-27 10:10 . 2010-12-27 10:10 371272 c:\windows\Installer\{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}\SkypeIcon.exe
- 2009-08-09 16:31 . 2010-06-09 17:59 409600 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\xlicons.exe
+ 2009-08-09 16:31 . 2010-12-15 09:12 409600 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\xlicons.exe
+ 2009-08-09 16:31 . 2010-12-15 09:12 286720 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\wordicon.exe
- 2009-08-09 16:31 . 2010-06-09 17:59 286720 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\wordicon.exe
+ 2009-08-09 16:31 . 2010-12-15 09:12 249856 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\pptico.exe
- 2009-08-09 16:31 . 2010-06-09 17:59 249856 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\pptico.exe
- 2009-08-09 16:31 . 2010-06-09 18:00 794624 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\outicon.exe
+ 2009-08-09 16:31 . 2010-12-15 09:12 794624 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\outicon.exe
+ 2009-08-09 16:31 . 2010-12-15 09:12 135168 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\misc.exe
- 2009-08-09 16:31 . 2010-06-09 17:59 135168 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\misc.exe
- 2009-08-09 16:31 . 2010-06-09 17:59 593920 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\accicons.exe
+ 2009-08-09 16:31 . 2010-12-15 09:12 593920 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\accicons.exe
+ 2007-04-19 12:01 . 2007-04-19 12:01 238424 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.8173\MSCDM.DLL
+ 2007-01-16 18:32 . 2007-01-16 18:32 136032 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.8173\MSAEXP30.DLL
+ 2007-04-19 11:54 . 2007-04-19 11:54 169312 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.8173\ACCWIZ.DLL
+ 2010-12-15 08:58 . 2010-09-10 05:52 916480 c:\windows\ie8updates\KB2416400-IE8\wininet.dll
+ 2010-12-15 08:58 . 2010-07-05 13:13 391032 c:\windows\ie8updates\KB2416400-IE8\spuninst\updspapi.dll
+ 2010-12-15 08:58 . 2010-02-22 14:20 233848 c:\windows\ie8updates\KB2416400-IE8\spuninst\spuninst.exe
+ 2010-12-15 08:58 . 2010-09-10 05:52 206848 c:\windows\ie8updates\KB2416400-IE8\occache.dll
+ 2010-12-15 08:58 . 2010-09-10 05:52 611840 c:\windows\ie8updates\KB2416400-IE8\mstime.dll
+ 2010-12-15 08:58 . 2010-09-10 05:52 602112 c:\windows\ie8updates\KB2416400-IE8\msfeeds.dll
+ 2010-12-15 08:58 . 2010-09-10 05:52 247808 c:\windows\ie8updates\KB2416400-IE8\ieproxy.dll
+ 2010-12-15 08:58 . 2010-09-10 05:52 184320 c:\windows\ie8updates\KB2416400-IE8\iepeers.dll
+ 2010-12-15 08:58 . 2010-09-10 05:52 743424 c:\windows\ie8updates\KB2416400-IE8\iedvtool.dll
+ 2010-12-15 08:58 . 2010-09-10 05:52 387584 c:\windows\ie8updates\KB2416400-IE8\iedkcs32.dll
+ 2010-12-15 08:58 . 2010-08-26 12:22 173056 c:\windows\ie8updates\KB2416400-IE8\ie4uinit.exe
+ 2010-11-15 10:16 . 2010-06-24 12:27 916480 c:\windows\ie8updates\KB2360131-IE8\wininet.dll
+ 2010-11-15 10:16 . 2010-07-05 13:13 391032 c:\windows\ie8updates\KB2360131-IE8\spuninst\updspapi.dll
+ 2010-11-15 10:16 . 2010-02-22 14:20 233848 c:\windows\ie8updates\KB2360131-IE8\spuninst\spuninst.exe
+ 2010-11-15 10:16 . 2010-06-24 12:27 206848 c:\windows\ie8updates\KB2360131-IE8\occache.dll
+ 2010-11-15 10:16 . 2010-06-24 12:27 611840 c:\windows\ie8updates\KB2360131-IE8\mstime.dll
+ 2010-11-15 10:16 . 2010-06-24 12:27 599040 c:\windows\ie8updates\KB2360131-IE8\msfeeds.dll
+ 2010-11-15 10:16 . 2010-06-24 12:27 247808 c:\windows\ie8updates\KB2360131-IE8\ieproxy.dll
+ 2010-11-15 10:16 . 2010-06-24 12:27 184320 c:\windows\ie8updates\KB2360131-IE8\iepeers.dll
+ 2010-11-15 10:16 . 2010-06-24 12:27 743424 c:\windows\ie8updates\KB2360131-IE8\iedvtool.dll
+ 2010-11-15 10:16 . 2010-06-24 12:27 387584 c:\windows\ie8updates\KB2360131-IE8\iedkcs32.dll
+ 2010-11-15 10:16 . 2010-06-23 12:08 173056 c:\windows\ie8updates\KB2360131-IE8\ie4uinit.exe
+ 2010-08-11 03:43 . 2010-05-06 10:35 916480 c:\windows\ie8updates\KB2183461-IE8\wininet.dll
+ 2010-08-11 03:43 . 2010-02-22 14:21 391032 c:\windows\ie8updates\KB2183461-IE8\spuninst\updspapi.dll
+ 2010-08-11 03:43 . 2009-05-26 09:01 233848 c:\windows\ie8updates\KB2183461-IE8\spuninst\spuninst.exe
+ 2010-08-11 03:43 . 2010-05-06 10:35 206848 c:\windows\ie8updates\KB2183461-IE8\occache.dll
+ 2010-08-11 03:43 . 2010-05-06 10:35 611840 c:\windows\ie8updates\KB2183461-IE8\mstime.dll
+ 2010-08-11 03:43 . 2010-05-06 10:35 599040 c:\windows\ie8updates\KB2183461-IE8\msfeeds.dll
+ 2010-08-11 03:43 . 2010-05-06 10:35 247808 c:\windows\ie8updates\KB2183461-IE8\ieproxy.dll
+ 2010-08-11 03:43 . 2010-05-06 10:35 184320 c:\windows\ie8updates\KB2183461-IE8\iepeers.dll
+ 2010-08-11 03:43 . 2010-05-06 10:35 743424 c:\windows\ie8updates\KB2183461-IE8\iedvtool.dll
+ 2010-08-11 03:43 . 2010-05-06 10:35 387584 c:\windows\ie8updates\KB2183461-IE8\iedkcs32.dll
+ 2010-08-11 03:43 . 2010-05-05 13:30 173056 c:\windows\ie8updates\KB2183461-IE8\ie4uinit.exe
+ 2010-10-01 13:37 . 2010-10-01 13:37 835584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_005fbaa5\System.Drawing.dll

Part 2

+ 2010-10-01 13:37 . 2010-10-01 13:37 192512 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_87f8ba92\System.Drawing.Design.dll
+ 2010-10-01 13:37 . 2010-10-01 13:37 118784 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_2ef1750b\CustomMarshalers.dll
+ 2010-08-11 04:19 . 2010-08-11 04:19 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\a16b8bcca59515281688ec856c034698\WsatConfig.ni.exe
+ 2010-08-11 03:47 . 2010-08-11 03:47 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\672c4d8e3c33e309c1ed90fa4cb85aba\WindowsFormsIntegration.ni.dll
+ 2010-08-11 03:47 . 2010-08-11 03:47 187904 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\cd91a32f4e36ccb2981c72c0d333e928\UIAutomationTypes.ni.dll
+ 2010-08-11 03:47 . 2010-08-11 03:47 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\9df760fdf8071c7b0de78f39de365e6a\UIAutomationClient.ni.dll
+ 2010-08-11 04:24 . 2010-08-11 04:24 400896 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\ff53d5b5249a2841ee196294429f51cf\System.Xml.Linq.ni.dll
+ 2010-10-01 13:47 . 2010-10-01 13:47 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\7f9a1ae146571025fd49914b5c71a39b\System.Web.Routing.ni.dll
+ 2010-08-11 04:24 . 2010-08-11 04:24 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\d0ae809162b55e2fa958739177476af8\System.Web.RegularExpressions.ni.dll
+ 2010-10-01 13:48 . 2010-10-01 13:48 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\b1646e54b708b9824f4193f87eb00c0e\System.Web.Extensions.Design.ni.dll
+ 2010-10-01 13:48 . 2010-10-01 13:48 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\504a93e73da77c502ecf98bfdfc1485e\System.Web.Entity.ni.dll
+ 2010-10-01 13:48 . 2010-10-01 13:48 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\f22334fbd9497d79448fffef515ae0cc\System.Web.Entity.Design.ni.dll
+ 2010-10-01 13:47 . 2010-10-01 13:47 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\af5452305588da228a74e30324681d20\System.Web.DynamicData.ni.dll
+ 2010-10-01 13:47 . 2010-10-01 13:47 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\9d9bca1a8993c427984aa1bc9c165a33\System.Web.Abstractions.ni.dll
+ 2010-08-11 04:23 . 2010-08-11 04:23 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\26d5bf1f7e700c2c19aa9b1da5519b24\System.Transactions.ni.dll
+ 2010-08-11 04:23 . 2010-08-11 04:23 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\8b000cc703c9d95593b516bf2c2ec316\System.ServiceProcess.ni.dll
+ 2010-08-11 04:19 . 2010-08-11 04:19 679936 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\75e331a5d731d8e207be07adc06dec23\System.Security.ni.dll
+ 2010-08-11 04:19 . 2010-08-11 04:19 311296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\dd7497aa089340600c8c5af8ab421ff7\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2010-08-11 04:22 . 2010-08-11 04:22 621056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\2a080994f308f347b0497bb8804861cf\System.Net.ni.dll
+ 2010-08-11 04:22 . 2010-08-11 04:22 998400 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\bc1cf48ba7dc00f45d0e949c49ab677a\System.Management.ni.dll
+ 2010-08-11 04:22 . 2010-08-11 04:22 330752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\904fda53006680a67f917ab638be0305\System.Management.Instrumentation.ni.dll
+ 2010-08-11 04:17 . 2010-08-11 04:17 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\4490976887e2e5a3b594041edbdf5064\System.IO.Log.ni.dll
+ 2010-08-11 04:17 . 2010-08-11 04:17 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\77b9f6f6671aaaeb84c6907d467e792c\System.IdentityModel.Selectors.ni.dll
+ 2010-08-11 04:22 . 2010-08-11 04:22 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\15724a7517f939c9b300f341fb5620b8\System.EnterpriseServices.Wrapper.dll
+ 2010-08-11 04:22 . 2010-08-11 04:22 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\15724a7517f939c9b300f341fb5620b8\System.EnterpriseServices.ni.dll
+ 2010-08-11 03:46 . 2010-08-11 03:46 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\90199b4aa63b1b9c8ed0c3de16eec824\System.Drawing.Design.ni.dll
+ 2010-08-11 04:22 . 2010-08-11 04:22 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\849e98c9f428a12cb581320a23f69dbd\System.DirectoryServices.AccountManagement.ni.dll
+ 2010-08-11 04:22 . 2010-08-11 04:22 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\7a823a4f61cf8c86aad02559f8fed07b\System.DirectoryServices.Protocols.ni.dll
+ 2010-08-11 04:22 . 2010-08-11 04:22 354816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\ad95820d2e29e8d55c0d8a838214c6e5\System.Data.Services.Design.ni.dll
+ 2010-08-11 04:22 . 2010-08-11 04:22 939008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\617acb0d900bdde947ec79f7b5ccc183\System.Data.Services.Client.ni.dll
+ 2010-10-01 13:47 . 2010-10-01 13:47 756736 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\165bd290e518b9397ca55192985fdee3\System.Data.Entity.Design.ni.dll
+ 2010-08-11 04:20 . 2010-08-11 04:20 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\41345e34f26854fc1878eae3e4d5d4a5\System.Data.DataSetExtensions.ni.dll
+ 2010-08-11 04:19 . 2010-08-11 04:19 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\ab688d0f9f333ba117832726bfb589c1\System.Configuration.ni.dll
+ 2010-08-11 04:22 . 2010-08-11 04:22 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\b48677ab9aa7a6830785f67b8478b4da\System.Configuration.Install.ni.dll
+ 2010-08-11 04:20 . 2010-08-11 04:20 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\93a0958d5557e2b380647af0171ad354\System.AddIn.ni.dll
+ 2010-08-11 04:18 . 2010-08-11 04:18 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\d0758f84e927e3f0a15a6cde1b96d835\SMSvcHost.ni.exe
+ 2010-08-11 04:18 . 2010-08-11 04:18 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\8043a108e3bb2d3dcc84b547b8085e99\SMDiagnostics.ni.dll
+ 2010-10-01 13:46 . 2010-10-01 13:46 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\72d3aacfca2e1ce835c210f5a1decb36\ServiceModelReg.ni.exe
+ 2010-08-11 03:43 . 2010-08-11 03:43 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\e7e7321956e6822b1bf3691c35c842f6\PresentationFramework.Aero.ni.dll
+ 2010-08-11 03:43 . 2010-08-11 03:43 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\a14488afff027f0f2985e659449097f5\PresentationFramework.Royale.ni.dll
+ 2010-08-11 03:43 . 2010-08-11 03:43 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\787e60c5dd562cb45887080095d2a3b7\PresentationFramework.Classic.ni.dll
+ 2010-08-11 03:43 . 2010-08-11 03:43 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\2313ccc125dcb6a9800048ec1c51ec12\PresentationFramework.Luna.ni.dll
+ 2010-08-11 04:19 . 2010-08-11 04:19 158208 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.SystemL#\9d40267b62d86c94e88ed1bada7533f4\PaintDotNet.SystemLayer.Native.x86.ni.dll
+ 2010-12-29 16:59 . 2010-12-29 16:59 161280 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.SystemL#\9a56cd00d1dbab09818771f617cf3844\PaintDotNet.SystemLayer.Native.x86.ni.dll
+ 2010-12-29 16:59 . 2010-12-29 16:59 890368 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.SystemL#\6b92de04839354f2d82ba1bdcf057f1a\PaintDotNet.SystemLayer.ni.dll
+ 2010-08-11 04:19 . 2010-08-11 04:19 893440 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.SystemL#\0e7f23fcc817ee5c3f455b43ddf32622\PaintDotNet.SystemLayer.ni.dll
+ 2010-08-11 04:19 . 2010-08-11 04:19 390144 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.Resourc#\f13910220aa9ebc3984056f7aa81670b\PaintDotNet.Resources.ni.dll
+ 2010-12-29 17:00 . 2010-12-29 17:00 388608 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.Resourc#\2e0c1e75160188e9dd235e9932dff66c\PaintDotNet.Resources.ni.dll
+ 2010-12-29 17:01 . 2010-12-29 17:01 813056 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.Effects\a12c20834b1d3f2c91e8d556096f43fa\PaintDotNet.Effects.ni.dll
+ 2010-08-11 04:19 . 2010-08-11 04:19 799744 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.Effects\8a300e94ea71fdfddd18f7d3bd6f1422\PaintDotNet.Effects.ni.dll
+ 2010-08-11 04:19 . 2010-08-11 04:19 657408 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.Data\397e9016644106d371587de3c013fa86\PaintDotNet.Data.ni.dll
+ 2010-12-29 17:00 . 2010-12-29 17:00 568832 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.Data\07ab2fba6cd6a994a2b5e4fc2c751508\PaintDotNet.Data.ni.dll
+ 2010-12-29 16:59 . 2010-12-29 16:59 804864 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.Base\bb06d60e084f80c0473a7b7f9ffe3a53\PaintDotNet.Base.ni.dll
+ 2010-08-11 04:19 . 2010-08-11 04:19 771072 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.Base\193c764a2646834d8fbc77cc94baf371\PaintDotNet.Base.ni.dll
+ 2010-08-11 04:19 . 2010-08-11 04:19 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\5db9c32d9f352162e6da220ca463db0d\MSBuild.ni.exe
+ 2010-08-11 04:18 . 2010-08-11 04:18 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\fcf975f74bd134d8e0fa8f37c5bc6a8c\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2010-08-11 04:20 . 2010-08-11 04:20 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\d6b9038136600fbfbbbd7460dc19da19\Microsoft.Build.Utilities.ni.dll
+ 2010-08-11 04:20 . 2010-08-11 04:20 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\585cc7218599e7806521d0e737ba5ffb\Microsoft.Build.Utilities.v3.5.ni.dll
+ 2010-08-11 04:20 . 2010-08-11 04:20 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\3057ec53731286e69e389d103c32fa41\Microsoft.Build.Engine.ni.dll
+ 2010-08-11 04:20 . 2010-08-11 04:20 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\914e338ac6e92714f3e32ae5d89bf03b\Microsoft.Build.Conversion.v3.5.ni.dll
+ 2010-08-11 04:19 . 2010-08-11 04:19 518656 c:\windows\assembly\NativeImages_v2.0.50727_32\ICSharpCode.SharpZi#\9dd371dcb7c5042221f1947d73feccef\ICSharpCode.SharpZipLib.ni.dll
+ 2010-12-29 16:59 . 2010-12-29 16:59 547840 c:\windows\assembly\NativeImages_v2.0.50727_32\ICSharpCode.SharpZi#\467144bc9f5cf687e991ddf540630f8d\ICSharpCode.SharpZipLib.ni.dll
+ 2010-08-11 04:19 . 2010-08-11 04:19 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\12ae6f3635448471fc9f7d8bfe39c67d\CustomMarshalers.ni.dll
+ 2010-08-11 04:18 . 2010-08-11 04:18 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\daca3c9ad6d867d3fec70d14b4f20cf3\ComSvcConfig.ni.exe
+ 2010-10-01 13:46 . 2010-10-01 13:46 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\af4a3ae6d5c1cafa57002beb487b8d7a\AspNetMMCExt.ni.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
- 2010-06-24 05:42 . 2010-06-24 05:42 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
- 2010-06-24 05:42 . 2010-06-24 05:42 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2010-06-24 05:42 . 2010-06-24 05:42 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2010-06-24 05:42 . 2010-06-24 05:42 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
- 2010-06-24 05:42 . 2010-06-24 05:42 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
- 2010-06-24 05:42 . 2010-06-24 05:42 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
- 2010-06-24 05:43 . 2010-06-24 05:43 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
- 2010-06-24 05:43 . 2010-06-24 05:43 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
- 2010-06-24 05:42 . 2010-06-24 05:42 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
- 2010-06-24 05:42 . 2010-06-24 05:42 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2010-06-24 05:42 . 2010-06-24 05:42 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
- 2010-06-24 05:43 . 2010-06-24 05:43 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
- 2010-06-24 05:43 . 2010-06-24 05:43 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
- 2010-06-24 05:43 . 2010-06-24 05:43 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
- 2010-06-24 05:43 . 2010-06-24 05:43 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
- 2010-06-24 05:42 . 2010-06-24 05:42 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2010-06-24 05:42 . 2010-06-24 05:42 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
- 2010-06-24 05:42 . 2010-06-24 05:42 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2010-12-30 15:34 . 2010-12-30 15:34 339968 c:\windows\assembly\GAC_MSIL\Microsoft.ReportViewer.WinForms\9.0.0.0__b03f5f7f11d50a3a\Microsoft.ReportViewer.WinForms.dll
+ 2010-12-30 15:34 . 2010-12-30 15:34 864256 c:\windows\assembly\GAC_MSIL\Microsoft.ReportViewer.WebForms\9.0.0.0__b03f5f7f11d50a3a\Microsoft.ReportViewer.WebForms.dll
- 2010-06-24 05:42 . 2010-06-24 05:42 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
- 2010-06-24 05:43 . 2010-06-24 05:43 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
- 2010-06-24 05:42 . 2010-06-24 05:42 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
- 2010-06-24 05:42 . 2010-06-24 05:42 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
- 2010-06-24 05:42 . 2010-06-24 05:42 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
- 2010-06-24 05:42 . 2010-06-24 05:42 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
- 2010-06-24 05:42 . 2010-06-24 05:42 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
- 2010-06-24 05:43 . 2010-06-24 05:43 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2010-09-15 19:56 . 2010-02-22 14:21 391032 c:\windows\$NtUninstallKB982802$\spuninst\updspapi.dll
+ 2010-09-15 19:56 . 2010-02-22 14:20 233848 c:\windows\$NtUninstallKB982802$\spuninst\spuninst.exe
+ 2010-09-15 19:56 . 2009-04-15 14:54 585216 c:\windows\$NtUninstallKB982802$\rpcrt4.dll
+ 2010-08-11 03:22 . 2010-02-22 14:21 391032 c:\windows\$NtUninstallKB982665$\spuninst\updspapi.dll
+ 2010-08-11 03:22 . 2010-02-22 14:20 233848 c:\windows\$NtUninstallKB982665$\spuninst\spuninst.exe
+ 2010-08-11 03:41 . 2009-12-31 16:50 353792 c:\windows\$NtUninstallKB982214$\srv.sys
+ 2010-08-11 03:41 . 2010-02-22 14:21 391032 c:\windows\$NtUninstallKB982214$\spuninst\updspapi.dll
+ 2010-08-11 03:41 . 2010-02-22 14:20 233848 c:\windows\$NtUninstallKB982214$\spuninst\spuninst.exe
+ 2010-11-15 10:21 . 2009-10-15 16:32 119808 c:\windows\$NtUninstallKB982132$\t2embed.dll
+ 2010-11-15 10:21 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB982132$\spuninst\updspapi.dll
+ 2010-11-15 10:21 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB982132$\spuninst\spuninst.exe
+ 2010-08-11 03:42 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB981997$\spuninst\updspapi.dll
+ 2010-08-11 03:42 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB981997$\spuninst\spuninst.exe
+ 2010-11-15 10:22 . 2010-02-22 14:21 391032 c:\windows\$NtUninstallKB981957$\spuninst\updspapi.dll
+ 2010-11-15 10:22 . 2010-02-22 14:20 233848 c:\windows\$NtUninstallKB981957$\spuninst\spuninst.exe
+ 2010-08-11 03:44 . 2010-02-22 14:21 391032 c:\windows\$NtUninstallKB981852$\spuninst\updspapi.dll
+ 2010-08-11 03:44 . 2010-02-22 14:20 233848 c:\windows\$NtUninstallKB981852$\spuninst\spuninst.exe
+ 2010-09-15 19:52 . 2008-04-14 06:52 406016 c:\windows\$NtUninstallKB981322$\usp10.dll
+ 2010-09-15 19:52 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB981322$\spuninst\updspapi.dll
+ 2010-09-15 19:52 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB981322$\spuninst\spuninst.exe
+ 2010-08-11 03:44 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB980436$\spuninst\updspapi.dll
+ 2010-08-11 03:44 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB980436$\spuninst\spuninst.exe
+ 2010-08-11 03:44 . 2009-06-25 08:27 147456 c:\windows\$NtUninstallKB980436$\schannel.dll
+ 2010-11-15 10:15 . 2008-04-21 21:15 216576 c:\windows\$NtUninstallKB979687$\wordpad.exe
+ 2010-11-15 10:15 . 2010-02-22 14:21 391032 c:\windows\$NtUninstallKB979687$\spuninst\updspapi.dll
+ 2010-11-15 10:15 . 2010-02-22 14:20 233848 c:\windows\$NtUninstallKB979687$\spuninst\spuninst.exe
+ 2010-09-15 19:56 . 2007-07-27 21:11 382840 c:\windows\$NtUninstallKB975558_WM8$\spuninst\updspapi.dll
+ 2010-09-15 19:56 . 2007-07-27 18:47 233848 c:\windows\$NtUninstallKB975558_WM8$\spuninst\spuninst.exe
+ 2010-09-15 19:56 . 2008-04-14 06:51 384512 c:\windows\$NtUninstallKB975558_WM8$\mp4sdmod.dll
+ 2010-11-15 10:17 . 2010-02-22 14:21 391032 c:\windows\$NtUninstallKB2387149$\spuninst\updspapi.dll
+ 2010-11-15 10:17 . 2010-02-22 14:20 233848 c:\windows\$NtUninstallKB2387149$\spuninst\spuninst.exe
+ 2010-11-15 10:17 . 2007-04-03 06:44 981760 c:\windows\$NtUninstallKB2387149$\mfc42u.dll
+ 2010-11-15 10:17 . 2008-04-14 06:51 927504 c:\windows\$NtUninstallKB2387149$\mfc40u.dll
+ 2010-11-15 10:17 . 2004-08-18 12:00 924432 c:\windows\$NtUninstallKB2387149$\mfc40.dll
+ 2010-11-15 10:17 . 2007-07-27 22:11 382840 c:\windows\$NtUninstallKB2378111_WM9$\spuninst\updspapi.dll
+ 2010-11-15 10:17 . 2007-07-27 19:47 233848 c:\windows\$NtUninstallKB2378111_WM9$\spuninst\spuninst.exe
+ 2010-11-15 10:22 . 2010-02-22 14:21 391032 c:\windows\$NtUninstallKB2360937$\spuninst\updspapi.dll
+ 2010-11-15 10:22 . 2010-02-22 14:20 233848 c:\windows\$NtUninstallKB2360937$\spuninst\spuninst.exe
+ 2010-11-15 10:22 . 2010-07-22 15:46 590848 c:\windows\$NtUninstallKB2360937$\rpcrt4.dll
+ 2010-09-15 19:56 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB2347290$\spuninst\updspapi.dll
+ 2010-09-15 19:56 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB2347290$\spuninst\spuninst.exe
+ 2010-11-15 10:15 . 2010-06-21 15:27 354304 c:\windows\$NtUninstallKB2345886$\srv.sys
+ 2010-11-15 10:15 . 2010-02-22 14:21 391032 c:\windows\$NtUninstallKB2345886$\spuninst\updspapi.dll
+ 2010-11-15 10:15 . 2010-02-22 14:20 233848 c:\windows\$NtUninstallKB2345886$\spuninst\spuninst.exe
+ 2010-11-15 10:15 . 2010-02-22 14:21 391032 c:\windows\$NtUninstallKB2296011$\spuninst\updspapi.dll
+ 2010-11-15 10:15 . 2010-02-22 14:20 233848 c:\windows\$NtUninstallKB2296011$\spuninst\spuninst.exe
+ 2010-11-15 10:15 . 2008-04-14 06:51 617472 c:\windows\$NtUninstallKB2296011$\comctl32.dll
+ 2010-08-03 05:40 . 2010-02-22 14:21 391032 c:\windows\$NtUninstallKB2286198$\spuninst\updspapi.dll
+ 2010-08-03 05:40 . 2010-02-22 14:20 233848 c:\windows\$NtUninstallKB2286198$\spuninst\spuninst.exe
+ 2010-11-15 10:22 . 2010-02-22 14:21 391032 c:\windows\$NtUninstallKB2279986$\spuninst\updspapi.dll
+ 2010-11-15 10:22 . 2010-02-22 14:20 233848 c:\windows\$NtUninstallKB2279986$\spuninst\spuninst.exe
+ 2010-11-15 10:22 . 2010-04-20 05:32 285696 c:\windows\$NtUninstallKB2279986$\atmfd.dll
+ 2010-09-15 19:57 . 2009-05-26 09:01 391032 c:\windows\$NtUninstallKB2259922$\spuninst\updspapi.dll
+ 2010-09-15 19:57 . 2009-05-26 09:01 233848 c:\windows\$NtUninstallKB2259922$\spuninst\spuninst.exe
+ 2010-07-13 19:27 . 2010-02-22 17:51 391032 c:\windows\$NtUninstallKB2229593$\spuninst\updspapi.dll
+ 2010-07-13 19:27 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB2229593$\spuninst\spuninst.exe
+ 2010-07-13 19:27 . 2008-04-14 06:52 744448 c:\windows\$NtUninstallKB2229593$\helpsvc.exe
+ 2010-08-11 03:41 . 2010-02-22 14:21 391032 c:\windows\$NtUninstallKB2160329$\spuninst\updspapi.dll
+ 2010-08-11 03:41 . 2010-02-22 14:20 233848 c:\windows\$NtUninstallKB2160329$\spuninst\spuninst.exe
+ 2010-09-29 05:25 . 2010-02-22 14:21 391032 c:\windows\$NtUninstallKB2158563$\spuninst\updspapi.dll
+ 2010-09-29 05:25 . 2010-02-22 14:20 233848 c:\windows\$NtUninstallKB2158563$\spuninst\spuninst.exe
+ 2010-09-15 19:47 . 2010-02-22 14:21 391032 c:\windows\$NtUninstallKB2141007$\spuninst\updspapi.dll
+ 2010-09-15 19:47 . 2010-02-22 14:20 233848 c:\windows\$NtUninstallKB2141007$\spuninst\spuninst.exe
+ 2010-09-15 19:47 . 2010-01-29 15:01 691712 c:\windows\$NtUninstallKB2141007$\inetcomm.dll
+ 2010-09-15 19:56 . 2008-04-14 06:52 293376 c:\windows\$NtUninstallKB2121546$\winsrv.dll
+ 2010-09-15 19:56 . 2010-02-22 14:21 391032 c:\windows\$NtUninstallKB2121546$\spuninst\updspapi.dll
+ 2010-09-15 19:56 . 2010-02-22 14:20 233848 c:\windows\$NtUninstallKB2121546$\spuninst\spuninst.exe
+ 2010-08-11 03:22 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB2115168$\spuninst\updspapi.dll
+ 2010-08-11 03:22 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB2115168$\spuninst\spuninst.exe
+ 2010-08-11 03:42 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB2079403$\spuninst\updspapi.dll
+ 2010-08-11 03:42 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB2079403$\spuninst\spuninst.exe
+ 2010-09-15 19:56 . 2010-02-22 14:21 391032 c:\windows\$hf_mig$\KB982802\update\updspapi.dll
+ 2010-09-15 19:56 . 2010-02-22 14:21 759160 c:\windows\$hf_mig$\KB982802\update\update.exe
+ 2010-09-15 19:56 . 2010-02-22 14:20 233848 c:\windows\$hf_mig$\KB982802\spuninst.exe
+ 2010-07-23 06:17 . 2010-07-23 06:17 590848 c:\windows\$hf_mig$\KB982802\SP3QFE\rpcrt4.dll
+ 2010-08-11 03:22 . 2010-02-22 14:21 391032 c:\windows\$hf_mig$\KB982665\update\updspapi.dll
+ 2010-08-11 03:22 . 2010-02-22 14:21 759160 c:\windows\$hf_mig$\KB982665\update\update.exe
+ 2010-08-11 03:22 . 2010-02-22 14:20 233848 c:\windows\$hf_mig$\KB982665\spuninst.exe
+ 2010-08-11 03:41 . 2010-02-22 14:21 391032 c:\windows\$hf_mig$\KB982214\update\updspapi.dll
+ 2010-08-11 03:41 . 2010-02-22 14:21 759160 c:\windows\$hf_mig$\KB982214\update\update.exe
+ 2010-08-11 03:41 . 2010-02-22 14:20 233848 c:\windows\$hf_mig$\KB982214\spuninst.exe
+ 2010-08-11 03:18 . 2010-06-21 14:18 354304 c:\windows\$hf_mig$\KB982214\SP3QFE\srv.sys
+ 2010-11-15 10:21 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB982132\update\updspapi.dll
+ 2010-11-15 10:21 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB982132\update\update.exe
+ 2010-11-15 10:21 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB982132\spuninst.exe
+ 2010-08-27 08:01 . 2010-08-27 08:01 119808 c:\windows\$hf_mig$\KB982132\SP3QFE\t2embed.dll
+ 2010-08-11 03:42 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB981997\update\updspapi.dll
+ 2010-08-11 03:42 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB981997\update\update.exe
+ 2010-08-11 03:42 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB981997\spuninst.exe
+ 2010-11-15 10:22 . 2010-02-22 14:21 391032 c:\windows\$hf_mig$\KB981957\update\updspapi.dll
+ 2010-11-15 10:22 . 2010-02-22 14:21 759160 c:\windows\$hf_mig$\KB981957\update\update.exe
+ 2010-11-15 10:22 . 2010-02-22 14:20 233848 c:\windows\$hf_mig$\KB981957\spuninst.exe
+ 2010-08-11 03:44 . 2010-02-22 14:21 391032 c:\windows\$hf_mig$\KB981852\update\updspapi.dll
+ 2010-08-11 03:44 . 2010-02-22 14:21 759160 c:\windows\$hf_mig$\KB981852\update\update.exe
+ 2010-08-11 03:44 . 2010-02-22 14:20 233848 c:\windows\$hf_mig$\KB981852\spuninst.exe
+ 2010-09-15 19:52 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB981322\update\updspapi.dll
+ 2010-09-15 19:52 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB981322\update\update.exe
+ 2010-09-15 19:52 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB981322\spuninst.exe
+ 2010-04-16 15:30 . 2010-04-16 15:30 406016 c:\windows\$hf_mig$\KB981322\SP3QFE\usp10.dll
+ 2010-08-11 03:44 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB980436\update\updspapi.dll
+ 2010-08-11 03:44 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB980436\update\update.exe
+ 2010-08-11 03:44 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB980436\spuninst.exe
+ 2010-06-30 12:24 . 2010-06-30 12:24 149504 c:\windows\$hf_mig$\KB980436\SP3QFE\schannel.dll
+ 2010-11-15 10:15 . 2010-02-22 14:21 391032 c:\windows\$hf_mig$\KB979687\update\updspapi.dll
+ 2010-11-15 10:15 . 2010-02-22 14:21 759160 c:\windows\$hf_mig$\KB979687\update\update.exe
+ 2010-11-15 10:15 . 2010-02-22 14:20 233848 c:\windows\$hf_mig$\KB979687\spuninst.exe
+ 2010-07-16 11:56 . 2010-07-16 11:56 219136 c:\windows\$hf_mig$\KB979687\SP3QFE\wordpad.exe
+ 2010-11-15 10:17 . 2010-02-22 14:21 391032 c:\windows\$hf_mig$\KB2387149\update\updspapi.dll
+ 2010-11-15 10:17 . 2010-07-05 13:13 759160 c:\windows\$hf_mig$\KB2387149\update\update.exe
+ 2010-11-15 10:17 . 2010-02-22 14:20 233848 c:\windows\$hf_mig$\KB2387149\spuninst.exe
+ 2010-11-15 10:05 . 2010-09-18 07:18 974848 c:\windows\$hf_mig$\KB2387149\SP3QFE\mfc42u.dll
+ 2010-11-15 10:06 . 2010-09-18 07:18 974848 c:\windows\$hf_mig$\KB2387149\SP3QFE\mfc42.dll
+ 2010-11-15 10:05 . 2010-09-18 07:18 953856 c:\windows\$hf_mig$\KB2387149\SP3QFE\mfc40u.dll
+ 2010-11-15 10:06 . 2010-09-18 07:18 954368 c:\windows\$hf_mig$\KB2387149\SP3QFE\mfc40.dll
+ 2010-11-15 10:22 . 2010-02-22 14:21 391032 c:\windows\$hf_mig$\KB2360937\update\updspapi.dll
+ 2010-11-15 10:22 . 2010-02-22 14:21 759160 c:\windows\$hf_mig$\KB2360937\update\update.exe
+ 2010-11-15 10:22 . 2010-02-22 14:20 233848 c:\windows\$hf_mig$\KB2360937\spuninst.exe
+ 2010-11-15 10:07 . 2010-08-16 08:43 590848 c:\windows\$hf_mig$\KB2360937\SP3QFE\rpcrt4.dll
+ 2010-11-15 10:16 . 2010-07-05 13:13 391032 c:\windows\$hf_mig$\KB2360131-IE8\update\updspapi.dll
+ 2010-11-15 10:16 . 2010-02-22 14:21 759160 c:\windows\$hf_mig$\KB2360131-IE8\update\update.exe
+ 2010-11-15 10:16 . 2010-02-22 14:20 233848 c:\windows\$hf_mig$\KB2360131-IE8\spuninst.exe
+ 2010-11-15 10:05 . 2010-09-10 05:50 919552 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\wininet.dll
+ 2010-11-15 10:05 . 2010-09-10 05:50 206848 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\occache.dll
+ 2010-11-15 10:05 . 2010-09-10 05:50 611840 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\mstime.dll
+ 2010-11-15 10:05 . 2010-09-10 05:50 602112 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\msfeeds.dll
+ 2010-11-15 10:05 . 2010-09-10 05:50 247808 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\ieproxy.dll
+ 2010-11-15 10:05 . 2010-09-10 05:50 184320 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\iepeers.dll
+ 2010-11-15 10:05 . 2010-09-10 05:49 743424 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\iedvtool.dll
+ 2010-11-15 10:05 . 2010-09-10 05:49 387584 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\iedkcs32.dll
+ 2010-11-15 10:05 . 2010-09-08 15:48 173056 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\ie4uinit.exe
+ 2010-09-15 19:56 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB2347290\update\updspapi.dll
+ 2010-09-15 19:56 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB2347290\update\update.exe
+ 2010-09-15 19:56 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB2347290\spuninst.exe
+ 2010-11-15 10:15 . 2010-02-22 14:21 391032 c:\windows\$hf_mig$\KB2345886\update\updspapi.dll
+ 2010-11-15 10:15 . 2010-02-22 14:21 759160 c:\windows\$hf_mig$\KB2345886\update\update.exe
+ 2010-11-15 10:15 . 2010-02-22 14:20 233848 c:\windows\$hf_mig$\KB2345886\spuninst.exe
+ 2010-08-26 13:37 . 2010-08-26 13:37 357248 c:\windows\$hf_mig$\KB2345886\SP3QFE\srv.sys
+ 2010-08-03 05:40 . 2010-02-22 14:21 391032 c:\windows\$hf_mig$\KB2286198\update\updspapi.dll
+ 2010-08-03 05:40 . 2010-02-22 14:21 759160 c:\windows\$hf_mig$\KB2286198\update\update.exe
+ 2010-08-03 05:40 . 2010-02-22 14:20 233848 c:\windows\$hf_mig$\KB2286198\spuninst.exe
+ 2010-11-15 10:22 . 2010-02-22 14:21 391032 c:\windows\$hf_mig$\KB2279986\update\updspapi.dll
+ 2010-11-15 10:22 . 2010-02-22 14:21 759160 c:\windows\$hf_mig$\KB2279986\update\update.exe
+ 2010-11-15 10:22 . 2010-02-22 14:20 233848 c:\windows\$hf_mig$\KB2279986\spuninst.exe
+ 2010-09-01 11:49 . 2010-09-01 11:49 285824 c:\windows\$hf_mig$\KB2279986\SP3QFE\atmfd.dll
+ 2010-09-15 19:57 . 2009-05-26 09:01 391032 c:\windows\$hf_mig$\KB2259922\update\updspapi.dll
+ 2010-09-15 19:57 . 2009-05-26 09:01 759160 c:\windows\$hf_mig$\KB2259922\update\update.exe
+ 2010-09-15 19:57 . 2009-05-26 09:01 233848 c:\windows\$hf_mig$\KB2259922\spuninst.exe
+ 2010-07-13 19:27 . 2010-02-22 17:51 391032 c:\windows\$hf_mig$\KB2229593\update\updspapi.dll
+ 2010-07-13 19:27 . 2010-02-22 14:20 759160 c:\windows\$hf_mig$\KB2229593\update\update.exe
+ 2010-07-13 19:27 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB2229593\spuninst.exe
+ 2010-07-13 19:24 . 2010-06-14 14:38 744448 c:\windows\$hf_mig$\KB2229593\SP3QFE\helpsvc.exe
+ 2010-08-11 03:43 . 2010-02-22 14:21 391032 c:\windows\$hf_mig$\KB2183461-IE8\update\updspapi.dll
+ 2010-08-11 03:43 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB2183461-IE8\update\update.exe
+ 2010-08-11 03:43 . 2009-05-26 09:01 233848 c:\windows\$hf_mig$\KB2183461-IE8\spuninst.exe
+ 2010-08-11 03:20 . 2010-06-24 12:29 919040 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\wininet.dll
+ 2010-08-11 03:20 . 2010-06-24 12:29 206848 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\occache.dll
+ 2010-08-11 03:20 . 2010-06-24 12:29 611840 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\mstime.dll
+ 2010-08-11 03:20 . 2010-06-24 12:29 599040 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\msfeeds.dll
+ 2010-08-11 03:20 . 2010-06-24 12:29 247808 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\ieproxy.dll
+ 2010-08-11 03:20 . 2010-06-24 12:29 184320 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\iepeers.dll
+ 2010-08-11 03:19 . 2010-06-24 12:28 743424 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\iedvtool.dll
+ 2010-08-11 03:20 . 2010-06-24 12:28 387584 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\iedkcs32.dll
+ 2010-08-11 03:20 . 2010-06-23 11:30 173056 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\ie4uinit.exe
+ 2010-08-11 03:41 . 2010-02-22 14:21 391032 c:\windows\$hf_mig$\KB2160329\update\updspapi.dll
+ 2010-08-11 03:41 . 2010-02-22 14:21 759160 c:\windows\$hf_mig$\KB2160329\update\update.exe
+ 2010-08-11 03:41 . 2010-02-22 14:20 233848 c:\windows\$hf_mig$\KB2160329\spuninst.exe
+ 2010-09-15 19:47 . 2010-02-22 14:21 391032 c:\windows\$hf_mig$\KB2141007\update\updspapi.dll
+ 2010-09-15 19:47 . 2010-02-22 14:21 759160 c:\windows\$hf_mig$\KB2141007\update\update.exe
+ 2010-09-15 19:47 . 2010-02-22 14:20 233848 c:\windows\$hf_mig$\KB2141007\spuninst.exe
+ 2010-06-09 07:42 . 2010-06-09 07:42 692736 c:\windows\$hf_mig$\KB2141007\SP3QFE\inetcomm.dll
+ 2010-09-15 19:56 . 2010-02-22 14:21 391032 c:\windows\$hf_mig$\KB2121546\update\updspapi.dll
+ 2010-09-15 19:56 . 2010-02-22 14:21 759160 c:\windows\$hf_mig$\KB2121546\update\update.exe
+ 2010-09-15 19:56 . 2010-02-22 14:20 233848 c:\windows\$hf_mig$\KB2121546\spuninst.exe
+ 2010-06-18 17:46 . 2010-06-18 17:46 293376 c:\windows\$hf_mig$\KB2121546\SP3QFE\winsrv.dll
+ 2010-08-11 03:22 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB2115168\update\updspapi.dll
+ 2010-08-11 03:22 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB2115168\update\update.exe
+ 2010-08-11 03:22 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB2115168\spuninst.exe
+ 2010-08-11 03:42 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB2079403\update\updspapi.dll
+ 2010-08-11 03:42 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB2079403\update\update.exe
+ 2010-08-11 03:42 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB2079403\spuninst.exe
+ 2010-11-15 10:04 . 2010-08-23 16:12 1054208 c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
+ 2004-08-18 12:00 . 2010-08-26 16:16 4886528 c:\windows\system32\wmp.dll
+ 2004-08-18 12:00 . 2010-11-06 00:23 1210880 c:\windows\system32\urlmon.dll
+ 2004-08-18 12:00 . 2010-07-27 06:30 8466432 c:\windows\system32\shell32.dll
+ 2010-11-15 10:10 . 2009-07-14 18:54 1597690 c:\windows\system32\ReinstallBackups\0011\DriverFiles\nvdata.bin
+ 2010-11-15 10:10 . 2009-07-14 18:54 2189856 c:\windows\system32\ReinstallBackups\0011\DriverFiles\nvcuvid.dll
+ 2010-11-15 10:10 . 2009-07-14 18:54 1706528 c:\windows\system32\ReinstallBackups\0011\DriverFiles\nvcuvenc.dll
+ 2010-11-15 10:10 . 2009-07-14 18:54 2002944 c:\windows\system32\ReinstallBackups\0011\DriverFiles\nvcuda.dll
+ 2010-11-15 10:10 . 2009-07-14 18:54 7741664 c:\windows\system32\ReinstallBackups\0011\DriverFiles\nv4_mini.sys
+ 2010-11-15 10:10 . 2009-07-14 18:54 5842816 c:\windows\system32\ReinstallBackups\0011\DriverFiles\nv4_disp.dll
+ 2004-08-18 12:00 . 2010-07-16 12:00 1287680 c:\windows\system32\ole32.dll
+ 2009-08-06 09:59 . 2010-07-10 04:38 2195030 c:\windows\system32\nvdata.bin
+ 2009-08-06 10:00 . 2010-07-10 04:38 2914408 c:\windows\system32\nvcuvid.dll
+ 2009-08-06 10:00 . 2010-07-10 04:38 2506344 c:\windows\system32\nvcuvenc.dll
+ 2009-08-06 10:00 . 2010-07-10 04:38 4595712 c:\windows\system32\nvcuda.dll
+ 2009-08-06 10:00 . 2010-07-10 04:38 1388544 c:\windows\system32\nvapi.dll
+ 2009-08-06 09:59 . 2010-07-10 04:38 6343040 c:\windows\system32\nv4_disp.dll
- 2004-08-18 12:00 . 2010-02-17 12:09 2192128 c:\windows\system32\ntoskrnl.exe
+ 2004-08-18 12:00 . 2010-04-28 18:15 2192128 c:\windows\system32\ntoskrnl.exe
- 2004-08-17 15:45 . 2010-02-16 19:09 2068992 c:\windows\system32\ntkrnlpa.exe
+ 2004-08-17 15:45 . 2010-04-28 05:45 2068992 c:\windows\system32\ntkrnlpa.exe
- 2004-08-18 12:00 . 2009-07-31 04:35 1172480 c:\windows\system32\msxml3.dll
+ 2004-08-18 12:00 . 2010-06-14 07:43 1172480 c:\windows\system32\msxml3.dll
+ 2004-08-18 12:00 . 2010-11-06 00:23 5959168 c:\windows\system32\mshtml.dll
+ 2010-08-22 14:16 . 2010-11-15 15:12 5971408 c:\windows\system32\Macromed\Flash\NPSWF32.dll
+ 2009-03-08 02:32 . 2010-11-06 00:23 1991680 c:\windows\system32\iertutil.dll
+ 2004-08-18 12:00 . 2010-08-26 16:16 4886528 c:\windows\system32\dllcache\wmp.dll
+ 2009-04-19 19:52 . 2010-10-26 13:58 1853312 c:\windows\system32\dllcache\win32k.sys
+ 2009-06-26 16:51 . 2010-11-06 00:23 1210880 c:\windows\system32\dllcache\urlmon.dll
+ 2008-06-17 19:02 . 2010-07-27 06:30 8466432 c:\windows\system32\dllcache\shell32.dll
+ 2010-07-16 12:00 . 2010-07-16 12:00 1287680 c:\windows\system32\dllcache\ole32.dll
- 2009-08-08 18:20 . 2010-02-17 12:09 2192128 c:\windows\system32\dllcache\ntoskrnl.exe
+ 2009-08-08 18:20 . 2010-04-28 18:15 2192128 c:\windows\system32\dllcache\ntoskrnl.exe
- 2009-08-08 18:20 . 2010-02-16 19:08 2026496 c:\windows\system32\dllcache\ntkrpamp.exe
+ 2009-08-08 18:20 . 2010-04-28 05:45 2026496 c:\windows\system32\dllcache\ntkrpamp.exe
+ 2009-02-10 17:09 . 2010-04-28 05:45 2068992 c:\windows\system32\dllcache\ntkrnlpa.exe
- 2009-02-10 17:09 . 2010-02-16 19:09 2068992 c:\windows\system32\dllcache\ntkrnlpa.exe
- 2009-08-08 18:20 . 2010-02-16 19:08 2148352 c:\windows\system32\dllcache\ntkrnlmp.exe
+ 2009-08-08 18:20 . 2010-04-28 05:45 2148352 c:\windows\system32\dllcache\ntkrnlmp.exe
+ 2009-08-08 18:19 . 2010-06-14 07:43 1172480 c:\windows\system32\dllcache\msxml3.dll
- 2009-08-08 18:19 . 2009-07-31 04:35 1172480 c:\windows\system32\dllcache\msxml3.dll
+ 2009-07-18 16:05 . 2010-11-06 00:23 5959168 c:\windows\system32\dllcache\mshtml.dll
- 2010-03-10 07:34 . 2009-10-23 15:28 3558912 c:\windows\system32\dllcache\moviemk.exe
+ 2010-03-10 07:34 . 2010-06-18 13:36 3558912 c:\windows\system32\dllcache\moviemk.exe
+ 2009-08-09 07:55 . 2010-11-06 00:23 1991680 c:\windows\system32\dllcache\iertutil.dll
- 2010-03-23 03:32 . 2010-03-23 03:32 5242880 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
+ 2010-09-22 07:44 . 2010-09-22 07:44 5242880 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
+ 2010-05-11 04:40 . 2010-05-11 04:40 5812560 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
- 2009-08-07 21:51 . 2009-08-07 21:51 5812560 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
+ 2010-05-11 04:40 . 2010-05-11 04:40 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
- 2010-04-01 09:42 . 2010-04-01 09:42 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
+ 2010-09-23 13:55 . 2010-09-23 13:55 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
+ 2010-09-23 13:55 . 2010-09-23 13:55 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
- 2010-04-01 09:42 . 2010-04-01 09:42 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
+ 2010-09-23 00:26 . 2010-09-23 00:26 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
- 2010-03-31 12:50 . 2010-03-31 12:50 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
+ 2010-09-23 00:25 . 2010-09-23 00:25 2523136 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
- 2010-04-01 09:42 . 2010-04-01 09:42 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
+ 2010-09-23 13:55 . 2010-09-23 13:55 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
+ 2010-08-05 09:31 . 2010-08-05 09:31 4040704 c:\windows\Installer\fc72d.msp
+ 2010-08-20 11:50 . 2010-08-20 11:50 5518848 c:\windows\Installer\fc706.msp
+ 2010-08-25 15:06 . 2010-08-25 15:06 6479360 c:\windows\Installer\fc6ea.msp
+ 2010-12-06 14:02 . 2010-12-06 14:02 5518848 c:\windows\Installer\61c03e.msp
+ 2010-10-22 14:45 . 2010-10-22 14:45 8444928 c:\windows\Installer\61c022.msp
+ 2010-10-01 20:53 . 2010-10-01 20:53 4147712 c:\windows\Installer\61c005.msp
+ 2010-06-11 15:55 . 2010-06-11 15:55 1827328 c:\windows\Installer\4e39ab.msp
+ 2010-06-30 20:52 . 2010-06-30 20:52 5522944 c:\windows\Installer\4e398b.msp
+ 2010-05-25 09:45 . 2010-05-25 09:45 8445440 c:\windows\Installer\4e396f.msp
+ 2010-09-23 05:39 . 2010-09-23 05:39 4265472 c:\windows\Installer\3c65ba.msp
+ 2010-12-27 10:10 . 2010-12-27 10:10 1580544 c:\windows\Installer\33220e.msi
+ 2010-10-01 16:42 . 2010-10-01 16:42 5054464 c:\windows\Installer\159277.msp
+ 2010-10-22 12:25 . 2010-10-22 12:25 5521408 c:\windows\Installer\15925b.msp
+ 2010-09-17 05:04 . 2010-09-17 05:04 9401856 c:\windows\Installer\15923f.msp
+ 2010-08-13 16:59 . 2010-08-13 16:59 8182272 c:\windows\Installer\159214.msp
+ 2010-08-23 16:09 . 2010-08-23 16:09 7673344 c:\windows\Installer\159205.msp
+ 2010-08-13 17:02 . 2010-08-13 17:02 2545664 c:\windows\Installer\1591e9.msp
+ 2010-08-24 08:49 . 2010-08-24 08:49 6825472 c:\windows\Installer\1591da.msp
+ 2010-06-28 14:01 . 2010-06-28 14:01 7677952 c:\windows\Installer\12999d.msp
+ 2010-06-28 20:53 . 2010-06-28 20:53 6819840 c:\windows\Installer\129981.msp
+ 2010-07-10 18:14 . 2010-07-10 18:14 2850816 c:\windows\Installer\129965.msp
+ 2010-07-26 15:02 . 2010-07-26 15:02 5519360 c:\windows\Installer\129956.msp
+ 2007-05-10 11:43 . 2007-05-10 11:43 6688096 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.8173\MSACCESS.EXE
+ 2010-12-15 08:58 . 2010-09-10 05:52 1210880 c:\windows\ie8updates\KB2416400-IE8\urlmon.dll
+ 2010-12-15 08:58 . 2010-09-10 05:52 5957120 c:\windows\ie8updates\KB2416400-IE8\mshtml.dll
+ 2010-12-15 08:58 . 2010-09-10 05:52 1986560 c:\windows\ie8updates\KB2416400-IE8\iertutil.dll
+ 2010-11-15 10:16 . 2010-06-24 12:27 1210368 c:\windows\ie8updates\KB2360131-IE8\urlmon.dll
+ 2010-11-15 10:16 . 2010-06-24 12:27 5951488 c:\windows\ie8updates\KB2360131-IE8\mshtml.dll
+ 2010-11-15 10:16 . 2010-06-24 12:27 1986560 c:\windows\ie8updates\KB2360131-IE8\iertutil.dll
+ 2010-08-11 03:43 . 2010-05-06 10:35 1209344 c:\windows\ie8updates\KB2183461-IE8\urlmon.dll
+ 2010-08-11 03:43 . 2010-05-06 10:35 5950976 c:\windows\ie8updates\KB2183461-IE8\mshtml.dll
+ 2010-08-11 03:43 . 2010-05-06 10:35 1985536 c:\windows\ie8updates\KB2183461-IE8\iertutil.dll
- 2009-08-08 18:20 . 2010-02-17 12:09 2192128 c:\windows\Driver Cache\i386\ntoskrnl.exe
+ 2009-08-08 18:20 . 2010-04-28 18:15 2192128 c:\windows\Driver Cache\i386\ntoskrnl.exe
- 2009-08-08 18:20 . 2010-02-16 19:08 2026496 c:\windows\Driver Cache\i386\ntkrpamp.exe
+ 2009-08-08 18:20 . 2010-04-28 05:45 2026496 c:\windows\Driver Cache\i386\ntkrpamp.exe
+ 2009-02-10 17:09 . 2010-04-28 05:45 2068992 c:\windows\Driver Cache\i386\ntkrnlpa.exe
- 2009-02-10 17:09 . 2010-02-16 19:09 2068992 c:\windows\Driver Cache\i386\ntkrnlpa.exe
- 2009-08-08 18:20 . 2010-02-16 19:08 2148352 c:\windows\Driver Cache\i386\ntkrnlmp.exe
+ 2009-08-08 18:20 . 2010-04-28 05:45 2148352 c:\windows\Driver Cache\i386\ntkrnlmp.exe
+ 2010-07-27 22:17 . 2010-07-27 22:17 2826192 c:\windows\Downloaded Program Files\FP_AX_CAB_INSTALLER.exe

Part 3

+ 2010-10-01 13:37 . 2010-10-01 13:37 4792320 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_6fda8d45\System.dll
+ 2010-10-01 13:37 . 2010-10-01 13:37 1966080 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_10244cba\System.dll
+ 2010-10-01 13:37 . 2010-10-01 13:37 5513216 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_dff4aa1b\System.Xml.dll
+ 2010-10-01 13:37 . 2010-10-01 13:37 2088960 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_7ad2ecd2\System.Xml.dll
+ 2010-10-01 13:37 . 2010-10-01 13:37 7884800 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_73534837\System.Windows.Forms.dll
+ 2010-10-01 13:37 . 2010-10-01 13:37 3018752 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_1497a351\System.Windows.Forms.dll
+ 2010-10-01 13:37 . 2010-10-01 13:37 2244608 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_42a5b89a\System.Drawing.dll
+ 2010-10-01 13:37 . 2010-10-01 13:37 3395584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_b6b2eeff\System.Design.dll
+ 2010-10-01 13:37 . 2010-10-01 13:37 1466368 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_a3a78242\System.Design.dll
+ 2010-10-01 13:38 . 2010-10-01 13:38 8908800 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_2fcc51cf\mscorlib.dll
+ 2010-10-01 13:37 . 2010-10-01 13:37 3391488 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_245f17f1\mscorlib.dll
+ 2010-08-11 03:37 . 2010-08-11 03:37 3325440 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\cec7ecb8eac09dd630d180ce87d23b80\WindowsBase.ni.dll
+ 2010-08-11 03:47 . 2010-08-11 03:47 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\b7f6e7b265f9aae807ddc4284563e550\UIAutomationClientsideProviders.ni.dll
+ 2010-08-11 03:35 . 2010-08-11 03:35 7949824 c:\windows\assembly\NativeImages_v2.0.50727_32\System\08ffa4d388d5f007869aa7651c458e7c\System.ni.dll
+ 2010-08-11 03:47 . 2010-08-11 03:47 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\a6dbe24cbfe3ab6b318ed3095cc572d8\System.Xml.ni.dll
+ 2010-10-01 13:48 . 2010-10-01 13:48 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\bec60fe2e934a6284224ab45b0e981e2\System.WorkflowServices.ni.dll
+ 2010-10-01 13:48 . 2010-10-01 13:48 1908224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\09da139c48e2f5e76994a5c0f2e5b19e\System.Workflow.Runtime.ni.dll
+ 2010-10-01 13:48 . 2010-10-01 13:48 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\6809417da74ff937e18b3034f1eac2f2\System.Workflow.ComponentModel.ni.dll
+ 2010-10-01 13:48 . 2010-10-01 13:48 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\6c91ee82035d30efa8893e7b0396bbb0\System.Workflow.Activities.ni.dll
+ 2010-10-01 13:48 . 2010-10-01 13:48 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\181254ba0cb690decedb950fd26d7bea\System.Web.Services.ni.dll
+ 2010-10-01 13:48 . 2010-10-01 13:48 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\4200f716e9a41cb91d17516ba864e586\System.Web.Mobile.ni.dll
+ 2010-10-01 13:47 . 2010-10-01 13:47 2405376 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\da367bc2ecf2c9c5b4f858b6dba9e2ea\System.Web.Extensions.ni.dll
+ 2010-08-11 03:46 . 2010-08-11 03:46 1917952 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\5eb08849d17b272ed2a393420cb0305b\System.Speech.ni.dll
+ 2010-10-01 13:47 . 2010-10-01 13:47 1706496 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\8e34e273d036b7468fc4e951a1fde437\System.ServiceModel.Web.ni.dll
+ 2010-08-11 04:17 . 2010-08-11 04:17 2345472 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\8061a0f5c1c2ee0549e19224352f67fa\System.Runtime.Serialization.ni.dll
+ 2010-08-11 03:46 . 2010-08-11 03:46 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\99767d4df92b83fdfb06012512722ec1\System.Printing.ni.dll
+ 2010-10-01 13:46 . 2010-10-01 13:46 1070080 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\095bb4f033374647b6d66c51f16bb886\System.IdentityModel.ni.dll
+ 2010-08-11 03:46 . 2010-08-11 03:46 1587200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dcc0244092fe52e6885b50be25ef3b31\System.Drawing.ni.dll
+ 2010-08-11 04:22 . 2010-08-11 04:22 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\d20b7e58607ddb1ded9b687627ae8c21\System.DirectoryServices.ni.dll
+ 2010-08-11 04:19 . 2010-08-11 04:19 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\daa33674d4250e38a24b70180d209ac8\System.Deployment.ni.dll
+ 2010-08-11 03:45 . 2010-08-11 03:45 6616576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\f04ef00e652a8655a717639e8aeb7b63\System.Data.ni.dll
+ 2010-08-11 04:19 . 2010-08-11 04:19 2510336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\f0470c2be4e6bb1dadbeed43e4e8af5c\System.Data.SqlXml.ni.dll
+ 2010-10-01 13:47 . 2010-10-01 13:47 1328128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\b8c9267d87b7358e1a5f00bf1572c313\System.Data.Services.ni.dll
+ 2010-08-11 03:45 . 2010-08-11 03:45 2516480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\c18c236a09e715138daec2e25be205bb\System.Data.Linq.ni.dll
+ 2010-08-11 04:22 . 2010-08-11 04:22 9924096 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\6ce886492d9b6a34555be3f328682ec2\System.Data.Entity.ni.dll
+ 2010-08-11 03:44 . 2010-08-11 03:44 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\faeda674832135a080bc73eda51813ff\System.Core.ni.dll
+ 2010-08-11 03:44 . 2010-08-11 03:44 2128896 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\3e85c3d63ce3c3f37061aa626feb2a52\ReachFramework.ni.dll
+ 2010-08-11 03:43 . 2010-08-11 03:44 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\bf67db30179ff6e8cb1bdbaa290d122e\PresentationUI.ni.dll
+ 2010-08-11 03:36 . 2010-08-11 03:36 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\835786d8a0caabae09ad440f6e3abfc6\PresentationBuildTasks.ni.dll
+ 2010-12-29 17:01 . 2010-12-29 17:01 3179520 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet\dce6500887901567c6020dab6ebd4519\PaintDotNet.ni.exe
+ 2010-08-11 04:20 . 2010-08-11 04:20 3135488 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet\48b4f2286cb7fe5f1a0cbc8674f956fd\PaintDotNet.ni.exe
+ 2010-12-29 17:00 . 2010-12-29 17:00 1850368 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.Core\fb87cc33f1319df0e8a497e29de45284\PaintDotNet.Core.ni.dll
+ 2010-08-11 04:19 . 2010-08-11 04:19 1864192 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.Core\8820d0ee19f66aa093838dc0215d4a02\PaintDotNet.Core.ni.dll
+ 2010-10-01 13:47 . 2010-10-01 13:47 1712128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\a27783547338dbebf84101a685ba641b\Microsoft.VisualBasic.ni.dll
+ 2010-08-11 04:18 . 2010-08-11 04:18 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\773d7bf69a9a0c0556aa41f53e75ab05\Microsoft.Transactions.Bridge.ni.dll
+ 2010-08-11 04:22 . 2010-08-11 04:22 2332160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\16ff33f07efdb9da2a18e27585c604be\Microsoft.JScript.ni.dll
+ 2010-08-11 04:20 . 2010-08-11 04:20 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\d0fb91b296616a1a844bf265947018ee\Microsoft.Build.Tasks.ni.dll
+ 2010-08-11 04:20 . 2010-08-11 04:20 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\892e993c8df1c75081113131dc429c15\Microsoft.Build.Tasks.v3.5.ni.dll
+ 2010-08-11 04:19 . 2010-08-11 04:19 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\d0beebd2c9045158cdcd4bd5987b717b\Microsoft.Build.Engine.ni.dll
- 2010-06-24 05:43 . 2010-06-24 05:43 3182592 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 3182592 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
- 2010-06-24 05:43 . 2010-06-24 05:43 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
- 2010-06-24 05:42 . 2010-06-24 05:42 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
- 2009-08-22 13:47 . 2009-08-22 13:47 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
+ 2010-10-01 13:35 . 2010-10-01 13:35 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
- 2010-06-24 05:42 . 2010-06-24 05:42 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2010-12-30 15:34 . 2010-12-30 15:34 3649536 c:\windows\assembly\GAC_MSIL\Microsoft.ReportViewer.Common\9.0.0.0__b03f5f7f11d50a3a\Microsoft.ReportViewer.Common.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
- 2010-06-24 05:42 . 2010-06-24 05:42 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
- 2010-06-24 05:43 . 2010-06-24 05:43 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
+ 2010-10-01 13:32 . 2010-10-01 13:32 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2010-10-01 13:36 . 2010-10-01 13:36 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
- 2010-06-09 18:02 . 2010-06-09 18:02 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
+ 2010-10-01 13:36 . 2010-10-01 13:36 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
- 2010-06-09 18:02 . 2010-06-09 18:02 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
+ 2010-08-11 03:42 . 2009-10-23 15:28 3558912 c:\windows\$NtUninstallKB981997$\moviemk.exe
+ 2010-11-15 10:22 . 2010-06-24 09:02 1851904 c:\windows\$NtUninstallKB981957$\win32k.sys
+ 2010-08-11 03:44 . 2010-02-17 12:09 2192128 c:\windows\$NtUninstallKB981852$\ntoskrnl.exe
+ 2010-08-11 03:44 . 2010-02-16 19:08 2026496 c:\windows\$NtUninstallKB981852$\ntkrpamp.exe
+ 2010-08-11 03:44 . 2010-02-16 19:09 2068992 c:\windows\$NtUninstallKB981852$\ntkrnlpa.exe
+ 2010-08-11 03:44 . 2010-02-16 19:08 2148352 c:\windows\$NtUninstallKB981852$\ntkrnlmp.exe
+ 2010-11-15 10:15 . 2008-04-14 06:51 1287168 c:\windows\$NtUninstallKB979687$\ole32.dll
+ 2010-11-15 10:17 . 2008-04-14 06:51 1028096 c:\windows\$NtUninstallKB2387149$\mfc42.dll
+ 2010-11-15 10:17 . 2010-03-19 16:05 4874240 c:\windows\$NtUninstallKB2378111_WM9$\wmp.dll
+ 2010-08-03 05:40 . 2008-06-17 19:02 8465408 c:\windows\$NtUninstallKB2286198$\shell32.dll
+ 2010-08-11 03:41 . 2010-05-02 08:09 1851264 c:\windows\$NtUninstallKB2160329$\win32k.sys
+ 2010-08-11 03:42 . 2009-07-31 04:35 1172480 c:\windows\$NtUninstallKB2079403$\msxml3.dll
+ 2010-08-11 03:18 . 2010-06-18 13:43 3558912 c:\windows\$hf_mig$\KB981997\SP3QFE\moviemk.exe
+ 2010-09-01 07:57 . 2010-09-01 07:57 1861888 c:\windows\$hf_mig$\KB981957\SP3QFE\win32k.sys
+ 2010-08-11 03:20 . 2010-04-28 05:19 2192256 c:\windows\$hf_mig$\KB981852\SP3QFE\ntoskrnl.exe
+ 2010-08-11 03:20 . 2010-04-28 05:19 2026496 c:\windows\$hf_mig$\KB981852\SP3QFE\ntkrpamp.exe
+ 2010-04-28 21:19 . 2010-04-28 21:19 2069120 c:\windows\$hf_mig$\KB981852\SP3QFE\ntkrnlpa.exe
+ 2010-08-11 03:20 . 2010-04-28 05:19 2148352 c:\windows\$hf_mig$\KB981852\SP3QFE\ntkrnlmp.exe
+ 2010-07-16 11:59 . 2010-07-16 11:59 1288704 c:\windows\$hf_mig$\KB979687\SP3QFE\ole32.dll
+ 2010-11-15 10:05 . 2010-09-10 05:50 1211904 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\urlmon.dll
+ 2010-11-15 10:05 . 2010-09-10 05:50 5958656 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\mshtml.dll
+ 2010-11-15 10:05 . 2010-09-10 05:50 1987072 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\iertutil.dll
+ 2010-07-27 06:29 . 2010-07-27 06:29 8467456 c:\windows\$hf_mig$\KB2286198\SP3QFE\shell32.dll
+ 2010-08-11 03:20 . 2010-06-24 12:29 1211904 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\urlmon.dll
+ 2010-08-11 03:20 . 2010-06-24 12:29 5954560 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\mshtml.dll
+ 2010-08-11 03:19 . 2010-06-24 12:29 1987072 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\iertutil.dll
+ 2010-06-24 21:30 . 2010-06-24 21:30 1861120 c:\windows\$hf_mig$\KB2160329\SP3QFE\win32k.sys
+ 2010-06-14 07:40 . 2010-06-14 07:40 1172480 c:\windows\$hf_mig$\KB2079403\SP3QFE\msxml3.dll
+ 2010-11-15 10:10 . 2009-07-14 18:54 10457088 c:\windows\system32\ReinstallBackups\0011\DriverFiles\nvoglnt.dll
+ 2009-08-06 10:00 . 2010-07-10 04:38 13549568 c:\windows\system32\nvoglnt.dll
+ 2010-07-09 15:24 . 2010-07-09 15:24 13923432 c:\windows\system32\nvcpl.dll
+ 2010-07-10 04:38 . 2010-07-10 04:38 10260480 c:\windows\system32\nvcompiler.dll
+ 2009-08-09 07:32 . 2010-12-15 08:59 37366216 c:\windows\system32\MRT.exe
+ 2009-03-08 02:39 . 2010-11-06 00:23 11080704 c:\windows\system32\ieframe.dll
+ 2009-08-06 10:00 . 2010-07-10 04:38 10604128 c:\windows\system32\drivers\nv4_mini.sys
+ 2009-08-06 10:00 . 2010-07-10 04:38 10604128 c:\windows\system32\dllcache\nv4_mini.sys
+ 2009-08-09 07:55 . 2010-11-06 00:23 11080704 c:\windows\system32\dllcache\ieframe.dll
+ 2010-09-24 12:08 . 2010-09-24 12:08 11430400 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\M2416447\M2416447Uninstall.msp
+ 2010-06-11 15:52 . 2010-06-11 15:52 45542912 c:\windows\Installer\4e39ac.msp
+ 2010-09-24 05:08 . 2010-09-24 05:08 17518080 c:\windows\Installer\3c65e6.msp
+ 2010-10-14 15:57 . 2010-10-14 15:57 11189248 c:\windows\Installer\159230.msp
+ 2010-05-19 11:08 . 2010-05-19 11:08 11408896 c:\windows\Installer\12993a.msp
+ 2010-12-15 08:58 . 2010-09-10 05:52 11080192 c:\windows\ie8updates\KB2416400-IE8\ieframe.dll
+ 2010-11-15 10:16 . 2010-06-24 15:57 11077120 c:\windows\ie8updates\KB2360131-IE8\ieframe.dll
+ 2010-08-11 03:43 . 2010-05-06 10:35 11076096 c:\windows\ie8updates\KB2183461-IE8\ieframe.dll
+ 2010-08-11 03:47 . 2010-08-11 03:47 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\439c466b60614915587c5273eaf0ca7f\System.Windows.Forms.ni.dll
+ 2010-10-01 13:47 . 2010-10-01 13:47 11800576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\41f436dae3c8146752d06130f7331527\System.Web.ni.dll
+ 2010-10-01 13:46 . 2010-10-01 13:46 17403904 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\75aeb590008d6e166f7be18f935c52d2\System.ServiceModel.ni.dll
+ 2010-10-01 13:34 . 2010-10-01 13:34 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\fdc42078fd10e4dc8b05087900c63977\System.Design.ni.dll
+ 2010-08-11 03:43 . 2010-08-11 03:43 14328320 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\a632f3ef85ffd35341b383eed577cb93\PresentationFramework.ni.dll
+ 2010-08-11 03:39 . 2010-08-11 03:40 12215808 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\f00db8db51f5707c7fe52c0683dc6136\PresentationCore.ni.dll
+ 2010-08-11 03:33 . 2010-08-11 03:33 11490816 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\7bffd7ff2009f421fe5d229927588496\mscorlib.ni.dll
+ 2010-09-10 10:20 . 2010-09-10 10:20 11082240 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\ieframe.dll
+ 2010-08-11 03:20 . 2010-06-24 12:29 11079168 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\ieframe.dll
.
-- Snímek resetován k současnému datu --
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Taskbar Shuffle"="e:\apps\Taskbar Shuffle\taskbarshuffle.exe" [2008-04-17 818176]
"SpywareTerminatorUpdate"="c:\program files\Spyware Terminator\SpywareTerminatorUpdate.exe" [2010-12-01 3318784]
"CrystalDiskInfo"="e:\apps\Crystal Disk Info\DiskInfo.exe" [2010-11-07 998872]
"Skype"="e:\apps\Skype\Phone\Skype.exe" [2010-12-03 14944136]
"Grindstone 2"="e:\apps\Grindstone 2\Grindstone 2.exe" [2010-12-20 1444864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2009-05-14 2029640]
"SpywareTerminator"="c:\program files\Spyware Terminator\SpywareTerminatorShield.exe" [2010-11-15 2216960]
"WD Drive Manager"="c:\program files\Western Digital\WD Drive Manager\WDBtnMgrUI.exe" [2008-07-24 450560]
"Nitro PDF Printer Monitor"="e:\apps\Nitro PDF\Professional\NitroPDFPrinterMonitor.exe" [2009-05-27 209216]
"Acrobat Assistant 7.0"="e:\apps\Adobe Acrobat 7.0\Distillr\Acrotray.exe" [2008-04-23 483328]
"COMODO Internet Security"="c:\program files\COMODO\COMODO Internet Security\cfp.exe" [2010-09-29 2500552]
"nwiz"="c:\program files\NVIDIA Corporation\nView\nwiz.exe" [2010-07-07 1753192]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2010-07-09 110696]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2010-07-09 13923432]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
"VolumeTouch"="c:\program files\VolumeTouch\VolumeTouch.exe" [2005-07-22 184320]
"CleanMem Mini Monitor"="e:\apps\CleanMem\mini_monitor.exe" [2010-12-16 360448]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\user\Nabˇdka Start\Programy\Po spuçtŘnˇ\
4t Tray Minimizer.lnk - e:\apps\4t Tray Minimizer\4t-min.exe [2010-12-30 1652736]
Crystal Disk Info.lnk - e:\apps\Crystal Disk Info\DiskInfo.exe [2010-12-12 998872]
Esmska.lnk - n:\_software_\esmska-0.20.0\esmska-portable.exe [N/A]
EssentialPIM.lnk - n:\_software_\EssentialPIM Pro\EssentialPIM.exe [N/A]
Miranda.lnk - n:\_software_\Miranda IM\miranda32.exe [N/A]
NetWorx.lnk - e:\apps\NetWorx\networx.exe [2010-12-26 2996736]
Phrase Express.lnk - n:\_software_\PhraseExpress\phraseexpress.exe [N/A]
TrayIt!.lnk - e:\apps\TrayIt\TrayIt!.exe [2010-11-16 204800]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Adobe Acrobat Speed Launcher.lnk - c:\windows\Installer\{AC76BA86-1033-0000-7760-000000000002}\SC_Acrobat.exe [2009-11-21 25214]
Secunia PSI Tray.lnk - c:\program files\Secunia PSI\psi_tray.exe [2010-12-21 291896]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0OODBS

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CLPSLS]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Spyware Terminator\\SpywareTerminatorUpdate.exe"=
"k:\\uTorrent\\utorrent.exe"=
"e:\\Apps\\Skype\\Plugin Manager\\skypePM.exe"=
"e:\\Apps\\Skype\\Phone\\Skype.exe"=

R0 viasraid;viasraid;c:\windows\system32\drivers\viasraid.sys [6.8.2009 8:41 77312]
R1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\drivers\cmdGuard.sys [9.4.2010 0:25 239240]
R1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\drivers\cmdhlp.sys [9.4.2010 0:25 25240]
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [14.5.2009 14:47 107256]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [14.5.2009 14:49 94360]
R1 sp_rsdrv2;Spyware Terminator Driver 2;c:\windows\system32\drivers\sp_rsdrv2.sys [9.8.2009 10:00 142592]
R2 CLPSLS;COMODO livePCsupport Service;c:\program files\COMODO\COMODO livePCsupport\CLPSLS.exe [19.2.2010 16:00 148744]
R2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [14.5.2009 14:47 731840]
R2 Secunia PSI Agent;Secunia PSI Agent;c:\program files\Secunia PSI\psia.exe [21.12.2010 13:04 987704]
R2 Secunia Update Agent;Secunia Update Agent;c:\program files\Secunia PSI\sua.exe [21.12.2010 13:04 399416]
R2 WDBtnMgrSvc.exe;WD Drive Manager Service;c:\program files\Western Digital\WD Drive Manager\WDBtnMgrSvc.exe [24.7.2008 14:22 102400]
R3 PSI;PSI;c:\windows\system32\drivers\psi_mf.sys [1.9.2010 9:30 15544]
S2 VRAID Log Service;VRAID Log Service;c:\program files\VIA\RAID\vialogsv.exe [23.10.2009 15:38 52888]
S3 dsnpfdMP;dsnpfdMP;c:\windows\system32\DRIVERS\dsnpfd.sys --> c:\windows\system32\DRIVERS\dsnpfd.sys [?]
S3 MEMSWEEP2;MEMSWEEP2;\??\c:\windows\system32\3B.tmp --> c:\windows\system32\3B.tmp [?]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [24.4.2010 9:52 137344]
S3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsuc.sys [24.4.2010 9:52 8320]
S3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\drivers\wdcsam.sys [31.8.2009 15:47 11520]
S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [9.8.2009 17:17 691696]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.com/
IE: Convert link target to Adobe PDF - e:\apps\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert link target to existing PDF - e:\apps\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert selected links to Adobe PDF - e:\apps\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert selected links to existing PDF - e:\apps\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Convert selection to Adobe PDF - e:\apps\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert selection to existing PDF - e:\apps\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert to Adobe PDF - e:\apps\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert to existing PDF - e:\apps\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: E&xportovat do aplikace Microsoft Office Excel - e:\apps\MICROS~1\OFFICE11\EXCEL.EXE/3000
Trusted Zone: secunia.com
FF - ProfilePath - c:\documents and settings\user\Data aplikací\Mozilla\Firefox\Profiles\em459xz7.default\
FF - prefs.js: browser.startup.homepage - www.google.com
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - e:\apps\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - e:\apps\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\Java\jre6\lib\deploy\jqs\ff
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Ext: MultirowBookmarksToolbar: {FBF6D7FB-F305-4445-BB3D-FEF66579A033} - %profile%\extensions\{FBF6D7FB-F305-4445-BB3D-FEF66579A033}
FF - Ext: Fetch Text URL: {5B700FEA-FF2A-4746-BB2D-9D26A8EB056D} - %profile%\extensions\{5B700FEA-FF2A-4746-BB2D-9D26A8EB056D}
FF - Ext: Easy Youtube Video Downloader: {c0c9a2c7-2e5c-4447-bc53-97718bc91e1b} - %profile%\extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: Adblock Plus: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} - %profile%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
FF - Ext: Download Statusbar: {D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389} - %profile%\extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}
FF - Ext: WOT: {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} - %profile%\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF - Ext: RefControl: {455D905A-D37C-4643-A9E2-F6FEFAA0424A} - %profile%\extensions\{455D905A-D37C-4643-A9E2-F6FEFAA0424A}
FF - Ext: Zotero: zotero@chnm.gmu.edu - %profile%\extensions\zotero@chnm.gmu.edu
FF - Ext: Zotero WinWord Integration: zoteroWinWordIntegration@zotero.org - %profile%\extensions\zoteroWinWordIntegration@zotero.org
FF - Ext: Xmarks: foxmarks@kei.com - %profile%\extensions\foxmarks@kei.com
FF - Ext: BetterPrivacy: {d40f5e7b-d2cf-4856-b441-cc613eeffbe3} - %profile%\extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}
FF - Ext: Certificate Patrol: CertPatrol@PSYC.EU - %profile%\extensions\CertPatrol@PSYC.EU
FF - Ext: Dictionary Switcher: dictionary-switcher@design-noir.de - %profile%\extensions\dictionary-switcher@design-noir.de
FF - Ext: DownThemAll!: {DDC359D1-844A-42a7-9AA1-88A850A938A8} - %profile%\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}
FF - Ext: DragNDrop Toolbars: dndtb@c-est-simple.com - %profile%\extensions\dndtb@c-est-simple.com
FF - Ext: British English Dictionary: en-GB@dictionaries.addons.mozilla.org - %profile%\extensions\en-GB@dictionaries.addons.mozilla.org
FF - Ext: CookieSafe: {9D23D0AA-D8F5-11DA-B3FC-0928ABF316DD} - %profile%\extensions\{9D23D0AA-D8F5-11DA-B3FC-0928ABF316DD}
FF - Ext: Firefox Showcase: {89506680-e3f4-484c-a2c0-ed711d481eda} - %profile%\extensions\{89506680-e3f4-484c-a2c0-ed711d481eda}
FF - Ext: Flagfox: {1018e4d6-728f-4b20-ad56-37578a4de76b} - %profile%\extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}
FF - Ext: Forecastfox Weather: {0538E3E3-7E9B-4d49-8831-A227C80A7AD3} - %profile%\extensions\{0538E3E3-7E9B-4d49-8831-A227C80A7AD3}
FF - Ext: Change: change@c-est-simple.com - %profile%\extensions\change@c-est-simple.com
FF - Ext: IE Tab 2 (FF 3.6+): {1BC9BA34-1EED-42ca-A505-6D2F1A935BBB} - %profile%\extensions\{1BC9BA34-1EED-42ca-A505-6D2F1A935BBB}
FF - Ext: LiveClick: {d166ee2a-36bb-4f33-aff7-e85f912df509} - %profile%\extensions\{d166ee2a-36bb-4f33-aff7-e85f912df509}
FF - Ext: Myibay Firefox extension: firefox1@myibay.com - %profile%\extensions\firefox1@myibay.com
FF - Ext: Organize Status Bar: {35106bca-6c78-48c7-ac28-56df30b51d2c} - %profile%\extensions\{35106bca-6c78-48c7-ac28-56df30b51d2c}
FF - Ext: Pronounce: pronounce@netgents.com - %profile%\extensions\pronounce@netgents.com
FF - Ext: Redirect Remover: {fe0258ab-4f74-43a1-8781-bcdf340f9ee9} - %profile%\extensions\{fe0258ab-4f74-43a1-8781-bcdf340f9ee9}
FF - Ext: RSS Ticker: {1f91cde0-c040-11da-a94d-0800200c9a66} - %profile%\extensions\{1f91cde0-c040-11da-a94d-0800200c9a66}
FF - Ext: Tab Mix Plus: {dc572301-7619-498c-a57d-39143191b318} - %profile%\extensions\{dc572301-7619-498c-a57d-39143191b318}
FF - Ext: United States English Spellchecker: en-US@dictionaries.addons.mozilla.org - %profile%\extensions\en-US@dictionaries.addons.mozilla.org
FF - Ext: WebMail Notifier: {37fa1426-b82d-11db-8314-0800200c9a66} - %profile%\extensions\{37fa1426-b82d-11db-8314-0800200c9a66}
FF - Ext: Favicon Picker 3: {446c03e0-2c35-11db-a98b-0800200c9a67} - %profile%\extensions\{446c03e0-2c35-11db-a98b-0800200c9a67}
FF - Ext: České slovníky pro kontrolu pravopisu: cs@dictionaries.addons.mozilla.org - %profile%\extensions\cs@dictionaries.addons.mozilla.org
FF - Ext: Menu Editor: {EDA7B1D7-F793-4e03-B074-E6F303317FB0} - %profile%\extensions\{EDA7B1D7-F793-4e03-B074-E6F303317FB0}
FF - Ext: Slovníky slovenského pravopisu: sk@dictionaries.addons.mozilla.org - %profile%\extensions\sk@dictionaries.addons.mozilla.org
FF - Ext: Speed Dial: {64161300-e22b-11db-8314-0800200c9a66} - %profile%\extensions\{64161300-e22b-11db-8314-0800200c9a66}
FF - Ext: Mozilla Archive Format: {7f57cf46-4467-4c2d-adfa-0cba7c507e54} - %profile%\extensions\{7f57cf46-4467-4c2d-adfa-0cba7c507e54}
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

AddRemove-NVIDIA Display Control Panel - c:\program files\NVIDIA Corporation\Uninstall\nvuninst.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-01-02 23:40
Windows 5.1.2600 Service Pack 3 NTFS

detected NTDLL code modification:
ZwClose, ZwOpenFile

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

HKCU\Software\Microsoft\Windows\CurrentVersion\Run
CrystalDiskInfo = "e:\apps\Crystal Disk Info\DiskInfo.exe" /Startup??

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\MEMSWEEP2]
"ImagePath"="\??\c:\windows\system32\3B.tmp"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
"OODEFRAG11.00.00.01WORKSTATION"="A06166B363BF0EC8EF672EB904F41F90F06B4D8D45736B41098DFBCD89EA57AC1E779F9AF450599225BEABFBC65F586A36940E19B7F6A0813CC931B7E9C07365AD960793F22B15215646A805E42EF5CCB49F84EF79E76C645F281F0E4082F37A0635DC00DE6C8B2EF54A67AFE86498FC36CB130D404DDADEB700E7898559F7AD85DAA6709D040F6718A6EB8DC155DE38ABEB609D23007F582B3773131DFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CA6A0AC4980AC7933C038D530D6EB3452A2D97226D213B5558EDD5E5BE2F6E66749A1C1AAF3B75434582C1BD95DA73F69EC3699B3BCE496F378F2006735F36A3A871F040F36CB89BED3B5B01C3994BD5832B5105253F56671C77B27D014F1DBDC942644ACB859A0B5490E9A9EA944EAD6F14A2EB84DA6765570C792B4A6E9271D3DEF744A489D80880B61F6A090356B9CA5B06240C1D7C3C32DC51DA4D63C482724BBFBD2429B428B3F5D5A06E1AA134694298CE557AC85C00FE49458230EF1093BC835561B9833745F354E56A5AB6ED35EF502C9CC8C1FB5781B3AA89D4985B34EDEF0855A2055DF3920CBBD7883BA2B77DE8BB2F2A6AEEEA2DFC413EB1A9F007747F0381A7F5E4CEDD6C68C8941EA92A43167873067039F18B0DEBAC97209A6A7CEEBE90AC8B79E741A9FB51EB8A637033BC555FB8620DCB98DA564048644C6A5C78EB96DD17D9C16AA30D18E01C62B7FCFCACEE578BC9F3AFB2CFAFDD005628887F5E89C350373EED0C41D47F3DADFDB4891468DFCC4C4A284F50B2C8C355FBEE6366081D14E30F3D51C77C7312530B1FEA5B72712570F4DB27F479BBCEE0907C556299C4816C869896BE3A49C1CD7EAD408BCFEFCC8A3EA98378668A5858D7704517380804A13E7BD5A8A06DDE9F5C42DAE98F0C4208AFDC97C40C5D07B807787159253A38BCADEC98438A85F6E1153EE02AFEC351A32E0DFA715F98B0AD5463A07FB529FB08E8F887B5BDC4EB9107D86DE8AF961236CBCF582C45FE59DE87289FB4ACBA641638FD7418907A195BF7D6216563199E16D132E49B6E3B656796168BFBE232F7BAF499A4EF91E0E79D0E1F7EDE23EF82D4FB6AD307389950AA7CCC9903A50F3D03F79371087308E16570F3E1EA6E45A0F10501BDCAAE660407C40A9A3C45DF1E7C0B21965B35C64CC4B39AFD43B785DC8905B2467AC263835609D859D88E9EB19495AAE22A15710B40A6DCCB2DA6367CD15267A607086025AA197DE9B55A9E7F24EAA6A0E9969D997548899CBE722A0C3495650C70FD9E753F3393A2B1D643036AB31C1E686EDCD74CC3F1EA967C6F30839E36195C605D5796D5EA1CF7674D3D7A1CE315B7957BAFEFC17E44A817692A95618E7B2F9847DD70838237F9CC8230253BA3710A5A7331BD16CFD9D"
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'lsass.exe'(780)
c:\windows\system32\MPR.dll
c:\windows\system32\guard32.dll

- - - - - - - > 'explorer.exe'(2060)
c:\windows\system32\guard32.dll
e:\apps\4t Tray Minimizer\ShellEh519.dll
c:\windows\system32\webcheck.dll
e:\apps\Taskbar Shuffle\tbhookin.dll
c:\windows\system32\MPR.dll
.
Celkový čas: 2011-01-02 23:44:19
ComboFix-quarantined-files.txt 2011-01-02 22:44
ComboFix2.txt 2010-07-09 18:50

Před spuštěním: Volných bajtů: 18 327 162 880
Po spuštění: Volných bajtů: 18 990 465 024

WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

- - End Of File - - 0744283D40FE5C113B0CE9AE4A6649F5

Nechci vypadat nedočkavě, ale rád bych po týdnu věděl, jak si na tom stojí moje logy.
Nejen proto, že mi Combofix odpálil Deamon Tools a nejspíši i ESET NOD 32, který po jeho spuštění přestal fungovat.
Díky za odpověď.

Já se moc omlouvám, asi jsem Vás přehlédla
Kromě těch popsaných problémů to s počítačem vypadá jak?

Otestujte na www.virustotal.com
c:\windows\system32\drivers\tcpip.sys

motji píše:Já se moc omlouvám, asi jsem Vás přehlédla

Chápu, stane se, děkuji za odpověď

motji píše:Kromě těch popsaných problémů to s počítačem vypadá jak?

Systém funguje, namísto NOD32 jsem nainstaloval Free Aviru (stejně jsem se na to chystal).
Jinak vše při starém, tzn. pomalý Firefox i celý počítač (občas dokonce laguje i při psaní), jinak vše funkční.

motji píše:Otestujte na http://www.virustotal.com
c:\windows\system32\drivers\tcpip.sys

Soubor je podle VT čistý.

Pokud nemáte, přesuňte Combofix na plochu
-otevřete si Poznámkový blok
-Do něj zkopírujte text z tohoto okénka
-uložte Vámi vytvořený TXT soubor jako CFScript.txt na plochu
-po uložení uchopte vámi vytvořený skript levým myšítkem a -přesuňte ho nad ikonu Combofixu, kde ho upustíte:




-po aplikaci na Vás vypadne další log,vložte ho sem

Upozornění : může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou, v tom případě znovu restartujte a přitom mačkejte F8, pak zvolte Poslední známou funkční konfiguraci


Pokud máte zapnutý rezidentní štít u Spyware terminátora, zkuste ho vypnout, jestli se to nezlepší. Vím, že mi to dělal

Fixnuto. Zde je log.
Vypnout residentní štít ST vyzkouším.

ComboFix 11-01-11.01 - user 12.01.2011 9:28.3.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1023.612 [GMT 1:00]
Spuštěný z: c:\documents and settings\user\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\user\Plocha\CFScript.txt
AV: AntiVir Desktop *Disabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7}
FW: COMODO Firewall *Enabled* {043803A3-4F86-4ef6-AFC5-F6E02A79969B}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_MEMSWEEP2
-------\Service_MEMSWEEP2


((((((((((((((((((((((((( Soubory vytvořené od 2010-12-12 do 2011-01-12 )))))))))))))))))))))))))))))))
.

2011-01-07 14:17 . 2011-01-07 14:17 -------- d-----w- c:\documents and settings\user\Local Settings\Data aplikací\Evernote
2011-01-07 14:16 . 2011-01-07 14:16 -------- d-----w- c:\program files\Evernote
2011-01-04 09:09 . 2011-01-04 09:09 -------- d-----w- c:\documents and settings\LocalService\Nabídka Start
2011-01-04 09:07 . 2011-01-04 09:07 -------- d-----w- c:\documents and settings\user\Data aplikací\Avira
2011-01-04 09:04 . 2011-01-04 09:08 135096 ----a-w- c:\windows\system32\drivers\avipbb.sys
2011-01-04 09:04 . 2011-01-04 09:08 61960 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2011-01-04 09:04 . 2010-06-17 14:27 45416 ----a-w- c:\windows\system32\drivers\avgntdd.sys
2011-01-04 09:04 . 2010-06-17 14:27 22360 ----a-w- c:\windows\system32\drivers\avgntmgr.sys
2011-01-04 09:04 . 2011-01-04 09:04 -------- d-----w- c:\program files\Avira
2011-01-04 09:04 . 2011-01-04 09:04 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Avira
2011-01-03 10:54 . 2011-01-03 10:54 -------- d-----w- c:\documents and settings\user\DoctorWeb
2010-12-30 15:49 . 2010-12-30 15:49 -------- d-----w- c:\documents and settings\user\Data aplikací\4t Niagara Software
2010-12-30 09:09 . 2011-01-12 08:16 -------- d-----w- c:\documents and settings\user\Data aplikací\Grindstone 2
2010-12-29 22:16 . 2010-12-29 22:16 -------- d-----w- c:\documents and settings\user\Data aplikací\NCH Software
2010-12-29 22:16 . 2010-12-29 22:16 -------- d-----w- c:\documents and settings\All Users\Data aplikací\NCH Software
2010-12-29 22:16 . 2010-12-29 22:18 -------- d-----w- c:\program files\NCH Software
2010-12-29 16:57 . 2010-12-30 08:43 -------- d-----w- c:\windows\SxsCaPendDel
2010-12-29 07:42 . 2010-12-29 07:42 -------- d-----w- C:\Apps
2010-12-27 10:09 . 2010-12-27 10:09 -------- d-----w- c:\program files\Common Files\Skype
2010-12-22 10:11 . 2010-12-22 10:11 -------- d-----w- c:\documents and settings\user\Local Settings\Data aplikací\Secunia PSI
2010-12-22 10:11 . 2011-01-02 22:32 -------- d-----w- c:\program files\Secunia PSI
2010-12-15 08:51 . 2010-11-02 15:17 40960 -c----w- c:\windows\system32\dllcache\ndproxy.sys
2010-12-15 08:50 . 2010-10-11 14:59 45568 -c----w- c:\windows\system32\dllcache\wab.exe

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-01-11 18:48 . 2010-04-08 23:26 285480 ----a-w- c:\windows\system32\guard32.dll
2011-01-11 18:48 . 2010-04-08 23:25 94784 ----a-w- c:\windows\system32\drivers\inspect.sys
2011-01-11 18:48 . 2010-04-08 23:25 27576 ----a-w- c:\windows\system32\drivers\cmdhlp.sys
2011-01-11 18:48 . 2010-04-08 23:25 15592 ----a-w- c:\windows\system32\drivers\cmderd.sys
2011-01-11 18:48 . 2010-04-08 23:25 239368 ----a-w- c:\windows\system32\drivers\cmdGuard.sys
2010-12-20 17:09 . 2010-05-06 17:36 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-12-20 17:08 . 2010-05-06 17:36 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-11-18 18:15 . 2009-08-06 09:39 81920 ----a-w- c:\windows\system32\isign32.dll
2010-11-16 22:41 . 2010-11-16 22:41 323624 ----a-w- c:\windows\system32\wiaaut.dll
2010-11-06 00:23 . 2004-08-18 12:00 916480 ----a-w- c:\windows\system32\wininet.dll
2010-11-06 00:23 . 2004-08-18 12:00 43520 ----a-w- c:\windows\system32\licmgr10.dll
2010-11-06 00:23 . 2004-08-18 12:00 1469440 ------w- c:\windows\system32\inetcpl.cpl
2010-11-03 12:25 . 2004-08-18 12:00 385024 ----a-w- c:\windows\system32\html.iec
2010-11-02 15:17 . 2004-08-18 12:00 40960 ----a-w- c:\windows\system32\drivers\ndproxy.sys
2010-10-28 13:09 . 2004-08-18 12:00 290048 ----a-w- c:\windows\system32\atmfd.dll
2010-10-26 13:58 . 2004-08-18 12:00 1853312 ----a-w- c:\windows\system32\win32k.sys
.

------- Sigcheck -------

[7] 2008-06-20 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[7] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\ERDNT\cache\tcpip.sys
[7] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\system32\dllcache\tcpip.sys
[-] 2008-06-20 . D24EA301E2B36C4E975FD216CA85D8E7 . 361600 . . [5.1.2600.5625] . . c:\windows\system32\drivers\tcpip.sys
[7] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB951748$\tcpip.sys
[7] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\tcpip.sys
[7] 2004-08-18 . 9F4B36614A0FC234525BA224957DE55C . 359040 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\tcpip.sys
.
((((((((((((((((((((((((((((( SnapShot_2011-01-02_22.40.09 )))))))))))))))))))))))))))))))))))))))))
.
+ 2011-01-12 08:36 . 2011-01-12 08:36 16384 c:\windows\Temp\Perflib_Perfdata_ea4.dat
+ 2011-01-12 08:34 . 2011-01-12 08:34 16384 c:\windows\Temp\Perflib_Perfdata_138.dat
+ 2011-01-04 09:04 . 2010-06-17 14:27 28520 c:\windows\system32\drivers\ssmdrv.sys
+ 2011-01-04 09:03 . 2011-01-04 09:03 219648 c:\windows\Installer\6717b.msi
+ 2011-01-07 14:16 . 2011-01-07 14:16 2316800 c:\windows\Installer\d54388.msi
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Taskbar Shuffle"="e:\apps\Taskbar Shuffle\taskbarshuffle.exe" [2008-04-17 818176]
"SpywareTerminatorUpdate"="c:\program files\Spyware Terminator\SpywareTerminatorUpdate.exe" [2010-12-01 3318784]
"CrystalDiskInfo"="e:\apps\Crystal Disk Info\DiskInfo.exe" [2010-11-07 998872]
"Skype"="e:\apps\Skype\Phone\Skype.exe" [2010-12-03 14944136]
"Grindstone 2"="e:\apps\Grindstone 2\Grindstone 2.exe" [2011-01-02 1447424]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SpywareTerminator"="c:\program files\Spyware Terminator\SpywareTerminatorShield.exe" [2010-11-15 2216960]
"WD Drive Manager"="c:\program files\Western Digital\WD Drive Manager\WDBtnMgrUI.exe" [2008-07-24 450560]
"Nitro PDF Printer Monitor"="e:\apps\Nitro PDF\Professional\NitroPDFPrinterMonitor.exe" [2009-05-27 209216]
"Acrobat Assistant 7.0"="e:\apps\Adobe Acrobat 7.0\Distillr\Acrotray.exe" [2008-04-23 483328]
"COMODO Internet Security"="c:\program files\COMODO\COMODO Internet Security\cfp.exe" [2011-01-11 2548040]
"nwiz"="c:\program files\NVIDIA Corporation\nView\nwiz.exe" [2010-07-07 1753192]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2010-07-09 110696]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2010-07-09 13923432]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
"VolumeTouch"="c:\program files\VolumeTouch\VolumeTouch.exe" [2005-07-22 184320]
"CleanMem Mini Monitor"="e:\apps\CleanMem\mini_monitor.exe" [2010-12-16 360448]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2010-08-02 281768]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\user\Nabˇdka Start\Programy\Po spuçtŘnˇ\
4t Tray Minimizer.lnk - e:\apps\4t Tray Minimizer\4t-min.exe [2010-12-30 1652736]
Crystal Disk Info.lnk - e:\apps\Crystal Disk Info\DiskInfo.exe [2010-12-12 998872]
Esmska.lnk - n:\_software_\esmska-0.20.0\esmska-portable.exe [N/A]
EssentialPIM.lnk - n:\_software_\EssentialPIM Pro\EssentialPIM.exe [N/A]
Miranda.lnk - n:\_software_\Miranda IM\miranda32.exe [N/A]
NetWorx.lnk - e:\apps\NetWorx\networx.exe [2010-12-26 2996736]
Phrase Express.lnk - n:\_software_\PhraseExpress\phraseexpress.exe [N/A]
TrayIt!.lnk - e:\apps\TrayIt\TrayIt!.exe [2010-11-16 204800]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Adobe Acrobat Speed Launcher.lnk - c:\windows\Installer\{AC76BA86-1033-0000-7760-000000000002}\SC_Acrobat.exe [2009-11-21 25214]
Evernote Clipper.lnk - c:\windows\Installer\{F761359C-9CED-45AE-9A51-9D6605CD55C4}\Evernote.ico [2011-1-7 293950]
Secunia PSI Tray.lnk - c:\program files\Secunia PSI\psi_tray.exe [2010-12-21 291896]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\system32\guard32.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0OODBS

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CLPSLS]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Spyware Terminator\\SpywareTerminatorUpdate.exe"=
"k:\\uTorrent\\utorrent.exe"=
"e:\\Apps\\Skype\\Plugin Manager\\skypePM.exe"=
"e:\\Apps\\Skype\\Phone\\Skype.exe"=

R0 viasraid;viasraid;c:\windows\system32\drivers\viasraid.sys [6.8.2009 8:41 77312]
R1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\drivers\cmdGuard.sys [9.4.2010 0:25 239368]
R1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\drivers\cmdhlp.sys [9.4.2010 0:25 27576]
R1 sp_rsdrv2;Spyware Terminator Driver 2;c:\windows\system32\drivers\sp_rsdrv2.sys [9.8.2009 10:00 142592]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [4.1.2011 10:04 135336]
R2 CLPSLS;COMODO livePCsupport Service;c:\program files\COMODO\COMODO livePCsupport\CLPSLS.exe [19.2.2010 16:00 148744]
R2 Secunia PSI Agent;Secunia PSI Agent;c:\program files\Secunia PSI\psia.exe [21.12.2010 13:04 987704]
R2 Secunia Update Agent;Secunia Update Agent;c:\program files\Secunia PSI\sua.exe [21.12.2010 13:04 399416]
R2 VRAID Log Service;VRAID Log Service;c:\program files\VIA\RAID\vialogsv.exe [23.10.2009 15:38 52888]
R2 WDBtnMgrSvc.exe;WD Drive Manager Service;c:\program files\Western Digital\WD Drive Manager\WDBtnMgrSvc.exe [24.7.2008 14:22 102400]
S3 dsnpfdMP;dsnpfdMP;c:\windows\system32\DRIVERS\dsnpfd.sys --> c:\windows\system32\DRIVERS\dsnpfd.sys [?]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [24.4.2010 9:52 137344]
S3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsuc.sys [24.4.2010 9:52 8320]
S3 PSI;PSI;c:\windows\system32\drivers\psi_mf.sys [1.9.2010 9:30 15544]
S3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\drivers\wdcsam.sys [31.8.2009 15:47 11520]
S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [9.8.2009 17:17 691696]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.com/
IE: Add to Evernote 4.0 - e:\apps\Evernote\EvernoteIE.dll/204
IE: Convert link target to Adobe PDF - e:\apps\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert link target to existing PDF - e:\apps\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert selected links to Adobe PDF - e:\apps\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert selected links to existing PDF - e:\apps\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Convert selection to Adobe PDF - e:\apps\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert selection to existing PDF - e:\apps\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert to Adobe PDF - e:\apps\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert to existing PDF - e:\apps\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: E&xportovat do aplikace Microsoft Office Excel - e:\apps\MICROS~1\OFFICE11\EXCEL.EXE/3000
IE: {{A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://e:\apps\Evernote\EvernoteIE.dll/204
Trusted Zone: secunia.com
FF - ProfilePath - c:\documents and settings\user\Data aplikací\Mozilla\Firefox\Profiles\em459xz7.default\
FF - prefs.js: browser.startup.homepage - http://www.google.com
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - e:\apps\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - e:\apps\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\Java\jre6\lib\deploy\jqs\ff
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Ext: MultirowBookmarksToolbar: {FBF6D7FB-F305-4445-BB3D-FEF66579A033} - %profile%\extensions\{FBF6D7FB-F305-4445-BB3D-FEF66579A033}
FF - Ext: Fetch Text URL: {5B700FEA-FF2A-4746-BB2D-9D26A8EB056D} - %profile%\extensions\{5B700FEA-FF2A-4746-BB2D-9D26A8EB056D}
FF - Ext: Easy Youtube Video Downloader: {c0c9a2c7-2e5c-4447-bc53-97718bc91e1b} - %profile%\extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: Adblock Plus: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} - %profile%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
FF - Ext: Download Statusbar: {D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389} - %profile%\extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}
FF - Ext: WOT: {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} - %profile%\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF - Ext: RefControl: {455D905A-D37C-4643-A9E2-F6FEFAA0424A} - %profile%\extensions\{455D905A-D37C-4643-A9E2-F6FEFAA0424A}
FF - Ext: Zotero: zotero@chnm.gmu.edu - %profile%\extensions\zotero@chnm.gmu.edu
FF - Ext: Zotero WinWord Integration: zoteroWinWordIntegration@zotero.org - %profile%\extensions\zoteroWinWordIntegration@zotero.org
FF - Ext: Xmarks: foxmarks@kei.com - %profile%\extensions\foxmarks@kei.com
FF - Ext: BetterPrivacy: {d40f5e7b-d2cf-4856-b441-cc613eeffbe3} - %profile%\extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}
FF - Ext: Certificate Patrol: CertPatrol@PSYC.EU - %profile%\extensions\CertPatrol@PSYC.EU
FF - Ext: Dictionary Switcher: dictionary-switcher@design-noir.de - %profile%\extensions\dictionary-switcher@design-noir.de
FF - Ext: DownThemAll!: {DDC359D1-844A-42a7-9AA1-88A850A938A8} - %profile%\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}
FF - Ext: DragNDrop Toolbars: dndtb@c-est-simple.com - %profile%\extensions\dndtb@c-est-simple.com
FF - Ext: British English Dictionary: en-GB@dictionaries.addons.mozilla.org - %profile%\extensions\en-GB@dictionaries.addons.mozilla.org
FF - Ext: CookieSafe: {9D23D0AA-D8F5-11DA-B3FC-0928ABF316DD} - %profile%\extensions\{9D23D0AA-D8F5-11DA-B3FC-0928ABF316DD}
FF - Ext: Firefox Showcase: {89506680-e3f4-484c-a2c0-ed711d481eda} - %profile%\extensions\{89506680-e3f4-484c-a2c0-ed711d481eda}
FF - Ext: Flagfox: {1018e4d6-728f-4b20-ad56-37578a4de76b} - %profile%\extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}
FF - Ext: Forecastfox Weather: {0538E3E3-7E9B-4d49-8831-A227C80A7AD3} - %profile%\extensions\{0538E3E3-7E9B-4d49-8831-A227C80A7AD3}
FF - Ext: Change: change@c-est-simple.com - %profile%\extensions\change@c-est-simple.com
FF - Ext: IE Tab 2 (FF 3.6+): {1BC9BA34-1EED-42ca-A505-6D2F1A935BBB} - %profile%\extensions\{1BC9BA34-1EED-42ca-A505-6D2F1A935BBB}
FF - Ext: LiveClick: {d166ee2a-36bb-4f33-aff7-e85f912df509} - %profile%\extensions\{d166ee2a-36bb-4f33-aff7-e85f912df509}
FF - Ext: Myibay Firefox extension: firefox1@myibay.com - %profile%\extensions\firefox1@myibay.com
FF - Ext: Organize Status Bar: {35106bca-6c78-48c7-ac28-56df30b51d2c} - %profile%\extensions\{35106bca-6c78-48c7-ac28-56df30b51d2c}
FF - Ext: Pronounce: pronounce@netgents.com - %profile%\extensions\pronounce@netgents.com
FF - Ext: Redirect Remover: {fe0258ab-4f74-43a1-8781-bcdf340f9ee9} - %profile%\extensions\{fe0258ab-4f74-43a1-8781-bcdf340f9ee9}
FF - Ext: RSS Ticker: {1f91cde0-c040-11da-a94d-0800200c9a66} - %profile%\extensions\{1f91cde0-c040-11da-a94d-0800200c9a66}
FF - Ext: Tab Mix Plus: {dc572301-7619-498c-a57d-39143191b318} - %profile%\extensions\{dc572301-7619-498c-a57d-39143191b318}
FF - Ext: United States English Spellchecker: en-US@dictionaries.addons.mozilla.org - %profile%\extensions\en-US@dictionaries.addons.mozilla.org
FF - Ext: WebMail Notifier: {37fa1426-b82d-11db-8314-0800200c9a66} - %profile%\extensions\{37fa1426-b82d-11db-8314-0800200c9a66}
FF - Ext: Favicon Picker 3: {446c03e0-2c35-11db-a98b-0800200c9a67} - %profile%\extensions\{446c03e0-2c35-11db-a98b-0800200c9a67}
FF - Ext: České slovníky pro kontrolu pravopisu: cs@dictionaries.addons.mozilla.org - %profile%\extensions\cs@dictionaries.addons.mozilla.org
FF - Ext: Menu Editor: {EDA7B1D7-F793-4e03-B074-E6F303317FB0} - %profile%\extensions\{EDA7B1D7-F793-4e03-B074-E6F303317FB0}
FF - Ext: Slovníky slovenského pravopisu: sk@dictionaries.addons.mozilla.org - %profile%\extensions\sk@dictionaries.addons.mozilla.org
FF - Ext: Speed Dial: {64161300-e22b-11db-8314-0800200c9a66} - %profile%\extensions\{64161300-e22b-11db-8314-0800200c9a66}
FF - Ext: Mozilla Archive Format: {7f57cf46-4467-4c2d-adfa-0cba7c507e54} - %profile%\extensions\{7f57cf46-4467-4c2d-adfa-0cba7c507e54}
FF - Ext: Evernote Web Clipper: {E0B8C461-F8FB-49b4-8373-FE32E9252800} - %profile%\extensions\{E0B8C461-F8FB-49b4-8373-FE32E9252800}
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-01-12 09:35
Windows 5.1.2600 Service Pack 3 NTFS

detected NTDLL code modification:
ZwClose, ZwOpenFile

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

HKCU\Software\Microsoft\Windows\CurrentVersion\Run
CrystalDiskInfo = "e:\apps\Crystal Disk Info\DiskInfo.exe" /Startup??

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
"OODEFRAG11.00.00.01WORKSTATION"="A06166B363BF0EC8EF672EB904F41F90F06B4D8D45736B41098DFBCD89EA57AC1E779F9AF450599225BEABFBC65F586A36940E19B7F6A0813CC931B7E9C07365AD960793F22B15215646A805E42EF5CCB49F84EF79E76C645F281F0E4082F37A0635DC00DE6C8B2EF54A67AFE86498FC36CB130D404DDADEB700E7898559F7AD85DAA6709D040F6718A6EB8DC155DE38ABEB609D23007F582B3773131DFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CA6A0AC4980AC7933C038D530D6EB3452A2D97226D213B5558EDD5E5BE2F6E66749A1C1AAF3B75434582C1BD95DA73F69EC3699B3BCE496F378F2006735F36A3A871F040F36CB89BED3B5B01C3994BD5832B5105253F56671C77B27D014F1DBDC942644ACB859A0B5490E9A9EA944EAD6F14A2EB84DA6765570C792B4A6E9271D3DEF744A489D80880B61F6A090356B9CA5B06240C1D7C3C32DC51DA4D63C482724BBFBD2429B428B3F5D5A06E1AA134694298CE557AC85C00FE49458230EF1093BC835561B9833745F354E56A5AB6ED35EF502C9CC8C1FB5781B3AA89D4985B34EDEF0855A2055DF3920CBBD7883BA2B77DE8BB2F2A6AEEEA2DFC413EB1A9F007747F0381A7F5E4CEDD6C68C8941EA92A43167873067039F18B0DEBAC97209A6A7CEEBE90AC8B79E741A9FB51EB8A637033BC555FB8620DCB98DA564048644C6A5C78EB96DD17D9C16AA30D18E01C62B7FCFCACEE578BC9F3AFB2CFAFDD005628887F5E89C350373EED0C41D47F3DADFDB4891468DFCC4C4A284F50B2C8C355FBEE6366081D14E30F3D51C77C7312530B1FEA5B72712570F4DB27F479BBCEE0907C556299C4816C869896BE3A49C1CD7EAD408BCFEFCC8A3EA98378668A5858D7704517380804A13E7BD5A8A06DDE9F5C42DAE98F0C4208AFDC97C40C5D07B807787159253A38BCADEC98438A85F6E1153EE02AFEC351A32E0DFA715F98B0AD5463A07FB529FB08E8F887B5BDC4EB9107D86DE8AF961236CBCF582C45FE59DE87289FB4ACBA641638FD7418907A195BF7D6216563199E16D132E49B6E3B656796168BFBE232F7BAF499A4EF91E0E79D0E1F7EDE23EF82D4FB6AD307389950AA7CCC9903A50F3D03F79371087308E16570F3E1EA6E45A0F10501BDCAAE660407C40A9A3C45DF1E7C0B21965B35C64CC4B39AFD43B785DC8905B2467AC263835609D859D88E9EB19495AAE22A15710B40A6DCCB2DA6367CD15267A607086025AA197DE9B55A9E7F24EAA6A0E9969D997548899CBE722A0C3495650C70FD9E753F3393A2B1D643036AB31C1E686EDCD74CC3F1EA967C6F30839E36195C605D5796D5EA1CF7674D3D7A1CE315B7957BAFEFC17E44A817692A95618E7B2F9847DD70838237F9CC8230253BA3710A5A7331BD16CFD9D"
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'lsass.exe'(764)
c:\windows\system32\MPR.dll
c:\windows\system32\guard32.dll

- - - - - - - > 'explorer.exe'(2764)
c:\windows\system32\guard32.dll
e:\apps\4t Tray Minimizer\ShellEh519.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\MPR.dll
e:\apps\Taskbar Shuffle\tbhookin.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\Avira\AntiVir Desktop\avguard.exe
c:\program files\Avira\AntiVir Desktop\avshadow.exe
c:\windows\system32\nvsvc32.exe
c:\program files\COMODO\COMODO Internet Security\cmdagent.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\windows\system32\oodag.exe
c:\program files\Analog Devices\SoundMAX\SMAgent.exe
c:\program files\Spyware Terminator\sp_rsser.exe
c:\windows\system32\wdfmgr.exe
c:\windows\system32\RUNDLL32.EXE
e:\apps\Evernote\EvernoteClipper.exe
e:\apps\Skype\Plugin Manager\skypePM.exe
.
**************************************************************************
.
Celkový čas: 2011-01-12 09:44:26 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-01-12 08:43
ComboFix2.txt 2011-01-02 22:44
ComboFix3.txt 2010-07-09 18:50

Před spuštěním: Volných bajtů: 18 732 740 608
Po spuštění: Volných bajtů: 18 698 317 824

- - End Of File - - 9B5879026DA697F1B79C720EEBADE0B7

Změnilo se něco?