VIRY.CZ

Dobrý den,

prosím o kontrolu logu, scan AVG mi hlásí infekci v systémovém souboru serial.sys. Před nedávnem jsme z PC odstranili několik Rootkitů a nadále se chová nestandadně.

Děkuji

Logfile of random's system information tool 1.09 (written by random/random)
Run by Josef Smilek at 2011-08-14 11:31:35
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 914 GB (96%) free of 954 GB
Total RAM: 3326 MB (70% free)


======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0C37B053-FD68-456a-82E1-D788EE342E6F}]
MHTBPos00 Class - C:\Program Files\Family Toolbar\tbcore3.dll [2009-05-07 2642432]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
Conduit Engine - C:\Program Files\ConduitEngine\prxConduitEngine.dll [2011-01-17 175912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG10\avgssie.dll [2011-08-05 2274144]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}]
AVG Security Toolbar BHO - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll [2011-07-26 2532680]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA837F48-5AD1-443E-AE34-FFE03CBF3099}]
Lištička - C:\Program Files\Seznam.cz\listicka.dll [2009-09-23 1413272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]
BS Player Toolbar - C:\Program Files\BS_Player\prxtbBS_0.dll [2011-01-17 175912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - AVG Security Toolbar - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll [2011-07-26 2532680]
{FD2FD708-1F6F-4B68-B141-C5778F0C19BB} - Family Toolbar - C:\Program Files\Family Toolbar\tbcore3.dll [2009-05-07 2642432]
{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - BS Player Toolbar - C:\Program Files\BS_Player\prxtbBS_0.dll [2011-01-17 175912]
{30F9B915-B755-4826-820B-08FBA6BD249D} - Conduit Engine - C:\Program Files\ConduitEngine\prxConduitEngine.dll [2011-01-17 175912]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2008-09-11 143360]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2008-09-11 172032]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2008-09-11 143360]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2008-10-28 17331200]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2010-03-24 2516296]
"Control Center"=C:\Program Files\ASUS\WLAN Card Utilities\Center.exe [2006-03-02 1667584]
"AVG_TRAY"=C:\Program Files\AVG\AVG10\avgtray.exe [2011-04-18 2334560]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"AvgUninstallURL"=cmd.exe /c start http://www.avg.com/ww.special-uninstall ... er=9.0.894 []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe [2005-10-28 94208]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Family Tree Builder Update]
C:\Program Files\MyHeritage\Bin\FTBCheckUpdates.exe [2011-05-29 221184]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
NETGEAR WG111v3 Smart Wizard.lnk - C:\Program Files\NETGEAR\WG111v3\WG111v3.exe
WDDMStatus.lnk - C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe
WDSmartWare.lnk - C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWare.exe
Windows Search.lnk - C:\Program Files\Windows Desktop Search\WindowsSearch.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2009-07-02 155648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2008-09-11 217088]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2009-05-24 304128]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"C:\Program Files\AVG\AVG9\avgdiagex.exe"="C:\Program Files\AVG\AVG9\avgdiagex.exe:*:Enabled:avgdiagex.exe"
"C:\Program Files\AVG\AVG10\avgdiagex.exe"="C:\Program Files\AVG\AVG10\avgdiagex.exe:*:Enabled:AVG Diagnostika 2011"
"C:\Program Files\AVG\AVG10\avgnsx.exe"="C:\Program Files\AVG\AVG10\avgnsx.exe:*:Enabled:Webový štít"
"C:\Program Files\AVG\AVG10\avgmfapx.exe"="C:\Program Files\AVG\AVG10\avgmfapx.exe:*:Enabled:Instalátor AVG"
"C:\Program Files\AVG\AVG10\avgam.exe"="C:\Program Files\AVG\AVG10\avgam.exe:*:Enabled:Správce událostí AVG"
"C:\Program Files\AVG\AVG10\avgemcx.exe"="C:\Program Files\AVG\AVG10\avgemcx.exe:*:Enabled:Obecná kontrola pošty"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"msacm.siren"=sirenacm.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv

======List of files/folders created in the last 1 month======

2011-08-14 10:44:51 ----D---- C:\Program Files\MALWAREBYTES ANTI-MALWARE
2011-08-14 10:15:12 ----D---- C:\Documents and Settings\Josef Smilek\Data aplikací\AVG
2011-08-14 09:41:03 ----D---- C:\OEMSettings
2011-08-14 09:13:11 ----D---- C:\Documents and Settings\Josef Smilek\Data aplikací\Windows Search
2011-08-14 09:03:14 ----D---- C:\Documents and Settings\Josef Smilek\Data aplikací\AVG10
2011-08-14 09:02:31 ----D---- C:\Documents and Settings\All Users\Data aplikací\AVG Security Toolbar
2011-08-14 09:01:17 ----D---- C:\WINDOWS\system32\drivers\AVG
2011-08-14 09:01:17 ----D---- C:\Documents and Settings\All Users\Data aplikací\AVG10
2011-08-14 08:54:45 ----D---- C:\Documents and Settings\All Users\Data aplikací\MFAData
2011-08-14 08:45:02 ----D---- C:\Program Files\Microsoft Silverlight
2011-08-14 08:44:23 ----D---- C:\WINDOWS\system32\winrm
2011-08-14 08:44:23 ----D---- C:\WINDOWS\system32\WindowsPowerShell
2011-08-14 08:44:21 ----HDC---- C:\WINDOWS\$968930Uinstall_KB968930$
2011-08-14 08:44:04 ----D---- C:\Documents and Settings\Josef Smilek\Data aplikací\Windows Desktop Search
2011-08-14 08:43:49 ----D---- C:\WINDOWS\system32\GroupPolicy
2011-08-14 08:43:49 ----D---- C:\Program Files\Windows Desktop Search
2011-08-14 08:43:11 ----N---- C:\WINDOWS\system32\spmsg.dll
2011-08-14 08:43:10 ----HDC---- C:\WINDOWS\$NtUninstallMSCompPackV1$
2011-08-14 08:43:03 ----D---- C:\Program Files\Windows Media Connect 2
2011-08-14 08:42:57 ----HDC---- C:\WINDOWS\$NtUninstallwmp11$
2011-08-14 08:42:27 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
2011-08-14 08:42:05 ----D---- C:\WINDOWS\system32\LogFiles
2011-08-14 08:42:05 ----D---- C:\WINDOWS\system32\drivers\UMDF
2011-08-14 08:42:01 ----HDC---- C:\WINDOWS\$NtUninstallWudf01000$
2011-08-14 08:40:39 ----D---- C:\WINDOWS\system32\URTTEMP
2011-08-14 08:31:05 ----SHD---- C:\RECYCLER
2011-08-14 08:29:29 ----D---- C:\Program Files\CCleaner
2011-08-14 08:21:57 ----A---- C:\WINDOWS\RTacDbg.txt
2011-08-14 08:19:46 ----D---- C:\Program Files\NETGEAR
2011-08-14 08:19:36 ----D---- C:\WINDOWS\Downloaded Installations
2011-08-13 21:49:55 ----D---- C:\WINDOWS\temp
2011-08-13 21:49:53 ----A---- C:\ComboFix.txt
2011-08-13 20:42:05 ----AD---- C:\WINDOWS\rundll16.exe
2011-08-13 20:42:05 ----AD---- C:\WINDOWS\logo1_.exe
2011-08-12 14:55:15 ----A---- C:\WINDOWS\PEV.exe
2011-08-12 14:47:03 ----A---- C:\WINDOWS\zip.exe
2011-08-12 14:47:03 ----A---- C:\WINDOWS\SWXCACLS.exe
2011-08-12 14:47:03 ----A---- C:\WINDOWS\SWSC.exe
2011-08-12 14:47:03 ----A---- C:\WINDOWS\SWREG.exe
2011-08-12 14:47:03 ----A---- C:\WINDOWS\sed.exe
2011-08-12 14:47:03 ----A---- C:\WINDOWS\NIRCMD.exe
2011-08-12 14:47:03 ----A---- C:\WINDOWS\MBR.exe
2011-08-12 14:47:03 ----A---- C:\WINDOWS\grep.exe
2011-08-12 14:46:59 ----D---- C:\WINDOWS\ERDNT
2011-08-12 14:46:54 ----D---- C:\Qoobox
2011-08-12 10:35:08 ----HD---- C:\WINDOWS\PIF
2011-08-12 09:22:41 ----D---- C:\WINDOWS\pss
2011-08-12 08:54:06 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2011-08-12 08:36:58 ----D---- C:\WINDOWS\CSC
2011-08-11 08:15:36 ----D---- C:\rsit
2011-08-11 08:15:36 ----D---- C:\Program Files\trend micro
2011-08-10 09:49:45 ----D---- C:\AVGTemp
2011-08-10 07:45:52 ----D---- C:\Documents and Settings\Josef Smilek\Data aplikací\Malwarebytes
2011-08-10 07:45:47 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2011-08-10 07:38:02 ----D---- C:\Program Files\VS Revo Group

======List of files/folders modified in the last 1 month======

2011-08-14 11:31:12 ----A---- C:\WINDOWS\WINCMD.INI
2011-08-14 11:29:42 ----A---- C:\WINDOWS\system.ini
2011-08-14 10:55:49 ----D---- C:\WINDOWS\Prefetch
2011-08-14 10:53:39 ----D---- C:\WINDOWS
2011-08-14 10:49:22 ----D---- C:\Program Files\AVG
2011-08-14 10:49:21 ----AD---- C:\Documents and Settings\All Users\Data aplikací\Temp
2011-08-14 10:47:49 ----D---- C:\Program Files\Google
2011-08-14 10:47:49 ----D---- C:\Documents and Settings\All Users\Data aplikací\Google
2011-08-14 10:47:46 ----SHD---- C:\WINDOWS\Installer
2011-08-14 10:46:39 ----D---- C:\WINDOWS\system32
2011-08-14 10:46:32 ----D---- C:\WINDOWS\system32\CatRoot2
2011-08-14 10:45:15 ----N---- C:\WINDOWS\SchedLgU.Txt
2011-08-14 10:44:52 ----D---- C:\WINDOWS\system32\drivers
2011-08-14 10:44:51 ----D---- C:\Program Files
2011-08-14 10:16:43 ----SD---- C:\WINDOWS\Downloaded Program Files
2011-08-14 09:49:10 ----HD---- C:\WINDOWS\inf
2011-08-14 09:49:04 ----D---- C:\WINDOWS\Registration
2011-08-14 09:48:39 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-08-14 09:48:00 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-08-14 09:46:25 ----D---- C:\WINDOWS\system32\CatRoot
2011-08-14 09:41:13 ----HD---- C:\Program Files\InstallShield Installation Information
2011-08-14 09:00:51 ----D---- C:\WINDOWS\WinSxS
2011-08-14 08:46:42 ----D---- C:\WINDOWS\AppPatch
2011-08-14 08:45:25 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2011-08-14 08:44:41 ----HD---- C:\WINDOWS\$hf_mig$
2011-08-14 08:44:39 ----D---- C:\WINDOWS\Microsoft.NET
2011-08-14 08:44:39 ----D---- C:\Program Files\Internet Explorer
2011-08-14 08:44:37 ----D---- C:\WINDOWS\ie8updates
2011-08-14 08:44:34 ----D---- C:\WINDOWS\security
2011-08-14 08:44:32 ----RSD---- C:\WINDOWS\assembly
2011-08-14 08:44:26 ----D---- C:\WINDOWS\Help
2011-08-14 08:44:23 ----D---- C:\WINDOWS\system32\wbem
2011-08-14 08:43:49 ----D---- C:\WINDOWS\system32\cs-cz
2011-08-14 08:43:06 ----A---- C:\WINDOWS\win.ini
2011-08-14 08:43:03 ----D---- C:\Program Files\Windows Media Player
2011-08-14 08:41:14 ----D---- C:\WINDOWS\system32\mui
2011-08-14 08:31:05 ----D---- C:\WINDOWS\Debug
2011-08-14 08:18:51 ----A---- C:\ASWL2K.ini
2011-08-14 06:59:04 ----SD---- C:\Documents and Settings\Josef Smilek\Data aplikací\Microsoft
2011-08-14 06:57:50 ----SHD---- C:\System Volume Information
2011-08-14 06:57:50 ----D---- C:\WINDOWS\system32\Restore
2011-08-13 21:48:20 ----D---- C:\WINDOWS\system32\drivers\etc
2011-08-13 21:46:37 ----D---- C:\Program Files\Common Files
2011-08-12 15:15:31 ----D---- C:\WINDOWS\system32\config
2011-08-12 10:38:42 ----D---- C:\temp
2011-08-12 09:26:23 ----RASH---- C:\boot.ini
2011-08-10 04:29:27 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2011-08-10 04:29:00 ----A---- C:\WINDOWS\system32\MRT.exe
2011-07-25 17:08:54 ----A---- C:\WINDOWS\system32\mshtml.dll
2011-07-22 08:02:09 ----D---- C:\Program Files\Microsoft Office

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSEH;AVGIDSEH; C:\WINDOWS\system32\DRIVERS\AVGIDSEH.Sys [2011-02-22 22992]
R0 Avgrkx86;AVG Anti-Rootkit Driver; C:\WINDOWS\system32\DRIVERS\avgrkx86.sys [2011-03-16 32592]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI Texas Instruments; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-14 61696]
R1 Avgldx86;AVG AVI Loader Driver; C:\WINDOWS\system32\DRIVERS\avgldx86.sys [2011-01-07 248656]
R1 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield; C:\WINDOWS\system32\DRIVERS\avgmfx86.sys [2011-03-01 34896]
R1 Avgtdix;AVG TDI Driver; C:\WINDOWS\system32\DRIVERS\avgtdix.sys [2011-04-05 297168]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-14 8832]
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.4.5.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2011-08-14 21035]
R2 EAPPkt;Realtek EAPPkt Protocol; C:\WINDOWS\system32\DRIVERS\EAPPkt.sys [2007-10-09 38144]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 ASNDIS5;ASNDIS5 Protocol Driver; \??\C:\WINDOWS\system32\ASNDIS5.SYS []
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2009-07-02 4125696]
R3 AtiHdmiService;ATI Function Driver for HDMI Service; C:\WINDOWS\system32\drivers\AtiHdmi.sys [2009-06-02 99856]
R3 Avgfwdx;Avgfwdx; C:\WINDOWS\system32\DRIVERS\avgfwdx.sys [2010-07-12 30432]
R3 AVGIDSDriver;AVGIDSDriver; C:\WINDOWS\system32\DRIVERS\AVGIDSDriver.Sys [2011-04-14 134480]
R3 AVGIDSFilter;AVGIDSFilter; C:\WINDOWS\system32\DRIVERS\AVGIDSFilter.Sys [2011-02-10 24144]
R3 AVGIDSShim;AVGIDSShim; C:\WINDOWS\system32\DRIVERS\AVGIDSShim.Sys [2011-02-10 27216]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2008-10-31 4942336]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 RTL8187B;NETGEAR WG111v3 54Mbps Wireless USB 2.0 Adapter Vista Driver; C:\WINDOWS\system32\DRIVERS\wg111v3.sys [2007-12-28 287232]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
S3 Avgfwfd;AVG network filter service; C:\WINDOWS\system32\DRIVERS\avgfwdx.sys [2010-07-12 30432]
S3 BCM43XX;ASUS 802.11 ovladač síťového adaptéru; C:\WINDOWS\system32\DRIVERS\bcmwl5.sys [2005-02-11 371712]
S3 catchme;catchme; \??\C:\DOCUME~1\JOSEFS~1\LOCALS~1\Temp\catchme.sys []
S3 gdrv;gdrv; \??\C:\WINDOWS\gdrv.sys []
S3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2008-09-11 6047904]
S3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2008-10-16 115840]
S3 usb_rndisx;Adaptér USB RNDIS; C:\WINDOWS\system32\DRIVERS\usb8023x.sys [2008-04-14 12800]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\WINDOWS\system32\DRIVERS\wdcsam.sys [2009-02-13 11520]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2009-07-02 602112]
R2 avgfws;AVG Firewall; C:\Program Files\AVG\AVG10\avgfws.exe [2011-03-09 2708024]
R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe [2011-04-18 7398752]
R2 avgwd;AVG WatchDog; C:\Program Files\AVG\AVG10\avgwdsvc.exe [2011-02-08 269520]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 WDDMService;WD SmartWare Drive Manager; C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [2010-02-26 110592]
R2 WDSmartWareBackgroundService;WD SmartWare Background Service; C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe [2009-06-16 20480]
R2 WSearch;Windows Search; C:\WINDOWS\system32\SearchIndexer.exe [2008-05-26 439808]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2009-07-02 593920]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-06-29 136176]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 AVG Security Toolbar Service;AVG Security Toolbar Service; C:\Program Files\AVG\AVG10\Toolbar\ToolbarBroker.exe [2011-07-26 1025352]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-06-29 136176]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WinRM;Windows Remote Management (WS-Management); C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Zdravím!
Poprosím o log z ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware

ComboFix 11-08-14.02 - Josef Smilek 14.08.2011 11:53:14.5.8 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.3326.2417 [GMT 2:00]
Spuštěný z: c:\documents and settings\Josef Smilek\Plocha\ComboFix.exe
AV: AVG Internet Security 2011 *Disabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
FW: AVG Firewall *Disabled* {8decf618-9569-4340-b34a-d78d28969b66}
.
VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-07-14 do 2011-08-14 )))))))))))))))))))))))))))))))
.
.
2011-08-14 08:44 . 2011-08-14 08:44 -------- d-----w- c:\program files\MALWAREBYTES ANTI-MALWARE
2011-08-14 08:15 . 2011-08-14 08:15 -------- d-----w- c:\documents and settings\Josef Smilek\Data aplikací\AVG
2011-08-14 07:48 . 2011-08-14 08:43 -------- d-----w- c:\documents and settings\Josef Smilek\Local Settings\Data aplikací\ApplicationHistory
2011-08-14 07:41 . 2011-08-14 07:41 -------- d-----w- C:\OEMSettings
2011-08-14 07:13 . 2011-08-14 07:13 -------- d-----w- c:\documents and settings\Josef Smilek\Data aplikací\Windows Search
2011-08-14 07:02 . 2011-08-14 07:18 -------- d-----w- c:\documents and settings\All Users\Data aplikací\AVG Security Toolbar
2011-08-14 07:01 . 2011-08-14 07:43 -------- d-----w- c:\windows\system32\drivers\AVG
2011-08-14 07:01 . 2011-08-14 07:02 -------- d-----w- c:\documents and settings\All Users\Data aplikací\AVG10
2011-08-14 06:54 . 2011-08-14 07:03 -------- d-----w- c:\documents and settings\All Users\Data aplikací\MFAData
2011-08-14 06:49 . 2011-08-14 06:50 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Data aplikací\Adobe
2011-08-14 06:45 . 2011-08-14 06:45 -------- d-----w- c:\program files\Microsoft Silverlight
2011-08-14 06:44 . 2011-08-14 06:44 -------- d-sh--w- c:\documents and settings\NetworkService\IETldCache
2011-08-14 06:44 . 2011-08-14 06:44 -------- d-----w- c:\windows\system32\winrm
2011-08-14 06:44 . 2011-08-14 06:44 -------- dc-h--w- c:\windows\$968930Uinstall_KB968930$
2011-08-14 06:44 . 2011-08-14 06:44 -------- d-----w- c:\documents and settings\Josef Smilek\Data aplikací\Windows Desktop Search
2011-08-14 06:43 . 2011-08-14 07:50 -------- d-----w- c:\program files\Windows Desktop Search
2011-08-14 06:43 . 2011-08-14 06:43 -------- d-----w- c:\windows\system32\GroupPolicy
2011-08-14 06:43 . 2008-03-07 17:02 98304 -c----w- c:\windows\system32\dllcache\nlhtml.dll
2011-08-14 06:43 . 2008-03-07 17:02 29696 -c----w- c:\windows\system32\dllcache\mimefilt.dll
2011-08-14 06:43 . 2008-03-07 17:02 192000 -c----w- c:\windows\system32\dllcache\offfilt.dll
2011-08-14 06:43 . 2011-08-14 06:43 -------- d-----w- c:\program files\Windows Media Connect 2
2011-08-14 06:42 . 2011-08-14 08:11 -------- d-----w- c:\windows\system32\LogFiles
2011-08-14 06:42 . 2011-08-14 06:42 -------- d-----w- c:\windows\system32\drivers\UMDF
2011-08-14 06:40 . 2011-08-14 06:40 -------- d-----w- c:\windows\system32\URTTEMP
2011-08-14 06:29 . 2011-08-14 06:29 -------- d-----w- c:\program files\CCleaner
2011-08-14 06:19 . 2011-08-14 06:19 -------- d-----w- c:\program files\NETGEAR
2011-08-14 06:19 . 2011-08-14 06:19 -------- d-----w- c:\windows\Downloaded Installations
2011-08-13 18:42 . 2011-08-13 18:42 -------- d---a-w- c:\windows\rundll16.exe
2011-08-13 18:42 . 2011-08-13 18:42 -------- d---a-w- c:\windows\logo1_.exe
2011-08-12 08:35 . 2011-08-12 08:35 -------- d--h--w- c:\windows\PIF
2011-08-12 06:54 . 2011-08-14 08:46 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-08-11 06:15 . 2011-08-14 09:31 -------- d-----w- C:\rsit
2011-08-11 06:15 . 2011-08-14 09:31 -------- d-----w- c:\program files\trend micro
2011-08-10 07:49 . 2011-08-10 07:57 -------- d-----w- C:\AVGTemp
2011-08-10 05:45 . 2011-08-10 05:45 -------- d-----w- c:\documents and settings\Josef Smilek\Data aplikací\Malwarebytes
2011-08-10 05:45 . 2011-08-10 05:45 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2011-08-10 05:38 . 2011-08-10 05:38 -------- d-----w- c:\program files\VS Revo Group
2011-08-10 02:24 . 2011-06-24 14:10 139656 -c----w- c:\windows\system32\dllcache\rdpwd.sys
2011-08-10 02:23 . 2011-07-08 14:02 10496 -c----w- c:\windows\system32\dllcache\ndistapi.sys
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-08-14 06:19 . 2009-10-08 10:59 21035 ----a-w- c:\windows\system32\drivers\AegisP.sys
2011-08-10 08:48 . 2011-08-10 08:43 578893091 ----a-w- C:\avg9.zip
2011-07-15 13:29 . 2004-08-18 12:00 456320 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-07-08 14:02 . 2004-08-18 12:00 10496 ----a-w- c:\windows\system32\drivers\ndistapi.sys
2011-06-24 14:10 . 2008-11-07 13:59 139656 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2011-06-23 18:31 . 2004-08-18 12:00 916480 ----a-w- c:\windows\system32\wininet.dll
2011-06-23 18:31 . 2004-08-18 12:00 43520 ----a-w- c:\windows\system32\licmgr10.dll
2011-06-23 18:31 . 2004-08-18 12:00 1469440 ------w- c:\windows\system32\inetcpl.cpl
2011-06-23 12:05 . 2004-08-18 12:00 385024 ----a-w- c:\windows\system32\html.iec
2011-06-20 17:44 . 2004-08-18 12:00 293376 ----a-w- c:\windows\system32\winsrv.dll
2011-06-17 07:47 . 2011-06-17 07:47 5502313 ----a-w- c:\windows\REGBK00.ZIP
2011-06-17 07:45 . 2011-06-17 07:45 632064 ----a-w- c:\windows\system32\msvcr80.dll
2011-06-17 07:45 . 2011-06-17 07:45 554240 ----a-w- c:\windows\system32\msvcp80.dll
2011-06-17 07:45 . 2011-06-17 07:45 34048 ----a-w- c:\windows\system32\eEmpty.exe
2011-06-14 04:35 . 2011-06-14 04:35 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-06-07 16:51 . 2011-06-07 16:51 770384 ----a-w- c:\windows\system32\msvcr100.dll
2011-06-06 11:35 . 2004-08-18 12:00 1858944 ----a-w- c:\windows\system32\win32k.sys
2011-05-29 16:36 . 2011-05-29 16:36 387600 ----a-w- c:\windows\system32\FTBSaver.scr
.
.
((((((((((((((((((((((((((((( SnapShot@2011-08-12_13.17.18 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-07-11 22:02 . 2009-07-11 22:02 51008 c:\windows\WinSxS\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_f0ccd4aa\vcomp90.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 59728 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90rus.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 42832 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90kor.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 43344 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90jpn.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 61264 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90ita.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 36688 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90cht.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 35648 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90chs.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 62800 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90fra.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 61760 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90esp.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 61776 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90esn.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 53568 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90enu.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 63296 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90deu.dll
+ 2009-07-11 22:05 . 2009-07-11 22:05 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfcm90u.dll
+ 2009-07-11 22:05 . 2009-07-11 22:05 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfcm90.dll
+ 2008-05-26 20:18 . 2008-05-26 20:18 56320 c:\windows\system32\xmlfilter.dll
+ 2006-09-28 16:56 . 2006-09-28 16:56 55808 c:\windows\system32\WudfSvc.dll
+ 2006-09-28 18:13 . 2006-09-28 18:13 95344 c:\windows\system32\WUDFCoinstaller.dll
+ 2009-10-09 12:56 . 2009-10-09 12:56 14848 c:\windows\system32\wsmprovhost.exe
+ 2009-10-09 12:56 . 2009-10-09 12:56 12288 c:\windows\system32\wsmplpxy.dll
+ 2006-11-02 09:51 . 2006-11-02 09:51 39936 c:\windows\system32\wpdshextres.dll
+ 2006-10-18 18:00 . 2006-10-18 18:00 17408 c:\windows\system32\wpdshextautoplay.exe
+ 2005-01-28 12:44 . 2006-10-18 19:47 63488 c:\windows\system32\wpdmtpus.dll
+ 2005-01-28 12:44 . 2006-10-18 19:47 35840 c:\windows\system32\wpdconns.dll
+ 2004-08-18 12:00 . 2007-01-05 18:57 99840 c:\windows\system32\wmpshell.dll
+ 2004-08-18 12:00 . 2006-10-18 19:47 37376 c:\windows\system32\wmdmps.dll
+ 2004-08-18 12:00 . 2006-10-18 19:47 33792 c:\windows\system32\wmdmlog.dll
+ 2009-10-09 12:56 . 2009-10-09 12:56 12288 c:\windows\system32\winrssrv.dll
+ 2009-10-09 12:56 . 2009-10-09 12:56 22528 c:\windows\system32\winrshost.exe
+ 2009-10-09 14:16 . 2009-10-09 14:16 71168 c:\windows\system32\winrs.exe
+ 2009-10-09 12:56 . 2009-10-09 12:56 25088 c:\windows\system32\winrmprov.dll
+ 2009-10-09 12:56 . 2009-10-09 12:56 24064 c:\windows\system32\WindowsPowerShell\v1.0\pwrshsip.dll
+ 2003-02-21 04:16 . 2003-02-21 04:16 49152 c:\windows\system32\URTTEMP\regtlib.exe
+ 2008-05-26 20:19 . 2008-05-26 20:19 97792 c:\windows\system32\UncCplExt.dll
+ 2008-05-26 19:59 . 2008-05-26 19:59 18904 c:\windows\system32\structuredqueryschematrivial.bin
+ 2008-11-07 14:08 . 2009-05-12 13:12 26144 c:\windows\system32\spupdsvc.exe
- 2008-11-07 14:08 . 2009-01-07 16:20 26144 c:\windows\system32\spupdsvc.exe
+ 2011-08-14 06:43 . 2009-05-12 13:12 16928 c:\windows\system32\spmsg.dll
+ 2008-05-26 20:17 . 2008-05-26 20:17 87552 c:\windows\system32\searchfilterhost.exe
+ 2008-05-26 20:18 . 2008-05-26 20:18 38400 c:\windows\system32\rtffilt.dll
+ 2009-10-09 14:16 . 2009-10-09 14:16 42496 c:\windows\system32\pwrshplugin.dll
+ 2008-05-26 20:18 . 2008-05-26 20:18 71680 c:\windows\system32\propdefs.dll
+ 2004-08-18 12:00 . 2011-08-14 07:48 71696 c:\windows\system32\perfc009.dat
+ 2004-08-18 12:00 . 2011-08-14 07:48 91658 c:\windows\system32\perfc005.dat
+ 2004-08-18 12:00 . 2009-10-08 12:57 22528 c:\windows\system32\oleaccrc.dll
+ 2008-05-26 20:19 . 2008-05-26 20:19 11264 c:\windows\system32\oephRes.dll
- 2004-08-18 12:00 . 2008-04-14 07:51 98304 c:\windows\system32\nlhtml.dll
+ 2004-08-18 12:00 . 2008-03-07 17:02 98304 c:\windows\system32\nlhtml.dll
+ 2008-05-26 20:18 . 2008-05-26 20:18 44032 c:\windows\system32\msstrc.dll
+ 2008-05-26 20:17 . 2008-05-26 20:17 32768 c:\windows\system32\mssprxy.dll
+ 2008-05-26 20:17 . 2008-05-26 20:17 87552 c:\windows\system32\mssitlb.dll
+ 2008-05-26 20:17 . 2008-05-26 20:17 11776 c:\windows\system32\msshooks.dll
+ 2008-05-26 20:17 . 2008-05-26 20:17 60416 c:\windows\system32\msscntrs.dll
+ 2008-05-26 20:17 . 2008-05-26 20:17 34816 c:\windows\system32\msscb.dll
+ 2004-08-18 12:00 . 2006-10-18 19:47 27136 c:\windows\system32\mspmsnsv.dll
- 2004-08-18 12:00 . 2008-04-14 07:51 29696 c:\windows\system32\mimefilt.dll
+ 2004-08-18 12:00 . 2008-03-07 17:02 29696 c:\windows\system32\mimefilt.dll
+ 2004-08-18 12:00 . 2006-10-18 19:47 11264 c:\windows\system32\LAPRXY.dll
+ 2006-09-28 17:00 . 2006-09-28 17:00 82944 c:\windows\system32\drivers\WudfRd.sys
+ 2006-09-28 16:55 . 2006-09-28 16:55 77568 c:\windows\system32\drivers\WudfPf.sys
+ 2005-01-28 12:44 . 2006-10-18 18:00 38528 c:\windows\system32\drivers\wpdusb.sys
+ 2007-10-09 11:13 . 2007-10-09 11:13 38144 c:\windows\system32\drivers\EAPPkt.sys
+ 2011-03-16 14:03 . 2011-03-16 14:03 32592 c:\windows\system32\drivers\avgrkx86.sys
+ 2011-03-01 12:25 . 2011-03-01 12:25 34896 c:\windows\system32\drivers\avgmfx86.sys
+ 2011-02-10 05:53 . 2011-02-10 05:53 27216 c:\windows\system32\drivers\AVGIDSShim.sys
+ 2011-02-10 05:53 . 2011-02-10 05:53 24144 c:\windows\system32\drivers\AVGIDSFilter.sys
+ 2011-02-22 06:13 . 2011-02-22 06:13 22992 c:\windows\system32\drivers\AVGIDSEH.sys
+ 2010-07-12 02:33 . 2010-07-12 02:33 30432 c:\windows\system32\drivers\avgfwdx.sys
+ 2004-08-18 12:00 . 2007-01-05 18:57 99840 c:\windows\system32\dllcache\wmpshell.dll
+ 2008-11-07 14:01 . 2007-01-05 18:56 64000 c:\windows\system32\dllcache\wmplayer.exe
+ 2008-11-07 14:01 . 2007-01-05 18:56 96256 c:\windows\system32\dllcache\wmpband.dll
+ 2004-08-18 12:00 . 2006-10-18 19:47 37376 c:\windows\system32\dllcache\wmdmps.dll
+ 2004-08-18 12:00 . 2006-10-18 19:47 33792 c:\windows\system32\dllcache\wmdmlog.dll
+ 2004-08-18 12:00 . 2009-10-08 12:57 22528 c:\windows\system32\dllcache\oleaccrc.dll
+ 2004-08-18 12:00 . 2006-10-18 19:47 27136 c:\windows\system32\dllcache\mspmsnsv.dll
+ 2004-08-18 12:00 . 2006-10-18 19:47 11264 c:\windows\system32\dllcache\LAPRXY.dll
+ 2010-07-12 02:33 . 2010-07-12 02:33 51040 c:\windows\system32\avgfwdx.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 22528 c:\windows\Microsoft.NET\Framework\v2.0.50727\MUI\0405\mscorsecr.dll
+ 2005-12-09 08:45 . 2005-12-09 08:45 82944 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - CSY\install.res.1029.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\cs\System.Web.Services.resources.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 40960 c:\windows\Microsoft.NET\Framework\v2.0.50727\cs\System.Web.Mobile.resources.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 16896 c:\windows\Microsoft.NET\Framework\v2.0.50727\cs\System.Transactions.resources.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 40960 c:\windows\Microsoft.NET\Framework\v2.0.50727\cs\System.ServiceProcess.resources.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\cs\System.Security.resources.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 11776 c:\windows\Microsoft.NET\Framework\v2.0.50727\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\cs\System.Runtime.Remoting.resources.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\cs\System.Messaging.resources.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 13312 c:\windows\Microsoft.NET\Framework\v2.0.50727\cs\System.Management.resources.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\cs\System.EnterpriseServices.resources.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 24576 c:\windows\Microsoft.NET\Framework\v2.0.50727\cs\System.Drawing.resources.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 40960 c:\windows\Microsoft.NET\Framework\v2.0.50727\cs\System.DirectoryServices.resources.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 16896 c:\windows\Microsoft.NET\Framework\v2.0.50727\cs\System.DirectoryServices.Protocols.resources.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\cs\system.data.sqlxml.resources.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 49152 c:\windows\Microsoft.NET\Framework\v2.0.50727\cs\System.Configuration.resources.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\cs\System.Configuration.Install.resources.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 10752 c:\windows\Microsoft.NET\Framework\v2.0.50727\cs\sysglobl.resources.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 86016 c:\windows\Microsoft.NET\Framework\v2.0.50727\cs\ShFusRes.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 11264 c:\windows\Microsoft.NET\Framework\v2.0.50727\cs\Regasm.Resources.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 13824 c:\windows\Microsoft.NET\Framework\v2.0.50727\cs\MSBuild.resources.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 57344 c:\windows\Microsoft.NET\Framework\v2.0.50727\cs\Microsoft.VisualBasic.resources.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 45056 c:\windows\Microsoft.NET\Framework\v2.0.50727\cs\Microsoft.JScript.resources.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 10240 c:\windows\Microsoft.NET\Framework\v2.0.50727\cs\Microsoft.Build.Utilities.Resources.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 53248 c:\windows\Microsoft.NET\Framework\v2.0.50727\cs\Microsoft.Build.Engine.resources.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\cs\caspol.resources.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 40960 c:\windows\Microsoft.NET\Framework\v2.0.50727\cs\aspnet_regsql.resources.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 76288 c:\windows\Microsoft.NET\Framework\v2.0.50727\cs\aspnet_rc.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 20480 c:\windows\Microsoft.NET\Framework\v2.0.50727\1029\alinkui.dll
+ 2004-07-15 00:11 . 2004-07-15 00:11 31744 c:\windows\Microsoft.NET\Framework\v1.1.4322\WMINet_Utils.dll
+ 2009-06-24 17:56 . 2009-06-24 17:56 73728 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe
+ 2004-07-15 12:28 . 2004-07-15 12:28 57344 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.RegularExpressions.dll
+ 2010-09-23 13:55 . 2010-09-23 13:55 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll
+ 2004-07-14 22:35 . 2004-07-14 22:35 66560 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.EnterpriseServices.Thunk.dll
+ 2003-02-21 06:26 . 2003-02-21 06:26 65536 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Drawing.Design.dll
+ 2004-07-15 12:28 . 2004-07-15 12:28 90112 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.DirectoryServices.dll
+ 2003-02-21 06:26 . 2003-02-21 06:26 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Configuration.Install.dll
+ 2003-02-21 06:25 . 2003-02-21 06:25 12288 c:\windows\Microsoft.NET\Framework\v1.1.4322\RegSvcs.exe
+ 2004-07-15 12:28 . 2004-07-15 12:28 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\RegCode.dll
+ 2003-02-21 06:25 . 2003-02-21 06:25 28672 c:\windows\Microsoft.NET\Framework\v1.1.4322\RegAsm.exe
+ 2004-07-14 22:34 . 2004-07-14 22:34 94208 c:\windows\Microsoft.NET\Framework\v1.1.4322\PerfCounter.dll
+ 2003-02-20 18:09 . 2003-02-20 18:09 73728 c:\windows\Microsoft.NET\Framework\v1.1.4322\ngen.exe
+ 2003-02-20 17:43 . 2003-02-20 17:43 22528 c:\windows\Microsoft.NET\Framework\v1.1.4322\MUI\0409\mscorsecr.dll
+ 2003-04-07 17:05 . 2003-04-07 17:05 23040 c:\windows\Microsoft.NET\Framework\v1.1.4322\MUI\0405\mscorsecr.dll
+ 2003-02-20 18:18 . 2003-02-20 18:18 20480 c:\windows\Microsoft.NET\Framework\v1.1.4322\mtxoci8.dll
+ 2010-09-23 00:26 . 2010-09-23 00:26 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
+ 2004-07-14 22:33 . 2004-07-14 22:33 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsec.dll
+ 2003-02-20 18:06 . 2003-02-20 18:06 65536 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorpe.dll
+ 2010-09-23 00:26 . 2010-09-23 00:26 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
+ 2004-07-14 22:32 . 2004-07-14 22:32 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscordbc.dll
+ 2004-07-15 12:28 . 2004-07-15 12:28 49152 c:\windows\Microsoft.NET\Framework\v1.1.4322\MigPolWin.exe
+ 2004-07-15 12:28 . 2004-07-15 12:28 49152 c:\windows\Microsoft.NET\Framework\v1.1.4322\MigPol.exe
+ 2003-02-21 06:25 . 2003-02-21 06:25 11264 c:\windows\Microsoft.NET\Framework\v1.1.4322\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2003-02-21 06:24 . 2003-02-21 06:24 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\Microsoft.Vsa.dll
+ 2003-02-21 06:24 . 2003-02-21 06:24 28672 c:\windows\Microsoft.NET\Framework\v1.1.4322\Microsoft.VisualBasic.Vsa.dll
+ 2003-02-21 06:24 . 2003-02-21 06:24 40960 c:\windows\Microsoft.NET\Framework\v1.1.4322\jsc.exe
+ 2003-02-21 06:24 . 2003-02-21 06:24 26112 c:\windows\Microsoft.NET\Framework\v1.1.4322\ISymWrapper.dll
+ 2003-02-20 18:22 . 2003-02-20 18:22 40960 c:\windows\Microsoft.NET\Framework\v1.1.4322\InstallUtilLib.dll
+ 2003-02-21 06:24 . 2003-02-21 06:24 15872 c:\windows\Microsoft.NET\Framework\v1.1.4322\InstallUtil.exe
+ 2004-07-15 12:31 . 2004-07-15 12:31 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\IEHost.dll
+ 2003-10-08 12:30 . 2003-10-08 12:30 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\gacutil.exe
+ 2003-02-21 03:12 . 2003-02-21 03:12 28672 c:\windows\Microsoft.NET\Framework\v1.1.4322\cvtres.exe
+ 2003-02-21 06:24 . 2003-02-21 06:24 33792 c:\windows\Microsoft.NET\Framework\v1.1.4322\CustomMarshalers.dll
+ 2003-02-21 06:24 . 2003-02-21 06:24 12288 c:\windows\Microsoft.NET\Framework\v1.1.4322\cscompmgd.dll
+ 2004-07-15 09:23 . 2004-07-15 09:23 49152 c:\windows\Microsoft.NET\Framework\v1.1.4322\csc.exe
+ 2003-04-07 17:31 . 2003-04-07 17:31 61440 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\System.Web.Services.resources.dll
+ 2003-04-07 17:32 . 2003-04-07 17:32 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\System.Web.Mobile.resources.dll
+ 2003-04-07 17:24 . 2003-04-07 17:24 40960 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\System.ServiceProcess.resources.dll
+ 2003-04-07 17:24 . 2003-04-07 17:24 11776 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
+ 2003-04-07 17:24 . 2003-04-07 17:24 28672 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\System.Runtime.Remoting.resources.dll
+ 2003-04-07 17:26 . 2003-04-07 17:26 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\system.resources.dll
+ 2003-04-07 17:31 . 2003-04-07 17:31 61440 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\System.Messaging.resources.dll
+ 2003-04-07 17:26 . 2003-04-07 17:26 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\System.Management.resources.dll
+ 2003-04-07 17:31 . 2003-04-07 17:31 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\System.EnterpriseServices.resources.dll
+ 2003-04-07 17:32 . 2003-04-07 17:32 13312 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\System.Drawing.resources.dll
+ 2003-04-07 17:32 . 2003-04-07 17:32 11264 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\System.DirectoryServices.resources.dll
+ 2003-04-07 17:32 . 2003-04-07 17:32 15872 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\System.Configuration.Install.resources.dll
+ 2003-04-07 17:30 . 2003-04-07 17:30 36864 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\Microsoft.VisualBasic.resources.dll
+ 2003-04-07 17:32 . 2003-04-07 17:32 45056 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\Microsoft.JScript.resources.dll
+ 2003-04-07 17:25 . 2003-04-07 17:25 10752 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\ConfigWizards.resources.dll
+ 2003-04-07 17:25 . 2003-04-07 17:25 40960 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\caspol.resources.dll
+ 2003-04-07 17:04 . 2003-04-07 17:04 40960 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\aspnet_rc.dll
+ 2010-09-23 00:26 . 2010-09-23 00:26 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
+ 2003-02-21 06:24 . 2003-02-21 06:24 49152 c:\windows\Microsoft.NET\Framework\v1.1.4322\ConfigWizards.exe
+ 2003-02-21 06:24 . 2003-02-21 06:24 94208 c:\windows\Microsoft.NET\Framework\v1.1.4322\CasPol.exe
+ 2010-09-23 01:17 . 2010-09-23 01:17 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
+ 2004-07-14 23:49 . 2004-07-14 23:49 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe
+ 2004-07-14 23:49 . 2004-07-14 23:49 20480 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_regiis.exe
+ 2003-02-20 18:19 . 2003-02-20 18:19 40960 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_rc.dll
+ 2010-09-23 01:17 . 2010-09-23 01:17 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll
+ 2003-02-21 04:00 . 2003-02-21 04:00 98304 c:\windows\Microsoft.NET\Framework\v1.1.4322\alink.dll
+ 2003-02-21 02:55 . 2003-02-21 02:55 94208 c:\windows\Microsoft.NET\Framework\v1.1.4322\1033\cscompui.dll
+ 2003-02-21 01:59 . 2003-02-21 01:59 16896 c:\windows\Microsoft.NET\Framework\v1.1.4322\1033\alinkui.dll
+ 2003-04-07 17:06 . 2003-04-07 17:06 98304 c:\windows\Microsoft.NET\Framework\v1.1.4322\1029\cscompui.dll
+ 2003-04-07 17:06 . 2003-04-07 17:06 17920 c:\windows\Microsoft.NET\Framework\v1.1.4322\1029\alinkui.dll
+ 2011-08-14 06:44 . 2011-08-14 06:44 38400 c:\windows\Installer\15850c.msi
+ 2011-08-14 06:45 . 2011-08-14 06:45 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
+ 2011-08-14 07:40 . 2011-08-14 07:40 45056 c:\windows\Installer\{5396FBD8-8BD7-47F9-92AE-F62F13D5A11D}\NewShortcut5_5396FBD88BD747F992AEF62F13D5A11D_1.exe
+ 2011-08-14 06:19 . 2011-08-14 07:40 45056 c:\windows\Installer\{5396FBD8-8BD7-47F9-92AE-F62F13D5A11D}\NewShortcut4_5396FBD88BD747F992AEF62F13D5A11D.exe
+ 2011-08-14 07:40 . 2011-08-14 07:40 45056 c:\windows\Installer\{5396FBD8-8BD7-47F9-92AE-F62F13D5A11D}\NewShortcut2_5396FBD88BD747F992AEF62F13D5A11D.exe
+ 2011-08-14 06:19 . 2011-08-14 07:40 45056 c:\windows\Installer\{5396FBD8-8BD7-47F9-92AE-F62F13D5A11D}\NewShortcut1_5396FBD88BD747F992AEF62F13D5A11D_1.exe
+ 2011-08-14 07:40 . 2011-08-14 07:40 10134 c:\windows\Installer\{5396FBD8-8BD7-47F9-92AE-F62F13D5A11D}\ARPPRODUCTICON.exe
+ 2006-12-15 09:30 . 2006-12-15 09:30 98304 c:\windows\inf\WG111v3\UScanM.exe
+ 2007-11-27 15:53 . 2007-11-27 15:53 63488 c:\windows\inf\WG111v3\SetDrv64.exe
+ 2007-11-27 15:52 . 2007-11-27 15:52 32768 c:\windows\inf\WG111v3\SetDrv.exe
+ 2006-12-15 09:30 . 2006-12-15 09:30 20480 c:\windows\inf\WG111v3\RTWUPath.exe
+ 2006-12-15 09:30 . 2006-12-15 09:30 19968 c:\windows\inf\WG111v3\RTWREFU.EXE
+ 2011-08-14 08:43 . 2011-08-14 08:43 90112 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_8e2b05fb\System.Drawing.Design.dll
+ 2011-08-14 08:43 . 2011-08-14 08:43 61440 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_0e02ee73\CustomMarshalers.dll
+ 2011-08-14 06:45 . 2011-08-14 06:45 17920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Run#\5b8d9854c1eeeeaed165b9ec7952780b\Microsoft.WSMan.Runtime.ni.dll
+ 2011-08-14 06:45 . 2011-08-14 06:45 21504 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Man#\b4e883c4ace4aeca6a1e0a0fec70da1f\Microsoft.WSMan.Management.resources.ni.dll
+ 2011-08-14 06:44 . 2011-08-14 06:44 38912 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\dd1b51ab9a5f4412298370f7027251b7\Microsoft.PowerShell.ConsoleHost.resources.ni.dll
+ 2011-08-14 06:45 . 2011-08-14 06:45 24576 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\c5f8313032bc7d9ba122ef22f5e2f584\Microsoft.PowerShell.GraphicalHost.resources.ni.dll
+ 2011-08-14 06:44 . 2011-08-14 06:44 45568 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\94974e6301893c527432938d036e1cc0\Microsoft.PowerShell.Commands.Utility.resources.ni.dll
+ 2011-08-14 06:44 . 2011-08-14 06:44 31744 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\7a8339bd2bc6c3422ca0393bbde83e45\Microsoft.PowerShell.Commands.Management.resources.ni.dll
+ 2011-08-14 06:45 . 2011-08-14 06:45 16896 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\6242ac32e5a08a83471f147f4ed9cc76\Microsoft.PowerShell.Security.resources.ni.dll
+ 2011-08-14 06:44 . 2011-08-14 06:44 18432 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\60943af49957ab751d4bd780a42ba536\Microsoft.PowerShell.Commands.Diagnostics.resources.ni.dll
+ 2011-08-14 06:45 . 2011-08-14 06:45 67072 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\43ace3c329e38641e7c81e18427c48fc\Microsoft.PowerShell.Editor.resources.ni.dll
+ 2011-08-14 06:45 . 2011-08-14 06:45 36352 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\04e90194729aa0c85d74fae7936a28b3\Microsoft.PowerShell.GPowerShell.resources.ni.dll
+ 2011-08-14 06:44 . 2011-08-14 06:44 91648 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Backgroun#\e3cfeca417f9bfb8f28862aa17e2bc54\Microsoft.BackgroundIntelligentTransfer.Management.ni.dll
+ 2011-08-14 06:44 . 2011-08-14 06:44 14848 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Backgroun#\d7315f5598961ee8fd17d7651b69e34f\Microsoft.BackgroundIntelligentTransfer.Management.resources.ni.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 77824 c:\windows\assembly\GAC_MSIL\System.Web.Services.resources\2.0.0.0_cs_b03f5f7f11d50a3a\System.Web.Services.resources.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 40960 c:\windows\assembly\GAC_MSIL\System.Web.Mobile.resources\2.0.0.0_cs_b03f5f7f11d50a3a\System.Web.Mobile.resources.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 16896 c:\windows\assembly\GAC_MSIL\System.Transactions.resources\2.0.0.0_cs_b77a5c561934e089\System.Transactions.resources.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 40960 c:\windows\assembly\GAC_MSIL\System.ServiceProcess.resources\2.0.0.0_cs_b03f5f7f11d50a3a\System.ServiceProcess.resources.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 28672 c:\windows\assembly\GAC_MSIL\System.Security.resources\2.0.0.0_cs_b03f5f7f11d50a3a\System.Security.resources.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 11776 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\2.0.0.0_cs_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 32768 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting.resources\2.0.0.0_cs_b77a5c561934e089\System.Runtime.Remoting.resources.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 77824 c:\windows\assembly\GAC_MSIL\System.Messaging.resources\2.0.0.0_cs_b03f5f7f11d50a3a\System.Messaging.resources.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 13312 c:\windows\assembly\GAC_MSIL\system.management.resources\2.0.0.0_cs_b03f5f7f11d50a3a\System.Management.resources.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 32768 c:\windows\assembly\GAC_MSIL\System.EnterpriseServices.resources\2.0.0.0_cs_b03f5f7f11d50a3a\System.EnterpriseServices.resources.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 24576 c:\windows\assembly\GAC_MSIL\System.Drawing.resources\2.0.0.0_cs_b03f5f7f11d50a3a\System.Drawing.resources.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 40960 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.resources\2.0.0.0_cs_b03f5f7f11d50a3a\System.DirectoryServices.resources.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 16896 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols.resources\2.0.0.0_cs_b03f5f7f11d50a3a\System.DirectoryServices.Protocols.resources.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 36864 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml.resources\2.0.0.0_cs_b77a5c561934e089\system.data.sqlxml.resources.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 49152 c:\windows\assembly\GAC_MSIL\system.configuration.resources\2.0.0.0_cs_b03f5f7f11d50a3a\System.Configuration.resources.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 28672 c:\windows\assembly\GAC_MSIL\System.Configuration.Install.resources\2.0.0.0_cs_b03f5f7f11d50a3a\System.Configuration.Install.resources.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 10752 c:\windows\assembly\GAC_MSIL\sysglobl.resources\2.0.0.0_cs_b03f5f7f11d50a3a\sysglobl.resources.dll
+ 2011-08-14 06:44 . 2011-08-14 06:44 13824 c:\windows\assembly\GAC_MSIL\Microsoft.WSMan.Management.resources\1.0.0.0_cs_31bf3856ad364e35\Microsoft.WSMan.Management.resources.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 57344 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_cs_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dll
+ 2011-08-14 06:44 . 2011-08-14 06:44 69632 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.Security\1.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Security.dll
+ 2011-08-14 06:44 . 2011-08-14 06:44 16896 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.GraphicalHost.resources\1.0.0.0_cs_31bf3856ad364e35\Microsoft.PowerShell.GraphicalHost.resources.dll
+ 2011-08-14 06:44 . 2011-08-14 06:44 40960 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.GPowerShell.resources\1.0.0.0_cs_31bf3856ad364e35\Microsoft.PowerShell.GPowerShell.resources.dll
+ 2011-08-14 06:44 . 2011-08-14 06:44 69632 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.Editor.resources\1.0.0.0_cs_31bf3856ad364e35\Microsoft.PowerShell.Editor.resources.dll
+ 2011-08-14 06:44 . 2011-08-14 06:44 40960 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.ConsoleHost.resources\1.0.0.0_cs_31bf3856ad364e35\Microsoft.PowerShell.ConsoleHost.resources.dll
+ 2011-08-14 06:44 . 2011-08-14 06:44 49152 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Utility.resources\1.0.0.0_cs_31bf3856ad364e35\Microsoft.PowerShell.Commands.Utility.resources.dll
+ 2011-08-14 06:44 . 2011-08-14 06:44 36864 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Management.resources\1.0.0.0_cs_31bf3856ad364e35\Microsoft.PowerShell.Commands.Management.resources.dll
+ 2011-08-14 06:44 . 2011-08-14 06:44 10752 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Diagnostics.resources\1.0.0.0_cs_31bf3856ad364e35\Microsoft.PowerShell.Commands.Diagnostics.resources.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 45056 c:\windows\assembly\GAC_MSIL\Microsoft.Jscript.resources\8.0.0.0_cs_b03f5f7f11d50a3a\Microsoft.JScript.resources.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 10240 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities.resources\2.0.0.0_cs_b03f5f7f11d50a3a\Microsoft.Build.Utilities.Resources.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 53248 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine.resources\2.0.0.0_cs_b03f5f7f11d50a3a\Microsoft.Build.Engine.resources.dll
+ 2011-08-14 06:44 . 2011-08-14 06:44 57344 c:\windows\assembly\GAC_MSIL\Microsoft.BackgroundIntelligentTransfer.Management\1.0.0.0__31bf3856ad364e35\Microsoft.BackgroundIntelligentTransfer.Management.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 61440 c:\windows\assembly\GAC\System.Web.Services.resources\1.0.5000.0_cs_b03f5f7f11d50a3a\System.Web.Services.resources.dll
+ 2011-08-14 07:48 . 2011-08-14 07:48 57344 c:\windows\assembly\GAC\System.Web.RegularExpressions\1.0.5000.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 77824 c:\windows\assembly\GAC\System.Web.Mobile.resources\1.0.5000.0_cs_b03f5f7f11d50a3a\System.Web.Mobile.resources.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 40960 c:\windows\assembly\GAC\System.ServiceProcess.resources\1.0.5000.0_cs_b03f5f7f11d50a3a\System.ServiceProcess.resources.dll
+ 2011-08-14 08:43 . 2011-08-14 08:43 81920 c:\windows\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 11776 c:\windows\assembly\GAC\System.Runtime.Serialization.Formatters.Soap.resources\1.0.5000.0_cs_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 28672 c:\windows\assembly\GAC\System.Runtime.Remoting.resources\1.0.5000.0_cs_b77a5c561934e089\System.runtime.remoting.resources.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 81920 c:\windows\assembly\GAC\System.resources\1.0.5000.0_cs_b77a5c561934e089\System.resources.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 61440 c:\windows\assembly\GAC\System.Messaging.resources\1.0.5000.0_cs_b03f5f7f11d50a3a\System.Messaging.resources.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 24576 c:\windows\assembly\GAC\system.management.resources\1.0.5000.0_cs_b03f5f7f11d50a3a\System.Management.resources.dll
+ 2011-08-14 07:48 . 2011-08-14 07:48 66560 c:\windows\assembly\GAC\System.EnterpriseServices\1.0.5000.0__b03f5f7f11d50a3a\System.EnterpriseServices.Thunk.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 32768 c:\windows\assembly\GAC\System.EnterpriseServices.resources\1.0.5000.0_cs_b03f5f7f11d50a3a\System.EnterpriseServices.resources.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 13312 c:\windows\assembly\GAC\System.Drawing.resources\1.0.5000.0_cs_b03f5f7f11d50a3a\System.Drawing.resources.dll
+ 2011-08-14 06:40 . 2011-08-14 06:40 65536 c:\windows\assembly\GAC\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
+ 2011-08-14 07:48 . 2011-08-14 07:48 90112 c:\windows\assembly\GAC\System.DirectoryServices\1.0.5000.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 11264 c:\windows\assembly\GAC\System.DirectoryServices.resources\1.0.5000.0_cs_b03f5f7f11d50a3a\System.DirectoryServices.resources.dll
+ 2011-08-14 06:40 . 2011-08-14 06:40 77824 c:\windows\assembly\GAC\System.Configuration.Install\1.0.5000.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 15872 c:\windows\assembly\GAC\System.Configuration.Install.resources\1.0.5000.0_cs_b03f5f7f11d50a3a\System.Configuration.Install.resources.dll
+ 2011-08-14 07:48 . 2011-08-14 07:48 32768 c:\windows\assembly\GAC\Regcode\1.0.5000.0__b03f5f7f11d50a3a\RegCode.dll
+ 2011-08-14 06:40 . 2011-08-14 06:40 32768 c:\windows\assembly\GAC\Microsoft.Vsa\7.0.5000.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
+ 2011-08-14 06:40 . 2011-08-14 06:40 11264 c:\windows\assembly\GAC\Microsoft.Vsa.Vb.CodeDOMProcessor\7.0.5000.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2011-08-14 06:40 . 2011-08-14 06:40 28672 c:\windows\assembly\GAC\Microsoft.VisualBasic.Vsa\7.0.5000.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 36864 c:\windows\assembly\GAC\Microsoft.VisualBasic.resources\7.0.5000.0_cs_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 45056 c:\windows\assembly\GAC\Microsoft.JScript.resources\7.0.5000.0_cs_b03f5f7f11d50a3a\Microsoft.Jscript.resources.dll
+ 2011-08-14 06:40 . 2011-08-14 06:40 26112 c:\windows\assembly\GAC\ISymWrapper\1.0.5000.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2011-08-14 07:48 . 2011-08-14 07:48 32768 c:\windows\assembly\GAC\IEHost\1.0.5000.0__b03f5f7f11d50a3a\IEHost.dll
+ 2011-08-14 06:40 . 2011-08-14 06:40 33792 c:\windows\assembly\GAC\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2011-08-14 06:40 . 2011-08-14 06:40 12288 c:\windows\assembly\GAC\cscompmgd\7.0.5000.0__b03f5f7f11d50a3a\cscompmgd.dll
+ 2009-10-09 12:57 . 2009-10-09 12:57 20480 c:\windows\$968930Uinstall_KB968930$\PSCustomSetupUtil.exe
+ 2004-08-18 12:00 . 2006-10-18 19:47 4096 c:\windows\system32\wmvdmoe2.dll
+ 2004-08-18 12:00 . 2006-10-18 19:47 4096 c:\windows\system32\wmvdmod.dll
+ 2005-01-28 12:44 . 2006-10-18 19:47 4096 c:\windows\system32\WMVADVE.DLL
+ 2005-01-28 12:44 . 2006-10-18 19:47 4096 c:\windows\system32\WMVADVD.dll
+ 2004-08-18 12:00 . 2006-10-18 19:47 4096 c:\windows\system32\wmsdmoe2.dll
+ 2004-08-18 12:00 . 2006-10-18 19:47 4096 c:\windows\system32\wmsdmod.dll
+ 2009-10-09 12:56 . 2009-10-09 12:56 2048 c:\windows\system32\winrsmgr.dll
+ 2009-10-09 14:16 . 2009-10-09 14:16 4608 c:\windows\system32\WindowsPowerShell\v1.0\pwrshmsg.dll
+ 2009-10-09 14:16 . 2009-10-09 14:16 4096 c:\windows\system32\WindowsPowerShell\v1.0\cs\powershell_ise.resources.dll
+ 2005-01-28 12:44 . 2006-10-18 19:58 8704 c:\windows\system32\wdfmgr.exe
+ 2005-01-28 12:44 . 2006-10-18 19:47 4096 c:\windows\system32\wdfapi.dll
+ 2005-01-28 12:44 . 2006-10-18 19:58 8704 c:\windows\system32\uwdf.exe
+ 2008-05-26 20:19 . 2008-05-26 20:19 2048 c:\windows\system32\UncRes.dll
+ 2003-02-20 17:43 . 2003-02-20 17:43 4096 c:\windows\system32\mui\0409\mscoreer.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 6656 c:\windows\system32\mui\0405\mscorees.dll
+ 2003-04-07 17:05 . 2003-04-07 17:05 4096 c:\windows\system32\mui\0405\mscoreer.dll
+ 2004-08-18 12:00 . 2006-10-18 19:47 4096 c:\windows\system32\MPG4DMOD.dll
+ 2004-08-18 12:00 . 2006-10-18 19:47 4096 c:\windows\system32\MP4SDMOD.dll
+ 2004-08-18 12:00 . 2006-10-18 19:47 4096 c:\windows\system32\MP43DMOD.dll
+ 2004-08-18 12:00 . 2006-10-18 19:47 4096 c:\windows\system32\dllcache\wmvdmoe2.dll
+ 2004-08-18 12:00 . 2006-10-18 19:47 4096 c:\windows\system32\dllcache\wmvdmod.dll
+ 2004-08-18 12:00 . 2006-10-18 19:47 4096 c:\windows\system32\dllcache\wmsdmoe2.dll
+ 2004-08-18 12:00 . 2006-10-18 19:47 4096 c:\windows\system32\dllcache\wmsdmod.dll
+ 2004-08-18 12:00 . 2006-10-18 19:47 4096 c:\windows\system32\dllcache\MPG4DMOD.dll
+ 2004-08-18 12:00 . 2006-10-18 19:47 4096 c:\windows\system32\dllcache\MP4SDMOD.dll
+ 2004-08-18 12:00 . 2006-10-18 19:47 4096 c:\windows\system32\dllcache\MP43DMOD.dll
+ 2009-10-09 12:23 . 2010-10-18 11:10 7680 c:\windows\system32\dllcache\iecompat.dll
+ 2004-08-18 12:00 . 2007-01-05 18:50 6656 c:\windows\system32\dllcache\asferror.dll
+ 2004-08-18 12:00 . 2007-01-05 18:50 6656 c:\windows\system32\asferror.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 9216 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC\CS\Microsoft.VisualBasic.Compatibility.resources.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 8704 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC\CS\Microsoft.VisualBasic.Compatibility.Data.resources.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 6144 c:\windows\Microsoft.NET\Framework\v2.0.50727\cs\System.Drawing.Design.resources.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 7168 c:\windows\Microsoft.NET\Framework\v2.0.50727\cs\JSC.resources.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 4096 c:\windows\Microsoft.NET\Framework\v2.0.50727\cs\InstallUtil.resources.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 5632 c:\windows\Microsoft.NET\Framework\v2.0.50727\cs\aspnet_regbrowsers.resources.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 8704 c:\windows\Microsoft.NET\Framework\v2.0.50727\cs\aspnet_compiler.resources.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 5120 c:\windows\Microsoft.NET\Framework\v2.0.50727\1029\CvtResUI.dll
+ 2003-02-20 18:09 . 2003-02-20 18:09 9216 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscortim.dll
+ 2003-02-21 06:25 . 2003-02-21 06:25 6656 c:\windows\Microsoft.NET\Framework\v1.1.4322\Microsoft_VsaVb.dll
+ 2003-02-21 06:25 . 2003-02-21 06:25 6144 c:\windows\Microsoft.NET\Framework\v1.1.4322\Microsoft.VisualC.Dll
+ 2003-02-21 06:24 . 2003-02-21 06:24 4608 c:\windows\Microsoft.NET\Framework\v1.1.4322\IIEHost.dll
+ 2004-07-15 12:31 . 2004-07-15 12:31 8192 c:\windows\Microsoft.NET\Framework\v1.1.4322\IEExecRemote.dll
+ 2003-02-21 06:24 . 2003-02-21 06:24 7680 c:\windows\Microsoft.NET\Framework\v1.1.4322\IEExec.exe
+ 2003-04-07 17:32 . 2003-04-07 17:32 7680 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\System.Security.resources.dll
+ 2003-04-07 17:32 . 2003-04-07 17:32 6144 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\System.Drawing.Design.resources.dll
+ 2003-04-07 17:22 . 2003-04-07 17:22 9728 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\RegCode.resources.dll
+ 2003-04-07 17:25 . 2003-04-07 17:25 9728 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\Regasm.Resources.dll
+ 2003-04-07 17:23 . 2003-04-07 17:23 8192 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\JSC.resources.dll
+ 2003-04-07 17:25 . 2003-04-07 17:25 4608 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\InstallUtil.resources.dll
+ 2003-02-21 06:24 . 2003-02-21 06:24 7680 c:\windows\Microsoft.NET\Framework\v1.1.4322\Accessibility.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 6144 c:\windows\assembly\GAC_MSIL\System.Drawing.Design.resources\2.0.0.0_cs_b03f5f7f11d50a3a\System.Drawing.Design.resources.dll
+ 2011-08-14 06:44 . 2011-08-14 06:44 7168 c:\windows\assembly\GAC_MSIL\Microsoft.WSMan.Runtime\1.0.0.0__31bf3856ad364e35\Microsoft.WSMan.Runtime.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 9216 c:\windows\assembly\GAC_MSIL\microsoft.visualbasic.compatibility.resources\8.0.0.0_cs_b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.resources.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 8704 c:\windows\assembly\GAC_MSIL\microsoft.visualbasic.compatibility.data.resources\8.0.0.0_cs_b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.resources.dll
+ 2011-08-14 06:44 . 2011-08-14 06:44 9216 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.Security.resources\1.0.0.0_cs_31bf3856ad364e35\Microsoft.PowerShell.Security.resources.dll
+ 2011-08-14 06:44 . 2011-08-14 06:44 7168 c:\windows\assembly\GAC_MSIL\Microsoft.BackgroundIntelligentTransfer.Management.resources\1.0.0.0_cs_31bf3856ad364e35\Microsoft.BackgroundIntelligentTransfer.Management.resources.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 7680 c:\windows\assembly\GAC\System.Security.resources\1.0.5000.0_cs_b03f5f7f11d50a3a\System.Security.resources.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 6144 c:\windows\assembly\GAC\System.Drawing.Design.resources\1.0.5000.0_cs_b03f5f7f11d50a3a\System.Drawing.design.resources.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 9728 c:\windows\assembly\GAC\Regcode.resources\1.0.5000.0_cs_b03f5f7f11d50a3a\RegCode.resources.dll
+ 2011-08-14 06:40 . 2011-08-14 06:40 6656 c:\windows\assembly\GAC\Microsoft_VsaVb\7.0.5000.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
+ 2011-08-14 06:40 . 2011-08-14 06:40 6144 c:\windows\assembly\GAC\Microsoft.VisualC\7.0.5000.0__b03f5f7f11d50a3a\Microsoft.VisualC.dll
+ 2011-08-14 06:40 . 2011-08-14 06:40 4608 c:\windows\assembly\GAC\IIEHost\1.0.5000.0__b03f5f7f11d50a3a\IIEHost.dll
+ 2011-08-14 07:48 . 2011-08-14 07:48 8192 c:\windows\assembly\GAC\IEExecRemote\1.0.5000.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2011-08-14 06:40 . 2011-08-14 06:40 7680 c:\windows\assembly\GAC\Accessibility\1.0.5000.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2009-10-09 12:56 . 2009-10-09 12:56 9216 c:\windows\$968930Uinstall_KB968930$\PSSetupNativeUtils.exe
+ 2009-07-11 22:02 . 2009-07-11 22:02 653120 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcr90.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 569664 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcp90.dll
+ 2009-07-11 22:05 . 2009-07-11 22:05 225280 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcm90.dll
+ 2006-09-28 16:56 . 2006-09-28 16:56 316416 c:\windows\system32\WUDFx.dll
+ 2006-09-28 16:56 . 2006-09-28 16:56 165376 c:\windows\system32\WudfPlatform.dll
+ 2006-09-28 16:56 . 2006-09-28 16:56 146432 c:\windows\system32\WudfHost.exe
+ 2009-10-09 12:56 . 2009-10-09 12:56 209408 c:\windows\system32\WsmWmiPl.dll
+ 2009-10-09 14:16 . 2009-10-09 14:16 363520 c:\windows\system32\WsmRes.dll
+ 2009-10-09 12:56 . 2009-10-09 12:56 139776 c:\windows\system32\WsmAuto.dll
+ 2009-10-09 12:56 . 2009-10-09 12:56 225280 c:\windows\system32\wsmanhttpconfig.exe
+ 2005-01-28 12:44 . 2006-10-18 19:47 356352 c:\windows\system32\wpdsp.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 133632 c:\windows\system32\WPDShServiceObj.dll
+ 2005-01-28 12:44 . 2006-10-18 19:47 154624 c:\windows\system32\wpdmtp.dll
+ 2005-01-28 12:44 . 2006-10-18 19:47 629760 c:\windows\system32\wpd_ci.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 656896 c:\windows\system32\WMVXENCD.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 767488 c:\windows\system32\WMVSENCD.dll
+ 2004-08-18 12:00 . 2009-04-01 21:02 604160 c:\windows\system32\wmspdmod.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 204288 c:\windows\system32\wmpsrcwp.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 130048 c:\windows\system32\wmpps.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 613376 c:\windows\system32\wmpmde.dll
+ 2006-10-18 19:47 . 2008-06-24 16:12 295936 c:\windows\system32\wmpeffects.dll
+ 2004-08-18 12:00 . 2009-07-13 21:43 286208 c:\windows\system32\wmpdxm.dll
+ 2004-08-18 12:00 . 2006-10-18 19:47 242688 c:\windows\system32\wmpasf.dll
+ 2004-08-18 12:00 . 2008-06-18 03:03 938496 c:\windows\system32\WMNetmgr.dll
+ 2004-08-18 12:00 . 2006-10-18 19:47 157184 c:\windows\system32\wmidx.dll
+ 2004-08-18 12:00 . 2007-01-05 18:55 238592 c:\windows\system32\wmerror.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 535040 c:\windows\system32\wmdrmsdk.dll
+ 2005-01-28 12:44 . 2006-10-18 19:47 348672 c:\windows\system32\wmdrmnet.dll
+ 2005-01-28 12:44 . 2006-10-18 19:47 429056 c:\windows\system32\wmdrmdev.dll
+ 2004-08-18 12:00 . 2007-10-25 07:28 222720 c:\windows\system32\wmasf.dll
+ 2004-08-18 12:00 . 2006-10-18 19:47 757248 c:\windows\system32\WMADMOD.dll
+ 2009-10-09 12:56 . 2009-10-09 12:56 233984 c:\windows\system32\winrscmd.dll
+ 2009-07-31 21:27 . 2009-07-31 21:27 201184 c:\windows\system32\winrm.vbs
+ 2009-10-09 14:16 . 2009-10-09 14:16 148480 c:\windows\system32\WindowsPowerShell\v1.0\pspluginwkr.dll
+ 2009-10-09 12:57 . 2009-10-09 12:57 204800 c:\windows\system32\WindowsPowerShell\v1.0\powershell_ise.exe
+ 2009-10-09 12:56 . 2009-10-09 12:56 448000 c:\windows\system32\WindowsPowerShell\v1.0\powershell.exe
+ 2009-10-09 12:57 . 2009-10-09 12:57 112640 c:\windows\system32\WindowsPowerShell\v1.0\Modules\BitsTransfer\microsoft.backgroundintelligenttransfer.management.interop.dll
+ 2009-07-16 08:22 . 2009-07-16 08:22 126976 c:\windows\system32\WindowsPowerShell\v1.0\CompiledComposition.Microsoft.PowerShell.GPowerShell.dll
+ 2009-10-09 14:16 . 2009-10-09 14:16 178176 c:\windows\system32\wevtfwd.dll
+ 2008-05-26 20:19 . 2008-05-26 20:19 131072 c:\windows\system32\UncPH.dll
+ 2008-05-26 20:19 . 2008-05-26 20:19 108032 c:\windows\system32\UncNE.dll
+ 2008-05-26 20:19 . 2008-05-26 20:19 143872 c:\windows\system32\UncDMS.dll
+ 2008-07-29 17:59 . 2009-10-08 12:57 613376 c:\windows\system32\uiautomationcore.dll
+ 2008-05-26 19:59 . 2008-05-26 19:59 106605 c:\windows\system32\structuredqueryschema.bin
+ 2008-05-26 20:17 . 2008-05-26 20:17 301568 c:\windows\system32\srchadmin.dll
+ 2008-05-26 20:18 . 2008-05-26 20:18 184832 c:\windows\system32\searchprotocolhost.exe
+ 2008-05-26 20:18 . 2008-05-26 20:18 439808 c:\windows\system32\searchindexer.exe
+ 2004-08-18 12:00 . 2006-10-18 19:47 211456 c:\windows\system32\qasf.dll
+ 2008-05-26 20:17 . 2008-05-26 20:17 754176 c:\windows\system32\propsys.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 199168 c:\windows\system32\PortableDeviceWMDRM.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 132096 c:\windows\system32\PortableDeviceWiaCompat.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 166912 c:\windows\system32\PortableDeviceTypes.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 101888 c:\windows\system32\PortableDeviceClassExtension.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 284160 c:\windows\system32\PortableDeviceApi.dll
+ 2004-08-18 12:00 . 2011-08-14 07:48 441378 c:\windows\system32\perfh009.dat
+ 2004-08-18 12:00 . 2011-08-14 07:48 458990 c:\windows\system32\perfh005.dat
+ 2004-08-18 12:00 . 2009-10-08 12:57 220160 c:\windows\system32\oleacc.dll
+ 2004-08-18 12:00 . 2008-03-07 17:02 192000 c:\windows\system32\offfilt.dll
- 2004-08-18 12:00 . 2008-04-14 07:51 192000 c:\windows\system32\offfilt.dll
+ 2008-05-26 20:19 . 2008-05-26 20:19 273408 c:\windows\system32\oeph.dll
+ 2004-08-18 12:00 . 2006-10-18 19:47 321536 c:\windows\system32\mswmdm.dll
+ 2008-05-26 20:18 . 2008-05-26 20:18 203776 c:\windows\system32\mssphtb.dll
+ 2008-05-26 20:18 . 2009-05-24 22:24 350208 c:\windows\system32\mssph.dll
+ 2008-05-26 20:18 . 2008-05-26 20:18 231936 c:\windows\system32\msshsq.dll
+ 2004-08-18 12:00 . 2006-12-04 14:21 414720 c:\windows\system32\msscp.dll
+ 2004-08-18 12:00 . 2006-10-18 19:47 175616 c:\windows\system32\mspmsp.dll
+ 2004-08-18 12:00 . 2006-10-18 19:47 179712 c:\windows\system32\msnetobj.dll
+ 2006-10-02 13:28 . 2006-10-02 13:28 312128 c:\windows\system32\msdelta.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 259072 c:\windows\system32\MPG4DECD.dll
+ 2006-10-18 19:47 . 2010-03-30 10:24 317440 c:\windows\system32\mp4sdecd.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 259072 c:\windows\system32\MP43DECD.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 212992 c:\windows\system32\MFPLAT.dll
+ 2004-08-18 12:00 . 2008-06-17 23:09 100864 c:\windows\system32\logagent.exe
+ 2004-08-18 12:00 . 2006-10-18 19:47 991744 c:\windows\system32\drmv2clt.dll
+ 2006-10-18 18:00 . 2006-10-18 18:00 249856 c:\windows\system32\drmupgds.exe
+ 2007-12-28 13:02 . 2007-12-28 13:02 287232 c:\windows\system32\drivers\wg111v3.sys
+ 2006-10-18 19:47 . 2006-10-18 19:47 671232 c:\windows\system32\drivers\UMDF\wpdmtpdr.dll
+ 2011-04-04 22:59 . 2011-04-04 22:59 297168 c:\windows\system32\drivers\avgtdix.sys
+ 2011-01-07 04:41 . 2011-01-07 04:41 248656 c:\windows\system32\drivers\avgldx86.sys
+ 2011-04-14 19:28 . 2011-04-14 19:28 134480 c:\windows\system32\drivers\AVGIDSDriver.sys
+ 2004-08-18 12:00 . 2009-04-01 21:02 604160 c:\windows\system32\dllcache\wmspdmod.dll
+ 2004-08-18 12:00 . 2009-07-13 21:43 286208 c:\windows\system32\dllcache\wmpdxm.dll
+ 2004-08-18 12:00 . 2006-10-18 19:47 242688 c:\windows\system32\dllcache\wmpasf.dll
+ 2004-08-18 12:00 . 2008-06-18 03:03 938496 c:\windows\system32\dllcache\WMNetmgr.dll
+ 2004-08-18 12:00 . 2006-10-18 19:47 157184 c:\windows\system32\dllcache\wmidx.dll
+ 2004-08-18 12:00 . 2007-01-05 18:55 238592 c:\windows\system32\dllcache\wmerror.dll
+ 2004-08-18 12:00 . 2007-10-25 07:28 222720 c:\windows\system32\dllcache\wmasf.dll
+ 2004-08-18 12:00 . 2006-10-18 19:47 757248 c:\windows\system32\dllcache\WMADMOD.dll
+ 2004-08-18 12:00 . 2007-06-27 13:31 317952 c:\windows\system32\dllcache\unregmp2.exe
+ 2004-08-18 12:00 . 2006-10-18 19:47 211456 c:\windows\system32\dllcache\qasf.dll
+ 2004-08-18 12:00 . 2009-10-08 12:57 220160 c:\windows\system32\dllcache\oleacc.dll
+ 2004-08-18 12:00 . 2006-10-18 19:47 321536 c:\windows\system32\dllcache\mswmdm.dll
+ 2004-08-18 12:00 . 2006-12-04 14:21 414720 c:\windows\system32\dllcache\msscp.dll
+ 2004-08-18 12:00 . 2006-10-18 19:47 175616 c:\windows\system32\dllcache\mspmsp.dll
+ 2004-08-18 12:00 . 2006-10-18 19:47 179712 c:\windows\system32\dllcache\msnetobj.dll
+ 2008-11-07 14:01 . 2007-01-05 18:51 244224 c:\windows\system32\dllcache\mpvis.dll
+ 2010-03-30 10:24 . 2010-03-30 10:24 317440 c:\windows\system32\dllcache\mp4sdecd.dll
+ 2004-08-18 12:00 . 2008-06-17 23:09 100864 c:\windows\system32\dllcache\logagent.exe
+ 2004-08-18 12:00 . 2006-10-18 19:47 991744 c:\windows\system32\dllcache\drmv2clt.dll
+ 2004-08-18 12:00 . 2008-04-14 07:51 640000 c:\windows\system32\dllcache\dbghelp.dll
+ 2004-08-18 12:00 . 2006-10-18 19:47 229376 c:\windows\system32\dllcache\cewmdm.dll
+ 2004-08-18 12:00 . 2006-10-18 19:47 542720 c:\windows\system32\dllcache\blackbox.dll
- 2010-01-13 04:59 . 2009-11-21 16:03 471552 c:\windows\system32\dllcache\aclayers.dll
+ 2010-01-13 04:59 . 2011-03-11 14:10 471552 c:\windows\system32\dllcache\aclayers.dll
+ 2004-08-18 12:00 . 2006-10-18 19:47 229376 c:\windows\system32\cewmdm.dll
+ 2004-08-18 12:00 . 2006-10-18 19:47 542720 c:\windows\system32\blackbox.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 276992 c:\windows\system32\audiodev.dll
+ 2005-12-09 10:26 . 2005-12-09 10:26 245408 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - CSY\unicows.dll
+ 2005-12-09 08:45 . 2005-12-09 08:45 609472 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - CSY\install.exe
+ 2005-12-20 16:13 . 2005-12-20 16:13 159744 c:\windows\Microsoft.NET\Framework\v2.0.50727\cs\System.xml.resources.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 425984 c:\windows\Microsoft.NET\Framework\v2.0.50727\cs\System.Windows.Forms.resources.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 593920 c:\windows\Microsoft.NET\Framework\v2.0.50727\cs\System.Web.resources.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 204800 c:\windows\Microsoft.NET\Framework\v2.0.50727\cs\system.resources.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 536576 c:\windows\Microsoft.NET\Framework\v2.0.50727\cs\System.Design.resources.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 380928 c:\windows\Microsoft.NET\Framework\v2.0.50727\cs\System.Deployment.resources.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 327680 c:\windows\Microsoft.NET\Framework\v2.0.50727\cs\System.Data.resources.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\cs\System.Data.OracleClient.resources.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 365056 c:\windows\Microsoft.NET\Framework\v2.0.50727\cs\mscorrc.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 303104 c:\windows\Microsoft.NET\Framework\v2.0.50727\cs\mscorlib.resources.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 135168 c:\windows\Microsoft.NET\Framework\v2.0.50727\cs\Microsoft.Build.Tasks.resources.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 311296 c:\windows\Microsoft.NET\Framework\v2.0.50727\cs\aspnetmmcext.resources.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 208896 c:\windows\Microsoft.NET\Framework\v2.0.50727\1029\Vsavb7rtUI.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 188416 c:\windows\Microsoft.NET\Framework\v2.0.50727\1029\vbc7ui.dll
+ 2005-12-20 16:13 . 2005-12-20 16:13 141824 c:\windows\Microsoft.NET\Framework\v2.0.50727\1029\cscompui.dll
+ 2004-07-15 09:23 . 2004-07-15 09:23 737280 c:\windows\Microsoft.NET\Framework\v1.1.4322\vbc.exe
+ 2004-07-15 12:31 . 2004-07-15 12:31 573440 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.Services.dll
+ 2004-07-15 12:28 . 2004-07-15 12:28 819200 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.Mobile.dll
+ 2004-07-15 12:28 . 2004-07-15 12:28 126976 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.ServiceProcess.dll
+ 2004-07-15 12:31 . 2004-07-15 12:31 131072 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Runtime.Serialization.Formatters.Soap.dll
+ 2004-07-15 12:28 . 2004-07-15 12:28 323584 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Runtime.Remoting.dll
+ 2004-07-15 12:31 . 2004-07-15 12:31 241664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Messaging.dll
+ 2004-07-15 12:31 . 2004-07-15 12:31 372736 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Management.dll
+ 2004-07-15 12:28 . 2004-07-15 12:28 241664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.EnterpriseServices.dll
+ 2004-07-15 12:28 . 2004-07-15 12:28 466944 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Drawing.dll
+ 2004-07-15 12:31 . 2004-07-15 12:31 303104 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Data.OracleClient.dll
+ 2004-07-14 22:35 . 2004-07-14 22:35 319488 c:\windows\Microsoft.NET\Framework\v1.1.4322\SOS.dll
+ 2003-02-20 18:09 . 2003-02-20 18:09 122880 c:\windows\Microsoft.NET\Framework\v1.1.4322\shfusres.dll
+ 2003-02-20 18:09 . 2003-02-20 18:09 253952 c:\windows\Microsoft.NET\Framework\v1.1.4322\shfusion.dll
+ 2004-08-10 14:20 . 2004-08-10 14:20 106496 c:\windows\Microsoft.NET\Framework\v1.1.4322\netfxupdate.exe
+ 2003-02-21 03:42 . 2003-02-21 03:42 348160 c:\windows\Microsoft.NET\Framework\v1.1.4322\msvcr71.dll
+ 2004-07-14 22:33 . 2004-07-14 22:33 143360 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorrc.dll
+ 2003-02-20 17:43 . 2003-02-20 17:43 131072 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscormmc.dll
+ 2010-09-23 00:26 . 2010-09-23 00:26 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
+ 2010-09-23 00:25 . 2010-09-23 00:25 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
+ 2004-07-14 22:32 . 2004-07-14 22:32 233472 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscordbi.dll
+ 2004-07-15 12:28 . 2004-07-15 12:28 299008 c:\windows\Microsoft.NET\Framework\v1.1.4322\Microsoft.VisualBasic.dll
+ 2004-07-15 12:28 . 2004-07-15 12:28 720896 c:\windows\Microsoft.NET\Framework\v1.1.4322\Microsoft.JScript.dll
+ 2004-07-14 22:35 . 2004-07-14 22:35 196608 c:\windows\Microsoft.NET\Framework\v1.1.4322\ilasm.exe
+ 2004-07-14 22:24 . 2004-07-14 22:24 282624 c:\windows\Microsoft.NET\Framework\v1.1.4322\fusion.dll
+ 2003-02-20 18:16 . 2003-02-20 18:16 798720 c:\windows\Microsoft.NET\Framework\v1.1.4322\EventLogMessages.dll
+ 2003-02-21 09:21 . 2003-02-21 09:21 524288 c:\windows\Microsoft.NET\Framework\v1.1.4322\diasymreader.dll
+ 2004-07-15 09:23 . 2004-07-15 09:23 626688 c:\windows\Microsoft.NET\Framework\v1.1.4322\cscomp.dll
+ 2003-04-07 17:32 . 2003-04-07 17:32 110592 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\System.xml.resources.dll
+ 2003-04-07 17:23 . 2003-04-07 17:23 180224 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\System.Windows.Forms.resources.dll
+ 2003-04-07 17:31 . 2003-04-07 17:31 122880 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\System.Web.resources.dll
+ 2003-04-07 17:24 . 2003-04-07 17:24 139264 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\System.Design.resources.dll
+ 2003-04-07 17:32 . 2003-04-07 17:32 118784 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\System.Data.resources.dll
+ 2003-04-07 17:05 . 2003-04-07 17:05 122880 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\ShFusRes.dll
+ 2003-04-07 17:04 . 2003-04-07 17:04 159744 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\mscorrc.dll
+ 2003-04-07 17:32 . 2003-04-07 17:32 229376 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\mscorlib.resources.dll
+ 2003-04-07 17:25 . 2003-04-07 17:25 720896 c:\windows\Microsoft.NET\Framework\v1.1.4322\cs\mscorcfg.resources.dll
+ 2002-07-29 10:11 . 2002-07-29 10:11 219136 c:\windows\Microsoft.NET\Framework\v1.1.4322\c_g18030.dll
+ 2010-09-23 01:17 . 2010-09-23 01:17 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
+ 2003-02-21 04:04 . 2003-02-21 04:04 155648 c:\windows\Microsoft.NET\Framework\v1.1.4322\1033\Vsavb7rtUI.dll
+ 2003-02-21 02:02 . 2003-02-21 02:02 131072 c:\windows\Microsoft.NET\Framework\v1.1.4322\1033\vbc7ui.dll
+ 2003-04-07 17:04 . 2003-04-07 17:04 163840 c:\windows\Microsoft.NET\Framework\v1.1.4322\1029\Vsavb7rtUI.dll
+ 2003-04-07 17:06 . 2003-04-07 17:06 139264 c:\windows\Microsoft.NET\Framework\v1.1.4322\1029\vbc7ui.dll
+ 2011-08-14 07:00 . 2011-08-14 07:00 219648 c:\windows\Installer\d2e95.msi
+ 2011-08-14 06:41 . 2011-08-14 06:41 672256 c:\windows\Installer\122c13.msi
+ 2011-08-14 06:41 . 2011-08-14 06:41 256512 c:\windows\Installer\122c0d.msi
+ 2007-12-28 13:02 . 2007-12-28 13:02 287232 c:\windows\inf\WG111v3\wg111v3.sys
+ 2007-12-28 12:59 . 2007-12-28 12:59 342528 c:\windows\inf\WG111v3\Vista64\wg111v3.sys
+ 2006-12-15 09:30 . 2006-12-15 09:30 315392 c:\windows\inf\WG111v3\InstallDriver.exe
+ 2006-12-15 09:30 . 2006-12-15 09:30 212992 c:\windows\inf\WG111v3\CopyWHQLDriver.exe
+ 2004-08-18 12:00 . 2007-06-27 13:31 317952 c:\windows\inf\unregmp2.exe

c:\windows\ie8updates\KB2447568-IE8\spuninst\updspapi.dll
+ 2011-08-14 06:44 . 2010-02-22 14:20 233848 c:\windows\ie8updates\KB2447568-IE8\spuninst\spuninst.exe
+ 2011-08-14 06:44 . 2009-08-07 08:48 100352 c:\windows\ie8updates\KB2447568-IE8\iecompat.dll
+ 2011-08-14 08:43 . 2011-08-14 08:43 835584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_c97e119c\System.Drawing.dll
+ 2011-08-14 08:43 . 2011-08-14 08:43 192512 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_c8934862\System.Drawing.Design.dll
+ 2011-08-14 08:43 . 2011-08-14 08:43 118784 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_545343a1\CustomMarshalers.dll
+ 2011-08-14 06:45 . 2011-08-14 06:45 250368 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.A#\0965ee82728e18ca01487dc1a1230254\System.Management.Automation.resources.ni.dll
+ 2011-08-14 06:45 . 2011-08-14 06:45 508928 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Man#\f6cf16436722ee50cc59d649ccb1eaa4\Microsoft.WSMan.Management.ni.dll
+ 2011-08-14 06:44 . 2011-08-14 06:44 291328 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\dff853661ba7069c76ac4cb6c46848cb\Microsoft.PowerShell.Commands.Diagnostics.ni.dll
+ 2011-08-14 06:44 . 2011-08-14 06:44 737792 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\ab200fa61ac31a20e0f6732ccd730a2c\Microsoft.PowerShell.Commands.Management.ni.dll
+ 2011-08-14 06:45 . 2011-08-14 06:45 729600 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\8d5894ec85509cf78703ea1bee1fc80c\Microsoft.PowerShell.GraphicalHost.ni.dll
+ 2011-08-14 06:45 . 2011-08-14 06:45 156160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\6d8c4d87787f216de0dad380b900e1aa\Microsoft.PowerShell.Security.ni.dll
+ 2011-08-14 06:44 . 2011-08-14 06:44 515584 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\3afddd7d0aa6f1dd5a33388b9dc07f5a\Microsoft.PowerShell.ConsoleHost.ni.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 159744 c:\windows\assembly\GAC_MSIL\System.XML.resources\2.0.0.0_cs_b77a5c561934e089\System.xml.resources.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 425984 c:\windows\assembly\GAC_MSIL\System.Windows.Forms.resources\2.0.0.0_cs_b77a5c561934e089\System.Windows.Forms.resources.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 593920 c:\windows\assembly\GAC_MSIL\System.Web.resources\2.0.0.0_cs_b03f5f7f11d50a3a\System.Web.resources.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 204800 c:\windows\assembly\GAC_MSIL\System.resources\2.0.0.0_cs_b77a5c561934e089\system.resources.dll
+ 2011-08-14 06:44 . 2011-08-14 06:44 253952 c:\windows\assembly\GAC_MSIL\System.Management.Automation.resources\1.0.0.0_cs_31bf3856ad364e35\System.Management.Automation.resources.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 536576 c:\windows\assembly\GAC_MSIL\System.Design.resources\2.0.0.0_cs_b03f5f7f11d50a3a\System.Design.resources.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 380928 c:\windows\assembly\GAC_MSIL\System.Deployment.resources\2.0.0.0_cs_b03f5f7f11d50a3a\System.Deployment.resources.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 327680 c:\windows\assembly\GAC_MSIL\System.Data.resources\2.0.0.0_cs_b77a5c561934e089\System.Data.resources.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 110592 c:\windows\assembly\GAC_MSIL\System.Data.OracleClient.resources\2.0.0.0_cs_b77a5c561934e089\System.Data.OracleClient.resources.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 303104 c:\windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_cs_b77a5c561934e089\mscorlib.resources.dll
+ 2011-08-14 06:44 . 2011-08-14 06:44 274432 c:\windows\assembly\GAC_MSIL\Microsoft.WSMan.Management\1.0.0.0__31bf3856ad364e35\Microsoft.WSMan.Management.dll
+ 2011-08-14 06:44 . 2011-08-14 06:44 278528 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.GraphicalHost\1.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.GraphicalHost.dll
+ 2011-08-14 06:44 . 2011-08-14 06:44 651264 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.GPowerShell\1.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.GPowerShell.dll
+ 2011-08-14 06:44 . 2011-08-14 06:44 991232 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.Editor\1.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Editor.dll
+ 2011-08-14 06:44 . 2011-08-14 06:44 200704 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.ConsoleHost\1.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.ConsoleHost.dll
+ 2011-08-14 06:44 . 2011-08-14 06:44 618496 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Utility\1.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Utility.dll
+ 2011-08-14 06:44 . 2011-08-14 06:44 262144 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Management\1.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Management.dll
+ 2011-08-14 06:44 . 2011-08-14 06:44 102400 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Diagnostics\1.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Diagnostics.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 135168 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks.resources\2.0.0.0_cs_b03f5f7f11d50a3a\Microsoft.Build.Tasks.resources.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 311296 c:\windows\assembly\GAC_MSIL\AspNetMMCExt.resources\2.0.0.0_cs_b03f5f7f11d50a3a\aspnetmmcext.resources.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 110592 c:\windows\assembly\GAC\System.XML.resources\1.0.5000.0_cs_b77a5c561934e089\System.xml.resources.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 180224 c:\windows\assembly\GAC\System.Windows.Forms.resources\1.0.5000.0_cs_b77a5c561934e089\System.Windows.Forms.resources.dll
+ 2011-08-14 07:48 . 2011-08-14 07:48 573440 c:\windows\assembly\GAC\System.Web.Services\1.0.5000.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 122880 c:\windows\assembly\GAC\System.Web.resources\1.0.5000.0_cs_b03f5f7f11d50a3a\System.Web.resources.dll
+ 2011-08-14 07:48 . 2011-08-14 07:48 819200 c:\windows\assembly\GAC\System.Web.Mobile\1.0.5000.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2011-08-14 07:48 . 2011-08-14 07:48 126976 c:\windows\assembly\GAC\System.ServiceProcess\1.0.5000.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2011-08-14 07:48 . 2011-08-14 07:48 131072 c:\windows\assembly\GAC\System.Runtime.Serialization.Formatters.Soap\1.0.5000.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2011-08-14 07:48 . 2011-08-14 07:48 323584 c:\windows\assembly\GAC\System.Runtime.Remoting\1.0.5000.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2011-08-14 07:48 . 2011-08-14 07:48 241664 c:\windows\assembly\GAC\System.Messaging\1.0.5000.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2011-08-14 07:48 . 2011-08-14 07:48 372736 c:\windows\assembly\GAC\System.Management\1.0.5000.0__b03f5f7f11d50a3a\System.Management.dll
+ 2011-08-14 07:48 . 2011-08-14 07:48 241664 c:\windows\assembly\GAC\System.EnterpriseServices\1.0.5000.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2011-08-14 07:48 . 2011-08-14 07:48 466944 c:\windows\assembly\GAC\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 139264 c:\windows\assembly\GAC\System.Design.resources\1.0.5000.0_cs_b03f5f7f11d50a3a\System.Design.resources.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 118784 c:\windows\assembly\GAC\System.Data.resources\1.0.5000.0_cs_b77a5c561934e089\System.Data.resources.dll
+ 2011-08-14 07:48 . 2011-08-14 07:48 303104 c:\windows\assembly\GAC\System.Data.OracleClient\1.0.5000.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 229376 c:\windows\assembly\GAC\mscorlib.resources\1.0.5000.0_cs_b77a5c561934e089\Mscorlib.resources.dll
+ 2011-08-14 06:41 . 2011-08-14 06:41 720896 c:\windows\assembly\GAC\mscorcfg.resources\1.0.5000.0_cs_b03f5f7f11d50a3a\mscorcfg.resources.dll
+ 2011-08-14 07:48 . 2011-08-14 07:48 299008 c:\windows\assembly\GAC\Microsoft.VisualBasic\7.0.5000.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2011-08-14 07:48 . 2011-08-14 07:48 720896 c:\windows\assembly\GAC\Microsoft.JScript\7.0.5000.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
- 2004-08-18 12:00 . 2009-11-21 16:03 471552 c:\windows\AppPatch\aclayers.dll
+ 2004-08-18 12:00 . 2011-03-11 14:10 471552 c:\windows\AppPatch\aclayers.dll
+ 2011-08-14 06:44 . 2009-06-25 07:59 387376 c:\windows\$968930Uinstall_KB968930$\spuninst\updspapi.dll
+ 2011-08-14 06:44 . 2009-06-25 07:59 224048 c:\windows\$968930Uinstall_KB968930$\spuninst\spuninst.exe
+ 2009-07-11 22:02 . 2009-07-11 22:02 3780424 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfc90u.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 3765048 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfc90.dll
+ 2009-10-09 14:16 . 2009-10-09 14:16 1107456 c:\windows\system32\WsmSvc.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 2603008 c:\windows\system32\WpdShext.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 1382912 c:\windows\system32\WMVSDECD.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 1574912 c:\windows\system32\WMVENCOD.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 1543680 c:\windows\system32\WMVDECOD.dll
+ 2004-08-18 12:00 . 2010-04-06 02:52 2462720 c:\windows\system32\WMVCore.dll
+ 2004-08-18 12:00 . 2006-10-18 19:47 1329152 c:\windows\system32\WMSPDMOE.dll
+ 2004-08-18 12:00 . 2007-01-05 19:33 8257536 c:\windows\system32\wmploc.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 1661440 c:\windows\system32\wmpencen.dll
+ 2004-08-18 12:00 . 2006-10-18 19:47 1117696 c:\windows\system32\WMADMOE.dll
+ 2008-05-26 20:21 . 2008-05-26 20:21 1582592 c:\windows\system32\tquery.dll
+ 2008-05-26 20:21 . 2008-05-26 20:21 1418240 c:\windows\system32\mssrch.dll
+ 2004-08-18 12:00 . 2010-04-06 02:52 2462720 c:\windows\system32\dllcache\WMVCore.dll
+ 2004-08-18 12:00 . 2006-10-18 19:47 1329152 c:\windows\system32\dllcache\WMSPDMOE.dll
+ 2004-08-18 12:00 . 2007-01-05 19:33 8257536 c:\windows\system32\dllcache\wmploc.dll
+ 2004-08-18 12:00 . 2006-10-18 19:47 1117696 c:\windows\system32\dllcache\WMADMOE.dll
+ 2008-11-07 14:01 . 2007-01-05 19:22 1674752 c:\windows\system32\dllcache\setup_wm.exe
+ 2005-12-20 17:05 . 2005-12-20 17:05 1985024 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - CSY\langpack.msi
+ 2004-07-15 06:15 . 2004-07-15 06:15 1032192 c:\windows\Microsoft.NET\Framework\v1.1.4322\VsaVb7rt.dll
+ 2004-07-15 12:29 . 2004-07-15 12:29 1339392 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.XML.dll
+ 2004-07-15 12:32 . 2004-07-15 12:32 2052096 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Windows.Forms.dll
+ 2010-09-23 13:55 . 2010-09-23 13:55 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
+ 2010-09-23 13:55 . 2010-09-23 13:55 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
+ 2004-07-15 12:29 . 2004-07-15 12:29 1703936 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Design.dll
+ 2004-07-15 12:32 . 2004-07-15 12:32 1294336 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Data.dll
+ 2010-09-23 00:26 . 2010-09-23 00:26 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
+ 2010-09-23 00:25 . 2010-09-23 00:25 2523136 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
+ 2010-09-23 13:55 . 2010-09-23 13:55 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
+ 2003-02-21 06:25 . 2003-02-21 06:25 1564672 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorcfg.dll
+ 2011-08-14 07:02 . 2011-08-14 07:02 3489280 c:\windows\Installer\d2e9d.msi
+ 2011-08-14 07:00 . 2011-08-14 07:00 1611776 c:\windows\Installer\d2e99.msi
+ 2011-08-14 06:40 . 2011-08-14 06:40 3446272 c:\windows\Installer\118d8e.msi
+ 2011-08-14 07:40 . 2011-08-14 07:40 8182272 c:\windows\Installer\10272b.msi
+ 2011-08-14 08:43 . 2011-08-14 08:43 1966080 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_f0d5c1d8\System.dll
+ 2011-08-14 08:43 . 2011-08-14 08:43 4792320 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_36fd5730\System.dll
+ 2011-08-14 08:43 . 2011-08-14 08:43 2088960 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_2fdb44ed\System.Xml.dll
+ 2011-08-14 08:43 . 2011-08-14 08:43 5513216 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_11965eb6\System.Xml.dll
+ 2011-08-14 08:43 . 2011-08-14 08:43 3018752 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_7c33948b\System.Windows.Forms.dll
+ 2011-08-14 08:43 . 2011-08-14 08:43 7884800 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_2ef09b8f\System.Windows.Forms.dll
+ 2011-08-14 08:43 . 2011-08-14 08:43 2244608 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_935730f1\System.Drawing.dll
+ 2011-08-14 08:43 . 2011-08-14 08:43 1466368 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_637d45f7\System.Design.dll
+ 2011-08-14 08:43 . 2011-08-14 08:43 3395584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_56006569\System.Design.dll
+ 2011-08-14 08:43 . 2011-08-14 08:43 8908800 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_f450b176\mscorlib.dll
+ 2011-08-14 08:43 . 2011-08-14 08:43 3391488 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_248d9e2b\mscorlib.dll
+ 2011-08-14 06:45 . 2011-08-14 06:45 8365056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.A#\e6e037f89fa00f6bef019911d8a61e7c\System.Management.Automation.ni.dll
+ 2011-08-14 06:44 . 2011-08-14 06:44 1609728 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\fe9fe5f005c3388b746775e37bdd570e\Microsoft.PowerShell.Commands.Utility.ni.dll
+ 2011-08-14 06:45 . 2011-08-14 06:45 1704448 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\c4a3531d82739a8d87ff114dd8c414db\Microsoft.PowerShell.GPowerShell.ni.dll
+ 2011-08-14 06:45 . 2011-08-14 06:45 3722752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\7f20fe401b30d585776df19e2ea04695\Microsoft.PowerShell.Editor.ni.dll
+ 2011-08-14 06:44 . 2011-08-14 06:44 2682880 c:\windows\assembly\GAC_MSIL\System.Management.Automation\1.0.0.0__31bf3856ad364e35\System.Management.Automation.dll
+ 2011-08-14 08:43 . 2011-08-14 08:43 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
+ 2011-08-14 07:48 . 2011-08-14 07:48 1339392 c:\windows\assembly\GAC\System.Xml\1.0.5000.0__b77a5c561934e089\System.XML.dll
+ 2011-08-14 07:48 . 2011-08-14 07:48 2052096 c:\windows\assembly\GAC\System.Windows.Forms\1.0.5000.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2011-08-14 08:43 . 2011-08-14 08:43 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
+ 2011-08-14 07:48 . 2011-08-14 07:48 1703936 c:\windows\assembly\GAC\System.Design\1.0.5000.0__b03f5f7f11d50a3a\System.Design.dll
+ 2011-08-14 07:48 . 2011-08-14 07:48 1294336 c:\windows\assembly\GAC\System.Data\1.0.5000.0__b77a5c561934e089\System.Data.dll
+ 2011-08-14 06:40 . 2011-08-14 06:40 1564672 c:\windows\assembly\GAC\mscorcfg\1.0.5000.0__b03f5f7f11d50a3a\mscorcfg.dll
+ 2004-08-18 12:00 . 2010-08-25 21:36 10841088 c:\windows\system32\wmp.dll
+ 2004-08-18 12:00 . 2010-08-25 21:36 10841088 c:\windows\system32\dllcache\wmp.dll
+ 2010-09-24 12:08 . 2010-09-24 12:08 11430400 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\M2416447\M2416447Uninstall.msp
+ 2010-09-24 05:08 . 2010-09-24 05:08 17518080 c:\windows\Installer\30be4b.msp
+ 2011-08-14 06:44 . 2011-08-14 06:44 20333056 c:\windows\Installer\158512.msp
+ 2011-08-14 07:48 . 2011-08-14 07:48 19210240 c:\windows\Installer\102773.msp
+ 2011-08-14 06:19 . 2011-08-14 07:40 17467904 c:\windows\Downloaded Installations\{BBDA860C-E4CC-4246-93D2-7E1E7698BB91}\NETGEAR WG111v3 wireless USB 2.0 adapter.msi
.
-- Snímek resetován k současnému datu --
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{A3BC75A2-1F87-4686-AA43-5347D756017C}"= "c:\program files\AVG\AVG10\Toolbar\IEToolbar.dll" [2011-07-26 2532680]
"{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}"= "c:\program files\BS_Player\prxtbBS_0.dll" [2011-01-17 175912]
"{1C4AB6A5-595F-4e86-B15F-F93CCE2BBD48}"= "c:\program files\Family Toolbar\tbhelper.dll" [2009-05-07 355840]
.
[HKEY_CLASSES_ROOT\clsid\{a3bc75a2-1f87-4686-aa43-5347d756017c}]
.
[HKEY_CLASSES_ROOT\clsid\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]
.
[HKEY_CLASSES_ROOT\clsid\{1c4ab6a5-595f-4e86-b15f-f93cce2bbd48}]
[HKEY_CLASSES_ROOT\URLSearchHook.MHURLSearchHook.1]
[HKEY_CLASSES_ROOT\TypeLib\{1EA6B471-CAD2-419a-9539-0586EEFE2D09}]
[HKEY_CLASSES_ROOT\URLSearchHook.MHURLSearchHook]
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0C37B053-FD68-456a-82E1-D788EE342E6F}]
2009-05-07 21:46 2642432 ----a-w- c:\program files\Family Toolbar\tbcore3.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
2011-01-17 14:54 175912 ----a-w- c:\program files\ConduitEngine\prxConduitEngine.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}]
2011-07-26 08:15 2532680 ----a-w- c:\program files\AVG\AVG10\Toolbar\IEToolbar.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]
2011-01-17 14:54 175912 ----a-w- c:\program files\BS_Player\prxtbBS_0.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{CCC7A320-B3CA-4199-B1A6-9F516DD69829}"= "c:\program files\AVG\AVG10\Toolbar\IEToolbar.dll" [2011-07-26 2532680]
"{FD2FD708-1F6F-4B68-B141-C5778F0C19BB}"= "c:\program files\Family Toolbar\tbcore3.dll" [2009-05-07 2642432]
"{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}"= "c:\program files\BS_Player\prxtbBS_0.dll" [2011-01-17 175912]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files\ConduitEngine\prxConduitEngine.dll" [2011-01-17 175912]
.
[HKEY_CLASSES_ROOT\clsid\{ccc7a320-b3ca-4199-b1a6-9f516dd69829}]
.
[HKEY_CLASSES_ROOT\clsid\{fd2fd708-1f6f-4b68-b141-c5778f0c19bb}]
[HKEY_CLASSES_ROOT\MHToolbar.MHToolbar.3]
[HKEY_CLASSES_ROOT\TypeLib\{EC4085F2-8DB3-45a6-AD0B-CA289F3C5D7E}]
[HKEY_CLASSES_ROOT\MHToolbar.MHToolbar]
.
[HKEY_CLASSES_ROOT\clsid\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]
.
[HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{CCC7A320-B3CA-4199-B1A6-9F516DD69829}"= "c:\program files\AVG\AVG10\Toolbar\IEToolbar.dll" [2011-07-26 2532680]
"{FD2FD708-1F6F-4B68-B141-C5778F0C19BB}"= "c:\program files\Family Toolbar\tbcore3.dll" [2009-05-07 2642432]
"{FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5}"= "c:\program files\BS_Player\prxtbBS_0.dll" [2011-01-17 175912]
.
[HKEY_CLASSES_ROOT\clsid\{ccc7a320-b3ca-4199-b1a6-9f516dd69829}]
.
[HKEY_CLASSES_ROOT\clsid\{fd2fd708-1f6f-4b68-b141-c5778f0c19bb}]
[HKEY_CLASSES_ROOT\MHToolbar.MHToolbar.3]
[HKEY_CLASSES_ROOT\TypeLib\{EC4085F2-8DB3-45a6-AD0B-CA289F3C5D7E}]
[HKEY_CLASSES_ROOT\MHToolbar.MHToolbar]
.
[HKEY_CLASSES_ROOT\clsid\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\lib\NMBgMonitor.exe" [2005-10-28 94208]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-09-11 143360]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-09-11 172032]
"Persistence"="c:\windows\system32\igfxpers.exe" [2008-09-11 143360]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]
"RTHDCPL"="RTHDCPL.EXE" [2008-10-28 17331200]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2010-03-24 2516296]
"Control Center"="c:\program files\ASUS\WLAN Card Utilities\Center.exe" [2006-03-02 1667584]
"AVG_TRAY"="c:\program files\AVG\AVG10\avgtray.exe" [2011-04-18 2334560]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"AvgUninstallURL"="start http://www.avg.com/ww.special-uninstall ... er=9.0.894" [?]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
NETGEAR WG111v3 Smart Wizard.lnk - c:\program files\NETGEAR\WG111v3\WG111v3.exe [2008-2-22 2326528]
WDDMStatus.lnk - c:\program files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe [2010-2-26 2057536]
WDSmartWare.lnk - c:\program files\Western Digital\WD SmartWare\Front Parlor\WDSmartWare.exe [2010-2-26 9136960]
Windows Search.lnk - c:\program files\Windows Desktop Search\WindowsSearch.exe [2008-5-26 123904]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128]
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0c:\progra~1\AVG\AVG10\avgchsvx.exe /sync\0c:\progra~1\AVG\AVG10\avgrsx.exe /sync /restart
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Family Tree Builder Update]
2011-05-29 16:30 221184 ----a-w- c:\program files\MyHeritage\Bin\FTBCheckUpdates.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgdiagex.exe"=
"c:\\Program Files\\AVG\\AVG10\\avgdiagex.exe"=
"c:\\Program Files\\AVG\\AVG10\\avgnsx.exe"=
"c:\\Program Files\\AVG\\AVG10\\avgmfapx.exe"=
"c:\\Program Files\\AVG\\AVG10\\avgam.exe"=
"c:\\Program Files\\AVG\\AVG10\\avgemcx.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"5985:TCP"= 5985:TCP:*:Disabled:Vzdálená správa systému Windows
.
R0 AVGIDSEH;AVGIDSEH;c:\windows\system32\drivers\AVGIDSEH.sys [22.2.2011 8:13 22992]
R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\drivers\avgrkx86.sys [16.3.2011 16:03 32592]
R1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [7.1.2011 6:41 248656]
R1 Avgtdix;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [5.4.2011 0:59 297168]
R2 avgfws;AVG Firewall;c:\program files\AVG\AVG10\avgfws.exe [9.3.2011 19:24 2708024]
R2 AVGIDSAgent;AVGIDSAgent;c:\program files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe [18.4.2011 17:39 7398752]
R2 avgwd;AVG WatchDog;c:\program files\AVG\AVG10\avgwdsvc.exe [8.2.2011 5:33 269520]
R2 EAPPkt;Realtek EAPPkt Protocol;c:\windows\system32\drivers\EAPPkt.sys [9.10.2007 13:13 38144]
R2 WDDMService;WD SmartWare Drive Manager;c:\program files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [26.2.2010 8:58 110592]
R2 WDSmartWareBackgroundService;WD SmartWare Background Service;c:\program files\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe [16.6.2009 8:58 20480]
R3 Avgfwdx;Avgfwdx;c:\windows\system32\drivers\avgfwdx.sys [12.7.2010 4:33 30432]
R3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\drivers\AVGIDSDriver.sys [14.4.2011 21:28 134480]
R3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\drivers\AVGIDSFilter.sys [10.2.2011 7:53 24144]
R3 AVGIDSShim;AVGIDSShim;c:\windows\system32\drivers\AVGIDSShim.sys [10.2.2011 7:53 27216]
R3 RTL8187B;NETGEAR WG111v3 54Mbps Wireless USB 2.0 Adapter Vista Driver;c:\windows\system32\drivers\wg111v3.sys [28.12.2007 15:02 287232]
S2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [29.6.2010 9:41 136176]
S3 AVG Security Toolbar Service;AVG Security Toolbar Service;c:\program files\AVG\AVG10\Toolbar\ToolbarBroker.exe [14.8.2011 9:02 1025352]
S3 Avgfwfd;AVG network filter service;c:\windows\system32\drivers\avgfwdx.sys [12.7.2010 4:33 30432]
S3 gupdatem;Služba Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [29.6.2010 9:41 136176]
S3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\drivers\wdcsam.sys [7.5.2010 10:08 11520]
S3 WinRM;Windows Remote Management (WS-Management);c:\windows\system32\svchost.exe -k WINRM [18.8.2004 14:00 14336]
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - ASNDIS5
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
WINRM REG_MULTI_SZ WINRM
.
Obsah adresáře 'Naplánované úlohy'
.
2011-08-14 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-06-29 07:41]
.
2011-08-14 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-06-29 07:41]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
mStart Page = hxxp://search.myheritage.com
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: WikiKomentáře Google... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_70C5B381380DB17F.dll/cmsidewiki.html
IE: {{0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - c:\program files\Seznam.cz\listicka.dll
TCP: DhcpNameServer = 10.0.0.138
TCP: Interfaces\{809B365D-BD9B-4B6C-9652-B905EF7D5F07}: NameServer = 194.228.110.17,90.183.231.251
TCP: Interfaces\{F3ADC7D4-4886-47D7-950F-03C287FF7B05}: NameServer = 194.228.110.17,90.183.231.251
Handler: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - c:\program files\AVG\AVG10\Toolbar\IEToolbar.dll
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-08-14 11:55
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-1411071275-4103935507-3403473811-1007\Software\Microsoft\SystemCertificates\AddressBook*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(1232)
c:\windows\system32\Ati2evxx.dll
c:\windows\system32\igfxdev.dll
.
- - - - - - - > 'explorer.exe'(5544)
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
c:\program files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll
.
Celkový čas: 2011-08-14 11:56:22
ComboFix-quarantined-files.txt 2011-08-14 09:56
ComboFix2.txt 2011-08-13 19:49
ComboFix3.txt 2011-08-13 17:53
ComboFix4.txt 2011-08-12 13:36
ComboFix5.txt 2011-08-14 09:52
.
Před spuštěním: Volných bajtů: 957 871 407 104
Po spuštění: Volných bajtů: 957 856 751 616
.
- - End Of File - - 712B026F1B4338C8B88354F281A871FC

Log vypadá OK. Zkuste:

1. soubor serial.sys otestovat online na www.virustotal.com .
2. Jaké problémy PC vykazuje?

Zkuste použít TDSSKiller: http://support.kaspersky.com/faq/?qid=208283363 . Postupujte podle kolegova návodu:

Utilitu spustte a prikazte ji, at skenuje - klik na Start Scan
Pokud utilita najde infikekci, bude ji chtit lecit (Cure), povolte leceni kliknutim na Continue
Pokud utilita najde podezrely soubor (suspicious), bude jej chtit preskocit (Skip), povolte preskoceni kliknutim na Continue
Po dokonceni skenu bude mozna nutny restart PC, povolte jej kliknutim na Reboot now
Po restartu na Vas vyskoci log, pokud se tak nestane, najdete jej primo na disku, kde mate Windows (obvykle c:\) ve tvaru TDSSKiller.nejaka cisilka _log.txt - jeho obsah sem vlozte
Pokud restart nebude vyzadovan, kliknete na Close a nasledne na Report - vytvori se log - jeho obsah sem vlozte