Stránka 1 z 2

Rootkit?

Napsal: 23 led 2010 17:41
od Vang
Zdravím,

zamrzal internet a bylo nutné restartovat PC natvrdo. Combofix hlásí rootkit a nelze spustit v administrátorském účtu: "Combofix detekoval přítomnost aktivity rootkitu a vyžaduje restart počítače", po restartu se spustí v uživatelském účtu, prosím o pomoc, tady je log a obsahuje 197 000 znaků a ani se sem celý nevejde:

ComboFix 10-01-22.03 - Honza 23.01.2010 16:57:11.10.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.511.234 [GMT 1:00]
Spuštěný z: c:\documents and settings\Administrator\Plocha\Combo-Fix.exe
AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

Nakažená kopie c:\windows\system32\DRIVERS\atapi.sys byla nalezena a vyléčena.
Obnovena kopie z - Kitty ate it :p
Nakažená kopie c:\windows\system32\DRIVERS\atapi.sys byla nalezena a vyléčena.
Obnovena kopie z - Kitty ate it :p
.
((((((((((((((((((((((((( Soubory vytvořené od 2009-12-23 do 2010-01-23 )))))))))))))))))))))))))))))))
.

2010-01-23 14:56 . 2010-01-23 15:01 -------- d-----w- C:\Combo-Fix27901C
2010-01-23 14:56 . 2010-01-23 14:56 -------- d-----w- C:\Combo-Fix
2010-01-23 14:56 . 2010-01-23 14:56 390144 ----a-w- c:\windows\system32\CF30679.exe
2010-01-23 12:04 . 2010-01-23 12:04 0 ----a-w- c:\windows\nsreg.dat
2010-01-13 13:25 . 2009-11-21 16:03 471552 -c----w- c:\windows\system32\dllcache\aclayers.dll
2010-01-11 17:22 . 2010-01-11 17:22 -------- d-----w- C:\$AVG
2010-01-11 17:22 . 2010-01-11 17:22 12464 ----a-w- c:\windows\system32\avgrsstx.dll
2010-01-11 17:22 . 2010-01-11 17:22 360584 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2010-01-11 17:22 . 2010-01-11 17:22 333192 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2010-01-11 17:22 . 2010-01-11 17:22 28424 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2010-01-11 17:21 . 2010-01-23 11:39 -------- d-----w- c:\windows\system32\drivers\Avg
2009-12-25 15:30 . 2009-12-25 15:30 -------- d-----w- c:\program files\Eidos

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-11 17:21 . 2008-08-25 14:59 -------- d-----w- c:\program files\AVG
2009-12-21 19:08 . 2001-10-25 12:00 916480 ------w- c:\windows\system32\wininet.dll
2009-12-09 12:09 . 2001-10-25 12:00 440316 ----a-w- c:\windows\system32\perfh005.dat
2009-12-09 12:09 . 2001-10-25 12:00 83652 ----a-w- c:\windows\system32\perfc005.dat
2009-11-21 16:03 . 2001-10-25 12:00 471552 ----a-w- c:\windows\AppPatch\aclayers.dll
2009-11-02 19:42 . 2009-10-03 06:38 195456 ------w- c:\windows\system32\MpSigStub.exe
2009-06-06 18:16 . 2009-06-06 18:15 3018761 ----a-r- c:\program files\ComboFix.exe
.

((((((((((((((((((((((((((((( SnapShot_2009-06-27_16.39.00 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-07-11 19:54 . 2009-07-11 19:54 65536 c:\windows\WinSxS\x86_Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e79c4723\vcomp.dll
+ 2009-07-11 19:32 . 2009-07-11 19:32 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80KOR.dll
+ 2009-07-11 19:32 . 2009-07-11 19:32 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80JPN.dll
+ 2009-07-11 19:32 . 2009-07-11 19:32 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ITA.dll
+ 2009-07-11 19:32 . 2009-07-11 19:32 45056 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80CHT.dll
+ 2009-07-11 19:32 . 2009-07-11 19:32 40960 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80CHS.dll
+ 2009-07-11 19:32 . 2009-07-11 19:32 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80FRA.dll
+ 2009-07-11 19:32 . 2009-07-11 19:32 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ESP.dll
+ 2009-07-11 19:32 . 2009-07-11 19:32 57344 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ENU.dll
+ 2009-07-11 19:32 . 2009-07-11 19:32 65536 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80DEU.dll
+ 2009-07-12 00:07 . 2009-07-12 00:07 57856 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfcm80u.dll
+ 2009-07-12 00:19 . 2009-07-12 00:19 69632 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfcm80.dll
+ 2009-07-11 17:41 . 2009-07-11 17:41 97280 c:\windows\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_473666fd\ATL80.dll
+ 2010-01-23 16:18 . 2010-01-23 16:18 16384 c:\windows\temp\Perflib_Perfdata_c80.dat
+ 2007-07-30 17:19 . 2009-08-06 17:24 44768 c:\windows\system32\wups2.dll
+ 2008-07-08 16:50 . 2009-08-06 17:24 35552 c:\windows\system32\wups.dll
+ 2008-05-15 16:05 . 2009-08-06 17:24 53472 c:\windows\system32\wuauclt.exe
+ 2001-10-25 12:00 . 2009-06-25 08:27 54272 c:\windows\system32\wdigest.dll
+ 2008-07-25 04:32 . 2009-10-28 15:07 46080 c:\windows\system32\tzchange.exe
+ 2008-07-29 19:10 . 2008-07-29 19:10 26112 c:\windows\system32\TsWpfWrp.exe
+ 2001-10-25 12:00 . 2009-06-15 10:45 81408 c:\windows\system32\tlntsess.exe
+ 2001-10-25 12:00 . 2009-06-15 10:45 78336 c:\windows\system32\telnet.exe
- 2008-07-08 16:50 . 2008-04-14 03:22 75776 c:\windows\system32\strmfilt.dll
+ 2008-07-08 16:50 . 2009-10-21 05:40 75776 c:\windows\system32\strmfilt.dll
+ 2009-08-07 04:53 . 2008-07-06 12:06 89088 c:\windows\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
+ 2008-07-08 17:17 . 2008-11-10 10:41 67472 c:\windows\system32\spool\drivers\w32x86\msonpui.dll
+ 2008-07-08 17:17 . 2008-11-10 10:41 67472 c:\windows\system32\spool\drivers\w32x86\3\msonpui.dll
+ 2009-10-06 04:22 . 2009-08-06 17:24 44768 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.4.7600.226\wups2.dll
+ 2009-10-06 04:22 . 2009-08-06 17:24 35552 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.4.7600.226\wups.dll
- 2001-10-25 12:00 . 2009-02-03 19:58 56832 c:\windows\system32\secur32.dll
+ 2001-10-25 12:00 . 2009-06-25 08:27 56832 c:\windows\system32\secur32.dll
+ 2009-07-21 21:53 . 2008-04-14 02:29 14592 c:\windows\system32\ReinstallBackups\0004\DriverFiles\i386\kbdhid.sys
+ 2009-07-21 21:53 . 2008-04-14 02:29 24576 c:\windows\system32\ReinstallBackups\0004\DriverFiles\i386\kbdclass.sys
+ 2009-07-21 21:53 . 2007-01-23 13:45 28176 c:\windows\system32\ReinstallBackups\0003\DriverFiles\LUsbFilt.sys
+ 2009-07-21 21:53 . 2008-04-13 18:45 10368 c:\windows\system32\ReinstallBackups\0003\DriverFiles\i386\hidusb.sys
+ 2009-07-21 21:53 . 2008-04-13 18:45 24960 c:\windows\system32\ReinstallBackups\0003\DriverFiles\i386\hidparse.sys
+ 2009-07-21 21:53 . 2008-04-13 18:45 36864 c:\windows\system32\ReinstallBackups\0003\DriverFiles\i386\hidclass.sys
+ 2009-07-21 21:53 . 2008-04-14 03:21 20992 c:\windows\system32\ReinstallBackups\0003\DriverFiles\i386\hid.dll
+ 2009-07-21 21:53 . 2007-01-23 13:45 34576 c:\windows\system32\ReinstallBackups\0001\DriverFiles\LHidFilt.Sys
+ 2001-10-25 12:00 . 2009-10-12 13:40 79872 c:\windows\system32\raschap.dll
- 2001-10-25 12:00 . 2008-04-14 03:21 79872 c:\windows\system32\raschap.dll
+ 2008-07-29 17:59 . 2008-07-29 17:59 43544 c:\windows\system32\PresentationHostProxy.dll
+ 2001-10-25 12:00 . 2009-12-09 12:09 71846 c:\windows\system32\perfc009.dat
+ 2008-07-25 09:17 . 2008-07-25 09:17 15360 c:\windows\system32\mui\0409\mscorees.dll
+ 2008-07-08 17:17 . 2008-11-10 10:41 32656 c:\windows\system32\msonpmon.dll
+ 2007-08-13 16:54 . 2009-12-21 19:08 55296 c:\windows\system32\msfeedsbs.dll
- 2007-08-13 16:54 . 2009-03-08 02:31 55296 c:\windows\system32\msfeedsbs.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 83968 c:\windows\system32\mscories.dll
+ 2001-10-25 12:00 . 2009-09-04 21:05 58880 c:\windows\system32\msasn1.dll
+ 2009-06-20 13:55 . 2008-05-02 00:40 84496 c:\windows\system32\KemXML.dll
+ 2001-10-25 12:00 . 2009-12-21 19:08 25600 c:\windows\system32\jsproxy.dll
- 2001-10-25 12:00 . 2009-04-30 21:16 25600 c:\windows\system32\jsproxy.dll
+ 2008-07-29 17:24 . 2008-07-29 17:24 97800 c:\windows\system32\infocardapi.dll
+ 2008-07-29 17:24 . 2008-07-29 17:24 11264 c:\windows\system32\icardres.dll
+ 2008-07-08 16:50 . 2009-10-21 05:40 25088 c:\windows\system32\httpapi.dll
+ 2001-10-25 12:00 . 2009-10-15 16:32 81920 c:\windows\system32\fontsub.dll
+ 2008-07-29 19:10 . 2008-07-29 19:10 73720 c:\windows\system32\dxva2.dll
+ 2009-06-20 13:56 . 2008-02-29 01:13 28944 c:\windows\system32\drivers\LUsbFilt.sys
+ 2009-06-20 13:56 . 2008-02-29 01:13 35344 c:\windows\system32\drivers\LHidFilt.Sys
+ 2001-10-25 12:00 . 2009-06-24 11:18 92928 c:\windows\system32\drivers\ksecdd.sys
- 2001-10-25 12:00 . 2008-04-13 18:45 10368 c:\windows\system32\drivers\hidusb.sys
+ 2001-10-25 12:00 . 2008-04-13 18:45 10368 c:\windows\system32\drivers\hidusb.sys
+ 2009-06-10 06:08 . 2009-12-21 19:08 12800 c:\windows\system32\dllcache\xpshims.dll
- 2009-06-10 06:08 . 2009-04-30 21:16 12800 c:\windows\system32\dllcache\xpshims.dll
+ 2008-07-08 16:50 . 2009-08-06 17:24 35552 c:\windows\system32\dllcache\wups.dll
+ 2008-05-15 16:05 . 2009-08-06 17:24 53472 c:\windows\system32\dllcache\wuauclt.exe
+ 2009-06-25 08:27 . 2009-06-25 08:27 54272 c:\windows\system32\dllcache\wdigest.dll
+ 2009-06-15 10:45 . 2009-06-15 10:45 81408 c:\windows\system32\dllcache\tlntsess.exe
+ 2009-06-15 10:45 . 2009-06-15 10:45 78336 c:\windows\system32\dllcache\telnet.exe
+ 2009-10-21 05:40 . 2009-10-21 05:40 75776 c:\windows\system32\dllcache\strmfilt.dll
+ 2009-02-03 19:58 . 2009-06-25 08:27 56832 c:\windows\system32\dllcache\secur32.dll
- 2009-02-03 19:58 . 2009-02-03 19:58 56832 c:\windows\system32\dllcache\secur32.dll
+ 2009-10-12 13:40 . 2009-10-12 13:40 79872 c:\windows\system32\dllcache\raschap.dll
+ 2008-09-05 04:31 . 2009-12-21 19:08 55296 c:\windows\system32\dllcache\msfeedsbs.dll
- 2008-09-05 04:31 . 2009-03-08 02:31 55296 c:\windows\system32\dllcache\msfeedsbs.dll
+ 2009-09-04 21:05 . 2009-09-04 21:05 58880 c:\windows\system32\dllcache\msasn1.dll
+ 2009-06-24 11:18 . 2009-06-24 11:18 92928 c:\windows\system32\dllcache\ksecdd.sys
- 2008-04-21 07:03 . 2009-04-30 21:16 25600 c:\windows\system32\dllcache\jsproxy.dll
+ 2008-04-21 07:03 . 2009-12-21 19:08 25600 c:\windows\system32\dllcache\jsproxy.dll
+ 2009-10-21 05:40 . 2009-10-21 05:40 25088 c:\windows\system32\dllcache\httpapi.dll
+ 2001-10-25 12:00 . 2008-04-13 18:45 10368 c:\windows\system32\dllcache\hidusb.sys
+ 2001-10-25 12:00 . 2008-04-13 18:45 24960 c:\windows\system32\dllcache\hidparse.sys
+ 2001-10-25 12:00 . 2008-04-13 18:45 36864 c:\windows\system32\dllcache\hidclass.sys
+ 2009-06-16 14:40 . 2009-10-15 16:32 81920 c:\windows\system32\dllcache\fontsub.dll
+ 2009-08-07 04:53 . 2008-07-06 12:06 89088 c:\windows\system32\dllcache\filterpipelineprintproc.dll
+ 2001-10-25 12:00 . 2009-08-06 17:24 96480 c:\windows\system32\dllcache\cdm.dll
+ 2009-06-10 14:15 . 2009-06-10 14:15 84992 c:\windows\system32\dllcache\avifil32.dll
+ 2009-07-17 19:04 . 2009-07-17 19:04 58880 c:\windows\system32\dllcache\atl.dll
+ 2001-10-25 12:00 . 2008-04-13 18:40 96512 c:\windows\system32\dllcache\atapi.sys
+ 2008-07-25 09:16 . 2008-07-25 09:16 96760 c:\windows\system32\dfshim.dll
+ 2001-10-25 12:00 . 2009-08-06 17:24 96480 c:\windows\system32\cdm.dll
- 2001-10-25 12:00 . 2008-04-14 03:21 84992 c:\windows\system32\avifil32.dll
+ 2001-10-25 12:00 . 2009-06-10 14:15 84992 c:\windows\system32\avifil32.dll
+ 2001-10-25 12:00 . 2009-07-17 19:04 58880 c:\windows\system32\atl.dll
- 2001-10-25 12:00 . 2008-04-14 03:21 58880 c:\windows\system32\atl.dll
+ 2008-07-29 21:40 . 2008-07-29 21:40 70648 c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
+ 2008-07-29 21:40 . 2008-07-29 21:40 91136 c:\windows\Microsoft.NET\Framework\v3.5\MSBuild.exe
+ 2008-07-29 21:40 . 2008-07-29 21:40 41984 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft.VisualC.STLCLR.dll
+ 2008-07-29 21:40 . 2008-07-29 21:40 40960 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft.Data.Entity.Build.Tasks.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 89080 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.2052.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 92664 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1042.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 95224 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1041.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 89592 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1028.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 84480 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.2052.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 94720 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1042.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 97792 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1041.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 84992 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1028.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 97280 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\DeleteTemp.exe
+ 2008-07-29 21:40 . 2008-07-29 21:40 95224 c:\windows\Microsoft.NET\Framework\v3.5\EdmGen.exe
+ 2008-07-29 21:40 . 2008-07-29 21:40 78856 c:\windows\Microsoft.NET\Framework\v3.5\DataSvcUtil.exe
+ 2008-07-29 21:40 . 2008-07-29 21:40 41984 c:\windows\Microsoft.NET\Framework\v3.5\AddInUtil.exe
+ 2008-07-29 21:40 . 2008-07-29 21:40 41992 c:\windows\Microsoft.NET\Framework\v3.5\AddInProcess32.exe
+ 2008-07-29 21:40 . 2008-07-29 21:40 41992 c:\windows\Microsoft.NET\Framework\v3.5\AddInProcess.exe
+ 2008-07-29 19:10 . 2008-07-29 19:10 46104 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
+ 2008-07-29 17:59 . 2008-07-29 17:59 32768 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationCFFRasterizer.dll
+ 2008-07-29 19:10 . 2008-07-29 19:10 71160 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PenIMC.dll
+ 2008-07-29 17:32 . 2008-07-29 17:32 17448 c:\windows\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\PerformanceCounterInstaller.exe
+ 2008-07-29 17:16 . 2008-07-29 17:16 32768 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
+ 2008-07-29 17:16 . 2008-07-29 17:16 73728 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.Install.dll
+ 2008-07-29 17:16 . 2008-07-29 17:16 20504 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceMonikerSupport.dll
+ 2008-07-29 17:16 . 2008-07-29 17:16 11280 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelEvents.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 37896 c:\windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 81400 c:\windows\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL
+ 2008-07-25 09:17 . 2008-07-25 09:17 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 57392 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
- 2005-09-23 05:28 . 2005-09-23 05:28 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
- 2005-09-23 05:28 . 2005-09-23 05:28 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 95232 c:\windows\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 16896 c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 61952 c:\windows\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe
+ 2008-07-25 09:17 . 2008-07-25 09:17 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
- 2005-09-23 05:28 . 2005-09-23 05:28 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
+ 2008-07-25 09:17 . 2008-07-25 09:17 53248 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
- 2005-09-23 05:28 . 2005-09-23 05:28 53248 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
+ 2008-07-25 09:17 . 2008-07-25 09:17 88584 c:\windows\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 24584 c:\windows\Microsoft.NET\Framework\v2.0.50727\normalization.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 31744 c:\windows\Microsoft.NET\Framework\v2.0.50727\MUI\0409\mscorsecr.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 19456 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscortim.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 69632 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
+ 2008-07-25 09:16 . 2008-07-25 09:16 18944 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 77312 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 94208 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorld.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 46592 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorie.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 83456 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 69632 c:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
- 2005-09-23 05:28 . 2005-09-23 05:28 69632 c:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
+ 2008-07-25 09:16 . 2008-07-25 09:16 97792 c:\windows\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
- 2005-09-23 05:28 . 2005-09-23 05:28 12800 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 12800 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
- 2005-09-23 05:28 . 2005-09-23 05:28 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
- 2005-09-23 05:28 . 2005-09-23 05:28 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
- 2005-09-23 05:28 . 2005-09-23 05:28 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
- 2005-09-23 05:28 . 2005-09-23 05:28 40960 c:\windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe
+ 2008-07-25 09:16 . 2008-07-25 09:16 40960 c:\windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe
+ 2008-07-25 09:17 . 2008-07-25 09:17 72192 c:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
- 2005-09-23 05:28 . 2005-09-23 05:28 72192 c:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 65032 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
- 2007-04-13 01:21 . 2007-04-13 01:21 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
+ 2008-07-25 09:17 . 2008-07-25 09:17 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEHost.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 18936 c:\windows\Microsoft.NET\Framework\v2.0.50727\fusion.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 62968 c:\windows\Microsoft.NET\Framework\v2.0.50727\dfdll.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 35320 c:\windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
+ 2008-07-25 09:17 . 2008-07-25 09:17 69120 c:\windows\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 27136 c:\windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
- 2005-09-23 05:28 . 2005-09-23 05:28 13312 c:\windows\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 13312 c:\windows\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 80376 c:\windows\Microsoft.NET\Framework\v2.0.50727\csc.exe
+ 2008-07-25 09:17 . 2008-07-25 09:17 89608 c:\windows\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll
+ 2008-11-25 02:59 . 2008-11-25 02:59 31560 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
+ 2008-07-25 09:16 . 2008-07-25 09:16 34312 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
+ 2008-07-25 09:16 . 2008-07-25 09:16 33288 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
+ 2008-07-25 09:16 . 2008-07-25 09:16 24576 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
+ 2008-07-25 09:16 . 2008-07-25 09:16 84480 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 33800 c:\windows\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 17416 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 22024 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll
- 2005-09-23 05:28 . 2005-09-23 05:28 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
+ 2008-07-25 09:16 . 2008-07-25 09:16 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
+ 2008-07-25 09:17 . 2008-07-25 09:17 58880 c:\windows\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
+ 2008-07-25 09:16 . 2008-07-25 09:16 98808 c:\windows\Microsoft.NET\Framework\v2.0.50727\alink.dll
- 2005-09-23 05:28 . 2005-09-23 05:28 10752 c:\windows\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 10752 c:\windows\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 13824 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll
+ 2009-06-24 17:56 . 2009-06-24 17:56 73728 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe
- 2007-04-13 18:58 . 2007-04-13 18:58 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
+ 2008-05-27 22:49 . 2008-05-27 22:49 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
- 2007-04-13 18:57 . 2007-04-13 18:57 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
+ 2008-05-27 22:49 . 2008-05-27 22:49 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
- 2007-04-13 18:57 . 2007-04-13 18:57 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
+ 2008-05-27 22:49 . 2008-05-27 22:49 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
- 2007-04-13 19:30 . 2007-04-13 19:30 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
+ 2008-05-27 23:30 . 2008-05-27 23:30 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
+ 2008-07-25 09:16 . 2008-07-25 09:16 96768 c:\windows\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 16896 c:\windows\Microsoft.NET\Framework\SharedReg12.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 16896 c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 16896 c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 16896 c:\windows\Microsoft.NET\Framework\sbscmp10.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 82944 c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe
+ 2008-07-08 17:13 . 2008-07-08 17:13 50688 c:\windows\Installer\7569a.msi
+ 2009-11-03 22:12 . 2009-11-03 22:12 22528 c:\windows\Installer\2c635c.msi
+ 2008-07-29 19:07 . 2008-07-29 19:07 23040 c:\windows\Installer\221642.msp
+ 2009-08-07 04:51 . 2009-08-07 04:51 88576 c:\windows\Installer\1dc25b.msi
+ 2009-04-28 16:11 . 2009-04-28 16:11 24064 c:\windows\Installer\19ddf6.msi
+ 2009-11-25 12:08 . 2009-11-25 12:08 32768 c:\windows\Installer\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}\icon.exe
- 2008-07-08 17:17 . 2009-06-14 19:19 35088 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\oisicon.exe
+ 2008-07-08 17:17 . 2010-01-13 19:55 35088 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\oisicon.exe
+ 2008-07-08 17:17 . 2010-01-13 19:55 18704 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\mspicons.exe
- 2008-07-08 17:17 . 2009-06-14 19:19 18704 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\mspicons.exe
+ 2008-07-08 17:17 . 2010-01-13 19:55 20240 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\cagicon.exe
- 2008-07-08 17:17 . 2009-06-14 19:19 20240 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\cagicon.exe
+ 2009-07-21 21:54 . 2009-07-21 21:54 10134 c:\windows\Installer\{0C826C5B-B131-423A-A229-C71B3CACCD6A}\ARPPRODUCTICON.exe
+ 2006-07-24 08:50 . 2006-07-24 08:50 47920 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.6425\VBAME.DLL
+ 2006-07-24 08:50 . 2006-07-24 08:50 92976 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.6425\MSADDNDR.DLL
+ 2008-07-08 17:16 . 2008-07-08 17:16 12096 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\WORDPOL.DLL
+ 2006-10-26 20:58 . 2006-10-26 20:58 33080 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\VPREVIEW.EXE
+ 2008-07-08 17:16 . 2008-07-08 17:16 12080 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\VBIDEPOL.DLL
+ 2008-07-08 17:16 . 2008-07-08 17:16 64288 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\VBIDEPIA.DLL
+ 2006-10-26 17:59 . 2006-10-26 17:59 15672 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\SMARTTAGINSTALL.EXE
+ 2006-10-26 17:49 . 2006-10-26 17:49 34104 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\SETLANG.EXE
+ 2006-10-26 18:12 . 2006-10-26 18:12 40424 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\REFIEBAR.DLL
+ 2006-10-26 18:09 . 2006-10-26 18:09 48448 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\PUBTRAP.DLL
+ 2008-07-08 17:16 . 2008-07-08 17:16 12112 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\PPTPOL.DLL
+ 2006-10-26 17:59 . 2006-10-26 17:59 46936 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\OSETUPPS.DLL
+ 2006-10-26 17:59 . 2006-10-26 17:59 18760 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\OPHPROXY.DLL
+ 2006-10-26 17:59 . 2006-10-26 17:59 16728 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\OMUOPTINPS.DLL
+ 2006-10-26 18:00 . 2006-10-26 18:00 23392 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\OISCTRL.DLL
+ 2006-10-27 13:11 . 2006-10-27 13:11 54680 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\OFFRHD.DLL
+ 2008-07-08 17:16 . 2008-07-08 17:16 11544 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\OFFICEPL.DLL
+ 2008-07-08 17:16 . 2008-07-08 17:16 12104 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\MSTAGPOL.DLL
+ 2008-07-08 17:16 . 2008-07-08 17:16 20280 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\MSTAGPIA.DLL
+ 2006-10-26 17:59 . 2006-10-26 17:59 43832 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\MSSH.DLL
+ 2006-10-27 13:26 . 2006-10-27 13:26 35152 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\MSOSTYLE.DLL
+ 2006-10-26 17:56 . 2006-10-26 17:56 67408 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\MSONPUI.DLL
+ 2006-10-26 17:56 . 2006-10-26 17:56 32592 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\MSONPMON.DLL
+ 2006-10-26 17:52 . 2006-10-26 17:52 66368 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\MSOMSE.DLL
+ 2006-10-26 18:12 . 2006-10-26 18:12 67896 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\MSOHTMED.EXE
+ 2006-10-27 13:01 . 2006-10-27 13:01 76088 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\MSOHEV.DLL
+ 2006-10-26 17:59 . 2006-10-26 17:59 19768 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\MSMH.DLL
+ 2006-10-26 17:52 . 2006-10-26 17:52 48424 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\MSE7.EXE
+ 2006-10-26 18:12 . 2006-10-26 18:12 89400 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\METCONV.DLL
+ 2006-10-26 19:41 . 2006-10-26 19:41 66368 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\INLAUNCH.DLL
+ 2008-07-08 17:16 . 2008-07-08 17:16 12096 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\GRAPHPOL.DLL
+ 2008-07-08 17:15 . 2008-07-08 17:15 12096 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\EXCELPOL.DLL
+ 2006-10-26 18:12 . 2006-10-26 18:12 53576 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\AUTHZAX.DLL
+ 2006-10-26 19:18 . 2006-10-26 19:18 94016 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\ACCOLK.DLL
+ 2010-01-22 21:40 . 2009-10-29 07:43 12800 c:\windows\ie8updates\KB978207-IE8\xpshims.dll
+ 2010-01-22 21:40 . 2009-10-29 07:43 55296 c:\windows\ie8updates\KB978207-IE8\msfeedsbs.dll
+ 2010-01-22 21:40 . 2009-10-29 07:43 25600 c:\windows\ie8updates\KB978207-IE8\jsproxy.dll
+ 2009-12-09 06:37 . 2009-08-29 07:58 12800 c:\windows\ie8updates\KB976325-IE8\xpshims.dll
+ 2009-12-09 06:37 . 2009-08-29 07:58 55296 c:\windows\ie8updates\KB976325-IE8\msfeedsbs.dll
+ 2009-12-09 06:37 . 2009-08-29 07:58 25600 c:\windows\ie8updates\KB976325-IE8\jsproxy.dll
+ 2009-10-22 17:55 . 2009-07-03 16:59 12800 c:\windows\ie8updates\KB974455-IE8\xpshims.dll
+ 2009-10-22 17:55 . 2009-07-03 16:59 55296 c:\windows\ie8updates\KB974455-IE8\msfeedsbs.dll
+ 2009-10-22 17:55 . 2009-07-03 16:59 25600 c:\windows\ie8updates\KB974455-IE8\jsproxy.dll
+ 2009-07-29 19:28 . 2009-04-30 21:16 12800 c:\windows\ie8updates\KB972260-IE8\xpshims.dll
+ 2009-07-29 19:28 . 2009-03-08 02:31 55296 c:\windows\ie8updates\KB972260-IE8\msfeedsbs.dll
+ 2009-07-29 19:28 . 2009-04-30 21:16 25600 c:\windows\ie8updates\KB972260-IE8\jsproxy.dll
+ 2009-08-07 04:53 . 2008-07-06 12:06 89088 c:\windows\Driver Cache\i386\filterpipelineprintproc.dll
+ 2009-10-18 12:17 . 2009-10-18 12:17 90112 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_fc9fbfb3\System.Drawing.Design.dll
+ 2009-10-18 12:17 . 2009-10-18 12:17 61440 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_358dd91a\CustomMarshalers.dll
+ 2009-10-18 13:55 . 2009-10-18 13:55 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\b4a9e413d5cd6d6ec2d50aa05381e293\UIAutomationProvider.ni.dll
+ 2009-10-18 16:10 . 2009-10-18 16:10 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\8acb476a0d4ee17a12881e17ae74a6af\System.Windows.Presentation.ni.dll
+ 2009-10-18 16:10 . 2009-10-18 16:10 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\4b87ca3482a3c0ee733e028ecee7de65\System.Web.DynamicData.Design.ni.dll
+ 2009-10-18 16:08 . 2009-10-18 16:08 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\a0c71055364bd356971791284c3fb910\System.ComponentModel.DataAnnotations.ni.dll
+ 2009-10-18 16:08 . 2009-10-18 16:08 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\f9a75bbdc2ce7db578b5977766a09b99\System.AddIn.Contract.ni.dll
+ 2009-10-18 13:44 . 2009-10-18 13:44 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\3dd0f86c966c75755d62eab8ddf0634c\PresentationFontCache.ni.exe
+ 2009-10-18 13:43 . 2009-10-18 13:43 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\034d081fe294bab1ee1ecc98c1181424\PresentationCFFRasterizer.ni.dll
+ 2009-10-18 16:10 . 2009-10-18 16:10 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\f2673aec397c52796aef05bb9d2668df\Microsoft.Vsa.ni.dll
+ 2009-10-18 16:08 . 2009-10-18 16:08 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\d513fe1a81c441e7656a9b062cff4e9f\Microsoft.Build.Framework.ni.dll
+ 2009-10-18 16:08 . 2009-10-18 16:08 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\c5d504724d7f351b1d034615dbb72a2a\Microsoft.Build.Framework.ni.dll
+ 2009-10-18 16:08 . 2009-10-18 16:08 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\a664ccab020f93f1d533919f57131190\dfsvc.ni.exe
+ 2009-10-18 15:20 . 2009-10-18 15:20 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\e63d6d26b8a664cfdfbd4ad75e03c14d\Accessibility.ni.dll
+ 2009-08-07 04:53 . 2009-08-07 04:53 94208 c:\windows\assembly\GAC_MSIL\WindowsFormsIntegration\3.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
+ 2009-08-07 04:53 . 2009-08-07 04:53 98304 c:\windows\assembly\GAC_MSIL\UIAutomationTypes\3.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
+ 2009-08-07 04:53 . 2009-08-07 04:53 40960 c:\windows\assembly\GAC_MSIL\UIAutomationProvider\3.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
+ 2009-08-07 04:55 . 2009-08-07 04:55 12288 c:\windows\assembly\GAC_MSIL\System.Windows.Presentation\3.5.0.0__b77a5c561934e089\System.Windows.Presentation.dll
+ 2009-08-07 04:55 . 2009-08-07 04:55 61440 c:\windows\assembly\GAC_MSIL\System.Web.Routing\3.5.0.0__31bf3856ad364e35\System.Web.Routing.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2009-08-07 04:55 . 2009-08-07 04:55 32768 c:\windows\assembly\GAC_MSIL\System.Web.DynamicData.Design\3.5.0.0__31bf3856ad364e35\System.Web.DynamicData.Design.dll
+ 2009-08-07 04:55 . 2009-08-07 04:55 77824 c:\windows\assembly\GAC_MSIL\System.Web.Abstractions\3.5.0.0__31bf3856ad364e35\System.Web.Abstractions.dll
+ 2009-08-07 04:53 . 2009-08-07 04:53 32768 c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
+ 2009-08-07 04:53 . 2009-08-07 04:53 73728 c:\windows\assembly\GAC_MSIL\System.ServiceModel.Install\3.0.0.0__b77a5c561934e089\System.ServiceModel.Install.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
- 2009-05-03 12:21 . 2009-05-03 12:21 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
+ 2009-08-07 04:55 . 2009-08-07 04:55 53248 c:\windows\assembly\GAC_MSIL\System.Data.DataSetExtensions\3.5.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2009-05-03 12:21 . 2009-05-03 12:21 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
+ 2009-08-07 04:55 . 2009-08-07 04:55 57344 c:\windows\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\3.5.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
+ 2009-08-07 04:54 . 2009-08-07 04:54 45056 c:\windows\assembly\GAC_MSIL\System.AddIn.Contract\2.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
+ 2009-08-07 04:53 . 2009-08-07 04:53 46104 c:\windows\assembly\GAC_MSIL\PresentationFontCache\3.0.0.0__31bf3856ad364e35\PresentationFontCache.exe
+ 2009-08-07 04:53 . 2009-08-07 04:53 32768 c:\windows\assembly\GAC_MSIL\PresentationCFFRasterizer\3.0.0.0__31bf3856ad364e35\PresentationCFFRasterizer.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
- 2009-05-03 12:21 . 2009-05-03 12:21 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
- 2009-05-03 12:21 . 2009-05-03 12:21 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2009-08-07 04:54 . 2009-08-07 04:54 41984 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\1.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.STLCLR.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
- 2009-05-03 12:21 . 2009-05-03 12:21 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
+ 2009-08-07 04:54 . 2009-08-07 04:54 94208 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.v3.5.dll
+ 2009-08-07 04:54 . 2009-08-07 04:54 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
- 2009-05-03 12:21 . 2009-05-03 12:21 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
- 2009-05-03 12:21 . 2009-05-03 12:21 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
- 2009-05-03 12:21 . 2009-05-03 12:21 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
- 2009-05-03 12:21 . 2009-05-03 12:21 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2009-11-24 12:27 . 2009-11-24 12:27 10576 c:\windows\assembly\GAC\Policy.11.0.office\12.0.0.0__71e9bce111e9429c\Policy.11.0.Office.dll
+ 2009-11-24 12:27 . 2009-11-24 12:27 11112 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Vbe.Interop\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Vbe.Interop.dll
+ 2009-11-24 12:27 . 2009-11-24 12:27 11128 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Word.dll
+ 2009-11-24 12:26 . 2009-11-24 12:26 11136 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.SmartTag\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.SmartTag.dll
+ 2009-11-24 12:28 . 2009-11-24 12:28 11152 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.PowerPoint\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.PowerPoint.dll
+ 2009-11-24 12:26 . 2009-11-24 12:26 11128 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Graph\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Graph.dll
+ 2009-11-24 12:27 . 2009-11-24 12:27 11144 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Excel\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Excel.dll
+ 2009-11-24 12:27 . 2009-11-24 12:27 63336 c:\windows\assembly\GAC\Microsoft.Vbe.Interop\12.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.dll
+ 2009-11-24 12:26 . 2009-11-24 12:26 19320 c:\windows\assembly\GAC\Microsoft.Office.Interop.SmartTag\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.SmartTag.dll
+ 2009-11-25 12:09 . 2009-07-14 11:03 46080 c:\windows\$NtUninstallKB976098-v2$\tzchange.exe
+ 2009-11-25 12:09 . 2009-10-29 02:05 16896 c:\windows\$NtUninstallKB976098-v2$\spuninst\tzchange.dll
+ 2009-10-18 12:20 . 2008-04-14 03:21 57344 c:\windows\$NtUninstallKB974571$\msasn1.dll
+ 2009-12-09 06:37 . 2008-04-14 03:21 79872 c:\windows\$NtUninstallKB974318$\raschap.dll
+ 2009-08-12 11:14 . 2008-04-14 03:21 58880 c:\windows\$NtUninstallKB973507$\atl.dll
+ 2009-08-12 11:15 . 2008-04-14 03:21 84992 c:\windows\$NtUninstallKB971557$\avifil32.dll
+ 2009-08-26 17:44 . 2008-10-23 10:06 62976 c:\windows\$NtUninstallKB970653-v3$\tzchange.exe
+ 2009-08-26 17:44 . 2009-07-16 04:18 14336 c:\windows\$NtUninstallKB970653-v3$\spuninst\tzchange.dll
+ 2009-12-09 06:37 . 2008-04-14 03:22 75776 c:\windows\$NtUninstallKB970430$\strmfilt.dll
+ 2009-12-09 06:37 . 2008-04-14 03:21 24576 c:\windows\$NtUninstallKB970430$\httpapi.dll
+ 2009-08-18 03:11 . 2008-04-14 03:22 49152 c:\windows\$NtUninstallKB968389$\wdigest.dll
+ 2009-08-18 03:11 . 2009-02-03 19:58 56832 c:\windows\$NtUninstallKB968389$\secur32.dll
+ 2009-08-18 03:11 . 2008-04-13 18:31 92288 c:\windows\$NtUninstallKB968389$\ksecdd.sys
+ 2009-07-19 19:24 . 2008-04-14 03:21 80896 c:\windows\$NtUninstallKB961371$\fontsub.dll
+ 2009-08-12 11:15 . 2008-04-14 03:22 78848 c:\windows\$NtUninstallKB960859$\tlntsess.exe
+ 2009-08-12 11:15 . 2008-04-14 03:22 77824 c:\windows\$NtUninstallKB960859$\telnet.exe
+ 2009-11-04 08:15 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB976749-IE8\update\spcustom.dll

Re: Rootkit? - log RSIT

Napsal: 23 led 2010 17:47
od Vang
Logfile of random's system information tool 1.06 (written by random/random)
Run by Honza at 2010-01-23 17:46:30
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 41 GB (53%) free of 78 GB
Total RAM: 511 MB (17% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:46:39, on 23.1.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\AVG\AVG9\avgnsx.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\D-Tools\daemon.exe
C:\WINDOWS\Mixer.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Vtune\TBPanel.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exe
C:\PROGRA~1\AVG\AVG9\avgtray.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Honza\Dokumenty\Stažené soubory\RSIT.exe
C:\Program Files\trend micro\Honza.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
R3 - URLSearchHook: (no name) - *{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
R3 - URLSearchHook: (no name) - *{EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\WINDOWS\WebIE.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\WINDOWS\WebIE.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [Gainward] C:\Program Files\Vtune\TBPanel.exe /A
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exe
O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: Picture Motion Browser Media Check Tool.lnk = C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\WINDOWS\WebIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\WINDOWS\WebIE.dll
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\WINDOWS\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\WINDOWS\WebIE.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\WINDOWS\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\WINDOWS\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\WINDOWS\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\WINDOWS\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\WINDOWS\WebIE.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe
O23 - Service: Služba Google Update (gupdate1ca1381d2e7c416) (gupdate1ca1381d2e7c416) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logitech\Bluetooth\LBTServ.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

--
End of file - 11294 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
Yahoo! Toolbar Helper - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2006-10-26 440384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2009-07-15 1586472]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
WebTransBHO Class - C:\WINDOWS\WebIE.dll [2009-01-05 491520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG9\avgssie.dll [2010-01-11 1484056]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}]
AVG Security Toolbar BHO - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll [2009-11-25 1230080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-06-22 259696]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll [2009-09-20 762864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll [2009-04-28 470512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - C:\WINDOWS\WebIE.dll [2009-01-05 491520]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2006-10-26 440384]
{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - AVG Security Toolbar - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll [2009-11-25 1230080]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-06-22 259696]


[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-01-11 39792]
"DAEMON Tools-1033"=C:\Program Files\D-Tools\daemon.exe [2004-08-22 81920]
"NeroFilterCheck"=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2007-03-09 153136]
"C-Media Mixer"=Mixer.exe /startup []
"RealTray"=C:\Program Files\Real\RealPlayer\RealPlay.exe [2008-09-13 26112]
"Gainward"=C:\Program Files\Vtune\TBPanel.exe [2007-04-23 2158592]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2007-04-19 7700480]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2007-04-19 86016]
"HPDJ Taskbar Utility"=C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exe [2001-10-29 196608]
"AVG9_TRAY"=C:\PROGRA~1\AVG\AVG9\avgtray.exe [2010-01-12 2033432]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [2007-03-12 153136]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-01-10 68856]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2009-07-16 25604904]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Adobe Gamma Loader.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
Logitech Desktop Messenger.lnk - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe

C:\Documents and Settings\Honza\Nabídka Start\Programy\Po spuštění
Picture Motion Browser Media Check Tool.lnk - C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\avgrsstarter]
C:\WINDOWS\system32\avgrsstx.dll [2010-01-11 12464]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn]
c:\program files\common files\logitech\bluetooth\LBTWlgn.dll [2008-05-02 72208]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]
"{091EB208-39DD-417D-A5DD-7E2C2D8FB9CB}"=C:\PROGRA~1\WIFD1F~1\MpShHook.dll [2006-11-03 83224]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WdfLoadGroup]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=
"HonorAutoRunSetting"=
"BackupNoCDBurning"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"
"C:\Program Files\AVG\AVG9\avgupd.exe"="C:\Program Files\AVG\AVG9\avgupd.exe:*:Enabled:avgupd.exe"
"C:\Program Files\AVG\AVG9\avgnsx.exe"="C:\Program Files\AVG\AVG9\avgnsx.exe:*:Enabled:avgnsx.exe"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"

======List of files/folders created in the last 1 months======

2010-01-23 17:45:17 ----D---- C:\Program Files\trend micro
2010-01-23 17:45:14 ----D---- C:\rsit
2010-01-23 17:22:49 ----D---- C:\WINDOWS\temp
2010-01-23 17:22:46 ----A---- C:\ComboFix.txt
2010-01-23 16:01:17 ----A---- C:\WINDOWS\MBR.exe
2010-01-23 15:56:57 ----D---- C:\Combo-Fix27901C
2010-01-23 15:56:07 ----D---- C:\Combo-Fix
2010-01-23 15:56:07 ----A---- C:\WINDOWS\system32\CF30679.exe
2010-01-23 15:55:09 ----A---- C:\WINDOWS\ntbtlog.txt
2010-01-23 13:03:55 ----D---- C:\Documents and Settings\Honza\Data aplikací\Mozilla
2010-01-23 13:02:41 ----D---- C:\Program Files\Mozilla Firefox
2010-01-13 20:55:11 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2010-01-13 20:55:01 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2010-01-12 21:04:46 ----D---- C:\WINDOWS\Minidump
2010-01-11 18:22:41 ----D---- C:\$AVG
2010-01-11 18:22:18 ----A---- C:\WINDOWS\system32\avgrsstx.dll
2010-01-11 18:21:47 ----D---- C:\Documents and Settings\All Users\Data aplikací\AVG Security Toolbar
2010-01-11 18:21:09 ----D---- C:\Documents and Settings\All Users\Data aplikací\avg9
2009-12-25 16:30:45 ----D---- C:\Program Files\Eidos

======List of files/folders modified in the last 1 months======

2010-01-23 17:45:17 ----RD---- C:\Program Files
2010-01-23 17:22:49 ----D---- C:\WINDOWS\system32\drivers
2010-01-23 17:22:49 ----D---- C:\WINDOWS
2010-01-23 17:22:49 ----D---- C:\Qoobox
2010-01-23 17:20:59 ----D---- C:\WINDOWS\system32\CatRoot2
2010-01-23 17:20:03 ----D---- C:\Documents and Settings\Honza\Data aplikací\Skype
2010-01-23 17:18:56 ----D---- C:\Documents and Settings\Honza\Data aplikací\skypePM
2010-01-23 17:17:41 ----A---- C:\WINDOWS\system.ini
2010-01-23 17:00:29 ----D---- C:\WINDOWS\system32
2010-01-23 17:00:29 ----D---- C:\WINDOWS\AppPatch
2010-01-23 17:00:26 ----D---- C:\Program Files\Common Files
2010-01-23 16:57:24 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-01-23 16:56:58 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-01-23 16:55:00 ----D---- C:\WINDOWS\system32\config
2010-01-23 16:54:43 ----D---- C:\WINDOWS\ERDNT
2010-01-23 16:50:08 ----A---- C:\WINDOWS\MAILTRAN.INI
2010-01-23 16:32:59 ----D---- C:\WINDOWS\Prefetch
2010-01-23 13:08:10 ----A---- C:\WINDOWS\TRNCOM.INI
2010-01-22 22:40:44 ----HD---- C:\WINDOWS\inf
2010-01-22 22:40:31 ----D---- C:\Program Files\Internet Explorer
2010-01-22 22:39:55 ----HD---- C:\WINDOWS\$hf_mig$
2010-01-17 16:50:28 ----D---- C:\WINDOWS\Debug
2010-01-13 20:55:56 ----SHD---- C:\WINDOWS\Installer
2010-01-13 20:55:54 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2010-01-11 18:22:30 ----SD---- C:\WINDOWS\Tasks
2010-01-11 18:21:12 ----D---- C:\Program Files\AVG
2010-01-11 18:21:01 ----D---- C:\WINDOWS\WinSxS
2010-01-11 18:21:01 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-01-11 18:19:10 ----SD---- C:\Documents and Settings\Honza\Data aplikací\Microsoft
2010-01-05 17:13:48 ----A---- C:\WINDOWS\NeroDigital.ini
2010-01-05 01:17:46 ----A---- C:\WINDOWS\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AvgLdx86;AVG Free AVI Loader Driver x86; C:\WINDOWS\System32\Drivers\avgldx86.sys [2010-01-11 333192]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86; C:\WINDOWS\System32\Drivers\avgmfx86.sys [2010-01-11 28424]
R1 AvgTdiX;AVG Free Network Redirector; C:\WINDOWS\System32\Drivers\avgtdix.sys [2010-01-11 360584]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R2 TBPanel;TBPanel; C:\WINDOWS\system32\drivers\TBPanel.sys [2007-03-16 12256]
R3 catchme;catchme; \??\C:\Combo-Fix12216C\catchme.sys []
R3 cmpci;C-Media PCI Audio Driver (WDM); C:\WINDOWS\system32\drivers\cmaudio.sys [2002-07-16 379726]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\WINDOWS\system32\DRIVERS\LHidFilt.Sys [2008-02-29 35344]
R3 LUsbFilt;Logitech SetPoint KMDF USB Filter; C:\WINDOWS\System32\Drivers\LUsbFilt.Sys [2008-02-29 28944]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 nv;nv; C:\WINDOWS\System32\DRIVERS\nv4_mini.sys [2007-04-19 3988384]
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\System32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbohci;Ovladač Miniport otevřeného hostitelského řadiče Microsoft USB; C:\WINDOWS\System32\DRIVERS\usbohci.sys [2008-04-13 17152]
R3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
S3 Cardex;Cardex; \??\C:\WINDOWS\system32\drivers\TBPANEL.SYS []
S3 L8042Kbd;Logitech SetPoint Keyboard Driver; C:\WINDOWS\system32\DRIVERS\L8042Kbd.sys [2007-01-23 20496]
S3 mbr;mbr; \??\C:\DOCUME~1\Honza\LOCALS~1\Temp\mbr.sys []
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
S4 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2008-07-19 717296]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avg9wd;AVG Free WatchDog; C:\Program Files\AVG\AVG9\avgwdsvc.exe [2010-01-11 285392]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2007-04-19 159810]
R3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-03-12 271920]
S2 gupdate1ca1381d2e7c416;Služba Google Update (gupdate1ca1381d2e7c416); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-08-02 133104]
S2 WinDefend;Windows Defender; C:\Program Files\Windows Defender\MsMpEng.exe [2006-11-03 13592]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-04-28 182768]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 LBTServ;Logitech Bluetooth Service; C:\Program Files\Common Files\Logitech\Bluetooth\LBTServ.exe [2008-05-02 121360]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-01-15 774144]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Re: Rootkit?

Napsal: 23 led 2010 22:16
od motji
Dobrý večer :)
Můžu poprosit o celý log z combofixu?

Re: Rootkit?

Napsal: 24 led 2010 16:57
od Vang
ComboFix 10-01-22.03 - Honza 23.01.2010 16:57:11.10.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.511.234 [GMT 1:00]
Spuštěný z: c:\documents and settings\Administrator\Plocha\Combo-Fix.exe
AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

Nakažená kopie c:\windows\system32\DRIVERS\atapi.sys byla nalezena a vyléčena.
Obnovena kopie z - Kitty ate it :p
Nakažená kopie c:\windows\system32\DRIVERS\atapi.sys byla nalezena a vyléčena.
Obnovena kopie z - Kitty ate it :p
.
((((((((((((((((((((((((( Soubory vytvořené od 2009-12-23 do 2010-01-23 )))))))))))))))))))))))))))))))
.

2010-01-23 14:56 . 2010-01-23 15:01 -------- d-----w- C:\Combo-Fix27901C
2010-01-23 14:56 . 2010-01-23 14:56 -------- d-----w- C:\Combo-Fix
2010-01-23 14:56 . 2010-01-23 14:56 390144 ----a-w- c:\windows\system32\CF30679.exe
2010-01-23 12:04 . 2010-01-23 12:04 0 ----a-w- c:\windows\nsreg.dat
2010-01-13 13:25 . 2009-11-21 16:03 471552 -c----w- c:\windows\system32\dllcache\aclayers.dll
2010-01-11 17:22 . 2010-01-11 17:22 -------- d-----w- C:\$AVG
2010-01-11 17:22 . 2010-01-11 17:22 12464 ----a-w- c:\windows\system32\avgrsstx.dll
2010-01-11 17:22 . 2010-01-11 17:22 360584 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2010-01-11 17:22 . 2010-01-11 17:22 333192 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2010-01-11 17:22 . 2010-01-11 17:22 28424 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2010-01-11 17:21 . 2010-01-23 11:39 -------- d-----w- c:\windows\system32\drivers\Avg
2009-12-25 15:30 . 2009-12-25 15:30 -------- d-----w- c:\program files\Eidos

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-11 17:21 . 2008-08-25 14:59 -------- d-----w- c:\program files\AVG
2009-12-21 19:08 . 2001-10-25 12:00 916480 ------w- c:\windows\system32\wininet.dll
2009-12-09 12:09 . 2001-10-25 12:00 440316 ----a-w- c:\windows\system32\perfh005.dat
2009-12-09 12:09 . 2001-10-25 12:00 83652 ----a-w- c:\windows\system32\perfc005.dat
2009-11-21 16:03 . 2001-10-25 12:00 471552 ----a-w- c:\windows\AppPatch\aclayers.dll
2009-11-02 19:42 . 2009-10-03 06:38 195456 ------w- c:\windows\system32\MpSigStub.exe
2009-06-06 18:16 . 2009-06-06 18:15 3018761 ----a-r- c:\program files\ComboFix.exe
.

((((((((((((((((((((((((((((( SnapShot_2009-06-27_16.39.00 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-07-11 19:54 . 2009-07-11 19:54 65536 c:\windows\WinSxS\x86_Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e79c4723\vcomp.dll
+ 2009-07-11 19:32 . 2009-07-11 19:32 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80KOR.dll
+ 2009-07-11 19:32 . 2009-07-11 19:32 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80JPN.dll
+ 2009-07-11 19:32 . 2009-07-11 19:32 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ITA.dll
+ 2009-07-11 19:32 . 2009-07-11 19:32 45056 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80CHT.dll
+ 2009-07-11 19:32 . 2009-07-11 19:32 40960 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80CHS.dll
+ 2009-07-11 19:32 . 2009-07-11 19:32 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80FRA.dll
+ 2009-07-11 19:32 . 2009-07-11 19:32 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ESP.dll
+ 2009-07-11 19:32 . 2009-07-11 19:32 57344 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ENU.dll
+ 2009-07-11 19:32 . 2009-07-11 19:32 65536 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80DEU.dll
+ 2009-07-12 00:07 . 2009-07-12 00:07 57856 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfcm80u.dll
+ 2009-07-12 00:19 . 2009-07-12 00:19 69632 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfcm80.dll
+ 2009-07-11 17:41 . 2009-07-11 17:41 97280 c:\windows\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_473666fd\ATL80.dll
+ 2010-01-23 16:18 . 2010-01-23 16:18 16384 c:\windows\temp\Perflib_Perfdata_c80.dat
+ 2007-07-30 17:19 . 2009-08-06 17:24 44768 c:\windows\system32\wups2.dll
+ 2008-07-08 16:50 . 2009-08-06 17:24 35552 c:\windows\system32\wups.dll
+ 2008-05-15 16:05 . 2009-08-06 17:24 53472 c:\windows\system32\wuauclt.exe
+ 2001-10-25 12:00 . 2009-06-25 08:27 54272 c:\windows\system32\wdigest.dll
+ 2008-07-25 04:32 . 2009-10-28 15:07 46080 c:\windows\system32\tzchange.exe
+ 2008-07-29 19:10 . 2008-07-29 19:10 26112 c:\windows\system32\TsWpfWrp.exe
+ 2001-10-25 12:00 . 2009-06-15 10:45 81408 c:\windows\system32\tlntsess.exe
+ 2001-10-25 12:00 . 2009-06-15 10:45 78336 c:\windows\system32\telnet.exe
- 2008-07-08 16:50 . 2008-04-14 03:22 75776 c:\windows\system32\strmfilt.dll
+ 2008-07-08 16:50 . 2009-10-21 05:40 75776 c:\windows\system32\strmfilt.dll
+ 2009-08-07 04:53 . 2008-07-06 12:06 89088 c:\windows\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
+ 2008-07-08 17:17 . 2008-11-10 10:41 67472 c:\windows\system32\spool\drivers\w32x86\msonpui.dll
+ 2008-07-08 17:17 . 2008-11-10 10:41 67472 c:\windows\system32\spool\drivers\w32x86\3\msonpui.dll
+ 2009-10-06 04:22 . 2009-08-06 17:24 44768 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.4.7600.226\wups2.dll
+ 2009-10-06 04:22 . 2009-08-06 17:24 35552 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.4.7600.226\wups.dll
- 2001-10-25 12:00 . 2009-02-03 19:58 56832 c:\windows\system32\secur32.dll
+ 2001-10-25 12:00 . 2009-06-25 08:27 56832 c:\windows\system32\secur32.dll
+ 2009-07-21 21:53 . 2008-04-14 02:29 14592 c:\windows\system32\ReinstallBackups\0004\DriverFiles\i386\kbdhid.sys
+ 2009-07-21 21:53 . 2008-04-14 02:29 24576 c:\windows\system32\ReinstallBackups\0004\DriverFiles\i386\kbdclass.sys
+ 2009-07-21 21:53 . 2007-01-23 13:45 28176 c:\windows\system32\ReinstallBackups\0003\DriverFiles\LUsbFilt.sys
+ 2009-07-21 21:53 . 2008-04-13 18:45 10368 c:\windows\system32\ReinstallBackups\0003\DriverFiles\i386\hidusb.sys
+ 2009-07-21 21:53 . 2008-04-13 18:45 24960 c:\windows\system32\ReinstallBackups\0003\DriverFiles\i386\hidparse.sys
+ 2009-07-21 21:53 . 2008-04-13 18:45 36864 c:\windows\system32\ReinstallBackups\0003\DriverFiles\i386\hidclass.sys
+ 2009-07-21 21:53 . 2008-04-14 03:21 20992 c:\windows\system32\ReinstallBackups\0003\DriverFiles\i386\hid.dll
+ 2009-07-21 21:53 . 2007-01-23 13:45 34576 c:\windows\system32\ReinstallBackups\0001\DriverFiles\LHidFilt.Sys
+ 2001-10-25 12:00 . 2009-10-12 13:40 79872 c:\windows\system32\raschap.dll
- 2001-10-25 12:00 . 2008-04-14 03:21 79872 c:\windows\system32\raschap.dll
+ 2008-07-29 17:59 . 2008-07-29 17:59 43544 c:\windows\system32\PresentationHostProxy.dll
+ 2001-10-25 12:00 . 2009-12-09 12:09 71846 c:\windows\system32\perfc009.dat
+ 2008-07-25 09:17 . 2008-07-25 09:17 15360 c:\windows\system32\mui\0409\mscorees.dll
+ 2008-07-08 17:17 . 2008-11-10 10:41 32656 c:\windows\system32\msonpmon.dll
+ 2007-08-13 16:54 . 2009-12-21 19:08 55296 c:\windows\system32\msfeedsbs.dll
- 2007-08-13 16:54 . 2009-03-08 02:31 55296 c:\windows\system32\msfeedsbs.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 83968 c:\windows\system32\mscories.dll
+ 2001-10-25 12:00 . 2009-09-04 21:05 58880 c:\windows\system32\msasn1.dll
+ 2009-06-20 13:55 . 2008-05-02 00:40 84496 c:\windows\system32\KemXML.dll
+ 2001-10-25 12:00 . 2009-12-21 19:08 25600 c:\windows\system32\jsproxy.dll
- 2001-10-25 12:00 . 2009-04-30 21:16 25600 c:\windows\system32\jsproxy.dll
+ 2008-07-29 17:24 . 2008-07-29 17:24 97800 c:\windows\system32\infocardapi.dll
+ 2008-07-29 17:24 . 2008-07-29 17:24 11264 c:\windows\system32\icardres.dll
+ 2008-07-08 16:50 . 2009-10-21 05:40 25088 c:\windows\system32\httpapi.dll
+ 2001-10-25 12:00 . 2009-10-15 16:32 81920 c:\windows\system32\fontsub.dll
+ 2008-07-29 19:10 . 2008-07-29 19:10 73720 c:\windows\system32\dxva2.dll
+ 2009-06-20 13:56 . 2008-02-29 01:13 28944 c:\windows\system32\drivers\LUsbFilt.sys
+ 2009-06-20 13:56 . 2008-02-29 01:13 35344 c:\windows\system32\drivers\LHidFilt.Sys
+ 2001-10-25 12:00 . 2009-06-24 11:18 92928 c:\windows\system32\drivers\ksecdd.sys
- 2001-10-25 12:00 . 2008-04-13 18:45 10368 c:\windows\system32\drivers\hidusb.sys
+ 2001-10-25 12:00 . 2008-04-13 18:45 10368 c:\windows\system32\drivers\hidusb.sys
+ 2009-06-10 06:08 . 2009-12-21 19:08 12800 c:\windows\system32\dllcache\xpshims.dll
- 2009-06-10 06:08 . 2009-04-30 21:16 12800 c:\windows\system32\dllcache\xpshims.dll
+ 2008-07-08 16:50 . 2009-08-06 17:24 35552 c:\windows\system32\dllcache\wups.dll
+ 2008-05-15 16:05 . 2009-08-06 17:24 53472 c:\windows\system32\dllcache\wuauclt.exe
+ 2009-06-25 08:27 . 2009-06-25 08:27 54272 c:\windows\system32\dllcache\wdigest.dll
+ 2009-06-15 10:45 . 2009-06-15 10:45 81408 c:\windows\system32\dllcache\tlntsess.exe
+ 2009-06-15 10:45 . 2009-06-15 10:45 78336 c:\windows\system32\dllcache\telnet.exe
+ 2009-10-21 05:40 . 2009-10-21 05:40 75776 c:\windows\system32\dllcache\strmfilt.dll
+ 2009-02-03 19:58 . 2009-06-25 08:27 56832 c:\windows\system32\dllcache\secur32.dll
- 2009-02-03 19:58 . 2009-02-03 19:58 56832 c:\windows\system32\dllcache\secur32.dll
+ 2009-10-12 13:40 . 2009-10-12 13:40 79872 c:\windows\system32\dllcache\raschap.dll
+ 2008-09-05 04:31 . 2009-12-21 19:08 55296 c:\windows\system32\dllcache\msfeedsbs.dll
- 2008-09-05 04:31 . 2009-03-08 02:31 55296 c:\windows\system32\dllcache\msfeedsbs.dll
+ 2009-09-04 21:05 . 2009-09-04 21:05 58880 c:\windows\system32\dllcache\msasn1.dll
+ 2009-06-24 11:18 . 2009-06-24 11:18 92928 c:\windows\system32\dllcache\ksecdd.sys
- 2008-04-21 07:03 . 2009-04-30 21:16 25600 c:\windows\system32\dllcache\jsproxy.dll
+ 2008-04-21 07:03 . 2009-12-21 19:08 25600 c:\windows\system32\dllcache\jsproxy.dll
+ 2009-10-21 05:40 . 2009-10-21 05:40 25088 c:\windows\system32\dllcache\httpapi.dll
+ 2001-10-25 12:00 . 2008-04-13 18:45 10368 c:\windows\system32\dllcache\hidusb.sys
+ 2001-10-25 12:00 . 2008-04-13 18:45 24960 c:\windows\system32\dllcache\hidparse.sys
+ 2001-10-25 12:00 . 2008-04-13 18:45 36864 c:\windows\system32\dllcache\hidclass.sys
+ 2009-06-16 14:40 . 2009-10-15 16:32 81920 c:\windows\system32\dllcache\fontsub.dll
+ 2009-08-07 04:53 . 2008-07-06 12:06 89088 c:\windows\system32\dllcache\filterpipelineprintproc.dll
+ 2001-10-25 12:00 . 2009-08-06 17:24 96480 c:\windows\system32\dllcache\cdm.dll
+ 2009-06-10 14:15 . 2009-06-10 14:15 84992 c:\windows\system32\dllcache\avifil32.dll
+ 2009-07-17 19:04 . 2009-07-17 19:04 58880 c:\windows\system32\dllcache\atl.dll
+ 2001-10-25 12:00 . 2008-04-13 18:40 96512 c:\windows\system32\dllcache\atapi.sys
+ 2008-07-25 09:16 . 2008-07-25 09:16 96760 c:\windows\system32\dfshim.dll
+ 2001-10-25 12:00 . 2009-08-06 17:24 96480 c:\windows\system32\cdm.dll
- 2001-10-25 12:00 . 2008-04-14 03:21 84992 c:\windows\system32\avifil32.dll
+ 2001-10-25 12:00 . 2009-06-10 14:15 84992 c:\windows\system32\avifil32.dll
+ 2001-10-25 12:00 . 2009-07-17 19:04 58880 c:\windows\system32\atl.dll
- 2001-10-25 12:00 . 2008-04-14 03:21 58880 c:\windows\system32\atl.dll
+ 2008-07-29 21:40 . 2008-07-29 21:40 70648 c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
+ 2008-07-29 21:40 . 2008-07-29 21:40 91136 c:\windows\Microsoft.NET\Framework\v3.5\MSBuild.exe
+ 2008-07-29 21:40 . 2008-07-29 21:40 41984 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft.VisualC.STLCLR.dll
+ 2008-07-29 21:40 . 2008-07-29 21:40 40960 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft.Data.Entity.Build.Tasks.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 89080 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.2052.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 92664 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1042.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 95224 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1041.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 89592 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1028.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 84480 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.2052.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 94720 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1042.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 97792 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1041.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 84992 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1028.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 97280 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\DeleteTemp.exe
+ 2008-07-29 21:40 . 2008-07-29 21:40 95224 c:\windows\Microsoft.NET\Framework\v3.5\EdmGen.exe
+ 2008-07-29 21:40 . 2008-07-29 21:40 78856 c:\windows\Microsoft.NET\Framework\v3.5\DataSvcUtil.exe
+ 2008-07-29 21:40 . 2008-07-29 21:40 41984 c:\windows\Microsoft.NET\Framework\v3.5\AddInUtil.exe
+ 2008-07-29 21:40 . 2008-07-29 21:40 41992 c:\windows\Microsoft.NET\Framework\v3.5\AddInProcess32.exe
+ 2008-07-29 21:40 . 2008-07-29 21:40 41992 c:\windows\Microsoft.NET\Framework\v3.5\AddInProcess.exe
+ 2008-07-29 19:10 . 2008-07-29 19:10 46104 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
+ 2008-07-29 17:59 . 2008-07-29 17:59 32768 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationCFFRasterizer.dll
+ 2008-07-29 19:10 . 2008-07-29 19:10 71160 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PenIMC.dll
+ 2008-07-29 17:32 . 2008-07-29 17:32 17448 c:\windows\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\PerformanceCounterInstaller.exe
+ 2008-07-29 17:16 . 2008-07-29 17:16 32768 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
+ 2008-07-29 17:16 . 2008-07-29 17:16 73728 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.Install.dll
+ 2008-07-29 17:16 . 2008-07-29 17:16 20504 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceMonikerSupport.dll
+ 2008-07-29 17:16 . 2008-07-29 17:16 11280 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelEvents.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 37896 c:\windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 81400 c:\windows\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL
+ 2008-07-25 09:17 . 2008-07-25 09:17 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 57392 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
- 2005-09-23 05:28 . 2005-09-23 05:28 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
- 2005-09-23 05:28 . 2005-09-23 05:28 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 95232 c:\windows\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 16896 c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 61952 c:\windows\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe
+ 2008-07-25 09:17 . 2008-07-25 09:17 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
- 2005-09-23 05:28 . 2005-09-23 05:28 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
+ 2008-07-25 09:17 . 2008-07-25 09:17 53248 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
- 2005-09-23 05:28 . 2005-09-23 05:28 53248 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
+ 2008-07-25 09:17 . 2008-07-25 09:17 88584 c:\windows\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 24584 c:\windows\Microsoft.NET\Framework\v2.0.50727\normalization.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 31744 c:\windows\Microsoft.NET\Framework\v2.0.50727\MUI\0409\mscorsecr.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 19456 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscortim.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 69632 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
+ 2008-07-25 09:16 . 2008-07-25 09:16 18944 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 77312 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 94208 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorld.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 46592 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorie.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 83456 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 69632 c:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
- 2005-09-23 05:28 . 2005-09-23 05:28 69632 c:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
+ 2008-07-25 09:16 . 2008-07-25 09:16 97792 c:\windows\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
- 2005-09-23 05:28 . 2005-09-23 05:28 12800 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 12800 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
- 2005-09-23 05:28 . 2005-09-23 05:28 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
- 2005-09-23 05:28 . 2005-09-23 05:28 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
- 2005-09-23 05:28 . 2005-09-23 05:28 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
- 2005-09-23 05:28 . 2005-09-23 05:28 40960 c:\windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe
+ 2008-07-25 09:16 . 2008-07-25 09:16 40960 c:\windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe
+ 2008-07-25 09:17 . 2008-07-25 09:17 72192 c:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
- 2005-09-23 05:28 . 2005-09-23 05:28 72192 c:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 65032 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
- 2007-04-13 01:21 . 2007-04-13 01:21 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
+ 2008-07-25 09:17 . 2008-07-25 09:17 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEHost.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 18936 c:\windows\Microsoft.NET\Framework\v2.0.50727\fusion.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 62968 c:\windows\Microsoft.NET\Framework\v2.0.50727\dfdll.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 35320 c:\windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
+ 2008-07-25 09:17 . 2008-07-25 09:17 69120 c:\windows\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 27136 c:\windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
- 2005-09-23 05:28 . 2005-09-23 05:28 13312 c:\windows\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 13312 c:\windows\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 80376 c:\windows\Microsoft.NET\Framework\v2.0.50727\csc.exe
+ 2008-07-25 09:17 . 2008-07-25 09:17 89608 c:\windows\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll
+ 2008-11-25 02:59 . 2008-11-25 02:59 31560 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
+ 2008-07-25 09:16 . 2008-07-25 09:16 34312 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
+ 2008-07-25 09:16 . 2008-07-25 09:16 33288 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
+ 2008-07-25 09:16 . 2008-07-25 09:16 24576 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
+ 2008-07-25 09:16 . 2008-07-25 09:16 84480 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 33800 c:\windows\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 17416 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 22024 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll
- 2005-09-23 05:28 . 2005-09-23 05:28 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
+ 2008-07-25 09:16 . 2008-07-25 09:16 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
+ 2008-07-25 09:17 . 2008-07-25 09:17 58880 c:\windows\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
+ 2008-07-25 09:16 . 2008-07-25 09:16 98808 c:\windows\Microsoft.NET\Framework\v2.0.50727\alink.dll
- 2005-09-23 05:28 . 2005-09-23 05:28 10752 c:\windows\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 10752 c:\windows\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 13824 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll
+ 2009-06-24 17:56 . 2009-06-24 17:56 73728 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe
- 2007-04-13 18:58 . 2007-04-13 18:58 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
+ 2008-05-27 22:49 . 2008-05-27 22:49 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
- 2007-04-13 18:57 . 2007-04-13 18:57 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
+ 2008-05-27 22:49 . 2008-05-27 22:49 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
- 2007-04-13 18:57 . 2007-04-13 18:57 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
+ 2008-05-27 22:49 . 2008-05-27 22:49 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
- 2007-04-13 19:30 . 2007-04-13 19:30 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
+ 2008-05-27 23:30 . 2008-05-27 23:30 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
+ 2008-07-25 09:16 . 2008-07-25 09:16 96768 c:\windows\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 16896 c:\windows\Microsoft.NET\Framework\SharedReg12.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 16896 c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 16896 c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 16896 c:\windows\Microsoft.NET\Framework\sbscmp10.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 82944 c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe
+ 2008-07-08 17:13 . 2008-07-08 17:13 50688 c:\windows\Installer\7569a.msi
+ 2009-11-03 22:12 . 2009-11-03 22:12 22528 c:\windows\Installer\2c635c.msi
+ 2008-07-29 19:07 . 2008-07-29 19:07 23040 c:\windows\Installer\221642.msp
+ 2009-08-07 04:51 . 2009-08-07 04:51 88576 c:\windows\Installer\1dc25b.msi
+ 2009-04-28 16:11 . 2009-04-28 16:11 24064 c:\windows\Installer\19ddf6.msi
+ 2009-11-25 12:08 . 2009-11-25 12:08 32768 c:\windows\Installer\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}\icon.exe
- 2008-07-08 17:17 . 2009-06-14 19:19 35088 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\oisicon.exe
+ 2008-07-08 17:17 . 2010-01-13 19:55 35088 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\oisicon.exe
+ 2008-07-08 17:17 . 2010-01-13 19:55 18704 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\mspicons.exe
- 2008-07-08 17:17 . 2009-06-14 19:19 18704 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\mspicons.exe
+ 2008-07-08 17:17 . 2010-01-13 19:55 20240 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\cagicon.exe
- 2008-07-08 17:17 . 2009-06-14 19:19 20240 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\cagicon.exe
+ 2009-07-21 21:54 . 2009-07-21 21:54 10134 c:\windows\Installer\{0C826C5B-B131-423A-A229-C71B3CACCD6A}\ARPPRODUCTICON.exe
+ 2006-07-24 08:50 . 2006-07-24 08:50 47920 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.6425\VBAME.DLL
+ 2006-07-24 08:50 . 2006-07-24 08:50 92976 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.6425\MSADDNDR.DLL
+ 2008-07-08 17:16 . 2008-07-08 17:16 12096 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\WORDPOL.DLL
+ 2006-10-26 20:58 . 2006-10-26 20:58 33080 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\VPREVIEW.EXE
+ 2008-07-08 17:16 . 2008-07-08 17:16 12080 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\VBIDEPOL.DLL
+ 2008-07-08 17:16 . 2008-07-08 17:16 64288 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\VBIDEPIA.DLL
+ 2006-10-26 17:59 . 2006-10-26 17:59 15672 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\SMARTTAGINSTALL.EXE
+ 2006-10-26 17:49 . 2006-10-26 17:49 34104 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\SETLANG.EXE
+ 2006-10-26 18:12 . 2006-10-26 18:12 40424 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\REFIEBAR.DLL
+ 2006-10-26 18:09 . 2006-10-26 18:09 48448 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\PUBTRAP.DLL
+ 2008-07-08 17:16 . 2008-07-08 17:16 12112 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\PPTPOL.DLL
+ 2006-10-26 17:59 . 2006-10-26 17:59 46936 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\OSETUPPS.DLL
+ 2006-10-26 17:59 . 2006-10-26 17:59 18760 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\OPHPROXY.DLL
+ 2006-10-26 17:59 . 2006-10-26 17:59 16728 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\OMUOPTINPS.DLL
+ 2006-10-26 18:00 . 2006-10-26 18:00 23392 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\OISCTRL.DLL
+ 2006-10-27 13:11 . 2006-10-27 13:11 54680 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\OFFRHD.DLL
+ 2008-07-08 17:16 . 2008-07-08 17:16 11544 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\OFFICEPL.DLL
+ 2008-07-08 17:16 . 2008-07-08 17:16 12104 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\MSTAGPOL.DLL
+ 2008-07-08 17:16 . 2008-07-08 17:16 20280 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\MSTAGPIA.DLL
+ 2006-10-26 17:59 . 2006-10-26 17:59 43832 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\MSSH.DLL
+ 2006-10-27 13:26 . 2006-10-27 13:26 35152 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\MSOSTYLE.DLL
+ 2006-10-26 17:56 . 2006-10-26 17:56 67408 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\MSONPUI.DLL
+ 2006-10-26 17:56 . 2006-10-26 17:56 32592 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\MSONPMON.DLL
+ 2006-10-26 17:52 . 2006-10-26 17:52 66368 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\MSOMSE.DLL
+ 2006-10-26 18:12 . 2006-10-26 18:12 67896 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\MSOHTMED.EXE
+ 2006-10-27 13:01 . 2006-10-27 13:01 76088 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\MSOHEV.DLL
+ 2006-10-26 17:59 . 2006-10-26 17:59 19768 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\MSMH.DLL
+ 2006-10-26 17:52 . 2006-10-26 17:52 48424 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\MSE7.EXE
+ 2006-10-26 18:12 . 2006-10-26 18:12 89400 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\METCONV.DLL
+ 2006-10-26 19:41 . 2006-10-26 19:41 66368 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\INLAUNCH.DLL
+ 2008-07-08 17:16 . 2008-07-08 17:16 12096 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\GRAPHPOL.DLL
+ 2008-07-08 17:15 . 2008-07-08 17:15 12096 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\EXCELPOL.DLL
+ 2006-10-26 18:12 . 2006-10-26 18:12 53576 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\AUTHZAX.DLL
+ 2006-10-26 19:18 . 2006-10-26 19:18 94016 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\ACCOLK.DLL
+ 2010-01-22 21:40 . 2009-10-29 07:43 12800 c:\windows\ie8updates\KB978207-IE8\xpshims.dll
+ 2010-01-22 21:40 . 2009-10-29 07:43 55296 c:\windows\ie8updates\KB978207-IE8\msfeedsbs.dll
+ 2010-01-22 21:40 . 2009-10-29 07:43 25600 c:\windows\ie8updates\KB978207-IE8\jsproxy.dll
+ 2009-12-09 06:37 . 2009-08-29 07:58 12800 c:\windows\ie8updates\KB976325-IE8\xpshims.dll
+ 2009-12-09 06:37 . 2009-08-29 07:58 55296 c:\windows\ie8updates\KB976325-IE8\msfeedsbs.dll
+ 2009-12-09 06:37 . 2009-08-29 07:58 25600 c:\windows\ie8updates\KB976325-IE8\jsproxy.dll
+ 2009-10-22 17:55 . 2009-07-03 16:59 12800 c:\windows\ie8updates\KB974455-IE8\xpshims.dll
+ 2009-10-22 17:55 . 2009-07-03 16:59 55296 c:\windows\ie8updates\KB974455-IE8\msfeedsbs.dll
+ 2009-10-22 17:55 . 2009-07-03 16:59 25600 c:\windows\ie8updates\KB974455-IE8\jsproxy.dll
+ 2009-07-29 19:28 . 2009-04-30 21:16 12800 c:\windows\ie8updates\KB972260-IE8\xpshims.dll
+ 2009-07-29 19:28 . 2009-03-08 02:31 55296 c:\windows\ie8updates\KB972260-IE8\msfeedsbs.dll
+ 2009-07-29 19:28 . 2009-04-30 21:16 25600 c:\windows\ie8updates\KB972260-IE8\jsproxy.dll
+ 2009-08-07 04:53 . 2008-07-06 12:06 89088 c:\windows\Driver Cache\i386\filterpipelineprintproc.dll
+ 2009-10-18 12:17 . 2009-10-18 12:17 90112 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_fc9fbfb3\System.Drawing.Design.dll
+ 2009-10-18 12:17 . 2009-10-18 12:17 61440 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_358dd91a\CustomMarshalers.dll
+ 2009-10-18 13:55 . 2009-10-18 13:55 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\b4a9e413d5cd6d6ec2d50aa05381e293\UIAutomationProvider.ni.dll
+ 2009-10-18 16:10 . 2009-10-18 16:10 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\8acb476a0d4ee17a12881e17ae74a6af\System.Windows.Presentation.ni.dll
+ 2009-10-18 16:10 . 2009-10-18 16:10 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\4b87ca3482a3c0ee733e028ecee7de65\System.Web.DynamicData.Design.ni.dll
+ 2009-10-18 16:08 . 2009-10-18 16:08 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\a0c71055364bd356971791284c3fb910\System.ComponentModel.DataAnnotations.ni.dll
+ 2009-10-18 16:08 . 2009-10-18 16:08 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\f9a75bbdc2ce7db578b5977766a09b99\System.AddIn.Contract.ni.dll
+ 2009-10-18 13:44 . 2009-10-18 13:44 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\3dd0f86c966c75755d62eab8ddf0634c\PresentationFontCache.ni.exe
+ 2009-10-18 13:43 . 2009-10-18 13:43 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\034d081fe294bab1ee1ecc98c1181424\PresentationCFFRasterizer.ni.dll
+ 2009-10-18 16:10 . 2009-10-18 16:10 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\f2673aec397c52796aef05bb9d2668df\Microsoft.Vsa.ni.dll
+ 2009-10-18 16:08 . 2009-10-18 16:08 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\d513fe1a81c441e7656a9b062cff4e9f\Microsoft.Build.Framework.ni.dll
+ 2009-10-18 16:08 . 2009-10-18 16:08 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\c5d504724d7f351b1d034615dbb72a2a\Microsoft.Build.Framework.ni.dll
+ 2009-10-18 16:08 . 2009-10-18 16:08 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\a664ccab020f93f1d533919f57131190\dfsvc.ni.exe
+ 2009-10-18 15:20 . 2009-10-18 15:20 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\e63d6d26b8a664cfdfbd4ad75e03c14d\Accessibility.ni.dll
+ 2009-08-07 04:53 . 2009-08-07 04:53 94208 c:\windows\assembly\GAC_MSIL\WindowsFormsIntegration\3.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
+ 2009-08-07 04:53 . 2009-08-07 04:53 98304 c:\windows\assembly\GAC_MSIL\UIAutomationTypes\3.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
+ 2009-08-07 04:53 . 2009-08-07 04:53 40960 c:\windows\assembly\GAC_MSIL\UIAutomationProvider\3.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
+ 2009-08-07 04:55 . 2009-08-07 04:55 12288 c:\windows\assembly\GAC_MSIL\System.Windows.Presentation\3.5.0.0__b77a5c561934e089\System.Windows.Presentation.dll
+ 2009-08-07 04:55 . 2009-08-07 04:55 61440 c:\windows\assembly\GAC_MSIL\System.Web.Routing\3.5.0.0__31bf3856ad364e35\System.Web.Routing.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2009-08-07 04:55 . 2009-08-07 04:55 32768 c:\windows\assembly\GAC_MSIL\System.Web.DynamicData.Design\3.5.0.0__31bf3856ad364e35\System.Web.DynamicData.Design.dll
+ 2009-08-07 04:55 . 2009-08-07 04:55 77824 c:\windows\assembly\GAC_MSIL\System.Web.Abstractions\3.5.0.0__31bf3856ad364e35\System.Web.Abstractions.dll
+ 2009-08-07 04:53 . 2009-08-07 04:53 32768 c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
+ 2009-08-07 04:53 . 2009-08-07 04:53 73728 c:\windows\assembly\GAC_MSIL\System.ServiceModel.Install\3.0.0.0__b77a5c561934e089\System.ServiceModel.Install.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
- 2009-05-03 12:21 . 2009-05-03 12:21 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
+ 2009-08-07 04:55 . 2009-08-07 04:55 53248 c:\windows\assembly\GAC_MSIL\System.Data.DataSetExtensions\3.5.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2009-05-03 12:21 . 2009-05-03 12:21 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
+ 2009-08-07 04:55 . 2009-08-07 04:55 57344 c:\windows\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\3.5.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
+ 2009-08-07 04:54 . 2009-08-07 04:54 45056 c:\windows\assembly\GAC_MSIL\System.AddIn.Contract\2.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
+ 2009-08-07 04:53 . 2009-08-07 04:53 46104 c:\windows\assembly\GAC_MSIL\PresentationFontCache\3.0.0.0__31bf3856ad364e35\PresentationFontCache.exe
+ 2009-08-07 04:53 . 2009-08-07 04:53 32768 c:\windows\assembly\GAC_MSIL\PresentationCFFRasterizer\3.0.0.0__31bf3856ad364e35\PresentationCFFRasterizer.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
- 2009-05-03 12:21 . 2009-05-03 12:21 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
- 2009-05-03 12:21 . 2009-05-03 12:21 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2009-08-07 04:54 . 2009-08-07 04:54 41984 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\1.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.STLCLR.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
- 2009-05-03 12:21 . 2009-05-03 12:21 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
+ 2009-08-07 04:54 . 2009-08-07 04:54 94208 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.v3.5.dll
+ 2009-08-07 04:54 . 2009-08-07 04:54 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
- 2009-05-03 12:21 . 2009-05-03 12:21 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
- 2009-05-03 12:21 . 2009-05-03 12:21 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
- 2009-05-03 12:21 . 2009-05-03 12:21 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
- 2009-05-03 12:21 . 2009-05-03 12:21 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2009-11-24 12:27 . 2009-11-24 12:27 10576 c:\windows\assembly\GAC\Policy.11.0.office\12.0.0.0__71e9bce111e9429c\Policy.11.0.Office.dll
+ 2009-11-24 12:27 . 2009-11-24 12:27 11112 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Vbe.Interop\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Vbe.Interop.dll
+ 2009-11-24 12:27 . 2009-11-24 12:27 11128 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Word.dll
+ 2009-11-24 12:26 . 2009-11-24 12:26 11136 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.SmartTag\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.SmartTag.dll
+ 2009-11-24 12:28 . 2009-11-24 12:28 11152 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.PowerPoint\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.PowerPoint.dll
+ 2009-11-24 12:26 . 2009-11-24 12:26 11128 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Graph\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Graph.dll
+ 2009-11-24 12:27 . 2009-11-24 12:27 11144 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Excel\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Excel.dll
+ 2009-11-24 12:27 . 2009-11-24 12:27 63336 c:\windows\assembly\GAC\Microsoft.Vbe.Interop\12.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.dll
+ 2009-11-24 12:26 . 2009-11-24 12:26 19320 c:\windows\assembly\GAC\Microsoft.Office.Interop.SmartTag\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.SmartTag.dll
+ 2009-11-25 12:09 . 2009-07-14 11:03 46080 c:\windows\$NtUninstallKB976098-v2$\tzchange.exe
+ 2009-11-25 12:09 . 2009-10-29 02:05 16896 c:\windows\$NtUninstallKB976098-v2$\spuninst\tzchange.dll
+ 2009-10-18 12:20 . 2008-04-14 03:21 57344 c:\windows\$NtUninstallKB974571$\msasn1.dll
+ 2009-12-09 06:37 . 2008-04-14 03:21 79872 c:\windows\$NtUninstallKB974318$\raschap.dll
+ 2009-08-12 11:14 . 2008-04-14 03:21 58880 c:\windows\$NtUninstallKB973507$\atl.dll
+ 2009-08-12 11:15 . 2008-04-14 03:21 84992 c:\windows\$NtUninstallKB971557$\avifil32.dll
+ 2009-08-26 17:44 . 2008-10-23 10:06 62976 c:\windows\$NtUninstallKB970653-v3$\tzchange.exe
+ 2009-08-26 17:44 . 2009-07-16 04:18 14336 c:\windows\$NtUninstallKB970653-v3$\spuninst\tzchange.dll
+ 2009-12-09 06:37 . 2008-04-14 03:22 75776 c:\windows\$NtUninstallKB970430$\strmfilt.dll
+ 2009-12-09 06:37 . 2008-04-14 03:21 24576 c:\windows\$NtUninstallKB970430$\httpapi.dll
+ 2009-08-18 03:11 . 2008-04-14 03:22 49152 c:\windows\$NtUninstallKB968389$\wdigest.dll
+ 2009-08-18 03:11 . 2009-02-03 19:58 56832 c:\windows\$NtUninstallKB968389$\secur32.dll
+ 2009-08-18 03:11 . 2008-04-13 18:31 92288 c:\windows\$NtUninstallKB968389$\ksecdd.sys
+ 2009-07-19 19:24 . 2008-04-14 03:21 80896 c:\windows\$NtUninstallKB961371$\fontsub.dll
+ 2009-08-12 11:15 . 2008-04-14 03:22 78848 c:\windows\$NtUninstallKB960859$\tlntsess.exe
+ 2009-08-12 11:15 . 2008-04-14 03:22 77824 c:\windows\$NtUninstallKB960859$\telnet.exe
+ 2009-11-04 08:15 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB976749-IE8\update\spcustom.dll
+ 2009-11-04 08:15 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB976749-IE8\spmsg.dll
+ 2009-12-09 06:37 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB976325-IE8\update\spcustom.dll
+ 2009-12-09 06:37 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB976325-IE8\spmsg.dll

Re: Rootkit? 2.část

Napsal: 24 led 2010 16:59
od Vang
+ 2009-12-09 05:25 . 2009-10-29 07:38 12800 c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\xpshims.dll
+ 2009-12-09 05:25 . 2009-10-29 07:38 55296 c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\msfeedsbs.dll
+ 2009-12-09 05:25 . 2009-10-29 07:38 25600 c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\jsproxy.dll
+ 2009-10-18 12:14 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB975467\update\spcustom.dll
+ 2009-10-18 12:14 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB975467\spmsg.dll
+ 2009-10-18 12:20 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB975025\update\spcustom.dll
+ 2009-10-18 12:20 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB975025\spmsg.dll
+ 2009-10-18 12:20 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB974571\update\spcustom.dll
+ 2009-10-18 12:20 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB974571\spmsg.dll
+ 2009-09-04 21:01 . 2009-09-04 21:01 58880 c:\windows\$hf_mig$\KB974571\SP3QFE\msasn1.dll
+ 2009-10-22 17:55 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB974455-IE8\update\spcustom.dll
+ 2009-10-22 17:55 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB974455-IE8\spmsg.dll
+ 2009-10-22 12:38 . 2009-08-29 07:51 12800 c:\windows\$hf_mig$\KB974455-IE8\SP3QFE\xpshims.dll
+ 2009-10-22 12:37 . 2009-08-29 07:51 55296 c:\windows\$hf_mig$\KB974455-IE8\SP3QFE\msfeedsbs.dll
+ 2009-10-22 12:38 . 2009-08-29 07:51 25600 c:\windows\$hf_mig$\KB974455-IE8\SP3QFE\jsproxy.dll
+ 2009-12-09 06:35 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB974392\update\spcustom.dll
+ 2009-12-09 06:35 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB974392\spmsg.dll
+ 2009-12-09 06:37 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB974318\update\spcustom.dll
+ 2009-12-09 06:37 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB974318\spmsg.dll
+ 2009-10-12 13:33 . 2009-10-12 13:33 79872 c:\windows\$hf_mig$\KB974318\SP3QFE\raschap.dll
+ 2009-10-18 12:20 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB974112\update\spcustom.dll
+ 2009-10-18 12:20 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB974112\spmsg.dll
+ 2009-12-09 06:36 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB973904\update\spcustom.dll
+ 2009-12-09 06:36 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB973904\spmsg.dll
+ 2009-08-12 11:15 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB973869\update\spcustom.dll
+ 2009-08-12 11:15 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB973869\spmsg.dll
+ 2009-08-12 11:11 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB973815\update\spcustom.dll
+ 2009-08-12 11:11 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB973815\spmsg.dll
+ 2009-11-25 12:09 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB973687\update\spcustom.dll
+ 2009-11-25 12:09 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB973687\spmsg.dll
+ 2009-10-18 12:15 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB973525\update\spcustom.dll
+ 2009-10-18 12:15 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB973525\spmsg.dll
+ 2009-08-12 11:14 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB973507\update\spcustom.dll
+ 2009-08-12 11:14 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB973507\spmsg.dll
+ 2009-07-17 19:27 . 2009-07-17 19:27 58880 c:\windows\$hf_mig$\KB973507\SP3QFE\atl.dll
+ 2009-08-12 11:14 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB973354\update\spcustom.dll
+ 2009-08-12 11:14 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB973354\spmsg.dll
+ 2009-07-19 19:28 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB973346\update\spcustom.dll
+ 2009-07-19 19:28 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB973346\spmsg.dll
+ 2009-07-29 19:28 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB972260-IE8\update\spcustom.dll
+ 2009-07-29 19:28 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB972260-IE8\spmsg.dll
+ 2009-07-29 12:36 . 2009-07-03 17:02 12800 c:\windows\$hf_mig$\KB972260-IE8\SP3QFE\xpshims.dll
+ 2009-07-29 12:36 . 2009-07-03 17:02 55296 c:\windows\$hf_mig$\KB972260-IE8\SP3QFE\msfeedsbs.dll
+ 2009-07-29 12:36 . 2009-07-03 17:02 25600 c:\windows\$hf_mig$\KB972260-IE8\SP3QFE\jsproxy.dll
+ 2009-09-10 14:46 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB971961-IE8\update\spcustom.dll
+ 2009-09-10 14:46 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB971961-IE8\spmsg.dll
+ 2009-12-09 06:35 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB971737\update\spcustom.dll
+ 2009-12-09 06:35 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB971737\spmsg.dll
+ 2009-08-12 11:15 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB971657\update\spcustom.dll
+ 2009-08-12 11:15 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB971657\spmsg.dll
+ 2009-07-19 19:28 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB971633\update\spcustom.dll
+ 2009-07-19 19:28 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB971633\spmsg.dll
+ 2009-08-12 11:15 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB971557\update\spcustom.dll
+ 2009-08-12 11:15 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB971557\spmsg.dll
+ 2009-06-10 14:02 . 2009-06-10 14:02 84992 c:\windows\$hf_mig$\KB971557\SP3QFE\avifil32.dll
+ 2009-10-18 12:16 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB971486\update\spcustom.dll
+ 2009-10-18 12:16 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB971486\spmsg.dll
+ 2009-12-09 06:38 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB970430\update\spcustom.dll
+ 2009-12-09 06:38 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB970430\spmsg.dll
+ 2009-10-21 05:42 . 2009-10-21 05:42 75776 c:\windows\$hf_mig$\KB970430\SP3QFE\strmfilt.dll
+ 2009-10-21 05:42 . 2009-10-21 05:42 25088 c:\windows\$hf_mig$\KB970430\SP3QFE\httpapi.dll
+ 2009-11-11 20:14 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB969947\update\spcustom.dll
+ 2009-11-11 20:14 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB969947\spmsg.dll
+ 2009-10-18 12:20 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB969059\update\spcustom.dll
+ 2009-10-18 12:20 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB969059\spmsg.dll
+ 2009-08-18 03:11 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB968389\update\spcustom.dll
+ 2009-08-18 03:11 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB968389\spmsg.dll
+ 2009-06-25 08:42 . 2009-06-25 08:42 54272 c:\windows\$hf_mig$\KB968389\SP3QFE\wdigest.dll
+ 2009-06-25 08:42 . 2009-06-25 08:42 56832 c:\windows\$hf_mig$\KB968389\SP3QFE\secur32.dll
+ 2009-06-24 10:28 . 2009-06-24 10:28 92928 c:\windows\$hf_mig$\KB968389\SP3QFE\ksecdd.sys
+ 2009-07-19 19:24 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB961371\update\spcustom.dll
+ 2009-07-19 19:24 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB961371\spmsg.dll
+ 2009-06-16 14:44 . 2009-06-16 14:44 81920 c:\windows\$hf_mig$\KB961371\SP3QFE\fontsub.dll
+ 2009-08-12 11:15 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB960859\update\spcustom.dll
+ 2009-08-12 11:15 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB960859\spmsg.dll
+ 2009-06-15 11:14 . 2009-06-15 11:14 81408 c:\windows\$hf_mig$\KB960859\SP3QFE\tlntsess.exe
+ 2009-06-15 11:14 . 2009-06-15 11:14 78336 c:\windows\$hf_mig$\KB960859\SP3QFE\telnet.exe
+ 2009-09-10 14:47 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB956844\update\spcustom.dll
+ 2009-09-10 14:47 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB956844\spmsg.dll
+ 2009-08-12 11:15 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB956744\update\spcustom.dll
+ 2009-08-12 11:15 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB956744\spmsg.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
+ 2008-07-29 21:40 . 2008-07-29 21:40 5632 c:\windows\Microsoft.NET\Framework\v3.5\Sentinel.v3.5Client.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 7168 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll
- 2005-09-23 05:28 . 2005-09-23 05:28 7168 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll
- 2005-09-23 05:29 . 2005-09-23 05:29 5632 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 5632 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 6656 c:\windows\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 8192 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll
- 2005-09-23 05:28 . 2005-09-23 05:28 8192 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll
- 2007-04-13 01:21 . 2007-04-13 01:21 9728 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
+ 2008-07-25 09:17 . 2008-07-25 09:17 9728 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
+ 2008-07-25 09:16 . 2008-07-25 09:16 5120 c:\windows\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
- 2007-04-13 01:20 . 2007-04-13 01:20 5120 c:\windows\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
+ 2009-08-07 04:54 . 2009-08-07 04:54 5632 c:\windows\assembly\GAC_MSIL\Sentinel.v3.5Client\3.5.0.0__b03f5f7f11d50a3a\Sentinel.v3.5Client.dll
- 2009-05-03 12:21 . 2009-05-03 12:21 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2009-05-03 12:21 . 2009-05-03 12:21 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
- 2009-05-03 12:21 . 2009-05-03 12:21 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
- 2009-05-03 12:21 . 2009-05-03 12:21 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
+ 2007-11-07 00:19 . 2007-11-07 00:19 655872 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcr90.dll
+ 2007-11-07 00:19 . 2007-11-07 00:19 568832 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcp90.dll
+ 2007-11-06 19:23 . 2007-11-06 19:23 224768 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcm90.dll
+ 2009-07-12 00:12 . 2009-07-12 00:12 632656 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcr80.dll
+ 2009-07-12 00:09 . 2009-07-12 00:09 554832 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcp80.dll
+ 2009-07-12 00:08 . 2009-07-12 00:08 479232 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcm80.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 635904 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcr80.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 558080 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcp80.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 479232 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcm80.dll
+ 2008-07-29 19:26 . 2008-07-29 19:26 301568 c:\windows\system32\XPSViewer\XPSViewer.exe
+ 2009-08-07 04:53 . 2008-07-06 12:06 575488 c:\windows\system32\xpsshhdr.dll
+ 2008-07-08 16:50 . 2009-08-06 17:24 209632 c:\windows\system32\wuweb.dll
+ 2008-07-08 16:50 . 2009-08-06 17:24 327896 c:\windows\system32\wucltui.dll
+ 2008-07-08 16:50 . 2009-08-06 17:23 575704 c:\windows\system32\wuapi.dll
+ 2008-07-08 16:50 . 2009-04-01 21:02 604160 c:\windows\system32\wmspdmod.dll
+ 2008-07-08 16:50 . 2009-07-13 21:43 286208 c:\windows\system32\wmpdxm.dll
+ 2001-10-25 12:00 . 2009-06-10 06:16 132096 c:\windows\system32\wkssvc.dll
- 2001-10-25 12:00 . 2008-04-14 03:22 132096 c:\windows\system32\wkssvc.dll
+ 2008-07-08 16:50 . 2009-08-25 09:19 354816 c:\windows\system32\winhttp.dll
+ 2008-07-29 17:59 . 2008-07-29 17:59 161296 c:\windows\system32\UIAutomationCore.dll
+ 2001-10-25 12:00 . 2009-10-15 16:32 119808 c:\windows\system32\t2embed.dll
- 2001-10-25 12:00 . 2008-10-03 10:04 247326 c:\windows\system32\strmdll.dll
+ 2001-10-25 12:00 . 2009-08-26 08:02 247326 c:\windows\system32\strmdll.dll
+ 2009-08-07 04:53 . 2008-07-06 12:06 765440 c:\windows\system32\spool\XPSEP\i386\mxdwdrv.dll
+ 2009-08-07 04:53 . 2008-07-06 12:06 765440 c:\windows\system32\spool\XPSEP\i386\i386\mxdwdrv.dll
+ 2009-08-07 04:53 . 2008-07-06 12:06 748032 c:\windows\system32\spool\XPSEP\amd64\mxdwdrv.dll
+ 2009-08-07 04:53 . 2008-07-06 12:06 748032 c:\windows\system32\spool\XPSEP\amd64\amd64\mxdwdrv.dll
+ 2009-08-07 04:53 . 2008-07-06 12:06 147456 c:\windows\system32\spool\prtprocs\x64\filterpipelineprintproc.dll
+ 2009-08-07 04:53 . 2008-07-06 10:50 597504 c:\windows\system32\spool\prtprocs\w32x86\printfilterpipelinesvc.exe
+ 2008-07-08 17:17 . 2008-11-10 10:41 864144 c:\windows\system32\spool\drivers\w32x86\msonpdrv.dll
+ 2008-07-07 15:59 . 2008-03-13 04:52 761344 c:\windows\system32\spool\drivers\w32x86\3\unires.dll
- 2008-07-07 15:59 . 2007-05-15 08:08 761344 c:\windows\system32\spool\drivers\w32x86\3\unires.dll
+ 2008-07-07 15:59 . 2008-07-06 12:06 744960 c:\windows\system32\spool\drivers\w32x86\3\unidrvui.dll
- 2008-07-07 15:59 . 2008-04-14 03:22 373248 c:\windows\system32\spool\drivers\w32x86\3\unidrv.dll
+ 2008-07-07 15:59 . 2008-07-06 12:06 373248 c:\windows\system32\spool\drivers\w32x86\3\unidrv.dll
+ 2009-08-07 04:53 . 2008-07-06 12:06 198656 c:\windows\system32\spool\drivers\w32x86\3\mxdwdui.dll
+ 2009-08-07 04:53 . 2008-07-06 12:06 765440 c:\windows\system32\spool\drivers\w32x86\3\mxdwdrv.dll
+ 2008-07-08 17:17 . 2008-11-10 10:41 864144 c:\windows\system32\spool\drivers\w32x86\3\msonpdrv.dll
+ 2001-10-25 12:00 . 2009-06-25 08:27 147456 c:\windows\system32\schannel.dll
+ 2006-08-24 14:15 . 2006-08-24 14:15 150808 c:\windows\system32\rgb9rast_2.dll
+ 2001-10-25 12:00 . 2009-10-12 13:40 150016 c:\windows\system32\rastls.dll
+ 2009-08-07 04:53 . 2008-07-06 12:06 117760 c:\windows\system32\prntvpt.dll
+ 2008-07-29 17:59 . 2008-07-29 17:59 781344 c:\windows\system32\PresentationNative_v0300.dll
+ 2008-07-29 18:35 . 2008-07-29 18:35 326160 c:\windows\system32\PresentationHost.exe
+ 2008-07-29 17:59 . 2008-07-29 17:59 105016 c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
+ 2001-10-25 12:00 . 2009-12-09 12:09 443588 c:\windows\system32\perfh009.dat
+ 2009-08-03 13:07 . 2009-08-03 13:07 403816 c:\windows\system32\OGACheckControl.dll
+ 2009-08-03 13:07 . 2009-08-03 13:07 230768 c:\windows\system32\OGAEXEC.exe
+ 2009-08-03 13:07 . 2009-08-03 13:07 322928 c:\windows\system32\OGAAddin.dll
+ 2001-10-25 12:00 . 2009-12-21 19:08 206848 c:\windows\system32\occache.dll
- 2001-10-25 12:00 . 2008-04-14 03:21 271360 c:\windows\system32\oakley.dll
+ 2001-10-25 12:00 . 2009-10-13 10:34 271360 c:\windows\system32\oakley.dll
+ 2008-10-22 16:07 . 2009-08-06 17:23 215920 c:\windows\system32\muweb.dll
+ 2008-10-22 16:07 . 2009-08-06 17:23 274288 c:\windows\system32\mucltui.dll
+ 2001-10-25 12:00 . 2009-08-05 09:01 205312 c:\windows\system32\mswebdvd.dll
+ 2001-10-25 12:00 . 2009-09-11 14:19 136192 c:\windows\system32\msv1_0.dll
+ 2007-08-13 16:54 . 2009-12-21 19:08 594432 c:\windows\system32\msfeeds.dll
- 2007-08-13 16:54 . 2009-03-08 02:32 594432 c:\windows\system32\msfeeds.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 158720 c:\windows\system32\mscorier.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 282112 c:\windows\system32\mscoree.dll
+ 2001-10-25 12:00 . 2009-06-25 08:27 729088 c:\windows\system32\lsasrv.dll
+ 2001-10-25 12:00 . 2009-06-25 08:27 301568 c:\windows\system32\kerberos.dll
+ 2009-06-20 13:55 . 2008-05-02 00:40 117264 c:\windows\system32\KemWnd.dll
+ 2009-06-20 13:55 . 2008-05-02 00:39 145936 c:\windows\system32\KemUtil.dll
+ 2009-06-20 13:55 . 2008-05-02 00:39 170512 c:\windows\system32\kemutb.dll
+ 2001-10-25 12:00 . 2009-06-22 06:48 726528 c:\windows\system32\jscript.dll
- 2001-10-25 12:00 . 2009-03-08 02:33 726528 c:\windows\system32\jscript.dll
+ 2001-10-25 12:00 . 2009-12-21 19:08 184320 c:\windows\system32\iepeers.dll
+ 2001-10-25 12:00 . 2009-12-21 19:08 387584 c:\windows\system32\iedkcs32.dll
+ 2001-10-25 12:00 . 2009-12-21 13:18 173056 c:\windows\system32\ie4uinit.exe
- 2001-10-25 12:00 . 2009-04-30 11:21 173056 c:\windows\system32\ie4uinit.exe
+ 2008-07-29 17:24 . 2008-07-29 17:24 622080 c:\windows\system32\icardagt.exe
+ 2008-05-15 17:57 . 2009-11-24 15:26 297256 c:\windows\system32\FNTCACHE.DAT
+ 2008-07-29 19:10 . 2008-07-29 19:10 493048 c:\windows\system32\evr.dll
+ 2008-07-08 16:50 . 2009-10-20 16:20 265728 c:\windows\system32\drivers\http.sys
+ 2009-08-07 04:53 . 2008-07-06 12:06 575488 c:\windows\system32\dllcache\xpsshhdr.dll
+ 2008-07-08 16:50 . 2009-08-06 17:24 209632 c:\windows\system32\dllcache\wuweb.dll
+ 2008-07-08 16:50 . 2009-08-06 17:24 327896 c:\windows\system32\dllcache\wucltui.dll
+ 2008-07-08 16:50 . 2009-08-06 17:23 575704 c:\windows\system32\dllcache\wuapi.dll
+ 2008-07-08 16:50 . 2009-04-01 21:02 604160 c:\windows\system32\dllcache\wmspdmod.dll
+ 2008-09-03 04:43 . 2009-07-13 21:43 286208 c:\windows\system32\dllcache\wmpdxm.dll
+ 2009-06-10 06:16 . 2009-06-10 06:16 132096 c:\windows\system32\dllcache\wkssvc.dll
+ 2008-04-21 07:03 . 2009-12-21 19:08 916480 c:\windows\system32\dllcache\wininet.dll
+ 2008-12-16 12:32 . 2009-08-25 09:19 354816 c:\windows\system32\dllcache\winhttp.dll
+ 2009-09-10 12:37 . 2009-06-21 21:48 153088 c:\windows\system32\dllcache\triedit.dll
+ 2009-06-16 14:40 . 2009-10-15 16:32 119808 c:\windows\system32\dllcache\t2embed.dll
- 2008-09-03 04:42 . 2008-10-03 10:04 247326 c:\windows\system32\dllcache\strmdll.dll
+ 2008-09-03 04:42 . 2009-08-26 08:02 247326 c:\windows\system32\dllcache\strmdll.dll
+ 2008-12-05 06:57 . 2009-06-25 08:27 147456 c:\windows\system32\dllcache\schannel.dll
+ 2009-10-12 13:40 . 2009-10-12 13:40 150016 c:\windows\system32\dllcache\rastls.dll
+ 2009-08-07 04:53 . 2008-07-06 10:50 597504 c:\windows\system32\dllcache\printfilterpipelinesvc.exe
+ 2007-08-13 16:44 . 2009-12-21 19:08 206848 c:\windows\system32\dllcache\occache.dll
+ 2009-10-13 10:34 . 2009-10-13 10:34 271360 c:\windows\system32\dllcache\oakley.dll
+ 2009-08-05 09:01 . 2009-08-05 09:01 205312 c:\windows\system32\dllcache\mswebdvd.dll
+ 2009-06-25 08:27 . 2009-09-11 14:19 136192 c:\windows\system32\dllcache\msv1_0.dll
+ 2008-09-05 04:31 . 2009-12-21 19:08 594432 c:\windows\system32\dllcache\msfeeds.dll
- 2008-09-05 04:31 . 2009-03-08 02:32 594432 c:\windows\system32\dllcache\msfeeds.dll
+ 2009-04-17 02:50 . 2009-06-25 08:27 729088 c:\windows\system32\dllcache\lsasrv.dll
+ 2009-06-25 08:27 . 2009-06-25 08:27 301568 c:\windows\system32\dllcache\kerberos.dll
+ 2008-05-09 10:56 . 2009-06-22 06:48 726528 c:\windows\system32\dllcache\jscript.dll
- 2008-05-09 10:56 . 2009-03-08 02:33 726528 c:\windows\system32\dllcache\jscript.dll
- 2009-06-10 06:08 . 2009-04-30 21:16 246272 c:\windows\system32\dllcache\ieproxy.dll
+ 2009-06-10 06:08 . 2009-12-21 19:08 246272 c:\windows\system32\dllcache\ieproxy.dll
+ 2008-04-21 07:03 . 2009-12-21 19:08 184320 c:\windows\system32\dllcache\iepeers.dll
+ 2007-08-13 16:39 . 2009-12-21 19:08 387584 c:\windows\system32\dllcache\iedkcs32.dll
- 2007-08-13 16:39 . 2009-04-30 11:21 173056 c:\windows\system32\dllcache\ie4uinit.exe
+ 2007-08-13 16:39 . 2009-12-21 13:18 173056 c:\windows\system32\dllcache\ie4uinit.exe
+ 2009-10-20 16:20 . 2009-10-20 16:20 265728 c:\windows\system32\dllcache\http.sys
+ 2009-07-21 21:52 . 2008-05-02 00:38 301656 c:\windows\system32\BtCoreIf.dll
+ 2008-07-29 21:40 . 2008-07-29 21:40 196104 c:\windows\Microsoft.NET\Framework\v3.5\WFServicesReg.exe
+ 2008-07-29 21:40 . 2008-07-29 21:40 802816 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft.Build.Tasks.v3.5.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 984056 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapUI.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 107512 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 111096 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.3082.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 110072 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.2070.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 106488 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1055.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 105976 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1053.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 107000 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1049.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 107512 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1046.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 109048 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1045.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 106488 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1044.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 108536 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1043.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 110072 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1040.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 111096 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1038.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 101368 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1037.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 112120 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1036.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 106488 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1035.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 113656 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1032.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 111608 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1031.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 108536 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1030.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 108536 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1029.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 102904 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1025.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 689152 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vsscenario.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 413184 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vsbasereqs.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 632320 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vs70uimgr.dll
+ 2009-08-07 04:54 . 2009-08-07 04:54 652800 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vs_setup.msi
+ 2008-07-29 16:47 . 2008-07-29 16:47 110080 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 131584 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.3082.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 131072 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.2070.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 121344 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1055.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 121344 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1053.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 123904 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1049.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 122880 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1046.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 128512 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1045.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 121856 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1044.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 129024 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1043.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 128512 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1040.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 132096 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1038.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 111104 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1037.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 133120 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1036.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 122368 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1035.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 137728 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1032.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 130048 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1031.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 126464 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1030.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 125440 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1029.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 113152 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1025.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 269304 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
+ 2008-07-29 16:47 . 2008-07-29 16:47 177152 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\HtmlLite.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 276984 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\dlmgr.dll
+ 2008-07-29 21:15 . 2008-07-29 21:15 225490 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\baseline.dat
+ 2008-07-29 21:40 . 2008-07-29 21:40 233976 c:\windows\Microsoft.NET\Framework\v3.5\1033\vbc7ui.dll
+ 2008-07-29 21:40 . 2008-07-29 21:40 168448 c:\windows\Microsoft.NET\Framework\v3.5\1033\cscompui.dll
+ 2008-07-29 18:35 . 2008-07-29 18:35 864256 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationUI.dll
+ 2008-07-29 17:59 . 2008-07-29 17:59 132120 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationHostDLL.dll
+ 2008-07-29 19:10 . 2008-07-29 19:10 806928 c:\windows\Microsoft.NET\Framework\v3.0\WPF\NaturalLanguage6.dll
+ 2008-07-29 17:16 . 2008-07-29 17:16 152576 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\WsatConfig.exe
+ 2008-07-29 17:16 . 2008-07-29 17:16 966656 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
+ 2008-07-29 17:16 . 2008-07-29 17:16 132096 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
+ 2008-07-29 17:16 . 2008-07-29 17:16 110592 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMdiagnostics.dll
+ 2008-07-29 17:16 . 2008-07-29 17:16 156688 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelReg.exe
+ 2008-07-29 17:16 . 2008-07-29 17:16 163840 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\Microsoft.Transactions.Bridge.Dtc.dll
+ 2008-07-29 17:16 . 2008-07-29 17:16 397312 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\Microsoft.Transactions.Bridge.dll
+ 2008-07-29 17:24 . 2008-07-29 17:24 881664 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
+ 2008-07-29 17:16 . 2008-07-29 17:16 168968 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ComSvcConfig.exe
+ 2008-11-25 02:59 . 2008-11-25 02:59 436040 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 839680 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 835584 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll
- 2005-09-23 05:28 . 2005-09-23 05:28 835584 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 261632 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll
- 2005-09-23 05:28 . 2005-09-23 05:28 114688 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 114688 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll
- 2005-09-23 05:28 . 2005-09-23 05:28 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
- 2005-09-23 05:28 . 2005-09-23 05:28 131072 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 131072 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 303104 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll
- 2005-09-23 05:28 . 2005-09-23 05:28 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll
- 2007-04-13 01:21 . 2007-04-13 01:21 372736 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Management.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 372736 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Management.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 113664 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll
- 2007-04-13 01:21 . 2007-04-13 01:21 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 626688 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
- 2007-04-13 01:21 . 2007-04-13 01:21 188416 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 188416 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 401408 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 970752 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 745472 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll
+ 2008-11-25 02:59 . 2008-11-25 02:59 486400 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 425984 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll
- 2007-04-13 01:21 . 2007-04-13 01:21 110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 392184 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 118784 c:\windows\Microsoft.NET\Framework\v2.0.50727\shfusion.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 143360 c:\windows\Microsoft.NET\Framework\v2.0.50727\peverify.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 100856 c:\windows\Microsoft.NET\Framework\v2.0.50727\ngen.exe
+ 2008-07-25 09:17 . 2008-07-25 09:17 230912 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 345600 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 114176 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll
+ 2008-11-25 02:59 . 2008-11-25 02:59 364872 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 308224 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll
+ 2009-08-07 21:51 . 2009-08-07 21:51 989016 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 659456 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll
- 2005-09-23 05:29 . 2005-09-23 05:29 372736 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 372736 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll
- 2005-09-23 05:29 . 2005-09-23 05:29 110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 749568 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll
- 2007-04-13 01:21 . 2007-04-13 01:21 749568 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 655360 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 348160 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 230904 c:\windows\Microsoft.NET\Framework\v2.0.50727\ilasm.exe
+ 2008-07-25 09:17 . 2008-07-25 09:17 798224 c:\windows\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 575496 c:\windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
- 2005-09-23 05:28 . 2005-09-23 05:28 106496 c:\windows\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
+ 2008-07-25 09:17 . 2008-07-25 09:17 106496 c:\windows\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
- 2007-04-13 01:20 . 2007-04-13 01:20 507904 c:\windows\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 507904 c:\windows\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll
- 2005-09-23 05:28 . 2005-09-23 05:28 106496 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
+ 2008-07-25 09:16 . 2008-07-25 09:16 106496 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
+ 2008-07-25 09:17 . 2008-07-25 09:17 147968 c:\windows\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 218112 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 193016 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 145408 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll
- 2007-04-13 18:58 . 2007-04-13 18:58 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
+ 2008-05-27 22:49 . 2008-05-27 22:49 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
+ 2008-05-27 22:48 . 2008-05-27 22:48 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
- 2007-04-13 18:56 . 2007-04-13 18:56 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
+ 2008-05-27 23:30 . 2008-05-27 23:30 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
- 2007-04-13 19:30 . 2007-04-13 19:30 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
+ 2009-10-06 15:16 . 2009-10-06 15:16 119296 c:\windows\Installer\f2fd6.msi
+ 2010-01-11 17:21 . 2010-01-11 17:21 424448 c:\windows\Installer\86e70.msi
+ 2008-05-15 16:18 . 2008-05-15 16:18 265216 c:\windows\Installer\78cf1.msi
+ 2008-07-08 17:14 . 2008-07-08 17:14 504832 c:\windows\Installer\756c5.msi
+ 2008-07-08 17:14 . 2008-07-08 17:14 506880 c:\windows\Installer\756bf.msi
+ 2008-07-08 17:14 . 2008-07-08 17:14 513536 c:\windows\Installer\756b8.msi
+ 2008-07-08 17:14 . 2008-07-08 17:14 507904 c:\windows\Installer\756b2.msi
+ 2008-07-08 17:13 . 2008-07-08 17:13 506368 c:\windows\Installer\756ac.msi
+ 2008-11-12 16:11 . 2008-11-12 16:11 432640 c:\windows\Installer\73200.msi
+ 2009-03-20 09:48 . 2009-03-20 09:48 183808 c:\windows\Installer\724b5f.msp
+ 2008-08-04 07:47 . 2008-08-04 07:47 532992 c:\windows\Installer\67fc24.msi
+ 2008-07-25 06:04 . 2008-07-25 06:04 431104 c:\windows\Installer\61ba08.msi
+ 2008-12-13 07:58 . 2008-12-13 07:58 754688 c:\windows\Installer\233e91.msp
+ 2009-08-07 04:55 . 2009-08-07 04:55 648192 c:\windows\Installer\233e6b.msi
+ 2008-07-29 19:23 . 2008-07-29 19:23 250880 c:\windows\Installer\22164b.msp
+ 2008-07-29 19:28 . 2008-07-29 19:28 278016 c:\windows\Installer\221649.msp
+ 2008-07-29 17:40 . 2008-07-29 17:40 291840 c:\windows\Installer\221647.msp
+ 2009-08-07 04:54 . 2009-08-07 04:54 137728 c:\windows\Installer\221641.msi
+ 2007-10-12 17:48 . 2007-10-12 17:48 644608 c:\windows\Installer\1e97d2.msp
+ 2008-07-29 15:35 . 2008-07-29 15:35 553472 c:\windows\Installer\1dc260.msp
+ 2008-07-29 15:33 . 2008-07-29 15:33 506368 c:\windows\Installer\1dc25e.msp
+ 2008-07-29 15:37 . 2008-07-29 15:37 911360 c:\windows\Installer\1dc25d.msp
+ 2008-07-07 16:29 . 2008-07-07 16:29 100352 c:\windows\Installer\1d08e.msi
+ 2009-07-29 19:27 . 2009-07-29 19:27 248832 c:\windows\Installer\17e6544.msi
+ 2008-07-08 20:53 . 2008-07-08 20:53 193024 c:\windows\Installer\16d6d8.msi
+ 2009-04-04 16:14 . 2009-04-04 16:14 971776 c:\windows\Installer\139c8ae.msp
+ 2009-11-25 12:08 . 2009-11-25 12:08 429568 c:\windows\Installer\125f285.msi
+ 2009-05-26 16:53 . 2009-05-26 16:53 579072 c:\windows\Installer\11a18fa.msp
+ 2009-08-03 04:17 . 2009-08-03 04:17 792576 c:\windows\Installer\1014f.msi
+ 2009-08-02 14:58 . 2009-08-02 14:58 371272 c:\windows\Installer\{D103C4BA-F905-437A-8049-DB24763BBE36}\SkypeIcon.exe
+ 2008-07-08 17:17 . 2010-01-13 19:55 888080 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\wordicon.exe
- 2008-07-08 17:17 . 2009-06-14 19:19 888080 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\wordicon.exe
+ 2008-07-08 17:17 . 2010-01-13 19:55 272648 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\pubs.exe
- 2008-07-08 17:17 . 2009-06-14 19:19 272648 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\pubs.exe
- 2008-07-08 17:17 . 2009-06-14 19:19 922384 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\pptico.exe
+ 2008-07-08 17:17 . 2010-01-13 19:55 922384 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\pptico.exe
+ 2008-07-08 17:17 . 2010-01-13 19:55 845584 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\outicon.exe
- 2008-07-08 17:17 . 2009-06-14 19:19 845584 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\outicon.exe
+ 2008-07-08 17:17 . 2010-01-13 19:55 217864 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\misc.exe
- 2008-07-08 17:17 . 2009-06-14 19:19 217864 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\misc.exe
+ 2008-07-08 17:17 . 2010-01-13 19:55 184080 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\joticon.exe
- 2008-07-08 17:17 . 2009-06-14 19:19 184080 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\joticon.exe
+ 2008-07-08 17:17 . 2010-01-13 19:55 159504 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\inficon.exe
- 2008-07-08 17:17 . 2009-06-14 19:19 159504 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\inficon.exe
+ 2009-11-24 12:23 . 2009-11-24 12:23 217864 c:\windows\Installer\{90120000-006E-0405-0000-0000000FF1CE}\misc.exe
- 2008-10-24 20:58 . 2008-10-24 20:58 217864 c:\windows\Installer\{90120000-006E-0405-0000-0000000FF1CE}\misc.exe
+ 2007-06-07 17:51 . 2007-06-07 17:51 125320 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.6425\SSGEN.DLL
+ 2007-06-07 17:51 . 2007-06-07 17:51 465800 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.6425\OUTLFLTR.DLL
+ 2006-07-24 08:50 . 2006-07-24 08:50 125744 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.6425\MSSTDFMT.DLL
+ 2009-11-24 12:27 . 2009-11-24 12:27 118176 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.6425\IPOMINT.DLL
+ 2006-10-26 18:49 . 2006-10-26 18:49 509200 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\WRD12CVR.DLL
+ 2006-10-26 19:07 . 2006-10-26 19:07 368968 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\PPSLAX.DLL
+ 2006-10-20 06:37 . 2006-10-20 06:37 637744 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\OGALEGIT.DLL
+ 2008-07-08 17:16 . 2008-07-08 17:16 416544 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\OFFICE.DLL
+ 2006-10-26 17:55 . 2006-10-26 17:55 145688 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\MSTORE.EXE
+ 2006-10-26 12:47 . 2006-10-26 12:47 727840 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\MSPROOF6.DLL
+ 2006-10-26 17:56 . 2006-10-26 17:56 864080 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\MSONPDRV.DLL
+ 2006-10-26 11:58 . 2006-10-26 11:58 290576 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\MSCDM.DLL
+ 2006-10-26 17:52 . 2006-10-26 17:52 460616 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\MODHELP.DLL
+ 2006-10-26 18:00 . 2006-10-26 18:00 178488 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\IETAG.DLL
+ 2008-07-08 17:16 . 2008-07-08 17:16 150320 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\GRAPHPIA.DLL
+ 2006-10-26 18:12 . 2006-10-26 18:12 106824 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\DSSM.EXE
+ 2010-01-22 21:40 . 2009-10-29 07:43 916480 c:\windows\ie8updates\KB978207-IE8\wininet.dll
+ 2010-01-22 21:40 . 2009-05-26 11:40 391032 c:\windows\ie8updates\KB978207-IE8\spuninst\updspapi.dll
+ 2010-01-22 21:40 . 2008-07-08 12:59 233848 c:\windows\ie8updates\KB978207-IE8\spuninst\spuninst.exe
+ 2010-01-22 21:40 . 2009-10-29 07:43 206848 c:\windows\ie8updates\KB978207-IE8\occache.dll
+ 2010-01-22 21:40 . 2009-10-29 07:43 594432 c:\windows\ie8updates\KB978207-IE8\msfeeds.dll
+ 2010-01-22 21:40 . 2009-10-29 07:43 246272 c:\windows\ie8updates\KB978207-IE8\ieproxy.dll
+ 2010-01-22 21:40 . 2009-10-29 07:43 184320 c:\windows\ie8updates\KB978207-IE8\iepeers.dll
+ 2010-01-22 21:40 . 2009-10-29 07:43 387584 c:\windows\ie8updates\KB978207-IE8\iedkcs32.dll
+ 2010-01-22 21:40 . 2009-10-28 14:40 173056 c:\windows\ie8updates\KB978207-IE8\ie4uinit.exe
+ 2009-11-04 08:15 . 2008-07-08 12:59 391032 c:\windows\ie8updates\KB976749-IE8\spuninst\updspapi.dll
+ 2009-11-04 08:15 . 2008-07-08 12:59 233848 c:\windows\ie8updates\KB976749-IE8\spuninst\spuninst.exe
+ 2009-12-09 06:37 . 2009-08-29 07:58 916480 c:\windows\ie8updates\KB976325-IE8\wininet.dll
+ 2009-12-09 06:37 . 2009-05-26 11:40 391032 c:\windows\ie8updates\KB976325-IE8\spuninst\updspapi.dll
+ 2009-12-09 06:37 . 2009-05-26 11:40 233848 c:\windows\ie8updates\KB976325-IE8\spuninst\spuninst.exe
+ 2009-12-09 06:37 . 2009-08-29 07:58 206848 c:\windows\ie8updates\KB976325-IE8\occache.dll
+ 2009-12-09 06:37 . 2009-08-29 07:58 594432 c:\windows\ie8updates\KB976325-IE8\msfeeds.dll
+ 2009-12-09 06:37 . 2009-08-29 07:58 246272 c:\windows\ie8updates\KB976325-IE8\ieproxy.dll
+ 2009-12-09 06:37 . 2009-08-29 07:58 184320 c:\windows\ie8updates\KB976325-IE8\iepeers.dll
+ 2009-12-09 06:37 . 2009-08-29 07:58 387584 c:\windows\ie8updates\KB976325-IE8\iedkcs32.dll
+ 2009-12-09 06:37 . 2009-08-28 10:35 173056 c:\windows\ie8updates\KB976325-IE8\ie4uinit.exe
+ 2009-10-22 17:55 . 2009-07-03 16:59 915456 c:\windows\ie8updates\KB974455-IE8\wininet.dll
+ 2009-10-22 17:55 . 2009-05-26 11:40 391032 c:\windows\ie8updates\KB974455-IE8\spuninst\updspapi.dll
+ 2009-10-22 17:55 . 2008-07-08 12:59 233848 c:\windows\ie8updates\KB974455-IE8\spuninst\spuninst.exe

Re: Rootkit? 3.část

Napsal: 24 led 2010 17:00
od Vang
+ 2009-10-22 17:55 . 2009-07-03 16:59 206848 c:\windows\ie8updates\KB974455-IE8\occache.dll
+ 2009-10-22 17:55 . 2009-07-03 16:59 594432 c:\windows\ie8updates\KB974455-IE8\msfeeds.dll
+ 2009-10-22 17:55 . 2009-07-03 16:59 246272 c:\windows\ie8updates\KB974455-IE8\ieproxy.dll
+ 2009-10-22 17:55 . 2009-07-03 16:59 184320 c:\windows\ie8updates\KB974455-IE8\iepeers.dll
+ 2009-10-22 17:55 . 2009-07-03 16:59 386048 c:\windows\ie8updates\KB974455-IE8\iedkcs32.dll
+ 2009-10-22 17:55 . 2009-07-03 11:01 173056 c:\windows\ie8updates\KB974455-IE8\ie4uinit.exe
+ 2009-07-29 19:28 . 2009-05-13 05:05 915456 c:\windows\ie8updates\KB972260-IE8\wininet.dll
+ 2009-07-29 19:28 . 2009-05-26 11:40 391032 c:\windows\ie8updates\KB972260-IE8\spuninst\updspapi.dll
+ 2009-07-29 19:28 . 2009-05-26 11:40 233848 c:\windows\ie8updates\KB972260-IE8\spuninst\spuninst.exe
+ 2009-07-29 19:28 . 2009-03-08 02:34 109568 c:\windows\ie8updates\KB972260-IE8\occache.dll
+ 2009-07-29 19:28 . 2009-03-08 02:32 594432 c:\windows\ie8updates\KB972260-IE8\msfeeds.dll
+ 2009-07-29 19:28 . 2009-04-30 21:16 246272 c:\windows\ie8updates\KB972260-IE8\ieproxy.dll
+ 2009-07-29 19:28 . 2009-03-08 02:31 183808 c:\windows\ie8updates\KB972260-IE8\iepeers.dll
+ 2009-07-29 19:28 . 2009-04-30 21:16 385536 c:\windows\ie8updates\KB972260-IE8\iedkcs32.dll
+ 2009-07-29 19:28 . 2009-04-30 11:21 173056 c:\windows\ie8updates\KB972260-IE8\ie4uinit.exe
+ 2009-09-10 14:46 . 2008-07-08 12:59 391032 c:\windows\ie8updates\KB971961-IE8\spuninst\updspapi.dll
+ 2009-09-10 14:46 . 2008-07-08 12:59 233848 c:\windows\ie8updates\KB971961-IE8\spuninst\spuninst.exe
+ 2009-09-10 14:46 . 2009-03-08 02:33 726528 c:\windows\ie8updates\KB971961-IE8\jscript.dll
+ 2009-08-07 04:53 . 2008-03-13 04:52 761344 c:\windows\Driver Cache\i386\unires.dll
+ 2009-08-07 04:53 . 2008-07-06 12:06 744960 c:\windows\Driver Cache\i386\unidrvui.dll
+ 2009-08-07 04:53 . 2008-07-06 12:06 373248 c:\windows\Driver Cache\i386\unidrv.dll
+ 2009-08-07 04:53 . 2008-07-06 12:06 198656 c:\windows\Driver Cache\i386\mxdwdui.dll
+ 2009-08-07 04:53 . 2008-07-06 12:06 765440 c:\windows\Driver Cache\i386\mxdwdrv.dll
+ 2009-10-20 16:20 . 2009-10-20 16:20 265728 c:\windows\Driver Cache\i386\http.sys
+ 2008-07-08 20:53 . 2008-07-08 20:53 829952 c:\windows\Downloaded Installations\DAEMON Tools 3.47\daemon.msi
+ 2009-10-18 12:18 . 2009-10-18 12:18 835584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_37f1704b\System.Drawing.dll
+ 2009-10-18 12:18 . 2009-10-18 12:18 192512 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_babb2b03\System.Drawing.Design.dll
+ 2009-10-18 12:18 . 2009-10-18 12:18 118784 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_f9412e29\CustomMarshalers.dll
+ 2009-10-18 16:08 . 2009-10-18 16:08 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\e2098e43d115155d6ba91ba3a7e577cf\WsatConfig.ni.exe
+ 2009-10-18 13:55 . 2009-10-18 13:55 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\bf92bc207f927cbbd6dfc9dc0c3eae68\WindowsFormsIntegration.ni.dll
+ 2009-10-18 13:55 . 2009-10-18 13:55 187904 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\6f488b7644dc50a083868e91a4014466\UIAutomationTypes.ni.dll
+ 2009-10-18 13:55 . 2009-10-18 13:55 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\c2fbf25609b704061a93500efa6f241d\UIAutomationClient.ni.dll
+ 2009-10-18 16:11 . 2009-10-18 16:11 400896 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\eb23b78564687badff1bd1f1d0a0ec97\System.Xml.Linq.ni.dll
+ 2009-10-18 16:10 . 2009-10-18 16:10 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\e7666364bf9f3ba5f4833c9efedd8218\System.Web.Routing.ni.dll
+ 2009-10-18 16:10 . 2009-10-18 16:10 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\b5f1b8791e6c47e5bd5e7018c346c586\System.Web.RegularExpressions.ni.dll
+ 2009-10-18 16:10 . 2009-10-18 16:10 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\884eacddf339b8b342f66aedff5f8ef9\System.Web.Extensions.Design.ni.dll
+ 2009-10-18 16:10 . 2009-10-18 16:10 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\9e199645bd26f1afe58ebe185d1e7f0f\System.Web.Entity.ni.dll
+ 2009-10-18 16:10 . 2009-10-18 16:10 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\652017ebe962ab2eb271c2524f31cd61\System.Web.Entity.Design.ni.dll
+ 2009-10-18 16:10 . 2009-10-18 16:10 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\d0070c1c1a642ae30394e00bc0d82336\System.Web.DynamicData.ni.dll
+ 2009-10-18 16:10 . 2009-10-18 16:10 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\1896753d02d146be1988d32241300f51\System.Web.Abstractions.ni.dll
+ 2009-10-18 16:10 . 2009-10-18 16:10 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\408e637346ef628a3f54fb1b9b83ac9f\System.Transactions.ni.dll
+ 2009-10-18 16:10 . 2009-10-18 16:10 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\1f61bccb700d687775cf778dd77752e9\System.ServiceProcess.ni.dll
+ 2009-10-18 16:08 . 2009-10-18 16:08 676352 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\a9e9b885a6601469c4058375cc74d856\System.Security.ni.dll
+ 2009-10-18 16:09 . 2009-10-18 16:09 311296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\9bc34a79af9c3ed2cf17a0226c769b4c\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2009-10-18 16:10 . 2009-10-18 16:10 621056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\5f74a84e9d28c2332c51f6e30da0e125\System.Net.ni.dll
+ 2009-10-18 16:09 . 2009-10-18 16:09 998400 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\2c208e4c5521f31057ea7d6e93c6a567\System.Management.ni.dll
+ 2009-10-18 16:09 . 2009-10-18 16:09 330752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\818b20a7c6f3b2fe97bf008ca24080c1\System.Management.Instrumentation.ni.dll
+ 2009-10-18 16:07 . 2009-10-18 16:07 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\6c273eb9d1ee8b66b5ecb073de4b785d\System.IO.Log.ni.dll
+ 2009-10-18 16:07 . 2009-10-18 16:07 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\7222db518afb4eaaa138824278249bc7\System.IdentityModel.Selectors.ni.dll
+ 2009-10-18 16:09 . 2009-10-18 16:09 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\8a7d0bd0057a8ed38291d5662248f7a1\System.EnterpriseServices.Wrapper.dll
+ 2009-10-18 16:09 . 2009-10-18 16:09 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\8a7d0bd0057a8ed38291d5662248f7a1\System.EnterpriseServices.ni.dll
+ 2009-10-18 13:54 . 2009-10-18 13:54 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\ca6d7208c0fb72ff97429f2636ced321\System.Drawing.Design.ni.dll
+ 2009-10-18 16:09 . 2009-10-18 16:09 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\c92fc19800e701c90f90ab7a2ab44c47\System.DirectoryServices.AccountManagement.ni.dll
+ 2009-10-18 16:09 . 2009-10-18 16:09 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\a601f47a98ee67df424685c9a66ea449\System.DirectoryServices.Protocols.ni.dll
+ 2009-10-18 16:09 . 2009-10-18 16:09 939008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\b91b44015859163646f210d284f7166a\System.Data.Services.Client.ni.dll
+ 2009-10-18 16:09 . 2009-10-18 16:09 354816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\1b35297e07b85071daecdb06f96750a1\System.Data.Services.Design.ni.dll
+ 2009-10-18 16:09 . 2009-10-18 16:09 756736 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\cf906bf9146d1f0013451ec63b58e064\System.Data.Entity.Design.ni.dll
+ 2009-10-18 16:08 . 2009-10-18 16:08 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\4ff4134b0d490c090e03d74e104517c4\System.Data.DataSetExtensions.ni.dll
+ 2009-10-18 16:08 . 2009-10-18 16:08 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\7c743462baccf29b3567b0e3ec9ac134\System.Configuration.ni.dll
+ 2009-10-18 16:09 . 2009-10-18 16:09 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\443e3a85c491b2de4a2ac654cb957484\System.Configuration.Install.ni.dll
+ 2009-10-18 16:08 . 2009-10-18 16:08 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\cba35f47925431a54d0e6ae147a292f1\System.AddIn.ni.dll
+ 2009-10-18 16:08 . 2009-10-18 16:08 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\6af32fe5cbec0aa54e2efa6910c73651\SMSvcHost.ni.exe
+ 2009-10-18 16:08 . 2009-10-18 16:08 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\7602d7687fb9bd21cd9ae60d2b187c99\SMDiagnostics.ni.dll
+ 2009-10-18 16:08 . 2009-10-18 16:08 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\a23dc25782df04533a13e348203e4dc5\ServiceModelReg.ni.exe
+ 2009-10-18 13:47 . 2009-10-18 13:47 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\96f74da5fc40b92f09069230bc0df4f0\PresentationFramework.Royale.ni.dll
+ 2009-10-18 13:47 . 2009-10-18 13:47 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\3bb4d16b042b72c2c85a0f8ac9d48f28\PresentationFramework.Luna.ni.dll
+ 2009-10-18 13:47 . 2009-10-18 13:47 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\30c5c2682d3c5bdaa83bb9a36ee48afa\PresentationFramework.Aero.ni.dll
+ 2009-10-18 13:47 . 2009-10-18 13:47 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\07e952efd70f5608e221a008e6231ace\PresentationFramework.Classic.ni.dll
+ 2009-10-18 16:08 . 2009-10-18 16:08 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\eade8c1c9c1e8e5ffb50e6c9b9af0f6a\MSBuild.ni.exe
+ 2009-10-18 16:08 . 2009-10-18 16:08 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\fc4d66e0a92b3767006a84f2519d2457\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2009-10-18 16:08 . 2009-10-18 16:08 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\58ca3ecc52b7246b448c109817198a0b\Microsoft.Build.Utilities.ni.dll
+ 2009-10-18 16:08 . 2009-10-18 16:08 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\4dd43724dd92026577c6f588270137a0\Microsoft.Build.Utilities.v3.5.ni.dll
+ 2009-10-18 16:08 . 2009-10-18 16:08 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\8c651f75bb741330370986dcad8e9e5b\Microsoft.Build.Engine.ni.dll
+ 2009-10-18 16:08 . 2009-10-18 16:08 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\a6dcbae619ccd938bfe808c54d6d3ae0\Microsoft.Build.Conversion.v3.5.ni.dll
+ 2009-10-18 16:08 . 2009-10-18 16:08 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\77688ce14f221ed94a9f442ae4736123\CustomMarshalers.ni.dll
+ 2009-10-18 16:08 . 2009-10-18 16:08 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\a17c65f0cffaa4f792dd38d50df9d526\ComSvcConfig.ni.exe
+ 2009-10-18 15:20 . 2009-10-18 15:20 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\85d7c111956b478766d90625b35d963f\AspNetMMCExt.ni.dll
+ 2009-08-07 04:53 . 2009-08-07 04:53 385024 c:\windows\assembly\GAC_MSIL\UIAutomationClientsideProviders\3.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
+ 2009-08-07 04:53 . 2009-08-07 04:53 167936 c:\windows\assembly\GAC_MSIL\UIAutomationClient\3.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
+ 2009-08-07 04:55 . 2009-08-07 04:55 139264 c:\windows\assembly\GAC_MSIL\System.Xml.Linq\3.5.0.0__b77a5c561934e089\System.Xml.Linq.dll
+ 2009-08-07 04:54 . 2009-08-07 04:54 507904 c:\windows\assembly\GAC_MSIL\System.WorkflowServices\3.5.0.0__31bf3856ad364e35\System.WorkflowServices.dll
+ 2009-08-07 04:53 . 2009-08-07 04:53 540672 c:\windows\assembly\GAC_MSIL\System.Workflow.Runtime\3.0.0.0__31bf3856ad364e35\System.Workflow.Runtime.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
- 2009-05-03 12:21 . 2009-05-03 12:21 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2009-08-07 04:55 . 2009-08-07 04:55 335872 c:\windows\assembly\GAC_MSIL\System.Web.Extensions.Design\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.Design.dll
+ 2009-08-07 05:00 . 2009-08-07 05:00 139264 c:\windows\assembly\GAC_MSIL\System.Web.Entity\3.5.0.0__b77a5c561934e089\System.Web.Entity.dll
+ 2009-08-07 04:55 . 2009-08-07 04:55 131072 c:\windows\assembly\GAC_MSIL\System.Web.Entity.Design\3.5.0.0__b77a5c561934e089\System.Web.Entity.Design.dll
+ 2009-08-07 05:00 . 2009-08-07 05:00 229376 c:\windows\assembly\GAC_MSIL\System.Web.DynamicData\3.5.0.0__31bf3856ad364e35\System.Web.DynamicData.dll
+ 2009-08-07 04:53 . 2009-08-07 04:53 688128 c:\windows\assembly\GAC_MSIL\System.Speech\3.0.0.0__31bf3856ad364e35\System.Speech.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2009-05-03 12:21 . 2009-05-03 12:21 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2009-08-07 04:54 . 2009-08-07 04:54 569344 c:\windows\assembly\GAC_MSIL\System.ServiceModel.Web\3.5.0.0__31bf3856ad364e35\System.ServiceModel.Web.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
- 2009-05-03 12:21 . 2009-05-03 12:21 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2009-08-07 04:53 . 2009-08-07 04:53 966656 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
- 2009-05-03 12:21 . 2009-05-03 12:21 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2009-08-07 04:55 . 2009-08-07 04:55 233472 c:\windows\assembly\GAC_MSIL\System.Net\3.5.0.0__b03f5f7f11d50a3a\System.Net.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
- 2009-05-03 12:21 . 2009-05-03 12:21 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
- 2009-05-03 12:21 . 2009-05-03 12:21 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2009-08-07 04:55 . 2009-08-07 04:55 143360 c:\windows\assembly\GAC_MSIL\System.Management.Instrumentation\3.5.0.0__b77a5c561934e089\System.Management.Instrumentation.dll
+ 2009-08-07 04:53 . 2009-08-07 04:53 131072 c:\windows\assembly\GAC_MSIL\System.IO.Log\3.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
+ 2009-08-07 04:53 . 2009-08-07 04:53 430080 c:\windows\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089\System.IdentityModel.dll
+ 2009-08-07 04:53 . 2009-08-07 04:53 126976 c:\windows\assembly\GAC_MSIL\System.IdentityModel.Selectors\3.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2009-05-03 12:21 . 2009-05-03 12:21 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2009-08-07 04:54 . 2009-08-07 04:54 286720 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\3.5.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2009-08-07 05:00 . 2009-08-07 05:00 442368 c:\windows\assembly\GAC_MSIL\System.Data.Services\3.5.0.0__b77a5c561934e089\System.Data.Services.dll
+ 2009-08-07 04:54 . 2009-08-07 04:54 114688 c:\windows\assembly\GAC_MSIL\System.Data.Services.Design\3.5.0.0__b77a5c561934e089\System.Data.Services.Design.dll
+ 2009-08-07 05:00 . 2009-08-07 05:00 294912 c:\windows\assembly\GAC_MSIL\System.Data.Services.Client\3.5.0.0__b77a5c561934e089\System.Data.Services.Client.dll
+ 2009-08-07 04:54 . 2009-08-07 04:54 684032 c:\windows\assembly\GAC_MSIL\System.Data.Linq\3.5.0.0__b77a5c561934e089\System.Data.Linq.dll
+ 2009-08-07 04:55 . 2009-08-07 04:55 229376 c:\windows\assembly\GAC_MSIL\System.Data.Entity.Design\3.5.0.0__b77a5c561934e089\System.Data.Entity.Design.dll
+ 2009-08-07 04:54 . 2009-08-07 04:54 667648 c:\windows\assembly\GAC_MSIL\System.Core\3.5.0.0__b77a5c561934e089\System.Core.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2009-08-07 04:54 . 2009-08-07 04:54 163840 c:\windows\assembly\GAC_MSIL\System.AddIn\3.5.0.0__b77a5c561934e089\System.AddIn.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
- 2009-05-03 12:21 . 2009-05-03 12:21 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2009-08-07 04:53 . 2009-08-07 04:53 110592 c:\windows\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll
+ 2009-08-07 04:53 . 2009-08-07 04:53 528384 c:\windows\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\ReachFramework.dll
+ 2009-08-07 04:53 . 2009-08-07 04:53 864256 c:\windows\assembly\GAC_MSIL\PresentationUI\3.0.0.0__31bf3856ad364e35\PresentationUI.dll
+ 2009-08-07 04:53 . 2009-08-07 04:53 163840 c:\windows\assembly\GAC_MSIL\PresentationFramework.Royale\3.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
+ 2009-08-07 04:53 . 2009-08-07 04:53 397312 c:\windows\assembly\GAC_MSIL\PresentationFramework.Luna\3.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
+ 2009-08-07 04:53 . 2009-08-07 04:53 139264 c:\windows\assembly\GAC_MSIL\PresentationFramework.Classic\3.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
+ 2009-08-07 04:53 . 2009-08-07 04:53 196608 c:\windows\assembly\GAC_MSIL\PresentationFramework.Aero\3.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
+ 2009-08-07 04:53 . 2009-08-07 04:53 598016 c:\windows\assembly\GAC_MSIL\PresentationBuildTasks\3.0.0.0__31bf3856ad364e35\PresentationBuildTasks.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2009-05-03 12:21 . 2009-05-03 12:21 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
- 2009-05-03 12:21 . 2009-05-03 12:21 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2009-08-07 04:53 . 2009-08-07 04:53 397312 c:\windows\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
+ 2009-11-24 12:27 . 2009-11-24 12:27 609160 c:\windows\assembly\GAC_MSIL\Microsoft.Office.InfoPath.Client.Internal.Host\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Infopath.Client.Internal.Host.dll
- 2009-05-03 12:21 . 2009-05-03 12:21 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
+ 2009-08-07 04:54 . 2009-08-07 04:54 802816 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.v3.5.dll
+ 2009-08-07 04:54 . 2009-08-07 04:54 733184 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2009-08-07 04:54 . 2009-08-07 04:54 106496 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Conversion.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Conversion.v3.5.dll
- 2009-05-03 12:21 . 2009-05-03 12:21 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2009-08-07 04:53 . 2009-08-07 04:53 368640 c:\windows\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
- 2009-05-03 12:21 . 2009-05-03 12:21 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2009-08-07 04:53 . 2009-08-07 04:53 163840 c:\windows\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
+ 2009-12-09 06:36 . 2009-12-09 06:36 117144 c:\windows\assembly\GAC_32\Microsoft.Office.InfoPath.Client.Internal.Host.Interop\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Infopath.Client.Internal.Host.Interop.dll
+ 2009-11-24 12:26 . 2009-11-24 12:26 423784 c:\windows\assembly\GAC\office\12.0.0.0__71e9bce111e9429c\OFFICE.DLL
+ 2009-11-24 12:27 . 2009-11-24 12:27 870256 c:\windows\assembly\GAC\Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Word.dll
+ 2009-11-24 12:26 . 2009-11-24 12:26 149352 c:\windows\assembly\GAC\Microsoft.Office.Interop.Graph\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Graph.dll
+ 2009-11-25 12:09 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB976098-v2$\spuninst\updspapi.dll
+ 2009-11-25 12:09 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB976098-v2$\spuninst\spuninst.exe
+ 2009-10-18 12:14 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB975467$\spuninst\updspapi.dll
+ 2009-10-18 12:14 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB975467$\spuninst\spuninst.exe
+ 2009-10-18 12:14 . 2009-06-25 08:27 136192 c:\windows\$NtUninstallKB975467$\msv1_0.dll
+ 2009-10-18 12:20 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB975025$\spuninst\updspapi.dll
+ 2009-10-18 12:20 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB975025$\spuninst\spuninst.exe
+ 2009-10-18 12:20 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB974571$\spuninst\updspapi.dll
+ 2009-10-18 12:20 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB974571$\spuninst\spuninst.exe
+ 2009-12-09 06:35 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB974392$\spuninst\updspapi.dll
+ 2009-12-09 06:35 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB974392$\spuninst\spuninst.exe
+ 2009-12-09 06:35 . 2008-04-14 03:21 271360 c:\windows\$NtUninstallKB974392$\oakley.dll
+ 2009-12-09 06:37 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB974318$\spuninst\updspapi.dll
+ 2009-12-09 06:37 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB974318$\spuninst\spuninst.exe
+ 2009-12-09 06:37 . 2008-04-14 03:21 150528 c:\windows\$NtUninstallKB974318$\rastls.dll
+ 2009-10-18 12:20 . 2008-10-03 10:04 247326 c:\windows\$NtUninstallKB974112$\strmdll.dll
+ 2009-10-18 12:20 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB974112$\spuninst\updspapi.dll
+ 2009-10-18 12:20 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB974112$\spuninst\spuninst.exe
+ 2009-12-09 06:36 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB973904$\spuninst\updspapi.dll
+ 2009-12-09 06:36 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB973904$\spuninst\spuninst.exe
+ 2009-08-12 11:15 . 2008-07-08 12:59 391032 c:\windows\$NtUninstallKB973869$\spuninst\updspapi.dll
+ 2009-08-12 11:15 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB973869$\spuninst\spuninst.exe
+ 2009-08-12 11:11 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB973815$\spuninst\updspapi.dll
+ 2009-08-12 11:11 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB973815$\spuninst\spuninst.exe
+ 2009-08-12 11:11 . 2008-04-14 03:21 204288 c:\windows\$NtUninstallKB973815$\mswebdvd.dll
+ 2009-11-25 12:09 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB973687$\spuninst\updspapi.dll
+ 2009-11-25 12:09 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB973687$\spuninst\spuninst.exe
+ 2009-08-12 11:13 . 2006-10-18 19:47 314880 c:\windows\$NtUninstallKB973540_WM9$\wmpdxm.dll
+ 2009-08-12 11:13 . 2007-07-27 08:41 382840 c:\windows\$NtUninstallKB973540_WM9$\spuninst\updspapi.dll
+ 2009-08-12 11:13 . 2007-07-27 06:17 233848 c:\windows\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe
+ 2009-10-18 12:15 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB973525$\spuninst\updspapi.dll
+ 2009-10-18 12:15 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB973525$\spuninst\spuninst.exe
+ 2009-08-12 11:14 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB973507$\spuninst\updspapi.dll
+ 2009-08-12 11:14 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB973507$\spuninst\spuninst.exe
+ 2009-08-12 11:14 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB973354$\spuninst\updspapi.dll
+ 2009-08-12 11:14 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB973354$\spuninst\spuninst.exe
+ 2009-07-19 19:28 . 2008-07-08 12:59 391032 c:\windows\$NtUninstallKB973346$\spuninst\updspapi.dll
+ 2009-07-19 19:28 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB973346$\spuninst\spuninst.exe
+ 2009-12-09 06:35 . 2008-12-16 12:32 354304 c:\windows\$NtUninstallKB971737$\winhttp.dll
+ 2009-12-09 06:35 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB971737$\spuninst\updspapi.dll
+ 2009-12-09 06:35 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB971737$\spuninst\spuninst.exe
+ 2009-08-12 11:15 . 2008-04-14 03:22 132096 c:\windows\$NtUninstallKB971657$\wkssvc.dll
+ 2009-08-12 11:15 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB971657$\spuninst\updspapi.dll
+ 2009-08-12 11:15 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB971657$\spuninst\spuninst.exe
+ 2009-07-19 19:28 . 2008-07-09 07:36 391032 c:\windows\$NtUninstallKB971633$\spuninst\updspapi.dll
+ 2009-07-19 19:28 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB971633$\spuninst\spuninst.exe
+ 2009-08-12 11:15 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB971557$\spuninst\updspapi.dll
+ 2009-08-12 11:15 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB971557$\spuninst\spuninst.exe
+ 2009-10-18 12:16 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB971486$\spuninst\updspapi.dll
+ 2009-10-18 12:16 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB971486$\spuninst\spuninst.exe
+ 2009-08-26 17:44 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB970653-v3$\spuninst\updspapi.dll
+ 2009-08-26 17:44 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB970653-v3$\spuninst\spuninst.exe
+ 2009-12-09 06:37 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB970430$\spuninst\updspapi.dll
+ 2009-12-09 06:37 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB970430$\spuninst\spuninst.exe
+ 2009-12-09 06:37 . 2008-04-13 18:53 264832 c:\windows\$NtUninstallKB970430$\http.sys
+ 2009-11-11 20:14 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB969947$\spuninst\updspapi.dll
+ 2009-11-11 20:14 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB969947$\spuninst\spuninst.exe
+ 2009-10-18 12:20 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB969059$\spuninst\updspapi.dll
+ 2009-10-18 12:20 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB969059$\spuninst\spuninst.exe
+ 2009-09-10 14:47 . 2007-07-27 08:41 382840 c:\windows\$NtUninstallKB968816_WM9$\spuninst\updspapi.dll
+ 2009-09-10 14:47 . 2007-07-27 06:17 233848 c:\windows\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe
+ 2009-08-18 03:11 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB968389$\spuninst\updspapi.dll
+ 2009-08-18 03:11 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB968389$\spuninst\spuninst.exe
+ 2009-08-18 03:11 . 2008-12-05 06:57 144896 c:\windows\$NtUninstallKB968389$\schannel.dll
+ 2009-08-18 03:11 . 2008-04-14 03:21 132608 c:\windows\$NtUninstallKB968389$\msv1_0.dll
+ 2009-08-18 03:11 . 2009-02-09 10:56 728064 c:\windows\$NtUninstallKB968389$\lsasrv.dll
+ 2009-08-18 03:11 . 2008-04-14 03:21 299520 c:\windows\$NtUninstallKB968389$\kerberos.dll
+ 2009-07-19 19:24 . 2008-04-14 03:22 117760 c:\windows\$NtUninstallKB961371$\t2embed.dll
+ 2009-07-19 19:24 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB961371$\spuninst\updspapi.dll
+ 2009-07-19 19:24 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB961371$\spuninst\spuninst.exe
+ 2009-08-08 14:07 . 2007-11-30 11:18 391032 c:\windows\$NtUninstallKB961118$\spuninst\updspapi.dll
+ 2009-08-08 14:07 . 2007-11-30 11:18 233848 c:\windows\$NtUninstallKB961118$\spuninst\spuninst.exe
+ 2009-08-12 11:15 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB960859$\spuninst\updspapi.dll
+ 2009-08-12 11:15 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB960859$\spuninst\spuninst.exe
+ 2009-10-18 12:23 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB958869$\spuninst\updspapi.dll
+ 2009-10-18 12:23 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB958869$\spuninst\spuninst.exe
+ 2009-09-10 14:47 . 2008-04-14 03:22 153088 c:\windows\$NtUninstallKB956844$\triedit.dll
+ 2009-09-10 14:47 . 2008-07-08 12:59 391032 c:\windows\$NtUninstallKB956844$\spuninst\updspapi.dll
+ 2009-09-10 14:47 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB956844$\spuninst\spuninst.exe
+ 2009-08-12 11:15 . 2008-07-08 12:59 391032 c:\windows\$NtUninstallKB956744$\spuninst\updspapi.dll
+ 2009-08-12 11:15 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB956744$\spuninst\spuninst.exe
+ 2009-10-18 12:20 . 2006-10-18 19:47 603648 c:\windows\$NtUninstallKB954155_WM9$\wmspdmod.dll
+ 2009-10-18 12:20 . 2007-07-27 08:41 382840 c:\windows\$NtUninstallKB954155_WM9$\spuninst\updspapi.dll
+ 2009-10-18 12:20 . 2007-07-27 06:17 233848 c:\windows\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe
+ 2009-11-04 08:15 . 2008-07-08 12:59 391032 c:\windows\$hf_mig$\KB976749-IE8\update\updspapi.dll
+ 2009-11-04 08:15 . 2008-07-08 12:59 759160 c:\windows\$hf_mig$\KB976749-IE8\update\update.exe
+ 2009-11-04 08:15 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB976749-IE8\spuninst.exe
+ 2009-12-09 06:37 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB976325-IE8\update\updspapi.dll
+ 2009-12-09 06:37 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB976325-IE8\update\update.exe
+ 2009-12-09 06:37 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB976325-IE8\spuninst.exe
+ 2009-12-09 05:25 . 2009-10-29 07:38 916480 c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\wininet.dll
+ 2009-12-09 05:25 . 2009-10-29 07:38 206848 c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\occache.dll
+ 2009-12-09 05:25 . 2009-10-29 07:38 594432 c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\msfeeds.dll
+ 2009-12-09 05:25 . 2009-10-29 07:38 246272 c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\ieproxy.dll
+ 2009-12-09 05:25 . 2009-10-29 07:38 184320 c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\iepeers.dll
+ 2009-12-09 05:25 . 2009-10-29 07:37 387584 c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\iedkcs32.dll
+ 2009-12-09 05:25 . 2009-10-28 14:09 173056 c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\ie4uinit.exe
+ 2009-10-18 12:14 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB975467\update\updspapi.dll
+ 2009-10-18 12:14 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB975467\update\update.exe
+ 2009-10-18 12:14 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB975467\spuninst.exe
+ 2009-09-11 14:15 . 2009-09-11 14:15 136704 c:\windows\$hf_mig$\KB975467\SP3QFE\msv1_0.dll
+ 2009-10-18 12:20 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB975025\update\updspapi.dll
+ 2009-10-18 12:20 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB975025\update\update.exe
+ 2009-10-18 12:20 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB975025\spuninst.exe
+ 2009-10-18 12:20 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB974571\update\updspapi.dll
+ 2009-10-18 12:20 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB974571\update\update.exe
+ 2009-10-18 12:20 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB974571\spuninst.exe
+ 2009-10-22 17:55 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB974455-IE8\update\updspapi.dll
+ 2009-10-22 17:55 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB974455-IE8\update\update.exe
+ 2009-10-22 17:55 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB974455-IE8\spuninst.exe
+ 2009-10-22 12:38 . 2009-08-29 07:51 916480 c:\windows\$hf_mig$\KB974455-IE8\SP3QFE\wininet.dll
+ 2009-10-22 12:38 . 2009-08-29 07:51 206848 c:\windows\$hf_mig$\KB974455-IE8\SP3QFE\occache.dll
+ 2009-10-22 12:38 . 2009-08-29 07:51 594432 c:\windows\$hf_mig$\KB974455-IE8\SP3QFE\msfeeds.dll
+ 2009-10-22 12:37 . 2009-08-29 07:51 246272 c:\windows\$hf_mig$\KB974455-IE8\SP3QFE\ieproxy.dll
+ 2009-10-22 12:38 . 2009-08-29 07:51 184320 c:\windows\$hf_mig$\KB974455-IE8\SP3QFE\iepeers.dll
+ 2009-10-22 12:38 . 2009-08-29 07:51 387584 c:\windows\$hf_mig$\KB974455-IE8\SP3QFE\iedkcs32.dll
+ 2009-10-22 12:38 . 2009-08-28 10:07 173056 c:\windows\$hf_mig$\KB974455-IE8\SP3QFE\ie4uinit.exe
+ 2009-12-09 06:35 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB974392\update\updspapi.dll
+ 2009-12-09 06:35 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB974392\update\update.exe
+ 2009-12-09 06:35 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB974392\spuninst.exe
+ 2009-10-13 10:39 . 2009-10-13 10:39 271360 c:\windows\$hf_mig$\KB974392\SP3QFE\oakley.dll
+ 2009-12-09 06:37 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB974318\update\updspapi.dll
+ 2009-12-09 06:37 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB974318\update\update.exe
+ 2009-12-09 06:37 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB974318\spuninst.exe
+ 2009-10-12 13:33 . 2009-10-12 13:33 150528 c:\windows\$hf_mig$\KB974318\SP3QFE\rastls.dll
+ 2009-10-18 12:20 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB974112\update\updspapi.dll
+ 2009-10-18 12:20 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB974112\update\update.exe
+ 2009-10-18 12:20 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB974112\spuninst.exe
+ 2009-08-26 08:03 . 2009-08-26 08:03 247326 c:\windows\$hf_mig$\KB974112\SP3QFE\strmdll.dll
+ 2009-12-09 06:36 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB973904\update\updspapi.dll
+ 2009-12-09 06:36 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB973904\update\update.exe
+ 2009-12-09 06:36 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB973904\spuninst.exe
+ 2009-12-09 05:24 . 2009-07-29 14:00 119648 c:\windows\$hf_mig$\KB973904\SP3QFE\msconv97.dll
+ 2009-08-12 11:15 . 2008-07-08 12:59 391032 c:\windows\$hf_mig$\KB973869\update\updspapi.dll
+ 2009-08-12 11:15 . 2008-07-08 12:59 759160 c:\windows\$hf_mig$\KB973869\update\update.exe
+ 2009-08-12 11:15 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB973869\spuninst.exe
+ 2009-08-12 11:11 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB973815\update\updspapi.dll
+ 2009-08-12 11:11 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB973815\update\update.exe
+ 2009-08-12 11:11 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB973815\spuninst.exe
+ 2009-08-05 08:53 . 2009-08-05 08:53 205312 c:\windows\$hf_mig$\KB973815\SP3QFE\mswebdvd.dll
+ 2009-11-25 12:09 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB973687\update\updspapi.dll
+ 2009-11-25 12:09 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB973687\update\update.exe
+ 2009-11-25 12:09 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB973687\spuninst.exe
+ 2009-10-18 12:15 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB973525\update\updspapi.dll
+ 2009-10-18 12:15 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB973525\update\update.exe
+ 2009-10-18 12:15 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB973525\spuninst.exe
+ 2009-08-12 11:14 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB973507\update\updspapi.dll
+ 2009-08-12 11:14 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB973507\update\update.exe
+ 2009-08-12 11:14 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB973507\spuninst.exe
+ 2009-08-12 11:14 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB973354\update\updspapi.dll
+ 2009-08-12 11:14 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB973354\update\update.exe
+ 2009-08-12 11:14 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB973354\spuninst.exe
+ 2009-07-19 19:28 . 2008-07-08 12:59 391032 c:\windows\$hf_mig$\KB973346\update\updspapi.dll
+ 2009-07-19 19:28 . 2008-07-08 12:59 759160 c:\windows\$hf_mig$\KB973346\update\update.exe
+ 2009-07-19 19:28 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB973346\spuninst.exe
+ 2009-07-29 19:28 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB972260-IE8\update\updspapi.dll
+ 2009-07-29 19:28 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB972260-IE8\update\update.exe
+ 2009-07-29 19:28 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB972260-IE8\spuninst.exe
+ 2009-07-29 12:36 . 2009-07-03 17:02 915456 c:\windows\$hf_mig$\KB972260-IE8\SP3QFE\wininet.dll
+ 2009-07-29 12:36 . 2009-07-03 17:02 206848 c:\windows\$hf_mig$\KB972260-IE8\SP3QFE\occache.dll
+ 2009-07-29 12:36 . 2009-07-03 17:02 594432 c:\windows\$hf_mig$\KB972260-IE8\SP3QFE\msfeeds.dll
+ 2009-07-29 12:36 . 2009-07-03 17:02 246272 c:\windows\$hf_mig$\KB972260-IE8\SP3QFE\ieproxy.dll
+ 2009-07-29 12:36 . 2009-07-03 17:02 184320 c:\windows\$hf_mig$\KB972260-IE8\SP3QFE\iepeers.dll
+ 2009-07-29 12:36 . 2009-07-03 17:02 386048 c:\windows\$hf_mig$\KB972260-IE8\SP3QFE\iedkcs32.dll
+ 2009-07-29 12:36 . 2009-07-03 11:37 173056 c:\windows\$hf_mig$\KB972260-IE8\SP3QFE\ie4uinit.exe
+ 2009-09-10 14:46 . 2008-07-08 12:59 391032 c:\windows\$hf_mig$\KB971961-IE8\update\updspapi.dll
+ 2009-09-10 14:46 . 2008-07-08 12:59 759160 c:\windows\$hf_mig$\KB971961-IE8\update\update.exe
+ 2009-09-10 14:46 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB971961-IE8\spuninst.exe
+ 2009-09-10 12:35 . 2009-06-22 06:50 726528 c:\windows\$hf_mig$\KB971961-IE8\SP3QFE\jscript.dll
+ 2009-12-09 06:35 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB971737\update\updspapi.dll
+ 2009-12-09 06:35 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB971737\update\update.exe
+ 2009-12-09 06:35 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB971737\spuninst.exe
+ 2009-08-25 09:31 . 2009-08-25 09:31 354816 c:\windows\$hf_mig$\KB971737\SP3QFE\winhttp.dll
+ 2009-08-12 11:15 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB971657\update\updspapi.dll
+ 2009-08-12 11:15 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB971657\update\update.exe
+ 2009-08-12 11:15 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB971657\spuninst.exe
+ 2009-06-10 06:18 . 2009-06-10 06:18 134144 c:\windows\$hf_mig$\KB971657\SP3QFE\wkssvc.dll
+ 2009-07-19 19:28 . 2008-07-09 07:36 391032 c:\windows\$hf_mig$\KB971633\update\updspapi.dll
+ 2009-07-19 19:28 . 2008-07-09 07:36 759160 c:\windows\$hf_mig$\KB971633\update\update.exe
+ 2009-07-19 19:28 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB971633\spuninst.exe
+ 2009-08-12 11:15 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB971557\update\updspapi.dll
+ 2009-08-12 11:15 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB971557\update\update.exe
+ 2009-08-12 11:15 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB971557\spuninst.exe
+ 2009-10-18 12:16 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB971486\update\updspapi.dll
+ 2009-10-18 12:16 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB971486\update\update.exe
+ 2009-10-18 12:16 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB971486\spuninst.exe
+ 2009-12-09 06:38 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB970430\update\updspapi.dll
+ 2009-12-09 06:38 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB970430\update\update.exe
+ 2009-12-09 06:38 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB970430\spuninst.exe
+ 2009-10-20 15:21 . 2009-10-20 15:21 265728 c:\windows\$hf_mig$\KB970430\SP3QFE\http.sys
+ 2009-11-11 20:14 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB969947\update\updspapi.dll
+ 2009-11-11 20:14 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB969947\update\update.exe
+ 2009-11-11 20:14 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB969947\spuninst.exe
+ 2009-10-18 12:20 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB969059\update\updspapi.dll
+ 2009-10-18 12:20 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB969059\update\update.exe
+ 2009-10-18 12:20 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB969059\spuninst.exe
+ 2009-08-18 03:11 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB968389\update\updspapi.dll
+ 2009-08-18 03:11 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB968389\update\update.exe
+ 2009-08-18 03:11 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB968389\spuninst.exe
+ 2009-06-25 08:42 . 2009-06-25 08:42 147456 c:\windows\$hf_mig$\KB968389\SP3QFE\schannel.dll
+ 2009-06-25 08:42 . 2009-06-25 08:42 136704 c:\windows\$hf_mig$\KB968389\SP3QFE\msv1_0.dll
+ 2009-06-26 09:42 . 2009-06-26 09:42 729088 c:\windows\$hf_mig$\KB968389\SP3QFE\lsasrv.dll
+ 2009-06-25 08:42 . 2009-06-25 08:42 301568 c:\windows\$hf_mig$\KB968389\SP3QFE\kerberos.dll
+ 2009-07-19 19:24 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB961371\update\updspapi.dll
+ 2009-07-19 19:24 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB961371\update\update.exe
+ 2009-07-19 19:24 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB961371\spuninst.exe
+ 2009-06-16 14:44 . 2009-06-16 14:44 119808 c:\windows\$hf_mig$\KB961371\SP3QFE\t2embed.dll
+ 2009-08-12 11:15 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB960859\update\updspapi.dll
+ 2009-08-12 11:15 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB960859\update\update.exe
+ 2009-08-12 11:15 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB960859\spuninst.exe
+ 2009-09-10 14:47 . 2008-07-08 12:59 391032 c:\windows\$hf_mig$\KB956844\update\updspapi.dll
+ 2009-09-10 14:47 . 2008-07-08 12:59 759160 c:\windows\$hf_mig$\KB956844\update\update.exe
+ 2009-09-10 14:47 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB956844\spuninst.exe
+ 2009-09-10 12:37 . 2009-06-21 21:50 153088 c:\windows\$hf_mig$\KB956844\SP3QFE\triedit.dll
+ 2009-08-12 11:15 . 2008-07-08 12:59 391032 c:\windows\$hf_mig$\KB956744\update\updspapi.dll
+ 2009-08-12 11:15 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB956744\update\update.exe
+ 2009-08-12 11:15 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB956744\spuninst.exe
+ 2009-10-18 11:46 . 2009-08-13 13:56 1748992 c:\windows\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6001.22319_x-ww_f0b4c2df\GdiPlus.dll
+ 2009-07-11 19:46 . 2009-07-11 19:46 1093120 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfc80u.dll
+ 2009-07-11 19:46 . 2009-07-11 19:46 1105920 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfc80.dll
+ 2009-07-20 23:03 . 2009-07-20 23:03 1348432 c:\windows\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9876.0_x-ww_a621d1d5\msxml4.dll
+ 2009-08-07 04:53 . 2008-07-06 12:06 1676288 c:\windows\system32\xpssvcs.dll
+ 2008-05-15 16:05 . 2009-08-06 17:23 1929952 c:\windows\system32\wuaueng.dll
- 2001-10-25 12:00 . 2008-06-18 04:03 2458112 c:\windows\system32\WMVCore.dll
+ 2001-10-25 12:00 . 2009-05-20 02:56 2458112 c:\windows\system32\WMVCore.dll
+ 2001-10-25 12:00 . 2009-08-14 15:15 1850624 c:\windows\system32\win32k.sys
+ 2001-10-25 12:00 . 2004-07-17 09:35 1356800 c:\windows\system32\webfldrs.msi
+ 2009-06-20 13:56 . 2007-06-22 10:34 1419232 c:\windows\system32\WdfCoInstaller01005.dll
+ 2001-10-25 12:00 . 2009-12-21 19:08 1208832 c:\windows\system32\urlmon.dll
+ 2009-08-07 04:53 . 2008-07-06 12:06 1676288 c:\windows\system32\spool\XPSEP\i386\xpssvcs.dll
+ 2009-08-07 04:53 . 2008-07-06 12:06 1676288 c:\windows\system32\spool\XPSEP\i386\i386\xpssvcs.dll
+ 2009-08-07 04:53 . 2008-07-06 15:36 2936832 c:\windows\system32\spool\XPSEP\amd64\xpssvcs.dll
+ 2009-08-07 04:53 . 2008-07-06 15:36 2936832 c:\windows\system32\spool\XPSEP\amd64\amd64\xpssvcs.dll
+ 2009-08-07 04:53 . 2008-07-06 12:06 1676288 c:\windows\system32\spool\drivers\w32x86\3\XpsSvcs.dll
+ 2009-07-21 21:53 . 2007-01-23 13:45 1419024 c:\windows\system32\ReinstallBackups\0003\DriverFiles\WdfCoInstaller01005.dll
+ 2009-07-21 21:53 . 2007-01-23 13:45 1419024 c:\windows\system32\ReinstallBackups\0001\DriverFiles\WdfCoInstaller01005.dll
+ 2001-10-25 12:00 . 2009-07-17 16:17 1437696 c:\windows\system32\query.dll
- 2001-10-25 12:00 . 2008-04-14 03:21 1437696 c:\windows\system32\query.dll
+ 2001-10-25 12:00 . 2009-06-03 19:11 1293824 c:\windows\system32\quartz.dll
+ 2001-10-25 12:00 . 2009-08-04 20:59 2191360 c:\windows\system32\ntoskrnl.exe
+ 2001-10-24 11:46 . 2009-08-04 17:29 2068224 c:\windows\system32\ntkrnlpa.exe
- 2001-10-24 11:46 . 2009-02-10 17:09 2068224 c:\windows\system32\ntkrnlpa.exe
+ 2008-09-03 04:42 . 2009-07-31 09:05 1372672 c:\windows\system32\msxml6.dll
+ 2009-07-20 23:05 . 2009-07-20 23:05 1348432 c:\windows\system32\msxml4.dll
+ 2001-10-25 12:00 . 2009-07-31 04:35 1172480 c:\windows\system32\msxml3.dll
+ 2008-05-15 16:05 . 2009-06-10 07:21 2066432 c:\windows\system32\mstscax.dll
+ 2001-10-25 12:00 . 2009-12-21 19:08 5942784 c:\windows\system32\mshtml.dll
+ 2007-08-13 16:34 . 2009-12-21 19:08 1985536 c:\windows\system32\iertutil.dll
+ 2009-08-17 21:33 . 2009-08-17 21:33 1193832 c:\windows\system32\FM20.DLL

Re: Rootkit? 4 a poslední část :-)

Napsal: 24 led 2010 17:01
od Vang
+ 2009-08-07 04:53 . 2008-07-06 12:06 1676288 c:\windows\system32\dllcache\xpssvcs.dll
+ 2008-05-15 16:05 . 2009-08-06 17:23 1929952 c:\windows\system32\dllcache\wuaueng.dll
+ 2001-10-25 12:00 . 2009-05-20 02:56 2458112 c:\windows\system32\dllcache\WMVCore.dll
- 2001-10-25 12:00 . 2008-06-18 04:03 2458112 c:\windows\system32\dllcache\WMVCore.dll
+ 2008-10-16 10:50 . 2009-08-14 15:15 1850624 c:\windows\system32\dllcache\win32k.sys
+ 2008-04-21 07:03 . 2009-12-21 19:08 1208832 c:\windows\system32\dllcache\urlmon.dll
+ 2009-07-17 16:17 . 2009-07-17 16:17 1437696 c:\windows\system32\dllcache\query.dll
+ 2008-05-07 05:12 . 2009-06-03 19:11 1293824 c:\windows\system32\dllcache\quartz.dll
+ 2008-10-16 10:50 . 2009-08-04 20:59 2191360 c:\windows\system32\dllcache\ntoskrnl.exe
- 2008-10-16 10:50 . 2009-02-09 11:26 2025984 c:\windows\system32\dllcache\ntkrpamp.exe
+ 2008-10-16 10:50 . 2009-08-04 17:29 2025984 c:\windows\system32\dllcache\ntkrpamp.exe
+ 2008-10-16 10:50 . 2009-08-04 17:29 2068224 c:\windows\system32\dllcache\ntkrnlpa.exe
- 2008-10-16 10:50 . 2009-02-10 17:09 2068224 c:\windows\system32\dllcache\ntkrnlpa.exe
+ 2008-10-16 10:50 . 2009-08-04 17:29 2147328 c:\windows\system32\dllcache\ntkrnlmp.exe
- 2008-10-16 10:50 . 2009-02-09 11:26 2147328 c:\windows\system32\dllcache\ntkrnlmp.exe
+ 2008-09-03 04:42 . 2009-07-31 09:05 1372672 c:\windows\system32\dllcache\msxml6.dll
+ 2008-11-12 16:08 . 2009-07-31 04:35 1172480 c:\windows\system32\dllcache\msxml3.dll
+ 2009-06-10 07:21 . 2009-06-10 07:21 2066432 c:\windows\system32\dllcache\mstscax.dll
+ 2009-08-12 05:36 . 2009-07-10 13:28 1315328 c:\windows\system32\dllcache\msoe.dll
+ 2008-04-21 07:03 . 2009-12-21 19:08 5942784 c:\windows\system32\dllcache\mshtml.dll
+ 2008-09-05 04:31 . 2009-12-21 19:08 1985536 c:\windows\system32\dllcache\iertutil.dll
+ 2008-07-08 16:49 . 2004-07-17 09:35 1356800 c:\windows\ServicePackFiles\i386\webfldrs.msi
+ 2008-07-29 21:40 . 2008-07-29 21:40 1720824 c:\windows\Microsoft.NET\Framework\v3.5\vbc.exe
+ 2008-07-29 16:47 . 2008-07-29 16:47 1054208 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vs_setup.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 1364992 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\SITSetup.dll
+ 2008-07-29 16:47 . 2008-07-29 16:47 1064448 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\gencomp.dll
+ 2008-07-29 21:40 . 2008-07-29 21:40 1548280 c:\windows\Microsoft.NET\Framework\v3.5\csc.exe
+ 2008-12-05 17:35 . 2008-12-05 17:35 1736528 c:\windows\Microsoft.NET\Framework\v3.0\WPF\wpfgfx_v0300.dll
+ 2008-07-29 19:10 . 2008-07-29 19:10 2637840 c:\windows\Microsoft.NET\Framework\v3.0\WPF\NlsLexicons0009.dll
+ 2008-07-29 19:10 . 2008-07-29 19:10 4883464 c:\windows\Microsoft.NET\Framework\v3.0\WPF\NlsData0009.dll
+ 2008-12-05 18:12 . 2008-12-05 18:12 5931008 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 1344000 c:\windows\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 1172472 c:\windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe
+ 2008-11-25 02:59 . 2008-11-25 02:59 2048000 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.XML.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
+ 2008-11-25 02:59 . 2008-11-25 02:59 5242880 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 3149824 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 5062656 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
+ 2008-07-25 09:17 . 2008-07-25 09:17 2933248 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.dll
+ 2009-08-07 21:51 . 2009-08-07 21:51 5812560 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
+ 2009-08-07 21:51 . 2009-08-07 21:51 4546560 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
+ 2008-07-25 09:16 . 2008-07-25 09:16 1163768 c:\windows\Microsoft.NET\Framework\v2.0.50727\cscomp.dll
- 2007-04-13 19:35 . 2007-04-13 19:35 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
+ 2008-05-27 23:35 . 2008-05-27 23:35 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
- 2007-04-13 19:35 . 2007-04-13 19:35 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
+ 2008-05-27 23:35 . 2008-05-27 23:35 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
- 2007-04-13 18:57 . 2007-04-13 18:57 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
+ 2008-05-27 22:48 . 2008-05-27 22:48 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
+ 2008-05-27 22:48 . 2008-05-27 22:48 2523136 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
- 2007-04-13 18:57 . 2007-04-13 18:57 2523136 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
- 2007-04-13 18:50 . 2007-04-13 18:50 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
+ 2008-05-27 22:43 . 2008-05-27 22:43 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
+ 2008-11-20 13:48 . 2008-11-20 13:48 5097472 c:\windows\Installer\e4630f.msp
+ 2009-01-08 09:58 . 2009-01-08 09:58 1123840 c:\windows\Installer\9d41d3.msi
+ 2009-02-25 17:08 . 2009-02-25 17:08 8311808 c:\windows\Installer\99712c.msp
+ 2009-03-28 07:50 . 2009-03-28 07:50 5025792 c:\windows\Installer\997116.msp
+ 2009-08-18 10:56 . 2009-08-18 10:56 5020672 c:\windows\Installer\7b7d4d.msp
+ 2008-07-08 17:14 . 2008-07-08 17:14 1643520 c:\windows\Installer\756dd.msi
+ 2008-07-08 17:14 . 2008-07-08 17:14 1656832 c:\windows\Installer\756d7.msi
+ 2008-07-08 17:14 . 2008-07-08 17:14 1656832 c:\windows\Installer\756d1.msi
+ 2008-07-08 17:14 . 2008-07-08 17:14 1656832 c:\windows\Installer\756cb.msi
+ 2008-07-08 17:13 . 2008-07-08 17:13 2347520 c:\windows\Installer\756a6.msi
+ 2008-07-08 17:13 . 2008-07-08 17:13 1651712 c:\windows\Installer\756a0.msi
+ 2008-07-08 17:13 . 2008-07-08 17:13 1645056 c:\windows\Installer\75691.msi
+ 2008-07-08 17:13 . 2008-07-08 17:13 2027008 c:\windows\Installer\7568b.msi
+ 2008-07-08 17:13 . 2008-07-08 17:13 1717760 c:\windows\Installer\75685.msi
+ 2008-07-08 17:12 . 2008-07-08 17:12 2395648 c:\windows\Installer\7567f.msi
+ 2008-10-20 09:19 . 2008-10-20 09:19 5100032 c:\windows\Installer\7322d.msp
+ 2009-02-06 22:31 . 2009-02-06 22:31 5047808 c:\windows\Installer\5f303f.msp
+ 2009-11-20 22:36 . 2009-11-20 22:36 5002752 c:\windows\Installer\47ac9f.msp
+ 2009-10-16 06:09 . 2009-10-16 06:09 2518016 c:\windows\Installer\47ac88.msp
+ 2009-07-27 02:32 . 2009-07-27 02:32 5028352 c:\windows\Installer\464d65.msp
+ 2009-07-21 21:54 . 2009-07-21 21:54 2933248 c:\windows\Installer\43f1c.msi
+ 2009-07-21 21:52 . 2009-07-21 21:52 2587648 c:\windows\Installer\43efd.msi
+ 2009-04-24 10:28 . 2009-04-24 10:28 4450816 c:\windows\Installer\41fb91.msp
+ 2008-07-10 16:15 . 2008-07-10 16:15 6164480 c:\windows\Installer\3898ad.msi
+ 2008-07-08 17:56 . 2008-07-08 17:56 3699200 c:\windows\Installer\2e672a.msi
+ 2008-02-15 06:54 . 2008-02-15 06:54 9736192 c:\windows\Installer\2d7a8a.msp
+ 2008-09-02 09:42 . 2008-09-02 09:42 5104640 c:\windows\Installer\2d7a74.msp
+ 2007-03-30 20:20 . 2007-03-30 20:20 5800960 c:\windows\Installer\2d7a5d.msp
+ 2008-04-11 16:08 . 2008-04-11 16:08 6302720 c:\windows\Installer\2d79d8.msp
+ 2008-04-11 16:48 . 2008-04-11 16:48 6774272 c:\windows\Installer\2d79a6.msp
+ 2008-05-20 22:45 . 2008-05-20 22:45 5246976 c:\windows\Installer\2d798d.msp
+ 2008-04-18 12:56 . 2008-04-18 12:56 6215680 c:\windows\Installer\2d7959.msp
+ 2007-06-01 13:54 . 2007-06-01 13:54 9626624 c:\windows\Installer\2d7941.msp
+ 2008-11-13 01:57 . 2008-11-13 01:57 5099520 c:\windows\Installer\26de6d6.msp
+ 2008-10-20 09:18 . 2008-10-20 09:18 6474240 c:\windows\Installer\26de6bf.msp
+ 2009-08-05 05:49 . 2009-08-05 05:49 3457024 c:\windows\Installer\26db5d.msp
+ 2009-07-27 02:31 . 2009-07-27 02:31 3738624 c:\windows\Installer\26db44.msp
+ 2009-09-18 07:30 . 2009-09-18 07:30 5016576 c:\windows\Installer\26db2d.msp
+ 2009-08-18 11:08 . 2009-08-18 11:08 1373696 c:\windows\Installer\26daff.msp
+ 2008-12-13 07:57 . 2008-12-13 07:57 8397824 c:\windows\Installer\233e7a.msp
+ 2008-07-29 17:26 . 2008-07-29 17:26 1043456 c:\windows\Installer\22164a.msp
+ 2008-07-29 18:37 . 2008-07-29 18:37 2679808 c:\windows\Installer\221648.msp
+ 2008-07-29 19:15 . 2008-07-29 19:15 3697664 c:\windows\Installer\221646.msp
+ 2008-07-29 17:34 . 2008-07-29 17:34 1448448 c:\windows\Installer\221645.msp
+ 2008-07-29 18:22 . 2008-07-29 18:22 4137984 c:\windows\Installer\221644.msp
+ 2008-07-29 17:18 . 2008-07-29 17:18 3376640 c:\windows\Installer\221643.msp
+ 2007-10-14 21:46 . 2007-10-14 21:46 6205440 c:\windows\Installer\1e97cb.msp
+ 2007-10-14 21:38 . 2007-10-14 21:38 2038272 c:\windows\Installer\1e97c2.msp
+ 2007-10-14 21:43 . 2007-10-14 21:43 5749760 c:\windows\Installer\1e9762.msp
+ 2008-07-29 15:45 . 2008-07-29 15:45 2543616 c:\windows\Installer\1dc264.msp
+ 2008-07-29 15:29 . 2008-07-29 15:29 2926080 c:\windows\Installer\1dc263.msp
+ 2008-07-29 15:41 . 2008-07-29 15:41 6487040 c:\windows\Installer\1dc262.msp
+ 2008-07-29 15:39 . 2008-07-29 15:39 3403264 c:\windows\Installer\1dc261.msp
+ 2008-07-29 15:43 . 2008-07-29 15:43 1013248 c:\windows\Installer\1dc25f.msp
+ 2008-07-29 15:31 . 2008-07-29 15:31 6083072 c:\windows\Installer\1dc25c.msp
+ 2009-08-02 14:58 . 2009-08-02 14:58 1565696 c:\windows\Installer\1c42e2.msi
+ 2009-05-26 16:54 . 2009-05-26 16:54 4192768 c:\windows\Installer\1afac2f.msp
+ 2009-07-02 14:23 . 2009-07-02 14:23 5027328 c:\windows\Installer\1afac13.msp
+ 2009-10-16 06:03 . 2009-10-16 06:03 5003776 c:\windows\Installer\17acae7.msp
+ 2009-08-18 11:58 . 2009-08-18 11:58 8301056 c:\windows\Installer\17acad0.msp
+ 2009-08-18 11:57 . 2009-08-18 11:57 9122304 c:\windows\Installer\17acab9.msp
+ 2008-07-08 20:47 . 2008-07-08 20:47 3443712 c:\windows\Installer\15b21b.msi
+ 2009-04-04 16:10 . 2009-04-04 16:10 9926144 c:\windows\Installer\139c8a7.msp
+ 2009-04-04 16:09 . 2009-04-04 16:09 2364928 c:\windows\Installer\139c891.msp
+ 2009-01-07 19:25 . 2009-01-07 19:25 5046784 c:\windows\Installer\138b732.msp
+ 2009-12-03 13:15 . 2009-12-03 13:15 5004288 c:\windows\Installer\134e2ba.msp
+ 2008-09-13 14:10 . 2008-09-13 14:10 3131392 c:\windows\Installer\133379.msi
+ 2009-05-04 05:46 . 2009-05-04 05:46 8299008 c:\windows\Installer\11a195a.msp
+ 2009-05-04 05:47 . 2009-05-04 05:47 9124864 c:\windows\Installer\11a1942.msp
+ 2009-04-24 10:30 . 2009-04-24 10:30 2583552 c:\windows\Installer\11a192a.msp
+ 2009-05-07 07:17 . 2009-05-07 07:17 5026816 c:\windows\Installer\11a1911.msp
+ 2009-04-24 10:29 . 2009-04-24 10:29 9013760 c:\windows\Installer\11a18e3.msp
+ 2008-07-08 17:17 . 2010-01-13 19:55 1172240 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\xlicons.exe
- 2008-07-08 17:17 . 2009-06-14 19:19 1172240 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\xlicons.exe
- 2008-07-08 17:17 . 2009-06-14 19:19 1165584 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\accicons.exe
+ 2008-07-08 17:17 . 2010-01-13 19:55 1165584 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\accicons.exe
+ 2009-03-06 03:26 . 2009-03-06 03:26 5291376 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.6425\IPEDITOR.DLL
+ 2006-10-26 12:47 . 2006-10-26 12:47 1512304 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\NLSD0000.DLL
+ 2008-07-08 17:16 . 2008-07-08 17:16 1276720 c:\windows\Installer\$PatchCache$\Managed\00002119030000000000000000F01FEC\12.0.4518\EXCELPIA.DLL
+ 2010-01-22 21:40 . 2009-10-29 07:43 1208832 c:\windows\ie8updates\KB978207-IE8\urlmon.dll
+ 2010-01-22 21:40 . 2009-10-29 07:43 5940736 c:\windows\ie8updates\KB978207-IE8\mshtml.dll
+ 2010-01-22 21:40 . 2009-10-29 07:43 1985536 c:\windows\ie8updates\KB978207-IE8\iertutil.dll
+ 2009-11-04 08:15 . 2009-08-29 07:58 5940224 c:\windows\ie8updates\KB976749-IE8\mshtml.dll
+ 2009-12-09 06:37 . 2009-08-29 07:58 1208832 c:\windows\ie8updates\KB976325-IE8\urlmon.dll
+ 2009-12-09 06:37 . 2009-10-22 09:18 5939712 c:\windows\ie8updates\KB976325-IE8\mshtml.dll
+ 2009-12-09 06:37 . 2009-08-29 07:58 1985536 c:\windows\ie8updates\KB976325-IE8\iertutil.dll
+ 2009-10-22 17:55 . 2009-07-03 16:59 1208832 c:\windows\ie8updates\KB974455-IE8\urlmon.dll
+ 2009-10-22 17:55 . 2009-07-19 13:16 5937152 c:\windows\ie8updates\KB974455-IE8\mshtml.dll
+ 2009-10-22 17:55 . 2009-07-03 16:59 1985536 c:\windows\ie8updates\KB974455-IE8\iertutil.dll
+ 2009-07-29 19:28 . 2009-04-30 21:16 1207808 c:\windows\ie8updates\KB972260-IE8\urlmon.dll
+ 2009-07-29 19:28 . 2009-05-13 05:05 5936128 c:\windows\ie8updates\KB972260-IE8\mshtml.dll
+ 2009-07-29 19:28 . 2009-04-30 21:16 1985024 c:\windows\ie8updates\KB972260-IE8\iertutil.dll
+ 2008-10-16 10:50 . 2009-08-04 20:59 2191360 c:\windows\Driver Cache\i386\ntoskrnl.exe
+ 2008-10-16 10:50 . 2009-08-04 17:29 2025984 c:\windows\Driver Cache\i386\ntkrpamp.exe
- 2008-10-16 10:50 . 2009-02-09 11:26 2025984 c:\windows\Driver Cache\i386\ntkrpamp.exe
+ 2008-10-16 10:50 . 2009-08-04 17:29 2068224 c:\windows\Driver Cache\i386\ntkrnlpa.exe
- 2008-10-16 10:50 . 2009-02-10 17:09 2068224 c:\windows\Driver Cache\i386\ntkrnlpa.exe
+ 2008-10-16 10:50 . 2009-08-04 17:29 2147328 c:\windows\Driver Cache\i386\ntkrnlmp.exe
- 2008-10-16 10:50 . 2009-02-09 11:26 2147328 c:\windows\Driver Cache\i386\ntkrnlmp.exe
+ 2009-10-18 12:17 . 2009-10-18 12:17 1966080 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_ee20885a\System.dll
+ 2009-10-18 12:18 . 2009-10-18 12:18 4792320 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_673fd7f8\System.dll
+ 2009-10-18 12:18 . 2009-10-18 12:18 2088960 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_f614ca9f\System.Xml.dll
+ 2009-10-18 12:18 . 2009-10-18 12:18 5513216 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_3892fd70\System.Xml.dll
+ 2009-10-18 12:18 . 2009-10-18 12:18 7884800 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_b45d4968\System.Windows.Forms.dll
+ 2009-10-18 12:17 . 2009-10-18 12:17 3018752 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_043bf37f\System.Windows.Forms.dll
+ 2009-10-18 12:18 . 2009-10-18 12:18 2244608 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_fff3aa5f\System.Drawing.dll
+ 2009-10-18 12:18 . 2009-10-18 12:18 1470464 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_e6514f11\System.Design.dll
+ 2009-10-18 12:18 . 2009-10-18 12:18 3395584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_ac100cba\System.Design.dll
+ 2009-10-18 12:18 . 2009-10-18 12:18 8908800 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_7c275382\mscorlib.dll
+ 2009-10-18 12:18 . 2009-10-18 12:18 3391488 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_4fdd3f8c\mscorlib.dll
+ 2009-10-18 13:43 . 2009-10-18 13:43 3313664 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\204d6e5b335134f23ca37638b9227ecf\WindowsBase.ni.dll
+ 2009-10-18 13:55 . 2009-10-18 13:55 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\0f2ed6a204eb13841e99b77025464afc\UIAutomationClientsideProviders.ni.dll
+ 2009-10-18 13:43 . 2009-10-18 13:43 7868416 c:\windows\assembly\NativeImages_v2.0.50727_32\System\3de5bd01124463d7862bd173af90bc83\System.ni.dll
+ 2009-10-18 13:55 . 2009-10-18 13:55 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\5913d3f81e77194ec833991b1047a532\System.Xml.ni.dll
+ 2009-10-18 16:11 . 2009-10-18 16:11 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\fa48917b13629d8effa80dd4a2f2973d\System.WorkflowServices.ni.dll
+ 2009-10-18 16:11 . 2009-10-18 16:11 1908224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\6fe66ee6f3c81996bc148f1ebe7ec030\System.Workflow.Runtime.ni.dll
+ 2009-10-18 16:10 . 2009-10-18 16:10 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\9d0b61f2f1ebdc300bd970f594c422ef\System.Workflow.ComponentModel.ni.dll
+ 2009-10-18 16:10 . 2009-10-18 16:10 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\65328898148a720d394f802f192fc2a0\System.Workflow.Activities.ni.dll
+ 2009-10-18 16:10 . 2009-10-18 16:10 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\ea07ac791bb5cb9f83679e3dd1a0c0cc\System.Web.Services.ni.dll
+ 2009-10-18 16:10 . 2009-10-18 16:10 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\29e2f8b1fb691ced973acf49fcee6ec1\System.Web.Mobile.ni.dll
+ 2009-10-18 16:10 . 2009-10-18 16:10 2403328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\981dea02bc63c0c083e335adf9018788\System.Web.Extensions.ni.dll
+ 2009-10-18 13:54 . 2009-10-18 13:54 1917440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\99594bae1d022502925f5b9dfcdaae9a\System.Speech.ni.dll
+ 2009-10-18 16:10 . 2009-10-18 16:10 1706496 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\e182695d05ea57257568bc5f3208aca7\System.ServiceModel.Web.ni.dll
+ 2009-10-18 16:07 . 2009-10-18 16:07 2338304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\67ad55827f2542552b576170f0a7dc56\System.Runtime.Serialization.ni.dll
+ 2009-10-18 13:54 . 2009-10-18 13:54 1035264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\e5313735a40c0800f116e27fba4754db\System.Printing.ni.dll
+ 2009-10-18 16:07 . 2009-10-18 16:07 1056768 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\c3b18fef5c6dc3bcdbe5df699fd21a55\System.IdentityModel.ni.dll
+ 2009-10-18 13:54 . 2009-10-18 13:54 1587200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\abb2ac7e08bee026f857d8fa36f9fe6f\System.Drawing.ni.dll
+ 2009-10-18 16:09 . 2009-10-18 16:09 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\f47ebb9db460874b1bcbfc391dc970b1\System.DirectoryServices.ni.dll
+ 2009-10-18 16:09 . 2009-10-18 16:09 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\c94a427baa7683f4221b91f90c18461b\System.Deployment.ni.dll
+ 2009-10-18 13:54 . 2009-10-18 13:54 6616576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\694c07365e0fd6bba0bc304d4d2404a7\System.Data.ni.dll
+ 2009-10-18 16:08 . 2009-10-18 16:08 2510336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\272152f0cc139490729e215611a4b244\System.Data.SqlXml.ni.dll
+ 2009-10-18 16:09 . 2009-10-18 16:09 1328128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\112a48e34620a0210eb850040da8a31b\System.Data.Services.ni.dll
+ 2009-10-18 13:54 . 2009-10-18 13:54 2516480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\32788c58ff9f8324460604cf1fe7681b\System.Data.Linq.ni.dll
+ 2009-10-18 16:09 . 2009-10-18 16:09 9924096 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\9012cac7819660f61f1c69cf8e4f2ccf\System.Data.Entity.ni.dll
+ 2009-10-18 13:53 . 2009-10-18 13:53 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\c0a42d2ad8a4078040b334f6770ea11f\System.Core.ni.dll
+ 2009-10-18 13:53 . 2009-10-18 13:53 2128896 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\954685c29689d2a6126ceca1fd55e904\ReachFramework.ni.dll
+ 2009-10-18 13:48 . 2009-10-18 13:48 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\a3a6f52ce1d09a7bdccc8e7fc664792d\PresentationUI.ni.dll
+ 2009-10-18 13:43 . 2009-10-18 13:43 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\f906701365083c1473db31519147e263\PresentationBuildTasks.ni.dll
+ 2009-10-18 16:08 . 2009-10-18 16:08 1712128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\6eee9b772b6d12d3dbd82f118c2ab2e5\Microsoft.VisualBasic.ni.dll
+ 2009-10-18 16:08 . 2009-10-18 16:08 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\f19e9b439636d0744597fff1331cad04\Microsoft.Transactions.Bridge.ni.dll
+ 2009-10-18 16:10 . 2009-10-18 16:10 2332160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\5b1af7b5be24c7ace065fe1c81c2b650\Microsoft.JScript.ni.dll
+ 2009-10-18 16:08 . 2009-10-18 16:08 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\9eec1cc7ac37e0c7f3205e8156149c5a\Microsoft.Build.Tasks.ni.dll
+ 2009-10-18 16:08 . 2009-10-18 16:08 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\28c0730288453d57d5dcd62903c4d31b\Microsoft.Build.Tasks.v3.5.ni.dll
+ 2009-10-18 16:08 . 2009-10-18 16:08 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\5dd4f58999eed37c12aee7ea9f9863ac\Microsoft.Build.Engine.ni.dll
+ 2009-08-07 04:53 . 2009-08-07 04:53 1245184 c:\windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 3149824 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
+ 2009-08-07 04:53 . 2009-08-07 04:53 1630208 c:\windows\assembly\GAC_MSIL\System.Workflow.ComponentModel\3.0.0.0__31bf3856ad364e35\System.Workflow.ComponentModel.dll
+ 2009-08-07 04:53 . 2009-08-07 04:53 1138688 c:\windows\assembly\GAC_MSIL\System.Workflow.Activities\3.0.0.0__31bf3856ad364e35\System.Workflow.Activities.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2009-08-07 05:00 . 2009-08-07 05:00 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
+ 2009-08-07 04:59 . 2009-08-07 04:59 5931008 c:\windows\assembly\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089\System.ServiceModel.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2009-08-07 04:55 . 2009-08-07 04:55 2879488 c:\windows\assembly\GAC_MSIL\System.Data.Entity\3.5.0.0__b77a5c561934e089\System.Data.Entity.dll
+ 2009-08-07 04:59 . 2009-08-07 04:59 5283840 c:\windows\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
+ 2009-08-07 04:53 . 2009-08-07 04:53 4210688 c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
+ 2009-10-18 12:26 . 2009-10-18 12:26 4546560 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
- 2008-07-25 06:06 . 2008-07-25 06:06 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
+ 2009-10-18 12:17 . 2009-10-18 12:17 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
- 2008-07-25 06:06 . 2008-07-25 06:06 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
+ 2009-10-18 12:17 . 2009-10-18 12:17 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
+ 2009-11-24 12:27 . 2009-11-24 12:27 1279848 c:\windows\assembly\GAC\Microsoft.Office.Interop.Excel\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Excel.dll
+ 2009-11-25 12:09 . 2008-09-10 01:16 1307648 c:\windows\$NtUninstallKB973687$\msxml6.dll
+ 2009-11-25 12:09 . 2008-09-04 17:17 1106944 c:\windows\$NtUninstallKB973687$\msxml3.dll
+ 2009-08-12 11:14 . 2008-04-14 03:21 1314816 c:\windows\$NtUninstallKB973354$\msoe.dll
+ 2009-07-19 19:28 . 2008-12-20 22:15 1290752 c:\windows\$NtUninstallKB971633$\quartz.dll
+ 2009-10-18 12:16 . 2009-02-09 11:26 2191232 c:\windows\$NtUninstallKB971486$\ntoskrnl.exe
+ 2009-10-18 12:16 . 2009-02-09 11:26 2025984 c:\windows\$NtUninstallKB971486$\ntkrpamp.exe
+ 2009-10-18 12:16 . 2009-02-10 17:09 2068224 c:\windows\$NtUninstallKB971486$\ntkrnlpa.exe
+ 2009-10-18 12:16 . 2009-02-09 11:26 2147328 c:\windows\$NtUninstallKB971486$\ntkrnlmp.exe
+ 2009-11-11 20:14 . 2009-04-19 19:52 1847168 c:\windows\$NtUninstallKB969947$\win32k.sys
+ 2009-10-18 12:20 . 2008-04-14 03:21 1437696 c:\windows\$NtUninstallKB969059$\query.dll
+ 2009-09-10 14:47 . 2008-06-18 04:03 2458112 c:\windows\$NtUninstallKB968816_WM9$\wmvcore.dll
+ 2009-08-12 11:15 . 2008-04-14 03:21 2061824 c:\windows\$NtUninstallKB956744$\mstscax.dll
+ 2009-11-04 06:49 . 2009-10-22 09:14 5943296 c:\windows\$hf_mig$\KB976749-IE8\SP3QFE\mshtml.dll
+ 2009-12-09 05:25 . 2009-10-29 07:38 1209344 c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\urlmon.dll
+ 2009-12-09 05:25 . 2009-10-29 07:38 5944320 c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\mshtml.dll
+ 2009-12-09 05:25 . 2009-10-29 07:38 1986048 c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\iertutil.dll
+ 2009-10-22 12:38 . 2009-08-29 07:51 1209344 c:\windows\$hf_mig$\KB974455-IE8\SP3QFE\urlmon.dll
+ 2009-10-22 12:38 . 2009-08-29 07:51 5942272 c:\windows\$hf_mig$\KB974455-IE8\SP3QFE\mshtml.dll
+ 2009-10-22 12:38 . 2009-08-29 07:51 1986048 c:\windows\$hf_mig$\KB974455-IE8\SP3QFE\iertutil.dll
+ 2009-11-25 06:53 . 2009-07-31 04:30 1447424 c:\windows\$hf_mig$\KB973687\SP3QFE\msxml6.dll
+ 2009-11-25 06:53 . 2009-07-31 04:30 1172480 c:\windows\$hf_mig$\KB973687\SP3QFE\msxml3.dll
+ 2009-07-10 16:55 . 2009-07-10 16:55 1315328 c:\windows\$hf_mig$\KB973354\SP3QFE\msoe.dll
+ 2009-07-29 12:36 . 2009-07-03 17:02 1208832 c:\windows\$hf_mig$\KB972260-IE8\SP3QFE\urlmon.dll
+ 2009-07-29 12:36 . 2009-07-19 13:08 5938176 c:\windows\$hf_mig$\KB972260-IE8\SP3QFE\mshtml.dll
+ 2009-07-29 12:36 . 2009-07-03 17:02 1985536 c:\windows\$hf_mig$\KB972260-IE8\SP3QFE\iertutil.dll
+ 2009-06-03 19:12 . 2009-06-03 19:12 1293824 c:\windows\$hf_mig$\KB971633\SP3QFE\quartz.dll
+ 2009-10-18 11:43 . 2009-08-04 17:23 2191488 c:\windows\$hf_mig$\KB971486\SP3QFE\ntoskrnl.exe
+ 2009-10-18 11:43 . 2009-08-04 17:23 2025984 c:\windows\$hf_mig$\KB971486\SP3QFE\ntkrpamp.exe
+ 2009-08-04 20:53 . 2009-08-04 20:53 2068352 c:\windows\$hf_mig$\KB971486\SP3QFE\ntkrnlpa.exe
+ 2009-10-18 11:43 . 2009-08-04 17:23 2147328 c:\windows\$hf_mig$\KB971486\SP3QFE\ntkrnlmp.exe
+ 2009-08-14 16:00 . 2009-08-14 16:00 1859712 c:\windows\$hf_mig$\KB969947\SP3QFE\win32k.sys
+ 2009-07-17 16:02 . 2009-07-17 16:02 1437696 c:\windows\$hf_mig$\KB969059\SP3QFE\query.dll
+ 2009-08-12 05:37 . 2009-06-09 15:23 2067968 c:\windows\$hf_mig$\KB956744\SP3QFE\lhmstscx.dll
+ 2008-07-08 16:50 . 2009-07-13 21:43 10841088 c:\windows\system32\wmp.dll
+ 2008-08-04 17:49 . 2010-01-05 00:17 29634504 c:\windows\system32\MRT.exe
+ 2007-08-13 16:54 . 2009-12-21 19:08 11070464 c:\windows\system32\ieframe.dll
+ 2008-09-03 04:43 . 2009-07-13 21:43 10841088 c:\windows\system32\dllcache\wmp.dll
+ 2008-09-05 04:31 . 2009-12-21 19:08 11070464 c:\windows\system32\dllcache\ieframe.dll
+ 2009-08-10 19:08 . 2009-08-10 19:08 11315712 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\M953297\M953297Uninstall.msp
+ 2009-05-04 05:49 . 2009-05-04 05:49 10955776 c:\windows\Installer\e7aef4.msp
+ 2008-07-08 17:17 . 2008-07-08 17:17 18181632 c:\windows\Installer\756ec.msi
+ 2008-09-24 11:05 . 2008-09-24 11:05 16381440 c:\windows\Installer\73216.msp
+ 2008-07-25 06:06 . 2008-07-25 06:06 15256576 c:\windows\Installer\61ba20.msp
+ 2008-08-11 09:51 . 2008-08-11 09:51 15916544 c:\windows\Installer\2d7a46.msp
+ 2008-01-28 16:10 . 2008-01-28 16:10 14201344 c:\windows\Installer\2d7a2f.msp
+ 2008-04-11 16:07 . 2008-04-11 16:07 13257728 c:\windows\Installer\2d7a08.msp
+ 2008-08-11 09:49 . 2008-08-11 09:49 22457344 c:\windows\Installer\2d79ef.msp
+ 2008-07-29 21:20 . 2008-07-29 21:20 11767296 c:\windows\Installer\2d79bd.msp
+ 2008-07-29 21:18 . 2008-07-29 21:18 11933184 c:\windows\Installer\2d7971.msp
+ 2008-10-20 09:22 . 2008-10-20 09:22 11758592 c:\windows\Installer\26de71c.msp
+ 2008-10-20 09:21 . 2008-10-20 09:21 11937280 c:\windows\Installer\26de705.msp
+ 2008-10-20 09:16 . 2008-10-20 09:16 13211648 c:\windows\Installer\26de6ee.msp
+ 2009-08-14 18:32 . 2009-08-14 18:32 11110912 c:\windows\Installer\26db67.msp
+ 2009-08-10 12:09 . 2009-08-10 12:09 17254912 c:\windows\Installer\26db17.msp
+ 2009-08-18 10:50 . 2009-08-18 10:50 12022272 c:\windows\Installer\26dae8.msp
+ 2008-12-13 08:21 . 2008-12-13 08:21 10473472 c:\windows\Installer\233e85.msp
+ 2007-10-14 21:38 . 2007-10-14 21:38 22155264 c:\windows\Installer\1e9783.msp
+ 2007-10-14 21:38 . 2007-10-14 21:38 12192768 c:\windows\Installer\1e9775.msp
+ 2008-05-20 23:30 . 2008-05-20 23:30 14308864 c:\windows\Installer\1e96a5.msp
+ 2009-02-25 17:05 . 2009-02-25 17:05 11840000 c:\windows\Installer\1892c2.msp
+ 2009-02-25 17:07 . 2009-02-25 17:07 11646464 c:\windows\Installer\1892ab.msp
+ 2008-07-08 20:48 . 2008-07-08 20:48 19210240 c:\windows\Installer\16d6d4.msp
+ 2009-04-04 16:09 . 2009-04-04 16:09 10874880 c:\windows\Installer\139c89c.msp
+ 2009-04-04 14:50 . 2009-04-04 14:50 20277760 c:\windows\Installer\139c71a.msp
+ 2009-04-04 14:49 . 2009-04-04 14:49 14030336 c:\windows\Installer\139c70b.msp
+ 2010-01-22 21:40 . 2009-10-29 07:43 11069952 c:\windows\ie8updates\KB978207-IE8\ieframe.dll
+ 2009-12-09 06:37 . 2009-08-29 07:58 11069440 c:\windows\ie8updates\KB976325-IE8\ieframe.dll
+ 2009-10-22 17:55 . 2009-07-19 16:46 11067392 c:\windows\ie8updates\KB974455-IE8\ieframe.dll
+ 2009-07-29 19:28 . 2009-04-30 21:16 11064832 c:\windows\ie8updates\KB972260-IE8\ieframe.dll
+ 2009-08-07 04:56 . 2009-08-07 04:56 11485184 c:\windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP146.tmp\mscorlib.dll
+ 2009-10-18 13:55 . 2009-10-18 13:55 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\d2ea8d76f015817db1607075812b555f\System.Windows.Forms.ni.dll
+ 2009-10-18 16:10 . 2009-10-18 16:10 11796992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\5cea03cfb008f2eac1439a9905467f37\System.Web.ni.dll
+ 2009-10-18 16:07 . 2009-10-18 16:07 17317888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\06d6eab93282d2b136a377bd50b7c5a9\System.ServiceModel.ni.dll
+ 2009-10-18 13:54 . 2009-10-18 13:54 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\8b82e08c008924d51833cb0884bcbfc5\System.Design.ni.dll
+ 2009-10-18 13:46 . 2009-10-18 13:46 14327808 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\58c7ac6b6054038dc9346d7ec8e32b4c\PresentationFramework.ni.dll
+ 2009-10-18 13:43 . 2009-10-18 13:43 12216320 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\94badbd64df59de7da249f71da38b1c2\PresentationCore.ni.dll
+ 2009-10-18 13:43 . 2009-10-18 13:43 11486720 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\7124a40b9998f7b63c86bd1a2125ce26\mscorlib.ni.dll
+ 2009-08-12 11:13 . 2008-11-11 17:34 10838016 c:\windows\$NtUninstallKB973540_WM9$\wmp.dll
+ 2009-10-29 12:08 . 2009-10-29 12:08 11070464 c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\ieframe.dll
+ 2009-08-29 11:21 . 2009-08-29 11:21 11069952 c:\windows\$hf_mig$\KB974455-IE8\SP3QFE\ieframe.dll
+ 2009-07-29 12:36 . 2009-07-19 13:08 11068416 c:\windows\$hf_mig$\KB972260-IE8\SP3QFE\ieframe.dll
+ 2007-10-14 21:43 . 2007-10-14 21:43 229852160 c:\windows\Installer\1e9759.msp
+ 2009-04-04 16:08 . 2009-04-04 16:08 343058432 c:\windows\Installer\139c88a.msp
.
-- Snímek resetován k současnému datu --
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{A3BC75A2-1F87-4686-AA43-5347D756017C}"= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2009-11-25 1230080]

[HKEY_CLASSES_ROOT\clsid\{a3bc75a2-1f87-4686-aa43-5347d756017c}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}]
2009-11-25 12:01 1230080 ----a-w- c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{CCC7A320-B3CA-4199-B1A6-9F516DD69829}"= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2009-11-25 1230080]

[HKEY_CLASSES_ROOT\clsid\{ccc7a320-b3ca-4199-b1a6-9f516dd69829}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{CCC7A320-B3CA-4199-B1A6-9F516DD69829}"= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2009-11-25 1230080]

[HKEY_CLASSES_ROOT\clsid\{ccc7a320-b3ca-4199-b1a6-9f516dd69829}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2008-04-14 1695232]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-03-12 153136]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-01-10 68856]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2009-07-16 25604904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
"DAEMON Tools-1033"="c:\program files\D-Tools\daemon.exe" [2004-08-22 81920]
"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-09 153136]
"C-Media Mixer"="Mixer.exe" [2002-07-12 1581056]
"RealTray"="c:\program files\Real\RealPlayer\RealPlay.exe" [2008-09-13 26112]
"Gainward"="c:\program files\Vtune\TBPanel.exe" [2007-04-23 2158592]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-04-19 7700480]
"nwiz"="nwiz.exe" [2007-04-19 1626112]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-04-19 86016]
"HPDJ Taskbar Utility"="c:\windows\system32\spool\drivers\w32x86\3\hpztsb04.exe" [2001-10-29 196608]
"AVG9_TRAY"="c:\progra~1\AVG\AVG9\avgtray.exe" [2010-01-12 2033432]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\Diana\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Věýezy obrazovky a spuçtŘnˇ aplikace OneNote 2007.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2008-10-25 98696]

c:\documents and settings\Honza\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Picture Motion Browser Media Check Tool.lnk - c:\program files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe [2008-11-16 385024]
Věýezy obrazovky a spuçtŘnˇ aplikace OneNote 2007.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2008-10-25 98696]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2008-12-30 113664]
Logitech Desktop Messenger.lnk - c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [2009-6-20 67128]
Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\SetPoint.exe [2009-6-20 805392]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2010-01-11 17:22 12464 ----a-w- c:\windows\system32\avgrsstx.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LBTWlgn]
2008-05-02 00:42 72208 ----a-w- c:\program files\Common Files\Logitech\Bluetooth\LBTWLgn.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]
@=""

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgupd.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgnsx.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

R0 d347bus;d347bus;c:\windows\system32\drivers\d347bus.sys [8.7.2008 21:53 155136]
R0 d347prt;d347prt;c:\windows\system32\drivers\d347prt.sys [8.7.2008 21:53 5248]
R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [11.1.2010 18:22 333192]
R1 AvgTdiX;AVG Free Network Redirector;c:\windows\system32\drivers\avgtdix.sys [11.1.2010 18:22 360584]
R2 avg9wd;AVG Free WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [11.1.2010 18:21 285392]
S2 gupdate1ca1381d2e7c416;Služba Google Update (gupdate1ca1381d2e7c416);c:\program files\Google\Update\GoogleUpdate.exe [2.8.2009 15:59 133104]
S2 WinDefend;Windows Defender;c:\program files\Windows Defender\MsMpEng.exe [3.11.2006 19:19 13592]
S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [19.7.2008 7:08 717296]
.
Obsah adresáře 'Naplánované úlohy'

2010-01-23 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-08-02 14:59]

2010-01-23 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-08-02 14:59]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://seznam.cz/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: {{7E6A20FB-153F-402c-A84B-1A64E1955D3D} - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - c:\windows\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748449} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\windows\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748450} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\windows\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451} - {CC963627-B1DC-40E0-B52A-CF21EE748451} - c:\windows\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748452} - {CC963627-B1DC-40E0-B52A-CF21EE748452} - c:\windows\WebIE.dll
Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - c:\program files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
FF - ProfilePath - c:\documents and settings\Honza\Data aplikací\Mozilla\Firefox\Profiles\8qc298g2.default\
FF - prefs.js: browser.startup.homepage - www.seznam.cz
FF - plugin: c:\program files\Google\Update\1.2.183.13\npGoogleOneClick8.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-01-23 17:17
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll >>UNKNOWN [0x82354F00]<<
kernel: MBR read successfully
detected MBR rootkit hooks:
\Driver\Disk -> CLASSPNP.SYS @ 0xf86a9f28
\Driver\ACPI -> ACPI.sys @ 0xf8516cb8
\Driver\atapi -> 0x82354f00
IoDeviceObjectType -> DeleteProcedure -> ntkrnlpa.exe @ 0x80579022
ParseProcedure -> ntkrnlpa.exe @ 0x80577c84
\Device\Harddisk0\DR0 -> DeleteProcedure -> ntkrnlpa.exe @ 0x80579022
ParseProcedure -> ntkrnlpa.exe @ 0x80577c84
NDIS: Realtek RTL8139 Family PCI Fast Ethernet NIC -> SendCompleteHandler -> NDIS.sys @ 0xf839dbd4
PacketIndicateHandler -> NDIS.sys @ 0xf83a9a21
SendHandler -> NDIS.sys @ 0xf839dd44
Warning: possible MBR rootkit infection !
user & kernel MBR OK

**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(712)
c:\windows\system32\sxs.dll
c:\program files\common files\logitech\bluetooth\LBTWlgn.dll
c:\program files\common files\logitech\bluetooth\LBTServ.dll

- - - - - - - > 'explorer.exe'(756)
c:\program files\Logitech\SetPoint\lgscroll.dll
c:\program files\Common Files\Ahead\Lib\NeroSearchBar.dll
c:\program files\Common Files\Ahead\Lib\MFC71U.DLL
c:\program files\Common Files\Ahead\Lib\BCGCBPRO860un71.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVG\AVG9\avgchsvx.exe
c:\program files\AVG\AVG9\avgrsx.exe
c:\program files\AVG\AVG9\avgcsrvx.exe
c:\windows\system32\nvsvc32.exe
c:\program files\AVG\AVG9\avgnsx.exe
c:\windows\system32\wscntfy.exe
c:\windows\Mixer.exe
c:\program files\Common Files\Ahead\Lib\NMIndexingService.exe
c:\program files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
c:\program files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
c:\program files\Skype\Plugin Manager\skypePM.exe
.
**************************************************************************
.
Celkový čas: 2010-01-23 17:22:45 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-01-23 16:22
ComboFix2.txt 2010-01-23 15:32
ComboFix3.txt 2009-06-27 16:40
ComboFix4.txt 2009-06-06 18:24
ComboFix5.txt 2010-01-23 15:39

Před spuštěním: Volných bajtů: 43 265 544 192
Po spuštění: Volných bajtů: 43 229 503 488

- - End Of File - - 1121FB9CA10F1F9027F31E2822DBBF5E

Re: Rootkit?

Napsal: 24 led 2010 18:57
od motji
:arrow: Start - ovládací panely - možnosti složky - zobrazení - odkrýt skryté a systémové soubory

:arrow: Dejte soubor otestovat na http://www.virustotal.com

c:\windows\system32\DRIVERS\atapi.sys


Do okénka zkopírujte cestu k souboru , pokud napíše, že soubor byl už testován, dejte otestovat znovu.
Sem vložte link s výsledky.

:arrow: odinstalujte všechny virtuální jednotky (Daemon nebo alcohol)

:arrow: Stáhněte SPTD http://www.duplexsecure.com/en/downloads
-vyberte verzi podle svého operačního systému. SPTD for Windows (32 bit) nebo (64b)
-uložte na plochu a spusťte
- zvolte možnost Uninstall
- restart PC
- spusťte gmer


:arrow: Stáhněte Gmer http://www.viry.cz/forum/viewtopic.php?f=29&t=62878
- rozbalte a spusťte
-proběhne sken, po skončení se otevře okno s výsledky, kliknete na Save a tím si uložíte log,který sem vložíte

-Podle návodu v odkazu proveďte druhý sken a log sem také vložte.

:arrow: stáhněte MBR
http://www2.gmer.net/mbr/mbr.exe
-uložte ho na plochu


:arrow: start-spustit
do okénka zkopírujte

Kód: Vybrat vše

"%userprofile%\plocha\mbr" -t
ok

:arrow: vytvoří se log s názvem mbr.log, vložte ho zde [/quote]

Re: Rootkit?

Napsal: 24 led 2010 21:11
od Vang
GMER 1.0.15.15281 - http://www.gmer.net
Rootkit quick scan 2010-01-24 21:03:47
Windows 5.1.2600 Service Pack 3
Running: gmer.exe; Driver: C:\DOCUME~1\Honza\LOCALS~1\Temp\kfayqfob.sys


---- Devices - GMER 1.0.15 ----

AttachedDevice \FileSystem\Fastfat \Fat fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)
AttachedDevice \Driver\Tcpip \Device\Ip avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\Tcpip \Device\Tcp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\Tcpip \Device\Udp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\Tcpip \Device\RawIp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)

---- EOF - GMER 1.0.15 ----


....a druhý log:

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll sfsync02.sys atapi.sys pciide.sys PCIIDEX.SYS
kernel: MBR read successfully
user & kernel MBR OK

Re: Rootkit?

Napsal: 25 led 2010 10:17
od motji
Ještě poprosím o druhý log z Gmeru a o otestování toho souboru :)

Re: Rootkit?

Napsal: 27 led 2010 10:07
od Vang
Zdravím.

http://www.virustotal.com/cs/analisis/b ... 1264581438

GMER 1.0.15.15281 - http://www.gmer.net
Rootkit quick scan 2010-01-27 09:58:45
Windows 5.1.2600 Service Pack 3
Running: gmer.exe; Driver: C:\DOCUME~1\Honza\LOCALS~1\Temp\kfayqfob.sys


---- Devices - GMER 1.0.15 ----

AttachedDevice \FileSystem\Fastfat \Fat fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)
AttachedDevice \Driver\Tcpip \Device\Ip avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\Tcpip \Device\Tcp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\Tcpip \Device\Udp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\Tcpip \Device\RawIp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)

---- EOF - GMER 1.0.15 ----

Re: Rootkit?

Napsal: 27 led 2010 12:28
od motji
Já bych chtěla vidět ještě druhý log z gmeru,ten delší :) .
Jak to vypadá s počítačem?

Re: Rootkit?

Napsal: 27 led 2010 13:11
od Vang
Problémy přestaly. PC moc nerozumím, takže ten log sem dám pravděpodobně o víkendu. V podstatě nevím, jaký druhý log mám hledat.

Re: Rootkit?

Napsal: 27 led 2010 14:53
od motji
Tak už ten druhý log nedělejte, vypadá to dobře :)

:arrow: Odinstalujte combofix přes
Start >> Spustit zkopírujte do okénka:

ComboFix /Uninstall

stiskněte Enter
-To odinstaluje ComboFix a smaže s ním související soubory a složky.



:arrow: Stáhněte T-Cleaner
http://sweb.cz/Marinus/T-Cleaner.exe

-Spusťte,pro potvrzení volby mačkejte klávesu A, Enter
-po použití prográmek vymažte.Pozor,antiviry ho mohou falešně označit za vir


:arrow: Stahněte TFC a použijte
TFC (http://oldtimer.geekstogo.com/TFC.exe)


:arrow: Stáhněte Ccleaner,viz můj podpis
-nainstalujte a vyčištěte dočasné soubory, i registry

:arrow: Vložte nový log ze RSIT a řekněte co počítač,jak se chová,už je vše v pořádku?


:arrow: Stahněte MBAM z mého podpisu
-Nainstalujte,dejte úplný sken

NIC NEMAZAT :!:
-MBAM má občas falešné detekce,proto budeme mazat až po kontrole logu.
-Log zkopírujte sem.

Re: Rootkit?

Napsal: 30 led 2010 13:18
od Vang
Zdravím. Počítač se zatím chová normálně. Bez potíží. Tady je log. Snad je správný :D
Jen musím upozornit na to, že jsem měl vymazat po použití T- cleaner, ale nemůžu ho zatím najít.(ovládací panely- odebrat přidat programy)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:05:59, on 30.1.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\AVG\AVG9\avgnsx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\WINDOWS\Mixer.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Vtune\TBPanel.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exe
C:\PROGRA~1\AVG\AVG9\avgtray.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Honza\Plocha\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
R3 - URLSearchHook: (no name) - *{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
R3 - URLSearchHook: (no name) - *{EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\WINDOWS\WebIE.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\WINDOWS\WebIE.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [Gainward] C:\Program Files\Vtune\TBPanel.exe /A
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exe
O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: Picture Motion Browser Media Check Tool.lnk = C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\WINDOWS\WebIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\WINDOWS\WebIE.dll
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\WINDOWS\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\WINDOWS\WebIE.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\WINDOWS\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\WINDOWS\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\WINDOWS\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\WINDOWS\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\WINDOWS\WebIE.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe
O23 - Service: Služba Google Update (gupdate1ca1381d2e7c416) (gupdate1ca1381d2e7c416) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logitech\Bluetooth\LBTServ.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

--
End of file - 11148 bytes