Computer Restricted By Virus

My control panel disappeared, and when I log in as Administrator, in Safe Mode, I still get restrictions, can't double-click anything in Control Panel.



HijackThis:


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:35:12 PM, on 12/13/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Safe mode with network support

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\ycqeaalq.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\NOTEPAD.EXE
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\Program Files\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
O4 - HKLM\..\Run: [RaidTool] C:\Program Files\VIA\RAID\raid_tool.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE
O4 - HKLM\..\Run: [qfmtcrof] rundll32.exe "C:\Program Files\qfmtcrof\exohkvoh.dll",Init
O4 - HKLM\..\Run: [adobytgv] regsvr32 /u "C:\Documents and Settings\All Users\Application Data\adobytgv.dll"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [44d6079b] rundll32.exe "C:\WINDOWS\system32\fwcvrrkg.dll",b
O4 - HKLM\..\Run: [tynuvavk] rundll32.exe "C:\Program Files\tynuvavk\hynehktm.dll",Init
O4 - HKLM\..\Run: [ehivazyx] regsvr32 /u "C:\Documents and Settings\All Users\Application Data\ehivazyx.dll"
O4 - HKLM\..\Run: [upslkdef] regsvr32 /u "C:\Documents and Settings\All Users\Application Data\upslkdef.dll"
O4 - HKCU\..\Run: [DDC] C:\WINDOWS\system32\ycqeaalq.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\npjpi160_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\npjpi160_03.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: DomainService - - C:\WINDOWS\system32\ycqeaalq.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Viewpoint Manager Service - Unknown owner - C:\Program Files\Viewpoint\Common\ViewpointService.exe (file missing)

--
End of file - 3292 bytes


Can someone help me?

Hi,

I understand that you need help in order to get rid of the malware that is present on your system - But you need to help us first..
I notice that you never scanned with an Antivirus previously before starting this thread - because you don't even have an Antivirus installed!
This is somewhat suicidal in today's digital world.
That's why I want you to install one first!!

* Please install Avira Antivirus: http://www.free-av.com/
This is a free Antivirus.

Perform a full scan with Avira and let it delete everything it is finding.
Then reboot.
After reboot, open your Avira and select "reports".
There doubleclick the report from the Full scan you have done. Click the "Report File" button and copy and paste this report in your next reply together with a new HijackThislog.
Then we'll start from there, because it really makes no sense otherwise that we clean this up manually if an Antivirusscan is not present which should be able to deal with most and prevent further reinfection.

Thanks for helping me out.

AntiVir PersonalEdition Classic
Report file date: Friday, December 14, 2007 16:10

Scanning for 972845 virus strains and unwanted programs.

Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 2) [5.1.2600]
Username: Administrator
Computer name: GAMING

Version information:
BUILD.DAT : 270 15603 Bytes 9/19/2007 13:32:00
AVSCAN.EXE : 7.0.6.1 290856 Bytes 8/23/2007 22:16:29
AVSCAN.DLL : 7.0.6.0 49192 Bytes 8/16/2007 21:23:51
LUKE.DLL : 7.0.5.3 147496 Bytes 8/15/2007 00:32:47
LUKERES.DLL : 7.0.6.1 10280 Bytes 8/21/2007 21:35:20
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 7/18/2007 22:52:50
ANTIVIR1.VDF : 7.0.1.95 3367424 Bytes 12/14/2007 22:52:50
ANTIVIR2.VDF : 7.0.1.96 2048 Bytes 12/14/2007 22:52:51
ANTIVIR3.VDF : 7.0.1.98 4096 Bytes 12/14/2007 22:52:51
AVEWIN32.DLL : 7.6.0.45 3084800 Bytes 12/14/2007 22:52:52
AVWINLL.DLL : 1.0.0.7 14376 Bytes 2/26/2007 19:36:26
AVPREF.DLL : 7.0.2.2 25640 Bytes 7/18/2007 16:39:17
AVREP.DLL : 7.0.0.1 155688 Bytes 4/16/2007 22:16:24
AVPACK32.DLL : 7.3.0.15 360488 Bytes 8/3/2007 17:46:00
AVREG.DLL : 7.0.1.6 30760 Bytes 7/18/2007 16:17:06
AVARKT.DLL : 1.0.0.20 278568 Bytes 8/28/2007 21:26:33
AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 7/18/2007 16:10:18
NETNT.DLL : 7.0.0.0 7720 Bytes 3/8/2007 20:09:42
RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 8/7/2007 21:38:13
RCTEXT.DLL : 7.0.62.0 86056 Bytes 8/21/2007 21:50:37
SQLITE3.DLL : 3.3.17.1 339968 Bytes 7/23/2007 18:37:21

Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: off
Scan boot sector.................: on
Boot sectors.....................: C:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium

Start of the scan: Friday, December 14, 2007 16:10

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'wmiprvse.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'aawservice.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
15 processes with 15 modules were scanned

Start scanning boot sectors:
Boot sector 'C:\'
[NOTE] No virus was found!

Starting to scan the registry.
C:\WINDOWS\system32\fwcvrrkg.dll
[DETECTION] Is the Trojan horse TR/Vundo.DRT
[INFO] The file was deleted!
C:\WINDOWS\system32\fwcvrrkg.dll
[DETECTION] Is the Trojan horse TR/Vundo.DRT
C:\WINDOWS\system32\printer.exe
[DETECTION] Is the Trojan horse TR/Qhost.aaw.13
[INFO] The file was deleted!
C:\WINDOWS\system32\printer.exe
[DETECTION] Is the Trojan horse TR/Qhost.aaw.13
C:\WINDOWS\system32\winbfu32.dll
[DETECTION] Is the Trojan horse TR/Crypt.PEC2X.Gen
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\winbfu32.dll
[DETECTION] Is the Trojan horse TR/Crypt.PEC2X.Gen
C:\WINDOWS\system32\yaywwvv.dll
[DETECTION] Is the Trojan horse TR/Agent.uaa
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\yaywwvv.dll
[DETECTION] Is the Trojan horse TR/Agent.uaa
C:\WINDOWS\system32\spoolvs.exe
[DETECTION] Is the Trojan horse TR/Qhost.aaw.13
[INFO] The file was deleted!
C:\WINDOWS\system32\spoolvs.exe
[DETECTION] Is the Trojan horse TR/Qhost.aaw.13
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\autorun.exe
[DETECTION] Is the Trojan horse TR/Qhost.aaw.13
[INFO] The file was deleted!
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\autorun.exe
[DETECTION] Is the Trojan horse TR/Qhost.aaw.13
C:\Documents and Settings\Administrator\Start Menu\Programs\Startup\findfast.exe
[DETECTION] Is the Trojan horse TR/Qhost.aaw.13
[INFO] The file was deleted!
C:\Documents and Settings\Administrator\Start Menu\Programs\Startup\findfast.exe
[DETECTION] Is the Trojan horse TR/Qhost.aaw.13

The registry was scanned ( '45' files ).


Starting the file scan:

Begin scan in 'C:\'
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\NousTechUDefender.zip
[DETECTION] Contains suspicious code GEN/PwdZIP
[INFO] The file was moved to '47d81c48.qua'!
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\SmitfraudC1.zip
[DETECTION] Contains suspicious code GEN/PwdZIP
[INFO] The file was moved to '47cc1c47.qua'!
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Virtumondeddc.zip
[DETECTION] Contains suspicious code GEN/PwdZIP
[INFO] The file was moved to '47d51c45.qua'!
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Virtumondeddc1.zip
[DETECTION] Contains suspicious code GEN/PwdZIP
[INFO] The file was moved to '46bb91ae.qua'!
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Virtumondedl.zip
[DETECTION] Contains suspicious code GEN/PwdZIP
[INFO] The file was moved to '47d51c47.qua'!
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VirtumondeSecCenter.zip
[DETECTION] Contains suspicious code GEN/PwdZIP
[INFO] The file was moved to '47d51c46.qua'!
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VirtumondeSecCenter1.zip
[DETECTION] Contains suspicious code GEN/PwdZIP
[INFO] The file was moved to '46bb91af.qua'!
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VirtumondeSecCenter4.zip
[DETECTION] Contains suspicious code GEN/PwdZIP
[INFO] The file was moved to '46bb91a0.qua'!
C:\Documents and Settings\Cliff Yu\Application Data\printer.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47cc1c51.qua'!
C:\Documents and Settings\Cliff Yu\Start Menu\Programs\Startup\findfast.exe
[DETECTION] Is the Trojan horse TR/Qhost.aaw.13
[INFO] The file was deleted!
C:\Program Files\Bpicatqv\kiiwlarx.dll
[DETECTION] Is the Trojan horse TR/Vundo.Gen
[INFO] The file was deleted!
C:\Program Files\Common Files\Yazzle1162OinAdmin.exe
[DETECTION] Is the Trojan horse TR/Dldr.PurityScan.EG.8
[INFO] The file was deleted!
C:\Program Files\daterude\xcpqpkvk.dll
[DETECTION] Is the Trojan horse TR/Vundo.Gen
[INFO] The file was deleted!
C:\Program Files\SecCenter\scprot4.exe
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[INFO] The file was deleted!
C:\Program Files\WTF!\qfmtcrof\exohkvoh.dll
[DETECTION] Is the Trojan horse TR/Vundo.Gen
[INFO] The file was deleted!
C:\Program Files\WTF!\tynuvavk\hynehktm.dll
[DETECTION] Is the Trojan horse TR/Vundo.Gen
[INFO] The file was deleted!
C:\Program Files\WTF!\xwxmpqdk\jetijuda.dll
[DETECTION] Is the Trojan horse TR/Vundo.Gen
[INFO] The file was deleted!
C:\WINDOWS\lsass.exe
[DETECTION] Is the Trojan horse TR/Delf.KH.12
[WARNING] The file could not be deleted!
C:\WINDOWS\mgrs.exe
[DETECTION] Is the Trojan horse TR/Downloader.Gen
[INFO] The file was deleted!
C:\WINDOWS\shell.exe
[DETECTION] Is the Trojan horse TR/Qhost.aaw.13
[INFO] The file was deleted!
C:\WINDOWS\xpupdate.exe
[WARNING] 'Is the Trojan horse TR/Zlob.CA.78'. This detection is probably an error. Please send us this file immediately for further analysis.
C:\WINDOWS\system32\atmpvcn.dll
[DETECTION] Is the Trojan horse TR/BHO.abo.35
[INFO] The file was deleted!
C:\WINDOWS\system32\avica.dll
[DETECTION] Is the Trojan horse TR/BHO.abo.35
[INFO] The file was deleted!
C:\WINDOWS\system32\bcfjrnnj.dll
[DETECTION] Is the Trojan horse TR/Vundo.DRT
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\bootvi.dll
[DETECTION] Is the Trojan horse TR/BHO.abo.35
[INFO] The file was deleted!
C:\WINDOWS\system32\browse.dll
[DETECTION] Is the Trojan horse TR/BHO.abo.35
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\cbxxutu.dll
[DETECTION] Is the Trojan horse TR/Drop.Virtumo.bnr
[INFO] The file was deleted!
C:\WINDOWS\system32\cmsetAC.dll
[DETECTION] Is the Trojan horse TR/BHO.abo.35
[INFO] The file was deleted!
C:\WINDOWS\system32\gebbx.dll
[DETECTION] Is the Trojan horse TR/Vundo.Gen
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\ljjjkig.dll
[DETECTION] Is the Trojan horse TR/Drop.Virtumo.bnr
[INFO] The file was deleted!
C:\WINDOWS\system32\mljghfc.dll
[DETECTION] Is the Trojan horse TR/Drop.Virtumo.bnr
[INFO] The file was deleted!
C:\WINDOWS\system32\opnlkhi.dll
[DETECTION] Is the Trojan horse TR/Drop.Virtumo.bnr
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\winbfu32.dll
[DETECTION] Is the Trojan horse TR/Crypt.PEC2X.Gen
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\wowfx.dll
[DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\yaywwvv.dll
[DETECTION] Is the Trojan horse TR/Agent.uaa
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\hlvbfwoq\hlvbfwoq2.exe
[WARNING] 'Is the Trojan horse TR/Crypt.XDR.Gen'. This detection is probably an error. Please send us this file immediately for further analysis.
C:\WINDOWS\system32\juvprpba\juvprpba2.exe
[WARNING] 'Is the Trojan horse TR/Crypt.XDR.Gen'. This detection is probably an error. Please send us this file immediately for further analysis.
C:\WINDOWS\Temp\64power.exe
[DETECTION] Is the Trojan horse TR/Downloader.Gen
[INFO] The file was deleted!
C:\WINDOWS\Temp\64syn.exe
[DETECTION] Is the Trojan horse TR/Downloader.Gen
[INFO] The file was deleted!
C:\WINDOWS\Temp\gos3C1.tmp
[DETECTION] Is the Trojan horse TR/Crypt.PEC2X.Gen
[INFO] The file was deleted!
C:\WINDOWS\Temp\gos424.tmp
[DETECTION] Is the Trojan horse TR/Crypt.PEC2X.Gen
[INFO] The file was deleted!
C:\WINDOWS\Temp\gos45D.tmp
[DETECTION] Is the Trojan horse TR/Crypt.PEC2X.Gen
[INFO] The file was deleted!
C:\WINDOWS\Temp\hostsv.exe
[DETECTION] Is the Trojan horse TR/Downloader.Gen
[INFO] The file was deleted!
C:\WINDOWS\Temp\serverhost.exe
[DETECTION] Is the Trojan horse TR/Downloader.Gen
[WARNING] The file could not be deleted!
C:\WINDOWS\Temp\win455.exe
[DETECTION] Contains detection pattern of the dropper DR/Dldr.PurityScan.EG.7
[INFO] The file was deleted!
C:\WINDOWS\Temp\win45B.exe
[DETECTION] Is the Trojan horse TR/Crypt.PEC2X.Gen
[INFO] The file was deleted!
C:\WINDOWS\Temp\win465.exe
[DETECTION] Is the Trojan horse TR/Delf.KH.12
[INFO] TR/Delf.KH.12:[HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN]:<avp>=sz:win465.exe
[INFO] The file was deleted!
C:\WINDOWS\Temp\win46F.exe
[WARNING] 'Is the Trojan horse TR/Zlob.CA.78'. This detection is probably an error. Please send us this file immediately for further analysis.
C:\WINDOWS\Temp\_avast4_\unp205005152.tmp
[DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
[INFO] The file was deleted!


End of the scan: Friday, December 14, 2007 16:34
Used time: 23:56 min

The scan has been done completely.

2745 Scanning directories
96659 Files were scanned
43 viruses and/or unwanted programs were found
9 Files were classified as suspicious:
33 files were deleted
0 files were repaired
9 files were moved to quarantine
0 files were renamed
1 Files cannot be scanned
96616 Files not concerned
831 Archives were scanned
15 Warnings
0 Notes

And the HJT log:


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:48:10 PM, on 12/14/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Safe mode with network support

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\Explorer.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avcenter.exe
C:\WINDOWS\system32\notepad.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\Lavasoft\Ad-Aware 2007\Ad-Aware2007.exe
C:\Program Files\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\shell.exe
O2 - BHO: (no name) - {2F02D978-0FF6-80F7-60BB-0426224AB7B3} - C:\Program Files\yzwdhzjc\xzyqjdhw.dll (file missing)
O2 - BHO: {53ea4a62-83c4-2019-a1f4-9e50d6d5e5a3} - {3a5e5d6d-05e9-4f1a-9102-4c3826a4ae35} - C:\WINDOWS\system32\hdcfxosw.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {65FF10BB-F36A-68E9-AA35-02257E958C1F} - C:\Program Files\Easalwwq\giythwtq.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {76F262CF-0308-0FB4-F7A3-043266F3A47C} - C:\Program Files\Bpicatqv\kiiwlarx.dll (file missing)
O2 - BHO: (no name) - {ABB68206-5154-47D3-ABC5-611C1658ABA0} - C:\WINDOWS\system32\yaywwvv.dll (file missing)
O2 - BHO: (no name) - {D6698D0E-429B-4EE3-97DC-B70AAA2291DC} - C:\WINDOWS\system32\gebbx.dll (file missing)
O2 - BHO: e404 helper - {F10587E9-0E47-4CBE-84AE-7DD20B8684BB} - C:\Program Files\Helper\Helper6.dll
O2 - BHO: (no name) - {FFEF69F8-1754-4092-8B09-2C8BEAB1F716} - C:\WINDOWS\system32\browse.dll
O4 - HKLM\..\Run: [RaidTool] C:\Program Files\VIA\RAID\raid_tool.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE
O4 - HKLM\..\Run: [qfmtcrof] rundll32.exe "C:\Program Files\qfmtcrof\exohkvoh.dll",Init
O4 - HKLM\..\Run: [adobytgv] regsvr32 /u "C:\Documents and Settings\All Users\Application Data\adobytgv.dll"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [tynuvavk] rundll32.exe "C:\Program Files\tynuvavk\hynehktm.dll",Init
O4 - HKLM\..\Run: [ehivazyx] regsvr32 /u "C:\Documents and Settings\All Users\Application Data\ehivazyx.dll"
O4 - HKLM\..\Run: [upslkdef] regsvr32 /u "C:\Documents and Settings\All Users\Application Data\upslkdef.dll"
O4 - HKLM\..\Run: [a-squared] "C:\Program Files\a-squared Anti-Malware\a2guard.exe" /d=60
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [xwxmpqdk] rundll32.exe "C:\Program Files\xwxmpqdk\jetijuda.dll",Init
O4 - HKLM\..\Run: [ngpuxohc] regsvr32 /u "C:\Documents and Settings\All Users\Application Data\ngpuxohc.dll"
O4 - HKLM\..\Run: [ShareSearcher] c:\wsusupd.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [COMODO Firewall Pro] "C:\Program Files\Comodo\Firewall\CPF.exe" /background
O4 - HKLM\..\Run: [ifgnmbax] rundll32.exe "C:\Program Files\daterude\xcpqpkvk.dll",Init
O4 - HKLM\..\Run: [kroxahej] regsvr32 /u "C:\Documents and Settings\All Users\Application Data\kroxahej.dll"
O4 - HKLM\..\Run: [SC2] C:\Program Files\SecCenter\scprot4.exe
O4 - HKLM\..\Run: [smgr] mgrs.exe
O4 - HKLM\..\Run: [lsass] C:\WINDOWS\lsass.exe
O4 - HKLM\..\Run: [44d6079b] rundll32.exe "C:\WINDOWS\system32\bcfjrnnj.dll",b
O4 - HKCU\..\Run: [DDC] C:\WINDOWS\system32\ycqeaalq.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O7 - HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\npjpi160_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\npjpi160_03.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O20 - AppInit_DLLs: C:\WINDOWS\system32\wowfx.dll
O20 - Winlogon Notify: winbfu32 - winbfu32.dll (file missing)
O20 - Winlogon Notify: yaywwvv - yaywwvv.dll (file missing)
O23 - Service: a-squared Anti-Malware Service (a2AntiMalware) - Emsi Software GmbH - C:\Program Files\a-squared Anti-Malware\a2service.exe
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Comodo Application Agent (CmdAgent) - COMODO - C:\Program Files\Comodo\Firewall\cmdagent.exe
O23 - Service: DomainService - - C:\WINDOWS\system32\qtwolptb.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe (file missing)
O23 - Service: Viewpoint Manager Service - Unknown owner - C:\Program Files\Viewpoint\Common\ViewpointService.exe (file missing)

--
End of file - 6798 bytes

Hi,

I see you installed Avast in a meanwhile as well. Please uninstall Avast or Avira since you can't have more than 1 Antivirus installed, because this may cause a lot of problems since they are not compatible.
Then reboot after uninstalling.

Please perform next steps in the right order...

I see you are running Teatimer.
I suggest you to disable it because it can interfere with the changes you'll make on your system.
When everything is done and your log is clean again, you can enable it again.
If teatimer gives you a warning afterwards that some changes were made, allow this instead of blocking it.
How to disable TeaTimer <== click me for instructions.
After you disabled Teatimer, download ResetTeaTimer.bat to your desktop. (In case you use Firefox, rightclick the link and choose "save as").
Doubleclick ResetTeaTimer.bat and let it run.
This will only take a few seconds.


* Start HijackThis, close all open windows leaving only HijackThis running. Place a check against each of the following:

R3 - Default URLSearchHook is missing
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\shell.exe
O2 - BHO: (no name) - {2F02D978-0FF6-80F7-60BB-0426224AB7B3} - C:\Program Files\yzwdhzjc\xzyqjdhw.dll (file missing)
O2 - BHO: {53ea4a62-83c4-2019-a1f4-9e50d6d5e5a3} - {3a5e5d6d-05e9-4f1a-9102-4c3826a4ae35} - C:\WINDOWS\system32\hdcfxosw.dll
O2 - BHO: (no name) - {65FF10BB-F36A-68E9-AA35-02257E958C1F} - C:\Program Files\Easalwwq\giythwtq.dll (file missing)
O2 - BHO: (no name) - {76F262CF-0308-0FB4-F7A3-043266F3A47C} - C:\Program Files\Bpicatqv\kiiwlarx.dll (file missing)
O2 - BHO: (no name) - {ABB68206-5154-47D3-ABC5-611C1658ABA0} - C:\WINDOWS\system32\yaywwvv.dll (file missing)
O2 - BHO: (no name) - {D6698D0E-429B-4EE3-97DC-B70AAA2291DC} - C:\WINDOWS\system32\gebbx.dll (file missing)
O2 - BHO: e404 helper - {F10587E9-0E47-4CBE-84AE-7DD20B8684BB} - C:\Program Files\Helper\Helper6.dll
O2 - BHO: (no name) - {FFEF69F8-1754-4092-8B09-2C8BEAB1F716} - C:\WINDOWS\system32\browse.dll
O4 - HKLM\..\Run: [qfmtcrof] rundll32.exe "C:\Program Files\qfmtcrof\exohkvoh.dll",Init
O4 - HKLM\..\Run: [adobytgv] regsvr32 /u "C:\Documents and Settings\All Users\Application Data\adobytgv.dll"
O4 - HKLM\..\Run: [tynuvavk] rundll32.exe "C:\Program Files\tynuvavk\hynehktm.dll",Init
O4 - HKLM\..\Run: [ehivazyx] regsvr32 /u "C:\Documents and Settings\All Users\Application Data\ehivazyx.dll"
O4 - HKLM\..\Run: [upslkdef] regsvr32 /u "C:\Documents and Settings\All Users\Application Data\upslkdef.dll"
O4 - HKLM\..\Run: [xwxmpqdk] rundll32.exe "C:\Program Files\xwxmpqdk\jetijuda.dll",Init
O4 - HKLM\..\Run: [ngpuxohc] regsvr32 /u "C:\Documents and Settings\All Users\Application Data\ngpuxohc.dll"
O4 - HKLM\..\Run: [ShareSearcher] c:\wsusupd.exe
O4 - HKLM\..\Run: [ifgnmbax] rundll32.exe "C:\Program Files\daterude\xcpqpkvk.dll",Init
O4 - HKLM\..\Run: [kroxahej] regsvr32 /u "C:\Documents and Settings\All Users\Application Data\kroxahej.dll"
O4 - HKLM\..\Run: [SC2] C:\Program Files\SecCenter\scprot4.exe
O4 - HKLM\..\Run: [smgr] mgrs.exe
O4 - HKLM\..\Run: [lsass] C:\WINDOWS\lsass.exe
O4 - HKLM\..\Run: [44d6079b] rundll32.exe "C:\WINDOWS\system32\bcfjrnnj.dll",b
O4 - HKCU\..\Run: [DDC] C:\WINDOWS\system32\ycqeaalq.exe
O7 - HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O20 - AppInit_DLLs: C:\WINDOWS\system32\wowfx.dll
O20 - Winlogon Notify: winbfu32 - winbfu32.dll (file missing)
O20 - Winlogon Notify: yaywwvv - yaywwvv.dll (file missing)
O23 - Service: DomainService - - C:\WINDOWS\system32\qtwolptb.exe
O23 - Service: Viewpoint Manager Service - Unknown owner - C:\Program Files\Viewpoint\Common\ViewpointService.exe (file missing)

* Click on Fix Checked when finished and exit HijackThis.
Make sure your Internet Explorer is closed when you click Fix Checked!


Then, make sure your computer is back in NORMAL mode!
Once back in normal mode,

* Download ComboFix from here.
**Save it to your desktop**

In case you have used Combofix before, please delete the version you are having and redownload it again, because Combofix is being updated everyday.

In case your Antivirus or any other realtime scanner is displaying an alert after you downloaded Combofix or while you use Combofix, please disable your scanner and redownload Combofix again. Because some scanners may see some combofix related components as suspicious and block or delete them while there's nothing wrong with them.

* Doubleclick combofix.exe
Follow the prompts.
Note - Your internet connection will be terminated while ComboFix runs. Do Not attempt to re-enable it. Should ComboFix terminate prematurely, restart the computer to restore connectivity.
Don't click on the window while the fix is running, because that will cause your system to hang.
In case you see a sed.cfexe error with the option to send a report or not, choose "don't send".

When finished and after reboot (in case it rebooted), combofix will open again to gather the necessary information for the log. This may take a bit. When done, Combofix will close and a log should open, combofix.txt.
Post the contents of this log in your next reply together with a new hijackthislog.
Do NOT post the ComboFix-quarantined-files.txt - unless I ask you to.

Thanks for helping me again.



Combofix Log

ComboFix 07-12-17.1 - Cliff Yu 2007-12-17 15:05:15.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.762 [GMT -8:00]
Running from: C:\Documents and Settings\Cliff Yu\Desktop\ComboFix.exe
* Created a new restore point
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\Administrator\Application Data\STEM32~1
C:\Documents and Settings\Administrator\Application Data\STEM32~1\??stem32\
C:\Documents and Settings\Cliff Yu\Application Data\Install.dat
C:\Program Files\SecCenter
C:\WINDOWS\cookies.ini
C:\WINDOWS\fnts~1
C:\WINDOWS\system32\_000012_.tmp.dll
C:\WINDOWS\system32\abc2
C:\WINDOWS\system32\abc2\bmbrpl2.exe
C:\WINDOWS\system32\browse.dll
C:\WINDOWS\system32\crosof~1.net
C:\WINDOWS\system32\crosof~1.net\??crosoft.NET\
C:\WINDOWS\system32\drivers\onietyas.dat
C:\WINDOWS\system32\juvprpba
C:\WINDOWS\system32\juvprpba\bg1.gif
C:\WINDOWS\system32\juvprpba\bgtop.gif
C:\WINDOWS\system32\juvprpba\bottom1.gif
C:\WINDOWS\system32\juvprpba\essentials.gif
C:\WINDOWS\system32\juvprpba\icon1.ico
C:\WINDOWS\system32\juvprpba\install1.gif
C:\WINDOWS\system32\juvprpba\juvprpba1.exe
C:\WINDOWS\system32\juvprpba\juvprpba2.exe
C:\WINDOWS\system32\juvprpba\left1.gif
C:\WINDOWS\system32\juvprpba\li.gif
C:\WINDOWS\system32\juvprpba\logo.gif
C:\WINDOWS\system32\juvprpba\main.htm
C:\WINDOWS\system32\juvprpba\mainframe.htm
C:\WINDOWS\system32\juvprpba\reinstall1.gif
C:\WINDOWS\system32\juvprpba\right1.gif
C:\WINDOWS\system32\juvprpba\s1.htm
C:\WINDOWS\system32\juvprpba\s2.htm
C:\WINDOWS\system32\juvprpba\s3.htm
C:\WINDOWS\system32\juvprpba\SMTop1.gif
C:\WINDOWS\system32\juvprpba\SMTop2.gif
C:\WINDOWS\system32\juvprpba\SMTop3.gif
C:\WINDOWS\system32\juvprpba\SMTop4.gif
C:\WINDOWS\system32\juvprpba\soft1_off.gif
C:\WINDOWS\system32\juvprpba\soft1_off_ext.gif
C:\WINDOWS\system32\juvprpba\soft1_on.gif
C:\WINDOWS\system32\juvprpba\soft1_on_ext.gif
C:\WINDOWS\system32\juvprpba\soft2_off.gif
C:\WINDOWS\system32\juvprpba\soft2_off_ext.gif
C:\WINDOWS\system32\juvprpba\soft2_on.gif
C:\WINDOWS\system32\juvprpba\soft2_on_ext.gif
C:\WINDOWS\system32\juvprpba\soft3_off.gif
C:\WINDOWS\system32\juvprpba\soft3_off_ext.gif
C:\WINDOWS\system32\juvprpba\soft3_on.gif
C:\WINDOWS\system32\juvprpba\soft3_on_ext.gif
C:\WINDOWS\system32\juvprpba\softbottom_off.gif
C:\WINDOWS\system32\juvprpba\softbottom_on.gif
C:\WINDOWS\system32\juvprpba\softleft_off.gif
C:\WINDOWS\system32\juvprpba\softleft_on.gif
C:\WINDOWS\system32\juvprpba\top1.gif
C:\WINDOWS\system32\juvprpba\top2.gif
C:\WINDOWS\system32\juvprpba\turnoff1.gif
C:\WINDOWS\system32\juvprpba\turnon1.gif
C:\WINDOWS\system32\pac.txt
C:\WINDOWS\system32\wowfx.dll

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.
-------\LEGACY_DOMAINSERVICE
-------\LEGACY_JVVISEBI
-------\jvvisebi


((((((((((((((((((((((((( Files Created from 2007-11-17 to 2007-12-17 )))))))))))))))))))))))))))))))
.

2007-12-17 14:59 . 2007-12-17 15:01 <DIR> d-------- C:\WINDOWS\LastGood.Tmp
2007-12-14 16:50 . 2007-12-14 16:50 <DIR> d-------- C:\Documents and Settings\Administrator\Application Data\Comodo
2007-12-14 16:15 . 2007-12-14 16:18 952,257 ---hs---- C:\WINDOWS\system32\jnnrjfcb.ini
2007-12-14 15:15 . 2007-12-14 15:15 <DIR> d-------- C:\Documents and Settings\Cliff Yu\Application Data\Comodo
2007-12-14 15:15 . 2007-12-14 15:15 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Comodo
2007-12-14 14:50 . 2003-01-01 01:38 211 --a------ C:\boot.ini.comodofirewall
2007-12-14 14:49 . 2007-12-14 14:49 <DIR> d-------- C:\Program Files\Comodo
2007-12-14 14:40 . 2007-12-17 15:02 <DIR> d--h----- C:\WINDOWS\$hf_mig$
2007-12-14 14:40 . 2007-12-14 14:40 <DIR> d-------- C:\Program Files\Avira
2007-12-14 14:40 . 2007-12-14 14:40 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Avira
2007-12-14 14:34 . 2007-12-17 14:43 <DIR> d-------- C:\Program Files\WTF!
2007-12-14 01:18 . 2007-12-17 14:54 23,392 --a------ C:\WINDOWS\system32\nscompat.tlb
2007-12-14 01:18 . 2007-12-17 14:54 16,832 --a------ C:\WINDOWS\system32\amcompat.tlb
2007-12-14 01:16 . 2007-12-14 01:17 <DIR> d-------- C:\Program Files\Windows Media Connect 2
2007-12-14 01:04 . 2007-12-14 01:07 <DIR> d-------- C:\WINDOWS\system32\drivers\UMDF
2007-12-14 01:04 . 2006-09-25 17:58 23,856 --a------ C:\WINDOWS\system32\spupdsvc.exe
2007-12-14 00:36 . 2007-12-14 00:37 <DIR> d-------- C:\Documents and Settings\Cliff Yu\dwhelper
2007-12-13 17:40 . 2007-12-13 17:40 <DIR> d-------- C:\WINDOWS\system32\shel9
2007-12-13 17:40 . 2007-12-13 19:38 <DIR> d-------- C:\WINDOWS\system32\oc9
2007-12-13 17:40 . 2007-12-13 18:22 <DIR> d-------- C:\WINDOWS\system32\ipd1
2007-12-13 17:39 . 2007-12-13 17:39 <DIR> d-------- C:\WINDOWS\system32\ineWc12
2007-12-13 17:39 . 2007-12-13 18:22 <DIR> d-------- C:\WINDOWS\system32\ex1
2007-12-13 17:39 . 2007-12-14 17:44 <DIR> d-------- C:\Temp
2007-12-13 17:39 . 2007-12-13 17:39 111,767 --a------ C:\Documents and Settings\Cliff Yu\p423ck.exe
2007-12-13 17:36 . 2007-12-14 17:48 336 --a------ C:\WINDOWS\wininit.ini
2007-12-13 17:18 . 2003-03-18 12:20 1,060,864 --a------ C:\WINDOWS\system32\MFC71.dll
2007-12-13 17:18 . 2003-03-18 11:14 499,712 --a------ C:\WINDOWS\system32\MSVCP71.dll
2007-12-13 17:18 . 2003-02-20 19:42 348,160 --a------ C:\WINDOWS\system32\MSVCR71.dll
2007-12-13 17:17 . 2007-12-13 17:17 <DIR> d-------- C:\Program Files\Alwil Software
2007-12-13 17:09 . 2007-12-14 18:23 <DIR> d-------- C:\Program Files\a-squared Anti-Malware
2007-12-13 16:40 . 2007-09-05 23:22 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe
2007-12-13 16:40 . 2006-04-27 16:49 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe
2007-12-13 16:40 . 2004-07-31 17:50 51,200 --a------ C:\WINDOWS\system32\dumphive.exe
2007-12-13 16:40 . 2007-10-03 23:36 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe
2007-12-13 15:29 . 2007-12-14 15:24 952,503 ---hs---- C:\WINDOWS\system32\gkrrvcwf.ini
2007-12-13 15:28 . 2007-12-13 16:40 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2007-12-13 15:17 . 2007-12-13 16:41 1,834 --a------ C:\WINDOWS\system32\tmp.reg
2007-12-13 02:28 . 2007-12-13 14:19 917,133 --ahs---- C:\WINDOWS\system32\ocwgxaik.ini
2007-12-12 20:55 . 2007-12-13 14:53 1,316 --a------ C:\WINDOWS\system32\wpa.bak
2007-12-12 19:31 . 2004-08-04 04:00 221,184 --a------ C:\WINDOWS\system32\wmpns.dll
2007-12-12 06:02 . 2007-12-12 06:02 22,328 --a------ C:\WINDOWS\system32\drivers\PnkBstrK.sys
2007-12-12 05:43 . 2007-12-12 05:43 <DIR> d-------- C:\Program Files\Activision
2007-12-12 05:32 . 2007-12-12 05:32 <DIR> d-------- C:\Program Files\Lavasoft
2007-12-12 05:32 . 2007-12-12 05:32 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft
2007-12-12 05:31 . 2007-12-14 16:24 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard
2007-12-12 03:57 . 2007-12-17 15:15 <DIR> d-------- C:\Program Files\Steam
2007-12-12 02:28 . 2007-12-12 20:56 916,953 --ahs---- C:\WINDOWS\system32\equyghvc.ini
2007-12-12 02:18 . 2007-12-12 02:18 <DIR> d-------- C:\Documents and Settings\Cliff Yu\Application Data\acccore

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-12-15 00:10 77,131 --sh--w C:\WINDOWS\system32\xbbeg.bak2
2007-12-14 03:21 --------- d-----w C:\Program Files\DirectX
2007-12-14 02:08 --------- d-----w C:\Program Files\Common Files\Easalwwq
2007-12-12 15:04 --------- d-----w C:\Documents and Settings\All Users\Application Data\Viewpoint
2007-12-12 14:02 22,328 ----a-w C:\Documents and Settings\Cliff Yu\Application Data\PnkBstrK.sys
2007-12-12 14:01 103,736 ----a-w C:\WINDOWS\system32\PnkBstrB.exe
2007-12-12 10:19 --------- d-----w C:\Documents and Settings\All Users\Application Data\AOL OCP
2007-12-12 10:18 --------- d-----w C:\Documents and Settings\All Users\Application Data\AOL
2007-11-02 06:09 268,288 ----a-w C:\WINDOWS\system32\ati2dvag(3).dll
2007-11-02 06:01 143,360 ----a-w C:\WINDOWS\system32\atipdlxx(2).dll
2007-11-02 06:00 43,520 ----a-w C:\WINDOWS\system32\ati2edxx(2).dll
2007-11-02 06:00 122,880 ----a-w C:\WINDOWS\system32\ati2evxx(3).dll
2007-11-02 05:59 495,616 ----a-w C:\WINDOWS\system32\ati2evxx(2).exe
2007-11-02 05:24 376,832 ----a-w C:\WINDOWS\system32\atikvmag(3).dll
2007-11-02 05:16 499,712 ----a-w C:\WINDOWS\system32\ati2cqag(3).dll
2007-10-17 05:40 2,642,944 ----a-w C:\WINDOWS\system32\drivers\ati2mtag.sys
2007-10-17 05:05 593,920 ----a-w C:\WINDOWS\system32\ati2sgag.exe
2007-10-17 05:05 364,544 ----a-w C:\WINDOWS\system32\ATIDEMGX.dll
2007-10-17 05:04 268,288 ----a-w C:\WINDOWS\system32\ati2dvag.dll
2007-10-17 05:04 268,288 ----a-w C:\WINDOWS\system32\ati2dvag(4).dll
2007-10-17 04:56 307,200 ----a-w C:\WINDOWS\system32\atiiiexx.dll
2007-10-17 04:56 26,112 ----a-w C:\WINDOWS\system32\Ati2mdxx.exe
2007-10-17 04:56 143,360 ----a-w C:\WINDOWS\system32\atipdlxx.dll
2007-10-17 04:56 143,360 ----a-w C:\WINDOWS\system32\atipdlxx(3).dll
2007-10-17 04:56 122,880 ----a-w C:\WINDOWS\system32\Oemdspif.dll
2007-10-17 04:55 43,520 ----a-w C:\WINDOWS\system32\ati2edxx.dll
2007-10-17 04:55 43,520 ----a-w C:\WINDOWS\system32\ati2edxx(3).dll
2007-10-17 04:55 122,880 ----a-w C:\WINDOWS\system32\ati2evxx.dll
2007-10-17 04:55 122,880 ----a-w C:\WINDOWS\system32\ati2evxx(4).dll
2007-10-17 04:54 495,616 ----a-w C:\WINDOWS\system32\ati2evxx.exe
2007-10-17 04:54 495,616 ----a-w C:\WINDOWS\system32\ati2evxx(3).exe
2007-10-17 04:53 53,248 ----a-w C:\WINDOWS\system32\ATIDDC.DLL
2007-10-17 04:48 9,244,672 ----a-w C:\WINDOWS\system32\atioglx2.dll
2007-10-17 04:44 3,133,056 ----a-w C:\WINDOWS\system32\ati3duag.dll
2007-10-17 04:44 3,133,056 ----a-w C:\WINDOWS\system32\ati3duag(3).dll
2007-10-17 04:33 1,601,664 ----a-w C:\WINDOWS\system32\ativvaxx.dll
2007-10-17 04:33 1,601,664 ----a-w C:\WINDOWS\system32\ativvaxx(2).dll
2007-10-17 04:19 376,832 ----a-w C:\WINDOWS\system32\atikvmag.dll
2007-10-17 04:19 376,832 ----a-w C:\WINDOWS\system32\atikvmag(4).dll
2007-10-17 04:17 17,408 ----a-w C:\WINDOWS\system32\atitvo32.dll
2007-10-17 04:16 49,152 ----a-w C:\WINDOWS\system32\drivers\ati2erec.dll
2007-10-17 04:15 172,032 ----a-w C:\WINDOWS\system32\atiok3x2.dll
2007-10-17 04:15 172,032 ----a-w C:\WINDOWS\system32\atiok3x2(2).dll
2007-10-17 04:11 499,712 ----a-w C:\WINDOWS\system32\ati2cqag.dll
2007-10-17 04:11 499,712 ----a-w C:\WINDOWS\system32\ati2cqag(4).dll
2003-01-01 12:41 6,496 --sha-w C:\WINDOWS\system32\xbbeg.bak1
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Aim6"="" []
"Steam"="C:\Program Files\Steam\Steam.exe" [2007-12-12 03:58]
"Aiuh"="C:\WINDOWS\system32\CROSOF~1.NET\cmd.exe" []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RaidTool"="C:\Program Files\VIA\RAID\raid_tool.exe" [2005-11-23 10:12]
"StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 12:35]
"CTHelper"="CTHELPER.EXE" [2006-08-17 11:32 C:\WINDOWS\CTHELPER.EXE]
"CTxfiHlp"="CTXFIHLP.EXE" [2006-08-17 11:32 C:\WINDOWS\system32\CTXFIHLP.EXE]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11]
"a-squared"="C:\Program Files\a-squared Anti-Malware\a2guard.exe" [2007-12-13 08:54]
"avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2007-12-14 14:52]
"COMODO Firewall Pro"="C:\Program Files\Comodo\Firewall\CPF.exe" [2007-12-14 14:49]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
SecurityProviders msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll, xlibgfl254.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"ehivazyx"=regsvr32 /u "C:\Documents and Settings\All Users\Application Data\ehivazyx.dll"
"ifgnmbax"=rundll32.exe "C:\Program Files\daterude\xcpqpkvk.dll",Init
"kroxahej"=regsvr32 /u "C:\Documents and Settings\All Users\Application Data\kroxahej.dll"
"ngpuxohc"=regsvr32 /u "C:\Documents and Settings\All Users\Application Data\ngpuxohc.dll"
"qfmtcrof"=rundll32.exe "C:\Program Files\qfmtcrof\exohkvoh.dll",Init
"tynuvavk"=rundll32.exe "C:\Program Files\tynuvavk\hynehktm.dll",Init
"upslkdef"=regsvr32 /u "C:\Documents and Settings\All Users\Application Data\upslkdef.dll"
"xwxmpqdk"=rundll32.exe "C:\Program Files\xwxmpqdk\jetijuda.dll",Init

R0 viamraid;viamraid;C:\WINDOWS\system32\DRIVERS\viamraid.sys [2005-11-23 10:12]
R3 FET5X86V;VIA Rhine-Family Fast-Ethernet Adapter Driver Service;C:\WINDOWS\system32\DRIVERS\fetnd5bv.sys [2007-04-17 11:58]
R3 ha20x2k;Creative 20X HAL Driver;C:\WINDOWS\system32\drivers\ha20x2k.sys [2006-08-17 11:16]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\F]
\Shell\AutoRun\command - F:\LaunchU3.exe -a

.
**************************************************************************

catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-12-17 15:15:12
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

**************************************************************************

[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\spupdsvc]
"ImagePath"="C:\WINDOWS\system32\spupdsvc.exe"
.
Completion time: 2007-12-17 15:17:13 - machine was rebooted
.
2007-12-17 23:08:44 --- E O F ---



And here's Hijackthis Log


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:23:12 PM, on 12/17/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\a-squared Anti-Malware\a2service.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
C:\Program Files\Comodo\Firewall\cmdagent.exe
C:\Program Files\VIA\RAID\raid_tool.exe
C:\WINDOWS\CTHELPER.EXE
C:\WINDOWS\system32\CTXFIHLP.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\SYSTEM32\CTXFISPI.EXE
C:\Program Files\a-squared Anti-Malware\a2guard.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Comodo\Firewall\CPF.exe
C:\Program Files\Steam\Steam.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\SoftwareDistribution\Download\Install\Windows-KB890830-V1.29.exe
c:\34927220f31ae6f00ba5f26f36\mrtstub.exe
C:\WINDOWS\system32\MRT.exe
C:\Documents and Settings\Cliff Yu\Desktop\HiJackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

O4 - HKLM\..\Run: [RaidTool] C:\Program Files\VIA\RAID\raid_tool.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [a-squared] "C:\Program Files\a-squared Anti-Malware\a2guard.exe" /d=60
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [COMODO Firewall Pro] "C:\Program Files\Comodo\Firewall\CPF.exe" /background
O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [Aiuh] "C:\WINDOWS\system32\CROSOF~1.NET\cmd.exe" -vt yazb
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll (file missing)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: a-squared Anti-Malware Service (a2AntiMalware) - Emsi Software GmbH - C:\Program Files\a-squared Anti-Malware\a2service.exe
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Comodo Application Agent (CmdAgent) - COMODO - C:\Program Files\Comodo\Firewall\cmdagent.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe (file missing)

--
End of file - 4158 bytes

Hi,

* Open notepad - don't use any other texteditor than notepad or the script will fail.
Copy/paste the text in the quotebox below into notepad:

File::
C:\WINDOWS\system32\jnnrjfcb.ini
C:\Documents and Settings\Cliff Yu\p423ck.exe
C:\WINDOWS\system32\gkrrvcwf.ini
C:\WINDOWS\system32\ocwgxaik.ini
C:\WINDOWS\system32\equyghvc.ini
C:\WINDOWS\system32\xbbeg.bak2
C:\WINDOWS\system32\xbbeg.bak1

Folder::
C:\Program Files\Common Files\Easalwwq
C:\WINDOWS\system32\shel9
C:\WINDOWS\system32\oc9
C:\WINDOWS\system32\ipd1
C:\WINDOWS\system32\ineWc12
C:\WINDOWS\system32\ex1
C:\Temp

Dirlook::
C:\Documents and Settings\Cliff Yu\dwhelper
C:\Program Files\WTF!

Registry::
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Aiuh"=-
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"
[-HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]

Save this as txtfile CFScript

Then drag the CFScript into ComboFix.exe as you see in the screenshot below.



This will start ComboFix again. After reboot, (in case it asks to reboot), post the contents of Combofix.txt in your next reply together with a new HijackThislog.

Also, open the file C:\WINDOWS\wininit.ini and post the contents of it in your next reply.

Here's the Combofix Log:

ComboFix 07-12-17.1 - Cliff Yu 2007-12-18 7:30:25.2 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.799 [GMT -8:00]
Running from: C:\Documents and Settings\Cliff Yu\Desktop\ComboFix.exe
Command switches used :: C:\Documents and Settings\Cliff Yu\Desktop\CFScript.txt
* Created a new restore point

FILE
C:\Documents and Settings\Cliff Yu\p423ck.exe
C:\WINDOWS\system32\equyghvc.ini
C:\WINDOWS\system32\gkrrvcwf.ini
C:\WINDOWS\system32\jnnrjfcb.ini
C:\WINDOWS\system32\ocwgxaik.ini
C:\WINDOWS\system32\xbbeg.bak1
C:\WINDOWS\system32\xbbeg.bak2
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\Cliff Yu\p423ck.exe
C:\Program Files\Common Files\Easalwwq
C:\Temp
C:\WINDOWS\system32\equyghvc.ini
C:\WINDOWS\system32\ex1
C:\WINDOWS\system32\gkrrvcwf.ini
C:\WINDOWS\system32\ineWc12
C:\WINDOWS\system32\ineWc12\ineWc122215.exe
C:\WINDOWS\system32\ipd1
C:\WINDOWS\system32\jnnrjfcb.ini
C:\WINDOWS\system32\oc9
C:\WINDOWS\system32\ocwgxaik.ini
C:\WINDOWS\system32\shel9
C:\WINDOWS\system32\shel9\yipwb23.exe
C:\WINDOWS\system32\xbbeg.bak1
C:\WINDOWS\system32\xbbeg.bak2

.
((((((((((((((((((((((((( Files Created from 2007-11-18 to 2007-12-18 )))))))))))))))))))))))))))))))
.

2007-12-17 18:24 . 2007-10-10 15:55 6,065,664 -----c--- C:\WINDOWS\system32\dllcache\ieframe.dll
2007-12-17 18:24 . 2007-06-30 19:31 2,455,488 -----c--- C:\WINDOWS\system32\dllcache\ieapfltr.dat
2007-12-17 18:24 . 2007-06-30 19:36 991,232 -----c--- C:\WINDOWS\system32\dllcache\ieframe.dll.mui
2007-12-17 18:24 . 2007-10-10 15:55 459,264 -----c--- C:\WINDOWS\system32\dllcache\msfeeds.dll
2007-12-17 18:24 . 2007-10-10 15:55 383,488 -----c--- C:\WINDOWS\system32\dllcache\ieapfltr.dll
2007-12-17 18:24 . 2007-10-10 15:55 267,776 -----c--- C:\WINDOWS\system32\dllcache\iertutil.dll
2007-12-17 18:24 . 2007-10-10 15:55 63,488 -----c--- C:\WINDOWS\system32\dllcache\icardie.dll
2007-12-17 18:24 . 2007-10-10 15:55 52,224 -----c--- C:\WINDOWS\system32\dllcache\msfeedsbs.dll
2007-12-17 18:24 . 2007-10-10 02:59 13,824 -----c--- C:\WINDOWS\system32\dllcache\ieudinit.exe
2007-12-17 18:10 . 2007-12-17 18:10 <DIR> d-------- C:\Documents and Settings\Cliff Yu\Application Data\ATI
2007-12-17 18:10 . 2007-12-17 18:10 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\ATI
2007-12-17 17:44 . 2007-11-01 21:39 3,107,788 --a------ C:\WINDOWS\system32\ativvaxx.dat
2007-12-17 17:44 . 2007-11-01 21:39 3,107,788 --a------ C:\WINDOWS\system32\ativva5x.dat
2007-12-17 17:44 . 2007-11-01 21:39 887,724 --a------ C:\WINDOWS\system32\ativva6x.dat
2007-12-17 17:44 . 2007-08-31 07:20 7,167 --a------ C:\WINDOWS\system32\atifglpf.xml
2007-12-14 16:50 . 2007-12-14 16:50 <DIR> d-------- C:\Documents and Settings\Administrator\Application Data\Comodo
2007-12-14 15:15 . 2007-12-14 15:15 <DIR> d-------- C:\Documents and Settings\Cliff Yu\Application Data\Comodo
2007-12-14 15:15 . 2007-12-14 15:15 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Comodo
2007-12-14 14:50 . 2003-01-01 01:38 211 --a------ C:\boot.ini.comodofirewall
2007-12-14 14:49 . 2007-12-14 14:49 <DIR> d-------- C:\Program Files\Comodo
2007-12-14 14:40 . 2007-12-17 18:24 <DIR> d--h----- C:\WINDOWS\$hf_mig$
2007-12-14 14:40 . 2007-12-14 14:40 <DIR> d-------- C:\Program Files\Avira
2007-12-14 14:40 . 2007-12-14 14:40 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Avira
2007-12-14 14:34 . 2007-12-17 14:43 <DIR> d-------- C:\Program Files\WTF!
2007-12-14 01:18 . 2007-12-17 14:54 23,392 --a------ C:\WINDOWS\system32\nscompat.tlb
2007-12-14 01:18 . 2007-12-17 14:54 16,832 --a------ C:\WINDOWS\system32\amcompat.tlb
2007-12-14 01:16 . 2007-12-14 01:17 <DIR> d-------- C:\Program Files\Windows Media Connect 2
2007-12-14 01:04 . 2007-12-14 01:07 <DIR> d-------- C:\WINDOWS\system32\drivers\UMDF
2007-12-14 01:04 . 2006-09-25 17:58 23,856 --a------ C:\WINDOWS\system32\spupdsvc.exe
2007-12-14 00:36 . 2007-12-14 00:37 <DIR> d-------- C:\Documents and Settings\Cliff Yu\dwhelper
2007-12-13 17:36 . 2007-12-14 17:48 336 --a------ C:\WINDOWS\wininit.ini
2007-12-13 17:18 . 2003-03-18 12:20 1,060,864 --a------ C:\WINDOWS\system32\MFC71.dll
2007-12-13 17:18 . 2003-03-18 11:14 499,712 --a------ C:\WINDOWS\system32\MSVCP71.dll
2007-12-13 17:18 . 2003-02-20 19:42 348,160 --a------ C:\WINDOWS\system32\MSVCR71.dll
2007-12-13 17:17 . 2007-12-13 17:17 <DIR> d-------- C:\Program Files\Alwil Software
2007-12-13 17:09 . 2007-12-17 16:36 <DIR> d-------- C:\Program Files\a-squared Anti-Malware
2007-12-13 16:40 . 2007-09-05 23:22 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe
2007-12-13 16:40 . 2006-04-27 16:49 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe
2007-12-13 16:40 . 2004-07-31 17:50 51,200 --a------ C:\WINDOWS\system32\dumphive.exe
2007-12-13 16:40 . 2007-10-03 23:36 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe
2007-12-13 15:28 . 2007-12-17 18:17 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2007-12-13 15:17 . 2007-12-13 16:41 1,834 --a------ C:\WINDOWS\system32\tmp.reg
2007-12-12 20:55 . 2007-12-13 14:53 1,316 --a------ C:\WINDOWS\system32\wpa.bak
2007-12-12 19:31 . 2004-08-04 04:00 221,184 --a------ C:\WINDOWS\system32\wmpns.dll
2007-12-12 06:02 . 2007-12-12 06:02 22,328 --a------ C:\WINDOWS\system32\drivers\PnkBstrK.sys
2007-12-12 05:43 . 2007-12-12 05:43 <DIR> d-------- C:\Program Files\Activision
2007-12-12 05:32 . 2007-12-12 05:32 <DIR> d-------- C:\Program Files\Lavasoft
2007-12-12 05:32 . 2007-12-12 05:32 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft
2007-12-12 05:31 . 2007-12-14 16:24 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard
2007-12-12 03:57 . 2007-12-18 07:24 <DIR> d-------- C:\Program Files\Steam
2007-12-12 02:18 . 2007-12-12 02:18 <DIR> d-------- C:\Documents and Settings\Cliff Yu\Application Data\acccore

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-12-18 01:52 --------- d-----w C:\Program Files\ATI Technologies
2007-12-14 03:21 --------- d-----w C:\Program Files\DirectX
2007-12-12 15:04 --------- d-----w C:\Documents and Settings\All Users\Application Data\Viewpoint
2007-12-12 14:02 22,328 ----a-w C:\Documents and Settings\Cliff Yu\Application Data\PnkBstrK.sys
2007-12-12 14:01 103,736 ----a-w C:\WINDOWS\system32\PnkBstrB.exe
2007-12-12 10:19 --------- d-----w C:\Documents and Settings\All Users\Application Data\AOL OCP
2007-12-12 10:18 --------- d-----w C:\Documents and Settings\All Users\Application Data\AOL
2007-11-13 10:25 20,480 ----a-w C:\WINDOWS\system32\drivers\secdrv.sys
2007-11-02 07:52 2,644,480 ----a-w C:\WINDOWS\system32\drivers\ati2mtag.sys
2007-11-02 06:57 9,314,304 ----a-w C:\WINDOWS\system32\atioglx2.dll
2007-11-02 06:24 176,128 ----a-w C:\WINDOWS\system32\atiok3x2.dll
2007-11-02 06:10 364,544 ----a-w C:\WINDOWS\system32\ATIDEMGX.dll
2007-11-02 06:09 268,288 ----a-w C:\WINDOWS\system32\ati2dvag.dll
2007-11-02 06:09 268,288 ----a-w C:\WINDOWS\system32\ati2dvag(3).dll
2007-11-02 06:01 26,112 ----a-w C:\WINDOWS\system32\Ati2mdxx.exe
2007-11-02 06:01 143,360 ----a-w C:\WINDOWS\system32\atipdlxx.dll
2007-11-02 06:01 143,360 ----a-w C:\WINDOWS\system32\atipdlxx(2).dll
2007-11-02 06:01 122,880 ----a-w C:\WINDOWS\system32\Oemdspif.dll
2007-11-02 06:00 43,520 ----a-w C:\WINDOWS\system32\ati2edxx.dll
2007-11-02 06:00 43,520 ----a-w C:\WINDOWS\system32\ati2edxx(2).dll
2007-11-02 06:00 122,880 ----a-w C:\WINDOWS\system32\ati2evxx.dll
2007-11-02 06:00 122,880 ----a-w C:\WINDOWS\system32\ati2evxx(3).dll
2007-11-02 05:59 495,616 ----a-w C:\WINDOWS\system32\ati2evxx.exe
2007-11-02 05:59 495,616 ----a-w C:\WINDOWS\system32\ati2evxx(2).exe
2007-11-02 05:58 53,248 ----a-w C:\WINDOWS\system32\ATIDDC.DLL
2007-11-02 05:50 3,133,728 ----a-w C:\WINDOWS\system32\ati3duag.dll
2007-11-02 05:39 1,602,176 ----a-w C:\WINDOWS\system32\ativvaxx.dll
2007-11-02 05:35 307,200 ----a-w C:\WINDOWS\system32\atiiiexx.dll
2007-11-02 05:24 376,832 ----a-w C:\WINDOWS\system32\atikvmag.dll
2007-11-02 05:24 376,832 ----a-w C:\WINDOWS\system32\atikvmag(3).dll
2007-11-02 05:22 49,152 ----a-w C:\WINDOWS\system32\drivers\ati2erec.dll
2007-11-02 05:22 17,408 ----a-w C:\WINDOWS\system32\atitvo32.dll
2007-11-02 05:16 499,712 ----a-w C:\WINDOWS\system32\ati2cqag.dll
2007-11-02 05:16 499,712 ----a-w C:\WINDOWS\system32\ati2cqag(3).dll
2007-11-02 05:05 593,920 ------w C:\WINDOWS\system32\ati2sgag.exe
2007-10-29 22:43 1,287,680 ----a-w C:\WINDOWS\system32\quartz.dll
2007-10-28 01:40 222,720 ----a-w C:\WINDOWS\system32\wmasf.dll
2007-10-17 05:04 268,288 ----a-w C:\WINDOWS\system32\ati2dvag(4).dll
2007-10-17 04:56 143,360 ----a-w C:\WINDOWS\system32\atipdlxx(3).dll
2007-10-17 04:55 43,520 ----a-w C:\WINDOWS\system32\ati2edxx(3).dll
2007-10-17 04:55 122,880 ----a-w C:\WINDOWS\system32\ati2evxx(4).dll
2007-10-17 04:54 495,616 ----a-w C:\WINDOWS\system32\ati2evxx(3).exe
2007-10-17 04:44 3,133,056 ----a-w C:\WINDOWS\system32\ati3duag(3).dll
2007-10-17 04:33 1,601,664 ----a-w C:\WINDOWS\system32\ativvaxx(2).dll
2007-10-17 04:19 376,832 ----a-w C:\WINDOWS\system32\atikvmag(4).dll
2007-10-17 04:15 172,032 ----a-w C:\WINDOWS\system32\atiok3x2(2).dll
2007-10-17 04:11 499,712 ----a-w C:\WINDOWS\system32\ati2cqag(4).dll
.

(((((((((((((((((((((((((((((((((((((((((((( Look )))))))))))))))))))))))))))))))))))))))))))))))))))))))))
.

---- Directory of C:\Documents and Settings\Cliff Yu\dwhelper ----


---- Directory of C:\Program Files\WTF! ----



((((((((((((((((((((((((((((( snapshot@2007-12-17_15.15.39.62 )))))))))))))))))))))))))))))))))))))))))
.
+ 2004-12-07 19:29:19 96,768 ----a-w C:\WINDOWS\$hf_mig$\KB888302\SP2QFE\srvsvc.dll
+ 2004-11-30 22:46:38 7,168 ----a-w C:\WINDOWS\$hf_mig$\KB888302\spmsg.dll
+ 2004-12-01 04:22:42 169,984 ----a-w C:\WINDOWS\$hf_mig$\KB888302\spuninst.exe
+ 2004-12-01 04:22:40 21,504 ----a-w C:\WINDOWS\$hf_mig$\KB888302\update\spcustom.dll
+ 2004-11-30 22:46:40 654,848 ----a-w C:\WINDOWS\$hf_mig$\KB888302\update\update.exe
+ 2005-04-28 19:35:02 1,286,144 ----a-w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\ole32.dll
+ 2005-04-28 19:35:01 74,752 ----a-w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\olecli32.dll
+ 2005-04-28 19:35:01 37,376 ----a-w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\olecnv32.dll
+ 2005-04-28 19:35:01 396,288 ----a-w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\rpcss.dll
+ 2005-02-25 04:35:06 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB894391\spmsg.dll
+ 2005-02-25 04:35:06 209,632 ----a-w C:\WINDOWS\$hf_mig$\KB894391\spuninst.exe
+ 2005-02-25 04:35:06 22,240 ----a-w C:\WINDOWS\$hf_mig$\KB894391\update\spcustom.dll
+ 2005-02-25 04:35:06 718,048 ----a-w C:\WINDOWS\$hf_mig$\KB894391\update\update.exe
+ 2005-02-25 04:35:08 371,936 ----a-w C:\WINDOWS\$hf_mig$\KB894391\update\updspapi.dll
+ 2005-05-10 23:51:10 75,776 ----a-w C:\WINDOWS\$hf_mig$\KB896428\SP2QFE\telnet.exe
+ 2005-02-25 04:35:06 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB896428\spmsg.dll
+ 2005-02-25 04:35:06 209,632 ----a-w C:\WINDOWS\$hf_mig$\KB896428\spuninst.exe
+ 2005-02-25 04:35:06 22,240 ----a-w C:\WINDOWS\$hf_mig$\KB896428\update\spcustom.dll
+ 2005-02-25 04:35:06 718,048 ----a-w C:\WINDOWS\$hf_mig$\KB896428\update\update.exe
+ 2005-02-25 04:35:08 371,936 ----a-w C:\WINDOWS\$hf_mig$\KB896428\update\updspapi.dll
+ 2005-09-01 01:44:04 19,968 ----a-w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\linkinfo.dll
+ 2005-09-23 03:18:20 8,452,608 ----a-w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\shell32.dll
+ 2005-09-02 23:53:41 474,112 ----a-w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\shlwapi.dll
+ 2005-09-01 01:44:05 291,840 ----a-w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\winsrv.dll
+ 2005-09-27 00:29:45 21,504 ----a-w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\xpsp3res.dll
+ 2005-02-25 04:35:06 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB900725\spmsg.dll
+ 2005-02-25 04:35:06 209,632 ----a-w C:\WINDOWS\$hf_mig$\KB900725\spuninst.exe
+ 2005-09-27 01:36:24 30,720 ----a-w C:\WINDOWS\$hf_mig$\KB900725\update\arpidfix.exe
+ 2005-02-25 04:35:06 22,240 ----a-w C:\WINDOWS\$hf_mig$\KB900725\update\spcustom.dll
+ 2005-02-25 04:35:06 718,048 ----a-w C:\WINDOWS\$hf_mig$\KB900725\update\update.exe
+ 2005-02-25 04:35:08 371,936 ----a-w C:\WINDOWS\$hf_mig$\KB900725\update\updspapi.dll
+ 2005-06-29 01:49:55 254,976 ----a-w C:\WINDOWS\$hf_mig$\KB901214\SP2QFE\icm32.dll
+ 2005-06-29 01:49:55 73,728 ----a-w C:\WINDOWS\$hf_mig$\KB901214\SP2QFE\mscms.dll
+ 2005-02-25 04:35:06 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB901214\spmsg.dll
+ 2005-02-25 04:35:06 209,632 ----a-w C:\WINDOWS\$hf_mig$\KB901214\spuninst.exe
+ 2005-02-25 04:35:06 22,240 ----a-w C:\WINDOWS\$hf_mig$\KB901214\update\spcustom.dll
+ 2005-02-25 04:35:06 718,048 ----a-w C:\WINDOWS\$hf_mig$\KB901214\update\update.exe
+ 2005-02-25 04:35:08 371,936 ----a-w C:\WINDOWS\$hf_mig$\KB901214\update\updspapi.dll
+ 2005-08-22 18:24:55 197,632 ----a-w C:\WINDOWS\$hf_mig$\KB905414\SP2QFE\netman.dll
+ 2005-02-25 03:35:05 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB905414\spmsg.dll
+ 2005-02-25 03:35:05 209,632 ----a-w C:\WINDOWS\$hf_mig$\KB905414\spuninst.exe
+ 2005-08-19 23:50:31 30,720 ----a-w C:\WINDOWS\$hf_mig$\KB905414\update\arpidfix.exe
+ 2005-02-25 03:35:05 22,240 ----a-w C:\WINDOWS\$hf_mig$\KB905414\update\spcustom.dll
+ 2005-02-25 03:35:05 718,048 ----a-w C:\WINDOWS\$hf_mig$\KB905414\update\update.exe
+ 2005-02-25 03:35:06 371,936 ----a-w C:\WINDOWS\$hf_mig$\KB905414\update\updspapi.dll
+ 2005-08-23 03:39:54 123,392 ----a-w C:\WINDOWS\$hf_mig$\KB905749\SP2QFE\umpnpmgr.dll
+ 2005-02-25 04:35:06 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB905749\spmsg.dll
+ 2005-02-25 04:35:06 209,632 ----a-w C:\WINDOWS\$hf_mig$\KB905749\spuninst.exe
+ 2005-08-23 02:01:30 30,720 ----a-w C:\WINDOWS\$hf_mig$\KB905749\update\arpidfix.exe
+ 2005-02-25 04:35:06 22,240 ----a-w C:\WINDOWS\$hf_mig$\KB905749\update\spcustom.dll
+ 2005-02-25 04:35:06 718,048 ----a-w C:\WINDOWS\$hf_mig$\KB905749\update\update.exe
+ 2005-02-25 04:35:08 371,936 ----a-w C:\WINDOWS\$hf_mig$\KB905749\update\updspapi.dll
+ 2006-03-17 04:46:31 8,454,656 ----a-w C:\WINDOWS\$hf_mig$\KB908531\SP2QFE\shell32.dll
+ 2006-03-17 01:05:35 28,672 ----a-w C:\WINDOWS\$hf_mig$\KB908531\SP2QFE\verclsid.exe
+ 2006-03-22 01:29:43 23,040 ----a-w C:\WINDOWS\$hf_mig$\KB908531\SP2QFE\xpsp3res.dll
+ 2005-10-12 23:12:25 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB908531\spmsg.dll
+ 2005-10-12 23:12:26 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB908531\spuninst.exe
+ 2005-10-12 23:12:25 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB908531\update\spcustom.dll
+ 2005-10-12 23:12:29 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB908531\update\update.exe
+ 2005-10-12 23:12:34 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB908531\update\updspapi.dll
+ 2006-03-01 19:34:20 426,496 ----a-w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\msdtcprx.dll
+ 2006-03-01 19:34:20 956,416 ----a-w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\msdtctm.dll
+ 2006-03-01 19:34:20 161,280 ----a-w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\msdtcuiu.dll
+ 2006-03-01 19:34:20 66,560 ----a-w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\mtxclu.dll
+ 2006-03-01 19:34:20 91,136 ----a-w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\mtxoci.dll
+ 2006-03-01 19:34:20 11,776 ----a-w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\xolehlp.dll
+ 2005-10-12 23:12:25 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB913580\spmsg.dll
+ 2005-10-12 23:12:26 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB913580\spuninst.exe
+ 2005-10-12 23:12:25 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB913580\update\spcustom.dll
+ 2005-10-12 23:12:29 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB913580\update\update.exe
+ 2005-10-12 23:12:34 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB913580\update\updspapi.dll
+ 2006-05-05 10:16:39 454,400 ----a-w C:\WINDOWS\$hf_mig$\KB914389\SP2QFE\mrxsmb.sys
+ 2006-05-05 10:22:52 174,592 ----a-w C:\WINDOWS\$hf_mig$\KB914389\SP2QFE\rdbss.sys
+ 2005-10-12 23:12:25 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB914389\spmsg.dll
+ 2005-10-12 23:12:26 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB914389\spuninst.exe
+ 2005-10-12 23:12:25 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB914389\update\spcustom.dll
+ 2005-10-12 23:12:29 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB914389\update\update.exe
+ 2005-10-12 23:12:34 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB914389\update\updspapi.dll
+ 2006-03-17 01:08:10 262,656 ----a-w C:\WINDOWS\$hf_mig$\KB916595\SP2QFE\http.sys
+ 2005-10-12 23:16:49 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB916595\spmsg.dll
+ 2005-10-12 23:16:49 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB916595\spuninst.exe
+ 2005-10-12 23:16:49 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB916595\update\spcustom.dll
+ 2005-10-12 23:16:51 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB916595\update\update.exe
+ 2005-10-12 23:16:56 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB916595\update\updspapi.dll
+ 2006-04-20 12:18:35 360,576 ----a-w C:\WINDOWS\$hf_mig$\KB917953\SP2QFE\tcpip.sys
+ 2005-10-12 23:12:25 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB917953\spmsg.dll
+ 2005-10-12 23:12:26 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB917953\spuninst.exe
+ 2005-10-12 23:12:25 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB917953\update\spcustom.dll
+ 2005-10-12 23:12:29 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB917953\update\update.exe
+ 2005-10-12 23:12:34 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB917953\update\updspapi.dll
+ 2006-11-27 15:17:10 539,136 ----a-w C:\WINDOWS\$hf_mig$\KB918118\SP2QFE\msftedit.dll
+ 2006-11-27 15:17:10 433,664 ----a-w C:\WINDOWS\$hf_mig$\KB918118\SP2QFE\riched20.dll
+ 2005-10-12 23:12:25 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB918118\spmsg.dll
+ 2005-10-12 23:12:26 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB918118\spuninst.exe
+ 2005-10-12 23:12:25 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB918118\update\spcustom.dll
+ 2005-10-12 23:12:29 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB918118\update\update.exe
+ 2005-10-12 23:12:34 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB918118\update\updspapi.dll
+ 2006-10-12 13:54:18 42,496 ----a-w C:\WINDOWS\$hf_mig$\KB920213\SP2QFE\agentdp2.dll
+ 2006-10-12 13:54:18 57,344 ----a-w C:\WINDOWS\$hf_mig$\KB920213\SP2QFE\agentdpv.dll
+ 2006-10-12 11:54:07 256,512 ----a-w C:\WINDOWS\$hf_mig$\KB920213\SP2QFE\agentsvr.exe
+ 2006-10-16 10:29:15 248,320 ----a-w C:\WINDOWS\$hf_mig$\KB920213\SP2QFE\xpsp3res.dll
+ 2005-10-12 23:16:49 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB920213\spmsg.dll
+ 2005-10-12 23:16:49 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB920213\spuninst.exe
+ 2005-10-12 23:16:49 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB920213\update\spcustom.dll
+ 2005-10-12 23:16:51 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB920213\update\update.exe
+ 2005-10-12 23:16:56 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB920213\update\updspapi.dll
+ 2006-06-26 17:45:19 147,456 ----a-w C:\WINDOWS\$hf_mig$\KB920683\SP2QFE\dnsapi.dll
+ 2006-06-26 17:45:19 7,680 ----a-w C:\WINDOWS\$hf_mig$\KB920683\SP2QFE\rasadhlp.dll
+ 2005-10-12 23:12:25 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB920683\spmsg.dll
+ 2005-10-12 23:12:26 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB920683\spuninst.exe
+ 2005-10-12 23:12:25 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB920683\update\spcustom.dll
+ 2005-10-12 23:12:29 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB920683\update\update.exe
+ 2005-10-12 23:12:34 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB920683\update\updspapi.dll
+ 2006-10-19 13:59:58 713,216 ----a-w C:\WINDOWS\$hf_mig$\KB926255\SP2QFE\sxs.dll
+ 2005-10-12 23:12:25 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB926255\spmsg.dll
+ 2005-10-12 23:12:26 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB926255\spuninst.exe
+ 2005-10-12 23:12:25 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB926255\update\spcustom.dll
+ 2005-10-12 23:12:29 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB926255\update\update.exe
+ 2005-10-12 23:12:34 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB926255\update\updspapi.dll
+ 2007-02-09 11:23:36 574,976 ----a-w C:\WINDOWS\$hf_mig$\KB930916\SP2QFE\ntfs.sys
+ 2005-10-12 23:12:25 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB930916\spmsg.dll
+ 2005-10-12 23:12:26 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB930916\spuninst.exe
+ 2005-10-12 23:12:25 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB930916\update\spcustom.dll
+ 2005-10-12 23:12:29 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB930916\update\update.exe
+ 2005-10-12 23:12:34 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB930916\update\updspapi.dll
+ 2007-03-09 13:58:57 57,344 ----a-w C:\WINDOWS\$hf_mig$\KB932168\SP2QFE\agentdpv.dll
+ 2007-03-09 11:28:00 248,320 ----a-w C:\WINDOWS\$hf_mig$\KB932168\SP2QFE\xpsp3res.dll
+ 2006-01-19 19:29:19 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB932168\spmsg.dll
+ 2006-01-19 19:29:19 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB932168\spuninst.exe
+ 2006-01-19 19:29:19 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB932168\update\spcustom.dll
+ 2006-01-19 19:29:19 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB932168\update\update.exe
+ 2006-01-19 19:29:19 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB932168\update\updspapi.dll
+ 2007-04-16 16:07:27 986,112 ----a-w C:\WINDOWS\$hf_mig$\KB935839\SP2QFE\kernel32.dll
+ 2005-10-12 23:12:25 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB935839\spmsg.dll
+ 2005-10-12 23:12:26 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB935839\spuninst.exe
+ 2005-10-12 23:12:25 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB935839\update\spcustom.dll
+ 2005-10-12 23:12:29 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB935839\update\update.exe
+ 2005-10-12 23:12:34 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB935839\update\updspapi.dll
+ 2007-04-25 20:32:22 144,896 ----a-w C:\WINDOWS\$hf_mig$\KB935840\SP2QFE\schannel.dll
+ 2006-01-19 19:29:19 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB935840\spmsg.dll
+ 2006-01-19 19:29:19 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB935840\spuninst.exe
+ 2006-01-19 19:29:19 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB935840\update\spcustom.dll
+ 2006-01-19 19:29:19 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB935840\update\update.exe
+ 2006-01-19 19:29:19 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB935840\update\updspapi.dll
+ 2007-06-26 15:16:01 851,968 ----a-w C:\WINDOWS\$hf_mig$\KB938127\SP2QFE\vgx.dll
+ 2005-10-12 23:12:25 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB938127\spmsg.dll
+ 2005-10-12 23:12:26 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB938127\spuninst.exe
+ 2005-10-12 23:12:25 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB938127\update\spcustom.dll
+ 2005-10-12 23:12:29 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB938127\update\update.exe
+ 2005-10-12 23:12:34 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB938127\update\updspapi.dll
+ 2007-08-21 06:25:02 683,520 ----a-w C:\WINDOWS\$hf_mig$\KB941202\SP2QFE\inetcomm.dll
+ 2007-03-06 01:22:36 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB941202\spmsg.dll
+ 2007-03-06 01:22:41 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB941202\spuninst.exe
+ 2007-03-06 01:22:34 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB941202\update\spcustom.dll
+ 2007-03-06 01:22:59 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB941202\update\update.exe
+ 2007-03-06 01:23:51 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB941202\update\updspapi.dll
+ 2007-10-29 22:35:13 1,287,680 ----a-w C:\WINDOWS\$hf_mig$\KB941568\SP2QFE\quartz.dll
+ 2007-03-06 01:22:36 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB941568\spmsg.dll
+ 2007-03-06 01:22:41 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB941568\spuninst.exe
+ 2007-03-06 01:22:34 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB941568\update\spcustom.dll
+ 2007-03-06 01:22:59 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB941568\update\update.exe
+ 2007-03-06 01:23:51 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB941568\update\updspapi.dll
+ 2007-10-11 05:57:29 1,024,000 ----a-w C:\WINDOWS\$hf_mig$\KB942615\SP2QFE\browseui.dll
+ 2007-10-11 05:57:29 151,040 ----a-w C:\WINDOWS\$hf_mig$\KB942615\SP2QFE\cdfview.dll
+ 2007-10-11 05:57:30 1,054,208 ----a-w C:\WINDOWS\$hf_mig$\KB942615\SP2QFE\danim.dll
+ 2007-10-11 05:57:30 357,888 ----a-w C:\WINDOWS\$hf_mig$\KB942615\SP2QFE\dxtmsft.dll
+ 2007-10-11 05:57:30 205,824 ----a-w C:\WINDOWS\$hf_mig$\KB942615\SP2QFE\dxtrans.dll
+ 2007-10-11 05:57:30 55,808 ----a-w C:\WINDOWS\$hf_mig$\KB942615\SP2QFE\extmgr.dll
+ 2007-10-10 10:48:23 18,432 ----a-w C:\WINDOWS\$hf_mig$\KB942615\SP2QFE\iedw.exe
+ 2007-10-11 05:57:31 251,904 ----a-w C:\WINDOWS\$hf_mig$\KB942615\SP2QFE\iepeers.dll
+ 2007-10-11 05:57:31 96,256 ----a-w C:\WINDOWS\$hf_mig$\KB942615\SP2QFE\inseng.dll
+ 2007-10-11 05:57:31 16,384 ----a-w C:\WINDOWS\$hf_mig$\KB942615\SP2QFE\jsproxy.dll
+ 2007-10-30 09:55:21 3,065,856 ----a-w C:\WINDOWS\$hf_mig$\KB942615\SP2QFE\mshtml.dll
+ 2007-10-11 05:57:36 449,024 ----a-w C:\WINDOWS\$hf_mig$\KB942615\SP2QFE\mshtmled.dll
+ 2007-10-11 05:57:36 146,432 ----a-w C:\WINDOWS\$hf_mig$\KB942615\SP2QFE\msrating.dll
+ 2007-10-11 05:57:37 532,480 ----a-w C:\WINDOWS\$hf_mig$\KB942615\SP2QFE\mstime.dll
+ 2007-10-11 05:57:37 39,424 ----a-w C:\WINDOWS\$hf_mig$\KB942615\SP2QFE\pngfilt.dll
+ 2007-10-11 05:57:39 1,498,112 ----a-w C:\WINDOWS\$hf_mig$\KB942615\SP2QFE\shdocvw.dll
+ 2007-10-11 05:57:40 474,112 ----a-w C:\WINDOWS\$hf_mig$\KB942615\SP2QFE\shlwapi.dll
+ 2007-10-11 05:57:40 617,984 ----a-w C:\WINDOWS\$hf_mig$\KB942615\SP2QFE\urlmon.dll
+ 2007-10-11 05:57:41 666,112 ----a-w C:\WINDOWS\$hf_mig$\KB942615\SP2QFE\wininet.dll
+ 2007-10-10 10:34:35 350,720 ----a-w C:\WINDOWS\$hf_mig$\KB942615\SP2QFE\xpsp3res.dll
+ 2007-03-06 01:22:36 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB942615\spmsg.dll
+ 2007-03-06 01:22:41 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB942615\spuninst.exe
+ 2007-03-06 01:22:34 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB942615\update\spcustom.dll
+ 2007-03-06 01:22:59 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB942615\update\update.exe
+ 2007-03-06 01:23:51 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB942615\update\updspapi.dll
+ 2007-11-13 08:47:45 20,480 ----a-w C:\WINDOWS\$hf_mig$\KB944653\SP2QFE\secdrv.sys
+ 2007-03-06 01:22:36 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB944653\spmsg.dll
+ 2007-03-06 01:22:41 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB944653\spuninst.exe
+ 2007-03-06 01:22:34 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB944653\update\spcustom.dll
+ 2007-03-06 01:22:59 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB944653\update\update.exe
+ 2007-03-06 01:23:51 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB944653\update\updspapi.dll
+ 2007-12-18 01:53:09 135,168 ----a-w C:\WINDOWS\assembly\GAC\AxInterop.MSComctlLib\2.0.0.0__90ba9c70f846762e\AxInterop.MSComctlLib.DLL
+ 2007-12-18 01:53:09 212,992 ----a-w C:\WINDOWS\assembly\GAC\AxInterop.MSForms\2.0.0.0__90ba9c70f846762e\AxInterop.MSForms.DLL
+ 2007-12-18 01:53:03 15,360 ----a-w C:\WINDOWS\assembly\GAC\AxInterop.WBOCXLib\1.0.0.0__90ba9c70f846762e\AxInterop.WBOCXLib.DLL
+ 2007-12-18 01:53:03 143,360 ----a-w C:\WINDOWS\assembly\GAC\ICSharpCode.SharpZipLib\0.84.0.0__1b03e6acf1164f73\ICSharpCode.SharpZipLib.DLL
+ 2007-12-18 01:53:09 225,280 ----a-w C:\WINDOWS\assembly\GAC\Interop.MSComctlLib\2.0.0.0__90ba9c70f846762e\Interop.MSComctlLib.DLL
+ 2007-12-18 01:53:09 360,448 ----a-w C:\WINDOWS\assembly\GAC\Interop.MSForms\2.0.0.0__90ba9c70f846762e\Interop.MSForms.DLL
+ 2007-12-18 01:53:10 49,152 ----a-w C:\WINDOWS\assembly\GAC\Interop.NewIWshRuntimeLibrary\1.0.0.0__90ba9c70f846762e\Interop.NewIWshRuntimeLibrary.DLL
+ 2007-12-18 01:53:03 13,312 ----a-w C:\WINDOWS\assembly\GAC\Interop.WBOCXLib\1.0.0.0__90ba9c70f846762e\Interop.WBOCXLib.DLL
+ 2007-12-18 01:53:06 24,576 ----a-w C:\WINDOWS\assembly\GAC_MSIL\ACE.Graphics.DisplaysManager.Shared\2.0.2573.17685__90ba9c70f846762e\ACE.Graphics.DisplaysManager.Shared.DLL
+ 2007-12-18 01:53:10 20,480 ----a-w C:\WINDOWS\assembly\GAC_MSIL\AEM.Actions.CCAA.Shared\2.0.2820.26371__90ba9c70f846762e\AEM.Actions.CCAA.Shared.DLL
+ 2007-12-18 01:53:06 24,576 ----a-w C:\WINDOWS\assembly\GAC_MSIL\AEM.Foundation\2.0.2820.26370__90ba9c70f846762e\AEM.Foundation.DLL
+ 2007-12-18 01:53:10 16,384 ----a-w C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.DPPE.Shared\2.0.2820.26386__90ba9c70f846762e\AEM.Plugin.DPPE.Shared.DLL
+ 2007-12-18 01:53:10 16,384 ----a-w C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.EEU.Shared\2.0.2820.26376__90ba9c70f846762e\AEM.Plugin.EEU.Shared.DLL
+ 2007-12-18 01:53:10 16,384 ----a-w C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.GD.Shared\2.0.2820.26385__90ba9c70f846762e\AEM.Plugin.GD.Shared.DLL
+ 2007-12-18 01:53:10 20,480 ----a-w C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.Hotkeys.Shared\2.0.2820.26371__90ba9c70f846762e\AEM.Plugin.Hotkeys.Shared.DLL
+ 2007-12-18 01:53:10 16,384 ----a-w C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.REG.Shared\2.0.2820.26388__90ba9c70f846762e\AEM.Plugin.REG.Shared.DLL
+ 2007-12-18 01:53:10 16,384 ----a-w C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.Source.EEU.Shared\2.0.2820.26388__90ba9c70f846762e\AEM.Plugin.Source.EEU.Shared.DLL
+ 2007-12-18 01:53:10 16,384 ----a-w C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.Source.GD.Shared\2.0.2820.26387__90ba9c70f846762e\AEM.Plugin.Source.GD.Shared.DLL
+ 2007-12-18 01:53:03 40,960 ----a-w C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.Source.Kit.Server\2.0.2861.40086__90ba9c70f846762e\AEM.Plugin.Source.Kit.Server.DLL
+ 2007-12-18 01:53:06 16,384 ----a-w C:\WINDOWS\assembly\GAC_MSIL\AEM.Server.Shared\2.0.2820.26372__90ba9c70f846762e\AEM.Server.Shared.DLL
+ 2007-12-18 01:53:00 45,056 ----a-w C:\WINDOWS\assembly\GAC_MSIL\AEM.Server\2.0.2861.39794__90ba9c70f846762e\AEM.Server.DLL
+ 2007-12-18 01:53:06 20,480 ----a-w C:\WINDOWS\assembly\GAC_MSIL\AEM.UI.Shared\2.0.2820.26377__90ba9c70f846762e\AEM.UI.Shared.DLL
+ 2007-12-18 01:53:00 61,440 ----a-w C:\WINDOWS\assembly\GAC_MSIL\AEM.UI\2.0.2861.40060__90ba9c70f846762e\AEM.UI.DLL
+ 2007-12-18 01:53:06 20,480 ----a-w C:\WINDOWS\assembly\GAC_MSIL\APM.Foundation\2.0.2820.26375__90ba9c70f846762e\APM.Foundation.DLL
+ 2007-12-18 01:53:00 53,248 ----a-w C:\WINDOWS\assembly\GAC_MSIL\APM.Server\2.0.2861.39793__90ba9c70f846762e\APM.Server.DLL
+ 2007-12-18 01:53:00 32,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\ATICCCom\2.0.0.0__90ba9c70f846762e\ATICCCom.DLL
+ 2007-12-18 01:53:00 65,536 ----a-w C:\WINDOWS\assembly\GAC_MSIL\ATIDEMOS\2.0.2861.39795__90ba9c70f846762e\ATIDEMOS.DLL
+ 2007-12-18 01:53:10 6,656 ----a-w C:\WINDOWS\assembly\GAC_MSIL\atixclib\1.0.0.0__90ba9c70f846762e\atixclib.DLL
+ 2007-12-18 01:53:09 45,056 ----a-w C:\WINDOWS\assembly\GAC_MSIL\AxInterop.SHDocVw\1.1.0.0__90ba9c70f846762e\AxInterop.SHDocVw.DLL
+ 2007-12-18 01:53:00 32,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CCC.Implementation\2.0.2861.40061__90ba9c70f846762e\CCC.Implementation.DLL
+ 2007-12-18 01:53:09 49,152 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CCC\2.0.0.0__90ba9c70f846762e\CCC.EXE
+ 2007-12-18 01:53:11 131,072 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.AForce.Graphics.Dashboard\2.0.2861.40085__90ba9c70f846762e\CLI.Aspect.AForce.Graphics.Dashboard.DLL
+ 2007-12-18 01:53:10 12,288 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.AForce.Graphics.Runtime\2.0.2861.40085__90ba9c70f846762e\CLI.Aspect.AForce.Graphics.Runtime.DLL
+ 2007-12-18 01:53:06 20,480 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.AForce.Graphics.Shared\2.0.2820.26387__90ba9c70f846762e\CLI.Aspect.AForce.Graphics.Shared.DLL
+ 2007-12-18 01:53:06 24,576 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.CustomFormats.Graphics.Shared\2.0.2820.26377__90ba9c70f846762e\CLI.Aspect.CustomFormats.Graphics.Shared.DLL
+ 2007-12-18 01:53:21 15,360 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.CustomFormatSelection.Graphics.Dashboard.resources\2.0.2861.39937_de_90ba9c70f846762e\CLI.Aspect.CustomFormatSelection.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:28 15,360 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.CustomFormatSelection.Graphics.Dashboard.resources\2.0.2861.39937_es_90ba9c70f846762e\CLI.Aspect.CustomFormatSelection.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:31 15,360 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.CustomFormatSelection.Graphics.Dashboard.resources\2.0.2861.39937_fr_90ba9c70f846762e\CLI.Aspect.CustomFormatSelection.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:33 15,360 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.CustomFormatSelection.Graphics.Dashboard.resources\2.0.2861.39937_zh-CHS_90ba9c70f846762e\CLI.Aspect.CustomFormatSelection.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:00 20,480 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.CustomFormatSelection.Graphics.Dashboard.Shared.Private\2.0.2820.26396__90ba9c70f846762e\CLI.Aspect.CustomFormatSelection.Graphics.Dashboard.Shared.Private.DLL
+ 2007-12-18 01:53:10 98,304 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.CustomFormatSelection.Graphics.Dashboard\2.0.2861.39937__90ba9c70f846762e\CLI.Aspect.CustomFormatSelection.Graphics.Dashboard.DLL
+ 2007-12-18 01:53:21 303,104 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Dashboard.resources\2.0.2861.39956_de_90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:28 40,960 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Dashboard.resources\2.0.2861.39956_es_90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:31 40,960 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Dashboard.resources\2.0.2861.39956_fr_90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:33 40,960 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Dashboard.resources\2.0.2861.39956_zh-CHS_90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:11 479,232 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Dashboard\2.0.2861.39956__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Dashboard.DLL
+ 2007-12-18 01:53:11 40,960 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Runtime\2.0.2861.39962__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Runtime.DLL
+ 2007-12-18 01:53:06 53,248 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Shared\2.0.2820.26385__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Shared.DLL
+ 2007-12-18 01:53:21 114,688 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Dashboard.resources\2.0.2861.40005_de_90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:27 114,688 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Dashboard.resources\2.0.2861.40005_es_90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:30 114,688 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Dashboard.resources\2.0.2861.40005_fr_90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:32 114,688 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Dashboard.resources\2.0.2861.40005_zh-CHS_90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:11 663,552 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Dashboard\2.0.2861.40005__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Dashboard.DLL
+ 2007-12-18 01:53:35 65,536 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Runtime\2.0.2861.40004__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Runtime.DLL
+ 2007-12-18 01:53:06 40,960 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Shared\2.0.2820.26387__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Shared.DLL
+ 2007-12-18 01:53:36 65,536 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Wizard.resources\2.0.2861.40025_de_90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Wizard.resources.DLL
+ 2007-12-18 01:53:36 65,536 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Wizard.resources\2.0.2861.40025_es_90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Wizard.resources.DLL
+ 2007-12-18 01:53:37 69,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Wizard.resources\2.0.2861.40025_fr_90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Wizard.resources.DLL
+ 2007-12-18 01:53:38 65,536 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Wizard.resources\2.0.2861.40025_zh-CHS_90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Wizard.resources.DLL
+ 2007-12-18 01:53:35 688,128 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Wizard\2.0.2861.40025__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Wizard.DLL
+ 2007-12-18 01:53:21 6,144 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Dashboard.resources\2.0.2861.39949_de_90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:28 8,192 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Dashboard.resources\2.0.2861.39949_es_90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:31 6,144 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Dashboard.resources\2.0.2861.39949_fr_90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:33 6,144 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Dashboard.resources\2.0.2861.39949_zh-CHS_90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:11 331,776 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Dashboard\2.0.2861.39949__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Dashboard.DLL
+ 2007-12-18 01:53:11 57,344 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Runtime\2.0.2861.39955__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Runtime.DLL
+ 2007-12-18 01:53:06 40,960 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Shared\2.0.2820.26385__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Shared.DLL
+ 2007-12-18 01:53:21 11,264 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Dashboard.resources\2.0.2861.39997_de_90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:27 11,264 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Dashboard.resources\2.0.2861.39997_es_90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:30 11,264 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Dashboard.resources\2.0.2861.39997_fr_90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:32 11,264 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Dashboard.resources\2.0.2861.39997_zh-CHS_90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:11 401,408 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Dashboard\2.0.2861.39997__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Dashboard.DLL
+ 2007-12-18 01:53:11 32,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Runtime\2.0.2861.39996__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Runtime.DLL
+ 2007-12-18 01:53:06 28,672 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Shared\2.0.2820.26382__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Shared.DLL
+ 2007-12-18 01:53:22 12,800 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Wizard.resources\2.0.2861.39878_de_90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Wizard.resources.DLL
+ 2007-12-18 01:53:29 13,312 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Wizard.resources\2.0.2861.39878_es_90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Wizard.resources.DLL
+ 2007-12-18 01:53:31 13,312 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Wizard.resources\2.0.2861.39878_fr_90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Wizard.resources.DLL
+ 2007-12-18 01:53:33 13,312 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Wizard.resources\2.0.2861.39878_zh-CHS_90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Wizard.resources.DLL
+ 2007-12-18 01:53:11 307,200 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Wizard\2.0.2861.39878__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Wizard.DLL
+ 2007-12-18 01:53:20 6,144 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Dashboard.Shared.resources\2.0.2861.39943_de_90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Dashboard.Shared.resources.DLL
+ 2007-12-18 01:53:24 6,144 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Dashboard.Shared.resources\2.0.2861.39943_es_90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Dashboard.Shared.resources.DLL
+ 2007-12-18 01:53:30 6,144 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Dashboard.Shared.resources\2.0.2861.39943_fr_90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Dashboard.Shared.resources.DLL
+ 2007-12-18 01:53:31 6,144 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Dashboard.Shared.resources\2.0.2861.39943_zh-CHS_90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Dashboard.Shared.resources.DLL
+ 2007-12-18 01:53:11 282,624 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Dashboard.Shared\2.0.2861.39943__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Dashboard.Shared.DLL
+ 2007-12-18 01:53:35 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Runtime\2.0.2861.39955__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Runtime.DLL
+ 2007-12-18 01:53:06 32,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Shared\2.0.2820.26375__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Shared.DLL
+ 2007-12-18 01:53:23 69,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Dashboard.resources\2.0.2861.40040_de_90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:30 69,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Dashboard.resources\2.0.2861.40040_es_90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:31 98,304 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Dashboard.resources\2.0.2861.40040_fr_90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:34 69,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Dashboard.resources\2.0.2861.40040_zh-CHS_90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:12 901,120 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Dashboard\2.0.2861.40040__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Dashboard.DLL
+ 2007-12-18 01:53:35 77,824 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Runtime\2.0.2861.40038__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Runtime.DLL
+ 2007-12-18 01:53:06 65,536 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Shared\2.0.2820.26388__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Shared.DLL
+ 2007-12-18 01:53:36 28,672 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Wizard.resources\2.0.2861.40046_de_90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Wizard.resources.DLL
+ 2007-12-18 01:53:36 28,672 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Wizard.resources\2.0.2861.40046_es_90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Wizard.resources.DLL
+ 2007-12-18 01:53:37 28,672 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Wizard.resources\2.0.2861.40046_fr_90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Wizard.resources.DLL
+ 2007-12-18 01:53:38 28,672 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Wizard.resources\2.0.2861.40046_zh-CHS_90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Wizard.resources.DLL
+ 2007-12-18 01:53:35 364,544 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Wizard\2.0.2861.40046__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Wizard.DLL
+ 2007-12-18 01:53:22 258,048 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Dashboard.resources\2.0.2861.39872_de_90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:29 5,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Dashboard.resources\2.0.2861.39872_es_90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:31 5,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Dashboard.resources\2.0.2861.39872_fr_90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:33 5,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Dashboard.resources\2.0.2861.39872_zh-CHS_90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:12 589,824 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Dashboard\2.0.2861.39872__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Dashboard.DLL
+ 2007-12-18 01:53:12 40,960 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Runtime\2.0.2861.39878__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Runtime.DLL
+ 2007-12-18 01:53:06 28,672 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Shared\2.0.2820.26383__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Shared.DLL
+ 2007-12-18 01:53:22 7,168 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Dashboard.resources\2.0.2861.39825_de_90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:30 7,168 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Dashboard.resources\2.0.2861.39825_es_90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:31 7,168 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Dashboard.resources\2.0.2861.39825_fr_90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:34 7,680 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Dashboard.resources\2.0.2861.39825_zh-CHS_90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:13 434,176 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Dashboard\2.0.2861.39825__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Dashboard.DLL
+ 2007-12-18 01:53:36 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Wizard.resources\2.0.2861.39845_de_90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Wizard.resources.DLL
+ 2007-12-18 01:53:36 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Wizard.resources\2.0.2861.39845_es_90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Wizard.resources.DLL
+ 2007-12-18 01:53:37 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Wizard.resources\2.0.2861.39845_fr_90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Wizard.resources.DLL
+ 2007-12-18 01:53:38 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Wizard.resources\2.0.2861.39845_zh-CHS_90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Wizard.resources.DLL
+ 2007-12-18 01:53:35 1,675,264 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Wizard\2.0.2861.39845__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Wizard.DLL
+ 2007-12-18 01:53:21 65,536 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.resources\2.0.2861.39977_de_90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:28 65,536 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.resources\2.0.2861.39977_es_90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:30 65,536 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.resources\2.0.2861.39977_fr_90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:32 65,536 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.resources\2.0.2861.39977_zh-CHS_90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:14 118,784 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Dashboard\2.0.2861.39977__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.DLL
+ 2007-12-18 01:53:14 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Runtime\2.0.2861.39977__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Runtime.DLL
+ 2007-12-18 01:53:06 24,576 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Shared\2.0.2820.26386__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Shared.DLL
+ 2007-12-18 01:53:20 106,496 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Grid.HydraVision.Dashboard\2.0.2861.40095__90ba9c70f846762e\CLI.Aspect.Grid.HydraVision.Dashboard.DLL
+ 2007-12-18 01:53:20 32,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Grid.HydraVision.Runtime\2.0.2861.40095__90ba9c70f846762e\CLI.Aspect.Grid.HydraVision.Runtime.DLL
+ 2007-12-18 01:53:20 8,704 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Grid.HydraVision.Shared\2.0.2861.40095__90ba9c70f846762e\CLI.Aspect.Grid.HydraVision.Shared.DLL
+ 2007-12-18 01:53:35 20,480 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Runtime\2.0.2861.39824__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Runtime.DLL
+ 2007-12-18 01:53:07 20,480 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Shared\2.0.2820.26383__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Shared.DLL
+ 2007-12-18 01:53:22 69,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Dashboard.resources\2.0.2861.39865_de_90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:29 69,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Dashboard.resources\2.0.2861.39865_es_90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:31 69,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Dashboard.resources\2.0.2861.39865_fr_90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:33 69,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Dashboard.resources\2.0.2861.39865_zh-CHS_90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:15 212,992 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Dashboard\2.0.2861.39865__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Dashboard.DLL
+ 2007-12-18 01:53:36 16,896 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Wizard.resources\2.0.2861.39858_de_90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Wizard.resources.DLL
+ 2007-12-18 01:53:36 16,896 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Wizard.resources\2.0.2861.39858_es_90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Wizard.resources.DLL
+ 2007-12-18 01:53:37 16,896 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Wizard.resources\2.0.2861.39858_fr_90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Wizard.resources.DLL
+ 2007-12-18 01:53:38 16,896 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Wizard.resources\2.0.2861.39858_zh-CHS_90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Wizard.resources.DLL
+ 2007-12-18 01:53:35 196,608 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Wizard\2.0.2861.39858__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Wizard.DLL
+ 2007-12-18 01:53:22 11,264 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.IntegratedUMAFrameBuffer.Graphics.Dashboard.resources\2.0.2861.39891_de_90ba9c70f846762e\CLI.Aspect.IntegratedUMAFrameBuffer.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:29 11,776 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.IntegratedUMAFrameBuffer.Graphics.Dashboard.resources\2.0.2861.39891_es_90ba9c70f846762e\CLI.Aspect.IntegratedUMAFrameBuffer.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:31 11,264 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.IntegratedUMAFrameBuffer.Graphics.Dashboard.resources\2.0.2861.39891_fr_90ba9c70f846762e\CLI.Aspect.IntegratedUMAFrameBuffer.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:33 11,776 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.IntegratedUMAFrameBuffer.Graphics.Dashboard.resources\2.0.2861.39891_zh-CHS_90ba9c70f846762e\CLI.Aspect.IntegratedUMAFrameBuffer.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:15 262,144 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.IntegratedUMAFrameBuffer.Graphics.Dashboard\2.0.2861.39891__90ba9c70f846762e\CLI.Aspect.IntegratedUMAFrameBuffer.Graphics.Dashboard.DLL
+ 2007-12-18 01:53:15 20,480 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.IntegratedUMAFrameBuffer.Graphics.Runtime\2.0.2861.39897__90ba9c70f846762e\CLI.Aspect.IntegratedUMAFrameBuffer.Graphics.Runtime.DLL
+ 2007-12-18 01:53:07 20,480 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.IntegratedUMAFrameBuffer.Graphics.Shared\2.0.2820.26384__90ba9c70f846762e\CLI.Aspect.IntegratedUMAFrameBuffer.Graphics.Shared.DLL
+ 2007-12-18 01:53:16 794,624 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Dashboard\2.0.2861.39963__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Dashboard.DLL
+ 2007-12-18 01:53:16 65,536 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Runtime\2.0.2861.39963__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Runtime.DLL
+ 2007-12-18 01:53:07 45,056 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Shared\2.0.2820.26385__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Shared.DLL
+ 2007-12-18 01:53:16 401,408 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Wizard\2.0.2861.40030__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Wizard.DLL
+ 2007-12-18 01:53:21 40,960 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MultiVPU.Graphics.Dashboard.resources\2.0.2861.39965_de_90ba9c70f846762e\CLI.Aspect.MultiVPU.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:28 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MultiVPU.Graphics.Dashboard.resources\2.0.2861.39965_es_90ba9c70f846762e\CLI.Aspect.MultiVPU.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:31 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MultiVPU.Graphics.Dashboard.resources\2.0.2861.39965_fr_90ba9c70f846762e\CLI.Aspect.MultiVPU.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:33 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MultiVPU.Graphics.Dashboard.resources\2.0.2861.39965_zh-CHS_90ba9c70f846762e\CLI.Aspect.MultiVPU.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:16 204,800 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MultiVPU.Graphics.Dashboard\2.0.2861.39965__90ba9c70f846762e\CLI.Aspect.MultiVPU.Graphics.Dashboard.DLL
+ 2007-12-18 01:53:16 40,960 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MultiVPU.Graphics.Runtime\2.0.2861.39964__90ba9c70f846762e\CLI.Aspect.MultiVPU.Graphics.Runtime.DLL
+ 2007-12-18 01:53:07 24,576 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MultiVPU.Graphics.Shared\2.0.2820.26384__90ba9c70f846762e\CLI.Aspect.MultiVPU.Graphics.Shared.DLL
+ 2007-12-18 01:53:21 77,824 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MultiVPU2.Graphics.Dashboard.resources\2.0.2861.39971_de_90ba9c70f846762e\CLI.Aspect.MultiVPU2.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:28 77,824 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MultiVPU2.Graphics.Dashboard.resources\2.0.2861.39971_es_90ba9c70f846762e\CLI.Aspect.MultiVPU2.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:30 139,264 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MultiVPU2.Graphics.Dashboard.resources\2.0.2861.39971_fr_90ba9c70f846762e\CLI.Aspect.MultiVPU2.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:32 77,824 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MultiVPU2.Graphics.Dashboard.resources\2.0.2861.39971_zh-CHS_90ba9c70f846762e\CLI.Aspect.MultiVPU2.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:16 204,800 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MultiVPU2.Graphics.Dashboard\2.0.2861.39971__90ba9c70f846762e\CLI.Aspect.MultiVPU2.Graphics.Dashboard.DLL
+ 2007-12-18 01:53:16 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MultiVPU2.Graphics.Runtime\2.0.2861.39970__90ba9c70f846762e\CLI.Aspect.MultiVPU2.Graphics.Runtime.DLL
+ 2007-12-18 01:53:07 24,576 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MultiVPU2.Graphics.Shared\2.0.2820.26385__90ba9c70f846762e\CLI.Aspect.MultiVPU2.Graphics.Shared.DLL
+ 2007-12-18 01:53:20 77,824 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MultiVPU3.Graphics.Dashboard.resources\2.0.2861.40062_de_90ba9c70f846762e\CLI.Aspect.MultiVPU3.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:25 77,824 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MultiVPU3.Graphics.Dashboard.resources\2.0.2861.40062_es_90ba9c70f846762e\CLI.Aspect.MultiVPU3.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:30 139,264 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MultiVPU3.Graphics.Dashboard.resources\2.0.2861.40062_fr_90ba9c70f846762e\CLI.Aspect.MultiVPU3.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:32 77,824 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MultiVPU3.Graphics.Dashboard.resources\2.0.2861.40062_zh-CHS_90ba9c70f846762e\CLI.Aspect.MultiVPU3.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:16 208,896 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MultiVPU3.Graphics.Dashboard\2.0.2861.40062__90ba9c70f846762e\CLI.Aspect.MultiVPU3.Graphics.Dashboard.DLL
+ 2007-12-18 01:53:16 40,960 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MultiVPU3.Graphics.Runtime\2.0.2861.40061__90ba9c70f846762e\CLI.Aspect.MultiVPU3.Graphics.Runtime.DLL
+ 2007-12-18 01:53:07 24,576 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MultiVPU3.Graphics.Shared\2.0.2820.26395__90ba9c70f846762e\CLI.Aspect.MultiVPU3.Graphics.Shared.DLL
+ 2007-12-18 01:53:22 20,480 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.OverDrive2.Graphics.Dashboard.resources\2.0.2861.39898_de_90ba9c70f846762e\CLI.Aspect.OverDrive2.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:29 20,480 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.OverDrive2.Graphics.Dashboard.resources\2.0.2861.39898_es_90ba9c70f846762e\CLI.Aspect.OverDrive2.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:31 20,480 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.OverDrive2.Graphics.Dashboard.resources\2.0.2861.39898_fr_90ba9c70f846762e\CLI.Aspect.OverDrive2.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:33 20,480 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.OverDrive2.Graphics.Dashboard.resources\2.0.2861.39898_zh-CHS_90ba9c70f846762e\CLI.Aspect.OverDrive2.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:17 479,232 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.OverDrive2.Graphics.Dashboard\2.0.2861.39898__90ba9c70f846762e\CLI.Aspect.OverDrive2.Graphics.Dashboard.DLL
+ 2007-12-18 01:53:16 28,672 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.OverDrive2.Graphics.Runtime\2.0.2861.39898__90ba9c70f846762e\CLI.Aspect.OverDrive2.Graphics.Runtime.DLL
+ 2007-12-18 01:53:07 24,576 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.OverDrive2.Graphics.Shared\2.0.2820.26384__90ba9c70f846762e\CLI.Aspect.OverDrive2.Graphics.Shared.DLL
+ 2007-12-18 01:53:21 40,960 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.OverDrive3.Graphics.Dashboard.resources\2.0.2861.39918_de_90ba9c70f846762e\CLI.Aspect.OverDrive3.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:28 40,960 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.OverDrive3.Graphics.Dashboard.resources\2.0.2861.39918_es_90ba9c70f846762e\CLI.Aspect.OverDrive3.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:31 40,960 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.OverDrive3.Graphics.Dashboard.resources\2.0.2861.39918_fr_90ba9c70f846762e\CLI.Aspect.OverDrive3.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:33 40,960 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.OverDrive3.Graphics.Dashboard.resources\2.0.2861.39918_zh-CHS_90ba9c70f846762e\CLI.Aspect.OverDrive3.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:17 1,032,192 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.OverDrive3.Graphics.Dashboard\2.0.2861.39918__90ba9c70f846762e\CLI.Aspect.OverDrive3.Graphics.Dashboard.DLL
+ 2007-12-18 01:53:21 11,776 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.OverDrive3.Graphics.Runtime.resources\2.0.2861.39911_de_90ba9c70f846762e\CLI.Aspect.OverDrive3.Graphics.Runtime.resources.DLL
+ 2007-12-18 01:53:29 11,776 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.OverDrive3.Graphics.Runtime.resources\2.0.2861.39911_es_90ba9c70f846762e\CLI.Aspect.OverDrive3.Graphics.Runtime.resources.DLL
+ 2007-12-18 01:53:31 11,776 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.OverDrive3.Graphics.Runtime.resources\2.0.2861.39911_fr_90ba9c70f846762e\CLI.Aspect.OverDrive3.Graphics.Runtime.resources.DLL
+ 2007-12-18 01:53:33 9,216 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.OverDrive3.Graphics.Runtime.resources\2.0.2861.39911_zh-CHS_90ba9c70f846762e\CLI.Aspect.OverDrive3.Graphics.Runtime.resources.DLL
+ 2007-12-18 01:53:17 61,440 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.OverDrive3.Graphics.Runtime\2.0.2861.39911__90ba9c70f846762e\CLI.Aspect.OverDrive3.Graphics.Runtime.DLL
+ 2007-12-18 01:53:07 24,576 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.OverDrive3.Graphics.Shared\2.0.2820.26384__90ba9c70f846762e\CLI.Aspect.OverDrive3.Graphics.Shared.DLL
+ 2007-12-18 01:53:17 425,984 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.OverDrive5.Graphics.Dashboard\2.0.2861.40093__90ba9c70f846762e\CLI.Aspect.OverDrive5.Graphics.Dashboard.DLL
+ 2007-12-18 01:53:17 65,536 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.OverDrive5.Graphics.Runtime\2.0.2861.40093__90ba9c70f846762e\CLI.Aspect.OverDrive5.Graphics.Runtime.DLL
+ 2007-12-18 01:53:07 57,344 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.OverDrive5.Graphics.Shared\2.0.2820.26382__90ba9c70f846762e\CLI.Aspect.OverDrive5.Graphics.Shared.DLL
+ 2007-12-18 01:53:17 167,936 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.PowerPlay3.Graphics.Dashboard\2.0.2861.40003__90ba9c70f846762e\CLI.Aspect.PowerPlay3.Graphics.Dashboard.DLL
+ 2007-12-18 01:53:17 49,152 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.PowerPlay3.Graphics.Runtime\2.0.2861.40003__90ba9c70f846762e\CLI.Aspect.PowerPlay3.Graphics.Runtime.DLL
+ 2007-12-18 01:53:07 28,672 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.PowerPlay3.Graphics.Shared\2.0.2820.26386__90ba9c70f846762e\CLI.Aspect.PowerPlay3.Graphics.Shared.DLL
+ 2007-12-18 01:53:18 139,264 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.PowerPlay4.Graphics.Dashboard\2.0.2861.40082__90ba9c70f846762e\CLI.Aspect.PowerPlay4.Graphics.Dashboard.DLL
+ 2007-12-18 01:53:17 45,056 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.PowerPlay4.Graphics.Runtime\2.0.2861.40082__90ba9c70f846762e\CLI.Aspect.PowerPlay4.Graphics.Runtime.DLL
+ 2007-12-18 01:53:07 28,672 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.PowerPlay4.Graphics.Shared\2.0.2820.26396__90ba9c70f846762e\CLI.Aspect.PowerPlay4.Graphics.Shared.DLL
+ 2007-12-18 01:53:18 139,264 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Dashboard\2.0.2861.40069__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Dashboard.DLL
+ 2007-12-18 01:53:18 40,960 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Runtime\2.0.2861.40069__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Runtime.DLL
+ 2007-12-18 01:53:07 24,576 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Shared\2.0.2820.26395__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Shared.DLL
+ 2007-12-18 01:53:18 122,880 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.PowerXpress.Graphics.Dashboard\2.0.2861.40092__90ba9c70f846762e\CLI.Aspect.PowerXpress.Graphics.Dashboard.DLL
+ 2007-12-18 01:53:18 45,056 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.PowerXpress.Graphics.Runtime\2.0.2861.40092__90ba9c70f846762e\CLI.Aspect.PowerXpress.Graphics.Runtime.DLL
+ 2007-12-18 01:53:07 24,576 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.PowerXpress.Graphics.Shared\2.0.2820.26384__90ba9c70f846762e\CLI.Aspect.PowerXpress.Graphics.Shared.DLL
+ 2007-12-18 01:53:21 6,656 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Dashboard.resources\2.0.2861.40012_de_90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:26 6,144 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Dashboard.resources\2.0.2861.40012_es_90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:30 6,144 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Dashboard.resources\2.0.2861.40012_fr_90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:32 6,144 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Dashboard.resources\2.0.2861.40012_zh-CHS_90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:18 352,256 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Dashboard\2.0.2861.40012__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Dashboard.DLL
+ 2007-12-18 01:53:18 61,440 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Runtime\2.0.2861.40011__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Runtime.DLL
+ 2007-12-18 01:53:08 53,248 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Shared\2.0.2820.26387__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Shared.DLL
+ 2007-12-18 01:53:21 8,192 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Wizard.resources\2.0.2861.40018_de_90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Wizard.resources.DLL
+ 2007-12-18 01:53:25 8,192 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Wizard.resources\2.0.2861.40018_es_90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Wizard.resources.DLL
+ 2007-12-18 01:53:30 8,192 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Wizard.resources\2.0.2861.40018_fr_90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Wizard.resources.DLL
+ 2007-12-18 01:53:32 8,192 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Wizard.resources\2.0.2861.40018_zh-CHS_90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Wizard.resources.DLL
+ 2007-12-18 01:53:18 90,112 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Wizard\2.0.2861.40018__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Wizard.DLL
+ 2007-12-18 01:53:22 49,152 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.SmartGart.Graphics.Dashboard.resources\2.0.2861.39885_de_90ba9c70f846762e\CLI.Aspect.SmartGart.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:29 49,152 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.SmartGart.Graphics.Dashboard.resources\2.0.2861.39885_es_90ba9c70f846762e\CLI.Aspect.SmartGart.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:31 49,152 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.SmartGart.Graphics.Dashboard.resources\2.0.2861.39885_fr_90ba9c70f846762e\CLI.Aspect.SmartGart.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:33 49,152 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.SmartGart.Graphics.Dashboard.resources\2.0.2861.39885_zh-CHS_90ba9c70f846762e\CLI.Aspect.SmartGart.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:18 282,624 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.SmartGart.Graphics.Dashboard\2.0.2861.39885__90ba9c70f846762e\CLI.Aspect.SmartGart.Graphics.Dashboard.DLL
+ 2007-12-18 01:53:18 28,672 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.SmartGart.Graphics.Runtime\2.0.2861.39891__90ba9c70f846762e\CLI.Aspect.SmartGart.Graphics.Runtime.DLL
+ 2007-12-18 01:53:08 24,576 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.SmartGart.Graphics.Shared\2.0.2820.26383__90ba9c70f846762e\CLI.Aspect.SmartGart.Graphics.Shared.DLL
+ 2007-12-18 01:53:08 40,960 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Shared\2.0.2820.26396__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Shared.DLL
+ 2007-12-18 01:53:34 69,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Wizard.resources\2.0.2861.40070_de_90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Wizard.resources.DLL
+ 2007-12-18 01:53:34 69,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Wizard.resources\2.0.2861.40070_es_90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Wizard.resources.DLL
+ 2007-12-18 01:53:34 69,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Wizard.resources\2.0.2861.40070_fr_90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Wizard.resources.DLL
+ 2007-12-18 01:53:34 69,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Wizard.resources\2.0.2861.40070_zh-CHS_90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Wizard.resources.DLL
+ 2007-12-18 01:53:34 483,328 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Wizard\2.0.2861.40070__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Wizard.DLL
+ 2007-12-18 01:53:21 32,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.VeryLargeDesktop.Graphics.Dashboard.resources\2.0.2861.39983_de_90ba9c70f846762e\CLI.Aspect.VeryLargeDesktop.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:28 32,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.VeryLargeDesktop.Graphics.Dashboard.resources\2.0.2861.39983_es_90ba9c70f846762e\CLI.Aspect.VeryLargeDesktop.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:30 32,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.VeryLargeDesktop.Graphics.Dashboard.resources\2.0.2861.39983_fr_90ba9c70f846762e\CLI.Aspect.VeryLargeDesktop.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:32 32,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.VeryLargeDesktop.Graphics.Dashboard.resources\2.0.2861.39983_zh-CHS_90ba9c70f846762e\CLI.Aspect.VeryLargeDesktop.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:19 167,936 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.VeryLargeDesktop.Graphics.Dashboard\2.0.2861.39983__90ba9c70f846762e\CLI.Aspect.VeryLargeDesktop.Graphics.Dashboard.DLL
+ 2007-12-18 01:53:19 32,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.VeryLargeDesktop.Graphics.Runtime\2.0.2861.39983__90ba9c70f846762e\CLI.Aspect.VeryLargeDesktop.Graphics.Runtime.DLL
+ 2007-12-18 01:53:08 24,576 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.VeryLargeDesktop.Graphics.Shared\2.0.2820.26386__90ba9c70f846762e\CLI.Aspect.VeryLargeDesktop.Graphics.Shared.DLL
+ 2007-12-18 01:53:22 8,192 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.VPURecover.Graphics.Dashboard.resources\2.0.2861.39852_de_90ba9c70f846762e\CLI.Aspect.VPURecover.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:30 8,192 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.VPURecover.Graphics.Dashboard.resources\2.0.2861.39852_es_90ba9c70f846762e\CLI.Aspect.VPURecover.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:31 8,192 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.VPURecover.Graphics.Dashboard.resources\2.0.2861.39852_fr_90ba9c70f846762e\CLI.Aspect.VPURecover.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:33 8,192 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.VPURecover.Graphics.Dashboard.resources\2.0.2861.39852_zh-CHS_90ba9c70f846762e\CLI.Aspect.VPURecover.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:19 102,400 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.VPURecover.Graphics.Dashboard\2.0.2861.39852__90ba9c70f846762e\CLI.Aspect.VPURecover.Graphics.Dashboard.DLL
+ 2007-12-18 01:53:19 28,672 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.VPURecover.Graphics.Runtime\2.0.2861.39851__90ba9c70f846762e\CLI.Aspect.VPURecover.Graphics.Runtime.DLL
+ 2007-12-18 01:53:08 20,480 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.VPURecover.Graphics.Shared\2.0.2820.26383__90ba9c70f846762e\CLI.Aspect.VPURecover.Graphics.Shared.DLL
+ 2007-12-18 01:53:20 65,536 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Welcome.Graphics.Dashboard.resources\2.0.2861.40076_de_90ba9c70f846762e\CLI.Aspect.Welcome.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:24 65,536 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Welcome.Graphics.Dashboard.resources\2.0.2861.40076_es_90ba9c70f846762e\CLI.Aspect.Welcome.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:30 65,536 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Welcome.Graphics.Dashboard.resources\2.0.2861.40076_fr_90ba9c70f846762e\CLI.Aspect.Welcome.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:31 65,536 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Welcome.Graphics.Dashboard.resources\2.0.2861.40076_zh-CHS_90ba9c70f846762e\CLI.Aspect.Welcome.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:19 135,168 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Welcome.Graphics.Dashboard\2.0.2861.40076__90ba9c70f846762e\CLI.Aspect.Welcome.Graphics.Dashboard.DLL
+ 2007-12-18 01:53:21 12,288 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.WorkstationConfig.Graphics.Dashboard.resources\2.0.2861.39990_de_90ba9c70f846762e\CLI.Aspect.WorkstationConfig.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:27 12,288 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.WorkstationConfig.Graphics.Dashboard.resources\2.0.2861.39990_es_90ba9c70f846762e\CLI.Aspect.WorkstationConfig.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:30 12,288 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.WorkstationConfig.Graphics.Dashboard.resources\2.0.2861.39990_fr_90ba9c70f846762e\CLI.Aspect.WorkstationConfig.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:32 12,288 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.WorkstationConfig.Graphics.Dashboard.resources\2.0.2861.39990_zh-CHS_90ba9c70f846762e\CLI.Aspect.WorkstationConfig.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:19 102,400 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.WorkstationConfig.Graphics.Dashboard\2.0.2861.39990__90ba9c70f846762e\CLI.Aspect.WorkstationConfig.Graphics.Dashboard.DLL
+ 2007-12-18 01:53:19 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.WorkstationConfig.Graphics.Runtime\2.0.2861.39990__90ba9c70f846762e\CLI.Aspect.WorkstationConfig.Graphics.Runtime.DLL
+ 2007-12-18 01:53:08 28,672 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.WorkstationConfig.Graphics.Shared\2.0.2820.26386__90ba9c70f846762e\CLI.Aspect.WorkstationConfig.Graphics.Shared.DLL
+ 2007-12-18 01:53:22 7,680 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard.resources\2.0.2861.39817_de_90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:30 7,680 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard.resources\2.0.2861.39817_es_90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:31 7,680 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard.resources\2.0.2861.39817_fr_90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:34 7,680 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard.resources\2.0.2861.39817_zh-CHS_90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.resources.DLL
+ 2007-12-18 01:53:08 16,384 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard.Shared\2.0.2820.26382__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.Shared.DLL
+ 2007-12-18 01:53:19 73,728 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard\2.0.2861.39817__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.DLL
+ 2007-12-18 01:53:36 4,608 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime.resources\2.0.2861.39803_de_90ba9c70f846762e\CLI.Caste.Graphics.Runtime.resources.DLL
+ 2007-12-18 01:53:36 4,608 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime.resources\2.0.2861.39803_es_90ba9c70f846762e\CLI.Caste.Graphics.Runtime.resources.DLL
+ 2007-12-18 01:53:38 4,608 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime.resources\2.0.2861.39803_fr_90ba9c70f846762e\CLI.Caste.Graphics.Runtime.resources.DLL
+ 2007-12-18 01:53:38 4,608 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime.resources\2.0.2861.39803_zh-CHS_90ba9c70f846762e\CLI.Caste.Graphics.Runtime.resources.DLL
+ 2007-12-18 01:53:00 20,480 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime.Shared.Private\2.0.2820.26388__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.Shared.Private.DLL
+ 2007-12-18 01:53:35 245,760 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime\2.0.2861.39803__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.DLL
+ 2007-12-18 01:53:08 57,344 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Shared\2.0.2820.26372__90ba9c70f846762e\CLI.Caste.Graphics.Shared.DLL
+ 2007-12-18 01:53:36 4,608 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard.resources\2.0.2861.39837_de_90ba9c70f846762e\CLI.Caste.Graphics.Wizard.resources.DLL
+ 2007-12-18 01:53:36 4,608 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard.resources\2.0.2861.39837_es_90ba9c70f846762e\CLI.Caste.Graphics.Wizard.resources.DLL
+ 2007-12-18 01:53:38 4,608 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard.resources\2.0.2861.39837_fr_90ba9c70f846762e\CLI.Caste.Graphics.Wizard.resources.DLL
+ 2007-12-18 01:53:38 4,608 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard.resources\2.0.2861.39837_zh-CHS_90ba9c70f846762e\CLI.Caste.Graphics.Wizard.resources.DLL
+ 2007-12-18 01:53:08 16,384 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard.Shared\2.0.2820.26383__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.Shared.DLL
+ 2007-12-18 01:53:36 40,960 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard\2.0.2861.39837__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.DLL
+ 2007-12-18 01:53:20 7,680 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.HydraVision.Dashboard\2.0.2861.40094__90ba9c70f846762e\CLI.Caste.HydraVision.Dashboard.DLL
+ 2007-12-18 01:53:20 11,776 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.HydraVision.Runtime\2.0.2861.40095__90ba9c70f846762e\CLI.Caste.HydraVision.Runtime.DLL
+ 2007-12-18 01:53:20 8,704 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.HydraVision.Shared\2.0.2861.40094__90ba9c70f846762e\CLI.Caste.HydraVision.Shared.DLL
+ 2007-12-18 01:53:00 24,576 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.AutoRemoval\2.0.2861.40038__90ba9c70f846762e\CLI.Component.Autoremoval.DLL
+ 2007-12-18 01:53:01 40,960 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Client.Shared.Private\2.0.2820.26374__90ba9c70f846762e\CLI.Component.Client.Shared.Private.DLL
+ 2007-12-18 01:53:08 20,480 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Client.Shared\2.0.2820.26371__90ba9c70f846762e\CLI.Component.Client.Shared.DLL
+ 2007-12-18 01:53:03 98,304 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard.HotKeyManager.Resources\2.0.2861.39924_de_90ba9c70f846762e\CLI.Component.Dashboard.HotKeyManager.resources.DLL
+ 2007-12-18 01:53:04 98,304 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard.HotKeyManager.Resources\2.0.2861.39924_es_90ba9c70f846762e\CLI.Component.Dashboard.HotKeyManager.resources.DLL
+ 2007-12-18 01:53:05 98,304 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard.HotKeyManager.Resources\2.0.2861.39924_fr_90ba9c70f846762e\CLI.Component.Dashboard.HotKeyManager.resources.DLL
+ 2007-12-18 01:53:05 98,304 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard.HotKeyManager.Resources\2.0.2861.39924_zh-CHS_90ba9c70f846762e\CLI.Component.Dashboard.HotKeyManager.resources.DLL
+ 2007-12-18 01:53:01 65,536 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard.HotKeyManager.Resources\2.0.2861.39929__90ba9c70f846762e\CLI.Component.Dashboard.HotKeyManager.Resources.DLL
+ 2007-12-18 01:53:01 204,800 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard.HotKeyManager\2.0.2861.39924__90ba9c70f846762e\CLI.Component.Dashboard.HotKeyManager.DLL
+ 2007-12-18 01:53:03 61,440 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard.ProfileManager.Resources\2.0.2861.39931_de_90ba9c70f846762e\CLI.Component.Dashboard.ProfileManager.resources.DLL
+ 2007-12-18 01:53:04 61,440 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard.ProfileManager.Resources\2.0.2861.39931_es_90ba9c70f846762e\CLI.Component.Dashboard.ProfileManager.resources.DLL
+ 2007-12-18 01:53:05 139,264 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard.ProfileManager.Resources\2.0.2861.39931_fr_90ba9c70f846762e\CLI.Component.Dashboard.ProfileManager.resources.DLL
+ 2007-12-18 01:53:05 61,440 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard.ProfileManager.Resources\2.0.2861.39931_zh-CHS_90ba9c70f846762e\CLI.Component.Dashboard.ProfileManager.resources.DLL
+ 2007-12-18 01:53:01 65,536 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard.ProfileManager.Resources\2.0.2861.39936__90ba9c70f846762e\CLI.Component.Dashboard.ProfileManager.Resources.DLL
+ 2007-12-18 01:53:01 208,896 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard.ProfileManager\2.0.2861.39931__90ba9c70f846762e\CLI.Component.Dashboard.ProfileManager.DLL
+ 2007-12-18 01:53:03 176,128 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard.resources\2.0.2861.39811_de_90ba9c70f846762e\CLI.Component.Dashboard.resources.DLL
+ 2007-12-18 01:53:04 176,128 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard.resources\2.0.2861.39811_es_90ba9c70f846762e\CLI.Component.Dashboard.resources.DLL
+ 2007-12-18 01:53:05 176,128 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard.resources\2.0.2861.39811_fr_90ba9c70f846762e\CLI.Component.Dashboard.resources.DLL
+ 2007-12-18 01:53:06 176,128 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard.resources\2.0.2861.39811_zh-CHS_90ba9c70f846762e\CLI.Component.Dashboard.resources.DLL
+ 2007-12-18 01:53:01 20,480 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared.Private\2.0.2820.26376__90ba9c70f846762e\CLI.Component.Dashboard.Shared.Private.DLL
+ 2007-12-18 01:53:08 20,480 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared\2.0.2820.26374__90ba9c70f846762e\CLI.Component.Dashboard.Shared.DLL
+ 2007-12-18 01:53:01 1,507,328 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard\2.0.2861.39811__90ba9c70f846762e\CLI.Component.Dashboard.DLL
+ 2007-12-18 01:53:03 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Eeu.resources\2.0.2861.40032_de_90ba9c70f846762e\CLI.Component.Eeu.resources.DLL
+ 2007-12-18 01:53:04 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Eeu.resources\2.0.2861.40032_es_90ba9c70f846762e\CLI.Component.Eeu.resources.DLL
+ 2007-12-18 01:53:05 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Eeu.resources\2.0.2861.40032_fr_90ba9c70f846762e\CLI.Component.Eeu.resources.DLL
+ 2007-12-18 01:53:05 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Eeu.resources\2.0.2861.40032_zh-CHS_90ba9c70f846762e\CLI.Component.Eeu.resources.DLL
+ 2007-12-18 01:53:01 602,112 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Eeu\2.0.2861.40032__90ba9c70f846762e\CLI.Component.Eeu.DLL
+ 2007-12-18 01:53:03 7,680 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Erecord.resources\2.0.2861.39904_de_90ba9c70f846762e\CLI.Component.Erecord.resources.DLL
+ 2007-12-18 01:53:04 7,680 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Erecord.resources\2.0.2861.39904_es_90ba9c70f846762e\CLI.Component.Erecord.resources.DLL
+ 2007-12-18 01:53:05 7,680 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Erecord.resources\2.0.2861.39904_fr_90ba9c70f846762e\CLI.Component.Erecord.resources.DLL
+ 2007-12-18 01:53:05 8,192 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Erecord.resources\2.0.2861.39904_zh-CHS_90ba9c70f846762e\CLI.Component.Erecord.resources.DLL
+ 2007-12-18 01:53:01 57,344 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Erecord\2.0.2861.39904__90ba9c70f846762e\CLI.Component.Erecord.DLL
+ 2007-12-18 01:53:01 20,480 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Help\2.0.2861.40059__90ba9c70f846762e\CLI.Component.Help.DLL
+ 2007-12-18 01:53:01 20,480 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Icomponent\2.0.2861.39858__90ba9c70f846762e\CLI.Component.Icomponent.DLL
+ 2007-12-18 01:53:02 458,752 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Launchpad\2.0.2861.40093__90ba9c70f846762e\CLI.Component.Launchpad.DLL
+ 2007-12-18 01:53:01 20,480 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Load\2.0.2861.40059__90ba9c70f846762e\CLI.Component.Load.DLL
+ 2007-12-18 01:53:03 6,656 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Runtime.Extension.EEU\2.0.2861.39795__90ba9c70f846762e\CLI.Component.Runtime.Extension.EEU.DLL
+ 2007-12-18 01:53:02 40,960 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Runtime.Shared.Private\2.0.2820.26374__90ba9c70f846762e\CLI.Component.Runtime.Shared.Private.DLL
+ 2007-12-18 01:53:08 16,384 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Runtime.Shared\2.0.2820.26374__90ba9c70f846762e\CLI.Component.Runtime.Shared.DLL
+ 2007-12-18 01:53:02 73,728 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Runtime\2.0.2861.39795__90ba9c70f846762e\CLI.Component.Runtime.DLL
+ 2007-12-18 01:53:04 6,656 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.SkinFactory.resources\2.0.2861.39796_de_90ba9c70f846762e\CLI.Component.SkinFactory.resources.DLL
+ 2007-12-18 01:53:05 6,656 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.SkinFactory.resources\2.0.2861.39796_es_90ba9c70f846762e\CLI.Component.SkinFactory.resources.DLL
+ 2007-12-18 01:53:05 6,656 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.SkinFactory.resources\2.0.2861.39796_fr_90ba9c70f846762e\CLI.Component.SkinFactory.resources.DLL
+ 2007-12-18 01:53:06 6,656 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.SkinFactory.resources\2.0.2861.39796_zh-CHS_90ba9c70f846762e\CLI.Component.SkinFactory.resources.DLL
+ 2007-12-18 01:53:02 49,152 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.SkinFactory\2.0.2861.39796__90ba9c70f846762e\CLI.Component.SkinFactory.DLL
+ 2007-12-18 01:53:03 5,120 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Systemtray.resources\2.0.2861.40053_de_90ba9c70f846762e\CLI.Component.Systemtray.resources.DLL
+ 2007-12-18 01:53:04 5,120 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Systemtray.resources\2.0.2861.40053_es_90ba9c70f846762e\CLI.Component.Systemtray.resources.DLL
+ 2007-12-18 01:53:05 5,120 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Systemtray.resources\2.0.2861.40053_fr_90ba9c70f846762e\CLI.Component.Systemtray.resources.DLL
+ 2007-12-18 01:53:05 5,120 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Systemtray.resources\2.0.2861.40053_zh-CHS_90ba9c70f846762e\CLI.Component.Systemtray.resources.DLL
+ 2007-12-18 01:53:02 458,752 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Systemtray\2.0.2861.40053__90ba9c70f846762e\CLI.Component.Systemtray.DLL
+ 2007-12-18 01:53:03 315,392 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Wizard.resources\2.0.2861.39832_de_90ba9c70f846762e\CLI.Component.Wizard.resources.DLL
+ 2007-12-18 01:53:04 135,168 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Wizard.resources\2.0.2861.39832_es_90ba9c70f846762e\CLI.Component.Wizard.resources.DLL
+ 2007-12-18 01:53:05 135,168 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Wizard.resources\2.0.2861.39832_fr_90ba9c70f846762e\CLI.Component.Wizard.resources.DLL
+ 2007-12-18 01:53:05 143,360 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Wizard.resources\2.0.2861.39832_zh-CHS_90ba9c70f846762e\CLI.Component.Wizard.resources.DLL
+ 2007-12-18 01:53:02 24,576 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Wizard.Shared.Private\2.0.2820.26394__90ba9c70f846762e\CLI.Component.Wizard.Shared.Private.DLL
+ 2007-12-18 01:53:08 20,480 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Wizard.Shared\2.0.2820.26375__90ba9c70f846762e\CLI.Component.Wizard.Shared.DLL
+ 2007-12-18 01:53:02 471,040 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Wizard\2.0.2861.39832__90ba9c70f846762e\CLI.Component.Wizard.DLL
+ 2007-12-18 01:53:02 40,960 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Foundation.Private\2.0.2820.26371__90ba9c70f846762e\CLI.Foundation.Private.DLL
+ 2007-12-18 01:53:08 28,672 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Foundation.XManifest\2.0.2820.26409__90ba9c70f846762e\CLI.Foundation.XManifest.DLL
+ 2007-12-18 01:53:08 53,248 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Foundation\2.0.2820.26370__90ba9c70f846762e\CLI.Foundation.DLL
+ 2007-12-18 01:53:02 20,480 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI.Implementation\2.0.2861.39793__90ba9c70f846762e\CLI.Implementation.DLL
+ 2007-12-18 01:53:09 49,152 ----a-w C:\WINDOWS\assembly\GAC_MSIL\CLI\2.0.0.0__90ba9c70f846762e\CLI.EXE
+ 2007-12-18 01:53:08 16,384 ----a-w C:\WINDOWS\assembly\GAC_MSIL\DEM.Foundation\2.0.2573.17684__90ba9c70f846762e\DEM.Foundation.DLL
+ 2007-12-18 01:53:08 45,056 ----a-w C:\WINDOWS\assembly\GAC_MSIL\DEM.Graphics.I0601\2.0.2573.17685__90ba9c70f846762e\DEM.Graphics.I0601.DLL
+ 2007-12-18 01:53:09 16,384 ----a-w C:\WINDOWS\assembly\GAC_MSIL\DEM.Graphics.I0702\2.0.2594.25693__90ba9c70f846762e\DEM.Graphics.I0702.DLL
+ 2007-12-18 01:53:09 20,480 ----a-w C:\WINDOWS\assembly\GAC_MSIL\DEM.Graphics.I0703\2.0.2651.18802__90ba9c70f846762e\DEM.Graphics.I0703.DLL
+ 2007-12-18 01:53:09 16,384 ----a-w C:\WINDOWS\assembly\GAC_MSIL\DEM.Graphics.I0706\2.0.2743.23304__90ba9c70f846762e\DEM.Graphics.I0706.DLL
+ 2007-12-18 01:53:08 16,384 ----a-w C:\WINDOWS\assembly\GAC_MSIL\DEM.Graphics\2.0.2820.26382__90ba9c70f846762e\DEM.Graphics.DLL
+ 2007-12-18 01:53:09 20,480 ----a-w C:\WINDOWS\assembly\GAC_MSIL\DEM.OS.I0602\2.0.2820.26382__90ba9c70f846762e\DEM.OS.I0602.DLL
+ 2007-12-18 01:53:09 16,384 ----a-w C:\WINDOWS\assembly\GAC_MSIL\DEM.OS\2.0.2820.26381__90ba9c70f846762e\DEM.OS.DLL
+ 2007-12-18 01:53:10 131,072 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Interop.SHDocVw\1.1.0.0__90ba9c70f846762e\Interop.SHDocVw.DLL
+ 2007-12-18 01:53:03 11,264 ----a-w C:\WINDOWS\assembly\GAC_MSIL\LOCALIZATION.Foundation.Implementation\2.0.2861.40096__90ba9c70f846762e\LOCALIZATION.Foundation.Implementation.DLL
+ 2007-12-18 01:53:03 16,384 ----a-w C:\WINDOWS\assembly\GAC_MSIL\LOCALIZATION.Foundation.Private\2.0.2820.26371__90ba9c70f846762e\LOCALIZATION.Foundation.Private.DLL
+ 2007-12-18 01:53:02 20,480 ----a-w C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation.Implementation.Private\2.0.2820.26376__90ba9c70f846762e\LOG.Foundation.Implementation.Private.DLL
+ 2007-12-18 01:53:02 61,440 ----a-w C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation.Implementation\2.0.2861.40060__90ba9c70f846762e\LOG.Foundation.Implementation.DLL
+ 2007-12-18 01:53:02 32,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation.Private\2.0.2820.26371__90ba9c70f846762e\LOG.Foundation.Private.DLL
+ 2007-12-18 01:53:09 32,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation\2.0.2820.26369__90ba9c70f846762e\LOG.Foundation.DLL
+ 2007-12-18 01:53:03 86,016 ----a-w C:\WINDOWS\assembly\GAC_MSIL\LOG\2.0.2861.40060__90ba9c70f846762e\LOG.EXE
+ 2007-12-18 01:53:09 16,384 ----a-w C:\WINDOWS\assembly\GAC_MSIL\MOM.Foundation\2.0.2820.26375__90ba9c70f846762e\MOM.Foundation.DLL
+ 2007-12-18 01:53:02 102,400 ----a-w C:\WINDOWS\assembly\GAC_MSIL\MOM.Implementation\2.0.2861.40061__90ba9c70f846762e\MOM.Implementation.DLL
+ 2007-12-18 01:53:09 49,152 ----a-w C:\WINDOWS\assembly\GAC_MSIL\MOM\2.0.0.0__90ba9c70f846762e\MOM.EXE
+ 2007-12-18 01:53:09 24,576 ----a-w C:\WINDOWS\assembly\GAC_MSIL\NEWAEM.Foundation\2.0.2820.26370__90ba9c70f846762e\NEWAEM.Foundation.DLL
+ 2007-12-18 01:53:04 4,608 ----a-w C:\WINDOWS\assembly\GAC_MSIL\PCKGHLP.Foundation.Implementation.resources\2.0.2861.40086_de_90ba9c70f846762e\PCKGHLP.Foundation.Implementation.resources.DLL
+ 2007-12-18 01:53:05 4,608 ----a-w C:\WINDOWS\assembly\GAC_MSIL\PCKGHLP.Foundation.Implementation.resources\2.0.2861.40086_es_90ba9c70f846762e\PCKGHLP.Foundation.Implementation.resources.DLL
+ 2007-12-18 01:53:05 4,608 ----a-w C:\WINDOWS\assembly\GAC_MSIL\PCKGHLP.Foundation.Implementation.resources\2.0.2861.40086_fr_90ba9c70f846762e\PCKGHLP.Foundation.Implementation.resources.DLL
+ 2007-12-18 01:53:06 4,608 ----a-w C:\WINDOWS\assembly\GAC_MSIL\PCKGHLP.Foundation.Implementation.resources\2.0.2861.40086_zh-CHS_90ba9c70f846762e\PCKGHLP.Foundation.Implementation.resources.DLL
+ 2007-12-18 01:53:03 28,672 ----a-w C:\WINDOWS\assembly\GAC_MSIL\PCKGHLP.Foundation.Implementation\2.0.2861.40086__90ba9c70f846762e\PCKGHLP.Foundation.Implementation.DLL
+ 2007-12-18 01:53:03 16,384 ----a-w C:\WINDOWS\assembly\GAC_MSIL\PCKGHLP.Foundation.Private\2.0.2820.26395__90ba9c70f846762e\PCKGHLP.Foundation.Private.DLL
+ 2007-12-18 02:49:51 26,624 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Accessibility\bdc20606da3673ca7a1923df39aa447a\Accessibility.ni.dll
+ 2007-12-18 02:49:58 888,832 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\d11229dd99d19383fefd31859ba70d0f\AspNetMMCExt.ni.dll
+ 2007-12-18 02:50:01 237,568 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\43b2d51cb6dd61c372642b53558f0e46\CustomMarshalers.ni.dll
+ 2007-12-18 02:50:00 15,360 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\dfsvc\545f8ff47de7ce3d9b7e78ca79f13408\dfsvc.ni.exe
+ 2007-12-18 02:50:05 880,640 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\ae151b2d7283da7b63f50bb272b642d5\Microsoft.Build.Engine.ni.dll
+ 2007-12-18 02:50:05 81,920 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\a3c9baf45cc05c02114458658b836abf\Microsoft.Build.Framework.ni.dll
+ 2007-12-18 02:50:11 1,687,552 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\ccd716991292056170b8476bbb0faafc\Microsoft.Build.Tasks.ni.dll
+ 2007-12-18 02:50:13 163,840 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\0e41eb7f3323eb46d7acc086ce3a2b0e\Microsoft.Build.Utilities.ni.dll
+ 2007-12-18 02:50:19 1,720,320 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\3c430152cfa852a4c644f411802270d6\Microsoft.VisualBasic.ni.dll
- 2007-12-17 23:12:36 11,304,960 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\317a8fc9f79e90108652eabce2cd55be\mscorlib.ni.dll
+ 2007-12-17 23:16:02 11,304,960 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\317a8fc9f79e90108652eabce2cd55be\mscorlib.ni.dll
+ 2007-12-18 02:50:22 1,003,520 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\c49af80957bc03640903ef3fa6fa3749\System.Configuration.ni.dll
+ 2007-12-17 23:17:34 6,676,480 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data\a5fd2302b8963882c1c19ce7c708e1ae\System.Data.ni.dll
+ 2007-12-18 02:50:26 1,724,416 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Deployment\df2e0cc0c1ff31b0e7995a31b3abd613\System.Deployment.ni.dll
+ 2007-12-17 23:24:00 10,702,848 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Design\7077e14a822ed7dac9b376f2b38874ad\System.Design.ni.dll
+ 2007-12-18 02:50:30 1,216,512 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\5ab2cf2ee2570fc627189f954acb2f27\System.DirectoryServices.ni.dll
+ 2007-12-18 02:50:32 512,000 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\8ab902ec422c3a37232728ac2fa9b3f8\System.DirectoryServices.Protocols.ni.dll
+ 2007-12-17 23:24:23 229,376 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\dc8de6a53667d4c5c716d79445e5bba2\System.Drawing.Design.ni.dll
+ 2007-12-17 23:24:20 1,601,536 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\be76c514f90167cd020064af10320ee8\System.Drawing.ni.dll
+ 2007-12-18 02:50:35 659,456 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\d4b84a699ef97852d5993dbef079dfde\System.EnterpriseServices.ni.dll
+ 2007-12-18 02:50:34 294,912 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\d4b84a699ef97852d5993dbef079dfde\System.EnterpriseServices.Wrapper.dll
+ 2007-12-18 02:50:37 729,088 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Security\10cac929f6b5aca72ba2d225b0a2a32f\System.Security.ni.dll
+ 2007-12-18 02:50:39 684,032 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Transactions\51e232e11ac6f2a4309952e6a7fb6d55\System.Transactions.ni.dll
+ 2007-12-18 02:51:21 2,306,048 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\523cb725fa2507b53c395f6938b4a351\System.Web.Mobile.ni.dll
+ 2007-12-18 02:51:22 237,568 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\d97058b56d1dd52c6bcd1002f8230331\System.Web.RegularExpressions.ni.dll
+ 2007-12-18 02:51:27 1,941,504 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Services\8b8ce26b02f18c708d5f7d5cde9b41af\System.Web.Services.ni.dll
+ 2007-12-18 02:51:14 12,185,600 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\eca38332637e99a8f70ac9f300588d4f\System.Web.ni.dll
+ 2007-12-17 23:26:01 13,107,200 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\ad3072e606841ef0bd791524d17cb0c8\System.Windows.Forms.ni.dll
+ 2007-12-17 23:26:31 5,623,808 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\a8bec9b98ae73907f6222edeb6f841fd\System.Xml.ni.dll
+ 2007-12-17 23:17:01 8,130,560 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\b3f2376ab214b0def350ada9adb2313e\System.ni.dll
+ 2006-02-15 00:22:26 142,464 ------w C:\WINDOWS\Driver Cache\i386\aec.sys
+ 2006-03-17 00:33:10 262,784 ------w C:\WINDOWS\Driver Cache\i386\http.sys
+ 2006-06-14 08:47:45 172,416 ------w C:\WINDOWS\Driver Cache\i386\kmixer.sys
+ 2006-05-05 09:41:45 453,120 ------w C:\WINDOWS\Driver Cache\i386\mrxsmb.sys
- 2005-03-02 00:57:44 2,135,552 ------w C:\WINDOWS\Driver Cache\i386\ntkrnlmp.exe
+ 2007-02-28 09:08:48 2,136,064 ------w C:\WINDOWS\Driver Cache\i386\ntkrnlmp.exe
- 2005-03-02 00:34:40 2,056,832 ------w C:\WINDOWS\Driver Cache\i386\ntkrnlpa.exe
+ 2007-02-28 08:38:55 2,057,600 ------w C:\WINDOWS\Driver Cache\i386\ntkrnlpa.exe
- 2005-03-02 00:34:42 2,015,232 ------w C:\WINDOWS\Driver Cache\i386\ntkrpamp.exe
+ 2007-02-28 08:38:57 2,015,744 ------w C:\WINDOWS\Driver Cache\i386\ntkrpamp.exe
- 2005-03-02 00:59:53 2,179,328 ------w C:\WINDOWS\Driver Cache\i386\ntoskrnl.exe
+ 2007-02-28 09:10:57 2,180,352 ------w C:\WINDOWS\Driver Cache\i386\ntoskrnl.exe
+ 2006-06-14 08:47:46 6,400 ------w C:\WINDOWS\Driver Cache\i386\splitter.sys
+ 2006-06-14 09:00:45 82,944 ------w C:\WINDOWS\Driver Cache\i386\wdmaud.sys
- 2004-08-04 12:00:00 1,032,192 ----a-w C:\WINDOWS\explorer.exe
+ 2007-06-13 10:23:07 1,033,216 ----a-w C:\WINDOWS\explorer.exe
- 2004-08-04 12:00:00 10,752 ----a-w C:\WINDOWS\hh.exe
+ 2005-05-26 23:22:01 10,752 ----a-w C:\WINDOWS\hh.exe
+ 2004-08-04 12:00:00 61,440 -c--a-w C:\WINDOWS\ie7\admparse.dll
+ 2004-08-04 12:00:00 99,840 -c--a-w C:\WINDOWS\ie7\advpack.dll
+ 2004-08-04 12:00:00 35,328 -c--a-w C:\WINDOWS\ie7\corpol.dll
+ 2006-06-03 11:40:49 33,792 -c--a-w C:\WINDOWS\ie7\custsat.dll
+ 2007-10-11 06:13:44 357,888 -c--a-w C:\WINDOWS\ie7\dxtmsft.dll
+ 2007-10-11 06:13:44 205,312 -c--a-w C:\WINDOWS\ie7\dxtrans.dll
+ 2007-10-11 06:13:44 55,808 -c--a-w C:\WINDOWS\ie7\extmgr.dll
+ 2004-08-04 12:00:00 38,912 -c--a-w C:\WINDOWS\ie7\hmmapi.dll
+ 2004-08-04 12:00:00 34,304 -c--a-w C:\WINDOWS\ie7\ie4uinit.exe
+ 2004-08-04 12:00:00 139,264 -c--a-w C:\WINDOWS\ie7\ieakeng.dll
+ 2004-08-04 12:00:00 216,576 -c--a-w C:\WINDOWS\ie7\ieaksie.dll
+ 2004-08-04 12:00:00 221,184 -c--a-w C:\WINDOWS\ie7\ieakui.dll
+ 2004-08-04 12:00:00 323,584 -c--a-w C:\WINDOWS\ie7\iedkcs32.dll
+ 2007-10-10 11:16:27 18,432 -c--a-w C:\WINDOWS\ie7\iedw.exe
+ 2004-08-04 12:00:00 81,920 -c--a-w C:\WINDOWS\ie7\ieencode.dll
+ 2007-10-11 06:13:44 251,392 -c--a-w C:\WINDOWS\ie7\iepeers.dll
+ 2004-08-04 12:00:00 48,640 -c--a-w C:\WINDOWS\ie7\iernonce.dll
+ 2004-08-04 12:00:00 62,976 -c--a-w C:\WINDOWS\ie7\iesetup.dll
+ 2004-08-04 12:00:00 93,184 -c--a-w C:\WINDOWS\ie7\iexplore.exe
+ 2004-08-04 12:00:00 35,840 -c--a-w C:\WINDOWS\ie7\imgutil.dll
+ 2007-10-11 06:13:44 96,256 -c--a-w C:\WINDOWS\ie7\inseng.dll
+ 2007-11-14 07:26:56 450,560 -c--a-w C:\WINDOWS\ie7\jscript.dll
+ 2007-10-11 06:13:44 16,384 -c--a-w C:\WINDOWS\ie7\jsproxy.dll
+ 2004-08-04 12:00:00 22,016 -c--a-w C:\WINDOWS\ie7\licmgr10.dll
+ 2004-08-04 12:00:00 29,184 -c--a-w C:\WINDOWS\ie7\mshta.exe
+ 2007-10-30 10:16:33 3,058,688 -c--a-w C:\WINDOWS\ie7\mshtml.dll
+ 2007-10-11 06:13:45 449,024 -c--a-w C:\WINDOWS\ie7\mshtmled.dll
+ 2004-08-04 12:00:00 56,832 -c--a-w C:\WINDOWS\ie7\mshtmler.dll
+ 2004-08-04 12:00:00 146,432 -c--a-w C:\WINDOWS\ie7\msls31.dll
+ 2007-10-11 06:13:45 146,432 -c--a-w C:\WINDOWS\ie7\msrating.dll
+ 2007-10-11 06:13:45 532,480 -c--a-w C:\WINDOWS\ie7\mstime.dll
+ 2004-08-04 12:00:00 96,256 -c--a-w C:\WINDOWS\ie7\occache.dll
+ 2007-10-11 06:13:45 39,424 -c--a-w C:\WINDOWS\ie7\pngfilt.dll
+ 2007-08-14 02:54:42 32,960 -c--a-w C:\WINDOWS\ie7\spuninst\iecustom.dll
+ 2007-08-14 02:52:06 66,048 -c--a-w C:\WINDOWS\ie7\spuninst\ieResetIcons.exe
+ 2006-09-07 01:43:16 213,216 -c--a-w C:\WINDOWS\ie7\spuninst\spuninst.exe
+ 2006-09-07 01:43:18 371,424 -c--a-w C:\WINDOWS\ie7\spuninst\updspapi.dll
+ 2004-08-04 12:00:00 37,888 -c--a-w C:\WINDOWS\ie7\url.dll
+ 2007-10-11 06:13:45 615,424 -c--a-w C:\WINDOWS\ie7\urlmon.dll
+ 2004-08-04 12:00:00 417,792 -c--a-w C:\WINDOWS\ie7\vbscript.dll
+ 2007-06-26 15:13:22 851,968 -c--a-w C:\WINDOWS\ie7\vgx.dll
+ 2004-08-04 12:00:00 276,480 -c--a-w C:\WINDOWS\ie7\webcheck.dll
+ 2007-10-11 06:13:45 659,456 -c--a-w C:\WINDOWS\ie7\wininet.dll
+ 2007-08-14 02:39:00 123,904 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\advpack.dll
+ 2007-08-14 02:35:38 214,528 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\dxtrans.dll
+ 2007-08-14 02:54:10 131,584 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\extmgr.dll
+ 2007-08-14 02:36:26 61,952 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\icardie.dll
+ 2007-08-14 02:39:06 54,784 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\ie4uinit.exe
+ 2007-08-14 02:39:26 152,064 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\ieakeng.dll
+ 2007-08-14 02:39:54 229,376 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\ieaksie.dll
+ 2007-08-14 01:56:54 161,792 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\ieakui.dll
+ 2007-02-13 00:10:12 2,451,312 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\ieapfltr.dat
+ 2007-07-11 20:27:48 383,488 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\ieapfltr.dll
+ 2007-08-14 02:39:50 382,976 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\iedkcs32.dll
+ 2007-08-14 02:54:10 6,049,280 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\ieframe.dll
+ 2007-08-14 02:39:10 43,008 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\iernonce.dll
+ 2007-08-14 02:34:04 266,752 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\iertutil.dll
+ 2007-08-14 02:39:10 13,312 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\ieudinit.exe
+ 2007-08-14 02:43:56 622,080 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\iexplore.exe
+ 2007-08-14 02:54:10 27,136 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\jsproxy.dll
+ 2007-08-14 02:54:10 458,752 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\msfeeds.dll
+ 2007-08-14 02:54:10 50,688 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\msfeedsbs.dll
+ 2007-08-14 02:54:12 3,578,368 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\mshtml.dll
+ 2007-08-14 02:54:10 475,648 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\mshtmled.dll
+ 2007-08-14 02:44:26 192,000 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\msrating.dll
+ 2007-08-14 02:54:10 670,720 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\mstime.dll
+ 2007-08-14 02:44:06 101,376 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\occache.dll
+ 2007-03-06 01:22:39 213,216 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe
+ 2007-06-30 20:22:56 371,424 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\updspapi.dll
+ 2007-08-14 02:44:30 105,984 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\url.dll
+ 2007-08-14 02:54:10 1,162,240 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\urlmon.dll
+ 2007-08-14 02:54:10 231,424 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\webcheck.dll
+ 2007-08-14 02:54:10 818,688 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\wininet.dll
- 2006-11-02 02:31:34 315,904 ----a-w C:\WINDOWS\inf\unregmp2.exe
+ 2007-06-27 06:10:26 317,440 ----a-w C:\WINDOWS\inf\unregmp2.exe
+ 2007-12-18 01:52:06 10,134 ----a-r C:\WINDOWS\Installer\{0D28ABEA-D1FE-05B0-C11A-2015F1F3215A}\ARPPRODUCTICON.exe
+ 2007-12-18 01:52:59 10,134 ----a-r C:\WINDOWS\Installer\{144FDEC8-2B6A-4424-0CFA-B9C8F6678E4E}\ARPPRODUCTICON.exe
+ 2007-12-18 01:52:59 9,158 ----a-r C:\WINDOWS\Installer\{144FDEC8-2B6A-4424-0CFA-B9C8F6678E4E}\NewShortcut11_EAB9635D261D49BE88DDE71A7C809B2D.exe
+ 2007-12-18 01:52:54 10,134 ----a-r C:\WINDOWS\Installer\{1961A080-13D9-45CF-2AB6-1B7D38484166}\ARPPRODUCTICON.exe
+ 2007-12-18 01:52:48 10,134 ----a-r C:\WINDOWS\Installer\{1E1490E3-D961-22A1-A7A5-1FF80ED01936}\ARPPRODUCTICON.exe
+ 2007-12-18 01:52:17 10,134 ----a-r C:\WINDOWS\Installer\{2269AC07-D89E-7CD7-97C1-426CBC9CC1C5}\ARPPRODUCTICON.exe
+ 2007-12-18 01:52:46 10,134 ----a-r C:\WINDOWS\Installer\{2AD6227A-80F2-CA4E-791B-50A6152CEAFC}\ARPPRODUCTICON.exe
+ 2007-12-18 01:52:32 10,134 ----a-r C:\WINDOWS\Installer\{2FB4AD32-E942-2F0F-35BA-952440800B41}\ARPPRODUCTICON.exe
+ 2007-12-18 01:52:43 10,134 ----a-r C:\WINDOWS\Installer\{3ED7B71A-5A79-9372-7DEB-EBCB5D7F2EDE}\ARPPRODUCTICON.exe
+ 2007-12-18 01:52:27 10,134 ----a-r C:\WINDOWS\Installer\{40162A1D-92E2-554A-9A37-F562E42D6DAC}\ARPPRODUCTICON.exe
+ 2007-12-18 01:52:15 10,134 ----a-r C:\WINDOWS\Installer\{40C2651B-6C4C-924A-9933-7A604B0D1C44}\ARPPRODUCTICON.exe
+ 2007-12-18 01:52:40 10,134 ----a-r C:\WINDOWS\Installer\{4C2FC840-FC3A-2FC2-A783-4009953AB571}\ARPPRODUCTICON.exe
+ 2007-12-18 01:52:29 10,134 ----a-r C:\WINDOWS\Installer\{7C53AD29-B4FD-AC8F-2311-E45153007887}\ARPPRODUCTICON.exe
+ 2007-12-18 01:52:22 10,134 ----a-r C:\WINDOWS\Installer\{8CFFE9A3-59AB-F31C-4A19-22ACA2830D54}\ARPPRODUCTICON.exe
+ 2007-12-18 01:52:19 10,134 ----a-r C:\WINDOWS\Installer\{99E0B83A-F046-7458-24EF-E9D840D0A12E}\ARPPRODUCTICON.exe
+ 2007-12-18 01:52:52 10,134 ----a-r C:\WINDOWS\Installer\{9BE5F395-AE89-FC49-ED3D-EC34491050CD}\ARPPRODUCTICON.exe
+ 2007-12-18 01:51:57 10,134 ----a-r C:\WINDOWS\Installer\{CC0DEA07-56D6-A86A-5704-17E2E5ECA18F}\ARPPRODUCTICON.exe
+ 2007-12-18 01:52:45 10,134 ----a-r C:\WINDOWS\Installer\{CCEDC45F-5653-2DF8-BB28-9E6AA768A79E}\ARPPRODUCTICON.exe
+ 2007-12-18 01:52:04 10,134 ----a-r C:\WINDOWS\Installer\{D3CD0AD1-BC9A-8160-DB87-128F31DCC2D4}\ARPPRODUCTICON.exe
- 2004-08-04 12:00:00 41,984 ----a-w C:\WINDOWS\msagent\agentdp2.dll
+ 2006-10-12 14:02:52 42,496 ----a-w C:\WINDOWS\msagent\agentdp2.dll
- 2004-08-04 12:00:00 58,880 ----a-w C:\WINDOWS\msagent\agentdpv.dll
+ 2007-03-09 13:46:24 57,344 ----a-w C:\WINDOWS\msagent\agentdpv.dll
- 2004-08-04 12:00:00 256,512 ----a-w C:\WINDOWS\msagent\agentsvr.exe
+ 2006-10-12 11:09:53 256,512 ----a-w C:\WINDOWS\msagent\agentsvr.exe
+ 2006-06-03 11:40:49 33,792 ------w C:\WINDOWS\network diagnostic\custsat.dll
+ 2006-10-10 12:44:50 557,568 ------w C:\WINDOWS\network diagnostic\xpnetdiag.exe
- 2004-08-04 12:00:00 100,352 ----a-w C:\WINDOWS\system32\6to4svc.dll
+ 2006-08-16 11:58:05 100,352 ----a-w C:\WINDOWS\system32\6to4svc.dll
- 2004-08-04 12:00:00 61,440 ----a-w C:\WINDOWS\system32\admparse.dll
+ 2007-08-14 02:39:20 71,680 ----a-w C:\WINDOWS\system32\admparse.dll
- 2004-08-04 12:00:00 99,840 ----a-w C:\WINDOWS\system32\advpack.dll
+ 2007-10-10 23:55:51 124,928 ----a-w C:\WINDOWS\system32\advpack.dll
+ 2007-09-14 15:03:50 157,034 ----a-w C:\WINDOWS\system32\atiicdxx.dat
- 2007-07-20 05:19:12 40,960 ----a-w C:\WINDOWS\system32\ATIODCLI.exe
+ 2007-07-20 04:19:12 40,960 ----a-w C:\WINDOWS\system32\ATIODCLI.exe
- 2007-07-20 05:19:32 81,920 ----a-w C:\WINDOWS\system32\ATIODE.exe
+ 2007-07-20 04:19:32 81,920 ----a-w C:\WINDOWS\system32\ATIODE.exe
- 2001-11-09 18:01:04 24,064 ----a-w C:\WINDOWS\system32\ativcoxx.dll
+ 2001-11-09 17:01:04 24,064 ----a-w C:\WINDOWS\system32\ativcoxx.dll
- 2004-08-04 12:00:00 1,016,832 ----a-w C:\WINDOWS\system32\browseui.dll
+ 2007-10-11 06:13:44 1,023,488 ----a-w C:\WINDOWS\system32\browseui.dll
- 2004-08-04 12:00:00 229,888 ----a-w C:\WINDOWS\system32\catsrv.dll
+ 2005-07-26 04:39:42 225,792 ----a-w C:\WINDOWS\system32\catsrv.dll
- 2004-08-04 12:00:00 628,224 ----a-w C:\WINDOWS\system32\catsrvut.dll
+ 2005-07-26 04:39:43 625,152 ----a-w C:\WINDOWS\system32\catsrvut.dll
- 2004-08-04 12:00:00 150,528 ----a-w C:\WINDOWS\system32\cdfview.dll
+ 2007-10-11 06:13:44 151,040 ----a-w C:\WINDOWS\system32\cdfview.dll
- 2004-08-04 12:00:00 2,067,968 ----a-w C:\WINDOWS\system32\cdosys.dll
+ 2005-09-10 01:53:41 2,067,968 ----a-w C:\WINDOWS\system32\cdosys.dll
- 2004-08-04 12:00:00 69,120 ----a-w C:\WINDOWS\system32\ciodm.dll
+ 2006-06-22 05:06:29 69,120 ----a-w C:\WINDOWS\system32\ciodm.dll
- 2004-08-04 12:00:00 110,080 ----a-w C:\WINDOWS\system32\clbcatex.dll
+ 2005-07-26 04:39:43 110,080 ----a-w C:\WINDOWS\system32\clbcatex.dll
- 2004-08-04 12:00:00 501,248 ----a-w C:\WINDOWS\system32\clbcatq.dll
+ 2005-07-26 04:39:43 498,688 ----a-w C:\WINDOWS\system32\clbcatq.dll
- 2004-08-04 12:00:00 62,464 ----a-w C:\WINDOWS\system32\colbact.dll
+ 2005-07-26 04:39:43 60,416 ----a-w C:\WINDOWS\system32\colbact.dll
- 2004-08-04 12:00:00 195,584 ----a-w C:\WINDOWS\system32\Com\comadmin.dll
+ 2005-07-26 04:39:44 195,072 ----a-w C:\WINDOWS\system32\Com\comadmin.dll
- 2004-08-04 12:00:00 611,328 ----a-w C:\WINDOWS\system32\comctl32.dll
+ 2006-08-25 15:45:58 617,472 ----a-w C:\WINDOWS\system32\comctl32.dll
- 2004-08-04 12:00:00 82,432 ----a-w C:\WINDOWS\system32\comrepl.dll
+ 2005-07-26 04:39:44 97,792 ----a-w C:\WINDOWS\system32\comrepl.dll
- 2004-08-04 12:00:00 1,251,840 ----a-w C:\WINDOWS\system32\comsvcs.dll
+ 2005-07-26 04:39:44 1,267,200 ----a-w C:\WINDOWS\system32\comsvcs.dll
- 2004-08-04 12:00:00 540,160 ----a-w C:\WINDOWS\system32\comuid.dll
+ 2005-07-26 04:39:45 540,160 ----a-w C:\WINDOWS\system32\comuid.dll
- 2004-08-04 12:00:00 1,053,696 ----a-w C:\WINDOWS\system32\danim.dll
+ 2007-10-11 06:13:44 1,054,208 ----a-w C:\WINDOWS\system32\danim.dll
- 2004-08-04 12:00:00 111,104 ----a-w C:\WINDOWS\system32\dhcpcsvc.dll
+ 2006-05-19 12:59:41 111,616 ----a-w C:\WINDOWS\system32\dhcpcsvc.dll
- 2004-08-04 12:00:00 100,352 -c--a-w C:\WINDOWS\system32\dllcache\6to4svc.dll
+ 2006-08-16 11:58:05 100,352 -c--a-w C:\WINDOWS\system32\dllcache\6to4svc.dll
- 2004-08-04 12:00:00 61,440 -c--a-w C:\WINDOWS\system32\dllcache\admparse.dll
+ 2007-08-14 02:39:20 71,680 -c--a-w C:\WINDOWS\system32\dllcache\admparse.dll
- 2004-08-04 12:00:00 99,840 -c--a-w C:\WINDOWS\system32\dllcache\advpack.dll
+ 2007-10-10 23:55:51 124,928 -c----w C:\WINDOWS\system32\dllcache\advpack.dll
- 2004-08-04 06:39:38 142,464 -c--a-w C:\WINDOWS\system32\dllcache\aec.sys
+ 2006-02-15 00:22:26 142,464 -c--a-w C:\WINDOWS\system32\dllcache\aec.sys
- 2004-08-04 12:00:00 41,984 -c--a-w C:\WINDOWS\system32\dllcache\agentdp2.dll
+ 2006-10-12 14:02:52 42,496 -c--a-w C:\WINDOWS\system32\dllcache\agentdp2.dll
- 2004-08-04 12:00:00 58,880 -c--a-w C:\WINDOWS\system32\dllcache\agentdpv.dll
+ 2007-03-09 13:46:24 57,344 -c--a-w C:\WINDOWS\system32\dllcache\agentdpv.dll
- 2004-08-04 12:00:00 256,512 -c--a-w C:\WINDOWS\system32\dllcache\agentsvr.exe
+ 2006-10-12 11:09:53 256,512 -c--a-w C:\WINDOWS\system32\dllcache\agentsvr.exe
- 2004-08-04 12:00:00 1,016,832 -c--a-w C:\WINDOWS\system32\dllcache\browseui.dll
+ 2007-10-11 06:13:44 1,023,488 -c--a-w C:\WINDOWS\system32\dllcache\browseui.dll
- 2004-08-04 12:00:00 229,888 -c--a-w C:\WINDOWS\system32\dllcache\catsrv.dll
+ 2005-07-26 04:39:42 225,792 -c--a-w C:\WINDOWS\system32\dllcache\catsrv.dll
- 2004-08-04 12:00:00 628,224 -c--a-w C:\WINDOWS\system32\dllcache\catsrvut.dll
+ 2005-07-26 04:39:43 625,152 -c--a-w C:\WINDOWS\system32\dllcache\catsrvut.dll
- 2004-08-04 12:00:00 150,528 -c--a-w C:\WINDOWS\system32\dllcache\cdfview.dll
+ 2007-10-11 06:13:44 151,040 -c--a-w C:\WINDOWS\system32\dllcache\cdfview.dll
- 2004-08-04 12:00:00 2,067,968 -c--a-w C:\WINDOWS\system32\dllcache\cdosys.dll
+ 2005-09-10 01:53:41 2,067,968 -c--a-w C:\WINDOWS\system32\dllcache\cdosys.dll
- 2004-08-04 12:00:00 69,120 -c--a-w C:\WINDOWS\system32\dllcache\ciodm.dll
+ 2006-06-22 05:06:29 69,120 -c--a-w C:\WINDOWS\system32\dllcache\ciodm.dll
- 2004-08-04 12:00:00 110,080 -c--a-w C:\WINDOWS\system32\dllcache\clbcatex.dll
+ 2005-07-26 04:39:43 110,080 -c--a-w C:\WINDOWS\system32\dllcache\clbcatex.dll
- 2004-08-04 12:00:00 501,248 -c--a-w C:\WINDOWS\system32\dllcache\clbcatq.dll
+ 2005-07-26 04:39:43 498,688 -c--a-w C:\WINDOWS\system32\dllcache\clbcatq.dll
- 2004-08-04 12:00:00 62,464 -c--a-w C:\WINDOWS\system32\dllcache\colbact.dll
+ 2005-07-26 04:39:43 60,416 -c--a-w C:\WINDOWS\system32\dllcache\colbact.dll
- 2004-08-04 12:00:00 195,584 -c--a-w C:\WINDOWS\system32\dllcache\comadmin.dll
+ 2005-07-26 04:39:44 195,072 -c--a-w C:\WINDOWS\system32\dllcache\comadmin.dll
- 2004-08-04 12:00:00 611,328 -c--a-w C:\WINDOWS\system32\dllcache\comctl32.dll
+ 2006-08-25 15:45:58 617,472 -c--a-w C:\WINDOWS\system32\dllcache\comctl32.dll
- 2004-08-04 12:00:00 82,432 -c--a-w C:\WINDOWS\system32\dllcache\comrepl.dll
+ 2005-07-26 04:39:44 97,792 -c--a-w C:\WINDOWS\system32\dllcache\comrepl.dll
- 2004-08-04 12:00:00 1,251,840 -c--a-w C:\WINDOWS\system32\dllcache\comsvcs.dll
+ 2005-07-26 04:39:44 1,267,200 -c--a-w C:\WINDOWS\system32\dllcache\comsvcs.dll
- 2004-08-04 12:00:00 540,160 -c--a-w C:\WINDOWS\system32\dllcache\comuid.dll
+ 2005-07-26 04:39:45 540,160 -c--a-w C:\WINDOWS\system32\dllcache\comuid.dll
- 2004-08-04 12:00:00 28,672 -c--a-w C:\WINDOWS\system32\dllcache\custsat.dll
+ 2007-08-14 02:54:10 33,792 -c--a-w C:\WINDOWS\system32\dllcache\custsat.dll
- 2004-08-04 12:00:00 1,053,696 -c--a-w C:\WINDOWS\system32\dllcache\danim.dll
+ 2007-10-11 06:13:44 1,054,208 -c--a-w C:\WINDOWS\system32\dllcache\danim.dll
- 2004-08-04 12:00:00 111,104 -c--a-w C:\WINDOWS\system32\dllcache\dhcpcsvc.dll
+ 2006-05-19 12:59:41 111,616 -c--a-w C:\WINDOWS\system32\dllcache\dhcpcsvc.dll
- 2004-08-04 12:00:00 81,408 -c--a-w C:\WINDOWS\system32\dllcache\directdb.dll
+ 2007-05-16 15:12:00 86,528 -c--a-w C:\WINDOWS\system32\dllcache\directdb.dll
- 2004-08-04 12:00:00 148,480 -c--a-w C:\WINDOWS\system32\dllcache\dnsapi.dll
+ 2006-06-26 17:37:10 148,480 -c--a-w C:\WINDOWS\system32\dllcache\dnsapi.dll
- 2004-08-04 12:00:00 498,205 -c--a-w C:\WINDOWS\system32\dllcache\dxmasf.dll
+ 2006-08-22 12:05:26 498,742 -c--a-w C:\WINDOWS\system32\dllcache\dxmasf.dll
- 2004-08-04 12:00:00 357,888 -c--a-w C:\WINDOWS\system32\dllcache\dxtmsft.dll
+ 2007-08-14 02:35:46 346,624 -c--a-w C:\WINDOWS\system32\dllcache\dxtmsft.dll
- 2004-08-04 12:00:00 201,728 -c--a-w C:\WINDOWS\system32\dllcache\dxtrans.dll
+ 2007-10-10 23:55:51 214,528 -c----w C:\WINDOWS\system32\dllcache\dxtrans.dll
- 2004-08-04 12:00:00 243,200 -c--a-w C:\WINDOWS\system32\dllcache\es.dll
+ 2005-07-26 04:39:45 243,200 -c--a-w C:\WINDOWS\system32\dllcache\es.dll
- 2004-08-04 12:00:00 1,082,368 -c--a-w C:\WINDOWS\system32\dllcache\esent.dll
+ 2005-10-20 22:20:03 1,082,368 -c--a-w C:\WINDOWS\system32\dllcache\esent.dll
- 2004-08-04 12:00:00 1,032,192 -c--a-w C:\WINDOWS\system32\dllcache\explorer.exe
+ 2007-06-13 10:23:07 1,033,216 -c--a-w C:\WINDOWS\system32\dllcache\explorer.exe
- 2004-08-04 12:00:00 55,808 -c--a-w C:\WINDOWS\system32\dllcache\extmgr.dll
+ 2007-10-10 23:55:51 132,608 -c----w C:\WINDOWS\system32\dllcache\extmgr.dll
- 2004-08-04 12:00:00 278,016 -c--a-w C:\WINDOWS\system32\dllcache\gdi32.dll
+ 2007-06-19 13:31:19 282,112 -c--a-w C:\WINDOWS\system32\dllcache\gdi32.dll
- 2004-08-04 12:00:00 10,752 -c--a-w C:\WINDOWS\system32\dllcache\hh.exe
+ 2005-05-26 23:22:01 10,752 -c--a-w C:\WINDOWS\system32\dllcache\hh.exe
- 2004-08-04 12:00:00 38,912 -c--a-w C:\WINDOWS\system32\dllcache\hhsetup.dll
+ 2005-05-27 02:04:27 41,472 -c--a-w C:\WINDOWS\system32\dllcache\hhsetup.dll
- 2004-08-04 12:00:00 77,850 -c--a-w C:\WINDOWS\system32\dllcache\hlink.dll
+ 2006-07-21 08:24:43 72,704 -c--a-w C:\WINDOWS\system32\dllcache\hlink.dll
- 2004-08-04 12:00:00 38,912 -c--a-w C:\WINDOWS\system32\dllcache\hmmapi.dll
+ 2007-08-14 02:18:02 60,416 -c--a-w C:\WINDOWS\system32\dllcache\hmmapi.dll
- 2004-08-04 12:00:00 253,952 -c--a-w C:\WINDOWS\system32\dllcache\icm32.dll
+ 2005-06-29 01:46:00 254,976 -c--a-w C:\WINDOWS\system32\dllcache\icm32.dll
- 2004-08-04 12:00:00 34,304 -c--a-w C:\WINDOWS\system32\dllcache\ie4uinit.exe
+ 2007-10-10 10:59:40 70,656 -c----w C:\WINDOWS\system32\dllcache\ie4uinit.exe
- 2004-08-04 12:00:00 139,264 -c--a-w C:\WINDOWS\system32\dllcache\ieakeng.dll
+ 2007-10-10 23:55:51 153,088 -c----w C:\WINDOWS\system32\dllcache\ieakeng.dll
- 2004-08-04 12:00:00 216,576 -c--a-w C:\WINDOWS\system32\dllcache\ieaksie.dll
+ 2007-10-10 23:55:51 230,400 -c----w C:\WINDOWS\system32\dllcache\ieaksie.dll
- 2004-08-04 12:00:00 221,184 -c--a-w C:\WINDOWS\system32\dllcache\ieakui.dll
+ 2007-10-10 05:46:55 161,792 -c----w C:\WINDOWS\system32\dllcache\ieakui.dll
- 2004-08-04 12:00:00 323,584 -c--a-w C:\WINDOWS\system32\dllcache\iedkcs32.dll
+ 2007-10-10 23:55:52 384,512 -c----w C:\WINDOWS\system32\dllcache\iedkcs32.dll
- 2004-08-04 12:00:00 18,432 -c--a-w C:\WINDOWS\system32\dllcache\iedw.exe
+ 2007-08-14 02:44:02 69,120 -c--a-w C:\WINDOWS\system32\dllcache\iedw.exe
- 2004-08-04 12:00:00 81,920 -c--a-w C:\WINDOWS\system32\dllcache\ieencode.dll
+ 2007-08-14 02:45:18 78,336 -c--a-w C:\WINDOWS\system32\dllcache\ieencode.dll
- 2004-08-04 12:00:00 249,344 -c--a-w C:\WINDOWS\system32\dllcache\iepeers.dll
+ 2007-08-14 02:54:10 191,488 -c--a-w C:\WINDOWS\system32\dllcache\iepeers.dll
- 2004-08-04 12:00:00 48,640 -c--a-w C:\WINDOWS\system32\dllcache\iernonce.dll
+ 2007-10-10 23:55:55 44,544 -c----w C:\WINDOWS\system32\dllcache\iernonce.dll
- 2004-08-04 12:00:00 62,976 -c--a-w C:\WINDOWS\system32\dllcache\iesetup.dll
+ 2007-08-14 02:39:12 55,296 -c--a-w C:\WINDOWS\system32\dllcache\iesetup.dll
- 2004-08-04 12:00:00 93,184 -c--a-w C:\WINDOWS\system32\dllcache\iexplore.exe
+ 2007-10-10 10:59:52 625,152 -c----w C:\WINDOWS\system32\dllcache\iexplore.exe
- 2004-08-04 12:00:00 35,840 -c--a-w C:\WINDOWS\system32\dllcache\imgutil.dll
+ 2007-08-14 02:36:06 36,352 -c--a-w C:\WINDOWS\system32\dllcache\imgutil.dll
- 2004-08-04 12:00:00 678,400 -c--a-w C:\WINDOWS\system32\dllcache\inetcomm.dll
+ 2007-08-21 06:15:44 683,520 -c--a-w C:\WINDOWS\system32\dllcache\inetcomm.dll
- 2004-08-04 12:00:00 96,256 -c--a-w C:\WINDOWS\system32\dllcache\inseng.dll
+ 2007-08-14 02:39:02 92,672 -c--a-w C:\WINDOWS\system32\dllcache\inseng.dll
- 2004-08-04 12:00:00 94,720 -c--a-w C:\WINDOWS\system32\dllcache\iphlpapi.dll
+ 2006-05-19 12:59:41 94,720 -c--a-w C:\WINDOWS\system32\dllcache\iphlpapi.dll
- 2004-08-04 12:00:00 143,872 -c--a-w C:\WINDOWS\system32\dllcache\itircl.dll
+ 2005-05-27 02:04:27 155,136 -c--a-w C:\WINDOWS\system32\dllcache\itircl.dll
- 2004-08-04 12:00:00 134,144 -c--a-w C:\WINDOWS\system32\dllcache\itss.dll
+ 2005-05-27 02:04:27 137,216 -c--a-w C:\WINDOWS\system32\dllcache\itss.dll
+ 2006-06-01 18:47:07 163,840 -c----w C:\WINDOWS\system32\dllcache\jgdw400.dll
+ 2006-06-01 18:47:07 27,648 -c----w C:\WINDOWS\system32\dllcache\jgpl400.dll
- 2004-08-04 12:00:00 450,560 -c--a-w C:\WINDOWS\system32\dllcache\jscript.dll
+ 2007-08-14 02:38:04 491,520 -c--a-w C:\WINDOWS\system32\dllcache\jscript.dll
- 2004-08-04 12:00:00 15,872 -c--a-w C:\WINDOWS\system32\dllcache\jsproxy.dll
+ 2007-10-10 23:55:56 27,648 -c----w C:\WINDOWS\system32\dllcache\jsproxy.dll
- 2004-08-04 12:00:00 294,400 -c--a-w C:\WINDOWS\system32\dllcache\kerberos.dll
+ 2005-06-15 17:49:30 295,936 -c--a-w C:\WINDOWS\system32\dllcache\kerberos.dll
- 2004-08-04 12:00:00 983,552 -c--a-w C:\WINDOWS\system32\dllcache\kernel32.dll
+ 2007-04-16 15:52:53 984,576 -c--a-w C:\WINDOWS\system32\dllcache\kernel32.dll
- 2004-08-04 07:07:50 171,776 -c--a-w C:\WINDOWS\system32\dllcache\kmixer.sys
+ 2006-06-14 08:47:45 172,416 -c--a-w C:\WINDOWS\system32\dllcache\kmixer.sys
- 2004-08-04 12:00:00 22,016 -c--a-w C:\WINDOWS\system32\dllcache\licmgr10.dll
+ 2007-08-14 02:44:18 40,960 -c--a-w C:\WINDOWS\system32\dllcache\licmgr10.dll
- 2004-08-04 12:00:00 18,944 -c--a-w C:\WINDOWS\system32\dllcache\linkinfo.dll
+ 2005-09-01 01:41:53 19,968 -c--a-w C:\WINDOWS\system32\dllcache\linkinfo.dll
- 2004-08-04 12:00:00 721,920 -c--a-w C:\WINDOWS\system32\dllcache\lsasrv.dll
+ 2006-08-17 12:28:27 721,920 -c--a-w C:\WINDOWS\system32\dllcache\lsasrv.dll
- 2004-08-04 12:00:00 39,936 -c--a-w C:\WINDOWS\system32\dllcache\mf3216.dll
+ 2007-03-08 15:36:28 40,960 -c--a-w C:\WINDOWS\system32\dllcache\mf3216.dll
- 2004-08-04 12:00:00 924,432 -c--a-w C:\WINDOWS\system32\dllcache\mfc40u.dll
+ 2006-11-01 19:17:45 927,504 -c--a-w C:\WINDOWS\system32\dllcache\mfc40u.dll
- 2004-08-04 12:00:00 1,024,000 -c--a-w C:\WINDOWS\system32\dllcache\mfc42u.dll
+ 2006-10-14 08:13:25 981,760 -c--a-w C:\WINDOWS\system32\dllcache\mfc42u.dll
- 2004-08-04 12:00:00 7,680 -c--a-w C:\WINDOWS\system32\dllcache\migregdb.exe
+ 2005-07-25 23:46:57 7,680 -c--a-w C:\WINDOWS\system32\dllcache\migregdb.exe
+ 2006-05-05 09:41:45 453,120 -c----w C:\WINDOWS\system32\dllcache\mrxsmb.sys
- 2004-08-04 12:00:00 143,360 -c--a-w C:\WINDOWS\system32\dllcache\msadco.dll
+ 2006-03-23 05:44:21 143,360 -c--a-w C:\WINDOWS\system32\dllcache\msadco.dll
- 2004-08-04 12:00:00 536,576 -c--a-w C:\WINDOWS\system32\dllcache\msado15.dll
+ 2006-12-26 13:07:23 536,576 -c--a-w C:\WINDOWS\system32\dllcache\msado15.dll
- 2004-08-04 12:00:00 180,224 -c--a-w C:\WINDOWS\system32\dllcache\msadomd.dll
+ 2006-12-26 13:07:23 180,224 -c--a-w C:\WINDOWS\system32\dllcache\msadomd.dll
- 2004-08-04 12:00:00 200,704 -c--a-w C:\WINDOWS\system32\dllcache\msadox.dll
+ 2006-12-26 13:07:23 200,704 -c--a-w C:\WINDOWS\system32\dllcache\msadox.dll
- 2004-08-04 12:00:00 73,728 -c--a-w C:\WINDOWS\system32\dllcache\mscms.dll
+ 2005-06-29 01:46:00 74,240 -c--a-w C:\WINDOWS\system32\dllcache\mscms.dll
- 2004-08-04 12:00:00 425,472 -c--a-w C:\WINDOWS\system32\dllcache\msdtcprx.dll
+ 2006-03-01 19:42:42 426,496 -c--a-w C:\WINDOWS\system32\dllcache\msdtcprx.dll
- 2004-08-04 12:00:00 949,248 -c--a-w C:\WINDOWS\system32\dllcache\msdtctm.dll
+ 2006-03-01 19:42:42 956,416 -c--a-w C:\WINDOWS\system32\dllcache\msdtctm.dll
- 2004-08-04 12:00:00 161,280 -c--a-w C:\WINDOWS\system32\dllcache\msdtcuiu.dll
+ 2006-03-01 19:42:42 161,280 -c--a-w C:\WINDOWS\system32\dllcache\msdtcuiu.dll
- 2004-08-04 12:00:00 537,088 -c--a-w C:\WINDOWS\system32\dllcache\msftedit.dll
+ 2006-11-27 14:54:06 539,136 -c--a-w C:\WINDOWS\system32\dllcache\msftedit.dll
- 2004-08-04 12:00:00 29,184 -c--a-w C:\WINDOWS\system32\dllcache\mshta.exe
+ 2007-08-14 02:32:30 45,568 -c--a-w C:\WINDOWS\system32\dllcache\mshta.exe
- 2004-08-04 12:00:00 3,003,392 -c--a-w C:\WINDOWS\system32\dllcache\mshtml.dll
+ 2007-10-31 13:12:30 3,590,656 -c----w C:\WINDOWS\system32\dllcache\mshtml.dll
- 2004-08-04 12:00:00 448,512 -c--a-w C:\WINDOWS\system32\dllcache\mshtmled.dll
+ 2007-10-10 23:55:58 478,208 -c----w C:\WINDOWS\system32\dllcache\mshtmled.dll
- 2004-08-04 12:00:00 56,832 -c--a-w C:\WINDOWS\system32\dllcache\mshtmler.dll
+ 2007-08-14 02:01:12 48,128 -c--a-w C:\WINDOWS\system32\dllcache\mshtmler.dll
- 2005-05-03 20:58:36 2,890,240 -c--a-w C:\WINDOWS\system32\dllcache\msi.dll
+ 2007-04-18 16:12:23 2,854,400 -c--a-w C:\WINDOWS\system32\dllcache\msi.dll
- 2004-08-04 12:00:00 102,400 -c--a-w C:\WINDOWS\system32\dllcache\msjro.dll
+ 2006-12-26 13:07:23 102,400 -c--a-w C:\WINDOWS\system32\dllcache\msjro.dll
- 2004-08-04 12:00:00 146,432 -c--a-w C:\WINDOWS\system32\dllcache\msls31.dll
+ 2007-08-14 02:54:10 156,160 -c--a-w C:\WINDOWS\system32\dllcache\msls31.dll
- 2004-08-04 12:00:00 1,311,232 -c--a-w C:\WINDOWS\system32\dllcache\msoe.dll
+ 2007-05-16 15:12:08 1,314,816 -c--a-w C:\WINDOWS\system32\dllcache\msoe.dll
- 2004-08-04 12:00:00 146,432 -c--a-w C:\WINDOWS\system32\dllcache\msrating.dll
+ 2007-10-10 23:55:58 193,024 -c----w C:\WINDOWS\system32\dllcache\msrating.dll
- 2004-08-04 12:00:00 530,432 -c--a-w C:\WINDOWS\system32\dllcache\mstime.dll
+ 2007-10-10 23:55:59 671,232 -c----w C:\WINDOWS\system32\dllcache\mstime.dll
- 2004-08-04 12:00:00 1,236,480 -c--a-w C:\WINDOWS\system32\dllcache\msxml3.dll
+ 2007-06-26 06:08:16 1,104,896 -c--a-w C:\WINDOWS\system32\dllcache\msxml3.dll
- 2004-08-04 12:00:00 66,560 -c--a-w C:\WINDOWS\system32\dllcache\mtxclu.dll
+ 2006-03-01 19:42:42 66,560 -c--a-w C:\WINDOWS\system32\dllcache\mtxclu.dll
- 2004-08-04 12:00:00 90,112 -c--a-w C:\WINDOWS\system32\dllcache\mtxoci.dll
+ 2006-03-01 19:42:42 91,136 -c--a-w C:\WINDOWS\system32\dllcache\mtxoci.dll
- 2004-08-04 12:00:00 332,288 -c--a-w C:\WINDOWS\system32\dllcache\netapi32.dll
+ 2006-08-17 12:28:27 332,288 -c--a-w C:\WINDOWS\system32\dllcache\netapi32.dll
- 2004-08-04 12:00:00 198,144 -c--a-w C:\WINDOWS\system32\dllcache\netman.dll
+ 2005-08-22 18:29:46 197,632 -c--a-w C:\WINDOWS\system32\dllcache\netman.dll
- 2004-08-04 12:00:00 364,544 -c--a-w C:\WINDOWS\system32\dllcache\npdsplay.dll
+ 2005-11-30 00:27:06 364,544 -c--a-w C:\WINDOWS\system32\dllcache\npdsplay.dll
- 2004-08-04 12:00:00 574,592 -c--a-w C:\WINDOWS\system32\dllcache\ntfs.sys
+ 2007-02-09 11:10:35 574,464 -c--a-w C:\WINDOWS\system32\dllcache\ntfs.sys
+ 2007-02-28 09:08:48 2,136,064 -c----w C:\WINDOWS\system32\dllcache\ntkrnlmp.exe
+ 2007-02-28 08:38:55 2,057,600 -c----w C:\WINDOWS\system32\dllcache\ntkrnlpa.exe
+ 2007-02-28 08:38:57 2,015,744 -c----w C:\WINDOWS\system32\dllcache\ntkrpamp.exe
+ 2007-02-28 09:10:57 2,180,352 -c----w C:\WINDOWS\system32\dllcache\ntoskrnl.exe
- 2004-08-04 12:00:00 144,384 -c--a-w C:\WINDOWS\system32\dllcache\nwprovau.dll
+ 2006-10-13 12:35:12 142,336 -c--a-w C:\WINDOWS\system32\dllcache\nwprovau.dll
- 2004-08-04 12:00:00 96,256 -c--a-w C:\WINDOWS\system32\dllcache\occache.dll
+ 2007-10-10 23:55:59 102,400 -c----w C:\WINDOWS\system32\dllcache\occache.dll
- 2004-08-04 12:00:00 1,281,536 -c--a-w C:\WINDOWS\system32\dllcache\ole32.dll
+ 2005-07-26 04:39:48 1,285,120 -c--a-w C:\WINDOWS\system32\dllcache\ole32.dll
- 2004-08-04 12:00:00 553,472 -c--a-w C:\WINDOWS\system32\dllcache\oleaut32.dll
+ 2007-05-17 11:28:05 549,376 -c--a-w C:\WINDOWS\system32\dllcache\oleaut32.dll
- 2004-08-04 12:00:00 68,608 -c--a-w C:\WINDOWS\system32\dllcache\olecli32.dll
+ 2005-07-26 04:39:48 74,752 -c--a-w C:\WINDOWS\system32\dllcache\olecli32.dll
- 2004-08-04 12:00:00 34,304 -c--a-w C:\WINDOWS\system32\dllcache\olecnv32.dll
+ 2005-07-26 04:39:49 37,888 -c--a-w C:\WINDOWS\system32\dllcache\olecnv32.dll
- 2004-08-04 12:00:00 117,760 -c--a-w C:\WINDOWS\system32\dllcache\oledlg.dll
+ 2006-10-16 16:15:00 122,880 -c--a-w C:\WINDOWS\system32\dllcache\oledlg.dll
- 2004-08-04 12:00:00 39,424 -c--a-w C:\WINDOWS\system32\dllcache\pngfilt.dll
+ 2007-08-14 02:36:12 44,544 -c--a-w C:\WINDOWS\system32\dllcache\pngfilt.dll
- 2004-08-04 12:00:00 1,287,680 -c--a-w C:\WINDOWS\system32\dllcache\quartz.dll
+ 2007-10-29 22:43:03 1,287,680 -c--a-w C:\WINDOWS\system32\dllcache\quartz.dll
- 2004-08-04 12:00:00 1,435,648 -c--a-w C:\WINDOWS\system32\dllcache\query.dll
+ 2006-06-22 05:06:30 1,435,648 -c--a-w C:\WINDOWS\system32\dllcache\query.dll
- 2004-08-04 12:00:00 8,192 -c--a-w C:\WINDOWS\system32\dllcache\rasadhlp.dll
+ 2006-06-26 17:37:10 8,192 -c--a-w C:\WINDOWS\system32\dllcache\rasadhlp.dll
- 2004-08-04 12:00:00 174,080 -c--a-w C:\WINDOWS\system32\dllcache\rasmans.dll
+ 2006-06-22 10:47:18 181,248 -c--a-w C:\WINDOWS\system32\dllcache\rasmans.dll
- 2004-08-04 12:00:00 176,512 -c--a-w C:\WINDOWS\system32\dllcache\rdbss.sys
+ 2006-05-05 09:47:57 174,592 -c--a-w C:\WINDOWS\system32\dllcache\rdbss.sys
- 2004-08-04 12:00:00 139,400 -c--a-w C:\WINDOWS\system32\dllcache\rdpwd.sys
+ 2005-06-10 04:09:46 139,528 -c--a-w C:\WINDOWS\system32\dllcache\rdpwd.sys
- 2004-08-04 12:00:00 431,616 -c--a-w C:\WINDOWS\system32\dllcache\riched20.dll
+ 2006-11-27 14:54:06 433,152 -c--a-w C:\WINDOWS\system32\dllcache\riched20.dll
- 2004-08-04 12:00:00 200,064 -c--a-w C:\WINDOWS\system32\dllcache\rmcast.sys
+ 2006-07-13 08:48:58 202,240 -c--a-w C:\WINDOWS\system32\dllcache\rmcast.sys
- 2004-08-04 12:00:00 581,120 -c--a-w C:\WINDOWS\system32\dllcache\rpcrt4.dll
+ 2007-07-09 13:09:42 584,192 -c--a-w C:\WINDOWS\system32\dllcache\rpcrt4.dll
- 2004-08-04 12:00:00 395,776 -c--a-w C:\WINDOWS\system32\dllcache\rpcss.dll
+ 2005-07-26 04:39:49 397,824 -c--a-w C:\WINDOWS\system32\dllcache\rpcss.dll
- 2004-08-04 12:00:00 144,896 -c--a-w C:\WINDOWS\system32\dllcache\schannel.dll
+ 2007-04-25 14:21:15 144,896 -c--a-w C:\WINDOWS\system32\dllcache\schannel.dll
- 2004-08-04 12:00:00 1,483,264 -c--a-w C:\WINDOWS\system32\dllcache\shdocvw.dll
+ 2007-10-11 06:13:45 1,494,528 -c--a-w C:\WINDOWS\system32\dllcache\shdocvw.dll
- 2004-08-04 12:00:00 8,384,000 -c--a-w C:\WINDOWS\system32\dllcache\shell32.dll
+ 2007-10-26 03:34:01 8,460,288 -c--a-w C:\WINDOWS\system32\dllcache\shell32.dll
- 2004-08-04 12:00:00 473,600 -c--a-w C:\WINDOWS\system32\dllcache\shlwapi.dll
+ 2007-10-11 06:13:45 474,112 -c--a-w C:\WINDOWS\system32\dllcache\shlwapi.dll
- 2004-08-04 12:00:00 134,656 -c--a-w C:\WINDOWS\system32\dllcache\shsvcs.dll
+ 2006-12-19 21:52:18 134,656 -c--a-w C:\WINDOWS\system32\dllcache\shsvcs.dll
- 2004-08-04 07:07:48 6,400 -c--a-w C:\WINDOWS\system32\dllcache\splitter.sys
+ 2006-06-14 08:47:46 6,400 -c--a-w C:\WINDOWS\system32\dllcache\splitter.sys
- 2004-08-04 12:00:00 336,256 -c--a-w C:\WINDOWS\system32\dllcache\srv.sys
+ 2006-08-14 10:34:41 332,928 -c--a-w C:\WINDOWS\system32\dllcache\srv.sys
- 2004-08-04 12:00:00 96,768 -c--a-w C:\WINDOWS\system32\dllcache\srvsvc.dll
+ 2004-12-07 19:32:34 96,768 -c--a-w C:\WINDOWS\system32\dllcache\srvsvc.dll
- 2004-08-04 12:00:00 246,302 -c--a-w C:\WINDOWS\system32\dllcache\strmdll.dll
+ 2006-08-21 17:52:08 246,814 -c--a-w C:\WINDOWS\system32\dllcache\strmdll.dll
- 2004-08-04 12:00:00 713,216 -c--a-w C:\WINDOWS\system32\dllcache\sxs.dll
+ 2006-10-19 13:56:32 713,216 -c--a-w C:\WINDOWS\system32\dllcache\sxs.dll
- 2004-08-04 12:00:00 246,272 -c--a-w C:\WINDOWS\system32\dllcache\tapisrv.dll
+ 2005-07-08 16:27:56 249,344 -c--a-w C:\WINDOWS\system32\dllcache\tapisrv.dll
- 2004-08-04 12:00:00 359,040 -c--a-w C:\WINDOWS\system32\dllcache\tcpip.sys
+ 2006-04-20 11:51:50 359,808 -c--a-w C:\WINDOWS\system32\dllcache\tcpip.sys
- 2004-08-04 12:00:00 223,616 -c--a-w C:\WINDOWS\system32\dllcache\tcpip6.sys
+ 2006-08-16 09:37:30 225,664 -c--a-w C:\WINDOWS\system32\dllcache\tcpip6.sys
- 2004-08-04 12:00:00 75,264 -c--a-w C:\WINDOWS\system32\dllcache\telnet.exe
+ 2005-05-10 23:45:48 75,776 -c--a-w C:\WINDOWS\system32\dllcache\telnet.exe
- 2004-08-04 12:00:00 101,376 -c--a-w C:\WINDOWS\system32\dllcache\txflog.dll
+ 2005-07-26 04:39:49 101,376 -c--a-w C:\WINDOWS\system32\dllcache\txflog.dll
- 2004-08-04 12:00:00 118,272 -c--a-w C:\WINDOWS\system32\dllcache\umpnpmgr.dll
+ 2005-08-23 03:35:42 123,392 -c--a-w C:\WINDOWS\system32\dllcache\umpnpmgr.dll
- 2006-11-02 02:31:34 315,904 -c--a-w C:\WINDOWS\system32\dllcache\unregmp2.exe
+ 2007-06-27 06:10:26 317,440 -c--a-w C:\WINDOWS\system32\dllcache\unregmp2.exe
- 2004-08-04 12:00:00 185,344 -c--a-w C:\WINDOWS\system32\dllcache\upnphost.dll
+ 2007-02-05 20:17:02 185,344 -c--a-w C:\WINDOWS\system32\dllcache\upnphost.dll
- 2004-08-04 12:00:00 37,888 -c--a-w C:\WINDOWS\system32\dllcache\url.dll
+ 2007-10-10 23:55:59 105,984 -c----w C:\WINDOWS\system32\dllcache\url.dll
- 2004-08-04 12:00:00 601,088 -c--a-w C:\WINDOWS\system32\dllcache\urlmon.dll
+ 2007-10-10 23:56:00 1,159,680 -c----w C:\WINDOWS\system32\dllcache\urlmon.dll
- 2005-03-02 18:09:30 577,024 -c--a-w C:\WINDOWS\system32\dllcache\user32.dll
+ 2007-03-08 15:36:28 577,536 -c--a-w C:\WINDOWS\system32\dllcache\user32.dll
- 2004-08-04 12:00:00 417,792 -c--a-w C:\WINDOWS\system32\dllcache\vbscript.dll
+ 2007-08-14 02:54:10 413,696 -c--a-w C:\WINDOWS\system32\dllcache\vbscript.dll
- 2004-08-04 12:00:00 848,384 -c--a-w C:\WINDOWS\system32\dllcache\vgx.dll
+ 2007-08-14 02:54:10 765,952 -c--a-w C:\WINDOWS\system32\dllcache\VGX.dll
- 2004-08-04 12:00:00 504,832 -c--a-w C:\WINDOWS\system32\dllcache\wab32.dll
+ 2007-05-16 15:12:12 510,976 -c--a-w C:\WINDOWS\system32\dllcache\wab32.dll
- 2004-08-04 12:00:00 84,992 -c--a-w C:\WINDOWS\system32\dllcache\wabimp.dll
+ 2007-05-16 15:12:15 85,504 -c--a-w C:\WINDOWS\system32\dllcache\wabimp.dll
- 2004-08-04 12:00:00 49,152 -c--a-w C:\WINDOWS\system32\dllcache\wdigest.dll
+ 2006-03-24 04:37:50 49,152 -c--a-w C:\WINDOWS\system32\dllcache\wdigest.dll
- 2004-08-04 07:15:06 82,944 -c--a-w C:\WINDOWS\system32\dllcache\wdmaud.sys
+ 2006-06-14 09:00:45 82,944 -c--a-w C:\WINDOWS\system32\dllcache\wdmaud.sys
- 2004-08-04 12:00:00 276,480 -c--a-w C:\WINDOWS\system32\dllcache\webcheck.dll
+ 2007-10-10 23:56:00 232,960 -c----w C:\WINDOWS\system32\dllcache\webcheck.dll
- 2004-08-04 12:00:00 67,584 -c--a-w C:\WINDOWS\system32\dllcache\webclnt.dll
+ 2006-01-04 03:35:05 68,096 -c--a-w C:\WINDOWS\system32\dllcache\webclnt.dll
- 2004-08-04 12:00:00 333,312 -c--a-w C:\WINDOWS\system32\dllcache\wiaservc.dll
+ 2006-12-19 18:16:47 333,824 -c--a-w C:\WINDOWS\system32\dllcache\wiaservc.dll
- 2005-03-02 01:06:57 1,836,288 -c--a-w C:\WINDOWS\system32\dllcache\win32k.sys
+ 2007-03-08 13:47:48 1,843,584 -c--a-w C:\WINDOWS\system32\dllcache\win32k.sys
- 2004-08-04 12:00:00 656,384 -c--a-w C:\WINDOWS\system32\dllcache\wininet.dll
+ 2007-10-10 23:56:00 824,832 -c----w C:\WINDOWS\system32\dllcache\wininet.dll
- 2005-03-02 18:09:30 291,328 -c--a-w C:\WINDOWS\system32\dllcache\winsrv.dll
+ 2007-03-17 13:43:01 292,864 -c--a-w C:\WINDOWS\system32\dllcache\winsrv.dll
- 2004-08-04 12:00:00 132,096 -c--a-w C:\WINDOWS\system32\dllcache\wkssvc.dll
+ 2006-08-17 12:28:27 132,096 -c--a-w C:\WINDOWS\system32\dllcache\wkssvc.dll
- 2006-10-19 05:47:18 222,208 -c--a-w C:\WINDOWS\system32\dllcache\WMASF.dll
+ 2007-10-28 01:40:30 222,720 -c--a-w C:\WINDOWS\system32\dllcache\wmasf.dll
- 2004-08-04 12:00:00 11,776 -c--a-w C:\WINDOWS\system32\dllcache\xolehlp.dll
+ 2006-03-01 19:42:42 11,776 -c--a-w C:\WINDOWS\system32\dllcache\xolehlp.dll
- 2004-08-04 12:00:00 148,480 ----a-w C:\WINDOWS\system32\dnsapi.dll
+ 2006-06-26 17:37:10 148,480 ----a-w C:\WINDOWS\system32\dnsapi.dll
- 2004-08-04 06:39:38 142,464 ----a-w C:\WINDOWS\system32\drivers\aec.sys
+ 2006-02-15 00:22:26 142,464 ----a-w C:\WINDOWS\system32\drivers\aec.sys
- 2004-08-04 12:00:00 263,040 ----a-w C:\WINDOWS\system32\drivers\http.sys
+ 2006-03-17 00:33:10 262,784 ----a-w C:\WINDOWS\system32\drivers\http.sys
- 2004-08-04 07:07:50 171,776 ----a-w C:\WINDOWS\system32\drivers\kmixer.sys
+ 2006-06-14 08:47:45 172,416 ----a-w C:\WINDOWS\system32\drivers\kmixer.sys
- 2004-08-04 12:00:00 451,456 ----a-w C:\WINDOWS\system32\drivers\mrxsmb.sys
+ 2006-05-05 09:41:45 453,120 ----a-w C:\WINDOWS\system32\drivers\mrxsmb.sys
- 2004-08-04 12:00:00 574,592 ----a-w C:\WINDOWS\system32\drivers\ntfs.sys
+ 2007-02-09 11:10:35 574,464 ----a-w C:\WINDOWS\system32\drivers\ntfs.sys
- 2004-08-04 12:00:00 176,512 ----a-w C:\WINDOWS\system32\drivers\rdbss.sys
+ 2006-05-05 09:47:57 174,592 ----a-w C:\WINDOWS\system32\drivers\rdbss.sys
- 2004-08-04 12:00:00 139,400 ----a-w C:\WINDOWS\system32\drivers\rdpwd.sys
+ 2005-06-10 04:09:46 139,528 ----a-w C:\WINDOWS\system32\drivers\rdpwd.sys
- 2004-08-04 12:00:00 200,064 ----a-w C:\WINDOWS\system32\drivers\RMCast.sys
+ 2006-07-13 08:48:58 202,240 ----a-w C:\WINDOWS\system32\drivers\rmcast.sys
- 2004-08-04 07:07:48 6,400 ----a-w C:\WINDOWS\system32\drivers\splitter.sys
+ 2006-06-14 08:47:46 6,400 ----a-w C:\WINDOWS\system32\drivers\splitter.sys
- 2004-08-04 12:00:00 336,256 ----a-w C:\WINDOWS\system32\drivers\srv.sys
+ 2006-08-14 10:34:41 332,928 ----a-w C:\WINDOWS\system32\drivers\srv.sys
- 2004-08-04 12:00:00 359,040 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys
+ 2006-04-20 11:51:50 359,808 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys
- 2004-08-04 12:00:00 223,616 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys
+ 2006-08-16 09:37:30 225,664 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys
- 2004-08-04 07:15:06 82,944 ----a-w C:\WINDOWS\system32\drivers\wdmaud.sys
+ 2006-06-14 09:00:45 82,944 ----a-w C:\WINDOWS\system32\drivers\wdmaud.sys
- 2004-08-04 12:00:00 498,205 ----a-w C:\WINDOWS\system32\dxmasf.dll
+ 2006-08-22 12:05:26 498,742 ----a-w C:\WINDOWS\system32\dxmasf.dll
- 2004-08-04 12:00:00 357,888 ----a-w C:\WINDOWS\system32\dxtmsft.dll
+ 2007-08-14 02:35:46 346,624 ----a-w C:\WINDOWS\system32\dxtmsft.dll
- 2004-08-04 12:00:00 201,728 ----a-w C:\WINDOWS\system32\dxtrans.dll
+ 2007-10-10 23:55:51 214,528 ------w C:\WINDOWS\system32\dxtrans.dll
- 2004-08-04 12:00:00 243,200 ----a-w C:\WINDOWS\system32\es.dll
+ 2005-07-26 04:39:45 243,200 ----a-w C:\WINDOWS\system32\es.dll
- 2004-08-04 12:00:00 1,082,368 ----a-w C:\WINDOWS\system32\esent.dll
+ 2005-10-20 22:20:03 1,082,368 ----a-w C:\WINDOWS\system32\esent.dll
- 2004-08-04 12:00:00 55,808 ----a-w C:\WINDOWS\system32\extmgr.dll
+ 2007-10-10 23:55:51 132,608 ------w C:\WINDOWS\system32\extmgr.dll
- 2007-12-17 23:14:18 90,296 ----a-w C:\WINDOWS\system32\FNTCACHE.DAT
+ 2007-12-18 02:09:46 90,296 ----a-w C:\WINDOWS\system32\FNTCACHE.DAT
- 2004-08-04 12:00:00 278,016 ----a-w C:\WINDOWS\system32\gdi32.dll
+ 2007-06-19 13:31:19 282,112 ----a-w C:\WINDOWS\system32\gdi32.dll
- 2004-08-04 12:00:00 38,912 ----a-w C:\WINDOWS\system32\hhsetup.dll
+ 2005-05-27 02:04:27 41,472 ----a-w C:\WINDOWS\system32\hhsetup.dll
- 2004-08-04 12:00:00 77,850 ----a-w C:\WINDOWS\system32\hlink.dll
+ 2006-07-21 08:24:43 72,704 ----a-w C:\WINDOWS\system32\hlink.dll
- 2004-08-04 12:00:00 345,088 ----a-w C:\WINDOWS\system32\hypertrm.dll
+ 2004-11-17 17:41:24 347,136 ----a-w C:\WINDOWS\system32\hypertrm.dll
+ 2007-10-10 23:55:51 63,488 ----a-w C:\WINDOWS\system32\icardie.dll
- 2004-08-04 12:00:00 253,952 ----a-w C:\WINDOWS\system32\icm32.dll
+ 2005-06-29 01:46:00 254,976 ----a-w C:\WINDOWS\system32\icm32.dll
+ 2006-06-29 16:05:44 26,112 ------w C:\WINDOWS\system32\idndl.dll
- 2004-08-04 12:00:00 34,304 ----a-w C:\WINDOWS\system32\ie4uinit.exe
+ 2007-10-10 10:59:40 70,656 ------w C:\WINDOWS\system32\ie4uinit.exe
- 2004-08-04 12:00:00 139,264 ----a-w C:\WINDOWS\system32\ieakeng.dll
+ 2007-10-10 23:55:51 153,088 ------w C:\WINDOWS\system32\ieakeng.dll
- 2004-08-04 12:00:00 216,576 ----a-w C:\WINDOWS\system32\ieaksie.dll
+ 2007-10-10 23:55:51 230,400 ------w C:\WINDOWS\system32\ieaksie.dll
- 2004-08-04 12:00:00 221,184 ----a-w C:\WINDOWS\system32\ieakui.dll
+ 2007-10-10 05:46:55 161,792 ------w C:\WINDOWS\system32\ieakui.dll
+ 2007-07-01 03:31:33 2,455,488 ----a-w C:\WINDOWS\system32\ieapfltr.dat
+ 2007-10-10 23:55:52 383,488 ----a-w C:\WINDOWS\system32\ieapfltr.dll
- 2004-08-04 12:00:00 323,584 ----a-w C:\WINDOWS\system32\iedkcs32.dll
+ 2007-10-10 23:55:52 384,512 ------w C:\WINDOWS\system32\iedkcs32.dll
- 2004-08-04 12:00:00 81,920 ----a-w C:\WINDOWS\system32\ieencode.dll
+ 2007-08-14 02:45:18 78,336 ----a-w C:\WINDOWS\system32\ieencode.dll
+ 2007-10-10 23:55:54 6,065,664 ----a-w C:\WINDOWS\system32\ieframe.dll
- 2004-08-04 12:00:00 249,344 ----a-w C:\WINDOWS\system32\iepeers.dll
+ 2007-08-14 02:54:10 191,488 ----a-w C:\WINDOWS\system32\iepeers.dll
- 2004-08-04 12:00:00 48,640 ----a-w C:\WINDOWS\system32\iernonce.dll
+ 2007-10-10 23:55:55 44,544 ------w C:\WINDOWS\system32\iernonce.dll
+ 2007-10-10 23:55:55 267,776 ----a-w C:\WINDOWS\system32\iertutil.dll
- 2004-08-04 12:00:00 62,976 ----a-w C:\WINDOWS\system32\iesetup.dll
+ 2007-08-14 02:39:12 55,296 ----a-w C:\WINDOWS\system32\iesetup.dll
+ 2007-10-10 10:59:40 13,824 ----a-w C:\WINDOWS\system32\ieudinit.exe
+ 2007-08-14 02:54:10 180,736 ------w C:\WINDOWS\system32\ieui.dll
- 2004-08-04 12:00:00 35,840 ----a-w C:\WINDOWS\system32\imgutil.dll
+ 2007-08-14 02:36:06 36,352 ----a-w C:\WINDOWS\system32\imgutil.dll
- 2004-08-04 12:00:00 678,400 ----a-w C:\WINDOWS\system32\inetcomm.dll
+ 2007-08-21 06:15:44 683,520 ----a-w C:\WINDOWS\system32\inetcomm.dll
- 2004-08-04 12:00:00 96,256 ----a-w C:\WINDOWS\system32\inseng.dll
+ 2007-08-14 02:39:02 92,672 ----a-w C:\WINDOWS\system32\inseng.dll
- 2004-08-04 12:00:00 94,720 ----a-w C:\WINDOWS\system32\iphlpapi.dll
+ 2006-05-19 12:59:41 94,720 ----a-w C:\WINDOWS\system32\iphlpapi.dll
- 2004-08-04 12:00:00 143,872 ----a-w C:\WINDOWS\system32\itircl.dll
+ 2005-05-27 02:04:27 155,136 ----a-w C:\WINDOWS\system32\itircl.dll
- 2004-08-04 12:00:00 134,144 ----a-w C:\WINDOWS\system32\itss.dll
+ 2005-05-27 02:04:27 137,216 ----a-w C:\WINDOWS\system32\itss.dll
- 2004-08-04 12:00:00 144,896 ----a-w C:\WINDOWS\system32\jgdw400.dll
+ 2006-06-01 18:47:07 163,840 ----a-w C:\WINDOWS\system32\jgdw400.dll
- 2004-08-04 12:00:00 42,496 ----a-w C:\WINDOWS\system32\jgpl400.dll
+ 2006-06-01 18:47:07 27,648 ----a-w C:\WINDOWS\system32\jgpl400.dll
- 2004-08-04 12:00:00 450,560 ----a-w C:\WINDOWS\system32\jscript.dll
+ 2007-08-14 02:38:04 491,520 ----a-w C:\WINDOWS\system32\jscript.dll
- 2004-08-04 12:00:00 15,872 ----a-w C:\WINDOWS\system32\jsproxy.dll
+ 2007-10-10 23:55:56 27,648 ------w C:\WINDOWS\system32\jsproxy.dll
- 2004-08-04 12:00:00 294,400 ----a-w C:\WINDOWS\system32\kerberos.dll
+ 2005-06-15 17:49:30 295,936 ----a-w C:\WINDOWS\system32\kerberos.dll
- 2004-08-04 12:00:00 983,552 ----a-w C:\WINDOWS\system32\kernel32.dll
+ 2007-04-16 15:52:53 984,576 ----a-w C:\WINDOWS\system32\kernel32.dll
- 2004-08-04 12:00:00 22,016 ----a-w C:\WINDOWS\system32\licmgr10.dll
+ 2007-08-14 02:44:18 40,960 ----a-w C:\WINDOWS\system32\licmgr10.dll
- 2004-08-04 12:00:00 18,944 ----a-w C:\WINDOWS\system32\linkinfo.dll
+ 2005-09-01 01:41:53 19,968 ----a-w C:\WINDOWS\system32\linkinfo.dll
- 2004-08-04 12:00:00 721,920 ----a-w C:\WINDOWS\system32\lsasrv.dll
+ 2006-08-17 12:28:27 721,920 ----a-w C:\WINDOWS\system32\lsasrv.dll
- 2004-08-04 12:00:00 39,936 ----a-w C:\WINDOWS\system32\mf3216.dll
+ 2007-03-08 15:36:28 40,960 ----a-w C:\WINDOWS\system32\mf3216.dll
- 2004-08-04 12:00:00 924,432 ----a-w C:\WINDOWS\system32\mfc40u.dll
+ 2006-11-01 19:17:45 927,504 ----a-w C:\WINDOWS\system32\mfc40u.dll
- 2004-08-04 12:00:00 1,024,000 ----a-w C:\WINDOWS\system32\mfc42u.dll
+ 2006-10-14 08:13:25 981,760 ----a-w C:\WINDOWS\system32\mfc42u.dll
+ 2007-12-02 23:00:06 18,684,536 ----a-w C:\WINDOWS\system32\MRT.exe
- 2004-08-04 12:00:00 73,728 ----a-w C:\WINDOWS\system32\mscms.dll
+ 2005-06-29 01:46:00 74,240 ----a-w C:\WINDOWS\system32\mscms.dll
- 2004-08-04 12:00:00 425,472 ----a-w C:\WINDOWS\system32\msdtcprx.dll
+ 2006-03-01 19:42:42 426,496 ----a-w C:\WINDOWS\system32\msdtcprx.dll
- 2004-08-04 12:00:00 949,248 ----a-w C:\WINDOWS\system32\msdtctm.dll
+ 2006-03-01 19:42:42 956,416 ----a-w C:\WINDOWS\system32\msdtctm.dll
- 2004-08-04 12:00:00 161,280 ----a-w C:\WINDOWS\system32\msdtcuiu.dll
+ 2006-03-01 19:42:42 161,280 ----a-w C:\WINDOWS\system32\msdtcuiu.dll
+ 2007-10-10 23:55:56 459,264 ----a-w C:\WINDOWS\system32\msfeeds.dll
+ 2007-10-10 23:55:56 52,224 ----a-w C:\WINDOWS\system32\msfeedsbs.dll
+ 2007-08-14 02:36:40 12,288 ------w C:\WINDOWS\system32\msfeedssync.exe
- 2004-08-04 12:00:00 537,088 ----a-w C:\WINDOWS\system32\msftedit.dll
+ 2006-11-27 14:54:06 539,136 ----a-w C:\WINDOWS\system32\msftedit.dll
- 2004-08-04 12:00:00 29,184 ----a-w C:\WINDOWS\system32\mshta.exe
+ 2007-08-14 02:32:30 45,568 ----a-w C:\WINDOWS\system32\mshta.exe
- 2004-08-04 12:00:00 3,003,392 ----a-w C:\WINDOWS\system32\mshtml.dll
+ 2007-10-31 13:12:30 3,590,656 ----a-w C:\WINDOWS\system32\mshtml.dll
- 2004-08-04 12:00:00 448,512 ----a-w C:\WINDOWS\system32\mshtmled.dll
+ 2007-10-10 23:55:58 478,208 ------w C:\WINDOWS\system32\mshtmled.dll
- 2004-08-04 12:00:00 56,832 ----a-w C:\WINDOWS\system32\mshtmler.dll
+ 2007-08-14 02:01:12 48,128 ----a-w C:\WINDOWS\system32\mshtmler.dll
- 2005-05-03 20:58:36 2,890,240 ----a-w C:\WINDOWS\system32\msi.dll
+ 2007-04-18 16:12:23 2,854,400 ----a-w C:\WINDOWS\system32\msi.dll
- 2004-08-04 12:00:00 146,432 ----a-w C:\WINDOWS\system32\msls31.dll
+ 2007-08-14 02:54:10 156,160 ----a-w C:\WINDOWS\system32\msls31.dll
- 2004-08-04 12:00:00 146,432 ----a-w C:\WINDOWS\system32\msrating.dll
+ 2007-10-10 23:55:58 193,024 ------w C:\WINDOWS\system32\msrating.dll
- 2004-08-04 12:00:00 530,432 ----a-w C:\WINDOWS\system32\mstime.dll
+ 2007-10-10 23:55:59 671,232 ------w C:\WINDOWS\system32\mstime.dll
- 2004-08-04 12:00:00 1,236,480 ----a-w C:\WINDOWS\system32\msxml3.dll
+ 2007-06-26 06:08:16 1,104,896 ----a-w C:\WINDOWS\system32\msxml3.dll
- 2004-08-04 12:00:00 66,560 ----a-w C:\WINDOWS\system32\mtxclu.dll
+ 2006-03-01 19:42:42 66,560 ----a-w C:\WINDOWS\system32\mtxclu.dll
- 2004-08-04 12:00:00 90,112 ----a-w C:\WINDOWS\system32\mtxoci.dll
+ 2006-03-01 19:42:42 91,136 ----a-w C:\WINDOWS\system32\mtxoci.dll
- 2004-08-04 12:00:00 332,288 ----a-w C:\WINDOWS\system32\netapi32.dll
+ 2006-08-17 12:28:27 332,288 ----a-w C:\WINDOWS\system32\netapi32.dll
- 2004-08-04 12:00:00 198,144 ----a-w C:\WINDOWS\system32\netman.dll
+ 2005-08-22 18:29:46 197,632 ----a-w C:\WINDOWS\system32\netman.dll
+ 2006-06-29 01:59:26 24,576 ------w C:\WINDOWS\system32\nlsdl.dll
+ 2006-06-29 16:05:44 23,552 ------w C:\WINDOWS\system32\normaliz.dll
- 2005-03-02 00:34:40 2,056,832 ----a-w C:\WINDOWS\system32\ntkrnlpa.exe
+ 2007-02-28 08:38:55 2,057,600 ----a-w C:\WINDOWS\system32\ntkrnlpa.exe
- 2005-03-02 00:59:53 2,179,328 ----a-w C:\WINDOWS\system32\ntoskrnl.exe
+ 2007-02-28 09:10:57 2,180,352 ----a-w C:\WINDOWS\system32\ntoskrnl.exe
- 2004-08-04 12:00:00 144,384 ----a-w C:\WINDOWS\system32\nwprovau.dll
+ 2006-10-13 12:35:12 142,336 ----a-w C:\WINDOWS\system32\nwprovau.dll
- 2004-08-04 12:00:00 96,256 ----a-w C:\WINDOWS\system32\occache.dll
+ 2007-10-10 23:55:59 102,400 ------w C:\WINDOWS\system32\occache.dll
- 2004-08-04 12:00:00 1,281,536 ----a-w C:\WINDOWS\system32\ole32.dll
+ 2005-07-26 04:39:48 1,285,120 ----a-w C:\WINDOWS\system32\ole32.dll
- 2004-08-04 12:00:00 553,472 ----a-w C:\WINDOWS\system32\oleaut32.dll
+ 2007-05-17 11:28:05 549,376 ----a-w C:\WINDOWS\system32\oleaut32.dll
- 2004-08-04 12:00:00 68,608 ----a-w C:\WINDOWS\system32\olecli32.dll
+ 2005-07-26 04:39:48 74,752 ----a-w C:\WINDOWS\system32\olecli32.dll
- 2004-08-04 12:00:00 34,304 ----a-w C:\WINDOWS\system32\olecnv32.dll
+ 2005-07-26 04:39:49 37,888 ----a-w C:\WINDOWS\system32\olecnv32.dll
- 2004-08-04 12:00:00 117,760 ----a-w C:\WINDOWS\system32\oledlg.dll
+ 2006-10-16 16:15:00 122,880 ----a-w C:\WINDOWS\system32\oledlg.dll
- 2007-12-17 23:06:51 58,596 ----a-w C:\WINDOWS\system32\perfc009.dat
+ 2007-12-17 23:34:11 58,596 ----a-w C:\WINDOWS\system32\perfc009.dat
- 2007-12-17 23:06:51 392,296 ----a-w C:\WINDOWS\system32\perfh009.dat
+ 2007-12-17 23:34:11 392,296 ----a-w C:\WINDOWS\system32\perfh009.dat
- 2004-08-04 12:00:00 39,424 ----a-w C:\WINDOWS\system32\pngfilt.dll
+ 2007-08-14 02:36:12 44,544 ----a-w C:\WINDOWS\system32\pngfilt.dll
- 2004-08-04 12:00:00 1,435,648 ----a-w C:\WINDOWS\system32\query.dll
+ 2006-06-22 05:06:30 1,435,648 ----a-w C:\WINDOWS\system32\query.dll
- 2004-08-04 12:00:00 8,192 ----a-w C:\WINDOWS\system32\rasadhlp.dll
+ 2006-06-26 17:37:10 8,192 ----a-w C:\WINDOWS\system32\rasadhlp.dll
- 2004-08-04 12:00:00 174,080 ----a-w C:\WINDOWS\system32\rasmans.dll
+ 2006-06-22 10:47:18 181,248 ----a-w C:\WINDOWS\system32\rasmans.dll
+ 2007-10-17 04:11:30 499,712 ----a-w C:\WINDOWS\system32\ReinstallBackups\0000\DriverFiles\ati2cqag.dll
+ 2007-10-17 05:04:48 268,288 ----a-w C:\WINDOWS\system32\ReinstallBackups\0000\DriverFiles\ati2dvag.dll
+ 2007-10-17 04:55:58 43,520 ----a-w C:\WINDOWS\system32\ReinstallBackups\0000\DriverFiles\ati2edxx.dll
+ 2007-10-17 04:16:46 49,152 ----a-w C:\WINDOWS\system32\ReinstallBackups\0000\DriverFiles\ati2erec.dll
+ 2007-10-17 04:55:44 122,880 ----a-w C:\WINDOWS\system32\ReinstallBackups\0000\DriverFiles\ati2evxx.dll
+ 2007-10-17 04:54:20 495,616 ----a-w C:\WINDOWS\system32\ReinstallBackups\0000\DriverFiles\ati2evxx.exe
+ 2007-10-17 04:56:06 26,112 ----a-w C:\WINDOWS\system32\ReinstallBackups\0000\DriverFiles\Ati2mdxx.exe
+ 2007-10-17 05:40:04 2,642,944 ----a-w C:\WINDOWS\system32\ReinstallBackups\0000\DriverFiles\ati2mtag.sys
+ 2007-10-17 04:44:56 3,133,056 ----a-w C:\WINDOWS\system32\ReinstallBackups\0000\DriverFiles\ati3duag.dll
+ 2007-10-17 04:53:28 53,248 ----a-w C:\WINDOWS\system32\ReinstallBackups\0000\DriverFiles\ATIDDC.DLL
+ 2007-10-17 05:05:56 364,544 ----a-w C:\WINDOWS\system32\ReinstallBackups\0000\DriverFiles\ATIDEMGX.dll
+ 2007-10-17 04:56:12 307,200 ----a-w C:\WINDOWS\system32\ReinstallBackups\0000\DriverFiles\atiiiexx.dll
+ 2007-10-17 04:19:22 376,832 ----a-w C:\WINDOWS\system32\ReinstallBackups\0000\DriverFiles\atikvmag.dll
+ 2007-07-20 05:19:12 40,960 ----a-w C:\WINDOWS\system32\ReinstallBackups\0000\DriverFiles\ATIODCLI.exe
+ 2007-07-20 05:19:32 81,920 ----a-w C:\WINDOWS\system32\ReinstallBackups\0000\DriverFiles\ATIODE.exe
+ 2007-10-17 04:48:04 9,244,672 ----a-w C:\WINDOWS\system32\ReinstallBackups\0000\DriverFiles\atioglx2.dll
+ 2007-10-17 04:15:02 172,032 ----a-w C:\WINDOWS\system32\ReinstallBackups\0000\DriverFiles\atiok3x2.dll
+ 2007-10-17 04:56:28 143,360 ----a-w C:\WINDOWS\system32\ReinstallBackups\0000\DriverFiles\atipdlxx.dll
+ 2007-10-17 04:17:28 17,408 ----a-w C:\WINDOWS\system32\ReinstallBackups\0000\DriverFiles\atitvo32.dll
+ 2001-11-09 18:01:04 24,064 ----a-w C:\WINDOWS\system32\ReinstallBackups\0000\DriverFiles\ativcoxx.dll
+ 2007-10-17 04:33:40 1,601,664 ----a-w C:\WINDOWS\system32\ReinstallBackups\0000\DriverFiles\ativvaxx.dll
+ 2007-10-17 04:56:14 122,880 ----a-w C:\WINDOWS\system32\ReinstallBackups\0000\DriverFiles\Oemdspif.dll
- 2004-08-04 12:00:00 431,616 ----a-w C:\WINDOWS\system32\riched20.dll
+ 2006-11-27 14:54:06 433,152 ----a-w C:\WINDOWS\system32\riched20.dll
- 2004-08-04 12:00:00 581,120 ----a-w C:\WINDOWS\system32\rpcrt4.dll
+ 2007-07-09 13:09:42 584,192 ----a-w C:\WINDOWS\system32\rpcrt4.dll
- 2004-08-04 12:00:00 395,776 ----a-w C:\WINDOWS\system32\rpcss.dll
+ 2005-07-26 04:39:49 397,824 ----a-w C:\WINDOWS\system32\rpcss.dll
- 2004-08-04 12:00:00 144,896 ----a-w C:\WINDOWS\system32\schannel.dll
+ 2007-04-25 14:21:15 144,896 ----a-w C:\WINDOWS\system32\schannel.dll
- 2004-08-04 12:00:00 1,483,264 ----a-w C:\WINDOWS\system32\shdocvw.dll
+ 2007-10-11 06:13:45 1,494,528 ----a-w C:\WINDOWS\system32\shdocvw.dll
- 2004-08-04 12:00:00 8,384,000 ----a-w C:\WINDOWS\system32\shell32.dll
+ 2007-10-26 03:34:01 8,460,288 ----a-w C:\WINDOWS\system32\shell32.dll
- 2004-08-04 12:00:00 473,600 ----a-w C:\WINDOWS\system32\shlwapi.dll
+ 2007-10-11 06:13:45 474,112 ----a-w C:\WINDOWS\system32\shlwapi.dll
- 2004-08-04 12:00:00 134,656 ----a-w C:\WINDOWS\system32\shsvcs.dll
+ 2006-12-19 21:52:18 134,656 ----a-w C:\WINDOWS\system32\shsvcs.dll
- 2004-08-04 12:00:00 96,768 ----a-w C:\WINDOWS\system32\srvsvc.dll
+ 2004-12-07 19:32:34 96,768 ----a-w C:\WINDOWS\system32\srvsvc.dll
- 2004-08-04 12:00:00 246,302 ----a-w C:\WINDOWS\system32\strmdll.dll
+ 2006-08-21 17:52:08 246,814 ----a-w C:\WINDOWS\system32\strmdll.dll
- 2004-08-04 12:00:00 713,216 ----a-w C:\WINDOWS\system32\sxs.dll
+ 2006-10-19 13:56:32 713,216 ----a-w C:\WINDOWS\system32\sxs.dll
- 2004-08-04 12:00:00 246,272 ----a-w C:\WINDOWS\system32\tapisrv.dll
+ 2005-07-08 16:27:56 249,344 ----a-w C:\WINDOWS\system32\tapisrv.dll
- 2004-08-04 12:00:00 75,264 ----a-w C:\WINDOWS\system32\telnet.exe
+ 2005-05-10 23:45:48 75,776 ----a-w C:\WINDOWS\system32\telnet.exe
- 2004-08-04 12:00:00 101,376 ----a-w C:\WINDOWS\system32\txflog.dll
+ 2005-07-26 04:39:49 101,376 ----a-w C:\WINDOWS\system32\txflog.dll
+ 2007-11-13 11:31:11 60,416 ------w C:\WINDOWS\system32\tzchange.exe
- 2004-08-04 12:00:00 118,272 ----a-w C:\WINDOWS\system32\umpnpmgr.dll
+ 2005-08-23 03:35:42 123,392 ----a-w C:\WINDOWS\system32\umpnpmgr.dll
- 2004-08-04 12:00:00 185,344 ----a-w C:\WINDOWS\system32\upnphost.dll
+ 2007-02-05 20:17:02 185,344 ----a-w C:\WINDOWS\system32\upnphost.dll
- 2004-08-04 12:00:00 37,888 ----a-w C:\WINDOWS\system32\url.dll
+ 2007-10-10 23:55:59 105,984 ----a-w C:\WINDOWS\system32\url.dll
- 2004-08-04 12:00:00 601,088 ----a-w C:\WINDOWS\system32\urlmon.dll
+ 2007-10-10 23:56:00 1,159,680 ----a-w C:\WINDOWS\system32\urlmon.dll
- 2005-03-02 18:09:30 577,024 ----a-w C:\WINDOWS\system32\user32.dll
+ 2007-03-08 15:36:28 577,536 ----a-w C:\WINDOWS\system32\user32.dll
- 2004-08-04 12:00:00 417,792 ----a-w C:\WINDOWS\system32\vbscript.dll
+ 2007-08-14 02:54:10 413,696 ----a-w C:\WINDOWS\system32\vbscript.dll
+ 2006-03-17 00:38:01 28,672 ------w C:\WINDOWS\system32\verclsid.exe
- 2004-08-04 12:00:00 49,152 ----a-w C:\WINDOWS\system32\wdigest.dll
+ 2006-03-24 04:37:50 49,152 ----a-w C:\WINDOWS\system32\wdigest.dll
- 2004-08-04 12:00:00 276,480 ----a-w C:\WINDOWS\system32\webcheck.dll
+ 2007-10-10 23:56:00 232,960 ----a-w C:\WINDOWS\system32\webcheck.dll
- 2004-08-04 12:00:00 67,584 ----a-w C:\WINDOWS\system32\webclnt.dll
+ 2006-01-04 03:35:05 68,096 ----a-w C:\WINDOWS\system32\webclnt.dll
- 2004-08-04 12:00:00 333,312 ----a-w C:\WINDOWS\system32\wiaservc.dll
+ 2006-12-19 18:16:47 333,824 ----a-w C:\WINDOWS\system32\wiaservc.dll
- 2005-03-02 01:06:57 1,836,288 ----a-w C:\WINDOWS\system32\win32k.sys
+ 2007-03-08 13:47:48 1,843,584 ----a-w C:\WINDOWS\system32\win32k.sys
+ 2007-08-14 02:45:16 206,336 ------w C:\WINDOWS\system32\WinFXDocObj.exe
- 2004-08-04 12:00:00 656,384 ----a-w C:\WINDOWS\system32\wininet.dll
+ 2007-10-10 23:56:00 824,832 ----a-w C:\WINDOWS\system32\wininet.dll
- 2005-03-02 18:09:30 291,328 ----a-w C:\WINDOWS\system32\winsrv.dll
+ 2007-03-17 13:43:01 292,864 ----a-w C:\WINDOWS\system32\winsrv.dll
- 2004-08-04 12:00:00 132,096 ----a-w C:\WINDOWS\system32\wkssvc.dll
+ 2006-08-17 12:28:27 132,096 ----a-w C:\WINDOWS\system32\wkssvc.dll
+ 2006-07-14 15:51:51 121,856 ------w C:\WINDOWS\system32\xmllite.dll
- 2004-08-04 12:00:00 11,776 ----a-w C:\WINDOWS\system32\xolehlp.dll
+ 2006-03-01 19:42:42 11,776 ----a-w C:\WINDOWS\system32\xolehlp.dll
+ 2007-10-29 10:04:03 350,720 ----a-w C:\WINDOWS\system32\xpsp3res.dll
+ 2007-01-19 20:15:24 74,802 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\atl.dll
+ 2007-01-19 20:15:24 995,383 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\mfc42.dll
+ 2007-01-19 20:15:24 1,011,774 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\mfc42u.dll
+ 2007-01-19 20:15:24 401,462 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\msvcp60.dll
+ 2006-08-25 15:45:55 1,054,208 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Aim6"="" []
"Steam"="C:\Program Files\Steam\Steam.exe" [2007-12-12 03:58]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 04:00]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RaidTool"="C:\Program Files\VIA\RAID\raid_tool.exe" [2005-11-23 10:12]
"CTHelper"="CTHELPER.EXE" [2006-08-17 11:32 C:\WINDOWS\CTHELPER.EXE]
"CTxfiHlp"="CTXFIHLP.EXE" [2006-08-17 11:32 C:\WINDOWS\system32\CTXFIHLP.EXE]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11]
"a-squared"="C:\Program Files\a-squared Anti-Malware\a2guard.exe" [2007-12-17 16:36]
"avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2007-12-14 14:52]
"COMODO Firewall Pro"="C:\Program Files\Comodo\Firewall\CPF.exe" [2007-12-14 14:49]
"StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 11:35]

R0 viamraid;viamraid;C:\WINDOWS\system32\DRIVERS\viamraid.sys [2005-11-23 10:12]
R3 FET5X86V;VIA Rhine-Family Fast-Ethernet Adapter Driver Service;C:\WINDOWS\system32\DRIVERS\fetnd5bv.sys [2007-04-17 11:58]
R3 ha20x2k;Creative 20X HAL Driver;C:\WINDOWS\system32\drivers\ha20x2k.sys [2006-08-17 11:16]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\F]
\Shell\AutoRun\command - F:\LaunchU3.exe -a

.
**************************************************************************

catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-12-18 07:34:13
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2007-12-18 7:35:51
C:\ComboFix2.txt ... 2007-12-17 15:17
.
2007-12-18 02:25:23 --- E O F ---


Here's the HijackThis Log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:45:23 AM, on 12/18/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\VIA\RAID\raid_tool.exe
C:\WINDOWS\CTHELPER.EXE
C:\WINDOWS\system32\CTXFIHLP.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\a-squared Anti-Malware\a2guard.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Comodo\Firewall\CPF.exe
C:\Program Files\Steam\Steam.exe
C:\WINDOWS\SYSTEM32\CTXFISPI.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\a-squared Anti-Malware\a2service.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Comodo\Firewall\cmdagent.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Cliff Yu\Desktop\HiJackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O4 - HKLM\..\Run: [RaidTool] C:\Program Files\VIA\RAID\raid_tool.exe
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [a-squared] "C:\Program Files\a-squared Anti-Malware\a2guard.exe" /d=60
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [COMODO Firewall Pro] "C:\Program Files\Comodo\Firewall\CPF.exe" /background
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll (file missing)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: a-squared Anti-Malware Service (a2AntiMalware) - Emsi Software GmbH - C:\Program Files\a-squared Anti-Malware\a2service.exe
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Comodo Application Agent (CmdAgent) - COMODO - C:\Program Files\Comodo\Firewall\cmdagent.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe (file missing)

--
End of file - 4579 bytes


And here's Windows/winit.ini

[rename]
c:\tempjunk6636.tmp=C:\WINDOWS\system32\spoolvs.exe
nul=c:\tempjunk1773.tmp
c:\tempjunk7914.tmp=C:\WINDOWS\system32\printer.exe
c:\tempjunk6923.tmp=C:\WINDOWS\system32\spoolvs.exe
c:\tempjunk7535.tmp=C:\WINDOWS\system32\printer.exe
c:\tempjunk1773.tmp=C:\Documents and Settings\All Users\Application Data\kroxahej.dll

Thanks!

Hi,

Delete the contents of the Windows/wininit.ini file.

* Go to start > run and copy and paste next command in the field:

ComboFix /u

Make sure there's a space between Combofix and /
Then hit enter.

This will uninstall Combofix, delete its related folders and files, reset your clock settings, hide file extensions, hide the system/hidden files and resets System Restore again.

Then, * Go here to run an online scannner from ESET.

• Note: You will need to use Internet explorer for this scan
• Tick the box next to YES, I accept the Terms of Use.
• Click Start
• When asked, allow the activex control to install
• Click Start
• Check next options: Remove found threats and Scan unwanted applications.
• Click Scan
• Wait for the scan to finish
• Use notepad to open the logfile located at C:\Program Files\EsetOnlineScanner\log.txt
• Copy and paste that log in your next reply and also let me know how things are now.

I can't thank you enough!

ESET Online Scanner

# version=4
# OnlineScanner.ocx=1.0.0.56
# OnlineScannerDLLA.dll=1, 0, 0, 51
# OnlineScannerDLLW.dll=1, 0, 0, 51
# OnlineScannerUninstaller.exe=1, 0, 0, 49
# vers_standard_module=2730 (20071218)
# vers_arch_module=1.059 (20071108)
# vers_adv_heur_module=1.064 (20070717)
# EOSSerial=12476b32821bc44abe98c8b1fdeddc71
# end=finished
# remove_checked=true
# unwanted_checked=true
# utc_time=2007-12-18 08:06:30
# local_time=2007-12-18 12:06:30 (-0800, Pacific Standard Time)
# country="United States"
# osver=5.1.2600 NT Service Pack 2
# scanned=99504
# found=3
# scan_time=5707
C:\RECYCLER\S-1-5-21-73586283-484763869-1343024091-500\Dc12.exe Win32/Adware.UltimateCleaner application (unable to clean - deleted) 00000000000000000000000000000000
C:\WINDOWS\system32\hlvbfwoq\hlvbfwoq1.exe Win32/Adware.UltimateFixer application (unable to clean - deleted) 00000000000000000000000000000000
C:\WINDOWS\system32\hlvbfwoq\hlvbfwoq2.exe Win32/Adware.UltimateDefender application (unable to clean - deleted) 00000000000000000000000000000000


I think the whole computer is doing alot better, and when I mean alot, I mean alot.
If there's anything you need me to do to get rid of any other unwanted or undesired applications, please keep posting!
Thank you again!

Hi,

I see NOD32 deleted some leftovers.
You can delete next folder as well: C:\WINDOWS\system32\hlvbfwoq

The rest looks OK.

Glad I could help.

Please read my Prevention page with lots of info and tips how to prevent this in the future.
And if you want to improve speed/system performance after malware removal, take a look here.

Happy Surfing again!

Since this issue appears resolved ... this Topic is closed.
If you need this topic reopened for continuations of existing problems, please request this by sending me a PM with the address of the thread. This applies only to the original topic starter.

Everyone else please begin a New Topic.