Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Browser re-director disables RootRepeal


  • This topic is locked This topic is locked
25 replies to this topic

#1 bhf

bhf

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:04:29 AM

Posted 31 August 2009 - 07:12 PM

Following the forum directions, I used DDS.scr & RootRepeal.exe to document my system.

I picked up something that rediredects my browser home page to Google. Then every time I clicked on a Google or Yahoo search link it would redirect to some commercial sit.e. It disabled McAfee AV and SpyBot S&D. I ran DDS.SCR, log below. I tried RootRepeal and in the middle of the file scan, the window closed. Clicking on the desktop Icon results in a window "Windows cannot access the specified device ...". I can't delete RootRepeal.exe, Widows says it is in use. I tried again by renaming it "Root-Repealed" and got the same thing.



DDS (Ver_09-07-30.01) - NTFSx86

Run by HP_Administrator at 16:07:21.65 on Mon 08/31/2009

Internet Explorer: 8.0.6001.18702

Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1982.1333 [GMT -7:00]



AV: McAfee VirusScan *On-access scanning enabled* (Updated) {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}

FW: McAfee Personal Firewall *enabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}



============== Running Processes ===============



C:\WINDOWS\system32\svchost -k DcomLaunch

svchost.exe

C:\WINDOWS\System32\svchost.exe -k netsvcs

svchost.exe

svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\Explorer.EXE

svchost.exe

C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

C:\WINDOWS\arservice.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\WINDOWS\eHome\ehRecvr.exe

C:\WINDOWS\eHome\ehSched.exe

C:\Program Files\Common Files\LightScribe\LSSrvc.exe

C:\Program Files\McAfee\SiteAdvisor\McSACore.exe

C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe

c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe

c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe

C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe

C:\Program Files\McAfee\MPF\MPFSrv.exe

C:\WINDOWS\system32\nvsvc32.exe

svchost.exe

C:\WINDOWS\system32\svchost.exe -k imgsvc

c:\PROGRA~1\mcafee.com\agent\mcagent.exe

C:\WINDOWS\ehome\ehtray.exe

C:\WINDOWS\RTHDCPL.EXE

C:\WINDOWS\ARPWRMSG.EXE

C:\Program Files\HP DigitalMedia Archive\DMAScheduler.exe

C:\Program Files\Canon\CAL\CALMAIN.exe

C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe

C:\Program Files\HP\Digital Imaging\bin\hpotdd01.exe

C:\WINDOWS\system32\braviax.exe

C:\Program Files\Messenger\msmsgs.exe

C:\Program Files\Steam\Steam.exe

C:\Program Files\NewTech Infosystems\NTI Shadow for ReadyNAS\Shadow.exe

C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\tm08ec6a9b.exe

C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\system.exe

C:\Program Files\PIXELA\ImageMixer 3 SE\CameraMonitor.exe

C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe

C:\Program Files\Common Files\Nikon\Monitor\NkMonitor.exe

C:\Program Files\Updates from HP\9972322\Program\Updates from HP.exe

C:\WINDOWS\system32\wuauclt.exe

C:\WINDOWS\system32\dllhost.exe

C:\WINDOWS\eHome\ehmsas.exe

C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\win.exe

C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\spoolsv.exe

C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\svchost.exe

C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\winamp.exe

C:\HP\KBD\KBD.EXE

C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe

c:\windows\system\hpsysdrv.exe

C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe

C:\Program Files\iTunes\iTunesHelper.exe

C:\Program Files\iPod\bin\iPodService.exe

C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe

c:\PROGRA~1\mcafee\msc\mcuimgr.exe

C:\Program Files\DISC\DISCover.exe

C:\Program Files\DISC\DiscUpdMgr.exe

C:\Program Files\DISC\DiscStreamHub.exe

c:\PROGRA~1\mcafee.com\agent\McUpdate.exe

c:\PROGRA~1\mcafee\VIRUSS~1\mcvsmap.exe

C:\Documents and Settings\HP_Administrator\Desktop\dds.scr



============== Pseudo HJT Report ===============



uStart Page = hxxp://www.google.com

uSearch Page = hxxp://www.google.com

uDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=64&bd=PAVILION&pf=desktop

uDefault_Search_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=64&bd=PAVILION&pf=desktop

uSearch Bar = hxxp://www.google.com/ie

mDefault_Search_URL = hxxp://www.google.com/ie

mSearch Page = hxxp://www.google.com

mStart Page = hxxp://www.google.com

mSearch Bar = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=64&bd=PAVILION&pf=desktop

uInternet Settings,ProxyOverride = *.local

mSearchAssistant = hxxp://www.google.com

uURLSearchHooks: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll

BHO: c:\windows\system32\tajf83ikdmf.dll: {bf56a325-23f2-42ad-f4e4-00aac39caa53} - c:\windows\system32\tajf83ikdmf.dll

TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll

TB: McAfee SiteAdvisor Toolbar: {0ebbbe48-bad4-4b4c-8e5a-516abecae064} - c:\progra~1\mcafee\sitead~1\mcieplg.dll

uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background

uRun: [Steam] "c:\program files\steam\Steam.exe" -silent

uRun: [Shadow] c:\program files\newtech infosystems\nti shadow for readynas\Shadow.exe --minimize

uRun: [braviax] c:\windows\system32\braviax.exe

uRun: [AntiSpyware Service] c:\docume~1\hp_adm~1\locals~1\temp\tm08ec6a9b.exe

uRun: [Windows System Recover!] c:\docume~1\hp_adm~1\locals~1\temp\svchost.exe

mRun: [ehTray] c:\windows\ehome\ehtray.exe

mRun: [ftutil2] rundll32.exe ftutil2.dll,SetWriteCacheMode

mRun: [RTHDCPL] RTHDCPL.EXE

mRun: [AlwaysReady Power Message APP] ARPWRMSG.EXE

mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup

mRun: [nwiz] nwiz.exe /install

mRun: [DMAScheduler] "c:\program files\hp digitalmedia archive\DMAScheduler.exe"

mRun: [Recguard] c:\windows\sminst\RECGUARD.EXE

mRun: [PCDrProfiler]

mRun: [HPBootOp] "c:\program files\hewlett-packard\hp boot optimizer\HPBootOp.exe" /run

mRun: [HP Software Update] "c:\program files\hewlett-packard\hp software update\HPWuSchd.exe"

mRun: [mcagent_exe] c:\program files\mcafee.com\agent\mcagent.exe /runkey

mRun: [McENUI] c:\progra~1\mcafee\mhn\McENUI.exe /hide

mRun: [DeviceDiscovery] c:\program files\hp\digital imaging\bin\hpotdd01.exe

mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime

mRun: [braviax] c:\windows\system32\braviax.exe

mRun: [ISUSPM Startup] c:\progra~1\common~1\instal~1\update~1\ISUSPM.exe -startup

StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\imagem~1.lnk - c:\program files\pixela\imagemixer 3 se\CameraMonitor.exe

StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\kodake~1.lnk - c:\program files\kodak\kodak easyshare software\bin\EasyShare.exe

StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\micros~1.lnk - c:\program files\microsoft office\office\OSA9.EXE

StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\nikonm~1.lnk - c:\program files\common files\nikon\monitor\NkMonitor.exe

StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\update~1.lnk - c:\program files\updates from hp\9972322\program\Updates from HP.exe

uPolicies-explorer: NoFolderOptions = 1 (0x1)

uPolicies-system: DisableRegistryTools = 1 (0x1)

IE: {E2D4D26B-0180-43a4-B05F-462D6D54C789} - c:\windows\pchealth\helpctr\vendors\cn=hewlett-packard,l=cupertino,s=ca,c=us\iebutton\support.htm

IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe

IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe

IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBC} - c:\program files\java\jre1.5.0_06\bin\ssv.dll

Trusted Zone: trymedia.com

DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1235362004838

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab

DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab

TCP: {4DD5DE82-78A8-47B9-96BC-AB32A182524C} = 206.13.28.12,198.6.1.218

Filter: text/html - {faeeb90e-4c83-439b-b9aa-84ba90a89234} -

Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\McIEPlg.dll

STS: c:\windows\system32\tajf83ikdmf.dll: {bf56a325-23f2-42ad-f4e4-00aac39caa53} - c:\windows\system32\tajf83ikdmf.dll



============= SERVICES / DRIVERS ===============



R1 mfehidk;McAfee Inc. mfehidk;c:\windows\system32\drivers\mfehidk.sys [2009-2-23 201320]

R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\mcafee\siteadvisor\McSACore.exe [2009-2-23 203280]

R2 McProxy;McAfee Proxy Service;c:\progra~1\common~1\mcafee\mcproxy\mcproxy.exe [2008-11-9 359248]

R2 McrdSvc;Media Center Extender Service;c:\windows\ehome\mcrdsvc.exe [2005-8-5 99328]

R2 McShield;McAfee Real-time Scanner;c:\progra~1\mcafee\viruss~1\mcshield.exe [2009-2-23 144704]

R3 McSysmon;McAfee SystemGuards;c:\progra~1\mcafee\viruss~1\mcsysmon.exe [2009-2-23 695624]

R3 mfeavfk;McAfee Inc. mfeavfk;c:\windows\system32\drivers\mfeavfk.sys [2009-2-23 79304]

R3 mfebopk;McAfee Inc. mfebopk;c:\windows\system32\drivers\mfebopk.sys [2009-2-23 35240]

R3 mfesmfk;McAfee Inc. mfesmfk;c:\windows\system32\drivers\mfesmfk.sys [2009-2-23 40488]

S3 mferkdk;McAfee Inc. mferkdk;c:\windows\system32\drivers\mferkdk.sys [2009-2-23 33832]



=============== Created Last 30 ================



2009-08-26 17:49 <DIR> --d----- c:\program files\Spybot - Search & Destroy

2009-08-26 17:49 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Spybot - Search & Destroy

2009-08-25 16:11 78,555 a------- c:\windows\system32\wisdstr.exe

2009-08-25 10:14 <DIR> --d----- c:\documents and settings\hp_administrator\.housecall6.6

2009-08-25 10:04 <DIR> --d----- c:\program files\Trend Micro

2009-08-25 09:47 102,664 a------- c:\windows\system32\drivers\tmcomm.sys

2009-08-22 09:54 15,000 a------- c:\windows\system32\tajf83ikdmf.dll

2009-08-22 09:54 0 a--sh--- C:\-1537321251

2009-08-22 09:53 11,264 a------- c:\windows\system32\braviax.exe

2009-08-12 10:43 128,512 -------- c:\windows\system32\dllcache\dhtmled.ocx

2009-08-12 10:43 1,315,328 -------- c:\windows\system32\dllcache\msoe.dll

2009-08-09 19:39 <DIR> --d----- c:\program files\Shared

2009-08-05 02:01 204,800 -------- c:\windows\system32\dllcache\mswebdvd.dll

2009-08-04 10:29 123,884 a------- c:\windows\system32\FishSaveGame1.pts



==================== Find3M ====================



2009-08-19 17:31 237,568 a------- c:\windows\system32\rmc_rtspdl.dll

2009-08-19 17:31 156,672 a------- c:\windows\system32\rmc_fixasf.exe

2009-08-19 17:31 323,584 a------- c:\windows\system32\AUDIOGENIE2.DLL

2009-08-05 02:01 204,800 -------- c:\windows\system32\mswebdvd.dll

2009-07-30 17:52 737,280 a------- c:\windows\iun6002.exe

2009-07-17 12:01 58,880 a------- c:\windows\system32\atl.dll

2009-07-13 10:08 286,720 a------- c:\windows\system32\wmpdxm.dll

2009-07-03 10:09 915,456 a------- c:\windows\system32\wininet.dll

2009-06-16 07:36 119,808 -------- c:\windows\system32\t2embed.dll

2009-06-16 07:36 81,920 -------- c:\windows\system32\fontsub.dll

2009-06-12 05:31 80,896 -------- c:\windows\system32\tlntsess.exe

2009-06-12 05:31 76,288 -------- c:\windows\system32\telnet.exe

2009-06-10 09:19 2,066,432 -------- c:\windows\system32\mstscax.dll

2009-06-10 07:13 84,992 -------- c:\windows\system32\avifil32.dll

2009-06-09 23:14 132,096 a------- c:\windows\system32\wkssvc.dll

2009-06-03 12:09 1,291,264 a------- c:\windows\system32\quartz.dll

2009-04-15 08:33 20 ----h--- c:\docume~1\alluse~1\applic~1\PKP_DLdu.DAT

2006-12-24 16:54 0 a------- c:\docume~1\hp_adm~1\applic~1\wklnhst.dat



============= FINISH: 16:07:45.15 ===============

BC AdBot (Login to Remove)

 


#2 schrauber

schrauber

    Mr.Mechanic


  • Malware Response Team
  • 24,794 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Munich,Germany
  • Local time:12:29 PM

Posted 15 September 2009 - 03:14 PM

Hello and welcome to Bleeping Computer

We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.

If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine.

If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.

Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.

If you have already posted a DDS log, please do so again, as your situation may have changed.
Use the 'Add Reply' and add the new log to this thread.


Thanks and again sorry for the delay.

We need to see some information about what is happening in your machine. Please perform the following scan:
  • Download DDS by sUBs from one of the following links. Save it to your desktop.
  • Double click on the DDS icon, allow it to run.
  • A small box will open, with an explaination about the tool. No input is needed, the scan is running.
  • Notepad will open with the results.
  • Follow the instructions that pop up for posting the results.
  • Close the program window, and delete the program from your desktop.
Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet.

Information on A/V control HERE
regards,
schrauber

Posted Image
Posted Image

If I've not posted back within 48 hrs., feel free to send a PM with your topic link. Thank you!

If I have helped you then please consider donating to continue the fight against malware Posted Image

#3 bhf

bhf
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:04:29 AM

Posted 16 September 2009 - 11:55 AM

Thanks for the reply. It has been a long wait, but since this is a volunteer effort, I can't complain and I appreciate the effort by the volunteers.

The info in the original post is still valid. Here is an updated DDS:


DDS (Ver_09-07-30.01) - NTFSx86
Run by HP_Administrator at 9:51:18.18 on Wed 09/16/2009
Internet Explorer: 8.0.6001.18702
AV: McAfee VirusScan *On-access scanning disabled* (Updated) {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
FW: McAfee Personal Firewall *enabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}

============== Running Processes ===============


============== Pseudo HJT Report ===============

uStart Page = hxxp://www.google.com
uSearch Page = hxxp://www.google.com
uDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=64&bd=PAVILION&pf=desktop
uDefault_Search_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=64&bd=PAVILION&pf=desktop
uSearch Bar = hxxp://www.google.com/ie
mDefault_Search_URL = hxxp://www.google.com/ie
mSearch Page = hxxp://www.google.com
mStart Page = hxxp://www.google.com
mSearch Bar = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=64&bd=PAVILION&pf=desktop
uInternet Settings,ProxyOverride = *.local
mSearchAssistant = hxxp://www.google.com
uURLSearchHooks: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
BHO: c:\windows\system32\tajf83ikdmf.dll: {bf56a325-23f2-42ad-f4e4-00aac39caa53} - c:\windows\system32\tajf83ikdmf.dll
TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
TB: McAfee SiteAdvisor Toolbar: {0ebbbe48-bad4-4b4c-8e5a-516abecae064} - c:\progra~1\mcafee\sitead~1\mcieplg.dll
uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background
uRun: [Steam] "c:\program files\steam\Steam.exe" -silent
uRun: [Shadow] c:\program files\newtech infosystems\nti shadow for readynas\Shadow.exe --minimize
uRun: [braviax] c:\windows\system32\braviax.exe
uRun: [AntiSpyware Service] c:\docume~1\hp_adm~1\locals~1\temp\tm08ec6a9b.exe
uRun: [Windows System Recover!] c:\docume~1\hp_adm~1\locals~1\temp\system.exe
uRun: [WIndows Rescue Disk] c:\docume~1\hp_adm~1\locals~1\temp\spoolsv.exe
mRun: [ehTray] c:\windows\ehome\ehtray.exe
mRun: [ftutil2] rundll32.exe ftutil2.dll,SetWriteCacheMode
mRun: [RTHDCPL] RTHDCPL.EXE
mRun: [AlwaysReady Power Message APP] ARPWRMSG.EXE
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [nwiz] nwiz.exe /install
mRun: [DMAScheduler] "c:\program files\hp digitalmedia archive\DMAScheduler.exe"
mRun: [Recguard] c:\windows\sminst\RECGUARD.EXE
mRun: [PCDrProfiler]
mRun: [HPBootOp] "c:\program files\hewlett-packard\hp boot optimizer\HPBootOp.exe" /run
mRun: [HP Software Update] "c:\program files\hewlett-packard\hp software update\HPWuSchd.exe"
mRun: [mcagent_exe] "c:\program files\mcafee.com\agent\mcagent.exe" /runkey
mRun: [McENUI] c:\progra~1\mcafee\mhn\McENUI.exe /hide
mRun: [DeviceDiscovery] c:\program files\hp\digital imaging\bin\hpotdd01.exe
mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
mRun: [braviax] c:\windows\system32\braviax.exe
mRun: [ISUSPM Startup] c:\progra~1\common~1\instal~1\update~1\ISUSPM.exe -startup
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\imagem~1.lnk - c:\program files\pixela\imagemixer 3 se\CameraMonitor.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\kodake~1.lnk - c:\program files\kodak\kodak easyshare software\bin\EasyShare.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\micros~1.lnk - c:\program files\microsoft office\office\OSA9.EXE
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\nikonm~1.lnk - c:\program files\common files\nikon\monitor\NkMonitor.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\update~1.lnk - c:\program files\updates from hp\9972322\program\Updates from HP.exe
uPolicies-explorer: NoFolderOptions = 1 (0x1)
uPolicies-system: DisableRegistryTools = 1 (0x1)
IE: {E2D4D26B-0180-43a4-B05F-462D6D54C789} - c:\windows\pchealth\helpctr\vendors\cn=hewlett-packard,l=cupertino,s=ca,c=us\iebutton\support.htm
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBC} - c:\program files\java\jre1.5.0_06\bin\ssv.dll
Trusted Zone: trymedia.com
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1235362004838
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab
TCP: {4DD5DE82-78A8-47B9-96BC-AB32A182524C} = 206.13.28.12,198.6.1.218
Filter: text/html - {faeeb90e-4c83-439b-b9aa-84ba90a89234} -
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\McIEPlg.dll
STS: c:\windows\system32\tajf83ikdmf.dll: {bf56a325-23f2-42ad-f4e4-00aac39caa53} - c:\windows\system32\tajf83ikdmf.dll

============= SERVICES / DRIVERS ===============


=============== Created Last 30 ================

2009-08-26 17:49 <DIR> --d----- c:\program files\Spybot - Search & Destroy
2009-08-26 17:49 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Spybot - Search & Destroy
2009-08-25 16:11 78,555 a------- c:\windows\system32\wisdstr.exe
2009-08-25 10:14 <DIR> --d----- c:\documents and settings\hp_administrator\.housecall6.6
2009-08-25 10:04 <DIR> --d----- c:\program files\Trend Micro
2009-08-25 09:47 102,664 a------- c:\windows\system32\drivers\tmcomm.sys
2009-08-22 09:54 15,000 a------- c:\windows\system32\tajf83ikdmf.dll
2009-08-22 09:54 0 a--sh--- C:\-1537321251
2009-08-22 09:53 11,264 a------- c:\windows\system32\braviax.exe

==================== Find3M ====================

2009-08-19 17:31 237,568 a------- c:\windows\system32\rmc_rtspdl.dll
2009-08-19 17:31 156,672 a------- c:\windows\system32\rmc_fixasf.exe
2009-08-19 17:31 323,584 a------- c:\windows\system32\AUDIOGENIE2.DLL
2009-08-05 02:01 204,800 -------- c:\windows\system32\mswebdvd.dll
2009-07-30 17:52 737,280 a------- c:\windows\iun6002.exe
2009-07-17 12:01 58,880 a------- c:\windows\system32\atl.dll
2009-07-13 10:08 286,720 a------- c:\windows\system32\wmpdxm.dll
2009-07-03 10:09 915,456 a------- c:\windows\system32\wininet.dll
2009-04-15 08:33 20 ----h--- c:\docume~1\alluse~1\applic~1\PKP_DLdu.DAT
2006-12-24 16:54 0 a------- c:\docume~1\hp_adm~1\applic~1\wklnhst.dat

============= FINISH: 9:51:26.31 ===============

#4 syler

syler

  • Malware Response Team
  • 8,150 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Warrington, UK
  • Local time:12:29 PM

Posted 17 September 2009 - 08:53 AM

Hello bhf,

My name is Syler and I will be helping you to solve your Malware issues.

Please download Malwarebytes' Anti-Malware from Here

Note: If you already have Malwarebytes' Anti-Malware, just update then run it.
  • Double Click mbam-setup.exe to install the application.
  • Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select "Perform Full Scan", then click Scan (the scan may take some time to finish, so please be patient).
  • When the scan is complete, click OK, then Show Results to view the results.
  • Make sure that everything is checked, and click Remove Selected.
  • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
  • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  • Copy and Paste the entire report in your next reply .
Note: If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediatly.

Next
  • Download random's system information tool (RSIT) by random/random from here and save it to your desktop.
  • Double click on RSIT.exe to run RSIT.
  • Click Continue at the disclaimer screen.
  • Once it has finished, two logs will open. Please post the contents of both log.txt (<<will be maximized) and info.txt (<<will be minimized)
Then please post back here with the following:
  • MBAM log
  • log.txt
  • info.txt
Thanks

unite.jpg


#5 bhf

bhf
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:04:29 AM

Posted 17 September 2009 - 08:27 PM

Syler,

Neither tool worked.

1. MBAM started up and then the window closed after a couple of seconds.

2. After clicking RSIT "continue" an error window poped up "AutoIt Error, Error Line -1, Variable used without being declared"

When I click on MBAM to try again I get the "Windows cannot access the specified device..." and cannot even delete it because it is in use.

Regards,

#6 syler

syler

  • Malware Response Team
  • 8,150 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Warrington, UK
  • Local time:12:29 PM

Posted 18 September 2009 - 03:46 AM

bhf,

Please try renaming mbam.exe to bhf.exe and see if it will now run, then run this next scan.

We need to scan for Rootkits with GMER
  • Please download GMER from one of the following locations, and save it to your desktop:
    • Main Mirror
      This version will download a randomly named file (Recommended)
    • Zip Mirror
      This version will download a zip file you will need to extract first. If you use this mirror, please extract the zip file to your desktop.
  • Disconnect from the Internet and close all running programs, as this process may crash your computer.
  • Temporarily disable any real-time active protection so your security program drivers will not conflict with gmer's driver.
  • Double click on Gmer to run it.
  • Allow the gmer.sys driver to load if asked.
  • You may see a rootkit warning window, If you do, click No.
  • Click on Posted Image and wait for the scan to finish.
  • If you see a rootkit warning window, click OK.
  • Push Posted Image and save the logfile to your desktop.
  • Copy and Paste the contents of that file in your next post.

unite.jpg


#7 bhf

bhf
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:04:29 AM

Posted 18 September 2009 - 10:35 PM

Tried mbam again by renaming it to bhf.exe. Same problem, the scan started then the window closed after just a second or so and now I cannot execute the program or delete it.

GMER was similar but ran much longer. The scan started and was running. I checked back several times over the next couple of hours and on the last check the window was closed and I cannot execute the program again.

#8 syler

syler

  • Malware Response Team
  • 8,150 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Warrington, UK
  • Local time:12:29 PM

Posted 19 September 2009 - 06:30 AM

Ok, lets try this.

Download and run Win32kDiag:
  • Download Win32kDiag from any of the following locations and save it to your Desktop.
  • Double-click Win32kDiag.exe to run Win32kDiag and let it finish.
  • Once it has finished, press any key to close the program.
  • It will create the file Win32kDiag.txt on your Desktop Copy and paste the contents in your next reply.

unite.jpg


#9 bhf

bhf
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:04:29 AM

Posted 19 September 2009 - 10:31 AM

Yay !! Finally getting some data. Text file below from Win32KDiag:

Running from: C:\Documents and Settings\HP_Administrator\Desktop\Win32kDiag.exe
Log file at : C:\Documents and Settings\HP_Administrator\Desktop\Win32kDiag.txt
WARNING: Could not get backup privileges!
Searching 'C:\WINDOWS'...

Found mount point : C:\WINDOWS\$hf_mig$\KB904706\KB904706
Mount point destination : \Device\__max++>\^
Found mount point : C:\WINDOWS\$hf_mig$\KB912812\KB912812
Mount point destination : \Device\__max++>\^
Found mount point : C:\WINDOWS\$hf_mig$\KB912945\KB912945
Mount point destination : \Device\__max++>\^
Found mount point : C:\WINDOWS\$hf_mig$\KB920213\KB920213
Mount point destination : \Device\__max++>\^
Found mount point : C:\WINDOWS\$hf_mig$\KB924496\KB924496
Mount point destination : \Device\__max++>\^
Found mount point : C:\WINDOWS\$hf_mig$\KB925454\KB925454
Mount point destination : \Device\__max++>\^
Found mount point : C:\WINDOWS\$hf_mig$\KB928090\KB928090
Mount point destination : \Device\__max++>\^
Found mount point : C:\WINDOWS\$hf_mig$\KB931768\KB931768
Mount point destination : \Device\__max++>\^
Found mount point : C:\WINDOWS\$hf_mig$\KB932168\KB932168
Mount point destination : \Device\__max++>\^
Found mount point : C:\WINDOWS\$hf_mig$\KB933566\KB933566
Mount point destination : \Device\__max++>\^
Found mount point : C:\WINDOWS\$hf_mig$\KB937143\KB937143
Mount point destination : \Device\__max++>\^
Found mount point : C:\WINDOWS\$hf_mig$\KB938127-IE7\KB938127-IE7
Mount point destination : \Device\__max++>\^
Found mount point : C:\WINDOWS\$hf_mig$\KB939653\KB939653
Mount point destination : \Device\__max++>\^
Found mount point : C:\WINDOWS\$hf_mig$\KB941568\KB941568
Mount point destination : \Device\__max++>\^
Found mount point : C:\WINDOWS\$hf_mig$\KB942615\KB942615
Mount point destination : \Device\__max++>\^
Found mount point : C:\WINDOWS\$hf_mig$\KB943460\KB943460
Mount point destination : \Device\__max++>\^
Found mount point : C:\WINDOWS\assembly\NativeImages1_v1.1.4322\BDATunePIA\BDATunePIA
Mount point destination : \Device\__max++>\^
Found mount point : C:\WINDOWS\assembly\NativeImages1_v1.1.4322\ehCIR\ehCIR
Mount point destination : \Device\__max++>\^
Found mount point : C:\WINDOWS\assembly\NativeImages1_v1.1.4322\EhCM\EhCM
Mount point destination : \Device\__max++>\^
Found mount point : C:\WINDOWS\assembly\NativeImages1_v1.1.4322\ehepg\ehepg
Mount point destination : \Device\__max++>\^
Found mount point : C:\WINDOWS\assembly\NativeImages1_v1.1.4322\ehepgdat\ehepgdat
Mount point destination : \Device\__max++>\^
Found mount point : C:\WINDOWS\assembly\NativeImages1_v1.1.4322\ehiProxy\ehiProxy
Mount point destination : \Device\__max++>\^
Found mount point : C:\WINDOWS\assembly\NativeImages1_v1.1.4322\ehRecObj\ehRecObj
Mount point destination : \Device\__max++>\^
Found mount point : C:\WINDOWS\assembly\tmp\tmp
Mount point destination : \Device\__max++>\^
Found mount point : C:\WINDOWS\CAVTemp\CAVTemp
Mount point destination : \Device\__max++>\^
Found mount point : C:\WINDOWS\Config\Config
Mount point destination : \Device\__max++>\^
Found mount point : C:\WINDOWS\Connection Wizard\Connection Wizard
Mount point destination : \Device\__max++>\^
Found mount point : C:\WINDOWS\ftpcache\ftpcache
Mount point destination : \Device\__max++>\^
Found mount point : C:\WINDOWS\Help\SBSI\Training\WXPPRO\Cbz\Cbz
Mount point destination : \Device\__max++>\^
Found mount point : C:\WINDOWS\Help\SBSI\Training\WXPPRO\Lib\Lib
Mount point destination : \Device\__max++>\^
Found mount point : C:\WINDOWS\Help\SBSI\Training\WXPPRO\Wave\Wave
Mount point destination : \Device\__max++>\^
Cannot access: C:\WINDOWS\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\update\update.exe
[1] 2004-10-14 18:21:58 654848 C:\WINDOWS\$hf_mig$\KB873339\update\update.exe (Microsoft Corporation)
[1] 2004-11-30 22:29:47 654848 C:\WINDOWS\$hf_mig$\KB885250\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 18:34:52 654848 C:\WINDOWS\$hf_mig$\KB885835\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 18:34:48 654848 C:\WINDOWS\$hf_mig$\KB885836\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 11:34:52 654848 C:\WINDOWS\$hf_mig$\KB886185\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 18:34:52 654848 C:\WINDOWS\$hf_mig$\KB887472\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 18:34:48 654848 C:\WINDOWS\$hf_mig$\KB887742\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 18:34:48 654848 C:\WINDOWS\$hf_mig$\KB888113\update\update.exe (Microsoft Corporation)
[1] 2004-11-30 15:46:40 654848 C:\WINDOWS\$hf_mig$\KB888302\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB890046\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 18:21:58 654848 C:\WINDOWS\$hf_mig$\KB890175\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINDOWS\$hf_mig$\KB890859\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 18:21:58 654848 C:\WINDOWS\$hf_mig$\KB891781\update\update.exe (Microsoft Corporation)
[1] 2005-02-25 03:35:05 718048 C:\WINDOWS\$hf_mig$\KB893066\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB893756\update\update.exe (Microsoft Corporation)
[1] 2005-02-25 03:35:05 718048 C:\WINDOWS\$hf_mig$\KB896358\update\update.exe (Microsoft Corporation)
[1] 2005-02-25 03:35:05 718048 C:\WINDOWS\$hf_mig$\KB896422\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB896423\update\update.exe (Microsoft Corporation)
[1] 2005-02-25 03:35:05 718048 C:\WINDOWS\$hf_mig$\KB896424\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB896428\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:05 718048 C:\WINDOWS\$hf_mig$\KB898461\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB899587\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB899591\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB900485\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB900725\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB901017\update\update.exe (Microsoft Corporation)
[1] 2005-02-25 03:35:05 718048 C:\WINDOWS\$hf_mig$\KB901214\update\update.exe (Microsoft Corporation)
[1] 2005-02-25 03:35:05 718048 C:\WINDOWS\$hf_mig$\KB902400\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB904942\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:05 718048 C:\WINDOWS\$hf_mig$\KB905414\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB905749\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 23:12:28 716000 C:\WINDOWS\$hf_mig$\KB908519\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 23:12:28 716000 C:\WINDOWS\$hf_mig$\KB908531\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:28 716000 C:\WINDOWS\$hf_mig$\KB910437\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB911280\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 23:12:28 716000 C:\WINDOWS\$hf_mig$\KB911562\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB911927\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 23:12:28 716000 C:\WINDOWS\$hf_mig$\KB912919\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB913580\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB914388\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB914389\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:28 716000 C:\WINDOWS\$hf_mig$\KB915865\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\$hf_mig$\KB916595\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\$hf_mig$\KB917344\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB917422\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB917953\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB918118\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB918439\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB919007\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\$hf_mig$\KB920670\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB920683\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB920685\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB920872\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB921398\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB921503\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:28 716000 C:\WINDOWS\$hf_mig$\KB922582\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB922616\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\$hf_mig$\KB922819\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\$hf_mig$\KB923414\update\update.exe (Microsoft Corporation)
[1] 2008-11-15 10:18:04 755576 C:\WINDOWS\$hf_mig$\KB923561\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB923694\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\$hf_mig$\KB923980\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB924191\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB924270\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\$hf_mig$\KB925486\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$hf_mig$\KB925902\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB926255\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\$hf_mig$\KB926436\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$hf_mig$\KB927779\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB927802\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$hf_mig$\KB927891\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$hf_mig$\KB928255\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB928843\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$hf_mig$\KB929123\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB929338\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB929969\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB930178\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB930916\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$hf_mig$\KB931261\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB931784\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$hf_mig$\KB931836\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\$hf_mig$\KB933360\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:28 716000 C:\WINDOWS\$hf_mig$\KB933729\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$hf_mig$\KB935448\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB935839\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$hf_mig$\KB935840\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB936021\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB937894\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB938127\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:56 716000 C:\WINDOWS\$hf_mig$\KB938127-v2-IE7\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:20:44 755576 C:\WINDOWS\$hf_mig$\KB938464\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB938828\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$hf_mig$\KB938829\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\$hf_mig$\KB941202\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\$hf_mig$\KB942763\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\$hf_mig$\KB942840\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\$hf_mig$\KB943055\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\$hf_mig$\KB943485\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\$hf_mig$\KB944338-v2\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\$hf_mig$\KB944653\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\$hf_mig$\KB945553\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\$hf_mig$\KB946026\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:56 716000 C:\WINDOWS\$hf_mig$\KB946627\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:20:44 755576 C:\WINDOWS\$hf_mig$\KB946648\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\$hf_mig$\KB950749\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\$hf_mig$\KB950760\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\$hf_mig$\KB950762\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:18 755576 C:\WINDOWS\$hf_mig$\KB950974\update\update.exe (Microsoft Corporation)
[1] 2007-12-03 08:25:31 755576 C:\WINDOWS\$hf_mig$\KB951066\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:18:51 755576 C:\WINDOWS\$hf_mig$\KB951376-v2\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\$hf_mig$\KB951698\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:18 755576 C:\WINDOWS\$hf_mig$\KB951748\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:18 755576 C:\WINDOWS\$hf_mig$\KB951978\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:18 755576 C:\WINDOWS\$hf_mig$\KB952004\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:18:51 755576 C:\WINDOWS\$hf_mig$\KB952287\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\$hf_mig$\KB952954\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\$hf_mig$\KB953356\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 00:38:29 755576 C:\WINDOWS\$hf_mig$\KB954211\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\$hf_mig$\KB954459\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:18:51 755576 C:\WINDOWS\$hf_mig$\KB954600\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:18:51 755576 C:\WINDOWS\$hf_mig$\KB955069\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\$hf_mig$\KB955839\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\$hf_mig$\KB956390-IE7\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 00:38:29 755576 C:\WINDOWS\$hf_mig$\KB956572\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 04:40:52 755576 C:\WINDOWS\$hf_mig$\KB956744\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 00:38:29 755576 C:\WINDOWS\$hf_mig$\KB956802\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:18:51 755576 C:\WINDOWS\$hf_mig$\KB956803\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:18:51 755576 C:\WINDOWS\$hf_mig$\KB956841\update\update.exe (Microsoft Corporation)
[1] 2008-07-08 06:02:04 755576 C:\WINDOWS\$hf_mig$\KB957097\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\$hf_mig$\KB958215\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:18:51 755576 C:\WINDOWS\$hf_mig$\KB958644\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:18:51 755576 C:\WINDOWS\$hf_mig$\KB958687\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 00:38:29 755576 C:\WINDOWS\$hf_mig$\KB958690\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:18 755576 C:\WINDOWS\$hf_mig$\KB959426\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\$hf_mig$\KB960225\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 00:38:29 755576 C:\WINDOWS\$hf_mig$\KB960714\update\update.exe (Microsoft Corporation)
[1] 2008-11-15 10:18:04 755576 C:\WINDOWS\$hf_mig$\KB960715\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\$hf_mig$\KB960803\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 04:40:52 755576 C:\WINDOWS\$hf_mig$\KB960859\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\$hf_mig$\KB961260-IE7\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 04:40:52 755576 C:\WINDOWS\$hf_mig$\KB961371\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:18 755576 C:\WINDOWS\$hf_mig$\KB961373\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 00:38:29 755576 C:\WINDOWS\$hf_mig$\KB961501\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 00:38:29 755576 C:\WINDOWS\$hf_mig$\KB963027-IE7\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 00:38:29 755576 C:\WINDOWS\$hf_mig$\KB967715\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 00:38:29 755576 C:\WINDOWS\$hf_mig$\KB968537\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 00:38:29 755576 C:\WINDOWS\$hf_mig$\KB969897-IE7\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\$hf_mig$\KB969897-IE8\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\$hf_mig$\KB969898\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:18 755576 C:\WINDOWS\$hf_mig$\KB970238\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 04:40:52 755576 C:\WINDOWS\$hf_mig$\KB971557\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 00:38:29 755576 C:\WINDOWS\$hf_mig$\KB971633\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 04:40:52 755576 C:\WINDOWS\$hf_mig$\KB971657\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 04:40:52 755576 C:\WINDOWS\$hf_mig$\KB972260-IE8\update\update.exe (Microsoft Corporation)
[1] 2008-07-08 06:02:04 755576 C:\WINDOWS\$hf_mig$\KB972636-IE8\update\update.exe (Microsoft Corporation)
[1] 2008-07-08 06:02:04 755576 C:\WINDOWS\$hf_mig$\KB973346\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 04:40:52 755576 C:\WINDOWS\$hf_mig$\KB973354\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 04:40:52 755576 C:\WINDOWS\$hf_mig$\KB973507\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 04:40:52 755576 C:\WINDOWS\$hf_mig$\KB973815\update\update.exe (Microsoft Corporation)
[1] 2008-07-08 06:02:04 755576 C:\WINDOWS\$hf_mig$\KB973869\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 11:34:52 654848 C:\WINDOWS\$NtUninstallKB886185$\update.exe (Microsoft Corporation)
[1] 2004-11-30 15:46:40 654848 C:\WINDOWS\$NtUninstallKB888302$\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINDOWS\$NtUninstallKB890859$\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$NtUninstallKB893756$\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$NtUninstallKB896423$\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$NtUninstallKB896428$\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:05 718048 C:\WINDOWS\$NtUninstallKB898461$\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$NtUninstallKB899587$\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$NtUninstallKB899591$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB900485$\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$NtUninstallKB900725$\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$NtUninstallKB901017$\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:05 718048 C:\WINDOWS\$NtUninstallKB905414$\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$NtUninstallKB905749$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:28 716000 C:\WINDOWS\$NtUninstallKB910437$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB911280$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB911927$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB913580$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB914388$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB914389$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\$NtUninstallKB916595$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB918118$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB918439$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\$NtUninstallKB920670$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB920683$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB920685$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB920872$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:28 716000 C:\WINDOWS\$NtUninstallKB922582$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\$NtUninstallKB923980$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB924270$\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$NtUninstallKB925902$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB926255$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\$NtUninstallKB926436$\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$NtUninstallKB927779$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB927802$\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$NtUninstallKB927891$\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$NtUninstallKB928255$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB928843$\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$NtUninstallKB929123$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB930178$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:28 716000 C:\WINDOWS\$NtUninstallKB930916$\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$NtUninstallKB931261$\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$NtUninstallKB935448$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB935839$\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$NtUninstallKB935840$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB937894$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB938127$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB938828$\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\$NtUninstallKB944653$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\05c415ef6d072eb49a51ae487bfc11a6\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\07fc28da31fb67510471389f08fbbe93\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\SoftwareDistribution\Download\0ad26524c298df9a41026d3b49a38936\update\update.exe (Microsoft Corporation)
[1] 2007-10-27 17:39:46 716000 C:\WINDOWS\SoftwareDistribution\Download\0eee9353a41e1ffb7bc4207f5acf499f\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:28 716000 C:\WINDOWS\SoftwareDistribution\Download\0facce6115ab861022eae3087e064a2a\update\update.exe (Microsoft Corporation)
[1] 2005-06-28 11:24:52 716000 C:\WINDOWS\SoftwareDistribution\Download\0fbfbb50ba543b7b50c54ea4b8e33a14\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\SoftwareDistribution\Download\0fd33c77398fa2b50df56456525ef5c3\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\11e16da0817126b62afaea7136882d9f\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\SoftwareDistribution\Download\16665ed3c40ea6a0c9841eec5f15a718\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\SoftwareDistribution\Download\1ece269e23f4ef02dbea7dfa6a74a7d0\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\26553d2988faa6629ee272005cd35201\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\SoftwareDistribution\Download\26a7ba71936ef28fcb3bb73b860e289e\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:28 716000 C:\WINDOWS\SoftwareDistribution\Download\28d74bdac17e30d3a4336176766f2e4a\update\update.exe (Microsoft Corporation)
[1] 2004-11-30 15:46:40 654848 C:\WINDOWS\SoftwareDistribution\Download\29fac2778ef9276807b5af52b3f981b9\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\2a8c07aaf8ec0a2dbcb5ab11c4e40d88\update\update.exe (Microsoft Corporation)
[1] 2005-06-28 11:24:52 716000 C:\WINDOWS\SoftwareDistribution\Download\2bf7c99a865d81d4ff0847c574e5b4cf\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\SoftwareDistribution\Download\2e4e820fa4f0714d84e95e04fd4b348e\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\3049c6005e80c7b3312fd80fbee860e4\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\3112269c39ef5d624522fb876634b1d2\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 00:38:29 755576 C:\WINDOWS\SoftwareDistribution\Download\3361704fe1a0367fcfe17758efab6972\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\343df13f0a7d4e9264393401164eed58\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\355f788b6de8a3ec79e9aa172e6317f1\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 11:34:52 654848 C:\WINDOWS\SoftwareDistribution\Download\35d340428a8f32f0a91986e753c6e613\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\4185df9bd0b35509f908e14df73d4fab\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\44d74c37f0595a363bcec5e9229d8564\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:18:51 755576 C:\WINDOWS\SoftwareDistribution\Download\491a2c8e1582f5cdd01f8b3da4b8ef7d\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:18:51 755576 C:\WINDOWS\SoftwareDistribution\Download\4b975c8f39482ac4287e885ca058f798\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\SoftwareDistribution\Download\4d9d678c0d8af22c04a4a7fc7f1ff86c\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\SoftwareDistribution\Download\4e0f6637e0e9d8b518d4652361b0aec7\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 00:38:29 755576 C:\WINDOWS\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\update\update.exe ()
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\SoftwareDistribution\Download\5599132effaee562760dce29f8ca8491\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 00:38:29 755576 C:\WINDOWS\SoftwareDistribution\Download\55ae228715888b68a08f491655790fa6\update\update.exe ()
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\SoftwareDistribution\Download\561854573350299cf5c23eea1e0cff28\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:05 718048 C:\WINDOWS\SoftwareDistribution\Download\569d9f4ac4075c88e15e54f5d0847e2b\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\SoftwareDistribution\Download\5d9d48823dca01f9929a959c29f5edc4\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\5e51b5a4cef8a3ba9cc95980fae1c142\update\update.exe (Microsoft Corporation)
[1] 2007-12-03 08:25:31 755576 C:\WINDOWS\SoftwareDistribution\Download\66004d0acd607f44c08ee787c065c450\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\SoftwareDistribution\Download\660425732726e9b33577f4657b36117d\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\SoftwareDistribution\Download\6a15037304f9f3eab5357ec4718f72a9\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\SoftwareDistribution\Download\6bb372cecf80d03ab26b01c29db4654f\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\6ebd16cfa495accd1804cd7de17cee70\update\update.exe (Microsoft Corporation)
[1] 2005-06-28 11:24:52 716000 C:\WINDOWS\SoftwareDistribution\Download\70a6cc52b567da944b349ad8f3c6c2cb\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\71a994314faa34c74b73fcac7756eea1\update\update.exe (Microsoft Corporation)
[1] 2007-07-27 10:41:48 755576 C:\WINDOWS\SoftwareDistribution\Download\7468a12466bf1d654d6ea07899fe1523\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\SoftwareDistribution\Download\7bc58354ca50aa200544caaef7677c8a\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\7d6100e060a1f93df520847b1cd9dc71\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\SoftwareDistribution\Download\80046d42bf5044b609b7f7326dd9674d\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\SoftwareDistribution\Download\843953281f8497f8e20b19c4e3fe3e01\update\update.exe (Microsoft Corporation)
[1] 2005-06-28 11:24:52 716000 C:\WINDOWS\SoftwareDistribution\Download\85df2c3311b9f19cc118068642925ba1\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\SoftwareDistribution\Download\86a5d4ec598b957d3e4d2a7951b2c258\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\SoftwareDistribution\Download\8bc3857eb47e63856dbb1de3a6a2f2ee\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:18 755576 C:\WINDOWS\SoftwareDistribution\Download\8cac00e8efc87d728c0261686f85c975\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\SoftwareDistribution\Download\94d4564c331fd50de11e52451ac2e679\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:18:51 755576 C:\WINDOWS\SoftwareDistribution\Download\963193362d99ddbedffb21408a40248b\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\SoftwareDistribution\Download\97fe76a20161cb86e78057600e7c82a0\update\update.exe (Microsoft Corporation)
[1] 2007-01-15 16:21:50 716000 C:\WINDOWS\SoftwareDistribution\Download\9bb1c2b224abbb64312873e5c8754091\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\SoftwareDistribution\Download\a4246a739538de4092ff4efee1ce6dd7\update\update.exe (Microsoft Corporation)
[1] 2008-03-20 15:41:20 742192 C:\WINDOWS\SoftwareDistribution\Download\a49d784415582d2f98c84ceb0a75d898\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\SoftwareDistribution\Download\a4c6f78366f403fa7e7d062ca70ddddc\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\SoftwareDistribution\Download\a8a198f29fa1e0036a0893ee4e32b46a\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\SoftwareDistribution\Download\a8f9af6d7eab2a4aa2140dcdde4eedc2\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:18:51 755576 C:\WINDOWS\SoftwareDistribution\Download\a94a6432dbac6901fc5bf15157f718f8\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:18:51 755576 C:\WINDOWS\SoftwareDistribution\Download\aa0fb978e2349db3550eea285e93f7f0\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\SoftwareDistribution\Download\aa23f1c18895fd721870de4beeed4ad5\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:18:51 755576 C:\WINDOWS\SoftwareDistribution\Download\ab02de9444a68e46b9d94dbc7903bc14\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 00:38:29 755576 C:\WINDOWS\SoftwareDistribution\Download\aba0667128e9978b51c8d9853b0f4799\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:18 755576 C:\WINDOWS\SoftwareDistribution\Download\ad744bdeedce85bf37a096f34577ff3a\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\SoftwareDistribution\Download\b0264899240408ce315fe572c84c0e59\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\b29e2a9f14df0d88f5323f96793e432b\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\SoftwareDistribution\Download\b3183a1e00bc9d14758dc26c2b339e76\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\SoftwareDistribution\Download\b45151c33087fb9df3e7d6e3700f80ed\update\update.exe (Microsoft Corporation)
[1] 2005-06-28 10:24:51 716000 C:\WINDOWS\SoftwareDistribution\Download\b7034e5647114d3cbed18f43ed16cf71\update\Update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\SoftwareDistribution\Download\b90d3c95c82e863abf275aa0cfca232f\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\c1835c8cb0bb13f938a8a983ca5edea4\update\update.exe (Microsoft Corporation)
[1] 2008-07-08 06:02:04 755576 C:\WINDOWS\SoftwareDistribution\Download\c263092dccc247f68a43cfee93ecc72d\update\update.exe ()
[1] 2008-07-09 00:38:29 755576 C:\WINDOWS\SoftwareDistribution\Download\c8ed351b7eff9bb2da1c8957cf3e56c6\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\SoftwareDistribution\Download\c97484bc3f0a909669b5abb5a1bd9a86\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\SoftwareDistribution\Download\cfbc39150cce12d1357ba324d4d0c40c\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\d130ed3c2e7e410b5d831b3fad9ac078\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\d201072cb58fab95908d9431c4a9ed6f\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\SoftwareDistribution\Download\d61766d223927760d60364c3824ce500\update\update.exe (Microsoft Corporation)
[1] 2008-07-08 06:02:04 755576 C:\WINDOWS\SoftwareDistribution\Download\d74289c815a4c14cbe709a0654bda77e\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\SoftwareDistribution\Download\db28a0b760baa74ad8a6115c5936adf2\update\update.exe (Microsoft Corporation)
[1] 2005-06-28 10:24:51 716000 C:\WINDOWS\SoftwareDistribution\Download\dc09fcd8de87c9c2c40c26a528850011\update\Update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINDOWS\SoftwareDistribution\Download\dc3b8fb011c281dea1cb7a45f880da78\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\SoftwareDistribution\Download\dd6c2e7701be1a2e63281605463e5e51\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\dfb1b328cf19d4352aeb86f82e39c295\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:20:44 755576 C:\WINDOWS\SoftwareDistribution\Download\e0c0da396303f1dd2c82cd2ccc07020d\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:18:51 755576 C:\WINDOWS\SoftwareDistribution\Download\e1b768948601bcabeb1406e8eeccf365\update\update.exe (Microsoft Corporation)
[1] 2008-11-15 10:18:04 755576 C:\WINDOWS\SoftwareDistribution\Download\e32e42b86ada41fe0c947743c71f222c\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\SoftwareDistribution\Download\e50981864c541bdea07741b88d379a52\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\e533f2b7494d7e198f7fd652beea5687\update\update.exe (Microsoft Corporation)
[1] 2008-07-08 06:02:04 755576 C:\WINDOWS\SoftwareDistribution\Download\e740a72458caa5dc68334c7afa82ebf3\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:18:51 755576 C:\WINDOWS\SoftwareDistribution\Download\e76b316b6389286fbb342d033e63f1ba\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\SoftwareDistribution\Download\ec4eaabcd12e69f3a00a5aee112d61fd\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\SoftwareDistribution\Download\ed49db3e3eb4e8cd7de32a9e4fb59630\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\SoftwareDistribution\Download\ee626d72680ff2619246a1cf5516f892\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:28 716000 C:\WINDOWS\SoftwareDistribution\Download\f14f8865dd08e4d95c38a2ae4cb1096f\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\f29eba4fac3ab17c766d661ddeebef0f\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:20:44 755576 C:\WINDOWS\SoftwareDistribution\Download\f3174104a45ae9b1276d8609df91dcb9\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:05 718048 C:\WINDOWS\SoftwareDistribution\Download\f7a4b3723a3aad7955ede9785b307e88\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\f7c10c2b68f88196f082e36f7313e169\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\SoftwareDistribution\Download\f90f6c0c452945125b5a22f96ec4c469\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:56 716000 C:\WINDOWS\SoftwareDistribution\Download\faa864d4c16fa78e1bd62a7d9d5db724\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\SoftwareDistribution\Download\fba35126ab890f831053272d7be2a9f1\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\fd021e0d3be9e9d32612eef4c870a5b4\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\ff8044f26e091ff4d09b3860932ee4eb\update\update.exe (Microsoft Corporation)

Cannot access: C:\WINDOWS\SoftwareDistribution\Download\55ae228715888b68a08f491655790fa6\update\update.exe
[1] 2004-10-14 18:21:58 654848 C:\WINDOWS\$hf_mig$\KB873339\update\update.exe (Microsoft Corporation)
[1] 2004-11-30 22:29:47 654848 C:\WINDOWS\$hf_mig$\KB885250\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 18:34:52 654848 C:\WINDOWS\$hf_mig$\KB885835\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 18:34:48 654848 C:\WINDOWS\$hf_mig$\KB885836\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 11:34:52 654848 C:\WINDOWS\$hf_mig$\KB886185\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 18:34:52 654848 C:\WINDOWS\$hf_mig$\KB887472\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 18:34:48 654848 C:\WINDOWS\$hf_mig$\KB887742\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 18:34:48 654848 C:\WINDOWS\$hf_mig$\KB888113\update\update.exe (Microsoft Corporation)
[1] 2004-11-30 15:46:40 654848 C:\WINDOWS\$hf_mig$\KB888302\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB890046\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 18:21:58 654848 C:\WINDOWS\$hf_mig$\KB890175\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINDOWS\$hf_mig$\KB890859\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 18:21:58 654848 C:\WINDOWS\$hf_mig$\KB891781\update\update.exe (Microsoft Corporation)
[1] 2005-02-25 03:35:05 718048 C:\WINDOWS\$hf_mig$\KB893066\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB893756\update\update.exe (Microsoft Corporation)
[1] 2005-02-25 03:35:05 718048 C:\WINDOWS\$hf_mig$\KB896358\update\update.exe (Microsoft Corporation)
[1] 2005-02-25 03:35:05 718048 C:\WINDOWS\$hf_mig$\KB896422\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB896423\update\update.exe (Microsoft Corporation)
[1] 2005-02-25 03:35:05 718048 C:\WINDOWS\$hf_mig$\KB896424\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB896428\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:05 718048 C:\WINDOWS\$hf_mig$\KB898461\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB899587\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB899591\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB900485\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB900725\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB901017\update\update.exe (Microsoft Corporation)
[1] 2005-02-25 03:35:05 718048 C:\WINDOWS\$hf_mig$\KB901214\update\update.exe (Microsoft Corporation)
[1] 2005-02-25 03:35:05 718048 C:\WINDOWS\$hf_mig$\KB902400\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB904942\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:05 718048 C:\WINDOWS\$hf_mig$\KB905414\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB905749\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 23:12:28 716000 C:\WINDOWS\$hf_mig$\KB908519\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 23:12:28 716000 C:\WINDOWS\$hf_mig$\KB908531\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:28 716000 C:\WINDOWS\$hf_mig$\KB910437\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB911280\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 23:12:28 716000 C:\WINDOWS\$hf_mig$\KB911562\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB911927\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 23:12:28 716000 C:\WINDOWS\$hf_mig$\KB912919\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB913580\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB914388\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB914389\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:28 716000 C:\WINDOWS\$hf_mig$\KB915865\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\$hf_mig$\KB916595\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\$hf_mig$\KB917344\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB917422\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB917953\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB918118\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB918439\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB919007\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\$hf_mig$\KB920670\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB920683\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB920685\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB920872\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB921398\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB921503\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:28 716000 C:\WINDOWS\$hf_mig$\KB922582\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB922616\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\$hf_mig$\KB922819\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\$hf_mig$\KB923414\update\update.exe (Microsoft Corporation)
[1] 2008-11-15 10:18:04 755576 C:\WINDOWS\$hf_mig$\KB923561\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB923694\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\$hf_mig$\KB923980\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB924191\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB924270\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\$hf_mig$\KB925486\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$hf_mig$\KB925902\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB926255\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\$hf_mig$\KB926436\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$hf_mig$\KB927779\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB927802\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$hf_mig$\KB927891\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$hf_mig$\KB928255\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB928843\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$hf_mig$\KB929123\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB929338\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB929969\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB930178\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB930916\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$hf_mig$\KB931261\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB931784\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$hf_mig$\KB931836\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\$hf_mig$\KB933360\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:28 716000 C:\WINDOWS\$hf_mig$\KB933729\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$hf_mig$\KB935448\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB935839\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$hf_mig$\KB935840\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB936021\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB937894\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB938127\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:56 716000 C:\WINDOWS\$hf_mig$\KB938127-v2-IE7\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:20:44 755576 C:\WINDOWS\$hf_mig$\KB938464\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB938828\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$hf_mig$\KB938829\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\$hf_mig$\KB941202\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\$hf_mig$\KB942763\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\$hf_mig$\KB942840\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\$hf_mig$\KB943055\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\$hf_mig$\KB943485\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\$hf_mig$\KB944338-v2\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\$hf_mig$\KB944653\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\$hf_mig$\KB945553\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\$hf_mig$\KB946026\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:56 716000 C:\WINDOWS\$hf_mig$\KB946627\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:20:44 755576 C:\WINDOWS\$hf_mig$\KB946648\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\$hf_mig$\KB950749\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\$hf_mig$\KB950760\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\$hf_mig$\KB950762\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:18 755576 C:\WINDOWS\$hf_mig$\KB950974\update\update.exe (Microsoft Corporation)
[1] 2007-12-03 08:25:31 755576 C:\WINDOWS\$hf_mig$\KB951066\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:18:51 755576 C:\WINDOWS\$hf_mig$\KB951376-v2\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\$hf_mig$\KB951698\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:18 755576 C:\WINDOWS\$hf_mig$\KB951748\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:18 755576 C:\WINDOWS\$hf_mig$\KB951978\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:18 755576 C:\WINDOWS\$hf_mig$\KB952004\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:18:51 755576 C:\WINDOWS\$hf_mig$\KB952287\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\$hf_mig$\KB952954\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\$hf_mig$\KB953356\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 00:38:29 755576 C:\WINDOWS\$hf_mig$\KB954211\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\$hf_mig$\KB954459\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:18:51 755576 C:\WINDOWS\$hf_mig$\KB954600\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:18:51 755576 C:\WINDOWS\$hf_mig$\KB955069\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\$hf_mig$\KB955839\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\$hf_mig$\KB956390-IE7\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 00:38:29 755576 C:\WINDOWS\$hf_mig$\KB956572\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 04:40:52 755576 C:\WINDOWS\$hf_mig$\KB956744\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 00:38:29 755576 C:\WINDOWS\$hf_mig$\KB956802\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:18:51 755576 C:\WINDOWS\$hf_mig$\KB956803\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:18:51 755576 C:\WINDOWS\$hf_mig$\KB956841\update\update.exe (Microsoft Corporation)
[1] 2008-07-08 06:02:04 755576 C:\WINDOWS\$hf_mig$\KB957097\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\$hf_mig$\KB958215\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:18:51 755576 C:\WINDOWS\$hf_mig$\KB958644\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:18:51 755576 C:\WINDOWS\$hf_mig$\KB958687\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 00:38:29 755576 C:\WINDOWS\$hf_mig$\KB958690\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:18 755576 C:\WINDOWS\$hf_mig$\KB959426\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\$hf_mig$\KB960225\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 00:38:29 755576 C:\WINDOWS\$hf_mig$\KB960714\update\update.exe (Microsoft Corporation)
[1] 2008-11-15 10:18:04 755576 C:\WINDOWS\$hf_mig$\KB960715\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\$hf_mig$\KB960803\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 04:40:52 755576 C:\WINDOWS\$hf_mig$\KB960859\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\$hf_mig$\KB961260-IE7\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 04:40:52 755576 C:\WINDOWS\$hf_mig$\KB961371\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:18 755576 C:\WINDOWS\$hf_mig$\KB961373\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 00:38:29 755576 C:\WINDOWS\$hf_mig$\KB961501\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 00:38:29 755576 C:\WINDOWS\$hf_mig$\KB963027-IE7\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 00:38:29 755576 C:\WINDOWS\$hf_mig$\KB967715\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 00:38:29 755576 C:\WINDOWS\$hf_mig$\KB968537\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 00:38:29 755576 C:\WINDOWS\$hf_mig$\KB969897-IE7\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\$hf_mig$\KB969897-IE8\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\$hf_mig$\KB969898\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:18 755576 C:\WINDOWS\$hf_mig$\KB970238\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 04:40:52 755576 C:\WINDOWS\$hf_mig$\KB971557\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 00:38:29 755576 C:\WINDOWS\$hf_mig$\KB971633\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 04:40:52 755576 C:\WINDOWS\$hf_mig$\KB971657\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 04:40:52 755576 C:\WINDOWS\$hf_mig$\KB972260-IE8\update\update.exe (Microsoft Corporation)
[1] 2008-07-08 06:02:04 755576 C:\WINDOWS\$hf_mig$\KB972636-IE8\update\update.exe (Microsoft Corporation)
[1] 2008-07-08 06:02:04 755576 C:\WINDOWS\$hf_mig$\KB973346\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 04:40:52 755576 C:\WINDOWS\$hf_mig$\KB973354\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 04:40:52 755576 C:\WINDOWS\$hf_mig$\KB973507\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 04:40:52 755576 C:\WINDOWS\$hf_mig$\KB973815\update\update.exe (Microsoft Corporation)
[1] 2008-07-08 06:02:04 755576 C:\WINDOWS\$hf_mig$\KB973869\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 11:34:52 654848 C:\WINDOWS\$NtUninstallKB886185$\update.exe (Microsoft Corporation)
[1] 2004-11-30 15:46:40 654848 C:\WINDOWS\$NtUninstallKB888302$\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINDOWS\$NtUninstallKB890859$\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$NtUninstallKB893756$\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$NtUninstallKB896423$\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$NtUninstallKB896428$\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:05 718048 C:\WINDOWS\$NtUninstallKB898461$\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$NtUninstallKB899587$\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$NtUninstallKB899591$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB900485$\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$NtUninstallKB900725$\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$NtUninstallKB901017$\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:05 718048 C:\WINDOWS\$NtUninstallKB905414$\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$NtUninstallKB905749$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:28 716000 C:\WINDOWS\$NtUninstallKB910437$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB911280$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB911927$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB913580$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB914388$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB914389$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\$NtUninstallKB916595$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB918118$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB918439$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\$NtUninstallKB920670$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB920683$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB920685$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB920872$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:28 716000 C:\WINDOWS\$NtUninstallKB922582$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\$NtUninstallKB923980$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB924270$\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$NtUninstallKB925902$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB926255$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\$NtUninstallKB926436$\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$NtUninstallKB927779$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB927802$\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$NtUninstallKB927891$\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$NtUninstallKB928255$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB928843$\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$NtUninstallKB929123$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB930178$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:28 716000 C:\WINDOWS\$NtUninstallKB930916$\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$NtUninstallKB931261$\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$NtUninstallKB935448$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB935839$\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$NtUninstallKB935840$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB937894$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB938127$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB938828$\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\$NtUninstallKB944653$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\05c415ef6d072eb49a51ae487bfc11a6\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\07fc28da31fb67510471389f08fbbe93\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\SoftwareDistribution\Download\0ad26524c298df9a41026d3b49a38936\update\update.exe (Microsoft Corporation)
[1] 2007-10-27 17:39:46 716000 C:\WINDOWS\SoftwareDistribution\Download\0eee9353a41e1ffb7bc4207f5acf499f\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:28 716000 C:\WINDOWS\SoftwareDistribution\Download\0facce6115ab861022eae3087e064a2a\update\update.exe (Microsoft Corporation)
[1] 2005-06-28 11:24:52 716000 C:\WINDOWS\SoftwareDistribution\Download\0fbfbb50ba543b7b50c54ea4b8e33a14\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\SoftwareDistribution\Download\0fd33c77398fa2b50df56456525ef5c3\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\11e16da0817126b62afaea7136882d9f\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\SoftwareDistribution\Download\16665ed3c40ea6a0c9841eec5f15a718\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\SoftwareDistribution\Download\1ece269e23f4ef02dbea7dfa6a74a7d0\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\26553d2988faa6629ee272005cd35201\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\SoftwareDistribution\Download\26a7ba71936ef28fcb3bb73b860e289e\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:28 716000 C:\WINDOWS\SoftwareDistribution\Download\28d74bdac17e30d3a4336176766f2e4a\update\update.exe (Microsoft Corporation)
[1] 2004-11-30 15:46:40 654848 C:\WINDOWS\SoftwareDistribution\Download\29fac2778ef9276807b5af52b3f981b9\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\2a8c07aaf8ec0a2dbcb5ab11c4e40d88\update\update.exe (Microsoft Corporation)
[1] 2005-06-28 11:24:52 716000 C:\WINDOWS\SoftwareDistribution\Download\2bf7c99a865d81d4ff0847c574e5b4cf\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\SoftwareDistribution\Download\2e4e820fa4f0714d84e95e04fd4b348e\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\3049c6005e80c7b3312fd80fbee860e4\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\3112269c39ef5d624522fb876634b1d2\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 00:38:29 755576 C:\WINDOWS\SoftwareDistribution\Download\3361704fe1a0367fcfe17758efab6972\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\343df13f0a7d4e9264393401164eed58\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\355f788b6de8a3ec79e9aa172e6317f1\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 11:34:52 654848 C:\WINDOWS\SoftwareDistribution\Download\35d340428a8f32f0a91986e753c6e613\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\4185df9bd0b35509f908e14df73d4fab\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\44d74c37f0595a363bcec5e9229d8564\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:18:51 755576 C:\WINDOWS\SoftwareDistribution\Download\491a2c8e1582f5cdd01f8b3da4b8ef7d\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:18:51 755576 C:\WINDOWS\SoftwareDistribution\Download\4b975c8f39482ac4287e885ca058f798\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\SoftwareDistribution\Download\4d9d678c0d8af22c04a4a7fc7f1ff86c\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\SoftwareDistribution\Download\4e0f6637e0e9d8b518d4652361b0aec7\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 00:38:29 755576 C:\WINDOWS\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\update\update.exe ()
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\SoftwareDistribution\Download\5599132effaee562760dce29f8ca8491\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 00:38:29 755576 C:\WINDOWS\SoftwareDistribution\Download\55ae228715888b68a08f491655790fa6\update\update.exe ()
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\SoftwareDistribution\Download\561854573350299cf5c23eea1e0cff28\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:05 718048 C:\WINDOWS\SoftwareDistribution\Download\569d9f4ac4075c88e15e54f5d0847e2b\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\SoftwareDistribution\Download\5d9d48823dca01f9929a959c29f5edc4\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\5e51b5a4cef8a3ba9cc95980fae1c142\update\update.exe (Microsoft Corporation)
[1] 2007-12-03 08:25:31 755576 C:\WINDOWS\SoftwareDistribution\Download\66004d0acd607f44c08ee787c065c450\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\SoftwareDistribution\Download\660425732726e9b33577f4657b36117d\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\SoftwareDistribution\Download\6a15037304f9f3eab5357ec4718f72a9\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\SoftwareDistribution\Download\6bb372cecf80d03ab26b01c29db4654f\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\6ebd16cfa495accd1804cd7de17cee70\update\update.exe (Microsoft Corporation)
[1] 2005-06-28 11:24:52 716000 C:\WINDOWS\SoftwareDistribution\Download\70a6cc52b567da944b349ad8f3c6c2cb\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\71a994314faa34c74b73fcac7756eea1\update\update.exe (Microsoft Corporation)
[1] 2007-07-27 10:41:48 755576 C:\WINDOWS\SoftwareDistribution\Download\7468a12466bf1d654d6ea07899fe1523\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\SoftwareDistribution\Download\7bc58354ca50aa200544caaef7677c8a\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\7d6100e060a1f93df520847b1cd9dc71\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\SoftwareDistribution\Download\80046d42bf5044b609b7f7326dd9674d\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\SoftwareDistribution\Download\843953281f8497f8e20b19c4e3fe3e01\update\update.exe (Microsoft Corporation)
[1] 2005-06-28 11:24:52 716000 C:\WINDOWS\SoftwareDistribution\Download\85df2c3311b9f19cc118068642925ba1\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\SoftwareDistribution\Download\86a5d4ec598b957d3e4d2a7951b2c258\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\SoftwareDistribution\Download\8bc3857eb47e63856dbb1de3a6a2f2ee\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:18 755576 C:\WINDOWS\SoftwareDistribution\Download\8cac00e8efc87d728c0261686f85c975\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\SoftwareDistribution\Download\94d4564c331fd50de11e52451ac2e679\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:18:51 755576 C:\WINDOWS\SoftwareDistribution\Download\963193362d99ddbedffb21408a40248b\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\SoftwareDistribution\Download\97fe76a20161cb86e78057600e7c82a0\update\update.exe (Microsoft Corporation)
[1] 2007-01-15 16:21:50 716000 C:\WINDOWS\SoftwareDistribution\Download\9bb1c2b224abbb64312873e5c8754091\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\SoftwareDistribution\Download\a4246a739538de4092ff4efee1ce6dd7\update\update.exe (Microsoft Corporation)
[1] 2008-03-20 15:41:20 742192 C:\WINDOWS\SoftwareDistribution\Download\a49d784415582d2f98c84ceb0a75d898\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\SoftwareDistribution\Download\a4c6f78366f403fa7e7d062ca70ddddc\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\SoftwareDistribution\Download\a8a198f29fa1e0036a0893ee4e32b46a\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\SoftwareDistribution\Download\a8f9af6d7eab2a4aa2140dcdde4eedc2\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:18:51 755576 C:\WINDOWS\SoftwareDistribution\Download\a94a6432dbac6901fc5bf15157f718f8\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:18:51 755576 C:\WINDOWS\SoftwareDistribution\Download\aa0fb978e2349db3550eea285e93f7f0\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\SoftwareDistribution\Download\aa23f1c18895fd721870de4beeed4ad5\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:18:51 755576 C:\WINDOWS\SoftwareDistribution\Download\ab02de9444a68e46b9d94dbc7903bc14\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 00:38:29 755576 C:\WINDOWS\SoftwareDistribution\Download\aba0667128e9978b51c8d9853b0f4799\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:18 755576 C:\WINDOWS\SoftwareDistribution\Download\ad744bdeedce85bf37a096f34577ff3a\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\SoftwareDistribution\Download\b0264899240408ce315fe572c84c0e59\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\b29e2a9f14df0d88f5323f96793e432b\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\SoftwareDistribution\Download\b3183a1e00bc9d14758dc26c2b339e76\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\SoftwareDistribution\Download\b45151c33087fb9df3e7d6e3700f80ed\update\update.exe (Microsoft Corporation)
[1] 2005-06-28 10:24:51 716000 C:\WINDOWS\SoftwareDistribution\Download\b7034e5647114d3cbed18f43ed16cf71\update\Update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\SoftwareDistribution\Download\b90d3c95c82e863abf275aa0cfca232f\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\c1835c8cb0bb13f938a8a983ca5edea4\update\update.exe (Microsoft Corporation)
[1] 2008-07-08 06:02:04 755576 C:\WINDOWS\SoftwareDistribution\Download\c263092dccc247f68a43cfee93ecc72d\update\update.exe ()
[1] 2008-07-09 00:38:29 755576 C:\WINDOWS\SoftwareDistribution\Download\c8ed351b7eff9bb2da1c8957cf3e56c6\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\SoftwareDistribution\Download\c97484bc3f0a909669b5abb5a1bd9a86\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\SoftwareDistribution\Download\cfbc39150cce12d1357ba324d4d0c40c\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\d130ed3c2e7e410b5d831b3fad9ac078\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\d201072cb58fab95908d9431c4a9ed6f\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\SoftwareDistribution\Download\d61766d223927760d60364c3824ce500\update\update.exe (Microsoft Corporation)
[1] 2008-07-08 06:02:04 755576 C:\WINDOWS\SoftwareDistribution\Download\d74289c815a4c14cbe709a0654bda77e\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\SoftwareDistribution\Download\db28a0b760baa74ad8a6115c5936adf2\update\update.exe (Microsoft Corporation)
[1] 2005-06-28 10:24:51 716000 C:\WINDOWS\SoftwareDistribution\Download\dc09fcd8de87c9c2c40c26a528850011\update\Update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINDOWS\SoftwareDistribution\Download\dc3b8fb011c281dea1cb7a45f880da78\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\SoftwareDistribution\Download\dd6c2e7701be1a2e63281605463e5e51\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\dfb1b328cf19d4352aeb86f82e39c295\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:20:44 755576 C:\WINDOWS\SoftwareDistribution\Download\e0c0da396303f1dd2c82cd2ccc07020d\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:18:51 755576 C:\WINDOWS\SoftwareDistribution\Download\e1b768948601bcabeb1406e8eeccf365\update\update.exe (Microsoft Corporation)
[1] 2008-11-15 10:18:04 755576 C:\WINDOWS\SoftwareDistribution\Download\e32e42b86ada41fe0c947743c71f222c\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\SoftwareDistribution\Download\e50981864c541bdea07741b88d379a52\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\e533f2b7494d7e198f7fd652beea5687\update\update.exe (Microsoft Corporation)
[1] 2008-07-08 06:02:04 755576 C:\WINDOWS\SoftwareDistribution\Download\e740a72458caa5dc68334c7afa82ebf3\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:18:51 755576 C:\WINDOWS\SoftwareDistribution\Download\e76b316b6389286fbb342d033e63f1ba\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\SoftwareDistribution\Download\ec4eaabcd12e69f3a00a5aee112d61fd\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\SoftwareDistribution\Download\ed49db3e3eb4e8cd7de32a9e4fb59630\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\SoftwareDistribution\Download\ee626d72680ff2619246a1cf5516f892\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:28 716000 C:\WINDOWS\SoftwareDistribution\Download\f14f8865dd08e4d95c38a2ae4cb1096f\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\f29eba4fac3ab17c766d661ddeebef0f\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:20:44 755576 C:\WINDOWS\SoftwareDistribution\Download\f3174104a45ae9b1276d8609df91dcb9\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:05 718048 C:\WINDOWS\SoftwareDistribution\Download\f7a4b3723a3aad7955ede9785b307e88\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\f7c10c2b68f88196f082e36f7313e169\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\SoftwareDistribution\Download\f90f6c0c452945125b5a22f96ec4c469\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:56 716000 C:\WINDOWS\SoftwareDistribution\Download\faa864d4c16fa78e1bd62a7d9d5db724\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\SoftwareDistribution\Download\fba35126ab890f831053272d7be2a9f1\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\fd021e0d3be9e9d32612eef4c870a5b4\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\ff8044f26e091ff4d09b3860932ee4eb\update\update.exe (Microsoft Corporation)

Cannot access: C:\WINDOWS\SoftwareDistribution\Download\c263092dccc247f68a43cfee93ecc72d\update\update.exe
[1] 2004-10-14 18:21:58 654848 C:\WINDOWS\$hf_mig$\KB873339\update\update.exe (Microsoft Corporation)
[1] 2004-11-30 22:29:47 654848 C:\WINDOWS\$hf_mig$\KB885250\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 18:34:52 654848 C:\WINDOWS\$hf_mig$\KB885835\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 18:34:48 654848 C:\WINDOWS\$hf_mig$\KB885836\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 11:34:52 654848 C:\WINDOWS\$hf_mig$\KB886185\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 18:34:52 654848 C:\WINDOWS\$hf_mig$\KB887472\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 18:34:48 654848 C:\WINDOWS\$hf_mig$\KB887742\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 18:34:48 654848 C:\WINDOWS\$hf_mig$\KB888113\update\update.exe (Microsoft Corporation)
[1] 2004-11-30 15:46:40 654848 C:\WINDOWS\$hf_mig$\KB888302\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB890046\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 18:21:58 654848 C:\WINDOWS\$hf_mig$\KB890175\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINDOWS\$hf_mig$\KB890859\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 18:21:58 654848 C:\WINDOWS\$hf_mig$\KB891781\update\update.exe (Microsoft Corporation)
[1] 2005-02-25 03:35:05 718048 C:\WINDOWS\$hf_mig$\KB893066\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB893756\update\update.exe (Microsoft Corporation)
[1] 2005-02-25 03:35:05 718048 C:\WINDOWS\$hf_mig$\KB896358\update\update.exe (Microsoft Corporation)
[1] 2005-02-25 03:35:05 718048 C:\WINDOWS\$hf_mig$\KB896422\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB896423\update\update.exe (Microsoft Corporation)
[1] 2005-02-25 03:35:05 718048 C:\WINDOWS\$hf_mig$\KB896424\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB896428\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:05 718048 C:\WINDOWS\$hf_mig$\KB898461\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB899587\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB899591\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB900485\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB900725\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB901017\update\update.exe (Microsoft Corporation)
[1] 2005-02-25 03:35:05 718048 C:\WINDOWS\$hf_mig$\KB901214\update\update.exe (Microsoft Corporation)
[1] 2005-02-25 03:35:05 718048 C:\WINDOWS\$hf_mig$\KB902400\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB904942\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:05 718048 C:\WINDOWS\$hf_mig$\KB905414\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB905749\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 23:12:28 716000 C:\WINDOWS\$hf_mig$\KB908519\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 23:12:28 716000 C:\WINDOWS\$hf_mig$\KB908531\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:28 716000 C:\WINDOWS\$hf_mig$\KB910437\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB911280\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 23:12:28 716000 C:\WINDOWS\$hf_mig$\KB911562\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB911927\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 23:12:28 716000 C:\WINDOWS\$hf_mig$\KB912919\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB913580\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB914388\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB914389\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:28 716000 C:\WINDOWS\$hf_mig$\KB915865\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\$hf_mig$\KB916595\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\$hf_mig$\KB917344\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB917422\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB917953\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB918118\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB918439\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB919007\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\$hf_mig$\KB920670\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB920683\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB920685\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB920872\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB921398\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB921503\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:28 716000 C:\WINDOWS\$hf_mig$\KB922582\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB922616\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\$hf_mig$\KB922819\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\$hf_mig$\KB923414\update\update.exe (Microsoft Corporation)
[1] 2008-11-15 10:18:04 755576 C:\WINDOWS\$hf_mig$\KB923561\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB923694\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\$hf_mig$\KB923980\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB924191\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB924270\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\$hf_mig$\KB925486\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$hf_mig$\KB925902\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB926255\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\$hf_mig$\KB926436\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$hf_mig$\KB927779\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB927802\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$hf_mig$\KB927891\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$hf_mig$\KB928255\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB928843\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$hf_mig$\KB929123\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB929338\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB929969\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB930178\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB930916\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$hf_mig$\KB931261\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB931784\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$hf_mig$\KB931836\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\$hf_mig$\KB933360\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:28 716000 C:\WINDOWS\$hf_mig$\KB933729\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$hf_mig$\KB935448\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB935839\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$hf_mig$\KB935840\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB936021\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB937894\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB938127\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:56 716000 C:\WINDOWS\$hf_mig$\KB938127-v2-IE7\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:20:44 755576 C:\WINDOWS\$hf_mig$\KB938464\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$hf_mig$\KB938828\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$hf_mig$\KB938829\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\$hf_mig$\KB941202\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\$hf_mig$\KB942763\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\$hf_mig$\KB942840\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\$hf_mig$\KB943055\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\$hf_mig$\KB943485\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\$hf_mig$\KB944338-v2\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\$hf_mig$\KB944653\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\$hf_mig$\KB945553\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\$hf_mig$\KB946026\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:56 716000 C:\WINDOWS\$hf_mig$\KB946627\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:20:44 755576 C:\WINDOWS\$hf_mig$\KB946648\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\$hf_mig$\KB950749\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\$hf_mig$\KB950760\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\$hf_mig$\KB950762\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:18 755576 C:\WINDOWS\$hf_mig$\KB950974\update\update.exe (Microsoft Corporation)
[1] 2007-12-03 08:25:31 755576 C:\WINDOWS\$hf_mig$\KB951066\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:18:51 755576 C:\WINDOWS\$hf_mig$\KB951376-v2\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\$hf_mig$\KB951698\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:18 755576 C:\WINDOWS\$hf_mig$\KB951748\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:18 755576 C:\WINDOWS\$hf_mig$\KB951978\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:18 755576 C:\WINDOWS\$hf_mig$\KB952004\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:18:51 755576 C:\WINDOWS\$hf_mig$\KB952287\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\$hf_mig$\KB952954\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\$hf_mig$\KB953356\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 00:38:29 755576 C:\WINDOWS\$hf_mig$\KB954211\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\$hf_mig$\KB954459\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:18:51 755576 C:\WINDOWS\$hf_mig$\KB954600\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:18:51 755576 C:\WINDOWS\$hf_mig$\KB955069\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\$hf_mig$\KB955839\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\$hf_mig$\KB956390-IE7\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 00:38:29 755576 C:\WINDOWS\$hf_mig$\KB956572\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 04:40:52 755576 C:\WINDOWS\$hf_mig$\KB956744\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 00:38:29 755576 C:\WINDOWS\$hf_mig$\KB956802\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:18:51 755576 C:\WINDOWS\$hf_mig$\KB956803\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:18:51 755576 C:\WINDOWS\$hf_mig$\KB956841\update\update.exe (Microsoft Corporation)
[1] 2008-07-08 06:02:04 755576 C:\WINDOWS\$hf_mig$\KB957097\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\$hf_mig$\KB958215\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:18:51 755576 C:\WINDOWS\$hf_mig$\KB958644\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:18:51 755576 C:\WINDOWS\$hf_mig$\KB958687\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 00:38:29 755576 C:\WINDOWS\$hf_mig$\KB958690\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:18 755576 C:\WINDOWS\$hf_mig$\KB959426\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\$hf_mig$\KB960225\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 00:38:29 755576 C:\WINDOWS\$hf_mig$\KB960714\update\update.exe (Microsoft Corporation)
[1] 2008-11-15 10:18:04 755576 C:\WINDOWS\$hf_mig$\KB960715\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\$hf_mig$\KB960803\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 04:40:52 755576 C:\WINDOWS\$hf_mig$\KB960859\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\$hf_mig$\KB961260-IE7\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 04:40:52 755576 C:\WINDOWS\$hf_mig$\KB961371\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:18 755576 C:\WINDOWS\$hf_mig$\KB961373\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 00:38:29 755576 C:\WINDOWS\$hf_mig$\KB961501\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 00:38:29 755576 C:\WINDOWS\$hf_mig$\KB963027-IE7\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 00:38:29 755576 C:\WINDOWS\$hf_mig$\KB967715\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 00:38:29 755576 C:\WINDOWS\$hf_mig$\KB968537\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 00:38:29 755576 C:\WINDOWS\$hf_mig$\KB969897-IE7\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\$hf_mig$\KB969897-IE8\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\$hf_mig$\KB969898\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:18 755576 C:\WINDOWS\$hf_mig$\KB970238\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 04:40:52 755576 C:\WINDOWS\$hf_mig$\KB971557\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 00:38:29 755576 C:\WINDOWS\$hf_mig$\KB971633\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 04:40:52 755576 C:\WINDOWS\$hf_mig$\KB971657\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 04:40:52 755576 C:\WINDOWS\$hf_mig$\KB972260-IE8\update\update.exe (Microsoft Corporation)
[1] 2008-07-08 06:02:04 755576 C:\WINDOWS\$hf_mig$\KB972636-IE8\update\update.exe (Microsoft Corporation)
[1] 2008-07-08 06:02:04 755576 C:\WINDOWS\$hf_mig$\KB973346\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 04:40:52 755576 C:\WINDOWS\$hf_mig$\KB973354\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 04:40:52 755576 C:\WINDOWS\$hf_mig$\KB973507\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 04:40:52 755576 C:\WINDOWS\$hf_mig$\KB973815\update\update.exe (Microsoft Corporation)
[1] 2008-07-08 06:02:04 755576 C:\WINDOWS\$hf_mig$\KB973869\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 11:34:52 654848 C:\WINDOWS\$NtUninstallKB886185$\update.exe (Microsoft Corporation)
[1] 2004-11-30 15:46:40 654848 C:\WINDOWS\$NtUninstallKB888302$\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINDOWS\$NtUninstallKB890859$\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$NtUninstallKB893756$\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$NtUninstallKB896423$\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$NtUninstallKB896428$\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:05 718048 C:\WINDOWS\$NtUninstallKB898461$\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$NtUninstallKB899587$\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$NtUninstallKB899591$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB900485$\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$NtUninstallKB900725$\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$NtUninstallKB901017$\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:05 718048 C:\WINDOWS\$NtUninstallKB905414$\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$NtUninstallKB905749$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:28 716000 C:\WINDOWS\$NtUninstallKB910437$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB911280$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB911927$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB913580$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB914388$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB914389$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\$NtUninstallKB916595$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB918118$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB918439$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\$NtUninstallKB920670$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB920683$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB920685$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB920872$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:28 716000 C:\WINDOWS\$NtUninstallKB922582$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\$NtUninstallKB923980$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB924270$\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$NtUninstallKB925902$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB926255$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\$NtUninstallKB926436$\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$NtUninstallKB927779$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB927802$\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$NtUninstallKB927891$\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$NtUninstallKB928255$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB928843$\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$NtUninstallKB929123$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB930178$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:28 716000 C:\WINDOWS\$NtUninstallKB930916$\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$NtUninstallKB931261$\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$NtUninstallKB935448$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB935839$\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\$NtUninstallKB935840$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB937894$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB938127$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\$NtUninstallKB938828$\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\$NtUninstallKB944653$\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\05c415ef6d072eb49a51ae487bfc11a6\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\07fc28da31fb67510471389f08fbbe93\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\SoftwareDistribution\Download\0ad26524c298df9a41026d3b49a38936\update\update.exe (Microsoft Corporation)
[1] 2007-10-27 17:39:46 716000 C:\WINDOWS\SoftwareDistribution\Download\0eee9353a41e1ffb7bc4207f5acf499f\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:28 716000 C:\WINDOWS\SoftwareDistribution\Download\0facce6115ab861022eae3087e064a2a\update\update.exe (Microsoft Corporation)
[1] 2005-06-28 11:24:52 716000 C:\WINDOWS\SoftwareDistribution\Download\0fbfbb50ba543b7b50c54ea4b8e33a14\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\SoftwareDistribution\Download\0fd33c77398fa2b50df56456525ef5c3\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\11e16da0817126b62afaea7136882d9f\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\SoftwareDistribution\Download\16665ed3c40ea6a0c9841eec5f15a718\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\SoftwareDistribution\Download\1ece269e23f4ef02dbea7dfa6a74a7d0\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\26553d2988faa6629ee272005cd35201\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\SoftwareDistribution\Download\26a7ba71936ef28fcb3bb73b860e289e\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:28 716000 C:\WINDOWS\SoftwareDistribution\Download\28d74bdac17e30d3a4336176766f2e4a\update\update.exe (Microsoft Corporation)
[1] 2004-11-30 15:46:40 654848 C:\WINDOWS\SoftwareDistribution\Download\29fac2778ef9276807b5af52b3f981b9\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\2a8c07aaf8ec0a2dbcb5ab11c4e40d88\update\update.exe (Microsoft Corporation)
[1] 2005-06-28 11:24:52 716000 C:\WINDOWS\SoftwareDistribution\Download\2bf7c99a865d81d4ff0847c574e5b4cf\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\SoftwareDistribution\Download\2e4e820fa4f0714d84e95e04fd4b348e\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\3049c6005e80c7b3312fd80fbee860e4\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\3112269c39ef5d624522fb876634b1d2\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 00:38:29 755576 C:\WINDOWS\SoftwareDistribution\Download\3361704fe1a0367fcfe17758efab6972\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\343df13f0a7d4e9264393401164eed58\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\355f788b6de8a3ec79e9aa172e6317f1\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 11:34:52 654848 C:\WINDOWS\SoftwareDistribution\Download\35d340428a8f32f0a91986e753c6e613\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\4185df9bd0b35509f908e14df73d4fab\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\44d74c37f0595a363bcec5e9229d8564\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:18:51 755576 C:\WINDOWS\SoftwareDistribution\Download\491a2c8e1582f5cdd01f8b3da4b8ef7d\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:18:51 755576 C:\WINDOWS\SoftwareDistribution\Download\4b975c8f39482ac4287e885ca058f798\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\SoftwareDistribution\Download\4d9d678c0d8af22c04a4a7fc7f1ff86c\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\SoftwareDistribution\Download\4e0f6637e0e9d8b518d4652361b0aec7\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 00:38:29 755576 C:\WINDOWS\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\update\update.exe ()
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\SoftwareDistribution\Download\5599132effaee562760dce29f8ca8491\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 00:38:29 755576 C:\WINDOWS\SoftwareDistribution\Download\55ae228715888b68a08f491655790fa6\update\update.exe ()
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\SoftwareDistribution\Download\561854573350299cf5c23eea1e0cff28\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:05 718048 C:\WINDOWS\SoftwareDistribution\Download\569d9f4ac4075c88e15e54f5d0847e2b\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\SoftwareDistribution\Download\5d9d48823dca01f9929a959c29f5edc4\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\5e51b5a4cef8a3ba9cc95980fae1c142\update\update.exe (Microsoft Corporation)
[1] 2007-12-03 08:25:31 755576 C:\WINDOWS\SoftwareDistribution\Download\66004d0acd607f44c08ee787c065c450\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\SoftwareDistribution\Download\660425732726e9b33577f4657b36117d\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\SoftwareDistribution\Download\6a15037304f9f3eab5357ec4718f72a9\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\SoftwareDistribution\Download\6bb372cecf80d03ab26b01c29db4654f\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\6ebd16cfa495accd1804cd7de17cee70\update\update.exe (Microsoft Corporation)
[1] 2005-06-28 11:24:52 716000 C:\WINDOWS\SoftwareDistribution\Download\70a6cc52b567da944b349ad8f3c6c2cb\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\71a994314faa34c74b73fcac7756eea1\update\update.exe (Microsoft Corporation)
[1] 2007-07-27 10:41:48 755576 C:\WINDOWS\SoftwareDistribution\Download\7468a12466bf1d654d6ea07899fe1523\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\SoftwareDistribution\Download\7bc58354ca50aa200544caaef7677c8a\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\7d6100e060a1f93df520847b1cd9dc71\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\SoftwareDistribution\Download\80046d42bf5044b609b7f7326dd9674d\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\SoftwareDistribution\Download\843953281f8497f8e20b19c4e3fe3e01\update\update.exe (Microsoft Corporation)
[1] 2005-06-28 11:24:52 716000 C:\WINDOWS\SoftwareDistribution\Download\85df2c3311b9f19cc118068642925ba1\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\SoftwareDistribution\Download\86a5d4ec598b957d3e4d2a7951b2c258\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\SoftwareDistribution\Download\8bc3857eb47e63856dbb1de3a6a2f2ee\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:18 755576 C:\WINDOWS\SoftwareDistribution\Download\8cac00e8efc87d728c0261686f85c975\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\SoftwareDistribution\Download\94d4564c331fd50de11e52451ac2e679\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:18:51 755576 C:\WINDOWS\SoftwareDistribution\Download\963193362d99ddbedffb21408a40248b\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\SoftwareDistribution\Download\97fe76a20161cb86e78057600e7c82a0\update\update.exe (Microsoft Corporation)
[1] 2007-01-15 16:21:50 716000 C:\WINDOWS\SoftwareDistribution\Download\9bb1c2b224abbb64312873e5c8754091\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\SoftwareDistribution\Download\a4246a739538de4092ff4efee1ce6dd7\update\update.exe (Microsoft Corporation)
[1] 2008-03-20 15:41:20 742192 C:\WINDOWS\SoftwareDistribution\Download\a49d784415582d2f98c84ceb0a75d898\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\SoftwareDistribution\Download\a4c6f78366f403fa7e7d062ca70ddddc\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\SoftwareDistribution\Download\a8a198f29fa1e0036a0893ee4e32b46a\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\SoftwareDistribution\Download\a8f9af6d7eab2a4aa2140dcdde4eedc2\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:18:51 755576 C:\WINDOWS\SoftwareDistribution\Download\a94a6432dbac6901fc5bf15157f718f8\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:18:51 755576 C:\WINDOWS\SoftwareDistribution\Download\aa0fb978e2349db3550eea285e93f7f0\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\SoftwareDistribution\Download\aa23f1c18895fd721870de4beeed4ad5\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:18:51 755576 C:\WINDOWS\SoftwareDistribution\Download\ab02de9444a68e46b9d94dbc7903bc14\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 00:38:29 755576 C:\WINDOWS\SoftwareDistribution\Download\aba0667128e9978b51c8d9853b0f4799\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:18 755576 C:\WINDOWS\SoftwareDistribution\Download\ad744bdeedce85bf37a096f34577ff3a\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\SoftwareDistribution\Download\b0264899240408ce315fe572c84c0e59\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\b29e2a9f14df0d88f5323f96793e432b\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\SoftwareDistribution\Download\b3183a1e00bc9d14758dc26c2b339e76\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\SoftwareDistribution\Download\b45151c33087fb9df3e7d6e3700f80ed\update\update.exe (Microsoft Corporation)
[1] 2005-06-28 10:24:51 716000 C:\WINDOWS\SoftwareDistribution\Download\b7034e5647114d3cbed18f43ed16cf71\update\Update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\SoftwareDistribution\Download\b90d3c95c82e863abf275aa0cfca232f\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\c1835c8cb0bb13f938a8a983ca5edea4\update\update.exe (Microsoft Corporation)
[1] 2008-07-08 06:02:04 755576 C:\WINDOWS\SoftwareDistribution\Download\c263092dccc247f68a43cfee93ecc72d\update\update.exe ()
[1] 2008-07-09 00:38:29 755576 C:\WINDOWS\SoftwareDistribution\Download\c8ed351b7eff9bb2da1c8957cf3e56c6\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\SoftwareDistribution\Download\c97484bc3f0a909669b5abb5a1bd9a86\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\SoftwareDistribution\Download\cfbc39150cce12d1357ba324d4d0c40c\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\d130ed3c2e7e410b5d831b3fad9ac078\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\d201072cb58fab95908d9431c4a9ed6f\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:59 716000 C:\WINDOWS\SoftwareDistribution\Download\d61766d223927760d60364c3824ce500\update\update.exe (Microsoft Corporation)
[1] 2008-07-08 06:02:04 755576 C:\WINDOWS\SoftwareDistribution\Download\d74289c815a4c14cbe709a0654bda77e\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\SoftwareDistribution\Download\db28a0b760baa74ad8a6115c5936adf2\update\update.exe (Microsoft Corporation)
[1] 2005-06-28 10:24:51 716000 C:\WINDOWS\SoftwareDistribution\Download\dc09fcd8de87c9c2c40c26a528850011\update\Update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINDOWS\SoftwareDistribution\Download\dc3b8fb011c281dea1cb7a45f880da78\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\SoftwareDistribution\Download\dd6c2e7701be1a2e63281605463e5e51\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\dfb1b328cf19d4352aeb86f82e39c295\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:20:44 755576 C:\WINDOWS\SoftwareDistribution\Download\e0c0da396303f1dd2c82cd2ccc07020d\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:18:51 755576 C:\WINDOWS\SoftwareDistribution\Download\e1b768948601bcabeb1406e8eeccf365\update\update.exe (Microsoft Corporation)
[1] 2008-11-15 10:18:04 755576 C:\WINDOWS\SoftwareDistribution\Download\e32e42b86ada41fe0c947743c71f222c\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\SoftwareDistribution\Download\e50981864c541bdea07741b88d379a52\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\e533f2b7494d7e198f7fd652beea5687\update\update.exe (Microsoft Corporation)
[1] 2008-07-08 06:02:04 755576 C:\WINDOWS\SoftwareDistribution\Download\e740a72458caa5dc68334c7afa82ebf3\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:18:51 755576 C:\WINDOWS\SoftwareDistribution\Download\e76b316b6389286fbb342d033e63f1ba\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\SoftwareDistribution\Download\ec4eaabcd12e69f3a00a5aee112d61fd\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:16:51 716000 C:\WINDOWS\SoftwareDistribution\Download\ed49db3e3eb4e8cd7de32a9e4fb59630\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\SoftwareDistribution\Download\ee626d72680ff2619246a1cf5516f892\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:28 716000 C:\WINDOWS\SoftwareDistribution\Download\f14f8865dd08e4d95c38a2ae4cb1096f\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\f29eba4fac3ab17c766d661ddeebef0f\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 04:20:44 755576 C:\WINDOWS\SoftwareDistribution\Download\f3174104a45ae9b1276d8609df91dcb9\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:05 718048 C:\WINDOWS\SoftwareDistribution\Download\f7a4b3723a3aad7955ede9785b307e88\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\f7c10c2b68f88196f082e36f7313e169\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 12:29:19 716000 C:\WINDOWS\SoftwareDistribution\Download\f90f6c0c452945125b5a22f96ec4c469\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 18:22:56 716000 C:\WINDOWS\SoftwareDistribution\Download\faa864d4c16fa78e1bd62a7d9d5db724\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 05:39:22 755576 C:\WINDOWS\SoftwareDistribution\Download\fba35126ab890f831053272d7be2a9f1\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\fd021e0d3be9e9d32612eef4c870a5b4\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 16:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\ff8044f26e091ff4d09b3860932ee4eb\update\update.exe (Microsoft Corporation)

Cannot access: C:\WINDOWS\system32\eventlog.dll
[1] 2004-08-09 21:00:00 55808 C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll (Microsoft Corporation)
[1] 2008-04-13 17:11:53 56320 C:\WINDOWS\ServicePackFiles\i386\eventlog.dll (Microsoft Corporation)
[1] 2008-04-13 17:11:53 62464 C:\WINDOWS\system32\eventlog.dll ()
[2] 2008-04-13 17:11:53 56320 C:\WINDOWS\system32\logevent.dll (Microsoft Corporation)

Cannot access: C:\WINDOWS\system32\MRT.exe
[1] 2009-08-28 14:38:20 24689600 C:\WINDOWS\system32\MRT.exe ()

Cannot access: C:\WINDOWS\system32\wbem\wmiprvse.exe
[1] 2009-02-06 03:15:13 227840 C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\wmiprvse.exe (Microsoft Corporation)
[1] 2004-08-09 21:00:00 218112 C:\WINDOWS\$NtServicePackUninstall$\wmiprvse.exe (Microsoft Corporation)
[1] 2008-04-13 17:12:40 218112 C:\WINDOWS\$NtUninstallKB956572$\wmiprvse.exe (Microsoft Corporation)
[1] 2008-04-13 17:12:40 218112 C:\WINDOWS\ServicePackFiles\i386\wmiprvse.exe (Microsoft Corporation)
[1] 2009-02-06 09:39:29 227840 C:\WINDOWS\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP2GDR\wmiprvse.exe (Microsoft Corporation)
[1] 2009-02-06 02:41:05 227840 C:\WINDOWS\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP2QFE\wmiprvse.exe (Microsoft Corporation)
[1] 2009-02-06 03:10:02 227840 C:\WINDOWS\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP3GDR\wmiprvse.exe (Microsoft Corporation)
[1] 2009-02-06 03:15:13 227840 C:\WINDOWS\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP3QFE\wmiprvse.exe (Microsoft Corporation)
[1] 2009-02-06 03:10:02 227840 C:\WINDOWS\system32\dllcache\wmiprvse.exe (Microsoft Corporation)
[1] 2009-02-06 03:10:02 227840 C:\WINDOWS\system32\wbem\wmiprvse.exe ()


Finished!

#10 syler

syler

  • Malware Response Team
  • 8,150 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Warrington, UK
  • Local time:12:29 PM

Posted 20 September 2009 - 07:02 AM

Please download The Avenger by Swandog46 to your Desktop.
  • Click on Avenger.zip to open the file
  • Extract avenger.exe to your desktop
Copy all the text contained in the code box below to your Clipboard by highlighting it and pressing (Ctrl+C):

Files to move:
C:\WINDOWS\system32\logevent.dll| C:\WINDOWS\system32\eventlog.dll

Note: the above code was created specifically for this user. If you are not this user, do NOT follow these directions as they could damage the workings of your system.

Now, start The Avenger program by clicking on its icon on your desktop.
  • Click in the window labeled Input Script Here and paste the text copied to the clipboard into it by pressing (Ctrl+V).
  • Click the Execute button
  • Answer "Yes" twice when prompted.
The Avenger will automatically do the following:
  • It will Restart your computer. ( In cases where the code to execute contains "Drivers to Unload", The Avenger will actually restart your system twice.)
  • On reboot, it will briefly open a black command window on your desktop, this is normal.
  • After the restart, it creates a log file that should open with the results of Avengerís actions. This log file will be located at C:\avenger.txt
  • The Avenger will also have backed up all the files, etc., that you asked it to delete, and will have zipped them and moved the zip archives to C:\avenger\backup.zip.
Next

Go to Start >> Run then copy the following line into the run box:

"%userprofile%\desktop\win32kdiag.exe" -f -r

When it's finished, there will be a log called Win32kDiag.txt on your desktop.
Please open it with notepad and post the contents in your next reply.

Please post back here with the following logs:
  • avenger.txt
  • Win32kDiag.txt
Thanks

unite.jpg


#11 bhf

bhf
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:04:29 AM

Posted 20 September 2009 - 09:54 PM

Followed directions:

Avenger: Upon completion a NotePad window was open with the Avenger text output and there was an error window "Windows - No Disk" "Exception Processing Message c0000013 Parameters 75b6bf7c 75b6bf7c 75b6bf7c " Clicking Ignore or Continue just caused the window to reopen. Clicked cancel a couple of times and the window went away. Avenger and Win32KDiag output below:


AVENGER:

Logfile of The Avenger Version 2.0, © by Swandog46
http://swandog46.geekstogo.com

Platform: Windows XP

*******************

Script file opened successfully.
Script file read successfully.

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

Rootkit scan active.
No rootkits found!

File move operation "C:\WINDOWS\system32\logevent.dll|C:\WINDOWS\system32\eventlog.dll" completed successfully.

Completed script processing.

*******************

Finished! Terminate.



WIN32KDIAG

Running from: C:\Documents and Settings\HP_Administrator\desktop\win32kdiag.exe
Log file at : C:\Documents and Settings\HP_Administrator\Desktop\Win32kDiag.txt
Removing all found mount points.
Attempting to reset file permissions.
WARNING: Could not get backup privileges!
Searching 'C:\WINDOWS'...

Found mount point : C:\WINDOWS\$hf_mig$\KB904706\KB904706
Mount point destination : \Device\__max++>\^
Removing mount point : C:\WINDOWS\$hf_mig$\KB904706\KB904706
Found mount point : C:\WINDOWS\$hf_mig$\KB912812\KB912812
Mount point destination : \Device\__max++>\^
Removing mount point : C:\WINDOWS\$hf_mig$\KB912812\KB912812
Found mount point : C:\WINDOWS\$hf_mig$\KB912945\KB912945
Mount point destination : \Device\__max++>\^
Removing mount point : C:\WINDOWS\$hf_mig$\KB912945\KB912945
Found mount point : C:\WINDOWS\$hf_mig$\KB920213\KB920213
Mount point destination : \Device\__max++>\^
Removing mount point : C:\WINDOWS\$hf_mig$\KB920213\KB920213
Found mount point : C:\WINDOWS\$hf_mig$\KB924496\KB924496
Mount point destination : \Device\__max++>\^
Removing mount point : C:\WINDOWS\$hf_mig$\KB924496\KB924496
Found mount point : C:\WINDOWS\$hf_mig$\KB925454\KB925454
Mount point destination : \Device\__max++>\^
Removing mount point : C:\WINDOWS\$hf_mig$\KB925454\KB925454
Found mount point : C:\WINDOWS\$hf_mig$\KB928090\KB928090
Mount point destination : \Device\__max++>\^
Removing mount point : C:\WINDOWS\$hf_mig$\KB928090\KB928090
Found mount point : C:\WINDOWS\$hf_mig$\KB931768\KB931768
Mount point destination : \Device\__max++>\^
Removing mount point : C:\WINDOWS\$hf_mig$\KB931768\KB931768
Found mount point : C:\WINDOWS\$hf_mig$\KB932168\KB932168
Mount point destination : \Device\__max++>\^
Removing mount point : C:\WINDOWS\$hf_mig$\KB932168\KB932168
Found mount point : C:\WINDOWS\$hf_mig$\KB933566\KB933566
Mount point destination : \Device\__max++>\^
Removing mount point : C:\WINDOWS\$hf_mig$\KB933566\KB933566
Found mount point : C:\WINDOWS\$hf_mig$\KB937143\KB937143
Mount point destination : \Device\__max++>\^
Removing mount point : C:\WINDOWS\$hf_mig$\KB937143\KB937143
Found mount point : C:\WINDOWS\$hf_mig$\KB938127-IE7\KB938127-IE7
Mount point destination : \Device\__max++>\^
Removing mount point : C:\WINDOWS\$hf_mig$\KB938127-IE7\KB938127-IE7
Found mount point : C:\WINDOWS\$hf_mig$\KB939653\KB939653
Mount point destination : \Device\__max++>\^
Removing mount point : C:\WINDOWS\$hf_mig$\KB939653\KB939653
Found mount point : C:\WINDOWS\$hf_mig$\KB941568\KB941568
Mount point destination : \Device\__max++>\^
Removing mount point : C:\WINDOWS\$hf_mig$\KB941568\KB941568
Found mount point : C:\WINDOWS\$hf_mig$\KB942615\KB942615
Mount point destination : \Device\__max++>\^
Removing mount point : C:\WINDOWS\$hf_mig$\KB942615\KB942615
Found mount point : C:\WINDOWS\$hf_mig$\KB943460\KB943460
Mount point destination : \Device\__max++>\^
Removing mount point : C:\WINDOWS\$hf_mig$\KB943460\KB943460
Found mount point : C:\WINDOWS\assembly\NativeImages1_v1.1.4322\BDATunePIA\BDATunePIA
Mount point destination : \Device\__max++>\^
Removing mount point : C:\WINDOWS\assembly\NativeImages1_v1.1.4322\BDATunePIA\BDATunePIA
Found mount point : C:\WINDOWS\assembly\NativeImages1_v1.1.4322\ehCIR\ehCIR
Mount point destination : \Device\__max++>\^
Removing mount point : C:\WINDOWS\assembly\NativeImages1_v1.1.4322\ehCIR\ehCIR
Found mount point : C:\WINDOWS\assembly\NativeImages1_v1.1.4322\EhCM\EhCM
Mount point destination : \Device\__max++>\^
Removing mount point : C:\WINDOWS\assembly\NativeImages1_v1.1.4322\EhCM\EhCM
Found mount point : C:\WINDOWS\assembly\NativeImages1_v1.1.4322\ehepg\ehepg
Mount point destination : \Device\__max++>\^
Removing mount point : C:\WINDOWS\assembly\NativeImages1_v1.1.4322\ehepg\ehepg
Found mount point : C:\WINDOWS\assembly\NativeImages1_v1.1.4322\ehepgdat\ehepgdat
Mount point destination : \Device\__max++>\^
Removing mount point : C:\WINDOWS\assembly\NativeImages1_v1.1.4322\ehepgdat\ehepgdat
Found mount point : C:\WINDOWS\assembly\NativeImages1_v1.1.4322\ehiProxy\ehiProxy
Mount point destination : \Device\__max++>\^
Removing mount point : C:\WINDOWS\assembly\NativeImages1_v1.1.4322\ehiProxy\ehiProxy
Found mount point : C:\WINDOWS\assembly\NativeImages1_v1.1.4322\ehRecObj\ehRecObj
Mount point destination : \Device\__max++>\^
Removing mount point : C:\WINDOWS\assembly\NativeImages1_v1.1.4322\ehRecObj\ehRecObj
Found mount point : C:\WINDOWS\assembly\tmp\tmp
Mount point destination : \Device\__max++>\^
Removing mount point : C:\WINDOWS\assembly\tmp\tmp
Found mount point : C:\WINDOWS\CAVTemp\CAVTemp
Mount point destination : \Device\__max++>\^
Removing mount point : C:\WINDOWS\CAVTemp\CAVTemp
Found mount point : C:\WINDOWS\Config\Config
Mount point destination : \Device\__max++>\^
Removing mount point : C:\WINDOWS\Config\Config
Found mount point : C:\WINDOWS\Connection Wizard\Connection Wizard
Mount point destination : \Device\__max++>\^
Removing mount point : C:\WINDOWS\Connection Wizard\Connection Wizard
Found mount point : C:\WINDOWS\ftpcache\ftpcache
Mount point destination : \Device\__max++>\^
Removing mount point : C:\WINDOWS\ftpcache\ftpcache
Found mount point : C:\WINDOWS\Help\SBSI\Training\WXPPRO\Cbz\Cbz
Mount point destination : \Device\__max++>\^
Removing mount point : C:\WINDOWS\Help\SBSI\Training\WXPPRO\Cbz\Cbz
Found mount point : C:\WINDOWS\Help\SBSI\Training\WXPPRO\Lib\Lib
Mount point destination : \Device\__max++>\^
Removing mount point : C:\WINDOWS\Help\SBSI\Training\WXPPRO\Lib\Lib
Found mount point : C:\WINDOWS\Help\SBSI\Training\WXPPRO\Wave\Wave
Mount point destination : \Device\__max++>\^
Removing mount point : C:\WINDOWS\Help\SBSI\Training\WXPPRO\Wave\Wave
Cannot access: C:\WINDOWS\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\update\update.exe
Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\update\update.exe
Cannot access: C:\WINDOWS\SoftwareDistribution\Download\55ae228715888b68a08f491655790fa6\update\update.exe
Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\55ae228715888b68a08f491655790fa6\update\update.exe
Cannot access: C:\WINDOWS\SoftwareDistribution\Download\c263092dccc247f68a43cfee93ecc72d\update\update.exe
Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\c263092dccc247f68a43cfee93ecc72d\update\update.exe
Cannot access: C:\WINDOWS\system32\MRT.exe
Attempting to restore permissions of : C:\WINDOWS\system32\MRT.exe
Cannot access: C:\WINDOWS\system32\wbem\wmiprvse.exe
Attempting to restore permissions of : C:\WINDOWS\system32\wbem\wmiprvse.exe

Finished!

#12 syler

syler

  • Malware Response Team
  • 8,150 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Warrington, UK
  • Local time:12:29 PM

Posted 21 September 2009 - 01:34 AM

Please download ComboFix from one of these locations:

Link 1
Link 2
Link 3

* IMPORTANT !!! Save ComboFix.exe to your Desktop
  • Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools
  • Double click on ComboFix.exe & follow the prompts.
  • As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
  • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

Once the Microsoft Windows Recovery Console is installed, click on Yes, to continue scanning for malware.

When finished, it will produce a log for you. Please include the C:\ComboFix.txt in your next reply.

This tool is not a toy and not for everyday use.
ComboFix SHOULD NOT be used unless requested by a forum helper


If you need help, see this link:
http://www.bleepingcomputer.com/combofix/how-to-use-combofix

Next
  • Please download Junction.zip and save it, then unzip the contents to your desktop.
  • Go to Start >> Run, then Copy and paste the following command in the run box and click Ok.

    cmd /c "%userprofile%\desktop\junction.exe" -s c:\ >log.txt&log.txt& del log.txt

  • A command window opens starting to scan the system. Wait until the log file log.txt opens. Copy and paste the contents in your next reply.
Please post back here with the following logs:
  • Combofix.txt
  • log.txt
Thanks

unite.jpg


#13 bhf

bhf
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:04:29 AM

Posted 21 September 2009 - 08:18 PM

When I download the ComboFix, my McAfee antivirus thinks it is a Trojan (Atemis!190812CDF350) and blocks the download. This isn't mentioned in the ComboFix document. Is it normal for ComboFix to be classified a Trojan on download?

#14 syler

syler

  • Malware Response Team
  • 8,150 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Warrington, UK
  • Local time:12:29 PM

Posted 22 September 2009 - 02:54 AM

Yes, Combofix can sometimes be detected as a virus by AV's aslong as you have downloaded it from one of the links I gave you it will be fine.
Make sure that you completely disable McAfee before downloading and running it.

Open McAfee Security Centre
  • Under Common Tasks click on Home
  • Click Computer Files
  • Click Configure
  • Make sure the following are disabled by ticking the "Off" button.


Virus protection
Spyware protection
System Guards Protection
Script Scanning Protection
(you may have to scroll down to see it)

  • Next, select never for "When to re-enable real time scanning"
  • and click OK.

unite.jpg


#15 bhf

bhf
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:04:29 AM

Posted 22 September 2009 - 01:22 PM

OK, both seem to run OK on the infected system. Log files below:






ComboFix 09-09-22.01 - HP_Administrator 09/22/2009 10:38.1.2 - NTFSx86
Running from: c:\documents and settings\HP_Administrator\Desktop\ComboFix.exe
AV: McAfee VirusScan *On-access scanning disabled* (Outdated) {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
FW: McAfee Personal Firewall *enabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}
* Created a new restore point
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\-1537321251
c:\docume~1\HP_ADM~1\LOCALS~1\Temp\csrss.exe
c:\docume~1\HP_ADM~1\LOCALS~1\Temp\IadHide5.dll
c:\docume~1\HP_ADM~1\LOCALS~1\Temp\lsass.exe
c:\docume~1\HP_ADM~1\LOCALS~1\Temp\services.exe
c:\docume~1\HP_ADM~1\LOCALS~1\Temp\svchost.exe
c:\docume~1\HP_ADM~1\LOCALS~1\Temp\taskmgr.exe
c:\docume~1\HP_ADM~1\LOCALS~1\Temp\winlogon.exe
c:\documents and settings\HP_Administrator\Local Settings\Temp\IadHide5.dll
c:\program files\Shared\lib.dll
c:\program files\Shared\lib.sig
c:\recycler\S-1-5-21-3904913907-2386148199-2649771795-1007
c:\windows\Installer\1be5ad0.msp
c:\windows\Installer\287fa.msp
c:\windows\Installer\28802.msi
c:\windows\Installer\3a0f8.msi
c:\windows\Installer\79dd8.msi
c:\windows\Installer\79de9.msi
c:\windows\Installer\79def.msi
c:\windows\Installer\89f3b.msi
c:\windows\Installer\89f42.msi
c:\windows\Installer\89f49.msi
c:\windows\Installer\89f4f.msi
c:\windows\Installer\89f55.msi
c:\windows\Installer\89f5b.msi
c:\windows\Installer\89f61.msi
c:\windows\Installer\89f67.msi
c:\windows\Installer\89f6d.msi
c:\windows\Installer\89f73.msi
c:\windows\Installer\89f79.msi
c:\windows\Installer\89f7f.msi
c:\windows\Installer\89f85.msi
c:\windows\Installer\89f8c.msi
c:\windows\Installer\89f93.msi
c:\windows\Installer\89f99.msi
c:\windows\Installer\89fa0.msi
c:\windows\Installer\89fa6.msi
c:\windows\Installer\89fac.msi
c:\windows\Installer\89fb6.msi
c:\windows\Installer\89fbc.msi
c:\windows\Installer\89fc2.msi
c:\windows\Installer\89fc8.msi
c:\windows\Installer\89fce.msi
c:\windows\Installer\89fd4.msi
c:\windows\Installer\89fda.msi
c:\windows\Installer\89fe0.msi
c:\windows\Installer\89fe6.msi
c:\windows\Installer\89fec.msi
c:\windows\Installer\89ff2.msi
c:\windows\Installer\89ff9.msi
c:\windows\Installer\8a001.msi
c:\windows\Installer\8a009.msi
c:\windows\Installer\8a010.msi
c:\windows\Installer\8a053.msi
c:\windows\Installer\be1e12.msi
c:\windows\Installer\c266dcb.msi
c:\windows\Installer\c266fae.msi
c:\windows\Installer\c266fb3.msi
c:\windows\kb913800.exe
c:\windows\system32\braviax.exe
c:\windows\system32\tajf83ikdmf.dll
c:\windows\system32\wisdstr.exe
D:\Autorun.inf

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_{79007602-0CDB-4405-9DBF-1257BB3226ED}
-------\Legacy_{79007602-0CDB-4405-9DBF-1257BB3226EE}


((((((((((((((((((((((((( Files Created from 2009-08-22 to 2009-09-22 )))))))))))))))))))))))))))))))
.

2009-09-18 23:26 . 2009-09-18 23:27 -------- d-----w- c:\program files\malware_mbam
2009-09-18 23:17 . 2009-09-18 23:17 -------- d-sh--w- c:\documents and settings\Administrator\IETldCache
2009-09-18 01:23 . 2009-09-18 01:23 -------- d-----w- C:\rsit
2009-09-18 01:21 . 2009-09-18 01:21 -------- d-----w- c:\documents and settings\HP_Administrator\Application Data\Malwarebytes
2009-09-18 01:21 . 2009-09-10 21:54 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-09-18 01:21 . 2009-09-18 01:21 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-09-18 01:21 . 2009-09-18 01:21 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2009-09-18 01:21 . 2009-09-10 21:53 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-09-09 02:33 . 2009-06-21 21:44 153088 ------w- c:\windows\system32\dllcache\triedit.dll
2009-08-27 00:49 . 2009-08-27 02:45 -------- d-----w- c:\program files\Spybot - Search & Destroy
2009-08-27 00:49 . 2009-08-27 02:45 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-08-25 17:14 . 2009-08-25 17:15 -------- d-----w- c:\documents and settings\HP_Administrator\.housecall6.6
2009-08-25 17:04 . 2009-08-25 17:04 -------- d-----w- c:\program files\Trend Micro
2009-08-25 16:47 . 2009-08-25 17:14 102664 ----a-w- c:\windows\system32\drivers\tmcomm.sys

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-09-22 17:48 . 2009-05-24 00:17 -------- d-----w- c:\program files\Steam
2009-09-22 17:44 . 2009-08-10 02:39 -------- d-----w- c:\program files\Shared
2009-09-22 05:19 . 2009-02-24 04:29 -------- d-----w- c:\program files\McAfee
2009-09-15 00:14 . 2009-06-20 20:46 -------- d-----w- c:\documents and settings\HP_Administrator\Application Data\ZoomBrowser EX
2009-09-15 00:14 . 2009-06-20 20:40 -------- d-----w- c:\documents and settings\All Users\Application Data\ZoomBrowser
2009-09-04 21:39 . 2008-11-07 05:43 -------- d-----w- c:\documents and settings\All Users\Application Data\McAfee
2009-08-20 03:23 . 2009-07-23 04:06 -------- d-----w- c:\program files\Replay Media Catcher
2009-08-20 00:31 . 2009-07-23 04:08 237568 ----a-w- c:\windows\system32\rmc_rtspdl.dll
2009-08-20 00:31 . 2009-07-23 04:08 156672 ----a-w- c:\windows\system32\rmc_fixasf.exe
2009-08-20 00:31 . 2009-07-23 04:07 323584 ----a-w- c:\windows\system32\AUDIOGENIE2.DLL
2009-08-05 18:38 . 2009-07-30 00:06 -------- d-----w- c:\program files\Replay Video Capture
2009-08-05 18:36 . 2009-07-30 00:16 -------- d-----w- c:\documents and settings\HP_Administrator\Application Data\Move Networks
2009-08-05 09:01 . 2004-08-10 04:00 204800 ------w- c:\windows\system32\mswebdvd.dll
2009-07-31 00:52 . 2009-07-31 00:52 -------- d-----w- c:\program files\Replay Media Splitter
2009-07-31 00:52 . 2009-07-31 00:52 737280 ----a-w- c:\windows\iun6002.exe
2009-07-30 00:06 . 2009-07-30 00:06 -------- d-----w- c:\program files\Replay Converter 3
2009-07-17 19:01 . 2004-08-10 04:00 58880 ----a-w- c:\windows\system32\atl.dll
2009-07-16 19:32 . 2009-02-24 04:29 120136 ----a-w- c:\windows\system32\drivers\Mpfp.sys
2009-07-13 17:08 . 2004-08-10 04:00 286720 ----a-w- c:\windows\system32\wmpdxm.dll
2009-07-03 17:09 . 2004-08-10 04:00 915456 ----a-w- c:\windows\system32\wininet.dll
2009-07-02 06:16 . 2009-07-02 06:16 1024 ---h--r- c:\windows\system32\NTSHDW3.dll
2009-02-21 19:20 . 2009-02-21 20:20 22 --sha-w- c:\windows\SMINST\HPCD.sys
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2008-04-14 1695232]
"Steam"="c:\program files\Steam\Steam.exe" [2009-06-10 1217784]
"Shadow"="c:\program files\NewTech Infosystems\NTI Shadow for ReadyNAS\Shadow.exe" [2008-11-21 677112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray"="c:\windows\ehome\ehtray.exe" [2005-09-30 67584]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-05-09 7311360]
"DMAScheduler"="c:\program files\HP DigitalMedia Archive\DMAScheduler.exe" [2006-04-13 90112]
"Recguard"="c:\windows\SMINST\RECGUARD.EXE" [2005-07-23 237568]
"HPBootOp"="c:\program files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" [2006-02-16 249856]
"HP Software Update"="c:\program files\Hewlett-Packard\HP Software Update\HPWuSchd.exe" [2003-06-25 49152]
"mcagent_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2009-07-10 645328]
"McENUI"="c:\progra~1\McAfee\MHN\McENUI.exe" [2009-07-08 1176808]
"DeviceDiscovery"="c:\program files\HP\Digital Imaging\bin\hpotdd01.exe" [2003-05-22 229437]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2009-05-27 413696]
"ISUSPM Startup"="c:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-07-28 221184]
"ftutil2"="ftutil2.dll" - c:\windows\system32\ftutil2.dll [2004-06-07 106496]
"RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.EXE [2006-06-14 16239616]
"AlwaysReady Power Message APP"="ARPWRMSG.EXE" - c:\windows\arpwrmsg.exe [2005-08-03 77312]
"nwiz"="nwiz.exe" - c:\windows\system32\nwiz.exe [2006-05-09 1519616]

c:\documents and settings\Default User\Start Menu\Programs\Startup\
Pin.lnk - c:\hp\bin\CLOAKER.EXE [2006-9-22 27136]
PinMcLnk.lnk - c:\hp\bin\cloaker.exe [2006-9-22 27136]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
ImageMixer 3 SE Camera Monitor.lnk - c:\program files\PIXELA\ImageMixer 3 SE\CameraMonitor.exe [2009-4-12 253952]
Kodak EasyShare software.lnk - c:\program files\Kodak\Kodak EasyShare software\bin\EasyShare.exe [2006-6-2 180224]
Microsoft Office.lnk - c:\program files\Microsoft Office\Office\OSA9.EXE [1999-2-17 65588]
Nikon Monitor.lnk - c:\program files\Common Files\Nikon\Monitor\NkMonitor.exe [2007-10-18 479232]
Updates From HP.lnk - c:\program files\Updates from HP\9972322\Program\Updates from HP.exe [2006-9-22 36903]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]
@=""

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UpdatesDisableNotify"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\DISC\\DISCover.exe"=
"c:\\Program Files\\DISC\\DiscStreamHub.exe"=
"c:\\Program Files\\DISC\\myFTP.exe"=
"c:\\Program Files\\Updates from HP\\9972322\\Program\\Updates from HP.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Kodak\\Kodak EasyShare software\\bin\\EasyShare.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Steam\\steamapps\\common\\left 4 dead\\left4dead.exe"=
"c:\\Program Files\\Common Files\\McAfee\\MNA\\McNASvc.exe"=

R2 0133101253596753mcinstcleanup;McAfee Application Installer Cleanup (0133101253596753);c:\windows\TEMP\013310~1.EXE [x]
R3 root-repealed;root-repealed;c:\windows\system32\drivers\root-repealed.sys [x]
S2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\McAfee\SiteAdvisor\McSACore.exe [2009-01-23 203280]


--- Other Services/Drivers In Memory ---

*NewlyCreated* - 0133101253596753MCINSTCLEANUP

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
Contents of the 'Scheduled Tasks' folder

2009-09-19 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 19:34]

2009-02-24 c:\windows\Tasks\McDefragTask.job
- c:\progra~1\mcafee\mqc\QcConsol.exe [2009-02-24 04:26]

2009-02-24 c:\windows\Tasks\McQcTask.job
- c:\progra~1\mcafee\mqc\QcConsol.exe [2009-02-24 04:26]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com
uDefault_Search_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=64&bd=PAVILION&pf=desktop
mStart Page = hxxp://www.google.com
mSearch Bar = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=64&bd=PAVILION&pf=desktop
uInternet Settings,ProxyOverride = *.local
Trusted Zone: trymedia.com
TCP: {4DD5DE82-78A8-47B9-96BC-AB32A182524C} = 206.13.28.12,198.6.1.218
.
- - - - ORPHANS REMOVED - - - -

HKLM-Run-PCDrProfiler - (no file)
AddRemove-3ivx MPEG-4 5.0.1 - c:\program files\3ivx\3ivx MPEG-4 5.0.1



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-09-22 10:47
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_USERS\S-1-5-21-580418243-3958586928-1280992628-1007\Software\SecuROM\License information*]
"datasecu"=hex:fd,67,f8,73,32,1b,9b,1a,90,7a,33,13,67,bb,b7,18,6d,c1,e0,71,66,
02,28,48,ba,5e,58,ba,cc,98,c1,0b,b1,f8,04,1b,78,85,01,d0,f4,1f,90,2d,14,60,\
"rkeysecu"=hex:cb,bd,f2,61,5a,4e,c6,95,f2,29,8b,82,ba,6b,3d,44
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'explorer.exe'(3852)
c:\windows\system32\WININET.dll
c:\program files\McAfee\SiteAdvisor\saHook.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\webcheck.dll
.
------------------------ Other Running Processes ------------------------
.
c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\windows\arservice.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\windows\ehome\ehrecvr.exe
c:\windows\ehome\ehSched.exe
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\progra~1\McAfee\MSC\mcmscsvc.exe
c:\progra~1\COMMON~1\McAfee\MNA\McNASvc.exe
c:\progra~1\COMMON~1\McAfee\McProxy\McProxy.exe
c:\program files\McAfee\MPF\MpfSrv.exe
c:\windows\system32\nvsvc32.exe
c:\windows\ehome\mcrdsvc.exe
c:\program files\Canon\CAL\CALMAIN.exe
c:\windows\system32\dllhost.exe
c:\windows\ehome\ehmsas.exe
c:\windows\system32\dwwin.exe
c:\hp\KBD\kbd.exe
c:\progra~1\McAfee\MSC\mcupdmgr.exe
c:\progra~1\McAfee\MSC\mcupdui.exe
.
**************************************************************************
.
Completion time: 2009-09-22 10:53 - machine was rebooted
ComboFix-quarantined-files.txt 2009-09-22 17:53

Pre-Run: 117,572,005,888 bytes free
Post-Run: 118,348,259,328 bytes free

258 --- E O F --- 2009-09-22 10:00









Junction v1.05 - Windows junction creator and reparse point viewer

Copyright © 2000-2007 Mark Russinovich

Systems Internals - http://www.sysinternals.com




Failed to open \\?\c:\\hiberfil.sys: The process cannot access the file because it is being used by another process.





Failed to open \\?\c:\\pagefile.sys: The process cannot access the file because it is being used by another process.




...

.
Failed to open \\?\c:\\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp: Access is denied.




.
Failed to open \\?\c:\\Documents and Settings\All Users\Application Data\Symantec\SRTSP\Quarantine: Access is denied.




.

...

...

...

.
Failed to open \\?\c:\\Documents and Settings\HP_Administrator\Desktop\9164nntu.exe: Access is denied.





Failed to open \\?\c:\\Documents and Settings\HP_Administrator\Desktop\Root-Repealed.exe: Access is denied.





Failed to open \\?\c:\\Documents and Settings\HP_Administrator\Desktop\RootRepeal.exe: Access is denied.




..

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

..
Failed to open \\?\c:\\Program Files\Internet Explorer\iexplore.exe: Access is denied.




.

...

..
Failed to open \\?\c:\\Program Files\Malwarebytes' Anti-Malware\mbam.exe: Access is denied.





Failed to open \\?\c:\\Program Files\malware_mbam\bhf.exe.exe: Access is denied.




.
Failed to open \\?\c:\\Program Files\McAfee\VirusScan\mcods.exe: Access is denied.






...

...

...

...

...

...

.
Failed to open \\?\c:\\Program Files\Spybot - Search & Destroy\SpybotSD.exe: Access is denied.




..

...

...

...

...

...

...

...

...
Failed to open \\?\c:\\Program Files\Trend Micro\HijackThis\HijackThis.exe: Access is denied.






...

...


Failed to open \\?\c:\\System Volume Information\MountPointManagerRemoteDatabase: Access is denied.




...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

.No reparse points found.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users