Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Latest News: Winamp 5.8 Media Player Released in All Its Nostalgic Glory

Featured Deal: Get The Pay What You Want: AWS Cloud Development Bundle Deal

PC has multiple infections

Started by crazy8oooo , Sep 04 2009 01:42 PM

This topic is locked

16 replies to this topic

#1 crazy8oooo

Members
38 posts
OFFLINE

Local time:02:19 AM

Posted 04 September 2009 - 01:42 PM

Two days ago I attempted to install a program on my PC. It did not respond, but instead locked up my computer for a minute or so. I knew I had just installed a virus, because I've seen that behavior before. Prior to installing, I had scanned the file with AVG (free version) and also Superantispyware and both programs said it was clean. However, after attempting the install and then locking up, AVG immediately detected 5 viruses. Upon attempting to remove them with AVG, my computer promptly rebooted without warning.

After the reboot, I ran an AVG scan. During the scan it was up to 140+ found infections but before the scan was completed it just closed out without warning. I then tried running Superantispyware and it ran for about 5 seconds and then shut down on its own. Upon trying to restart Superantispyware, it gave me an error, something about not being able to locate a file. In addition, the icon for the Superantispyware executable has been changed and is no longer able to run.

I rebooted into safe mode and reinstalled Superantispyware and attempted to run it. Same result; it again shut down after just a second or two and then started giving me the error again when trying to re-run it.

I also attempted to run Malwarebytes, but received the same response that I did with Superantispyware.

I then decided to access the system restore utility and try rolling back to the prior day, but I was given an error saying, "System restore has been turned off by group policy.To turn on system restore please contact your domain administrator." After researching on my other computer, I was finally able to delete a registry entry and gain access to the system restore, however, it said that I have no restore points. Apparently the infections have deleted all restore points.

Currently, I am able to boot into safe mode without an issue, however, the PC won't boot up regularly outside of safe mode. It goes through the motions of having me log in and then acts as though it's loading everything like a typical startup. The desktop icons and the toolbar appear for a moment, but then disappear. The PC then just shows a blank desktop screen with nothing on it. I'm unable to access anything by right clicking the desktop or even using windows shortcuts. I can, however, access the task manager via ctrl/alt/delete. I am able to boot up in regular mode using a Superantispyware utility called bootsafe (bootsafe.exe). It allows me to boot up with access to all of my drives and programs, gain internet access etc, but still won't allow me to run the previously mentioned utilities that failed.

Also worth mentioning is that I constantly receive tasktray popups warning me that my computer is at risk and to click the balloon popup to resolve the related issues. I am also receiving numerous popups in the middle of the computer screen warning me that my PC is infected. In addition, I get numerous error messages which popup randomly telling me that a specific file was unable to load and could not be found. (Those seem to be different files each time, but are generally files like 475.exe, 23.exe, etc...)

Lastly, I tried running RootRepeal, DDS, and HijackThis in order to post logs with this thread, but all programs shutdown within second of executing them. I've even tried reinstalling all mentioned programs under different names and running them as such, but no luck with that either.

I was able to run Win32kDiag.exe and the results are posted below. (Ran in safe mode)

Any help you can provide would be greatly appreciated. Thank you...

~~~~~~~win32diag results~~~~~~~~~

Log file is located at: C:\Documents and Settings\Administrator\Desktop\Win32kDiag.txt

WARNING: Could not get backup privileges!

Searching 'C:\WINDOWS'...

Found mount point : C:\WINDOWS\$hf_mig$\KB912812\KB912812

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\$hf_mig$\KB912945\KB912945

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\$hf_mig$\KB918899\KB918899

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\$hf_mig$\KB920213\KB920213

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\$hf_mig$\KB920342\KB920342

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\$hf_mig$\KB924496\KB924496

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\$hf_mig$\KB932168\KB932168

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\$hf_mig$\KB947864\KB947864

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\addins\addins

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Application Data\Mobile Action\Driver\Driver

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP257E.tmp\ZAP257E.tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2633.tmp\ZAP2633.tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2716.tmp\ZAP2716.tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2737.tmp\ZAP2737.tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP361.tmp\ZAP361.tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\tmp\tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Config\Config

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Connection Wizard\Connection Wizard

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\CSC\d1\d1

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\CSC\d2\d2

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\CSC\d3\d3

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\CSC\d4\d4

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\CSC\d5\d5

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\CSC\d6\d6

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\CSC\d7\d7

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\CSC\d8\d8

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\ime\imejp\applets\applets

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\ime\imejp98\imejp98

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\00002109511090400000000000F01FEC\12.0.4518\12.0.4518

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\00002109F100A0C00000000000F01FEC\12.0.4518\12.0.4518

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\00002109F100C0400000000000F01FEC\12.0.4518\12.0.4518

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\0DC1503A46F231838AD88BCDDC8E8F7C\3.2.30729\3.2.30729

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\DC3BF90CC0D3D2F398A9A6D1762F70F3\2.2.30729\2.2.30729

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\java\classes\classes

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\java\trustlib\trustlib

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\Bind Logs\Bind Logs

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\Temporary ASP.NET Files

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\msapps\msinfo\msinfo

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\pchealth\ERRORREP\ERRORREP

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\pchealth\helpctr\batch\batch

Mount point destination : \Device\__max++>\^

Cannot access: C:\WINDOWS\pchealth\helpctr\binaries\helpsvc.exe

[1] 2004-08-12 06:19:33 743936 C:\WINDOWS\$NtServicePackUninstall$\helpsvc.exe (Microsoft Corporation)

[1] 2008-04-13 17:12:21 744448 C:\WINDOWS\pchealth\helpctr\binaries\helpsvc.exe ()

[1] 2008-04-13 17:12:21 744448 C:\WINDOWS\ServicePackFiles\i386\helpsvc.exe (Microsoft Corporation)

Found mount point : C:\WINDOWS\pchealth\helpctr\Config\CheckPoint\CheckPoint

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\pchealth\helpctr\Config\News\News

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\pchealth\helpctr\HelpFiles\HelpFiles

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\pchealth\helpctr\InstalledSKUs\InstalledSKUs

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\pchealth\helpctr\System\DFS\DFS

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\pchealth\helpctr\System\News\News

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\pchealth\helpctr\Temp\Temp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\PIF\PIF

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Registration\CRMLog\CRMLog

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\security\logs\logs

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\AuthCabs\Downloaded\Downloaded

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Sun\Java\Deployment\Deployment

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SxsCaPendDel\SxsCaPendDel

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\1025\1025

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\1028\1028

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\1031\1031

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\1037\1037

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\1041\1041

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\1042\1042

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\1054\1054

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\2052\2052

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\3076\3076

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\3com_dmi\3com_dmi

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\appmgmt\S-1-5-21-1027858148-1484020192-4016704887-1198\S-1-5-21-1027858148-1484020192-4016704887-1198

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\appmgmt\S-1-5-21-733219903-2712639469-3569489242-500\S-1-5-21-733219903-2712639469-3569489242-500

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Identities\{5B5EF762-0B0D-436D-BB6E-473F8A24392B}\{5B5EF762-0B0D-436D-BB6E-473F8A24392B}

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\Credentials\Credentials

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\Crypto\RSA\RSA

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\Media Player\Media Player

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\MMC\MMC

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\SystemCertificates\My\Certificates\Certificates

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\SystemCertificates\My\CRLs\CRLs

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\SystemCertificates\My\CTLs\CTLs

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\SystemCertificates\Request\Certificates\Certificates

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\SystemCertificates\Request\CRLs\CRLs

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\SystemCertificates\Request\CTLs\CTLs

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Thunderbird\Profiles\i6wbxbwe.default\chrome\chrome

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Yahoo!\Companion\Buttons\Buttons

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Desktop\Desktop

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Microsoft\CD Burning\CD Burning

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Microsoft\Credentials\Credentials

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\NetHood\NetHood

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\PrintHood\PrintHood

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\dhcp\dhcp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\dllcache\cache\cache

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\drivers\disdn\disdn

Mount point destination : \Device\__max++>\^

Cannot access: C:\WINDOWS\system32\dumprep.exe

[1] 2004-08-12 06:18:56 10752 C:\WINDOWS\$NtServicePackUninstall$\dumprep.exe (Microsoft Corporation)

[1] 2008-04-13 17:12:18 10752 C:\WINDOWS\ServicePackFiles\i386\dumprep.exe (Microsoft Corporation)

[1] 2008-04-13 17:12:18 10752 C:\WINDOWS\system32\dumprep.exe ()

Cannot access: C:\WINDOWS\system32\eventlog.dll

[1] 2004-08-12 06:19:04 55808 C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll (Microsoft Corporation)

[1] 2008-04-13 17:11:53 56320 C:\WINDOWS\ServicePackFiles\i386\eventlog.dll (Microsoft Corporation)

[1] 2008-04-13 17:11:53 61952 C:\WINDOWS\system32\eventlog.dll ()

[2] 2008-04-13 17:11:53 56320 C:\WINDOWS\system32\logevent.dll (Microsoft Corporation)

Found mount point : C:\WINDOWS\system32\export\export

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\GroupPolicy\Machine\Scripts\Shutdown\Shutdown

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\GroupPolicy\Machine\Scripts\Startup\Startup

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\GroupPolicy\User\Scripts\Logoff\Logoff

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\GroupPolicy\User\Scripts\Logon\Logon

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\Macromed\update\update

Mount point destination : \Device\__max++>\^

Cannot access: C:\WINDOWS\system32\MRT.exe

[1] 2009-07-29 17:49:16 24281536 C:\WINDOWS\system32\MRT.exe ()

Found mount point : C:\WINDOWS\system32\mui\dispspec\dispspec

Mount point destination : \Device\__max++>\^

Cannot access: C:\WINDOWS\system32\novell\nici\SYSTEM\XMGRCFG.KS2

[1] 2008-03-03 10:55:20 3948 C:\WINDOWS\system32\novell\nici\SYSTEM\XMGRCFG.KS2 ()

Cannot access: C:\WINDOWS\system32\novell\nici\SYSTEM\XMGRCFG.KS3

[1] 2008-10-21 08:53:39 268 C:\WINDOWS\system32\novell\nici\SYSTEM\XMGRCFG.KS3 ()

Found mount point : C:\WINDOWS\system32\oobe\html\ispsgnup\ispsgnup

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\oobe\html\oemcust\oemcust

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\oobe\html\oemhw\oemhw

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\oobe\html\oemreg\oemreg

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\oobe\sample\sample

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\ShellExt\ShellExt

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\spool\PRINTERS\PRINTERS

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\wbem\mof\bad\bad

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\wbem\snmp\snmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\wins\wins

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\xircom\xircom

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Twain32\Twain32

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\WinSxS\InstallTemp\InstallTemp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2

Mount point destination : \Device\__max++>\^

Finished!

Edited by crazy8oooo, 04 September 2009 - 01:44 PM.

BC AdBot (Login to Remove)

BleepingComputer.com
Register to remove ads

#2 m0le

Can U Dig It?

Malware Response Team
34,527 posts
OFFLINE

Gender:Male
Location:London, UK
Local time:07:19 AM

Posted 04 September 2009 - 02:06 PM

Hi crazy8ooo,

Welcome to Bleeping Computer. My name is m0le and I will be helping you with your log.

Please subscribe to this topic, if you haven't already.
Please avoid installing/uninstalling or updating any programs and attempting any unsupervised fixes or scans. This can make helping you impossible.
Please reply to this post so I know you are there.

The forum is busy and we need to have replies as soon as possible. If I haven't had a reply after 3 days I will bump the topic and if you do not reply by the following day after that then I will close the topic.

This is a new infection which causes multiple tool failures so I will be back when I have researched it.

Thanks

m0le is a proud member of UNITE

#3 crazy8oooo

Topic Starter

Members
38 posts
OFFLINE

Local time:02:19 AM

Posted 04 September 2009 - 02:18 PM

Thank you, m0le. I'm here and awaiting your instruction.

#4 m0le

Can U Dig It?

Malware Response Team
34,527 posts
OFFLINE

Gender:Male
Location:London, UK
Local time:07:19 AM

Posted 04 September 2009 - 04:28 PM

Okay, here we go then.

Download The Avenger by Swandog46 from here.
Unzip/extract it to a folder on your desktop.
Double click on avenger.exe to run The Avenger.
Click OK.
Make sure that the box next to Scan for rootkits has a tick in it and that the box next to Automatically disable any rootkits found does not have a tick in it.
Copy all of the text in the below code box to the clipboard by highlighting it and then pressing Ctrl+C.
```
Files to move:C:\WINDOWS\ServicePackFiles\i386\eventlog.dll | C:\WINDOWS\system32\eventlog.dll
```
In the avenger window, click the Paste Script from Clipboard, button.
Click the Execute button.
You will be asked Are you sure you want to execute the current script?.
Click Yes.
You will now be asked First step completed --- The Avenger has been successfully set up to run on next boot. Reboot now?.
Click Yes.
Your PC will now be rebooted.
Note: If the above script contains Drivers to delete: or Drivers to disable:, then The Avenger will require two reboots to complete its operation.
After your PC has completed the necessary reboots, a log should automatically open. If it does not automatically open, then the log can be found at %systemdrive%\avenger.txt (typically C:\avenger.txt).
Please post this log in your next reply.

Thanks

m0le is a proud member of UNITE

#5 crazy8oooo

Topic Starter

Members
38 posts
OFFLINE

Local time:02:19 AM

Posted 04 September 2009 - 05:15 PM

Thank you for your help...I've downloaded and ran the utility you linked me to and the results are listed below. Also, I am including two attachments.

The first one is what I have to do in order to gain internet access since being infected.

The second one is a print screen of an error that pops up upon start up.

~~~~~~~~~Results from Avenger~~~~~~~~~~

Logfile of The Avenger Version 2.0, © by Swandog46
http://swandog46.geekstogo.com

Platform: Windows XP

*******************

Script file opened successfully.
Script file read successfully.

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

Rootkit scan active.
No rootkits found!

File move operation "C:\WINDOWS\ServicePackFiles\i386\eventlog.dll|C:\WINDOWS\system32\eventlog.dll" completed successfully.

Completed script processing.

*******************

Finished! Terminate.

Attached Files

9_4_2009_3_01_09_PM.png 7.15KB 7 downloads
9_4_2009_3_09_00_PM.png 4.62KB 7 downloads

#6 m0le

Can U Dig It?

Malware Response Team
34,527 posts
OFFLINE

Gender:Male
Location:London, UK
Local time:07:19 AM

Posted 04 September 2009 - 05:49 PM

The Avenger has done its job.

Let's deal with your internet connection first.

We Need to Repair Your Internet Connection

Please download WinsockXPFix from a working machine and copy it to a CD or flash media. In your case, just perform the connection as you have been doing.
Copy the file to the desktop on the non working machine.
Double Click on on your desktop.
Push the button.
Allow your system to reboot.

You should now have continuous internet access, you should also be able to download Combofix

Please download ComboFix from one of these locations:

* IMPORTANT !!! Save ComboFix.exe to your Desktop but rename it Combo-Fix.exe

Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. (Click on this link to see a list of programs that should be disabled. The list is not all inclusive.)
Double click on Combo-Fix.exe & follow the prompts.
As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

Posted Image

Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

Posted Image

Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.

I'm looking forward to seeing this log

Edited by m0le, 04 September 2009 - 05:50 PM.

m0le is a proud member of UNITE

#7 crazy8oooo

Topic Starter

Members
38 posts
OFFLINE

Local time:02:19 AM

Posted 05 September 2009 - 01:02 AM

Here's my combofix log file. Looks like it fixed quite a bit. I noticed I'll have to re-install Superantispyware, but that's easy enough...I'll hold off, however, until we're completely done. Thanks again for your help...I'll wait for your next instruction.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

ComboFix 09-09-04.01 - Administrator 09/04/2009 22:02.3.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1014.365 [GMT -7:00]
Running from: c:\documents and settings\Administrator\Desktop\clean2\Combo-Fix.exe
AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
AV: Trend Micro OfficeScan Antivirus *On-access scanning disabled* (Outdated) {6570030F-1DAD-4BE3-B342-D21AC0B8935B}
FW: Trend Micro OfficeScan Enterprise Client Firewall *disabled* {6570030F-1DAD-4BE3-B342-D21AC0B8935B}
FW: Trend Micro Personal Firewall *disabled* {3E790E9E-6A5D-4303-A7F9-185EC20F3EB6}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\Advanced Virus Remover.lnk
c:\documents and settings\Administrator\Application Data\sito.pif
c:\documents and settings\Administrator\Cookies\anidelyqen.ban
c:\documents and settings\Administrator\Cookies\jololehehy.sys
c:\documents and settings\Administrator\Cookies\MM2048.DAT
c:\documents and settings\Administrator\Cookies\nobezusewy.dl
c:\documents and settings\Administrator\Desktop\Advanced Virus Remover.lnk
c:\documents and settings\Administrator\Local Settings\Application Data\ejuwomuk.com
c:\documents and settings\Administrator\Local Settings\Application Data\sohusyka.sys
c:\documents and settings\Administrator\Local Settings\Application Data\ugoges.dl
c:\documents and settings\Administrator\Local Settings\Application Data\xitudemipu._dl
c:\documents and settings\Administrator\Start Menu\Advanced Virus Remover.lnk
c:\documents and settings\All Users\Application Data\megyxef.scr
c:\documents and settings\All Users\Documents\aqev.exe
C:\fyblb.exe
C:\p2hhr.bat
c:\program files\AdvancedVirusRemover
c:\program files\AdvancedVirusRemover\PAVRM.exe
c:\recycler\S-1-5-21-5439943802-9852121642-142776365-6443
c:\recycler\S-1-5-21-5439943802-9852121642-142776365-6443\Desktop.ini
c:\recycler\S-1-5-21-5439943802-9852121642-142776365-6443\msimfo32.exe
c:\windows\dlap.exe
c:\windows\ehawo.inf
c:\windows\fecuje.ban
c:\windows\system32\2215978092.dat
c:\windows\system32\428df35a-7ef5-789b-d530-9778ddc04fe8.exe
c:\windows\system32\drivers\rotscxlisrajri.sys
c:\windows\system32\ijej.exe
c:\windows\system32\rotscxennpfvku.dat
c:\windows\system32\rotscxfabmpvcm.dat
c:\windows\system32\rotscxovttomqx.dll
c:\windows\system32\rotscxriciyukd.dll
c:\windows\system32\rotscxvvwipjot.dll
c:\windows\system32\UACbssmcsxvpy.dat
c:\windows\system32\uwobiwazuj.bat
c:\windows\system32\wisdstr.exe
c:\windows\system32\wscsvc32.exe

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_rotscxxexylhmq
-------\Legacy_{79007602-0CDB-4405-9DBF-1257BB3226ED}
-------\Legacy_{79007602-0CDB-4405-9DBF-1257BB3226EE}
-------\Service_rotscxxexylhmq

((((((((((((((((((((((((( Files Created from 2009-08-05 to 2009-09-05 )))))))))))))))))))))))))))))))
.

2009-09-04 06:04 . 2009-09-04 05:43 102664 ----a-w- c:\windows\system32\drivers\tmcomm.sys
2009-09-04 05:43 . 2009-09-04 06:07 -------- d-----w- c:\documents and settings\Administrator\.housecall6.6
2009-09-04 05:24 . 2009-09-04 05:24 68608 ----a-w- c:\windows\system32\drivers\ectfdbduxyriwqvr.sys
2009-09-04 05:13 . 2009-08-03 20:36 38160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-09-04 05:13 . 2009-08-03 20:36 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-09-03 18:04 . 2009-09-03 18:04 -------- d-----w- C:\spoolerlogs
2009-09-03 17:41 . 2009-09-03 17:41 17992 ----a-w- c:\program files\Common Files\ihuseh.dat
2009-09-03 17:39 . 2009-09-03 17:39 -------- d-sh--we c:\windows\system32\GroupPolicy\User\Scripts\Logoff\Logoff
2009-09-03 17:39 . 2009-09-03 17:39 -------- d-sh--we c:\windows\system32\GroupPolicy\Machine\Scripts\Shutdown\Shutdown
2009-09-03 07:29 . 2009-09-03 07:29 -------- d--h--w- c:\windows\system32\GroupPolicy
2009-09-03 06:56 . 2009-09-03 06:56 157184 ----a-w- C:\svfp.exe
2009-09-03 06:54 . 2009-09-03 06:54 49152 ----a-w- C:\hpbyv.exe
2009-09-03 06:54 . 2009-09-03 06:54 103424 ----a-w- C:\xvhu.exe
2009-09-03 06:17 . 2009-09-03 06:34 -------- d-----w- c:\documents and settings\All Users\Application Data\iOpus-i-M
2009-09-03 06:17 . 2006-08-17 01:39 241016 ----a-w- c:\windows\system32\imatl.dll
2009-09-03 06:17 . 2006-08-17 01:39 56696 ----a-w- c:\windows\system32\imsys.dll
2009-09-03 06:17 . 2009-09-03 06:27 -------- d-----w- c:\program files\iMacros
2009-09-01 00:53 . 2009-09-01 00:53 -------- d-----w- c:\windows\system32\XPSViewer
2009-09-01 00:53 . 2009-09-01 00:53 -------- d-----w- c:\program files\MSBuild
2009-09-01 00:52 . 2009-09-01 00:52 -------- d-----w- c:\program files\Reference Assemblies
2009-09-01 00:51 . 2008-07-06 12:06 89088 -c----w- c:\windows\system32\dllcache\filterpipelineprintproc.dll
2009-09-01 00:51 . 2008-07-06 12:06 117760 ------w- c:\windows\system32\prntvpt.dll
2009-09-01 00:51 . 2008-07-06 10:50 597504 -c----w- c:\windows\system32\dllcache\printfilterpipelinesvc.exe
2009-09-01 00:51 . 2008-07-06 12:06 575488 -c----w- c:\windows\system32\dllcache\xpsshhdr.dll
2009-09-01 00:51 . 2008-07-06 12:06 575488 ------w- c:\windows\system32\xpsshhdr.dll
2009-09-01 00:51 . 2008-07-06 12:06 1676288 -c----w- c:\windows\system32\dllcache\xpssvcs.dll
2009-09-01 00:51 . 2008-07-06 12:06 1676288 ------w- c:\windows\system32\xpssvcs.dll
2009-09-01 00:51 . 2009-09-03 17:39 -------- d-----w- c:\windows\SxsCaPendDel
2009-08-15 06:08 . 2009-08-15 06:08 -------- d-----w- c:\program files\CCleaner
2009-08-12 01:19 . 2009-08-12 01:19 -------- d-----w- C:\rsit
2009-08-09 03:50 . 2009-08-09 03:50 -------- d-----w- C:\ERDNT
2009-08-08 22:23 . 2009-08-08 22:23 -------- d-----w- c:\windows\system32\wbem\Repository
2009-08-07 00:30 . 2009-08-07 00:30 -------- d-----w- C:\_OTM

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-09-05 05:16 . 2009-03-10 23:56 952 --sha-w- c:\documents and settings\All Users\Application Data\KGyGaAvL.sys
2009-09-05 05:14 . 2009-02-08 09:46 -------- d-----w- c:\program files\DNA
2009-09-05 05:14 . 2009-02-08 09:46 -------- d-----w- c:\documents and settings\Administrator\Application Data\DNA
2009-09-05 05:12 . 2009-08-12 01:08 7304 ----a-w- c:\windows\TMP0001.TMP
2009-09-04 07:44 . 2008-09-06 23:28 1324 ----a-w- c:\windows\system32\d3d9caps.dat
2009-09-04 05:41 . 2008-10-14 18:54 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-09-04 01:25 . 2009-03-16 18:44 -------- d-----w- c:\documents and settings\All Users\Application Data\Google Updater
2009-09-03 17:41 . 2009-02-09 09:10 -------- d-----w- c:\program files\SUPERAntiSpyware
2009-09-03 06:44 . 2008-11-15 06:46 -------- d-----w- c:\documents and settings\Administrator\Application Data\LimeWire
2009-09-02 06:49 . 2008-11-25 23:09 -------- d-----w- c:\program files\FriendBlasterPro
2009-09-01 05:39 . 2009-01-10 01:11 -------- d-----w- c:\program files\Password Safe
2009-09-01 03:53 . 2008-11-14 00:54 113080 -c--a-w- c:\documents and settings\Administrator\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-08-21 04:17 . 2008-11-15 06:45 -------- d-----w- c:\program files\LimeWire
2009-08-16 15:46 . 2009-07-07 07:28 11952 ----a-w- c:\windows\system32\avgrsstx.dll
2009-08-16 15:46 . 2009-07-07 07:28 27784 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2009-08-16 15:46 . 2009-07-07 07:28 335240 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2009-08-15 06:15 . 2008-04-16 18:12 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-08-15 05:09 . 2008-04-16 17:42 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
2009-08-13 22:03 . 2009-08-03 18:39 -------- d-----w- c:\documents and settings\All Users\Application Data\Yahoo! Companion
2009-08-05 09:01 . 2004-08-12 13:23 204800 ----a-w- c:\windows\system32\mswebdvd.dll
2009-08-03 23:37 . 2008-12-10 02:48 -------- d-----w- c:\documents and settings\Administrator\Application Data\MxBoost
2009-08-03 18:40 . 2008-11-14 00:46 -------- d-----w- c:\documents and settings\Administrator\Application Data\Yahoo!
2009-08-03 18:40 . 2009-08-03 18:40 262144 ----a-w- C:\ntuser.dat
2009-08-03 18:40 . 2008-10-03 16:37 -------- d-----w- c:\program files\Yahoo!
2009-08-03 18:39 . 2008-10-03 16:37 -------- d-----w- c:\documents and settings\All Users\Application Data\Yahoo!
2009-08-03 16:44 . 2009-08-03 16:44 -------- d-----w- c:\program files\Common Files\xing shared
2009-08-03 16:44 . 2006-11-09 16:10 -------- d-----w- c:\program files\Common Files\Real
2009-08-03 05:29 . 2008-12-10 02:47 -------- d-----w- c:\program files\Maxthon2
2009-08-03 05:27 . 2009-08-03 05:27 -------- d-----w- c:\program files\Opera
2009-07-28 19:44 . 2009-07-07 07:28 -------- d-----w- c:\documents and settings\All Users\Application Data\avg8
2009-07-19 07:07 . 2009-07-19 07:07 -------- d-----w- c:\program files\IrfanView
2009-07-19 06:24 . 2008-04-16 18:12 -------- d-----w- c:\program files\Spybot - Search & Destroy
2009-07-17 19:01 . 2004-08-12 13:17 58880 ----a-w- c:\windows\system32\atl.dll
2009-07-13 17:08 . 2004-08-12 13:34 286720 ----a-w- c:\windows\system32\wmpdxm.dll
2009-07-07 08:08 . 2008-10-16 19:53 -------- d-----w- c:\program files\Cain
2009-07-07 07:28 . 2009-07-07 07:28 108552 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2009-07-07 07:28 . 2009-07-07 07:28 -------- d-----w- c:\program files\AVG
2009-06-26 16:50 . 2004-08-12 13:33 666624 ----a-w- c:\windows\system32\wininet.dll
2009-06-26 16:50 . 2004-08-12 13:19 81920 ----a-w- c:\windows\system32\ieencode.dll
2009-06-25 08:25 . 2004-08-12 13:32 54272 ----a-w- c:\windows\system32\wdigest.dll
2009-06-25 08:25 . 2004-08-12 13:28 56832 ----a-w- c:\windows\system32\secur32.dll
2009-06-25 08:25 . 2004-08-12 13:27 147456 ----a-w- c:\windows\system32\schannel.dll
2009-06-25 08:25 . 2004-08-12 13:23 136192 ----a-w- c:\windows\system32\msv1_0.dll
2009-06-25 08:25 . 2004-08-12 13:21 730112 ----a-w- c:\windows\system32\lsasrv.dll
2009-06-25 08:25 . 2004-08-12 13:20 301568 ----a-w- c:\windows\system32\kerberos.dll
2009-06-24 11:18 . 2004-08-12 13:20 92928 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2009-06-16 14:36 . 2004-08-12 13:30 119808 ----a-w- c:\windows\system32\t2embed.dll
2009-06-16 14:36 . 2004-08-12 13:19 81920 ----a-w- c:\windows\system32\fontsub.dll
2009-06-12 12:31 . 2004-08-12 13:31 80896 ----a-w- c:\windows\system32\tlntsess.exe
2009-06-12 12:31 . 2004-08-12 13:30 76288 ----a-w- c:\windows\system32\telnet.exe
2009-06-10 16:19 . 2006-03-22 07:15 2066432 ----a-w- c:\windows\system32\mstscax.dll
2009-06-10 14:13 . 2004-08-12 13:17 84992 ----a-w- c:\windows\system32\avifil32.dll
2009-06-10 06:14 . 2004-08-12 13:33 132096 ----a-w- c:\windows\system32\wkssvc.dll
2009-03-10 15:57 . 2009-02-05 05:46 1838 --sha-w- c:\windows\system32\KGyGaAvL.sys
.

((((((((((((((((((((((((((((( SnapShot@2009-07-19_01.57.26 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-07-12 02:41 . 2009-07-12 02:41 97280 c:\windows\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_473666fd\ATL80.dll
+ 2009-09-05 05:16 . 2009-09-05 05:16 16384 c:\windows\Temp\Perflib_Perfdata_b68.dat
+ 2009-09-05 05:13 . 2009-09-05 05:13 16384 c:\windows\Temp\Perflib_Perfdata_404.dat
+ 2009-09-05 05:13 . 2009-09-05 05:14 16384 c:\windows\Temp\Perflib_Perfdata_24c.dat
+ 2007-03-13 14:40 . 2009-07-14 11:03 46080 c:\windows\system32\tzchange.exe
+ 2008-07-30 04:10 . 2008-07-30 04:10 26112 c:\windows\system32\TsWpfWrp.exe
- 2006-03-22 07:46 . 2008-07-09 07:38 26488 c:\windows\system32\spupdsvc.exe
+ 2006-03-22 07:46 . 2007-11-30 11:18 26488 c:\windows\system32\spupdsvc.exe
+ 2009-09-01 00:52 . 2008-07-06 12:06 89088 c:\windows\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
+ 2006-03-22 07:17 . 2004-08-04 12:00 47104 c:\windows\system32\Restore\srdiag.exe
- 2006-03-22 07:17 . 2004-08-12 13:29 47104 c:\windows\system32\Restore\srdiag.exe
+ 2008-07-30 02:59 . 2008-07-30 02:59 43544 c:\windows\system32\PresentationHostProxy.dll
+ 2004-08-12 13:26 . 2009-09-01 00:58 96966 c:\windows\system32\perfc009.dat
- 2007-10-24 08:47 . 2007-10-24 08:47 15360 c:\windows\system32\mui\0409\mscorees.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 15360 c:\windows\system32\mui\0409\mscorees.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 83968 c:\windows\system32\mscories.dll
+ 2008-09-16 23:18 . 2009-08-03 18:39 88590 c:\windows\system32\Macromed\Flash\uninstall_activeX.exe
+ 2004-08-12 13:19 . 2008-04-14 00:11 56320 c:\windows\system32\logevent.dll
+ 2008-07-30 02:24 . 2008-07-30 02:24 97800 c:\windows\system32\infocardapi.dll
+ 2008-07-30 02:24 . 2008-07-30 02:24 11264 c:\windows\system32\icardres.dll
+ 2008-07-30 04:10 . 2008-07-30 04:10 73720 c:\windows\system32\dxva2.dll
+ 2006-03-22 07:17 . 2004-08-04 12:00 73472 c:\windows\system32\drivers\sr.sys
- 2006-03-22 07:17 . 2008-04-13 18:36 73472 c:\windows\system32\drivers\sr.sys
+ 2009-06-25 08:25 . 2009-06-25 08:25 54272 c:\windows\system32\dllcache\wdigest.dll
+ 2009-06-12 12:31 . 2009-06-12 12:31 80896 c:\windows\system32\dllcache\tlntsess.exe
+ 2009-06-12 12:31 . 2009-06-12 12:31 76288 c:\windows\system32\dllcache\telnet.exe
- 2009-02-03 19:59 . 2009-02-03 19:59 56832 c:\windows\system32\dllcache\secur32.dll
+ 2009-02-03 19:59 . 2009-06-25 08:25 56832 c:\windows\system32\dllcache\secur32.dll
+ 2009-06-24 11:18 . 2009-06-24 11:18 92928 c:\windows\system32\dllcache\ksecdd.sys
- 2009-02-20 08:10 . 2009-02-20 08:10 81920 c:\windows\system32\dllcache\ieencode.dll
+ 2009-02-20 08:10 . 2009-06-26 16:50 81920 c:\windows\system32\dllcache\ieencode.dll
+ 2009-06-16 14:36 . 2009-06-16 14:36 81920 c:\windows\system32\dllcache\fontsub.dll
+ 2009-06-10 14:13 . 2009-06-10 14:13 84992 c:\windows\system32\dllcache\avifil32.dll
+ 2009-07-17 19:01 . 2009-07-17 19:01 58880 c:\windows\system32\dllcache\atl.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 96760 c:\windows\system32\dfshim.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 96760 c:\windows\system32\dfshim.dll
+ 2006-03-22 07:25 . 2009-09-03 17:38 32768 c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
- 2006-03-22 07:25 . 2009-06-16 16:04 32768 c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
- 2006-03-22 07:25 . 2009-06-16 16:04 32768 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
+ 2006-03-22 07:25 . 2009-09-03 17:38 32768 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
- 2006-03-22 07:25 . 2009-06-16 16:04 32768 c:\windows\system32\config\systemprofile\Cookies\index.dat
+ 2006-03-22 07:25 . 2009-09-03 17:38 32768 c:\windows\system32\config\systemprofile\Cookies\index.dat
+ 2008-07-30 06:40 . 2008-07-30 06:40 70648 c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
+ 2008-07-30 06:40 . 2008-07-30 06:40 91136 c:\windows\Microsoft.NET\Framework\v3.5\MSBuild.exe
+ 2008-07-30 06:40 . 2008-07-30 06:40 41984 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft.VisualC.STLCLR.dll
+ 2008-07-30 06:40 . 2008-07-30 06:40 40960 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft.Data.Entity.Build.Tasks.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 89080 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.2052.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 92664 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1042.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 95224 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1041.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 89592 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1028.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 84480 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.2052.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 94720 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1042.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 97792 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1041.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 84992 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1028.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 97280 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\DeleteTemp.exe
+ 2008-07-30 06:40 . 2008-07-30 06:40 95224 c:\windows\Microsoft.NET\Framework\v3.5\EdmGen.exe
+ 2008-07-30 06:40 . 2008-07-30 06:40 78856 c:\windows\Microsoft.NET\Framework\v3.5\DataSvcUtil.exe
+ 2008-07-30 06:40 . 2008-07-30 06:40 41984 c:\windows\Microsoft.NET\Framework\v3.5\AddInUtil.exe
+ 2008-07-30 06:40 . 2008-07-30 06:40 41992 c:\windows\Microsoft.NET\Framework\v3.5\AddInProcess32.exe
+ 2008-07-30 06:40 . 2008-07-30 06:40 41992 c:\windows\Microsoft.NET\Framework\v3.5\AddInProcess.exe
+ 2008-07-30 04:10 . 2008-07-30 04:10 46104 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
+ 2008-07-30 02:59 . 2008-07-30 02:59 32768 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationCFFRasterizer.dll
+ 2008-07-30 04:10 . 2008-07-30 04:10 71160 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PenIMC.dll
+ 2008-07-30 02:32 . 2008-07-30 02:32 17448 c:\windows\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\PerformanceCounterInstaller.exe
+ 2008-07-30 02:16 . 2008-07-30 02:16 32768 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
+ 2008-07-30 02:16 . 2008-07-30 02:16 73728 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.Install.dll
+ 2008-07-30 02:16 . 2008-07-30 02:16 20504 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceMonikerSupport.dll
+ 2008-07-30 02:16 . 2008-07-30 02:16 11280 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelEvents.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 37896 c:\windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 37896 c:\windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 81400 c:\windows\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL
+ 2008-07-25 18:17 . 2008-07-25 18:17 81400 c:\windows\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL
+ 2008-07-25 18:17 . 2008-07-25 18:17 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 57392 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 57392 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 95232 c:\windows\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 95232 c:\windows\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 16896 c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 16896 c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 61952 c:\windows\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe
- 2007-10-24 08:47 . 2007-10-24 08:47 61952 c:\windows\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe
- 2007-10-24 08:47 . 2007-10-24 08:47 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
+ 2008-07-25 18:17 . 2008-07-25 18:17 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
+ 2008-07-25 18:17 . 2008-07-25 18:17 53248 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
- 2007-10-24 08:47 . 2007-10-24 08:47 53248 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
+ 2008-07-25 18:17 . 2008-07-25 18:17 88584 c:\windows\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 24584 c:\windows\Microsoft.NET\Framework\v2.0.50727\normalization.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 24584 c:\windows\Microsoft.NET\Framework\v2.0.50727\normalization.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 31744 c:\windows\Microsoft.NET\Framework\v2.0.50727\MUI\0409\mscorsecr.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 31744 c:\windows\Microsoft.NET\Framework\v2.0.50727\MUI\0409\mscorsecr.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 19456 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscortim.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 19456 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscortim.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 69632 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
- 2007-10-24 08:47 . 2007-10-24 08:47 18944 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 18944 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 77312 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 77312 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 94208 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorld.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 94208 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorld.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 46592 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorie.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 83456 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 83456 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 69632 c:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
+ 2008-07-25 18:16 . 2008-07-25 18:16 69632 c:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
+ 2008-07-25 18:16 . 2008-07-25 18:16 97792 c:\windows\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 97792 c:\windows\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 12800 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 12800 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 40960 c:\windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe
- 2007-10-24 08:47 . 2007-10-24 08:47 40960 c:\windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe
+ 2008-07-25 18:17 . 2008-07-25 18:17 72192 c:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 72192 c:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 65032 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 65032 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
+ 2008-07-25 18:17 . 2008-07-25 18:17 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
- 2007-10-24 08:47 . 2007-10-24 08:47 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEHost.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEHost.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 18936 c:\windows\Microsoft.NET\Framework\v2.0.50727\fusion.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 18936 c:\windows\Microsoft.NET\Framework\v2.0.50727\fusion.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 62968 c:\windows\Microsoft.NET\Framework\v2.0.50727\dfdll.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 35320 c:\windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
+ 2008-07-25 18:16 . 2008-07-25 18:16 35320 c:\windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
+ 2008-07-25 18:17 . 2008-07-25 18:17 69120 c:\windows\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 69120 c:\windows\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 27136 c:\windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 27136 c:\windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 13312 c:\windows\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 13312 c:\windows\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 80376 c:\windows\Microsoft.NET\Framework\v2.0.50727\csc.exe
- 2007-10-24 08:47 . 2007-10-24 08:47 80376 c:\windows\Microsoft.NET\Framework\v2.0.50727\csc.exe
+ 2008-07-25 18:17 . 2008-07-25 18:17 89608 c:\windows\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll
+ 2008-11-25 11:59 . 2008-11-25 11:59 31560 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
+ 2008-07-25 18:16 . 2008-07-25 18:16 34312 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
+ 2008-07-25 18:16 . 2008-07-25 18:16 33288 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
- 2007-10-24 08:47 . 2007-10-24 08:47 24576 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
+ 2008-07-25 18:16 . 2008-07-25 18:16 24576 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
+ 2008-07-25 18:16 . 2008-07-25 18:16 84480 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 84480 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 33800 c:\windows\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 17416 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 22024 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 22024 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
- 2007-10-24 08:47 . 2007-10-24 08:47 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
+ 2008-07-25 18:17 . 2008-07-25 18:17 58880 c:\windows\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
+ 2008-07-25 18:16 . 2008-07-25 18:16 98808 c:\windows\Microsoft.NET\Framework\v2.0.50727\alink.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 10752 c:\windows\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 10752 c:\windows\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 13824 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 13824 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 96768 c:\windows\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 16896 c:\windows\Microsoft.NET\Framework\SharedReg12.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 16896 c:\windows\Microsoft.NET\Framework\SharedReg12.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 16896 c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 16896 c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 16896 c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 16896 c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 16896 c:\windows\Microsoft.NET\Framework\sbscmp10.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 16896 c:\windows\Microsoft.NET\Framework\sbscmp10.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 82944 c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe
- 2007-10-24 08:47 . 2007-10-24 08:47 82944 c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe
+ 2008-07-30 04:07 . 2008-07-30 04:07 23040 c:\windows\Installer\262058fd.msp
+ 2009-09-01 00:50 . 2009-09-01 00:50 88576 c:\windows\Installer\261b5f25.msi
+ 2008-04-16 17:46 . 2009-08-15 05:09 35088 c:\windows\Installer\{90120000-00E0-0000-0000-0000000FF1CE}\oisicon.exe
- 2008-04-16 17:46 . 2009-04-30 10:02 35088 c:\windows\Installer\{90120000-00E0-0000-0000-0000000FF1CE}\oisicon.exe
- 2008-04-16 17:46 . 2009-04-30 10:02 18704 c:\windows\Installer\{90120000-00E0-0000-0000-0000000FF1CE}\mspicons.exe
+ 2008-04-16 17:46 . 2009-08-15 05:09 18704 c:\windows\Installer\{90120000-00E0-0000-0000-0000000FF1CE}\mspicons.exe
- 2008-04-16 17:46 . 2009-04-30 10:02 20240 c:\windows\Installer\{90120000-00E0-0000-0000-0000000FF1CE}\cagicon.exe
+ 2008-04-16 17:46 . 2009-08-15 05:09 20240 c:\windows\Installer\{90120000-00E0-0000-0000-0000000FF1CE}\cagicon.exe
- 2009-05-13 10:05 . 2009-05-13 10:05 38240 c:\windows\Installer\{90120000-0020-0409-0000-0000000FF1CE}\O12ConvIcon.exe
+ 2009-07-19 10:13 . 2009-07-19 10:13 38240 c:\windows\Installer\{90120000-0020-0409-0000-0000000FF1CE}\O12ConvIcon.exe
+ 2006-10-27 03:55 . 2006-10-27 03:55 55056 c:\windows\Installer\$PatchCache$\Managed\000021090E0000000000000000F01FEC\12.0.4518\SCANOST.EXE
+ 2006-10-27 03:55 . 2006-10-27 03:55 76576 c:\windows\Installer\$PatchCache$\Managed\000021090E0000000000000000F01FEC\12.0.4518\RM.DLL
+ 2006-10-27 03:55 . 2006-10-27 03:55 39208 c:\windows\Installer\$PatchCache$\Managed\000021090E0000000000000000F01FEC\12.0.4518\RECALL.DLL
+ 2006-10-27 03:55 . 2006-10-27 03:55 53048 c:\windows\Installer\$PatchCache$\Managed\000021090E0000000000000000F01FEC\12.0.4518\OUTLVBA.DLL
+ 2006-10-27 03:55 . 2006-10-27 03:55 21312 c:\windows\Installer\$PatchCache$\Managed\000021090E0000000000000000F01FEC\12.0.4518\MLSHEXT.DLL
+ 2006-10-27 03:55 . 2006-10-27 03:55 35160 c:\windows\Installer\$PatchCache$\Managed\000021090E0000000000000000F01FEC\12.0.4518\DUMPSTER.DLL
+ 2006-10-27 05:13 . 2006-10-27 05:13 72472 c:\windows\Installer\$PatchCache$\Managed\00002109020090400000000000F01FEC\12.0.6021\XL12CNVP.DLL
+ 2009-09-01 00:51 . 2008-07-06 12:06 89088 c:\windows\Driver Cache\i386\filterpipelineprintproc.dll
+ 2009-09-01 04:30 . 2009-09-01 04:30 24064 c:\windows\assembly\NativeImages_v2.0.50727_32\WiaProxy32\dd3a5631a3cef273a401656e44051899\WiaProxy32.ni.exe
+ 2009-09-01 04:00 . 2009-09-01 04:00 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\a715aa442ef87ae99b3ade185599249d\UIAutomationProvider.ni.dll
+ 2009-09-01 04:33 . 2009-09-01 04:33 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\423f794d1f4ed6e120fbb02e436491cb\System.Windows.Presentation.ni.dll
+ 2009-09-01 04:33 . 2009-09-01 04:33 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\19ca1747c1ea18a3b639b302bca8df93\System.Web.DynamicData.Design.ni.dll
+ 2009-09-01 04:31 . 2009-09-01 04:31 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\532438e2acfcadc469a4d468c51f8451\System.ComponentModel.DataAnnotations.ni.dll
+ 2009-09-01 04:31 . 2009-09-01 04:31 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\597b20e1b053d6a510cfe033c07a63e6\System.AddIn.Contract.ni.dll
+ 2009-09-01 01:00 . 2009-09-01 01:00 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\2d7408a0232f2e2efd0d7adf5dfa733a\PresentationFontCache.ni.exe
+ 2009-09-01 00:59 . 2009-09-01 00:59 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\c8fd2d9233f8ea3031fb16f697635231\PresentationCFFRasterizer.ni.dll
+ 2009-09-01 04:30 . 2009-09-01 04:30 20992 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.StylusR#\e7ef1fd538b666839e1f3502bc4ae9f2\PaintDotNet.StylusReader.ni.dll
+ 2009-09-01 04:30 . 2009-09-01 04:30 77824 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.Base\37162a6c84542806095916d2e2d606a4\PaintDotNet.Base.ni.dll
+ 2009-09-01 04:33 . 2009-09-01 04:33 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\790cf1edb17ee41b59be62ecbd59613b\Microsoft.Vsa.ni.dll
+ 2009-09-01 04:31 . 2009-09-01 04:31 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\5f191a0a1898e6a24c126ae4a7110472\Microsoft.SqlServer.CustomControls.ni.dll
+ 2009-09-01 04:31 . 2009-09-01 04:31 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\e9aba2eab90d647356f65e66053da02b\Microsoft.Build.Framework.ni.dll
+ 2009-09-01 04:31 . 2009-09-01 04:31 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\28343d470d992f169ca0e7cdb3cc3117\Microsoft.Build.Framework.ni.dll
+ 2009-09-01 04:30 . 2009-09-01 04:30 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\Interop.WIA\5032a7db356619fd5c44843d46dc470a\Interop.WIA.ni.dll
+ 2009-09-01 04:31 . 2009-09-01 04:31 45568 c:\windows\assembly\NativeImages_v2.0.50727_32\Infralution.Common\bce1464c2065b78c8e581fbfc499ed9b\Infralution.Common.ni.dll
+ 2009-09-01 04:31 . 2009-09-01 04:31 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\Extensibility\1a832718604c6c310563af5f95cd1a2e\Extensibility.ni.dll
+ 2009-09-01 04:30 . 2009-09-01 04:30 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\f4e38208e88cb4cc314a1d6543b9fcc6\dfsvc.ni.exe
+ 2009-09-01 04:30 . 2009-09-01 04:30 80896 c:\windows\assembly\NativeImages_v2.0.50727_32\DdsFileType\95e9b6e3dfa395b6f8028722b39296be\DdsFileType.ni.dll
+ 2009-09-01 04:30 . 2009-09-01 04:30 33280 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.Remoting.Com#\6da7b7f9410d7ca9217bb80a9eb7953b\Act.UI.Remoting.Common.ni.dll
+ 2009-09-01 04:30 . 2009-09-01 04:30 24064 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.LookupsResou#\da4636b97e0ba00bb9582d615fea205b\Act.UI.LookupsResources.ni.dll
+ 2009-09-01 04:29 . 2009-09-01 04:29 72704 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.Email\e9ce5369df3f768becfa058e132cf80d\Act.UI.Email.ni.dll
+ 2009-09-01 04:29 . 2009-09-01 04:29 25088 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.Dialogs\6cf95e5e58b7fcc3f0b4a8b2b22d91fe\Act.UI.Dialogs.ni.dll
+ 2009-09-01 04:29 . 2009-09-01 04:29 15872 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.Designer.Rep#\46b3a5fbf23a4bb9e9214f84342496db\Act.UI.Designer.Report.Resources.ni.dll
+ 2009-09-01 04:29 . 2009-09-01 04:29 22016 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.Dashboard.De#\fe5caa511b6914e2df383a68527d8fcb\Act.UI.Dashboard.Designer.View.ni.dll
+ 2009-09-01 04:29 . 2009-09-01 04:29 87552 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.Dashboard.De#\f8aa99b20f8bb4ec50f24dad11ce4b2d\Act.UI.Dashboard.Designer.Loader.ni.dll
+ 2009-09-01 04:29 . 2009-09-01 04:29 23040 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.Dashboard.De#\f2a431fc7bfa1765d82971b3e99eb69c\Act.UI.Dashboard.Designer.Interfaces.ni.dll
+ 2009-09-01 04:29 . 2009-09-01 04:29 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.Dashboard.De#\0c98bcf841c1d7d0a0abc9a34434b4e2\Act.UI.Dashboard.Designer.Common.ni.dll
+ 2009-09-01 04:28 . 2009-09-01 04:28 64512 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Shared.Windows.#\cbe9232748b8867bd7ffb23b4b51c6e1\Act.Shared.Windows.Forms.NotificationItem.ni.dll
+ 2009-09-01 04:28 . 2009-09-01 04:28 54272 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Shared.Windows.#\2a1ba8ae6528c3dbcfa0473cedbe0b4e\Act.Shared.Windows.Forms.StyleEnforcer.ni.dll
+ 2009-09-01 04:28 . 2009-09-01 04:28 15360 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Shared.UI.Utili#\74f79285c3889eeb7ad9f2352f6044ef\Act.Shared.UI.Utilities.ni.dll
+ 2009-09-01 04:28 . 2009-09-01 04:28 48128 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Shared.Messaging\1445a804f680af88227d22ed6313cce1\Act.Shared.Messaging.ni.dll
+ 2009-09-01 04:28 . 2009-09-01 04:28 24576 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Shared.Messagin#\57c39afe8d5300577018c43443f92e98\Act.Shared.Messaging.Types.ni.dll
+ 2009-09-01 04:28 . 2009-09-01 04:28 36352 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Shared.Localiza#\fd1e4ba4994e0ce54e0ee34a044d93f8\Act.Shared.Localization.ni.dll
+ 2009-09-01 04:28 . 2009-09-01 04:28 30208 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Shared.Licensing\c4f5abc25b5f502b4891be447090df63\Act.Shared.Licensing.ni.dll
+ 2009-09-01 04:28 . 2009-09-01 04:28 79360 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Shared.Config\f31eb2be0855951b35ddb01bcb594a01\Act.Shared.Config.ni.dll
+ 2009-09-01 04:28 . 2009-09-01 04:28 21504 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Framework.Synch#\3de04ccb896bd0282e84697cbdf12294\Act.Framework.Synchronization.Remoting.ni.dll
+ 2009-09-01 04:28 . 2009-09-01 04:28 54784 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Framework.Stand#\77fcf568a274bfbdf9c04ad7dfa0c1b3\Act.Framework.StandaloneActivityRecurUtility.ni.dll
+ 2009-09-01 04:28 . 2009-09-01 04:28 27648 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Framework.Messa#\21736a1c45b1c96773d00d97d9b9a363\Act.Framework.Messaging.ni.dll
+ 2009-09-01 04:27 . 2009-09-01 04:27 81920 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Devices.Synchro#\b27c94ed6195b841f46e8d26fa24e2bf\Act.Devices.Synchronization.ni.dll
+ 2009-09-01 04:27 . 2009-09-01 04:27 22016 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Devices.Plugin\1b56e971fdd7eb5ed8df49801dab9215\Act.Devices.Plugin.ni.dll
+ 2009-09-01 04:27 . 2009-09-01 04:27 64000 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Devices.Conduit#\797bc4a12e75488c5ba3f1e8dd2400b2\Act.Devices.Conduit.Config.ni.dll
+ 2009-09-01 04:27 . 2009-09-01 04:27 88064 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Data.ActDb\b7a08f249591ed14463463d6270820b6\Act.Data.ActDb.ni.dll
+ 2009-09-01 04:27 . 2009-09-01 04:27 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\11eb4f6606ba01e5128805759121ea6c\Accessibility.ni.dll
+ 2009-09-01 00:53 . 2009-09-01 00:53 94208 c:\windows\assembly\GAC_MSIL\WindowsFormsIntegration\3.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
+ 2009-09-01 00:52 . 2009-09-01 00:52 98304 c:\windows\assembly\GAC_MSIL\UIAutomationTypes\3.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
+ 2009-09-01 00:52 . 2009-09-01 00:52 40960 c:\windows\assembly\GAC_MSIL\UIAutomationProvider\3.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
+ 2009-09-01 00:54 . 2009-09-01 00:54 12288 c:\windows\assembly\GAC_MSIL\System.Windows.Presentation\3.5.0.0__b77a5c561934e089\System.Windows.Presentation.dll
+ 2009-09-01 00:54 . 2009-09-01 00:54 61440 c:\windows\assembly\GAC_MSIL\System.Web.Routing\3.5.0.0__31bf3856ad364e35\System.Web.Routing.dll
+ 2009-09-01 00:57 . 2009-09-01 00:57 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2009-09-01 00:54 . 2009-09-01 00:54 32768 c:\windows\assembly\GAC_MSIL\System.Web.DynamicData.Design\3.5.0.0__31bf3856ad364e35\System.Web.DynamicData.Design.dll
+ 2009-09-01 00:54 . 2009-09-01 00:54 77824 c:\windows\assembly\GAC_MSIL\System.Web.Abstractions\3.5.0.0__31bf3856ad364e35\System.Web.Abstractions.dll
+ 2009-09-01 00:52 . 2009-09-01 00:52 32768 c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
+ 2009-09-01 00:52 . 2009-09-01 00:52 73728 c:\windows\assembly\GAC_MSIL\System.ServiceModel.Install\3.0.0.0__b77a5c561934e089\System.ServiceModel.Install.dll
+ 2009-09-01 00:57 . 2009-09-01 00:57 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
- 2008-05-28 14:14 . 2008-05-28 14:14 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
+ 2009-09-01 00:54 . 2009-09-01 00:54 53248 c:\windows\assembly\GAC_MSIL\System.Data.DataSetExtensions\3.5.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
+ 2009-09-01 00:57 . 2009-09-01 00:57 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2008-05-28 14:14 . 2008-05-28 14:14 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
+ 2009-09-01 00:54 . 2009-09-01 00:54 57344 c:\windows\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\3.5.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
+ 2009-09-01 00:54 . 2009-09-01 00:54 45056 c:\windows\assembly\GAC_MSIL\System.AddIn.Contract\2.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
+ 2009-09-01 00:53 . 2009-09-01 00:53 46104 c:\windows\assembly\GAC_MSIL\PresentationFontCache\3.0.0.0__31bf3856ad364e35\PresentationFontCache.exe
+ 2009-09-01 00:52 . 2009-09-01 00:52 32768 c:\windows\assembly\GAC_MSIL\PresentationCFFRasterizer\3.0.0.0__31bf3856ad364e35\PresentationCFFRasterizer.dll
- 2008-05-28 14:14 . 2008-05-28 14:14 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
+ 2009-09-01 00:57 . 2009-09-01 00:57 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
- 2008-05-28 14:14 . 2008-05-28 14:14 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2009-09-01 00:57 . 2009-09-01 00:57 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2009-09-01 00:54 . 2009-09-01 00:54 41984 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\1.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.STLCLR.dll
- 2008-05-28 14:14 . 2008-05-28 14:14 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
+ 2009-09-01 00:57 . 2009-09-01 00:57 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
+ 2009-09-01 00:57 . 2009-09-01 00:57 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
- 2008-05-28 14:14 . 2008-05-28 14:14 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
+ 2009-09-01 00:54 . 2009-09-01 00:54 94208 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.v3.5.dll
+ 2009-09-01 00:54 . 2009-09-01 00:54 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
- 2008-05-28 14:14 . 2008-05-28 14:14 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
+ 2009-09-01 00:57 . 2009-09-01 00:57 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
- 2008-05-28 14:14 . 2008-05-28 14:14 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
+ 2009-09-01 00:57 . 2009-09-01 00:57 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
+ 2009-09-01 00:57 . 2009-09-01 00:57 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
- 2008-05-28 14:14 . 2008-05-28 14:14 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
+ 2009-09-01 00:57 . 2009-09-01 00:57 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
- 2008-05-28 14:14 . 2008-05-28 14:14 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
- 2008-05-28 14:14 . 2008-05-28 14:14 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2009-09-01 00:57 . 2009-09-01 00:57 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2009-09-01 00:57 . 2009-09-01 00:57 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2008-05-28 14:14 . 2008-05-28 14:14 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2009-07-29 10:07 . 2009-04-29 04:46 81920 c:\windows\$NtUninstallKB972260$\ieencode.dll
+ 2009-07-19 10:13 . 2009-02-20 08:10 81920 c:\windows\$NtUninstallKB969897$\ieencode.dll
+ 2009-07-19 12:14 . 2008-04-14 00:11 80896 c:\windows\$NtUninstallKB961371$\fontsub.dll
+ 2009-07-19 10:13 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB973346\update\spcustom.dll
+ 2009-07-19 10:13 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB973346\spmsg.dll
+ 2009-07-29 10:07 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB972260\update\spcustom.dll
+ 2009-07-29 10:07 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB972260\spmsg.dll
+ 2009-06-26 16:42 . 2009-06-26 16:42 81920 c:\windows\$hf_mig$\KB972260\SP3QFE\ieencode.dll
+ 2009-07-19 10:12 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB971633\update\spcustom.dll
+ 2009-07-19 10:12 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB971633\spmsg.dll
+ 2009-07-19 10:10 . 2007-11-30 12:39 26488 c:\windows\$hf_mig$\KB970238\update\spcustom.dll
+ 2009-07-19 10:10 . 2007-11-30 12:39 17272 c:\windows\$hf_mig$\KB970238\spmsg.dll
+ 2009-07-19 10:13 . 2007-11-30 12:39 26488 c:\windows\$hf_mig$\KB969897\update\spcustom.dll
+ 2009-07-19 10:13 . 2007-11-30 12:39 17272 c:\windows\$hf_mig$\KB969897\spmsg.dll
+ 2009-04-29 04:21 . 2009-04-29 04:21 81920 c:\windows\$hf_mig$\KB969897\SP3QFE\ieencode.dll
+ 2009-07-19 12:14 . 2008-07-09 07:38 26488 c:\windows\$hf_mig$\KB968537\update\spcustom.dll
+ 2009-07-19 12:14 . 2008-07-09 07:38 17272 c:\windows\$hf_mig$\KB968537\spmsg.dll
+ 2009-07-19 10:13 . 2008-07-09 07:38 26488 c:\windows\$hf_mig$\KB961501\update\spcustom.dll
+ 2009-07-19 10:13 . 2008-07-09 07:38 17272 c:\windows\$hf_mig$\KB961501\spmsg.dll
+ 2009-07-19 12:14 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB961371\update\spcustom.dll
+ 2009-07-19 12:14 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB961371\spmsg.dll
+ 2009-06-16 14:43 . 2009-06-16 14:43 81920 c:\windows\$hf_mig$\KB961371\SP3QFE\fontsub.dll
+ 2009-09-01 00:57 . 2009-09-01 00:57 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
- 2008-05-28 14:14 . 2008-05-28 14:14 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
- 2006-11-10 15:01 . 2006-11-10 15:01 5632 c:\windows\system32\pndx5032.dll
+ 2006-11-10 15:01 . 2009-08-03 16:43 5632 c:\windows\system32\pndx5032.dll
- 2006-11-10 15:01 . 2006-11-10 15:01 6656 c:\windows\system32\pndx5016.dll
+ 2006-11-10 15:01 . 2009-08-03 16:43 6656 c:\windows\system32\pndx5016.dll
+ 2008-07-30 06:40 . 2008-07-30 06:40 5632 c:\windows\Microsoft.NET\Framework\v3.5\Sentinel.v3.5Client.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 7168 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 7168 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 5632 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 5632 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 6656 c:\windows\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 6656 c:\windows\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 8192 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 8192 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 9728 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
- 2007-10-24 08:47 . 2007-10-24 08:47 9728 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
- 2007-10-24 08:47 . 2007-10-24 08:47 5120 c:\windows\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
+ 2008-07-25 18:16 . 2008-07-25 18:16 5120 c:\windows\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
+ 2009-08-10 00:28 . 2009-08-10 00:28 8192 c:\windows\History\MM256.DAT
+ 2009-08-10 00:28 . 2009-08-10 00:28 8192 c:\windows\History\MM2048.DAT
+ 2009-08-08 21:17 . 2009-08-08 21:17 8192 c:\windows\ERDNT\8-8-2009\Users\00000004\UsrClass.dat
+ 2009-08-08 21:17 . 2009-08-08 21:17 8192 c:\windows\ERDNT\8-8-2009\Users\00000002\UsrClass.dat
+ 2009-09-01 00:54 . 2009-09-01 00:54 5632 c:\windows\assembly\GAC_MSIL\Sentinel.v3.5Client\3.5.0.0__b03f5f7f11d50a3a\Sentinel.v3.5Client.dll
+ 2009-09-01 00:57 . 2009-09-01 00:57 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
- 2008-05-28 14:14 . 2008-05-28 14:14 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
+ 2009-09-01 00:57 . 2009-09-01 00:57 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2008-05-28 14:14 . 2008-05-28 14:14 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2008-05-28 14:14 . 2008-05-28 14:14 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
+ 2009-09-01 00:57 . 2009-09-01 00:57 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
- 2008-05-28 14:14 . 2008-05-28 14:14 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2009-09-01 00:57 . 2009-09-01 00:57 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2009-09-01 00:57 . 2009-09-01 00:57 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
- 2008-05-28 14:14 . 2008-05-28 14:14 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
- 2008-05-28 14:14 . 2008-05-28 14:14 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
+ 2009-09-01 00:57 . 2009-09-01 00:57 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
+ 2009-07-12 07:02 . 2009-07-12 07:02 159032 c:\windows\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_353599c2\atl90.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 635904 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcr80.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 558080 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcp80.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 479232 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcm80.dll
+ 2008-07-30 04:26 . 2008-07-30 04:26 301568 c:\windows\system32\XPSViewer\XPSViewer.exe
+ 2006-04-10 20:00 . 2009-03-11 05:18 934792 c:\windows\system32\WgaTray.exe
+ 2006-04-10 20:00 . 2009-03-11 05:18 239496 c:\windows\system32\WgaLogon.dll
+ 2004-08-12 13:31 . 2009-06-26 16:50 620032 c:\windows\system32\urlmon.dll
+ 2008-07-30 02:59 . 2008-07-30 02:59 161296 c:\windows\system32\UIAutomationCore.dll
+ 2009-09-01 00:52 . 2008-07-06 12:06 765440 c:\windows\system32\spool\XPSEP\i386\mxdwdrv.dll
+ 2009-09-01 00:52 . 2008-07-06 12:06 765440 c:\windows\system32\spool\XPSEP\i386\i386\mxdwdrv.dll
+ 2009-09-01 00:52 . 2008-07-06 12:06 748032 c:\windows\system32\spool\XPSEP\amd64\mxdwdrv.dll
+ 2009-09-01 00:52 . 2008-07-06 12:06 748032 c:\windows\system32\spool\XPSEP\amd64\amd64\mxdwdrv.dll
+ 2009-09-01 00:52 . 2008-07-06 12:06 147456 c:\windows\system32\spool\prtprocs\x64\filterpipelineprintproc.dll
+ 2009-09-01 00:51 . 2008-07-06 10:50 597504 c:\windows\system32\spool\prtprocs\w32x86\printfilterpipelinesvc.exe
- 2003-11-04 08:00 . 2007-05-15 09:08 761344 c:\windows\system32\spool\drivers\w32x86\3\UNIRES.DLL
+ 2003-11-04 08:00 . 2008-03-13 04:52 761344 c:\windows\system32\spool\drivers\w32x86\3\unires.dll
+ 2003-11-04 08:00 . 2008-07-06 12:06 744960 c:\windows\system32\spool\drivers\w32x86\3\unidrvui.dll
+ 2003-11-04 08:00 . 2008-07-06 12:06 373248 c:\windows\system32\spool\drivers\w32x86\3\unidrv.dll
- 2003-11-04 08:00 . 2008-04-14 01:12 373248 c:\windows\system32\spool\drivers\w32x86\3\UNIDRV.DLL
+ 2009-09-01 00:51 . 2008-07-06 12:06 198656 c:\windows\system32\spool\drivers\w32x86\3\mxdwdui.dll
+ 2009-09-01 00:51 . 2008-07-06 12:06 765440 c:\windows\system32\spool\drivers\w32x86\3\mxdwdrv.dll
+ 2004-08-12 13:27 . 2009-04-15 14:51 585216 c:\windows\system32\rpcrt4.dll
+ 2006-11-10 15:01 . 2009-08-03 16:44 185944 c:\windows\system32\rmoc3260.dll
+ 2006-08-24 23:15 . 2006-08-24 23:15 150808 c:\windows\system32\rgb9rast_2.dll
+ 2009-08-08 02:02 . 2009-08-08 22:25 744544 c:\windows\system32\Restore\rstrlog.dat
+ 2008-07-30 02:59 . 2008-07-30 02:59 781344 c:\windows\system32\PresentationNative_v0300.dll
+ 2008-07-30 03:35 . 2008-07-30 03:35 326160 c:\windows\system32\PresentationHost.exe
+ 2008-07-30 02:59 . 2008-07-30 02:59 105016 c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
- 2006-11-10 15:01 . 2006-11-10 15:01 278528 c:\windows\system32\pncrt.dll
+ 2006-11-10 15:01 . 2009-08-03 16:43 278528 c:\windows\system32\pncrt.dll
+ 2004-08-12 13:26 . 2009-09-01 00:58 509134 c:\windows\system32\perfh009.dat
+ 2008-07-25 18:16 . 2008-07-25 18:16 158720 c:\windows\system32\mscorier.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 158720 c:\windows\system32\mscorier.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 282112 c:\windows\system32\mscoree.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 282112 c:\windows\system32\mscoree.dll
+ 2009-02-03 02:07 . 2009-02-03 02:07 240544 c:\windows\system32\Macromed\Flash\FlashUtil10b.exe
+ 2004-08-12 13:21 . 2009-05-07 15:32 345600 c:\windows\system32\localspl.dll
+ 2008-07-30 02:24 . 2008-07-30 02:24 622080 c:\windows\system32\icardagt.exe
+ 2006-03-21 22:58 . 2009-09-01 03:51 356952 c:\windows\system32\FNTCACHE.DAT
+ 2008-07-30 04:10 . 2008-07-30 04:10 493048 c:\windows\system32\evr.dll
+ 2004-08-12 13:34 . 2009-07-13 17:08 286720 c:\windows\system32\dllcache\wmpdxm.dll
+ 2009-06-10 06:14 . 2009-06-10 06:14 132096 c:\windows\system32\dllcache\wkssvc.dll
+ 2008-04-21 06:44 . 2009-06-26 16:50 666624 c:\windows\system32\dllcache\wininet.dll
+ 2006-04-10 20:00 . 2009-03-11 05:18 934792 c:\windows\system32\dllcache\WgaTray.exe
+ 2006-04-10 20:00 . 2009-03-11 05:18 239496 c:\windows\system32\dllcache\wgaLogon.dll
+ 2008-06-26 08:15 . 2009-06-26 16:50 620032 c:\windows\system32\dllcache\urlmon.dll
+ 2009-06-16 14:36 . 2009-06-16 14:36 119808 c:\windows\system32\dllcache\t2embed.dll
+ 2008-12-05 06:54 . 2009-06-25 08:25 147456 c:\windows\system32\dllcache\schannel.dll
+ 2009-04-15 14:51 . 2009-04-15 14:51 585216 c:\windows\system32\dllcache\rpcrt4.dll
+ 2009-02-08 08:52 . 2009-08-05 09:01 204800 c:\windows\system32\dllcache\mswebdvd.dll
+ 2009-06-25 08:25 . 2009-06-25 08:25 136192 c:\windows\system32\dllcache\msv1_0.dll
+ 2009-04-14 21:52 . 2009-06-25 08:25 730112 c:\windows\system32\dllcache\lsasrv.dll
+ 2009-05-07 15:32 . 2009-05-07 15:32 345600 c:\windows\system32\dllcache\localspl.dll
+ 2009-06-25 08:25 . 2009-06-25 08:25 301568 c:\windows\system32\dllcache\kerberos.dll
+ 2008-07-30 06:40 . 2008-07-30 06:40 196104 c:\windows\Microsoft.NET\Framework\v3.5\WFServicesReg.exe
+ 2008-07-30 06:40 . 2008-07-30 06:40 802816 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft.Build.Tasks.v3.5.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 984056 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapUI.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 107512 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 111096 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.3082.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 110072 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.2070.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 106488 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1055.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 105976 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1053.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 107000 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1049.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 107512 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1046.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 109048 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1045.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 106488 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1044.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 108536 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1043.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 110072 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1040.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 111096 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1038.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 101368 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1037.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 112120 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1036.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 106488 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1035.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 113656 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1032.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 111608 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1031.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 108536 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1030.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 108536 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1029.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 102904 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1025.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 689152 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vsscenario.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 413184 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vsbasereqs.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 632320 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vs70uimgr.dll
+ 2009-09-01 00:54 . 2009-09-01 00:54 652800 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vs_setup.msi
+ 2008-07-30 01:47 . 2008-07-30 01:47 110080 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 131584 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.3082.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 131072 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.2070.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 121344 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1055.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 121344 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1053.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 123904 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1049.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 122880 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1046.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 128512 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1045.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 121856 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1044.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 129024 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1043.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 128512 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1040.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 132096 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1038.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 111104 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1037.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 133120 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1036.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 122368 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1035.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 137728 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1032.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 130048 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1031.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 126464 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1030.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 125440 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1029.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 113152 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1025.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 269304 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
+ 2008-07-30 01:47 . 2008-07-30 01:47 177152 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\HtmlLite.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 276984 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\dlmgr.dll
+ 2008-07-30 06:15 . 2008-07-30 06:15 225490 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\baseline.dat
+ 2008-07-30 06:40 . 2008-07-30 06:40 233976 c:\windows\Microsoft.NET\Framework\v3.5\1033\vbc7ui.dll
+ 2008-07-30 06:40 . 2008-07-30 06:40 168448 c:\windows\Microsoft.NET\Framework\v3.5\1033\cscompui.dll
+ 2008-07-30 03:35 . 2008-07-30 03:35 864256 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationUI.dll
+ 2008-07-30 02:59 . 2008-07-30 02:59 132120 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationHostDLL.dll
+ 2008-07-30 04:10 . 2008-07-30 04:10 806928 c:\windows\Microsoft.NET\Framework\v3.0\WPF\NaturalLanguage6.dll
+ 2008-07-30 02:16 . 2008-07-30 02:16 152576 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\WsatConfig.exe
+ 2008-07-30 02:16 . 2008-07-30 02:16 966656 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
+ 2008-07-30 02:16 . 2008-07-30 02:16 132096 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
+ 2008-07-30 02:16 . 2008-07-30 02:16 110592 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMdiagnostics.dll
+ 2008-07-30 02:16 . 2008-07-30 02:16 156688 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelReg.exe
+ 2008-07-30 02:16 . 2008-07-30 02:16 163840 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\Microsoft.Transactions.Bridge.Dtc.dll
+ 2008-07-30 02:16 . 2008-07-30 02:16 397312 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\Microsoft.Transactions.Bridge.dll
+ 2008-07-30 02:24 . 2008-07-30 02:24 881664 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
+ 2008-07-30 02:16 . 2008-07-30 02:16 168968 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ComSvcConfig.exe
+ 2008-11-25 11:59 . 2008-11-25 11:59 436040 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 839680 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 839680 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 835584 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 261632 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 114688 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 114688 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 131072 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 131072 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 303104 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 372736 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Management.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 372736 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Management.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 113664 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 113664 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 626688 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 188416 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 188416 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 401408 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 401408 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 970752 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 745472 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll
+ 2008-11-25 11:59 . 2008-11-25 11:59 486400 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 425984 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 425984 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 392184 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 118784 c:\windows\Microsoft.NET\Framework\v2.0.50727\shfusion.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 143360 c:\windows\Microsoft.NET\Framework\v2.0.50727\peverify.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 100856 c:\windows\Microsoft.NET\Framework\v2.0.50727\ngen.exe
+ 2008-07-25 18:17 . 2008-07-25 18:17 230912 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 345600 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 114176 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll
+ 2008-11-25 11:59 . 2008-11-25 11:59 364872 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 308224 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 308224 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll
+ 2008-11-25 11:59 . 2008-11-25 11:59 990032 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 659456 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 372736 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 372736 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 749568 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 749568 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 655360 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 655360 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 348160 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 348160 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 230904 c:\windows\Microsoft.NET\Framework\v2.0.50727\ilasm.exe
+ 2008-07-25 18:17 . 2008-07-25 18:17 230904 c:\windows\Microsoft.NET\Framework\v2.0.50727\ilasm.exe
+ 2008-07-25 18:17 . 2008-07-25 18:17 798224 c:\windows\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 798224 c:\windows\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 575496 c:\windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 106496 c:\windows\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
+ 2008-07-25 18:17 . 2008-07-25 18:17 106496 c:\windows\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
+ 2008-07-25 18:16 . 2008-07-25 18:16 507904 c:\windows\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 507904 c:\windows\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 106496 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
+ 2008-07-25 18:16 . 2008-07-25 18:16 106496 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
- 2007-10-24 08:47 . 2007-10-24 08:47 147968 c:\windows\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 147968 c:\windows\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 218112 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 218112 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 193016 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 193016 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 145408 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 145408 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll
+ 2009-05-27 01:53 . 2009-05-27 01:53 579072 c:\windows\Installer\c6cd49.msp
+ 2008-12-13 16:58 . 2008-12-13 16:58 754688 c:\windows\Installer\2621a2ef.msp
+ 2009-09-01 00:54 . 2009-09-01 00:54 648192 c:\windows\Installer\2621a2c9.msi
+ 2008-07-30 04:23 . 2008-07-30 04:23 250880 c:\windows\Installer\26205906.msp
+ 2008-07-30 04:28 . 2008-07-30 04:28 278016 c:\windows\Installer\26205904.msp
+ 2008-07-30 02:40 . 2008-07-30 02:40 291840 c:\windows\Installer\26205902.msp
+ 2009-09-01 00:53 . 2009-09-01 00:53 137728 c:\windows\Installer\262058fc.msi
+ 2008-07-30 00:35 . 2008-07-30 00:35 553472 c:\windows\Installer\261b5f2a.msp
+ 2008-07-30 00:33 . 2008-07-30 00:33 506368 c:\windows\Installer\261b5f28.msp
+ 2008-07-30 00:37 . 2008-07-30 00:37 911360 c:\windows\Installer\261b5f27.msp
+ 2009-07-29 10:03 . 2009-07-29 10:03 195584 c:\windows\Installer\24ae363.msi
+ 2009-07-29 10:03 . 2009-07-29 10:03 248832 c:\windows\Installer\24ae35d.msi
+ 2008-04-16 17:46 . 2009-08-15 05:09 845584 c:\windows\Installer\{90120000-00E0-0000-0000-0000000FF1CE}\outicon.exe
- 2008-04-16 17:46 . 2009-04-30 10:02 845584 c:\windows\Installer\{90120000-00E0-0000-0000-0000000FF1CE}\outicon.exe
- 2008-04-16 17:46 . 2009-04-30 10:02 217864 c:\windows\Installer\{90120000-00E0-0000-0000-0000000FF1CE}\misc.exe
+ 2008-04-16 17:46 . 2009-08-15 05:09 217864 c:\windows\Installer\{90120000-00E0-0000-0000-0000000FF1CE}\misc.exe
+ 2006-10-27 22:16 . 2006-10-27 22:16 408880 c:\windows\Installer\$PatchCache$\Managed\000021090E0000000000000000F01FEC\12.0.4518\RTFHTML.DLL
+ 2006-10-27 22:16 . 2006-10-27 22:16 138512 c:\windows\Installer\$PatchCache$\Managed\000021090E0000000000000000F01FEC\12.0.4518\OUTLCTL.DLL
+ 2006-10-27 03:55 . 2006-10-27 03:55 254776 c:\windows\Installer\$PatchCache$\Managed\000021090E0000000000000000F01FEC\12.0.4518\OLKFSTUB.DLL
+ 2006-10-27 03:55 . 2006-10-27 03:55 154960 c:\windows\Installer\$PatchCache$\Managed\000021090E0000000000000000F01FEC\12.0.4518\ENVELOPE.DLL
+ 2006-10-27 03:55 . 2006-10-27 03:55 116544 c:\windows\Installer\$PatchCache$\Managed\000021090E0000000000000000F01FEC\12.0.4518\EMABLT32.DLL
+ 2009-08-10 00:20 . 2009-08-10 00:20 491520 c:\windows\ERDNT\8-9-2009\Users\00000002\UsrClass.dat
+ 2009-08-10 00:20 . 2005-10-20 19:02 163328 c:\windows\ERDNT\8-9-2009\ERDNT.EXE
+ 2009-08-08 21:18 . 2009-08-08 21:18 491520 c:\windows\ERDNT\8-8-2009\Users\00000006\UsrClass.dat
+ 2009-08-08 21:17 . 2009-08-08 21:17 233472 c:\windows\ERDNT\8-8-2009\Users\00000003\NTUSER.DAT
+ 2009-08-08 21:17 . 2009-08-08 21:17 233472 c:\windows\ERDNT\8-8-2009\Users\00000001\NTUSER.DAT
+ 2009-08-10 21:29 . 2009-08-10 21:29 491520 c:\windows\ERDNT\8-10-2009\Users\00000002\UsrClass.dat
+ 2009-08-10 21:29 . 2005-10-20 19:02 163328 c:\windows\ERDNT\8-10-2009\ERDNT.EXE
+ 2009-09-01 00:51 . 2008-03-13 04:52 761344 c:\windows\Driver Cache\i386\unires.dll
+ 2009-09-01 00:51 . 2008-07-06 12:06 744960 c:\windows\Driver Cache\i386\unidrvui.dll
+ 2009-09-01 00:51 . 2008-07-06 12:06 373248 c:\windows\Driver Cache\i386\unidrv.dll
+ 2009-09-01 00:51 . 2008-07-06 12:06 198656 c:\windows\Driver Cache\i386\mxdwdui.dll
+ 2009-09-01 00:51 . 2008-07-06 12:06 765440 c:\windows\Driver Cache\i386\mxdwdrv.dll
+ 2009-09-01 04:27 . 2009-09-01 04:27 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\2ef5bc3a2edd7570bb23886a4f32294a\WsatConfig.ni.exe
+ 2009-09-01 04:00 . 2009-09-01 04:00 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\6a818099f0386e2356ae94f886a2196f\WindowsFormsIntegration.ni.dll
+ 2009-09-01 04:00 . 2009-09-01 04:00 187904 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\a6d9503962d47c722231c1478f180695\UIAutomationTypes.ni.dll
+ 2009-09-01 04:00 . 2009-09-01 04:00 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\5c028c3d8db6c0f0277673ea4a2d89fb\UIAutomationClient.ni.dll
+ 2009-09-01 04:34 . 2009-09-01 04:34 755712 c:\windows\assembly\NativeImages_v2.0.50727_32\TXTextControl\d3d34cd8b5472b388aaf0c5a6f33bb1a\TXTextControl.ni.dll
+ 2009-09-01 04:34 . 2009-09-01 04:34 432128 c:\windows\assembly\NativeImages_v2.0.50727_32\TAPIEx_Wrap\3f68ea66ddec1adfc1a8e826ef14e2b9\TAPIEx_Wrap.ni.dll
+ 2009-09-01 04:34 . 2009-09-01 04:34 400896 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\c338a470b14851ce5987bb0f0869c310\System.Xml.Linq.ni.dll
+ 2009-09-01 04:33 . 2009-09-01 04:33 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\bb77ea11f46ab438b2b7ed7c180011a1\System.Web.Routing.ni.dll
+ 2009-09-01 04:33 . 2009-09-01 04:33 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\6ee255220d90dcbe80c990e443051cc5\System.Web.RegularExpressions.ni.dll
+ 2009-09-01 04:33 . 2009-09-01 04:33 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\58f62044fa702ea6f936071aa5520baa\System.Web.Extensions.Design.ni.dll
+ 2009-09-01 04:33 . 2009-09-01 04:33 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\79c29ac85dd57dd485ab60118ac292ff\System.Web.Entity.ni.dll
+ 2009-09-01 04:33 . 2009-09-01 04:33 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\d3d65e34fa60f0b6c72ca0d12ec89933\System.Web.Entity.Design.ni.dll
+ 2009-09-01 04:33 . 2009-09-01 04:33 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\b7891f5659db299dbd1b3c72db7edb9f\System.Web.DynamicData.ni.dll
+ 2009-09-01 04:33 . 2009-09-01 04:33 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\00ec08741a765c707bd9169346064a81\System.Web.Abstractions.ni.dll
+ 2009-09-01 04:33 . 2009-09-01 04:33 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\5a555c9ae6984c40157cf940bb519f7c\System.Transactions.ni.dll
+ 2009-09-01 04:33 . 2009-09-01 04:33 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\ea3366939280c1715f1c620e33ee3c8a\System.ServiceProcess.ni.dll
+ 2009-09-01 04:30 . 2009-09-01 04:30 676352 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\1c8df2da33222c048d683017f2095f04\System.Security.ni.dll
+ 2009-09-01 04:30 . 2009-09-01 04:30 311296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\bfd6e16d8c3589cd2bd3f8d46f0a5402\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2009-09-01 04:33 . 2009-09-01 04:33 621056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\519d9c618341b136f9b963ffb7495308\System.Net.ni.dll
+ 2009-09-01 04:32 . 2009-09-01 04:32 998400 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\8642fdfbf02a6cb6f01169fe6fdb5d11\System.Management.ni.dll
+ 2009-09-01 04:32 . 2009-09-01 04:32 330752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\1d3fbbd23ce1e8637ef4f40a8d23cd32\System.Management.Instrumentation.ni.dll
+ 2009-09-01 04:26 . 2009-09-01 04:26 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\7c367a96b10d626ec8cbf8149272d845\System.IO.Log.ni.dll
+ 2009-09-01 04:26 . 2009-09-01 04:26 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\68e71147704ef0d34d9a4bece7767fc5\System.IdentityModel.Selectors.ni.dll
+ 2009-09-01 04:32 . 2009-09-01 04:32 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\4267bd908175603006c6c90bb5d900c7\System.EnterpriseServices.Wrapper.dll
+ 2009-09-01 04:32 . 2009-09-01 04:32 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\4267bd908175603006c6c90bb5d900c7\System.EnterpriseServices.ni.dll
+ 2009-09-01 03:59 . 2009-09-01 03:59 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\18bbe2b6717e7f1d1dd672526e9889ee\System.Drawing.Design.ni.dll
+ 2009-09-01 04:32 . 2009-09-01 04:32 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\c434a07332ce490711c27fd0edb7562f\System.DirectoryServices.Protocols.ni.dll
+ 2009-09-01 04:32 . 2009-09-01 04:32 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\8b3bb7a2c2f3ffe94c866283f1cd5957\System.DirectoryServices.AccountManagement.ni.dll
+ 2009-09-01 04:32 . 2009-09-01 04:32 939008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\a4b887f476fa4b8746a93a9fc2208560\System.Data.Services.Client.ni.dll
+ 2009-09-01 04:32 . 2009-09-01 04:32 354816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\1cf3acad6553d6c59df576794f4e8bd6\System.Data.Services.Design.ni.dll
+ 2009-09-01 04:32 . 2009-09-01 04:32 756736 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\392de34573f9f8ec885714f2f3e7f07f\System.Data.Entity.Design.ni.dll
+ 2009-09-01 04:31 . 2009-09-01 04:31 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\1db495ff00bbd14df4af6680c4de0653\System.Data.DataSetExtensions.ni.dll
+ 2009-09-01 04:30 . 2009-09-01 04:30 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\b82c00e2d24305ad6cb08556e3779b75\System.Configuration.ni.dll
+ 2009-09-01 04:32 . 2009-09-01 04:32 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\de514e484e49b04b016949d57ffac03e\System.Configuration.Install.ni.dll
+ 2009-09-01 04:31 . 2009-09-01 04:31 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\ce984d754e3c0b6be4504b785cc43574\System.AddIn.ni.dll
+ 2009-09-01 04:27 . 2009-09-01 04:27 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\045dd501b7257b1cc26083538ae69045\SMSvcHost.ni.exe
+ 2009-09-01 04:27 . 2009-09-01 04:27 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\9790551187e294b4ed3aaa1c221891c7\SMDiagnostics.ni.dll
+ 2009-09-01 04:27 . 2009-09-01 04:27 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\10a0c9707876fc1f65e64b811a28b020\ServiceModelReg.ni.exe
+ 2009-09-01 03:56 . 2009-09-01 03:56 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\f475294d8c7dc2dd4febeef27bc0417e\PresentationFramework.Classic.ni.dll
+ 2009-09-01 03:56 . 2009-09-01 03:56 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\8003abaf6bcf70f7eb620d06837e897b\PresentationFramework.Luna.ni.dll
+ 2009-09-01 03:56 . 2009-09-01 03:56 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\59a67874d8d8475faa5be1d993083d12\PresentationFramework.Aero.ni.dll
+ 2009-09-01 03:56 . 2009-09-01 03:56 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\2c980c9a5051d723c6ec2a78a3d0e2b3\PresentationFramework.Royale.ni.dll
+ 2009-09-01 04:30 . 2009-09-01 04:30 527872 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.SystemL#\2c40e170c1d78130ac493f8ea21abaf7\PaintDotNet.SystemLayer.ni.dll
+ 2009-09-01 04:30 . 2009-09-01 04:30 518656 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.Resourc#\46f10f0da1d15ea1439643bfe92c7f63\PaintDotNet.Resources.ni.dll
+ 2009-09-01 04:30 . 2009-09-01 04:30 546304 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.Effects\20d8a3873d7e86657eb62f7442528aca\PaintDotNet.Effects.ni.dll
+ 2009-09-01 04:30 . 2009-09-01 04:30 602624 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.Data\72f5ec54feb96cbe4d84e7e7e399f938\PaintDotNet.Data.ni.dll
+ 2009-09-01 04:31 . 2009-09-01 04:31 924672 c:\windows\assembly\NativeImages_v2.0.50727_32\office\ff23d0bf12e4e59d52ee32fbdcfc4114\office.ni.dll
+ 2009-09-01 04:31 . 2009-09-01 04:31 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\6d38e317128608bc4516ea46ab94590e\MSBuild.ni.exe
+ 2009-09-01 04:27 . 2009-09-01 04:27 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\1820d6a012fc0e16c3e1d29d973cd2d0\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2009-09-01 04:31 . 2009-09-01 04:31 530432 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\ed8ccc800ee6aebaaa48658a069f8bd5\Microsoft.SqlServer.GridControl.ni.dll
+ 2009-09-01 04:31 . 2009-09-01 04:31 989184 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\a0ede67a0c21b491d0cfe8dc4a343243\Microsoft.SqlServer.WizardFrameworkLite.ni.dll
+ 2009-09-01 04:31 . 2009-09-01 04:31 355840 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\3ce0561b625697388a542557ef967253\Microsoft.SqlServer.Setup.ni.dll
+ 2009-09-01 04:31 . 2009-09-01 04:31 231936 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.NetEnterp#\ab0fa478df45e38225090c1deff0e6fd\Microsoft.NetEnterpriseServers.ExceptionMessageBox.ni.dll
+ 2009-09-01 04:31 . 2009-09-01 04:31 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\55b9eff9e23359faed4351386c062238\Microsoft.Build.Utilities.ni.dll
+ 2009-09-01 04:31 . 2009-09-01 04:31 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\4217124db1ea5de5f1a1f3eea75e8d32\Microsoft.Build.Utilities.v3.5.ni.dll
+ 2009-09-01 04:31 . 2009-09-01 04:31 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\96825c34d7e1f7df1923ff2123bed8da\Microsoft.Build.Engine.ni.dll
+ 2009-09-01 04:31 . 2009-09-01 04:31 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\9b321ebf67587237f576df6104a32588\Microsoft.Build.Conversion.v3.5.ni.dll
+ 2009-09-01 04:31 . 2009-09-01 04:31 147968 c:\windows\assembly\NativeImages_v2.0.50727_32\Interop.DartMail\d46f1bd492042411adf8a96b457c3435\Interop.DartMail.ni.dll
+ 2009-09-01 04:31 . 2009-09-01 04:31 126976 c:\windows\assembly\NativeImages_v2.0.50727_32\Interop.ADChronopher\3ced5f9ccdd1512981e05b97d9c0ec6d\Interop.ADChronopher.ni.dll
+ 2009-09-01 04:31 . 2009-09-01 04:31 424448 c:\windows\assembly\NativeImages_v2.0.50727_32\Infralution.Controls\f7711ef130d85e88e8f7c00805958174\Infralution.Controls.ni.dll
+ 2009-09-01 04:31 . 2009-09-01 04:31 784384 c:\windows\assembly\NativeImages_v2.0.50727_32\Infralution.Control#\196dd206cadd9931a9c1acb3bae6df69\Infralution.Controls.VirtualTree.ni.dll
+ 2009-09-01 04:31 . 2009-09-01 04:31 205824 c:\windows\assembly\NativeImages_v2.0.50727_32\Infragistics.Act.Wi#\97b60fa12c6f9d596c3af5856b2a185a\Infragistics.Act.Win.UltraWinListBar.ni.dll
+ 2009-09-01 04:31 . 2009-09-01 04:31 323584 c:\windows\assembly\NativeImages_v2.0.50727_32\Infragistics.Act.Sh#\106d9c72f2e8864a866878b5f54e1c0d\Infragistics.Act.Shared.ni.dll
+ 2009-09-01 04:30 . 2009-09-01 04:30 459776 c:\windows\assembly\NativeImages_v2.0.50727_32\ICSharpCode.SharpZi#\5d0d79746b6bee05196aa250e77656ae\ICSharpCode.SharpZipLib.ni.dll
+ 2009-09-01 04:31 . 2009-09-01 04:31 517120 c:\windows\assembly\NativeImages_v2.0.50727_32\Genghis\aa4d134221000aec27f9e2306b998a42\Genghis.ni.dll
+ 2009-09-01 04:31 . 2009-09-01 04:31 392704 c:\windows\assembly\NativeImages_v2.0.50727_32\DevExpress.XtraNavB#\e7559450d22dc014b919c8159fde2bd8\DevExpress.XtraNavBar.ni.dll
+ 2009-09-01 04:31 . 2009-09-01 04:31 570880 c:\windows\assembly\NativeImages_v2.0.50727_32\DevExpress.Utils\89fc321f0fbd0e4228c790af44b50b63\DevExpress.Utils.ni.dll
+ 2009-09-01 04:31 . 2009-09-01 04:31 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\9bea05938bee3555c5aa8763d89a68f9\CustomMarshalers.ni.dll
+ 2009-09-01 04:27 . 2009-09-01 04:27 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\12629e2f3e315459bee67cbbaac85cb2\ComSvcConfig.ni.exe
+ 2009-09-01 04:30 . 2009-09-01 04:30 316928 c:\windows\assembly\NativeImages_v2.0.50727_32\C1.Win.C1Thesaurus\02d1b8f794c5d4e0c89e6055483db411\C1.Win.C1Thesaurus.ni.dll
+ 2009-09-01 04:30 . 2009-09-01 04:30 585216 c:\windows\assembly\NativeImages_v2.0.50727_32\C1.Win.C1Spell\92f4ebd90d507d2b091287a3757e7e3b\C1.Win.C1Spell.ni.dll
+ 2009-09-01 04:30 . 2009-09-01 04:30 235520 c:\windows\assembly\NativeImages_v2.0.50727_32\C1.Common\781279bd384c45e2a676d6f3fdfbd69f\C1.Common.ni.dll
+ 2009-09-01 04:30 . 2009-09-01 04:30 138752 c:\windows\assembly\NativeImages_v2.0.50727_32\autocomplete\60c5e3ef70e9cbbcb87fe8edb6b2c525\autocomplete.ni.dll
+ 2009-09-01 04:30 . 2009-09-01 04:30 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\b5b2feadc3943e3976daebc0bcd2b5e2\AspNetMMCExt.ni.dll
+ 2009-09-01 04:30 . 2009-09-01 04:30 147456 c:\windows\assembly\NativeImages_v2.0.50727_32\actmigration\ab1ed821deef2a802038371db35ac068\actmigration.ni.dll
+ 2009-09-01 04:30 . 2009-09-01 04:30 708096 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.WordProcesso#\1211a384e723f20862f7d4d6fa2fc8ea\Act.UI.WordProcessorDialogs.ni.dll
+ 2009-09-01 04:30 . 2009-09-01 04:30 761856 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.Widgets\6399e9bc50d9859283e55964e768a392\Act.UI.Widgets.ni.dll
+ 2009-09-01 04:30 . 2009-09-01 04:30 159744 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.Updater\6e7703c6b23fded3d1edc3167bd832cf\Act.UI.Updater.ni.dll
+ 2009-09-01 04:30 . 2009-09-01 04:30 790528 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.PickList\c42aa424967b50f7345b1ade6515260f\Act.UI.PickList.ni.dll
+ 2009-09-01 04:30 . 2009-09-01 04:30 899072 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.Groups.Views\a542c4f290ca23a8078490b6c11b902c\Act.UI.Groups.Views.ni.dll
+ 2009-09-01 04:29 . 2009-09-01 04:29 248832 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.GroupCompany#\c288f0c7df107e24ff15a7e2b2006421\Act.UI.GroupCompanyPicker.ni.dll
+ 2009-09-01 04:29 . 2009-09-01 04:29 244736 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.Designer.Rep#\80ea2818bb6c65a7ef4bb1ff4a6ed334\Act.UI.Designer.Report.Data.ni.dll
+ 2009-09-01 04:29 . 2009-09-01 04:29 847872 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.Designer.Lay#\8c217bcf75ecda9160cc3506fbc5a4d3\Act.UI.Designer.Layout.ni.dll
+ 2009-09-01 04:29 . 2009-09-01 04:29 528384 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.Designer.Con#\caa80e79e79859e67f9c649a1c13d7a8\Act.UI.Designer.Controls.ni.dll
+ 2009-09-01 04:29 . 2009-09-01 04:29 671232 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.Designer.Con#\477c242f2707b7edd8ecca8645cfb4e4\Act.UI.Designer.Conversion.ni.dll
+ 2009-09-01 04:29 . 2009-09-01 04:29 953856 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.DataExchange\121787f5a3443a42322e220c2daf8479\Act.UI.DataExchange.ni.dll
+ 2009-09-01 04:29 . 2009-09-01 04:29 608256 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.DatabaseMain#\cbda0b6cf1bb316864fb2862adc813df\Act.UI.DatabaseMaintenanceDialogs.ni.dll
+ 2009-09-01 04:29 . 2009-09-01 04:29 104960 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.Dashboard.Vi#\ae06e0bc280b6c9a71487717da40c88f\Act.UI.Dashboard.Views.ni.dll
+ 2009-09-01 04:29 . 2009-09-01 04:29 378368 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.Dashboard.De#\b844f56d52f961bef63578f65b1662ff\Act.UI.Dashboard.Designer.ControlContainer.ni.dll
+ 2009-09-01 04:29 . 2009-09-01 04:29 243200 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.CriteriaDlg\29b7c478d7df7db0e6920349c33319a6\Act.UI.CriteriaDlg.ni.dll
+ 2009-09-01 04:29 . 2009-09-01 04:29 787968 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.Calendar.Vie#\e6cef9e4e625e82b4850d16b8739e44a\Act.UI.Calendar.Views.ni.dll
+ 2009-09-01 04:29 . 2009-09-01 04:29 108032 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.AdvancedQuery\f2cc3a1c8e6dc88b0c120ebeed250443\Act.UI.AdvancedQuery.ni.dll
+ 2009-09-01 04:29 . 2009-09-01 04:29 138752 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.ActivityView#\6c4bef0d286f26c6fc37057f25cfc7f9\Act.UI.ActivityViews.Widgets.TimeSelector.ni.dll
+ 2009-09-01 04:29 . 2009-09-01 04:29 171520 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.Activities.V#\34a1bc9e7c33cd034a88361c0d711823\Act.UI.Activities.Views.Shared.ni.dll
+ 2009-09-01 04:28 . 2009-09-01 04:28 712704 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Shared.Win32\e5edcebdee81ffb56ea4e3d1fcfbb10d\Act.Shared.Win32.ni.dll
+ 2009-09-01 04:28 . 2009-09-01 04:28 112128 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Shared.Utilities\463153a8b941259d34ce5895445eb91b\Act.Shared.Utilities.ni.dll
+ 2009-09-01 04:28 . 2009-09-01 04:28 884224 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Shared.FDO\7f6683e52d7d2732a74b4df704a76920\Act.Shared.FDO.ni.dll
+ 2009-09-01 04:28 . 2009-09-01 04:28 101376 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Shared.Diagnost#\b6c7bcf52006ca28f23f38774badbf84\Act.Shared.Diagnostics.ni.dll
+ 2009-09-01 04:28 . 2009-09-01 04:28 130048 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Shared.Diagnost#\a7e1a46085fdc2c4c9e54f0605543d35\Act.Shared.Diagnostics.DefectLogger.ni.dll
+ 2009-09-01 04:28 . 2009-09-01 04:28 157184 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Shared.Componen#\d81dcba9e9ec23a333a96f433745a936\Act.Shared.ComponentModel.ni.dll
+ 2009-09-01 04:28 . 2009-09-01 04:28 199168 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Shared.Collecti#\09bcc4bb18f67ab577ea0f14e9c4b96b\Act.Shared.Collections.ni.dll
+ 2009-09-01 04:28 . 2009-09-01 04:28 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Outlook.Addin.S#\792e2f7de0b5b0799202d4cbbb52ccb9\Act.Outlook.Addin.Shared.ni.dll
+ 2009-09-01 04:28 . 2009-09-01 04:28 145408 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Framework.Inter#\975f9424bf32079d60bb328c42a90d9e\Act.Framework.Interop.ni.dll
+ 2009-09-01 04:28 . 2009-09-01 04:28 680448 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Framework.DataE#\cf3455b6c954d9260486ef17637c14c3\Act.Framework.DataExchange.OutlookSync.ni.dll
+ 2009-09-01 04:28 . 2009-09-01 04:28 118784 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Framework.DataE#\ab80f63dcaf2f97680bc093eea8b5510\Act.Framework.DataExchange.Act6.ni.dll
+ 2009-09-01 04:28 . 2009-09-01 04:28 916480 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Framework.DataE#\77ba9420cbe5886b78e5467e7c2fdd12\Act.Framework.DataExchange.ni.dll
+ 2009-09-01 04:28 . 2009-09-01 04:28 229888 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Framework.Compo#\5415903c4ecef3efca8a3395299f4be4\Act.Framework.ComponentModel.Core.ni.dll
+ 2009-09-01 04:28 . 2009-09-01 04:28 390656 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Framework.Busin#\87504e08d65a9ac2dbce94d70fb52188\Act.Framework.BusinessLink.Synchronization.ni.dll
+ 2009-09-01 04:27 . 2009-09-01 04:27 198656 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Devices.Entities\fe68c07062375c4ecd59813e631bbf93\Act.Devices.Entities.ni.dll
+ 2009-09-01 04:27 . 2009-09-01 04:27 646144 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Devices.Conduit#\60812db16753dbb9c3672f4b4ef2ec0f\Act.Devices.Conduit.Records.ni.dll
+ 2009-09-01 04:27 . 2009-09-01 04:27 109568 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Data\1bcb60f8c2ae3fb147c2295e0b05d33a\Act.Data.ni.dll
+ 2009-09-01 04:27 . 2009-09-01 04:27 103936 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Application.Int#\93892bcd12618c25b308aa9f3a62e365\Act.Application.Interop.ni.dll
+ 2009-09-01 00:53 . 2009-09-01 00:53 385024 c:\windows\assembly\GAC_MSIL\UIAutomationClientsideProviders\3.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
+ 2009-09-01 00:53 . 2009-09-01 00:53 167936 c:\windows\assembly\GAC_MSIL\UIAutomationClient\3.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
+ 2009-09-01 00:54 . 2009-09-01 00:54 139264 c:\windows\assembly\GAC_MSIL\System.Xml.Linq\3.5.0.0__b77a5c561934e089\System.Xml.Linq.dll
+ 2009-09-01 00:54 . 2009-09-01 00:54 507904 c:\windows\assembly\GAC_MSIL\System.WorkflowServices\3.5.0.0__31bf3856ad364e35\System.WorkflowServices.dll
+ 2009-09-01 00:53 . 2009-09-01 00:53 540672 c:\windows\assembly\GAC_MSIL\System.Workflow.Runtime\3.0.0.0__31bf3856ad364e35\System.Workflow.Runtime.dll
- 2008-05-28 14:14 . 2008-05-28 14:14 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2009-09-01 00:57 . 2009-09-01 00:57 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2009-09-01 00:57 . 2009-09-01 00:57 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2009-09-01 00:54 . 2009-09-01 00:54 335872 c:\windows\assembly\GAC_MSIL\System.Web.Extensions.Design\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.Design.dll
+ 2009-09-01 01:00 . 2009-09-01 01:00 139264 c:\windows\assembly\GAC_MSIL\System.Web.Entity\3.5.0.0__b77a5c561934e089\System.Web.Entity.dll
+ 2009-09-01 00:54 . 2009-09-01 00:54 131072 c:\windows\assembly\GAC_MSIL\System.Web.Entity.Design\3.5.0.0__b77a5c561934e089\System.Web.Entity.Design.dll
+ 2009-09-01 01:00 . 2009-09-01 01:00 229376 c:\windows\assembly\GAC_MSIL\System.Web.DynamicData\3.5.0.0__31bf3856ad364e35\System.Web.DynamicData.dll
+ 2009-09-01 00:53 . 2009-09-01 00:53 688128 c:\windows\assembly\GAC_MSIL\System.Speech\3.0.0.0__31bf3856ad364e35\System.Speech.dll
- 2008-05-28 14:14 . 2008-05-28 14:14 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2009-09-01 00:57 . 2009-09-01 00:57 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2009-09-01 00:54 . 2009-09-01 00:54 569344 c:\windows\assembly\GAC_MSIL\System.ServiceModel.Web\3.5.0.0__31bf3856ad364e35\System.ServiceModel.Web.dll
- 2008-05-28 14:14 . 2008-05-28 14:14 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2009-09-01 00:57 . 2009-09-01 00:57 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2009-09-01 00:52 . 2009-09-01 00:52 966656 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
- 2008-05-28 14:14 . 2008-05-28 14:14 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2009-09-01 00:57 . 2009-09-01 00:57 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2009-09-01 00:57 . 2009-09-01 00:57 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2009-09-01 00:54 . 2009-09-01 00:54 233472 c:\windows\assembly\GAC_MSIL\System.Net\3.5.0.0__b03f5f7f11d50a3a\System.Net.dll
+ 2009-09-01 00:57 . 2009-09-01 00:57 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
- 2008-05-28 14:14 . 2008-05-28 14:14 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2009-09-01 00:57 . 2009-09-01 00:57 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
- 2008-05-28 14:14 . 2008-05-28 14:14 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2009-09-01 00:54 . 2009-09-01 00:54 143360 c:\windows\assembly\GAC_MSIL\System.Management.Instrumentation\3.5.0.0__b77a5c561934e089\System.Management.Instrumentation.dll
+ 2009-09-01 00:52 . 2009-09-01 00:52 131072 c:\windows\assembly\GAC_MSIL\System.IO.Log\3.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
+ 2009-09-01 00:52 . 2009-09-01 00:52 430080 c:\windows\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089\System.IdentityModel.dll
+ 2009-09-01 00:53 . 2009-09-01 00:53 126976 c:\windows\assembly\GAC_MSIL\System.IdentityModel.Selectors\3.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
+ 2009-09-01 00:57 . 2009-09-01 00:57 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2009-09-01 00:57 . 2009-09-01 00:57 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2008-05-28 14:14 . 2008-05-28 14:14 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2008-05-28 14:14 . 2008-05-28 14:14 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2009-09-01 00:57 . 2009-09-01 00:57 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2009-09-01 00:54 . 2009-09-01 00:54 286720 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\3.5.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
+ 2009-09-01 00:58 . 2009-09-01 00:58 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2009-09-01 00:58 . 2009-09-01 00:58 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2009-09-01 01:00 . 2009-09-01 01:00 442368 c:\windows\assembly\GAC_MSIL\System.Data.Services\3.5.0.0__b77a5c561934e089\System.Data.Services.dll
+ 2009-09-01 00:54 . 2009-09-01 00:54 114688 c:\windows\assembly\GAC_MSIL\System.Data.Services.Design\3.5.0.0__b77a5c561934e089\System.Data.Services.Design.dll
+ 2009-09-01 01:00 . 2009-09-01 01:00 294912 c:\windows\assembly\GAC_MSIL\System.Data.Services.Client\3.5.0.0__b77a5c561934e089\System.Data.Services.Client.dll
+ 2009-09-01 00:54 . 2009-09-01 00:54 684032 c:\windows\assembly\GAC_MSIL\System.Data.Linq\3.5.0.0__b77a5c561934e089\System.Data.Linq.dll
+ 2009-09-01 00:54 . 2009-09-01 00:54 229376 c:\windows\assembly\GAC_MSIL\System.Data.Entity.Design\3.5.0.0__b77a5c561934e089\System.Data.Entity.Design.dll
+ 2009-09-01 00:54 . 2009-09-01 00:54 667648 c:\windows\assembly\GAC_MSIL\System.Core\3.5.0.0__b77a5c561934e089\System.Core.dll
- 2008-05-28 14:14 . 2008-05-28 14:14 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2009-09-01 00:57 . 2009-09-01 00:57 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2009-09-01 00:54 . 2009-09-01 00:54 163840 c:\windows\assembly\GAC_MSIL\System.AddIn\3.5.0.0__b77a5c561934e089\System.AddIn.dll
- 2008-05-28 14:14 . 2008-05-28 14:14 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2009-09-01 00:57 . 2009-09-01 00:57 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2009-09-01 00:52 . 2009-09-01 00:52 110592 c:\windows\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll
+ 2009-09-01 00:52 . 2009-09-01 00:52 528384 c:\windows\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\ReachFramework.dll
+ 2009-09-01 00:53 . 2009-09-01 00:53 864256 c:\windows\assembly\GAC_MSIL\PresentationUI\3.0.0.0__31bf3856ad364e35\PresentationUI.dll
+ 2009-09-01 00:53 . 2009-09-01 00:53 163840 c:\windows\assembly\GAC_MSIL\PresentationFramework.Royale\3.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
+ 2009-09-01 00:53 . 2009-09-01 00:53 397312 c:\windows\assembly\GAC_MSIL\PresentationFramework.Luna\3.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
+ 2009-09-01 00:53 . 2009-09-01 00:53 139264 c:\windows\assembly\GAC_MSIL\PresentationFramework.Classic\3.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
+ 2009-09-01 00:53 . 2009-09-01 00:53 196608 c:\windows\assembly\GAC_MSIL\PresentationFramework.Aero\3.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
+ 2009-09-01 00:53 . 2009-09-01 00:53 598016 c:\windows\assembly\GAC_MSIL\PresentationBuildTasks\3.0.0.0__31bf3856ad364e35\PresentationBuildTasks.dll
+ 2009-09-01 00:57 . 2009-09-01 00:57 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
- 2008-05-28 14:14 . 2008-05-28 14:14 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
+ 2009-09-01 00:57 . 2009-09-01 00:57 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
+ 2009-09-01 00:57 . 2009-09-01 00:57 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
- 2008-05-28 14:14 . 2008-05-28 14:14 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2009-09-01 00:52 . 2009-09-01 00:52 397312 c:\windows\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
+ 2009-09-01 00:57 . 2009-09-01 00:57 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
- 2008-05-28 14:14 . 2008-05-28 14:14 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2009-09-01 00:57 . 2009-09-01 00:57 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
- 2008-05-28 14:14 . 2008-05-28 14:14 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
+ 2009-09-01 00:54 . 2009-09-01 00:54 802816 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.v3.5.dll
+ 2009-09-01 00:54 . 2009-09-01 00:54 733184 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
- 2008-05-28 14:14 . 2008-05-28 14:14 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2009-09-01 00:57 . 2009-09-01 00:57 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2009-09-01 00:54 . 2009-09-01 00:54 106496 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Conversion.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Conversion.v3.5.dll
- 2008-05-28 14:14 . 2008-05-28 14:14 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2009-09-01 00:57 . 2009-09-01 00:57 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2009-09-01 00:57 . 2009-09-01 00:57 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2009-09-01 00:52 . 2009-09-01 00:52 368640 c:\windows\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll
- 2008-05-28 14:14 . 2008-05-28 14:14 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2009-09-01 00:57 . 2009-09-01 00:57 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2008-05-28 14:14 . 2008-05-28 14:14 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2009-09-01 00:57 . 2009-09-01 00:57 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2009-09-01 00:57 . 2009-09-01 00:57 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2009-09-01 00:52 . 2009-09-01 00:52 163840 c:\windows\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
+ 2009-07-19 10:13 . 2008-07-08 13:02 382840 c:\windows\$NtUninstallKB973346$\spuninst\updspapi.dll
+ 2009-07-19 10:13 . 2008-07-08 13:02 231288 c:\windows\$NtUninstallKB973346$\spuninst\spuninst.exe
+ 2009-07-29 10:07 . 2009-04-29 04:46 666624 c:\windows\$NtUninstallKB972260$\wininet.dll
+ 2009-07-29 10:07 . 2009-04-29 04:46 620032 c:\windows\$NtUninstallKB972260$\urlmon.dll
+ 2009-07-29 10:07 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB972260$\spuninst\updspapi.dll
+ 2009-07-29 10:07 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB972260$\spuninst\spuninst.exe
+ 2009-07-19 10:12 . 2008-07-09 07:38 382840 c:\windows\$NtUninstallKB971633$\spuninst\updspapi.dll
+ 2009-07-19 10:12 . 2008-07-08 13:02 231288 c:\windows\$NtUninstallKB971633$\spuninst\spuninst.exe
+ 2009-07-19 10:10 . 2007-11-30 12:39 382840 c:\windows\$NtUninstallKB970238$\spuninst\updspapi.dll
+ 2009-07-19 10:10 . 2007-11-30 12:39 231288 c:\windows\$NtUninstallKB970238$\spuninst\spuninst.exe
+ 2009-07-19 10:10 . 2008-04-14 00:12 584704 c:\windows\$NtUninstallKB970238$\rpcrt4.dll
+ 2009-07-19 10:13 . 2009-02-20 08:10 666112 c:\windows\$NtUninstallKB969897$\wininet.dll
+ 2009-07-19 10:13 . 2009-02-20 08:10 619520 c:\windows\$NtUninstallKB969897$\urlmon.dll
+ 2009-07-19 10:13 . 2007-11-30 12:39 382840 c:\windows\$NtUninstallKB969897$\spuninst\updspapi.dll
+ 2009-07-19 10:13 . 2007-11-30 12:39 231288 c:\windows\$NtUninstallKB969897$\spuninst\spuninst.exe
+ 2009-07-19 12:14 . 2008-07-09 07:38 382840 c:\windows\$NtUninstallKB968537$\spuninst\updspapi.dll
+ 2009-07-19 12:14 . 2008-07-09 07:38 231288 c:\windows\$NtUninstallKB968537$\spuninst\spuninst.exe
+ 2009-07-19 10:13 . 2008-07-09 07:38 382840 c:\windows\$NtUninstallKB961501$\spuninst\updspapi.dll
+ 2009-07-19 10:13 . 2008-07-09 07:38 231288 c:\windows\$NtUninstallKB961501$\spuninst\spuninst.exe
+ 2009-07-19 10:13 . 2008-04-14 00:11 343040 c:\windows\$NtUninstallKB961501$\localspl.dll
+ 2009-07-19 12:14 . 2008-04-14 00:12 117760 c:\windows\$NtUninstallKB961371$\t2embed.dll
+ 2009-07-19 12:14 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB961371$\spuninst\updspapi.dll
+ 2009-07-19 12:14 . 2008-07-08 13:02 231288 c:\windows\$NtUninstallKB961371$\spuninst\spuninst.exe
+ 2009-07-19 10:13 . 2008-07-08 13:02 382840 c:\windows\$hf_mig$\KB973346\update\updspapi.dll
+ 2009-07-19 10:13 . 2008-07-08 13:02 755576 c:\windows\$hf_mig$\KB973346\update\update.exe
+ 2009-07-19 10:13 . 2008-07-08 13:02 231288 c:\windows\$hf_mig$\KB973346\spuninst.exe
+ 2009-07-29 10:07 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB972260\update\updspapi.dll
+ 2009-07-29 10:07 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB972260\update\update.exe
+ 2009-07-29 10:07 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB972260\spuninst.exe
+ 2009-06-26 16:42 . 2009-06-26 16:42 668160 c:\windows\$hf_mig$\KB972260\SP3QFE\wininet.dll
+ 2009-06-26 16:42 . 2009-06-26 16:42 620544 c:\windows\$hf_mig$\KB972260\SP3QFE\urlmon.dll
+ 2009-07-19 10:12 . 2008-07-09 07:38 382840 c:\windows\$hf_mig$\KB971633\update\updspapi.dll
+ 2009-07-19 10:12 . 2008-07-09 07:38 755576 c:\windows\$hf_mig$\KB971633\update\update.exe
+ 2009-07-19 10:12 . 2008-07-08 13:02 231288 c:\windows\$hf_mig$\KB971633\spuninst.exe
+ 2009-07-19 10:10 . 2007-11-30 12:39 382840 c:\windows\$hf_mig$\KB970238\update\updspapi.dll
+ 2009-07-19 10:10 . 2007-11-30 12:39 755576 c:\windows\$hf_mig$\KB970238\update\update.exe
+ 2009-07-19 10:10 . 2007-11-30 12:39 231288 c:\windows\$hf_mig$\KB970238\spuninst.exe
+ 2009-04-15 15:24 . 2009-04-15 15:24 585216 c:\windows\$hf_mig$\KB970238\SP3QFE\rpcrt4.dll
+ 2009-07-19 10:13 . 2007-11-30 12:39 382840 c:\windows\$hf_mig$\KB969897\update\updspapi.dll
+ 2009-07-19 10:13 . 2007-11-30 12:39 755576 c:\windows\$hf_mig$\KB969897\update\update.exe
+ 2009-07-19 10:13 . 2007-11-30 12:39 231288 c:\windows\$hf_mig$\KB969897\spuninst.exe
+ 2009-04-29 04:21 . 2009-04-29 04:21 668160 c:\windows\$hf_mig$\KB969897\SP3QFE\wininet.dll
+ 2009-04-29 04:21 . 2009-04-29 04:21 620032 c:\windows\$hf_mig$\KB969897\SP3QFE\urlmon.dll
+ 2009-07-19 12:14 . 2008-07-09 07:38 382840 c:\windows\$hf_mig$\KB968537\update\updspapi.dll
+ 2009-07-19 12:14 . 2008-07-09 07:38 755576 c:\windows\$hf_mig$\KB968537\update\update.exe
+ 2009-07-19 12:14 . 2008-07-09 07:38 231288 c:\windows\$hf_mig$\KB968537\spuninst.exe
+ 2009-07-19 10:13 . 2008-07-09 07:38 382840 c:\windows\$hf_mig$\KB961501\update\updspapi.dll
+ 2009-07-19 10:13 . 2008-07-09 07:38 755576 c:\windows\$hf_mig$\KB961501\update\update.exe
+ 2009-07-19 10:13 . 2008-07-09 07:38 231288 c:\windows\$hf_mig$\KB961501\spuninst.exe
+ 2009-05-07 15:14 . 2009-05-07 15:14 346112 c:\windows\$hf_mig$\KB961501\SP3QFE\localspl.dll
+ 2009-07-19 12:14 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB961371\update\updspapi.dll
+ 2009-07-19 12:14 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB961371\update\update.exe
+ 2009-07-19 12:14 . 2008-07-08 13:02 231288 c:\windows\$hf_mig$\KB961371\spuninst.exe
+ 2009-06-16 14:43 . 2009-06-16 14:43 119808 c:\windows\$hf_mig$\KB961371\SP3QFE\t2embed.dll
+ 2004-08-12 13:34 . 2009-07-13 17:08 5537792 c:\windows\system32\wmp.dll
- 2004-08-12 13:34 . 2007-04-30 15:20 5537792 c:\windows\system32\wmp.dll
+ 2004-08-12 13:33 . 2009-04-17 12:26 1847168 c:\windows\system32\win32k.sys
+ 2009-09-01 00:52 . 2008-07-06 12:06 1676288 c:\windows\system32\spool\XPSEP\i386\xpssvcs.dll
+ 2009-09-01 00:52 . 2008-07-06 12:06 1676288 c:\windows\system32\spool\XPSEP\i386\i386\xpssvcs.dll
+ 2009-09-01 00:52 . 2008-07-07 00:36 2936832 c:\windows\system32\spool\XPSEP\amd64\xpssvcs.dll
+ 2009-09-01 00:52 . 2008-07-07 00:36 2936832 c:\windows\system32\spool\XPSEP\amd64\amd64\xpssvcs.dll
+ 2009-09-01 00:51 . 2008-07-06 12:06 1676288 c:\windows\system32\spool\drivers\w32x86\3\XpsSvcs.dll
+ 2004-08-12 13:28 . 2009-07-18 16:05 1509888 c:\windows\system32\shdocvw.dll
+ 2004-08-12 13:26 . 2009-06-03 19:09 1291264 c:\windows\system32\quartz.dll
+ 2004-08-12 13:23 . 2009-07-18 16:05 3069440 c:\windows\system32\mshtml.dll
+ 2006-02-14 17:20 . 2009-03-11 05:18 1482112 c:\windows\system32\LegitCheckControl.dll
- 2004-08-12 13:34 . 2007-04-30 15:20 5537792 c:\windows\system32\dllcache\wmp.dll
+ 2004-08-12 13:34 . 2009-07-13 17:08 5537792 c:\windows\system32\dllcache\wmp.dll
+ 2008-11-15 08:07 . 2009-04-17 12:26 1847168 c:\windows\system32\dllcache\win32k.sys
+ 2008-06-26 08:15 . 2009-07-18 16:05 1509888 c:\windows\system32\dllcache\shdocvw.dll
+ 2008-05-07 05:12 . 2009-06-03 19:09 1291264 c:\windows\system32\dllcache\quartz.dll
+ 2006-03-22 07:15 . 2009-06-10 16:19 2066432 c:\windows\system32\dllcache\mstscax.dll
+ 2006-03-22 07:17 . 2009-07-10 13:27 1315328 c:\windows\system32\dllcache\msoe.dll
+ 2008-04-21 06:44 . 2009-07-18 16:05 3069440 c:\windows\system32\dllcache\mshtml.dll
+ 2008-07-30 06:40 . 2008-07-30 06:40 1720824 c:\windows\Microsoft.NET\Framework\v3.5\vbc.exe
+ 2008-07-30 01:47 . 2008-07-30 01:47 1054208 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vs_setup.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 1364992 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\SITSetup.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 1064448 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\gencomp.dll
+ 2008-07-30 06:40 . 2008-07-30 06:40 1548280 c:\windows\Microsoft.NET\Framework\v3.5\csc.exe
+ 2008-12-06 02:35 . 2008-12-06 02:35 1736528 c:\windows\Microsoft.NET\Framework\v3.0\WPF\wpfgfx_v0300.dll
+ 2008-07-30 04:10 . 2008-07-30 04:10 2637840 c:\windows\Microsoft.NET\Framework\v3.0\WPF\NlsLexicons0009.dll
+ 2008-07-30 04:10 . 2008-07-30 04:10 4883464 c:\windows\Microsoft.NET\Framework\v3.0\WPF\NlsData0009.dll
+ 2008-12-06 03:12 . 2008-12-06 03:12 5931008 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 1344000 c:\windows\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 1344000 c:\windows\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 1172472 c:\windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe
- 2007-10-24 08:47 . 2007-10-24 08:47 1172472 c:\windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe
+ 2008-11-25 11:59 . 2008-11-25 11:59 2048000 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.XML.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
+ 2008-11-25 11:59 . 2008-11-25 11:59 5242880 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 3149824 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 5062656 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 2933248 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.dll
+ 2008-11-25 11:59 . 2008-11-25 11:59 5813576 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
+ 2008-11-25 11:59 . 2008-11-25 11:59 4546560 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 1163768 c:\windows\Microsoft.NET\Framework\v2.0.50727\cscomp.dll
+ 2009-07-27 11:32 . 2009-07-27 11:32 5028352 c:\windows\Installer\f25b1fd.msp
+ 2009-05-04 14:46 . 2009-05-04 14:46 8299008 c:\windows\Installer\c6cd5e.msp
+ 2009-04-24 19:30 . 2009-04-24 19:30 2583552 c:\windows\Installer\c6cd54.msp
+ 2009-07-02 23:23 . 2009-07-02 23:23 5027328 c:\windows\Installer\c6cd3b.msp
+ 2009-04-24 19:29 . 2009-04-24 19:29 9013760 c:\windows\Installer\c6cd2d.msp
+ 2009-08-03 05:27 . 2009-08-03 05:27 1805824 c:\windows\Installer\7c0131b.msi
+ 2008-12-13 16:57 . 2008-12-13 16:57 8397824 c:\windows\Installer\2621a2d8.msp
+ 2008-07-30 02:26 . 2008-07-30 02:26 1043456 c:\windows\Installer\26205905.msp
+ 2008-07-30 03:37 . 2008-07-30 03:37 2679808 c:\windows\Installer\26205903.msp
+ 2008-07-30 04:15 . 2008-07-30 04:15 3697664 c:\windows\Installer\26205901.msp
+ 2008-07-30 02:34 . 2008-07-30 02:34 1448448 c:\windows\Installer\26205900.msp
+ 2008-07-30 03:22 . 2008-07-30 03:22 4137984 c:\windows\Installer\262058ff.msp
+ 2008-07-30 02:18 . 2008-07-30 02:18 3376640 c:\windows\Installer\262058fe.msp
+ 2008-07-30 00:45 . 2008-07-30 00:45 2543616 c:\windows\Installer\261b5f2e.msp
+ 2008-07-30 00:29 . 2008-07-30 00:29 2926080 c:\windows\Installer\261b5f2d.msp
+ 2008-07-30 00:41 . 2008-07-30 00:41 6487040 c:\windows\Installer\261b5f2c.msp
+ 2008-07-30 00:39 . 2008-07-30 00:39 3403264 c:\windows\Installer\261b5f2b.msp
+ 2008-07-30 00:43 . 2008-07-30 00:43 1013248 c:\windows\Installer\261b5f29.msp
+ 2008-07-30 00:31 . 2008-07-30 00:31 6083072 c:\windows\Installer\261b5f26.msp
+ 2009-08-10 00:20 . 2009-08-10 00:20 7688192 c:\windows\ERDNT\8-9-2009\Users\00000001\ntuser.dat
+ 2009-08-08 21:18 . 2009-08-08 21:18 7675904 c:\windows\ERDNT\8-8-2009\Users\00000005\NTUSER.DAT
+ 2009-08-10 21:29 . 2009-08-10 21:29 7684096 c:\windows\ERDNT\8-10-2009\Users\00000001\ntuser.dat
+ 2009-09-01 00:59 . 2009-09-01 00:59 3313664 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\14cd5f4b61d35f9b76327d6be9853755\WindowsBase.ni.dll
+ 2009-09-01 04:00 . 2009-09-01 04:00 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\f3c7957351aec85f526a3350c9718b1e\UIAutomationClientsideProviders.ni.dll
+ 2009-09-01 00:59 . 2009-09-01 00:59 7868416 c:\windows\assembly\NativeImages_v2.0.50727_32\System\80978a322d7dd39f0a71be1251ae395a\System.ni.dll
+ 2009-09-01 03:59 . 2009-09-01 03:59 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\773a9786013451d3baaeff003dc4230f\System.Xml.ni.dll
+ 2009-09-01 04:34 . 2009-09-01 04:34 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\ac1750e78d79520dcf19195772eff1b6\System.WorkflowServices.ni.dll
+ 2009-09-01 04:34 . 2009-09-01 04:34 1908224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\d265da36954fcb4cb7ad5adc693ea0f2\System.Workflow.Runtime.ni.dll
+ 2009-09-01 04:33 . 2009-09-01 04:33 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\693a8fbe6f7ad6e4e429052da4317e59\System.Workflow.ComponentModel.ni.dll
+ 2009-09-01 04:33 . 2009-09-01 04:33 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\cc99fbbac0b6e4e9ca62093e49b0c16b\System.Workflow.Activities.ni.dll
+ 2009-09-01 04:33 . 2009-09-01 04:33 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\b57bb002a655920cbfa2bee29d1e22b7\System.Web.Services.ni.dll
+ 2009-09-01 04:33 . 2009-09-01 04:33 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\81197e32ec931f439b3114e9031b65d6\System.Web.Mobile.ni.dll
+ 2009-09-01 04:33 . 2009-09-01 04:33 2403328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\7f64c9d25471b72e1e957bdfe67947c8\System.Web.Extensions.ni.dll
+ 2009-09-01 03:59 . 2009-09-01 03:59 1917440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\63cf639b6e0a3c25c1643c85016e7422\System.Speech.ni.dll
+ 2009-09-01 04:33 . 2009-09-01 04:33 1706496 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\340cad17fe57947eacbc8fa2cea780da\System.ServiceModel.Web.ni.dll
+ 2009-09-01 04:26 . 2009-09-01 04:26 2338304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\034c91b133dee73d452652c52767b5ea\System.Runtime.Serialization.ni.dll
+ 2009-09-01 03:59 . 2009-09-01 03:59 1035264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\646ab52eef343380aa002c220dc31e13\System.Printing.ni.dll
+ 2009-09-01 04:26 . 2009-09-01 04:26 1056768 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\c2de8479e54852f56996f79bc93acb13\System.IdentityModel.ni.dll
+ 2009-09-01 03:59 . 2009-09-01 03:59 1587200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\3da96ee075bab9202626ae44c18d226c\System.Drawing.ni.dll
+ 2009-09-01 04:32 . 2009-09-01 04:32 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\543aced762f6b0c3f8e037955941afc6\System.DirectoryServices.ni.dll
+ 2009-09-01 04:30 . 2009-09-01 04:30 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\a6b58624486714fa71e5e35186850ff0\System.Deployment.ni.dll
+ 2009-09-01 03:58 . 2009-09-01 03:58 6616576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\c70731047b0022638b3f9fb158948a03\System.Data.ni.dll
+ 2009-09-01 04:30 . 2009-09-01 04:30 2510336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\826b09ab0d0e36f4d631b4cd335df511\System.Data.SqlXml.ni.dll
+ 2009-09-01 04:32 . 2009-09-01 04:32 1328128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\956a513dcbd44d5a6801840ef2b0b47b\System.Data.Services.ni.dll
+ 2009-09-01 03:58 . 2009-09-01 03:58 2516480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\0bbec79460b1137df5313f9baf7b246f\System.Data.Linq.ni.dll
+ 2009-09-01 04:32 . 2009-09-01 04:32 9924096 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\6479f975b105808a8d9e7a7fdc762551\System.Data.Entity.ni.dll
+ 2009-09-01 03:57 . 2009-09-01 03:57 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\47d87251e93256c635eb73403b8db33e\System.Core.ni.dll
+ 2009-09-01 03:57 . 2009-09-01 03:57 2128896 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\4bfb3048bf200a6a8592d1b4ba861a7f\ReachFramework.ni.dll
+ 2009-09-01 03:56 . 2009-09-01 03:56 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\6bafb1a2a73794ddb9761cb321c9e7e2\PresentationUI.ni.dll
+ 2009-09-01 00:59 . 2009-09-01 00:59 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\e634bc4c4a00635a0a254febab0e2e2c\PresentationBuildTasks.ni.dll
+ 2009-09-01 04:30 . 2009-09-01 04:30 1882624 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet\c919caba4dc0b55a3438dfc0065d66b9\PaintDotNet.ni.exe
+ 2009-09-01 04:30 . 2009-09-01 04:30 1315328 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.Core\36a4e92b75c273f83d70a01adcf000de\PaintDotNet.Core.ni.dll
+ 2009-09-01 04:31 . 2009-09-01 04:31 1712128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\1c86afc399d0fdd8e069266ffbe748d1\Microsoft.VisualBasic.ni.dll
+ 2009-09-01 04:27 . 2009-09-01 04:27 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\6b2f62f5e981913fce1d223f645d9ddf\Microsoft.Transactions.Bridge.ni.dll
+ 2009-09-01 04:33 . 2009-09-01 04:33 2332160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\b261961046545831aa60963e84905968\Microsoft.JScript.ni.dll
+ 2009-09-01 04:31 . 2009-09-01 04:31 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\bd241492d96db39f20e758c13c845033\Microsoft.Build.Tasks.ni.dll
+ 2009-09-01 04:31 . 2009-09-01 04:31 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\a47100d8f4574bed2d49d83d0ab8964e\Microsoft.Build.Tasks.v3.5.ni.dll
+ 2009-09-01 04:31 . 2009-09-01 04:31 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\6cfe582681724965fb817e8ece5f0909\Microsoft.Build.Engine.ni.dll
+ 2009-09-01 04:31 . 2009-09-01 04:31 3100160 c:\windows\assembly\NativeImages_v2.0.50727_32\Infragistics.Act.Win\56c1b02c8995fa1bd22e5c9cb6adfd33\Infragistics.Act.Win.ni.dll
+ 2009-09-01 04:31 . 2009-09-01 04:31 2608128 c:\windows\assembly\NativeImages_v2.0.50727_32\Infragistics.Act.Wi#\73e8b93e64109768c02974a17e7a3a93\Infragistics.Act.Win.UltraWinSchedule.ni.dll
+ 2009-09-01 04:31 . 2009-09-01 04:31 3471872 c:\windows\assembly\NativeImages_v2.0.50727_32\DevComponents.DotNe#\36ee847e46300bb0cef29e6fd02f7c7a\DevComponents.DotNetBar.ni.dll
+ 2009-09-01 04:30 . 2009-09-01 04:30 1306112 c:\windows\assembly\NativeImages_v2.0.50727_32\C1.Win.C1PrintPrevi#\e25e6bda18383b510a944e30e70823e6\C1.Win.C1PrintPreview.ni.dll
+ 2009-09-01 04:30 . 2009-09-01 04:30 1315840 c:\windows\assembly\NativeImages_v2.0.50727_32\C1.Win.C1FlexGrid\c82ba35a4c1f3692e5ce35ed4b13e577\C1.Win.C1FlexGrid.ni.dll
+ 2009-09-01 04:30 . 2009-09-01 04:30 1195008 c:\windows\assembly\NativeImages_v2.0.50727_32\C1.PrintUtil\40383f6dd9cedde5ef25dfa79e1a682d\C1.PrintUtil.ni.dll
+ 2009-09-01 04:30 . 2009-09-01 04:30 3622912 c:\windows\assembly\NativeImages_v2.0.50727_32\C1.C1PrintDocument\0af4f79bf0ea42b1964974230a00c021\C1.C1PrintDocument.ni.dll
+ 2009-09-01 04:30 . 2009-09-01 04:30 2583040 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.WordProcessor\4d77b0587a66799aee03fcc8b1c30df8\Act.UI.WordProcessor.ni.dll
+ 2009-09-01 04:30 . 2009-09-01 04:30 1742336 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.SyncSetup\7eb60eb25031956f8855bc633295468e\Act.UI.SyncSetup.ni.dll
+ 2009-09-01 04:30 . 2009-09-01 04:30 4601344 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.Preferences\5933e201f55fb3693c64521a70c28cb3\Act.UI.Preferences.ni.dll
+ 2009-09-01 04:30 . 2009-09-01 04:30 2661888 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.Opportunitie#\a5282e1935b0793202e8eac65bf4c751\Act.UI.Opportunities.Views.ni.dll
+ 2009-09-01 04:30 . 2009-09-01 04:30 1358336 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.Import\a9dd31c957f1a0bd21ca6f45b4309c75\Act.UI.Import.ni.dll
+ 2009-09-01 04:29 . 2009-09-01 04:29 1314304 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.Export\7a4004d277c9a3f97c72e9dc4251c85e\Act.UI.Export.ni.dll
+ 2009-09-01 04:29 . 2009-09-01 04:29 2390016 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.Designer.Rep#\f4f188adfc065488fbf66c804c582f8f\Act.UI.Designer.Report.ni.dll
+ 2009-09-01 04:29 . 2009-09-01 04:29 1217536 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.Core\39820eac9a626b94d33b4806613b7832\Act.UI.Core.ni.dll
+ 2009-09-01 04:29 . 2009-09-01 04:29 1393152 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.Contacts.Vie#\e9a2f28db5411da13d4eb54ebf26b140\Act.UI.Contacts.Views.ni.dll
+ 2009-09-01 04:29 . 2009-09-01 04:29 3868160 c:\windows\assembly\NativeImages_v2.0.50727_32\ACT.UI.Common.Images\6d7c4e9ec539897f40ee65111c926faf\ACT.UI.Common.Images.ni.dll
+ 2009-09-01 04:29 . 2009-09-01 04:29 2437120 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.Activities.V#\15e5ef647f200ce7d0b7a8ae65364318\Act.UI.Activities.Views.ni.dll
+ 2009-09-01 04:28 . 2009-09-01 04:28 3854848 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Shared.Windows.#\b368b7d7079e40ceb3f5bff424f88984\Act.Shared.Windows.Forms.ni.dll
+ 2009-09-01 04:28 . 2009-09-01 04:28 1469952 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Shared.LicProvi#\7b93acbf47cea2d69f72db4a3727097b\Act.Shared.LicProvider.ni.dll
+ 2009-09-01 04:28 . 2009-09-01 04:28 4245504 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Shared.Images\4c20c5266226f7c0eccb9b0e9ff58bec\Act.Shared.Images.ni.dll
+ 2009-09-01 04:27 . 2009-09-01 04:27 8672768 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Framework\2c62aa20eaba38379dc664f3009e9a8f\Act.Framework.ni.dll
+ 2009-09-01 04:28 . 2009-09-01 04:28 1381888 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Framework.Synch#\55d8c4cd741197aea2c0ecf9ff52ac53\Act.Framework.Synchronization.ni.dll
+ 2009-09-01 04:28 . 2009-09-01 04:28 2360832 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Framework.Compo#\ee80089e3c9c18e4e5644ca1daad3ac6\Act.Framework.ComponentModel.ni.dll
+ 2009-09-01 04:27 . 2009-09-01 04:27 1112576 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Devices.UI.Cust#\a85e862357c132dcaf25af5ad45aec51\Act.Devices.UI.Custom.ni.dll
+ 2009-09-01 04:27 . 2009-09-01 04:27 1128448 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Data.Resources\35d5544ba25e141d0bea72d674507f94\Act.Data.Resources.ni.dll
+ 2009-09-01 00:52 . 2009-09-01 00:52 1245184 c:\windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll
+ 2009-09-01 00:58 . 2009-09-01 00:58 3149824 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
+ 2009-09-01 00:58 . 2009-09-01 00:58 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
+ 2009-09-01 00:53 . 2009-09-01 00:53 1630208 c:\windows\assembly\GAC_MSIL\System.Workflow.ComponentModel\3.0.0.0__31bf3856ad364e35\System.Workflow.ComponentModel.dll
+ 2009-09-01 00:52 . 2009-09-01 00:52 1138688 c:\windows\assembly\GAC_MSIL\System.Workflow.Activities\3.0.0.0__31bf3856ad364e35\System.Workflow.Activities.dll
+ 2009-09-01 00:57 . 2009-09-01 00:57 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2009-09-01 01:00 . 2009-09-01 01:00 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
+ 2009-09-01 00:59 . 2009-09-01 00:59 5931008 c:\windows\assembly\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089\System.ServiceModel.dll
+ 2009-09-01 00:57 . 2009-09-01 00:57 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2009-09-01 00:54 . 2009-09-01 00:54 2879488 c:\windows\assembly\GAC_MSIL\System.Data.Entity\3.5.0.0__b77a5c561934e089\System.Data.Entity.dll
+ 2009-09-01 00:59 . 2009-09-01 00:59 5283840 c:\windows\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll
+ 2009-09-01 00:57 . 2009-09-01 00:57 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
+ 2009-09-01 00:57 . 2009-09-01 00:58 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
+ 2009-09-01 00:52 . 2009-09-01 00:52 4210688 c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
+ 2009-09-01 00:57 . 2009-09-01 00:57 4546560 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2009-07-29 10:07 . 2009-04-29 04:46 1499136 c:\windows\$NtUninstallKB972260$\shdocvw.dll
+ 2009-07-29 10:07 . 2009-04-29 04:46 3068928 c:\windows\$NtUninstallKB972260$\mshtml.dll
+ 2009-07-19 10:12 . 2008-12-20 22:14 1288192 c:\windows\$NtUninstallKB971633$\quartz.dll
+ 2009-07-19 10:13 . 2009-03-02 23:04 1499136 c:\windows\$NtUninstallKB969897$\shdocvw.dll
+ 2009-07-19 10:13 . 2009-02-20 08:11 3068416 c:\windows\$NtUninstallKB969897$\mshtml.dll
+ 2009-07-19 12:14 . 2009-02-09 11:13 1846784 c:\windows\$NtUninstallKB968537$\win32k.sys
+ 2009-07-18 15:31 . 2009-07-18 15:31 1509888 c:\windows\$hf_mig$\KB972260\SP3QFE\shdocvw.dll
+ 2009-07-18 15:31 . 2009-07-18 15:31 3069952 c:\windows\$hf_mig$\KB972260\SP3QFE\mshtml.dll
+ 2009-06-03 19:12 . 2009-06-03 19:12 1291264 c:\windows\$hf_mig$\KB971633\SP3QFE\quartz.dll
+ 2009-04-29 04:21 . 2009-04-29 04:21 1499136 c:\windows\$hf_mig$\KB969897\SP3QFE\shdocvw.dll
+ 2009-04-29 04:21 . 2009-04-29 04:21 3069440 c:\windows\$hf_mig$\KB969897\SP3QFE\mshtml.dll
+ 2009-04-17 10:50 . 2009-04-17 10:50 1847808 c:\windows\$hf_mig$\KB968537\SP3QFE\win32k.sys
+ 2009-09-04 06:12 . 2009-07-30 00:49 24281536 c:\windows\system32\MRT.exe
+ 2009-05-04 14:49 . 2009-05-04 14:49 10955776 c:\windows\Installer\c6cd91.msp
+ 2008-12-13 17:21 . 2008-12-13 17:21 10473472 c:\windows\Installer\2621a2e3.msp
+ 2009-09-01 03:59 . 2009-09-01 03:59 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\63406259e94d5c0ff5b79401dfe113ce\System.Windows.Forms.ni.dll
+ 2009-09-01 04:33 . 2009-09-01 04:33 11796992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\3963ce03d445a8619abbf388d590134b\System.Web.ni.dll
+ 2009-09-01 04:27 . 2009-09-01 04:27 17317888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\4146033013edebd7e0cb604e504ebfee\System.ServiceModel.ni.dll
+ 2009-09-01 03:58 . 2009-09-01 03:58 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\8ee220bc3cce4f7bbd7818946519ed7f\System.Design.ni.dll
+ 2009-09-01 03:54 . 2009-09-01 03:54 14327808 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\96e710f47c601cba3f2348a8d11ddede\PresentationFramework.ni.dll
+ 2009-09-01 00:59 . 2009-09-01 00:59 12216320 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\956375d487cbef36165b3250030e3574\PresentationCore.ni.dll
+ 2009-09-01 00:59 . 2009-09-01 00:59 11486720 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\6d667f19d687361886990f3ca0f49816\mscorlib.ni.dll
+ 2009-09-01 04:28 . 2009-09-01 04:29 21117952 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI\1f8652ee143d7654e0b230bc33f614d9\Act.UI.ni.dll
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MySpaceIM"="c:\program files\MySpace\IM\MySpaceIM.exe" [2007-03-07 5181440]
"BitTorrent DNA"="c:\program files\DNA\btdna.exe" [2009-02-08 342848]
"Messenger (Yahoo!)"="c:\program files\Yahoo!\Messenger\YahooMessenger.exe" [2009-05-27 4351216]
"Search Protection"="c:\program files\Yahoo!\Search Protection\SearchProtection.exe" [2009-02-23 111856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ShowLOMControl"="1 (0x1)" [X]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2004-08-12 208952]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-12 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-12 455168]
"Broadcom Wireless Manager UI"="c:\windows\system32\WLTRAY.exe" [2005-12-19 1347584]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2005-11-29 761947]
"Dell QuickSet"="c:\program files\Dell\QuickSet\quickset.exe" [2005-12-06 839680]
"dla"="c:\windows\system32\dla\tfswctrl.exe" [2005-03-16 127037]
"ISUSPM Startup"="c:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-07-28 221184]
"ISUSScheduler"="c:\program files\Common Files\InstallShield\UpdateService\issch.exe" [2004-07-28 81920]
"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2003-11-01 32768]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-03-22 148888]
"igfxtray"="c:\windows\system32\igfxtray.exe" [2006-07-15 94208]
"igfxhkcmd"="c:\windows\system32\hkcmd.exe" [2006-07-15 77824]
"igfxpers"="c:\windows\system32\igfxpers.exe" [2006-07-15 118784]
"RoxioEngineUtility"="c:\program files\Common Files\Roxio Shared\System\EngUtil.exe" [2003-01-13 69632]
"RoxioDragToDisc"="c:\program files\Roxio\Easy CD Creator 6\DragToDisc\DrgToDsc.exe" [2003-01-13 757760]
"RoxioAudioCentral"="c:\program files\Roxio\Easy CD Creator 6\AudioCentral\RxMon.exe" [2003-01-09 253952]
"D-Link Air USB Utility"="c:\program files\D-Link\Air USB Utility\AirCFG.exe" [2003-05-27 2674688]
"HostManager"="c:\program files\Common Files\AOL\1188311225\ee\AOLSoftware.exe" [2006-09-26 50736]
"gcNotifier"="c:\documents and settings\guser\Local Settings\Application Data\VTShared\GCNotifier.exe" [2008-01-25 176128]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2008-05-27 413696]
"AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2008-07-23 116040]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-07-30 289064]
"Act.Outlook.Service"="c:\program files\ACT\Act for Windows\Act.Outlook.Service.exe" [2009-02-24 28672]
"Act! Preloader"="c:\program files\ACT\Act for Windows\ActSage.exe" [2009-02-24 393216]
"AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2009-08-16 2007832]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2009-08-03 185896]
"YSearchProtection"="c:\program files\Yahoo!\Search Protection\SearchProtection.exe" [2009-02-23 111856]
"SigmatelSysTrayApp"="stsystra.exe" - c:\windows\stsystra.exe [2005-11-16 397312]
"kmw_run.exe"="kmw_run.exe" - c:\windows\system32\kmw_run.exe [2004-01-27 106496]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"MySpaceIM"="c:\program files\MySpace\IM\MySpaceIM.exe" [2007-03-07 5181440]

c:\documents and settings\guser\Start Menu\Programs\Startup\
palmOne Registration.lnk - c:\program files\palmOne\register.exe [2005-9-19 2367488]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
Acrobat Assistant.lnk - c:\program files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe [2006-11-9 49254]
Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-9-23 29696]
HotSync Manager.lnk - c:\program files\palmOne\Hotsync.exe [2004-6-9 471040]
HOTSYNCSHORTCUTNAME.lnk - c:\program files\palmOne\Hotsync.exe [2004-6-9 471040]
Microsoft Office.lnk - c:\program files\Microsoft Office\Office\OSA9.EXE [2000-1-21 65588]
QuickBooks Update Agent.lnk - c:\program files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe [2008-2-27 972064]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"ForceClassicControlPanel"= 1 (0x1)

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoSetActiveDesktop"= 1 (0x1)

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2009-02-09 09:20 356352 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.DLL

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2009-08-16 15:46 11952 ----a-w- c:\windows\system32\avgrsstx.dll

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UpdatesDisableNotify"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\TrendAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\TrendFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\program files\TeleVantage\Client\TVClient.exe"= c:\program files\TeleVantage\Client\TVClient.exe:192.168.88.36/255.255.255.255:Enabled:Vertical TeleVantage ViewPoint
"c:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\LimeWire\\LimeWire.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\TVUPlayer\\TVUPlayer.exe"=
"c:\\Program Files\\Cain\\Cain.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\SopCast\\SopCast.exe"=
"c:\\Program Files\\SopCast\\adv\\SopAdver.exe"=
"c:\\Program Files\\DNA\\btdna.exe"=
"c:\\Program Files\\BitTorrent\\bittorrent.exe"=
"c:\\Program Files\\Intuit\\QuickBooks 2008\\QBDBMgrN.exe"=
"c:\\Program Files\\ACT\\Act for Windows\\ActSage.exe"=
"c:\\Program Files\\Common Files\\AOL\\1188311225\\ee\\aolsoftware.exe"=
"c:\\Program Files\\AIM6\\aim6.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgnsx.exe"=
"c:\\Program Files\\Maxthon2\\Modules\\MxDownloader\\MxDownloadServer.exe"=
"c:\\Program Files\\Roxio\\Easy CD Creator 6\\DragToDisc\\DrgToDsc.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"135:TCP"= 135:TCP:192.168.88.36/255.255.255.255:Enabled:DCOM resolver

R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [7/7/2009 12:28 AM 335240]
R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [7/7/2009 12:28 AM 108552]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [5/28/2008 11:33 AM 9968]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [5/28/2008 11:33 AM 74480]
R2 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [7/7/2009 12:28 AM 297752]
R2 MSSQL$ACT7;SQL Server (ACT7);c:\program files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [11/24/2008 10:31 PM 29263712]
R2 NIOC;NIOC Service;c:\windows\system32\NIOC.sys [9/27/2002 7:21 PM 22912]
R2 TvWksSvc;TeleVantage Workstation Service;c:\program files\Common Files\Artisoft\TeleVantage\TvWksSvc.exe [10/5/2005 5:08 PM 102400]
R2 Viewpoint Manager Service;Viewpoint Manager Service;c:\program files\Viewpoint\Common\ViewpointService.exe [7/6/2009 2:52 PM 24652]
R2 WZCBDLService;WZCBDL Service;c:\program files\WZCBDL Service\WZCBDLS.exe [3/19/2002 1:15 PM 36864]
S2 ACT! Scheduler;ACT! Scheduler;c:\program files\ACT\Act for Windows\Act.Scheduler.exe [2/24/2009 11:08 AM 81920]
S2 AppleClipSrv;Apple Mobile Device AppleClipSrv;c:\windows\system32\1042m.exe srv --> c:\windows\system32\1042m.exe srv [?]
S2 Crypto;Crypto;\??\c:\windows\system32\Drivers\Crypto.sys --> c:\windows\system32\Drivers\Crypto.sys [?]
S2 gupdate1c9a66799b1f02c;Google Update Service (gupdate1c9a66799b1f02c);c:\program files\Google\Update\GoogleUpdate.exe [3/16/2009 11:47 AM 133104]
S3 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [11/6/2007 1:22 PM 34064]
S3 PRISM_USB;D-Link Air DWL-122 Wireless USB Adapter Driver;c:\windows\system32\drivers\PRISMUSB.sys [4/10/2003 6:43 PM 636416]
S3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [5/28/2008 11:33 AM 7408]
S3 SUSTUCAM;Susteen USB Cable Modem Driver;c:\windows\system32\drivers\sustucam.sys [12/8/2007 3:47 PM 38016]
.
Contents of the 'Scheduled Tasks' folder

2009-08-28 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-04-12 00:57]

2009-09-05 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-03-16 01:51]

2009-09-05 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-03-16 18:46]

2009-09-05 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-03-16 18:46]
.
- - - - ORPHANS REMOVED - - - -

BHO-{aa5e63d8-5a67-451f-9ef0-27fc3db2fb26} - c:\windows\system32\vetuhuki.dll
WebBrowser-{8FF5E180-ABDE-46EB-B09E-D2AAB95CABE3} - (no file)
HKCU-Run-SUPERAntiSpyware - c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe
HKLM-Run-lawumihiwu - c:\windows\system32\yaruhumi.dll
HKLM-Run-Antivirus Pro 2010 - c:\program files\AntivirusPro_2010\AntivirusPro_2010.exe

.
------- Supplementary Scan -------
.
mStart Page = hxxp://www.google.com
mSearch Bar = hxxp://us.rd.yahoo.com/customize/ie/defaults/sb/msgr9/*http://www.yahoo.com/ext/search/search.html
uSearchURL,(Default) = hxxp://us.rd.yahoo.com/customize/ie/defaults/su/msgr9/*http://www.yahoo.com
IE: &AIM Toolbar Search - c:\documents and settings\All Users\Application Data\AIM Toolbar\ieToolbar\resources\en-US\local\search.html
DPF: {4F3DCE50-E8E7-40AC-AB8D-99F87F1F89BD} - hxxps://192.168.88.80:4343/officescan/console/html/root/AtxConsole.cab
FF - ProfilePath - c:\documents and settings\Administrator\Application Data\Mozilla\Firefox\Profiles\l345qvdd.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.yahoo.com/search?fr=ffsp1&p=
FF - prefs.js: browser.search.selectedEngine - Yahoo
FF - prefs.js: browser.startup.homepage - hxxp://www.yahoo.com/
FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?fr=ffds1&p=
FF - plugin: c:\documents and settings\Administrator\Application Data\Mozilla\Firefox\Profiles\l345qvdd.default\extensions\firefox@tvunetworks.com\plugins\npTVUAx.dll
FF - plugin: c:\program files\Google\Google Updater\2.4.1536.6592\npCIDetect13.dll
FF - plugin: c:\program files\Google\Update\1.2.183.7\npGoogleOneClick8.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npbittorrent.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npunagi2.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npViewpoint.dll
FF - plugin: c:\program files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll

---- FIREFOX POLICIES ----
FF - user.js: yahoo.homepage.dontask - true.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-09-04 22:14
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\IMAIL]
@DACL=(02 0000)
"Installed"="1"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MAPI]
@DACL=(02 0000)
"NoChange"="1"
"Installed"="1"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MSFS]
@DACL=(02 0000)
"Installed"="1"
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(624)
c:\program files\SUPERAntiSpyware\SASWINLO.DLL
c:\windows\System32\NETUI0.dll

- - - - - - - > 'explorer.exe'(1472)
c:\windows\system32\kmw_dll.dll
c:\windows\system32\wow32.dll
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\WLTRYSVC.EXE
c:\windows\system32\BCMWLTRY.EXE
c:\program files\Common Files\AOL\ACS\AOLacsd.exe
c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
c:\program files\Dell\NicConfigSvc\NicConfigSvc.exe
c:\program files\Common Files\Protexis\License Service\PsiService_2.exe
c:\program files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe
c:\program files\AVG\AVG8\avgrsx.exe
c:\program files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
c:\program files\Microsoft SQL Server\90\Shared\sqlwriter.exe
c:\progra~1\AVG\AVG8\avgnsx.exe
c:\windows\system32\wdfmgr.exe
c:\windows\wanmpsvc.exe
c:\program files\Yahoo!\SoftwareUpdate\YahooAUService.exe
c:\windows\system32\wscntfy.exe
c:\windows\system32\kmw_show.exe
c:\program files\Roxio\Easy CD Creator 6\AudioCentral\Playlist.exe
c:\program files\iPod\bin\iPodService.exe
.
**************************************************************************
.
Completion time: 2009-09-05 22:21 - machine was rebooted
ComboFix-quarantined-files.txt 2009-09-05 05:21
ComboFix2.txt 2009-07-19 02:01
ComboFix3.txt 2009-02-28 00:02

Pre-Run: 2,298,716,160 bytes free
Post-Run: 2,280,243,200 bytes free

Current=3 Default=3 Failed=2 LastKnownGood=4 Sets=1,2,3,4
1348 --- E O F --- 2009-09-01 01:00

#8 m0le

Can U Dig It?

Malware Response Team
34,527 posts
OFFLINE

Gender:Male
Location:London, UK
Local time:07:19 AM

Posted 05 September 2009 - 05:19 AM

Yes, that's got rid of quite a lot but there's still a lot left.

1. Close any open browsers.

2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

3. Open notepad and copy/paste the text in the quotebox below into it:

File::
c:\windows\system32\drivers\ectfdbduxyriwqvr.sys
c:\program files\Common Files\ihuseh.dat
C:\svfp.exe
C:\hpbyv.exe
C:\xvhu.exe
c:\windows\TMP0001.TMP

Save this as CFScript.txt, in the same location as ComboFix.exe

Posted Image

Refering to the picture above, drag CFScript into ComboFix.exe

When finished, it shall produce a log for you at C:\ComboFix.txt which I will require in your next reply.

Then please run MBAM

Please download Posted Image

Malwarebytes Anti-Malware and save it to your desktop.

Make sure you are connected to the Internet.
Double-click on mbam-setup.exe to install the application or, if you are using Vista, right-click and select Run As Administrator on mbam-setup.exe to install the application.
When the installation begins, follow the prompts and do not make any changes to default settings.
When installation has finished, make sure you leave both of these checked:
- Update Malwarebytes' Anti-Malware
- Launch Malwarebytes' Anti-Malware
Then click Finish.
MBAM will automatically start and you will be asked to update the program before performing a scan. If an update is found, the program will automatically update itself. Press the OK button to close that box and continue. If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.
On the Scanner tab:
- Make sure the "Perform Full Scan" option is selected.
- Then click on the Scan button.
If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.
When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
Click OK to close the message box and continue with the removal process.
Back at the main Scanner screen, click on the Show Results button to see a list of any malware that was found.
Make sure that everything is checked, and click Remove Selected.
When removal is completed, a log report will open in Notepad.
The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
Copy and paste the contents of that report in your next reply and exit MBAM.

Note: If MBAM encounters a file that is difficult to remove, you may be asked to reboot your computer so it can proceed with the disinfection process. Regardless if prompted to restart the computer or not, please do so immediately. Failure to reboot normally (not into safe mode) will prevent MBAM from removing all the malware. MBAM may make changes to your registry as part of its disinfection routine. If you're using other security programs that detect registry changes, they may alert you after scanning with MBAM. Please permit the program to allow the changes.

Thanks

m0le is a proud member of UNITE

#9 crazy8oooo

Topic Starter

Members
38 posts
OFFLINE

Local time:02:19 AM

Posted 05 September 2009 - 02:56 PM

~~~~~Combofix log~~~~~

ComboFix 09-09-04.02 - Administrator 09/05/2009 10:17.4.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1014.402 [GMT -7:00]
Running from: c:\documents and settings\Administrator\Desktop\clean2\Combo-Fix.exe
Command switches used :: c:\documents and settings\Administrator\Desktop\clean2\CFScript.txt
AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
AV: Trend Micro OfficeScan Antivirus *On-access scanning disabled* (Outdated) {6570030F-1DAD-4BE3-B342-D21AC0B8935B}
FW: Trend Micro OfficeScan Enterprise Client Firewall *disabled* {6570030F-1DAD-4BE3-B342-D21AC0B8935B}
FW: Trend Micro Personal Firewall *disabled* {3E790E9E-6A5D-4303-A7F9-185EC20F3EB6}

FILE ::
"C:\hpbyv.exe"
"c:\program files\Common Files\ihuseh.dat"
"C:\svfp.exe"
"c:\windows\system32\drivers\ectfdbduxyriwqvr.sys"
"c:\windows\TMP0001.TMP"
"C:\xvhu.exe"
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\hpbyv.exe
c:\program files\Common Files\ihuseh.dat
C:\svfp.exe
c:\windows\system32\drivers\ectfdbduxyriwqvr.sys
c:\windows\TMP0001.TMP
C:\xvhu.exe

.
((((((((((((((((((((((((( Files Created from 2009-08-05 to 2009-09-05 )))))))))))))))))))))))))))))))
.

2009-09-04 06:04 . 2009-09-04 05:43 102664 ----a-w- c:\windows\system32\drivers\tmcomm.sys
2009-09-04 05:43 . 2009-09-04 06:07 -------- d-----w- c:\documents and settings\Administrator\.housecall6.6
2009-09-04 05:13 . 2009-08-03 20:36 38160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-09-04 05:13 . 2009-08-03 20:36 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-09-03 18:04 . 2009-09-03 18:04 -------- d-----w- C:\spoolerlogs
2009-09-03 17:39 . 2009-09-03 17:39 -------- d-sh--we c:\windows\system32\GroupPolicy\User\Scripts\Logoff\Logoff
2009-09-03 17:39 . 2009-09-03 17:39 -------- d-sh--we c:\windows\system32\GroupPolicy\Machine\Scripts\Shutdown\Shutdown
2009-09-03 07:29 . 2009-09-03 07:29 -------- d--h--w- c:\windows\system32\GroupPolicy
2009-09-03 06:17 . 2009-09-03 06:34 -------- d-----w- c:\documents and settings\All Users\Application Data\iOpus-i-M
2009-09-03 06:17 . 2006-08-17 01:39 241016 ----a-w- c:\windows\system32\imatl.dll
2009-09-03 06:17 . 2006-08-17 01:39 56696 ----a-w- c:\windows\system32\imsys.dll
2009-09-03 06:17 . 2009-09-03 06:27 -------- d-----w- c:\program files\iMacros
2009-09-01 00:53 . 2009-09-01 00:53 -------- d-----w- c:\windows\system32\XPSViewer
2009-09-01 00:53 . 2009-09-01 00:53 -------- d-----w- c:\program files\MSBuild
2009-09-01 00:52 . 2009-09-01 00:52 -------- d-----w- c:\program files\Reference Assemblies
2009-09-01 00:51 . 2008-07-06 12:06 89088 -c----w- c:\windows\system32\dllcache\filterpipelineprintproc.dll
2009-09-01 00:51 . 2008-07-06 12:06 117760 ------w- c:\windows\system32\prntvpt.dll
2009-09-01 00:51 . 2008-07-06 10:50 597504 -c----w- c:\windows\system32\dllcache\printfilterpipelinesvc.exe
2009-09-01 00:51 . 2008-07-06 12:06 575488 -c----w- c:\windows\system32\dllcache\xpsshhdr.dll
2009-09-01 00:51 . 2008-07-06 12:06 575488 ------w- c:\windows\system32\xpsshhdr.dll
2009-09-01 00:51 . 2008-07-06 12:06 1676288 -c----w- c:\windows\system32\dllcache\xpssvcs.dll
2009-09-01 00:51 . 2008-07-06 12:06 1676288 ------w- c:\windows\system32\xpssvcs.dll
2009-09-01 00:51 . 2009-09-03 17:39 -------- d-----w- c:\windows\SxsCaPendDel
2009-08-15 06:08 . 2009-08-15 06:08 -------- d-----w- c:\program files\CCleaner
2009-08-12 01:19 . 2009-08-12 01:19 -------- d-----w- C:\rsit
2009-08-09 03:50 . 2009-08-09 03:50 -------- d-----w- C:\ERDNT
2009-08-08 22:23 . 2009-08-08 22:23 -------- d-----w- c:\windows\system32\wbem\Repository
2009-08-07 00:30 . 2009-08-07 00:30 -------- d-----w- C:\_OTM

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-09-05 17:17 . 2009-02-08 09:46 -------- d-----w- c:\documents and settings\Administrator\Application Data\DNA
2009-09-05 17:09 . 2009-03-10 23:56 952 --sha-w- c:\documents and settings\All Users\Application Data\KGyGaAvL.sys
2009-09-05 17:07 . 2009-02-08 09:46 -------- d-----w- c:\program files\DNA
2009-09-04 07:44 . 2008-09-06 23:28 1324 ----a-w- c:\windows\system32\d3d9caps.dat
2009-09-04 05:41 . 2008-10-14 18:54 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-09-04 01:25 . 2009-03-16 18:44 -------- d-----w- c:\documents and settings\All Users\Application Data\Google Updater
2009-09-03 17:41 . 2009-02-09 09:10 -------- d-----w- c:\program files\SUPERAntiSpyware
2009-09-03 06:44 . 2008-11-15 06:46 -------- d-----w- c:\documents and settings\Administrator\Application Data\LimeWire
2009-09-02 06:49 . 2008-11-25 23:09 -------- d-----w- c:\program files\FriendBlasterPro
2009-09-01 05:39 . 2009-01-10 01:11 -------- d-----w- c:\program files\Password Safe
2009-09-01 03:53 . 2008-11-14 00:54 113080 -c--a-w- c:\documents and settings\Administrator\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-08-21 04:17 . 2008-11-15 06:45 -------- d-----w- c:\program files\LimeWire
2009-08-16 15:46 . 2009-07-07 07:28 11952 ----a-w- c:\windows\system32\avgrsstx.dll
2009-08-16 15:46 . 2009-07-07 07:28 27784 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2009-08-16 15:46 . 2009-07-07 07:28 335240 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2009-08-15 06:15 . 2008-04-16 18:12 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-08-15 05:09 . 2008-04-16 17:42 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
2009-08-13 22:03 . 2009-08-03 18:39 -------- d-----w- c:\documents and settings\All Users\Application Data\Yahoo! Companion
2009-08-05 09:01 . 2004-08-12 13:23 204800 ----a-w- c:\windows\system32\mswebdvd.dll
2009-08-03 23:37 . 2008-12-10 02:48 -------- d-----w- c:\documents and settings\Administrator\Application Data\MxBoost
2009-08-03 18:40 . 2008-11-14 00:46 -------- d-----w- c:\documents and settings\Administrator\Application Data\Yahoo!
2009-08-03 18:40 . 2009-08-03 18:40 262144 ----a-w- C:\ntuser.dat
2009-08-03 18:40 . 2008-10-03 16:37 -------- d-----w- c:\program files\Yahoo!
2009-08-03 18:39 . 2008-10-03 16:37 -------- d-----w- c:\documents and settings\All Users\Application Data\Yahoo!
2009-08-03 16:44 . 2009-08-03 16:44 -------- d-----w- c:\program files\Common Files\xing shared
2009-08-03 16:44 . 2006-11-09 16:10 -------- d-----w- c:\program files\Common Files\Real
2009-08-03 05:29 . 2008-12-10 02:47 -------- d-----w- c:\program files\Maxthon2
2009-08-03 05:27 . 2009-08-03 05:27 -------- d-----w- c:\program files\Opera
2009-07-28 19:44 . 2009-07-07 07:28 -------- d-----w- c:\documents and settings\All Users\Application Data\avg8
2009-07-19 07:07 . 2009-07-19 07:07 -------- d-----w- c:\program files\IrfanView
2009-07-19 06:24 . 2008-04-16 18:12 -------- d-----w- c:\program files\Spybot - Search & Destroy
2009-07-17 19:01 . 2004-08-12 13:17 58880 ----a-w- c:\windows\system32\atl.dll
2009-07-13 17:08 . 2004-08-12 13:34 286720 ----a-w- c:\windows\system32\wmpdxm.dll
2009-07-07 07:28 . 2009-07-07 07:28 108552 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2009-06-26 16:50 . 2004-08-12 13:33 666624 ------w- c:\windows\system32\wininet.dll
2009-06-26 16:50 . 2004-08-12 13:19 81920 ----a-w- c:\windows\system32\ieencode.dll
2009-06-25 08:25 . 2004-08-12 13:32 54272 ----a-w- c:\windows\system32\wdigest.dll
2009-06-25 08:25 . 2004-08-12 13:28 56832 ----a-w- c:\windows\system32\secur32.dll
2009-06-25 08:25 . 2004-08-12 13:27 147456 ----a-w- c:\windows\system32\schannel.dll
2009-06-25 08:25 . 2004-08-12 13:23 136192 ----a-w- c:\windows\system32\msv1_0.dll
2009-06-25 08:25 . 2004-08-12 13:21 730112 ----a-w- c:\windows\system32\lsasrv.dll
2009-06-25 08:25 . 2004-08-12 13:20 301568 ----a-w- c:\windows\system32\kerberos.dll
2009-06-24 11:18 . 2004-08-12 13:20 92928 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2009-06-16 14:36 . 2004-08-12 13:30 119808 ----a-w- c:\windows\system32\t2embed.dll
2009-06-16 14:36 . 2004-08-12 13:19 81920 ----a-w- c:\windows\system32\fontsub.dll
2009-06-12 12:31 . 2004-08-12 13:31 80896 ----a-w- c:\windows\system32\tlntsess.exe
2009-06-12 12:31 . 2004-08-12 13:30 76288 ----a-w- c:\windows\system32\telnet.exe
2009-06-10 16:19 . 2006-03-22 07:15 2066432 ----a-w- c:\windows\system32\mstscax.dll
2009-06-10 14:13 . 2004-08-12 13:17 84992 ----a-w- c:\windows\system32\avifil32.dll
2009-06-10 06:14 . 2004-08-12 13:33 132096 ----a-w- c:\windows\system32\wkssvc.dll
2009-03-10 15:57 . 2009-02-05 05:46 1838 --sha-w- c:\windows\system32\KGyGaAvL.sys
.

((((((((((((((((((((((((((((( SnapShot_2009-09-05_05.15.14 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-09-05 17:07 . 2009-09-05 17:07 16384 c:\windows\Temp\Perflib_Perfdata_4a4.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MySpaceIM"="c:\program files\MySpace\IM\MySpaceIM.exe" [2007-03-07 5181440]
"BitTorrent DNA"="c:\program files\DNA\btdna.exe" [2009-02-08 342848]
"Messenger (Yahoo!)"="c:\program files\Yahoo!\Messenger\YahooMessenger.exe" [2009-05-27 4351216]
"Search Protection"="c:\program files\Yahoo!\Search Protection\SearchProtection.exe" [2009-02-23 111856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ShowLOMControl"="1 (0x1)" [X]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2004-08-12 208952]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-12 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-12 455168]
"Broadcom Wireless Manager UI"="c:\windows\system32\WLTRAY.exe" [2005-12-19 1347584]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2005-11-29 761947]
"Dell QuickSet"="c:\program files\Dell\QuickSet\quickset.exe" [2005-12-06 839680]
"dla"="c:\windows\system32\dla\tfswctrl.exe" [2005-03-16 127037]
"ISUSPM Startup"="c:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-07-28 221184]
"ISUSScheduler"="c:\program files\Common Files\InstallShield\UpdateService\issch.exe" [2004-07-28 81920]
"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2003-11-01 32768]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-03-22 148888]
"igfxtray"="c:\windows\system32\igfxtray.exe" [2006-07-15 94208]
"igfxhkcmd"="c:\windows\system32\hkcmd.exe" [2006-07-15 77824]
"igfxpers"="c:\windows\system32\igfxpers.exe" [2006-07-15 118784]
"RoxioEngineUtility"="c:\program files\Common Files\Roxio Shared\System\EngUtil.exe" [2003-01-13 69632]
"RoxioDragToDisc"="c:\program files\Roxio\Easy CD Creator 6\DragToDisc\DrgToDsc.exe" [2003-01-13 757760]
"RoxioAudioCentral"="c:\program files\Roxio\Easy CD Creator 6\AudioCentral\RxMon.exe" [2003-01-09 253952]
"D-Link Air USB Utility"="c:\program files\D-Link\Air USB Utility\AirCFG.exe" [2003-05-27 2674688]
"HostManager"="c:\program files\Common Files\AOL\1188311225\ee\AOLSoftware.exe" [2006-09-26 50736]
"gcNotifier"="c:\documents and settings\guser\Local Settings\Application Data\VTShared\GCNotifier.exe" [2008-01-25 176128]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2008-05-27 413696]
"AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2008-07-23 116040]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-07-30 289064]
"Act.Outlook.Service"="c:\program files\ACT\Act for Windows\Act.Outlook.Service.exe" [2009-02-24 28672]
"Act! Preloader"="c:\program files\ACT\Act for Windows\ActSage.exe" [2009-02-24 393216]
"AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2009-08-16 2007832]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2009-08-03 185896]
"YSearchProtection"="c:\program files\Yahoo!\Search Protection\SearchProtection.exe" [2009-02-23 111856]
"SigmatelSysTrayApp"="stsystra.exe" - c:\windows\stsystra.exe [2005-11-16 397312]
"kmw_run.exe"="kmw_run.exe" - c:\windows\system32\kmw_run.exe [2004-01-27 106496]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"MySpaceIM"="c:\program files\MySpace\IM\MySpaceIM.exe" [2007-03-07 5181440]

c:\documents and settings\guser\Start Menu\Programs\Startup\
palmOne Registration.lnk - c:\program files\palmOne\register.exe [2005-9-19 2367488]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
Acrobat Assistant.lnk - c:\program files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe [2006-11-9 49254]
Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-9-23 29696]
HotSync Manager.lnk - c:\program files\palmOne\Hotsync.exe [2004-6-9 471040]
HOTSYNCSHORTCUTNAME.lnk - c:\program files\palmOne\Hotsync.exe [2004-6-9 471040]
Microsoft Office.lnk - c:\program files\Microsoft Office\Office\OSA9.EXE [2000-1-21 65588]
QuickBooks Update Agent.lnk - c:\program files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe [2008-2-27 972064]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"ForceClassicControlPanel"= 1 (0x1)

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoSetActiveDesktop"= 1 (0x1)

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2009-02-09 09:20 356352 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.DLL

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2009-08-16 15:46 11952 ----a-w- c:\windows\system32\avgrsstx.dll

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UpdatesDisableNotify"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\TrendAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\TrendFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\program files\TeleVantage\Client\TVClient.exe"= c:\program files\TeleVantage\Client\TVClient.exe:192.168.88.36/255.255.255.255:Enabled:Vertical TeleVantage ViewPoint
"c:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\LimeWire\\LimeWire.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\TVUPlayer\\TVUPlayer.exe"=
"c:\\Program Files\\Cain\\Cain.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\SopCast\\SopCast.exe"=
"c:\\Program Files\\SopCast\\adv\\SopAdver.exe"=
"c:\\Program Files\\DNA\\btdna.exe"=
"c:\\Program Files\\BitTorrent\\bittorrent.exe"=
"c:\\Program Files\\Intuit\\QuickBooks 2008\\QBDBMgrN.exe"=
"c:\\Program Files\\ACT\\Act for Windows\\ActSage.exe"=
"c:\\Program Files\\Common Files\\AOL\\1188311225\\ee\\aolsoftware.exe"=
"c:\\Program Files\\AIM6\\aim6.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgnsx.exe"=
"c:\\Program Files\\Maxthon2\\Modules\\MxDownloader\\MxDownloadServer.exe"=
"c:\\Program Files\\Roxio\\Easy CD Creator 6\\DragToDisc\\DrgToDsc.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"135:TCP"= 135:TCP:192.168.88.36/255.255.255.255:Enabled:DCOM resolver

R?2 WZCBDLService;WZCBDL Service;c:\program files\WZCBDL Service\WZCBDLS.exe [3/19/2002 1:15 PM 36864]
R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [7/7/2009 12:28 AM 335240]
R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [7/7/2009 12:28 AM 108552]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [5/28/2008 11:33 AM 9968]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [5/28/2008 11:33 AM 74480]
R2 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [7/7/2009 12:28 AM 297752]
R2 MSSQL$ACT7;SQL Server (ACT7);c:\program files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [11/24/2008 10:31 PM 29263712]
R2 NIOC;NIOC Service;c:\windows\system32\NIOC.sys [9/27/2002 7:21 PM 22912]
R2 TvWksSvc;TeleVantage Workstation Service;c:\program files\Common Files\Artisoft\TeleVantage\TvWksSvc.exe [10/5/2005 5:08 PM 102400]
R2 Viewpoint Manager Service;Viewpoint Manager Service;c:\program files\Viewpoint\Common\ViewpointService.exe [7/6/2009 2:52 PM 24652]
S2 ACT! Scheduler;ACT! Scheduler;c:\program files\ACT\Act for Windows\Act.Scheduler.exe [2/24/2009 11:08 AM 81920]
S2 AppleClipSrv;Apple Mobile Device AppleClipSrv;c:\windows\system32\1042m.exe srv --> c:\windows\system32\1042m.exe srv [?]
S2 Crypto;Crypto;\??\c:\windows\system32\Drivers\Crypto.sys --> c:\windows\system32\Drivers\Crypto.sys [?]
S2 gupdate1c9a66799b1f02c;Google Update Service (gupdate1c9a66799b1f02c);c:\program files\Google\Update\GoogleUpdate.exe [3/16/2009 11:47 AM 133104]
S3 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [11/6/2007 1:22 PM 34064]
S3 PRISM_USB;D-Link Air DWL-122 Wireless USB Adapter Driver;c:\windows\system32\drivers\PRISMUSB.sys [4/10/2003 6:43 PM 636416]
S3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [5/28/2008 11:33 AM 7408]
S3 SUSTUCAM;Susteen USB Cable Modem Driver;c:\windows\system32\drivers\sustucam.sys [12/8/2007 3:47 PM 38016]
.
Contents of the 'Scheduled Tasks' folder

2009-08-28 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-04-12 00:57]

2009-09-05 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-03-16 01:51]

2009-09-05 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-03-16 18:46]

2009-09-05 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-03-16 18:46]
.
.
------- Supplementary Scan -------
.
mStart Page = hxxp://www.google.com
mSearch Bar = hxxp://us.rd.yahoo.com/customize/ie/defaults/sb/msgr9/*http://www.yahoo.com/ext/search/search.html
uSearchURL,(Default) = hxxp://us.rd.yahoo.com/customize/ie/defaults/su/msgr9/*http://www.yahoo.com
IE: &AIM Toolbar Search - c:\documents and settings\All Users\Application Data\AIM Toolbar\ieToolbar\resources\en-US\local\search.html
DPF: {4F3DCE50-E8E7-40AC-AB8D-99F87F1F89BD} - hxxps://192.168.88.80:4343/officescan/console/html/root/AtxConsole.cab
FF - ProfilePath - c:\documents and settings\Administrator\Application Data\Mozilla\Firefox\Profiles\l345qvdd.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.yahoo.com/search?fr=ffsp1&p=
FF - prefs.js: browser.search.selectedEngine - Yahoo
FF - prefs.js: browser.startup.homepage - hxxp://www.yahoo.com/
FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?fr=ffds1&p=
FF - plugin: c:\documents and settings\Administrator\Application Data\Mozilla\Firefox\Profiles\l345qvdd.default\extensions\firefox@tvunetworks.com\plugins\npTVUAx.dll
FF - plugin: c:\program files\Google\Google Updater\2.4.1536.6592\npCIDetect13.dll
FF - plugin: c:\program files\Google\Update\1.2.183.7\npGoogleOneClick8.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npbittorrent.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npunagi2.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npViewpoint.dll
FF - plugin: c:\program files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll

---- FIREFOX POLICIES ----
FF - user.js: yahoo.homepage.dontask - true.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-09-05 10:25
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\IMAIL]
@DACL=(02 0000)
"Installed"="1"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MAPI]
@DACL=(02 0000)
"NoChange"="1"
"Installed"="1"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MSFS]
@DACL=(02 0000)
"Installed"="1"
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(624)
c:\program files\SUPERAntiSpyware\SASWINLO.DLL
.
Completion time: 2009-09-05 10:28
ComboFix-quarantined-files.txt 2009-09-05 17:28
ComboFix2.txt 2009-09-05 05:21
ComboFix3.txt 2009-07-19 02:01
ComboFix4.txt 2009-02-28 00:02

Pre-Run: 2,247,667,712 bytes free
Post-Run: 2,196,967,424 bytes free

Current=3 Default=3 Failed=2 LastKnownGood=4 Sets=1,2,3,4
298 --- E O F --- 2009-09-01 01:00

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~~~Mbam log~~~~~

Malwarebytes' Anti-Malware 1.40
Database version: 2745
Windows 5.1.2600 Service Pack 3

9/5/2009 12:42:55 PM
mbam-log-2009-09-05 (12-42-55).txt

Scan type: Full Scan (C:\|D:\|E:\|F:\|)
Objects scanned: 235906
Time elapsed: 1 hour(s), 17 minute(s), 11 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 2
Registry Data Items Infected: 4
Folders Infected: 0
Files Infected: 27

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Desktop\General\wallpaper (Hijack.Wallpaper) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\ForceClassicControlPanel (Hijack.ControlPanelStyle) -> Quarantined and deleted successfully.

Registry Data Items Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Program Files\Rushmore Casino\auslots.dll (Adware.Casino) -> Quarantined and deleted successfully.
C:\Program Files\Rushmore Casino\bj.dll (Adware.Casino) -> Quarantined and deleted successfully.
C:\Program Files\Rushmore Casino\casino.exe (Adware.Casino) -> Quarantined and deleted successfully.
C:\Program Files\Rushmore Casino\directsound.dll (Adware.Casino) -> Quarantined and deleted successfully.
C:\Program Files\Rushmore Casino\extgame.dll (Adware.Casino) -> Quarantined and deleted successfully.
C:\Program Files\Rushmore Casino\lbyinst.exe (Adware.Casino) -> Quarantined and deleted successfully.
C:\Program Files\Rushmore Casino\miniprocess.exe (Adware.Casino) -> Quarantined and deleted successfully.
C:\Program Files\Rushmore Casino\plibc32.dll (Adware.Casino) -> Quarantined and deleted successfully.
C:\Program Files\Rushmore Casino\slots.dll (Adware.Casino) -> Quarantined and deleted successfully.
C:\Program Files\Rushmore Casino\winsound.dll (Adware.Casino) -> Quarantined and deleted successfully.
C:\Qoobox\Quarantine\C\fyblb.exe.vir (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Qoobox\Quarantine\C\Program Files\AdvancedVirusRemover\PAVRM.exe.vir (Rogue.Installer) -> Quarantined and deleted successfully.
C:\Qoobox\Quarantine\C\WINDOWS\system32\wisdstr.exe.vir (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E70BBD94-1CA8-41FE-94E8-F5689F0A15D9}\RP1\A0000212.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E70BBD94-1CA8-41FE-94E8-F5689F0A15D9}\RP1\A0000216.sys (Trojan.KillAV) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E70BBD94-1CA8-41FE-94E8-F5689F0A15D9}\RP1\A0000221.sys (Trojan.KillAV) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E70BBD94-1CA8-41FE-94E8-F5689F0A15D9}\RP1\A0000225.exe (Rogue.Installer) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E70BBD94-1CA8-41FE-94E8-F5689F0A15D9}\RP1\A0000229.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E70BBD94-1CA8-41FE-94E8-F5689F0A15D9}\RP1\A0001233.exe (Rogue.Installer) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E70BBD94-1CA8-41FE-94E8-F5689F0A15D9}\RP1\A0000220.sys (Trojan.KillAV) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E70BBD94-1CA8-41FE-94E8-F5689F0A15D9}\RP1\A0001428.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E70BBD94-1CA8-41FE-94E8-F5689F0A15D9}\RP1\A0001438.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E70BBD94-1CA8-41FE-94E8-F5689F0A15D9}\RP1\A0001616.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E70BBD94-1CA8-41FE-94E8-F5689F0A15D9}\RP1\A0001618.exe (Rogue.Installer) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E70BBD94-1CA8-41FE-94E8-F5689F0A15D9}\RP1\A0001630.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
D:\Gil\gil\Copied\Installation Files\SnagIt\TX-40\kg.exe (Malware.Tool) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrator\Cookies\MM256.DAT (Trojan.Agent) -> Quarantined and deleted successfully.

#10 m0le

Can U Dig It?

Malware Response Team
34,527 posts
OFFLINE

Gender:Male
Location:London, UK
Local time:07:19 AM

Posted 05 September 2009 - 06:21 PM

Next up we test the waters and see what's left.

I'd like us to scan your machine with ESET OnlineScan

Hold down Control and click on the following link to open ESET OnlineScan in a new window.
ESET OnlineScan
Click the button.
For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
- Click on to download the ESET Smart Installer. Save it to your desktop.
- Double click on the icon on your desktop.
Check
Click the button.
Accept any security warnings from your browser.
Check
Push the Start button.
ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
When the scan completes, push
Push , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
Push the button.
Push

Thanks

m0le is a proud member of UNITE

#11 crazy8oooo

Topic Starter

Members
38 posts
OFFLINE

Local time:02:19 AM

Posted 05 September 2009 - 10:00 PM

Here are the results from that scan...

C:\Documents and Settings\Administrator\Desktop\ShopAtHome_Toolbar.exe probably a variant of Win32/Genetik trojan cleaned by deleting - quarantined
C:\Program Files\Cain\Cain.exe probably a variant of Win32/Genetik trojan cleaned by deleting - quarantined
C:\Qoobox\Quarantine\C\WINDOWS\system32\wscsvc32.exe.vir Win32/Adware.CoreguardAntivirus application cleaned by deleting - quarantined
C:\System Volume Information\_restore{E70BBD94-1CA8-41FE-94E8-F5689F0A15D9}\RP1\A0000209.dll a variant of Win32/Kryptik.YQ trojan cleaned by deleting - quarantined
C:\System Volume Information\_restore{E70BBD94-1CA8-41FE-94E8-F5689F0A15D9}\RP1\A0000215.exe a variant of Win32/Kryptik.AIQ trojan cleaned by deleting - quarantined
C:\System Volume Information\_restore{E70BBD94-1CA8-41FE-94E8-F5689F0A15D9}\RP1\A0000219.exe a variant of Win32/Kryptik.ADD trojan cleaned by deleting - quarantined
C:\System Volume Information\_restore{E70BBD94-1CA8-41FE-94E8-F5689F0A15D9}\RP1\A0000224.dll a variant of Win32/Kryptik.YQ trojan cleaned by deleting - quarantined
C:\System Volume Information\_restore{E70BBD94-1CA8-41FE-94E8-F5689F0A15D9}\RP1\A0000230.exe a variant of Win32/Kryptik.ADD trojan cleaned by deleting - quarantined
C:\System Volume Information\_restore{E70BBD94-1CA8-41FE-94E8-F5689F0A15D9}\RP1\A0001631.exe Win32/Adware.CoreguardAntivirus application cleaned by deleting - quarantined
C:\System Volume Information\_restore{E70BBD94-1CA8-41FE-94E8-F5689F0A15D9}\RP2\A0001966.exe probably a variant of Win32/Genetik trojan cleaned by deleting - quarantined
C:\System Volume Information\_restore{E70BBD94-1CA8-41FE-94E8-F5689F0A15D9}\RP2\A0001967.exe probably a variant of Win32/Genetik trojan cleaned by deleting - quarantined
D:\Profiles\guser\Application Data\MySpace\IM\Install\MSIMClientSetup.1.0.594.0-static.exe probably a variant of Win32/Genetik trojan deleted - quarantined

#12 m0le

Can U Dig It?

Malware Response Team
34,527 posts
OFFLINE

Gender:Male
Location:London, UK
Local time:07:19 AM

Posted 06 September 2009 - 05:33 AM

How is the PC running now?

ESET found a few strays, most of the entries can be dealt with later and are, at present, safe.

Please run ATF

Please download ATF Cleaner by Atribune. Double-click ATF-Cleaner.exe to run the program.
Under Main "Select Files to Delete" choose: Select All.
Click the Empty Selected button.
If you use Firefox browserClick Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
If you use Opera browserClick Opera at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
Click Exit on the Main menu to close the program.
For Technical Support, double-click the e-mail address located at the bottom of each menu.

If you are using Firefox and this has caused page loading problems then please clear your private data. To do this go
to the Tools menu, select Clear Private Data, and then check Cache. Click Clear Private Data Now.

Then close Firefox and then reopen it.

We're nearly done, crazy8oooo

m0le is a proud member of UNITE

#13 crazy8oooo

Topic Starter

Members
38 posts
OFFLINE

Local time:02:19 AM

Posted 06 September 2009 - 09:47 PM

Hello m0le...things seem to be running quite well now. Thank you. I ran ATF Cleaner and cleared all 3 browsers, IE, FF, and Opera. No issues...

Let me know if you have anything else for me to run.

Thanks again!

#14 m0le

Can U Dig It?

Malware Response Team
34,527 posts
OFFLINE

Gender:Male
Location:London, UK
Local time:07:19 AM

Posted 07 September 2009 - 12:00 PM

No, nothing more to do here, crazy8ooo.

Good stuff!

Let's do some housekeeping

Delete ComboFix and Clean Up
Click Start > Run and type combofix /u click OK (Note the space between combofix and /u)
Posted Image

Please advise if this step is missed for any reason as it performs some important actions.

Download and Run OTC

We will now remove the tools we used during this fix using OTC.

Download OTC by OldTimer and save it to your desktop.
Double click icon to start the program. If you are using Vista, please right-click and choose run as administrator
Then Click the big button.
You will get a prompt saying "Being Cleanup Process". Please select Yes.
Restart your computer when prompted.

I recommend that you download HostMan. It safeguards you with a regularly updated Hosts-file that blocks dangerous sites from opening. This adds another bit of safety while surfing the Internet. For installlation and setting up, follow these steps:

Double-click the Downloaded installer and install the tool to a location of your choice
Via the Startmenu, navigate to HostsMan and run the program.
- Click "Hosts" in the menu
- Click "Manage Updates" in the submenu
- Out of the three, select atleast one of the three (I have MVPS Host as my main one)
- Click "Add Update." After that you will only need to click on the following button to retrieve updates:
Click the X to exit the program.
Note: If you were using a custom Hosts file you will need to replace any of those entries yourself.

Here's some advice on how you can keep your PC clean

Update your AntiVirus Software

It is imperative that you update your Antivirus software at least once a week (Even more if you wish). If you do not update your antivirus software then it will not be able to catch any of the new variants that may come out. If you use a commercial antivirus program you must make sure you keep renewing your subscription. Otherwise, once your subscription runs out, you may not be able to update the programs virus definitions.

Make sure your applications have all of their updates

It is also possible for other programs on your computer to have security vulnerability that can allow malware to infect you. Therefore, it is also a good idea to check for the latest versions of commonly installed applications that are regularly patched to fix vulnerabilities. You can check these by visiting Secunia Software Inspector and Calendar of Updates.

Use a Firewall

I can not stress how important it is that you use a Firewall on your computer. Without a firewall your computer is susceptible to being hacked and taken over. I am very serious about this and see it happen almost every day with my clients. Simply using a Firewall in its default configuration can lower your risk greatly.

For a tutorial on Firewalls and a listing of some available ones see the link below:

Understanding and Using Firewalls

Install an AntiSpyware Program

A highly recommended AntiSpyware program is SuperAntiSpyware. You can download the free Home Version. or the Pro version for a 15 day trial period.

Other recommended, and free, AntiSpyware programs are Spybot - Search and Destroy and Ad-Aware Personal.

Installing these programs will provide spyware & hijacker protection on your computer alongside your virus protection. You should scan your computer with an AntiSpyware program on a regular basis just as you would an antivirus software.

Tutorials on using these programs can be found below:

Using Spybot - Search & Destroy to remove Spyware , Malware, and Hijackers

Using Ad-aware to remove Spyware, Malware, & Hijackers from Your Computer

That's it crazy8ooo, you're clean again. Happy surfing!

Cheers,

m0le

m0le is a proud member of UNITE

#15 crazy8oooo

Topic Starter

Members
38 posts
OFFLINE

Local time:02:19 AM

Posted 07 September 2009 - 02:17 PM

Thank you so much for your help, m0le. I appreciate it and am very impressed. I thought I was going to have to format my drive.

I guess that virus was just too good, because I do run virus protection and check for updates nightly. (autocheck)

I also run SuperAntiSpyware and also update it daily.

Lastly, I use Windows firewall.

I'm surprised anything got by all of that. Especially, considering I used both AVG and SuperAntiSpyware to scan the file that caused my infection, prior to running it.

In any case, thank you for your expert help. Have a great day!