Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

RootKit/Win32/0Access has disabled Windows


  • This topic is locked This topic is locked
64 replies to this topic

#1 Doreen aka LuniLadi

Doreen aka LuniLadi

  • Members
  • 37 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:04:04 PM

Posted 07 October 2011 - 04:05 PM

I think my desktop was infected with one or all of the above viruses/malware. First indication was that my AVG seemed to stop running. Then windows popped up with a "no firewall" warning. An unrelated movie converter program I was trying to run stopped running. I got real worried, downloaded some well known antivirus programs and tried to run them: AVG Pro (free 30 day trial version), Norton, some other utilities from majorgeeks and CNET. The Norton was blocked. The AVG took forever to install and then reported files were corrupted. It got to be a real mess and I panicked. I think I made a major mistake when I turned off my machine. :(

Now Windows XP won't boot. I get my desktop but then get (2) messages saying explorer.exe won't run...missing: CRYPTUI.dll and MSWSOCK.dll.


I've downloaded the gmer and dss programs as instructed in your guide. Is it possible to run these programs from a CD? Can I copy the missing files into the Win directory so Windows will boot completely?

I'm crushed.

Thanks for any help you can give.
Doreen aka LuniLadi
PS Unfortunately I'll be out of town from early tomorrow morning (10/8) until Monday night (10/10). It should have been a happy occasion but I'm just sick over my machine. argh.
I'll look for your reply immediately on Tues morning. THANKS

BC AdBot (Login to Remove)

 


#2 HelpBot

HelpBot

    Bleepin' Binary Bot


  • Bots
  • 12,600 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:04 PM

Posted 12 October 2011 - 04:10 PM

Hello and welcome to Bleeping Computer!

I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.

We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.

To help Bleeping Computer better assist you please perform the following steps:

***************************************************

Posted Image In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.

CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/422357 <<< CLICK THIS LINK



If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.

***************************************************

Posted Image If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of this page). In that reply, please include the following information:

  • If you have not done so already, include a clear description of the problems you're having, along with any steps you may have performed so far.
  • A new DDS and GMER log. For your convenience, you will find the instructions for generating these logs repeated at the bottom of this post.
    • Please do this even if you have previously posted logs for us.
    • If you were unable to produce the logs originally please try once more.
    • If you are unable to create a log please provide detailed information about your installed Windows Operating System including the Version, Edition and if it is a 32bit or a 64bit system.
    • If you are unsure about any of these characteristics just post what you can and we will guide you.
  • Please tell us if you have your original Windows CD/DVD available.
  • Upon completing the above steps and posting a reply, another staff member will review your topic and do their best to resolve your issues.

Thank you for your patience, and again sorry for the delay.

***************************************************

We need to see some information about what is happening in your machine. Please perform the following scan again:

  • Download DDS by sUBs from one of the following links if you no longer have it available. Save it to your desktop.
  • Double click on the DDS icon, allow it to run.
  • A small box will open, with an explanation about the tool. No input is needed, the scan is running.
  • Notepad will open with the results.
  • Follow the instructions that pop up for posting the results.
  • Close the program window, and delete the program from your desktop.
Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet.

Information on A/V control HERE


We also need a new log from the GMER anti-rootkit Scanner.

Please note that if you are running a 64-bit version of Windows you will not be able to run GMER and you may skip this step.

Please first disable any CD emulation programs using the steps found in this topic:

Why we request you disable CD Emulation when receiving Malware Removal Advice


Then create another GMER log and post it as an attachment to the reply where you post your new DDS log. Instructions on how to properly create a GMER log can be found here:

How to create a GMER log


As I am just a silly little program running on the BleepingComputer.com servers, please do not send me private messages as I do not know how to read and reply to them! Thanks!

#3 Doreen aka LuniLadi

Doreen aka LuniLadi
  • Topic Starter

  • Members
  • 37 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:04:04 PM

Posted 28 October 2011 - 07:14 PM

Thanks to Buddapest for reopening my topic!

I'm running Windows XP ver 5.1 (32 bit I think).After I managed to replace the original missing Windows files mentioned in my first post, I installed the recovery console as a boot up option. I don't have a Windows CD.

I ran both a quick and full Dr. Web scan while in safe mode. It found trojans which I deleted. I turned off my machine thinking I would rerun a complete scan in normal mode today. However, today I couldn't run any antivirus software. I could only run DDS in safe mode. I couldn't run GMER. I couldn't access the internet. I couldn't install any software. The machine seemed to reboot whenever any software or action got near the virus (possible?).

After reading some forums here I renamed MalwareBytes software and got it running with the machine in safe mode. It's currently scanning the machine. Dr. Web picked up kdja.exe in a recyle bin and I've deleted it.

As soon as possible I will try to run DDS and GMER. Should I run them in safe mode? Or attempt to run them in normal mode?
THANK YOU SO for the help
Doreen aka LuniLadi

Edited by Doreen aka LuniLadi, 28 October 2011 - 07:15 PM.


#4 etavares

etavares

    Bleepin' Remover


  • Malware Response Team
  • 15,514 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:04 PM

Posted 29 October 2011 - 05:36 AM

Welcome to Bleeping Computer

We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.

If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine.

If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.

Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process. Please also continue to work with me until I give you the all clear. Even if your computer appears to act better, you may still be infected.

Even if you have already provided information about your PC, we need a new log to see what has changed since you originally posted your problem.

Once we start working together, please reply back within 3 days or this thread may be closed so we can help others who are waiting.


Instead of DDS, please run OTL as below: If it doesn't work, let me know...ZeroAccess can be a bit of a pain, but usually it will run the first time.

We need to create an OTL report,
  • Please download OTL from this link.
  • Save it to your desktop.
  • Double click on the Posted Image icon on your desktop.
  • Click the "Scan All Users" checkbox.
  • Under the Custom Scan box paste this in:

    netsvcs
    msconfig
    %SYSTEMDRIVE%\*.*
    %systemroot%\system32\Spool\prtprocs\w32x86\*.dll
    %systemroot%\*. /mp /s
    %systemroot%\system32\*.sys /90
    %systemroot%\system32\*.dll /lockedfiles
    %systemroot%\Tasks\*.job /lockedfiles
    %systemroot%\system32\drivers\*.sys /lockedfiles
    %systemroot%\system32\*.exe /lockedfiles
    %systemroot%\System32\config\*.sav
    %PROGRAMFILES%\*
    %USERPROFILE%\..|smtmp;true;true;true /FP
    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
    hklm\software\clients\startmenuinternet|command /rs
    hklm\software\clients\startmenuinternet|command /64 /rs
    CREATERESTOREPOINT
  • Click the Quick Scan button.
  • The scan should take a few minutes.
  • Please copy and paste both logs in your reply.

We also need a new log from the GMER anti-rootkit scanner. Please first disable any CD emulation programs using the steps found in this topic:

Why we request you disable CD Emulation when receiving Malware Removal Advice

Then create another GMER log and post it as an attachment to the reply where you post your new DDS log. Instructions on how to properly create a GMER log can be found here:

How to create a GMER log


In your reply, please post both OTL logs and the GMER log.


If I don't respond within 2 days, please feel free to PM me.
Please don't ask for help via PM. The forums are there for a reason. Please post in the forums so others may benefit as well.

Posted Image
Unified Network of Instructors and Trusted Eliminators
 


#5 Doreen aka LuniLadi

Doreen aka LuniLadi
  • Topic Starter

  • Members
  • 37 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:04:04 PM

Posted 31 October 2011 - 01:45 PM

Etavares, sorry for the delayed reply. Snowstorm left me without power for 36hrs.
Here's what happened when I went to follow your instructions:
1- Started in NORMAL mode, plugged in jump drive and tried to use Windows Explorer to copy needed files/folder onto machine's desktop --> MACHINE REBOOTED
2- Started in SAFE mode, logged in as owner (vs administrator) and could copy folder to desktop
3- In NORMAL MODE, couldn't set up OTL fast enough to run scan --> MACHINE REBOOTED
4- In NORMAL MODE, machine REBOOTED while OTL running scan ("scanning modules")
5- NORMAL MODE, 3rd try --> MACHINE REBOOTED
6- Ran OTL in SAFE MODE
***** ALL LOGS ATTACHED, SAFE LOG NOTED ******
7- Ran Defogger although I don't think I have any CD emulation software running.
8- In NORMAL MODE --> MACHINE REBOOTED at beginning of GMER scan
9- NORMAL MODE --> MACHINE REBOOTED running GMER scan (I think C:|Windows\System32\Drivers\netbios.sys was the last thing I saw)
10- NORMAL MODE --> MACHINE REBOOTED running GMER scan (Think C:\Windows\System32\Drivers\ftman.sys was last thing on screen)
11- Ran GMER scan in SAFE MODE. After approx 3 hrs I left the computer scan running. When I came back there wasn't any additional information on screen and the scan seemed to be done.
When I went to save the file to desktop I got a message saying there wasn't enough system resources and nothing would be saved! :( I've begun the scan again (2:30 EST) but cut and paste the beginning info from the screen and attached it as "ARK-SAFE.TXT"
************* ALL LOGS ATTACHED, SAFE CUT-PASTE LOG NOTED ****************
I'm afraid I'm not giving you much to work with. :(
Doreen aka LuniLadi

Attached Files



#6 Doreen aka LuniLadi

Doreen aka LuniLadi
  • Topic Starter

  • Members
  • 37 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:04:04 PM

Posted 31 October 2011 - 01:49 PM

Here's the GMER cut and paste. :(
I also have another OTL file but I'm getting the message it's too big...

Attached Files



#7 Doreen aka LuniLadi

Doreen aka LuniLadi
  • Topic Starter

  • Members
  • 37 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:04:04 PM

Posted 31 October 2011 - 08:41 PM

Etavares,
Ran the GMER scan in SAFE MODE a second time. It did list about 24-36 lines under "FILE" but I couldn't save them. Got a "insufficient resources" message when I pressed "save" no matter where I tried to save to (Desktop, My Documents, any folder on the desketop). Also My Documents, Desktop and all other folders were reported as "empty". (??)Tried to COPY the log, got it to the clipboard but Notepad wouldn't open. (Neither would Word) Machine didn't recognize a USB drive. There was just no way I could save the finished scan's information. Sorry.
Doreen aka LuniLadi

#8 etavares

etavares

    Bleepin' Remover


  • Malware Response Team
  • 15,514 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:04 PM

Posted 01 November 2011 - 05:14 AM

Hello, Doreen aka LuniLadi.

EDIT: Better idea...I want to see if ZeroAccess is gone or not.

Download SystemLook from one of the links below and save it to your Desktop.
Download Mirror #1
Download Mirror #2

If you have a 64-bit system, please download the 64 bit version from here:
SystemLook (64-bit)

  • Double-click SystemLook.exe to run it.
  • A blank Windows shall open with the title "SystemLook v1.0-by Jpshortstuff".
  • Copy and Paste the content of the following codebox into the main textfield under "File":
    :dir
    C:\Windows
    
  • Please Confirm everything is copied and Pasted as I have provided above
  • Click the Look button to start the scan.
  • When finished, a notepad window will open with the results of the scan.
  • Please post this log in your next reply.


Note: The log can also be found on your Desktop entitled SystemLook.txt
2nd Note: The scan may take a while from several seconds to a minute or more depending on the number of files you have and how fast your computer can perform the task


etavares

Edited by etavares, 01 November 2011 - 05:16 AM.


If I don't respond within 2 days, please feel free to PM me.
Please don't ask for help via PM. The forums are there for a reason. Please post in the forums so others may benefit as well.

Posted Image
Unified Network of Instructors and Trusted Eliminators
 


#9 Doreen aka LuniLadi

Doreen aka LuniLadi
  • Topic Starter

  • Members
  • 37 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:04:04 PM

Posted 01 November 2011 - 10:50 AM

etavares, I don't want to sound like a smarta$$ but I would bet you a case of beer :) that %$#@#*&% thing is on my machine :( I can't run ANY scan or antivirus in NORMAL mode. They all get shut down. I got SystemLook to run by trying to run 3-4 other virus programs to keep the d**n thing busy. AND when I tried to copy the log file to my jump drive it rebooted the machine! Thank the Geeks I could transfer the log in safe mode. I'm scared. :( Doreen aka LuniLadi

PS ***** Can't attach systemlook.txt ***File too big to upload *****
Should I try to split it? Or can I PM it? Or....?

EDIT: sorry copy/paste seemed the only way.



SystemLook 30.07.11 by jpshortstuff
Log created at 11:16 on 01/11/2011 by Owner
Administrator - Elevation successful

========== dir ==========

c:\Windows - Parameters: "(none)"

---Files---
0.log --a---- 0 bytes [01:16 20/08/2004] [15:02 01/11/2011]
002743_.tmp --a---- 19569 bytes [22:02 18/08/2008] [19:01 28/12/2006]
1STBOOT.BMP ------- 1518 bytes [03:43 13/06/2003] [03:22 24/04/1999]
3D Sea Aquarium.scr ------- 585728 bytes [03:42 06/01/2005] [03:42 06/01/2005]
a3dsplh.wav -r----- 537644 bytes [19:45 05/11/2004] [19:15 05/11/2004]
a3dspls.wav -r----- 550082 bytes [19:45 05/11/2004] [19:15 05/11/2004]
acc1.txt --a---- 98 bytes [17:37 14/06/2005] [14:43 01/08/2005]
Active Setup Log.BAK --a---- 824 bytes [13:07 06/08/2006] [21:51 11/10/2011]
Active Setup Log.txt --a---- 875 bytes [13:07 06/08/2006] [13:47 28/10/2011]
ADE.DLL --a---- 73216 bytes [16:25 31/07/2005] [06:03 07/12/1999]
Ade001.bin --a---- 3136 bytes [16:25 31/07/2005] [04:17 27/04/1999]
ALCFDRTM.EXE ------- 60416 bytes [02:57 20/08/2004] [02:57 20/08/2004]
ALCFDRTM.VER ------- 60416 bytes [02:57 20/08/2004] [14:56 08/09/2004]
ALCMTR.EXE ------- 57344 bytes [01:19 20/08/2004] [03:49 03/07/2004]
ALCWZRD.EXE ------- 2550272 bytes [01:19 20/08/2004] [02:05 06/07/2004]
atid.ini --a---- 28 bytes [22:28 28/01/2006] [22:28 28/01/2006]
BACKGRND.GIF ------- 103582 bytes [03:40 13/06/2003] [03:22 24/04/1999]
Bb2.ini --a---- 613 bytes [20:02 10/02/2010] [17:23 12/02/2010]
BigFixClientOverride.dll ------- 17956 bytes [01:49 20/08/2004] [17:16 09/08/2004]
Black Thatch.bmp ------- 182 bytes [03:43 13/06/2003] [03:22 24/04/1999]
Blue Lace 16.bmp ------- 1272 bytes [01:11 20/08/2004] [12:00 04/08/2004]
Blue Rivets.bmp ------- 194 bytes [03:43 13/06/2003] [03:22 24/04/1999]
bootstat.dat --a-s-- 2048 bytes [01:15 20/08/2004] [15:14 01/11/2011]
BQSHYJ2R.ocx --a---- 3120 bytes [01:51 02/07/1617] [01:51 02/07/1617]
Bubbles.bmp ------- 2118 bytes [16:02 09/07/1998] [03:22 24/04/1999]
Carved Stone.bmp ------- 582 bytes [03:43 13/06/2003] [03:22 24/04/1999]
CDILLA13.DLL --a---- 45056 bytes [19:05 24/09/2006] [23:09 10/09/2001]
CDILLA16.EXE --a---- 7056 bytes [19:05 24/09/2006] [23:04 10/09/2001]
CDILLA32.DLL --a---- 260096 bytes [19:05 24/09/2006] [23:09 10/09/2001]
CDILLA40.DLL --a---- 55376 bytes [19:05 24/09/2006] [21:38 10/09/2001]
CDPlayer.ini --a---- 197 bytes [21:05 04/05/2010] [21:57 04/05/2010]
chipset.log ------- 1680 bytes [01:18 20/08/2004] [01:22 20/08/2004]
Circles.bmp ------- 190 bytes [16:02 09/07/1998] [03:22 24/04/1999]
clock.avi ------- 82944 bytes [00:49 20/08/2004] [12:00 04/08/2004]
CLOUD.GIF ------- 11306 bytes [03:40 13/06/2003] [03:22 24/04/1999]
Clouds.bmp ------- 307514 bytes [16:02 09/07/1998] [03:22 24/04/1999]
cms.INI --a---- 42 bytes [16:25 17/12/2005] [19:43 22/04/2006]
cmsetacl.log --a---- 373 bytes [01:11 20/08/2004] [16:20 26/09/2008]
Coffee Bean.bmp ------- 17062 bytes [01:11 20/08/2004] [12:00 04/08/2004]
COM+.log --a---- 5780 bytes [02:20 20/08/2004] [14:19 21/09/2010]
comsetup.log --a---- 810892 bytes [18:07 19/08/2004] [15:56 28/10/2011]
CONTENT.GIF ------- 248 bytes [03:40 13/06/2003] [03:22 24/04/1999]
control.ini ------- 0 bytes [01:14 20/08/2004] [01:14 20/08/2004]
coredw.log --a---- 41705114 bytes [21:06 22/07/2007] [15:48 29/11/2008]
crackpdf.INI --a---- 465 bytes [16:19 12/03/2009] [18:42 02/01/2010]
DATAMGR.HLP --a---- 26871 bytes [16:25 17/12/2005] [20:33 21/04/2006]
datawriter.log --a---- 1262556 bytes [21:06 22/07/2007] [15:47 29/11/2008]
DEBUGSM.INI ------- 29 bytes [15:30 07/11/2004] [15:30 07/11/2004]
desktop.ini ------- 2 bytes [01:12 20/08/2004] [12:00 04/08/2004]
dll32USB.dll ------- 111616 bytes [19:46 07/11/2004] [14:44 28/09/2000]
DtcInstall.log --a---- 867 bytes [01:12 20/08/2004] [15:57 27/09/2008]
dvdSanta.INI --a---- 26 bytes [00:16 28/05/2006] [02:41 12/02/2010]
EASTER1.BMP ------- 485784 bytes [21:14 06/07/2000] [21:07 21/03/1996]
EASTER2.BMP -r----- 485784 bytes [19:45 05/11/2004] [19:15 05/11/2004]
EPISME00.SWB --a---- 9662 bytes [18:17 16/07/2006] [20:59 12/12/2010]
EPSON 1260_1660 Installer.ini --a---- 195 bytes [15:17 07/11/2004] [16:28 31/07/2005]
EPSONC86.ini --a---- 45 bytes [16:58 28/11/2005] [17:05 28/11/2005]
EXCEL5.XLB ------- 551 bytes [22:06 28/07/2000] [21:13 13/02/2000]
explorer.exe --a---- 1033728 bytes [00:48 20/08/2004] [00:12 14/04/2008]
explorer.scf ------- 80 bytes [00:48 20/08/2004] [12:00 04/08/2004]
F9B5D4PH.ocx --a---- 3120 bytes [07:23 30/06/1617] [07:23 30/06/1617]
FaxSetup.log --a---- 2484115 bytes [18:07 19/08/2004] [15:56 28/10/2011]
FeatherTexture.bmp ------- 16730 bytes [01:11 20/08/2004] [12:00 04/08/2004]
Film Factory.scr --a---- 303104 bytes [17:01 28/11/2005] [22:14 07/05/2001]
flash.ocx --a---- 939368 bytes [18:42 18/07/2008] [20:51 08/04/2004]
Forest.bmp ------- 66146 bytes [16:02 09/07/1998] [03:22 24/04/1999]
GEARInstall.log --a---- 121 bytes [21:20 24/05/2007] [21:20 24/05/2007]
Gold Weave.bmp ------- 32850 bytes [03:43 13/06/2003] [03:22 24/04/1999]
Gone Fishing.bmp ------- 17336 bytes [01:11 20/08/2004] [12:00 04/08/2004]
Greenstone.bmp ------- 26582 bytes [01:11 20/08/2004] [12:00 04/08/2004]
grep.exe --a---- 80412 bytes [16:45 11/10/2011] [00:00 31/08/2000]
HEARTART.BMP -r----- 485784 bytes [19:45 05/11/2004] [19:15 05/11/2004]
hh.exe --a---- 10752 bytes [00:48 20/08/2004] [00:12 14/04/2008]
HKNTDLL.dll ------- 24576 bytes [19:12 20/08/2004] [03:36 03/07/2001]
HLPBELL.GIF ------- 1407 bytes [03:40 13/06/2003] [03:22 24/04/1999]
HLPCD.GIF ------- 1492 bytes [03:40 13/06/2003] [03:22 24/04/1999]
HLPGLOBE.GIF ------- 1603 bytes [03:40 13/06/2003] [03:22 24/04/1999]
HLPLOGO.GIF ------- 1185 bytes [03:40 13/06/2003] [03:22 24/04/1999]
HLPSTEP1.GIF ------- 1107 bytes [03:40 13/06/2003] [03:22 24/04/1999]
HLPSTEP2.GIF ------- 1154 bytes [03:40 13/06/2003] [03:22 24/04/1999]
HLPSTEP3.GIF ------- 1249 bytes [03:40 13/06/2003] [03:22 24/04/1999]
hotbtnv.vxd ------- 5280 bytes [19:12 20/08/2004] [18:57 07/08/2000]
Houndstooth.bmp ------- 470 bytes [03:43 13/06/2003] [03:22 24/04/1999]
IDNMitigationAPIs.log --a---- 9584 bytes [23:01 28/10/2006] [23:02 28/10/2006]
ie7.log --a---- 48372 bytes [23:02 28/10/2006] [23:04 28/10/2006]
ie7beta3.log --a---- 47558 bytes [13:11 06/08/2006] [13:14 06/08/2006]
ie7beta3Uninst.log --a---- 25595 bytes [13:31 28/10/2006] [13:32 28/10/2006]
ie7beta3_main.log --a---- 17713 bytes [13:09 06/08/2006] [13:15 06/08/2006]
ie7_main.log --a---- 32717 bytes [12:34 28/10/2006] [23:04 28/10/2006]
ie8.log --a---- 471011 bytes [13:34 29/07/2009] [15:56 28/10/2011]
ie8Uninst.log --a---- 102990 bytes [20:29 26/12/2010] [15:03 12/10/2011]
ie8_main.log --a---- 109454 bytes [13:27 29/07/2009] [15:56 28/10/2011]
iereseticons.log --a---- 1390 bytes [22:57 28/10/2006] [22:57 28/10/2006]
iis6.log --a---- 395069 bytes [18:07 19/08/2004] [15:56 28/10/2011]
imsins.BAK --a---- 1393 bytes [18:07 19/08/2004] [15:03 12/10/2011]
imsins.log --a---- 1393 bytes [18:07 19/08/2004] [15:56 28/10/2011]
INSTALL.LOG ------- 352 bytes [19:46 30/01/2005] [19:46 30/01/2005]
Internet Explorer Wallpaper.bmp ------- 34870 bytes [02:28 27/08/2003] [02:28 27/08/2003]
IsUninst.exe --a---- 306688 bytes [01:49 20/08/2004] [20:45 29/10/1998]
KB2079403.log --a---- 18685 bytes [08:14 11/08/2010] [14:06 11/08/2010]
KB2121546.log --a---- 14713 bytes [16:09 19/09/2010] [16:34 19/09/2010]
KB2141007.log --a---- 12250 bytes [16:08 19/09/2010] [16:23 19/09/2010]
KB2158563.log --a---- 3731 bytes [03:00 02/10/2010] [03:00 02/10/2010]
KB2160329.log --a---- 14179 bytes [08:14 11/08/2010] [13:49 11/08/2010]
KB2183461-IE8.log --a---- 15857 bytes [13:49 11/08/2010] [13:50 11/08/2010]
KB2229593.log --a---- 7426 bytes [03:16 15/07/2010] [03:18 15/07/2010]
KB2259922.log --a---- 9717 bytes [16:36 19/09/2010] [16:36 19/09/2010]
KB2279986.log --a---- 20322 bytes [09:28 13/10/2010] [03:23 14/10/2010]
KB2286198.log --a---- 13001 bytes [14:18 10/08/2010] [14:58 10/08/2010]
KB2296011.log --a---- 12391 bytes [03:22 14/10/2010] [03:23 14/10/2010]
KB2296199.log --a---- 17382 bytes [16:37 15/12/2010] [04:24 16/12/2010]
KB2345886.log --a---- 20981 bytes [09:28 13/10/2010] [03:23 14/10/2010]
KB2347290.log --a---- 15229 bytes [16:09 19/09/2010] [16:34 19/09/2010]
KB2360131-IE8.log --a---- 16995 bytes [03:15 14/10/2010] [03:16 14/10/2010]
KB2360937.log --a---- 9074 bytes [03:01 14/10/2010] [03:03 14/10/2010]
KB2378111.log --a---- 12930 bytes [03:22 14/10/2010] [03:22 14/10/2010]
KB2387149.log --a---- 16224 bytes [03:23 14/10/2010] [03:23 14/10/2010]
KB2393802.log --a---- 10101 bytes [04:00 10/02/2011] [04:02 10/02/2011]
KB2412687.log --a---- 8432 bytes [20:12 19/04/2011] [20:13 19/04/2011]
KB2416400-IE7.log --a---- 100989 bytes [06:41 27/12/2010] [04:03 28/12/2010]
KB2416400-IE8.log --a---- 29575 bytes [04:19 16/12/2010] [04:03 29/12/2010]
KB2419632.log --a---- 20123 bytes [14:51 20/01/2011] [19:25 20/01/2011]
KB2423089.log --a---- 7189 bytes [04:01 16/12/2010] [04:02 16/12/2010]
KB2436673.log --a---- 13468 bytes [16:36 15/12/2010] [04:18 16/12/2010]
KB2440591.log --a---- 7748 bytes [04:19 16/12/2010] [04:19 16/12/2010]
KB2443105.log --a---- 16528 bytes [16:37 15/12/2010] [04:20 16/12/2010]
KB2443685.log --a---- 4093 bytes [04:19 16/12/2010] [04:19 16/12/2010]
KB2467659.log --a---- 7000 bytes [04:18 16/12/2010] [04:18 16/12/2010]
KB2476490.log --a---- 16642 bytes [11:36 15/06/2011] [03:31 16/06/2011]
KB2476687.log --a---- 13386 bytes [22:54 09/02/2011] [04:05 10/02/2011]
KB2478960.log --a---- 13016 bytes [22:53 09/02/2011] [04:02 10/02/2011]
KB2478971.log --a---- 19595 bytes [22:54 09/02/2011] [04:16 10/02/2011]
KB2479628.log --a---- 19207 bytes [22:54 09/02/2011] [04:15 10/02/2011]
KB2479943.log --a---- 12502 bytes [11:31 09/03/2011] [04:14 10/03/2011]
KB2481109.log --a---- 14048 bytes [11:30 09/03/2011] [04:04 10/03/2011]
KB2482017-IE8.log --a---- 16592 bytes [04:05 10/02/2011] [04:05 10/02/2011]
KB2483185.log --a---- 18548 bytes [22:54 09/02/2011] [04:15 10/02/2011]
KB2485376.log --a---- 19158 bytes [22:54 09/02/2011] [04:15 10/02/2011]
KB2485663.log --a---- 15270 bytes [20:19 19/04/2011] [20:19 19/04/2011]
KB2497640-IE8.log --a---- 18879 bytes [20:13 19/04/2011] [20:15 19/04/2011]
KB2503658.log --a---- 15280 bytes [14:48 19/04/2011] [20:05 19/04/2011]
KB2503665.log --a---- 11637 bytes [03:28 16/06/2011] [03:30 16/06/2011]
KB2506212.log --a---- 14788 bytes [14:46 19/04/2011] [19:59 19/04/2011]
KB2506223.log --a---- 21522 bytes [14:49 19/04/2011] [20:19 19/04/2011]
KB2507618.log --a---- 15493 bytes [14:47 19/04/2011] [20:02 19/04/2011]
KB2507938.log --a---- 13532 bytes [09:26 13/07/2011] [03:16 14/07/2011]
KB2508272.log --a---- 9818 bytes [20:05 19/04/2011] [20:05 19/04/2011]
KB2508429.log --a---- 15285 bytes [14:47 19/04/2011] [20:01 19/04/2011]
KB2509553.log --a---- 15128 bytes [14:45 19/04/2011] [19:49 19/04/2011]
KB2510531-IE8.log --a---- 8052 bytes [19:44 19/04/2011] [19:49 19/04/2011]
KB2511455.log --a---- 9685 bytes [20:01 19/04/2011] [20:01 19/04/2011]
KB2524375.log --a---- 6747 bytes [03:00 25/03/2011] [03:02 25/03/2011]
KB2530548-IE8.log --a---- 15621 bytes [03:14 16/06/2011] [03:16 16/06/2011]
KB2535512.log --a---- 11639 bytes [03:27 16/06/2011] [03:28 16/06/2011]
KB2536276-v2.log --a---- 20390 bytes [19:01 27/08/2011] [18:54 07/10/2011]
KB2536276.log --a---- 11716 bytes [03:17 16/06/2011] [03:18 16/06/2011]
KB2541763.log --a---- 12997 bytes [09:41 29/06/2011] [00:35 30/06/2011]
KB2544521-IE8.log --a---- 7442 bytes [03:01 16/06/2011] [03:04 16/06/2011]
KB2544893.log --a---- 7028 bytes [03:04 16/06/2011] [03:05 16/06/2011]
KB2555917.log --a---- 13530 bytes [09:26 13/07/2011] [03:03 14/07/2011]
KB2559049-IE8.log --a---- 15268 bytes [18:52 27/08/2011] [18:53 27/08/2011]
KB2562937.log --a---- 6856 bytes [18:50 27/08/2011] [18:52 27/08/2011]
KB2566454.log --a---- 7451 bytes [18:52 27/08/2011] [18:52 27/08/2011]
KB2567680.log --a---- 16916 bytes [14:05 27/08/2011] [19:04 27/08/2011]
KB2570222.log --a---- 11541 bytes [19:01 27/08/2011] [19:01 27/08/2011]
KB2570791.log --a---- 8535 bytes [19:10 27/08/2011] [19:11 27/08/2011]
KB2570947.log --a---- 7076 bytes [03:07 15/09/2011] [03:10 15/09/2011]
KB2607712.log --a---- 12995 bytes [14:01 08/09/2011] [14:15 08/09/2011]
KB2616676.log --a---- 13339 bytes [23:53 14/09/2011] [03:26 15/09/2011]
KB834707.log ------- 9327 bytes [00:16 26/10/2004] [00:16 26/10/2004]
KB835221.log ------- 4558 bytes [01:20 20/08/2004] [01:20 20/08/2004]
KB867282.log ------- 11867 bytes [04:39 13/02/2005] [04:39 13/02/2005]
KB873333.log ------- 12855 bytes [15:16 12/02/2005] [04:39 13/02/2005]
KB873339.log ------- 9776 bytes [13:37 17/12/2004] [13:38 17/12/2004]
KB883939.log --a---- 15499 bytes [06:06 17/06/2005] [07:00 17/06/2005]
KB885250.log ------- 15678 bytes [15:17 12/02/2005] [04:40 13/02/2005]
KB885835.log ------- 10599 bytes [13:37 17/12/2004] [13:38 17/12/2004]
KB885836.log ------- 9791 bytes [13:37 17/12/2004] [13:38 17/12/2004]
KB886185.log ------- 6106 bytes [13:38 17/12/2004] [13:38 17/12/2004]
KB887472.log ------- 15124 bytes [15:17 12/02/2005] [04:39 13/02/2005]
KB887742.log ------- 9707 bytes [13:12 26/02/2005] [16:34 26/02/2005]
KB888113.log ------- 15108 bytes [15:17 12/02/2005] [04:39 13/02/2005]
KB888302.log ------- 10097 bytes [15:16 12/02/2005] [04:39 13/02/2005]
KB890046.log --a---- 11008 bytes [06:06 17/06/2005] [07:00 17/06/2005]
KB890047.log ------- 10844 bytes [15:16 12/02/2005] [04:39 13/02/2005]
KB890175.log ------- 10180 bytes [15:34 14/01/2005] [15:59 14/01/2005]
KB890859.log --a---- 14413 bytes [14:12 17/04/2005] [14:53 17/04/2005]
KB890923.log --a---- 17307 bytes [14:13 17/04/2005] [14:53 17/04/2005]
KB891781.log ------- 15155 bytes [15:17 12/02/2005] [04:39 13/02/2005]
KB892130.log --a---- 8958 bytes [20:59 27/07/2008] [21:00 27/07/2008]
KB893066.log --a---- 27656 bytes [14:13 17/04/2005] [07:00 17/06/2005]
KB893086.log --a---- 13133 bytes [14:12 17/04/2005] [14:53 17/04/2005]
KB893756.log --a---- 17129 bytes [19:39 12/08/2005] [21:40 12/08/2005]
KB893803.log --a---- 9485 bytes [14:52 17/04/2005] [14:53 17/04/2005]
KB893803v2.log --a---- 8900 bytes [02:33 20/05/2005] [02:33 20/05/2005]
KB894391.log --a---- 12980 bytes [19:38 12/08/2005] [21:39 12/08/2005]
KB896358.log --a---- 11103 bytes [06:06 17/06/2005] [07:00 17/06/2005]
KB896422.log --a---- 14558 bytes [06:06 17/06/2005] [07:01 17/06/2005]
KB896423.log --a---- 16478 bytes [19:38 12/08/2005] [21:40 12/08/2005]
KB896424.log --a---- 11750 bytes [15:22 10/11/2005] [18:47 10/11/2005]
KB896428.log --a---- 10139 bytes [06:06 17/06/2005] [07:00 17/06/2005]
KB896688.log --a---- 13933 bytes [22:42 27/10/2005] [22:43 27/10/2005]
KB896727.log --a---- 17125 bytes [19:38 12/08/2005] [21:40 12/08/2005]
KB898461.log --a---- 6841 bytes [18:00 29/06/2005] [18:00 29/06/2005]
KB899587.log --a---- 17521 bytes [19:39 12/08/2005] [21:40 12/08/2005]
KB899588.log --a---- 13397 bytes [19:38 12/08/2005] [21:40 12/08/2005]
KB899591.log --a---- 17022 bytes [19:39 12/08/2005] [21:40 12/08/2005]
KB900485.log --a---- 11156 bytes [20:51 25/04/2006] [22:03 25/04/2006]
KB900725.log --a---- 13230 bytes [17:38 27/10/2005] [22:42 27/10/2005]
KB901017.log --a---- 21449 bytes [17:39 27/10/2005] [22:43 27/10/2005]
KB901214.log --a---- 11020 bytes [19:32 13/07/2005] [01:24 14/07/2005]
KB902400.log --a---- 23379 bytes [17:39 27/10/2005] [22:43 27/10/2005]
KB903235.log --a---- 3774 bytes [01:24 14/07/2005] [01:24 14/07/2005]
KB904706.log --a---- 11109 bytes [17:38 27/10/2005] [22:42 27/10/2005]
KB904942.log --a---- 10954 bytes [13:10 06/08/2006] [13:11 06/08/2006]
KB905414.log --a---- 13466 bytes [17:38 27/10/2005] [22:42 27/10/2005]
KB905749.log --a---- 11750 bytes [17:38 27/10/2005] [22:42 27/10/2005]
KB905915.log --a---- 15279 bytes [22:08 15/12/2005] [23:02 15/12/2005]
KB908519.log --a---- 9987 bytes [00:28 13/01/2006] [05:08 13/01/2006]
KB908531.log --a---- 24183 bytes [20:24 15/04/2006] [22:03 25/04/2006]
KB910437.log --a---- 9361 bytes [23:02 15/12/2005] [23:02 15/12/2005]
KB911280.log --a---- 14228 bytes [13:48 16/06/2006] [21:37 16/06/2006]
KB911562.log --a---- 14123 bytes [20:23 15/04/2006] [04:20 16/04/2006]
KB911564.log --a---- 8895 bytes [22:58 16/02/2006] [22:59 16/02/2006]
KB911565.log --a---- 9133 bytes [22:58 16/02/2006] [22:58 16/02/2006]
KB911567.log --a---- 10538 bytes [20:23 15/04/2006] [04:19 16/04/2006]
KB911927.log --a---- 10576 bytes [22:52 16/02/2006] [22:59 16/02/2006]
KB912812.log --a---- 16054 bytes [20:23 15/04/2006] [04:19 16/04/2006]
KB912919.log --a---- 10959 bytes [15:58 07/01/2006] [21:17 07/01/2006]
KB913446.log --a---- 6606 bytes [22:57 16/02/2006] [22:58 16/02/2006]
KB913580.log --a---- 11611 bytes [03:49 12/05/2006] [04:38 12/05/2006]
KB914388.log --a---- 12238 bytes [05:06 14/07/2006] [05:38 14/07/2006]
KB914389.log --a---- 11516 bytes [13:48 16/06/2006] [21:37 16/06/2006]
KB914440.log --a---- 8542 bytes [13:11 06/08/2006] [22:59 28/10/2006]
KB915800-v4.log --a---- 4664 bytes [16:23 29/10/2008] [16:25 29/10/2008]
KB915865.log --a---- 8755 bytes [13:11 06/08/2006] [23:00 28/10/2006]
KB916281.log --a---- 17357 bytes [13:48 16/06/2006] [21:37 16/06/2006]
KB916595.log --a---- 10375 bytes [05:06 14/07/2006] [05:38 14/07/2006]
KB917159.log --a---- 11753 bytes [05:06 14/07/2006] [05:38 14/07/2006]
KB917344.log --a---- 14492 bytes [13:48 16/06/2006] [21:37 16/06/2006]
KB917422.log --a---- 11830 bytes [14:46 12/08/2006] [14:54 12/08/2006]
KB917734.log --a---- 13066 bytes [21:38 16/06/2006] [21:38 16/06/2006]
KB917953.log --a---- 14258 bytes [13:48 16/06/2006] [21:37 16/06/2006]
KB918118.log --a---- 12566 bytes [03:40 17/02/2007] [13:15 17/02/2007]
KB918439.log --a---- 14114 bytes [13:48 16/06/2006] [21:38 16/06/2006]
KB918899.log --a---- 4700 bytes [23:00 28/10/2006] [23:01 28/10/2006]
KB919007.log --a---- 11396 bytes [13:05 15/09/2006] [13:57 15/09/2006]
KB920213.log --a---- 14303 bytes [16:58 17/11/2006] [23:08 17/11/2006]
KB920214.log --a---- 12202 bytes [14:46 12/08/2006] [14:55 12/08/2006]
KB920670.log --a---- 11672 bytes [14:46 12/08/2006] [14:54 12/08/2006]
KB920683.log --a---- 12068 bytes [14:45 12/08/2006] [14:54 12/08/2006]
KB920685.log --a---- 11237 bytes [13:05 15/09/2006] [13:57 15/09/2006]
KB920872.log --a---- 12997 bytes [13:05 15/09/2006] [13:57 15/09/2006]
KB921398.log --a---- 12584 bytes [14:46 12/08/2006] [14:54 12/08/2006]
KB921503.log --a---- 17467 bytes [18:48 14/08/2007] [19:28 20/08/2007]
KB921883.log --a---- 11044 bytes [03:46 09/08/2006] [03:47 09/08/2006]
KB922582.log --a---- 7781 bytes [13:56 15/09/2006] [13:57 15/09/2006]
KB922616.log --a---- 12197 bytes [14:46 12/08/2006] [14:55 12/08/2006]
KB922819.log --a---- 12272 bytes [13:54 14/10/2006] [06:02 15/10/2006]
KB923191.log --a---- 8728 bytes [13:48 14/10/2006] [06:01 15/10/2006]
KB923414.log --a---- 11462 bytes [13:53 14/10/2006] [06:02 15/10/2006]
KB923561.log --a---- 9577 bytes [07:00 15/04/2009] [07:02 15/04/2009]
KB923689.log --a---- 12084 bytes [20:53 15/12/2006] [20:54 15/12/2006]
KB923694.log --a---- 11665 bytes [13:59 15/12/2006] [20:53 15/12/2006]
KB923980.log --a---- 13830 bytes [16:58 17/11/2006] [23:09 17/11/2006]
KB924191.log --a---- 12468 bytes [13:54 14/10/2006] [06:02 15/10/2006]
KB924270.log --a---- 13834 bytes [16:58 17/11/2006] [23:09 17/11/2006]
KB924496.log --a---- 17237 bytes [13:50 14/10/2006] [23:01 28/10/2006]
KB924667.log --a---- 15576 bytes [03:41 17/02/2007] [13:16 17/02/2007]
KB925398.log --a---- 10751 bytes [20:54 15/12/2006] [20:54 15/12/2006]
KB925486.log --a---- 4755 bytes [23:01 28/10/2006] [23:01 28/10/2006]
KB925902.log --a---- 13096 bytes [18:00 03/04/2007] [05:28 04/04/2007]
KB926239.log --a---- 600 bytes [19:52 26/09/2008] [19:52 26/09/2008]
KB926255.log --a---- 11873 bytes [13:59 15/12/2006] [20:53 15/12/2006]
KB926436.log --a---- 17848 bytes [03:41 17/02/2007] [13:16 17/02/2007]
KB927779.log --a---- 22336 bytes [03:41 17/02/2007] [13:16 17/02/2007]
KB927802.log --a---- 19420 bytes [03:41 17/02/2007] [13:16 17/02/2007]
KB927891.log --a---- 7948 bytes [21:13 22/05/2007] [21:14 22/05/2007]
KB928090-IE7.log --a---- 11803 bytes [13:15 17/02/2007] [13:16 17/02/2007]
KB928255.log --a---- 19071 bytes [03:41 17/02/2007] [13:16 17/02/2007]
KB928843.log --a---- 11309 bytes [03:40 17/02/2007] [13:15 17/02/2007]
KB929123.log --a---- 18839 bytes [19:16 14/06/2007] [21:16 14/06/2007]
KB929338.log --a---- 12956 bytes [01:46 14/03/2007] [13:31 16/03/2007]
KB929399.log --a---- 9272 bytes [07:02 28/09/2008] [07:03 28/09/2008]
KB929969.log --a---- 4884 bytes [19:43 13/01/2007] [19:44 13/01/2007]
KB930178.log --a---- 13378 bytes [05:06 12/04/2007] [11:47 12/04/2007]
KB930916.log --a---- 11388 bytes [00:03 09/05/2007] [13:35 09/05/2007]
KB931261.log --a---- 13072 bytes [05:06 12/04/2007] [11:47 12/04/2007]
KB931768-IE7.log --a---- 18127 bytes [13:35 09/05/2007] [13:35 09/05/2007]
KB931784.log --a---- 15056 bytes [05:06 12/04/2007] [11:47 12/04/2007]
KB931836.log --a---- 28068 bytes [03:41 17/02/2007] [13:16 17/02/2007]
KB932168.log --a---- 15858 bytes [05:06 12/04/2007] [11:47 12/04/2007]
KB932823-v3.log --a---- 11333 bytes [13:07 02/06/2008] [00:50 03/06/2008]
KB933360.log --a---- 23429 bytes [01:46 29/08/2007] [16:43 31/08/2007]
KB933566-IE7.log --a---- 23119 bytes [19:15 14/06/2007] [21:14 14/06/2007]
KB933729.log --a---- 12545 bytes [05:13 10/10/2007] [05:13 10/10/2007]
KB935839.log --a---- 17819 bytes [19:15 14/06/2007] [21:15 14/06/2007]
KB935840.log --a---- 18170 bytes [19:16 14/06/2007] [21:16 14/06/2007]
KB936021.log --a---- 18130 bytes [18:49 14/08/2007] [19:29 20/08/2007]
KB936357.log --a---- 13222 bytes [12:45 11/07/2007] [19:40 11/07/2007]
KB936782.log --a---- 24763 bytes [19:28 20/08/2007] [07:02 28/09/2008]
KB937143-IE7.log --a---- 22330 bytes [18:48 14/08/2007] [19:27 20/08/2007]
KB938127-IE7.log --a---- 12327 bytes [18:48 14/08/2007] [19:26 20/08/2007]
KB938464-v2.log --a---- 5071 bytes [07:02 12/03/2009] [07:02 12/03/2009]
KB938464.log --a---- 200718 bytes [07:00 10/09/2008] [16:28 26/09/2008]
KB938828.log --a---- 17319 bytes [18:49 14/08/2007] [19:29 20/08/2007]
KB938829.log --a---- 17261 bytes [18:48 14/08/2007] [19:28 20/08/2007]
KB939653-IE7.log --a---- 22803 bytes [04:58 10/10/2007] [05:12 10/10/2007]
KB939683.log --a---- 8993 bytes [07:02 28/09/2008] [07:02 28/09/2008]
KB940157.log --a---- 26091 bytes [16:22 29/10/2008] [16:29 29/10/2008]
KB941202.log --a---- 10970 bytes [04:57 10/10/2007] [05:11 10/10/2007]
KB941568.log --a---- 11221 bytes [10:08 12/12/2007] [23:58 13/12/2007]
KB941569.log --a---- 26831 bytes [23:58 13/12/2007] [07:04 28/09/2008]
KB941644.log --a---- 11909 bytes [07:56 09/01/2008] [12:52 09/01/2008]
KB941693.log --a---- 19102 bytes [03:47 09/04/2008] [04:54 09/04/2008]
KB942615-IE7.log --a---- 22976 bytes [10:08 12/12/2007] [23:58 13/12/2007]
KB942763.log --a---- 29384 bytes [10:08 12/12/2007] [23:59 13/12/2007]
KB943055.log --a---- 12180 bytes [05:09 13/02/2008] [08:15 13/02/2008]
KB943460.log --a---- 7776 bytes [15:12 16/11/2007] [15:13 16/11/2007]
KB943485.log --a---- 12073 bytes [07:56 09/01/2008] [12:52 09/01/2008]
KB944533-IE7.log --a---- 23641 bytes [05:09 13/02/2008] [08:16 13/02/2008]
KB944653.log --a---- 11889 bytes [10:08 12/12/2007] [23:57 13/12/2007]
KB945553.log --a---- 13094 bytes [03:47 09/04/2008] [04:52 09/04/2008]
KB946026.log --a---- 17748 bytes [05:10 13/02/2008] [08:16 13/02/2008]
KB946648.log --a---- 207029 bytes [07:09 13/08/2008] [16:29 26/09/2008]
KB947864-IE7.log --a---- 19655 bytes [04:54 09/04/2008] [04:54 09/04/2008]
KB948590.log --a---- 13145 bytes [03:47 09/04/2008] [04:54 09/04/2008]
KB948881.log --a---- 14119 bytes [04:54 09/04/2008] [04:54 09/04/2008]
KB950749.log --a---- 14357 bytes [20:44 13/05/2008] [02:15 14/05/2008]
KB950759-IE7.log --a---- 17979 bytes [08:27 11/06/2008] [08:28 11/06/2008]
KB950760.log --a---- 6773 bytes [08:25 11/06/2008] [08:25 11/06/2008]
KB950762.log --a---- 197782 bytes [08:25 11/06/2008] [16:29 26/09/2008]
KB950974.log --a---- 209925 bytes [01:17 13/08/2008] [16:29 26/09/2008]
KB951066.log --a---- 197221 bytes [07:02 13/08/2008] [16:29 26/09/2008]
KB951072-v2.log --a---- 34128 bytes [01:08 13/08/2008] [16:29 26/09/2008]
KB951376-v2.log --a---- 197948 bytes [13:38 20/06/2008] [16:29 26/09/2008]
KB951376.log --a---- 197481 bytes [08:24 11/06/2008] [16:29 26/09/2008]
KB951698.log --a---- 202435 bytes [02:30 11/06/2008] [16:29 26/09/2008]
KB951748.log --a---- 208705 bytes [18:58 23/07/2008] [16:30 26/09/2008]
KB951978.log --a---- 13113 bytes [16:04 27/09/2008] [07:05 28/09/2008]
KB952004.log --a---- 17321 bytes [19:05 14/04/2009] [07:05 15/04/2009]
KB952069.log --a---- 10692 bytes [08:03 11/12/2008] [08:03 11/12/2008]
KB952287.log --a---- 203529 bytes [07:03 13/08/2008] [16:30 26/09/2008]
KB952954.log --a---- 210363 bytes [01:20 13/08/2008] [16:30 26/09/2008]
KB953838-IE7.log --a---- 19006 bytes [07:03 13/08/2008] [07:03 13/08/2008]
KB953839.log --a---- 13752 bytes [07:09 13/08/2008] [07:09 13/08/2008]
KB954154.log --a---- 4168 bytes [07:02 28/09/2008] [07:02 28/09/2008]
KB954155.log --a---- 9699 bytes [07:17 17/10/2009] [07:17 17/10/2009]
KB954211.log --a---- 7392 bytes [05:17 16/10/2008] [05:17 16/10/2008]
KB954459.log --a---- 12219 bytes [10:56 12/11/2008] [12:53 12/11/2008]
KB954600.log --a---- 7464 bytes [08:02 11/12/2008] [08:02 11/12/2008]
KB955069.log --a---- 8092 bytes [12:51 12/11/2008] [12:53 12/11/2008]
KB955759.log --a---- 9204 bytes [22:40 16/12/2009] [22:42 16/12/2009]
KB955839.log --a---- 32741 bytes [00:47 11/12/2008] [08:08 11/12/2008]
KB956390-IE7.log --a---- 23583 bytes [16:32 15/10/2008] [05:18 16/10/2008]
KB956391.log --a---- 12797 bytes [05:18 16/10/2008] [05:18 16/10/2008]
KB956572.log --a---- 18678 bytes [07:05 15/04/2009] [07:06 15/04/2009]
KB956744.log --a---- 7977 bytes [07:12 14/08/2009] [07:12 14/08/2009]
KB956802.log --a---- 12954 bytes [00:45 11/12/2008] [08:02 11/12/2008]
KB956803.log --a---- 13309 bytes [05:18 16/10/2008] [05:18 16/10/2008]
KB956841.log --a---- 8599 bytes [05:16 16/10/2008] [05:17 16/10/2008]
KB956844.log --a---- 7435 bytes [07:03 13/09/2009] [07:03 13/09/2009]
KB957095.log --a---- 13309 bytes [05:18 16/10/2008] [05:18 16/10/2008]
KB957097.log --a---- 7769 bytes [12:53 12/11/2008] [12:53 12/11/2008]
KB958215-IE7.log --a---- 19099 bytes [08:07 11/12/2008] [08:08 11/12/2008]
KB958644.log --a---- 8044 bytes [17:15 24/10/2008] [17:16 24/10/2008]
KB958687.log --a---- 7429 bytes [08:03 14/01/2009] [08:04 14/01/2009]
KB958690.log --a---- 12647 bytes [14:27 11/03/2009] [07:02 12/03/2009]
KB958869.log --a---- 8068 bytes [07:27 17/10/2009] [07:28 17/10/2009]
KB959426.log --a---- 29736 bytes [19:06 14/04/2009] [07:12 15/04/2009]
KB959772.log --a---- 4615 bytes [07:00 12/03/2009] [07:01 12/03/2009]
KB960225.log --a---- 12637 bytes [14:49 11/03/2009] [07:02 12/03/2009]
KB960714-IE7.log --a---- 8186 bytes [08:00 18/12/2008] [08:01 18/12/2008]
KB960715.log --a---- 13486 bytes [08:02 12/02/2009] [08:02 12/02/2009]
KB960803.log --a---- 13990 bytes [19:05 14/04/2009] [07:02 15/04/2009]
KB960859.log --a---- 12799 bytes [13:32 13/08/2009] [07:12 14/08/2009]
KB961118.log --a---- 5211 bytes [23:01 21/08/2009] [23:03 21/08/2009]
KB961260-IE7.log --a---- 19201 bytes [08:00 12/02/2009] [08:02 12/02/2009]
KB961371.log --a---- 12084 bytes [12:37 17/07/2009] [12:52 18/07/2009]
KB961373.log --a---- 28890 bytes [19:06 14/04/2009] [07:12 15/04/2009]
KB961501.log --a---- 24058 bytes [01:06 10/06/2009] [07:11 10/06/2009]
KB963027-IE7.log --a---- 103426 bytes [19:06 14/04/2009] [07:12 15/04/2009]
KB963093.log --a---- 21008 bytes [07:10 10/06/2009] [07:11 10/06/2009]
KB967715.log --a---- 12880 bytes [18:33 24/02/2009] [21:19 24/02/2009]
KB968389.log --a---- 19976 bytes [18:19 12/10/2009] [07:03 17/10/2009]
KB968537.log --a---- 12814 bytes [01:05 10/06/2009] [07:03 10/06/2009]
KB968816.log --a---- 6673 bytes [07:03 13/09/2009] [07:04 13/09/2009]
KB969059.log --a---- 15496 bytes [12:12 16/10/2009] [07:19 17/10/2009]
KB969897-IE7.log --a---- 97347 bytes [01:06 10/06/2009] [07:03 10/06/2009]
KB969898.log --a---- 18501 bytes [07:11 10/06/2009] [07:11 10/06/2009]
KB969947.log --a---- 12573 bytes [14:47 12/11/2009] [08:02 13/11/2009]
KB970238.log --a---- 23306 bytes [01:06 10/06/2009] [07:04 10/06/2009]
KB970430.log --a---- 20233 bytes [08:34 09/12/2009] [08:18 10/12/2009]
KB970653-v3.log --a---- 3752 bytes [15:47 26/08/2009] [15:47 26/08/2009]
KB971029.log --a---- 13059 bytes [14:18 22/03/2011] [16:10 22/03/2011]
KB971468.log --a---- 8082 bytes [04:14 11/02/2010] [04:14 11/02/2010]
KB971486.log --a---- 11613 bytes [07:07 17/10/2009] [07:08 17/10/2009]
KB971557.log --a---- 12445 bytes [13:32 13/08/2009] [07:12 14/08/2009]
KB971633.log --a---- 11790 bytes [12:37 17/07/2009] [13:00 18/07/2009]
KB971657.log --a---- 13094 bytes [13:32 13/08/2009] [07:12 14/08/2009]
KB971737.log --a---- 13150 bytes [08:33 09/12/2009] [08:11 10/12/2009]
KB971961-IE8.log --a---- 16083 bytes [07:00 13/09/2009] [04:02 29/12/2010]
KB971961.log --a---- 8798 bytes [04:00 28/12/2010] [04:02 28/12/2010]
KB972260-IE7.log --a---- 159537 bytes [10:00 29/07/2009] [13:42 29/07/2009]
KB972260-IE8.log --a---- 94598 bytes [13:39 29/07/2009] [13:40 29/07/2009]
KB972270.log --a---- 7092 bytes [15:11 13/01/2010] [15:12 13/01/2010]
KB972636-IE8.log --a---- 84592 bytes [13:38 29/07/2009] [13:39 29/07/2009]
KB973346.log --a---- 6639 bytes [13:00 18/07/2009] [13:00 18/07/2009]
KB973354.log --a---- 7219 bytes [07:09 14/08/2009] [07:09 14/08/2009]
KB973507.log --a---- 13030 bytes [13:32 13/08/2009] [07:09 14/08/2009]
KB973525.log --a---- 10040 bytes [07:06 17/10/2009] [07:07 17/10/2009]
KB973540.log --a---- 6946 bytes [07:09 14/08/2009] [07:09 14/08/2009]
KB973687.log --a---- 8245 bytes [08:00 25/11/2009] [08:02 25/11/2009]
KB973815.log --a---- 12192 bytes [13:32 13/08/2009] [07:02 14/08/2009]
KB973869.log --a---- 7624 bytes [07:11 14/08/2009] [07:12 14/08/2009]
KB973904.log --a---- 9058 bytes [08:14 10/12/2009] [08:14 10/12/2009]
KB974112.log --a---- 15494 bytes [12:12 16/10/2009] [07:17 17/10/2009]
KB974318.log --a---- 18673 bytes [08:33 09/12/2009] [08:17 10/12/2009]
KB974392.log --a---- 13227 bytes [08:33 09/12/2009] [08:11 10/12/2009]
KB974455-IE8.log --a---- 14677 bytes [07:00 22/10/2009] [07:02 22/10/2009]
KB974571.log --a---- 15971 bytes [12:11 16/10/2009] [07:16 17/10/2009]
KB975025.log --a---- 15674 bytes [12:12 16/10/2009] [07:17 17/10/2009]
KB975467.log --a---- 15890 bytes [12:11 16/10/2009] [07:03 17/10/2009]
KB975558.log --a---- 9408 bytes [16:36 19/09/2010] [16:36 19/09/2010]
KB975560.log --a---- 12963 bytes [22:08 10/02/2010] [04:06 11/02/2010]
KB975561.log --a---- 6920 bytes [04:09 11/03/2010] [04:11 11/03/2010]
KB975562.log --a---- 12083 bytes [21:46 10/06/2010] [03:29 11/06/2010]
KB975713.log --a---- 12551 bytes [22:05 10/02/2010] [04:06 11/02/2010]
KB976098-v2.log --a---- 4240 bytes [08:02 25/11/2009] [08:02 25/11/2009]
KB976325-IE8.log --a---- 15335 bytes [08:16 10/12/2009] [08:17 10/12/2009]
KB976662-IE8.log --a---- 20076 bytes [04:01 25/02/2010] [04:04 29/12/2010]
KB976749-IE8.log --a---- 8394 bytes [08:02 13/11/2009] [08:02 13/11/2009]
KB977165.log --a---- 8926 bytes [04:00 11/02/2010] [04:02 11/02/2010]
KB977816.log --a---- 12439 bytes [18:42 13/04/2010] [03:05 14/04/2010]
KB977914.log --a---- 13611 bytes [22:07 10/02/2010] [04:03 11/02/2010]
KB978037.log --a---- 12744 bytes [22:06 10/02/2010] [04:06 11/02/2010]
KB978207-IE8.log --a---- 15390 bytes [16:54 22/01/2010] [16:57 22/01/2010]
KB978251.log --a---- 7257 bytes [04:06 11/02/2010] [04:06 11/02/2010]
KB978262.log --a---- 7506 bytes [04:14 11/02/2010] [04:14 11/02/2010]
KB978338.log --a---- 12950 bytes [18:42 13/04/2010] [03:05 14/04/2010]
KB978542.log --a---- 13179 bytes [04:26 12/05/2010] [03:05 13/05/2010]
KB978601.log --a---- 13000 bytes [18:41 13/04/2010] [03:05 14/04/2010]
KB978695.log --a---- 7200 bytes [03:40 11/06/2010] [03:41 11/06/2010]
KB978706.log --a---- 11998 bytes [22:07 10/02/2010] [04:02 11/02/2010]
KB979306.log --a---- 3738 bytes [04:00 25/02/2010] [04:00 25/02/2010]
KB979309.log --a---- 12049 bytes [18:41 13/04/2010] [03:03 14/04/2010]
KB979482.log --a---- 11995 bytes [21:46 10/06/2010] [03:37 11/06/2010]
KB979559.log --a---- 17895 bytes [21:48 10/06/2010] [03:57 11/06/2010]
KB979683.log --a---- 9913 bytes [03:13 14/04/2010] [03:13 14/04/2010]
KB979687.log --a---- 19728 bytes [09:27 13/10/2010] [03:18 14/10/2010]
KB980182-IE8.log --a---- 16205 bytes [15:08 31/03/2010] [15:10 31/03/2010]
KB980195.log --a---- 11989 bytes [04:05 11/06/2010] [04:06 11/06/2010]
KB980218.log --a---- 17892 bytes [21:49 10/06/2010] [04:06 11/06/2010]
KB980232.log --a---- 8486 bytes [03:12 14/04/2010] [03:13 14/04/2010]
KB980436.log --a---- 13506 bytes [08:13 11/08/2010] [13:49 11/08/2010]
KB981322.log --a---- 13529 bytes [16:09 19/09/2010] [16:32 19/09/2010]
KB981332-IE8.log --a---- 15098 bytes [03:04 14/04/2010] [04:02 29/12/2010]
KB981349.log --a---- 21743 bytes [06:41 27/12/2010] [04:03 28/12/2010]
KB981793.log --a---- 3785 bytes [14:33 05/06/2010] [14:34 05/06/2010]
KB981852.log --a---- 15102 bytes [14:07 11/08/2010] [14:08 11/08/2010]
KB981957.log --a---- 14342 bytes [09:27 13/10/2010] [03:03 14/10/2010]
KB981997.log --a---- 7125 bytes [13:33 11/08/2010] [13:33 11/08/2010]
KB982132.log --a---- 19142 bytes [09:27 13/10/2010] [03:21 14/10/2010]
KB982214.log --a---- 13499 bytes [14:08 11/08/2010] [14:08 11/08/2010]
KB982381-IE8.log --a---- 16365 bytes [03:56 11/06/2010] [16:41 28/12/2010]
KB982665.log --a---- 11946 bytes [08:13 11/08/2010] [13:32 11/08/2010]
KB982802.log --a---- 14264 bytes [16:09 19/09/2010] [16:34 19/09/2010]
Laurel Burch Spirit Of Womankind.ss1 --a---- 1260 bytes [16:35 05/11/2010] [16:35 05/11/2010]
lexstat.ini ------- 643 bytes [14:56 24/10/1997] [14:56 24/10/1997]
Living Marine Aquarium 2 Full.scr --a---- 475136 bytes [18:42 18/07/2008] [00:06 22/02/2005]
MBR.exe --a---- 208896 bytes [16:45 11/10/2011] [17:20 07/11/2010]
Metal Links.bmp ------- 36182 bytes [03:43 13/06/2003] [03:22 24/04/1999]
mHotkey.reg ------- 3926 bytes [19:12 20/08/2004] [16:40 02/03/2004]
ModemLog_PCI SoftV92 Data Fax Modem with SmartCP.txt --a---- 2178 bytes [23:38 21/10/2005] [23:38 21/10/2005]
mozver.dat ------- 9759 bytes [13:37 06/11/2004] [16:44 26/12/2004]
MSCompPackV1.log --a---- 191511 bytes [19:51 26/09/2008] [19:52 26/09/2008]
msdfmap.ini ------- 1405 bytes [00:48 20/08/2004] [12:00 04/08/2004]
msgsocm.log --a---- 124686 bytes [18:07 19/08/2004] [15:56 28/10/2011]
msoffice.ini --a---- 2 bytes [23:39 02/12/2005] [23:39 02/12/2005]
msxml4-KB936181-enu.LOG --a---- 288852 bytes [19:26 20/08/2007] [19:26 20/08/2007]
msxml4-KB954430-enu.LOG --a---- 316480 bytes [12:51 12/11/2008] [12:51 12/11/2008]
msxml4-KB973688-enu.LOG --a---- 315866 bytes [08:00 25/11/2009] [08:00 25/11/2009]
Myscan.GID ---h--- 8628 bytes [19:46 07/11/2004] [21:02 27/07/2000]
Myscan.hlp ------- 552652 bytes [19:46 07/11/2004] [20:39 22/05/2000]
MyScan.ini ------- 27 bytes [19:46 07/11/2004] [19:49 16/10/1997]
MyScan.loc ------- 38200 bytes [19:46 07/11/2004] [17:08 19/07/2000]
NATFL015.JPG -r----- 99529 bytes [19:45 05/11/2004] [19:15 05/11/2004]
ncc1.txt --a---- 98 bytes [21:22 14/06/2005] [14:45 01/08/2005]
NeroDigital.ini --a---- 116 bytes [18:44 30/10/2004] [13:46 23/06/2011]
Netscape 7.1 Wallpaper.bmp ------- 2379510 bytes [00:47 10/10/2003] [00:47 10/10/2003]
Netscape Wallpaper.bmp ------- 235266 bytes [21:52 16/09/2001] [00:56 24/06/2003]
NEWYEARS.BMP -r----- 485784 bytes [19:45 05/11/2004] [19:15 05/11/2004]
NIRCMD.exe --a---- 60416 bytes [16:45 11/10/2011] [04:56 20/04/2009]
NLSDownlevelMapping.log --a---- 9274 bytes [23:00 28/10/2006] [23:01 28/10/2006]
notepad.exe --a---- 69120 bytes [18:07 19/08/2004] [00:12 14/04/2008]
nsreg.dat ------- 335 bytes [01:35 20/08/2004] [01:35 20/08/2004]
nsw.log --a---- 468 bytes [18:30 30/10/2004] [00:27 10/07/2005]
ntbtlog.txt --a---- 2673282 bytes [16:05 02/09/2009] [18:20 31/10/2011]
ntdtcsetup.log --a---- 491398 bytes [18:07 19/08/2004] [15:56 28/10/2011]
NWQNADHB.ocx --a---- 3120 bytes [18:26 26/06/1617] [18:26 26/06/1617]
O83PPKBG.ocx --a---- 3120 bytes [23:58 24/06/1617] [23:58 24/06/1617]
ocgen.log --a---- 1198410 bytes [18:07 19/08/2004] [15:56 28/10/2011]
ocmsn.log --a---- 133908 bytes [18:07 19/08/2004] [15:56 28/10/2011]
ODBC.INI ------- 482 bytes [14:57 08/09/2004] [20:15 26/02/2005]
ODBCINST.INI --a---- 4161 bytes [18:07 19/08/2004] [18:03 08/01/2006]
OEWABLog.txt --a---- 2213 bytes [01:13 20/08/2004] [15:58 27/09/2008]
OPENEX.HLP --a---- 233859 bytes [16:25 17/12/2005] [20:33 21/04/2006]
patchw32.A218.dll -ra---- 215144 bytes [22:16 27/02/2009] [19:43 11/12/2008]
patchw32.dll -ra---- 205312 bytes [17:51 27/10/2005] [14:52 22/11/2004]
pcdlib32.dll ------- 212480 bytes [21:41 29/01/2005] [14:46 26/05/1999]
PEV.exe --a---- 256000 bytes [16:45 11/10/2011] [06:45 26/06/2011]
PIC.dll ------- 532544 bytes [19:12 20/08/2004] [02:19 27/05/2003]
Pinstripe.bmp ------- 578 bytes [03:43 13/06/2003] [03:22 24/04/1999]
Plus!.bmp ------- 481141 bytes [23:02 30/09/2000] [13:49 03/11/2000]
PowerReg.dat ------- 822 bytes [15:22 07/11/2004] [15:27 07/11/2004]
Prairie Wind.bmp ------- 65954 bytes [01:11 20/08/2004] [12:00 04/08/2004]
pw32a.dll -ra---- 205312 bytes [17:51 27/10/2005] [14:52 22/11/2004]
pw32a0.dll -ra---- 215144 bytes [22:12 27/02/2009] [19:43 11/12/2008]
Q321064.log ------- 278 bytes [22:18 20/11/2004] [22:18 20/11/2004]
QTFont.for --a---- 1409 bytes [23:41 27/06/2009] [23:41 27/06/2009]
QTFont.qfn --ah--- 54156 bytes [23:41 27/06/2009] [23:41 27/06/2009]
Red Blocks.bmp ------- 2754 bytes [03:43 13/06/2003] [03:22 24/04/1999]
regedit.exe ------- 146432 bytes [00:48 20/08/2004] [00:12 14/04/2008]
REGLOCS.OLD ------- 8192 bytes [01:43 20/08/2004] [20:49 05/11/2004]
regopt.log ------- 2298 bytes [18:07 19/08/2004] [00:11 26/10/2004]
Rhododendron.bmp ------- 17362 bytes [01:11 20/08/2004] [12:00 04/08/2004]
River Sumida.bmp ------- 26680 bytes [01:11 20/08/2004] [12:00 04/08/2004]
RMTEMP~.EXE --a---- 736 bytes [22:26 15/12/2005] [23:06 10/05/2006]
RTLCPL.EXE ------- 8779776 bytes [01:19 20/08/2004] [00:38 06/07/2004]
Sandstone.bmp ------- 32854 bytes [03:43 13/06/2003] [03:22 24/04/1999]
Santa Fe Stucco.bmp ------- 65832 bytes [01:11 20/08/2004] [12:00 04/08/2004]
SchedLgU.Txt --a---- 32540 bytes [01:16 20/08/2004] [14:39 12/10/2011]
Screen Scapes Laurel Burch Spirit Of Womankind Module.inx --a---- 1610 bytes [16:35 05/11/2010] [16:35 05/11/2010]
Screen Scapes Modules.dat --a---- 1264 bytes [16:36 05/11/2010] [18:25 08/12/2010]
Screen Scapes Task.exe --a---- 55808 bytes [16:35 05/11/2010] [16:35 05/11/2010]
Screen Scapes UnInstall.exe --a---- 58880 bytes [16:35 05/11/2010] [16:35 05/11/2010]
Screen Scapes.chm --a---- 331511 bytes [16:35 05/11/2010] [16:35 05/11/2010]
Screen Scapes.dat --a---- 1297 bytes [16:36 05/11/2010] [18:25 08/12/2010]
Screen Scapes.exe --a---- 378368 bytes [16:35 05/11/2010] [16:35 05/11/2010]
Screen Scapes.htm --a---- 49999 bytes [16:35 05/11/2010] [16:35 05/11/2010]
Screen Scapes.inx --a---- 1712 bytes [16:35 05/11/2010] [16:35 05/11/2010]
Screen Scapes.scr --a---- 378368 bytes [16:35 05/11/2010] [16:35 05/11/2010]
Screen Scapes.txt --a---- 40370 bytes [16:35 05/11/2010] [16:35 05/11/2010]
Screen Scapes.upg --a---- 222 bytes [16:35 05/11/2010] [17:08 30/11/2010]
sed.exe --a---- 98816 bytes [16:45 11/10/2011] [00:00 31/08/2000]
sessmgr.setup.log --a---- 5398 bytes [01:12 20/08/2004] [16:20 26/09/2008]
Setup.bmp ------- 308280 bytes [16:02 09/07/1998] [03:22 24/04/1999]
setupact.log --a---- 227308 bytes [18:07 19/08/2004] [14:12 20/06/2011]
setupapi.log --a---- 370917 bytes [07:11 10/06/2009] [15:56 28/10/2011]
setupapi.log.0.old --a---- 1027779 bytes [18:07 19/08/2004] [23:05 19/05/2005]
setupapi.log.1.old --a---- 1033801 bytes [18:07 19/08/2004] [07:11 10/06/2009]
setuperr.log ------- 0 bytes [18:07 19/08/2004] [18:07 19/08/2004]
setuplog.txt --a---- 1052988 bytes [18:07 19/08/2004] [15:56 27/09/2008]
ShowWnd.exe ------- 36864 bytes [19:12 20/08/2004] [16:09 19/09/2003]
SIGVERIF.TXT ------- 678994 bytes [02:19 20/08/2004] [02:19 20/08/2004]
SlantAdj.dll --a---- 96768 bytes [16:25 31/07/2005] [15:31 15/06/1999]
slrundll.exe ------- 32866 bytes [22:04 18/08/2008] [00:12 14/04/2008]
smscfg.ini ------- 61 bytes [20:24 20/08/2004] [20:24 20/08/2004]
Soap Bubbles.bmp ------- 65978 bytes [01:11 20/08/2004] [12:00 04/08/2004]
spupdsvc.log --a---- 121420 bytes [14:29 18/02/2006] [15:07 01/11/2011]
spupdsvc.log.1.log --a---- 187 bytes [15:56 27/09/2008] [15:56 27/09/2008]
SSDEF32.INI ------- 2292 bytes [19:46 07/11/2004] [14:09 07/10/2000]
SSDS32.INI ------- 2552 bytes [19:46 07/11/2004] [16:25 20/07/1998]
SSUDMSG.LOC ------- 1557 bytes [19:46 07/11/2004] [15:28 08/08/2000]
Stitches.bmp ------- 4678 bytes [03:43 13/06/2003] [03:22 24/04/1999]
Sti_Trace.log ------- 0 bytes [18:10 19/08/2004] [18:10 19/08/2004]
Straw Mat.bmp ------- 590 bytes [03:43 13/06/2003] [03:22 24/04/1999]
ST_PATS.BMP ------- 485784 bytes [21:14 06/07/2000] [21:15 21/03/1996]
SuperBlank.INI --a---- 242 bytes [23:09 14/05/2005] [20:27 20/01/2011]
svcpack.log --a---- 538944 bytes [21:28 12/11/2004] [16:30 26/09/2008]
SWREG.exe --a---- 518144 bytes [16:45 11/10/2011] [00:00 31/08/2000]
SWSC.exe --a---- 406528 bytes [16:45 11/10/2011] [00:00 31/08/2000]
SWXCACLS.exe --a---- 212480 bytes [16:45 11/10/2011] [00:00 31/08/2000]
system.ini --a---- 227 bytes [00:49 20/08/2004] [21:32 11/10/2011]
TASKMAN.EXE --a---- 15360 bytes [18:07 19/08/2004] [12:00 04/08/2004]
Thumbs.db --ahs-- 8704 bytes [00:55 08/05/2005] [00:55 08/05/2005]
Tiles.bmp ------- 578 bytes [03:43 13/06/2003] [03:22 24/04/1999]
tppaldr.exe ------- 118784 bytes [17:43 10/11/2004] [16:54 05/10/2001]
tppnttry.exe ------- 212992 bytes [17:43 10/11/2004] [16:54 05/10/2001]
Triangles.bmp ------- 198 bytes [03:43 13/06/2003] [03:22 24/04/1999]
tsoc.log --a---- 959455 bytes [18:07 19/08/2004] [15:56 28/10/2011]
twain.dll --a---- 94784 bytes [00:49 20/08/2004] [12:00 04/08/2004]
twain_32.dll --a---- 50688 bytes [00:49 20/08/2004] [00:12 14/04/2008]
twunk_16.exe --a---- 49680 bytes [00:49 20/08/2004] [12:00 04/08/2004]
twunk_32.exe --a---- 25600 bytes [00:49 20/08/2004] [12:00 04/08/2004]
uninst.exe ------- 299520 bytes [21:36 12/11/2004] [14:12 23/03/1999]
UnInstallX.exe --a---- 58880 bytes [16:35 05/11/2010] [16:35 05/11/2010]
unvise32.exe --a---- 90112 bytes [22:18 20/11/2004] [20:23 29/03/2004]
updspapi.log --a---- 542955 bytes [14:53 17/04/2005] [15:56 28/10/2011]
vb.ini ------- 36 bytes [01:12 20/08/2004] [01:12 20/08/2004]
vbaddin.ini ------- 37 bytes [01:12 20/08/2004] [01:12 20/08/2004]
vmmreg32.dll --a---- 18944 bytes [00:49 20/08/2004] [12:00 04/08/2004]
VO63QJ2E.ocx --a---- 3120 bytes [12:55 28/06/1617] [12:55 28/06/1617]
Waves.bmp ------- 190 bytes [03:43 13/06/2003] [03:22 24/04/1999]
WgaNotify.log --a---- 20390 bytes [11:53 07/07/2006] [11:45 23/03/2007]
wiadebug.log --a---- 159 bytes [18:10 19/08/2004] [15:02 01/11/2011]
wiaservc.log --a---- 49 bytes [18:10 19/08/2004] [14:59 01/11/2011]
win.ini --a---- 873 bytes [00:49 20/08/2004] [15:54 11/10/2011]
Winamp.ini --a---- 58 bytes [16:05 02/01/2005] [13:45 15/04/2010]
WindowsShell.Manifest -r-h--- 749 bytes [01:13 20/08/2004] [01:13 20/08/2004]
WindowsUpdate.log --a---- 1588861 bytes [01:12 20/08/2004] [15:07 01/11/2011]
winhelp.exe --a---- 256192 bytes [00:49 20/08/2004] [12:00 04/08/2004]
winhlp32.exe --a---- 283648 bytes [00:49 20/08/2004] [00:12 14/04/2008]
WINLOGO.GIF ------- 1813 bytes [03:40 13/06/2003] [03:22 24/04/1999]
winnt.bmp ---hs-- 48680 bytes [01:12 20/08/2004] [12:00 04/08/2004]
winnt256.bmp ---hs-- 48680 bytes [01:12 20/08/2004] [12:00 04/08/2004]
WMFDist11.log --a---- 217468 bytes [19:47 26/09/2008] [19:49 26/09/2008]
wmp11.log --a---- 206291 bytes [19:49 26/09/2008] [19:51 26/09/2008]
wmsetup.log --a---- 198465 bytes [01:11 20/08/2004] [15:08 29/12/2010]
wmsetup10.log --a---- 4234 bytes [19:50 26/09/2008] [15:58 27/09/2008]
WMSysPr8.prx --a---- 156910 bytes [18:08 27/11/2006] [00:36 28/02/2007]
WMSysPr9.prx --a---- 316640 bytes [01:13 20/08/2004] [00:36 28/02/2007]
wtrade.jpg ------- 13667 bytes [21:49 16/09/2001] [21:46 16/09/2001]
Wudf01000Inst.log --a---- 200123 bytes [19:44 26/09/2008] [19:47 26/09/2008]
XMAS1.BMP -r----- 485784 bytes [19:45 05/11/2004] [19:15 05/11/2004]
XMAS2.BMP -r----- 485784 bytes [19:45 05/11/2004] [19:15 05/11/2004]
Zapotec.bmp ------- 9522 bytes [01:11 20/08/2004] [12:00 04/08/2004]
zHotkey.exe ------- 543232 bytes [19:12 20/08/2004] [01:30 18/05/2004]
zip.exe --a---- 68096 bytes [16:45 11/10/2011] [00:00 31/08/2000]
_default.pif ------- 707 bytes [00:48 20/08/2004] [12:00 04/08/2004]
~GLC0000.TMP --a---- 140288 bytes [13:28 15/06/2005] [13:28 15/06/2005]
~GLC0001.TMP --a---- 138032 bytes [22:30 15/12/2005] [22:32 15/12/2005]
~GLC0002.TMP --a---- 138032 bytes [16:30 17/12/2005] [16:30 17/12/2005]
~GLH0000.TMP --a---- 27136 bytes [13:28 15/06/2005] [13:28 15/06/2005]
~GLH0001.TMP --a---- 5607 bytes [22:30 15/12/2005] [22:32 15/12/2005]
~GLH0002.TMP --a---- 5607 bytes [16:30 17/12/2005] [16:30 17/12/2005]

---Folders---
$hf_mig$ d--h--- [00:16 26/10/2004]
$MSI31Uninstall_KB893803$ d--h-c- [14:53 17/04/2005]
$MSI31Uninstall_KB893803v2$ d--h-c- [02:33 20/05/2005]
$NtServicePackUninstall$ d--h-c- [16:05 26/09/2008]
$NtServicePackUninstallIDNMitigationAPIs$ d--h-c- [23:01 28/10/2006]
$NtServicePackUninstallNLSDownlevelMapping$ d--h-c- [23:00 28/10/2006]
$NtUninstallKB11374$ d----c- [18:03 19/08/2004]
$NtUninstallKB2079403$ d--h-c- [14:06 11/08/2010]
$NtUninstallKB2121546$ d--h-c- [16:34 19/09/2010]
$NtUninstallKB2141007$ d--h-c- [16:23 19/09/2010]
$NtUninstallKB2158563$ d--h-c- [03:00 02/10/2010]
$NtUninstallKB2160329$ d--h-c- [13:49 11/08/2010]
$NtUninstallKB2229593$ d--h-c- [03:17 15/07/2010]
$NtUninstallKB2259922$ d--h-c- [16:36 19/09/2010]
$NtUninstallKB2279986$ d--h-c- [03:23 14/10/2010]
$NtUninstallKB2286198$ d--h-c- [14:57 10/08/2010]
$NtUninstallKB2296011$ d--h-c- [03:22 14/10/2010]
$NtUninstallKB2296199$ d--h-c- [04:23 16/12/2010]
$NtUninstallKB2345886$ d--h-c- [03:23 14/10/2010]
$NtUninstallKB2347290$ d--h-c- [16:34 19/09/2010]
$NtUninstallKB2360937$ d--h-c- [03:02 14/10/2010]
$NtUninstallKB2378111_WM9$ d--h-c- [03:22 14/10/2010]
$NtUninstallKB2387149$ d--h-c- [03:23 14/10/2010]
$NtUninstallKB2393802$ d--h-c- [04:02 10/02/2011]
$NtUninstallKB2412687$ d--h-c- [20:13 19/04/2011]
$NtUninstallKB2419632$ d--h-c- [19:24 20/01/2011]
$NtUninstallKB2423089$ d--h-c- [04:02 16/12/2010]
$NtUninstallKB2436673$ d--h-c- [04:18 16/12/2010]
$NtUninstallKB2440591$ d--h-c- [04:19 16/12/2010]
$NtUninstallKB2443105$ d--h-c- [04:20 16/12/2010]
$NtUninstallKB2443685$ d--h-c- [04:19 16/12/2010]
$NtUninstallKB2467659$ d--h-c- [04:18 16/12/2010]
$NtUninstallKB2476490$ d--h-c- [03:31 16/06/2011]
$NtUninstallKB2476687$ d--h-c- [04:04 10/02/2011]
$NtUninstallKB2478960$ d--h-c- [04:02 10/02/2011]
$NtUninstallKB2478971$ d--h-c- [04:16 10/02/2011]
$NtUninstallKB2479628$ d--h-c- [04:15 10/02/2011]
$NtUninstallKB2479943$ d--h-c- [04:13 10/03/2011]
$NtUninstallKB2481109$ d--h-c- [04:04 10/03/2011]
$NtUninstallKB2483185$ d--h-c- [04:15 10/02/2011]
$NtUninstallKB2485376$ d--h-c- [04:15 10/02/2011]
$NtUninstallKB2485663$ d--h-c- [20:19 19/04/2011]
$NtUninstallKB2503658$ d--h-c- [20:04 19/04/2011]
$NtUninstallKB2503665$ d--h-c- [03:29 16/06/2011]
$NtUninstallKB2506212$ d--h-c- [19:59 19/04/2011]
$NtUninstallKB2506223$ d--h-c- [20:18 19/04/2011]
$NtUninstallKB2507618$ d--h-c- [20:02 19/04/2011]
$NtUninstallKB2507938$ d--h-c- [03:16 14/07/2011]
$NtUninstallKB2508272$ d--h-c- [20:05 19/04/2011]
$NtUninstallKB2508429$ d--h-c- [20:01 19/04/2011]
$NtUninstallKB2509553$ d--h-c- [19:49 19/04/2011]
$NtUninstallKB2511455$ d--h-c- [20:01 19/04/2011]
$NtUninstallKB2524375$ d--h-c- [03:02 25/03/2011]
$NtUninstallKB2535512$ d--h-c- [03:27 16/06/2011]
$NtUninstallKB2536276$ d--h-c- [03:18 16/06/2011]
$NtUninstallKB2536276-v2$ d--h-c- [19:02 27/08/2011]
$NtUninstallKB2541763$ d--h-c- [00:34 30/06/2011]
$NtUninstallKB2544893$ d--h-c- [03:05 16/06/2011]
$NtUninstallKB2555917$ d--h-c- [03:03 14/07/2011]
$NtUninstallKB2562937$ d--h-c- [18:52 27/08/2011]
$NtUninstallKB2566454$ d--h-c- [18:52 27/08/2011]
$NtUninstallKB2567680$ d--h-c- [19:04 27/08/2011]
$NtUninstallKB2570222$ d--h-c- [19:01 27/08/2011]
$NtUninstallKB2570791$ d--h-c- [19:10 27/08/2011]
$NtUninstallKB2570947$ d--h-c- [03:09 15/09/2011]
$NtUninstallKB2607712$ d--h-c- [14:15 08/09/2011]
$NtUninstallKB2616676$ d--h-c- [03:26 15/09/2011]
$NtUninstallKB834707$ d--h-c- [00:16 26/10/2004]
$NtUninstallKB835221WXP$ d--h-c- [01:20 20/08/2004]
$NtUninstallKB867282$ d--h-c- [04:39 13/02/2005]
$NtUninstallKB873333$ d--h-c- [04:39 13/02/2005]
$NtUninstallKB873339$ d--h-c- [13:38 17/12/2004]
$NtUninstallKB883939$ d--h-c- [07:00 17/06/2005]
$NtUninstallKB885250$ d--h-c- [04:39 13/02/2005]
$NtUninstallKB885835$ d--h-c- [13:38 17/12/2004]
$NtUninstallKB885836$ d--h-c- [13:38 17/12/2004]
$NtUninstallKB886185$ d--h-c- [13:38 17/12/2004]
$NtUninstallKB887472$ d--h-c- [04:39 13/02/2005]
$NtUninstallKB887742$ d--h-c- [16:34 26/02/2005]
$NtUninstallKB888113$ d--h-c- [04:39 13/02/2005]
$NtUninstallKB888302$ d--h-c- [04:39 13/02/2005]
$NtUninstallKB890046$ d--h-c- [07:00 17/06/2005]
$NtUninstallKB890047$ d--h-c- [04:39 13/02/2005]
$NtUninstallKB890175$ d--h-c- [15:59 14/01/2005]
$NtUninstallKB890859$ d--h-c- [14:53 17/04/2005]
$NtUninstallKB890923$ d--h-c- [14:53 17/04/2005]
$NtUninstallKB891781$ d--h-c- [04:39 13/02/2005]
$NtUninstallKB893066$ d--h-c- [14:54 17/04/2005]
$NtUninstallKB893086$ d--h-c- [14:53 17/04/2005]
$NtUninstallKB893756$ d--h-c- [21:40 12/08/2005]
$NtUninstallKB894391$ d--h-c- [21:39 12/08/2005]
$NtUninstallKB896358$ d--h-c- [07:00 17/06/2005]
$NtUninstallKB896422$ d--h-c- [07:01 17/06/2005]
$NtUninstallKB896423$ d--h-c- [21:40 12/08/2005]
$NtUninstallKB896424$ d--h-c- [18:47 10/11/2005]
$NtUninstallKB896428$ d--h-c- [07:00 17/06/2005]
$NtUninstallKB896688$ d--h-c- [22:42 27/10/2005]
$NtUninstallKB896727$ d--h-c- [21:40 12/08/2005]
$NtUninstallKB898461$ d--h-c- [18:00 29/06/2005]
$NtUninstallKB899587$ d--h-c- [21:40 12/08/2005]
$NtUninstallKB899588$ d--h-c- [21:40 12/08/2005]
$NtUninstallKB899591$ d--h-c- [21:40 12/08/2005]
$NtUninstallKB900485$ d--h-c- [22:03 25/04/2006]
$NtUninstallKB900725$ d--h-c- [22:42 27/10/2005]
$NtUninstallKB901017$ d--h-c- [22:43 27/10/2005]
$NtUninstallKB901214$ d--h-c- [01:24 14/07/2005]
$NtUninstallKB902400$ d--h-c- [22:43 27/10/2005]
$NtUninstallKB903235$ d--h-c- [01:24 14/07/2005]
$NtUninstallKB904706$ d--h-c- [22:42 27/10/2005]
$NtUninstallKB904942$ d--h-c- [13:11 06/08/2006]
$NtUninstallKB905414$ d--h-c- [22:42 27/10/2005]
$NtUninstallKB905749$ d--h-c- [22:42 27/10/2005]
$NtUninstallKB905915$ d--h-c- [23:02 15/12/2005]
$NtUninstallKB908519$ d--h-c- [05:08 13/01/2006]
$NtUninstallKB908531$ d--h-c- [04:20 16/04/2006]
$NtUninstallKB910437$ d--h-c- [23:02 15/12/2005]
$NtUninstallKB911280$ d--h-c- [21:37 16/06/2006]
$NtUninstallKB911562$ d--h-c- [04:19 16/04/2006]
$NtUninstallKB911564$ d--h-c- [22:59 16/02/2006]
$NtUninstallKB911565$ d--h-c- [22:58 16/02/2006]
$NtUninstallKB911567$ d--h-c- [04:19 16/04/2006]
$NtUninstallKB911927$ d--h-c- [22:59 16/02/2006]
$NtUninstallKB912812$ d--h-c- [04:19 16/04/2006]
$NtUninstallKB912919$ d--h-c- [21:17 07/01/2006]
$NtUninstallKB913446$ d--h-c- [22:57 16/02/2006]
$NtUninstallKB913580$ d--h-c- [04:38 12/05/2006]
$NtUninstallKB914388$ d--h-c- [05:38 14/07/2006]
$NtUninstallKB914389$ d--h-c- [21:37 16/06/2006]
$NtUninstallKB914440$ d--h-c- [13:11 06/08/2006]
$NtUninstallKB915800-v4$ d--h-c- [16:24 29/10/2008]
$NtUninstallKB915865$ d--h-c- [13:11 06/08/2006]
$NtUninstallKB916281$ d--h-c- [21:37 16/06/2006]
$NtUninstallKB916595$ d--h-c- [05:38 14/07/2006]
$NtUninstallKB917159$ d--h-c- [05:38 14/07/2006]
$NtUninstallKB917344$ d--h-c- [21:37 16/06/2006]
$NtUninstallKB917422$ d--h-c- [14:54 12/08/2006]
$NtUninstallKB917734_WMP9$ d--h-c- [21:38 16/06/2006]
$NtUninstallKB917953$ d--h-c- [21:37 16/06/2006]
$NtUninstallKB918118$ d--h-c- [13:15 17/02/2007]
$NtUninstallKB918439$ d--h-c- [21:38 16/06/2006]
$NtUninstallKB919007$ d--h-c- [13:57 15/09/2006]
$NtUninstallKB920213$ d--h-c- [23:08 17/11/2006]
$NtUninstallKB920214$ d--h-c- [14:55 12/08/2006]
$NtUninstallKB920670$ d--h-c- [14:54 12/08/2006]
$NtUninstallKB920683$ d--h-c- [14:54 12/08/2006]
$NtUninstallKB920685$ d--h-c- [13:57 15/09/2006]
$NtUninstallKB920872$ d--h-c- [13:57 15/09/2006]
$NtUninstallKB921398$ d--h-c- [14:54 12/08/2006]
$NtUninstallKB921503$ d--h-c- [19:28 20/08/2007]
$NtUninstallKB921883$ d--h-c- [03:47 09/08/2006]
$NtUninstallKB922582$ d--h-c- [13:56 15/09/2006]
$NtUninstallKB922616$ d--h-c- [14:55 12/08/2006]
$NtUninstallKB922819$ d--h-c- [06:02 15/10/2006]
$NtUninstallKB923191$ d--h-c- [06:01 15/10/2006]
$NtUninstallKB923414$ d--h-c- [06:02 15/10/2006]
$NtUninstallKB923561$ d--h-c- [07:01 15/04/2009]
$NtUninstallKB923689$ d--h-c- [20:54 15/12/2006]
$NtUninstallKB923694$ d--h-c- [20:53 15/12/2006]
$NtUninstallKB923980$ d--h-c- [23:09 17/11/2006]
$NtUninstallKB924191$ d--h-c- [06:02 15/10/2006]
$NtUninstallKB924270$ d--h-c- [23:09 17/11/2006]
$NtUninstallKB924496$ d--h-c- [06:01 15/10/2006]
$NtUninstallKB924667$ d--h-c- [13:16 17/02/2007]
$NtUninstallKB925398_WMP64$ d--h-c- [20:54 15/12/2006]
$NtUninstallKB925902$ d--h-c- [05:28 04/04/2007]
$NtUninstallKB926255$ d--h-c- [20:53 15/12/2006]
$NtUninstallKB926436$ d--h-c- [13:16 17/02/2007]
$NtUninstallKB927779$ d--h-c- [13:16 17/02/2007]
$NtUninstallKB927802$ d--h-c- [13:16 17/02/2007]
$NtUninstallKB927891$ d--h-c- [21:14 22/05/2007]
$NtUninstallKB928255$ d--h-c- [13:16 17/02/2007]
$NtUninstallKB928843$ d--h-c- [13:14 17/02/2007]
$NtUninstallKB929123$ d--h-c- [21:16 14/06/2007]
$NtUninstallKB929338$ d--h-c- [13:30 16/03/2007]
$NtUninstallKB929399$ d--h-c- [07:03 28/09/2008]
$NtUninstallKB930178$ d--h-c- [11:47 12/04/2007]
$NtUninstallKB930916$ d--h-c- [13:35 09/05/2007]
$NtUninstallKB931261$ d--h-c- [11:47 12/04/2007]
$NtUninstallKB931784$ d--h-c- [11:47 12/04/2007]
$NtUninstallKB931836$ d--h-c- [13:16 17/02/2007]
$NtUninstallKB932168$ d--h-c- [11:46 12/04/2007]
$NtUninstallKB932823-v3$ d--h-c- [00:50 03/06/2008]
$NtUninstallKB933360$ d--h-c- [16:43 31/08/2007]
$NtUninstallKB933729$ d--h-c- [05:13 10/10/2007]
$NtUninstallKB935839$ d--h-c- [21:15 14/06/2007]
$NtUninstallKB935840$ d--h-c- [21:16 14/06/2007]
$NtUninstallKB936021$ d--h-c- [19:29 20/08/2007]
$NtUninstallKB936357$ d--h-c- [19:40 11/07/2007]
$NtUninstallKB936782_WMP11$ d--h-c- [07:01 28/09/2008]
$NtUninstallKB936782_WMP9$ d--h-c- [19:29 20/08/2007]
$NtUninstallKB938464$ d--h-c- [16:27 26/09/2008]
$NtUninstallKB938464-v2$ d--h-c- [07:02 12/03/2009]
$NtUninstallKB938464_0$ d--h-c- [07:01 10/09/2008]
$NtUninstallKB938828$ d--h-c- [19:29 20/08/2007]
$NtUninstallKB938829$ d--h-c- [19:28 20/08/2007]
$NtUninstallKB939683$ d--h-c- [07:02 28/09/2008]
$NtUninstallKB940157$ d--h-c- [16:26 29/10/2008]
$NtUninstallKB941202$ d--h-c- [05:11 10/10/2007]
$NtUninstallKB941568$ d--h-c- [23:57 13/12/2007]
$NtUninstallKB941569$ d--h-c- [23:59 13/12/2007]
$NtUninstallKB941644$ d--h-c- [12:52 09/01/2008]
$NtUninstallKB941693$ d--h-c- [04:54 09/04/2008]
$NtUninstallKB942763$ d--h-c- [23:59 13/12/2007]
$NtUninstallKB943055$ d--h-c- [08:15 13/02/2008]
$NtUninstallKB943460$ d--h-c- [15:13 16/11/2007]
$NtUninstallKB943485$ d--h-c- [12:52 09/01/2008]
$NtUninstallKB944653$ d--h-c- [23:57 13/12/2007]
$NtUninstallKB945553$ d--h-c- [04:52 09/04/2008]
$NtUninstallKB946026$ d--h-c- [08:16 13/02/2008]
$NtUninstallKB946648$ d--h-c- [16:29 26/09/2008]
$NtUninstallKB946648_0$ d--h-c- [07:09 13/08/2008]
$NtUninstallKB948590$ d--h-c- [04:54 09/04/2008]
$NtUninstallKB948881$ d--h-c- [04:54 09/04/2008]
$NtUninstallKB950749$ d--h-c- [02:14 14/05/2008]
$NtUninstallKB950760$ d--h-c- [08:25 11/06/2008]
$NtUninstallKB950762$ d--h-c- [16:29 26/09/2008]
$NtUninstallKB950762_0$ d--h-c- [08:25 11/06/2008]
$NtUninstallKB950974$ d--h-c- [16:29 26/09/2008]
$NtUninstallKB950974_0$ d--h-c- [07:08 13/08/2008]
$NtUninstallKB951066$ d--h-c- [16:29 26/09/2008]
$NtUninstallKB951066_0$ d--h-c- [07:03 13/08/2008]
$NtUninstallKB951072-v2$ d--h-c- [07:04 13/08/2008]
$NtUninstallKB951376$ d--h-c- [16:29 26/09/2008]
$NtUninstallKB951376-v2$ d--h-c- [16:29 26/09/2008]
$NtUninstallKB951376-v2_0$ d--h-c- [13:39 20/06/2008]
$NtUninstallKB951376_0$ d--h-c- [08:25 11/06/2008]
$NtUninstallKB951698$ d--h-c- [16:29 26/09/2008]
$NtUninstallKB951698_0$ d--h-c- [08:25 11/06/2008]
$NtUninstallKB951748$ d--h-c- [16:30 26/09/2008]
$NtUninstallKB951748_0$ d--h-c- [07:00 24/07/2008]
$NtUninstallKB951978$ d--h-c- [07:05 28/09/2008]
$NtUninstallKB952004$ d--h-c- [07:05 15/04/2009]
$NtUninstallKB952069_WM9$ d--h-c- [08:03 11/12/2008]
$NtUninstallKB952287$ d--h-c- [16:30 26/09/2008]
$NtUninstallKB952287_0$ d--h-c- [07:04 13/08/2008]
$NtUninstallKB952954$ d--h-c- [16:30 26/09/2008]
$NtUninstallKB952954_0$ d--h-c- [07:10 13/08/2008]
$NtUninstallKB953839$ d--h-c- [07:09 13/08/2008]
$NtUninstallKB954154_WM11$ d--h-c- [07:02 28/09/2008]
$NtUninstallKB954155_WM9$ d--h-c- [07:17 17/10/2009]
$NtUninstallKB954211$ d--h-c- [05:17 16/10/2008]
$NtUninstallKB954459$ d--h-c- [12:53 12/11/2008]
$NtUninstallKB954600$ d--h-c- [08:02 11/12/2008]
$NtUninstallKB955069$ d--h-c- [12:53 12/11/2008]
$NtUninstallKB955759$ d--h-c- [22:42 16/12/2009]
$NtUninstallKB955839$ d--h-c- [08:08 11/12/2008]
$NtUninstallKB956391$ d--h-c- [05:18 16/10/2008]
$NtUninstallKB956572$ d--h-c- [07:06 15/04/2009]
$NtUninstallKB956744$ d--h-c- [07:12 14/08/2009]
$NtUninstallKB956802$ d--h-c- [08:02 11/12/2008]
$NtUninstallKB956803$ d--h-c- [05:18 16/10/2008]
$NtUninstallKB956841$ d--h-c- [05:17 16/10/2008]
$NtUninstallKB956844$ d--h-c- [07:03 13/09/2009]
$NtUninstallKB957095$ d--h-c- [05:18 16/10/2008]
$NtUninstallKB957097$ d--h-c- [12:53 12/11/2008]
$NtUninstallKB958644$ d--h-c- [17:16 24/10/2008]
$NtUninstallKB958687$ d--h-c- [08:04 14/01/2009]
$NtUninstallKB958690$ d--h-c- [07:01 12/03/2009]
$NtUninstallKB958869$ d--h-c- [07:27 17/10/2009]
$NtUninstallKB959426$ d--h-c- [07:12 15/04/2009]
$NtUninstallKB959772_WM11$ d--h-c- [07:00 12/03/2009]
$NtUninstallKB960225$ d--h-c- [07:02 12/03/2009]
$NtUninstallKB960715$ d--h-c- [08:02 12/02/2009]
$NtUninstallKB960803$ d--h-c- [07:02 15/04/2009]
$NtUninstallKB960859$ d--h-c- [07:12 14/08/2009]
$NtUninstallKB961118$ d--h-c- [23:02 21/08/2009]
$NtUninstallKB961371$ d--h-c- [12:52 18/07/2009]
$NtUninstallKB961373$ d--h-c- [07:12 15/04/2009]
$NtUninstallKB961501$ d--h-c- [07:11 10/06/2009]
$NtUninstallKB963093$ d--h-c- [07:11 10/06/2009]
$NtUninstallKB967715$ d--h-c- [21:19 24/02/2009]
$NtUninstallKB968389$ d--h-c- [07:02 17/10/2009]
$NtUninstallKB968537$ d--h-c- [07:03 10/06/2009]
$NtUninstallKB968816_WM9$ d--h-c- [07:04 13/09/2009]
$NtUninstallKB969059$ d--h-c- [07:18 17/10/2009]
$NtUninstallKB969898$ d--h-c- [07:11 10/06/2009]
$NtUninstallKB969947$ d--h-c- [08:02 13/11/2009]
$NtUninstallKB970238$ d--h-c- [07:04 10/06/2009]
$NtUninstallKB970430$ d--h-c- [08:17 10/12/2009]
$NtUninstallKB970653-v3$ d--h-c- [15:47 26/08/2009]
$NtUninstallKB971029$ d--h-c- [16:10 22/03/2011]
$NtUninstallKB971468$ d--h-c- [04:14 11/02/2010]
$NtUninstallKB971486$ d--h-c- [07:07 17/10/2009]
$NtUninstallKB971557$ d--h-c- [07:12 14/08/2009]
$NtUninstallKB971633$ d--h-c- [13:00 18/07/2009]
$NtUninstallKB971657$ d--h-c- [07:12 14/08/2009]
$NtUninstallKB971737$ d--h-c- [08:11 10/12/2009]
$NtUninstallKB971961$ d--h-c- [04:02 28/12/2010]
$NtUninstallKB972270$ d--h-c- [15:12 13/01/2010]
$NtUninstallKB973346$ d--h-c- [13:00 18/07/2009]
$NtUninstallKB973354$ d--h-c- [07:09 14/08/2009]
$NtUninstallKB973507$ d--h-c- [07:09 14/08/2009]
$NtUninstallKB973525$ d--h-c- [07:06 17/10/2009]
$NtUninstallKB973540_WM9$ d--h-c- [07:09 14/08/2009]
$NtUninstallKB973687$ d--h-c- [08:02 25/11/2009]
$NtUninstallKB973815$ d--h-c- [07:01 14/08/2009]
$NtUninstallKB973869$ d--h-c- [07:12 14/08/2009]
$NtUninstallKB973904$ d--h-c- [08:14 10/12/2009]
$NtUninstallKB974112$ d--h-c- [07:17 17/10/2009]
$NtUninstallKB974318$ d--h-c- [08:17 10/12/2009]
$NtUninstallKB974392$ d--h-c- [08:11 10/12/2009]
$NtUninstallKB974571$ d--h-c- [07:16 17/10/2009]
$NtUninstallKB975025$ d--h-c- [07:17 17/10/2009]
$NtUninstallKB975467$ d--h-c- [07:03 17/10/2009]
$NtUninstallKB975558_WM8$ d--h-c- [16:36 19/09/2010]
$NtUninstallKB975560$ d--h-c- [04:05 11/02/2010]
$NtUninstallKB975561$ d--h-c- [04:11 11/03/2010]
$NtUninstallKB975562$ d--h-c- [03:29 11/06/2010]
$NtUninstallKB975713$ d--h-c- [04:06 11/02/2010]
$NtUninstallKB976098-v2$ d--h-c- [08:02 25/11/2009]
$NtUninstallKB977165$ d--h-c- [04:02 11/02/2010]
$NtUninstallKB977816$ d--h-c- [03:05 14/04/2010]
$NtUninstallKB977914$ d--h-c- [04:02 11/02/2010]
$NtUninstallKB978037$ d--h-c- [04:06 11/02/2010]
$NtUninstallKB978251$ d--h-c- [04:06 11/02/2010]
$NtUninstallKB978262$ d--h-c- [04:14 11/02/2010]
$NtUninstallKB978338$ d--h-c- [03:05 14/04/2010]
$NtUninstallKB978542$ d--h-c- [03:04 13/05/2010]
$NtUninstallKB978601$ d--h-c- [03:05 14/04/2010]
$NtUninstallKB978695_WM9$ d--h-c- [03:40 11/06/2010]
$NtUninstallKB978706$ d--h-c- [04:02 11/02/2010]
$NtUninstallKB979306$ d--h-c- [04:00 25/02/2010]
$NtUninstallKB979309$ d--h-c- [03:03 14/04/2010]
$NtUninstallKB979482$ d--h-c- [03:37 11/06/2010]
$NtUninstallKB979559$ d--h-c- [03:57 11/06/2010]
$NtUninstallKB979683$ d--h-c- [03:13 14/04/2010]
$NtUninstallKB979687$ d--h-c- [03:18 14/10/2010]
$NtUninstallKB980195$ d--h-c- [04:05 11/06/2010]
$NtUninstallKB980218$ d--h-c- [04:06 11/06/2010]
$NtUninstallKB980232$ d--h-c- [03:13 14/04/2010]
$NtUninstallKB980436$ d--h-c- [13:48 11/08/2010]
$NtUninstallKB981322$ d--h-c- [16:31 19/09/2010]
$NtUninstallKB981349$ d--h-c- [04:03 28/12/2010]
$NtUninstallKB981793$ d--h-c- [14:34 05/06/2010]
$NtUninstallKB981852$ d--h-c- [14:08 11/08/2010]
$NtUninstallKB981957$ d--h-c- [03:03 14/10/2010]
$NtUninstallKB981997$ d--h-c- [13:33 11/08/2010]
$NtUninstallKB982132$ d--h-c- [03:20 14/10/2010]
$NtUninstallKB982214$ d--h-c- [14:08 11/08/2010]
$NtUninstallKB982665$ d--h-c- [13:32 11/08/2010]
$NtUninstallKB982802$ d--h-c- [16:34 19/09/2010]
$NtUninstallMSCompPackV1$ d--h-c- [19:51 26/09/2008]
$NtUninstallWMFDist11$ d--h-c- [19:48 26/09/2008]
$NtUninstallwmp11$ d--h-c- [19:50 26/09/2008]
$NtUninstallWudf01000$ d--h-c- [19:45 26/09/2008]
.jpi_cache d------ [19:45 05/11/2004]
ACI d------ [15:38 25/08/2009]
addins d------ [18:03 19/08/2004]
AppPatch d------ [18:03 19/08/2004]
APW_DATA d------ [19:22 08/01/2005]
assembly dr--s-- [01:44 20/08/2004]
Cache d------ [21:50 30/10/2004]
Config d------ [18:03 19/08/2004]
Connection Wizard d------ [18:03 19/08/2004]
CPQDIAG d------ [19:45 05/11/2004]
Cursors d------ [18:03 19/08/2004]
Debug d------ [18:03 19/08/2004]
Downloaded Installations d------ [01:22 20/08/2004]
Downloaded Program Files d---s-- [01:13 20/08/2004]
Driver Cache d------ [18:03 19/08/2004]
Drivers d------ [01:27 20/08/2004]
EHome d------ [16:05 26/09/2008]
ERDNT d------ [16:45 11/10/2011]
Fonts dr--s-- [18:03 19/08/2004]
ftpcache d--hs-- [20:55 27/02/2009]
Help d------ [18:03 19/08/2004]
I386 d------ [00:46 20/08/2004]
ie7 d--h-c- [23:02 28/10/2006]
ie7updates d------ [19:44 13/01/2007]
ie8 d--h-c- [15:53 28/10/2011]
ie8updates d------ [13:39 29/07/2009]
ime d------ [18:03 19/08/2004]
inf d--h--- [18:03 19/08/2004]
Installer d--hs-- [18:07 19/08/2004]
Intuit d------ [16:53 09/09/2005]
java d------ [18:03 19/08/2004]
l2schemas d------ [16:18 26/09/2008]
Laurel Burch Spirit Of Womankind d------ [16:35 05/11/2010]
Media d------ [18:03 19/08/2004]
MediaCoder d------ [17:18 15/10/2006]
Microsoft.NET d------ [01:44 20/08/2004]
Minidump d------ [20:10 20/08/2004]
msagent d------ [18:03 19/08/2004]
msapps d------ [18:03 19/08/2004]
mui d------ [18:03 19/08/2004]
network diagnostic d------ [13:11 06/08/2006]
occache d------ [01:37 20/08/2004]
Offline Web Pages dr----- [01:13 20/08/2004]
OPTIONS d------ [19:48 05/11/2004]
pchealth d------ [18:03 19/08/2004]
PeerNet d------ [18:03 19/08/2004]
PIF d--h--- [23:22 07/06/2008]
Prefetch d------ [15:55 27/09/2008]
Provisioning d------ [18:03 19/08/2004]
pss d------ [15:18 13/11/2004]
RegisteredPackages d------ [03:10 20/08/2004]
Registration d------ [01:12 20/08/2004]
repair d------ [18:03 19/08/2004]
Resources d------ [18:03 19/08/2004]
security d------ [18:03 19/08/2004]
ServicePackFiles d------ [16:14 26/09/2008]
ShellNew d------ [18:48 06/11/2004]
SoftwareDistribution d------ [01:16 20/08/2004]
srchasst d------ [01:12 20/08/2004]
Sun d------ [01:46 20/08/2004]
SxsCaPendDel d------ [15:51 16/02/2009]
system d------ [18:03 19/08/2004]
system32 d------ [18:03 19/08/2004]
Tasks d---s-- [01:12 20/08/2004]
temp d------ [21:26 11/10/2011]
twain_32 d------ [18:03 19/08/2004]
Vbox d------ [19:51 05/11/2004]
WBEM d------ [23:03 28/10/2006]
Web dr----- [18:03 19/08/2004]
WinSxS d------ [18:03 19/08/2004]

-= EOF =-

Edited by Doreen aka LuniLadi, 01 November 2011 - 10:59 AM.


#10 etavares

etavares

    Bleepin' Remover


  • Malware Response Team
  • 15,514 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:04 PM

Posted 02 November 2011 - 05:11 AM

Hello, Doreen aka LuniLadi.

Something is still there...but if it's zero access, we need to disable it first and I need to see it to do so. It's not showing up, which suggests that another 'friend' may have been downloaded. And copy/paste is perfect for all the logs, it makes my life much easier. We'll try Combofix at this point. Let me know if you can't get this to run. IT should be run in Normal mode for best effect, but given your issues, please do it in Safe mode.



Next, please download ComboFix from one of these locations:
* IMPORTANT !!! Save ComboFix.exe to your Desktop as etavaresCF.exe
  • Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. (Click on this link to see a list of programs that should be disabled. The list is not all inclusive.)
  • Double click on etavaresCF.exe & follow the prompts.
  • As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
  • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.


Posted Image
Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

Posted Image

Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply, along with any symptoms that are present after it runs.

Note: After running Combofix, you may receive an error about "illegal operation on a registry key that has been marked for deletion." If you receive this error, please reboot and it should disappear.

etavares

Edited by etavares, 02 November 2011 - 05:11 AM.


If I don't respond within 2 days, please feel free to PM me.
Please don't ask for help via PM. The forums are there for a reason. Please post in the forums so others may benefit as well.

Posted Image
Unified Network of Instructors and Trusted Eliminators
 


#11 Doreen aka LuniLadi

Doreen aka LuniLadi
  • Topic Starter

  • Members
  • 37 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:04:04 PM

Posted 02 November 2011 - 02:23 PM

etavares,
1- Ran Combofix (renamed) in SAFE MODE. Got to Stage 50 and it said deleted "C:\Windows\System32\Drivers\lnveflnjoiku.sys". (Got my hopes up) Combo rebooted machine into NORMAL MODE. Towards the end of the scan "preparing log report" --> machine REBOOT. I was hoping that something had been saved and while looking for the log report in C:\ the machine REBOOTED again. (There was no log)
2- Ran renamed Combo again in SAFE MODE. This time no files were deleted at Stage 50 and when Combo rebooted it REBOOTED into SAFE MODE. ** Log file attached **
3- Just for the h3ll of it, tried to run Combo (renamed)in NORMAL mode. Program was stopped during/end of installer. Tried running multiple versions --> machined REBOOTED.

Have you heard of unhackme and/or Regrun (Warrior) from Greatis Software? Kaspersky Rescue disk? Dr. Web liveCD/USB? I'm beginning to think the only way I have to attack this thing is through the CD drive/USB port. What do you think?
Doreen aka Luni....angry, disgusted,depressed.....Ladi

Attached Files



#12 etavares

etavares

    Bleepin' Remover


  • Malware Response Team
  • 15,514 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:04 PM

Posted 03 November 2011 - 05:16 AM

Hello, Doreen aka LuniLadi.

I'm very familiar with those. THey often work for this, but not always. You do have a rootkit, although it appears you picked up another one besides the initial ZeroAccess Rootkit. I will give you this warning first:

Backdoor Warning
One or more of the identified infections is a backdoor trojan.

This allows hackers to remotely control your computer, steal critical system information and download and execute files.

I would counsel you to disconnect this PC from the Internet immediately. If you do any banking or other financial transactions on the PC or if it should contain any other sensitive information, please get to a known clean computer and change all passwords where applicable, and it would be wise to contact those same financial institutions to apprise them of your situation.

Though the trojan has been identified and can be killed, because of it's backdoor functionality, your PC is very likely compromised and there is no way to be sure your computer can ever again be trusted. Many experts in the security community believe that once infected with this type of trojan, the best course of action would be a reformat and reinstall of the OS. Please read these for more information:

How Do I Handle Possible Identify Theft, Internet Fraud and CC Fraud?
When Should I Format, How Should I Reinstall

We can still clean this machine but I can't guarantee that it will be 100% secure afterwards. Let me know what you decide to do. If you do decide to proceed, please continue with the fix below.




Step 1


The Kapersky Rescue Disk 10 works well. You'll need a USB flash drive that's empty for it.

You should be able to save the report or log. Please post that here.

etavares


If I don't respond within 2 days, please feel free to PM me.
Please don't ask for help via PM. The forums are there for a reason. Please post in the forums so others may benefit as well.

Posted Image
Unified Network of Instructors and Trusted Eliminators
 


#13 Doreen aka LuniLadi

Doreen aka LuniLadi
  • Topic Starter

  • Members
  • 37 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:04:04 PM

Posted 03 November 2011 - 02:42 PM

etavares,
1- Started in NORMAL mode with Kaspersky on USB plugged into port. Jump drive light flashes then stays on steady. Hard drive light flashing --> screen goes black. No menu, no boot. :(
2- Rebooted machine and just got desktop image...no icons/files...Tried using Task Manager to access USB to run program --> machine REBOOTS.
3- Start the machine in normal mode and start clicking numerous/various antivirus programs on the desktop. I get Dr.Web Cure It/Antivurus to run from USB drive in "Enhanced Protection Mode". Performs QUICK SCAN and reports NO VIRUSES FOUND. I think that's a false result since it was basically running in safe mode and the virus doesn't show up in safe mode.

Now I'm fustrated because it seems that this freakin' thing can stop my machine from booting with antivirus programs running on either the CD or USB drives! (Went into the BIOS. I have "boot from removable device" ENABLED and my (2) CD/DVD drives look for a bootable disk before the hard drive boots) But it also seems that if I start enough programs and keep it busy fighting them off, something manages to slip by. So...

4- Put Dr.Web Live CD into one drive, Kaspersky Rescue into other/second, plug in USB with programs on it...boot the machine and started hitting the <enter> key like mad when I get a black screen. Somehow I got Dr.Web Live CD to run. Within the first 5 min it reported: "/win/C:/32788R22FWJFW/List.bat" probably infected with "SCRIPT.Virus"

It's scanning now. I don't know if I'll have a log to post tonight. It's at approx. 10%. I'm not sure where to find one but will try when the scan is complete.
I'm totally unfamiliar with these programs. Should I choose "cure" "quarantine" or "delete"?

I'm THRILLED I got something to work...even if by accident. :blush:
Is there a way to keep this/other programs scanning? I'm afraid if I stop it this blasted thing will be in control again. :(

Two other things:
1- I understand the seriousness of your warning. I haven't used that machine for anything but antivirus fighting since I saw my converter program and firewall/AVG go down. Yes, my LIFE IS on that machine. I don't think I have internet access since that was disabled by the virus when I tried to download antivirus programs. (If I thought I could disable my connection without losing scanning, I definitely would.) I have a backup that's somewhat out of date but I've also lost my Norton Ghost icon in my tray and, in the past, I've had issues restoring a disk image when there's been a problem/upgrade on the software. The new software/upgrade just didn't recognize the backup file on the external hard drive. Which leads to the question: Why have an unrestorable disk image in the first place? (But that's another conversation...)Soooo restore/reinstalling the OS is the LAST thing I want to do. I hope to God it doesn't come to that.
2- I can't tell you how grateful I am for your help. Just having another human being...someone that's there...I can't tell you what it means to me. :heart:
Doreen aka LuniLadi

#14 etavares

etavares

    Bleepin' Remover


  • Malware Response Team
  • 15,514 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:04 PM

Posted 03 November 2011 - 07:53 PM

If you do want to reformat, we have ways to get all your files off your machine, even without the Ghost.

That files you listed is legitimate. However, you can Quarantine everything for now and we will restore anything we need to.
let me know how it goes.


If I don't respond within 2 days, please feel free to PM me.
Please don't ask for help via PM. The forums are there for a reason. Please post in the forums so others may benefit as well.

Posted Image
Unified Network of Instructors and Trusted Eliminators
 


#15 Doreen aka LuniLadi

Doreen aka LuniLadi
  • Topic Starter

  • Members
  • 37 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:04:04 PM

Posted 04 November 2011 - 10:12 AM

etavares,
Scan was at approx 50% at 11:30pm last night. It reported TROJAN.SIGGEN.7884 (sorry I don't remember location). It also reported alot of threats in .exe files in the RESTORE DIR. Alot of errors in .dll files also in RESTORE directory. I left the scan running and went to bed. Got up at 5:45am to check scan. No scan, no program...just green Dr.Web screen.

Somehow I got it scanning again this morning. It's at approx 15% now. This time if I see that trojan I'm going to stop/pause scan and quarantine it and anything else in system/restore dirs and then try to keep scanning.

I'll keep you posted. I know this info isn't that useful to you. I'll try to post a log as soon as I can. Meantime, I'll try to fight this ^&%%$#$@ thing.
Doreen aka LuniLadi




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users