Napísal autor témy McDog: 14.07.2008 22:50 | |
|
No a tu je este combofix:
ComboFix 08-07-14.2 - martin 2008-07-14 21:59:15.4 - NTFSx86
Microsoft® Windows Vista™ Home Basic 6.0.6001.1.1250.1.1051.18.246 [GMT 2:00]
Running from: C:\Users\martin\Downloads\ComboFix.exe
* Created a new restore point
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Windows\regedit.com
C:\Windows\system32\taskmgr.com
.
((((((((((((((((((((((((( Files Created from 2008-06-14 to 2008-07-14 )))))))))))))))))))))))))))))))
.
No new files created in this timespan
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-07-14 19:59 1,110,016 ----a-w C:\Users\Martin Č\NTUSER.DAT
2008-07-14 19:59 1,110,016 ----a-w C:\Users\Martin Č\NTUSER.DAT
2008-07-14 19:59 --------- d-----w C:\Users\martin\AppData\Roaming\uTorrent
2008-07-14 16:13 --------- d-----w C:\Program Files\Mozilla Firefox 3 Beta 5
2008-07-14 15:26 --------- d-----w C:\Users\martin\AppData\Roaming\skypePM
2008-07-14 15:26 --------- d-----w C:\Users\martin\AppData\Roaming\Skype
2008-07-14 12:03 --------- d-----w C:\Users\martin\AppData\Roaming\Shareaza
2008-07-14 11:39 --------- d-----w C:\Program Files\a-squared Free
2008-07-13 17:53 --------- d-----w C:\Program Files\Ubisoft
2008-07-13 17:05 --------- d-----w C:\Program Files\SlySoft
2008-07-13 13:24 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-07-13 13:07 --------- d-----w C:\ProgramData\Spybot - Search & Destroy
2008-07-13 12:24 --------- d-----w C:\Program Files\Wolfenstein - Enemy Territory
2008-07-13 12:10 --------- d-----w C:\Users\martin\AppData\Roaming\Hamachi
2008-07-13 11:50 25,280 ----a-w C:\Windows\system32\drivers\hamachi.sys
2008-07-11 16:45 --------- d-----w C:\Program Files\CCleaner
2008-07-08 19:13 --------- d-----w C:\Program Files\Windows Mail
2008-07-08 19:10 --------- d-----w C:\ProgramData\Microsoft Help
2008-07-08 19:08 --------- d-----w C:\Program Files\Microsoft SQL Server
2008-07-08 18:53 --------- d-----w C:\Users\martin\AppData\Roaming\AVS4YOU
2008-07-06 17:11 --------- d---a-w C:\ProgramData\TEMP
2008-07-06 09:43 --------- d-----w C:\Program Files\7-Zip
2008-07-05 18:00 --------- d-----w C:\Users\martin\AppData\Roaming\MxBoost
2008-07-05 10:05 --------- d-----w C:\Program Files\Webteh
2008-07-05 09:40 --------- d-----w C:\Program Files\OpenOffice.org 2.4
2008-07-05 09:11 --------- d-----w C:\Program Files\Mozilla Sunbird
2008-07-05 08:33 --------- d-----w C:\Users\martin\AppData\Roaming\OpenOffice.org2
2008-07-05 07:59 --------- d-----w C:\Program Files\ICQ6
2008-07-04 10:42 86,016 ----a-w C:\Windows\System32\OpenAL32.dll
2008-07-04 10:42 262,144 ----a-w C:\Windows\System32\wrap_oal.dll
2008-07-04 10:28 --------- d-----w C:\Program Files\Futuremark
2008-07-03 19:54 --------- d-----w C:\Program Files\Spybot - Search & Destroy
2008-07-03 19:23 --------- d-----w C:\Program Files\Alwil Software
2008-07-03 19:18 --------- d-s---w C:\Users\Martin Č\AppData\Roaming\Microsoft
2008-07-03 19:18 --------- d-----w C:\ProgramData\Avg8
2008-07-03 19:18 --------- d-----w C:\Program Files\Common Files\AVSMedia
2008-07-03 19:18 --------- d-----w C:\Program Files\AVS4YOU
2008-07-02 17:01 --------- d-----w C:\Program Files\Lavalys
2008-07-02 16:12 --------- d-----w C:\Program Files\Prime95
2008-07-02 14:39 --------- d-----w C:\Program Files\Notebook Hardware Control
2008-07-02 10:50 --------- d-----w C:\Users\martin\AppData\Roaming\LimeWire
2008-07-02 10:29 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard
2008-07-02 10:02 --------- d-----w C:\Program Files\Panda Security
2008-07-02 10:02 --------- d-----w C:\Program Files\Common Files\Panda Software
2008-07-02 09:09 --------- d-----w C:\Program Files\Opera
2008-07-01 19:27 --------- d-----w C:\Program Files\Shareaza
2008-07-01 19:03 --------- d-----w C:\Users\martin\AppData\Roaming\Maxthon2
2008-06-29 10:48 --------- d-----w C:\Program Files\SpeedFan
2008-06-29 10:25 --------- d-----w C:\Program Files\PC Tune-Up
2008-06-28 12:55 --------- d-----w C:\Program Files\LimeWire
2008-06-28 10:17 10,559,746 ----a-w C:\Windows\REGBK03.ZIP
2008-06-28 08:16 --------- d-----w C:\Program Files\Premium Booster
2008-06-28 08:02 --------- d-----w C:\Program Files\uTorrent
2008-06-28 08:02 --------- d-----w C:\Program Files\Microsoft Games
2008-06-28 08:02 --------- d-----w C:\Program Files\Launchy
2008-06-28 08:02 --------- d-----w C:\Program Files\AC3Filter
2008-06-28 07:20 --------- d-----w C:\Program Files\Track Mania
2008-06-26 03:29 801,280 ----a-w C:\Windows\System32\NaturalLanguage6.dll
2008-06-26 01:45 2,644,480 ----a-w C:\Windows\System32\NlsLexicons0009.dll
2008-06-26 01:45 12,240,896 ----a-w C:\Windows\System32\NlsLexicons0007.dll
2008-06-25 16:49 --------- d-----w C:\Program Files\Real
2008-06-25 16:49 --------- d-----w C:\Program Files\Common Files\xing shared
2008-06-25 16:49 --------- d-----w C:\Program Files\Common Files\Real
2008-06-25 16:19 --------- d-----w C:\Users\martin\AppData\Roaming\vlc
2008-06-25 16:19 --------- d-----w C:\Program Files\VideoLAN
2008-06-25 16:16 --------- d-----w C:\Program Files\DivX
2008-06-25 16:16 --------- d-----w C:\Program Files\Common Files\PX Storage Engine
2008-06-25 15:56 --------- d-----w C:\Program Files\Microsoft Silverlight
2008-06-25 15:33 --------- d-----w C:\Program Files\Mozilla Thunderbird
2008-06-24 19:17 --------- d-----w C:\Users\martin\AppData\Roaming\Launchy
2008-06-21 12:04 --------- d-----w C:\Program Files\Java
2008-06-21 12:01 --------- d-----w C:\Program Files\Common Files\Java
2008-06-21 11:47 --------- d-----w C:\Program Files\Common Files\Adobe AIR
2008-06-21 11:35 --------- d-----w C:\Program Files\Morgan
2008-06-21 09:27 --------- d-----w C:\Program Files\PicLensIE
2008-06-20 19:21 --------- d-----w C:\Users\martin\AppData\Roaming\UpdateStar
2008-06-19 19:05 --------- d-----w C:\Program Files\iSpeed
2008-06-19 16:02 --------- d-----w C:\Users\martin\AppData\Roaming\SUPERAntiSpyware.com
2008-06-19 16:02 --------- d-----w C:\Program Files\SUPERAntiSpyware
2008-06-19 15:55 --------- d-----w C:\Program Files\Common Files\Adobe
2008-06-18 18:56 --------- d-----w C:\Users\martin\AppData\Roaming\Songbird2
2008-06-18 18:56 --------- d-----w C:\ProgramData\SongbirdVLC
2008-06-18 18:56 --------- d-----w C:\Program Files\Songbird
2008-06-16 07:22 --------- d-----w C:\Users\martin\AppData\Roaming\Comodo
2008-06-16 07:22 --------- d-----w C:\Program Files\Comodo
2008-06-15 16:29 3,988,662 ----a-w C:\Windows\REGBK02.ZIP
2008-06-15 15:26 --------- d-----w C:\ProgramData\comodo
2008-06-15 14:04 249,592 ----a-w C:\Windows\System32\cssdll32.dll
2008-06-15 14:00 --------- d-----w C:\Users\martin\AppData\Roaming\Talkback
2008-06-15 12:58 --------- d-----w C:\Program Files\Windows Installer 4.5 SDK
2008-06-13 22:16 --------- d-----w C:\Program Files\JetAudio
2008-06-13 21:22 --------- d-----w C:\ProgramData\TuneUp Software
2008-06-13 21:22 --------- d-----w C:\Program Files\TuneUp Utilities 2007
2008-06-13 20:31 --------- d-----w C:\Program Files\Defraggler
2008-06-11 17:25 --------- d-----w C:\Users\martin\AppData\Roaming\PCF-VLC
2008-06-11 17:20 --------- d-----w C:\Users\martin\AppData\Roaming\Participatory Culture Foundation
2008-06-11 17:18 --------- d-----w C:\Program Files\Participatory Culture Foundation
2008-06-10 17:43 --------- d-----w C:\Users\martin\AppData\Roaming\MagicBall3
2008-06-08 08:44 --------- d-----w C:\Users\martin\AppData\Roaming\thriXXX
2008-06-08 08:44 --------- d-----w C:\Program Files\thriXXX
.
((((((((((((((((((((((((((((( snapshot_2008-06-04_12.07.07,95 )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-07-05 09:40:56 12,288 ----a-w C:\Windows\assembly\GAC\cli_basetypes\1.0.10.0__ce2cb7e279207b9e\cli_basetypes.dll
+ 2008-07-05 09:40:56 32,256 ----a-w C:\Windows\assembly\GAC\cli_cppuhelper\1.0.13.0__ce2cb7e279207b9e\cli_cppuhelper.dll
+ 2008-07-05 09:40:56 847,872 ----a-w C:\Windows\assembly\GAC\cli_types\1.1.13.0__ce2cb7e279207b9e\cli_types.dll
+ 2008-07-05 09:40:56 8,192 ----a-w C:\Windows\assembly\GAC\cli_ure\1.0.13.0__ce2cb7e279207b9e\cli_ure.dll
+ 2008-07-05 09:40:22 3,584 ----a-w C:\Windows\assembly\GAC\policy.1.0.cli_basetypes\9.1.0.0__ce2cb7e279207b9e\policy.1.0.cli_basetypes.dll
+ 2008-07-05 09:40:23 3,584 ----a-w C:\Windows\assembly\GAC\policy.1.0.cli_cppuhelper\13.0.0.0__ce2cb7e279207b9e\policy.1.0.cli_cppuhelper.dll
+ 2008-07-05 09:40:23 3,072 ----a-w C:\Windows\assembly\GAC\policy.1.0.cli_ure\13.0.0.0__ce2cb7e279207b9e\policy.1.0.cli_ure.dll
+ 2008-07-05 09:41:04 3,072 ----a-w C:\Windows\assembly\GAC\policy.1.1.cli_types\13.0.0.0__ce2cb7e279207b9e\policy.1.1.cli_types.dll
+ 2008-07-03 12:53:15 884,736 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\b3a5c81e91bf9b1e63697e53a41ac0ed\AspNetMMCExt.ni.dll
+ 2008-07-03 12:53:32 499,712 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\BCMCommon\af01adf258363d49e4fbdcdd482bc4f4\BCMCommon.ni.dll
+ 2008-07-03 12:57:16 487,424 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\BCMMSIDCRL.Managed\e724870cb952736503036d747b6c01a4\BCMMSIDCRL.Managed.ni.dll
+ 2008-07-03 12:54:09 1,646,592 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\BCMRes\8622e37b291540a28c6e39a8a6a2e91a\BCMRes.ni.dll
+ 2008-07-03 12:54:56 4,112,384 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\BusinessLayer\4d0a157f609a257b441e876213506e86\BusinessLayer.ni.dll
+ 2008-07-02 17:35:45 503,808 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\a29c71731e54f91d32ccc55d5493126d\ComSvcConfig.ni.exe
+ 2008-07-04 09:47:42 237,568 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\8b7076d09705567c6431176b693597ab\CustomMarshalers.ni.dll
+ 2008-07-04 09:47:52 15,360 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\dfsvc\314a2a2c7ac434889e2478150e910adf\dfsvc.ni.exe
+ 2008-07-02 17:38:40 577,536 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\EventViewer\368debb045e28955b65910779050eccc\EventViewer.ni.dll
+ 2008-07-04 09:44:45 15,872 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Extensibility\d25497978d08c3babc76b124a7f751f4\Extensibility.ni.dll
+ 2008-07-03 12:55:31 22,528 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\ILoader\333f0533674b2065b21c5a3e0106ccec\ILoader.ni.dll
+ 2008-07-03 12:56:10 430,080 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Iris.Mapi.MessageSt#\12c358ae021efa248b47c7a69d4697d3\Iris.Mapi.MessageStore.ni.dll
+ 2008-07-04 09:48:04 876,544 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\e24c7a7e58f9b3432df623710b9c5e01\Microsoft.Build.Engine.ni.dll
+ 2008-07-04 09:48:15 81,920 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\6dc26698fcb3f0f93759f3c38a6207d5\Microsoft.Build.Framework.ni.dll
+ 2008-07-04 09:48:28 1,695,744 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\87407c2d9c2530f716841b6d6ebdf563\Microsoft.Build.Tasks.ni.dll
+ 2008-07-04 09:48:38 167,936 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\bdd6a68dce3ff4146b24afdf9759402b\Microsoft.Build.Utilities.ni.dll
+ 2008-07-04 09:45:45 950,272 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.BusinessS#\281fcac4b60684302c952bcab4137e79\Microsoft.BusinessSolutions.eCRM.OutlookAddIn.ImportExportUI.ni.dll
+ 2008-07-03 12:57:36 2,584,576 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.BusinessS#\7840f7d473f36db52e97958bd0e8021b\Microsoft.BusinessSolutions.eCRM.OutlookAddIn.ni.dll
+ 2008-07-03 12:57:10 4,554,752 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.BusinessS#\8be5101ca0f466920c20684b788d4886\Microsoft.BusinessSolutions.eCRM.OutlookAddIn.CSUtils.ni.dll
+ 2008-07-04 09:45:00 2,891,776 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.BusinessS#\b19faba3b1d0918eaa68d489f31e2bbe\Microsoft.BusinessSolutions.eCRM.Reports2.ni.dll
+ 2008-07-03 12:56:04 516,096 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.BusinessS#\e62e3479cc16ad87501ea0036b6ae133\Microsoft.BusinessSolutions.eCRM.DataSync.ni.dll
+ 2008-07-03 12:54:15 131,072 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.eCRM.AxSH#\b10472e85dbdc8d5b2886ce0abfe8370\Microsoft.eCRM.AxSHDocVw.ni.dll
+ 2008-07-03 12:55:43 491,520 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.eCRM.Offi#\8a200caf5af9ff8235ed940fcdbc79e7\Microsoft.eCRM.Office.ni.dll
+ 2008-07-03 11:36:48 1,441,792 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Ink\d521fc6793855857df18b7cb9ab0acaa\Microsoft.Ink.ni.dll
+ 2008-07-03 12:57:42 643,072 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Interop.e#\0c5afc0421857bfc41d585346660c1f3\Microsoft.Interop.eCRM.MSComCtl.ni.dll
+ 2008-07-03 12:56:33 1,028,096 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Interop.e#\573e16bb22badbc8f269b93b46b18bac\Microsoft.Interop.eCRM.msforms.ni.dll
+ 2008-07-03 12:54:21 352,256 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Interop.e#\a686c35266f14c5e901853d8deae2fb7\Microsoft.Interop.eCRM.SHDocVw.ni.dll
+ 2008-07-03 12:55:02 39,424 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Interop.e#\d0bff0a870e776c4083cc4d9348da297\Microsoft.Interop.eCRM.NetFw.ni.dll
+ 2008-07-03 12:55:38 1,490,944 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Interop.e#\f18b01fb9a4462d74b75e165b65c179f\Microsoft.Interop.eCRM.Word.ni.dll
+ 2008-07-03 12:56:26 483,328 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Interop.e#\f3b5debeb1b92c8110e57b855fc56041\Microsoft.Interop.eCRM.Publisher.ni.dll
+ 2008-07-04 09:45:24 2,453,504 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Interop.e#\fa11cb0b65090716bf3ec288ce8e3e0d\Microsoft.Interop.eCRM.Excel.ni.dll
+ 2008-07-03 12:53:49 86,016 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Interop.e#\fd7a283410b81c2d65267abfb9c4c79a\Microsoft.Interop.eCRM.Ole.ni.dll
+ 2008-07-03 12:54:34 1,085,440 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Interop.M#\1dde3e735c17891e000aa8c20e4c3020\Microsoft.Interop.Mapi.Impl.ni.dll
+ 2008-07-03 12:54:27 192,512 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Interop.M#\6dbe0f43bb6b8929940baa5fc4818f14\Microsoft.Interop.Mapi.PropTags.ni.dll
+ 2008-07-03 12:53:37 163,840 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Interop.M#\a5c91b078a255697d687c95713cff206\Microsoft.Interop.Mapi.Interfaces.ni.dll
+ 2008-07-04 09:45:52 671,744 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Iris.Impo#\669b19df661ab2db1430f1d066987bb2\Microsoft.Iris.ImportExport.ni.dll
+ 2008-07-04 09:45:37 729,088 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Iris.Impo#\ddb6b4767ad72a8423b65ebd35e3158a\Microsoft.Iris.ImportExportDataAccess.ni.dll
+ 2008-07-03 12:51:04 2,441,216 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\2f558d3a6d024dfcdd1d62233a067b40\Microsoft.JScript.ni.dll
+ 2008-07-02 17:38:47 614,400 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Managemen#\b059345a9c2a126e320e17c2090dd354\Microsoft.ManagementConsole.ni.dll
+ 2008-07-04 09:45:59 1,720,320 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.In#\4272187860d170208cb57011d501071d\Microsoft.Office.Interop.Word.ni.dll
+ 2008-07-04 09:45:29 73,728 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.In#\7a52121581d172ddbca3b8516e9e040b\Microsoft.Office.Interop.OutlookViewCtl.ni.dll
+ 2008-07-03 12:54:43 2,355,200 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.In#\ce6a3a942b78a3634fa2f752d51b0dcc\Microsoft.Office.Interop.Outlook.ni.dll
+ 2008-07-02 17:38:28 1,232,896 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\198b25c569e8a6fbb78092fe9c697600\Microsoft.Transactions.Bridge.ni.dll
+ 2008-07-03 11:37:07 401,408 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\b0da39820e35eb3821e69ac8ace491a1\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2008-07-03 12:55:49 139,264 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vbe.Inter#\2172977cb49a1a41dac50dcb6ce8ee49\Microsoft.Vbe.Interop.ni.dll
+ 2008-07-03 12:56:58 1,740,800 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\a96c6b0c75f8ea3eb133018ba3b49f3f\Microsoft.VisualBasic.ni.dll
+ 2008-07-03 12:51:06 77,824 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\81c771cf263c377d46aaf249c7ab903a\Microsoft.Vsa.ni.dll
+ 2008-07-02 17:39:04 6,443,008 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\MIGUIControls\66ad568e1ea098a2099364bf66bdaed8\MIGUIControls.ni.dll
+ 2008-07-03 11:37:27 1,691,648 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\MMCEx\f5934f1b89f7c8fb3f0bab1c21045f1c\MMCEx.ni.dll
+ 2008-07-02 17:38:53 319,488 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\MMCFxCommon\a3d6cbb5a1efbd314e7080bbbd78d1cd\MMCFxCommon.ni.dll
+ 2008-07-03 11:37:28 102,400 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\napcrypt\29d0ab81098806db3b769de45054ea13\napcrypt.ni.dll
+ 2008-07-03 11:37:38 139,264 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\naphlpr\65fba2f3c000945397537d9646148f6c\naphlpr.ni.dll
+ 2008-07-03 11:37:50 126,976 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\napinit\ad70802a13332254382fd4bddbfbc8b3\napinit.ni.dll
+ 2008-07-03 11:38:03 737,280 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\napsnap\ae9a564a6dd8814ba0ec381fd07be4bb\napsnap.ni.dll
+ 2008-07-04 09:49:08 2,641,920 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Narrator\1b896bbb7ed678902995f5a2479962e8\Narrator.ni.exe
+ 2008-07-03 12:54:01 925,696 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\office\a343884a3632aa3ea660f782520f18de\office.ni.dll
+ 2008-07-04 09:49:21 1,581,056 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\7c78c24952fad7252c7ff7f739fd6198\PresentationBuildTasks.ni.dll
+ 2008-07-04 09:49:44 2,035,712 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\fa8522105eb716eed71e99bb9bfe06ee\PresentationUI.ni.dll
+ 2008-07-04 09:49:57 2,416,640 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\99836ab309902e40176dc5ca0854f7b2\ReachFramework.ni.dll
+ 2008-07-03 12:55:08 532,480 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\SBAIAPI\444783ab0c14d4245699ab8b8cc982a7\SBAIAPI.ni.dll
+ 2008-07-03 12:55:25 643,072 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\SBAIAPIV2\4e4fb8d01c74a880ad8204e334ef086f\SBAIAPIV2.ni.dll
+ 2008-07-03 12:55:19 122,880 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\SBAIREPORTING\2922f5a21ec250972a628558c7324c22\SBAIREPORTING.ni.dll
+ 2008-07-03 12:55:14 16,896 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\SBAIUI\beb810bfc44b13bbe85ba409386ad03e\SBAIUI.ni.dll
+ 2008-07-03 11:38:14 139,264 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\b682f5929b1f3f2a0b585cbc999df489\ServiceModelReg.ni.exe
+ 2008-07-02 17:37:52 303,104 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\ee487a5b3e62f510183f68538f583135\SMDiagnostics.ni.dll
+ 2008-07-03 11:38:27 323,584 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\470e3064a09dc8107667143d09811786\SMSvcHost.ni.exe
+ 2008-07-03 12:53:55 44,544 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\stdole\07c3757edda55c714c4e69a94be4e35e\stdole.ni.dll
+ 2008-07-04 10:27:53 262,144 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\sysglobl\811305f0e9b3729e5a6a991b6645de92\sysglobl.ni.dll
+ 2008-07-02 17:36:53 1,183,744 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\f293fee60fc17173a220dec17a8f2a4a\System.Data.OracleClient.ni.dll
+ 2008-07-02 17:37:05 512,000 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\4c99dec707cab9de8b03b8821a0716ac\System.DirectoryServices.Protocols.ni.dll
+ 2008-07-02 17:36:06 1,224,704 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\b6dfa3ee72dae0f0aa3d072d3b5af2a6\System.DirectoryServices.ni.dll
+ 2008-07-02 17:35:53 659,456 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\954db9046cf0977e8baeda9160910bc0\System.EnterpriseServices.ni.dll
+ 2008-07-02 17:35:53 294,912 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\954db9046cf0977e8baeda9160910bc0\System.EnterpriseServices.Wrapper.dll
+ 2008-07-02 17:38:21 241,664 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\5ff73b37102042c3e28f22106dde8ad4\System.IdentityModel.Selectors.ni.dll
+ 2008-07-02 17:38:09 1,118,208 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\44573dbcf8c8046c8d4b9ba8109d90e7\System.IdentityModel.ni.dll
+ 2008-07-03 11:38:50 417,792 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\28b40aac039323938aa010da90240207\System.IO.Log.ni.dll
+ 2008-07-03 12:50:56 1,064,960 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\3faf6c0dd4b29ada10b11269abb62653\System.Management.ni.dll
+ 2008-07-02 17:38:15 655,360 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Messaging\1bb37d7286f4cd22de1b1e7f6d2950b2\System.Messaging.ni.dll
+ 2008-07-04 09:49:46 1,134,592 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Printing\d82ee3d7910c5dab8c97c4e7973d7bbc\System.Printing.ni.dll
+ 2008-07-02 17:36:16 815,104 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\8fe7232e97fdf63c6b146e93f432d7d7\System.Runtime.Remoting.ni.dll
+ 2008-07-02 17:38:02 2,445,312 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\529360b58964fe947006d8669aea62f3\System.Runtime.Serialization.ni.dll
+ 2008-07-02 17:37:46 18,071,552 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\cfcba8cb539cb3dc5e92c544bd6d9dc5\System.ServiceModel.ni.dll
+ 2008-07-04 10:27:47 2,039,808 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Speech\b75eb02af4a4a29474726c41641ac18e\System.Speech.ni.dll
+ 2008-07-02 17:35:59 679,936 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\62dc499efc246da6806ba0b74ac447f1\System.Transactions.ni.dll
+ 2008-07-04 10:28:14 2,342,912 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\7185958cf25ae6673e828dd1e7ac65ed\System.Web.Mobile.ni.dll
+ 2008-07-02 17:36:59 237,568 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\320ae07cc8c7b946d2944c63a72871fc\System.Web.RegularExpressions.ni.dll
+ 2008-07-02 17:36:46 1,986,560 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\af61137b092f7167a1bb6d5f8ee294d8\System.Web.Services.ni.dll
+ 2008-07-02 17:36:38 12,513,280 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\369cdfcbaefd8f28200e295c26c2141f\System.Web.ni.dll
+ 2008-07-03 11:39:07 258,048 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\TaskScheduler\0a7389d61536c156ce0485a0a14d1c3f\TaskScheduler.ni.dll
+ 2008-07-04 10:28:36 483,328 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\247502ab3842b4a61f36dc4e0279f354\UIAutomationClient.ni.dll
+ 2008-07-04 10:28:48 1,118,208 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\94bf31eac9cf2d253b451e225669e91c\UIAutomationClientsideProviders.ni.dll
+ 2008-07-04 10:29:10 270,336 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\32372878e4291ce171ce9eb482d9188a\WindowsFormsIntegration.ni.dll
+ 2008-07-03 12:50:47 380,928 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\0ecb8c2a9fa7b6c5e7c9d77b44ff6eb1\WsatConfig.ni.exe
+ 2008-07-03 12:56:50 290,816 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Xceed.Compression\e4530e13c649b192d2081bed8d3eeba7\Xceed.Compression.ni.dll
+ 2008-07-03 12:56:44 348,160 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Xceed.FileSystem\5ba0a3521b1fce3f977371939de4f753\Xceed.FileSystem.ni.dll
+ 2008-07-04 09:45:17 696,320 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Xceed.Grid.UIStyle\8a32aeb2887278ef7c6258c7dafdf70f\Xceed.Grid.UIStyle.ni.dll
+ 2008-07-04 09:45:11 2,277,376 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Xceed.Grid\05f88cf54088fe40e8e97acc78cd3802\Xceed.Grid.ni.dll
+ 2008-07-03 12:56:38 614,400 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Xceed.Zip\1b6c387fc0a7f66ecd1258c1f35ab0c2\Xceed.Zip.ni.dll
+ 2008-01-09 13:01:48 118,784 ----a-w C:\Windows\BDOSCAN8\bdupd.dll
+ 2008-01-09 13:01:48 53,248 ----a-w C:\Windows\BDOSCAN8\ipsupd.dll
+ 2008-01-09 13:01:48 53,248 ----a-w C:\Windows\bdoscandel.exe
+ 2007-03-23 20:33:04 229,376 ----a-w C:\Windows\CMDLIC.DLL
+ 2008-01-09 13:01:48 118,784 ----a-w C:\Windows\Downloaded Program Files\bdupd.dll
+ 2008-01-09 13:01:48 53,248 ----a-w C:\Windows\Downloaded Program Files\ipsupd.dll
+ 2008-06-22 14:21:37 23,600 ----a-w C:\Windows\Downloaded Program Files\tvichw32.sys
- 2000-08-31 06:00:00 73,728 ----a-w C:\Windows\fdsv.exe
+ 2000-08-31 06:00:00 89,504 ----a-w C:\Windows\fdsv.exe
+ 2008-07-05 21:28:12 884,736 ----a-w C:\Windows\gmer.dll
- 2008-04-19 15:12:06 665,600 ----a-w C:\Windows\inf\drvindex.dat
+ 2008-06-10 18:05:45 665,600 ----a-w C:\Windows\inf\drvindex.dat
- 2008-06-01 17:51:30 51,200 ----a-w C:\Windows\inf\infpub.dat
+ 2008-06-15 15:30:10 51,200 ----a-w C:\Windows\inf\infpub.dat
- 2008-06-01 17:51:29 86,016 ----a-w C:\Windows\inf\infstor.dat
+ 2008-06-15 14:03:07 86,016 ----a-w C:\Windows\inf\infstor.dat
- 2008-06-01 17:51:29 86,016 ----a-w C:\Windows\inf\infstrng.dat
+ 2008-06-15 15:30:10 86,016 ----a-w C:\Windows\inf\infstrng.dat
+ 2006-10-26 19:55:38 138,024 ----a-r C:\Windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\IMPMAIL.DLL
+ 2006-10-27 14:16:36 46,864 ----a-r C:\Windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\OUTLRPC.DLL
- 2008-05-13 19:09:53 1,165,584 ----a-r C:\Windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\accicons.exe
+ 2008-07-08 19:10:50 1,165,584 ----a-r C:\Windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\accicons.exe
- 2008-05-13 19:09:54 20,240 ----a-r C:\Windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\cagicon.exe
+ 2008-07-08 19:10:50 20,240 ----a-r C:\Windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\cagicon.exe
- 2008-05-13 19:09:54 217,864 ----a-r C:\Windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\misc.exe
+ 2008-07-08 19:10:50 217,864 ----a-r C:\Windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\misc.exe
- 2008-05-13 19:09:54 18,704 ----a-r C:\Windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\mspicons.exe
+ 2008-07-08 19:10:50 18,704 ----a-r C:\Windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\mspicons.exe
- 2008-05-13 19:09:54 35,088 ----a-r C:\Windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\oisicon.exe
+ 2008-07-08 19:10:50 35,088 ----a-r C:\Windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\oisicon.exe
- 2008-05-13 19:09:53 845,584 ----a-r C:\Windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\outicon.exe
+ 2008-07-08 19:10:50 845,584 ----a-r C:\Windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\outicon.exe
- 2008-05-13 19:09:53 922,384 ----a-r C:\Windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\pptico.exe
+ 2008-07-08 19:10:50 922,384 ----a-r C:\Windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\pptico.exe
- 2008-05-13 19:09:54 272,648 ----a-r C:\Windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\pubs.exe
+ 2008-07-08 19:10:50 272,648 ----a-r C:\Windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\pubs.exe
- 2008-05-13 19:09:54 888,080 ----a-r C:\Windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\wordicon.exe
+ 2008-07-08 19:10:50 888,080 ----a-r C:\Windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\wordicon.exe
- 2008-05-13 19:09:53 1,172,240 ----a-r C:\Windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\xlicons.exe
+ 2008-07-08 19:10:50 1,172,240 ----a-r C:\Windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\xlicons.exe
+ 2008-07-03 18:49:26 295,606 ----a-r C:\Windows\Installer\{AC76BA86-7AD7-1051-7B44-A81200000003}\SC_Reader.exe
+ 2008-06-19 15:58:46 295,606 ----a-r C:\Windows\Installer\{AC76BA86-7AD7-5464-3428-800000000004}\ARPPRODUCTICON.exe
+ 2008-06-08 08:36:12 27,136 ----a-r C:\Windows\Installer\{B74F042E-E1B9-4A5B-8D46-387BB172F0A4}\AppleSoftwareUpdateIco.exe
+ 2008-07-05 09:42:24 2,363,392 ----a-r C:\Windows\Installer\{C2ED62F4-4F0B-44DF-B630-DD02FD7E8C60}\soffice.exe
+ 1998-10-02 17:00:48 327,168 ----a-w C:\Windows\IsUninst.exe
- 2000-08-31 06:00:00 28,160 ----a-w C:\Windows\Nircmd.exe
+ 2000-08-31 06:00:00 28,672 ----a-w C:\Windows\Nircmd.exe
+ 2008-01-19 07:33:24 134,656 ----a-w C:\Windows\R.COM
+ 2008-06-21 22:14:54 1,647,104 ----a-w C:\Windows\Resources\Themes\Aero 4074 Remix\Shell\NormalColor\shellstyle.dll
+ 2008-06-21 22:13:31 1,639,424 ----a-w C:\Windows\Resources\Themes\Aero Reloaded\Shell\NormalColor\shellstyle.dll
- 2008-06-04 09:54:35 2,048 --sha-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2008-07-14 14:09:24 2,048 --sha-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2008-06-04 09:54:35 2,048 --sha-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2008-07-14 14:09:24 2,048 --sha-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2008-06-04 09:56:12 151,552 ----a-w C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT
+ 2008-07-14 14:11:06 151,552 ----a-w C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT
- 2008-04-19 15:22:29 2,598,521 -c--a-w C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareLicensing\tokens.dat
+ 2008-06-15 14:18:33 2,600,421 -c--a-w C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareLicensing\tokens.dat
- 2008-06-04 09:56:17 262,144 ----a-w C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT
+ 2008-07-14 14:11:01 147,456 ----a-w C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT
+ 2007-02-10 03:09:12 127,856 ----a-w C:\Windows\SQL9_KB948109_ENU\batchparser90.dll
+ 2007-02-10 03:09:20 1,039,728 ----a-w C:\Windows\SQL9_KB948109_ENU\dbghelp.dll
+ 2007-02-10 03:15:30 1,160,560 ----a-w C:\Windows\SQL9_KB948109_ENU\dumpdatastore.dll
+ 2008-02-26 20:08:46 2,501,648 ----a-w C:\Windows\SQL9_KB948109_ENU\hotfix.exe
+ 2005-10-13 21:26:42 548,864 ----a-w C:\Windows\SQL9_KB948109_ENU\msvcp80.dll
+ 2005-10-13 21:26:42 626,688 ----a-w C:\Windows\SQL9_KB948109_ENU\msvcr80.dll
+ 2007-02-10 03:29:52 143,728 ----a-w C:\Windows\SQL9_KB948109_ENU\sqlcmd.exe
+ 2007-02-10 03:29:52 533,872 ----a-w C:\Windows\SQL9_KB948109_ENU\sqldiscoveryapi.dll
+ 2007-02-10 03:29:54 230,256 ----a-w C:\Windows\SQL9_KB948109_ENU\sqlsetupvista.dll
- 2008-03-19 17:23:20 114,688 ----a-w C:\Windows\System32\Adobe\Director\np32dsw.dll
+ 2008-06-17 14:12:42 114,688 ----a-w C:\Windows\System32\Adobe\Director\np32dsw.dll
- 2008-03-19 17:36:22 202,168 ----a-w C:\Windows\System32\Adobe\Director\swdir.dll
+ 2008-06-17 14:23:02 202,168 ----a-w C:\Windows\System32\Adobe\Director\swdir.dll
- 2008-03-19 17:24:02 487,424 ----a-w C:\Windows\System32\Adobe\Shockwave 11\Control.dll
+ 2008-06-17 14:13:22 487,424 ----a-w C:\Windows\System32\Adobe\Shockwave 11\Control.dll
- 2008-03-19 16:46:26 1,798,144 ----a-w C:\Windows\System32\Adobe\Shockwave 11\dirapi.dll
+ 2008-06-17 13:36:00 1,798,144 ----a-w C:\Windows\System32\Adobe\Shockwave 11\dirapi.dll
+ 2008-06-17 14:13:26 9,216 ----a-w C:\Windows\System32\Adobe\Shockwave 11\DYNAPL~1.DLL
- 2008-03-19 17:24:04 9,216 ----a-w C:\Windows\System32\Adobe\Shockwave 11\DynaPlayer.dll
+ 2008-06-17 14:13:26 9,216 ----a-w C:\Windows\System32\Adobe\Shockwave 11\DynaPlayer.dll
- 2008-03-19 16:36:14 754,688 ----a-w C:\Windows\System32\Adobe\Shockwave 11\gi.dll
+ 2008-06-17 13:25:58 697,344 ----a-w C:\Windows\System32\Adobe\Shockwave 11\gi.dll
- 2008-03-19 16:36:16 1,145,896 ----a-w C:\Windows\System32\Adobe\Shockwave 11\gt.exe
+ 2008-06-17 13:26:00 1,145,896 ----a-w C:\Windows\System32\Adobe\Shockwave 11\gt.exe
- 2008-03-19 16:36:14 52,288 ----a-w C:\Windows\System32\Adobe\Shockwave 11\gtapi.dll
+ 2008-06-17 13:25:58 52,288 ----a-w C:\Windows\System32\Adobe\Shockwave 11\gtapi.dll
- 2008-03-19 16:42:42 892,928 ----a-w C:\Windows\System32\Adobe\Shockwave 11\iml32.dll
+ 2008-06-17 13:32:18 892,928 ----a-w C:\Windows\System32\Adobe\Shockwave 11\iml32.dll
- 2008-03-19 17:22:34 249,856 ----a-w C:\Windows\System32\Adobe\Shockwave 11\Plugin.dll
+ 2008-06-17 14:11:56 253,952 ----a-w C:\Windows\System32\Adobe\Shockwave 11\Plugin.dll
- 2008-03-19 17:25:36 442,368 ----a-w C:\Windows\System32\Adobe\Shockwave 11\Proj.dll
+ 2008-06-17 14:15:00 446,464 ----a-w C:\Windows\System32\Adobe\Shockwave 11\Proj.dll
+ 2008-06-17 14:22:46 439,736 ----a-w C:\Windows\System32\Adobe\Shockwave 11\SwHelper_1100458.exe
- 2008-03-19 17:26:20 110,592 ----a-w C:\Windows\System32\Adobe\Shockwave 11\SwInit.exe
+ 2008-06-17 14:15:44 114,688 ----a-w C:\Windows\System32\Adobe\Shockwave 11\SwInit.exe
- 2008-03-19 17:22:22 94,208 ----a-w C:\Windows\System32\Adobe\Shockwave 11\SwMenu.dll
+ 2008-06-17 14:11:44 94,208 ----a-w C:\Windows\System32\Adobe\Shockwave 11\SwMenu.dll
- 2008-03-19 16:36:14 50,808 ----a-w C:\Windows\System32\Adobe\Shockwave 11\SYMCCHECKER.DLL
+ 2008-06-17 13:25:58 50,808 ----a-w C:\Windows\System32\Adobe\Shockwave 11\SYMCCHECKER.DLL
+ 2008-05-15 23:24:43 1,152,888 ----a-w C:\Windows\System32\aswBoot.exe
+ 2007-04-26 12:57:00 16,904 ----a-w C:\Windows\System32\authuitu.dll
+ 2008-05-15 23:12:36 95,608 ----a-w C:\Windows\System32\AvastSS.scr
+ 2008-07-13 14:18:30 209,947 ----a-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\1051\StructuredQuerySchema.bin
- 2008-06-04 09:54:31 16,384 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2008-07-14 18:17:31 32,768 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2008-07-01 20:01:28 32,768 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012008062320080630\index.dat
+ 2008-06-27 18:27:51 32,768 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012008062720080628\index.dat
+ 2008-07-01 20:01:28 32,768 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012008070120080702\index.dat
+ 2008-06-24 20:07:50 78,924 ----a-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat
+ 2008-06-25 11:36:45 4,479,424 ----a-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\A6YYW7YP\WebSecurityGuard_Setup[1].exe
- 2008-06-04 09:54:31 32,768 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2008-07-14 18:17:31 65,536 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2008-06-04 09:54:31 16,384 --sha-w C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2008-07-14 18:17:31 32,768 --sha-w C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2008-06-04 10:02:05 262,144 ----a-w C:\Windows\System32\config\systemprofile\ntuser.dat
+ 2008-07-14 19:59:08 262,144 ----a-w C:\Windows\System32\config\systemprofile\ntuser.dat
- 2008-01-19 07:33:05 139,264 ----a-w C:\Windows\System32\cscript.exe
+ 2008-05-08 21:58:40 135,168 ----a-w C:\Windows\System32\cscript.exe
+ 2008-05-30 12:11:46 1,491,992 ----a-w C:\Windows\System32\D3DCompiler_38.dll
+ 2008-05-30 12:11:46 467,984 ----a-w C:\Windows\System32\d3dx10_38.dll
+ 2008-05-30 12:11:46 3,850,760 ----a-w C:\Windows\System32\D3DX9_38.dll
- 2008-03-31 21:25:46 682,496 ----a-w C:\Windows\System32\DivX.dll
+ 2008-05-30 23:22:46 683,520 ----a-w C:\Windows\System32\DivX.dll
- 2008-03-31 21:25:48 823,296 ----a-w C:\Windows\System32\divx_xx07.dll
+ 2008-05-30 23:22:48 823,296 ----a-w C:\Windows\System32\divx_xx07.dll
- 2008-03-31 21:25:46 831,488 ----a-w C:\Windows\System32\divx_xx0a.dll
+ 2008-05-30 23:22:46 815,104 ----a-w C:\Windows\System32\divx_xx0a.dll
- 2008-03-31 21:25:48 823,296 ----a-w C:\Windows\System32\divx_xx0c.dll
+ 2008-05-30 23:22:48 823,296 ----a-w C:\Windows\System32\divx_xx0c.dll
- 2008-03-31 21:25:46 802,816 ----a-w C:\Windows\System32\divx_xx11.dll
+ 2008-05-30 23:22:48 802,816 ----a-w C:\Windows\System32\divx_xx11.dll
- 2008-03-31 21:25:52 161,096 ----a-w C:\Windows\System32\DivXCodecVersionChecker.exe
+ 2008-05-22 22:19:12 161,096 ----a-w C:\Windows\System32\DivXCodecVersionChecker.exe
- 2005-11-23 03:00:00 778,240 ----a-w C:\Windows\System32\DivXsm.exe
+ 2008-05-22 22:22:22 524,288 ----a-w C:\Windows\System32\DivXsm.exe
- 2008-03-21 20:28:20 12,288 ----a-w C:\Windows\System32\DivXWMPExtType.dll
+ 2008-05-22 22:18:54 12,288 ----a-w C:\Windows\System32\DivXWMPExtType.dll
- 2008-03-21 20:28:54 81,920 ----a-w C:\Windows\System32\dpl100.dll
+ 2008-05-22 22:19:46 81,920 ----a-w C:\Windows\System32\dpl100.dll
- 2008-03-21 20:28:50 294,912 ----a-w C:\Windows\System32\dpu10.dll
+ 2008-05-30 23:22:54 294,912 ----a-w C:\Windows\System32\dpu10.dll
- 2008-03-21 20:28:50 294,912 ----a-w C:\Windows\System32\dpu11.dll
+ 2008-05-30 23:22:54 294,912 ----a-w C:\Windows\System32\dpu11.dll
- 2008-03-21 20:28:52 53,248 ----a-w C:\Windows\System32\dpuGUI10.dll
+ 2008-05-30 23:22:58 53,248 ----a-w C:\Windows\System32\dpuGUI10.dll
- 2008-03-21 20:28:50 593,920 ----a-w C:\Windows\System32\dpuGUI11.dll
+ 2008-05-30 23:22:54 593,920 ----a-w C:\Windows\System32\dpuGUI11.dll
- 2008-03-21 20:28:50 344,064 ----a-w C:\Windows\System32\dpus11.dll
+ 2008-05-30 23:22:54 344,064 ----a-w C:\Windows\System32\dpus11.dll
- 2008-03-21 20:28:50 57,344 ----a-w C:\Windows\System32\dpv11.dll
+ 2008-05-30 23:22:54 57,344 ----a-w C:\Windows\System32\dpv11.dll
+ 2008-05-15 23:16:06 20,560 ----a-w C:\Windows\System32\drivers\aswFsBlk.sys
+ 2008-05-15 23:18:00 50,768 ----a-w C:\Windows\System32\drivers\aswMonFlt.sys
+ 2008-05-15 23:15:29 23,152 ----a-w C:\Windows\System32\drivers\aswRdr.sys
+ 2008-05-15 23:20:32 78,416 ----a-w C:\Windows\System32\drivers\aswSP.sys
+ 2008-05-15 23:14:11 42,912 ----a-w C:\Windows\System32\drivers\aswTdi.sys
+ 2004-10-25 18:02:58 21,664 ----a-w C:\Windows\System32\drivers\Entech.sys
+ 2004-06-22 13:44:50 5,632 ----a-w C:\Windows\System32\drivers\Entech64.sys
+ 1996-04-03 19:33:26 5,248 ----a-w C:\Windows\System32\drivers\giveio.sys
+ 2008-07-05 21:28:12 85,969 ----a-w C:\Windows\System32\drivers\gmer.sys
+ 2008-05-20 09:43:58 37,312 ----a-w C:\Windows\System32\drivers\maplom.sys
+ 2008-05-20 09:43:10 36,288 ----a-w C:\Windows\System32\drivers\maploml.sys
- 2008-01-19 05:55:53 72,192 ----a-w C:\Windows\System32\drivers\pacer.sys
+ 2008-04-05 01:21:42 72,192 ----a-w C:\Windows\System32\drivers\pacer.sys
+ 2001-11-19 17:05:18 3,972 ----a-w C:\Windows\System32\drivers\PciBus.sys
- 2008-01-19 05:55:29 113,664 ----a-w C:\Windows\System32\drivers\rmcast.sys
+ 2008-05-10 01:33:10 113,664 ----a-w C:\Windows\System32\drivers\rmcast.sys
+ 2006-11-02 06:37:21 20,480 ----a-w C:\Windows\System32\drivers\secdrv.sys
+ 2006-07-05 12:39:29 59,256 ----a-w C:\Windows\System32\drivers\sfdrv01.sys
+ 2006-07-05 12:46:06 63,352 ----a-w C:\Windows\System32\drivers\sfdrv01a.sys
+ 2006-06-14 14:56:56 13,680 ----a-w C:\Windows\System32\drivers\sfhlp02.sys
+ 2006-07-10 16:19:58 27,032 ----a-w C:\Windows\System32\drivers\sfsync02.sys
- 2008-01-19 07:43:39 891,448 ----a-w C:\Windows\System32\drivers\tcpip.sys
+ 2008-04-26 08:26:49 891,448 ----a-w C:\Windows\System32\drivers\tcpip.sys
+ 2008-01-19 05:53:38 19,456 ----a-w C:\Windows\System32\DriverStore\FileRepository\bth.inf_03301a54\bthenum.sys
+ 2008-04-29 01:42:23 220,160 ----a-w C:\Windows\System32\DriverStore\FileRepository\bth.inf_03301a54\bthport.sys
+ 2008-04-29 01:42:21 29,184 ----a-w C:\Windows\System32\DriverStore\FileRepository\bth.inf_03301a54\BTHUSB.SYS
+ 2008-04-29 03:54:02 181,760 ----a-w C:\Windows\System32\DriverStore\FileRepository\bth.inf_03301a54\fsquirt.exe
+ 2008-04-29 01:42:12 19,456 ----a-w C:\Windows\System32\DriverStore\FileRepository\bth.inf_c206c850\bthenum.sys
+ 2008-04-29 01:42:12 220,160 ----a-w C:\Windows\System32\DriverStore\FileRepository\bth.inf_c206c850\bthport.sys
+ 2008-04-29 01:42:08 29,184 ----a-w C:\Windows\System32\DriverStore\FileRepository\bth.inf_c206c850\BTHUSB.SYS
+ 2008-04-29 03:50:12 181,760 ----a-w C:\Windows\System32\DriverStore\FileRepository\bth.inf_c206c850\fsquirt.exe
+ 2008-06-15 14:01:39 73,232 ----a-w C:\Windows\System32\DriverStore\FileRepository\inspect.inf_bffe78ef\inspect.sys
- 2008-03-21 20:28:54 196,608 ----a-w C:\Windows\System32\dtu100.dll
+ 2008-05-22 22:19:46 196,608 ----a-w C:\Windows\System32\dtu100.dll
- 2008-01-19 07:34:09 564,736 ----a-w C:\Windows\System32\emdmgmt.dll
+ 2008-05-10 03:35:15 564,736 ----a-w C:\Windows\System32\emdmgmt.dll
- 2008-06-01 12:38:33 371,824 ----a-w C:\Windows\System32\FNTCACHE.DAT
+ 2008-07-08 19:15:09 389,136 ----a-w C:\Windows\System32\FNTCACHE.DAT
+ 2005-08-03 13:16:40 40,960 ----a-r C:\Windows\System32\Futuremark\MSC\atimgpud.dll
+ 2006-04-07 17:45:54 35,840 ----a-w C:\Windows\System32\Futuremark\MSC\Direcpll.dll
+ 1996-04-03 19:33:26 5,248 ----a-w C:\Windows\System32\giveio.sys
- 2008-01-19 07:34:37 1,671,168 ----a-w C:\Windows\System32\chsbrkr.dll
+ 2008-05-27 05:17:13 1,671,680 ----a-w C:\Windows\System32\chsbrkr.dll
- 2008-01-19 07:34:40 6,103,040 ----a-w C:\Windows\System32\chtbrkr.dll
+ 2008-05-27 05:17:16 6,103,040 ----a-w C:\Windows\System32\chtbrkr.dll
+ 2008-03-24 23:28:39 135,168 ----a-w C:\Windows\System32\java.exe
+ 2008-03-24 23:28:43 135,168 ----a-w C:\Windows\System32\javaw.exe
+ 2008-03-25 00:37:01 139,264 ----a-w C:\Windows\System32\javaws.exe
- 2008-01-19 07:34:35 512,000 ----a-w C:\Windows\System32\jscript.dll
+ 2008-05-08 21:59:28 512,000 ----a-w C:\Windows\System32\jscript.dll
- 2008-02-22 04:58:23 28,160 ----a-w C:\Windows\System32\jsproxy.dll
+ 2008-04-25 04:35:13 28,160 ----a-w C:\Windows\System32\jsproxy.dll
- 2008-01-19 07:34:42 42,496 ----a-w C:\Windows\System32\korwbrkr.dll
+ 2008-05-27 05:17:16 143,872 ----a-w C:\Windows\System32\korwbrkr.dll
+ 2008-03-20 16:06:36 1,480,232 ----a-w C:\Windows\System32\LegitCheckControl.DLL
- 2008-03-21 20:30:00 1,044,480 ----a-w C:\Windows\System32\libdivx.dll
+ 2008-05-22 22:20:42 1,044,480 ----a-w C:\Windows\System32\libdivx.dll
- 2007-11-21 00:52:38 2,884,992 ----a-w C:\Windows\System32\Macromed\Flash\NPSWF32.dll
+ 2008-03-25 03:21:18 2,889,088 ----a-w C:\Windows\System32\Macromed\Flash\NPSWF32.dll
- 2007-11-21 00:52:40 218,496 ----a-w C:\Windows\System32\Macromed\Flash\NPSWF32_FlashUtil.exe
+ 2008-03-25 03:21:20 218,496 ----a-w C:\Windows\System32\Macromed\Flash\NPSWF32_FlashUtil.exe
- 2008-05-14 10:56:18 74,649 ----a-w C:\Windows\System32\Macromed\Flash\uninstall_activeX.exe
+ 2008-06-25 11:57:32 74,649 ----a-w C:\Windows\System32\Macromed\Flash\uninstall_activeX.exe
- 2008-05-16 20:18:04 70,264 ----a-w C:\Windows\System32\Macromed\Flash\uninstall_plugin.exe
+ 2008-07-04 09:30:10 70,264 ----a-w C:\Windows\System32\Macromed\Flash\uninstall_plugin.exe
+ 2007-09-27 13:22:44 261,632 ----a-w C:\Windows\System32\mcdvd_32.dll
+ 2003-03-18 20:20:00 1,060,864 ----a-w C:\Windows\System32\MFC71.dll
- 2008-02-22 05:01:41 64,512 ----a-w C:\Windows\System32\migration\WininetPlugin.dll
+ 2008-04-25 04:35:24 64,512 ----a-w C:\Windows\System32\migration\WininetPlugin.dll
- 2008-01-19 07:34:49 35,328 ----a-w C:\Windows\System32\mimefilt.dll
+ 2008-05-27 05:18:32 40,448 ----a-w C:\Windows\System32\mimefilt.dll
- 2002-11-18 13:02:58 40,960 ----a-w C:\Windows\System32\MMAVILNG.exe
+ 2002-11-18 15:02:56 40,960 ----a-w C:\Windows\System32\MMAVILNG.exe
- 2002-11-15 10:11:28 77,824 ----a-w C:\Windows\System32\MMSwitch.dll
+ 2002-11-15 12:11:26 77,824 ----a-w C:\Windows\System32\MMSwitch.dll
+ 2007-09-27 13:22:44 413,760 ----a-w C:\Windows\System32\mpg4c32.dll
- 2008-05-09 21:35:04 16,863,864 ----a-w C:\Windows\System32\mrt.exe
+ 2008-06-25 16:15:46 17,972,344 ----a-w C:\Windows\System32\mrt.exe
- 2008-02-22 04:59:30 3,578,368 ----a-w C:\Windows\System32\mshtml.dll
+ 2008-04-25 04:35:14 3,578,368 ----a-w C:\Windows\System32\mshtml.dll
- 2008-01-19 07:35:12 23,552 ----a-w C:\Windows\System32\msscb.dll
+ 2008-05-27 05:17:42 34,816 ----a-w C:\Windows\System32\msscb.dll
- 2008-01-19 07:35:12 51,200 ----a-w C:\Windows\System32\msscntrs.dll
+ 2008-05-27 05:17:25 60,416 ----a-w C:\Windows\System32\msscntrs.dll
+ 2008-05-27 05:17:36 11,776 ----a-w C:\Windows\System32\msshooks.dll
- 2008-01-19 07:35:13 248,832 ----a-w C:\Windows\System32\msshsq.dll
+ 2008-05-27 05:18:32 231,936 ----a-w C:\Windows\System32\msshsq.dll
- 2008-01-19 07:35:13 98,304 ----a-w C:\Windows\System32\mssitlb.dll
+ 2008-05-27 05:17:25 87,552 ----a-w C:\Windows\System32\mssitlb.dll
- 2008-01-19 07:35:13 333,824 ----a-w C:\Windows\System32\mssph.dll
+ 2008-05-27 05:18:25 350,208 ----a-w C:\Windows\System32\mssph.dll
- 2008-01-19 07:35:13 167,936 ----a-w C:\Windows\System32\mssphtb.dll
+ 2008-05-27 05:18:55 203,776 ----a-w C:\Windows\System32\mssphtb.dll
- 2008-01-19 07:35:13 32,256 ----a-w C:\Windows\System32\mssprxy.dll
+ 2008-05-27 05:17:26 32,768 ----a-w C:\Windows\System32\mssprxy.dll
- 2008-01-19 07:36:08 1,400,832 ----a-w C:\Windows\System32\mssrch.dll
+ 2008-05-27 05:21:24 1,418,240 ----a-w C:\Windows\System32\mssrch.dll
- 2008-01-19 07:35:13 52,224 ----a-w C:\Windows\System32\msstrc.dll
+ 2008-05-27 05:18:40 44,032 ----a-w C:\Windows\System32\msstrc.dll
- 2008-01-19 07:35:13 1,696,768 ----a-w C:\Windows\System32\mssvp.dll
+ 2008-05-27 05:18:56 670,208 ----a-w C:\Windows\System32\mssvp.dll
- 2008-02-22 04:59:51 671,232 ----a-w C:\Windows\System32\mstime.dll
+ 2008-04-25 04:35:16 671,232 ----a-w C:\Windows\System32\mstime.dll
- 2008-01-19 07:35:38 122,368 ----a-w C:\Windows\System32\nlhtml.dll
+ 2008-05-27 05:18:30 136,704 ----a-w C:\Windows\System32\nlhtml.dll
- 2008-01-19 07:43:48 3,600,440 ----a-w C:\Windows\System32\ntkrnlpa.exe
+ 2008-04-26 08:25:53 3,600,952 ----a-w C:\Windows\System32\ntkrnlpa.exe
- 2008-01-19 07:43:47 3,548,728 ----a-w C:\Windows\System32\ntoskrnl.exe
+ 2008-04-26 08:25:54 3,549,240 ----a-w C:\Windows\System32\ntoskrnl.exe
- 2008-01-19 07:36:00 194,560 ----a-w C:\Windows\System32\offfilt.dll
+ 2008-05-27 05:17:23 194,560 ----a-w C:\Windows\System32\offfilt.dll
- 2006-11-02 09:46:12 15,360 ----a-w C:\Windows\System32\pacerprf.dll
+ 2008-04-05 03:34:31 15,360 ----a-w C:\Windows\System32\pacerprf.dll
- 2008-06-04 09:59:09 118,162 ----a-w C:\Windows\System32\perfc009.dat
+ 2008-07-14 14:15:59 118,162 ----a-w C:\Windows\System32\perfc009.dat
- 2008-06-04 09:59:09 7,346 ----a-w C:\Windows\System32\perfc01B.dat
+ 2008-07-14 14:15:59 24,868 ----a-w C:\Windows\System32\perfc01B.dat
- 2008-06-04 09:59:09 633,276 ----a-w C:\Windows\System32\perfh009.dat
+ 2008-07-14 14:15:59 633,276 ----a-w C:\Windows\System32\perfh009.dat
- 2008-06-04 09:59:09 27,924 ----a-w C:\Windows\System32\perfh01B.dat
+ 2008-07-14 14:15:59 74,632 ----a-w C:\Windows\System32\perfh01B.dat
+ 2008-06-25 16:49:31 278,528 ----a-w C:\Windows\System32\pncrt.dll
+ 2008-06-25 16:49:34 6,656 ----a-w C:\Windows\System32\pndx5016.dll
+ 2008-06-25 16:49:34 5,632 ----a-w C:\Windows\System32\pndx5032.dll
- 2008-01-19 07:36:11 65,536 ----a-w C:\Windows\System32\propdefs.dll
+ 2008-05-27 05:18:06 71,680 ----a-w C:\Windows\System32\propdefs.dll
- 2008-01-19 07:36:11 750,080 ----a-w C:\Windows\System32\propsys.dll
+ 2008-05-27 05:17:46 754,176 ----a-w C:\Windows\System32\propsys.dll
- 2008-03-21 20:30:08 3,596,288 ----a-w C:\Windows\System32\qt-dx331.dll
+ 2008-05-22 22:22:18 3,596,288 ----a-w C:\Windows\System32\qt-dx331.dll
- 2008-01-19 07:36:14 1,314,816 ----a-w C:\Windows\System32\quartz.dll
+ 2008-04-26 08:08:15 1,314,816 ----a-w C:\Windows\System32\quartz.dll
- 2008-01-19 07:36:15 889,344 ----a-w C:\Windows\System32\RacEngn.dll
+ 2008-05-10 03:35:20 885,248 ----a-w C:\Windows\System32\RacEngn.dll
+ 2008-06-25 16:49:42 185,944 ----a-w C:\Windows\System32\rmoc3260.dll
- 2008-01-19 07:36:17 785,408 ----a-w C:\Windows\System32\rpcrt4.dll
+ 2008-04-12 03:32:11 784,896 ----a-w C:\Windows\System32\rpcrt4.dll
- 2008-01-19 07:36:17 26,624 ----a-w C:\Windows\System32\rtffilt.dll
+ 2008-05-27 05:18:30 38,400 ----a-w C:\Windows\System32\rtffilt.dll
- 2008-01-19 07:36:19 180,224 ----a-w C:\Windows\System32\scrobj.dll
+ 2008-05-08 21:59:32 180,224 ----a-w C:\Windows\System32\scrobj.dll
- 2008-01-19 07:36:19 172,032 ----a-w C:\Windows\System32\scrrun.dll
+ 2008-05-08 21:59:32 172,032 ----a-w C:\Windows\System32\scrrun.dll
- 2008-01-19 07:33:28 76,800 ----a-w C:\Windows\System32\SearchFilterHost.exe
+ 2008-05-27 05:17:55 87,552 ----a-w C:\Windows\System32\SearchFilterHost.exe
- 2008-01-19 07:33:28 302,080 ----a-w C:\Windows\System32\SearchIndexer.exe
+ 2008-05-27 05:18:43 439,808 ----a-w C:\Windows\System32\SearchIndexer.exe
- 2008-01-19 07:33:28 179,200 ----a-w C:\Windows\System32\SearchProtocolHost.exe
+ 2008-05-27 05:18:16 184,832 ----a-w C:\Windows\System32\SearchProtocolHost.exe
- 2008-01-19 07:36:10 11,580,416 ----a-w C:\Windows\System32\shell32.dll
+ 2008-04-24 04:58:20 11,580,416 ----a-w C:\Windows\System32\shell32.dll
- 2008-05-28 18:49:32 6,029,312 ----a-w C:\Windows\System32\SMI\Store\Machine\SCHEMA.DAT
+ 2008-07-04 11:42:13 6,291,456 ----a-w C:\Windows\System32\SMI\Store\Machine\schema.dat
+ 2006-09-24 13:28:46 5,248 ----a-w C:\Windows\System32\speedfan.sys
- 2008-01-19 07:36:35 258,048 ----a-w C:\Windows\System32\srchadmin.dll
+ 2008-05-27 05:17:28 301,568 ----a-w C:\Windows\System32\srchadmin.dll
- 2008-03-21 20:30:00 200,704 ----a-w C:\Windows\System32\ssldivx.dll
+ 2008-05-22 22:20:42 200,704 ----a-w C:\Windows\System32\ssldivx.dll
- 2008-01-19 03:17:42 100,043 ----a-w C:\Windows\System32\StructuredQuerySchema.bin
+ 2008-05-27 04:59:39 106,605 ----a-w C:\Windows\System32\StructuredQuerySchema.bin
- 2006-11-02 06:29:53 18,271 ----a-w C:\Windows\System32\StructuredQuerySchemaTrivial.bin
+ 2008-05-27 04:59:40 18,904 ----a-w C:\Windows\System32\StructuredQuerySchemaTrivial.bin
+ 2008-01-19 07:33:32 163,840 ----a-w C:\Windows\System32\T.COM
- 2006-11-02 09:46:13 313,344 ----a-w C:\Windows\System32\thawbrkr.dll
+ 2008-05-27 05:17:16 313,344 ----a-w C:\Windows\System32\thawbrkr.dll
- 2008-01-19 07:36:42 1,505,792 ----a-w C:\Windows\System32\tquery.dll
+ 2008-05-27 05:21:07 1,582,592 ----a-w C:\Windows\System32\tquery.dll
+ 2000-02-15 23:00:00 16,384 ----a-w C:\Windows\System32\UniClear.exe
- 2008-02-22 05:01:33 1,166,336 ----a-w C:\Windows\System32\urlmon.dll
+ 2008-04-25 04:35:19 1,166,336 ----a-w C:\Windows\System32\urlmon.dll
+ 2007-05-16 06:41:18 29,704 ----a-w C:\Windows\System32\uxtuneup.dll
- 2008-01-19 07:36:47 430,080 ----a-w C:\Windows\System32\vbscript.dll
+ 2008-05-08 21:59:33 430,080 ----a-w C:\Windows\System32\vbscript.dll
- 2008-06-04 09:56:39 13,968 ----a-w C:\Windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-73720288-2714466538-2483946370-1004_UserData.bin
+ 2008-07-14 14:11:23 19,164 ----a-w C:\Windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-73720288-2714466538-2483946370-1004_UserData.bin
- 2008-06-04 09:56:38 57,464 ----a-w C:\Windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
+ 2008-07-14 14:11:23 70,700 ----a-w C:\Windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
- 2008-06-04 09:53:42 1,514 ----a-w C:\Windows\System32\WDI\ERCQueuedResolutions.dat
+ 2008-07-13 14:05:21 1,824 ----a-w C:\Windows\System32\WDI\ERCQueuedResolutions.dat
- 2008-06-04 09:56:36 44,340 ----a-w C:\Windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2008-07-14 14:11:21 58,986 ----a-w C:\Windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
- 2008-02-22 05:01:41 826,880 ----a-w C:\Windows\System32\wininet.dll
+ 2008-04-25 04:35:23 826,880 ----a-w C:\Windows\System32\wininet.dll
- 2008-01-19 07:33:40 155,648 ----a-w C:\Windows\System32\wscript.exe
+ 2008-05-08 21:59:26 155,648 ----a-w C:\Windows\System32\wscript.exe
- 2008-01-19 07:37:11 27,136 ----a-w C:\Windows\System32\wsepno.dll
+ 2008-05-27 05:18:35 29,184 ----a-w C:\Windows\System32\wsepno.dll
- 2008-01-19 07:37:11 90,112 ----a-w C:\Windows\System32\wshext.dll
+ 2008-05-08 21:59:35 90,112 ----a-w C:\Windows\System32\wshext.dll
+ 2008-05-30 12:17:00 25,608 ----a-w C:\Windows\System32\X3DAudio1_4.dll
+ 2008-05-30 12:18:52 238,088 ----a-w C:\Windows\System32\xactengine3_1.dll
+ 2008-05-30 12:17:30 65,032 ----a-w C:\Windows\System32\XAPOFX1_0.dll
+ 2008-05-30 12:19:18 507,400 ----a-w C:\Windows\System32\XAudio2_1.dll
- 2008-01-19 07:37:12 110,592 ----a-w C:\Windows\System32\xmlfilter.dll
+ 2008-05-27 05:18:32 56,320 ----a-w C:\Windows\System32\xmlfilter.dll
- 2005-12-30 18:10:30 761,856 ----a-w C:\Windows\System32\xvidcore.dll
+ 2007-09-27 13:22:44 524,288 ----a-w C:\Windows\System32\xvidcore.dll
+ 2007-09-27 13:22:44 139,264 ----a-w C:\Windows\System32\xvidvfw.dll
+ 2007-04-19 07:35:40 240,368 ----a-w C:\Windows\UNBOC.EXE
- 2008-05-28 14:16:29 94,566,284 ----a-w C:\Windows\winsxs\ManifestCache\6.0.6001.18000_001c50b5_blobs.bin
+ 2008-07-04 10:38:38 7,303,700 ----a-w C:\Windows\winsxs\ManifestCache\6.0.6001.18000_001c50b5_blobs.bin
+ 2008-04-29 01:42:12 19,456 ----a-w C:\Windows\winsxs\x86_bth.inf_31bf3856ad364e35_6.0.6000.16682_none_700a06c9bea9b8da\bthenum.sys
+ 2008-04-29 01:42:12 220,160 ----a-w C:\Windows\winsxs\x86_bth.inf_31bf3856ad364e35_6.0.6000.16682_none_700a06c9bea9b8da\bthport.sys
+ 2008-04-29 01:42:08 29,184 ----a-w C:\Windows\winsxs\x86_bth.inf_31bf3856ad364e35_6.0.6000.16682_none_700a06c9bea9b8da\BTHUSB.SYS
+ 2008-04-29 03:50:12 181,760 ----a-w C:\Windows\winsxs\x86_bth.inf_31bf3856ad364e35_6.0.6000.16682_none_700a06c9bea9b8da\fsquirt.exe
+ 2008-04-29 01:35:24 19,456 ----a-w C:\Windows\winsxs\x86_bth.inf_31bf3856ad364e35_6.0.6000.20824_none_70d68596d794e0d3\bthenum.sys
+ 2008-04-29 01:35:25 220,160 ----a-w C:\Windows\winsxs\x86_bth.inf_31bf3856ad364e35_6.0.6000.20824_none_70d68596d794e0d3\bthport.sys
+ 2008-04-29 01:35:23 29,184 ----a-w C:\Windows\winsxs\x86_bth.inf_31bf3856ad364e35_6.0.6000.20824_none_70d68596d794e0d3\BTHUSB.SYS
+ 2008-04-29 01:35:24 181,760 ----a-w C:\Windows\winsxs\x86_bth.inf_31bf3856ad364e35_6.0.6000.20824_none_70d68596d794e0d3\fsquirt.exe
+ 2008-01-19 05:53:38 19,456 ----a-w C:\Windows\winsxs\x86_bth.inf_31bf3856ad364e35_6.0.6001.18064_none_7207e5dbbbbe4497\bthenum.sys
+ 2008-04-29 01:42:23 220,160 ----a-w C:\Windows\winsxs\x86_bth.inf_31bf3856ad364e35_6.0.6001.18064_none_7207e5dbbbbe4497\bthport.sys
+ 2008-04-29 01:42:21 29,184 ----a-w C:\Windows\winsxs\x86_bth.inf_31bf3856ad364e35_6.0.6001.18064_none_7207e5dbbbbe4497\BTHUSB.SYS
+ 2008-04-29 03:54:02 181,760 ----a-w C:\Windows\winsxs\x86_bth.inf_31bf3856ad364e35_6.0.6001.18064_none_7207e5dbbbbe4497\fsquirt.exe
+ 2008-04-29 01:43:50 19,456 ----a-w C:\Windows\winsxs\x86_bth.inf_31bf3856ad364e35_6.0.6001.22168_none_729583ced4d849bd\bthenum.sys
+ 2008-04-29 01:43:50 220,160 ----a-w C:\Windows\winsxs\x86_bth.inf_31bf3856ad364e35_6.0.6001.22168_none_729583ced4d849bd\bthport.sys
+ 2008-04-29 01:43:48 29,184 ----a-w C:\Windows\winsxs\x86_bth.inf_31bf3856ad364e35_6.0.6001.22168_none_729583ced4d849bd\BTHUSB.SYS
+ 2008-04-29 01:43:51 181,760 ----a-w C:\Windows\winsxs\x86_bth.inf_31bf3856ad364e35_6.0.6001.22168_none_729583ced4d849bd\fsquirt.exe
+ 2008-05-27 05:17:28 301,568 ----a-w C:\Windows\winsxs\x86_desktop_shell-search-srchadmin_31bf3856ad364e35_7.0.6001.16503_none_13fcab3737a334c2\srchadmin.dll
+ 2008-04-25 04:23:05 124,928 ----a-w C:\Windows\winsxs\x86_microsoft-windows-advpack_31bf3856ad364e35_6.0.6000.16681_none_a98fa7bdf5e9f5de\advpack.dll
+ 2008-04-25 04:06:14 124,928 ----a-w C:\Windows\winsxs\x86_microsoft-windows-advpack_31bf3856ad364e35_6.0.6000.20823_none_aa5c268b0ed51dd7\advpack.dll
+ 2008-05-27 05:18:30 136,704 ----a-w C:\Windows\winsxs\x86_microsoft-windows-content-filter-html_31bf3856ad364e35_7.0.6001.16503_none_13ff1de93d266b97\nlhtml.dll
+ 2008-05-27 05:18:32 56,320 ----a-w C:\Windows\winsxs\x86_microsoft-windows-content-filter-html_31bf3856ad364e35_7.0.6001.16503_none_13ff1de93d266b97\xmlfilter.dll
+ 2008-05-27 05:18:32 40,448 ----a-w C:\Windows\winsxs\x86_microsoft-windows-content-filter-mime_31bf3856ad364e35_7.0.6001.16503_none_10a358dd3f57c0de\mimefilt.dll
+ 2008-05-27 05:17:23 194,560 ----a-w C:\Windows\winsxs\x86_microsoft-windows-content-filter-office_31bf3856ad364e35_7.0.6001.16503_none_fab3f42bbfadf408\offfilt.dll
+ 2008-05-27 05:18:30 38,400 ----a-w C:\Windows\winsxs\x86_microsoft-windows-content-filter-rtf_31bf3856ad364e35_7.0.6001.16503_none_485964bf76e0570a\rtffilt.dll
+ 2008-04-26 08:02:05 1,327,104 ----a-w C:\Windows\winsxs\x86_microsoft-windows-directshow-core_31bf3856ad364e35_6.0.6000.16681_none_a4347a24f0ff937a\quartz.dll
+ 2008-04-26 07:41:59 1,327,616 ----a-w C:\Windows\winsxs\x86_microsoft-windows-directshow-core_31bf3856ad364e35_6.0.6000.20823_none_a500f8f209eabb73\quartz.dll
+ 2008-04-26 08:08:15 1,314,816 ----a-w C:\Windows\winsxs\x86_microsoft-windows-directshow-core_31bf3856ad364e35_6.0.6001.18063_none_a6325936ee141f37\quartz.dll
+ 2008-04-26 07:57:58 1,314,816 ----a-w C:\Windows\winsxs\x86_microsoft-windows-directshow-core_31bf3856ad364e35_6.0.6001.22167_none_a6bff72a072e245d\quartz.dll
+ 2008-05-10 03:35:15 564,736 ----a-w C:\Windows\winsxs\x86_microsoft-windows-e..emorydevicesservice_31bf3856ad364e35_6.0.6001.18069_none_9e540f60f6e2ecf1\emdmgmt.dll
+ 2008-05-10 03:17:36 564,736 ----a-w C:\Windows\winsxs\x86_microsoft-windows-e..emorydevicesservice_31bf3856ad364e35_6.0.6001.22176_none_9ecfdb62100b5ca7\emdmgmt.dll
+ 2008-04-25 04:23:10 44,544 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..ablenetworkgraphics_31bf3856ad364e35_6.0.6000.16681_none_eb8ab16d1682dbdd\pngfilt.dll
+ 2008-04-25 04:09:24 44,544 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..ablenetworkgraphics_31bf3856ad364e35_6.0.6000.20823_none_ec57303a2f6e03d6\pngfilt.dll
+ 2008-04-25 04:23:11 1,159,680 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6000.16681_none_b2a75a1fd9e35341\urlmon.dll
+ 2008-04-25 04:09:51 1,162,752 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6000.20823_none_b373d8ecf2ce7b3a\urlmon.dll
+ 2008-04-25 04:35:19 1,166,336 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6001.18063_none_b4a53931d6f7defe\urlmon.dll
+ 2008-04-25 04:21:54 1,166,336 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6001.22167_none_b532d724f011e424\urlmon.dll
+ 2008-04-25 04:23:09 671,232 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6000.16681_none_de89e8e87f8c12b0\mstime.dll
+ 2008-04-25 04:08:10 671,232 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6000.20823_none_df5667b598773aa9\mstime.dll
+ 2008-04-25 04:35:16 671,232 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6001.18063_none_e087c7fa7ca09e6d\mstime.dll
+ 2008-04-25 04:20:09 671,232 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6001.22167_none_e11565ed95baa393\mstime.dll
+ 2008-04-25 04:23:06 27,648 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16681_none_ffad35c1a4ec79d4\jsproxy.dll
+ 2008-04-25 04:23:11 826,368 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16681_none_ffad35c1a4ec79d4\wininet.dll
+ 2008-04-25 04:23:11 64,512 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16681_none_ffad35c1a4ec79d4\WininetPlugin.dll
+ 2008-04-25 04:07:19 27,648 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.20823_none_0079b48ebdd7a1cd\jsproxy.dll
+ 2008-04-25 04:09:57 827,392 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.20823_none_0079b48ebdd7a1cd\wininet.dll
+ 2008-04-25 04:09:57 64,512 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.20823_none_0079b48ebdd7a1cd\WininetPlugin.dll
+ 2008-04-25 04:35:13 28,160 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.18063_none_01ab14d3a2010591\jsproxy.dll
+ 2008-04-25 04:35:23 826,880 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.18063_none_01ab14d3a2010591\wininet.dll
+ 2008-04-25 04:35:24 64,512 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.18063_none_01ab14d3a2010591\WininetPlugin.dll
+ 2008-04-25 04:19:00 28,160 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.22167_none_0238b2c6bb1b0ab7\jsproxy.dll
+ 2008-04-25 04:22:01 826,880 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.22167_none_0238b2c6bb1b0ab7\wininet.dll
+ 2008-04-25 04:22:01 64,512 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.22167_none_0238b2c6bb1b0ab7\WininetPlugin.dll
+ 2008-03-26 21:06:14 2,455,488 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.16681_none_f956589b6ed7f427\ieapfltr.dat
+ 2008-04-25 04:23:06 383,488 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.16681_none_f956589b6ed7f427\ieapfltr.dll
+ 2008-03-26 21:06:14 2,455,488 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.20823_none_fa22d76887c31c20\ieapfltr.dat
+ 2008-04-25 04:07:00 383,488 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.20823_none_fa22d76887c31c20\ieapfltr.dll
+ 2008-04-25 04:23:06 347,136 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.16681_none_958a915384bd7a55\dxtmsft.dll
+ 2008-04-25 04:23:06 214,528 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.16681_none_958a915384bd7a55\dxtrans.dll
+ 2008-04-25 04:06:44 347,136 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.20823_none_965710209da8a24e\dxtmsft.dll
+ 2008-04-25 04:06:44 214,528 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.20823_none_965710209da8a24e\dxtrans.dll
+ 2008-04-25 04:23:07 478,208 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-htmlediting_31bf3856ad364e35_6.0.6000.16681_none_45ed2bab467e2ce2\mshtmled.dll
+ 2008-04-25 04:07:54 478,208 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-htmlediting_31bf3856ad364e35_6.0.6000.20823_none_46b9aa785f6954db\mshtmled.dll
+ 2008-04-25 04:23:07 3,591,680 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6000.16681_none_110754e02542e30a\mshtml.dll
+ 2008-04-25 04:07:54 3,593,728 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6000.20823_none_11d3d3ad3e2e0b03\mshtml.dll
+ 2008-04-25 04:35:14 3,578,368 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6001.18063_none_130533f222576ec7\mshtml.dll
+ 2008-04-25 04:19:50 3,578,368 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6001.22167_none_1392d1e53b7173ed\mshtml.dll
+ 2008-04-25 04:23:06 63,488 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-infocard_31bf3856ad364e35_6.0.6000.16681_none_585fc1aa67576f13\icardie.dll
+ 2008-04-25 04:06:59 63,488 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-infocard_31bf3856ad364e35_6.0.6000.20823_none_592c40778042970c\icardie.dll
+ 2008-04-25 04:22:36 26,624 --
|