Obsah fóra
PravidláRegistrovaťPrihlásenie




Odpovedať na tému [ Príspevkov: 14 ] 
AutorSpráva
Offline

Užívateľ
Užívateľ
Hijack log-pls

Registrovaný: 06.07.08
Prihlásený: 13.01.24
Príspevky: 2369
Témy: 134
Príspevok NapísalOffline : 14.07.2008 14:19

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:17:39, on 14. 7. 2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\SYSTEM32\taskeng.exe
C:\Windows\System32\VTTimer.exe
C:\Windows\System32\VTTrayp.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Mozilla Firefox 3 Beta 5\firefox.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Podpora odkazu pre aplikáciu Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O2 - BHO: Pomocník pri prihlasovaní v sieti Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: PicLens plug-in for Internet Explorer - {EAEE5C74-6D0D-4aca-9232-0DA4A7B866BA} - C:\Program Files\PicLensIE\PicLens.dll
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [avast!] "C:\Program Files\Alwil Software\Avast4\ashDisp.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra button: Pridať do blogu - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Pridať do blogu v programe Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Launch PicLens - {3437D640-C91A-458f-89F5-B9095EA4C28B} - C:\Program Files\PicLensIE\PicLens.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\Spybot - Search & Destroy\SDHelper.dll
O13 - Gopher Prefix:
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resourc ... oscan8.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O16 - DPF: {E8F628B5-259A-4734-97EE-BA914D7BE941} (Driver Agent ActiveX Control) - http://driveragent.com/files/driveragent.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{A92DE837-C374-436F-B578-75D040C60CE0}: NameServer = 195.146.128.62 195.146.132.59
O17 - HKLM\System\CS1\Services\Tcpip\..\{A92DE837-C374-436F-B578-75D040C60CE0}: NameServer = 195.146.128.62 195.146.132.59
O17 - HKLM\System\CS2\Services\Tcpip\..\{A92DE837-C374-436F-B578-75D040C60CE0}: NameServer = 195.146.128.62 195.146.132.59
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Správca pre program Google Desktop 5.7.802.22438 (GoogleDesktopManager-022208-143751) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe

--
End of file - 6349 bytes

Stale mi vyhadzuje A-squared a Spyboot daku haved....aj ked zmazem tak pri dalsom scane najde dalsie...


Offline

Skúsený užívateľ
Skúsený užívateľ
Obrázok užívateľa

Registrovaný: 12.06.08
Prihlásený: 16.09.10
Príspevky: 440
Témy: 4
Príspevok NapísalOffline : 14.07.2008 15:16

Ahoj,

nic nevidim, co presne hlasia?


Offline

Užívateľ
Užívateľ
Hijack log-pls

Registrovaný: 06.07.08
Prihlásený: 13.01.24
Príspevky: 2369
Témy: 134
Príspevok Napísal autor témyOffline : 14.07.2008 17:09

ze nasli malware,spyware,adware.......dam zmazat a pri dalsej kontrole zas


Offline

Čestný člen
Čestný člen
Hijack log-pls

Registrovaný: 10.11.05
Príspevky: 1342
Témy: 67
Bydlisko: Banská Byst...
Príspevok NapísalOffline : 14.07.2008 17:23

nemas zapnuty Ad-Watch alebo nieco podobne? Ten nedovoli prepisat niektore zmeny.







_________________
Bezpodpisoid fórumový
Offline

Užívateľ
Užívateľ
Hijack log-pls

Registrovaný: 06.07.08
Prihlásený: 13.01.24
Príspevky: 2369
Témy: 134
Príspevok Napísal autor témyOffline : 14.07.2008 21:17

nemam...jedine avast


Offline

Skúsený užívateľ
Skúsený užívateľ
Obrázok užívateľa

Registrovaný: 12.06.08
Prihlásený: 16.09.10
Príspevky: 440
Témy: 4
Príspevok NapísalOffline : 14.07.2008 22:07

Posli mi na mail log zo SysInspectoru.


Offline

Užívateľ
Užívateľ
Hijack log-pls

Registrovaný: 06.07.08
Prihlásený: 13.01.24
Príspevky: 2369
Témy: 134
Príspevok Napísal autor témyOffline : 14.07.2008 22:13

a ktore to tam je ten sys inspector?lebo je ich tam viac a nevadi ked bude spusteny aj iny AV?


Offline

Užívateľ
Užívateľ
Hijack log-pls

Registrovaný: 06.07.08
Prihlásený: 13.01.24
Príspevky: 2369
Témy: 134
Príspevok Napísal autor témyOffline : 14.07.2008 22:50

No a tu je este combofix:
ComboFix 08-07-14.2 - martin 2008-07-14 21:59:15.4 - NTFSx86
Microsoft® Windows Vista™ Home Basic 6.0.6001.1.1250.1.1051.18.246 [GMT 2:00]
Running from: C:\Users\martin\Downloads\ComboFix.exe
* Created a new restore point
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Windows\regedit.com
C:\Windows\system32\taskmgr.com

.
((((((((((((((((((((((((( Files Created from 2008-06-14 to 2008-07-14 )))))))))))))))))))))))))))))))
.

No new files created in this timespan

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-07-14 19:59 1,110,016 ----a-w C:\Users\Martin Č\NTUSER.DAT
2008-07-14 19:59 1,110,016 ----a-w C:\Users\Martin Č\NTUSER.DAT
2008-07-14 19:59 --------- d-----w C:\Users\martin\AppData\Roaming\uTorrent
2008-07-14 16:13 --------- d-----w C:\Program Files\Mozilla Firefox 3 Beta 5
2008-07-14 15:26 --------- d-----w C:\Users\martin\AppData\Roaming\skypePM
2008-07-14 15:26 --------- d-----w C:\Users\martin\AppData\Roaming\Skype
2008-07-14 12:03 --------- d-----w C:\Users\martin\AppData\Roaming\Shareaza
2008-07-14 11:39 --------- d-----w C:\Program Files\a-squared Free
2008-07-13 17:53 --------- d-----w C:\Program Files\Ubisoft
2008-07-13 17:05 --------- d-----w C:\Program Files\SlySoft
2008-07-13 13:24 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-07-13 13:07 --------- d-----w C:\ProgramData\Spybot - Search & Destroy
2008-07-13 12:24 --------- d-----w C:\Program Files\Wolfenstein - Enemy Territory
2008-07-13 12:10 --------- d-----w C:\Users\martin\AppData\Roaming\Hamachi
2008-07-13 11:50 25,280 ----a-w C:\Windows\system32\drivers\hamachi.sys
2008-07-11 16:45 --------- d-----w C:\Program Files\CCleaner
2008-07-08 19:13 --------- d-----w C:\Program Files\Windows Mail
2008-07-08 19:10 --------- d-----w C:\ProgramData\Microsoft Help
2008-07-08 19:08 --------- d-----w C:\Program Files\Microsoft SQL Server
2008-07-08 18:53 --------- d-----w C:\Users\martin\AppData\Roaming\AVS4YOU
2008-07-06 17:11 --------- d---a-w C:\ProgramData\TEMP
2008-07-06 09:43 --------- d-----w C:\Program Files\7-Zip
2008-07-05 18:00 --------- d-----w C:\Users\martin\AppData\Roaming\MxBoost
2008-07-05 10:05 --------- d-----w C:\Program Files\Webteh
2008-07-05 09:40 --------- d-----w C:\Program Files\OpenOffice.org 2.4
2008-07-05 09:11 --------- d-----w C:\Program Files\Mozilla Sunbird
2008-07-05 08:33 --------- d-----w C:\Users\martin\AppData\Roaming\OpenOffice.org2
2008-07-05 07:59 --------- d-----w C:\Program Files\ICQ6
2008-07-04 10:42 86,016 ----a-w C:\Windows\System32\OpenAL32.dll
2008-07-04 10:42 262,144 ----a-w C:\Windows\System32\wrap_oal.dll
2008-07-04 10:28 --------- d-----w C:\Program Files\Futuremark
2008-07-03 19:54 --------- d-----w C:\Program Files\Spybot - Search & Destroy
2008-07-03 19:23 --------- d-----w C:\Program Files\Alwil Software
2008-07-03 19:18 --------- d-s---w C:\Users\Martin Č\AppData\Roaming\Microsoft
2008-07-03 19:18 --------- d-----w C:\ProgramData\Avg8
2008-07-03 19:18 --------- d-----w C:\Program Files\Common Files\AVSMedia
2008-07-03 19:18 --------- d-----w C:\Program Files\AVS4YOU
2008-07-02 17:01 --------- d-----w C:\Program Files\Lavalys
2008-07-02 16:12 --------- d-----w C:\Program Files\Prime95
2008-07-02 14:39 --------- d-----w C:\Program Files\Notebook Hardware Control
2008-07-02 10:50 --------- d-----w C:\Users\martin\AppData\Roaming\LimeWire
2008-07-02 10:29 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard
2008-07-02 10:02 --------- d-----w C:\Program Files\Panda Security
2008-07-02 10:02 --------- d-----w C:\Program Files\Common Files\Panda Software
2008-07-02 09:09 --------- d-----w C:\Program Files\Opera
2008-07-01 19:27 --------- d-----w C:\Program Files\Shareaza
2008-07-01 19:03 --------- d-----w C:\Users\martin\AppData\Roaming\Maxthon2
2008-06-29 10:48 --------- d-----w C:\Program Files\SpeedFan
2008-06-29 10:25 --------- d-----w C:\Program Files\PC Tune-Up
2008-06-28 12:55 --------- d-----w C:\Program Files\LimeWire
2008-06-28 10:17 10,559,746 ----a-w C:\Windows\REGBK03.ZIP
2008-06-28 08:16 --------- d-----w C:\Program Files\Premium Booster
2008-06-28 08:02 --------- d-----w C:\Program Files\uTorrent
2008-06-28 08:02 --------- d-----w C:\Program Files\Microsoft Games
2008-06-28 08:02 --------- d-----w C:\Program Files\Launchy
2008-06-28 08:02 --------- d-----w C:\Program Files\AC3Filter
2008-06-28 07:20 --------- d-----w C:\Program Files\Track Mania
2008-06-26 03:29 801,280 ----a-w C:\Windows\System32\NaturalLanguage6.dll
2008-06-26 01:45 2,644,480 ----a-w C:\Windows\System32\NlsLexicons0009.dll
2008-06-26 01:45 12,240,896 ----a-w C:\Windows\System32\NlsLexicons0007.dll
2008-06-25 16:49 --------- d-----w C:\Program Files\Real
2008-06-25 16:49 --------- d-----w C:\Program Files\Common Files\xing shared
2008-06-25 16:49 --------- d-----w C:\Program Files\Common Files\Real
2008-06-25 16:19 --------- d-----w C:\Users\martin\AppData\Roaming\vlc
2008-06-25 16:19 --------- d-----w C:\Program Files\VideoLAN
2008-06-25 16:16 --------- d-----w C:\Program Files\DivX
2008-06-25 16:16 --------- d-----w C:\Program Files\Common Files\PX Storage Engine
2008-06-25 15:56 --------- d-----w C:\Program Files\Microsoft Silverlight
2008-06-25 15:33 --------- d-----w C:\Program Files\Mozilla Thunderbird
2008-06-24 19:17 --------- d-----w C:\Users\martin\AppData\Roaming\Launchy
2008-06-21 12:04 --------- d-----w C:\Program Files\Java
2008-06-21 12:01 --------- d-----w C:\Program Files\Common Files\Java
2008-06-21 11:47 --------- d-----w C:\Program Files\Common Files\Adobe AIR
2008-06-21 11:35 --------- d-----w C:\Program Files\Morgan
2008-06-21 09:27 --------- d-----w C:\Program Files\PicLensIE
2008-06-20 19:21 --------- d-----w C:\Users\martin\AppData\Roaming\UpdateStar
2008-06-19 19:05 --------- d-----w C:\Program Files\iSpeed
2008-06-19 16:02 --------- d-----w C:\Users\martin\AppData\Roaming\SUPERAntiSpyware.com
2008-06-19 16:02 --------- d-----w C:\Program Files\SUPERAntiSpyware
2008-06-19 15:55 --------- d-----w C:\Program Files\Common Files\Adobe
2008-06-18 18:56 --------- d-----w C:\Users\martin\AppData\Roaming\Songbird2
2008-06-18 18:56 --------- d-----w C:\ProgramData\SongbirdVLC
2008-06-18 18:56 --------- d-----w C:\Program Files\Songbird
2008-06-16 07:22 --------- d-----w C:\Users\martin\AppData\Roaming\Comodo
2008-06-16 07:22 --------- d-----w C:\Program Files\Comodo
2008-06-15 16:29 3,988,662 ----a-w C:\Windows\REGBK02.ZIP
2008-06-15 15:26 --------- d-----w C:\ProgramData\comodo
2008-06-15 14:04 249,592 ----a-w C:\Windows\System32\cssdll32.dll
2008-06-15 14:00 --------- d-----w C:\Users\martin\AppData\Roaming\Talkback
2008-06-15 12:58 --------- d-----w C:\Program Files\Windows Installer 4.5 SDK
2008-06-13 22:16 --------- d-----w C:\Program Files\JetAudio
2008-06-13 21:22 --------- d-----w C:\ProgramData\TuneUp Software
2008-06-13 21:22 --------- d-----w C:\Program Files\TuneUp Utilities 2007
2008-06-13 20:31 --------- d-----w C:\Program Files\Defraggler
2008-06-11 17:25 --------- d-----w C:\Users\martin\AppData\Roaming\PCF-VLC
2008-06-11 17:20 --------- d-----w C:\Users\martin\AppData\Roaming\Participatory Culture Foundation
2008-06-11 17:18 --------- d-----w C:\Program Files\Participatory Culture Foundation
2008-06-10 17:43 --------- d-----w C:\Users\martin\AppData\Roaming\MagicBall3
2008-06-08 08:44 --------- d-----w C:\Users\martin\AppData\Roaming\thriXXX
2008-06-08 08:44 --------- d-----w C:\Program Files\thriXXX
.

((((((((((((((((((((((((((((( snapshot_2008-06-04_12.07.07,95 )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-07-05 09:40:56 12,288 ----a-w C:\Windows\assembly\GAC\cli_basetypes\1.0.10.0__ce2cb7e279207b9e\cli_basetypes.dll
+ 2008-07-05 09:40:56 32,256 ----a-w C:\Windows\assembly\GAC\cli_cppuhelper\1.0.13.0__ce2cb7e279207b9e\cli_cppuhelper.dll
+ 2008-07-05 09:40:56 847,872 ----a-w C:\Windows\assembly\GAC\cli_types\1.1.13.0__ce2cb7e279207b9e\cli_types.dll
+ 2008-07-05 09:40:56 8,192 ----a-w C:\Windows\assembly\GAC\cli_ure\1.0.13.0__ce2cb7e279207b9e\cli_ure.dll
+ 2008-07-05 09:40:22 3,584 ----a-w C:\Windows\assembly\GAC\policy.1.0.cli_basetypes\9.1.0.0__ce2cb7e279207b9e\policy.1.0.cli_basetypes.dll
+ 2008-07-05 09:40:23 3,584 ----a-w C:\Windows\assembly\GAC\policy.1.0.cli_cppuhelper\13.0.0.0__ce2cb7e279207b9e\policy.1.0.cli_cppuhelper.dll
+ 2008-07-05 09:40:23 3,072 ----a-w C:\Windows\assembly\GAC\policy.1.0.cli_ure\13.0.0.0__ce2cb7e279207b9e\policy.1.0.cli_ure.dll
+ 2008-07-05 09:41:04 3,072 ----a-w C:\Windows\assembly\GAC\policy.1.1.cli_types\13.0.0.0__ce2cb7e279207b9e\policy.1.1.cli_types.dll
+ 2008-07-03 12:53:15 884,736 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\b3a5c81e91bf9b1e63697e53a41ac0ed\AspNetMMCExt.ni.dll
+ 2008-07-03 12:53:32 499,712 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\BCMCommon\af01adf258363d49e4fbdcdd482bc4f4\BCMCommon.ni.dll
+ 2008-07-03 12:57:16 487,424 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\BCMMSIDCRL.Managed\e724870cb952736503036d747b6c01a4\BCMMSIDCRL.Managed.ni.dll
+ 2008-07-03 12:54:09 1,646,592 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\BCMRes\8622e37b291540a28c6e39a8a6a2e91a\BCMRes.ni.dll
+ 2008-07-03 12:54:56 4,112,384 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\BusinessLayer\4d0a157f609a257b441e876213506e86\BusinessLayer.ni.dll
+ 2008-07-02 17:35:45 503,808 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\a29c71731e54f91d32ccc55d5493126d\ComSvcConfig.ni.exe
+ 2008-07-04 09:47:42 237,568 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\8b7076d09705567c6431176b693597ab\CustomMarshalers.ni.dll
+ 2008-07-04 09:47:52 15,360 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\dfsvc\314a2a2c7ac434889e2478150e910adf\dfsvc.ni.exe
+ 2008-07-02 17:38:40 577,536 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\EventViewer\368debb045e28955b65910779050eccc\EventViewer.ni.dll
+ 2008-07-04 09:44:45 15,872 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Extensibility\d25497978d08c3babc76b124a7f751f4\Extensibility.ni.dll
+ 2008-07-03 12:55:31 22,528 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\ILoader\333f0533674b2065b21c5a3e0106ccec\ILoader.ni.dll
+ 2008-07-03 12:56:10 430,080 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Iris.Mapi.MessageSt#\12c358ae021efa248b47c7a69d4697d3\Iris.Mapi.MessageStore.ni.dll
+ 2008-07-04 09:48:04 876,544 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\e24c7a7e58f9b3432df623710b9c5e01\Microsoft.Build.Engine.ni.dll
+ 2008-07-04 09:48:15 81,920 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\6dc26698fcb3f0f93759f3c38a6207d5\Microsoft.Build.Framework.ni.dll
+ 2008-07-04 09:48:28 1,695,744 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\87407c2d9c2530f716841b6d6ebdf563\Microsoft.Build.Tasks.ni.dll
+ 2008-07-04 09:48:38 167,936 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\bdd6a68dce3ff4146b24afdf9759402b\Microsoft.Build.Utilities.ni.dll
+ 2008-07-04 09:45:45 950,272 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.BusinessS#\281fcac4b60684302c952bcab4137e79\Microsoft.BusinessSolutions.eCRM.OutlookAddIn.ImportExportUI.ni.dll
+ 2008-07-03 12:57:36 2,584,576 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.BusinessS#\7840f7d473f36db52e97958bd0e8021b\Microsoft.BusinessSolutions.eCRM.OutlookAddIn.ni.dll
+ 2008-07-03 12:57:10 4,554,752 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.BusinessS#\8be5101ca0f466920c20684b788d4886\Microsoft.BusinessSolutions.eCRM.OutlookAddIn.CSUtils.ni.dll
+ 2008-07-04 09:45:00 2,891,776 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.BusinessS#\b19faba3b1d0918eaa68d489f31e2bbe\Microsoft.BusinessSolutions.eCRM.Reports2.ni.dll
+ 2008-07-03 12:56:04 516,096 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.BusinessS#\e62e3479cc16ad87501ea0036b6ae133\Microsoft.BusinessSolutions.eCRM.DataSync.ni.dll
+ 2008-07-03 12:54:15 131,072 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.eCRM.AxSH#\b10472e85dbdc8d5b2886ce0abfe8370\Microsoft.eCRM.AxSHDocVw.ni.dll
+ 2008-07-03 12:55:43 491,520 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.eCRM.Offi#\8a200caf5af9ff8235ed940fcdbc79e7\Microsoft.eCRM.Office.ni.dll
+ 2008-07-03 11:36:48 1,441,792 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Ink\d521fc6793855857df18b7cb9ab0acaa\Microsoft.Ink.ni.dll
+ 2008-07-03 12:57:42 643,072 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Interop.e#\0c5afc0421857bfc41d585346660c1f3\Microsoft.Interop.eCRM.MSComCtl.ni.dll
+ 2008-07-03 12:56:33 1,028,096 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Interop.e#\573e16bb22badbc8f269b93b46b18bac\Microsoft.Interop.eCRM.msforms.ni.dll
+ 2008-07-03 12:54:21 352,256 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Interop.e#\a686c35266f14c5e901853d8deae2fb7\Microsoft.Interop.eCRM.SHDocVw.ni.dll
+ 2008-07-03 12:55:02 39,424 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Interop.e#\d0bff0a870e776c4083cc4d9348da297\Microsoft.Interop.eCRM.NetFw.ni.dll
+ 2008-07-03 12:55:38 1,490,944 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Interop.e#\f18b01fb9a4462d74b75e165b65c179f\Microsoft.Interop.eCRM.Word.ni.dll
+ 2008-07-03 12:56:26 483,328 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Interop.e#\f3b5debeb1b92c8110e57b855fc56041\Microsoft.Interop.eCRM.Publisher.ni.dll
+ 2008-07-04 09:45:24 2,453,504 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Interop.e#\fa11cb0b65090716bf3ec288ce8e3e0d\Microsoft.Interop.eCRM.Excel.ni.dll
+ 2008-07-03 12:53:49 86,016 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Interop.e#\fd7a283410b81c2d65267abfb9c4c79a\Microsoft.Interop.eCRM.Ole.ni.dll
+ 2008-07-03 12:54:34 1,085,440 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Interop.M#\1dde3e735c17891e000aa8c20e4c3020\Microsoft.Interop.Mapi.Impl.ni.dll
+ 2008-07-03 12:54:27 192,512 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Interop.M#\6dbe0f43bb6b8929940baa5fc4818f14\Microsoft.Interop.Mapi.PropTags.ni.dll
+ 2008-07-03 12:53:37 163,840 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Interop.M#\a5c91b078a255697d687c95713cff206\Microsoft.Interop.Mapi.Interfaces.ni.dll
+ 2008-07-04 09:45:52 671,744 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Iris.Impo#\669b19df661ab2db1430f1d066987bb2\Microsoft.Iris.ImportExport.ni.dll
+ 2008-07-04 09:45:37 729,088 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Iris.Impo#\ddb6b4767ad72a8423b65ebd35e3158a\Microsoft.Iris.ImportExportDataAccess.ni.dll
+ 2008-07-03 12:51:04 2,441,216 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\2f558d3a6d024dfcdd1d62233a067b40\Microsoft.JScript.ni.dll
+ 2008-07-02 17:38:47 614,400 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Managemen#\b059345a9c2a126e320e17c2090dd354\Microsoft.ManagementConsole.ni.dll
+ 2008-07-04 09:45:59 1,720,320 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.In#\4272187860d170208cb57011d501071d\Microsoft.Office.Interop.Word.ni.dll
+ 2008-07-04 09:45:29 73,728 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.In#\7a52121581d172ddbca3b8516e9e040b\Microsoft.Office.Interop.OutlookViewCtl.ni.dll
+ 2008-07-03 12:54:43 2,355,200 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.In#\ce6a3a942b78a3634fa2f752d51b0dcc\Microsoft.Office.Interop.Outlook.ni.dll
+ 2008-07-02 17:38:28 1,232,896 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\198b25c569e8a6fbb78092fe9c697600\Microsoft.Transactions.Bridge.ni.dll
+ 2008-07-03 11:37:07 401,408 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\b0da39820e35eb3821e69ac8ace491a1\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2008-07-03 12:55:49 139,264 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vbe.Inter#\2172977cb49a1a41dac50dcb6ce8ee49\Microsoft.Vbe.Interop.ni.dll
+ 2008-07-03 12:56:58 1,740,800 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\a96c6b0c75f8ea3eb133018ba3b49f3f\Microsoft.VisualBasic.ni.dll
+ 2008-07-03 12:51:06 77,824 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\81c771cf263c377d46aaf249c7ab903a\Microsoft.Vsa.ni.dll
+ 2008-07-02 17:39:04 6,443,008 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\MIGUIControls\66ad568e1ea098a2099364bf66bdaed8\MIGUIControls.ni.dll
+ 2008-07-03 11:37:27 1,691,648 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\MMCEx\f5934f1b89f7c8fb3f0bab1c21045f1c\MMCEx.ni.dll
+ 2008-07-02 17:38:53 319,488 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\MMCFxCommon\a3d6cbb5a1efbd314e7080bbbd78d1cd\MMCFxCommon.ni.dll
+ 2008-07-03 11:37:28 102,400 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\napcrypt\29d0ab81098806db3b769de45054ea13\napcrypt.ni.dll
+ 2008-07-03 11:37:38 139,264 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\naphlpr\65fba2f3c000945397537d9646148f6c\naphlpr.ni.dll
+ 2008-07-03 11:37:50 126,976 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\napinit\ad70802a13332254382fd4bddbfbc8b3\napinit.ni.dll
+ 2008-07-03 11:38:03 737,280 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\napsnap\ae9a564a6dd8814ba0ec381fd07be4bb\napsnap.ni.dll
+ 2008-07-04 09:49:08 2,641,920 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Narrator\1b896bbb7ed678902995f5a2479962e8\Narrator.ni.exe
+ 2008-07-03 12:54:01 925,696 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\office\a343884a3632aa3ea660f782520f18de\office.ni.dll
+ 2008-07-04 09:49:21 1,581,056 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\7c78c24952fad7252c7ff7f739fd6198\PresentationBuildTasks.ni.dll
+ 2008-07-04 09:49:44 2,035,712 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\fa8522105eb716eed71e99bb9bfe06ee\PresentationUI.ni.dll
+ 2008-07-04 09:49:57 2,416,640 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\99836ab309902e40176dc5ca0854f7b2\ReachFramework.ni.dll
+ 2008-07-03 12:55:08 532,480 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\SBAIAPI\444783ab0c14d4245699ab8b8cc982a7\SBAIAPI.ni.dll
+ 2008-07-03 12:55:25 643,072 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\SBAIAPIV2\4e4fb8d01c74a880ad8204e334ef086f\SBAIAPIV2.ni.dll
+ 2008-07-03 12:55:19 122,880 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\SBAIREPORTING\2922f5a21ec250972a628558c7324c22\SBAIREPORTING.ni.dll
+ 2008-07-03 12:55:14 16,896 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\SBAIUI\beb810bfc44b13bbe85ba409386ad03e\SBAIUI.ni.dll
+ 2008-07-03 11:38:14 139,264 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\b682f5929b1f3f2a0b585cbc999df489\ServiceModelReg.ni.exe
+ 2008-07-02 17:37:52 303,104 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\ee487a5b3e62f510183f68538f583135\SMDiagnostics.ni.dll
+ 2008-07-03 11:38:27 323,584 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\470e3064a09dc8107667143d09811786\SMSvcHost.ni.exe
+ 2008-07-03 12:53:55 44,544 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\stdole\07c3757edda55c714c4e69a94be4e35e\stdole.ni.dll
+ 2008-07-04 10:27:53 262,144 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\sysglobl\811305f0e9b3729e5a6a991b6645de92\sysglobl.ni.dll
+ 2008-07-02 17:36:53 1,183,744 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\f293fee60fc17173a220dec17a8f2a4a\System.Data.OracleClient.ni.dll
+ 2008-07-02 17:37:05 512,000 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\4c99dec707cab9de8b03b8821a0716ac\System.DirectoryServices.Protocols.ni.dll
+ 2008-07-02 17:36:06 1,224,704 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\b6dfa3ee72dae0f0aa3d072d3b5af2a6\System.DirectoryServices.ni.dll
+ 2008-07-02 17:35:53 659,456 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\954db9046cf0977e8baeda9160910bc0\System.EnterpriseServices.ni.dll
+ 2008-07-02 17:35:53 294,912 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\954db9046cf0977e8baeda9160910bc0\System.EnterpriseServices.Wrapper.dll
+ 2008-07-02 17:38:21 241,664 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\5ff73b37102042c3e28f22106dde8ad4\System.IdentityModel.Selectors.ni.dll
+ 2008-07-02 17:38:09 1,118,208 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\44573dbcf8c8046c8d4b9ba8109d90e7\System.IdentityModel.ni.dll
+ 2008-07-03 11:38:50 417,792 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\28b40aac039323938aa010da90240207\System.IO.Log.ni.dll
+ 2008-07-03 12:50:56 1,064,960 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\3faf6c0dd4b29ada10b11269abb62653\System.Management.ni.dll
+ 2008-07-02 17:38:15 655,360 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Messaging\1bb37d7286f4cd22de1b1e7f6d2950b2\System.Messaging.ni.dll
+ 2008-07-04 09:49:46 1,134,592 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Printing\d82ee3d7910c5dab8c97c4e7973d7bbc\System.Printing.ni.dll
+ 2008-07-02 17:36:16 815,104 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\8fe7232e97fdf63c6b146e93f432d7d7\System.Runtime.Remoting.ni.dll
+ 2008-07-02 17:38:02 2,445,312 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\529360b58964fe947006d8669aea62f3\System.Runtime.Serialization.ni.dll
+ 2008-07-02 17:37:46 18,071,552 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\cfcba8cb539cb3dc5e92c544bd6d9dc5\System.ServiceModel.ni.dll
+ 2008-07-04 10:27:47 2,039,808 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Speech\b75eb02af4a4a29474726c41641ac18e\System.Speech.ni.dll
+ 2008-07-02 17:35:59 679,936 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\62dc499efc246da6806ba0b74ac447f1\System.Transactions.ni.dll
+ 2008-07-04 10:28:14 2,342,912 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\7185958cf25ae6673e828dd1e7ac65ed\System.Web.Mobile.ni.dll
+ 2008-07-02 17:36:59 237,568 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\320ae07cc8c7b946d2944c63a72871fc\System.Web.RegularExpressions.ni.dll
+ 2008-07-02 17:36:46 1,986,560 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\af61137b092f7167a1bb6d5f8ee294d8\System.Web.Services.ni.dll
+ 2008-07-02 17:36:38 12,513,280 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\369cdfcbaefd8f28200e295c26c2141f\System.Web.ni.dll
+ 2008-07-03 11:39:07 258,048 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\TaskScheduler\0a7389d61536c156ce0485a0a14d1c3f\TaskScheduler.ni.dll
+ 2008-07-04 10:28:36 483,328 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\247502ab3842b4a61f36dc4e0279f354\UIAutomationClient.ni.dll
+ 2008-07-04 10:28:48 1,118,208 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\94bf31eac9cf2d253b451e225669e91c\UIAutomationClientsideProviders.ni.dll
+ 2008-07-04 10:29:10 270,336 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\32372878e4291ce171ce9eb482d9188a\WindowsFormsIntegration.ni.dll
+ 2008-07-03 12:50:47 380,928 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\0ecb8c2a9fa7b6c5e7c9d77b44ff6eb1\WsatConfig.ni.exe
+ 2008-07-03 12:56:50 290,816 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Xceed.Compression\e4530e13c649b192d2081bed8d3eeba7\Xceed.Compression.ni.dll
+ 2008-07-03 12:56:44 348,160 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Xceed.FileSystem\5ba0a3521b1fce3f977371939de4f753\Xceed.FileSystem.ni.dll
+ 2008-07-04 09:45:17 696,320 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Xceed.Grid.UIStyle\8a32aeb2887278ef7c6258c7dafdf70f\Xceed.Grid.UIStyle.ni.dll
+ 2008-07-04 09:45:11 2,277,376 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Xceed.Grid\05f88cf54088fe40e8e97acc78cd3802\Xceed.Grid.ni.dll
+ 2008-07-03 12:56:38 614,400 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Xceed.Zip\1b6c387fc0a7f66ecd1258c1f35ab0c2\Xceed.Zip.ni.dll
+ 2008-01-09 13:01:48 118,784 ----a-w C:\Windows\BDOSCAN8\bdupd.dll
+ 2008-01-09 13:01:48 53,248 ----a-w C:\Windows\BDOSCAN8\ipsupd.dll
+ 2008-01-09 13:01:48 53,248 ----a-w C:\Windows\bdoscandel.exe
+ 2007-03-23 20:33:04 229,376 ----a-w C:\Windows\CMDLIC.DLL
+ 2008-01-09 13:01:48 118,784 ----a-w C:\Windows\Downloaded Program Files\bdupd.dll
+ 2008-01-09 13:01:48 53,248 ----a-w C:\Windows\Downloaded Program Files\ipsupd.dll
+ 2008-06-22 14:21:37 23,600 ----a-w C:\Windows\Downloaded Program Files\tvichw32.sys
- 2000-08-31 06:00:00 73,728 ----a-w C:\Windows\fdsv.exe
+ 2000-08-31 06:00:00 89,504 ----a-w C:\Windows\fdsv.exe
+ 2008-07-05 21:28:12 884,736 ----a-w C:\Windows\gmer.dll
- 2008-04-19 15:12:06 665,600 ----a-w C:\Windows\inf\drvindex.dat
+ 2008-06-10 18:05:45 665,600 ----a-w C:\Windows\inf\drvindex.dat
- 2008-06-01 17:51:30 51,200 ----a-w C:\Windows\inf\infpub.dat
+ 2008-06-15 15:30:10 51,200 ----a-w C:\Windows\inf\infpub.dat
- 2008-06-01 17:51:29 86,016 ----a-w C:\Windows\inf\infstor.dat
+ 2008-06-15 14:03:07 86,016 ----a-w C:\Windows\inf\infstor.dat
- 2008-06-01 17:51:29 86,016 ----a-w C:\Windows\inf\infstrng.dat
+ 2008-06-15 15:30:10 86,016 ----a-w C:\Windows\inf\infstrng.dat
+ 2006-10-26 19:55:38 138,024 ----a-r C:\Windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\IMPMAIL.DLL
+ 2006-10-27 14:16:36 46,864 ----a-r C:\Windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\OUTLRPC.DLL
- 2008-05-13 19:09:53 1,165,584 ----a-r C:\Windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\accicons.exe
+ 2008-07-08 19:10:50 1,165,584 ----a-r C:\Windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\accicons.exe
- 2008-05-13 19:09:54 20,240 ----a-r C:\Windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\cagicon.exe
+ 2008-07-08 19:10:50 20,240 ----a-r C:\Windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\cagicon.exe
- 2008-05-13 19:09:54 217,864 ----a-r C:\Windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\misc.exe
+ 2008-07-08 19:10:50 217,864 ----a-r C:\Windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\misc.exe
- 2008-05-13 19:09:54 18,704 ----a-r C:\Windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\mspicons.exe
+ 2008-07-08 19:10:50 18,704 ----a-r C:\Windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\mspicons.exe
- 2008-05-13 19:09:54 35,088 ----a-r C:\Windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\oisicon.exe
+ 2008-07-08 19:10:50 35,088 ----a-r C:\Windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\oisicon.exe
- 2008-05-13 19:09:53 845,584 ----a-r C:\Windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\outicon.exe
+ 2008-07-08 19:10:50 845,584 ----a-r C:\Windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\outicon.exe
- 2008-05-13 19:09:53 922,384 ----a-r C:\Windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\pptico.exe
+ 2008-07-08 19:10:50 922,384 ----a-r C:\Windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\pptico.exe
- 2008-05-13 19:09:54 272,648 ----a-r C:\Windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\pubs.exe
+ 2008-07-08 19:10:50 272,648 ----a-r C:\Windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\pubs.exe
- 2008-05-13 19:09:54 888,080 ----a-r C:\Windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\wordicon.exe
+ 2008-07-08 19:10:50 888,080 ----a-r C:\Windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\wordicon.exe
- 2008-05-13 19:09:53 1,172,240 ----a-r C:\Windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\xlicons.exe
+ 2008-07-08 19:10:50 1,172,240 ----a-r C:\Windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\xlicons.exe
+ 2008-07-03 18:49:26 295,606 ----a-r C:\Windows\Installer\{AC76BA86-7AD7-1051-7B44-A81200000003}\SC_Reader.exe
+ 2008-06-19 15:58:46 295,606 ----a-r C:\Windows\Installer\{AC76BA86-7AD7-5464-3428-800000000004}\ARPPRODUCTICON.exe
+ 2008-06-08 08:36:12 27,136 ----a-r C:\Windows\Installer\{B74F042E-E1B9-4A5B-8D46-387BB172F0A4}\AppleSoftwareUpdateIco.exe
+ 2008-07-05 09:42:24 2,363,392 ----a-r C:\Windows\Installer\{C2ED62F4-4F0B-44DF-B630-DD02FD7E8C60}\soffice.exe
+ 1998-10-02 17:00:48 327,168 ----a-w C:\Windows\IsUninst.exe
- 2000-08-31 06:00:00 28,160 ----a-w C:\Windows\Nircmd.exe
+ 2000-08-31 06:00:00 28,672 ----a-w C:\Windows\Nircmd.exe
+ 2008-01-19 07:33:24 134,656 ----a-w C:\Windows\R.COM
+ 2008-06-21 22:14:54 1,647,104 ----a-w C:\Windows\Resources\Themes\Aero 4074 Remix\Shell\NormalColor\shellstyle.dll
+ 2008-06-21 22:13:31 1,639,424 ----a-w C:\Windows\Resources\Themes\Aero Reloaded\Shell\NormalColor\shellstyle.dll
- 2008-06-04 09:54:35 2,048 --sha-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2008-07-14 14:09:24 2,048 --sha-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2008-06-04 09:54:35 2,048 --sha-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2008-07-14 14:09:24 2,048 --sha-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2008-06-04 09:56:12 151,552 ----a-w C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT
+ 2008-07-14 14:11:06 151,552 ----a-w C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT
- 2008-04-19 15:22:29 2,598,521 -c--a-w C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareLicensing\tokens.dat
+ 2008-06-15 14:18:33 2,600,421 -c--a-w C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareLicensing\tokens.dat
- 2008-06-04 09:56:17 262,144 ----a-w C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT
+ 2008-07-14 14:11:01 147,456 ----a-w C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT
+ 2007-02-10 03:09:12 127,856 ----a-w C:\Windows\SQL9_KB948109_ENU\batchparser90.dll
+ 2007-02-10 03:09:20 1,039,728 ----a-w C:\Windows\SQL9_KB948109_ENU\dbghelp.dll
+ 2007-02-10 03:15:30 1,160,560 ----a-w C:\Windows\SQL9_KB948109_ENU\dumpdatastore.dll
+ 2008-02-26 20:08:46 2,501,648 ----a-w C:\Windows\SQL9_KB948109_ENU\hotfix.exe
+ 2005-10-13 21:26:42 548,864 ----a-w C:\Windows\SQL9_KB948109_ENU\msvcp80.dll
+ 2005-10-13 21:26:42 626,688 ----a-w C:\Windows\SQL9_KB948109_ENU\msvcr80.dll
+ 2007-02-10 03:29:52 143,728 ----a-w C:\Windows\SQL9_KB948109_ENU\sqlcmd.exe
+ 2007-02-10 03:29:52 533,872 ----a-w C:\Windows\SQL9_KB948109_ENU\sqldiscoveryapi.dll
+ 2007-02-10 03:29:54 230,256 ----a-w C:\Windows\SQL9_KB948109_ENU\sqlsetupvista.dll
- 2008-03-19 17:23:20 114,688 ----a-w C:\Windows\System32\Adobe\Director\np32dsw.dll
+ 2008-06-17 14:12:42 114,688 ----a-w C:\Windows\System32\Adobe\Director\np32dsw.dll
- 2008-03-19 17:36:22 202,168 ----a-w C:\Windows\System32\Adobe\Director\swdir.dll
+ 2008-06-17 14:23:02 202,168 ----a-w C:\Windows\System32\Adobe\Director\swdir.dll
- 2008-03-19 17:24:02 487,424 ----a-w C:\Windows\System32\Adobe\Shockwave 11\Control.dll
+ 2008-06-17 14:13:22 487,424 ----a-w C:\Windows\System32\Adobe\Shockwave 11\Control.dll
- 2008-03-19 16:46:26 1,798,144 ----a-w C:\Windows\System32\Adobe\Shockwave 11\dirapi.dll
+ 2008-06-17 13:36:00 1,798,144 ----a-w C:\Windows\System32\Adobe\Shockwave 11\dirapi.dll
+ 2008-06-17 14:13:26 9,216 ----a-w C:\Windows\System32\Adobe\Shockwave 11\DYNAPL~1.DLL
- 2008-03-19 17:24:04 9,216 ----a-w C:\Windows\System32\Adobe\Shockwave 11\DynaPlayer.dll
+ 2008-06-17 14:13:26 9,216 ----a-w C:\Windows\System32\Adobe\Shockwave 11\DynaPlayer.dll
- 2008-03-19 16:36:14 754,688 ----a-w C:\Windows\System32\Adobe\Shockwave 11\gi.dll
+ 2008-06-17 13:25:58 697,344 ----a-w C:\Windows\System32\Adobe\Shockwave 11\gi.dll
- 2008-03-19 16:36:16 1,145,896 ----a-w C:\Windows\System32\Adobe\Shockwave 11\gt.exe
+ 2008-06-17 13:26:00 1,145,896 ----a-w C:\Windows\System32\Adobe\Shockwave 11\gt.exe
- 2008-03-19 16:36:14 52,288 ----a-w C:\Windows\System32\Adobe\Shockwave 11\gtapi.dll
+ 2008-06-17 13:25:58 52,288 ----a-w C:\Windows\System32\Adobe\Shockwave 11\gtapi.dll
- 2008-03-19 16:42:42 892,928 ----a-w C:\Windows\System32\Adobe\Shockwave 11\iml32.dll
+ 2008-06-17 13:32:18 892,928 ----a-w C:\Windows\System32\Adobe\Shockwave 11\iml32.dll
- 2008-03-19 17:22:34 249,856 ----a-w C:\Windows\System32\Adobe\Shockwave 11\Plugin.dll
+ 2008-06-17 14:11:56 253,952 ----a-w C:\Windows\System32\Adobe\Shockwave 11\Plugin.dll
- 2008-03-19 17:25:36 442,368 ----a-w C:\Windows\System32\Adobe\Shockwave 11\Proj.dll
+ 2008-06-17 14:15:00 446,464 ----a-w C:\Windows\System32\Adobe\Shockwave 11\Proj.dll
+ 2008-06-17 14:22:46 439,736 ----a-w C:\Windows\System32\Adobe\Shockwave 11\SwHelper_1100458.exe
- 2008-03-19 17:26:20 110,592 ----a-w C:\Windows\System32\Adobe\Shockwave 11\SwInit.exe
+ 2008-06-17 14:15:44 114,688 ----a-w C:\Windows\System32\Adobe\Shockwave 11\SwInit.exe
- 2008-03-19 17:22:22 94,208 ----a-w C:\Windows\System32\Adobe\Shockwave 11\SwMenu.dll
+ 2008-06-17 14:11:44 94,208 ----a-w C:\Windows\System32\Adobe\Shockwave 11\SwMenu.dll
- 2008-03-19 16:36:14 50,808 ----a-w C:\Windows\System32\Adobe\Shockwave 11\SYMCCHECKER.DLL
+ 2008-06-17 13:25:58 50,808 ----a-w C:\Windows\System32\Adobe\Shockwave 11\SYMCCHECKER.DLL
+ 2008-05-15 23:24:43 1,152,888 ----a-w C:\Windows\System32\aswBoot.exe
+ 2007-04-26 12:57:00 16,904 ----a-w C:\Windows\System32\authuitu.dll
+ 2008-05-15 23:12:36 95,608 ----a-w C:\Windows\System32\AvastSS.scr
+ 2008-07-13 14:18:30 209,947 ----a-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\1051\StructuredQuerySchema.bin
- 2008-06-04 09:54:31 16,384 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2008-07-14 18:17:31 32,768 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2008-07-01 20:01:28 32,768 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012008062320080630\index.dat
+ 2008-06-27 18:27:51 32,768 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012008062720080628\index.dat
+ 2008-07-01 20:01:28 32,768 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012008070120080702\index.dat
+ 2008-06-24 20:07:50 78,924 ----a-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat
+ 2008-06-25 11:36:45 4,479,424 ----a-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\A6YYW7YP\WebSecurityGuard_Setup[1].exe
- 2008-06-04 09:54:31 32,768 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2008-07-14 18:17:31 65,536 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2008-06-04 09:54:31 16,384 --sha-w C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2008-07-14 18:17:31 32,768 --sha-w C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2008-06-04 10:02:05 262,144 ----a-w C:\Windows\System32\config\systemprofile\ntuser.dat
+ 2008-07-14 19:59:08 262,144 ----a-w C:\Windows\System32\config\systemprofile\ntuser.dat
- 2008-01-19 07:33:05 139,264 ----a-w C:\Windows\System32\cscript.exe
+ 2008-05-08 21:58:40 135,168 ----a-w C:\Windows\System32\cscript.exe
+ 2008-05-30 12:11:46 1,491,992 ----a-w C:\Windows\System32\D3DCompiler_38.dll
+ 2008-05-30 12:11:46 467,984 ----a-w C:\Windows\System32\d3dx10_38.dll
+ 2008-05-30 12:11:46 3,850,760 ----a-w C:\Windows\System32\D3DX9_38.dll
- 2008-03-31 21:25:46 682,496 ----a-w C:\Windows\System32\DivX.dll
+ 2008-05-30 23:22:46 683,520 ----a-w C:\Windows\System32\DivX.dll
- 2008-03-31 21:25:48 823,296 ----a-w C:\Windows\System32\divx_xx07.dll
+ 2008-05-30 23:22:48 823,296 ----a-w C:\Windows\System32\divx_xx07.dll
- 2008-03-31 21:25:46 831,488 ----a-w C:\Windows\System32\divx_xx0a.dll
+ 2008-05-30 23:22:46 815,104 ----a-w C:\Windows\System32\divx_xx0a.dll
- 2008-03-31 21:25:48 823,296 ----a-w C:\Windows\System32\divx_xx0c.dll
+ 2008-05-30 23:22:48 823,296 ----a-w C:\Windows\System32\divx_xx0c.dll
- 2008-03-31 21:25:46 802,816 ----a-w C:\Windows\System32\divx_xx11.dll
+ 2008-05-30 23:22:48 802,816 ----a-w C:\Windows\System32\divx_xx11.dll
- 2008-03-31 21:25:52 161,096 ----a-w C:\Windows\System32\DivXCodecVersionChecker.exe
+ 2008-05-22 22:19:12 161,096 ----a-w C:\Windows\System32\DivXCodecVersionChecker.exe
- 2005-11-23 03:00:00 778,240 ----a-w C:\Windows\System32\DivXsm.exe
+ 2008-05-22 22:22:22 524,288 ----a-w C:\Windows\System32\DivXsm.exe
- 2008-03-21 20:28:20 12,288 ----a-w C:\Windows\System32\DivXWMPExtType.dll
+ 2008-05-22 22:18:54 12,288 ----a-w C:\Windows\System32\DivXWMPExtType.dll
- 2008-03-21 20:28:54 81,920 ----a-w C:\Windows\System32\dpl100.dll
+ 2008-05-22 22:19:46 81,920 ----a-w C:\Windows\System32\dpl100.dll
- 2008-03-21 20:28:50 294,912 ----a-w C:\Windows\System32\dpu10.dll
+ 2008-05-30 23:22:54 294,912 ----a-w C:\Windows\System32\dpu10.dll
- 2008-03-21 20:28:50 294,912 ----a-w C:\Windows\System32\dpu11.dll
+ 2008-05-30 23:22:54 294,912 ----a-w C:\Windows\System32\dpu11.dll
- 2008-03-21 20:28:52 53,248 ----a-w C:\Windows\System32\dpuGUI10.dll
+ 2008-05-30 23:22:58 53,248 ----a-w C:\Windows\System32\dpuGUI10.dll
- 2008-03-21 20:28:50 593,920 ----a-w C:\Windows\System32\dpuGUI11.dll
+ 2008-05-30 23:22:54 593,920 ----a-w C:\Windows\System32\dpuGUI11.dll
- 2008-03-21 20:28:50 344,064 ----a-w C:\Windows\System32\dpus11.dll
+ 2008-05-30 23:22:54 344,064 ----a-w C:\Windows\System32\dpus11.dll
- 2008-03-21 20:28:50 57,344 ----a-w C:\Windows\System32\dpv11.dll
+ 2008-05-30 23:22:54 57,344 ----a-w C:\Windows\System32\dpv11.dll
+ 2008-05-15 23:16:06 20,560 ----a-w C:\Windows\System32\drivers\aswFsBlk.sys
+ 2008-05-15 23:18:00 50,768 ----a-w C:\Windows\System32\drivers\aswMonFlt.sys
+ 2008-05-15 23:15:29 23,152 ----a-w C:\Windows\System32\drivers\aswRdr.sys
+ 2008-05-15 23:20:32 78,416 ----a-w C:\Windows\System32\drivers\aswSP.sys
+ 2008-05-15 23:14:11 42,912 ----a-w C:\Windows\System32\drivers\aswTdi.sys
+ 2004-10-25 18:02:58 21,664 ----a-w C:\Windows\System32\drivers\Entech.sys
+ 2004-06-22 13:44:50 5,632 ----a-w C:\Windows\System32\drivers\Entech64.sys
+ 1996-04-03 19:33:26 5,248 ----a-w C:\Windows\System32\drivers\giveio.sys
+ 2008-07-05 21:28:12 85,969 ----a-w C:\Windows\System32\drivers\gmer.sys
+ 2008-05-20 09:43:58 37,312 ----a-w C:\Windows\System32\drivers\maplom.sys
+ 2008-05-20 09:43:10 36,288 ----a-w C:\Windows\System32\drivers\maploml.sys
- 2008-01-19 05:55:53 72,192 ----a-w C:\Windows\System32\drivers\pacer.sys
+ 2008-04-05 01:21:42 72,192 ----a-w C:\Windows\System32\drivers\pacer.sys
+ 2001-11-19 17:05:18 3,972 ----a-w C:\Windows\System32\drivers\PciBus.sys
- 2008-01-19 05:55:29 113,664 ----a-w C:\Windows\System32\drivers\rmcast.sys
+ 2008-05-10 01:33:10 113,664 ----a-w C:\Windows\System32\drivers\rmcast.sys
+ 2006-11-02 06:37:21 20,480 ----a-w C:\Windows\System32\drivers\secdrv.sys
+ 2006-07-05 12:39:29 59,256 ----a-w C:\Windows\System32\drivers\sfdrv01.sys
+ 2006-07-05 12:46:06 63,352 ----a-w C:\Windows\System32\drivers\sfdrv01a.sys
+ 2006-06-14 14:56:56 13,680 ----a-w C:\Windows\System32\drivers\sfhlp02.sys
+ 2006-07-10 16:19:58 27,032 ----a-w C:\Windows\System32\drivers\sfsync02.sys
- 2008-01-19 07:43:39 891,448 ----a-w C:\Windows\System32\drivers\tcpip.sys
+ 2008-04-26 08:26:49 891,448 ----a-w C:\Windows\System32\drivers\tcpip.sys
+ 2008-01-19 05:53:38 19,456 ----a-w C:\Windows\System32\DriverStore\FileRepository\bth.inf_03301a54\bthenum.sys
+ 2008-04-29 01:42:23 220,160 ----a-w C:\Windows\System32\DriverStore\FileRepository\bth.inf_03301a54\bthport.sys
+ 2008-04-29 01:42:21 29,184 ----a-w C:\Windows\System32\DriverStore\FileRepository\bth.inf_03301a54\BTHUSB.SYS
+ 2008-04-29 03:54:02 181,760 ----a-w C:\Windows\System32\DriverStore\FileRepository\bth.inf_03301a54\fsquirt.exe
+ 2008-04-29 01:42:12 19,456 ----a-w C:\Windows\System32\DriverStore\FileRepository\bth.inf_c206c850\bthenum.sys
+ 2008-04-29 01:42:12 220,160 ----a-w C:\Windows\System32\DriverStore\FileRepository\bth.inf_c206c850\bthport.sys
+ 2008-04-29 01:42:08 29,184 ----a-w C:\Windows\System32\DriverStore\FileRepository\bth.inf_c206c850\BTHUSB.SYS
+ 2008-04-29 03:50:12 181,760 ----a-w C:\Windows\System32\DriverStore\FileRepository\bth.inf_c206c850\fsquirt.exe
+ 2008-06-15 14:01:39 73,232 ----a-w C:\Windows\System32\DriverStore\FileRepository\inspect.inf_bffe78ef\inspect.sys
- 2008-03-21 20:28:54 196,608 ----a-w C:\Windows\System32\dtu100.dll
+ 2008-05-22 22:19:46 196,608 ----a-w C:\Windows\System32\dtu100.dll
- 2008-01-19 07:34:09 564,736 ----a-w C:\Windows\System32\emdmgmt.dll
+ 2008-05-10 03:35:15 564,736 ----a-w C:\Windows\System32\emdmgmt.dll
- 2008-06-01 12:38:33 371,824 ----a-w C:\Windows\System32\FNTCACHE.DAT
+ 2008-07-08 19:15:09 389,136 ----a-w C:\Windows\System32\FNTCACHE.DAT
+ 2005-08-03 13:16:40 40,960 ----a-r C:\Windows\System32\Futuremark\MSC\atimgpud.dll
+ 2006-04-07 17:45:54 35,840 ----a-w C:\Windows\System32\Futuremark\MSC\Direcpll.dll
+ 1996-04-03 19:33:26 5,248 ----a-w C:\Windows\System32\giveio.sys
- 2008-01-19 07:34:37 1,671,168 ----a-w C:\Windows\System32\chsbrkr.dll
+ 2008-05-27 05:17:13 1,671,680 ----a-w C:\Windows\System32\chsbrkr.dll
- 2008-01-19 07:34:40 6,103,040 ----a-w C:\Windows\System32\chtbrkr.dll
+ 2008-05-27 05:17:16 6,103,040 ----a-w C:\Windows\System32\chtbrkr.dll
+ 2008-03-24 23:28:39 135,168 ----a-w C:\Windows\System32\java.exe
+ 2008-03-24 23:28:43 135,168 ----a-w C:\Windows\System32\javaw.exe
+ 2008-03-25 00:37:01 139,264 ----a-w C:\Windows\System32\javaws.exe
- 2008-01-19 07:34:35 512,000 ----a-w C:\Windows\System32\jscript.dll
+ 2008-05-08 21:59:28 512,000 ----a-w C:\Windows\System32\jscript.dll
- 2008-02-22 04:58:23 28,160 ----a-w C:\Windows\System32\jsproxy.dll
+ 2008-04-25 04:35:13 28,160 ----a-w C:\Windows\System32\jsproxy.dll
- 2008-01-19 07:34:42 42,496 ----a-w C:\Windows\System32\korwbrkr.dll
+ 2008-05-27 05:17:16 143,872 ----a-w C:\Windows\System32\korwbrkr.dll
+ 2008-03-20 16:06:36 1,480,232 ----a-w C:\Windows\System32\LegitCheckControl.DLL
- 2008-03-21 20:30:00 1,044,480 ----a-w C:\Windows\System32\libdivx.dll
+ 2008-05-22 22:20:42 1,044,480 ----a-w C:\Windows\System32\libdivx.dll
- 2007-11-21 00:52:38 2,884,992 ----a-w C:\Windows\System32\Macromed\Flash\NPSWF32.dll
+ 2008-03-25 03:21:18 2,889,088 ----a-w C:\Windows\System32\Macromed\Flash\NPSWF32.dll
- 2007-11-21 00:52:40 218,496 ----a-w C:\Windows\System32\Macromed\Flash\NPSWF32_FlashUtil.exe
+ 2008-03-25 03:21:20 218,496 ----a-w C:\Windows\System32\Macromed\Flash\NPSWF32_FlashUtil.exe
- 2008-05-14 10:56:18 74,649 ----a-w C:\Windows\System32\Macromed\Flash\uninstall_activeX.exe
+ 2008-06-25 11:57:32 74,649 ----a-w C:\Windows\System32\Macromed\Flash\uninstall_activeX.exe
- 2008-05-16 20:18:04 70,264 ----a-w C:\Windows\System32\Macromed\Flash\uninstall_plugin.exe
+ 2008-07-04 09:30:10 70,264 ----a-w C:\Windows\System32\Macromed\Flash\uninstall_plugin.exe
+ 2007-09-27 13:22:44 261,632 ----a-w C:\Windows\System32\mcdvd_32.dll
+ 2003-03-18 20:20:00 1,060,864 ----a-w C:\Windows\System32\MFC71.dll
- 2008-02-22 05:01:41 64,512 ----a-w C:\Windows\System32\migration\WininetPlugin.dll
+ 2008-04-25 04:35:24 64,512 ----a-w C:\Windows\System32\migration\WininetPlugin.dll
- 2008-01-19 07:34:49 35,328 ----a-w C:\Windows\System32\mimefilt.dll
+ 2008-05-27 05:18:32 40,448 ----a-w C:\Windows\System32\mimefilt.dll
- 2002-11-18 13:02:58 40,960 ----a-w C:\Windows\System32\MMAVILNG.exe
+ 2002-11-18 15:02:56 40,960 ----a-w C:\Windows\System32\MMAVILNG.exe
- 2002-11-15 10:11:28 77,824 ----a-w C:\Windows\System32\MMSwitch.dll
+ 2002-11-15 12:11:26 77,824 ----a-w C:\Windows\System32\MMSwitch.dll
+ 2007-09-27 13:22:44 413,760 ----a-w C:\Windows\System32\mpg4c32.dll
- 2008-05-09 21:35:04 16,863,864 ----a-w C:\Windows\System32\mrt.exe
+ 2008-06-25 16:15:46 17,972,344 ----a-w C:\Windows\System32\mrt.exe
- 2008-02-22 04:59:30 3,578,368 ----a-w C:\Windows\System32\mshtml.dll
+ 2008-04-25 04:35:14 3,578,368 ----a-w C:\Windows\System32\mshtml.dll
- 2008-01-19 07:35:12 23,552 ----a-w C:\Windows\System32\msscb.dll
+ 2008-05-27 05:17:42 34,816 ----a-w C:\Windows\System32\msscb.dll
- 2008-01-19 07:35:12 51,200 ----a-w C:\Windows\System32\msscntrs.dll
+ 2008-05-27 05:17:25 60,416 ----a-w C:\Windows\System32\msscntrs.dll
+ 2008-05-27 05:17:36 11,776 ----a-w C:\Windows\System32\msshooks.dll
- 2008-01-19 07:35:13 248,832 ----a-w C:\Windows\System32\msshsq.dll
+ 2008-05-27 05:18:32 231,936 ----a-w C:\Windows\System32\msshsq.dll
- 2008-01-19 07:35:13 98,304 ----a-w C:\Windows\System32\mssitlb.dll
+ 2008-05-27 05:17:25 87,552 ----a-w C:\Windows\System32\mssitlb.dll
- 2008-01-19 07:35:13 333,824 ----a-w C:\Windows\System32\mssph.dll
+ 2008-05-27 05:18:25 350,208 ----a-w C:\Windows\System32\mssph.dll
- 2008-01-19 07:35:13 167,936 ----a-w C:\Windows\System32\mssphtb.dll
+ 2008-05-27 05:18:55 203,776 ----a-w C:\Windows\System32\mssphtb.dll
- 2008-01-19 07:35:13 32,256 ----a-w C:\Windows\System32\mssprxy.dll
+ 2008-05-27 05:17:26 32,768 ----a-w C:\Windows\System32\mssprxy.dll
- 2008-01-19 07:36:08 1,400,832 ----a-w C:\Windows\System32\mssrch.dll
+ 2008-05-27 05:21:24 1,418,240 ----a-w C:\Windows\System32\mssrch.dll
- 2008-01-19 07:35:13 52,224 ----a-w C:\Windows\System32\msstrc.dll
+ 2008-05-27 05:18:40 44,032 ----a-w C:\Windows\System32\msstrc.dll
- 2008-01-19 07:35:13 1,696,768 ----a-w C:\Windows\System32\mssvp.dll
+ 2008-05-27 05:18:56 670,208 ----a-w C:\Windows\System32\mssvp.dll
- 2008-02-22 04:59:51 671,232 ----a-w C:\Windows\System32\mstime.dll
+ 2008-04-25 04:35:16 671,232 ----a-w C:\Windows\System32\mstime.dll
- 2008-01-19 07:35:38 122,368 ----a-w C:\Windows\System32\nlhtml.dll
+ 2008-05-27 05:18:30 136,704 ----a-w C:\Windows\System32\nlhtml.dll
- 2008-01-19 07:43:48 3,600,440 ----a-w C:\Windows\System32\ntkrnlpa.exe
+ 2008-04-26 08:25:53 3,600,952 ----a-w C:\Windows\System32\ntkrnlpa.exe
- 2008-01-19 07:43:47 3,548,728 ----a-w C:\Windows\System32\ntoskrnl.exe
+ 2008-04-26 08:25:54 3,549,240 ----a-w C:\Windows\System32\ntoskrnl.exe
- 2008-01-19 07:36:00 194,560 ----a-w C:\Windows\System32\offfilt.dll
+ 2008-05-27 05:17:23 194,560 ----a-w C:\Windows\System32\offfilt.dll
- 2006-11-02 09:46:12 15,360 ----a-w C:\Windows\System32\pacerprf.dll
+ 2008-04-05 03:34:31 15,360 ----a-w C:\Windows\System32\pacerprf.dll
- 2008-06-04 09:59:09 118,162 ----a-w C:\Windows\System32\perfc009.dat
+ 2008-07-14 14:15:59 118,162 ----a-w C:\Windows\System32\perfc009.dat
- 2008-06-04 09:59:09 7,346 ----a-w C:\Windows\System32\perfc01B.dat
+ 2008-07-14 14:15:59 24,868 ----a-w C:\Windows\System32\perfc01B.dat
- 2008-06-04 09:59:09 633,276 ----a-w C:\Windows\System32\perfh009.dat
+ 2008-07-14 14:15:59 633,276 ----a-w C:\Windows\System32\perfh009.dat
- 2008-06-04 09:59:09 27,924 ----a-w C:\Windows\System32\perfh01B.dat
+ 2008-07-14 14:15:59 74,632 ----a-w C:\Windows\System32\perfh01B.dat
+ 2008-06-25 16:49:31 278,528 ----a-w C:\Windows\System32\pncrt.dll
+ 2008-06-25 16:49:34 6,656 ----a-w C:\Windows\System32\pndx5016.dll
+ 2008-06-25 16:49:34 5,632 ----a-w C:\Windows\System32\pndx5032.dll
- 2008-01-19 07:36:11 65,536 ----a-w C:\Windows\System32\propdefs.dll
+ 2008-05-27 05:18:06 71,680 ----a-w C:\Windows\System32\propdefs.dll
- 2008-01-19 07:36:11 750,080 ----a-w C:\Windows\System32\propsys.dll
+ 2008-05-27 05:17:46 754,176 ----a-w C:\Windows\System32\propsys.dll
- 2008-03-21 20:30:08 3,596,288 ----a-w C:\Windows\System32\qt-dx331.dll
+ 2008-05-22 22:22:18 3,596,288 ----a-w C:\Windows\System32\qt-dx331.dll
- 2008-01-19 07:36:14 1,314,816 ----a-w C:\Windows\System32\quartz.dll
+ 2008-04-26 08:08:15 1,314,816 ----a-w C:\Windows\System32\quartz.dll
- 2008-01-19 07:36:15 889,344 ----a-w C:\Windows\System32\RacEngn.dll
+ 2008-05-10 03:35:20 885,248 ----a-w C:\Windows\System32\RacEngn.dll
+ 2008-06-25 16:49:42 185,944 ----a-w C:\Windows\System32\rmoc3260.dll
- 2008-01-19 07:36:17 785,408 ----a-w C:\Windows\System32\rpcrt4.dll
+ 2008-04-12 03:32:11 784,896 ----a-w C:\Windows\System32\rpcrt4.dll
- 2008-01-19 07:36:17 26,624 ----a-w C:\Windows\System32\rtffilt.dll
+ 2008-05-27 05:18:30 38,400 ----a-w C:\Windows\System32\rtffilt.dll
- 2008-01-19 07:36:19 180,224 ----a-w C:\Windows\System32\scrobj.dll
+ 2008-05-08 21:59:32 180,224 ----a-w C:\Windows\System32\scrobj.dll
- 2008-01-19 07:36:19 172,032 ----a-w C:\Windows\System32\scrrun.dll
+ 2008-05-08 21:59:32 172,032 ----a-w C:\Windows\System32\scrrun.dll
- 2008-01-19 07:33:28 76,800 ----a-w C:\Windows\System32\SearchFilterHost.exe
+ 2008-05-27 05:17:55 87,552 ----a-w C:\Windows\System32\SearchFilterHost.exe
- 2008-01-19 07:33:28 302,080 ----a-w C:\Windows\System32\SearchIndexer.exe
+ 2008-05-27 05:18:43 439,808 ----a-w C:\Windows\System32\SearchIndexer.exe
- 2008-01-19 07:33:28 179,200 ----a-w C:\Windows\System32\SearchProtocolHost.exe
+ 2008-05-27 05:18:16 184,832 ----a-w C:\Windows\System32\SearchProtocolHost.exe
- 2008-01-19 07:36:10 11,580,416 ----a-w C:\Windows\System32\shell32.dll
+ 2008-04-24 04:58:20 11,580,416 ----a-w C:\Windows\System32\shell32.dll
- 2008-05-28 18:49:32 6,029,312 ----a-w C:\Windows\System32\SMI\Store\Machine\SCHEMA.DAT
+ 2008-07-04 11:42:13 6,291,456 ----a-w C:\Windows\System32\SMI\Store\Machine\schema.dat
+ 2006-09-24 13:28:46 5,248 ----a-w C:\Windows\System32\speedfan.sys
- 2008-01-19 07:36:35 258,048 ----a-w C:\Windows\System32\srchadmin.dll
+ 2008-05-27 05:17:28 301,568 ----a-w C:\Windows\System32\srchadmin.dll
- 2008-03-21 20:30:00 200,704 ----a-w C:\Windows\System32\ssldivx.dll
+ 2008-05-22 22:20:42 200,704 ----a-w C:\Windows\System32\ssldivx.dll
- 2008-01-19 03:17:42 100,043 ----a-w C:\Windows\System32\StructuredQuerySchema.bin
+ 2008-05-27 04:59:39 106,605 ----a-w C:\Windows\System32\StructuredQuerySchema.bin
- 2006-11-02 06:29:53 18,271 ----a-w C:\Windows\System32\StructuredQuerySchemaTrivial.bin
+ 2008-05-27 04:59:40 18,904 ----a-w C:\Windows\System32\StructuredQuerySchemaTrivial.bin
+ 2008-01-19 07:33:32 163,840 ----a-w C:\Windows\System32\T.COM
- 2006-11-02 09:46:13 313,344 ----a-w C:\Windows\System32\thawbrkr.dll
+ 2008-05-27 05:17:16 313,344 ----a-w C:\Windows\System32\thawbrkr.dll
- 2008-01-19 07:36:42 1,505,792 ----a-w C:\Windows\System32\tquery.dll
+ 2008-05-27 05:21:07 1,582,592 ----a-w C:\Windows\System32\tquery.dll
+ 2000-02-15 23:00:00 16,384 ----a-w C:\Windows\System32\UniClear.exe
- 2008-02-22 05:01:33 1,166,336 ----a-w C:\Windows\System32\urlmon.dll
+ 2008-04-25 04:35:19 1,166,336 ----a-w C:\Windows\System32\urlmon.dll
+ 2007-05-16 06:41:18 29,704 ----a-w C:\Windows\System32\uxtuneup.dll
- 2008-01-19 07:36:47 430,080 ----a-w C:\Windows\System32\vbscript.dll
+ 2008-05-08 21:59:33 430,080 ----a-w C:\Windows\System32\vbscript.dll
- 2008-06-04 09:56:39 13,968 ----a-w C:\Windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-73720288-2714466538-2483946370-1004_UserData.bin
+ 2008-07-14 14:11:23 19,164 ----a-w C:\Windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-73720288-2714466538-2483946370-1004_UserData.bin
- 2008-06-04 09:56:38 57,464 ----a-w C:\Windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
+ 2008-07-14 14:11:23 70,700 ----a-w C:\Windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
- 2008-06-04 09:53:42 1,514 ----a-w C:\Windows\System32\WDI\ERCQueuedResolutions.dat
+ 2008-07-13 14:05:21 1,824 ----a-w C:\Windows\System32\WDI\ERCQueuedResolutions.dat
- 2008-06-04 09:56:36 44,340 ----a-w C:\Windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2008-07-14 14:11:21 58,986 ----a-w C:\Windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
- 2008-02-22 05:01:41 826,880 ----a-w C:\Windows\System32\wininet.dll
+ 2008-04-25 04:35:23 826,880 ----a-w C:\Windows\System32\wininet.dll
- 2008-01-19 07:33:40 155,648 ----a-w C:\Windows\System32\wscript.exe
+ 2008-05-08 21:59:26 155,648 ----a-w C:\Windows\System32\wscript.exe
- 2008-01-19 07:37:11 27,136 ----a-w C:\Windows\System32\wsepno.dll
+ 2008-05-27 05:18:35 29,184 ----a-w C:\Windows\System32\wsepno.dll
- 2008-01-19 07:37:11 90,112 ----a-w C:\Windows\System32\wshext.dll
+ 2008-05-08 21:59:35 90,112 ----a-w C:\Windows\System32\wshext.dll
+ 2008-05-30 12:17:00 25,608 ----a-w C:\Windows\System32\X3DAudio1_4.dll
+ 2008-05-30 12:18:52 238,088 ----a-w C:\Windows\System32\xactengine3_1.dll
+ 2008-05-30 12:17:30 65,032 ----a-w C:\Windows\System32\XAPOFX1_0.dll
+ 2008-05-30 12:19:18 507,400 ----a-w C:\Windows\System32\XAudio2_1.dll
- 2008-01-19 07:37:12 110,592 ----a-w C:\Windows\System32\xmlfilter.dll
+ 2008-05-27 05:18:32 56,320 ----a-w C:\Windows\System32\xmlfilter.dll
- 2005-12-30 18:10:30 761,856 ----a-w C:\Windows\System32\xvidcore.dll
+ 2007-09-27 13:22:44 524,288 ----a-w C:\Windows\System32\xvidcore.dll
+ 2007-09-27 13:22:44 139,264 ----a-w C:\Windows\System32\xvidvfw.dll
+ 2007-04-19 07:35:40 240,368 ----a-w C:\Windows\UNBOC.EXE
- 2008-05-28 14:16:29 94,566,284 ----a-w C:\Windows\winsxs\ManifestCache\6.0.6001.18000_001c50b5_blobs.bin
+ 2008-07-04 10:38:38 7,303,700 ----a-w C:\Windows\winsxs\ManifestCache\6.0.6001.18000_001c50b5_blobs.bin
+ 2008-04-29 01:42:12 19,456 ----a-w C:\Windows\winsxs\x86_bth.inf_31bf3856ad364e35_6.0.6000.16682_none_700a06c9bea9b8da\bthenum.sys
+ 2008-04-29 01:42:12 220,160 ----a-w C:\Windows\winsxs\x86_bth.inf_31bf3856ad364e35_6.0.6000.16682_none_700a06c9bea9b8da\bthport.sys
+ 2008-04-29 01:42:08 29,184 ----a-w C:\Windows\winsxs\x86_bth.inf_31bf3856ad364e35_6.0.6000.16682_none_700a06c9bea9b8da\BTHUSB.SYS
+ 2008-04-29 03:50:12 181,760 ----a-w C:\Windows\winsxs\x86_bth.inf_31bf3856ad364e35_6.0.6000.16682_none_700a06c9bea9b8da\fsquirt.exe
+ 2008-04-29 01:35:24 19,456 ----a-w C:\Windows\winsxs\x86_bth.inf_31bf3856ad364e35_6.0.6000.20824_none_70d68596d794e0d3\bthenum.sys
+ 2008-04-29 01:35:25 220,160 ----a-w C:\Windows\winsxs\x86_bth.inf_31bf3856ad364e35_6.0.6000.20824_none_70d68596d794e0d3\bthport.sys
+ 2008-04-29 01:35:23 29,184 ----a-w C:\Windows\winsxs\x86_bth.inf_31bf3856ad364e35_6.0.6000.20824_none_70d68596d794e0d3\BTHUSB.SYS
+ 2008-04-29 01:35:24 181,760 ----a-w C:\Windows\winsxs\x86_bth.inf_31bf3856ad364e35_6.0.6000.20824_none_70d68596d794e0d3\fsquirt.exe
+ 2008-01-19 05:53:38 19,456 ----a-w C:\Windows\winsxs\x86_bth.inf_31bf3856ad364e35_6.0.6001.18064_none_7207e5dbbbbe4497\bthenum.sys
+ 2008-04-29 01:42:23 220,160 ----a-w C:\Windows\winsxs\x86_bth.inf_31bf3856ad364e35_6.0.6001.18064_none_7207e5dbbbbe4497\bthport.sys
+ 2008-04-29 01:42:21 29,184 ----a-w C:\Windows\winsxs\x86_bth.inf_31bf3856ad364e35_6.0.6001.18064_none_7207e5dbbbbe4497\BTHUSB.SYS
+ 2008-04-29 03:54:02 181,760 ----a-w C:\Windows\winsxs\x86_bth.inf_31bf3856ad364e35_6.0.6001.18064_none_7207e5dbbbbe4497\fsquirt.exe
+ 2008-04-29 01:43:50 19,456 ----a-w C:\Windows\winsxs\x86_bth.inf_31bf3856ad364e35_6.0.6001.22168_none_729583ced4d849bd\bthenum.sys
+ 2008-04-29 01:43:50 220,160 ----a-w C:\Windows\winsxs\x86_bth.inf_31bf3856ad364e35_6.0.6001.22168_none_729583ced4d849bd\bthport.sys
+ 2008-04-29 01:43:48 29,184 ----a-w C:\Windows\winsxs\x86_bth.inf_31bf3856ad364e35_6.0.6001.22168_none_729583ced4d849bd\BTHUSB.SYS
+ 2008-04-29 01:43:51 181,760 ----a-w C:\Windows\winsxs\x86_bth.inf_31bf3856ad364e35_6.0.6001.22168_none_729583ced4d849bd\fsquirt.exe
+ 2008-05-27 05:17:28 301,568 ----a-w C:\Windows\winsxs\x86_desktop_shell-search-srchadmin_31bf3856ad364e35_7.0.6001.16503_none_13fcab3737a334c2\srchadmin.dll
+ 2008-04-25 04:23:05 124,928 ----a-w C:\Windows\winsxs\x86_microsoft-windows-advpack_31bf3856ad364e35_6.0.6000.16681_none_a98fa7bdf5e9f5de\advpack.dll
+ 2008-04-25 04:06:14 124,928 ----a-w C:\Windows\winsxs\x86_microsoft-windows-advpack_31bf3856ad364e35_6.0.6000.20823_none_aa5c268b0ed51dd7\advpack.dll
+ 2008-05-27 05:18:30 136,704 ----a-w C:\Windows\winsxs\x86_microsoft-windows-content-filter-html_31bf3856ad364e35_7.0.6001.16503_none_13ff1de93d266b97\nlhtml.dll
+ 2008-05-27 05:18:32 56,320 ----a-w C:\Windows\winsxs\x86_microsoft-windows-content-filter-html_31bf3856ad364e35_7.0.6001.16503_none_13ff1de93d266b97\xmlfilter.dll
+ 2008-05-27 05:18:32 40,448 ----a-w C:\Windows\winsxs\x86_microsoft-windows-content-filter-mime_31bf3856ad364e35_7.0.6001.16503_none_10a358dd3f57c0de\mimefilt.dll
+ 2008-05-27 05:17:23 194,560 ----a-w C:\Windows\winsxs\x86_microsoft-windows-content-filter-office_31bf3856ad364e35_7.0.6001.16503_none_fab3f42bbfadf408\offfilt.dll
+ 2008-05-27 05:18:30 38,400 ----a-w C:\Windows\winsxs\x86_microsoft-windows-content-filter-rtf_31bf3856ad364e35_7.0.6001.16503_none_485964bf76e0570a\rtffilt.dll
+ 2008-04-26 08:02:05 1,327,104 ----a-w C:\Windows\winsxs\x86_microsoft-windows-directshow-core_31bf3856ad364e35_6.0.6000.16681_none_a4347a24f0ff937a\quartz.dll
+ 2008-04-26 07:41:59 1,327,616 ----a-w C:\Windows\winsxs\x86_microsoft-windows-directshow-core_31bf3856ad364e35_6.0.6000.20823_none_a500f8f209eabb73\quartz.dll
+ 2008-04-26 08:08:15 1,314,816 ----a-w C:\Windows\winsxs\x86_microsoft-windows-directshow-core_31bf3856ad364e35_6.0.6001.18063_none_a6325936ee141f37\quartz.dll
+ 2008-04-26 07:57:58 1,314,816 ----a-w C:\Windows\winsxs\x86_microsoft-windows-directshow-core_31bf3856ad364e35_6.0.6001.22167_none_a6bff72a072e245d\quartz.dll
+ 2008-05-10 03:35:15 564,736 ----a-w C:\Windows\winsxs\x86_microsoft-windows-e..emorydevicesservice_31bf3856ad364e35_6.0.6001.18069_none_9e540f60f6e2ecf1\emdmgmt.dll
+ 2008-05-10 03:17:36 564,736 ----a-w C:\Windows\winsxs\x86_microsoft-windows-e..emorydevicesservice_31bf3856ad364e35_6.0.6001.22176_none_9ecfdb62100b5ca7\emdmgmt.dll
+ 2008-04-25 04:23:10 44,544 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..ablenetworkgraphics_31bf3856ad364e35_6.0.6000.16681_none_eb8ab16d1682dbdd\pngfilt.dll
+ 2008-04-25 04:09:24 44,544 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..ablenetworkgraphics_31bf3856ad364e35_6.0.6000.20823_none_ec57303a2f6e03d6\pngfilt.dll
+ 2008-04-25 04:23:11 1,159,680 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6000.16681_none_b2a75a1fd9e35341\urlmon.dll
+ 2008-04-25 04:09:51 1,162,752 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6000.20823_none_b373d8ecf2ce7b3a\urlmon.dll
+ 2008-04-25 04:35:19 1,166,336 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6001.18063_none_b4a53931d6f7defe\urlmon.dll
+ 2008-04-25 04:21:54 1,166,336 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6001.22167_none_b532d724f011e424\urlmon.dll
+ 2008-04-25 04:23:09 671,232 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6000.16681_none_de89e8e87f8c12b0\mstime.dll
+ 2008-04-25 04:08:10 671,232 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6000.20823_none_df5667b598773aa9\mstime.dll
+ 2008-04-25 04:35:16 671,232 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6001.18063_none_e087c7fa7ca09e6d\mstime.dll
+ 2008-04-25 04:20:09 671,232 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6001.22167_none_e11565ed95baa393\mstime.dll
+ 2008-04-25 04:23:06 27,648 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16681_none_ffad35c1a4ec79d4\jsproxy.dll
+ 2008-04-25 04:23:11 826,368 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16681_none_ffad35c1a4ec79d4\wininet.dll
+ 2008-04-25 04:23:11 64,512 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16681_none_ffad35c1a4ec79d4\WininetPlugin.dll
+ 2008-04-25 04:07:19 27,648 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.20823_none_0079b48ebdd7a1cd\jsproxy.dll
+ 2008-04-25 04:09:57 827,392 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.20823_none_0079b48ebdd7a1cd\wininet.dll
+ 2008-04-25 04:09:57 64,512 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.20823_none_0079b48ebdd7a1cd\WininetPlugin.dll
+ 2008-04-25 04:35:13 28,160 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.18063_none_01ab14d3a2010591\jsproxy.dll
+ 2008-04-25 04:35:23 826,880 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.18063_none_01ab14d3a2010591\wininet.dll
+ 2008-04-25 04:35:24 64,512 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.18063_none_01ab14d3a2010591\WininetPlugin.dll
+ 2008-04-25 04:19:00 28,160 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.22167_none_0238b2c6bb1b0ab7\jsproxy.dll
+ 2008-04-25 04:22:01 826,880 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.22167_none_0238b2c6bb1b0ab7\wininet.dll
+ 2008-04-25 04:22:01 64,512 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.22167_none_0238b2c6bb1b0ab7\WininetPlugin.dll
+ 2008-03-26 21:06:14 2,455,488 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.16681_none_f956589b6ed7f427\ieapfltr.dat
+ 2008-04-25 04:23:06 383,488 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.16681_none_f956589b6ed7f427\ieapfltr.dll
+ 2008-03-26 21:06:14 2,455,488 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.20823_none_fa22d76887c31c20\ieapfltr.dat
+ 2008-04-25 04:07:00 383,488 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.20823_none_fa22d76887c31c20\ieapfltr.dll
+ 2008-04-25 04:23:06 347,136 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.16681_none_958a915384bd7a55\dxtmsft.dll
+ 2008-04-25 04:23:06 214,528 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.16681_none_958a915384bd7a55\dxtrans.dll
+ 2008-04-25 04:06:44 347,136 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.20823_none_965710209da8a24e\dxtmsft.dll
+ 2008-04-25 04:06:44 214,528 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.20823_none_965710209da8a24e\dxtrans.dll
+ 2008-04-25 04:23:07 478,208 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-htmlediting_31bf3856ad364e35_6.0.6000.16681_none_45ed2bab467e2ce2\mshtmled.dll
+ 2008-04-25 04:07:54 478,208 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-htmlediting_31bf3856ad364e35_6.0.6000.20823_none_46b9aa785f6954db\mshtmled.dll
+ 2008-04-25 04:23:07 3,591,680 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6000.16681_none_110754e02542e30a\mshtml.dll
+ 2008-04-25 04:07:54 3,593,728 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6000.20823_none_11d3d3ad3e2e0b03\mshtml.dll
+ 2008-04-25 04:35:14 3,578,368 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6001.18063_none_130533f222576ec7\mshtml.dll
+ 2008-04-25 04:19:50 3,578,368 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6001.22167_none_1392d1e53b7173ed\mshtml.dll
+ 2008-04-25 04:23:06 63,488 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-infocard_31bf3856ad364e35_6.0.6000.16681_none_585fc1aa67576f13\icardie.dll
+ 2008-04-25 04:06:59 63,488 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-infocard_31bf3856ad364e35_6.0.6000.20823_none_592c40778042970c\icardie.dll
+ 2008-04-25 04:22:36 26,624 --


Offline

Užívateľ
Užívateľ
Hijack log-pls

Registrovaný: 06.07.08
Prihlásený: 13.01.24
Príspevky: 2369
Témy: 134
Príspevok Napísal autor témyOffline : 17.07.2008 11:57

No tak mam ten sys inspector len nechapem aky log myslis.....vyhodilo daku tabulku a tam kopec veci tak naozaj neviem co vcul
Myslis ten zip log co vygenerovalo pri zatvoreni?


Offline

Skúsený užívateľ
Skúsený užívateľ
Obrázok užívateľa

Registrovaný: 12.06.08
Prihlásený: 16.09.10
Príspevky: 440
Témy: 4
Príspevok NapísalOffline : 17.07.2008 12:52

Ano


Offline

Skúsený užívateľ
Skúsený užívateľ
Obrázok užívateľa

Registrovaný: 12.06.08
Prihlásený: 16.09.10
Príspevky: 440
Témy: 4
Príspevok NapísalOffline : 17.07.2008 16:20

Najdi tento subor a otvor ho v Poznamkovom bloku:

C:\WINDOWS\system32\drivers\etc\hosts


Zmaz z neho vsetko, co bude pod touto polozkou:

127.0.0.1 localhost

=> tato zostane spolu s textom nad


Start -> Spustit -> msconfig -> WIN.INI -> Nepozdava sa mi toto:

"ID={A35450C2-CF8B-450F-A651-45D104A57D86}"



Skopiruj logy, co hlasi antivir.


Offline

Užívateľ
Užívateľ
Hijack log-pls

Registrovaný: 06.07.08
Prihlásený: 13.01.24
Príspevky: 2369
Témy: 134
Príspevok Napísal autor témyOffline : 17.07.2008 20:03

Kosak píše:
Najdi tento subor a otvor ho v Poznamkovom bloku:

C:\WINDOWS\system32\drivers\etc\hosts


Zmaz z neho vsetko, co bude pod touto polozkou:

127.0.0.1 localhost

=> tato zostane spolu s textom nad


Start -> Spustit -> msconfig -> WIN.INI -> Nepozdava sa mi toto:

"ID={A35450C2-CF8B-450F-A651-45D104A57D86}"

No tak zmazal som to ale nechce mi ho potom ulozit v zmazanom stave ze subor iba na citanie,a tomu druhemu nechapem vobec


Skopiruj logy, co hlasi antivir.


Offline

Skúsený užívateľ
Skúsený užívateľ
Obrázok užívateľa

Registrovaný: 12.06.08
Prihlásený: 16.09.10
Príspevky: 440
Témy: 4
Príspevok NapísalOffline : 17.07.2008 20:51

No, citoval si ma. A co teraz?


Offline

Užívateľ
Užívateľ
Hijack log-pls

Registrovaný: 06.07.08
Prihlásený: 13.01.24
Príspevky: 2369
Témy: 134
Príspevok Napísal autor témyOffline : 17.07.2008 21:38

Neviem preco ale moj prispevok nenapisalo...no ze mi to nechce prepisat ze je to len na citanie..a tomu druhemu nechapem
A to dnes uz 2 krat nenapisalo moj text pri citacii


Odpovedať na tému [ Príspevkov: 14 ] 


Podobné témy

 Témy  Odpovede  Zobrazenia  Posledný príspevok 
V tomto fóre nie sú ďalšie neprečítané témy. Log z hijack

v Antivíry a antispywary

3

591

04.06.2008 18:53

Qpkqkma Zobrazenie posledných príspevkov

V tomto fóre nie sú ďalšie neprečítané témy. Moj Hijack log

v Antivíry a antispywary

0

511

05.02.2008 20:50

Larliand Zobrazenie posledných príspevkov

V tomto fóre nie sú ďalšie neprečítané témy. Prosim o kontrolu Hijack log

v Antivíry a antispywary

0

645

15.02.2008 21:24

alan Zobrazenie posledných príspevkov

V tomto fóre nie sú ďalšie neprečítané témy. Zkontrolujte moj log z Hijack

v Antivíry a antispywary

5

647

17.10.2007 22:07

Rbot Zobrazenie posledných príspevkov

V tomto fóre nie sú ďalšie neprečítané témy. pls kontrola hijack logu

v Antivíry a antispywary

1

1109

16.11.2007 18:37

Rbot Zobrazenie posledných príspevkov

V tomto fóre nie sú ďalšie neprečítané témy. Pls skontrolujte log

v Antivíry a antispywary

15

1146

29.08.2008 13:43

pipa0902 Zobrazenie posledných príspevkov

V tomto fóre nie sú ďalšie neprečítané témy. PLS kontrola log z HJT

v Antivíry a antispywary

22

1140

05.01.2008 12:14

Mandy Zobrazenie posledných príspevkov

V tomto fóre nie sú ďalšie neprečítané témy. Pls skontrolujte mi log z HijackThis

v Bezpečnosť a firewally

7

1493

11.05.2007 15:07

Jaro Zobrazenie posledných príspevkov

V tomto fóre nie sú ďalšie neprečítané témy. kontrola hijack

v Antivíry a antispywary

1

452

13.11.2007 15:22

Rbot Zobrazenie posledných príspevkov

V tomto fóre nie sú ďalšie neprečítané témy. hijack this

v Antivíry a antispywary

12

775

30.11.2009 19:35

pitimir Zobrazenie posledných príspevkov

V tomto fóre nie sú ďalšie neprečítané témy. kontrola hijack

[ Choď na stránku:Choď na stránku: 1, 2 ]

v Bezpečnosť a firewally

35

2263

04.05.2013 9:14

kontingent Zobrazenie posledných príspevkov

V tomto fóre nie sú ďalšie neprečítané témy. hijack this

v Antivíry a antispywary

3

536

06.11.2010 20:13

Pistuk_14 Zobrazenie posledných príspevkov

V tomto fóre nie sú ďalšie neprečítané témy. kluci help..... hijack

v Antivíry a antispywary

3

542

01.04.2008 20:33

br4n0 Zobrazenie posledných príspevkov

V tomto fóre nie sú ďalšie neprečítané témy. Kontrola Hijack logu

v Antivíry a antispywary

15

900

25.06.2008 3:15

Roberbo Zobrazenie posledných príspevkov

V tomto fóre nie sú ďalšie neprečítané témy. Problem s USB, Hijack

v Antivíry a antispywary

14

1067

27.05.2008 22:18

majso Zobrazenie posledných príspevkov

V tomto fóre nie sú ďalšie neprečítané témy. hijack - poprosim o kontrolu

v Bezpečnosť a firewally

1

1376

13.07.2008 18:32

Kosak Zobrazenie posledných príspevkov


Nemôžete zakladať nové témy v tomto fóre
Nemôžete odpovedať na témy v tomto fóre
Nemôžete upravovať svoje príspevky v tomto fóre
Nemôžete mazať svoje príspevky v tomto fóre

Skočiť na:  

Powered by phpBB Jarvis © 2005 - 2024 PCforum, webhosting by WebSupport, secured by GeoTrust, edited by JanoF
Ako väčšina webových stránok aj my používame cookies. Zotrvaním na webovej stránke súhlasíte, že ich môžeme používať.
Všeobecné podmienky, spracovanie osobných údajov a pravidlá fóra