well her are the logs finally:
SUPERAntiSpyware Scan Log
SUPERAntiSpyware.com | Remove Malware | Remove Spyware - AntiMalware, AntiSpyware, AntiAdware!
Generated 09/24/2009 at 01:52 PM
Application Version : 4.29.1002
Core Rules Database Version : 4123
Trace Rules Database Version: 2062
Scan type : Complete Scan
Total Scan Time : 00:26:36
Memory items scanned : 694
Memory threats detected : 0
Registry items scanned : 6101
Registry threats detected : 0
File items scanned : 21380
File threats detected : 35
Adware.Tracking Cookie
C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Co okies\Low\tony@hotbarebacking[2].txt
C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Co okies\Low\tony@fastclick[2].txt
C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Co okies\Low\tony@realmedia[1].txt
C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Co okies\Low\tony@a1.interclick[2].txt
C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Co okies\Low\tony@www.adultadvertising[1].txt
C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Co okies\Low\tony@adbrite[1].txt
C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Co okies\Low\tony@specificclick[1].txt
C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Co okies\Low\tony@yadro[1].txt
C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Co okies\Low\tony@chitika[2].txt
C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Co okies\Low\tony@casalemedia[2].txt
C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Co okies\Low\tony@ads.sun[2].txt
C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Co okies\Low\tony@content.yieldmanager[1].txt
C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Co okies\Low\tony@ad.yieldmanager[1].txt
C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Co okies\Low\tony@content.yieldmanager[3].txt
C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Co okies\Low\tony@t.lynxtrack[2].txt
C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Co okies\Low\tony@revsci[2].txt
C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Co okies\Low\tony@nextag[1].txt
C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Co okies\Low\tony@ads.pointroll[1].txt
C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Co okies\Low\tony@www.mediafire[2].txt
C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Co okies\Low\tony@interclick[2].txt
C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Co okies\Low\tony@advertising[2].txt
C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Co okies\Low\tony@specificmedia[1].txt
C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Co okies\Low\tony@collective-media[1].txt
C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Co okies\Low\tony@atdmt[1].txt
C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Co okies\Low\tony@doubleclick[2].txt
C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Co okies\Low\tony@mediafire[1].txt
C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Co okies\Low\tony@mediaplex[2].txt
C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Co okies\Low\tony@server.iad.liveperson[3].txt
C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Co okies\Low\tony@server.iad.liveperson[1].txt
C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Co okies\Low\tony@apmebf[1].txt
C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Co okies\Low\tony@openxxx.viragemedia[1].txt
C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Co okies\Low\tony@questionmarket[1].txt
C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Co okies\Low\tony@richmedia.yahoo[1].txt
C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Co okies\Low\tony@trafficmp[1].txt
C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Co okies\Low\tony@zedo[1].txt
Malwarebytes' Anti-Malware 1.41
Database version: 2872
Windows 6.0.6000
9/29/2009 12:47:40 PM
mbam-log-2009-09-29 (12-47-40).txt
Scan type: Full Scan (C:\|)
Objects scanned: 156283
Time elapsed: 58 minute(s), 50 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 15
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
C:\Qoobox\Quarantine\C\ProgramData\bayefiza\bayefi za.dll.vir (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Qoobox\Quarantine\C\ProgramData\bihinoga\bihino ga.dll.vir (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Qoobox\Quarantine\C\ProgramData\bihomimo\bihomi mo.dll.vir (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Qoobox\Quarantine\C\ProgramData\dazetaha\dazeta ha.dll.vir (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Qoobox\Quarantine\C\ProgramData\dokigera\dokige ra.dll.vir (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Qoobox\Quarantine\C\ProgramData\fajeyeyi\fajeye yi.dll.vir (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Qoobox\Quarantine\C\ProgramData\fetabeke\fetabe ke.dll.vir (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Qoobox\Quarantine\C\ProgramData\gijulewu\gijule wu.dll.vir (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Qoobox\Quarantine\C\ProgramData\hovewifa\hovewi fa.dll.vir (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Qoobox\Quarantine\C\ProgramData\layezefu\layeze fu.dll.vir (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Qoobox\Quarantine\C\ProgramData\lowefevu\lowefe vu.dll.vir (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Qoobox\Quarantine\C\ProgramData\retenogu\reteno gu.dll.vir (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Qoobox\Quarantine\C\ProgramData\tomiyegi\tomiye gi.dll.vir (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Qoobox\Quarantine\C\ProgramData\zetikude\zetiku de.dll.vir (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Qoobox\Quarantine\C\ProgramData\zokutahi\zokuta hi.dll.vir (Trojan.Vundo) -> Quarantined and deleted successfully.
ComboFix 09-09-28.01 - Tony 09/29/2009 13:05.7.1 - NTFSx86
Microsoft® Windows Vista™ Home Basic 6.0.6000.0.1252.1.1033.18.447.161 [GMT -5:00]
Running from: c:\users\Tony\Desktop\ComboFix.exe
AV: Norton 360 *On-access scanning disabled* (Updated) {E10A9785-9598-4754-B552-92431C1C35F8}
FW: Norton 360 *disabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}
SP: Norton 360 *enabled* (Updated) {CBB7EE13-8244-4DAB-8B55-D5C7AA91E59A}
SP: SUPERAntiSpyware *enabled* (Updated) {222A897C-5018-402e-943F-7E7AC8560DA7}
SP: Windows Defender *disabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
* Created a new restore point
.
((((((((((((((((((((((((( Files Created from 2009-08-28 to 2009-09-29 )))))))))))))))))))))))))))))))
.
2009-09-29 18:15 . 2009-09-29 18:15 -------- d-----w- c:\users\Public\AppData\Local\temp
2009-09-29 18:15 . 2009-09-29 18:15 -------- d-----w- c:\users\Music\AppData\Local\temp
2009-09-29 18:15 . 2009-09-29 18:15 -------- d-----w- c:\users\Default\AppData\Local\temp
2009-09-22 00:37 . 2009-09-22 00:37 -------- d-----w- c:\programdata\SUPERAntiSpyware.com
2009-09-22 00:36 . 2009-09-22 00:36 -------- d-----w- c:\program files\SUPERAntiSpyware
2009-09-22 00:36 . 2009-09-22 00:36 -------- d-----w- c:\users\Tony\AppData\Roaming\SUPERAntiSpyware.com
2009-09-22 00:35 . 2009-09-22 00:35 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2009-09-12 17:52 . 2009-09-12 17:52 -------- d-----w- c:\users\Tony\DoctorWeb
2009-09-12 17:38 . 2009-09-24 18:19 411368 ----a-w- c:\windows\system32\deploytk.dll
2009-09-11 17:55 . 2009-09-11 17:55 -------- d-----w- c:\users\Tony\AppData\Local\Symantec
2009-09-09 16:46 . 2009-06-10 12:07 98816 ----a-w- c:\windows\system32\mfps.dll
2009-09-09 16:46 . 2009-06-10 12:07 2855424 ----a-w- c:\windows\system32\mf.dll
2009-09-09 16:46 . 2009-06-10 10:15 24576 ----a-w- c:\windows\system32\mfpmp.exe
2009-09-09 16:46 . 2009-06-10 10:14 52736 ----a-w- c:\windows\system32\rrinstaller.exe
2009-09-09 16:46 . 2009-06-10 08:50 2048 ----a-w- c:\windows\system32\mferror.dll
2009-09-09 16:45 . 2009-06-15 15:29 175104 ----a-w- c:\windows\system32\wdigest.dll
2009-09-09 16:45 . 2009-06-15 15:25 216576 ----a-w- c:\windows\system32\msv1_0.dll
2009-09-09 16:45 . 2009-06-15 15:23 1233920 ----a-w- c:\windows\system32\lsasrv.dll
2009-09-09 16:45 . 2009-06-15 15:23 494592 ----a-w- c:\windows\system32\kerberos.dll
2009-09-09 16:45 . 2009-06-15 18:12 408136 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2009-09-09 16:45 . 2009-06-15 15:28 72704 ----a-w- c:\windows\system32\secur32.dll
2009-09-09 16:45 . 2009-06-15 15:28 272384 ----a-w- c:\windows\system32\schannel.dll
2009-09-09 16:45 . 2009-06-15 13:10 7680 ----a-w- c:\windows\system32\lsass.exe
2009-09-08 00:20 . 2009-09-08 00:20 -------- d-----w- c:\users\Tony\AppData\Roaming\Malwarebytes
2009-09-08 00:19 . 2009-09-10 19:54 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-09-08 00:19 . 2009-09-08 00:19 -------- d-----w- c:\programdata\Malwarebytes
2009-09-08 00:19 . 2009-09-10 19:53 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-09-08 00:19 . 2009-09-29 16:43 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-09-04 00:22 . 2009-09-04 00:22 -------- d-----w- c:\windows\system32\N360_BACKUP
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))) ))
.
2009-09-24 18:19 . 2007-07-02 13:44 -------- d-----w- c:\program files\Java
2009-09-22 01:28 . 2009-08-21 12:23 -------- d-----w- c:\programdata\tuvodiro
2009-09-22 01:28 . 2009-08-21 00:23 -------- d-----w- c:\programdata\kenoyuje
2009-09-22 01:28 . 2009-08-20 12:24 -------- d-----w- c:\programdata\gufezaki
2009-09-22 01:28 . 2009-08-19 09:42 -------- d-----w- c:\programdata\yiposolu
2009-09-22 01:28 . 2009-08-18 09:42 -------- d-----w- c:\programdata\dapofeno
2009-09-22 01:28 . 2009-08-13 11:43 -------- d-----w- c:\programdata\jiyakiku
2009-09-22 01:28 . 2009-08-13 11:43 -------- d-----w- c:\programdata\vilofobo
2009-09-08 01:45 . 2009-08-21 00:24 -------- d-----w- c:\programdata\zulowono
2009-09-08 01:45 . 2009-08-21 00:24 -------- d-----w- c:\programdata\yiwapeye
2009-09-08 01:45 . 2009-08-21 00:24 -------- d-----w- c:\programdata\titadube
2009-09-08 01:45 . 2009-08-21 00:23 -------- d-----w- c:\programdata\pupuyete
2009-09-08 01:45 . 2009-08-18 21:43 -------- d-----w- c:\programdata\vegiwudo
2009-09-08 01:45 . 2009-08-18 21:43 -------- d-----w- c:\programdata\kuduzuta
2009-09-08 01:45 . 2009-08-18 21:43 -------- d-----w- c:\programdata\bodukisu
2009-09-08 01:45 . 2009-08-18 21:42 -------- d-----w- c:\programdata\dofiziba
2009-09-08 00:39 . 2009-08-23 08:01 -------- d-----w- c:\programdata\musivopa
2009-09-08 00:34 . 2009-08-22 11:51 -------- d-----w- c:\programdata\fejahawo
2009-09-08 00:34 . 2009-08-23 08:01 -------- d-----w- c:\programdata\titomako
2009-09-08 00:34 . 2009-08-22 11:51 -------- d-----w- c:\programdata\lejejawo
2009-09-08 00:34 . 2009-08-23 08:01 -------- d-----w- c:\programdata\kefelake
2009-09-05 14:39 . 2009-08-17 16:48 -------- d-----w- c:\programdata\bonolajo
2009-09-05 14:39 . 2009-08-17 16:48 -------- d-----w- c:\programdata\bomonege
2009-08-31 13:25 . 2009-08-22 11:51 -------- d-----w- c:\programdata\tomegoni
2009-08-31 13:22 . 2009-08-21 12:23 -------- d-----w- c:\programdata\higiripe
2009-08-29 13:11 . 2006-12-26 12:55 -------- d-----w- c:\program files\Common Files\Symantec Shared
2009-08-29 12:22 . 2009-08-29 12:22 -------- d-----w- c:\programdata\{7B6BA59A-FB0E-4499-8536-A7420338BF3B}
2009-08-29 12:22 . 2009-08-29 12:22 -------- d-----w- c:\program files\Symantec
2009-08-29 12:22 . 2009-08-29 12:22 805 ----a-w- c:\windows\system32\drivers\SYMEVENT.INF
2009-08-29 12:22 . 2009-08-29 12:22 7386 ----a-w- c:\windows\system32\drivers\SYMEVENT.CAT
2009-08-29 12:22 . 2009-08-29 12:22 124464 ----a-w- c:\windows\system32\drivers\SYMEVENT.SYS
2009-08-29 12:21 . 2009-08-29 12:22 25136 ----a-r- c:\windows\system32\drivers\SymIMV.sys
2009-08-29 12:19 . 2009-08-29 12:18 -------- d-----w- c:\program files\Norton 360
2009-08-29 12:18 . 2006-12-26 12:55 -------- d-----w- c:\programdata\Symantec
2009-08-29 12:11 . 2009-08-29 12:11 -------- d-----w- c:\programdata\PCSettings
2009-08-29 12:11 . 2009-08-29 12:07 -------- d-----w- c:\programdata\Norton
2009-08-29 12:07 . 2009-08-29 12:07 -------- d-----w- c:\programdata\NortonInstaller
2009-08-29 12:07 . 2009-08-29 12:07 -------- d-----w- c:\program files\NortonInstaller
2009-08-29 12:04 . 2009-08-29 12:04 -------- d-----w- c:\programdata\Symantec Temporary Files
2009-08-24 15:45 . 2009-08-24 15:45 -------- d-----w- c:\programdata\NVIDIA
2009-08-24 08:08 . 2009-08-24 08:08 5071872 ----a-w- c:\windows\system32\NlsModels0011.dll
2009-08-23 16:53 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2009-08-23 16:52 . 2006-11-02 12:35 -------- d-----w- c:\program files\Windows Sidebar
2009-08-23 16:30 . 2009-08-23 16:30 61440 ----a-w- c:\windows\system32\winipsec.dll
2009-08-23 16:30 . 2009-08-23 16:30 361984 ----a-w- c:\windows\system32\IPSECSVC.DLL
2009-08-23 16:30 . 2009-08-23 16:30 28672 ----a-w- c:\windows\system32\FwRemoteSvr.dll
2009-08-23 16:30 . 2009-08-23 16:30 272896 ----a-w- c:\windows\system32\polstore.dll
2009-08-23 16:23 . 2009-08-23 16:23 87040 ----a-w- c:\windows\system32\msoert2.dll
2009-08-23 16:23 . 2009-08-23 16:23 39424 ----a-w- c:\windows\system32\ACCTRES.dll
2009-08-23 16:23 . 2009-08-23 16:23 205824 ----a-w- c:\windows\system32\msoeacct.dll
2009-08-23 16:16 . 2009-08-23 16:16 110080 ----a-w- c:\windows\system32\drivers\mrxdav.sys
2009-08-23 16:16 . 2009-08-23 16:16 194560 ----a-w- c:\windows\system32\WebClnt.dll
2009-08-23 16:09 . 2009-08-23 16:09 2028032 ----a-w- c:\windows\system32\win32k.sys
2009-08-23 16:02 . 2009-08-23 16:02 156160 ----a-w- c:\windows\system32\t2embed.dll
2009-08-23 16:02 . 2009-08-23 16:02 34304 ----a-w- c:\windows\system32\atmlib.dll
2009-08-23 16:02 . 2009-08-23 16:02 289792 ----a-w- c:\windows\system32\atmfd.dll
2009-08-23 16:02 . 2009-08-23 16:02 72704 ----a-w- c:\windows\system32\fontsub.dll
2009-08-23 16:02 . 2009-08-23 16:02 24064 ----a-w- c:\windows\system32\lpk.dll
2009-08-23 16:02 . 2009-08-23 16:02 10240 ----a-w- c:\windows\system32\dciman32.dll
2009-08-23 15:54 . 2009-08-23 15:54 49664 ----a-w- c:\windows\system32\csrsrv.dll
2009-08-23 15:54 . 2009-08-23 15:54 376320 ----a-w- c:\windows\system32\winsrv.dll
2009-08-23 15:41 . 2009-08-23 15:41 376832 ----a-w- c:\windows\system32\winhttp.dll
2009-08-23 15:33 . 2009-08-23 15:33 71680 ----a-w- c:\windows\system32\atl.dll
2009-08-23 15:09 . 2009-08-23 15:09 297472 ----a-w- c:\windows\system32\gdi32.dll
2009-08-23 15:02 . 2009-08-23 15:02 211456 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2009-08-23 14:55 . 2009-08-23 14:55 500736 ----a-w- c:\windows\system32\msdtcprx.dll
2009-08-23 14:55 . 2009-08-23 14:55 30208 ----a-w- c:\windows\system32\xolehlp.dll
2009-08-23 14:48 . 2009-08-23 14:48 156160 ----a-w- c:\windows\system32\wkssvc.dll
2009-08-23 14:41 . 2009-08-23 14:41 36352 ----a-w- c:\windows\system32\tsgqec.dll
2009-08-23 14:41 . 2009-08-23 14:41 1871872 ----a-w- c:\windows\system32\mstscax.dll
2009-08-23 14:41 . 2009-08-23 14:41 116736 ----a-w- c:\windows\system32\aaclient.dll
2009-08-23 14:33 . 2009-08-23 14:33 28672 ----a-w- c:\windows\system32\Apphlpdm.dll
2009-08-23 14:33 . 2009-08-23 14:33 4247552 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll
2009-08-23 14:33 . 2009-08-23 14:33 1687040 ----a-w- c:\windows\system32\gameux.dll
2009-08-23 14:26 . 2009-08-23 14:26 303616 ----a-w- c:\windows\system32\wmpeffects.dll
2009-08-23 14:20 . 2009-08-23 14:20 2048 ----a-w- c:\windows\system32\msxml3r.dll
2009-08-23 14:20 . 2009-08-23 14:20 1194496 ----a-w- c:\windows\system32\msxml3.dll
2009-08-23 14:13 . 2009-08-23 14:13 63488 ----a-w- c:\windows\system32\drivers\mpsdrv.sys
2009-08-23 14:13 . 2009-08-23 14:13 396800 ----a-w- c:\windows\system32\MPSSVC.dll
2009-08-23 14:13 . 2009-08-23 14:13 392192 ----a-w- c:\windows\system32\FirewallAPI.dll
2009-08-23 14:13 . 2009-08-23 14:13 86016 ----a-w- c:\windows\system32\icfupgd.dll
2009-08-23 14:13 . 2009-08-23 14:13 16896 ----a-w- c:\windows\system32\wfapigp.dll
2009-08-23 14:13 . 2009-08-23 14:13 61952 ----a-w- c:\windows\system32\cmifw.dll
2009-08-23 14:13 . 2009-08-23 14:13 23040 ----a-w- c:\windows\system32\drivers\tunnel.sys
2009-08-23 14:13 . 2009-08-23 14:13 178688 ----a-w- c:\windows\system32\iphlpsvc.dll
2009-08-23 14:13 . 2009-08-23 14:13 15360 ----a-w- c:\windows\system32\drivers\TUNMP.SYS
2009-08-23 13:41 . 2009-08-23 13:41 696832 ----a-w- c:\windows\system32\localspl.dll
2009-08-23 13:35 . 2009-08-23 13:35 88576 ----a-w- c:\windows\system32\avifil32.dll
2009-08-23 13:35 . 2009-08-23 13:35 82944 ----a-w- c:\windows\system32\mciavi32.dll
2009-08-23 13:35 . 2009-08-23 13:35 65024 ----a-w- c:\windows\system32\avicap32.dll
2009-08-23 13:35 . 2009-08-23 13:35 123904 ----a-w- c:\windows\system32\msvfw32.dll
2009-08-23 13:35 . 2009-08-23 13:35 31232 ----a-w- c:\windows\system32\msvidc32.dll
2009-08-23 13:35 . 2009-08-23 13:35 12800 ----a-w- c:\windows\system32\msrle32.dll
2009-08-23 13:29 . 2009-08-23 13:29 104448 ----a-w- c:\windows\system32\DWWIN.EXE
2009-08-23 13:22 . 2009-08-23 13:22 2923520 ----a-w- c:\windows\explorer.exe
2009-08-23 13:03 . 2009-08-23 13:03 24064 ----a-w- c:\windows\system32\netcfg.exe
2009-08-23 12:47 . 2009-08-23 12:47 1585664 ----a-w- c:\windows\system32\setupapi.dll
2009-08-23 12:45 . 2009-08-23 12:45 6656 ----a-w- c:\windows\system32\kbd106n.dll
2009-08-23 12:33 . 2009-08-23 12:33 549888 ----a-w- c:\windows\system32\rpcss.dll
2009-08-23 12:33 . 2009-08-23 12:33 3503584 ----a-w- c:\windows\system32\ntkrnlpa.exe
.
((((((((((((((((((((((((((((( SnapShot_2009-09-10_18.11.16 )))))))))))))))))))))))))))))))))))))))))
.
+ 2006-12-26 13:04 . 2009-09-29 17:56 43296 c:\windows\System32\WDI\ShutdownPerformanceDiagnos tics_SystemData.bin
+ 2006-11-02 13:02 . 2009-09-29 17:57 61738 c:\windows\System32\WDI\BootPerformanceDiagnostics _SystemData.bin
- 2007-07-02 02:06 . 2009-09-10 12:19 16384 c:\windows\System32\config\systemprofile\AppData\R oaming\Microsoft\Windows\Cookies\index.dat
+ 2007-07-02 02:06 . 2009-09-29 13:59 16384 c:\windows\System32\config\systemprofile\AppData\R oaming\Microsoft\Windows\Cookies\index.dat
+ 2009-09-24 20:41 . 2009-09-24 20:41 20480 c:\windows\System32\config\systemprofile\AppData\L ocalLow\Sun\Java\Deployment\cache\6.0\62\6baea4fe-20dfa308-n\jogl_awt.dll
+ 2009-09-24 20:41 . 2009-09-24 20:41 20480 c:\windows\System32\config\systemprofile\AppData\L ocalLow\Sun\Java\Deployment\cache\6.0\45\4f710eed-19f5764b-n\gluegen-rt.dll
+ 2009-09-24 20:41 . 2009-09-24 20:41 61440 c:\windows\System32\config\systemprofile\AppData\L ocalLow\Sun\Java\Deployment\cache\6.0\21\14e5d595-22e08fd3-n\decora-sse.dll
+ 2009-09-24 20:41 . 2009-09-24 20:41 12800 c:\windows\System32\config\systemprofile\AppData\L ocalLow\Sun\Java\Deployment\cache\6.0\21\14e5d595-22e08fd3-n\decora-d3d.dll
+ 2009-09-24 20:41 . 2009-09-24 20:41 61440 c:\windows\System32\config\systemprofile\AppData\L ocalLow\Sun\Java\Deployment\cache\6.0\15\58fb3e0f-67259cfc-n\decora-sse.dll
+ 2009-09-24 20:41 . 2009-09-24 20:41 12800 c:\windows\System32\config\systemprofile\AppData\L ocalLow\Sun\Java\Deployment\cache\6.0\15\58fb3e0f-67259cfc-n\decora-d3d.dll
+ 2007-07-02 02:06 . 2009-09-29 13:59 98304 c:\windows\System32\config\systemprofile\AppData\L ocal\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2007-07-02 02:06 . 2009-09-10 12:19 98304 c:\windows\System32\config\systemprofile\AppData\L ocal\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2007-07-02 02:06 . 2009-09-29 13:59 16384 c:\windows\System32\config\systemprofile\AppData\L ocal\Microsoft\Windows\History\History.IE5\index.d at
- 2007-07-02 02:06 . 2009-09-10 12:19 16384 c:\windows\System32\config\systemprofile\AppData\L ocal\Microsoft\Windows\History\History.IE5\index.d at
+ 2007-07-02 02:35 . 2009-09-29 17:57 8578 c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-857884917-759742797-3485681705-1000_UserData.bin
+ 2006-11-02 10:33 . 2009-09-29 17:59 626738 c:\windows\System32\perfh009.dat
- 2006-11-02 10:33 . 2009-09-10 16:56 626738 c:\windows\System32\perfh009.dat
- 2006-11-02 10:33 . 2009-09-10 16:56 107508 c:\windows\System32\perfc009.dat
+ 2006-11-02 10:33 . 2009-09-29 17:59 107508 c:\windows\System32\perfc009.dat
+ 2009-09-24 18:20 . 2009-09-24 18:19 149280 c:\windows\System32\javaws.exe
+ 2009-09-24 18:20 . 2009-09-24 18:19 145184 c:\windows\System32\javaw.exe
+ 2009-09-24 18:20 . 2009-09-24 18:19 145184 c:\windows\System32\java.exe
+ 2009-09-24 20:41 . 2009-09-24 20:41 114688 c:\windows\System32\config\systemprofile\AppData\L ocalLow\Sun\Java\Deployment\cache\6.0\62\6baea4fe-20dfa308-n\jogl_cg.dll
+ 2009-09-24 20:41 . 2009-09-24 20:41 315392 c:\windows\System32\config\systemprofile\AppData\L ocalLow\Sun\Java\Deployment\cache\6.0\62\6baea4fe-20dfa308-n\jogl.dll
+ 2009-09-24 20:41 . 2009-09-24 20:41 348160 c:\windows\System32\config\systemprofile\AppData\L ocalLow\Sun\Java\Deployment\cache\6.0\21\14e5d595-22e08fd3-n\msvcr71.dll
+ 2009-09-24 20:41 . 2009-09-24 20:41 503808 c:\windows\System32\config\systemprofile\AppData\L ocalLow\Sun\Java\Deployment\cache\6.0\21\14e5d595-22e08fd3-n\msvcp71.dll
+ 2009-09-24 20:41 . 2009-09-24 20:41 499712 c:\windows\System32\config\systemprofile\AppData\L ocalLow\Sun\Java\Deployment\cache\6.0\21\14e5d595-22e08fd3-n\jmc.dll
+ 2009-09-24 20:41 . 2009-09-24 20:41 348160 c:\windows\System32\config\systemprofile\AppData\L ocalLow\Sun\Java\Deployment\cache\6.0\15\58fb3e0f-67259cfc-n\msvcr71.dll
+ 2009-09-24 20:41 . 2009-09-24 20:41 503808 c:\windows\System32\config\systemprofile\AppData\L ocalLow\Sun\Java\Deployment\cache\6.0\15\58fb3e0f-67259cfc-n\msvcp71.dll
+ 2009-09-24 20:41 . 2009-09-24 20:41 499712 c:\windows\System32\config\systemprofile\AppData\L ocalLow\Sun\Java\Deployment\cache\6.0\15\58fb3e0f-67259cfc-n\jmc.dll
+ 2009-09-24 18:19 . 2009-09-24 18:19 1757696 c:\windows\Installer\de303f8.msi
+ 2009-09-22 00:36 . 2009-09-22 00:36 1583616 c:\windows\Installer\2fa21c63.msi
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run]
"????r"="" [?]
"?????????"="??????????????e" [?]
"CTSyncU.exe"="c:\program files\Creative\Sync Manager Unicode\CTSyncU.exe" [2006-08-07 700416]
"updateMgr"="c:\program files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [2004-11-22 307200]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-01-26 2144088]
"SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2009-09-15 1998576]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2006-11-02 201728]
"WindowsWelcomeCenter"="oobefldr.dll" - c:\windows\System32\oobefldr.dll [2006-11-02 2159104]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2006-11-02 1004136]
"Acer Empowering Technology Monitor"="c:\windows\system32\SysMonitor.exe" [2006-11-23 319488]
"Acer Product Registration"="c:\program files\Acer Registration\ACE1.exe" [2006-12-13 3166208]
"Acer Assist Launcher"="c:\program files\Acer Assist\launcher.exe" [2006-12-04 1261568]
"eDataSecurity Loader"="c:\acer\Empowering Technology\eDataSecurity\eDSloader.exe" [2006-11-17 453120]
"PCMService"="c:\acer\Empowering Technology\eMode\PCM\PCMService.exe" [2006-11-25 151552]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-06-20 13535776]
"NvMediaCenter"="c:\windows\system32\NvMcTray. dll" [2008-06-20 92704]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-09-24 149280]
"Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2009-09-10 1312080]
"RtHDVCpl"="RtHDVCpl.exe" - c:\windows\RtHDVCpl.exe [2006-11-09 3784704]
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2004-12-14 29696]
Empowering Technology Launcher.lnk - c:\acer\Empowering Technology\eAPLauncher.exe [2006-12-26 528384]
[hkey_local_machine\software\microsoft\windows\curr entversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2009-09-03 20:21 548352 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\SymEFA.sys]
@="FSFilter Activity Monitor"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\WinDefend]
@="Service"
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpo licy\DomainProfile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpo licy\FirewallRules]
"{294C820B-769C-45F8-9085-23141B98D6A3}"= UDP:c:\acer\Empowering Technology\eMode\PCM\PCMService.exe:CyberLink PowerCinema Resident Program
"{D7E57710-B00B-42E3-BAB9-FF15A039A970}"= TCP:c:\acer\Empowering Technology\eMode\PCM\PCMService.exe:CyberLink PowerCinema Resident Program
"{61A20DFF-D7ED-4B5D-A92B-3667356E14C9}"= UDP:c:\program files\LimeWire\LimeWire.exe:LimeWire
"{97702059-5105-4897-8112-B6C99225E271}"= TCP:c:\program files\LimeWire\LimeWire.exe:LimeWire
[HKLM\~\services\sharedaccess\parameters\firewallpo licy\PublicProfile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpo licy\RestrictedServices\Static\System]
"DFSR-1"= RPort=5722|UDP:%SystemRoot%\system32\svchost.exe|S vc=DFSR:Allow inbound TCP traffic|
[HKLM\~\services\sharedaccess\parameters\firewallpo licy\StandardProfile]
"EnableFirewall"= 0 (0x0)
R0 SymEFA;Symantec Extended File Attributes;c:\windows\System32\drivers\N360\030000 0.086\SymEFA.sys [8/29/2009 7:21 AM 310320]
R1 BHDrvx86;Symantec Heuristics Driver;c:\windows\System32\drivers\N360\0300000.08 6\BHDrvx86.sys [8/29/2009 7:21 AM 258608]
R1 ccHP;Symantec Hash Provider;c:\windows\System32\drivers\N360\0300000. 086\cchpx86.sys [8/29/2009 7:21 AM 482352]
R1 IDSVix86;IDSVix86;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20090916. 003\IDSvix86.sys [9/16/2009 5:22 PM 342576]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [9/15/2009 11:42 AM 9968]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [9/15/2009 11:42 AM 74480]
R2 N360;Norton 360;c:\program files\Norton 360\Engine\3.0.0.134\ccSvcHst.exe [8/29/2009 7:21 AM 115560]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [9/2/2009 2:42 PM 102448]
R3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [9/15/2009 11:42 AM 7408]
R3 SYMNDISV;Symantec Network Filter Driver;c:\windows\System32\drivers\N360\0300000.08 6\symndisv.sys [8/29/2009 7:21 AM 39984]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceNoNetwork REG_MULTI_SZ PLA DPS BFE mpssvc
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://en.us.acer.yahoo.com
uLocal Page = \blank.htm
uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
mStart Page = hxxp://en.us.acer.yahoo.com
uSearchURL,(Default) = hxxp://us.rd.yahoo.com/customize/ycomp/defaults/su/*Yahoo!
.
************************************************** ************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover
Rootkit scan 2009-09-29 13:15
Windows 6.0.6000 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
************************************************** ************************
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\N 360]
"ImagePath"="\"c:\program files\Norton 360\Engine\3.0.0.134\ccSvcHst.exe\" /s \"N360\" /m \"c:\program files\Norton 360\Engine\3.0.0.134\diMaster.dll\" /prefetch:1"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Cl ***\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
.
--------------------- DLLs Loaded Under Running Processes ---------------------
- - - - - - - > 'Explorer.exe'(3948)
c:\windows\system32\MsnChatHook.dll
c:\windows\system32\sysenv.dll
c:\windows\system32\ShowErrMsg.dll
c:\windows\system32\actxprxy.dll
c:\windows\system32\msi.dll
c:\windows\system32\QUtil.dll
c:\windows\system32\mssprxy.dll
c:\windows\System32\ntlanman.dll
.
Completion time: 2009-09-29 13:18
ComboFix-quarantined-files.txt 2009-09-29 18:18
ComboFix2.txt 2009-09-11 18:24
ComboFix3.txt 2009-09-10 18:15
ComboFix4.txt 2009-09-09 16:26
ComboFix5.txt 2009-09-29 18:03
Pre-Run: 57,382,273,024 bytes free
Post-Run: 57,360,691,200 bytes free
300 --- E O F --- 2009-09-10 08:01
![]() |
|
|||||||
| [Pending] HJT Logs - Im getting popups and adware posted in the Security & Safety forums; well her are the logs finally: SUPERAntiSpyware Scan Log SUPERAntiSpyware.com | Remove Malware | Remove Spyware - AntiMalware, AntiSpyware, AntiAdware! Generated 09/24/2009 at 01:52 PM Application Version : 4.29.1002 Core ... |
|
|
|
#29 |
|
Elite Member
![]() Join Date: Dec 2005
Posts: 409
|
|
|
|
|
| Advertisement - Register to Remove | |
|
|
|
#30 |
|
Senior Security Analyst
![]() Join Date: Jun 2006
Location: Singapore
Posts: 5,176 PC Experience: PC Guru
|
I must say, this is something not common. The infection seems to be still there, but the programs are not picking anything up.... This is a rather tricky situation.
While I try to think of a solution, please copy this page to *Notepad* and save to your desktop for reference as you will not have any browsers open while you are carrying out portions of these instructions. It's IMPORTANT to carry out the instructions in the sequence listed below. 1. Close any open browsers. 2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix. Open *notepad* and copy/paste the text in the quotebox below into it: Code:
File:: c:\windows\Installer\de303f8.msi c:\windows\Installer\2fa21c63.msi Folder:: c:\programdata\tuvodiro c:\programdata\kenoyuje c:\programdata\gufezaki c:\programdata\yiposolu c:\programdata\dapofeno c:\programdata\jiyakiku c:\programdata\vilofobo c:\programdata\zulowono c:\programdata\yiwapeye c:\programdata\titadube c:\programdata\pupuyete c:\programdata\vegiwudo c:\programdata\kuduzuta c:\programdata\bodukisu c:\programdata\dofiziba c:\programdata\musivopa c:\programdata\fejahawo c:\programdata\titomako c:\programdata\lejejawo c:\programdata\kefelake c:\programdata\bonolajo c:\programdata\bomonege c:\programdata\tomegoni c:\programdata\higiripe ![]() Refering to the picture above, drag CFScript.txt into ComboFix.exe When finished, it shall produce a log for you at C:\ComboFix.txt Please copy and paste the ComboFix.txt in your new reply. *Note: Do not mouseclick combofix's window whilst it's running. That may cause it to stall. Altering this script in any way could damage your computer.* |
|
|
|
|
|
#31 |
|
Tech Support Team
![]() Join Date: Sep 2008
Location: Caldwell, New Jersey
Posts: 10,112 PC Experience: Always Learning New Things
|
Hello,
I'm just following up. Do you still require assistance in removing your malware? Or can we put this one to bed? If you are still in need of assistance please let us know Regards, Crush PCHF Security Team Leader
__________________
Crush aka Chris [Prework][Afterwork][PCHF Rules][BSOD's][SFC][Screenshots][PC Specs][Donate] I am in fact, quite cool. My graphing calculator confirms this |
|
|
|
|
|
#32 |
|
Elite Member
![]() Join Date: Dec 2005
Posts: 409
|
well i havent seen the pop ups in ages since we started the first round of clening but apparently theres still cleaning to do so yeah Im still on it, I still have to run the CFScript stated in the above post then post that log
|
|
|
|
|
|
#33 |
|
Tech Support Team
![]() Join Date: Sep 2008
Location: Caldwell, New Jersey
Posts: 10,112 PC Experience: Always Learning New Things
|
Ok. Keep us posted as to your progress
__________________
Crush aka Chris [Prework][Afterwork][PCHF Rules][BSOD's][SFC][Screenshots][PC Specs][Donate] I am in fact, quite cool. My graphing calculator confirms this |
|
|
|
|
|
#34 |
|
Elite Member
![]() Join Date: Dec 2005
Posts: 409
|
ok heres the new combofix log
ComboFix 09-10-30.01 - Tony 10/31/2009 15:22.8.1 - NTFSx86 Microsoft® Windows Vista™ Home Basic 6.0.6000.0.1252.1.1033.18.447.152 [GMT -5:00] Running from: c:\users\Tony\Desktop\ComboFix.exe Command switches used :: c:\users\Tony\Desktop\CFScript.txt AV: Norton 360 *On-access scanning disabled* (Updated) {E10A9785-9598-4754-B552-92431C1C35F8} FW: Norton 360 *disabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220} SP: Norton 360 *enabled* (Updated) {CBB7EE13-8244-4DAB-8B55-D5C7AA91E59A} SP: SUPERAntiSpyware *enabled* (Updated) {222A897C-5018-402e-943F-7E7AC8560DA7} SP: Windows Defender *disabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46} * Created a new restore point FILE :: "c:\windows\Installer\2fa21c63.msi" "c:\windows\Installer\de303f8.msi" . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\programdata\bodukisu c:\programdata\bomonege c:\programdata\bonolajo c:\programdata\dapofeno c:\programdata\dofiziba c:\programdata\fejahawo c:\programdata\gufezaki c:\programdata\higiripe c:\programdata\jiyakiku c:\programdata\kefelake c:\programdata\kenoyuje c:\programdata\kuduzuta c:\programdata\lejejawo c:\programdata\musivopa c:\programdata\pupuyete c:\programdata\titadube c:\programdata\titomako c:\programdata\tomegoni c:\programdata\tuvodiro c:\programdata\vegiwudo c:\programdata\vilofobo c:\programdata\yiposolu c:\programdata\yiwapeye c:\programdata\zulowono c:\windows\Installer\2fa21c63.msi c:\windows\Installer\de303f8.msi . ((((((((((((((((((((((((( Files Created from 2009-09-28 to 2009-10-31 ))))))))))))))))))))))))))))))) . 2009-10-31 20:34 . 2009-10-31 20:34 -------- d-----w- c:\users\Public\AppData\Local\temp 2009-10-31 20:34 . 2009-10-31 20:34 -------- d-----w- c:\users\Music\AppData\Local\temp 2009-10-31 20:34 . 2009-10-31 20:34 -------- d-----w- c:\users\Default\AppData\Local\temp 2009-10-31 20:22 . 2007-01-06 02:59 35920 ----a-w- c:\windows\system32\drivers\nvstor.sys 2009-10-31 20:22 . 2006-12-11 17:34 97576 ----a-w- c:\windows\system32\drivers\nvstor32.sys 2009-10-31 20:22 . 2006-11-02 09:49 19048 ----a-w- c:\windows\system32\drivers\atapi.sys 2009-10-14 10:59 . 2009-09-10 17:38 216576 ----a-w- c:\windows\system32\msv1_0.dll 2009-10-14 10:57 . 2009-09-04 12:38 60928 ----a-w- c:\windows\system32\msasn1.dll 2009-10-14 10:57 . 2009-09-14 09:50 130048 ----a-w- c:\windows\system32\drivers\srv2.sys 2009-10-14 10:56 . 2009-04-02 11:50 604672 ----a-w- c:\windows\system32\WMSPDMOD.DLL 2009-10-07 06:00 . 2009-08-07 02:24 44768 ----a-w- c:\windows\system32\wups2.dll 2009-10-07 06:00 . 2009-08-07 02:24 53472 ----a-w- c:\windows\system32\wuauclt.exe 2009-10-07 06:00 . 2009-08-07 01:45 2421760 ----a-w- c:\windows\system32\wucltux.dll 2009-10-07 06:00 . 2009-08-07 02:23 1929952 ----a-w- c:\windows\system32\wuaueng.dll 2009-10-07 05:59 . 2009-08-07 02:24 35552 ----a-w- c:\windows\system32\wups.dll 2009-10-07 05:59 . 2009-08-07 01:44 87552 ----a-w- c:\windows\system32\wudriver.dll 2009-10-07 05:59 . 2009-08-07 02:23 575704 ----a-w- c:\windows\system32\wuapi.dll 2009-10-07 05:58 . 2009-08-07 00:23 171608 ----a-w- c:\windows\system32\wuwebv.dll 2009-10-07 05:58 . 2009-08-06 23:44 33792 ----a-w- c:\windows\system32\wuapp.exe . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))) )) . 2009-09-29 16:43 . 2009-09-08 00:19 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2009-09-24 18:19 . 2009-09-12 17:38 411368 ----a-w- c:\windows\system32\deploytk.dll 2009-09-24 18:19 . 2007-07-02 13:44 -------- d-----w- c:\program files\Java 2009-09-22 00:37 . 2009-09-22 00:37 -------- d-----w- c:\programdata\SUPERAntiSpyware.com 2009-09-22 00:36 . 2009-09-22 00:36 -------- d-----w- c:\program files\SUPERAntiSpyware 2009-09-22 00:36 . 2009-09-22 00:36 -------- d-----w- c:\users\Tony\AppData\Roaming\SUPERAntiSpyware.com 2009-09-22 00:35 . 2009-09-22 00:35 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard 2009-09-10 19:54 . 2009-09-08 00:19 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2009-09-10 19:53 . 2009-09-08 00:19 19160 ----a-w- c:\windows\system32\drivers\mbam.sys 2009-09-08 00:20 . 2009-09-08 00:20 -------- d-----w- c:\users\Tony\AppData\Roaming\Malwarebytes 2009-09-08 00:19 . 2009-09-08 00:19 -------- d-----w- c:\programdata\Malwarebytes 2009-09-03 21:04 . 2009-08-04 00:15 -------- d-----w- c:\programdata\pafomanu 2009-08-29 12:22 . 2009-08-29 12:22 124464 ----a-w- c:\windows\system32\drivers\SYMEVENT.SYS 2009-08-29 12:21 . 2009-08-29 12:22 25136 ----a-r- c:\windows\system32\drivers\SymIMV.sys 2009-08-27 14:02 . 2009-10-14 10:58 832512 ----a-w- c:\windows\system32\wininet.dll 2009-08-27 13:57 . 2009-10-14 10:58 56320 ----a-w- c:\windows\system32\iesetup.dll 2009-08-27 13:57 . 2009-10-14 10:58 78336 ----a-w- c:\windows\system32\ieencode.dll 2009-08-27 13:56 . 2009-10-14 10:58 72704 ----a-w- c:\windows\system32\admparse.dll 2009-08-27 11:24 . 2009-10-14 10:58 26624 ----a-w- c:\windows\system32\ieUnatt.exe 2009-08-27 09:51 . 2009-10-14 10:58 48128 ----a-w- c:\windows\system32\mshtmler.dll 2009-08-24 08:08 . 2009-08-24 08:08 5071872 ----a-w- c:\windows\system32\NlsModels0011.dll 2009-08-23 16:30 . 2009-08-23 16:30 61440 ----a-w- c:\windows\system32\winipsec.dll 2009-08-23 16:30 . 2009-08-23 16:30 361984 ----a-w- c:\windows\system32\IPSECSVC.DLL 2009-08-23 16:30 . 2009-08-23 16:30 28672 ----a-w- c:\windows\system32\FwRemoteSvr.dll 2009-08-23 16:30 . 2009-08-23 16:30 272896 ----a-w- c:\windows\system32\polstore.dll 2009-08-23 16:23 . 2009-08-23 16:23 87040 ----a-w- c:\windows\system32\msoert2.dll 2009-08-23 16:23 . 2009-08-23 16:23 39424 ----a-w- c:\windows\system32\ACCTRES.dll 2009-08-23 16:23 . 2009-08-23 16:23 205824 ----a-w- c:\windows\system32\msoeacct.dll 2009-08-23 16:16 . 2009-08-23 16:16 110080 ----a-w- c:\windows\system32\drivers\mrxdav.sys 2009-08-23 16:16 . 2009-08-23 16:16 194560 ----a-w- c:\windows\system32\WebClnt.dll 2009-08-23 16:09 . 2009-08-23 16:09 2028032 ----a-w- c:\windows\system32\win32k.sys 2009-08-23 16:02 . 2009-08-23 16:02 156160 ----a-w- c:\windows\system32\t2embed.dll 2009-08-23 16:02 . 2009-08-23 16:02 34304 ----a-w- c:\windows\system32\atmlib.dll 2009-08-23 16:02 . 2009-08-23 16:02 289792 ----a-w- c:\windows\system32\atmfd.dll 2009-08-23 16:02 . 2009-08-23 16:02 72704 ----a-w- c:\windows\system32\fontsub.dll 2009-08-23 16:02 . 2009-08-23 16:02 24064 ----a-w- c:\windows\system32\lpk.dll 2009-08-23 16:02 . 2009-08-23 16:02 10240 ----a-w- c:\windows\system32\dciman32.dll 2009-08-23 15:54 . 2009-08-23 15:54 49664 ----a-w- c:\windows\system32\csrsrv.dll 2009-08-23 15:54 . 2009-08-23 15:54 376320 ----a-w- c:\windows\system32\winsrv.dll 2009-08-23 15:41 . 2009-08-23 15:41 376832 ----a-w- c:\windows\system32\winhttp.dll 2009-08-23 15:33 . 2009-08-23 15:33 71680 ----a-w- c:\windows\system32\atl.dll 2009-08-23 15:09 . 2009-08-23 15:09 297472 ----a-w- c:\windows\system32\gdi32.dll 2009-08-23 15:02 . 2009-08-23 15:02 211456 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys 2009-08-23 14:55 . 2009-08-23 14:55 500736 ----a-w- c:\windows\system32\msdtcprx.dll 2009-08-23 14:55 . 2009-08-23 14:55 30208 ----a-w- c:\windows\system32\xolehlp.dll 2009-08-23 14:48 . 2009-08-23 14:48 156160 ----a-w- c:\windows\system32\wkssvc.dll 2009-08-23 14:41 . 2009-08-23 14:41 36352 ----a-w- c:\windows\system32\tsgqec.dll 2009-08-23 14:41 . 2009-08-23 14:41 1871872 ----a-w- c:\windows\system32\mstscax.dll 2009-08-23 14:41 . 2009-08-23 14:41 116736 ----a-w- c:\windows\system32\aaclient.dll 2009-08-23 14:33 . 2009-08-23 14:33 28672 ----a-w- c:\windows\system32\Apphlpdm.dll 2009-08-23 14:33 . 2009-08-23 14:33 4247552 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll 2009-08-23 14:33 . 2009-08-23 14:33 1687040 ----a-w- c:\windows\system32\gameux.dll 2009-08-23 14:26 . 2009-08-23 14:26 303616 ----a-w- c:\windows\system32\wmpeffects.dll 2009-08-23 14:20 . 2009-08-23 14:20 2048 ----a-w- c:\windows\system32\msxml3r.dll 2009-08-23 14:20 . 2009-08-23 14:20 1194496 ----a-w- c:\windows\system32\msxml3.dll 2009-08-23 14:13 . 2009-08-23 14:13 63488 ----a-w- c:\windows\system32\drivers\mpsdrv.sys 2009-08-23 14:13 . 2009-08-23 14:13 396800 ----a-w- c:\windows\system32\MPSSVC.dll 2009-08-23 14:13 . 2009-08-23 14:13 392192 ----a-w- c:\windows\system32\FirewallAPI.dll 2009-08-23 14:13 . 2009-08-23 14:13 86016 ----a-w- c:\windows\system32\icfupgd.dll 2009-08-23 14:13 . 2009-08-23 14:13 16896 ----a-w- c:\windows\system32\wfapigp.dll 2009-08-23 14:13 . 2009-08-23 14:13 61952 ----a-w- c:\windows\system32\cmifw.dll 2009-08-23 14:13 . 2009-08-23 14:13 23040 ----a-w- c:\windows\system32\drivers\tunnel.sys 2009-08-23 14:13 . 2009-08-23 14:13 178688 ----a-w- c:\windows\system32\iphlpsvc.dll 2009-08-23 14:13 . 2009-08-23 14:13 15360 ----a-w- c:\windows\system32\drivers\TUNMP.SYS 2009-08-23 13:41 . 2009-08-23 13:41 696832 ----a-w- c:\windows\system32\localspl.dll 2009-08-23 13:35 . 2009-08-23 13:35 88576 ----a-w- c:\windows\system32\avifil32.dll 2009-08-23 13:35 . 2009-08-23 13:35 82944 ----a-w- c:\windows\system32\mciavi32.dll 2009-08-23 13:35 . 2009-08-23 13:35 65024 ----a-w- c:\windows\system32\avicap32.dll 2009-08-23 13:35 . 2009-08-23 13:35 123904 ----a-w- c:\windows\system32\msvfw32.dll 2009-08-23 13:35 . 2009-08-23 13:35 31232 ----a-w- c:\windows\system32\msvidc32.dll 2009-08-23 13:35 . 2009-08-23 13:35 12800 ----a-w- c:\windows\system32\msrle32.dll 2009-08-23 13:29 . 2009-08-23 13:29 104448 ----a-w- c:\windows\system32\DWWIN.EXE 2009-08-23 13:22 . 2009-08-23 13:22 2923520 ----a-w- c:\windows\explorer.exe 2009-08-23 13:03 . 2009-08-23 13:03 24064 ----a-w- c:\windows\system32\netcfg.exe 2009-08-23 12:47 . 2009-08-23 12:47 1585664 ----a-w- c:\windows\system32\setupapi.dll 2009-08-23 12:45 . 2009-08-23 12:45 6656 ----a-w- c:\windows\system32\kbd106n.dll 2009-08-23 12:33 . 2009-08-23 12:33 549888 ----a-w- c:\windows\system32\rpcss.dll 2009-08-23 12:33 . 2009-08-23 12:33 24576 ----a-w- c:\windows\system32\printfilterpipelineprxy.dll 2009-08-23 12:33 . 2009-08-23 12:33 654336 ----a-w- c:\windows\system32\printfilterpipelinesvc.exe 2009-08-23 12:33 . 2009-08-23 12:33 247296 ----a-w- c:\windows\system32\wbem\WmiPrvSE.exe 2009-08-23 12:33 . 2009-08-23 12:33 130560 ----a-w- c:\windows\system32\wbem\WmiDcPrv.dll 2009-08-23 12:33 . 2009-08-23 12:33 614912 ----a-w- c:\windows\system32\wbem\fastprox.dll 2009-08-23 12:33 . 2009-08-23 12:33 501760 ----a-w- c:\windows\system32\wbem\WmiPrvSD.dll 2009-08-23 12:33 . 2009-08-23 12:33 97280 ----a-w- c:\windows\system32\iasrecst.dll 2009-08-23 12:33 . 2009-08-23 12:33 53248 ----a-w- c:\windows\system32\iasads.dll 2009-08-23 12:33 . 2009-08-23 12:33 37888 ----a-w- c:\windows\system32\iasdatastore.dll 2009-08-23 12:33 . 2009-08-23 12:33 158720 ----a-w- c:\windows\system32\sdohlp.dll 2009-08-23 12:20 . 2009-08-23 12:20 9728 ----a-w- c:\windows\system32\LAPRXY.DLL 2009-08-23 12:20 . 2009-08-23 12:20 2048 ----a-w- c:\windows\system32\asferror.dll 2009-08-23 12:20 . 2009-08-23 12:20 223232 ----a-w- c:\windows\system32\WMASF.DLL 2009-08-23 12:15 . 2009-08-23 12:15 25600 ----a-w- c:\windows\system32\amxread.dll 2009-08-23 12:15 . 2009-08-23 12:15 14848 ----a-w- c:\windows\system32\apilogen.dll 2009-08-23 12:05 . 2009-08-23 12:05 37376 ----a-w- c:\windows\system32\printcom.dll 2009-08-23 12:05 . 2009-08-23 12:05 441856 ----a-w- c:\windows\system32\win32spl.dll 2009-08-23 12:01 . 2009-08-23 12:01 113664 ----a-w- c:\windows\system32\drivers\rmcast.sys 2009-08-23 12:01 . 2009-08-23 12:01 14848 ----a-w- c:\windows\system32\wshrm.dll 2009-08-23 11:59 . 2009-08-23 11:59 8147968 ----a-w- c:\windows\system32\wmploc.DLL 2009-08-23 11:59 . 2009-08-23 11:59 7680 ----a-w- c:\windows\system32\spwmp.dll 2009-08-23 11:59 . 2009-08-23 11:59 4096 ----a-w- c:\windows\system32\dxmasf.dll 2009-08-23 11:59 . 2009-08-23 11:59 313344 ----a-w- c:\windows\system32\wmpdxm.dll . ((((((((((((((((((((((((((((( SnapShot_2009-09-10_18.11.16 ))))))))))))))))))))))))))))))))))))))))) . + 2009-10-07 06:00 . 2009-08-07 02:24 44768 c:\windows\winsxs\x86_microsoft-windows-w..wsupdateclient-core_31bf3856ad364e35_7.4.7600.226_none_e979223d5b 9c821b\wups2.dll + 2009-10-07 06:00 . 2009-08-07 02:24 53472 c:\windows\winsxs\x86_microsoft-windows-w..wsupdateclient-core_31bf3856ad364e35_7.4.7600.226_none_e979223d5b 9c821b\wuauclt.exe + 2009-10-07 05:58 . 2009-08-06 23:44 33792 c:\windows\winsxs\x86_microsoft-windows-w..pdateclient-activex_31bf3856ad364e35_7.4.7600.226_none_79951cc a15140d1a\wuapp.exe + 2009-10-07 05:59 . 2009-08-07 02:24 35552 c:\windows\winsxs\x86_microsoft-windows-w..owsupdateclient-aux_31bf3856ad364e35_7.4.7600.226_none_cf8a5c896f5 cdb1e\wups.dll + 2009-10-07 05:59 . 2009-08-07 01:44 87552 c:\windows\winsxs\x86_microsoft-windows-w..owsupdateclient-aux_31bf3856ad364e35_7.4.7600.226_none_cf8a5c896f5 cdb1e\wudriver.dll + 2009-10-14 10:57 . 2009-09-14 09:48 98816 c:\windows\winsxs\x86_microsoft-windows-smbserver-common_31bf3856ad364e35_6.0.6001.22522_none_044c33 53295315ad\srvnet.sys + 2009-10-14 10:57 . 2009-09-04 14:19 60928 c:\windows\winsxs\x86_microsoft-windows-msasn1_31bf3856ad364e35_6.0.6002.22218_none_c9c75e 79bba6335e\msasn1.dll + 2009-10-14 10:57 . 2009-09-04 11:41 60928 c:\windows\winsxs\x86_microsoft-windows-msasn1_31bf3856ad364e35_6.0.6002.18106_none_c94691 06a28244f5\msasn1.dll + 2009-10-14 10:57 . 2009-09-04 14:23 61440 c:\windows\winsxs\x86_microsoft-windows-msasn1_31bf3856ad364e35_6.0.6001.22515_none_c7ddeb b3be829235\msasn1.dll + 2009-10-14 10:57 . 2009-09-04 12:24 61440 c:\windows\winsxs\x86_microsoft-windows-msasn1_31bf3856ad364e35_6.0.6001.18326_none_c74a7d 60a56c2a8c\msasn1.dll + 2009-10-14 10:57 . 2009-09-04 12:32 60928 c:\windows\winsxs\x86_microsoft-windows-msasn1_31bf3856ad364e35_6.0.6000.21122_none_c5e9b2 7fc167074b\msasn1.dll + 2009-10-14 10:57 . 2009-09-04 12:38 60928 c:\windows\winsxs\x86_microsoft-windows-msasn1_31bf3856ad364e35_6.0.6000.16922_none_c5603d 92a849343f\msasn1.dll + 2009-10-14 10:59 . 2009-09-10 17:09 72704 c:\windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6002.22223_none_a8a802137 31ca5a7\secur32.dll + 2009-10-14 10:59 . 2009-09-09 13:17 72704 c:\windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.22518_none_a6d161897 5e9b345\secur32.dll + 2009-10-14 10:59 . 2009-09-10 17:31 72704 c:\windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6000.21125_none_a4dd28557 8ce285b\secur32.dll + 2009-10-14 10:58 . 2009-08-27 13:36 52736 c:\windows\winsxs\x86_microsoft-windows-iebrshim_31bf3856ad364e35_6.0.6000.21116_none_2a94 395d81230c56\iebrshim.dll + 2009-10-14 10:58 . 2009-08-27 13:57 52736 c:\windows\winsxs\x86_microsoft-windows-iebrshim_31bf3856ad364e35_6.0.6000.16916_none_2a0a c4706805394a\iebrshim.dll + 2009-10-14 10:58 . 2009-08-27 13:36 56320 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.21116_none_c46f2 2ed7a7336f9\iesetup.dll + 2009-10-14 10:58 . 2009-08-27 13:36 44544 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.21116_none_c46f2 2ed7a7336f9\iernonce.dll + 2009-10-14 10:58 . 2009-08-27 11:14 70656 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.21116_none_c46f2 2ed7a7336f9\ie4uinit.exe + 2009-10-14 10:58 . 2009-08-27 13:57 56320 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.16916_none_c3e5a e00615563ed\iesetup.dll + 2009-10-14 10:58 . 2009-08-27 13:57 44544 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.16916_none_c3e5a e00615563ed\iernonce.dll + 2009-10-14 10:58 . 2009-08-27 11:24 70656 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.16916_none_c3e5a e00615563ed\ie4uinit.exe + 2009-10-14 10:58 . 2009-08-27 11:04 26624 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22508_n one_2ff3a6bc3314dfe7\ieUnatt.exe + 2009-10-14 10:58 . 2009-08-27 10:58 26624 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18319_n one_2f60386919fe783e\ieUnatt.exe + 2009-10-14 10:58 . 2009-08-27 11:14 26624 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.21116_n one_2e006dd235f86e54\ieUnatt.exe + 2009-10-14 10:58 . 2009-08-27 11:24 26624 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16916_n one_2d76f8e51cda9b48\ieUnatt.exe + 2009-10-14 10:58 . 2009-08-27 13:36 63488 c:\windows\winsxs\x86_microsoft-windows-ie-infocard_31bf3856ad364e35_6.0.6000.21116_none_5939 ed2f8037f4b0\icardie.dll + 2009-10-14 10:58 . 2009-08-27 13:57 63488 c:\windows\winsxs\x86_microsoft-windows-ie-infocard_31bf3856ad364e35_6.0.6000.16916_none_58b0 7842671a21a4\icardie.dll + 2009-10-14 10:58 . 2009-08-27 11:03 48128 c:\windows\winsxs\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6001.22508 _none_f3ff2d33d33cfb5f\mshtmler.dll + 2009-10-14 10:58 . 2009-08-27 13:14 78336 c:\windows\winsxs\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6001.22508 _none_f3ff2d33d33cfb5f\ieencode.dll + 2009-08-23 12:08 . 2009-08-23 12:08 48128 c:\windows\winsxs\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6001.18319 _none_f36bbee0ba2693b6\mshtmler.dll + 2009-10-14 10:58 . 2009-08-27 13:29 78336 c:\windows\winsxs\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6001.18319 _none_f36bbee0ba2693b6\ieencode.dll + 2009-10-14 10:58 . 2009-08-27 09:47 48128 c:\windows\winsxs\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6000.21116 _none_f20bf449d62089cc\mshtmler.dll + 2009-10-14 10:58 . 2009-08-27 13:36 78336 c:\windows\winsxs\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6000.21116 _none_f20bf449d62089cc\ieencode.dll + 2009-10-14 10:58 . 2009-08-27 09:51 48128 c:\windows\winsxs\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6000.16916 _none_f1827f5cbd02b6c0\mshtmler.dll + 2009-10-14 10:58 . 2009-08-27 13:57 78336 c:\windows\winsxs\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6000.16916 _none_f1827f5cbd02b6c0\ieencode.dll + 2009-10-14 10:58 . 2009-08-27 13:12 72704 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.22508_ none_aec3c8801fdc48aa\admparse.dll + 2009-08-23 12:08 . 2009-08-23 12:08 72704 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.18319_ none_ae305a2d06c5e101\admparse.dll + 2009-10-14 10:58 . 2009-08-27 13:34 72704 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6000.21116_ none_acd08f9622bfd717\admparse.dll + 2009-10-14 10:58 . 2009-08-27 13:56 72704 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6000.16916_ none_ac471aa909a2040b\admparse.dll + 2009-10-14 10:58 . 2009-08-27 10:47 64512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.2 2212_none_04503a70b81d4a0f\WininetPlugin.dll + 2009-10-14 10:58 . 2009-08-27 12:54 27648 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.2 2212_none_04503a70b81d4a0f\jsproxy.dll + 2009-08-23 12:08 . 2009-08-23 12:08 64512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.1 8100_none_03cf6cfd9ef95ba6\WininetPlugin.dll + 2009-08-23 12:08 . 2009-08-23 12:08 27648 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.1 8100_none_03cf6cfd9ef95ba6\jsproxy.dll + 2009-10-14 10:58 . 2009-08-27 13:17 64512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.2 2508_none_027a9a30bae97104\WininetPlugin.dll + 2009-10-14 10:58 . 2009-08-27 13:15 28160 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.2 2508_none_027a9a30bae97104\jsproxy.dll + 2009-08-23 12:08 . 2009-08-23 12:08 64512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.1 8319_none_01e72bdda1d3095b\WininetPlugin.dll + 2009-10-14 10:58 . 2009-08-27 13:29 28160 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.1 8319_none_01e72bdda1d3095b\jsproxy.dll + 2009-10-14 10:58 . 2009-08-27 13:40 64512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.2 1116_none_00876146bdccff71\WininetPlugin.dll + 2009-10-14 10:58 . 2009-08-27 13:36 27648 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.2 1116_none_00876146bdccff71\jsproxy.dll + 2009-10-14 10:58 . 2009-08-27 14:02 64512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.1 6916_none_fffdec59a4af2c65\WininetPlugin.dll + 2009-10-14 10:58 . 2009-08-27 13:57 27648 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.1 6916_none_fffdec59a4af2c65\jsproxy.dll + 2009-10-14 10:58 . 2009-08-27 13:39 44544 c:\windows\winsxs\x86_microsoft-windows-i..ablenetworkgraphics_31bf3856ad364e35_6.0.6000.2 1116_none_ec64dcf22f63617a\pngfilt.dll + 2009-10-14 10:58 . 2009-08-27 14:01 44544 c:\windows\winsxs\x86_microsoft-windows-i..ablenetworkgraphics_31bf3856ad364e35_6.0.6000.1 6916_none_ebdb680516458e6e\pngfilt.dll + 2006-12-26 13:04 . 2009-10-31 20:09 43898 c:\windows\System32\WDI\ShutdownPerformanceDiagnos tics_SystemData.bin + 2006-11-02 13:02 . 2009-10-31 20:09 62380 c:\windows\System32\WDI\BootPerformanceDiagnostics _SystemData.bin - 2009-08-23 12:08 . 2009-08-23 12:08 44544 c:\windows\System32\pngfilt.dll + 2009-10-14 10:58 . 2009-08-27 14:01 44544 c:\windows\System32\pngfilt.dll + 2009-10-14 10:58 . 2009-08-27 14:02 64512 c:\windows\System32\migration\WininetPlugin.dll - 2009-08-23 12:09 . 2009-08-23 12:09 64512 c:\windows\System32\migration\WininetPlugin.dll + 2009-10-14 10:58 . 2009-08-27 13:57 27648 c:\windows\System32\jsproxy.dll - 2009-08-23 12:09 . 2009-08-23 12:09 27648 c:\windows\System32\jsproxy.dll - 2009-08-23 12:08 . 2009-08-23 12:08 44544 c:\windows\System32\iernonce.dll + 2009-10-14 10:58 . 2009-08-27 13:57 44544 c:\windows\System32\iernonce.dll + 2009-10-14 10:58 . 2009-08-27 11:24 70656 c:\windows\System32\ie4uinit.exe - 2009-08-23 12:08 . 2009-08-23 12:08 70656 c:\windows\System32\ie4uinit.exe + 2009-10-14 10:58 . 2009-08-27 13:57 63488 c:\windows\System32\icardie.dll - 2009-08-23 12:08 . 2009-08-23 12:08 63488 c:\windows\System32\icardie.dll + 2007-07-02 02:06 . 2009-10-31 19:03 16384 c:\windows\System32\config\systemprofile\AppData\R oaming\Microsoft\Windows\Cookies\index.dat - 2007-07-02 02:06 . 2009-09-10 12:19 16384 c:\windows\System32\config\systemprofile\AppData\R oaming\Microsoft\Windows\Cookies\index.dat + 2009-09-24 20:41 . 2009-09-24 20:41 20480 c:\windows\System32\config\systemprofile\AppData\L ocalLow\Sun\Java\Deployment\cache\6.0\62\6baea4fe-20dfa308-n\jogl_awt.dll + 2009-09-24 20:41 . 2009-09-24 20:41 20480 c:\windows\System32\config\systemprofile\AppData\L ocalLow\Sun\Java\Deployment\cache\6.0\45\4f710eed-19f5764b-n\gluegen-rt.dll + 2009-09-24 20:41 . 2009-09-24 20:41 61440 c:\windows\System32\config\systemprofile\AppData\L ocalLow\Sun\Java\Deployment\cache\6.0\21\14e5d595-22e08fd3-n\decora-sse.dll + 2009-09-24 20:41 . 2009-09-24 20:41 12800 c:\windows\System32\config\systemprofile\AppData\L ocalLow\Sun\Java\Deployment\cache\6.0\21\14e5d595-22e08fd3-n\decora-d3d.dll + 2009-09-24 20:41 . 2009-09-24 20:41 61440 c:\windows\System32\config\systemprofile\AppData\L ocalLow\Sun\Java\Deployment\cache\6.0\15\58fb3e0f-67259cfc-n\decora-sse.dll + 2009-09-24 20:41 . 2009-09-24 20:41 12800 c:\windows\System32\config\systemprofile\AppData\L ocalLow\Sun\Java\Deployment\cache\6.0\15\58fb3e0f-67259cfc-n\decora-d3d.dll + 2007-07-02 02:06 . 2009-10-31 19:03 98304 c:\windows\System32\config\systemprofile\AppData\L ocal\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2007-07-02 02:06 . 2009-09-10 12:19 98304 c:\windows\System32\config\systemprofile\AppData\L ocal\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2007-07-02 02:06 . 2009-09-10 12:19 16384 c:\windows\System32\config\systemprofile\AppData\L ocal\Microsoft\Windows\History\History.IE5\index.d at + 2007-07-02 02:06 . 2009-10-31 19:03 16384 c:\windows\System32\config\systemprofile\AppData\L ocal\Microsoft\Windows\History\History.IE5\index.d at + 2009-08-07 00:23 . 2009-08-07 00:23 73288 c:\windows\SoftwareDistribution\SelfUpdate\Handler \WuSetupV.exe + 2009-06-25 00:56 . 2009-06-25 00:56 73728 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updat es\hotfix.exe + 2008-05-28 05:49 . 2008-05-28 05:49 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscor sn.dll - 2007-04-14 01:58 . 2007-04-14 01:58 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscor sn.dll + 2008-05-28 05:49 . 2008-05-28 05:49 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscor ie.dll - 2007-04-14 01:57 . 2007-04-14 01:57 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscor ie.dll + 2008-05-28 05:49 . 2008-05-28 05:49 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPe rfMonExt.dll - 2007-04-14 01:57 . 2007-04-14 01:57 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPe rfMonExt.dll + 2008-05-28 06:30 . 2008-05-28 06:30 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspne t_wp.exe - 2007-04-14 02:30 . 2007-04-14 02:30 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspne t_wp.exe + 2009-10-15 08:03 . 2009-10-15 08:03 90112 c:\windows\assembly\NativeImages1_v1.1.4322\System .Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_74b41 819\System.Drawing.Design.dll + 2009-10-15 08:03 . 2009-10-15 08:03 61440 c:\windows\assembly\NativeImages1_v1.1.4322\Custom Marshalers\1.0.5000.0__b03f5f7f11d50a3a_31925ca0\C ustomMarshalers.dll + 2009-10-15 08:40 . 2009-10-15 08:40 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIA utomationProvider\4b879c6ae53ff0f95106d2075ed90461 \UIAutomationProvider.ni.dll + 2009-10-15 08:42 . 2009-10-15 08:42 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Windows.Pres#\b150cba93b99973b86394b3193be9a5d \System.Windows.Presentation.ni.dll + 2009-10-15 08:42 . 2009-10-15 08:42 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web.DynamicD#\e1cf998854d71bbc0fd07f2b23aa18ff \System.Web.DynamicData.Design.ni.dll + 2009-10-15 08:40 . 2009-10-15 08:40 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.ComponentMod#\9472608fde9b3cc39e633aede0a39d2a \System.ComponentModel.DataAnnotations.ni.dll + 2009-10-15 08:40 . 2009-10-15 08:40 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.AddIn.Contra#\d39db754f189e66f318c044cc2a95d5d \System.AddIn.Contract.ni.dll + 2009-10-15 08:40 . 2009-10-15 08:40 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\Pre sentationFontCac#\31dc87feb886f7bf12ed3d22420d11a7 \PresentationFontCache.ni.exe + 2009-10-15 08:40 . 2009-10-15 08:40 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\Pre sentationCFFRast#\02cf38449430529bf18d23ef3050fbcc \PresentationCFFRasterizer.ni.dll + 2009-10-15 08:39 . 2009-10-15 08:39 67584 c:\windows\assembly\NativeImages_v2.0.50727_32\nap crypt\f318f1aef321b30166f3eb002104650c\napcrypt.ni .dll + 2009-10-15 08:41 . 2009-10-15 08:41 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Vsa\02a52a08d9420a1c3b80d11070d3c95b\Micros oft.Vsa.ni.dll + 2009-10-15 08:37 . 2009-10-15 08:37 15872 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.VisualC\f89a83a383e7e235f399df9100928be3\Mi crosoft.VisualC.ni.dll + 2009-10-15 08:35 . 2009-10-15 08:35 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Build.Fra#\ef221d200a6aa1f27b7daf7f91c760c2 \Microsoft.Build.Framework.ni.dll + 2009-10-15 08:39 . 2009-10-15 08:39 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Build.Fra#\58da8c0abaa1e1076746751f4af7c928 \Microsoft.Build.Framework.ni.dll + 2009-10-15 08:39 . 2009-10-15 08:39 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfs vc\7787decd94f144f632e4f71273f937bf\dfsvc.ni.exe + 2009-10-15 08:35 . 2009-10-15 08:35 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Acc essibility\cccf9e783368088a6d357cc45f446478\Access ibility.ni.dll - 2009-08-23 12:09 . 2009-08-23 12:09 52736 c:\windows\AppPatch\iebrshim.dll + 2009-10-14 10:58 . 2009-08-27 13:57 52736 c:\windows\AppPatch\iebrshim.dll + 2009-10-14 10:59 . 2009-09-10 14:44 9728 c:\windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6002.22223_none_a8a802137 31ca5a7\lsass.exe + 2009-10-14 10:59 . 2009-09-09 11:09 9728 c:\windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.22518_none_a6d161897 5e9b345\lsass.exe + 2009-10-14 10:59 . 2009-09-10 14:47 7680 c:\windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6000.21125_none_a4dd28557 8ce285b\lsass.exe + 2007-07-02 02:35 . 2009-10-31 20:09 8618 c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-857884917-759742797-3485681705-1000_UserData.bin + 2009-10-15 08:04 . 2009-08-14 10:50 388920 c:\windows\winsxs\x86_netfx-sos_dll_b03f5f7f11d50a3a_6.0.6000.21087_none_fd4d8 22e14289196\SOS.dll + 2009-10-15 08:04 . 2009-08-14 10:51 388920 c:\windows\winsxs\x86_netfx-sos_dll_b03f5f7f11d50a3a_6.0.6000.16888_none_141b0 efbfa8150e3\SOS.dll + 2009-10-15 08:04 . 2009-08-14 10:49 989528 c:\windows\winsxs\x86_netfx-mscordacwks_b03f5f7f11d50a3a_6.0.6000.21087_none_1 47f3a6d2033b581\mscordacwks.dll + 2009-10-15 08:04 . 2009-08-14 10:50 989016 c:\windows\winsxs\x86_netfx-mscordacwks_b03f5f7f11d50a3a_6.0.6000.16888_none_2 b4cc73b068c74ce\mscordacwks.dll + 2009-10-14 10:56 . 2009-05-08 13:06 604672 c:\windows\winsxs\x86_microsoft-windows-wmspdmod_31bf3856ad364e35_6.0.6002.22131_none_fc80 747986388ef6\WMSPDMOD.DLL + 2009-10-14 10:56 . 2009-05-08 12:53 604672 c:\windows\winsxs\x86_microsoft-windows-wmspdmod_31bf3856ad364e35_6.0.6002.18034_none_fbf9 d88c6d183b31\WMSPDMOD.DLL + 2009-10-14 10:56 . 2009-04-02 12:22 604672 c:\windows\winsxs\x86_microsoft-windows-wmspdmod_31bf3856ad364e35_6.0.6001.22403_none_fabc 72e988f818ad\WMSPDMOD.DLL + 2009-10-14 10:56 . 2009-04-02 12:37 604672 c:\windows\winsxs\x86_microsoft-windows-wmspdmod_31bf3856ad364e35_6.0.6001.18234_none_fa13 64be6ff1e8e6\WMSPDMOD.DLL + 2009-10-14 10:56 . 2009-04-02 11:59 604672 c:\windows\winsxs\x86_microsoft-windows-wmspdmod_31bf3856ad364e35_6.0.6000.21033_none_f8b5 9abb8bea11aa\WMSPDMOD.DLL + 2009-10-14 10:56 . 2009-04-02 11:50 604672 c:\windows\winsxs\x86_microsoft-windows-wmspdmod_31bf3856ad364e35_6.0.6000.16838_none_f831 274072c7bd51\WMSPDMOD.DLL + 2009-10-07 05:58 . 2009-08-07 00:23 171608 c:\windows\winsxs\x86_microsoft-windows-w..pdateclient-activex_31bf3856ad364e35_7.4.7600.226_none_79951cc a15140d1a\wuwebv.dll + 2009-10-07 05:59 . 2009-08-07 02:23 575704 c:\windows\winsxs\x86_microsoft-windows-w..owsupdateclient-aux_31bf3856ad364e35_7.4.7600.226_none_cf8a5c896f5 cdb1e\wuapi.dll + 2009-10-14 10:57 . 2009-09-14 09:34 144896 c:\windows\winsxs\x86_microsoft-windows-smbserver-v2_31bf3856ad364e35_6.0.6002.22225_none_dc4c11540c cb53e5\srv2.sys + 2009-10-14 10:57 . 2009-09-14 09:29 144896 c:\windows\winsxs\x86_microsoft-windows-smbserver-v2_31bf3856ad364e35_6.0.6002.18112_none_dbca4396f3 a84c25\srv2.sys + 2009-10-14 10:57 . 2009-09-14 09:48 144896 c:\windows\winsxs\x86_microsoft-windows-smbserver-v2_31bf3856ad364e35_6.0.6001.22522_none_da629e8e0f a7b2bc\srv2.sys + 2009-10-14 10:57 . 2009-09-14 09:44 144896 c:\windows\winsxs\x86_microsoft-windows-smbserver-v2_31bf3856ad364e35_6.0.6001.18331_none_d9cd2fa6f6 931865\srv2.sys + 2009-10-14 10:57 . 2009-09-14 09:42 131072 c:\windows\winsxs\x86_microsoft-windows-smbserver-v2_31bf3856ad364e35_6.0.6000.21127_none_d881379612 7cd699\srv2.sys + 2009-10-14 10:57 . 2009-09-14 09:50 130048 c:\windows\winsxs\x86_microsoft-windows-smbserver-v2_31bf3856ad364e35_6.0.6000.16927_none_d7f7c2a8f9 5f038d\srv2.sys + 2009-10-14 10:59 . 2009-09-10 17:08 218624 c:\windows\winsxs\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6002.22223_none_7f106424 78dc3089\msv1_0.dll + 2009-10-14 10:59 . 2009-09-10 16:48 218624 c:\windows\winsxs\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6002.18111_none_7e8f96b1 5fb84220\msv1_0.dll + 2009-10-14 10:59 . 2009-09-09 13:16 214016 c:\windows\winsxs\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6001.22518_none_7d39c39a 7ba93e27\msv1_0.dll + 2009-10-14 10:59 . 2009-09-10 17:30 213504 c:\windows\winsxs\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6001.18330_none_7c9282c1 62a30e60\msv1_0.dll + 2009-10-14 10:59 . 2009-09-10 17:29 216576 c:\windows\winsxs\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6000.21125_none_7b458a66 7e8db33d\msv1_0.dll + 2009-10-14 10:59 . 2009-09-10 17:38 216576 c:\windows\winsxs\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6000.16926_none_7abd15c3 656ef988\msv1_0.dll + 2009-10-14 10:59 . 2009-09-10 17:10 175104 c:\windows\winsxs\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.0.6002.22223_none_3d2ac2 689306813a\wdigest.dll + 2009-10-14 10:59 . 2009-09-09 13:17 175104 c:\windows\winsxs\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.0.6001.22518_none_3b5421 de95d38ed8\wdigest.dll + 2009-10-14 10:59 . 2009-09-10 17:31 175104 c:\windows\winsxs\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.0.6000.21125_none_395fe8 aa98b803ee\wdigest.dll + 2009-09-09 16:45 . 2009-06-15 21:17 439880 c:\windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6002.22223_none_a8a802137 31ca5a7\ksecdd.sys + 2009-09-09 16:45 . 2009-06-15 18:40 439880 c:\windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.22518_none_a6d161897 5e9b345\ksecdd.sys + 2009-09-09 16:45 . 2009-06-15 23:20 408136 c:\windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6000.21125_none_a4dd28557 8ce285b\ksecdd.sys + 2009-10-14 10:58 . 2009-08-27 11:15 301568 c:\windows\winsxs\x86_microsoft-windows-ieuser_31bf3856ad364e35_6.0.6000.21116_none_0be27c 03f0170abe\ieuser.exe + 2009-10-14 10:58 . 2009-08-27 11:24 301568 c:\windows\winsxs\x86_microsoft-windows-ieuser_31bf3856ad364e35_6.0.6000.16916_none_0b5907 16d6f937b2\ieuser.exe + 2009-10-14 10:58 . 2009-08-27 11:15 263168 c:\windows\winsxs\x86_microsoft-windows-ieinstal_31bf3856ad364e35_6.0.6000.21116_none_e73a 46e7ad9c4b0c\ieinstal.exe + 2009-10-14 10:58 . 2009-08-27 11:24 263168 c:\windows\winsxs\x86_microsoft-windows-ieinstal_31bf3856ad364e35_6.0.6000.16916_none_e6b0 d1fa947e7800\ieinstal.exe + 2009-10-14 10:58 . 2009-08-27 10:35 180736 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6002.22212_none_6709b 392c4694172\ieui.dll + 2009-10-14 10:58 . 2009-08-27 10:27 180736 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6002.18100_none_6688e 61fab455309\ieui.dll + 2009-10-14 10:58 . 2009-08-27 13:14 180736 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6001.22508_none_65341 352c7356867\ieui.dll + 2009-08-23 12:08 . 2009-08-23 12:08 180736 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6001.18319_none_64a0a 4ffae1f00be\ieui.dll + 2009-10-14 10:58 . 2009-08-27 13:36 180736 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.21116_none_6340d a68ca18f6d4\ieui.dll + 2009-10-14 10:58 . 2009-08-27 13:57 180736 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.16916_none_62b76 57bb0fb23c8\ieui.dll + 2009-10-14 10:58 . 2009-08-27 13:17 129536 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6001.22508_n one_4835510ca59a8f61\sqmapi.dll + 2009-10-14 10:58 . 2009-08-27 13:14 271360 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6001.22508_n one_4835510ca59a8f61\iertutil.dll + 2009-08-23 12:08 . 2009-08-23 12:08 129536 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6001.18319_n one_47a1e2b98c8427b8\sqmapi.dll + 2009-10-14 10:58 . 2009-08-27 13:29 270848 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6001.18319_n one_47a1e2b98c8427b8\iertutil.dll + 2009-10-14 10:58 . 2009-08-27 13:40 134144 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6000.21116_n one_46421822a87e1dce\sqmapi.dll + 2009-10-14 10:58 . 2009-08-27 13:36 268288 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6000.21116_n one_46421822a87e1dce\iertutil.dll + 2009-10-14 10:58 . 2009-08-27 14:02 134144 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6000.16916_n one_45b8a3358f604ac2\sqmapi.dll + 2009-10-14 10:58 . 2009-08-27 13:57 268288 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6000.16916_n one_45b8a3358f604ac2\iertutil.dll + 2009-10-14 10:58 . 2009-08-27 13:16 146432 c:\windows\winsxs\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6001.2250 8_none_37b80edf2d3974cf\occache.dll + 2009-10-14 10:58 . 2009-08-27 13:31 146432 c:\windows\winsxs\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6001.1831 9_none_3724a08c14230d26\occache.dll + 2009-10-14 10:58 . 2009-08-27 13:39 102912 c:\windows\winsxs\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6000.2111 6_none_35c4d5f5301d033c\occache.dll + 2009-10-14 10:58 . 2009-08-27 14:01 102912 c:\windows\winsxs\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6000.1691 6_none_353b610816ff3030\occache.dll + 2009-10-14 10:58 . 2009-08-27 13:19 634648 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22508_n one_2ff3a6bc3314dfe7\iexplore.exe + 2009-10-14 10:58 . 2009-08-27 13:38 634648 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18319_n one_2f60386919fe783e\iexplore.exe + 2009-10-14 10:58 . 2009-08-27 13:43 634632 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.21116_n one_2e006dd235f86e54\iexplore.exe + 2009-10-14 10:58 . 2009-08-27 14:04 634632 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16916_n one_2d76f8e51cda9b48\iexplore.exe + 2009-10-14 10:58 . 2009-08-27 13:38 477696 c:\windows\winsxs\x86_microsoft-windows-ie-htmlediting_31bf3856ad364e35_6.0.6000.21116_none_4 6c757305f5eb27f\mshtmled.dll + 2009-10-14 10:58 . 2009-08-27 13:59 477696 c:\windows\winsxs\x86_microsoft-windows-ie-htmlediting_31bf3856ad364e35_6.0.6000.16916_none_4 63de2434640df73\mshtmled.dll + 2009-10-14 10:58 . 2009-08-27 13:15 458240 c:\windows\winsxs\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6001.22508_none_6078 30ff538cc3bc\msfeeds.dll + 2009-10-14 10:58 . 2009-08-27 13:30 458240 c:\windows\winsxs\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6001.18319_none_5fe4 c2ac3a765c13\msfeeds.dll + 2009-10-14 10:58 . 2009-08-27 13:38 459264 c:\windows\winsxs\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6000.21116_none_5e84 f81556705229\msfeeds.dll + 2009-10-14 10:58 . 2009-08-27 13:59 459264 c:\windows\winsxs\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6000.16916_none_5dfb 83283d527f1d\msfeeds.dll + 2009-10-14 10:58 . 2009-08-27 13:35 214528 c:\windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.21116_ none_9664bcd89d9dfff2\dxtrans.dll + 2009-10-14 10:58 . 2009-08-27 13:35 347136 c:\windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.21116_ none_9664bcd89d9dfff2\dxtmsft.dll + 2009-10-14 10:58 . 2009-08-27 13:57 214528 c:\windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.16916_ none_95db47eb84802ce6\dxtrans.dll + 2009-10-14 10:58 . 2009-08-27 13:57 347136 c:\windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.16916_ none_95db47eb84802ce6\dxtmsft.dll + 2009-10-14 10:58 . 2009-08-27 12:54 380928 c:\windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6002.22212_no ne_fdf95d4a8208c462\ieapfltr.dll + 2009-10-14 10:58 . 2009-08-27 12:39 380928 c:\windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6002.18100_no ne_fd788fd768e4d5f9\ieapfltr.dll + 2009-10-14 10:58 . 2009-08-27 13:14 380928 c:\windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6001.22508_no ne_fc23bd0a84d4eb57\ieapfltr.dll + 2009-10-14 10:58 . 2009-08-27 13:29 380928 c:\windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6001.18319_no ne_fb904eb76bbe83ae\ieapfltr.dll + 2009-10-14 10:58 . 2009-08-27 13:36 380928 c:\windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.21116_no ne_fa30842087b879c4\ieapfltr.dll + 2009-10-14 10:58 . 2009-08-27 13:57 380928 c:\windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.16916_no ne_f9a70f336e9aa6b8\ieapfltr.dll + 2009-10-14 10:58 . 2009-08-27 13:14 161792 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.22508_ none_aec3c8801fdc48aa\ieakui.dll + 2009-10-14 10:58 . 2009-08-27 13:14 230400 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.22508_ none_aec3c8801fdc48aa\ieaksie.dll + 2009-08-23 12:08 . 2009-08-23 12:08 161792 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.18319_ none_ae305a2d06c5e101\ieakui.dll + 2009-10-14 10:58 . 2009-08-27 13:29 230400 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.18319_ none_ae305a2d06c5e101\ieaksie.dll + 2009-10-14 10:58 . 2009-08-27 13:36 161792 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6000.21116_ none_acd08f9622bfd717\ieakui.dll + 2009-10-14 10:58 . 2009-08-27 13:36 230400 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6000.21116_ none_acd08f9622bfd717\ieaksie.dll + 2009-10-14 10:58 . 2009-08-27 13:57 161792 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6000.16916_ none_ac471aa909a2040b\ieakui.dll + 2009-10-14 10:58 . 2009-08-27 13:57 230400 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6000.16916_ none_ac471aa909a2040b\ieaksie.dll + 2009-10-14 10:58 . 2009-08-27 13:14 389120 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_6.0.6001.22508_n one_74e2132c709391cb\iedkcs32.dll + 2009-10-14 10:58 . 2009-08-27 13:29 389120 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_6.0.6001.18319_n one_744ea4d9577d2a22\iedkcs32.dll + 2009-10-14 10:58 . 2009-08-27 13:36 388608 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_6.0.6000.21116_n one_72eeda4273772038\iedkcs32.dll + 2009-10-14 10:58 . 2009-08-27 13:57 385024 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_6.0.6000.16916_n one_726565555a594d2c\iedkcs32.dll + 2009-10-14 10:58 . 2009-08-27 12:56 834048 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.2 2212_none_04503a70b81d4a0f\wininet.dll + 2009-10-14 10:58 . 2009-08-27 12:40 834048 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.1 8100_none_03cf6cfd9ef95ba6\wininet.dll + 2009-10-14 10:58 . 2009-08-27 13:17 834048 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.2 2508_none_027a9a30bae97104\wininet.dll + 2009-10-14 10:58 . 2009-08-27 13:32 833024 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.1 8319_none_01e72bdda1d3095b\wininet.dll + 2009-10-14 10:58 . 2009-08-27 13:40 840704 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.2 1116_none_00876146bdccff71\wininet.dll + 2009-10-14 10:58 . 2009-08-27 14:02 832512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.1 6916_none_fffdec59a4af2c65\wininet.dll + 2009-10-14 10:58 . 2009-08-27 13:16 671232 c:\windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6001.2 2508_none_e1574d57958909e0\mstime.dll + 2009-10-14 10:58 . 2009-08-27 13:30 671232 c:\windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6001.1 8319_none_e0c3df047c72a237\mstime.dll + 2009-10-14 10:58 . 2009-08-27 13:38 671232 c:\windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6000.2 1116_none_df64146d986c984d\mstime.dll + 2009-10-14 10:58 . 2009-08-27 14:00 671232 c:\windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6000.1 6916_none_deda9f807f4ec541\mstime.dll + 2009-10-14 10:58 . 2009-08-27 13:34 124928 c:\windows\winsxs\x86_microsoft-windows-advpack_31bf3856ad364e35_6.0.6000.21116_none_aa69d 3430eca7b7b\advpack.dll + 2009-10-14 10:58 . 2009-08-27 13:56 124928 c:\windows\winsxs\x86_microsoft-windows-advpack_31bf3856ad364e35_6.0.6000.16916_none_a9e05 e55f5aca86f\advpack.dll - 2006-11-02 10:33 . 2009-09-10 16:56 626738 c:\windows\System32\perfh009.dat + 2006-11-02 10:33 . 2009-10-25 17:55 626738 c:\windows\System32\perfh009.dat + 2006-11-02 10:33 . 2009-10-25 17:55 107508 c:\windows\System32\perfc009.dat - 2006-11-02 10:33 . 2009-09-10 16:56 107508 c:\windows\System32\perfc009.dat - 2009-08-23 12:08 . 2009-08-23 12:08 102912 c:\windows\System32\occache.dll + 2009-10-14 10:58 . 2009-08-27 14:01 102912 c:\windows\System32\occache.dll - 2009-08-23 12:08 . 2009-08-23 12:08 671232 c:\windows\System32\mstime.dll + 2009-10-14 10:58 . 2009-08-27 14:00 671232 c:\windows\System32\mstime.dll - 2009-08-23 12:08 . 2009-08-23 12:08 477696 c:\windows\System32\mshtmled.dll + 2009-10-14 10:58 . 2009-08-27 13:59 477696 c:\windows\System32\mshtmled.dll + 2009-10-14 10:58 . 2009-08-27 13:59 459264 c:\windows\System32\msfeeds.dll - 2009-08-23 12:09 . 2009-08-23 12:09 459264 c:\windows\System32\msfeeds.dll + 2009-09-24 18:20 . 2009-09-24 18:19 149280 c:\windows\System32\javaws.exe + 2009-09-24 18:20 . 2009-09-24 18:19 145184 c:\windows\System32\javaw.exe + 2009-09-24 18:20 . 2009-09-24 18:19 145184 c:\windows\System32\java.exe - 2009-08-23 12:09 . 2009-08-23 12:09 180736 c:\windows\System32\ieui.dll + 2009-10-14 10:58 . 2009-08-27 13:57 180736 c:\windows\System32\ieui.dll + 2009-10-14 10:58 . 2009-08-27 13:57 268288 c:\windows\System32\iertutil.dll - 2009-08-23 12:08 . 2009-08-23 12:08 268288 c:\windows\System32\iertutil.dll - 2009-08-23 12:09 . 2009-08-23 12:09 385024 c:\windows\System32\iedkcs32.dll + 2009-10-14 10:58 . 2009-08-27 13:57 385024 c:\windows\System32\iedkcs32.dll - 2009-08-23 12:09 . 2009-08-23 12:09 380928 c:\windows\System32\ieapfltr.dll + 2009-10-14 10:58 . 2009-08-27 13:57 380928 c:\windows\System32\ieapfltr.dll - 2009-08-23 12:09 . 2009-08-23 12:09 161792 c:\windows\System32\ieakui.dll + 2009-10-14 10:58 . 2009-08-27 13:57 161792 c:\windows\System32\ieakui.dll - 2009-08-23 12:09 . 2009-08-23 12:09 230400 c:\windows\System32\ieaksie.dll + 2009-10-14 10:58 . 2009-08-27 13:57 230400 c:\windows\System32\ieaksie.dll + 2009-10-14 10:58 . 2009-08-27 13:57 214528 c:\windows\System32\dxtrans.dll - 2009-08-23 12:09 . 2009-08-23 12:09 214528 c:\windows\System32\dxtrans.dll - 2009-08-23 12:09 . 2009-08-23 12:09 347136 c:\windows\System32\dxtmsft.dll + 2009-10-14 10:58 . 2009-08-27 13:57 347136 c:\windows\System32\dxtmsft.dll + 2009-09-24 20:41 . 2009-09-24 20:41 114688 c:\windows\System32\config\systemprofile\AppData\L ocalLow\Sun\Java\Deployment\cache\6.0\62\6baea4fe-20dfa308-n\jogl_cg.dll + 2009-09-24 20:41 . 2009-09-24 20:41 315392 c:\windows\System32\config\systemprofile\AppData\L ocalLow\Sun\Java\Deployment\cache\6.0\62\6baea4fe-20dfa308-n\jogl.dll + 2009-09-24 20:41 . 2009-09-24 20:41 348160 c:\windows\System32\config\systemprofile\AppData\L ocalLow\Sun\Java\Deployment\cache\6.0\21\14e5d595-22e08fd3-n\msvcr71.dll + 2009-09-24 20:41 . 2009-09-24 20:41 503808 c:\windows\System32\config\systemprofile\AppData\L ocalLow\Sun\Java\Deployment\cache\6.0\21\14e5d595-22e08fd3-n\msvcp71.dll + 2009-09-24 20:41 . 2009-09-24 20:41 499712 c:\windows\System32\config\systemprofile\AppData\L ocalLow\Sun\Java\Deployment\cache\6.0\21\14e5d595-22e08fd3-n\jmc.dll + 2009-09-24 20:41 . 2009-09-24 20:41 348160 c:\windows\System32\config\systemprofile\AppData\L ocalLow\Sun\Java\Deployment\cache\6.0\15\58fb3e0f-67259cfc-n\msvcr71.dll + 2009-09-24 20:41 . 2009-09-24 20:41 503808 c:\windows\System32\config\systemprofile\AppData\L ocalLow\Sun\Java\Deployment\cache\6.0\15\58fb3e0f-67259cfc-n\msvcp71.dll + 2009-09-24 20:41 . 2009-09-24 20:41 499712 c:\windows\System32\config\systemprofile\AppData\L ocalLow\Sun\Java\Deployment\cache\6.0\15\58fb3e0f-67259cfc-n\jmc.dll - 2009-08-23 12:09 . 2009-08-23 12:09 124928 c:\windows\System32\advpack.dll + 2009-10-14 10:58 . 2009-08-27 13:56 124928 c:\windows\System32\advpack.dll + 2009-10-15 08:04 . 2009-08-14 10:51 388920 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS. dll + 2009-10-15 08:04 . 2009-08-14 10:50 989016 c:\windows\Microsoft.NET\Framework\v2.0.50727\msco rdacwks.dll - 2007-04-14 01:58 . 2007-04-14 01:58 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscor ld.dll + 2008-05-28 05:49 . 2008-05-28 05:49 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscor ld.dll + 2008-05-28 05:48 . 2008-05-28 05:48 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscor jit.dll - 2007-04-14 01:56 . 2007-04-14 01:56 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscor jit.dll + 2008-05-28 06:30 . 2008-05-28 06:30 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspne t_isapi.dll - 2007-04-14 02:30 . 2007-04-14 02:30 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspne t_isapi.dll + 2009-10-15 08:04 . 2009-10-15 08:04 835584 c:\windows\assembly\NativeImages1_v1.1.4322\System .Drawing\1.0.5000.0__b03f5f7f11d50a3a_4854f2b3\Sys tem.Drawing.dll + 2009-10-15 08:04 . 2009-10-15 08:04 192512 c:\windows\assembly\NativeImages1_v1.1.4322\System .Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_6b283 d87\System.Drawing.Design.dll + 2009-10-15 08:04 . 2009-10-15 08:04 118784 c:\windows\assembly\NativeImages1_v1.1.4322\Custom Marshalers\1.0.5000.0__b03f5f7f11d50a3a_6d17d67c\C ustomMarshalers.dll + 2009-10-15 08:42 . 2009-10-15 08:42 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\Wsa tConfig\8a1aabd583db5bf80efa924e63857864\WsatConfi g.ni.exe + 2009-10-15 08:42 . 2009-10-15 08:42 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsFormsIntegra#\51b5310304cb97abbdf70b244791c583 \WindowsFormsIntegration.ni.dll + 2009-10-15 08:40 . 2009-10-15 08:40 187904 c:\windows\assembly\NativeImages_v2.0.50727_32\UIA utomationTypes\649477fd01ef8e6692d0ac2e2983f578\UI AutomationTypes.ni.dll + 2009-10-15 08:42 . 2009-10-15 08:42 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIA utomationClient\ce8f3dda58aac9ccc4dc1aad6f151bc9\U IAutomationClient.ni.dll + 2009-10-15 08:42 . 2009-10-15 08:42 241152 c:\windows\assembly\NativeImages_v2.0.50727_32\Tas kScheduler\cb72ae4f1f1eb25c0adeab2d2033e2c8\TaskSc heduler.ni.dll + 2009-10-15 08:42 . 2009-10-15 08:42 400896 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Xml.Linq\41d0ef33699e5f71a8ad4d4679c62768\Syst em.Xml.Linq.ni.dll + 2009-10-15 08:41 . 2009-10-15 08:41 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web.Routing\9f12a159358b43e0e431b7c97fec6e1e\S ystem.Web.Routing.ni.dll + 2009-10-15 08:38 . 2009-10-15 08:38 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web.RegularE#\e6b57c0506ec849c6706cb5617ad7372 \System.Web.RegularExpressions.ni.dll + 2009-10-15 08:42 . 2009-10-15 08:42 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web.Entity\20886490e8455fdf6b5ae9fe42113d5a\Sy stem.Web.Entity.ni.dll + 2009-10-15 08:42 . 2009-10-15 08:42 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web.Entity.D#\2c810828a38e6115a0bd4fd0de541b2d \System.Web.Entity.Design.ni.dll + 2009-10-15 08:42 . 2009-10-15 08:42 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web.DynamicD#\b24d253d906f9a2a3fb68fa7647cebba \System.Web.DynamicData.ni.dll + 2009-10-15 08:41 . 2009-10-15 08:41 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web.Abstract#\10cd25b294f9969f4d95d0f0de8309b3 \System.Web.Abstractions.ni.dll + 2009-10-15 08:37 . 2009-10-15 08:37 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Transactions\b98385fbfc00adacf4fd7896ba064032\ System.Transactions.ni.dll + 2009-10-15 08:38 . 2009-10-15 08:38 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.ServiceProce#\ae77b2b91367f11d340cf3bf2428af59 \System.ServiceProcess.ni.dll + 2009-10-15 08:36 . 2009-10-15 08:36 676352 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Security\a0fa9d672445167efeefa37ebc1fbf23\Syst em.Security.ni.dll + 2009-10-15 08:37 . 2009-10-15 08:37 311296 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Runtime.Seri#\127be3227107d75264176ae1e6015225 \System.Runtime.Serialization.Formatters.Soap.ni.d ll + 2009-10-15 08:37 . 2009-10-15 08:37 771584 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Runtime.Remo#\23281812ddf7a1fab881b5322e577ac4 \System.Runtime.Remoting.ni.dll + 2009-10-15 08:41 . 2009-10-15 08:41 621056 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Net\1f622b60c60fa0cbbc554aa39f3934e0\System.Ne t.ni.dll + 2009-10-15 08:39 . 2009-10-15 08:39 593408 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Messaging\afaddec7036e5cc185f4f55da1bca48e\Sys tem.Messaging.ni.dll + 2009-10-15 08:41 . 2009-10-15 08:41 998400 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Management\22e348e7fee20fcb2013d3dfe016ae8e\Sy stem.Management.ni.dll + 2009-10-15 08:41 . 2009-10-15 08:41 330752 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Management.I#\a43e3638ee52b7daa166c4dd7ba9c1e0 \System.Management.Instrumentation.ni.dll + 2009-10-15 08:41 . 2009-10-15 08:41 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.IO.Log\500f59c1c75fedddbbaf7a7a7e51ce59\System .IO.Log.ni.dll + 2009-10-15 08:39 . 2009-10-15 08:39 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.IdentityMode#\0dbe3993c452e61a0d3df2d8eedb44b8 \System.IdentityModel.Selectors.ni.dll + 2009-10-15 08:36 . 2009-10-15 08:36 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.EnterpriseSe#\ae383808b3f5ee9287358378f9a2cad3 \System.EnterpriseServices.Wrapper.dll + 2009-10-15 08:36 . 2009-10-15 08:36 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.EnterpriseSe#\ae383808b3f5ee9287358378f9a2cad3 \System.EnterpriseServices.ni.dll + 2009-10-15 08:33 . 2009-10-15 08:33 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Drawing.Desi#\923dd4ff5f49f250777109e29cd5594c \System.Drawing.Design.ni.dll + 2009-10-15 08:41 . 2009-10-15 08:41 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.DirectorySer#\c5acc930b42414728ad1da69eed24bd8 \System.DirectoryServices.AccountManagement.ni.dll + 2009-10-15 08:38 . 2009-10-15 08:38 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.DirectorySer#\522fe16962613930ff406329cbfe4517 \System.DirectoryServices.Protocols.ni.dll + 2009-10-15 08:41 . 2009-10-15 08:41 939008 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Data.Service#\ee574a2381a84d3af3d5193d1b644e13 \System.Data.Services.Client.ni.dll + 2009-10-15 08:41 . 2009-10-15 08:41 354816 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Data.Service#\686e30784af62f8782e3f0f4e48a2ccc \System.Data.Services.Design.ni.dll + 2009-10-15 08:41 . 2009-10-15 08:41 756736 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Data.Entity.#\1933ae5de231331cac7a5f4b936d24ac \System.Data.Entity.Design.ni.dll + 2009-10-15 08:40 . 2009-10-15 08:40 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Data.DataSet#\044b0bb7958279c41b5e772aca46f03b \System.Data.DataSetExtensions.ni.dll + 2009-10-15 08:36 . 2009-10-15 08:36 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Configuration\e6001d416f7c468334934a2c6a41c631 \System.Configuration.ni.dll + 2009-10-15 08:38 . 2009-10-15 08:38 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Configuratio#\a22414f3a933ad2b356dc0ff2baff3a7 \System.Configuration.Install.ni.dll + 2009-10-15 08:40 . 2009-10-15 08:40 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.AddIn\231083236b9879551966a9cf45ab72c4\System. AddIn.ni.dll + 2009-10-15 08:41 . 2009-10-15 08:41 232448 c:\windows\assembly\NativeImages_v2.0.50727_32\sys globl\0f56ddb6aa90222ac702aeef020b3478\sysglobl.ni .dll + 2009-10-15 08:40 . 2009-10-15 08:40 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMS vcHost\15aed76bc4dbf005b2260e07f6e6bae8\SMSvcHost. ni.exe + 2009-10-15 08:39 . 2009-10-15 08:39 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMD iagnostics\a719d429cef59eafa65f6e7e175fd33e\SMDiag nostics.ni.dll + 2009-10-15 08:40 . 2009-10-15 08:40 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\Ser viceModelReg\950c48a33a66a4f00c0f25274d9713fb\Serv iceModelReg.ni.exe + 2009-10-15 08:33 . 2009-10-15 08:33 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\Pre sentationFramewo#\f3472b069313a822cc536bb3596f7433 \PresentationFramework.Classic.ni.dll + 2009-10-15 08:33 . 2009-10-15 08:33 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\Pre sentationFramewo#\a122c56b60812fb5cbc2e941d4875a87 \PresentationFramework.Aero.ni.dll + 2009-10-15 08:33 . 2009-10-15 08:33 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\Pre sentationFramewo#\7a2d7308eb4afa0be741c434eeee869c \PresentationFramework.Luna.ni.dll + 2009-10-15 08:33 . 2009-10-15 08:33 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\Pre sentationFramewo#\521097dd6e798ab02c43d4875e757a8a \PresentationFramework.Royale.ni.dll + 2009-10-15 08:39 . 2009-10-15 08:39 722944 c:\windows\assembly\NativeImages_v2.0.50727_32\nap snap\2e521fe383fbe203ebcad6f353420823\napsnap.ni.d ll + 2009-10-15 08:39 . 2009-10-15 08:39 110080 c:\windows\assembly\NativeImages_v2.0.50727_32\nap init\bf2979e594d0c396a6f82e1b98452772\napinit.ni.d ll + 2009-10-15 08:39 . 2009-10-15 08:39 103424 c:\windows\assembly\NativeImages_v2.0.50727_32\nap hlpr\55a09749a6cccc0ce4cee380dcfa88ef\naphlpr.ni.d ll + 2009-10-15 08:35 . 2009-10-15 08:35 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSB uild\bbe2925bc009028ec8bc8d441744dcae\MSBuild.ni.e xe + 2009-10-15 08:39 . 2009-10-15 08:39 283648 c:\windows\assembly\NativeImages_v2.0.50727_32\MMC FxCommon\8208dfbd4ccac3497bde4f21730870aa\MMCFxCom mon.ni.dll + 2009-10-15 08:39 . 2009-10-15 08:39 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Transacti#\68641d9ba1060928a86ec4db0fed01a7 \Microsoft.Transactions.Bridge.Dtc.ni.dll + 2009-10-15 08:39 . 2009-10-15 08:39 575488 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Managemen#\c87ba9209cc8e622467700f2ad27837b \Microsoft.ManagementConsole.ni.dll + 2009-10-15 08:39 . 2009-10-15 08:39 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Build.Uti#\b6f57a696b264f421837d1ce89454292 \Microsoft.Build.Utilities.ni.dll + 2009-10-15 08:39 . 2009-10-15 08:39 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Build.Uti#\a55dbc0e2092b5328b22c24bb8e3927d \Microsoft.Build.Utilities.v3.5.ni.dll + 2009-10-15 08:39 . 2009-10-15 08:39 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Build.Eng#\76fe11f14bc1588836110392b8ca2ec8 \Microsoft.Build.Engine.ni.dll + 2009-10-15 08:39 . 2009-10-15 08:39 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Build.Con#\cc8f1aeadcbb7484f3804bfd6c67b381 \Microsoft.Build.Conversion.v3.5.ni.dll + 2009-10-15 08:39 . 2009-10-15 08:39 540160 c:\windows\assembly\NativeImages_v2.0.50727_32\Eve ntViewer\16b8f2b6a56299c553c278f854628d59\EventVie wer.ni.dll + 2009-10-15 08:39 . 2009-10-15 08:39 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\Cus tomMarshalers\45dea14b1707153213603cc06629fe15\Cus tomMarshalers.ni.dll + 2009-10-15 08:36 . 2009-10-15 08:36 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\Com SvcConfig\200910547c522241db7d6ebb74cbe9aa\ComSvcC onfig.ni.exe + 2009-10-15 08:35 . 2009-10-15 08:35 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\Asp NetMMCExt\04735e0f45ff051d4f8a58c317066e0e\AspNetM MCExt.ni.dll + 2009-10-15 08:04 . 2009-08-14 10:50 5818704 c:\windows\winsxs\x86_netfx-mscorwks_dll_b03f5f7f11d50a3a_6.0.6000.21087_none_ 1bbb17864832a9ae\mscorwks.dll + 2009-10-15 08:04 . 2009-08-14 10:51 5812560 c:\windows\winsxs\x86_netfx-mscorwks_dll_b03f5f7f11d50a3a_6.0.6000.16888_none_ 3288a4542e8b68fb\mscorwks.dll + 2009-10-15 08:04 . 2009-08-14 10:49 4550656 c:\windows\winsxs\x86_mscorlib_b77a5c561934e089_6. 0.6000.21087_none_b1144898daab4529\mscorlib.dll + 2009-10-15 08:04 . 2009-08-14 10:50 4546560 c:\windows\winsxs\x86_mscorlib_b77a5c561934e089_6. 0.6000.16888_none_c7e1d566c1040476\mscorlib.dll + 2009-10-14 10:58 . 2008-11-27 04:24 1823744 c:\windows\winsxs\x86_microsoft.windows.gdiplus_65 95b64144ccf1df_1.1.6001.22319_none_76f929797c73544 2\GdiPlus.dll + 2009-10-14 10:58 . 2008-11-27 04:35 1823744 c:\windows\winsxs\x86_microsoft.windows.gdiplus_65 95b64144ccf1df_1.1.6001.18175_none_8dcd2d3962c6257 1\GdiPlus.dll + 2009-10-14 10:58 . 2008-11-27 04:16 1823744 c:\windows\winsxs\x86_microsoft.windows.gdiplus_65 95b64144ccf1df_1.1.6000.20966_none_7722737b7c1d79b b\GdiPlus.dll + 2009-10-14 10:58 . 2008-11-27 04:35 1823232 c:\windows\winsxs\x86_microsoft.windows.gdiplus_65 95b64144ccf1df_1.1.6000.16782_none_8df276136273e58 e\GdiPlus.dll + 2009-10-14 10:58 . 2008-11-27 04:24 1748992 c:\windows\winsxs\x86_microsoft.windows.gdiplus_65 95b64144ccf1df_1.0.6001.22319_none_87a7ba94e36d7a9 b\GdiPlus.dll + 2009-10-14 10:58 . 2008-11-27 04:35 1748992 c:\windows\winsxs\x86_microsoft.windows.gdiplus_65 95b64144ccf1df_1.0.6001.18175_none_9e7bbe54c9c04bc a\GdiPlus.dll + 2009-10-14 10:58 . 2008-11-27 04:16 1744896 c:\windows\winsxs\x86_microsoft.windows.gdiplus_65 95b64144ccf1df_1.0.6000.20966_none_87d10496e317a01 4\GdiPlus.dll + 2009-10-14 10:58 . 2008-11-27 04:35 1744896 c:\windows\winsxs\x86_microsoft.windows.gdiplus_65 95b64144ccf1df_1.0.6000.16782_none_9ea1072ec96e0be 7\GdiPlus.dll + 2009-10-07 06:00 . 2009-08-07 01:45 2421760 c:\windows\winsxs\x86_microsoft-windows-windowsupdateclient-ui_31bf3856ad364e35_7.4.7600.226_none_672645e7fba0 c4cc\wucltux.dll + 2009-10-07 06:00 . 2009-08-07 02:23 1929952 c:\windows\winsxs\x86_microsoft-windows-w..wsupdateclient-core_31bf3856ad364e35_7.4.7600.226_none_e979223d5b 9c821b\wuaueng.dll + 2009-10-14 10:58 . 2009-08-05 14:10 3548216 c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6002.22191_none_6e4027 03caaf139b\ntoskrnl.exe + 2009-10-14 10:58 . 2009-08-05 14:10 3599928 c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6002.22191_none_6e4027 03caaf139b\ntkrnlpa.exe + 2009-10-14 10:58 . 2009-08-04 12:34 3548216 c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6002.18082_none_6dc25a 6eb1887137\ntoskrnl.exe + 2009-10-14 10:58 . 2009-08-04 12:34 3600456 c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6002.18082_none_6dc25a 6eb1887137\ntkrnlpa.exe + 2009-10-14 10:58 . 2009-08-05 17:15 3547736 c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6001.22489_none_6c6c87 57cd796d3e\ntoskrnl.exe + 2009-10-14 10:58 . 2009-08-05 17:15 3599960 c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6001.22489_none_6c6c87 57cd796d3e\ntkrnlpa.exe + 2009-10-14 10:58 . 2009-08-05 14:22 3546184 c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6001.18304_none_6c3468 7ab41f6f39\ntoskrnl.exe + 2009-10-14 10:58 . 2009-08-05 14:22 3597896 c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6001.18304_none_6c3468 7ab41f6f39\ntkrnlpa.exe + 2009-10-14 10:58 . 2009-08-05 14:10 3469896 c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6000.21101_none_6ad49d e3d019654f\ntoskrnl.exe + 2009-10-14 10:58 . 2009-08-05 14:10 3503688 c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6000.21101_none_6ad49d e3d019654f\ntkrnlpa.exe + 2009-10-14 10:58 . 2009-08-05 14:28 3467864 c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6000.16901_none_6a4b28 f6b6fb9243\ntoskrnl.exe + 2009-10-14 10:58 . 2009-08-05 14:28 3502152 c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6000.16901_none_6a4b28 f6b6fb9243\ntkrnlpa.exe + 2009-10-14 10:59 . 2009-09-10 17:07 1259520 c:\windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6002.22223_none_a8a802137 31ca5a7\lsasrv.dll + 2009-10-14 10:59 . 2009-09-09 13:17 1258496 c:\windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.22518_none_a6d161897 5e9b345\lsasrv.dll + 2009-10-14 10:59 . 2009-09-10 17:28 1235456 c:\windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6000.21125_none_a4dd28557 8ce285b\lsasrv.dll + 2009-10-14 10:59 . 2009-08-27 12:54 6081024 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6002.22212_none_6709b 392c4694172\ieframe.dll + 2009-10-14 10:59 . 2009-08-27 12:39 6079488 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6002.18100_none_6688e 61fab455309\ieframe.dll + 2009-10-14 10:59 . 2009-08-27 11:07 6072832 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6001.22508_none_65341 352c7356867\ieframe.dll + 2009-10-14 10:59 . 2009-08-27 13:29 6069248 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6001.18319_none_64a0a 4ffae1f00be\ieframe.dll + 2009-10-14 10:58 . 2009-08-27 13:36 6070784 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.21116_none_6340d a68ca18f6d4\ieframe.dll + 2009-10-14 10:58 . 2009-08-27 13:57 6067200 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.16916_none_62b76 57bb0fb23c8\ieframe.dll + 2009-10-14 10:59 . 2009-08-27 12:54 3600896 c:\windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6002.22212_none _15aa598f3873b345\mshtml.dll + 2009-10-14 10:59 . 2009-08-27 12:39 3599872 c:\windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6002.18100_none _15298c1c1f4fc4dc\mshtml.dll + 2009-10-14 10:59 . 2009-08-27 13:15 3584512 c:\windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6001.22508_none _13d4b94f3b3fda3a\mshtml.dll + 2009-10-14 10:59 . 2009-08-27 13:30 3584000 c:\windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6001.18319_none _13414afc22297291\mshtml.dll + 2009-10-14 10:58 . 2009-08-27 13:38 3600384 c:\windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6000.21116_none _11e180653e2368a7\mshtml.dll + 2009-10-14 10:58 . 2009-08-27 13:59 3598336 c:\windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6000.16916_none _11580b782505959b\mshtml.dll + 2009-08-23 12:09 . 2009-08-23 12:09 2452872 c:\windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6002.22212_no ne_fdf95d4a8208c462\ieapfltr.dat + 2009-08-23 12:09 . 2009-08-23 12:09 2452872 c:\windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6002.18100_no ne_fd788fd768e4d5f9\ieapfltr.dat + 2009-08-23 12:09 . 2009-08-23 12:09 2452872 c:\windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6001.22508_no ne_fc23bd0a84d4eb57\ieapfltr.dat + 2009-08-23 12:09 . 2009-08-23 12:09 2452872 c:\windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6001.18319_no ne_fb904eb76bbe83ae\ieapfltr.dat + 2009-08-23 12:09 . 2009-08-23 12:09 2452872 c:\windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.21116_no ne_fa30842087b879c4\ieapfltr.dat + 2009-08-23 12:09 . 2009-08-23 12:09 2452872 c:\windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.16916_no ne_f9a70f336e9aa6b8\ieapfltr.dat + 2009-10-14 10:58 . 2009-08-27 12:56 1176064 c:\windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6002.2 2212_none_b74a5eceed14237c\urlmon.dll + 2009-10-14 10:58 . 2009-08-27 12:40 1176064 c:\windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6002.1 8100_none_b6c9915bd3f03513\urlmon.dll + 2009-10-14 10:58 . 2009-08-27 13:17 1175040 c:\windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6001.2 2508_none_b574be8eefe04a71\urlmon.dll + 2009-10-14 10:58 . 2009-08-27 13:32 1174528 c:\windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6001.1 8319_none_b4e1503bd6c9e2c8\urlmon.dll + 2009-10-14 10:58 . 2009-08-27 13:40 1170944 c:\windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6000.2 1116_none_b38185a4f2c3d8de\urlmon.dll + 2009-10-14 10:58 . 2009-08-27 14:02 1168384 c:\windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6000.1 6916_none_b2f810b7d9a605d2\urlmon.dll + 2009-10-14 10:58 . 2009-08-27 14:02 1168384 c:\windows\System32\urlmon.dll - 2006-11-02 10:22 . 2009-09-10 08:08 6029312 c:\windows\System32\SMI\Store\Machine\SCHEMA.DAT + 2006-11-02 10:22 . 2009-10-15 08:28 6029312 c:\windows\System32\SMI\Store\Machine\SCHEMA.DAT + 2009-10-14 10:58 . 2009-08-05 14:28 3467864 c:\windows\System32\ntoskrnl.exe + 2009-10-14 10:58 . 2009-08-05 14:28 3502152 c:\windows\System32\ntkrnlpa.exe + 2009-10-14 10:58 . 2009-08-27 13:59 3598336 c:\windows\System32\mshtml.dll + 2009-10-14 10:58 . 2009-08-27 13:57 6067200 c:\windows\System32\ieframe.dll - 2009-08-23 12:09 . 2009-08-23 12:09 6067200 c:\windows\System32\ieframe.dll + 2009-10-15 08:04 . 2009-08-14 10:51 5812560 c:\windows\Microsoft.NET\Framework\v2.0.50727\msco rwks.dll + 2009-10-15 08:04 . 2009-08-14 10:50 4546560 c:\windows\Microsoft.NET\Framework\v2.0.50727\msco rlib.dll - 2009-08-23 10:21 . 2009-08-23 10:21 4546560 c:\windows\Microsoft.NET\Framework\v2.0.50727\msco rlib.dll - 2007-04-14 02:35 . 2007-04-14 02:35 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\Syste m.Web.dll + 2008-05-28 06:35 . 2008-05-28 06:35 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\Syste m.Web.dll + 2008-05-28 06:35 . 2008-05-28 06:35 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\Syste m.dll - 2007-04-14 02:35 . 2007-04-14 02:35 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\Syste m.dll + 2008-05-28 05:48 . 2008-05-28 05:48 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscor wks.dll - 2007-04-14 01:57 . 2007-04-14 01:57 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscor wks.dll - 2007-04-14 01:57 . 2007-04-14 01:57 2523136 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscor svr.dll + 2008-05-28 05:48 . 2008-05-28 05:48 2523136 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscor svr.dll + 2008-05-28 05:43 . 2008-05-28 05:43 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscor lib.dll - 2007-04-14 01:50 . 2007-04-14 01:50 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscor lib.dll + 2009-10-15 08:03 . 2009-10-15 08:03 1966080 c:\windows\assembly\NativeImages1_v1.1.4322\System \1.0.5000.0__b77a5c561934e089_ea0695e9\System.dll + 2009-10-15 08:04 . 2009-10-15 08:04 4792320 c:\windows\assembly\NativeImages1_v1.1.4322\System \1.0.5000.0__b77a5c561934e089_9e30ba5b\System.dll + 2009-10-15 08:04 . 2009-10-15 08:04 2088960 c:\windows\assembly\NativeImages1_v1.1.4322\System .Xml\1.0.5000.0__b77a5c561934e089_5ae94614\System. Xml.dll + 2009-10-15 08:04 . 2009-10-15 08:04 5513216 c:\windows\assembly\NativeImages1_v1.1.4322\System .Xml\1.0.5000.0__b77a5c561934e089_20d8d932\System. Xml.dll + 2009-10-15 08:04 . 2009-10-15 08:04 3018752 c:\windows\assembly\NativeImages1_v1.1.4322\System .Windows.Forms\1.0.5000.0__b77a5c561934e089_91d438 aa\System.Windows.Forms.dll + 2009-10-15 08:04 . 2009-10-15 08:04 7884800 c:\windows\assembly\NativeImages1_v1.1.4322\System .Windows.Forms\1.0.5000.0__b77a5c561934e089_674857 0a\System.Windows.Forms.dll + 2009-10-15 08:04 . 2009-10-15 08:04 2244608 c:\windows\assembly\NativeImages1_v1.1.4322\System .Drawing\1.0.5000.0__b03f5f7f11d50a3a_63f27ce9\Sys tem.Drawing.dll + 2009-10-15 08:04 . 2009-10-15 08:04 1470464 c:\windows\assembly\NativeImages1_v1.1.4322\System .Design\1.0.5000.0__b03f5f7f11d50a3a_d8a711bf\Syst em.Design.dll + 2009-10-15 08:04 . 2009-10-15 08:04 3395584 c:\windows\assembly\NativeImages1_v1.1.4322\System .Design\1.0.5000.0__b03f5f7f11d50a3a_a27a5729\Syst em.Design.dll + 2009-10-15 08:04 . 2009-10-15 08:04 3391488 c:\windows\assembly\NativeImages1_v1.1.4322\mscorl ib\1.0.5000.0__b77a5c561934e089_b7202966\mscorlib. dll + 2009-10-15 08:04 . 2009-10-15 08:04 8908800 c:\windows\assembly\NativeImages1_v1.1.4322\mscorl ib\1.0.5000.0__b77a5c561934e089_3ce3c551\mscorlib. dll + 2009-10-15 08:32 . 2009-10-15 08:32 3313664 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsBase\c049bc39cb33f7459936a689484285d6\WindowsB ase.ni.dll + 2009-10-15 08:42 . 2009-10-15 08:42 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIA utomationClients#\8df4d60a2f1f09276d2157524368aabe \UIAutomationClientsideProviders.ni.dll + 2009-10-15 08:32 . 2009-10-15 08:32 7868416 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem\52e1ea3c7491e05cda766d7b3ce3d559\System.ni.dll + 2009-10-15 08:34 . 2009-10-15 08:34 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Xml\7208ffa39630e9b923331f9df0947a12\System.Xm l.ni.dll + 2009-10-15 08:34 . 2009-10-15 08:34 1908224 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Workflow.Run#\5fccf501e0a7e6c0dd051f444bac6d31 \System.Workflow.Runtime.ni.dll + 2009-10-15 08:33 . 2009-10-15 08:33 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Workflow.Com#\95a52537b3ef8e7c8d3b47f201c68fb4 \System.Workflow.ComponentModel.ni.dll + 2009-10-15 08:33 . 2009-10-15 08:33 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Workflow.Act#\db0fe2c858ec9cf0a8df5f66dc610e6c \System.Workflow.Activities.ni.dll + 2009-10-15 08:37 . 2009-10-15 08:37 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web.Services\bc0741702f130a8a4ed9ad1f00bc4724\ System.Web.Services.ni.dll + 2009-10-15 08:42 . 2009-10-15 08:42 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web.Mobile\d3a67417d6de003dd40848a3b8c764fe\Sy stem.Web.Mobile.ni.dll + 2009-10-15 08:42 . 2009-10-15 08:42 2403328 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web.Extensio#\803369bae5ca6436abd2ea97372451c9 \System.Web.Extensions.ni.dll + 2009-10-15 08:41 . 2009-10-15 08:41 1917440 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Speech\d81d3df38eed50a2973fc164e0278557\System .Speech.ni.dll + 2009-10-15 08:39 . 2009-10-15 08:39 2338304 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Runtime.Seri#\a33b3b88fd575b703ba4212c677880ae \System.Runtime.Serialization.ni.dll + 2009-10-15 08:40 . 2009-10-15 08:40 1035264 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Printing\6a12f809f0fecaf05c247ca65fe28534\Syst em.Printing.ni.dll + 2009-10-15 08:39 . 2009-10-15 08:39 1056768 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.IdentityModel\da5d14f284f80e90232dcaeb1d4345cd \System.IdentityModel.ni.dll + 2009-10-15 08:33 . 2009-10-15 08:33 1587200 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Drawing\6312464f64727a2a50d5ce3fd73ad1bb\Syste m.Drawing.ni.dll + 2009-10-15 08:37 . 2009-10-15 08:37 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.DirectorySer#\5fc4472c6d790a947b569efb010a2e6e \System.DirectoryServices.ni.dll + 2009-10-15 08:37 . 2009-10-15 08:37 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Deployment\1255d7783a4c6ac254a55fde7b30019b\Sy stem.Deployment.ni.dll + 2009-10-15 08:33 . 2009-10-15 08:33 6616576 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Data\813556b5a2722045b0ea14467fd00227\System.D ata.ni.dll + 2009-10-15 08:36 . 2009-10-15 08:36 2510336 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Data.SqlXml\2ff971b28f38772a6c26530b07fc0d9a\S ystem.Data.SqlXml.ni.dll + 2009-10-15 08:38 . 2009-10-15 08:38 1115136 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Data.OracleC#\0b3cf1d59698660f4db04c31f7ed25a9 \System.Data.OracleClient.ni.dll + 2009-10-15 08:41 . 2009-10-15 08:41 9924096 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Data.Entity\cc8db37e86d9d6aaf5e7aa59469b18e7\S ystem.Data.Entity.ni.dll + 2009-10-15 08:40 . 2009-10-15 08:40 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Core\a0522cb280c09b3441e1889502ca145a\System.C ore.ni.dll + 2009-10-15 08:40 . 2009-10-15 08:40 2128896 c:\windows\assembly\NativeImages_v2.0.50727_32\Rea chFramework\fef71743f7b8b577e44586ee4bb656ce\Reach Framework.ni.dll + 2009-10-15 08:40 . 2009-10-15 08:40 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\Pre sentationUI\d8ab2c1fecccb8cf20b2e00ea06e931f\Prese ntationUI.ni.dll + 2009-10-15 08:40 . 2009-10-15 08:40 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\Pre sentationBuildTa#\0d77127b4f6a9e956adc2cd9e2ebcca5 \PresentationBuildTasks.ni.dll + 2009-10-15 08:39 . 2009-10-15 08:39 2538496 c:\windows\assembly\NativeImages_v2.0.50727_32\Nar rator\2c2b2ffb89640d8b65f44730107d3c65\Narrator.ni .exe + 2009-10-15 08:39 . 2009-10-15 08:39 1531392 c:\windows\assembly\NativeImages_v2.0.50727_32\MMC Ex\02e7e64d40d3383e0f64ecf84482009d\MMCEx.ni.dll + 2009-10-15 08:39 . 2009-10-15 08:39 5843456 c:\windows\assembly\NativeImages_v2.0.50727_32\MIG UIControls\1b58bdc91af93637c1da60e4e23b7035\MIGUIC ontrols.ni.dll + 2009-10-15 08:39 . 2009-10-15 08:39 1712128 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.VisualBas#\bce81bf63e63ec436b4bc274c08f842d \Microsoft.VisualBasic.ni.dll + 2009-10-15 08:39 . 2009-10-15 08:39 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Transacti#\c3a42a0308de750e55bbfdf31f3a1b89 \Microsoft.Transactions.Bridge.ni.dll + 2009-10-15 08:41 . 2009-10-15 08:41 2332160 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.JScript\1543943b86269c9bebd5cf7a3fe7f55b\Mi crosoft.JScript.ni.dll + 2009-10-15 08:39 . 2009-10-15 08:39 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Ink\35f3928bb219ae94129878c4775efb53\Micros oft.Ink.ni.dll + 2009-10-15 08:39 . 2009-10-15 08:39 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Build.Tas#\e9cb066b292d9bca46c9eaef942d804f \Microsoft.Build.Tasks.v3.5.ni.dll + 2009-10-15 08:39 . 2009-10-15 08:39 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Build.Tas#\cb093fe7c82d030ac539d21ca4331b37 \Microsoft.Build.Tasks.ni.dll + 2009-10-15 08:36 . 2009-10-15 08:36 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Build.Eng#\f1ac4b8e633a3904e4e932180cf600dc \Microsoft.Build.Engine.ni.dll - 2009-08-23 10:21 . 2009-08-23 10:21 4546560 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5 c561934e089\mscorlib.dll + 2009-10-15 08:04 . 2009-08-14 10:50 4546560 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5 c561934e089\mscorlib.dll - 2009-08-24 08:06 . 2009-08-24 08:06 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c5 61934e089\System.dll + 2009-10-15 08:03 . 2009-10-15 08:03 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c5 61934e089\System.dll + 2009-10-15 08:03 . 2009-10-15 08:03 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03 f5f7f11d50a3a\System.Web.dll - 2009-08-24 08:06 . 2009-08-24 08:06 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03 f5f7f11d50a3a\System.Web.dll + 2009-08-11 02:08 . 2009-08-11 02:08 11315712 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updat es\M953297\M953297Uninstall.msp + 2009-08-10 19:09 . 2009-08-10 19:09 17254912 c:\windows\Installer\9f5c1f2.msp + 2009-10-15 08:33 . 2009-10-15 08:33 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Windows.Forms\1941d7639299344ae28fb6b23da65247 \System.Windows.Forms.ni.dll + 2009-10-15 08:37 . 2009-10-15 08:37 11796992 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web\03858406f9a9514402888707e8b93abe\System.We b.ni.dll + 2009-10-15 08:39 . 2009-10-15 08:39 17317888 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.ServiceModel\1c98e10396c1e1dbf58b21d7a0ed0992\ System.ServiceModel.ni.dll + 2009-10-15 08:33 . 2009-10-15 08:33 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Design\fab8275d9f73a9f47e7abbaa7e871c23\System .Design.ni.dll + 2009-10-15 08:33 . 2009-10-15 08:33 14327808 c:\windows\assembly\NativeImages_v2.0.50727_32\Pre sentationFramewo#\29eb51a21ce62ed759b162307bd65e32 \PresentationFramework.ni.dll + 2009-10-15 08:32 . 2009-10-15 08:32 12216320 c:\windows\assembly\NativeImages_v2.0.50727_32\Pre sentationCore\dc8dccca85718096c895b74094e09e5a\Pre sentationCore.ni.dll + 2009-10-15 08:31 . 2009-10-15 08:31 11486720 c:\windows\assembly\NativeImages_v2.0.50727_32\msc orlib\17f572b09facdc5fda9431558eb7a26e\mscorlib.ni .dll + 2009-08-26 08:04 . 2009-10-15 08:04 150850831 c:\windows\winsxs\ManifestCache\6.0.6002.18005_001 c11ba_blobs.bin . -- Snapshot reset to current date -- . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run] "????r"="" [?] "?????????"="??????????????e" [?] "CTSyncU.exe"="c:\program files\Creative\Sync Manager Unicode\CTSyncU.exe" [2006-08-07 700416] "updateMgr"="c:\program files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [2004-11-22 307200] "SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-01-26 2144088] "SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2009-09-15 1998576] "WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2006-11-02 201728] "WindowsWelcomeCenter"="oobefldr.dll" - c:\windows\System32\oobefldr.dll [2006-11-02 2159104] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run] "Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2006-11-02 1004136] "Acer Empowering Technology Monitor"="c:\windows\system32\SysMonitor.exe" [2006-11-23 319488] "Acer Product Registration"="c:\program files\Acer Registration\ACE1.exe" [2006-12-13 3166208] "Acer Assist Launcher"="c:\program files\Acer Assist\launcher.exe" [2006-12-04 1261568] "eDataSecurity Loader"="c:\acer\Empowering Technology\eDataSecurity\eDSloader.exe" [2006-11-17 453120] "PCMService"="c:\acer\Empowering Technology\eMode\PCM\PCMService.exe" [2006-11-25 151552] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-06-20 13535776] "NvMediaCenter"="c:\windows\system32\NvMcTray. dll" [2008-06-20 92704] "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-09-24 149280] "Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2009-09-10 1312080] "Easy Dock"="c:\users\Tony\Documents\RCA easyRip\EZDock.exe" [2009-05-08 573440] "RtHDVCpl"="RtHDVCpl.exe" - c:\windows\RtHDVCpl.exe [2006-11-09 3784704] c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2004-12-14 29696] Empowering Technology Launcher.lnk - c:\acer\Empowering Technology\eAPLauncher.exe [2006-12-26 528384] [hkey_local_machine\software\microsoft\windows\curr entversion\explorer\ShellExecuteHooks] "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon] 2009-09-03 20:21 548352 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "aux"=wdmaud.drv [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\SymEFA.sys] @="FSFilter Activity Monitor" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\WinDefend] @="Service" [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall] "DisableMonitoring"=dword:00000001 R0 SymEFA;Symantec Extended File Attributes;c:\windows\System32\drivers\N360\030000 0.086\SymEFA.sys [8/29/2009 7:21 AM 310320] R1 BHDrvx86;Symantec Heuristics Driver;c:\windows\System32\drivers\N360\0300000.08 6\BHDrvx86.sys [8/29/2009 7:21 AM 258608] R1 ccHP;Symantec Hash Provider;c:\windows\System32\drivers\N360\0300000. 086\cchpx86.sys [8/29/2009 7:21 AM 482352] R1 IDSVix86;IDSVix86;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20091021. 001\IDSvix86.sys [10/22/2009 2:13 PM 342576] R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [9/15/2009 11:42 AM 9968] R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [9/15/2009 11:42 AM 74480] R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [9/2/2009 2:42 PM 102448] R3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [9/15/2009 11:42 AM 7408] R3 SYMNDISV;Symantec Network Filter Driver;c:\windows\System32\drivers\N360\0300000.08 6\symndisv.sys [8/29/2009 7:21 AM 39984] --- Other Services/Drivers In Memory --- *NewlyCreated* - MBR *Deregistered* - mbr [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] LocalServiceNoNetwork REG_MULTI_SZ PLA DPS BFE mpssvc . . ------- Supplementary Scan ------- . uStart Page = hxxp://en.us.acer.yahoo.com uLocal Page = \blank.htm uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7 mStart Page = hxxp://en.us.acer.yahoo.com uSearchURL,(Default) = hxxp://us.rd.yahoo.com/customize/ycomp/defaults/su/*Yahoo! . ************************************************** ************************ catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover Rootkit scan 2009-10-31 15:34 Windows 6.0.6000 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************** ************************ [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\N 360] "ImagePath"="\"c:\program files\Norton 360\Engine\3.0.0.134\ccSvcHst.exe\" /s \"N360\" /m \"c:\program files\Norton 360\Engine\3.0.0.134\diMaster.dll\" /prefetch:1" . --------------------- LOCKED REGISTRY KEYS --------------------- [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Cl ***\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 "MSCurrentCountry"=dword:000000b5 . Completion time: 2009-10-31 15:39 ComboFix-quarantined-files.txt 2009-10-31 20:39 ComboFix2.txt 2009-09-29 18:18 ComboFix3.txt 2009-09-11 18:24 ComboFix4.txt 2009-09-10 18:15 ComboFix5.txt 2009-10-31 20:18 Pre-Run: 49,053,708,288 bytes free Post-Run: 49,025,982,464 bytes free - - End Of File - - BA986FC059581ACD8FC68AB7CA96D344 |
|
|
|
|
|
#35 |
|
Tech Support Team
![]() Join Date: Sep 2008
Location: Caldwell, New Jersey
Posts: 10,112 PC Experience: Always Learning New Things
|
How are things running now?
__________________
Crush aka Chris [Prework][Afterwork][PCHF Rules][BSOD's][SFC][Screenshots][PC Specs][Donate] I am in fact, quite cool. My graphing calculator confirms this |
|
|
|
![]() |
| Bookmarks |
| Tags |
| adware, Pending:, popups |
Similar discussions...
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Popups. Need help please! | LifeIsABeach2191 | [Fixed] Hijackthis! Logs | 16 | 04-06-2009 11:58 AM |
| Pending: popups and more | pooky | [Pending] HJT Logs | 2 | 04-02-2009 11:52 PM |
| Fixed: ad popups- help | Marye | [Fixed] Hijackthis! Logs | 12 | 01-16-2009 01:17 AM |
| Fixed: Please Help. I can't get rid of popups. | bcrow79 | [Fixed] Hijackthis! Logs | 9 | 01-10-2009 09:57 PM |
| [Fixed] Please Help- Adware/ Popups | jcs626 | [Fixed] Hijackthis! Logs | 7 | 08-25-2007 03:48 PM |
«
Desktop Woes :(
|
Processes
»
| Thread Tools | |
| Display Modes | |
|
|





























Linear Mode

