|
|
|
hjt log and vundox fix
|
|
|
lmac222
Member
|
2. September 2008 @ 19:07 |
Link to this message
|
Logfile of HijackThis v1.99.1
Scan saved at 3:35:38 PM, on 9/2/2008
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Common Files\Portrait Displays\Shared\DTSRVC.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AIM\aim.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\HJT\HijackThis.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Portrait Displays Display Tune Service (DTSRVC) - Unknown owner - C:\Program Files\Common Files\Portrait Displays\Shared\DTSRVC.exe
O23 - Service: FileZilla Server FTP server (FileZilla Server) - Unknown owner - C:\Program Files\FileZilla Server\FileZilla Server.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
and upon running vundofix, it will not let me delete 20 or so .dll files upon rebooting.
thanks for the help everyone
|
|
Advertisement
|
|
|
|
Senior Member
|
5. September 2008 @ 11:35 |
Link to this message
|
Hi lmac22
So you have Vundo? And Vundofix will not work? Please give more details in your next post.
Now, please download Combofix.
With Combofix, at the download window, please rename it to Combo-fix(.exe) before downloading it.
Please disable all security programs, such as antiviruses, antispywares, and firewalls.
Also disable your internet connection.
? Run Combo-Fix.exe and follow the prompts.
**Understand that things like your system clock changing and your desktop disappearing might happen. Do not worry, because all will be restored later.
? Wait for the scan to be completed.
? If it requires a reboot, please do it.
? After the scan has completed entirely, please post the log here. The log will be located at C:\ComboFix(.txt)
Do not click on the Comobofix window, as it may cause it to stall.
Best Regards :D
Life is but a dream; you dont feel any pain unless you want to or you fall off the bed.
Success is relative; the more success the more relatives.
A computer once beat me at chess, but it was no match for me at kickboxing.
To be or not to be; thats a dumb question.
|
|
lmac222
Member
|
5. September 2008 @ 18:16 |
Link to this message
|
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Documents and Settings\All Users\Application Data\Rabio
C:\WINDOWS\BM77fe1e0a.txt
C:\WINDOWS\system32\MSINET.oca
.
((((((((((((((((((((((((( Files Created from 2008-08-05 to 2008-09-05 )))))))))))))))))))))))))))))))
.
2008-09-01 23:25 . 2008-09-01 23:25 <DIR> d-------- C:\Documents and Settings\Jo Ann\Application Data\MySpace
2008-09-01 23:24 . 2008-09-03 20:08 <DIR> d-------- C:\Program Files\MySpace
2008-09-01 11:07 . 2008-09-01 11:08 <DIR> d-------- C:\tsbm1-3
2008-08-31 19:28 . 1993-04-28 00:00 44,656 --a------ C:\WINDOWS\system\GRID.VBX
2008-08-29 19:48 . 2004-08-04 03:56 159,232 --a------ C:\WINDOWS\system32\ptpusd.dll
2008-08-29 19:48 . 2001-08-17 22:36 5,632 --a------ C:\WINDOWS\system32\ptpusb.dll
2008-08-29 15:41 . 2008-08-29 15:41 <DIR> d-------- C:\Program Files\BreakPoint Software
2008-08-28 11:50 . 2008-09-02 15:35 <DIR> d-------- C:\HJT
2008-08-27 07:45 . 2008-08-27 07:45 <DIR> d-------- C:\Program Files\ToniArts
2008-08-24 04:59 . 2008-08-24 05:59 <DIR> d-------- C:\WINDOWS\system32\CatRoot_bak
2008-08-23 20:23 . 2008-08-23 20:23 <DIR> d-------- C:\WINDOWS\system32\Adobe
2008-08-23 13:16 . 2006-09-13 01:09 1,110,528 --a------ C:\WINDOWS\system32\msxml3.dll
2008-08-23 13:08 . 2004-08-04 03:56 100,352 --a------ C:\WINDOWS\system32\6to4svc.dll
2008-08-23 12:55 . 2006-07-13 04:41 199,936 --a------ C:\WINDOWS\system32\drivers\rmcast.sys
2008-08-23 12:26 . 2006-03-16 20:49 25,600 --a------ C:\WINDOWS\system32\verclsid.exe
2008-08-23 12:15 . 2005-07-26 00:31 68,608 --a------ C:\WINDOWS\system32\olecli32.dll
2008-08-23 12:15 . 2005-07-26 00:31 35,328 --a------ C:\WINDOWS\system32\olecnv32.dll
2008-08-23 11:49 . 2005-01-10 21:20 118,272 --a------ C:\WINDOWS\system32\dllcache\dhtmled.ocx
2008-08-23 11:45 . 2005-04-22 01:20 51,712 --a--c--- C:\WINDOWS\system32\dllcache\agentdpv.dll
2008-08-23 11:25 . 2004-08-04 03:56 221,184 --a------ C:\WINDOWS\system32\wmpns.dll
2008-08-23 11:19 . 2008-08-23 11:19 <DIR> d-------- C:\WINDOWS\provisioning
2008-08-23 11:19 . 2008-09-03 20:49 <DIR> d-------- C:\WINDOWS\peernet
2008-08-23 10:52 . 2004-07-09 05:27 1,769,472 --a------ C:\WINDOWS\system32\dxdiagn.dll
2008-08-23 10:52 . 2004-07-09 05:27 1,703,936 --a------ C:\WINDOWS\system32\d3d9.dll
2008-08-23 10:52 . 2006-08-16 05:42 159,232 --a------ C:\WINDOWS\system32\xpob2res.dll
2008-08-23 10:52 . 2004-07-09 05:26 57,856 --a------ C:\WINDOWS\system32\mpeg2data.ax
2008-08-23 10:52 . 2002-08-29 08:00 32,512 --a------ C:\WINDOWS\system32\drivers\amdk7.sys
2008-08-23 10:52 . 2002-08-29 08:00 29,696 --a------ C:\WINDOWS\system32\asr_pfu.exe
2008-08-23 10:52 . 2002-12-12 01:14 18,944 --a------ C:\WINDOWS\system32\encapi.dll
2008-08-23 10:52 . 2002-08-29 08:00 10,752 --a------ C:\WINDOWS\system32\spiisupd.exe
2008-08-23 10:52 . 2002-08-29 08:00 3,584 --a------ C:\WINDOWS\system32\dsprpres.dll
2008-08-23 10:50 . 2002-08-29 08:00 1,135,616 --a------ C:\WINDOWS\system32\ntbackup.exe
2008-08-23 10:49 . 2002-08-29 08:00 4,186,256 --------- C:\WINDOWS\system32\dllcache\luna.mst
2008-08-23 10:48 . 2002-08-29 08:00 1,267,712 --------- C:\WINDOWS\system32\dllcache\cimwin32.dll
2008-08-23 10:47 . 2005-09-09 22:04 2,025,984 --------- C:\WINDOWS\system32\dllcache\cdosys.dll
2008-08-23 10:44 . 2002-08-29 08:00 2,049,999 --------- C:\WINDOWS\system32\dllcache\nt5.cat
2008-08-23 10:43 . 2008-08-27 09:38 <DIR> d-------- C:\WINDOWS\EHome
2008-08-20 07:38 . 2008-08-20 07:38 <DIR> d-------- C:\Program Files\PC Drivers HeadQuarters
2008-08-20 07:38 . 2008-08-20 07:38 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\PC Drivers HeadQuarters
2008-08-17 22:48 . 2008-08-17 22:49 <DIR> d-------- C:\Documents and Settings\Jo Ann\Application Data\MSN6
2008-08-12 08:38 . 2008-08-12 08:38 <DIR> d-------- C:\WINDOWS\Cache
2008-08-12 08:38 . 2008-08-12 08:38 <DIR> d-------- C:\Program Files\Coupons
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-09-03 00:21 --------- d-----w C:\Documents and Settings\Jo Ann\Application Data\FileZilla
2008-09-02 23:15 --------- d-----w C:\Program Files\FileZilla FTP Client
2008-08-29 23:09 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-08-28 12:00 --------- d-----w C:\Documents and Settings\Jo Ann\Application Data\AVG7
2008-08-27 13:15 --------- d-----w C:\Documents and Settings\Jo Ann\Application Data\LimeWire
2008-08-27 13:14 --------- d-----w C:\Documents and Settings\Jo Ann\Application Data\uTorrent
2008-08-22 17:21 --------- d-----w C:\Documents and Settings\Jo Ann\Application Data\Image Zone Express
2008-08-01 21:08 --------- d-----w C:\Program Files\LimeWire
2008-08-01 21:08 --------- d-----w C:\Program Files\GameHouse
2008-08-01 21:08 --------- d-----w C:\Program Files\AIM
2008-07-31 20:00 --------- d-----w C:\Program Files\MumboJumbo
2008-07-28 23:20 --------- d-----w C:\Program Files\SQLyog Enterprise Trial
2008-07-27 23:46 --------- d-----w C:\Program Files\middle_man
2008-07-27 13:15 --------- d-----w C:\Program Files\ActiveState Komodo Edit 4
2008-07-19 02:10 94,920 ----a-w C:\WINDOWS\system32\cdm.dll
2008-07-19 02:10 53,448 ----a-w C:\WINDOWS\system32\wuauclt.exe
2008-07-19 02:10 45,768 ----a-w C:\WINDOWS\system32\wups2.dll
2008-07-19 02:10 36,552 ----a-w C:\WINDOWS\system32\wups.dll
2008-07-19 02:09 563,912 ----a-w C:\WINDOWS\system32\wuapi.dll
2008-07-19 02:09 325,832 ----a-w C:\WINDOWS\system32\wucltui.dll
2008-07-19 02:09 205,000 ----a-w C:\WINDOWS\system32\wuweb.dll
2008-07-19 02:09 1,811,656 ------w C:\WINDOWS\system32\wuaueng.dll
2008-07-14 22:07 --------- d-----w C:\Program Files\Acoustica MP3 To Wave Converter PLUS
2008-06-22 02:21 73,216 ----a-w C:\WINDOWS\ST6UNST.EXE
2008-06-22 02:21 249,856 ------w C:\WINDOWS\Setup1.exe
2008-03-28 11:19 384 ----a-w C:\Documents and Settings\Jo Ann\Application Data\internaldb6334.dat
2007-11-03 14:00 47,360 ----a-w C:\Documents and Settings\Jo Ann\Application Data\pcouffin.sys
2007-10-25 14:34 2,491 ----a-w C:\Program Files\Microsoft Office FrontPage 2003.lnk
2008-03-05 21:16 27,976 ----a-w C:\Program Files\mozilla firefox\plugins\atgpcdec.dll
2008-03-05 21:16 125,848 ----a-w C:\Program Files\mozilla firefox\plugins\atgpcext.dll
2008-03-05 21:16 98,712 ----a-w C:\Program Files\mozilla firefox\plugins\ieatgpc.dll
.
((((((((((((((((((((((((((((( snapshot@2008-03-28_ 6.37.02.35 )))))))))))))))))))))))))))))))))))))))))
.
+ 2007-12-18 14:32:13 450,560 ----a-w C:\WINDOWS\$hf_mig$\KB944338-v2\SP2QFE\jscript.dll
+ 2007-12-18 14:32:13 417,792 ----a-w C:\WINDOWS\$hf_mig$\KB944338-v2\SP2QFE\vbscript.dll
+ 2007-03-06 01:22:36 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB944338-v2\spmsg.dll
+ 2007-03-06 01:22:41 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB944338-v2\spuninst.exe
+ 2007-03-06 01:22:34 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB944338-v2\update\spcustom.dll
+ 2007-03-06 01:22:59 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB944338-v2\update\update.exe
+ 2007-03-06 01:23:51 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB944338-v2\update\updspapi.dll
+ 2008-01-23 04:56:21 554,008 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\dao360.dll
+ 2007-12-10 12:41:11 518,944 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msexch40.dll
+ 2007-12-10 12:41:11 326,432 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msexcl40.dll
+ 2007-12-10 12:41:11 1,516,568 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjet40.dll
+ 2007-12-10 12:41:11 355,112 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjetol1.dll
+ 2008-03-27 07:39:13 151,583 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjint40.dll
+ 2007-12-10 12:41:12 60,192 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjter40.dll
+ 2007-12-10 12:41:12 248,608 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjtes40.dll
+ 2007-12-10 12:41:12 219,936 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msltus40.dll
+ 2007-12-10 12:41:12 355,104 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mspbde40.dll
+ 2007-12-10 12:41:13 432,928 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msrd2x40.dll
+ 2007-12-10 12:41:13 322,336 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msrd3x40.dll
+ 2007-12-10 12:41:13 559,904 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msrepl40.dll
+ 2007-12-10 12:41:13 264,992 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mstext40.dll
+ 2007-12-10 12:41:13 838,432 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mswdat10.dll
+ 2007-12-10 12:41:14 621,344 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mswstr10.dll
+ 2007-12-10 12:41:14 355,104 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msxbde40.dll
+ 2007-03-06 01:22:36 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB950749\spmsg.dll
+ 2007-03-06 01:22:41 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB950749\spuninst.exe
+ 2007-03-06 01:22:34 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB950749\update\spcustom.dll
+ 2007-03-06 01:22:59 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB950749\update\update.exe
+ 2007-03-06 01:23:51 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB950749\update\updspapi.dll
+ 2008-07-07 20:06:43 253,952 ----a-w C:\WINDOWS\$hf_mig$\KB950974\SP2QFE\es.dll
+ 2008-07-07 20:26:58 253,952 ----a-w C:\WINDOWS\$hf_mig$\KB950974\SP3GDR\es.dll
+ 2008-07-07 20:23:18 253,952 ----a-w C:\WINDOWS\$hf_mig$\KB950974\SP3QFE\es.dll
+ 2007-11-30 12:39:22 17,272 ----a-w C:\WINDOWS\$hf_mig$\KB950974\spmsg.dll
+ 2007-11-30 12:39:22 231,288 ----a-w C:\WINDOWS\$hf_mig$\KB950974\spuninst.exe
+ 2007-11-30 12:39:22 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB950974\update\spcustom.dll
+ 2007-11-30 12:39:18 755,576 ----a-w C:\WINDOWS\$hf_mig$\KB950974\update\update.exe
+ 2007-11-30 12:39:19 382,840 ----a-w C:\WINDOWS\$hf_mig$\KB950974\update\updspapi.dll
+ 2008-07-14 11:03:00 62,976 ----a-w C:\WINDOWS\$hf_mig$\KB951072-v2\SP2QFE\tzchange.exe
+ 2008-07-11 12:42:28 62,976 ----a-w C:\WINDOWS\$hf_mig$\KB951072-v2\SP3GDR\tzchange.exe
+ 2008-07-11 12:51:51 62,976 ----a-w C:\WINDOWS\$hf_mig$\KB951072-v2\SP3QFE\tzchange.exe
+ 2007-11-30 11:18:51 17,272 ----a-w C:\WINDOWS\$hf_mig$\KB951072-v2\spmsg.dll
+ 2007-11-30 11:18:51 231,288 ----a-w C:\WINDOWS\$hf_mig$\KB951072-v2\spuninst.exe
+ 2007-11-30 11:18:51 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB951072-v2\update\spcustom.dll
+ 2007-11-30 12:39:22 755,576 ----a-w C:\WINDOWS\$hf_mig$\KB951072-v2\update\update.exe
+ 2007-11-30 12:39:22 382,840 ----a-w C:\WINDOWS\$hf_mig$\KB951072-v2\update\updspapi.dll
+ 2008-05-07 04:55:40 1,288,192 ----a-w C:\WINDOWS\$hf_mig$\KB951698\SP2QFE\quartz.dll
+ 2008-05-07 05:12:40 1,288,192 ----a-w C:\WINDOWS\$hf_mig$\KB951698\SP3GDR\quartz.dll
+ 2008-05-07 05:04:15 1,288,192 ----a-w C:\WINDOWS\$hf_mig$\KB951698\SP3QFE\quartz.dll
+ 2007-11-30 11:18:51 17,272 ----a-w C:\WINDOWS\$hf_mig$\KB951698\spmsg.dll
+ 2007-11-30 11:18:51 231,288 ----a-w C:\WINDOWS\$hf_mig$\KB951698\spuninst.exe
+ 2007-11-30 11:18:51 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB951698\update\spcustom.dll
+ 2007-11-30 12:39:22 755,576 ----a-w C:\WINDOWS\$hf_mig$\KB951698\update\update.exe
+ 2007-11-30 12:39:22 382,840 ----a-w C:\WINDOWS\$hf_mig$\KB951698\update\updspapi.dll
+ 2006-08-16 12:08:32 100,352 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\6to4svc.dll
+ 2008-06-20 10:44:08 138,368 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\afd.sys
+ 2008-06-20 17:36:11 147,968 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\dnsapi.dll
+ 2008-06-20 17:36:11 245,248 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\mswsock.dll
+ 2008-06-20 10:44:42 360,960 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip.sys
+ 2008-06-20 09:32:39 225,920 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip6.sys
+ 2008-06-20 11:40:08 138,496 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\afd.sys
+ 2008-06-20 17:46:57 147,968 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\dnsapi.dll
+ 2008-06-20 17:46:57 245,248 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\mswsock.dll
+ 2008-06-20 11:51:12 361,600 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip.sys
+ 2008-06-20 11:08:27 225,856 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip6.sys
+ 2008-06-20 11:48:03 138,496 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\afd.sys
+ 2008-06-20 17:43:05 147,968 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\dnsapi.dll
+ 2008-06-20 17:43:05 245,248 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\mswsock.dll
+ 2008-06-20 11:59:02 361,600 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys
+ 2008-06-20 11:16:44 225,856 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip6.sys
+ 2007-11-30 12:39:22 17,272 ----a-w C:\WINDOWS\$hf_mig$\KB951748\spmsg.dll
+ 2007-11-30 12:39:22 231,288 ----a-w C:\WINDOWS\$hf_mig$\KB951748\spuninst.exe
+ 2007-11-30 12:39:22 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB951748\update\spcustom.dll
+ 2007-11-30 12:39:18 755,576 ----a-w C:\WINDOWS\$hf_mig$\KB951748\update\update.exe
+ 2007-11-30 12:39:19 382,840 ----a-w C:\WINDOWS\$hf_mig$\KB951748\update\updspapi.dll
+ 2008-06-24 16:28:00 74,240 ----a-w C:\WINDOWS\$hf_mig$\KB952954\SP2QFE\mscms.dll
+ 2008-06-24 16:43:16 74,240 ----a-w C:\WINDOWS\$hf_mig$\KB952954\SP3GDR\mscms.dll
+ 2008-06-24 16:53:10 74,240 ----a-w C:\WINDOWS\$hf_mig$\KB952954\SP3QFE\mscms.dll
+ 2007-11-30 12:39:22 17,272 ----a-w C:\WINDOWS\$hf_mig$\KB952954\spmsg.dll
+ 2007-11-30 12:39:22 231,288 ----a-w C:\WINDOWS\$hf_mig$\KB952954\spuninst.exe
+ 2007-11-30 12:39:22 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB952954\update\spcustom.dll
+ 2007-11-30 12:39:22 755,576 ----a-w C:\WINDOWS\$hf_mig$\KB952954\update\update.exe
+ 2007-11-30 12:39:22 382,840 ----a-w C:\WINDOWS\$hf_mig$\KB952954\update\updspapi.dll
+ 2008-06-23 16:11:40 1,024,000 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\browseui.dll
+ 2008-06-23 16:11:40 151,040 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\cdfview.dll
+ 2008-06-23 16:11:42 1,054,208 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\danim.dll
+ 2008-06-23 16:11:43 357,888 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\dxtmsft.dll
+ 2008-06-23 16:11:43 205,312 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\dxtrans.dll
+ 2008-06-23 16:11:43 55,808 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\extmgr.dll
+ 2008-06-23 09:53:58 18,432 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\iedw.exe
+ 2008-06-23 16:11:52 251,904 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\iepeers.dll
+ 2008-06-23 16:11:52 96,256 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\inseng.dll
+ 2008-06-23 16:11:52 16,384 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\jsproxy.dll
+ 2008-06-23 16:11:58 3,067,392 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\mshtml.dll
+ 2008-06-23 16:12:00 449,024 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\mshtmled.dll
+ 2008-06-23 16:12:02 146,432 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\msrating.dll
+ 2008-06-23 16:12:02 532,480 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\mstime.dll
+ 2008-06-23 16:12:02 39,424 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\pngfilt.dll
+ 2008-06-23 16:12:05 1,499,136 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\shdocvw.dll
+ 2008-06-23 16:12:05 474,112 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\shlwapi.dll
+ 2008-06-23 16:12:06 618,496 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\urlmon.dll
+ 2008-06-23 16:12:08 667,136 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\wininet.dll
+ 2008-07-03 09:14:02 351,744 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\xpsp3res.dll
+ 2008-06-23 15:09:27 3,067,392 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP3GDR\mshtml.dll
+ 2008-06-26 08:15:29 1,499,136 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP3GDR\shdocvw.dll
+ 2008-06-26 08:15:30 619,520 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP3GDR\urlmon.dll
+ 2008-06-23 15:09:27 666,112 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP3GDR\wininet.dll
+ 2008-06-25 04:24:48 3,067,904 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP3QFE\mshtml.dll
+ 2008-06-26 08:00:52 1,499,136 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP3QFE\shdocvw.dll
+ 2008-06-26 08:00:52 619,520 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP3QFE\urlmon.dll
+ 2008-06-23 14:54:47 666,624 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP3QFE\wininet.dll
+ 2007-11-30 12:39:22 17,272 ----a-w C:\WINDOWS\$hf_mig$\KB953838\spmsg.dll
+ 2007-11-30 12:39:22 231,288 ----a-w C:\WINDOWS\$hf_mig$\KB953838\spuninst.exe
+ 2007-11-30 12:39:22 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB953838\update\spcustom.dll
+ 2007-11-30 12:39:18 755,576 ----a-w C:\WINDOWS\$hf_mig$\KB953838\update\update.exe
+ 2007-11-30 12:39:19 382,840 ----a-w C:\WINDOWS\$hf_mig$\KB953838\update\updspapi.dll
+ 2003-11-13 18:28:02 12,570 ----a-w C:\WINDOWS\ADFUUD.SYS
+ 2008-08-20 11:40:14 225,280 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\DriversHQ.DriverDet#\065b2feb7fb75c4b90c6a178a957ab8a\DriversHQ.DriverDetective.Client.Communication.ni.dll
+ 2008-08-20 11:39:37 2,269,184 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\DriversHQ.DriverDet#\4697ad1c023a424599c5cccaee8365db\DriversHQ.DriverDetective.Client.ni.exe
+ 2008-08-20 11:40:39 58,880 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\DriversHQ.DriverDet#\58e93242655b6a47a99b2097cc303fb9\DriversHQ.DriverDetective.ExceptionLogging.ni.dll
+ 2008-08-20 11:40:38 196,608 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\DriversHQ.DriverDet#\fae2ce223d67e94d99ceaedd8a7e541a\DriversHQ.DriverDetective.Common.ni.dll
+ 2008-08-20 11:40:42 253,952 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Applicati#\8cdf54b0ef21dd4bbdaec35ca351245f\Microsoft.ApplicationBlocks.Updater.ni.dll
+ 2008-08-20 11:41:13 2,441,216 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\ecf0a37609b7c145bc90e4048bb45843\Microsoft.JScript.ni.dll
+ 2008-08-20 11:41:20 167,936 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Practices#\1391486812f1e14d87619c2eeffd29a8\Microsoft.Practices.EnterpriseLibrary.Security.Cryptography.ni.dll
+ 2008-08-20 11:40:45 368,640 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Practices#\2c0c237bea08884e845145bfe4184e44\Microsoft.Practices.EnterpriseLibrary.Common.ni.dll
+ 2008-08-20 11:41:18 356,352 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Practices#\a7c5b6d07e34414da0c0ee1e6ceabd29\Microsoft.Practices.ObjectBuilder.ni.dll
+ 2008-08-20 11:40:15 17,920 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\fc8d4ae4bf8c2d4ab3b72d32802cc12d\Microsoft.VisualC.ni.dll
+ 2008-08-20 11:41:15 77,824 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\410d5e2c16688845a648056b9e015769\Microsoft.Vsa.ni.dll
+ 2008-08-20 11:40:11 167,936 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\c96c537d2a587a469397c1db6df383ae\System.Configuration.Install.ni.dll
+ 2008-08-20 11:40:33 1,179,648 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\3886dc67c9b47a4c980f2e7323d2869e\System.Data.OracleClient.ni.dll
+ 2008-08-20 11:40:06 2,703,360 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\8b25569f439b0745b1932c49ce31ed98\System.Data.SqlXml.ni.dll
+ 2008-08-20 11:40:55 1,060,864 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Management\e0f490eb41d7c749a2ad211350e9ec48\System.Management.ni.dll
+ 2008-08-20 11:40:23 815,104 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\96fe22d9d2781f4eaf6e757bbd21145c\System.Runtime.Remoting.ni.dll
+ 2008-08-20 11:40:09 339,968 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\c879831fa9d7984b8bfaaaaca7566aee\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2008-08-20 11:40:35 233,472 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\df88a5d34d704943ae0e408333ba4174\System.ServiceProcess.ni.dll
+ 2008-08-20 11:41:22 139,264 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\XPBurnComponent\b457d28448afae4ab0e7074c7b457080\XPBurnComponent.ni.dll
+ 2008-06-13 13:10:50 272,128 ------w C:\WINDOWS\Driver Cache\i386\bthport.sys
- 2000-08-31 13:00:00 163,328 ----a-w C:\WINDOWS\erdnt\Hiv-backup\ERDNT.EXE
+ 2005-10-21 00:02:28 163,328 ----a-w C:\WINDOWS\erdnt\Hiv-backup\ERDNT.EXE
- 2000-08-31 13:00:00 163,328 ----a-w C:\WINDOWS\erdnt\subs\ERDNT.EXE
+ 2005-10-21 00:02:28 163,328 ----a-w C:\WINDOWS\erdnt\subs\ERDNT.EXE
+ 2000-08-31 12:00:00 89,504 ----a-w C:\WINDOWS\fdsv.exe
+ 2000-08-31 12:00:00 80,412 ----a-w C:\WINDOWS\grep.exe
+ 2008-08-29 19:41:54 10,134 ----a-r C:\WINDOWS\Installer\{04DC9993-648E-4523-B2A4-75E05E12FB10}\SystemFolder_msiexec.exe
+ 2008-06-06 01:53:10 65,536 ----a-r C:\WINDOWS\Installer\{236BB7C4-4419-42FD-0409-1E257A25E34D}\NewShortcut1_236BB7C4441942FD04091E257A25E34D.exe
+ 2008-06-04 02:03:42 7,406 ----a-r C:\WINDOWS\Installer\{5BBFB0E4-2250-49C3-A8A3-65BE2197D13B}\_bb32ea6.exe
+ 2008-08-20 11:38:51 26,694 ----a-r C:\WINDOWS\Installer\{621C02EA-AAFF-4026-A903-165D59529A16}\ARPPRODUCTICON.exe
+ 2008-08-20 11:38:51 69,632 ----a-r C:\WINDOWS\Installer\{621C02EA-AAFF-4026-A903-165D59529A16}\DriversHQ.DriverDe_212B77217E284373BD0AA155B0932A89.exe
+ 2008-08-20 11:38:51 69,632 ----a-r C:\WINDOWS\Installer\{621C02EA-AAFF-4026-A903-165D59529A16}\DriversHQ.DriverDe_212B77217E284373BD0AA155B0932A89_1.exe
- 2007-10-25 12:54:51 12,288 ----a-r C:\WINDOWS\Installer\{90170409-6000-11D3-8CFE-0150048383C9}\cagicon.exe
+ 2008-08-31 20:19:00 12,288 ----a-r C:\WINDOWS\Installer\{90170409-6000-11D3-8CFE-0150048383C9}\cagicon.exe
- 2007-10-25 12:54:51 282,624 ----a-r C:\WINDOWS\Installer\{90170409-6000-11D3-8CFE-0150048383C9}\fpicon.exe
+ 2008-08-31 20:19:01 282,624 ----a-r C:\WINDOWS\Installer\{90170409-6000-11D3-8CFE-0150048383C9}\fpicon.exe
- 2007-10-25 12:54:51 135,168 ----a-r C:\WINDOWS\Installer\{90170409-6000-11D3-8CFE-0150048383C9}\misc.exe
+ 2008-08-31 20:19:01 135,168 ----a-r C:\WINDOWS\Installer\{90170409-6000-11D3-8CFE-0150048383C9}\misc.exe
- 2007-10-25 12:54:51 27,136 ----a-r C:\WINDOWS\Installer\{90170409-6000-11D3-8CFE-0150048383C9}\oisicon.exe
+ 2008-08-31 20:19:01 27,136 ----a-r C:\WINDOWS\Installer\{90170409-6000-11D3-8CFE-0150048383C9}\oisicon.exe
- 2007-10-25 12:54:51 4,096 ----a-r C:\WINDOWS\Installer\{90170409-6000-11D3-8CFE-0150048383C9}\opwicon.exe
+ 2008-08-31 20:19:02 4,096 ----a-r C:\WINDOWS\Installer\{90170409-6000-11D3-8CFE-0150048383C9}\opwicon.exe
+ 2008-06-06 02:03:05 65,536 ----a-r C:\WINDOWS\Installer\{B74D4E10-1033-0000-0000-000000000001}\AdobeBridge_B74D4E10103300000000000000000001_1.exe
+ 2008-06-06 02:03:05 65,536 ----a-r C:\WINDOWS\Installer\{B74D4E10-1033-0000-0000-000000000001}\BridgeCommonShortcut_B74D4E101033000000000001_1.exe
+ 2008-06-06 02:03:05 1,904,640 ----a-r C:\WINDOWS\Installer\{B74D4E10-1033-0000-0000-000000000001}\ESLaunchShortcut_B74D4E10103300000000000000000001.exe
+ 2008-06-06 02:03:05 61,440 ----a-r C:\WINDOWS\Installer\{B74D4E10-1033-0000-0000-000000000001}\NewShortcut2_B74D4E10103300000000000000000001.exe
+ 2008-06-06 02:07:33 65,536 ----a-r C:\WINDOWS\Installer\{E9787678-1033-0000-8E67-000000000001}\AppLanuchShortcut_E9787678103300008E67000000000001_1.exe
+ 2008-06-06 02:07:33 65,536 ----a-r C:\WINDOWS\Installer\{E9787678-1033-0000-8E67-000000000001}\ProgramMenuShortcut_E9787678103300008E670000000001_1.exe
+ 2007-11-19 00:04:34 2,678 ----a-w C:\WINDOWS\java\Packages\Data\028m31z5.dat
+ 2007-11-19 00:04:33 2,678 ----a-w C:\WINDOWS\java\Packages\Data\cgmamzxb.dat
+ 2007-11-19 00:04:42 2,678 ----a-w C:\WINDOWS\java\Packages\Data\db73nhnx.dat
+ 2007-11-19 00:04:33 2,678 ----a-w C:\WINDOWS\java\Packages\Data\qwss0hbn.dat
+ 2007-11-19 00:04:33 2,678 ----a-w C:\WINDOWS\java\Packages\Data\upvxb9vp.dat
+ 2008-08-24 00:30:58 1,526 ----a-w C:\WINDOWS\mozver.dat
- 2000-08-31 13:00:00 28,160 ----a-w C:\WINDOWS\Nircmd.exe
+ 2000-08-31 12:00:00 28,672 ----a-w C:\WINDOWS\Nircmd.exe
- 2007-10-25 11:16:46 8,738 ----a-w C:\WINDOWS\PCHealth\HelpCtr\Config\Cntstore.bin
+ 2008-08-23 15:26:20 8,972 ----a-w C:\WINDOWS\PCHealth\HelpCtr\Config\Cntstore.bin
- 2007-10-25 11:16:39 80,007 ----a-w C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\index.dat
+ 2008-09-04 00:39:50 80,007 ----a-w C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\index.dat
+ 2008-09-04 00:39:50 2,706 ----a-w C:\WINDOWS\PCHealth\HelpCtr\PackageStore\SkuStore.bin
+ 2002-08-29 12:00:00 179,712 ----a-w C:\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}$BACKUP$\System\cewmdm.dll
+ 2002-08-29 12:00:00 175,104 ----a-w C:\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}$BACKUP$\System\MsPMSP.dll
+ 2002-08-29 12:00:00 245,760 ----a-w C:\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}$BACKUP$\System\MSSCP.dll
+ 2002-08-29 12:00:00 155,648 ----a-w C:\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}$BACKUP$\System\MSWMDM.dll
+ 2002-08-29 12:00:00 22,528 ----a-w C:\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}$BACKUP$\System\WMDMLOG.dll
+ 2002-08-29 12:00:00 20,480 ----a-w C:\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}$BACKUP$\System\WMDMPS.dll
+ 2004-08-11 05:45:04 161,792 ----a-w C:\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}\cewmdm.dll
+ 2004-08-11 05:45:04 25,088 ----a-w C:\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}\MsPMSNSv.dll
+ 2004-08-11 05:45:04 169,472 ----a-w C:\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}\MsPMSP.dll
+ 2004-08-11 05:45:04 360,176 ----a-w C:\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}\MSSCP.dll
+ 2004-08-11 05:45:04 311,296 ----a-w C:\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}\MSWMDM.dll
+ 2004-08-11 05:45:04 30,208 ----a-w C:\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}\WMDMLOG.dll
+ 2004-08-11 05:45:04 34,304 ----a-w C:\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}\WMDMPS.dll
+ 2004-08-11 05:45:04 47,104 ----a-w C:\WINDOWS\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\uwdf.exe
+ 2004-08-11 05:45:04 15,872 ----a-w C:\WINDOWS\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\wdfapi.dll
+ 2004-08-11 05:45:04 38,912 ----a-w C:\WINDOWS\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\wdfmgr.exe
+ 2004-08-11 05:45:06 38,912 ----a-w C:\WINDOWS\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\wpd_ci.dll
+ 2004-08-11 05:45:06 61,952 ----a-w C:\WINDOWS\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\wpdconns.dll
+ 2004-08-11 05:45:06 114,176 ----a-w C:\WINDOWS\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\wpdmtp.dll
+ 2004-08-11 05:45:06 331,776 ----a-w C:\WINDOWS\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\wpdmtpdr.dll
+ 2004-08-11 05:45:06 66,560 ----a-w C:\WINDOWS\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\wpdmtpus.dll
+ 2004-08-11 05:45:06 327,680 ----a-w C:\WINDOWS\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\wpdsp.dll
+ 2004-08-11 05:45:06 10,752 ----a-w C:\WINDOWS\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\wpdtrace.dll
+ 2004-08-11 05:45:06 18,944 ----a-w C:\WINDOWS\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\wpdusb.sys
+ 2002-08-29 12:00:00 184,320 ----a-w C:\WINDOWS\RegisteredPackages\{A47B3654-48EE-48A5-B629-97D70175E58F}$BACKUP$\System\wmadmod.dll
+ 2002-08-29 12:00:00 110,592 ----a-w C:\WINDOWS\RegisteredPackages\{A47B3654-48EE-48A5-B629-97D70175E58F}$BACKUP$\System\wmsdmod.dll
+ 2002-08-29 12:00:00 294,912 ----a-w C:\WINDOWS\RegisteredPackages\{A47B3654-48EE-48A5-B629-97D70175E58F}$BACKUP$\System\wmvdmod.dll
+ 2004-08-11 05:45:04 380,144 ----a-w C:\WINDOWS\RegisteredPackages\{A47B3654-48EE-48A5-B629-97D70175E58F}\wmadmod.dll
+ 2004-08-11 05:45:04 773,368 ----a-w C:\WINDOWS\RegisteredPackages\{A47B3654-48EE-48A5-B629-97D70175E58F}\wmsdmod.dll
+ 2004-08-11 05:45:06 531,192 ----a-w C:\WINDOWS\RegisteredPackages\{A47B3654-48EE-48A5-B629-97D70175E58F}\wmspdmod.dll
+ 2004-08-11 05:45:06 1,181,944 ----a-w C:\WINDOWS\RegisteredPackages\{A47B3654-48EE-48A5-B629-97D70175E58F}\wmvadvd.dll
+ 2004-08-11 05:45:06 871,160 ----a-w C:\WINDOWS\RegisteredPackages\{A47B3654-48EE-48A5-B629-97D70175E58F}\wmvdmod.dll
+ 2002-08-29 12:00:00 6,656 ----a-w C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}$BACKUP$\System\laprxy.dll
+ 2002-08-29 12:00:00 24,576 ----a-w C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}$BACKUP$\System\logagent.exe
+ 2002-12-12 05:14:32 173,056 ----a-w C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}$BACKUP$\System\qasf.dll
+ 2002-08-29 12:00:00 442,398 ----a-w C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}$BACKUP$\System\wmadmoe.dll
+ 2002-08-29 12:00:00 274,432 ----a-w C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}$BACKUP$\System\wmasf.dll
+ 2002-08-29 12:00:00 253,952 ----a-w C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}$BACKUP$\System\wmnetmgr.dll
+ 2002-08-29 12:00:00 1,220,608 ----a-w C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}$BACKUP$\System\wmvcore.dll
+ 2004-08-11 05:45:04 6,656 ----a-w C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\laprxy.dll
+ 2004-08-11 05:45:04 96,768 ----a-w C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\logagent.exe
+ 2004-08-11 05:45:04 221,184 ----a-w C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\qasf.dll
+ 2004-08-11 05:45:04 712,704 ----a-w C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\wmadmoe.dll
+ 2004-08-11 05:45:04 229,376 ----a-w C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\wmasf.dll
+ 2004-08-11 05:45:04 344,064 ----a-w C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\WMDRMdev.dll
+ 2004-08-11 05:45:04 290,816 ----a-w C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\WMDRMNet.dll
+ 2004-08-11 05:45:04 150,016 ----a-w C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\wmidx.dll
+ 2004-08-11 05:45:04 1,027,072 ----a-w C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\wmnetmgr.dll
+ 2004-08-11 05:45:04 1,116,160 ----a-w C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\wmsdmoe2.dll
+ 2004-08-11 05:45:06 936,960 ----a-w C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\wmspdmoe.dll
+ 2004-08-11 05:45:06 1,509,376 ----a-w C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\WMVADVE.DLL
+ 2004-08-11 05:45:06 2,362,104 ----a-w C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\wmvcore.dll
+ 2004-08-11 05:45:06 999,424 ----a-w C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\wmvdmoe2.dll
+ 2002-08-29 12:00:00 204,800 ----a-w C:\WINDOWS\RegisteredPackages\{C5B8FBE9-645E-4484-A7AA-E8DA9A70DD77}$BACKUP$\System\blackbox.dll
+ 2002-08-29 12:00:00 266,240 ----a-w C:\WINDOWS\RegisteredPackages\{C5B8FBE9-645E-4484-A7AA-E8DA9A70DD77}$BACKUP$\System\drmclien.dll
+ 2002-08-29 12:00:00 76,830 ----a-w C:\WINDOWS\RegisteredPackages\{C5B8FBE9-645E-4484-A7AA-E8DA9A70DD77}$BACKUP$\System\drmstor.dll
+ 2002-08-29 12:00:00 602,112 ----a-w C:\WINDOWS\RegisteredPackages\{C5B8FBE9-645E-4484-A7AA-E8DA9A70DD77}$BACKUP$\System\drmv2clt.dll
+ 2002-08-29 12:00:00 174,592 ----a-w C:\WINDOWS\RegisteredPackages\{C5B8FBE9-645E-4484-A7AA-E8DA9A70DD77}$BACKUP$\System\msnetobj.dll
+ 2004-08-11 05:45:04 233,472 ----a-w C:\WINDOWS\RegisteredPackages\{C5B8FBE9-645E-4484-A7AA-E8DA9A70DD77}\blackbox.dll
+ 2004-08-11 05:45:04 253,688 ----a-w C:\WINDOWS\RegisteredPackages\{C5B8FBE9-645E-4484-A7AA-E8DA9A70DD77}\drmclien.dll
+ 2004-08-11 05:45:04 95,232 ----a-w C:\WINDOWS\RegisteredPackages\{C5B8FBE9-645E-4484-A7AA-E8DA9A70DD77}\drmstor.dll
+ 2004-08-11 05:45:04 527,360 ----a-w C:\WINDOWS\RegisteredPackages\{C5B8FBE9-645E-4484-A7AA-E8DA9A70DD77}\drmv2clt.dll
+ 2004-08-11 05:45:04 141,312 ----a-w C:\WINDOWS\RegisteredPackages\{C5B8FBE9-645E-4484-A7AA-E8DA9A70DD77}\msnetobj.dll
+ 2000-08-31 12:00:00 98,816 ----a-w C:\WINDOWS\sed.exe
+ 2000-08-31 12:00:00 161,792 ----a-w C:\WINDOWS\swreg.exe
+ 2000-08-31 12:00:00 136,704 ----a-w C:\WINDOWS\swsc.exe
+ 2000-08-31 12:00:00 212,480 ----a-w C:\WINDOWS\swxcacls.exe
+ 2002-08-29 12:00:00 2,000 ----a-w C:\WINDOWS\system\KEYBOARD.DRV
+ 2002-08-29 12:00:00 2,032 ----a-w C:\WINDOWS\system\MOUSE.DRV
+ 2002-08-29 12:00:00 1,744 ----a-w C:\WINDOWS\system\SOUND.DRV
+ 2002-08-29 12:00:00 2,176 ----a-w C:\WINDOWS\system\VGA.DRV
+ 2008-08-06 20:22:02 114,688 ----a-w C:\WINDOWS\system32\Adobe\Director\np32dsw.dll
+ 2008-08-06 20:30:48 202,168 ----a-w C:\WINDOWS\system32\Adobe\Director\SwDir.dll
+ 2008-08-06 20:22:42 499,712 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\Control.dll
+ 2008-08-06 20:22:44 9,216 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\DynaPlayer.dll
+ 2008-08-06 19:42:04 892,928 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\iml32.dll
+ 2008-08-06 20:21:14 266,240 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\Plugin.dll
+ 2008-08-06 20:24:14 446,464 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\Proj.dll
+ 2008-08-06 20:30:30 447,928 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\SwHelper_1100465.exe
+ 2008-08-06 20:24:56 114,688 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\SwInit.exe
+ 2008-08-06 20:21:04 94,208 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\SwMenu.dll
+ 1999-06-25 14:55:30 149,504 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\UNWISE.EXE
- 2002-08-29 12:00:00 204,800 ----a-w C:\WINDOWS\system32\blackbox.dll
+ 2004-08-11 05:45:04 233,472 ----a-w C:\WINDOWS\system32\blackbox.dll
- 2002-08-29 12:00:00 179,712 ----a-w C:\WINDOWS\system32\cewmdm.dll
+ 2004-08-11 05:45:04 161,792 ----a-w C:\WINDOWS\system32\cewmdm.dll
- 2008-03-27 18:57:14 16,384 ----a-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat
+ 2008-08-23 17:36:04 16,384 ----a-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat
- 2008-03-27 18:57:14 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
+ 2008-08-23 17:36:04 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
+ 2008-08-23 17:36:02 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\MSHist012008082320080824\index.dat
- 2005-10-21 01:08:44 986,112 ----a-w C:\WINDOWS\system32\DANIM.DLL
+ 2008-06-23 15:38:30 1,054,208 ----a-w C:\WINDOWS\system32\danim.dll
+ 2002-08-29 12:00:00 1,740 ----a-w C:\WINDOWS\system32\dcache.bin
- 2002-08-29 12:00:00 204,800 -c--a-w C:\WINDOWS\system32\dllcache\blackbox.dll
+ 2004-08-11 05:45:04 233,472 -c--a-w C:\WINDOWS\system32\dllcache\blackbox.dll
- 2007-07-31 00:19:20 92,504 -c--a-w C:\WINDOWS\system32\dllcache\cdm.dll
+ 2008-07-19 02:10:48 94,920 -c--a-w C:\WINDOWS\system32\dllcache\cdm.dll
- 2002-08-29 12:00:00 179,712 -c--a-w C:\WINDOWS\system32\dllcache\cewmdm.dll
+ 2004-08-11 05:45:04 161,792 -c--a-w C:\WINDOWS\system32\dllcache\cewmdm.dll
- 2002-08-29 12:00:00 266,240 -c--a-w C:\WINDOWS\system32\dllcache\drmclien.dll
+ 2004-08-11 05:45:04 253,688 -c--a-w C:\WINDOWS\system32\dllcache\drmclien.dll
- 2002-08-29 12:00:00 76,830 -c--a-w C:\WINDOWS\system32\dllcache\drmstor.dll
+ 2004-08-11 05:45:04 95,232 -c--a-w C:\WINDOWS\system32\dllcache\drmstor.dll
- 2002-08-29 12:00:00 602,112 -c--a-w C:\WINDOWS\system32\dllcache\drmv2clt.dll
+ 2004-08-11 05:45:04 527,360 -c--a-w C:\WINDOWS\system32\dllcache\drmv2clt.dll
+ 2002-08-29 07:40:56 20,480 ------w C:\WINDOWS\system32\dllcache\hidserv.dll
+ 2001-08-17 17:48:04 13,952 ------w C:\WINDOWS\system32\dllcache\kbdhid.sys
+ 2002-08-29 12:00:00 2,000 -c--a-w C:\WINDOWS\system32\dllcache\keyboard.drv
- 2002-08-29 12:00:00 6,656 -c--a-w C:\WINDOWS\system32\dllcache\laprxy.dll
+ 2004-08-11 05:45:04 6,656 -c--a-w C:\WINDOWS\system32\dllcache\laprxy.dll
- 2002-08-29 12:00:00 24,576 -c--a-w C:\WINDOWS\system32\dllcache\logagent.exe
+ 2004-08-11 05:45:04 96,768 -c--a-w C:\WINDOWS\system32\dllcache\logagent.exe
+ 2002-08-29 12:00:00 2,560 -c--a-w C:\WINDOWS\system32\dllcache\lz32.dll
+ 2001-08-17 17:48:00 12,160 -c--a-w C:\WINDOWS\system32\dllcache\mouhid.sys
+ 2002-08-29 12:00:00 2,032 -c--a-w C:\WINDOWS\system32\dllcache\mouse.drv
- 2005-05-04 19:45:32 2,890,240 -c--a-w C:\WINDOWS\system32\dllcache\msi.dll
+ 2004-10-26 13:24:44 2,797,056 ----a-w C:\WINDOWS\system32\dllcache\msi.dll
- 2005-05-04 19:45:36 78,848 -c--a-w C:\WINDOWS\system32\dllcache\msiexec.exe
+ 2004-10-26 13:25:08 77,312 ----a-w C:\WINDOWS\system32\dllcache\msiexec.exe
- 2005-05-04 19:45:36 271,360 -c--a-w C:\WINDOWS\system32\dllcache\msihnd.dll
+ 2004-10-26 13:24:44 331,264 ----a-w C:\WINDOWS\system32\dllcache\msihnd.dll
- 2005-05-04 19:45:36 884,736 -c--a-w C:\WINDOWS\system32\dllcache\msimsg.dll
+ 2004-10-26 13:16:12 884,736 ----a-w C:\WINDOWS\system32\dllcache\msimsg.dll
- 2005-05-04 19:45:36 15,360 -c--a-w C:\WINDOWS\system32\dllcache\msisip.dll
+ 2004-10-26 13:25:08 44,032 ----a-w C:\WINDOWS\system32\dllcache\msisip.dll
- 2002-08-29 12:00:00 174,592 -c--a-w C:\WINDOWS\system32\dllcache\msnetobj.dll
+ 2004-08-11 05:45:04 141,312 -c--a-w C:\WINDOWS\system32\dllcache\msnetobj.dll
- 2002-08-29 12:00:00 175,104 -c--a-w C:\WINDOWS\system32\dllcache\mspmsp.dll
+ 2004-08-11 05:45:04 169,472 -c--a-w C:\WINDOWS\system32\dllcache\mspmsp.dll
- 2002-08-29 12:00:00 245,760 -c--a-w C:\WINDOWS\system32\dllcache\msscp.dll
+ 2004-08-11 05:45:04 360,176 -c--a-w C:\WINDOWS\system32\dllcache\msscp.dll
- 2002-08-29 12:00:00 155,648 -c--a-w C:\WINDOWS\system32\dllcache\mswmdm.dll
+ 2004-08-11 05:45:04 311,296 -c--a-w C:\WINDOWS\system32\dllcache\mswmdm.dll
+ 2002-08-29 12:00:00 2,944 -c--a-w C:\WINDOWS\system32\dllcache\null.sys
- 2002-12-12 05:14:32 173,056 -c--a-w C:\WINDOWS\system32\dllcache\qasf.dll
+ 2004-08-11 05:45:04 221,184 -c--a-w C:\WINDOWS\system32\dllcache\qasf.dll
- 2003-05-30 14:00:02 1,962,496 -c--a-w C:\WINDOWS\system32\dllcache\quartz.dll
+ 2005-08-30 14:14:00 1,227,776 ------w C:\WINDOWS\system32\dllcache\quartz.dll
- 2005-08-31 23:49:30 409,088 -c--a-w C:\WINDOWS\system32\dllcache\SHLWAPI.DLL
+ 2005-09-01 01:49:30 409,088 ------w C:\WINDOWS\system32\dllcache\shlwapi.dll
+ 2002-08-29 12:00:00 1,744 -c--a-w C:\WINDOWS\system32\dllcache\sound.drv
+ 2002-08-29 12:00:00 2,176 -c--a-w C:\WINDOWS\system32\dllcache\vga.drv
+ 2007-04-10 18:00:46 236,928 -c----w C:\WINDOWS\system32\dllcache\WgaLogon.dll
+ 2007-04-10 18:01:18 336,768 -c----w C:\WINDOWS\system32\dllcache\WgaTray.exe
+ 2002-08-29 12:00:00 2,864 -c--a-w C:\WINDOWS\system32\dllcache\winsock.dll
+ 2002-08-29 12:00:00 2,112 -c--a-w C:\WINDOWS\system32\dllcache\winspool.exe
- 2002-08-29 12:00:00 184,320 -c--a-w C:\WINDOWS\system32\dllcache\wmadmod.dll
+ 2004-08-11 05:45:04 380,144 -c--a-w C:\WINDOWS\system32\dllcache\wmadmod.dll
- 2002-08-29 12:00:00 442,398 -c--a-w C:\WINDOWS\system32\dllcache\wmadmoe.dll
+ 2004-08-11 05:45:04 712,704 -c--a-w C:\WINDOWS\system32\dllcache\wmadmoe.dll
- 2002-08-29 12:00:00 274,432 -c--a-w C:\WINDOWS\system32\dllcache\wmasf.dll
+ 2007-10-27 21:40:06 227,328 -c--a-w C:\WINDOWS\system32\dllcache\wmasf.dll
- 2002-08-29 12:00:00 22,528 -c--a-w C:\WINDOWS\system32\dllcache\wmdmlog.dll
+ 2004-08-11 05:45:04 30,208 -c--a-w C:\WINDOWS\system32\dllcache\wmdmlog.dll
- 2002-08-29 12:00:00 20,480 -c--a-w C:\WINDOWS\system32\dllcache\wmdmps.dll
+ 2004-08-11 05:45:04 34,304 -c--a-w C:\WINDOWS\system32\dllcache\wmdmps.dll
- 2002-08-29 12:00:00 253,952 -c--a-w C:\WINDOWS\system32\dllcache\wmnetmgr.dll
+ 2004-08-11 05:45:04 1,027,072 -c--a-w C:\WINDOWS\system32\dllcache\wmnetmgr.dll
- 2002-08-29 12:00:00 110,592 -c--a-w C:\WINDOWS\system32\dllcache\wmsdmod.dll
+ 2004-08-11 05:45:04 773,368 -c--a-w C:\WINDOWS\system32\dllcache\wmsdmod.dll
- 2002-08-29 12:00:00 294,912 -c--a-w C:\WINDOWS\system32\dllcache\wmvdmod.dll
+ 2004-08-11 05:45:06 871,160 -c--a-w C:\WINDOWS\system32\dllcache\wmvdmod.dll
+ 2002-08-29 12:00:00 2,736 -c--a-w C:\WINDOWS\system32\dllcache\wowdeb.exe
- 2007-07-31 00:19:16 53,080 -c--a-w C:\WINDOWS\system32\dllcache\wuauclt.exe
+ 2008-07-19 02:10:42 53,448 -c--a-w C:\WINDOWS\system32\dllcache\wuauclt.exe
+ 2003-11-13 18:28:02 12,570 ----a-w C:\WINDOWS\system32\drivers\AdfuUd.sys
+ 2006-08-29 02:48:26 2,432 ----a-w C:\WINDOWS\system32\drivers\cdr4_xp.sys
+ 2006-08-29 02:48:26 2,560 ----a-w C:\WINDOWS\system32\drivers\cdralw2k.sys
+ 2008-02-18 20:21:08 11,304 ----a-w C:\WINDOWS\system32\drivers\imagedrv.sys
+ 2008-02-18 20:21:08 132,904 ----a-w C:\WINDOWS\system32\drivers\imagesrv.sys
+ 2001-08-17 17:48:04 13,952 ----a-w C:\WINDOWS\system32\drivers\kbdhid.sys
+ 2001-08-17 17:48:00 12,160 ----a-w C:\WINDOWS\system32\drivers\mouhid.sys
+ 2002-08-29 12:00:00 2,944 ----a-w C:\WINDOWS\system32\drivers\null.sys
+ 2004-08-11 05:45:06 18,944 ----a-w C:\WINDOWS\system32\drivers\wpdusb.sys
- 2002-08-29 12:00:00 266,240 ----a-w C:\WINDOWS\system32\drmclien.dll
+ 2004-08-11 05:45:04 253,688 ----a-w C:\WINDOWS\system32\drmclien.dll
- 2002-08-29 12:00:00 76,830 ----a-w C:\WINDOWS\system32\drmstor.dll
+ 2004-08-11 05:45:04 95,232 ----a-w C:\WINDOWS\system32\drmstor.dll
- 2002-08-29 12:00:00 602,112 ----a-w C:\WINDOWS\system32\drmv2clt.dll
+ 2004-08-11 05:45:04 527,360 ----a-w C:\WINDOWS\system32\drmv2clt.dll
- 2007-11-19 01:22:16 110,192 ----a-w C:\WINDOWS\system32\FNTCACHE.DAT
+ 2008-09-04 01:47:05 112,584 ----a-w C:\WINDOWS\system32\FNTCACHE.DAT
+ 2002-08-29 07:40:56 20,480 ----a-w C:\WINDOWS\system32\hidserv.dll
+ 2006-03-17 15:45:52 1,757,184 ----a-w C:\WINDOWS\system32\imagX7.dll
+ 2006-03-17 15:45:54 497,296 ----a-w C:\WINDOWS\system32\imagXpr7.dll
+ 2006-03-17 15:45:54 258,048 ----a-w C:\WINDOWS\system32\imagXR7.dll
+ 2006-03-17 15:45:54 802,816 ----a-w C:\WINDOWS\system32\imagXRA7.dll
+ 2006-12-19 13:30:26 81,920 ----a-w C:\WINDOWS\system32\IoctlSvc.exe
+ 2002-08-29 12:00:00 2,000 ----a-w C:\WINDOWS\system32\keyboard.drv
- 2002-08-29 12:00:00 6,656 ----a-w C:\WINDOWS\system32\laprxy.dll
+ 2004-08-11 05:45:04 6,656 ----a-w C:\WINDOWS\system32\laprxy.dll
+ 2007-04-10 18:02:50 1,476,992 ------w C:\WINDOWS\system32\LegitCheckControl.dll
- 2002-08-29 12:00:00 24,576 ----a-w C:\WINDOWS\system32\logagent.exe
+ 2004-08-11 05:45:04 96,768 ----a-w C:\WINDOWS\system32\logagent.exe
+ 2002-08-29 12:00:00 2,560 ----a-w C:\WINDOWS\system32\lz32.dll
+ 2004-11-22 17:07:56 2,304 ----a-w C:\WINDOWS\system32\Machnm32.sys
+ 2008-03-15 03:31:26 57,344 ----a-w C:\WINDOWS\system32\Macromed\Common\SwSupport.dll
- 2007-06-11 17:34:00 190,696 ----a-w C:\WINDOWS\system32\Macromed\Flash\NPSWF32_FlashUtil.exe
+ 2007-11-21 00:52:40 218,496 ----a-w C:\WINDOWS\system32\Macromed\Flash\NPSWF32_FlashUtil.exe
+ 2008-03-30 12:59:15 70,264 ----a-w C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
+ 2008-03-15 03:29:22 581,632 ----a-w C:\WINDOWS\system32\Macromed\Shockwave 10\Control.dll
+ 2008-03-15 03:12:30 1,490,944 ----a-w C:\WINDOWS\system32\Macromed\Shockwave 10\dirapiX.dll
+ 2008-03-15 03:29:58 24,576 ----a-w C:\WINDOWS\system32\Macromed\Shockwave 10\DynaPlayer.dll
+ 2008-03-15 03:10:06 606,208 ----a-w C:\WINDOWS\system32\Macromed\Shockwave 10\iml32X.dll
+ 2008-03-15 03:28:48 339,968 ----a-w C:\WINDOWS\system32\Macromed\Shockwave 10\Plugin.dll
+ 2008-03-15 03:28:56 475,136 ----a-w C:\WINDOWS\system32\Macromed\Shockwave 10\PluginPing.dll
+ 2008-03-15 03:21:52 180,224 ----a-w C:\WINDOWS\system32\Macromed\Shockwave 10\Proj.dll
+ 2008-03-15 03:31:28 77,824 ----a-w C:\WINDOWS\system32\Macromed\Shockwave 10\SwInit.exe
+ 2008-03-15 15:38:08 86,016 ----a-w C:\WINDOWS\system32\Macromed\Shockwave 10\SwMenuX.dll
+ 2008-03-15 03:31:28 98,304 ----a-w C:\WINDOWS\system32\Macromed\Shockwave 10\SwOnce.dll
+ 2002-08-29 12:00:00 2,032 ----a-w C:\WINDOWS\system32\mouse.drv
- 2005-05-04 19:45:32 2,890,240 ----a-w C:\WINDOWS\system32\msi.dll
+ 2004-10-26 13:24:44 2,797,056 ------w C:\WINDOWS\system32\msi.dll
- 2005-05-04 19:45:36 78,848 ----a-w C:\WINDOWS\system32\msiexec.exe
+ 2004-10-26 13:25:08 77,312 ----a-w C:\WINDOWS\system32\msiexec.exe
- 2005-05-04 19:45:36 271,360 ----a-w C:\WINDOWS\system32\msihnd.dll
+ 2004-10-26 13:24:44 331,264 ----a-w C:\WINDOWS\system32\msihnd.dll
- 2005-05-04 19:45:36 884,736 ----a-w C:\WINDOWS\system32\msimsg.dll
+ 2004-10-26 13:16:12 884,736 ----a-w C:\WINDOWS\system32\msimsg.dll
- 2005-05-04 19:45:36 15,360 ----a-w C:\WINDOWS\system32\msisip.dll
+ 2004-10-26 13:25:08 44,032 ----a-w C:\WINDOWS\system32\msisip.dll
- 2002-08-29 12:00:00 174,592 ----a-w C:\WINDOWS\system32\msnetobj.dll
+ 2004-08-11 05:45:04 141,312 ----a-w C:\WINDOWS\system32\msnetobj.dll
+ 2004-08-11 05:45:04 25,088 ----a-w C:\WINDOWS\system32\MsPMSNSv.dll
- 2002-08-29 12:00:00 175,104 ----a-w C:\WINDOWS\system32\mspmsp.dll
+ 2004-08-11 05:45:04 169,472 ----a-w C:\WINDOWS\system32\MsPMSP.dll
- 2002-08-29 12:00:00 245,760 ----a-w C:\WINDOWS\system32\msscp.dll
+ 2004-08-11 05:45:04 360,176 ----a-w C:\WINDOWS\system32\MSSCP.dll
- 2002-08-29 12:00:00 155,648 ----a-w C:\WINDOWS\system32\mswmdm.dll
+ 2004-08-11 05:45:04 311,296 ----a-w C:\WINDOWS\system32\MSWMDM.dll
- 2006-12-12 08:39:20 1,230,336 ----a-w C:\WINDOWS\system32\msxml4.dll
+ 2003-04-18 20:46:22 1,233,920 ----a-w C:\WINDOWS\system32\msxml4.dll
+ 2008-02-18 20:04:04 95,600 ----a-w C:\WINDOWS\system32\NeroCo.dll
+ 2002-08-29 12:00:00 2,656 ----a-w C:\WINDOWS\system32\netware.drv
- 2008-02-29 03:26:08 58,800 ----a-w C:\WINDOWS\system32\perfc009.dat
+ 2008-09-04 01:51:12 58,800 ----a-w C:\WINDOWS\system32\perfc009.dat
- 2008-02-29 03:26:08 392,626 ----a-w C:\WINDOWS\system32\perfh009.dat
+ 2008-09-04 01:51:12 392,626 ----a-w C:\WINDOWS\system32\perfh009.dat
- 2002-08-29 12:00:00 31,744 ----a-w C:\WINDOWS\system32\pid.dll
+ 2002-08-29 08:41:00 31,744 ----a-w C:\WINDOWS\system32\pid.dll
- 2002-12-12 05:14:32 173,056 ----a-w C:\WINDOWS\system32\qasf.dll
+ 2004-08-11 05:45:04 221,184 ----a-w C:\WINDOWS\system32\qasf.dll
- 2003-05-30 14:00:02 1,962,496 ----a-w C:\WINDOWS\system32\quartz.dll
+ 2005-08-30 14:14:00 1,227,776 ----a-w C:\WINDOWS\system32\quartz.dll
+ 2001-08-17 22:36:02 585,344 ----a-w C:\WINDOWS\system32\ReinstallBackups\0000\DriverFiles\i386\i81xdnt5.dll
+ 2001-08-17 12:49:18 138,240 ----a-w C:\WINDOWS\system32\ReinstallBackups\0000\DriverFiles\i386\i81xnt5.sys
+ 2002-08-29 12:00:00 30,592 ----a-w C:\WINDOWS\system32\ReinstallBackups\0001\DriverFiles\i386\processr.sys
+ 2001-08-17 12:49:22 12,672 ----a-w C:\WINDOWS\system32\ReinstallBackups\0002\DriverFiles\i386\wADV01nt.sys
+ 2001-08-17 12:49:26 12,288 ----a-w C:\WINDOWS\system32\ReinstallBackups\0003\DriverFiles\i386\wADV02NT.sys
+ 2001-08-17 12:49:32 12,032 ----a-w C:\WINDOWS\system32\ReinstallBackups\0004\DriverFiles\i386\wADV05NT.sys
+ 2001-08-17 12:49:34 29,440 ----a-w C:\WINDOWS\system32\ReinstallBackups\0005\DriverFiles\i386\wATV01nt.sys
+ 2001-08-17 12:49:36 19,456 ----a-w C:\WINDOWS\system32\ReinstallBackups\0006\DriverFiles\i386\wATV02NT.sys
+ 2001-08-17 12:49:46 31,104 ----a-w C:\WINDOWS\system32\ReinstallBackups\0007\DriverFiles\i386\wATV04nt.sys
+ 2001-08-17 12:49:50 23,680 ----a-w C:\WINDOWS\system32\ReinstallBackups\0008\DriverFiles\i386\wCh7xxNT.sys
+ 2001-08-17 12:49:54 12,160 ----a-w C:\WINDOWS\system32\ReinstallBackups\0009\DriverFiles\i386\wSiINTxx.sys
+ 2001-08-17 12:49:58 18,688 ----a-w C:\WINDOWS\system32\ReinstallBackups\0010\DriverFiles\i386\wVchNTxx.sys
- 2008-03-27 21:22:36 3,252,092 ----a-w C:\WINDOWS\system32\Restore\rstrlog.dat
+ 2008-08-19 23:55:45 2,439,992 ----a-w C:\WINDOWS\system32\Restore\rstrlog.dat
- 2002-08-29 12:00:00 4,573 ----a-w C:\WINDOWS\system32\secupd.dat
+ 2004-08-02 19:20:40 4,569 ------w C:\WINDOWS\system32\secupd.dat
+ 2008-07-19 02:10:20 36,552 ----a-w C:\WINDOWS\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.2.6001.784\wups.dll
+ 2008-07-19 02:10:40 45,768 ----a-w C:\WINDOWS\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.2.6001.784\wups2.dll
+ 2002-08-29 12:00:00 1,744 ----a-w C:\WINDOWS\system32\sound.drv
+ 2004-08-04 07:56:56 8,192 ----a-w C:\WINDOWS\system32\spdwnwxp.exe
- 2005-10-12 23:12:25 14,048 ----a-w C:\WINDOWS\system32\spmsg.dll
+ 2007-11-30 11:18:51 17,272 ------w C:\WINDOWS\system32\spmsg.dll
- 2005-06-28 14:21:34 22,752 ----a-w C:\WINDOWS\system32\spupdsvc.exe
+ 2005-06-28 13:21:34 22,752 ----a-w C:\WINDOWS\system32\spupdsvc.exe
+ 2007-01-03 08:42:22 1,933,312 ----a-w C:\WINDOWS\system32\Tropix.scr
+ 2006-03-17 18:49:46 368,640 ----a-w C:\WINDOWS\system32\TwnLib4.dll
+ 2008-07-14 11:09:18 62,976 ------w C:\WINDOWS\system32\tzchange.exe
+ 2004-08-11 05:45:04 47,104 ----a-w C:\WINDOWS\system32\uwdf.exe
+ 1999-06-01 04:00:00 101,888 ----a-w C:\WINDOWS\system32\VB6STKIT.DLL
+ 2002-08-29 12:00:00 2,176 ----a-w C:\WINDOWS\system32\vga.drv
+ 2004-08-11 05:45:04 15,872 ----a-w C:\WINDOWS\system32\wdfapi.dll
+ 2004-08-11 05:45:04 38,912 ----a-w C:\WINDOWS\system32\wdfmgr.exe
+ 2007-04-10 18:00:46 236,928 ------w C:\WINDOWS\system32\WgaLogon.dll
+ 2007-04-10 18:01:18 336,768 ------w C:\WINDOWS\system32\WgaTray.exe
+ 2002-08-29 12:00:00 2,864 ----a-w C:\WINDOWS\system32\winsock.dll
+ 2002-08-29 12:00:00 2,112 ----a-w C:\WINDOWS\system32\winspool.exe
- 2002-08-29 12:00:00 184,320 ----a-w C:\WINDOWS\system32\wmadmod.dll
+ 2004-08-11 05:45:04 380,144 ----a-w C:\WINDOWS\system32\wmadmod.dll
- 2002-08-29 12:00:00 442,398 ----a-w C:\WINDOWS\system32\wmadmoe.dll
+ 2004-08-11 05:45:04 712,704 ----a-w C:\WINDOWS\system32\wmadmoe.dll
- 2002-08-29 12:00:00 274,432 ----a-w C:\WINDOWS\system32\wmasf.dll
+ 2007-10-27 21:40:06 227,328 ----a-w C:\WINDOWS\system32\wmasf.dll
- 2002-08-29 12:00:00 22,528 ----a-w C:\WINDOWS\system32\wmdmlog.dll
+ 2004-08-11 05:45:04 30,208 ----a-w C:\WINDOWS\system32\WMDMLOG.dll
- 2002-08-29 12:00:00 20,480 ----a-w C:\WINDOWS\system32\wmdmps.dll
+ 2004-08-11 05:45:04 34,304 ----a-w C:\WINDOWS\system32\WMDMPS.dll
+ 2004-08-11 05:45:04 344,064 ----a-w C:\WINDOWS\system32\WMDRMdev.dll
+ 2004-08-11 05:45:04 290,816 ----a-w C:\WINDOWS\system32\WMDRMNet.dll
+ 2004-08-11 05:45:04 150,016 ----a-w C:\WINDOWS\system32\wmidx.dll
- 2002-08-29 12:00:00 110,592 ----a-w C:\WINDOWS\system32\wmsdmod.dll
+ 2004-08-11 05:45:04 773,368 ----a-w C:\WINDOWS\system32\wmsdmod.dll
+ 2004-08-11 05:45:04 1,116,160 ----a-w C:\WINDOWS\system32\wmsdmoe2.dll
+ 2004-08-11 05:45:06 531,192 ----a-w C:\WINDOWS\system32\wmspdmod.dll
+ 2004-08-11 05:45:06 936,960 ----a-w C:\WINDOWS\system32\wmspdmoe.dll
+ 2004-08-11 05:45:06 1,181,944 ----a-w C:\WINDOWS\system32\wmvadvd.dll
+ 2004-08-11 05:45:06 1,509,376 ----a-w C:\WINDOWS\system32\WMVADVE.DLL
- 2002-08-29 12:00:00 294,912 ----a-w C:\WINDOWS\system32\wmvdmod.dll
+ 2004-08-11 05:45:06 871,160 ----a-w C:\WINDOWS\system32\wmvdmod.dll
+ 2004-08-11 05:45:06 999,424 ----a-w C:\WINDOWS\system32\wmvdmoe2.dll
+ 2002-08-29 12:00:00 2,736 ----a-w C:\WINDOWS\system32\wowdeb.exe
+ 2004-08-11 05:45:06 38,912 ----a-w C:\WINDOWS\system32\wpd_ci.dll
+ 2004-08-11 05:45:06 61,952 ----a-w C:\WINDOWS\system32\wpdconns.dll
+ 2004-08-11 05:45:06 114,176 ----a-w C:\WINDOWS\system32\wpdmtp.dll
+ 2004-08-11 05:45:06 331,776 ----a-w C:\WINDOWS\system32\wpdmtpdr.dll
+ 2004-08-11 05:45:06 66,560 ----a-w C:\WINDOWS\system32\wpdmtpus.dll
+ 2004-08-11 05:45:06 327,680 ----a-w C:\WINDOWS\system32\wpdsp.dll
+ 2004-08-11 05:45:06 10,752 ----a-w C:\WINDOWS\system32\wpdtrace.dll
+ 1998-02-07 01:37:32 299,520 ----a-w C:\WINDOWS\uninst.exe
+ 2007-03-21 00:22:04 972,336 ----a-w C:\WINDOWS\UNNeroBackItUp.exe
+ 2008-02-28 21:38:48 972,072 ----a-w C:\WINDOWS\UNNeroMediaHome.exe
+ 2007-02-28 19:41:02 972,336 ----a-w C:\WINDOWS\UNNeroShowTime.exe
+ 2007-03-22 00:02:12 972,336 ----a-w C:\WINDOWS\UNNeroVision.exe
+ 2008-02-26 20:14:26 972,072 ----a-w C:\WINDOWS\UNRecode.exe
+ 2000-08-31 12:00:00 49,152 ----a-w C:\WINDOWS\VFind.exe
+ 2008-04-26 00:08:25 1,233,920 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9818.0_x-ww_8ff50c5d\msxml4.dll
+ 2006-12-02 02:56:00 96,256 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_cbb27474\ATL80.dll
+ 2006-12-02 02:54:32 479,232 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcm80.dll
+ 2006-12-02 02:54:34 548,864 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcp80.dll
+ 2006-12-02 02:54:32 626,688 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcr80.dll
+ 2006-12-02 04:25:52 1,101,824 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfc80.dll
+ 2006-12-02 04:25:56 1,093,120 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfc80u.dll
+ 2006-12-02 04:25:58 69,632 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfcm80.dll
+ 2006-12-02 04:26:00 57,856 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfcm80u.dll
+ 2006-12-02 04:08:00 40,960 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80CHS.dll
+ 2006-12-02 04:08:00 45,056 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80CHT.dll
+ 2006-12-02 04:08:00 65,536 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80DEU.dll
+ 2006-12-02 04:08:00 57,344 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ENU.dll
+ 2006-12-02 04:08:00 61,440 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ESP.dll
+ 2006-12-02 04:08:00 61,440 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80FRA.dll
+ 2006-12-02 04:08:00 61,440 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ITA.dll
+ 2006-12-02 04:08:00 49,152 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80JPN.dll
+ 2006-12-02 04:08:00 49,152 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80KOR.dll
+ 2006-12-02 04:46:44 65,536 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6c18549a\vcomp.dll
+ 2004-08-04 07:57:00 1,050,624 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
+ 2004-08-04 07:56:58 1,712,128 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\GdiPlus.dll
+ 2000-08-31 12:00:00 68,096 ----a-w C:\WINDOWS\zip.exe
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AIM"="C:\Program Files\AIM\aim.exe" [2006-08-01 67112]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"nwiz"="nwiz.exe" [2004-02-03 C:\WINDOWS\system32\nwiz.exe]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"AVG7_Run"="C:\PROGRA~1\Grisoft\AVG7\avgw.exe" [2008-03-04 219136]
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
backup=C:\WINDOWS\pss\HP Digital Imaging Monitor.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^Jo Ann^Start Menu^Programs^Startup^Adobe Gamma.lnk]
path=C:\Documents and Settings\Jo Ann\Start Menu\Programs\Startup\Adobe Gamma.lnk
backup=C:\WINDOWS\pss\Adobe Gamma.lnkStartup
[HKLM\~\startupfolder\C:^Documents and Settings^Jo Ann^Start Menu^Programs^Startup^LimeWire On Startup.lnk]
path=C:\Documents and Settings\Jo Ann\Start Menu\Programs\Startup\LimeWire On Startup.lnk
backup=C:\WINDOWS\pss\LimeWire On Startup.lnkStartup
[HKLM\~\startupfolder\C:^Documents and Settings^Jo Ann^Start Menu^Programs^Startup^Picture Motion Browser Media Check Tool.lnk]
path=C:\Documents and Settings\Jo Ann\Start Menu\Programs\Startup\Picture Motion Browser Media Check Tool.lnk
backup=C:\WINDOWS\pss\Picture Motion Browser Media Check Tool.lnkStartup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
--a------ 2008-01-11 23:16 39792 C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVG7_Run]
--a------ 2008-03-04 09:32 219136 C:\PROGRA~1\Grisoft\AVG7\avgw.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
--a------ 2006-12-10 22:52 49152 C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
--a------ 2008-02-28 17:07 1828136 C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
--a------ 2004-11-15 17:18 1670144 C:\Program Files\Messenger\msmsgs.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan]
--a------ 2008-02-18 16:29 2221352 C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
--a------ 2008-02-28 09:59 570664 C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
--a------ 2007-06-29 07:24 286720 C:\Program Files\QuickTime\QTTask.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpySweeper]
--a------ 2006-10-20 16:29 4806144 C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
--a------ 2008-02-22 05:25 144784 C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
R1 Pivot;Pivot;C:\WINDOWS\System32\drivers\pivot.sys [2007-02-09 17465]
R3 AN983;ADMtek AN983/AN985/ADM951X 10/100Mbps Fast Ethernet Adapter;C:\WINDOWS\System32\DRIVERS\AN983.sys [2002-08-28 36224]
R3 pivotmou;Pivot Mouse/Pointers Filter Driver;C:\WINDOWS\system32\drivers\pivotmou.sys [2007-02-09 11323]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
Contents of the 'Scheduled Tasks' folder
.
- - - - ORPHANS REMOVED - - - -
HKLM-Run-NvCplDaemon - C:\WINDOWS\system32\NvCpl.dll
Notify-WgaLogon - (no file)
MSConfigStartUp-FileZilla Server Interface - C:\Program Files\FileZilla Server\FileZilla Server Interface.exe
MSConfigStartUp-NvCplDaemon - C:\WINDOWS\System32\NvCpl.dll
.
------- Supplementary Scan -------
.
FireFox -: Profile - C:\Documents and Settings\Jo Ann\Application Data\Mozilla\Firefox\Profiles\9n5ti6iv.default\
FireFox -: prefs.js - STARTUP.HOMEPAGE - www.google.com
FF -: plugin - C:\Program Files\Mozilla Firefox\plugins\npatgpc.dll
FF -: plugin - C:\Program Files\Mozilla Firefox\plugins\npCouponPrinter.dll
.
**************************************************************************
catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-05 17:51:03
Windows 5.1.2600 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Common Files\Portrait Displays\Shared\DTSRVC.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\system32\rundll32.exe
.
**************************************************************************
.
Completion time: 2008-09-05 18:01:40 - machine was rebooted
ComboFix-quarantined-files.txt 2008-09-05 22:01:27
ComboFix2.txt 2008-03-30 18:00:03
ComboFix3.txt 2008-03-28 11:38:07
Pre-Run: 19,579,424,768 bytes free
Post-Run: 19,672,424,448 bytes free
710 --- E O F --- 2008-08-20 00:43:40
and about vundoix, im supposing it deletes some files but gives me and error message saying it can not delete some, reboot might work, so i reboot and still am not able to delete these files
thanks in advance
|
Senior Member
|
6. September 2008 @ 09:06 |
Link to this message
|
While I'm looking over your logs, please run Vundofix in safe mode (repeatedly press F8 after you press the power button) and see how it goes.
Best Regards :D
Life is but a dream; you dont feel any pain unless you want to or you fall off the bed.
Success is relative; the more success the more relatives.
A computer once beat me at chess, but it was no match for me at kickboxing.
To be or not to be; thats a dumb question.
|
|
lmac222
Member
|
12. September 2008 @ 18:18 |
Link to this message
|
sorry for the late reply, been hung up
so ive ran vundofix again in safe mode and says no errors were found
whats the next step?
Thanks
|
Senior Member
|
13. September 2008 @ 04:43 |
Link to this message
|
Hey lmac22
Please download Superantispyware Free and install it. Follow the prompts and reboot if required.
Launch Superantispyware Free either by running C:\Program Files\SUPERANTISPWYARE.exe or right-click on the SuperAntispyware icon in your task bar (it looks like a bug) and click on Scan for Spyware, Adware, Malware...
Configuring SuperAntispyware
? Click on Preferences.
? In the tab General and Startup, make sure the box Start SuperAntispyware when Windows starts is unchecked. This will prevent SuperAntispyware from starting everytime, because it may interfere with other fixes that may be run.
? Navigate to the tab Scanning Control.
? Make sure only these boxes are checked:
Close browsers before scanning
Scan for tracking cookies
Terminate memory threats before quarantining
Scan Alternate Data Streams
Use Kernel Direct File Access (recommended)
Use Kernel Direct Registry Access (recommended)
Use Direct Disk Access (recommended)
? Click on Close.
Updating SuperAntispyware
? At the main window, click on Check for Updates....
? Wait for SuperAntispyware to be fully updated.
Scanning Time
? Boot into {b}safe mode[/b] by repeatedly pressing the F8 key after you press the power button. If safe mode does not work, tell me and do the scan in normal mode.
? Launch SuperAntispyware.
? At the main window, click on Scan your Computer....
? Make sure all drives (excluding CD drives) are checked, select Perform Complete Scan, and then click on Next.
? Wait for the scan to complete, and then click on Next>. This will quarantine and remove all detected items.
? Reboot your computer.
Post A Log
? Launch SuperAntispyware
? Click on Preferences
? Navigate to the tab Statistics/Logs.
? Choose the latest scan log, and the click on View Log....
? Copy and paste the contents of the log here in your next post.
Tell me if there are any more problems with your computer.
Best Regards :D
Life is but a dream; you dont feel any pain unless you want to or you fall off the bed.
Success is relative; the more success the more relatives.
A computer once beat me at chess, but it was no match for me at kickboxing.
To be or not to be; thats a dumb question.
|
|
lmac222
Member
|
14. September 2008 @ 14:22 |
Link to this message
|
|
when i try to install that superspyware program it gives me this error
the windows installer service could not be accessed. This can occur if you are running in safe mode, or if the windows installer is not correctly installed. Contact your support personnel for assistance
im not in safe mode
|
|
Advertisement
|
|
|
Senior Member
|
15. September 2008 @ 09:52 |
Link to this message
|
|
Hey lmac22
Go to Start, Run, type in services.msc
Scroll down to Windows Installer, and Start the service.
Try running the installer again.
Best Regards :D
Life is but a dream; you dont feel any pain unless you want to or you fall off the bed.
Success is relative; the more success the more relatives.
A computer once beat me at chess, but it was no match for me at kickboxing.
To be or not to be; thats a dumb question.
|
|
