Velikana

Nod32 вече нищо не засича. SUPERAntispyware и другите използвани програми (gmer.zip, mbr.exe, Qoobox.rar, SysProt.zip) деинсталирах/изтрих. Spybot S & D го оставих, но без да се зарежда автоматично. Спрях и System Restore. Искам още веднъж да благодаря за светкавичната помощ и да пожелая на целия екип весело посрещане на новата година!

Искам да благодаря за оказаното съдействие и да пожелая лека вечер!

SysProt AntiRootkit v1.0.1.0 by swatkat ****************************************************************************************** ****************************************************************************************** Process: Name: [system Idle Process] PID: 0 Hidden: No Window Visible: No Name: System PID: 4 Hidden: No Window Visible: No Name: C:\WINDOWS\system32\smss.exe PID: 460 Hidden: No Window Visible: No Name: C:\WINDOWS\system32\csrss.exe PID: 508 Hidden: No Window Visible: No Name: C:\WINDOWS\system32\winlogon.exe PID: 532 Hidden: No Window Visible: No Name: C:\WINDOWS\system32\services.exe PID: 576 Hidden: No Window Visible: No Name: C:\WINDOWS\system32\lsass.exe PID: 588 Hidden: No Window Visible: No Name: C:\WINDOWS\system32\nvsvc32.exe PID: 756 Hidden: No Window Visible: No Name: C:\WINDOWS\system32\svchost.exe PID: 780 Hidden: No Window Visible: No Name: C:\WINDOWS\system32\svchost.exe PID: 848 Hidden: No Window Visible: No Name: C:\WINDOWS\system32\svchost.exe PID: 912 Hidden: No Window Visible: No Name: C:\WINDOWS\system32\svchost.exe PID: 988 Hidden: No Window Visible: No Name: C:\WINDOWS\system32\svchost.exe PID: 1036 Hidden: No Window Visible: No Name: C:\WINDOWS\system32\spoolsv.exe PID: 1164 Hidden: No Window Visible: No Name: C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe PID: 1208 Hidden: No Window Visible: No Name: C:\WINDOWS\system32\svchost.exe PID: 1344 Hidden: No Window Visible: No Name: C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE PID: 1464 Hidden: No Window Visible: No Name: C:\WINDOWS\system32\svchost.exe PID: 1580 Hidden: No Window Visible: No Name: C:\WINDOWS\system32\alg.exe PID: 1860 Hidden: No Window Visible: No Name: C:\WINDOWS\system32\wscntfy.exe PID: 164 Hidden: No Window Visible: No Name: C:\WINDOWS\explorer.exe PID: 256 Hidden: No Window Visible: No Name: C:\Program Files\Telnet\Helper\Helper.exe PID: 372 Hidden: No Window Visible: No Name: C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe PID: 384 Hidden: No Window Visible: No Name: C:\Program Files\Logitech\QuickCam10\QuickCam10.exe PID: 404 Hidden: No Window Visible: No Name: C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe PID: 476 Hidden: No Window Visible: No Name: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe PID: 512 Hidden: No Window Visible: No Name: C:\Program Files\Common Files\LogiShrd\LComMgr\LVComSX.exe PID: 1412 Hidden: No Window Visible: No Name: C:\Program Files\Common Files\LogiShrd\LQCVFX\COCIManager.exe PID: 3208 Hidden: No Window Visible: No Name: C:\Documents and Settings\owner\Local Settings\Application Data\Google\Chrome\Application\chrome.exe PID: 3580 Hidden: No Window Visible: No Name: C:\Documents and Settings\owner\Local Settings\Application Data\Google\Chrome\Application\chrome.exe PID: 3736 Hidden: No Window Visible: No Name: C:\Documents and Settings\owner\Local Settings\Application Data\Google\Chrome\Application\chrome.exe PID: 3752 Hidden: No Window Visible: No Name: C:\Documents and Settings\owner\Local Settings\Application Data\Google\Chrome\Application\chrome.exe PID: 4084 Hidden: No Window Visible: No Name: C:\WINDOWS\system32\ctfmon.exe PID: 3808 Hidden: No Window Visible: No Name: C:\Documents and Settings\owner\Local Settings\Application Data\Google\Chrome\Application\chrome.exe PID: 2960 Hidden: No Window Visible: No Name: C:\Documents and Settings\owner\Desktop\SysProt\SysProt\SysProt.exe PID: 2632 Hidden: No Window Visible: Yes ****************************************************************************************** ****************************************************************************************** Kernel Modules: Module Name: \??\C:\Documents and Settings\owner\Desktop\SysProt\SysProt\SysProtDrv.sys Service Name: SysProtDrv.sys Module Base: B385B000 Module End: B3866000 Hidden: No Module Name: \WINDOWS\system32\ntkrnlpa.exe Service Name: --- Module Base: 804D7000 Module End: 806E4000 Hidden: No Module Name: \WINDOWS\system32\hal.dll Service Name: --- Module Base: 806E4000 Module End: 80704D00 Hidden: No Module Name: \WINDOWS\system32\KDCOM.DLL Service Name: --- Module Base: B85A8000 Module End: B85AA000 Hidden: No Module Name: \WINDOWS\system32\BOOTVID.dll Service Name: --- Module Base: B84B8000 Module End: B84BB000 Hidden: No Module Name: C:\WINDOWS\system32\drivers\ACPI.sys Service Name: ACPI Module Base: B7F79000 Module End: B7FA7000 Hidden: No Module Name: \WINDOWS\system32\DRIVERS\WMILIB.SYS Service Name: --- Module Base: B85AA000 Module End: B85AC000 Hidden: No Module Name: C:\WINDOWS\system32\drivers\pci.sys Service Name: PCI Module Base: B7F68000 Module End: B7F79000 Hidden: No Module Name: C:\WINDOWS\system32\drivers\isapnp.sys Service Name: isapnp Module Base: B80A8000 Module End: B80B2000 Hidden: No Module Name: C:\WINDOWS\system32\drivers\pciide.sys Service Name: PCIIde Module Base: B8670000 Module End: B8671000 Hidden: No Module Name: \WINDOWS\system32\DRIVERS\PCIIDEX.SYS Service Name: --- Module Base: B8328000 Module End: B832F000 Hidden: No Module Name: C:\WINDOWS\system32\drivers\MountMgr.sys Service Name: MountMgr Module Base: B80B8000 Module End: B80C3000 Hidden: No Module Name: C:\WINDOWS\system32\drivers\ftdisk.sys Service Name: Disk Module Base: B7F49000 Module End: B7F68000 Hidden: No Module Name: C:\WINDOWS\system32\drivers\dmload.sys Service Name: dmload Module Base: B85AC000 Module End: B85AE000 Hidden: No Module Name: C:\WINDOWS\system32\drivers\dmio.sys Service Name: dmio Module Base: B7F23000 Module End: B7F49000 Hidden: No Module Name: C:\WINDOWS\system32\drivers\PartMgr.sys Service Name: PartMgr Module Base: B8330000 Module End: B8335000 Hidden: No Module Name: C:\WINDOWS\system32\drivers\VolSnap.sys Service Name: VolSnap Module Base: B80C8000 Module End: B80D5000 Hidden: No Module Name: C:\WINDOWS\system32\drivers\atapi.sys Service Name: atapi Module Base: B7F0B000 Module End: B7F23000 Hidden: No Module Name: C:\WINDOWS\system32\drivers\disk.sys Service Name: --- Module Base: B80D8000 Module End: B80E1000 Hidden: No Module Name: \WINDOWS\system32\DRIVERS\CLASSPNP.SYS Service Name: --- Module Base: B80E8000 Module End: B80F5000 Hidden: No Module Name: C:\WINDOWS\system32\drivers\fltmgr.sys Service Name: FltMgr Module Base: B7EEB000 Module End: B7F0B000 Hidden: No Module Name: C:\WINDOWS\system32\drivers\sr.sys Service Name: sr Module Base: B7ED9000 Module End: B7EEB000 Hidden: No Module Name: C:\WINDOWS\system32\drivers\PxHelp20.sys Service Name: PxHelp20 Module Base: B80F8000 Module End: B8102000 Hidden: No Module Name: C:\WINDOWS\system32\drivers\KSecDD.sys Service Name: KSecDD Module Base: B7EC2000 Module End: B7ED9000 Hidden: No Module Name: C:\WINDOWS\system32\drivers\Ntfs.sys Service Name: Ntfs Module Base: B7E35000 Module End: B7EC2000 Hidden: No Module Name: C:\WINDOWS\system32\drivers\NDIS.sys Service Name: NDIS Module Base: B7E08000 Module End: B7E35000 Hidden: No Module Name: C:\WINDOWS\system32\drivers\Mup.sys Service Name: Mup Module Base: B7DEE000 Module End: B7E08000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\intelppm.sys Service Name: intelppm Module Base: B81D8000 Module End: B81E1000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\nv4_mini.sys Service Name: nv Module Base: B75F7000 Module End: B7DA6000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\VIDEOPRT.SYS Service Name: --- Module Base: B75E3000 Module End: B75F7000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\HDAudBus.sys Service Name: HDAudBus Module Base: B75BB000 Module End: B75E3000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\usbuhci.sys Service Name: usbuhci Module Base: B83A0000 Module End: B83A6000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\USBPORT.SYS Service Name: --- Module Base: B7597000 Module End: B75BB000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\usbehci.sys Service Name: usbehci Module Base: B83A8000 Module End: B83B0000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys Service Name: RTL8023xp Module Base: B757D000 Module End: B7597000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\ASACPI.sys Service Name: MTsensor Module Base: B85C6000 Module End: B85C8000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\i8042prt.sys Service Name: i8042prt Module Base: B81E8000 Module End: B81F5000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\kbdclass.sys Service Name: Kbdclass Module Base: B83B0000 Module End: B83B6000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\imapi.sys Service Name: Imapi Module Base: B81F8000 Module End: B8203000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\cdrom.sys Service Name: Cdrom Module Base: B8208000 Module End: B8218000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\redbook.sys Service Name: redbook Module Base: B8218000 Module End: B8227000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\ks.sys Service Name: --- Module Base: B755A000 Module End: B757D000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\audstub.sys Service Name: audstub Module Base: B8718000 Module End: B8719000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\rasl2tp.sys Service Name: Rasl2tp Module Base: B8288000 Module End: B8295000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\ndistapi.sys Service Name: NdisTapi Module Base: B8550000 Module End: B8553000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\ndiswan.sys Service Name: NdisWan Module Base: B5F55000 Module End: B5F6C000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\raspppoe.sys Service Name: RasPppoe Module Base: B8298000 Module End: B82A3000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\raspptp.sys Service Name: PptpMiniport Module Base: B82A8000 Module End: B82B4000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\TDI.SYS Service Name: --- Module Base: B83B8000 Module End: B83BD000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\psched.sys Service Name: PSched Module Base: B5EA4000 Module End: B5EB5000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\msgpc.sys Service Name: Gpc Module Base: B82B8000 Module End: B82C1000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\ptilink.sys Service Name: Ptilink Module Base: B83C0000 Module End: B83C5000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\raspti.sys Service Name: Raspti Module Base: B83C8000 Module End: B83CD000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\rdpdr.sys Service Name: rdpdr Module Base: B5E74000 Module End: B5EA4000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\termdd.sys Service Name: TermDD Module Base: B82C8000 Module End: B82D2000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\mouclass.sys Service Name: Mouclass Module Base: B83D0000 Module End: B83D6000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\swenum.sys Service Name: swenum Module Base: B85DA000 Module End: B85DC000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\update.sys Service Name: Update Module Base: B5DEE000 Module End: B5E4C000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\mssmbios.sys Service Name: mssmbios Module Base: B856C000 Module End: B8570000 Hidden: No Module Name: C:\WINDOWS\System32\Drivers\NDProxy.SYS Service Name: NDProxy Module Base: B82D8000 Module End: B82E2000 Hidden: No Module Name: C:\WINDOWS\system32\drivers\viahduaa.sys Service Name: VIAHdAudAddService Module Base: B3C1F000 Module End: B3CEE000 Hidden: No Module Name: C:\WINDOWS\system32\drivers\portcls.sys Service Name: --- Module Base: B3BFB000 Module End: B3C1F000 Hidden: No Module Name: C:\WINDOWS\system32\drivers\drmk.sys Service Name: --- Module Base: B8308000 Module End: B8317000 Hidden: No Module Name: C:\WINDOWS\system32\drivers\monfilt.sys Service Name: monfilt Module Base: B3AA7000 Module End: B3BFB000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\usbhub.sys Service Name: usbhub Module Base: B8318000 Module End: B8327000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\USBD.SYS Service Name: --- Module Base: B85E4000 Module End: B85E6000 Hidden: No Module Name: C:\WINDOWS\System32\Drivers\Fs_Rec.SYS Service Name: Fs_Rec Module Base: B85E6000 Module End: B85E8000 Hidden: No Module Name: C:\WINDOWS\System32\Drivers\Null.SYS Service Name: Null Module Base: B86BB000 Module End: B86BC000 Hidden: No Module Name: C:\WINDOWS\System32\Drivers\Beep.SYS Service Name: Beep Module Base: B85E8000 Module End: B85EA000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\HIDPARSE.SYS Service Name: --- Module Base: B83F0000 Module End: B83F7000 Hidden: No Module Name: C:\WINDOWS\System32\drivers\vga.sys Service Name: VgaSave Module Base: B83F8000 Module End: B83FE000 Hidden: No Module Name: C:\WINDOWS\System32\Drivers\mnmdd.SYS Service Name: mnmdd Module Base: B85EA000 Module End: B85EC000 Hidden: No Module Name: C:\WINDOWS\System32\DRIVERS\RDPCDD.sys Service Name: RDPCDD Module Base: B85EC000 Module End: B85EE000 Hidden: No Module Name: C:\WINDOWS\System32\Drivers\Msfs.SYS Service Name: Msfs Module Base: B8400000 Module End: B8405000 Hidden: No Module Name: C:\WINDOWS\System32\Drivers\Npfs.SYS Service Name: Npfs Module Base: B8408000 Module End: B8410000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\rasacd.sys Service Name: RasAcd Module Base: B85A0000 Module End: B85A3000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\ipsec.sys Service Name: IPSec Module Base: B3A4C000 Module End: B3A5F000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\tcpip.sys Service Name: Tcpip Module Base: B39F3000 Module End: B3A4C000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\netbt.sys Service Name: NetBT Module Base: B39CB000 Module End: B39F3000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\wanarp.sys Service Name: Wanarp Module Base: B8178000 Module End: B8181000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\ipnat.sys Service Name: IpNat Module Base: B39A5000 Module End: B39CB000 Hidden: No Module Name: C:\WINDOWS\System32\drivers\afd.sys Service Name: AFD Module Base: B3983000 Module End: B39A5000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\netbios.sys Service Name: NetBIOS Module Base: B8188000 Module End: B8191000 Hidden: No Module Name: \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys Service Name: SASKUTIL Module Base: B395E000 Module End: B3983000 Hidden: No Module Name: \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS Service Name: SASDIFSV Module Base: B8410000 Module End: B8416000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\rdbss.sys Service Name: Rdbss Module Base: B3933000 Module End: B395E000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\mrxsmb.sys Service Name: MRxSmb Module Base: B38C3000 Module End: B3933000 Hidden: No Module Name: C:\WINDOWS\System32\Drivers\Fips.SYS Service Name: Fips Module Base: B8198000 Module End: B81A3000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\hidusb.sys Service Name: hidusb Module Base: B7DA6000 Module End: B7DA9000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\HIDCLASS.SYS Service Name: --- Module Base: B81B8000 Module End: B81C1000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\mouhid.sys Service Name: mouhid Module Base: B8538000 Module End: B853B000 Hidden: No Module Name: C:\WINDOWS\System32\Drivers\Cdfs.SYS Service Name: Cdfs Module Base: B81C8000 Module End: B81D8000 Hidden: No Module Name: C:\WINDOWS\System32\drivers\Dxapi.sys Service Name: --- Module Base: B5E6C000 Module End: B5E6F000 Hidden: No Module Name: C:\WINDOWS\System32\watchdog.sys Service Name: --- Module Base: B8418000 Module End: B841D000 Hidden: No Module Name: C:\WINDOWS\System32\drivers\dxgthk.sys Service Name: --- Module Base: B870C000 Module End: B870D000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\ndisuio.sys Service Name: Ndisuio Module Base: B34F3000 Module End: B34F7000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\mrxdav.sys Service Name: MRxDAV Module Base: B325E000 Module End: B328B000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\srv.sys Service Name: Srv Module Base: B311C000 Module End: B316E000 Hidden: No Module Name: \??\e:\Program Files\CyberLink\PowerDVD8\PowerDVD8\000.fcl Service Name: {FE4C91E7-22C2-4D0C-9F6B-82F1B7742054} Module Base: B30AB000 Module End: B30CC000 Hidden: No Module Name: C:\WINDOWS\system32\DRIVERS\LVPr2Mon.sys Service Name: LVPr2Mon Module Base: B8458000 Module End: B845D000 Hidden: No Module Name: C:\WINDOWS\system32\drivers\wdmaud.sys Service Name: wdmaud Module Base: B2E8E000 Module End: B2EA3000 Hidden: No Module Name: C:\WINDOWS\system32\drivers\sysaudio.sys Service Name: sysaudio Module Base: B2F8B000 Module End: B2F9A000 Hidden: No Module Name: C:\WINDOWS\System32\Drivers\HTTP.sys Service Name: HTTP Module Base: B26FD000 Module End: B273E000 Hidden: No Module Name: \??\C:\DOCUME~1\owner\LOCALS~1\Temp\mbr.sys Service Name: mbr Module Base: B8430000 Module End: B8436000 Hidden: Yes Module Name: C:\WINDOWS\system32\drivers\kmixer.sys Service Name: kmixer Module Base: B2592000 Module End: B25BD000 Hidden: No ****************************************************************************************** ****************************************************************************************** No SSDT Hooks found ****************************************************************************************** ****************************************************************************************** No Kernel Hooks found ****************************************************************************************** ****************************************************************************************** No IRP Hooks found ****************************************************************************************** ****************************************************************************************** Ports: Local Address: RADOSLAV:1025 Remote Address: 0.0.0.0:0 Type: TCP Process: C:\WINDOWS\system32\alg.exe State: LISTENING Local Address: RADOSLAV:2694 Remote Address: BW-IN-F156.1E100.NET:HTTP Type: TCP Process: C:\Documents and Settings\owner\Local Settings\Application Data\Google\Chrome\Application\chrome.exe State: ESTABLISHED Local Address: RADOSLAV:2693 Remote Address: BW-IN-F156.1E100.NET:HTTP Type: TCP Process: C:\Documents and Settings\owner\Local Settings\Application Data\Google\Chrome\Application\chrome.exe State: ESTABLISHED Local Address: RADOSLAV:2684 Remote Address: BW-IN-F113.1E100.NET:HTTP Type: TCP Process: C:\Documents and Settings\owner\Local Settings\Application Data\Google\Chrome\Application\chrome.exe State: ESTABLISHED Local Address: RADOSLAV:2683 Remote Address: BF-IN-F95.1E100.NET:HTTP Type: TCP Process: C:\Documents and Settings\owner\Local Settings\Application Data\Google\Chrome\Application\chrome.exe State: ESTABLISHED Local Address: RADOSLAV:2682 Remote Address: BF-IN-F95.1E100.NET:HTTP Type: TCP Process: C:\Documents and Settings\owner\Local Settings\Application Data\Google\Chrome\Application\chrome.exe State: ESTABLISHED Local Address: RADOSLAV:2681 Remote Address: BW-IN-F139.1E100.NET:HTTP Type: TCP Process: C:\Documents and Settings\owner\Local Settings\Application Data\Google\Chrome\Application\chrome.exe State: ESTABLISHED Local Address: RADOSLAV:2680 Remote Address: BW-IN-F103.1E100.NET:HTTP Type: TCP Process: C:\Documents and Settings\owner\Local Settings\Application Data\Google\Chrome\Application\chrome.exe State: ESTABLISHED Local Address: RADOSLAV:2679 Remote Address: BW-IN-F103.1E100.NET:HTTP Type: TCP Process: C:\Documents and Settings\owner\Local Settings\Application Data\Google\Chrome\Application\chrome.exe State: ESTABLISHED Local Address: RADOSLAV:2677 Remote Address: BW-IN-F103.1E100.NET:HTTP Type: TCP Process: C:\Documents and Settings\owner\Local Settings\Application Data\Google\Chrome\Application\chrome.exe State: ESTABLISHED Local Address: RADOSLAV:2676 Remote Address: BW-IN-F139.1E100.NET:HTTP Type: TCP Process: C:\Documents and Settings\owner\Local Settings\Application Data\Google\Chrome\Application\chrome.exe State: ESTABLISHED Local Address: RADOSLAV:2522 Remote Address: BW-IN-F166.1E100.NET:HTTP Type: TCP Process: C:\Documents and Settings\owner\Local Settings\Application Data\Google\Chrome\Application\chrome.exe State: ESTABLISHED Local Address: RADOSLAV:2520 Remote Address: A92-123-148-20.DEPLOY.AKAMAITECHNOLOGIES.COM:HTTP Type: TCP Process: C:\Documents and Settings\owner\Local Settings\Application Data\Google\Chrome\Application\chrome.exe State: ESTABLISHED Local Address: RADOSLAV:2391 Remote Address: BW-IN-F167.1E100.NET:HTTP Type: TCP Process: [system Idle Process] State: TIME_WAIT Local Address: RADOSLAV:2364 Remote Address: BW-IN-F113.1E100.NET:HTTP Type: TCP Process: C:\Documents and Settings\owner\Local Settings\Application Data\Google\Chrome\Application\chrome.exe State: ESTABLISHED Local Address: RADOSLAV:2341 Remote Address: BW-IN-F154.1E100.NET:HTTP Type: TCP Process: C:\Documents and Settings\owner\Local Settings\Application Data\Google\Chrome\Application\chrome.exe State: ESTABLISHED Local Address: RADOSLAV:2324 Remote Address: BW-IN-F154.1E100.NET:HTTP Type: TCP Process: C:\Documents and Settings\owner\Local Settings\Application Data\Google\Chrome\Application\chrome.exe State: ESTABLISHED Local Address: RADOSLAV:NETBIOS-SSN Remote Address: 0.0.0.0:0 Type: TCP Process: System State: LISTENING Local Address: RADOSLAV:MICROSOFT-DS Remote Address: 0.0.0.0:0 Type: TCP Process: System State: LISTENING Local Address: RADOSLAV:EPMAP Remote Address: 0.0.0.0:0 Type: TCP Process: C:\WINDOWS\system32\svchost.exe State: LISTENING Local Address: RADOSLAV:1900 Remote Address: NA Type: UDP Process: C:\WINDOWS\system32\svchost.exe State: NA Local Address: RADOSLAV:123 Remote Address: NA Type: UDP Process: C:\WINDOWS\system32\svchost.exe State: NA Local Address: RADOSLAV:1900 Remote Address: NA Type: UDP Process: C:\WINDOWS\system32\svchost.exe State: NA Local Address: RADOSLAV:138 Remote Address: NA Type: UDP Process: System State: NA Local Address: RADOSLAV:NETBIOS-NS Remote Address: NA Type: UDP Process: System State: NA Local Address: RADOSLAV:123 Remote Address: NA Type: UDP Process: C:\WINDOWS\system32\svchost.exe State: NA Local Address: RADOSLAV:9370 Remote Address: NA Type: UDP Process: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe State: NA Local Address: RADOSLAV:4500 Remote Address: NA Type: UDP Process: C:\WINDOWS\system32\lsass.exe State: NA Local Address: RADOSLAV:500 Remote Address: NA Type: UDP Process: C:\WINDOWS\system32\lsass.exe State: NA Local Address: RADOSLAV:MICROSOFT-DS Remote Address: NA Type: UDP Process: System State: NA ****************************************************************************************** ****************************************************************************************** Hidden files/folders: Object: E:\System Volume Information\MountPointManagerRemoteDatabase Status: Access denied Object: E:\System Volume Information\tracking.log Status: Access denied Object: E:\System Volume Information\_restore{09D22397-5ECA-408F-AAB7-AE63FF2C2BC2} Status: Access denied Object: C:\System Volume Information\MountPointManagerRemoteDatabase Status: Access denied Object: C:\System Volume Information\tracking.log Status: Access denied Object: C:\System Volume Information\_restore{09D22397-5ECA-408F-AAB7-AE63FF2C2BC2} Status: Access denied За състоянието на системата все още не мога да кажа нищо, не се наблюдава нещо нередно. За бързодействие може би трябва да я натоваря с нещо, за да проверя. Искам да попитам дали вече мога да пусна антивирусната програма и анти-спай софта?

По стъпка 1 пак заби, та даже се рестартира и компютъра. Направих и скрийншот на празния екран. По стъпка 2 мина, но пак не видях някъде да има лог файл, за това и тук направих скрийншот. По стъпка 3 : C:\Qoobox.rar multiple threats deleted - quarantined C:\Program Files\Telnet\Helper\winvnc.exe Win32/RemoteAdmin.WinVNC application cleaned by deleting - quarantined C:\WINDOWS\Downloaded Installations\{1194DEF9-94B8-4EF1-8EFB-FAAE471C0065}\Telnet Helper.msi Win32/RemoteAdmin.WinVNC application deleted - quarantined

Ето линка: http://rapidshare.de/files/48913509/Qoobox.rar.html Стигнах до стъпка 1. След като стартирам gmer.exe, изчакам няколко секунди да сканира и натисна бутона Copy какво трябва да стане? Защото като изчакам нищо не се случва, не виждам някъде да се записва лог. А като дам save as и забива.

+ 2009-12-29 19:44 . 2008-04-14 03:39 6144 c:\windows\ServicePackFiles\i386\kbdmlt48.dll + 2009-12-29 19:44 . 2008-04-14 03:39 6144 c:\windows\ServicePackFiles\i386\kbdmlt47.dll + 2009-12-29 19:44 . 2008-04-14 03:39 5632 c:\windows\ServicePackFiles\i386\kbdmaori.dll + 2009-12-29 19:44 . 2008-04-14 03:39 6144 c:\windows\ServicePackFiles\i386\kbdlk41j.dll + 2009-12-29 19:44 . 2008-04-14 03:39 6656 c:\windows\ServicePackFiles\i386\kbdlk41a.dll + 2009-12-29 19:45 . 2008-04-14 03:39 6144 c:\windows\ServicePackFiles\i386\kbdiultn.dll + 2009-12-29 19:44 . 2008-04-14 03:39 6656 c:\windows\ServicePackFiles\i386\kbdinmal.dll + 2009-12-29 19:44 . 2008-04-14 03:39 6144 c:\windows\ServicePackFiles\i386\kbdinben.dll + 2009-12-29 19:44 . 2008-04-14 03:39 6144 c:\windows\ServicePackFiles\i386\kbdinbe1.dll + 2009-12-29 19:44 . 2008-04-14 03:39 7168 c:\windows\ServicePackFiles\i386\kbdibm02.dll + 2009-12-29 19:44 . 2008-04-14 03:39 7168 c:\windows\ServicePackFiles\i386\kbdfi1.dll + 2009-12-29 19:45 . 2008-04-14 03:39 6144 c:\windows\ServicePackFiles\i386\kbdbhc.dll + 2009-12-29 19:44 . 2008-04-14 03:39 6144 c:\windows\ServicePackFiles\i386\kbdax2.dll + 2009-12-29 19:45 . 2008-04-14 03:39 6144 c:\windows\ServicePackFiles\i386\kbd106n.dll + 2009-12-29 19:44 . 2008-04-14 03:39 6144 c:\windows\ServicePackFiles\i386\kbd106.dll + 2009-12-29 19:44 . 2008-04-14 03:39 6144 c:\windows\ServicePackFiles\i386\kbd101.dll + 2009-12-29 19:44 . 2008-04-13 22:10 5504 c:\windows\ServicePackFiles\i386\intelide.sys + 2009-12-29 19:45 . 2008-04-14 03:41 7168 c:\windows\ServicePackFiles\i386\iisfecnv.dll + 2009-12-29 19:45 . 2008-04-14 03:41 8192 c:\windows\ServicePackFiles\i386\igmpagnt.dll + 2007-06-27 16:24 . 2007-06-27 16:24 7168 c:\windows\ServicePackFiles\i386\ieexecremote.dll + 2007-12-17 15:28 . 2007-12-17 15:28 8192 c:\windows\ServicePackFiles\i386\ieexec.exe + 2009-12-29 19:44 . 2008-04-13 20:14 2560 c:\windows\ServicePackFiles\i386\iconlib.dll + 2009-12-29 19:44 . 2008-04-14 03:39 3584 c:\windows\ServicePackFiles\i386\icmp.dll + 2009-12-29 19:44 . 2008-04-13 22:11 8576 c:\windows\ServicePackFiles\i386\i2omgmt.sys + 2009-12-29 19:45 . 2008-04-14 03:41 8192 c:\windows\ServicePackFiles\i386\httpmb51.dll + 2009-12-29 19:44 . 2008-04-14 03:41 7168 c:\windows\ServicePackFiles\i386\hccoin.dll + 2009-12-29 19:45 . 2006-12-31 04:56 9728 c:\windows\ServicePackFiles\i386\gpkrsrc.dll + 2009-12-29 19:44 . 2008-04-14 03:39 6656 c:\windows\ServicePackFiles\i386\fxsres.dll + 2009-12-29 19:44 . 2008-04-14 03:41 8704 c:\windows\ServicePackFiles\i386\fxsperf.dll + 2009-12-29 19:45 . 2008-04-14 03:41 6144 c:\windows\ServicePackFiles\i386\ftpmib.dll + 2009-12-29 19:44 . 2008-04-14 03:39 9344 c:\windows\ServicePackFiles\i386\framebuf.dll + 2009-12-29 19:44 . 2008-04-14 03:42 7680 c:\windows\ServicePackFiles\i386\forcedos.exe + 2009-12-29 19:44 . 2008-04-14 03:39 7168 c:\windows\ServicePackFiles\i386\f3ahvoas.dll + 2009-12-29 19:45 . 2008-04-13 20:39 4096 c:\windows\ServicePackFiles\i386\dsprpres.dll + 2009-12-29 19:44 . 2007-04-02 17:35 4656 c:\windows\ServicePackFiles\i386\ds16gt.dll + 2009-12-29 19:45 . 2008-04-13 22:15 2944 c:\windows\ServicePackFiles\i386\drmkaud.sys + 2009-12-29 19:45 . 2008-04-14 03:39 3072 c:\windows\ServicePackFiles\i386\dpnlobby.dll + 2009-12-29 19:44 . 2008-04-14 03:39 3072 c:\windows\ServicePackFiles\i386\dpnaddr.dll + 2009-12-29 19:44 . 2008-04-14 03:41 9216 c:\windows\ServicePackFiles\i386\dot3dlg.dll + 2009-12-29 19:44 . 2008-04-13 22:10 8320 c:\windows\ServicePackFiles\i386\dlttape.sys + 2009-12-29 19:44 . 2008-04-14 03:42 5120 c:\windows\ServicePackFiles\i386\dllhost.exe + 2009-12-29 19:44 . 2008-04-14 03:42 6144 c:\windows\ServicePackFiles\i386\dcomcnfg.exe + 2009-12-29 19:44 . 2008-04-14 03:41 8704 c:\windows\ServicePackFiles\i386\dciman32.dll + 2009-12-29 19:45 . 2008-04-14 03:55 1804 c:\windows\ServicePackFiles\i386\dcache.bin + 2009-12-29 19:44 . 2008-04-14 03:41 8192 c:\windows\ServicePackFiles\i386\d3d8thk.dll + 2009-12-29 19:44 . 2008-04-14 03:42 6144 c:\windows\ServicePackFiles\i386\csrss.exe + 2009-12-29 19:45 . 2008-04-13 22:13 9728 c:\windows\ServicePackFiles\i386\comsdupd.exe + 2009-12-29 19:44 . 2008-04-14 03:42 6144 c:\windows\ServicePackFiles\i386\comrereg.exe + 2009-12-29 19:44 . 2008-04-14 03:42 9728 c:\windows\ServicePackFiles\i386\comrepl.exe + 2009-12-29 19:44 . 2008-04-14 03:42 5632 c:\windows\ServicePackFiles\i386\cisvc.exe + 2009-12-29 19:44 . 2008-04-13 22:11 8192 c:\windows\ServicePackFiles\i386\changer.sys + 2009-12-29 19:44 . 2008-04-14 03:41 7168 c:\windows\ServicePackFiles\i386\bitsprx4.dll + 2009-12-29 19:44 . 2008-04-14 03:41 7168 c:\windows\ServicePackFiles\i386\bitsprx3.dll + 2009-12-29 19:44 . 2008-04-14 03:41 8192 c:\windows\ServicePackFiles\i386\bitsprx2.dll + 2009-12-29 19:44 . 2008-04-14 03:41 8704 c:\windows\ServicePackFiles\i386\batt.dll + 2009-12-29 19:44 . 2008-04-14 03:41 3775 c:\windows\ServicePackFiles\i386\adv11nt5.dll + 2009-12-29 19:45 . 2008-04-14 03:41 3711 c:\windows\ServicePackFiles\i386\adv09nt5.dll + 2009-12-29 19:44 . 2008-04-14 03:41 3135 c:\windows\ServicePackFiles\i386\adv08nt5.dll + 2009-12-29 19:44 . 2008-04-14 03:41 3647 c:\windows\ServicePackFiles\i386\adv07nt5.dll + 2009-12-29 19:44 . 2008-04-14 03:41 3615 c:\windows\ServicePackFiles\i386\adv05nt5.dll + 2009-12-29 19:45 . 2008-04-14 03:41 3967 c:\windows\ServicePackFiles\i386\adv02nt5.dll + 2009-12-29 19:44 . 2008-04-14 03:41 4255 c:\windows\ServicePackFiles\i386\adv01nt5.dll + 2009-12-29 19:44 . 2008-04-14 03:42 4096 c:\windows\ServicePackFiles\i386\actmovie.exe + 2009-12-29 19:45 . 2008-01-18 18:43 2247 c:\windows\Installer\tsclientmsitrans\tscdsbl.bat + 2008-04-13 21:56 . 2008-04-13 21:56 132096 c:\windows\WinSxS\x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_en_16a24bc0\rtcres.dll - 2009-05-13 17:24 . 2008-04-13 20:56 132096 c:\windows\WinSxS\x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_en_16a24bc0\rtcres.dll + 2008-04-14 03:42 . 2008-04-14 03:42 991232 c:\windows\WinSxS\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95\rtcdll.dll - 2009-05-13 17:24 . 2008-04-14 02:42 991232 c:\windows\WinSxS\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95\rtcdll.dll - 2009-05-13 17:24 . 2008-04-14 02:42 853504 c:\windows\WinSxS\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7\dxmrtp.dll + 2008-04-14 03:42 . 2008-04-14 03:42 853504 c:\windows\WinSxS\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7\dxmrtp.dll + 2008-04-14 03:42 . 2008-04-14 03:42 343040 c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcrt.dll - 2009-05-13 17:24 . 2008-04-14 02:42 343040 c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcrt.dll + 2008-04-14 03:42 . 2008-04-14 03:42 401462 c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\msvcp60.dll + 2008-04-14 03:42 . 2008-04-14 03:42 995383 c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\mfc42.dll + 2008-04-14 02:42 . 2008-04-14 03:42 507904 c:\windows\system32\winlogon.exe + 2009-12-29 19:45 . 2008-04-14 03:42 188508 c:\windows\system32\slgen.dll + 2009-12-29 19:45 . 2008-04-14 03:42 286792 c:\windows\system32\slextspk.dll + 2008-04-14 02:42 . 2008-04-14 03:42 108544 c:\windows\system32\services.exe + 2009-12-29 19:45 . 2008-04-14 03:42 397056 c:\windows\system32\s3gnb.dll + 2009-12-29 19:45 . 2008-04-14 03:42 189440 c:\windows\system32\inetsrv\smtpadm.dll + 2009-12-29 19:45 . 2008-04-14 03:42 221696 c:\windows\system32\inetsrv\seo.dll - 2009-05-13 17:24 . 2009-10-25 05:40 243128 c:\windows\system32\FNTCACHE.DAT + 2009-05-13 17:24 . 2009-12-29 19:47 243128 c:\windows\system32\FNTCACHE.DAT + 2009-12-29 19:44 . 2008-04-13 22:16 121984 c:\windows\system32\drivers\usbvideo.sys + 2009-12-29 19:44 . 2008-04-13 21:53 404990 c:\windows\system32\drivers\slntamr.sys + 2009-12-29 19:44 . 2008-04-13 21:53 129535 c:\windows\system32\drivers\slnt7554.sys + 2009-12-29 19:44 . 2008-04-13 20:04 166912 c:\windows\system32\drivers\s3gnbm.sys + 2009-12-29 19:44 . 2008-04-13 21:53 180360 c:\windows\system32\drivers\ntmtlfax.sys + 2009-12-29 19:44 . 2008-04-13 20:04 452736 c:\windows\system32\drivers\mtxparhm.sys + 2009-12-29 19:44 . 2008-04-13 21:53 126686 c:\windows\system32\drivers\mtlmnt5.sys + 2009-12-29 19:44 . 2008-04-13 21:53 685056 c:\windows\system32\drivers\hsfcxts2.sys + 2009-12-29 19:44 . 2008-04-13 21:53 220032 c:\windows\system32\drivers\hsfbs2s2.sys + 2009-12-29 19:44 . 2008-04-13 22:21 101120 c:\windows\system32\drivers\bthpan.sys + 2009-12-29 19:44 . 2008-04-13 20:04 104960 c:\windows\system32\drivers\atinrvxx.sys + 2009-12-29 19:44 . 2008-04-13 20:04 701440 c:\windows\system32\drivers\ati2mtag.sys + 2009-12-29 19:44 . 2008-04-13 20:04 327040 c:\windows\system32\drivers\ati2mtaa.sys + 2009-12-29 19:45 . 2008-04-14 03:42 409088 c:\windows\system32\bits\qmgr.dll + 2009-12-29 19:45 . 2008-04-14 03:41 516768 c:\windows\system32\ativvaxx.dll + 2009-12-29 19:45 . 2008-04-14 03:41 870784 c:\windows\system32\ati3d1ag.dll + 2009-12-29 19:45 . 2008-04-14 03:41 201728 c:\windows\system32\ati2dvag.dll + 2009-12-29 19:45 . 2008-04-14 03:41 377984 c:\windows\system32\ati2dvaa.dll + 2009-12-29 19:45 . 2008-04-14 03:41 229376 c:\windows\system32\ati2cqag.dll + 2008-04-13 21:00 . 2008-04-13 21:00 180224 c:\windows\ServicePackFiles\ServicePackCache\i386\msgslang.dll + 2009-12-29 19:44 . 2008-04-14 03:42 338432 c:\windows\ServicePackFiles\i386\zipfldr.dll + 2009-12-29 19:44 . 2008-04-14 03:42 116224 c:\windows\ServicePackFiles\i386\xrxwiadr.dll + 2009-12-29 19:44 . 2008-04-13 21:09 689152 c:\windows\ServicePackFiles\i386\xpsp3res.dll + 2009-12-29 19:44 . 2008-04-13 21:09 187392 c:\windows\ServicePackFiles\i386\xpsp1res.dll + 2009-12-29 19:44 . 2008-04-13 21:09 438784 c:\windows\ServicePackFiles\i386\xpob2res.dll + 2009-12-29 19:44 . 2008-04-13 22:23 558080 c:\windows\ServicePackFiles\i386\xpnetdg.exe + 2009-12-29 19:44 . 2008-04-14 03:42 129024 c:\windows\ServicePackFiles\i386\xmlprov.dll + 2009-12-29 19:44 . 2008-04-14 03:42 121856 c:\windows\ServicePackFiles\i386\xmllite.dll + 2009-12-29 19:44 . 2006-12-31 05:11 174200 c:\windows\ServicePackFiles\i386\xenroll.dll + 2009-12-29 19:44 . 2008-04-14 03:42 483840 c:\windows\ServicePackFiles\i386\wzcsvc.dll + 2009-12-29 19:45 . 2008-04-14 03:42 383488 c:\windows\ServicePackFiles\i386\wzcdlg.dll + 2009-12-29 19:44 . 2008-04-14 03:42 120320 c:\windows\ServicePackFiles\i386\wuweb.dll + 2009-12-29 19:44 . 2008-04-14 03:42 112640 c:\windows\ServicePackFiles\i386\wucltui.dll + 2009-12-29 19:44 . 2008-04-14 03:42 183296 c:\windows\ServicePackFiles\i386\wuaueng1.dll + 2009-12-29 19:44 . 2008-04-14 03:42 165888 c:\windows\ServicePackFiles\i386\wuauclt1.exe + 2009-12-29 19:44 . 2008-04-14 03:42 111104 c:\windows\ServicePackFiles\i386\wuauclt.exe + 2009-12-29 19:44 . 2008-04-14 03:42 430592 c:\windows\ServicePackFiles\i386\wuapi.dll + 2009-12-29 19:44 . 2008-04-14 03:42 108032 c:\windows\ServicePackFiles\i386\wshbth.dll + 2009-12-29 19:45 . 2008-04-14 03:42 604160 c:\windows\ServicePackFiles\i386\wsecedit.dll + 2009-12-29 19:44 . 2008-04-14 03:42 155648 c:\windows\ServicePackFiles\i386\wscript.exe + 2009-12-29 19:44 . 2008-04-14 03:42 264192 c:\windows\ServicePackFiles\i386\wow32.dll + 2009-12-29 19:44 . 2008-04-14 03:42 214528 c:\windows\ServicePackFiles\i386\wordpad.exe + 2009-12-29 19:44 . 2008-04-14 03:42 276992 c:\windows\ServicePackFiles\i386\wmphoto.dll + 2009-12-29 19:45 . 2008-04-14 03:42 325632 c:\windows\ServicePackFiles\i386\wmm2fxb.dll + 2009-12-29 19:44 . 2008-04-14 03:42 502272 c:\windows\ServicePackFiles\i386\wmm2fxa.dll + 2009-12-29 19:44 . 2008-04-14 03:42 402432 c:\windows\ServicePackFiles\i386\wmm2filt.dll + 2009-12-29 19:44 . 2008-04-14 03:42 167936 c:\windows\ServicePackFiles\i386\wmm2ae.dll + 2009-12-29 19:44 . 2008-04-14 03:42 144896 c:\windows\ServicePackFiles\i386\wmisvc.dll + 2009-12-29 19:44 . 2008-04-14 03:42 218112 c:\windows\ServicePackFiles\i386\wmiprvse.exe + 2009-12-29 19:44 . 2008-04-14 03:42 437248 c:\windows\ServicePackFiles\i386\wmiprvsd.dll + 2009-12-29 19:45 . 2008-04-14 03:42 144896 c:\windows\ServicePackFiles\i386\wmiprov.dll + 2009-12-29 19:44 . 2008-04-14 03:42 132096 c:\windows\ServicePackFiles\i386\wmipdskq.dll + 2009-12-29 19:45 . 2008-04-14 03:42 156672 c:\windows\ServicePackFiles\i386\wmipcima.dll + 2009-12-29 19:44 . 2008-04-14 03:42 140800 c:\windows\ServicePackFiles\i386\wmidcprv.dll + 2009-12-29 19:45 . 2008-04-14 03:42 358912 c:\windows\ServicePackFiles\i386\wmic.exe + 2009-12-29 19:44 . 2008-04-14 03:42 126464 c:\windows\ServicePackFiles\i386\wmiapsrv.exe + 2009-12-29 19:44 . 2008-04-14 03:42 196608 c:\windows\ServicePackFiles\i386\wmiadap.exe + 2009-12-29 19:45 . 2008-04-13 20:05 154624 c:\windows\ServicePackFiles\i386\wlluc48.sys + 2009-12-29 19:44 . 2008-04-14 03:42 172032 c:\windows\ServicePackFiles\i386\wldap32.dll + 2009-12-29 19:45 . 2008-04-14 03:42 132096 c:\windows\ServicePackFiles\i386\wkssvc.dll + 2009-12-29 19:44 . 2008-04-14 03:42 176640 c:\windows\ServicePackFiles\i386\wintrust.dll + 2009-12-29 19:44 . 2008-04-14 03:42 293376 c:\windows\ServicePackFiles\i386\winsrv.dll + 2009-12-29 19:44 . 2008-04-14 03:42 146432 c:\windows\ServicePackFiles\i386\winspool.drv + 2008-04-14 03:41 . 2008-04-14 03:41 756224 c:\windows\ServicePackFiles\i386\winntbbu.dll + 2009-12-29 19:44 . 2008-04-14 03:42 176128 c:\windows\ServicePackFiles\i386\winmm.dll + 2009-12-29 19:44 . 2008-04-14 03:42 507904 c:\windows\ServicePackFiles\i386\winlogon.exe + 2009-12-29 19:44 . 2008-04-14 03:42 666112 c:\windows\ServicePackFiles\i386\wininet.dll + 2009-12-29 19:44 . 2008-04-14 03:42 354304 c:\windows\ServicePackFiles\i386\winhttp.dll + 2009-12-29 19:44 . 2008-04-14 03:42 283648 c:\windows\ServicePackFiles\i386\winhlp32.exe + 2009-12-29 19:44 . 2008-04-14 03:42 102400 c:\windows\ServicePackFiles\i386\win32spl.dll + 2009-12-29 19:45 . 2008-04-14 03:42 346112 c:\windows\ServicePackFiles\i386\wicext.dll + 2009-12-29 19:45 . 2008-04-14 03:42 712704 c:\windows\ServicePackFiles\i386\wic.dll + 2009-12-29 19:44 . 2008-04-14 03:42 111104 c:\windows\ServicePackFiles\i386\wiavideo.dll + 2009-12-29 19:44 . 2008-04-14 03:42 589312 c:\windows\ServicePackFiles\i386\wiashext.dll + 2009-12-29 19:45 . 2008-04-14 03:42 333824 c:\windows\ServicePackFiles\i386\wiaservc.dll + 2009-12-29 19:44 . 2008-04-14 03:42 124416 c:\windows\ServicePackFiles\i386\wiadss.dll + 2009-12-29 19:45 . 2008-04-14 03:42 463360 c:\windows\ServicePackFiles\i386\wiadefui.dll + 2009-12-29 19:44 . 2008-04-14 03:42 433664 c:\windows\ServicePackFiles\i386\wiaacmgr.exe + 2009-12-29 19:44 . 2008-04-14 03:42 135680 c:\windows\ServicePackFiles\i386\webvw.dll + 2009-12-29 19:44 . 2008-04-14 03:42 276480 c:\windows\ServicePackFiles\i386\webcheck.dll + 2009-12-29 19:44 . 2008-04-14 03:42 197120 c:\windows\ServicePackFiles\i386\wbemupgd.dll + 2009-12-29 19:44 . 2008-04-14 03:42 116224 c:\windows\ServicePackFiles\i386\wbemtest.exe + 2009-12-29 19:44 . 2008-04-14 03:42 273920 c:\windows\ServicePackFiles\i386\wbemess.dll + 2009-12-29 19:44 . 2008-04-14 03:42 178176 c:\windows\ServicePackFiles\i386\wbemdisp.dll + 2009-12-29 19:44 . 2008-04-14 03:42 531456 c:\windows\ServicePackFiles\i386\wbemcore.dll + 2009-12-29 19:44 . 2008-04-14 03:42 214528 c:\windows\ServicePackFiles\i386\wbemcomn.dll + 2009-12-29 19:44 . 2008-04-14 03:42 196608 c:\windows\ServicePackFiles\i386\wbemcntl.dll + 2009-12-29 19:44 . 2008-04-14 03:42 215552 c:\windows\ServicePackFiles\i386\wavemsp.dll + 2009-12-29 19:44 . 2008-04-13 19:51 249856 c:\windows\ServicePackFiles\i386\wab32res.dll + 2009-12-29 19:44 . 2008-04-14 03:42 510976 c:\windows\ServicePackFiles\i386\wab32.dll + 2009-12-29 19:44 . 2008-04-14 03:42 483840 c:\windows\ServicePackFiles\i386\w95upgnt.dll + 2009-12-29 19:45 . 2008-04-14 03:42 364032 c:\windows\ServicePackFiles\i386\w3svc.dll + 2009-12-29 19:44 . 2008-04-14 03:42 175104 c:\windows\ServicePackFiles\i386\w32time.dll + 2009-12-29 19:44 . 2008-04-14 03:42 289792 c:\windows\ServicePackFiles\i386\vssvc.exe + 2009-12-29 19:44 . 2008-04-14 03:42 430592 c:\windows\ServicePackFiles\i386\vssapi.dll + 2008-04-13 19:41 . 2008-04-13 19:41 999424 c:\windows\ServicePackFiles\i386\vsavb7rt.dll + 2009-12-29 19:44 . 2008-04-14 03:42 131584 c:\windows\ServicePackFiles\i386\viewprov.dll + 2009-12-29 19:44 . 2008-04-14 03:42 851968 c:\windows\ServicePackFiles\i386\vgx.dll + 2009-12-29 19:44 . 2008-04-14 03:42 434176 c:\windows\ServicePackFiles\i386\vbscript.dll + 2008-04-13 19:41 . 2008-04-13 19:41 126976 c:\windows\ServicePackFiles\i386\vbc7ui.kor.dll + 2008-04-13 19:41 . 2008-04-13 19:41 126976 c:\windows\ServicePackFiles\i386\vbc7ui.ja.dll + 2008-04-13 19:41 . 2008-04-13 19:41 147456 c:\windows\ServicePackFiles\i386\vbc7ui.it.dll + 2008-04-13 19:41 . 2008-04-13 19:41 151552 c:\windows\ServicePackFiles\i386\vbc7ui.ger.dll + 2008-04-13 19:41 . 2008-04-13 19:41 151552 c:\windows\ServicePackFiles\i386\vbc7ui.fr.dll + 2008-04-13 19:41 . 2008-04-13 19:41 147456 c:\windows\ServicePackFiles\i386\vbc7ui.es.dll + 2008-04-13 19:41 . 2008-04-13 19:41 126976 c:\windows\ServicePackFiles\i386\vbc7ui.dll + 2008-04-13 19:41 . 2008-04-13 19:41 126976 c:\windows\ServicePackFiles\i386\vbc7ui.cht.dll + 2008-04-13 19:41 . 2008-04-13 19:41 126976 c:\windows\ServicePackFiles\i386\vbc7ui.chs.dll + 2007-06-27 16:30 . 2007-06-27 16:30 716800 c:\windows\ServicePackFiles\i386\vbc.exe + 2009-12-29 19:44 . 2008-04-14 03:42 218624 c:\windows\ServicePackFiles\i386\uxtheme.dll + 2009-12-29 19:44 . 2008-04-14 03:42 406016 c:\windows\ServicePackFiles\i386\usp10.dll + 2009-12-29 19:44 . 2008-04-14 03:42 727040 c:\windows\ServicePackFiles\i386\userenv.dll + 2009-12-29 19:44 . 2008-04-14 03:42 578560 c:\windows\ServicePackFiles\i386\user32.dll + 2009-12-29 19:44 . 2008-04-13 22:16 121984 c:\windows\ServicePackFiles\i386\usbvideo.sys + 2009-12-29 19:44 . 2008-04-13 22:15 143872 c:\windows\ServicePackFiles\i386\usbport.sys + 2009-12-29 19:44 . 2008-04-14 03:42 619520 c:\windows\ServicePackFiles\i386\urlmon.dll + 2009-12-29 19:45 . 2008-04-14 03:42 239616 c:\windows\ServicePackFiles\i386\upnpui.dll + 2009-12-29 19:44 . 2008-04-14 03:42 185856 c:\windows\ServicePackFiles\i386\upnphost.dll + 2009-12-29 19:44 . 2008-04-14 03:42 133632 c:\windows\ServicePackFiles\i386\upnp.dll + 2009-12-29 19:44 . 2008-04-14 03:42 150528 c:\windows\ServicePackFiles\i386\uploadm.exe + 2009-12-29 19:44 . 2008-04-13 22:09 384768 c:\windows\ServicePackFiles\i386\update.sys + 2009-12-29 19:44 . 2008-04-14 03:42 316416 c:\windows\ServicePackFiles\i386\untfs.dll + 2009-12-29 19:44 . 2007-05-15 11:38 761344 c:\windows\ServicePackFiles\i386\unires.dll + 2009-12-29 19:44 . 2008-04-14 03:42 744448 c:\windows\ServicePackFiles\i386\unidrvui.dll + 2009-12-29 19:45 . 2008-04-14 03:42 373248 c:\windows\ServicePackFiles\i386\unidrv.dll + 2009-12-29 19:44 . 2008-04-14 03:42 123392 c:\windows\ServicePackFiles\i386\umpnpmgr.dll + 2009-12-29 19:44 . 2008-04-14 03:42 275456 c:\windows\ServicePackFiles\i386\ulib.dll + 2009-12-29 19:45 . 2008-04-14 03:42 103424 c:\windows\ServicePackFiles\i386\uihelper.dll + 2009-12-29 19:44 . 2008-04-14 03:42 101376 c:\windows\ServicePackFiles\i386\txflog.dll + 2009-12-29 19:44 . 2008-04-14 03:42 130048 c:\windows\ServicePackFiles\i386\tsoc.dll + 2009-12-29 19:45 . 2008-04-14 03:42 279040 c:\windows\ServicePackFiles\i386\tshoot.dll + 2009-12-29 19:44 . 2008-04-14 03:42 153088 c:\windows\ServicePackFiles\i386\triedit.dll + 2009-12-29 19:45 . 2008-04-14 03:42 259584 c:\windows\ServicePackFiles\i386\tracerpt.exe + 2009-12-29 19:44 . 2008-04-14 03:42 347136 c:\windows\ServicePackFiles\i386\tourstrt.exe + 2009-12-29 19:44 . 2008-04-14 03:42 385536 c:\windows\ServicePackFiles\i386\themeui.dll + 2009-12-29 19:44 . 2008-04-13 22:10 149376 c:\windows\ServicePackFiles\i386\tffsport.sys + 2009-12-29 19:44 . 2008-04-14 03:42 295424 c:\windows\ServicePackFiles\i386\termsrv.dll + 2009-12-29 19:44 . 2008-04-14 03:42 358400 c:\windows\ServicePackFiles\i386\termmgr.dll + 2009-12-29 19:44 . 2008-04-13 22:30 225664 c:\windows\ServicePackFiles\i386\tcpip6.sys + 2009-12-29 19:45 . 2008-04-13 22:50 361344 c:\windows\ServicePackFiles\i386\tcpip.sys + 2009-12-29 19:44 . 2008-04-14 03:42 135680 c:\windows\ServicePackFiles\i386\taskmgr.exe + 2009-12-29 19:44 . 2008-04-14 03:42 249856 c:\windows\ServicePackFiles\i386\tapisrv.dll + 2009-12-29 19:44 . 2008-04-14 03:42 181760 c:\windows\ServicePackFiles\i386\tapi32.dll + 2009-12-29 19:44 . 2008-04-14 03:42 858624 c:\windows\ServicePackFiles\i386\tapi3.dll + 2009-12-29 19:45 . 2008-04-14 03:42 117760 c:\windows\ServicePackFiles\i386\t2embed.dll + 2007-06-27 16:29 . 2007-06-27 16:29 507904 c:\windows\ServicePackFiles\i386\system.web.services.dll + 2007-06-27 16:29 . 2007-06-27 16:29 126976 c:\windows\ServicePackFiles\i386\system.serviceprocess.dll + 2007-06-27 16:29 . 2007-06-27 16:29 131072 c:\windows\ServicePackFiles\i386\system.runtime.serialization.formatters.soap.dll + 2007-06-27 16:28 . 2007-06-27 16:28 311296 c:\windows\ServicePackFiles\i386\system.runtime.remoting.dll + 2007-06-27 16:28 . 2007-06-27 16:28 241664 c:\windows\ServicePackFiles\i386\system.messaging.dll + 2007-06-27 16:28 . 2007-06-27 16:28 352256 c:\windows\ServicePackFiles\i386\system.management.dll + 2007-06-27 16:28 . 2007-06-27 16:28 212992 c:\windows\ServicePackFiles\i386\system.enterpriseservices.dll + 2007-06-27 16:28 . 2007-06-27 16:28 462848 c:\windows\ServicePackFiles\i386\system.drawing.dll + 2009-12-29 19:45 . 2008-04-14 03:42 990208 c:\windows\ServicePackFiles\i386\syssetup.dll + 2009-12-29 19:44 . 2008-04-14 03:42 106496 c:\windows\ServicePackFiles\i386\sysocmgr.exe + 2009-12-29 19:44 . 2008-04-14 03:42 173568 c:\windows\ServicePackFiles\i386\sysmoda.dll + 2009-12-29 19:44 . 2008-04-14 03:42 193024 c:\windows\ServicePackFiles\i386\sysmod.dll + 2009-12-29 19:45 . 2008-04-14 03:42 191488 c:\windows\ServicePackFiles\i386\syncui.dll + 2009-12-29 19:44 . 2008-04-14 03:42 713216 c:\windows\ServicePackFiles\i386\sxs.dll + 2009-12-29 19:45 . 2008-04-14 03:42 121856 c:\windows\ServicePackFiles\i386\stobject.dll + 2009-12-29 19:44 . 2008-04-14 03:42 136704 c:\windows\ServicePackFiles\i386\sti_ci.dll + 2009-12-29 19:45 . 2008-04-14 03:42 679936 c:\windows\ServicePackFiles\i386\sstext3d.scr + 2009-12-29 19:44 . 2008-04-14 03:42 610304 c:\windows\ServicePackFiles\i386\sspipes.scr + 2009-12-29 19:44 . 2008-04-14 03:42 393216 c:\windows\ServicePackFiles\i386\ssflwbox.scr + 2009-12-29 19:44 . 2008-04-14 03:42 704512 c:\windows\ServicePackFiles\i386\ss3dfo.scr + 2009-12-29 19:45 . 2008-04-13 22:45 334848 c:\windows\ServicePackFiles\i386\srv.sys + 2009-12-29 19:44 . 2008-04-14 03:42 171008 c:\windows\ServicePackFiles\i386\srsvc.dll + 2009-12-29 19:44 . 2008-04-14 03:42 239104 c:\windows\ServicePackFiles\i386\srrstr.dll + 2009-12-29 19:44 . 2008-04-14 03:42 726078 c:\windows\ServicePackFiles\i386\srchui.dll + 2009-12-29 19:45 . 2008-04-14 03:42 217088 c:\windows\ServicePackFiles\i386\sqlxmlx.dll + 2009-12-29 19:44 . 2008-04-14 03:42 180800 c:\windows\ServicePackFiles\i386\sqlunirl.dll + 2009-12-29 19:45 . 2008-04-14 03:42 442368 c:\windows\ServicePackFiles\i386\sqlsrv32.dll + 2009-12-29 19:44 . 2008-04-14 03:42 110592 c:\windows\ServicePackFiles\i386\sqlse20.dll + 2009-12-29 19:44 . 2008-04-14 03:42 462848 c:\windows\ServicePackFiles\i386\sqlqp20.dll + 2009-12-29 19:44 . 2008-04-14 03:42 528384 c:\windows\ServicePackFiles\i386\sqloledb.dll + 2009-12-29 19:44 . 2008-04-14 03:42 151552 c:\windows\ServicePackFiles\i386\sqldb20.dll + 2009-12-29 19:45 . 2008-04-14 03:42 250368 c:\windows\ServicePackFiles\i386\sptip.dll + 2009-12-29 19:45 . 2008-04-13 22:09 648704 c:\windows\ServicePackFiles\i386\sprc0c0a.dll + 2009-12-29 19:45 . 2008-04-13 22:09 639488 c:\windows\ServicePackFiles\i386\sprc0816.dll + 2009-12-29 19:45 . 2008-04-13 22:09 322560 c:\windows\ServicePackFiles\i386\sprc0804.dll + 2009-12-29 19:44 . 2008-04-13 22:10 576512 c:\windows\ServicePackFiles\i386\sprc0424.dll + 2009-12-29 19:45 . 2008-04-13 22:10 592896 c:\windows\ServicePackFiles\i386\sprc041f.dll + 2009-12-29 19:45 . 2008-04-13 22:10 590848 c:\windows\ServicePackFiles\i386\sprc041d.dll + 2009-12-29 19:44 . 2008-04-13 22:10 577536 c:\windows\ServicePackFiles\i386\sprc041b.dll + 2009-12-29 19:45 . 2008-04-13 22:09 627200 c:\windows\ServicePackFiles\i386\sprc0419.dll + 2009-12-29 19:45 . 2008-04-13 22:08 620032 c:\windows\ServicePackFiles\i386\sprc0416.dll + 2009-12-29 19:45 . 2008-04-13 22:09 641024 c:\windows\ServicePackFiles\i386\sprc0415.dll + 2009-12-29 19:45 . 2008-04-13 22:09 591872 c:\windows\ServicePackFiles\i386\sprc0414.dll + 2009-12-29 19:45 . 2008-04-13 22:09 645120 c:\windows\ServicePackFiles\i386\sprc0413.dll + 2009-12-29 19:45 . 2008-04-13 22:09 392704 c:\windows\ServicePackFiles\i386\sprc0412.dll + 2009-12-29 19:45 . 2008-04-13 22:09 412672 c:\windows\ServicePackFiles\i386\sprc0411.dll + 2009-12-29 19:45 . 2008-04-13 22:09 658432 c:\windows\ServicePackFiles\i386\sprc0410.dll + 2009-12-29 19:45 . 2008-04-13 22:09 645120 c:\windows\ServicePackFiles\i386\sprc040e.dll + 2009-12-29 19:45 . 2008-04-13 22:09 620544 c:\windows\ServicePackFiles\i386\sprc040d.dll + 2009-12-29 19:45 . 2008-04-13 22:09 663040 c:\windows\ServicePackFiles\i386\sprc040c.dll + 2009-12-29 19:45 . 2008-04-13 22:09 604672 c:\windows\ServicePackFiles\i386\sprc040b.dll + 2009-12-29 19:45 . 2008-04-13 22:09 679936 c:\windows\ServicePackFiles\i386\sprc0408.dll + 2009-12-29 19:45 . 2008-04-13 22:09 663552 c:\windows\ServicePackFiles\i386\sprc0407.dll + 2009-12-29 19:45 . 2008-04-13 22:09 605696 c:\windows\ServicePackFiles\i386\sprc0406.dll + 2009-12-29 19:45 . 2008-04-13 22:09 601088 c:\windows\ServicePackFiles\i386\sprc0405.dll + 2009-12-29 19:45 . 2008-04-13 22:09 327680 c:\windows\ServicePackFiles\i386\sprc0404.dll + 2009-12-29 19:45 . 2008-04-13 22:09 656896 c:\windows\ServicePackFiles\i386\sprc0401.dll + 2009-12-29 19:45 . 2008-04-13 22:06 773632 c:\windows\ServicePackFiles\i386\sprb0c0a.dll + 2009-12-29 19:45 . 2008-04-13 22:08 751616 c:\windows\ServicePackFiles\i386\sprb0816.dll + 2009-12-29 19:45 . 2008-04-13 22:05 470016 c:\windows\ServicePackFiles\i386\sprb0804.dll + 2009-12-29 19:44 . 2008-04-13 22:08 732160 c:\windows\ServicePackFiles\i386\sprb0424.dll + 2009-12-29 19:45 . 2008-04-13 22:08 724480 c:\windows\ServicePackFiles\i386\sprb041f.dll + 2009-12-29 19:45 . 2008-04-13 22:08 724480 c:\windows\ServicePackFiles\i386\sprb041d.dll + 2009-12-29 19:44 . 2008-04-13 22:08 757248 c:\windows\ServicePackFiles\i386\sprb041b.dll + 2009-12-29 19:45 . 2008-04-13 22:08 736768 c:\windows\ServicePackFiles\i386\sprb0419.dll + 2009-12-29 19:45 . 2008-04-13 22:05 752128 c:\windows\ServicePackFiles\i386\sprb0416.dll + 2009-12-29 19:45 . 2008-04-13 22:08 759808 c:\windows\ServicePackFiles\i386\sprb0415.dll + 2009-12-29 19:45 . 2008-04-13 22:08 716288 c:\windows\ServicePackFiles\i386\sprb0414.dll + 2009-12-29 19:45 . 2008-04-13 22:08 769024 c:\windows\ServicePackFiles\i386\sprb0413.dll + 2009-12-29 19:45 . 2008-04-13 22:07 543744 c:\windows\ServicePackFiles\i386\sprb0412.dll + 2009-12-29 19:45 . 2008-04-13 22:07 562688 c:\windows\ServicePackFiles\i386\sprb0411.dll + 2009-12-29 19:45 . 2008-04-13 22:07 769536 c:\windows\ServicePackFiles\i386\sprb0410.dll + 2009-12-29 19:45 . 2008-04-13 22:07 769536 c:\windows\ServicePackFiles\i386\sprb040e.dll + 2009-12-29 19:45 . 2008-04-13 22:06 793088 c:\windows\ServicePackFiles\i386\sprb040c.dll + 2009-12-29 19:45 . 2008-04-13 22:06 729088 c:\windows\ServicePackFiles\i386\sprb040b.dll + 2009-12-29 19:45 . 2008-04-13 22:06 801280 c:\windows\ServicePackFiles\i386\sprb0408.dll + 2009-12-29 19:45 . 2008-04-13 22:07 788480 c:\windows\ServicePackFiles\i386\sprb0407.dll + 2009-12-29 19:45 . 2008-04-13 22:06 742912 c:\windows\ServicePackFiles\i386\sprb0406.dll + 2009-12-29 19:45 . 2008-04-13 22:06 734720 c:\windows\ServicePackFiles\i386\sprb0405.dll + 2009-12-29 19:45 . 2008-04-13 22:06 477696 c:\windows\ServicePackFiles\i386\sprb0404.dll + 2009-12-29 19:45 . 2008-04-13 22:05 196096 c:\windows\ServicePackFiles\i386\spra0c0a.dll + 2009-12-29 19:45 . 2008-04-13 22:05 194560 c:\windows\ServicePackFiles\i386\spra0816.dll + 2009-12-29 19:45 . 2008-04-13 22:05 161280 c:\windows\ServicePackFiles\i386\spra0804.dll + 2009-12-29 19:45 . 2008-04-13 22:05 189952 c:\windows\ServicePackFiles\i386\spra0427.dll + 2009-12-29 19:45 . 2008-04-13 22:05 188928 c:\windows\ServicePackFiles\i386\spra0426.dll + 2009-12-29 19:45 . 2008-04-13 22:05 186880 c:\windows\ServicePackFiles\i386\spra0425.dll + 2009-12-29 19:44 . 2008-04-13 22:05 192512 c:\windows\ServicePackFiles\i386\spra0424.dll + 2009-12-29 19:45 . 2008-04-13 22:05 188928 c:\windows\ServicePackFiles\i386\spra041f.dll + 2009-12-29 19:45 . 2008-04-13 22:05 188416 c:\windows\ServicePackFiles\i386\spra041e.dll + 2009-12-29 19:45 . 2008-04-13 22:05 188928 c:\windows\ServicePackFiles\i386\spra041d.dll + 2009-12-29 19:44 . 2008-04-13 22:05 192512 c:\windows\ServicePackFiles\i386\spra041b.dll + 2009-12-29 19:45 . 2008-04-13 22:05 188928 c:\windows\ServicePackFiles\i386\spra041a.dll + 2009-12-29 19:45 . 2008-04-13 22:05 192512 c:\windows\ServicePackFiles\i386\spra0419.dll + 2009-12-29 19:45 . 2008-04-13 22:05 190464 c:\windows\ServicePackFiles\i386\spra0418.dll + 2009-12-29 19:45 . 2008-04-13 22:05 192512 c:\windows\ServicePackFiles\i386\spra0416.dll + 2009-12-29 19:45 . 2008-04-13 22:05 194560 c:\windows\ServicePackFiles\i386\spra0415.dll + 2009-12-29 19:45 . 2008-04-13 22:05 189440 c:\windows\ServicePackFiles\i386\spra0414.dll + 2009-12-29 19:45 . 2008-04-13 22:05 196096 c:\windows\ServicePackFiles\i386\spra0413.dll + 2009-12-29 19:45 . 2008-04-13 22:05 167936 c:\windows\ServicePackFiles\i386\spra0412.dll + 2009-12-29 19:45 . 2008-04-13 22:05 171008 c:\windows\ServicePackFiles\i386\spra0411.dll + 2009-12-29 19:45 . 2008-04-13 22:05 195072 c:\windows\ServicePackFiles\i386\spra0410.dll + 2009-12-29 19:45 . 2008-04-13 22:05 195584 c:\windows\ServicePackFiles\i386\spra040e.dll + 2009-12-29 19:45 . 2008-04-13 22:05 181760 c:\windows\ServicePackFiles\i386\spra040d.dll + 2009-12-29 19:45 . 2008-04-13 22:05 197632 c:\windows\ServicePackFiles\i386\spra040c.dll + 2009-12-29 19:45 . 2008-04-13 22:05 186368 c:\windows\ServicePackFiles\i386\spra040b.dll + 2009-12-29 19:45 . 2008-04-13 22:05 197632 c:\windows\ServicePackFiles\i386\spra0408.dll + 2009-12-29 19:45 . 2008-04-13 22:05 199680 c:\windows\ServicePackFiles\i386\spra0407.dll + 2009-12-29 19:45 . 2008-04-13 22:05 192000 c:\windows\ServicePackFiles\i386\spra0406.dll + 2009-12-29 19:45 . 2008-04-13 22:05 188928 c:\windows\ServicePackFiles\i386\spra0405.dll + 2009-12-29 19:45 . 2008-04-13 22:05 161280 c:\windows\ServicePackFiles\i386\spra0404.dll + 2009-12-29 19:45 . 2008-04-13 22:05 189440 c:\windows\ServicePackFiles\i386\spra0402.dll + 2009-12-29 19:45 . 2008-04-13 22:05 186880 c:\windows\ServicePackFiles\i386\spra0401.dll + 2009-12-29 19:44 . 2008-04-14 03:42 538624 c:\windows\ServicePackFiles\i386\spider.exe + 2009-12-29 19:44 . 2008-04-14 03:42 130048 c:\windows\ServicePackFiles\i386\softkbd.dll + 2009-12-29 19:44 . 2008-04-14 03:42 182272 c:\windows\ServicePackFiles\i386\snmpsnap.dll + 2009-12-29 19:44 . 2008-04-14 03:42 188416 c:\windows\ServicePackFiles\i386\snmpsmir.dll + 2009-12-29 19:44 . 2008-04-14 03:42 358400 c:\windows\ServicePackFiles\i386\snmpincl.dll + 2009-12-29 19:44 . 2008-04-14 03:42 259072 c:\windows\ServicePackFiles\i386\snmpcl.dll + 2009-12-29 19:44 . 2008-04-14 03:42 131584 c:\windows\ServicePackFiles\i386\sndrec32.exe + 2009-12-29 19:44 . 2008-04-14 03:42 456192 c:\windows\ServicePackFiles\i386\smtpsvc.dll + 2009-12-29 19:45 . 2008-04-14 03:42 189440 c:\windows\ServicePackFiles\i386\smtpadm.dll + 2009-12-29 19:44 . 2008-04-14 03:42 362496 c:\windows\ServicePackFiles\i386\smlogcfg.dll + 2009-12-29 19:45 . 2008-04-14 03:42 236544 c:\windows\ServicePackFiles\i386\smi2smir.exe + 2009-12-29 19:44 . 2008-04-13 21:53 404990 c:\windows\ServicePackFiles\i386\slntamr.sys + 2009-12-29 19:45 . 2008-04-13 21:53 129535 c:\windows\ServicePackFiles\i386\slnt7554.sys + 2009-12-29 19:44 . 2008-04-14 03:42 188508 c:\windows\ServicePackFiles\i386\slgen.dll + 2009-12-29 19:44 . 2008-04-14 03:42 286792 c:\windows\ServicePackFiles\i386\slextspk.dll + 2009-12-29 19:44 . 2008-04-13 21:08 306176 c:\windows\ServicePackFiles\i386\slbcsp.dll + 2009-12-29 19:44 . 2008-04-14 03:42 135168 c:\windows\ServicePackFiles\i386\shsvcs.dll + 2009-12-29 19:44 . 2008-04-14 03:42 474112 c:\windows\ServicePackFiles\i386\shlwapi.dll + 2009-12-29 19:44 . 2008-04-14 03:42 438272 c:\windows\ServicePackFiles\i386\shimgvw.dll + 2009-12-29 19:45 . 2008-04-13 20:33 549376 c:\windows\ServicePackFiles\i386\shdoclc.dll + 2009-12-29 19:44 . 2008-04-14 03:42 140288 c:\windows\ServicePackFiles\i386\sfc_os.dll + 2009-12-29 19:44 . 2008-04-14 03:42 101376 c:\windows\ServicePackFiles\i386\setupqry.dll + 2009-12-29 19:44 . 2008-04-14 03:42 985088 c:\windows\ServicePackFiles\i386\setupapi.dll + 2009-12-29 19:44 . 2008-04-14 03:42 141312 c:\windows\ServicePackFiles\i386\sessmgr.exe + 2009-12-29 19:44 . 2008-04-14 03:42 108544 c:\windows\ServicePackFiles\i386\services.exe + 2009-12-29 19:45 . 2008-04-14 03:42 221696 c:\windows\ServicePackFiles\i386\seo.dll + 2009-12-29 19:45 . 2008-04-14 03:42 121856 c:\windows\ServicePackFiles\i386\sctasks.exe + 2009-12-29 19:44 . 2008-04-14 03:42 172032 c:\windows\ServicePackFiles\i386\scrrun.dll + 2009-12-29 19:44 . 2008-04-14 03:42 180224 c:\windows\ServicePackFiles\i386\scrobj.dll + 2009-12-29 19:44 . 2008-04-14 03:42 199680 c:\windows\ServicePackFiles\i386\scripta.dll + 2009-12-29 19:44 . 2008-04-14 03:42 215552 c:\windows\ServicePackFiles\i386\script.dll + 2009-12-29 19:44 . 2008-04-14 03:42 192512 c:\windows\ServicePackFiles\i386\schedsvc.dll + 2009-12-29 19:44 . 2008-04-14 03:42 144384 c:\windows\ServicePackFiles\i386\schannel.dll + 2009-12-29 19:45 . 2008-04-14 03:42 314880 c:\windows\ServicePackFiles\i386\scesrv.dll + 2009-12-29 19:45 . 2008-04-14 03:42 181248 c:\windows\ServicePackFiles\i386\scecli.dll + 2009-12-29 19:44 . 2008-04-14 03:42 171008 c:\windows\ServicePackFiles\i386\sccsccp.dll + 2009-12-29 19:44 . 2008-04-13 21:08 169984 c:\windows\ServicePackFiles\i386\sccbase.dll + 2009-12-29 19:44 . 2008-04-14 03:42 159232 c:\windows\ServicePackFiles\i386\sbeio.dll + 2009-12-29 19:44 . 2008-04-14 03:42 270848 c:\windows\ServicePackFiles\i386\sbe.dll + 2009-12-29 19:44 . 2008-04-14 03:42 741376 c:\windows\ServicePackFiles\i386\sapi.dll + 2009-12-29 19:44 . 2008-04-14 03:42 415744 c:\windows\ServicePackFiles\i386\samsrv.dll + 2009-12-29 19:44 . 2008-04-13 20:04 166912 c:\windows\ServicePackFiles\i386\s3gnbm.sys + 2009-12-29 19:44 . 2008-04-14 03:42 397056 c:\windows\ServicePackFiles\i386\s3gnb.dll + 2009-12-29 19:44 . 2008-04-14 03:42 380416 c:\windows\ServicePackFiles\i386\rstrui.exe + 2009-12-29 19:45 . 2008-04-14 03:42 107520 c:\windows\ServicePackFiles\i386\rsnotify.exe + 2009-12-29 19:45 . 2008-04-13 21:07 208384 c:\windows\ServicePackFiles\i386\rsaenh.dll + 2009-12-29 19:44 . 2008-04-14 03:42 399360 c:\windows\ServicePackFiles\i386\rpcss.dll + 2009-12-29 19:44 . 2008-04-14 03:42 584704 c:\windows\ServicePackFiles\i386\rpcrt4.dll + 2009-12-29 19:44 . 2008-04-13 22:25 202624 c:\windows\ServicePackFiles\i386\rmcast.sys + 2009-12-29 19:44 . 2008-04-14 03:42 433664 c:\windows\ServicePackFiles\i386\riched20.dll + 2009-12-29 19:44 . 2008-04-14 03:42 123392 c:\windows\ServicePackFiles\i386\riafres.dll + 2009-12-29 19:44 . 2008-04-14 03:42 290304 c:\windows\ServicePackFiles\i386\rhttpaa.dll + 2009-12-29 19:44 . 2008-04-14 03:42 178176 c:\windows\ServicePackFiles\i386\repdrvfs.dll + 2009-12-29 19:44 . 2008-04-14 03:42 397824 c:\windows\ServicePackFiles\i386\regwizc.dll + 2008-04-14 03:42 . 2008-04-14 03:42 146432 c:\windows\ServicePackFiles\i386\regedit.exe + 2009-12-29 19:44 . 2008-04-14 03:43 139656 c:\windows\ServicePackFiles\i386\rdpwd.sys + 2009-12-29 19:44 . 2008-04-13 22:02 196224 c:\windows\ServicePackFiles\i386\rdpdr.sys + 2009-12-29 19:44 . 2008-04-14 03:42 147968 c:\windows\ServicePackFiles\i386\rdchost.dll + 2009-12-29 19:45 . 2008-04-13 22:58 175744 c:\windows\ServicePackFiles\i386\rdbss.sys + 2009-12-29 19:44 . 2008-04-14 03:42 102400 c:\windows\ServicePackFiles\i386\rcbdyctl.dll + 2009-12-29 19:45 . 2008-04-14 03:42 150016 c:\windows\ServicePackFiles\i386\rastls.dll + 2009-12-29 19:44 . 2008-04-14 03:42 210944 c:\windows\ServicePackFiles\i386\rasppp.dll + 2009-12-29 19:44 . 2008-04-14 03:42 186368 c:\windows\ServicePackFiles\i386\rasmans.dll + 2009-12-29 19:44 . 2008-04-14 03:42 658432 c:\windows\ServicePackFiles\i386\rasdlg.dll + 2009-12-29 19:44 . 2008-04-14 03:42 237056 c:\windows\ServicePackFiles\i386\rasapi32.dll + 2009-12-29 19:44 . 2008-04-14 03:42 409088 c:\windows\ServicePackFiles\i386\qmgr.dll + 2009-12-29 19:45 . 2008-04-13 20:51 733696 c:\windows\ServicePackFiles\i386\qedwipes.dll + 2009-12-29 19:44 . 2008-04-14 03:42 562176 c:\windows\ServicePackFiles\i386\qedit.dll + 2009-12-29 19:45 . 2008-04-14 03:42 386048 c:\windows\ServicePackFiles\i386\qdvd.dll + 2009-12-29 19:44 . 2008-04-14 03:42 279040 c:\windows\ServicePackFiles\i386\qdv.dll + 2009-12-29 19:44 . 2008-04-14 03:42 192512 c:\windows\ServicePackFiles\i386\qcap.dll + 2009-12-29 19:45 . 2008-04-14 03:42 237568 c:\windows\ServicePackFiles\i386\qasf.dll + 2009-12-29 19:45 . 2008-04-14 03:42 291328 c:\windows\ServicePackFiles\i386\qagentrt.dll + 2009-12-29 19:45 . 2008-04-14 03:42 150528 c:\windows\ServicePackFiles\i386\qagent.dll + 2009-12-29 19:44 . 2008-04-14 03:42 159232 c:\windows\ServicePackFiles\i386\ptpusd.dll + 2009-12-29 19:44 . 2008-04-14 03:42 363520 c:\windows\ServicePackFiles\i386\psisdecd.dll + 2009-12-29 19:44 . 2008-04-14 03:42 543232 c:\windows\ServicePackFiles\i386\pscript5.dll + 2009-12-29 19:44 . 2008-04-14 03:42 728576 c:\windows\ServicePackFiles\i386\ps5ui.dll + 2009-12-29 19:44 . 2008-04-14 03:42 237056 c:\windows\ServicePackFiles\i386\provthrd.dll + 2009-12-29 19:44 . 2008-04-14 03:42 109568 c:\windows\ServicePackFiles\i386\progman.exe + 2009-12-29 19:44 . 2008-04-14 03:42 560640 c:\windows\ServicePackFiles\i386\printui.dll + 2009-12-29 19:44 . 2008-04-13 22:49 146048 c:\windows\ServicePackFiles\i386\portcls.sys + 2009-12-29 19:45 . 2008-04-14 03:42 105472 c:\windows\ServicePackFiles\i386\polstore.dll + 2009-12-29 19:44 . 2008-04-14 03:42 412160 c:\windows\ServicePackFiles\i386\pmh.dll + 2009-12-29 19:44 . 2008-04-14 03:42 281088 c:\windows\ServicePackFiles\i386\pinball.exe + 2009-12-29 19:45 . 2008-04-14 03:42 176128 c:\windows\ServicePackFiles\i386\photowiz.dll + 2009-12-29 19:45 . 2008-04-14 03:40 259328 c:\windows\ServicePackFiles\i386\perm3dd.dll + 2009-12-29 19:44 . 2008-04-14 03:40 211584 c:\windows\ServicePackFiles\i386\perm2dll.dll + 2009-12-29 19:44 . 2008-04-14 03:42 284160 c:\windows\ServicePackFiles\i386\pdh.dll + 2009-12-29 19:44 . 2008-04-13 19:42 169984 c:\windows\ServicePackFiles\i386\pcx500.sys + 2009-12-29 19:44 . 2008-04-13 22:06 120192 c:\windows\ServicePackFiles\i386\pcmcia.sys + 2009-12-29 19:44 . 2007-05-15 11:38 207872 c:\windows\ServicePackFiles\i386\pclxl.dll + 2009-12-29 19:44 . 2007-05-15 11:38 288768 c:\windows\ServicePackFiles\i386\pcl4res.dll + 2009-12-29 19:44 . 2008-04-14 03:42 102912 c:\windows\ServicePackFiles\i386\pchshell.dll + 2009-12-29 19:45 . 2008-04-14 03:42 554496 c:\windows\ServicePackFiles\i386\p2psvc.dll + 2009-12-29 19:44 . 2008-04-14 03:42 115712 c:\windows\ServicePackFiles\i386\p2pnetsh.dll + 2009-12-29 19:44 . 2008-04-14 03:42 313856 c:\windows\ServicePackFiles\i386\p2pgraph.dll + 2009-12-29 19:45 . 2008-04-14 03:42 105472 c:\windows\ServicePackFiles\i386\p2pgasvc.dll + 2009-12-29 19:44 . 2008-04-14 03:42 153600 c:\windows\ServicePackFiles\i386\p2p.dll + 2009-12-29 19:44 . 2008-04-13 22:01 230400 c:\windows\ServicePackFiles\i386\osloader.exe + 2009-12-29 19:44 . 2008-04-14 03:42 215552 c:\windows\ServicePackFiles\i386\osk.exe + 2008-04-13 22:02 . 2008-04-13 22:02 166912 c:\windows\ServicePackFiles\i386\oschoice.exe + 2009-12-29 19:44 . 2008-04-14 03:42 713728 c:\windows\ServicePackFiles\i386\opengl32.dll + 2009-12-29 19:44 . 2008-04-14 03:42 144384 c:\windows\ServicePackFiles\i386\onex.dll + 2009-12-29 19:44 . 2008-04-14 03:42 107008 c:\windows\ServicePackFiles\i386\oleprn.dll + 2009-12-29 19:45 . 2008-04-14 03:42 122880 c:\windows\ServicePackFiles\i386\oledlg.dll + 2009-12-29 19:45 . 2008-04-14 03:42 487424 c:\windows\ServicePackFiles\i386\oledb32.dll + 2009-12-29 19:44 . 2008-04-14 03:42 551936 c:\windows\ServicePackFiles\i386\oleaut32.dll + 2009-12-29 19:44 . 2008-04-14 03:42 192000 c:\windows\ServicePackFiles\i386\offfilt.dll + 2009-12-29 19:45 . 2008-04-14 03:42 104448 c:\windows\ServicePackFiles\i386\oeimport.dll + 2009-12-29 19:45 . 2008-04-14 03:42 147456 c:\windows\ServicePackFiles\i386\odbctrac.dll + 2009-12-29 19:44 . 2008-04-14 03:42 278559 c:\windows\ServicePackFiles\i386\odbcjt32.dll + 2009-12-29 19:44 . 2008-04-14 03:42 106496 c:\windows\ServicePackFiles\i386\odbccp32.dll + 2009-12-29 19:45 . 2008-04-14 03:42 135168 c:\windows\ServicePackFiles\i386\odbcconf.dll + 2009-12-29 19:45 . 2008-04-14 03:42 249856 c:\windows\ServicePackFiles\i386\odbc32.dll + 2009-12-29 19:45 . 2008-04-13 22:10 446464 c:\windows\ServicePackFiles\i386\obrb0c0a.dll + 2009-12-29 19:45 . 2008-04-13 22:10 435200 c:\windows\ServicePackFiles\i386\obrb0816.dll + 2009-12-29 19:45 . 2008-04-13 22:10 270336 c:\windows\ServicePackFiles\i386\obrb0804.dll + 2009-12-29 19:44 . 2008-04-13 22:10 408576 c:\windows\ServicePackFiles\i386\obrb0424.dll + 2009-12-29 19:45 . 2008-04-13 22:11 390144 c:\windows\ServicePackFiles\i386\obrb041f.dll + 2009-12-29 19:45 . 2008-04-13 22:10 363008 c:\windows\ServicePackFiles\i386\obrb041d.dll + 2009-12-29 19:44 . 2008-04-13 22:10 405504 c:\windows\ServicePackFiles\i386\obrb041b.dll + 2009-12-29 19:45 . 2008-04-13 22:10 427008 c:\windows\ServicePackFiles\i386\obrb0419.dll + 2009-12-29 19:45 . 2008-04-13 22:10 409600 c:\windows\ServicePackFiles\i386\obrb0416.dll + 2009-12-29 19:45 . 2008-04-13 22:10 391680 c:\windows\ServicePackFiles\i386\obrb0415.dll + 2009-12-29 19:45 . 2008-04-13 22:10 353792 c:\windows\ServicePackFiles\i386\obrb0414.dll + 2009-12-29 19:45 . 2008-04-13 22:10 401920 c:\windows\ServicePackFiles\i386\obrb0413.dll + 2009-12-29 19:45 . 2008-04-13 22:10 306688 c:\windows\ServicePackFiles\i386\obrb0412.dll + 2009-12-29 19:45 . 2008-04-13 22:10 275456 c:\windows\ServicePackFiles\i386\obrb0411.dll + 2009-12-29 19:45 . 2008-04-13 22:10 413696 c:\windows\ServicePackFiles\i386\obrb0410.dll + 2009-12-29 19:45 . 2008-04-13 22:10 434176 c:\windows\ServicePackFiles\i386\obrb040e.dll + 2009-12-29 19:45 . 2008-04-13 22:10 384000 c:\windows\ServicePackFiles\i386\obrb040d.dll + 2009-12-29 19:45 . 2008-04-13 22:10 410624 c:\windows\ServicePackFiles\i386\obrb040c.dll + 2009-12-29 19:45 . 2008-04-13 22:10 405504 c:\windows\ServicePackFiles\i386\obrb040b.dll + 2009-12-29 19:45 . 2008-04-13 22:10 419328 c:\windows\ServicePackFiles\i386\obrb0408.dll + 2009-12-29 19:45 . 2008-04-13 22:10 403456 c:\windows\ServicePackFiles\i386\obrb0407.dll + 2009-12-29 19:45 . 2008-04-13 22:10 418816 c:\windows\ServicePackFiles\i386\obrb0406.dll + 2009-12-29 19:45 . 2008-04-13 22:10 428032 c:\windows\ServicePackFiles\i386\obrb0405.dll + 2009-12-29 19:45 . 2008-04-13 22:10 212480 c:\windows\ServicePackFiles\i386\obrb0404.dll + 2009-12-29 19:45 . 2008-04-13 22:10 393728 c:\windows\ServicePackFiles\i386\obrb0401.dll + 2009-12-29 19:44 . 2008-04-14 03:42 286208 c:\windows\ServicePackFiles\i386\objsel.dll + 2009-12-29 19:45 . 2008-04-14 03:40 966656 c:\windows\ServicePackFiles\i386\obemetal.dll + 2009-12-29 19:44 . 2008-04-14 03:40 229376 c:\windows\ServicePackFiles\i386\obelog.dll + 2009-12-29 19:44 . 2008-04-14 03:42 270336 c:\windows\ServicePackFiles\i386\oakley.dll + 2009-12-29 19:45 . 2008-04-13 22:04 163584 c:\windows\ServicePackFiles\i386\nwrdr.sys + 2009-12-29 19:44 . 2008-04-14 03:42 142336 c:\windows\ServicePackFiles\i386\nwprovau.dll + 2009-12-29 19:44 . 2008-04-14 03:42 420864 c:\windows\ServicePackFiles\i386\ntvdm.exe + 2009-12-29 19:45 . 2008-04-14 03:42 143360 c:\windows\ServicePackFiles\i386\ntshrui.dll + 2009-12-29 19:44 . 2008-04-13 21:53 180360 c:\windows\ServicePackFiles\i386\ntmtlfax.sys + 2009-12-29 19:45 . 2008-04-14 03:42 435200 c:\windows\ServicePackFiles\i386\ntmssvc.dll + 2009-12-29 19:44 . 2008-04-14 03:42 488448 c:\windows\ServicePackFiles\i386\ntmsmgr.dll + 2009-12-29 19:44 . 2008-04-14 03:42 179200 c:\windows\ServicePackFiles\i386\ntmsdba.dll + 2009-12-29 19:44 . 2008-04-14 03:42 118784 c:\windows\ServicePackFiles\i386\ntmarta.dll + 2008-04-13 22:45 . 2008-04-13 22:45 574976 c:\windows\ServicePackFiles\i386\ntfs.sys + 2009-12-29 19:45 . 2008-04-14 03:42 212992 c:\windows\ServicePackFiles\i386\ntevt.dll + 2008-04-14 03:41 . 2008-04-14 03:41 706048 c:\windows\ServicePackFiles\i386\ntdll.dll + 2009-12-29 19:44 . 2008-04-14 03:42 188416 c:\windows\ServicePackFiles\i386\nmwb.dll + 2009-12-29 19:44 . 2008-04-14 03:42 172032 c:\windows\ServicePackFiles\i386\nmoldwb.dll + 2009-12-29 19:45 . 2008-04-14 03:42 151552 c:\windows\ServicePackFiles\i386\nmft.dll + 2009-12-29 19:44 . 2008-04-14 03:42 229376 c:\windows\ServicePackFiles\i386\nmas.dll + 2008-04-13 19:41 . 2008-04-13 19:41 147456 c:\windows\ServicePackFiles\i386\ngen.exe + 2009-12-29 19:44 . 2008-04-14 03:42 247808 c:\windows\ServicePackFiles\i386\newdev.dll + 2009-12-29 19:44 . 2008-04-13 20:05 132695 c:\windows\ServicePackFiles\i386\netwlan5.sys + 2009-12-29 19:44 . 2008-04-14 03:42 245760 c:\windows\ServicePackFiles\i386\netui1.dll + 2008-04-14 03:46 . 2008-04-14 03:46 329728 c:\windows\ServicePackFiles\i386\netsetup.exe + 2009-12-29 19:44 . 2008-04-14 03:42 875008 c:\windows\ServicePackFiles\i386\netplwiz.dll + 2009-12-29 19:45 . 2008-04-14 03:42 198144 c:\windows\ServicePackFiles\i386\netman.dll + 2009-12-29 19:44 . 2008-04-14 03:42 407040 c:\windows\ServicePackFiles\i386\netlogon.dll + 2009-12-29 19:45 . 2008-04-14 03:42 139264 c:\windows\ServicePackFiles\i386\netid.dll + 2009-12-29 19:45 . 2008-04-13 19:39 126976 c:\windows\ServicePackFiles\i386\netfxocm.dll + 2009-12-29 19:44 . 2008-04-14 03:42 111104 c:\windows\ServicePackFiles\i386\netdde.exe + 2009-12-29 19:44 . 2008-04-14 03:42 622592 c:\windows\ServicePackFiles\i386\netcfgx.dll + 2009-12-29 19:44 . 2008-04-13 22:51 162816 c:\windows\ServicePackFiles\i386\netbt.sys + 2009-12-29 19:44 . 2008-04-14 03:42 337408 c:\windows\ServicePackFiles\i386\netapi32.dll + 2009-12-29 19:45 . 2008-04-14 03:42 124928 c:\windows\ServicePackFiles\i386\net1.exe + 2009-12-29 19:45 . 2008-04-13 22:50 182656 c:\windows\ServicePackFiles\i386\ndis.sys + 2009-12-29 19:44 . 2008-04-14 03:42 176640 c:\windows\ServicePackFiles\i386\napstat.exe + 2009-12-29 19:44 . 2008-04-14 03:42 193024 c:\windows\ServicePackFiles\i386\napmontr.dll + 2009-12-29 19:44 . 2008-04-14 03:42 221184 c:\windows\ServicePackFiles\i386\nac.dll + 2009-12-29 19:44 . 2008-04-13 22:47 105344 c:\windows\ServicePackFiles\i386\mup.sys + 2009-12-29 19:44 . 2008-04-13 20:04 452736 c:\windows\ServicePackFiles\i386\mtxparhm.sys + 2009-12-29 19:44 . 2008-04-14 03:42 119808 c:\windows\ServicePackFiles\i386\mtstocom.exe + 2009-12-29 19:44 . 2008-04-13 21:53 126686 c:\windows\ServicePackFiles\i386\mtlmnt5.sys + 2009-12-29 19:44 . 2008-04-14 03:42 701440 c:\windows\ServicePackFiles\i386\msxml2.dll + 2009-12-29 19:44 . 2008-04-14 03:42 506368 c:\windows\ServicePackFiles\i386\msxml.dll + 2009-12-29 19:45 . 2007-04-02 16:22 355104 c:\windows\ServicePackFiles\i386\msxbde40.dll + 2009-12-29 19:44 . 2007-04-02 16:21 621344 c:\windows\ServicePackFiles\i386\mswstr10.dll + 2009-12-29 19:44 . 2008-04-14 03:42 245248 c:\windows\ServicePackFiles\i386\mswsock.dll + 2009-12-29 19:45 . 2008-04-14 03:42 203776 c:\windows\ServicePackFiles\i386\mswebdvd.dll + 2009-12-29 19:44 . 2007-04-02 16:21 838432 c:\windows\ServicePackFiles\i386\mswdat10.dll + 2009-12-29 19:44 . 2008-04-14 03:42 121344 c:\windows\ServicePackFiles\i386\msvfw32.dll + 2009-12-29 19:45 . 2008-04-14 03:42 343040 c:\windows\ServicePackFiles\i386\msvcrt.dll + 2009-12-29 19:44 . 2008-04-14 03:42 413696 c:\windows\ServicePackFiles\i386\msvcp60.dll + 2009-12-29 19:44 . 2008-04-14 03:42 132608 c:\windows\ServicePackFiles\i386\msv1_0.dll + 2009-12-29 19:44 . 2008-04-14 03:42 195072 c:\windows\ServicePackFiles\i386\msutb.dll + 2009-12-29 19:44 . 2008-04-14 03:42 116224 c:\windows\ServicePackFiles\i386\mstlsapi.dll + 2009-12-29 19:44 . 2008-04-14 03:42 532480 c:\windows\ServicePackFiles\i386\mstime.dll + 2009-12-29 19:45 . 2007-04-02 16:21 264992 c:\windows\ServicePackFiles\i386\mstext40.dll + 2009-12-29 19:44 . 2008-04-14 03:42 274944 c:\windows\ServicePackFiles\i386\mstask.dll + 2009-12-29 19:44 . 2008-04-14 03:42 274432 c:\windows\ServicePackFiles\i386\mst120.dll + 2009-12-29 19:44 . 2008-04-14 03:42 155136 c:\windows\ServicePackFiles\i386\mssha.dll + 2009-12-29 19:44 . 2008-04-14 03:42 134656 c:\windows\ServicePackFiles\i386\mssap.dll + 2009-12-29 19:45 . 2007-04-02 16:21 559904 c:\windows\ServicePackFiles\i386\msrepl40.dll + 2009-12-29 19:45 . 2007-04-02 16:20 322336 c:\windows\ServicePackFiles\i386\msrd3x40.dll + 2009-12-29 19:44 . 2007-04-02 16:20 432928 c:\windows\ServicePackFiles\i386\msrd2x40.dll + 2009-12-29 19:44 . 2008-04-14 03:42 146432 c:\windows\ServicePackFiles\i386\msrating.dll + 2009-12-29 19:44 . 2007-04-02 16:20 355104 c:\windows\ServicePackFiles\i386\mspbde40.dll + 2009-12-29 19:44 . 2008-04-14 03:42 343040 c:\windows\ServicePackFiles\i386\mspaint.exe + 2009-12-29 19:44 . 2008-04-14 03:42 143360 c:\windows\ServicePackFiles\i386\msorcl32.dll + 2009-12-29 19:44 . 2008-04-14 03:42 105984 c:\windows\ServicePackFiles\i386\msoert2.dll + 2009-12-29 19:44 . 2008-04-14 03:42 252928 c:\windows\ServicePackFiles\i386\msoeacct.dll + 2009-12-29 19:44 . 2008-04-14 03:42 565248 c:\windows\ServicePackFiles\i386\msobmain.dll + 2009-12-29 19:44 . 2008-04-14 03:42 122368 c:\windows\ServicePackFiles\i386\msobcomm.dll + 2009-12-29 19:44 . 2008-04-14 03:42 290816 c:\windows\ServicePackFiles\i386\msnsspc.dll + 2009-12-29 19:45 . 2008-04-14 03:42 170496 c:\windows\ServicePackFiles\i386\msmqocm.dll + 2009-12-29 19:44 . 2007-04-02 16:19 219936 c:\windows\ServicePackFiles\i386\msltus40.dll + 2009-12-29 19:44 . 2007-04-02 16:19 248608 c:\windows\ServicePackFiles\i386\msjtes40.dll + 2009-12-29 19:44 . 2008-04-14 03:42 102400 c:\windows\ServicePackFiles\i386\msjro.dll + 2009-12-29 19:44 . 2008-04-14 03:42 151583 c:\windows\ServicePackFiles\i386\msjint40.dll + 2009-12-29 19:44 . 2007-04-02 16:19 355112 c:\windows\ServicePackFiles\i386\msjetol1.dll + 2009-12-29 19:44 . 2008-04-14 03:42 376832 c:\windows\ServicePackFiles\i386\msinfo.dll + 2009-12-29 19:44 . 2008-04-14 03:42 159232 c:\windows\ServicePackFiles\i386\msimtf.dll + 2009-12-29 19:44 . 2008-04-13 19:09 884736 c:\windows\ServicePackFiles\i386\msimsg.dll + 2009-12-29 19:44 . 2008-04-14 03:42 271360 c:\windows\ServicePackFiles\i386\msihnd.dll + 2009-12-29 19:44 . 2008-04-14 03:42 248832 c:\windows\ServicePackFiles\i386\msieftp.dll + 2009-12-29 19:44 . 2008-04-14 03:42 449024 c:\windows\ServicePackFiles\i386\mshtmled.dll + 2009-12-29 19:44 . 2008-04-14 03:42 294912 c:\windows\ServicePackFiles\i386\msh263.drv + 2009-12-29 19:44 . 2008-04-14 03:42 188416 c:\windows\ServicePackFiles\i386\msh261.drv + 2008-04-13 21:00 . 2008-04-13 21:00 180224 c:\windows\ServicePackFiles\i386\msgslang.dll + 2009-12-29 19:44 . 2008-04-14 03:42 997376 c:\windows\ServicePackFiles\i386\msgina.dll + 2009-12-29 19:44 . 2008-04-14 03:42 539136 c:\windows\ServicePackFiles\i386\msftedit.dll + 2009-12-29 19:44 . 2007-04-02 16:18 326432 c:\windows\ServicePackFiles\i386\msexcl40.dll + 2009-12-29 19:44 . 2007-04-02 16:17 518944 c:\windows\ServicePackFiles\i386\msexch40.dll + 2009-12-29 19:44 . 2008-04-14 03:42 161792 c:\windows\ServicePackFiles\i386\msdtcuiu.dll + 2009-12-29 19:45 . 2008-04-14 03:42 956928 c:\windows\ServicePackFiles\i386\msdtctm.dll + 2009-12-29 19:45 . 2008-04-14 03:42 427008 c:\windows\ServicePackFiles\i386\msdtcprx.dll + 2009-12-29 19:44 . 2008-04-14 03:42 315392 c:\windows\ServicePackFiles\i386\msdasql.dll + 2009-12-29 19:44 . 2008-04-14 03:42 151552 c:\windows\ServicePackFiles\i386\msdart.dll + 2009-12-29 19:45 . 2008-04-14 03:42 118784 c:\windows\ServicePackFiles\i386\msdarem.dll + 2009-12-29 19:44 . 2008-04-14 03:42 204800 c:\windows\ServicePackFiles\i386\msdaps.dll + 2009-12-29 19:44 . 2008-04-14 03:42 200704 c:\windows\ServicePackFiles\i386\msdaprst.dll + 2009-12-29 19:44 . 2008-04-14 03:42 233472 c:\windows\ServicePackFiles\i386\msdaora.dll + 2008-04-14 03:42 . 2008-04-14 03:42 532480 c:\windows\ServicePackFiles\i386\msdaipp.dll + 2009-12-29 19:44 . 2008-04-14 03:42 118784 c:\windows\ServicePackFiles\i386\msdadiag.dll + 2009-12-29 19:44 . 2008-04-14 03:42 297984 c:\windows\ServicePackFiles\i386\msctf.dll + 2008-04-13 19:40 . 2008-04-13 19:40 143360 c:\windows\ServicePackFiles\i386\mscorrc.kor.dll + 2008-04-13 19:40 . 2008-04-13 19:40 143360 c:\windows\ServicePackFiles\i386\mscorrc.ja.dll + 2008-04-13 19:40 . 2008-04-13 19:40 167936 c:\windows\ServicePackFiles\i386\mscorrc.it.dll + 2008-04-13 19:40 . 2008-04-13 19:40 167936 c:\windows\ServicePackFiles\i386\mscorrc.ger.dll + 2008-04-13 19:40 . 2008-04-13 19:40 172032 c:\windows\ServicePackFiles\i386\mscorrc.fr.dll + 2008-04-13 19:40 . 2008-04-13 19:40 172032 c:\windows\ServicePackFiles\i386\mscorrc.es.dll + 2008-04-13 19:40 . 2008-04-13 19:40 143360 c:\windows\ServicePackFiles\i386\mscorrc.dll + 2008-04-13 19:40 . 2008-04-13 19:40 143360 c:\windows\ServicePackFiles\i386\mscorrc.cht.dll + 2008-04-13 19:40 . 2008-04-13 19:40 143360 c:\windows\ServicePackFiles\i386\mscorrc.chs.dll + 2007-06-27 16:25 . 2007-06-27 16:25 303104 c:\windows\ServicePackFiles\i386\mscorjit.dll + 2007-06-27 16:25 . 2007-06-27 16:25 131072 c:\windows\ServicePackFiles\i386\mscoree.dll + 2008-04-13 19:40 . 2008-04-13 19:40 221184 c:\windows\ServicePackFiles\i386\mscordbi.dll + 2009-12-29 19:44 . 2007-04-02 23:31 116288 c:\windows\ServicePackFiles\i386\msconv97.dll + 2009-12-29 19:44 . 2008-04-14 03:42 169984 c:\windows\ServicePackFiles\i386\msconfig.exe + 2009-12-29 19:45 . 2008-04-14 03:42 220160 c:\windows\ServicePackFiles\i386\mscandui.dll + 2009-12-29 19:44 . 2008-04-14 03:42 200704 c:\windows\ServicePackFiles\i386\msadox.dll + 2009-12-29 19:44 . 2008-04-14 03:42 180224 c:\windows\ServicePackFiles\i386\msadomd.dll + 2009-12-29 19:44 . 2008-04-14 03:42 536576 c:\windows\ServicePackFiles\i386\msado15.dll + 2009-12-29 19:44 . 2008-04-14 03:42 155648 c:\windows\ServicePackFiles\i386\msadds.dll + 2009-12-29 19:44 . 2008-04-14 03:42 143360 c:\windows\ServicePackFiles\i386\msadco.dll + 2009-12-29 19:44 . 2008-04-14 03:42 331776 c:\windows\ServicePackFiles\i386\msadce.dll + 2009-12-29 19:45 . 2008-04-13 22:47 456576 c:\windows\ServicePackFiles\i386\mrxsmb.sys + 2009-12-29 19:44 . 2008-04-13 22:02 180608 c:\windows\ServicePackFiles\i386\mrxdav.sys + 2009-12-29 19:45 . 2008-04-14 03:42 471552 c:\windows\ServicePackFiles\i386\mqutil.dll + 2009-12-29 19:45 . 2008-04-14 03:42 187392 c:\windows\ServicePackFiles\i386\mqtrig.dll + 2009-12-29 19:45 . 2008-04-14 03:42 117248 c:\windows\ServicePackFiles\i386\mqtgsvc.exe + 2009-12-29 19:45 . 2008-04-14 03:42 517632 c:\windows\ServicePackFiles\i386\mqsnap.dll + 2009-12-29 19:45 . 2008-04-14 03:41 123904 c:\windows\ServicePackFiles\i386\mqrtdep.dll + 2009-12-29 19:45 . 2008-04-14 03:41 177152 c:\windows\ServicePackFiles\i386\mqrt.dll + 2009-12-29 19:45 . 2008-04-14 03:41 663040 c:\windows\ServicePackFiles\i386\mqqm.dll + 2009-12-29 19:45 . 2008-04-14 03:41 225280 c:\windows\ServicePackFiles\i386\mqoa.dll + 2009-12-29 19:45 . 2008-04-14 03:41 138240 c:\windows\ServicePackFiles\i386\mqad.dll + 2009-12-29 19:45 . 2008-04-14 03:42 123392 c:\windows\ServicePackFiles\i386\mplay32.exe + 2009-12-29 19:44 . 2008-04-13 20:15 216064 c:\windows\ServicePackFiles\i386\moricons.dll + 2009-12-29 19:44 . 2008-04-14 03:41 123904 c:\windows\ServicePackFiles\i386\mofd.dll + 2009-12-29 19:44 . 2008-04-14 03:41 153600 c:\windows\ServicePackFiles\i386\modemui.dll + 2009-12-29 19:44 . 2008-04-14 03:42 143360 c:\windows\ServicePackFiles\i386\mobsync.exe + 2009-12-29 19:44 . 2008-04-14 03:41 207360 c:\windows\ServicePackFiles\i386\mobsync.dll + 2009-12-29 19:44 . 2008-04-14 03:41 106496 c:\windows\ServicePackFiles\i386\mmcfxc.dll + 2009-12-29 19:44 . 2008-04-14 03:41 397312 c:\windows\ServicePackFiles\i386\mmcex.dll + 2009-12-29 19:44 . 2008-04-14 03:41 163328 c:\windows\ServicePackFiles\i386\mmcbase.dll + 2009-12-29 19:45 . 2008-04-14 03:41 184320 c:\windows\ServicePackFiles\i386\mmc30.dll + 2009-12-29 19:44 . 2008-04-14 03:41 586240 c:\windows\ServicePackFiles\i386\mlang.dll + 2009-12-29 19:44 . 2008-04-14 03:42 241152 c:\windows\ServicePackFiles\i386\migwiza.exe + 2009-12-29 19:44 . 2008-04-14 03:42 245248 c:\windows\ServicePackFiles\i386\migwiz.exe + 2009-12-29 19:44 . 2008-04-14 03:42 103936 c:\windows\ServicePackFiles\i386\migload.exe + 2009-12-29 19:44 . 2008-04-14 03:41 261120 c:\windows\ServicePackFiles\i386\migisma.dll + 2009-12-29 19:44 . 2008-04-14 03:41 274432 c:\windows\ServicePackFiles\i386\migism.dll + 2007-06-27 16:24 . 2007-06-27 16:24 286720 c:\windows\ServicePackFiles\i386\microsoft.visualbasic.dll + 2007-06-27 16:24 . 2007-06-27 16:24 712704 c:\windows\ServicePackFiles\i386\microsoft.jscript.dll + 2009-12-29 19:44 . 2007-04-03 06:44 981760 c:\windows\ServicePackFiles\i386\mfc42u.dll + 2009-12-29 19:44 . 2008-04-14 03:41 927504 c:\windows\ServicePackFiles\i386\mfc40u.dll + 2009-12-29 19:45 . 2008-04-14 03:41 118272 c:\windows\ServicePackFiles\i386\mdminst.dll + 2009-12-29 19:44 . 2008-04-13 21:53 420992 c:\windows\ServicePackFiles\i386\ltmdmntt.sys + 2009-12-29 19:45 . 2008-04-13 21:53 606684 c:\windows\ServicePackFiles\i386\ltmdmnt.sys + 2009-12-29 19:44 . 2008-04-14 03:41 728064 c:\windows\ServicePackFiles\i386\lsasrv.dll + 2009-12-29 19:44 . 2008-04-14 03:42 514560 c:\windows\ServicePackFiles\i386\logonui.exe + 2009-12-29 19:45 . 2008-04-14 03:42 220672 c:\windows\ServicePackFiles\i386\logon.scr + 2009-12-29 19:44 . 2008-04-14 03:41 343040 c:\windows\ServicePackFiles\i386\localspl.dll + 2009-12-29 19:44 . 2008-04-14 03:41 221696 c:\windows\ServicePackFiles\i386\localsec.dll + 2009-12-29 19:45 . 2008-04-14 03:41 399872 c:\windows\ServicePackFiles\i386\lmrt.dll + 2008-04-14 03:41 . 2008-04-14 03:41 423936 c:\windows\ServicePackFiles\i386\licdll.dll + 2009-12-29 19:44 . 2008-04-14 03:42 677888 c:\windows\ServicePackFiles\i386\lhmstsc.exe + 2009-12-29 19:45 . 2008-04-14 03:41 426041 c:\windows\ServicePackFiles\i386\lang\voicepad.dll + 2009-12-29 19:45 . 2008-04-13 20:13 455168 c:\windows\ServicePackFiles\i386\lang\tintsetp.exe + 2009-12-29 19:45 . 2008-04-14 03:40 175104 c:\windows\ServicePackFiles\i386\lang\pintlcsa.dll + 2009-12-29 19:45 . 2008-04-14 03:39 315455 c:\windows\ServicePackFiles\i386\lang\imskf.dll + 2009-12-29 19:45 . 2008-04-14 03:39 102456 c:\windows\ServicePackFiles\i386\lang\imlang.dll + 2009-12-29 19:45 . 2008-04-14 03:39 274489 c:\windows\ServicePackFiles\i386\lang\imjputyc.dll + 2009-12-29 19:45 . 2008-04-13 20:14 262200 c:\windows\ServicePackFiles\i386\lang\imjputy.exe + 2009-12-29 19:45 . 2008-04-13 20:14 233527 c:\windows\ServicePackFiles\i386\lang\imjprw.exe + 2009-12-29 19:45 . 2008-04-13 20:13 208952 c:\windows\ServicePackFiles\i386\lang\imjpmig.exe + 2009-12-29 19:45 . 2008-04-13 20:13 196665 c:\windows\ServicePackFiles\i386\lang\imjpinst.exe + 2009-12-29 19:45 . 2008-04-13 20:13 155705 c:\windows\ServicePackFiles\i386\lang\imjpdsvr.exe + 2009-12-29 19:45 . 2008-04-13 20:13 307257 c:\windows\ServicePackFiles\i386\lang\imjpdct.exe + 2009-12-29 19:45 . 2008-04-14 03:39 716856 c:\windows\ServicePackFiles\i386\lang\imjpcus.dll + 2009-12-29 19:45 . 2008-04-14 03:39 368696 c:\windows\ServicePackFiles\i386\lang\imjpcic.dll + 2009-12-29 19:45 . 2008-04-14 03:39 811064 c:\windows\ServicePackFiles\i386\lang\imjp81k.dll + 2009-12-29 19:45 . 2008-04-14 03:39 106496 c:\windows\ServicePackFiles\i386\lang\imekrcic.dll + 2009-12-29 19:45 . 2008-04-13 20:13 480256 c:\windows\ServicePackFiles\i386\lang\cintsetp.exe + 2009-12-29 19:45 . 2008-04-14 03:39 198656 c:\windows\ServicePackFiles\i386\lang\cintime.dll + 2009-12-29 19:45 . 2008-04-14 03:39 173568 c:\windows\ServicePackFiles\i386\lang\chtskf.dll + 2009-12-29 19:44 . 2008-04-13 22:46 141056 c:\windows\ServicePackFiles\i386\ks.sys + 2009-12-29 19:44 . 2008-04-14 03:39 102912 c:\windows\ServicePackFiles\i386\kprodpc.dll + 2009-12-29 19:44 . 2008-04-14 03:39 102912 c:\windows\ServicePackFiles\i386\kperdpc.dll + 2009-12-29 19:44 . 2008-04-14 03:39 102912 c:\windows\ServicePackFiles\i386\knprodpc.dll + 2009-12-29 19:44 . 2008-04-14 03:39 102912 c:\windows\ServicePackFiles\i386\knperdpc.dll + 2009-12-29 19:44 . 2008-04-13 22:15 172416 c:\windows\ServicePackFiles\i386\kmixer.sys + 2009-12-29 19:44 . 2008-04-14 03:41 150528 c:\windows\ServicePackFiles\i386\keymgr.dll + 2009-12-29 19:44 . 2008-04-14 03:41 989696 c:\windows\ServicePackFiles\i386\kernel32.dll + 2009-12-29 19:44 . 2008-04-14 03:41 299520 c:\windows\ServicePackFiles\i386\kerberos.dll + 2009-12-29 19:44 . 2008-04-14 03:41 253952 c:\windows\ServicePackFiles\i386\kdsusd.dll + 2009-12-29 19:45 . 2008-04-14 03:41 184832 c:\windows\ServicePackFiles\i386\kdcsvc.dll + 2009-12-29 19:44 . 2008-04-14 03:41 512000 c:\windows\ServicePackFiles\i386\jscript.dll + 2009-12-29 19:44 . 2008-04-14 03:41 163840 c:\windows\ServicePackFiles\i386\jgdw400.dll + 2009-12-29 19:44 . 2008-04-14 03:41 191488 c:\windows\ServicePackFiles\i386\iuengine.dll + 2009-12-29 19:44 . 2008-04-14 03:41 138240 c:\windows\ServicePackFiles\i386\itss.dll + 2009-12-29 19:44 . 2008-04-14 03:41 155136 c:\windows\ServicePackFiles\i386\itircl.dll + 2009-12-29 19:44 . 2008-04-14 03:40 105984 c:\windows\ServicePackFiles\i386\isendpc.dll + 2009-12-29 19:44 . 2008-04-14 03:40 105984 c:\windows\ServicePackFiles\i386\isdpc.dll + 2009-12-29 19:45 . 2008-04-14 03:42 151552 c:\windows\ServicePackFiles\i386\irftp.exe + 2009-12-29 19:44 . 2008-04-14 03:41 183808 c:\windows\ServicePackFiles\i386\ir50_qcx.dll + 2009-12-29 19:44 . 2008-04-14 03:41 200192 c:\windows\ServicePackFiles\i386\ir50_qc.dll + 2009-12-29 19:44 . 2008-04-14 03:41 755200 c:\windows\ServicePackFiles\i386\ir50_32.dll + 2009-12-29 19:44 . 2008-04-14 03:41 338432 c:\windows\ServicePackFiles\i386\ir41_qcx.dll + 2009-12-29 19:45 . 2008-04-14 03:41 120320 c:\windows\ServicePackFiles\i386\ir41_qc.dll + 2009-12-29 19:45 . 2008-04-14 03:41 384000 c:\windows\ServicePackFiles\i386\ipsmsnap.dll + 2009-12-29 19:44 . 2008-04-14 03:40 102912 c:\windows\ServicePackFiles\i386\ipseldpc.dll + 2009-12-29 19:44 . 2008-04-14 03:41 183808 c:\windows\ServicePackFiles\i386\ipsecsvc.dll + 2009-12-29 19:44 . 2008-04-14 03:41 349696 c:\windows\ServicePackFiles\i386\ipsecsnp.dll + 2009-12-29 19:44 . 2008-04-14 03:41 177152 c:\windows\ServicePackFiles\i386\iprtrmgr.dll + 2009-12-29 19:44 . 2008-04-14 03:41 330752 c:\windows\ServicePackFiles\i386\ippromon.dll + 2009-12-29 19:44 . 2008-04-14 03:41 331264 c:\windows\ServicePackFiles\i386\ipnathlp.dll + 2009-12-29 19:44 . 2008-04-13 22:27 152832 c:\windows\ServicePackFiles\i386\ipnat.sys + 2009-12-29 19:44 . 2008-04-14 03:41 161280 c:\windows\ServicePackFiles\i386\ipmontr.dll + 2009-12-29 19:44 . 2008-04-14 03:39 103424 c:\windows\ServicePackFiles\i386\ipevldpc.dll + 2009-12-29 19:44 . 2008-04-14 03:41 123392 c:\windows\ServicePackFiles\i386\input.dll + 2009-12-29 19:45 . 2008-04-14 03:41 147456 c:\windows\ServicePackFiles\i386\initpki.dll + 2009-12-29 19:45 . 2008-04-14 03:41 257024 c:\windows\ServicePackFiles\i386\infocomm.dll + 2009-12-29 19:45 . 2008-04-14 03:41 829440 c:\windows\ServicePackFiles\i386\inetmgr.dll + 2009-12-29 19:44 . 2008-04-14 03:41 691712 c:\windows\ServicePackFiles\i386\inetcomm.dll + 2009-12-29 19:44 . 2008-04-14 03:41 274432 c:\windows\ServicePackFiles\i386\inetcfg.dll + 2009-12-29 19:44 . 2008-04-14 03:41 123392 c:\windows\ServicePackFiles\i386\imsinsnt.dll + 2009-12-29 19:44 . 2008-04-14 03:41 110080 c:\windows\ServicePackFiles\i386\imm32.dll + 2009-12-29 19:44 . 2008-04-14 03:42 150528 c:\windows\ServicePackFiles\i386\imapi.exe + 2008-04-14 03:41 . 2008-04-14 03:41 144384 c:\windows\ServicePackFiles\i386\imagehlp.dll + 2008-04-13 19:40 . 2008-04-13 19:40 184320 c:\windows\ServicePackFiles\i386\ilasm.exe + 2009-12-29 19:45 . 2008-04-14 03:41 133632 c:\windows\ServicePackFiles\i386\iisrtl.dll + 2009-12-29 19:45 . 2008-04-14 03:41 145408 c:\windows\ServicePackFiles\i386\iische51.dll + 2009-12-29 19:44 . 2008-04-14 03:41 505344 c:\windows\ServicePackFiles\i386\iis.dll + 2009-12-29 19:44 . 2008-04-14 03:41 135680 c:\windows\ServicePackFiles\i386\ifmon.dll + 2009-12-29 19:44 . 2008-04-14 03:42 114688 c:\windows\ServicePackFiles\i386\iexpress.exe + 2009-12-29 19:44 . 2008-04-14 03:41 251904 c:\windows\ServicePackFiles\i386\iepeers.dll + 2009-12-29 19:44 . 2008-04-14 03:41 323584 c:\windows\ServicePackFiles\i386\iedkcs32.dll + 2009-12-29 19:44 . 2008-04-14 03:41 216576 c:\windows\ServicePackFiles\i386\ieaksie.dll + 2009-12-29 19:44 . 2008-04-14 03:41 143360 c:\windows\ServicePackFiles\i386\ieakeng.dll + 2009-12-29 19:44 . 2008-04-14 03:41 120832 c:\windows\ServicePackFiles\i386\idq.dll + 2009-12-29 19:44 . 2008-04-14 03:41 172032 c:\windows\ServicePackFiles\i386\icwhelp.dll + 2009-12-29 19:44 . 2008-04-14 03:42 214528 c:\windows\ServicePackFiles\i386\icwconn1.exe + 2009-12-29 19:44 . 2008-04-14 03:41 254976 c:\windows\ServicePackFiles\i386\icm32.dll + 2009-12-29 19:44 . 2008-04-14 03:41 119808 c:\windows\ServicePackFiles\i386\iasrad.dll + 2009-12-29 19:44 . 2008-04-13 20:04 161020 c:\windows\ServicePackFiles\i386\i81xnt5.sys + 2009-12-29 19:45 . 2008-04-14 03:41 702845 c:\windows\ServicePackFiles\i386\i81xdnt5.dll + 2009-12-29 19:44 . 2008-04-14 03:41 347136 c:\windows\ServicePackFiles\i386\hypertrm.dll + 2009-12-29 19:45 . 2008-04-14 03:41 268288 c:\windows\ServicePackFiles\i386\httpext.dll + 2009-12-29 19:44 . 2008-04-13 22:23 264832 c:\windows\ServicePackFiles\i386\http.sys + 2009-12-29 19:44 . 2008-04-13 21:53 685056 c:\windows\ServicePackFiles\i386\hsfcxts2.sys + 2009-12-29 19:44 . 2008-04-13 21:53 220032 c:\windows\ServicePackFiles\i386\hsfbs2s2.sys + 2009-12-29 19:44 . 2008-04-14 03:41 144896 c:\windows\ServicePackFiles\i386\hotplug.dll + 2009-12-29 19:45 . 2008-04-14 03:41 330752 c:\windows\ServicePackFiles\i386\hnetwiz.dll + 2009-12-29 19:44 . 2008-04-14 03:41 344064 c:\windows\ServicePackFiles\i386\hnetcfg.dll + 2009-12-29 19:44 . 2008-04-14 03:42 744448 c:\windows\ServicePackFiles\i386\helpsvc.exe + 2009-12-29 19:44 . 2008-04-14 03:42 769024 c:\windows\ServicePackFiles\i386\helpctr.exe + 2009-12-29 19:44 . 2008-04-13 20:06 144384 c:\windows\ServicePackFiles\i386\hdaudbus.sys + 2009-12-29 19:44 . 2008-04-13 22:01 152576 c:\windows\ServicePackFiles\i386\halmps.dll + 2009-12-29 19:45 . 2008-04-13 22:01 134400 c:\windows\ServicePackFiles\i386\halmacpi.dll + 2009-12-29 19:44 . 2008-04-13 22:01 150528 c:\windows\ServicePackFiles\i386\halapic.dll + 2009-12-29 19:44 . 2008-04-13 22:01 131840 c:\windows\ServicePackFiles\i386\halaacpi.dll + 2009-12-29 19:44 . 2008-04-13 22:01 105344 c:\windows\ServicePackFiles\i386\hal.dll + 2009-12-29 19:44 . 2008-04-14 03:41 614912 c:\windows\ServicePackFiles\i386\h323msp.dll + 2009-12-29 19:44 . 2008-04-14 03:41 115200 c:\windows\ServicePackFiles\i386\guitrna.dll + 2009-12-29 19:45 . 2008-04-14 03:41 133120 c:\windows\ServicePackFiles\i386\guitrn.dll + 2009-12-29 19:45 . 2008-04-14 03:41 199680 c:\windows\ServicePackFiles\i386\gptext.dll + 2009-12-29 19:45 . 2008-04-14 03:42 120832 c:\windows\ServicePackFiles\i386\gprslt.exe + 2009-12-29 19:44 . 2008-04-13 21:08 101888 c:\windows\ServicePackFiles\i386\gpkcsp.dll + 2009-12-29 19:45 . 2008-04-14 03:39 566784 c:\windows\ServicePackFiles\i386\gpedit.dll + 2009-12-29 19:44 . 2008-04-14 03:41 122880 c:\windows\ServicePackFiles\i386\glu32.dll + 2009-12-29 19:44 . 2008-04-14 03:41 285184 c:\windows\ServicePackFiles\i386\gdi32.dll + 2009-12-29 19:45 . 2008-04-14 03:41 400384 c:\windows\ServicePackFiles\i386\fxsxp32.dll + 2009-12-29 19:44 . 2008-04-14 03:41 192512 c:\windows\ServicePackFiles\i386\fxswzrd.dll + 2009-12-29 19:44 . 2008-04-14 03:41 154112 c:\windows\ServicePackFiles\i386\fxsui.dll + 2009-12-29 19:44 . 2008-04-14 03:41 397312 c:\windows\ServicePackFiles\i386\fxstiff.dll + 2009-12-29 19:44 . 2008-04-14 03:41 246272 c:\windows\ServicePackFiles\i386\fxst30.dll + 2009-12-29 19:45 . 2008-04-14 03:42 267776 c:\windows\ServicePackFiles\i386\fxssvc.exe + 2009-12-29 19:44 . 2008-04-14 03:41 562176 c:\windows\ServicePackFiles\i386\fxsst.dll + 2009-12-29 19:44 . 2008-04-14 03:41 132608 c:\windows\ServicePackFiles\i386\fxsocm.dll + 2009-12-29 19:44 . 2008-04-14 03:42 229376 c:\windows\ServicePackFiles\i386\fxscover.exe + 2009-12-29 19:45 . 2008-04-14 03:41 285184 c:\windows\ServicePackFiles\i386\fxscomex.dll + 2009-12-29 19:44 . 2008-04-14 03:42 142848 c:\windows\ServicePackFiles\i386\fxsclnt.exe + 2009-12-29 19:44 . 2008-04-14 03:41 451584 c:\windows\ServicePackFiles\i386\fxsapi.dll + 2007-06-27 16:24 . 2007-06-27 16:24 233472 c:\windows\ServicePackFiles\i386\fusion.dll + 2009-12-29 19:45 . 2008-04-14 03:41 125952 c:\windows\ServicePackFiles\i386\ftpsv251.dll + 2009-12-29 19:44 . 2008-04-14 03:42 193024 c:\windows\ServicePackFiles\i386\fsquirt.exe + 2009-12-29 19:44 . 2008-04-14 03:41 185344 c:\windows\ServicePackFiles\i386\framedyn.dll + 2007-04-02 20:06 . 2007-04-02 20:06 208896 c:\windows\ServicePackFiles\i386\fpmmcsat.dll + 2008-04-14 03:41 . 2008-04-14 03:41 598071 c:\windows\ServicePackFiles\i386\fpmmc.dll + 2008-04-14 03:42 . 2008-04-14 03:42 188494 c:\windows\ServicePackFiles\i386\fpcount.exe + 2008-04-14 03:42 . 2008-04-14 03:42 109840 c:\windows\ServicePackFiles\i386\fp98swin.exe + 2008-04-14 03:41 . 2008-04-14 03:41 876653 c:\windows\ServicePackFiles\i386\fp4awel.dll + 2008-04-14 03:41 . 2008-04-14 03:41 618605 c:\windows\ServicePackFiles\i386\fp4autl.dll + 2008-04-14 03:41 . 2008-04-14 03:41 102509 c:\windows\ServicePackFiles\i386\fp4atxt.dll + 2008-04-14 03:41 . 2008-04-14 03:41 147513 c:\windows\ServicePackFiles\i386\fp4apws.dll + 2008-04-14 03:41 . 2008-04-14 03:41 184435 c:\windows\ServicePackFiles\i386\fp4amsft.dll + 2009-12-29 19:44 . 2008-04-14 03:41 382976 c:\windows\ServicePackFiles\i386\fontext.dll + 2009-12-29 19:44 . 2008-04-13 22:03 129792 c:\windows\ServicePackFiles\i386\fltmgr.sys + 2009-12-29 19:44 . 2008-04-14 03:41 337920 c:\windows\ServicePackFiles\i386\filemgmt.dll + 2009-12-29 19:45 . 2008-04-14 03:41 124928 c:\windows\ServicePackFiles\i386\fde.dll + 2009-12-29 19:44 . 2008-04-14 03:41 472064 c:\windows\ServicePackFiles\i386\fastprox.dll + 2009-12-29 19:44 . 2008-04-13 22:44 143744 c:\windows\ServicePackFiles\i386\fastfat.sys + 2008-04-14 03:41 . 2008-04-14 03:41 125952 c:\windows\ServicePackFiles\i386\exts.dll + 2009-12-29 19:44 . 2008-04-14 03:41 380445 c:\windows\ServicePackFiles\i386\expsrv.dll + 2009-12-29 19:44 . 2008-04-14 03:41 101888 c:\windows\ServicePackFiles\i386\evntagnt.dll + 2007-06-27 16:24 . 2007-06-27 16:24 798720 c:\windows\ServicePackFiles\i386\eventlogmessages.dll + 2009-12-29 19:44 . 2008-04-14 03:42 193024 c:\windows\ServicePackFiles\i386\eudcedit.exe + 2009-12-29 19:45 . 2008-04-13 20:06 137088 c:\windows\ServicePackFiles\i386\essm2e.sys + 2009-12-29 19:44 . 2008-04-14 03:41 247808 c:\windows\ServicePackFiles\i386\esscli.dll + 2009-12-29 19:44 . 2008-04-14 03:41 246272 c:\windows\ServicePackFiles\i386\es.dll + 2009-12-29 19:44 . 2007-04-02 17:57 120320 c:\windows\ServicePackFiles\i386\epcl5res.dll + 2009-12-29 19:45 . 2008-04-14 03:41 186880 c:\windows\ServicePackFiles\i386\encdec.dll + 2009-12-29 19:44 . 2008-04-14 03:41 183296 c:\windows\ServicePackFiles\i386\els.dll + 2009-12-29 19:45 . 2008-04-14 03:41 180224 c:\windows\ServicePackFiles\i386\eapphost.dll + 2009-12-29 19:44 . 2008-04-14 03:41 126976 c:\windows\ServicePackFiles\i386\eappcfg.dll + 2009-12-29 19:44 . 2008-04-14 03:41 184832 c:\windows\ServicePackFiles\i386\eapp3hst.dll + 2009-12-29 19:45 . 2008-04-14 03:41 205312 c:\windows\ServicePackFiles\i386\dxtrans.dll + 2009-12-29 19:44 . 2008-04-14 03:41 357888 c:\windows\ServicePackFiles\i386\dxtmsft.dll + 2009-12-29 19:44 . 2008-04-14 03:41 619008 c:\windows\ServicePackFiles\i386\dx7vb.dll + 2009-12-29 19:44 . 2008-04-14 03:42 180224 c:\windows\ServicePackFiles\i386\dwwin.exe + 2009-12-29 19:44 . 2008-04-14 03:41 304128 c:\windows\ServicePackFiles\i386\duser.dll + 2009-12-29 19:44 . 2008-04-14 03:41 113152 c:\windows\ServicePackFiles\i386\dsuiext.dll + 2009-12-29 19:44 . 2008-04-13 21:07 138752 c:\windows\ServicePackFiles\i386\dssenh.dll + 2009-12-29 19:45 . 2008-04-14 03:41 239104 c:\windows\ServicePackFiles\i386\dsquery.dll + 2009-12-29 19:44 . 2008-04-14 03:41 142848 c:\windows\ServicePackFiles\i386\dsprop.dll + 2009-12-29 19:44 . 2008-04-14 03:41 367616 c:\windows\ServicePackFiles\i386\dsound.dll + 2009-12-29 19:45 . 2008-04-14 03:41 155648 c:\windows\ServicePackFiles\i386\dskquoui.dll + 2009-12-29 19:44 . 2008-04-14 03:41 181248 c:\windows\ServicePackFiles\i386\dsdmo.dll + 2009-12-29 19:44 . 2008-04-14 03:41 116736 c:\windows\ServicePackFiles\i386\dpvvox.dll + 2009-12-29 19:44 . 2008-04-14 03:41 212480 c:\windows\ServicePackFiles\i386\dpvoice.dll + 2009-12-29 19:44 . 2008-04-14 03:41 375296 c:\windows\ServicePackFiles\i386\dpnet.dll + 2009-12-29 19:44 . 2008-04-14 03:41 229888 c:\windows\ServicePackFiles\i386\dplayx.dll + 2009-12-29 19:45 . 2008-04-14 03:41 102912 c:\windows\ServicePackFiles\i386\dpcdll.dll + 2009-12-29 19:44 . 2008-04-13 22:09 206976 c:\windows\ServicePackFiles\i386\dot4.sys + 2009-12-29 19:45 . 2008-04-14 03:41 650752 c:\windows\ServicePackFiles\i386\dot3ui.dll + 2009-12-29 19:44 . 2008-04-14 03:41 132096 c:\windows\ServicePackFiles\i386\dot3svc.dll + 2009-12-29 19:44 . 2008-04-14 03:41 147968 c:\windows\ServicePackFiles\i386\dnsapi.dll + 2009-12-29 19:44 . 2008-04-14 03:41 104448 c:\windows\ServicePackFiles\i386\dmusic.dll + 2009-12-29 19:44 . 2008-04-14 03:41 103424 c:\windows\ServicePackFiles\i386\dmsynth.dll + 2009-12-29 19:44 . 2008-04-14 03:41 105984 c:\windows\ServicePackFiles\i386\dmstyle.dll + 2009-12-29 19:45 . 2008-04-13 22:14 153344 c:\windows\ServicePackFiles\i386\dmio.sys + 2009-12-29 19:44 . 2008-04-14 03:41 181248 c:\windows\ServicePackFiles\i386\dmime.dll + 2009-12-29 19:44 . 2008-04-14 03:41 200704 c:\windows\ServicePackFiles\i386\dmdskmgr.dll + 2009-12-29 19:44 . 2008-04-14 03:41 285184 c:\windows\ServicePackFiles\i386\dmdlgs.dll + 2009-12-29 19:44 . 2008-04-13 22:14 799744 c:\windows\ServicePackFiles\i386\dmboot.sys + 2009-12-29 19:44 . 2008-04-14 03:42 224768 c:\windows\ServicePackFiles\i386\dmadmin.exe + 2009-12-29 19:44 . 2008-04-14 03:42 163840 c:\windows\ServicePackFiles\i386\diskpart.exe + 2009-12-29 19:44 . 2008-04-14 03:41 181760 c:\windows\ServicePackFiles\i386\dinput8.dll + 2009-12-29 19:44 . 2008-04-14 03:41 158720 c:\windows\ServicePackFiles\i386\dinput.dll + 2009-12-29 19:45 . 2007-04-02 22:04 366080 c:\windows\ServicePackFiles\i386\digreqex.msi + 2009-12-29 19:45 . 2007-04-02 22:04 863232 c:\windows\ServicePackFiles\i386\digopt.msi + 2009-12-29 19:44 . 2007-04-02 22:04 884712 c:\windows\ServicePackFiles\i386\digcore.exe + 2009-12-29 19:44 . 2008-04-14 03:42 539136 c:\windows\ServicePackFiles\i386\dialer.exe + 2009-12-29 19:44 . 2008-04-14 03:41 379904 c:\windows\ServicePackFiles\i386\dhcpmon.dll + 2009-12-29 19:44 . 2008-04-14 03:41 126976 c:\windows\ServicePackFiles\i386\dhcpcsvc.dll + 2009-12-29 19:44 . 2008-04-14 03:41 111104 c:\windows\ServicePackFiles\i386\dgnet.dll + 2009-12-29 19:44 . 2008-04-14 03:41 124416 c:\windows\ServicePackFiles\i386\dfrgui.dll + 2009-12-29 19:45 . 2008-04-14 03:42 105472 c:\windows\ServicePackFiles\i386\dfrgntfs.exe + 2009-12-29 19:44 . 2008-04-14 03:41 282624 c:\windows\ServicePackFiles\i386\devmgr.dll + 2009-12-29 19:44 . 2008-04-14 03:41 279552 c:\windows\ServicePackFiles\i386\ddraw.dll + 2009-12-29 19:45 . 2008-04-14 03:41 110592 c:\windows\ServicePackFiles\i386\dbnetlib.dll + 2008-04-14 03:41 . 2008-04-14 03:41 640000 c:\windows\ServicePackFiles\i386\dbghelp.dll + 2009-12-29 19:44 . 2008-04-14 03:41 165376 c:\windows\ServicePackFiles\i386\datime.dll + 2009-12-29 19:44 . 2008-01-19 14:34 554008 c:\windows\ServicePackFiles\i386\dao360.dll + 2009-12-29 19:44 . 2008-04-14 03:41 824320 c:\windows\ServicePackFiles\i386\d3dim700.dll + 2009-12-29 19:44 . 2008-04-14 03:41 249856 c:\windows\ServicePackFiles\i386\ctmasetp.dll + 2009-12-29 19:45 . 2008-04-14 03:41 326656 c:\windows\ServicePackFiles\i386\cscui.dll + 2009-12-29 19:44 . 2008-04-14 03:42 139264 c:\windows\ServicePackFiles\i386\cscript.exe + 2007-06-27 16:23 . 2007-06-27 16:23 589824 c:\windows\ServicePackFiles\i386\cscomp.dll + 2009-12-29 19:44 . 2008-04-14 03:41 101888 c:\windows\ServicePackFiles\i386\cscdll.dll + 2009-12-29 19:44 . 2008-04-14 03:41 512512 c:\windows\ServicePackFiles\i386\cryptui.dll + 2009-12-29 19:44 . 2008-04-14 03:41 599040 c:\windows\ServicePackFiles\i386\crypt32.dll + 2009-12-29 19:44 . 2008-04-14 03:41 163840 c:\windows\ServicePackFiles\i386\credui.dll + 2009-12-29 19:44 . 2008-04-14 03:41 357888 c:\windows\ServicePackFiles\i386\confmsp.dll + 2009-12-29 19:44 . 2008-04-14 03:41 539648 c:\windows\ServicePackFiles\i386\comuid.dll + 2009-12-29 19:44 . 2008-04-14 03:41 167424 c:\windows\ServicePackFiles\i386\comsnap.dll + 2009-12-29 19:45 . 2008-04-14 03:41 274944 c:\windows\ServicePackFiles\i386\comsetup.dll + 2009-12-29 19:44 . 2008-04-14 03:41 792064 c:\windows\ServicePackFiles\i386\comres.dll + 2009-12-29 19:44 . 2008-04-14 03:41 229376 c:\windows\ServicePackFiles\i386\compstui.dll + 2009-12-29 19:44 . 2008-04-14 03:41 252928 c:\windows\ServicePackFiles\i386\compatui.dll + 2009-12-29 19:44 . 2008-04-14 03:41 276992 c:\windows\ServicePackFiles\i386\comdlg32.dll + 2009-12-29 19:44 . 2008-04-14 03:41 617472 c:\windows\ServicePackFiles\i386\comctl32.dll + 2009-12-29 19:44 . 2008-04-14 03:41 195072 c:\windows\ServicePackFiles\i386\comadmin.dll + 2009-12-29 19:45 . 2008-04-14 03:41 185344 c:\windows\ServicePackFiles\i386\cmprops.dll + 2009-12-29 19:45 . 2008-04-14 03:41 344064 c:\windows\ServicePackFiles\i386\cmdial32.dll + 2009-12-29 19:44 . 2008-04-14 03:42 389120 c:\windows\ServicePackFiles\i386\cmd.exe + 2009-12-29 19:45 . 2008-04-14 03:42 102912 c:\windows\ServicePackFiles\i386\clipbrd.exe + 2009-12-29 19:44 . 2008-04-14 03:41 498688 c:\windows\ServicePackFiles\i386\clbcatq.dll + 2009-12-29 19:44 . 2008-04-14 03:41 110592 c:\windows\ServicePackFiles\i386\clbcatex.dll + 2009-12-29 19:44 . 2008-04-14 03:41 148480 c:\windows\ServicePackFiles\i386\cic.dll + 2008-04-14 03:42 . 2008-04-14 03:42 188480 c:\windows\ServicePackFiles\i386\cfgwiz.exe + 2009-12-29 19:44 . 2008-04-14 03:41 457728 c:\windows\ServicePackFiles\i386\certmgr.dll + 2009-12-29 19:45 . 2008-04-14 03:41 194560 c:\windows\ServicePackFiles\i386\certcli.dll + 2009-12-29 19:44 . 2008-04-14 03:41 151040 c:\windows\ServicePackFiles\i386\cdfview.dll + 2009-12-29 19:44 . 2008-04-14 03:41 625664 c:\windows\ServicePackFiles\i386\catsrvut.dll + 2009-12-29 19:44 . 2008-04-14 03:41 226304 c:\windows\ServicePackFiles\i386\catsrv.dll + 2009-12-29 19:44 . 2008-04-14 03:41 150016 c:\windows\ServicePackFiles\i386\capesnpn.dll + 2009-12-29 19:44 . 2008-04-14 03:41 121856 c:\windows\ServicePackFiles\i386\camext30.dll + 2009-12-29 19:44 . 2008-04-14 03:41 385024 c:\windows\ServicePackFiles\i386\callcont.dll + 2009-12-29 19:44 . 2008-04-14 03:41 218112 c:\windows\ServicePackFiles\i386\c_g18030.dll + 2009-12-29 19:44 . 2008-04-13 22:16 273024 c:\windows\ServicePackFiles\i386\bthport.sys + 2009-12-29 19:45 . 2008-04-13 22:21 101120 c:\windows\ServicePackFiles\i386\bthpan.sys + 2009-12-29 19:45 . 2008-04-14 03:42 142848 c:\windows\ServicePackFiles\i386\bootcfg.exe + 2009-12-29 19:44 . 2008-04-14 03:41 233472 c:\windows\ServicePackFiles\i386\azroles.dll + 2008-04-14 03:42 . 2008-04-14 03:42 580608 c:\windows\ServicePackFiles\i386\autofmt.exe + 2009-12-29 19:44 . 2008-04-14 03:42 602624 c:\windows\ServicePackFiles\i386\autoconv.exe + 2008-04-14 03:42 . 2008-04-14 03:42 588800 c:\windows\ServicePackFiles\i386\autochk.exe + 2009-12-29 19:44 . 2008-04-14 03:39 285696 c:\windows\ServicePackFiles\i386\atmfd.dll + 2009-12-29 19:44 . 2008-04-14 03:41 516768 c:\windows\ServicePackFiles\i386\ativvaxx.dll + 2009-12-29 19:44 . 2008-04-13 20:04 104960 c:\windows\ServicePackFiles\i386\atinrvxx.sys + 2009-12-29 19:44 . 2008-04-14 03:41 870784 c:\windows\ServicePackFiles\i386\ati3d1ag.dll + 2009-12-29 19:44 . 2008-04-13 20:04 701440 c:\windows\ServicePackFiles\i386\ati2mtag.sys + 2009-12-29 19:44 . 2008-04-13 20:04 327040 c:\windows\ServicePackFiles\i386\ati2mtaa.sys + 2009-12-29 19:44 . 2008-04-14 03:41 201728 c:\windows\ServicePackFiles\i386\ati2dvag.dll + 2009-12-29 19:44 . 2008-04-14 03:41 377984 c:\windows\ServicePackFiles\i386\ati2dvaa.dll + 2009-12-29 19:45 . 2008-04-14 03:41 229376 c:\windows\ServicePackFiles\i386\ati2cqag.dll + 2008-04-13 19:40 . 2008-04-13 19:40 200704 c:\windows\ServicePackFiles\i386\aspnet_isapi.dll + 2009-12-29 19:45 . 2008-04-14 03:41 369664 c:\windows\ServicePackFiles\i386\asp51.dll + 2009-12-29 19:44 . 2008-04-14 03:41 331264 c:\windows\ServicePackFiles\i386\aqueue.dll + 2009-12-29 19:45 . 2008-04-14 03:41 295936 c:\windows\ServicePackFiles\i386\appmgr.dll + 2009-12-29 19:45 . 2008-04-14 03:41 167936 c:\windows\ServicePackFiles\i386\appmgmts.dll + 2009-12-29 19:44 . 2008-04-14 03:41 125952 c:\windows\ServicePackFiles\i386\apphelp.dll + 2009-12-29 19:45 . 2008-04-14 03:41 108544 c:\windows\ServicePackFiles\i386\appconf.dll + 2009-12-29 19:44 . 2008-04-14 03:42 256512 c:\windows\ServicePackFiles\i386\agentsvr.exe + 2009-12-29 19:44 . 2008-04-14 03:41 214016 c:\windows\ServicePackFiles\i386\agentctl.dll + 2009-12-29 19:44 . 2008-04-13 22:49 138112 c:\windows\ServicePackFiles\i386\afd.sys + 2009-12-29 19:44 . 2008-04-13 20:09 142592 c:\windows\ServicePackFiles\i386\aec.sys + 2009-12-29 19:44 . 2008-04-14 03:41 617472 c:\windows\ServicePackFiles\i386\advapi32.dll + 2009-12-29 19:45 . 2008-04-14 03:41 123392 c:\windows\ServicePackFiles\i386\adsnw.dll + 2009-12-29 19:44 . 2008-04-14 03:41 263680 c:\windows\ServicePackFiles\i386\adsnt.dll + 2009-12-29 19:44 . 2008-04-14 03:41 143360 c:\windows\ServicePackFiles\i386\adsldpc.dll + 2009-12-29 19:44 . 2008-04-14 03:41 175616 c:\windows\ServicePackFiles\i386\adsldp.dll + 2009-12-29 19:45 . 2008-04-14 03:41 290816 c:\windows\ServicePackFiles\i386\adsiis51.dll + 2009-12-29 19:44 . 2008-04-14 03:41 116224 c:\windows\ServicePackFiles\i386\acxtrnal.dll + 2009-12-29 19:45 . 2008-04-14 03:41 193536 c:\windows\ServicePackFiles\i386\activeds.dll + 2009-12-29 19:45 . 2008-04-14 03:41 245248 c:\windows\ServicePackFiles\i386\acspecfc.dll + 2009-12-29 19:44 . 2008-04-13 22:06 187776 c:\windows\ServicePackFiles\i386\acpi.sys + 2009-12-29 19:44 . 2008-04-14 03:41 115712 c:\windows\ServicePackFiles\i386\aclui.dll + 2009-12-29 19:45 . 2008-04-14 03:41 141312 c:\windows\ServicePackFiles\i386\aclua.dll + 2009-12-29 19:44 . 2008-04-14 03:41 451072 c:\windows\ServicePackFiles\i386\aclayers.dll + 2009-12-29 19:45 . 2008-04-14 03:42 184320 c:\windows\ServicePackFiles\i386\accwiz.exe + 2009-12-29 19:44 . 2008-04-13 20:06 231552 c:\windows\ServicePackFiles\i386\ac97ali.sys + 2009-12-29 19:44 . 2008-04-14 03:41 136192 c:\windows\ServicePackFiles\i386\aaclient.dll + 2009-12-29 19:44 . 2008-04-14 03:41 100352 c:\windows\ServicePackFiles\i386\6to4svc.dll + 2009-05-13 14:54 . 2008-04-14 02:42 108544 c:\windows\$hf_mig$\KB956572\SP3QFE\services.exe - 2009-05-13 17:24 . 2008-04-14 02:42 1724416 c:\windows\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\GdiPlus.dll + 2008-04-14 03:42 . 2008-04-14 03:42 1724416 c:\windows\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\GdiPlus.dll + 2008-04-14 03:42 . 2008-04-14 03:42 1054208 c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll - 2009-05-13 17:24 . 2008-04-14 02:42 1054208 c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll + 2008-04-14 03:42 . 2008-04-14 03:42 1011774 c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\mfc42u.dll + 2009-05-13 17:24 . 2008-04-14 02:42 1054208 c:\windows\WinSxS\InstallTemp\1312923\comctl32.dll + 2009-12-29 19:45 . 2008-04-14 03:42 1737856 c:\windows\system32\mtxparhd.dll + 2008-04-14 02:42 . 2008-04-14 03:42 1306624 c:\windows\system32\msxml6.dll + 2009-12-29 19:45 . 2008-04-14 03:42 2134528 c:\windows\system32\inetsrv\smtpsnap.dll + 2009-12-29 19:44 . 2008-04-13 21:53 1309184 c:\windows\system32\drivers\mtlstrm.sys + 2009-12-29 19:44 . 2008-04-13 21:53 1041536 c:\windows\system32\drivers\hsfdpsp2.sys + 2008-04-14 02:42 . 2008-04-14 03:42 1306624 c:\windows\system32\dllcache\msxml6.dll + 2009-12-29 19:45 . 2008-04-14 03:41 1888992 c:\windows\system32\ati3duag.dll + 2008-04-14 03:42 . 2008-04-14 03:42 1695232 c:\windows\ServicePackFiles\ServicePackCache\i386\msmsgs.exe + 2009-12-29 19:45 . 2008-04-13 21:09 2897920 c:\windows\ServicePackFiles\i386\xpsp2res.dll + 2009-12-29 19:44 . 2008-04-14 03:42 1135616 c:\windows\ServicePackFiles\i386\wuaueng.dll + 2009-12-29 19:44 . 2008-04-14 03:42 4256768 c:\windows\ServicePackFiles\i386\wmm2res.dll + 2009-12-29 19:44 . 2008-04-13 20:18 1647616 c:\windows\ServicePackFiles\i386\winbrand.dll + 2009-12-29 19:45 . 2008-04-13 23:00 1845632 c:\windows\ServicePackFiles\i386\win32k.sys + 2009-12-29 19:44 . 2007-01-01 18:14 1326080 c:\windows\ServicePackFiles\i386\webfldrs.msi + 2007-06-27 16:29 . 2007-06-27 16:29 1302528 c:\windows\ServicePackFiles\i386\system.xml.dll + 2007-06-27 16:29 . 2007-06-27 16:29 2002944 c:\windows\ServicePackFiles\i386\system.windows.forms.dll + 2007-12-17 15:30 . 2007-12-17 15:30 1200128 c:\windows\ServicePackFiles\i386\system.web.dll + 2007-06-27 16:28 . 2007-06-27 16:28 1695744 c:\windows\ServicePackFiles\i386\system.design.dll + 2007-06-27 16:28 . 2007-06-27 16:28 1179648 c:\windows\ServicePackFiles\i386\system.data.dll + 2007-12-17 15:29 . 2007-12-17 15:29 1179648 c:\windows\ServicePackFiles\i386\sy52106.dll + 2009-12-29 19:45 . 2008-04-13 22:07 2842112 c:\windows\ServicePackFiles\i386\sprb040d.dll + 2009-12-29 19:45 . 2008-04-13 22:05 2869248 c:\windows\ServicePackFiles\i386\sprb0401.dll + 2009-12-29 19:45 . 2008-04-14 03:42 2134528 c:\windows\ServicePackFiles\i386\smtpsnap.dll + 2009-12-29 19:44 . 2008-04-14 03:42 8461312 c:\windows\ServicePackFiles\i386\shell32.dll + 2009-12-29 19:45 . 2008-04-14 03:42 1499136 c:\windows\ServicePackFiles\i386\shdocvw.dll + 2009-12-29 19:44 . 2008-04-14 03:42 1614848 c:\windows\ServicePackFiles\i386\sfcfiles.dll + 2009-12-29 19:45 . 2008-04-14 03:42 1435648 c:\windows\ServicePackFiles\i386\query.dll + 2009-12-29 19:44 . 2008-04-14 03:42 1288192 c:\windows\ServicePackFiles\i386\quartz.dll + 2009-12-29 19:44 . 2007-05-15 11:38 1057280 c:\windows\ServicePackFiles\i386\pcl5ures.dll + 2009-12-29 19:44 . 2007-05-15 11:38 1058816 c:\windows\ServicePackFiles\i386\pcl5eres.dll + 2009-12-29 19:44 . 2008-04-14 03:42 1287168 c:\windows\ServicePackFiles\i386\ole32.dll + 2009-12-29 19:44 . 2008-04-13 20:04 1897408 c:\windows\ServicePackFiles\i386\nv4_mini.sys + 2009-12-29 19:45 . 2008-04-14 03:42 4274816 c:\windows\ServicePackFiles\i386\nv4_disp.dll + 2009-12-29 19:44 . 2008-04-13 22:57 2188928 c:\windows\ServicePackFiles\i386\ntoskrnl.exe + 2009-12-29 19:44 . 2008-04-13 22:01 2023936 c:\windows\ServicePackFiles\i386\ntkrpamp.exe + 2009-12-29 19:44 . 2008-04-13 22:01 2065792 c:\windows\ServicePackFiles\i386\ntkrnlpa.exe + 2009-12-29 19:45 . 2008-04-13 22:54 2145280 c:\windows\ServicePackFiles\i386\ntkrnlmp.exe + 2009-12-29 19:45 . 2008-04-14 03:42 1200640 c:\windows\ServicePackFiles\i386\ntbackup.exe + 2009-12-29 19:44 . 2008-04-14 03:42 1703936 c:\windows\ServicePackFiles\i386\netshell.dll + 2009-12-29 19:44 . 2008-04-14 03:42 1737856 c:\windows\ServicePackFiles\i386\mtxparhd.dll + 2009-12-29 19:44 . 2008-04-13 21:53 1309184 c:\windows\ServicePackFiles\i386\mtlstrm.sys + 2009-12-29 19:44 . 2008-04-14 03:42 1104896 c:\windows\ServicePackFiles\i386\msxml3.dll + 2009-12-29 19:44 . 2008-04-14 03:42 1428992 c:\windows\ServicePackFiles\i386\msvidctl.dll + 2009-12-29 19:44 . 2008-04-14 03:42 1384479 c:\windows\ServicePackFiles\i386\msvbvm60.dll + 2009-12-29 19:45 . 2008-04-13 19:53 2479616 c:\windows\ServicePackFiles\i386\msoeres.dll + 2009-12-29 19:44 . 2008-04-14 03:42 1314816 c:\windows\ServicePackFiles\i386\msoe.dll + 2009-12-29 19:45 . 2007-04-02 22:12 1327320 c:\windows\ServicePackFiles\i386\msnsusii.exe + 2009-12-29 19:44 . 2007-04-02 22:12 5080576 c:\windows\ServicePackFiles\i386\msnmsgs.msi + 2008-04-14 03:42 . 2008-04-14 03:42 1695232 c:\windows\ServicePackFiles\i386\msmsgs.exe + 2009-12-29 19:44 . 2007-10-22 13:00 1516568 c:\windows\ServicePackFiles\i386\msjet40.dll + 2009-12-29 19:44 . 2008-04-14 03:42 2843136 c:\windows\ServicePackFiles\i386\msi.dll + 2009-12-29 19:44 . 2008-04-14 03:42 3066880 c:\windows\ServicePackFiles\i386\mshtml.dll + 2009-12-29 19:44 . 2008-04-14 03:42 3166208 c:\windows\ServicePackFiles\i386\msgr3en.dll + 2007-12-17 15:29 . 2007-12-17 15:29 2281472 c:\windows\ServicePackFiles\i386\mscorwks.dll + 2007-12-17 15:28 . 2007-12-17 15:28 2273280 c:\windows\ServicePackFiles\i386\mscorsvr.dll + 2007-12-17 15:28 . 2007-12-17 15:28 1998848 c:\windows\ServicePackFiles\i386\mscorlib.dll + 2007-06-27 16:24 . 2007-06-27 16:24 1564672 c:\windows\ServicePackFiles\i386\mscorcfg.dll + 2009-12-29 19:44 . 2008-04-14 03:42 3558912 c:\windows\ServicePackFiles\i386\moviemk.exe + 2009-12-29 19:44 . 2008-04-14 03:41 1872896 c:\windows\ServicePackFiles\i386\mmcndmgr.dll + 2009-12-29 19:44 . 2008-04-14 03:42 1414656 c:\windows\ServicePackFiles\i386\mmc.exe + 2009-12-29 19:44 . 2008-04-14 03:41 1028096 c:\windows\ServicePackFiles\i386\mfc42.dll + 2009-12-29 19:44 . 2008-04-14 03:41 2061824 c:\windows\ServicePackFiles\i386\lhmstscx.dll + 2009-12-29 19:45 . 2008-04-13 21:53 1041536 c:\windows\ServicePackFiles\i386\hsfdpsp2.sys + 2009-12-29 19:44 . 2008-04-14 03:42 1033728 c:\windows\ServicePackFiles\i386\explorer.exe + 2009-12-29 19:44 . 2008-04-14 03:41 1082368 c:\windows\ServicePackFiles\i386\esent.dll + 2009-12-29 19:45 . 2008-04-14 03:41 2113536 c:\windows\ServicePackFiles\i386\dxdiagn.dll + 2009-12-29 19:44 . 2008-04-14 03:42 1298432 c:\windows\ServicePackFiles\i386\dxdiag.exe + 2009-12-29 19:44 . 2008-04-14 03:41 1227264 c:\windows\ServicePackFiles\i386\dx8vb.dll + 2009-12-29 19:44 . 2008-04-14 03:41 1293824 c:\windows\ServicePackFiles\i386\dsound3d.dll + 2009-12-29 19:44 . 2008-04-14 03:41 1504256 c:\windows\ServicePackFiles\i386\diskcopy.dll + 2009-12-29 19:45 . 2008-04-14 03:41 1054208 c:\windows\ServicePackFiles\i386\danim.dll + 2009-12-29 19:44 . 2008-04-14 03:41 1689088 c:\windows\ServicePackFiles\i386\d3d9.dll + 2009-12-29 19:44 . 2008-04-14 03:41 1179648 c:\windows\ServicePackFiles\i386\d3d8.dll + 2009-12-29 19:44 . 2008-04-14 03:42 1032192 c:\windows\ServicePackFiles\i386\conf.exe + 2009-12-29 19:44 . 2008-04-14 03:41 1267200 c:\windows\ServicePackFiles\i386\comsvcs.dll + 2009-12-29 19:44 . 2008-04-14 03:41 1358848 c:\windows\ServicePackFiles\i386\cimwin32.dll + 2009-12-29 19:44 . 2008-04-14 03:41 2091520 c:\windows\ServicePackFiles\i386\cdosys.dll + 2009-12-29 19:44 . 2008-04-14 03:41 1025024 c:\windows\ServicePackFiles\i386\browseui.dll + 2009-12-29 19:44 . 2008-04-14 03:41 1888992 c:\windows\ServicePackFiles\i386\ati3duag.dll + 2009-12-29 19:44 . 2008-04-14 03:41 1057760 c:\windows\ServicePackFiles\i386\ati3d2ag.dll + 2009-12-29 19:44 . 2008-04-14 03:41 1852928 c:\windows\ServicePackFiles\i386\acgenral.dll + 2008-04-14 02:42 . 2008-04-14 03:42 1033728 c:\windows\explorer.exe + 2009-12-29 19:44 . 2007-04-02 22:09 11053008 c:\windows\ServicePackFiles\i386\msncli.exe + 2009-12-29 19:45 . 2008-04-14 03:39 13463552 c:\windows\ServicePackFiles\i386\lang\hwxjpn.dll . -- Snapshot reset to current date -- . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NetworxHelper"="c:\program files\Telnet\Helper\Helper.exe" [2009-05-27 975872] "LogitechCommunicationsManager"="c:\program files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe" [2007-02-07 488984] "LogitechQuickCamRibbon"="c:\program files\Logitech\QuickCam10\QuickCam10.exe" [2007-02-07 774168] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-04-30 13750272] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360] c:\documents and settings\All Users\Start Menu\Programs\Startup\ HD ADeck.lnk - c:\program files\VIA\VIAudioi\HDADeck\HDeck.exe [2009-5-13 30003200] Logitech Desktop Messenger.lnk - c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [2009-6-27 67128] [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks] "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon] 2009-09-03 12:21 548352 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.dll [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] 2009-02-27 14:10 35696 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BDRegion] 2008-06-27 13:50 91432 ----a-w- c:\program files\Cyberlink\Shared Files\brs.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update] 2009-05-14 12:43 133104 ----atw- c:\documents and settings\owner\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup] 2004-06-14 14:18 221184 ----a-w- c:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler] 2004-06-14 14:18 81920 ----a-w- c:\program files\Common Files\InstallShield\UpdateService\issch.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS] 2008-04-14 02:42 1695232 ------w- c:\program files\Messenger\msmsgs.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon] 2009-04-30 21:30 13750272 ----a-w- c:\windows\system32\nvcpl.dll [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter] 2009-04-30 21:30 86016 ----a-w- c:\windows\system32\nvmctray.dll [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz] 2009-04-30 21:31 1657376 ----a-w- c:\windows\system32\nwiz.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PDVD8LanguageShortcut] 2007-12-14 08:36 50472 ------w- e:\program files\CyberLink\PowerDVD8\PowerDVD8\Language\Language.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl8] 2008-03-20 17:23 83240 ------w- e:\program files\CyberLink\PowerDVD8\PowerDVD8\PDVD8Serv.exe [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\StrongDC++\\StrongDC.exe"= "c:\\Program Files\\BitComet\\BitComet.exe"= "c:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"= "c:\\WINDOWS\\system32\\dpvsetup.exe"= "c:\\Program Files\\Skype\\Phone\\Skype.exe"= "c:\program files\Telnet\Helper\winvnc.exe"= c:\program files\Telnet\Helper\winvnc.exe:192.168.11.0/255.255.255.0:Enabled:Telnet-BG Helper VNC [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009 "14233:TCP"= 14233:TCP:BitComet 14233 TCP "14233:UDP"= 14233:UDP:BitComet 14233 UDP [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings] "AllowOutboundPacketTooBig"= 1 (0x1) "AllowOutboundDestinationUnreachable"= 1 (0x1) "AllowOutboundSourceQuench"= 1 (0x1) "AllowRedirect"= 1 (0x1) "AllowInboundEchoRequest"= 1 (0x1) "AllowInboundRouterRequest"= 1 (0x1) "AllowOutboundTimeExceeded"= 1 (0x1) "AllowOutboundParameterProblem"= 1 (0x1) "AllowInboundTimestampRequest"= 1 (0x1) "AllowInboundMaskRequest"= 1 (0x1) R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [16/12/2009 16:26 9968] R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [16/12/2009 16:26 74480] R2 {FE4C91E7-22C2-4D0C-9F6B-82F1B7742054};{FE4C91E7-22C2-4D0C-9F6B-82F1B7742054};e:\program files\CyberLink\PowerDVD8\PowerDVD8\000.fcl [27/06/2008 15:50 61424] R3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys [13/05/2009 16:48 845184] S3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [16/12/2009 16:27 7408] . Contents of the 'Scheduled Tasks' folder 2009-12-29 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-776561741-838170752-1801674531-1003Core.job - c:\documents and settings\owner\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-05-14 12:43] 2009-12-29 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-776561741-838170752-1801674531-1003UA.job - c:\documents and settings\owner\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-05-14 12:43] . . ------- Supplementary Scan ------- . uStart Page = hxxp://www.google.bg/ IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 TCP: {7579514D-A978-46F3-98D4-90526BFDB884} = 89.190.192.162,213.240.241.253 Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - c:\program files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll . ************************************************************************** scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: ************************************************************************** [HKEY_LOCAL_MACHINE\System\ControlSet003\Services\{FE4C91E7-22C2-4D0C-9F6B-82F1B7742054}] "ImagePath"="\??\e:\program files\CyberLink\PowerDVD8\PowerDVD8\000.fcl" . --------------------- LOCKED REGISTRY KEYS --------------------- [HKEY_USERS\S-1-5-21-776561741-838170752-1801674531-1003\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{24C5C30C-1341-963B-A6AB-4F4407E3F718}*] @Allowed: (Read) (RestrictedCode) @Allowed: (Read) (RestrictedCode) [HKEY_USERS\S-1-5-21-776561741-838170752-1801674531-1003\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{9761FFE2-E147-2634-946F-34353E2724C4}*] @Allowed: (Read) (RestrictedCode) @Allowed: (Read) (RestrictedCode) . --------------------- DLLs Loaded Under Running Processes --------------------- - - - - - - - > 'winlogon.exe'(532) c:\program files\SUPERAntiSpyware\SASWINLO.dll c:\documents and settings\owner\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL c:\documents and settings\owner\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll - - - - - - - > 'explorer.exe'(7488) c:\program files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll c:\windows\system32\WPDShServiceObj.dll c:\windows\system32\PortableDeviceTypes.dll c:\windows\system32\PortableDeviceApi.dll . ------------------------ Other Running Processes ------------------------ . c:\windows\system32\nvsvc32.exe c:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exe c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE c:\windows\system32\wscntfy.exe c:\program files\Common Files\LogiShrd\LComMgr\LVComSX.exe c:\program files\Common Files\Logishrd\LQCVFX\COCIManager.exe . ************************************************************************** . Completion time: 2009-12-29 21:55:31 - machine was rebooted ComboFix-quarantined-files.txt 2009-12-29 19:55 ComboFix2.txt 2009-12-29 19:21 ComboFix3.txt 2009-12-29 18:57 Pre-Run: 13 644 754 944 bytes free Post-Run: 13 617 324 032 bytes free - - End Of File - - 6A25BEDB9C0E17CD728145A3FB4DD4D2 Лога излезе много дълъг и се наложи да го разделя за да може да се постне.

ComboFix 09-12-29.03 - owner 29/12/2009 21:51:32.3.2 - x86 Microsoft Windows XP Professional 5.1.2600.3.1251.359.1033.18.2047.1523 [GMT 2:00] Running from: c:\documents and settings\owner\Desktop\ComboFix.exe . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . Infected copy of c:\windows\system32\services.exe was found and disinfected Restored copy from - c:\windows\ServicePackFiles\i386\services.exe . ((((((((((((((((((((((((( Files Created from 2009-11-28 to 2009-12-29 ))))))))))))))))))))))))))))))) . 2009-12-29 19:44 . 2009-12-29 19:44 -------- d-----w- c:\windows\ServicePackFiles 2009-12-29 18:53 . 2009-12-29 18:57 -------- d-----w- C:\ComboFix 2009-12-29 17:11 . 2009-12-29 17:11 -------- d-----w- c:\documents and settings\owner\Application Data\Malwarebytes 2009-12-29 17:11 . 2009-12-03 14:14 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2009-12-29 17:11 . 2009-12-29 17:11 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes 2009-12-29 17:11 . 2009-12-03 14:13 19160 ----a-w- c:\windows\system32\drivers\mbam.sys 2009-12-29 16:54 . 2009-12-29 17:10 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy 2009-12-28 22:22 . 2009-12-28 22:35 -------- d-----w- c:\program files\DiskInternals 2009-12-28 21:47 . 2009-12-28 21:47 52224 ----a-w- c:\documents and settings\owner\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll 2009-12-28 21:47 . 2009-12-28 21:47 117760 ----a-w- c:\documents and settings\owner\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL 2009-12-28 21:47 . 2009-12-28 21:47 -------- d-----w- c:\documents and settings\All Users\Application Data\SUPERAntiSpyware.com 2009-12-28 21:47 . 2009-12-28 21:47 -------- d-----w- c:\program files\SUPERAntiSpyware 2009-12-28 21:47 . 2009-12-28 21:47 -------- d-----w- c:\documents and settings\owner\Application Data\SUPERAntiSpyware.com 2009-12-28 20:50 . 2009-12-28 20:50 -------- d-----w- c:\documents and settings\owner\Local Settings\Application Data\Threat Expert 2009-12-28 20:25 . 2009-12-28 19:09 877848 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgupd.exe 2009-12-28 20:25 . 2009-12-28 19:09 798488 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avginet.dll 2009-12-28 20:25 . 2009-12-28 19:09 1657112 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgupd.dll 2009-12-28 19:34 . 2009-12-28 19:34 -------- d-----w- c:\program files\Notepad2 2009-12-28 19:10 . 2009-12-28 19:19 -------- d-----w- C:\$AVG 2009-12-28 19:09 . 2009-12-28 19:09 -------- d-----w- c:\program files\AVG 2009-12-28 19:09 . 2009-12-29 18:48 -------- d-----w- c:\documents and settings\All Users\Application Data\avg9 2009-12-28 19:09 . 2009-12-28 19:12 -------- d-----w- c:\windows\SxsCaPendDel . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-12-29 16:10 . 2009-05-29 16:22 -------- d-----w- c:\documents and settings\owner\Application Data\Skype 2009-12-29 05:07 . 2009-06-06 19:40 -------- d-----w- c:\documents and settings\owner\Application Data\skypePM 2009-12-28 21:46 . 2009-05-13 14:58 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard 2009-12-28 21:38 . 2009-05-17 18:38 -------- d---a-w- c:\documents and settings\All Users\Application Data\Temp 2009-12-23 18:19 . 2009-05-13 14:37 64920 ----a-w- c:\documents and settings\owner\Local Settings\Application Data\GDIPFONTCACHEV1.DAT 2009-11-21 16:17 . 2009-06-06 18:43 -------- d-----w- c:\program files\BS_Player . ((((((((((((((((((((((((((((( SnapShot@2009-12-29_18.56.50 ))))))))))))))))))))))))))))))))))))))))) . + 2008-04-14 03:42 . 2008-04-14 03:42 57344 c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcirt.dll - 2009-05-13 17:24 . 2008-04-14 02:42 57344 c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcirt.dll + 2008-04-14 03:42 . 2008-04-14 03:42 74802 c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\atl.dll + 2009-12-29 19:54 . 2009-12-29 19:54 16384 c:\windows\temp\Perflib_Perfdata_450.dat + 2008-04-14 02:42 . 2008-04-14 03:42 14336 c:\windows\system32\svchost.exe + 2008-04-14 03:42 . 2008-04-14 03:42 20992 c:\windows\system32\spupdwxp.exe + 2009-05-13 14:52 . 2007-08-10 18:46 26488 c:\windows\system32\spupdsvc.exe - 2009-05-13 14:52 . 2007-07-27 06:41 26488 c:\windows\system32\spupdsvc.exe + 2008-04-14 02:42 . 2008-04-14 03:42 57856 c:\windows\system32\spoolsv.exe + 2009-05-13 15:08 . 2007-08-10 18:46 17272 c:\windows\system32\spmsg.dll - 2009-05-13 15:08 . 2007-11-30 11:18 17272 c:\windows\system32\spmsg.dll + 2009-12-29 19:45 . 2008-04-14 03:42 10752 c:\windows\system32\smtpapi.dll + 2009-12-29 19:45 . 2008-04-14 03:42 73796 c:\windows\system32\slserv.exe + 2009-12-29 19:45 . 2008-04-14 03:42 32866 c:\windows\system32\slrundll.exe + 2009-12-29 19:45 . 2008-04-14 03:42 73832 c:\windows\system32\slcoinst.dll + 2009-12-29 19:45 . 2008-04-14 03:41 86016 c:\windows\system32\mdmxsdk.dll + 2008-04-14 02:42 . 2008-04-14 03:42 13312 c:\windows\system32\lsass.exe + 2009-12-29 19:45 . 2008-04-14 03:41 32285 c:\windows\system32\hsfcisp2.dll + 2008-04-14 03:42 . 2008-04-14 03:42 20992 c:\windows\system32\faxpatch.exe + 2009-12-29 19:44 . 2008-04-13 20:04 25471 c:\windows\system32\drivers\watv10nt.sys + 2009-12-29 19:44 . 2008-04-13 20:04 22271 c:\windows\system32\drivers\watv06nt.sys + 2009-12-29 19:44 . 2008-04-13 20:04 11935 c:\windows\system32\drivers\wadv11nt.sys + 2009-12-29 19:44 . 2008-04-13 20:04 11871 c:\windows\system32\drivers\wadv09nt.sys + 2009-12-29 19:44 . 2008-04-13 20:04 11295 c:\windows\system32\drivers\wadv08nt.sys + 2009-12-29 19:44 . 2008-04-13 20:04 11807 c:\windows\system32\drivers\wadv07nt.sys + 2009-12-29 19:44 . 2008-04-13 22:13 14208 c:\windows\system32\drivers\wacompen.sys + 2009-12-29 19:44 . 2008-04-13 22:06 42240 c:\windows\system32\drivers\viaagp.sys + 2009-12-29 19:44 . 2008-04-14 03:42 11325 c:\windows\system32\drivers\vchnt5.dll + 2009-12-29 19:44 . 2008-04-13 22:26 12800 c:\windows\system32\drivers\usb8023x.sys + 2009-12-29 19:44 . 2008-04-13 22:06 44672 c:\windows\system32\drivers\uagp35.sys + 2009-12-29 19:44 . 2008-04-13 21:53 13240 c:\windows\system32\drivers\slwdmsup.sys + 2009-12-29 19:44 . 2008-04-13 21:53 95424 c:\windows\system32\drivers\slnthal.sys + 2009-12-29 19:44 . 2008-04-13 22:06 40960 c:\windows\system32\drivers\sisagp.sys + 2009-12-29 19:44 . 2008-04-13 22:26 30592 c:\windows\system32\drivers\rndismpx.sys + 2009-12-29 19:44 . 2008-04-13 22:16 59136 c:\windows\system32\drivers\rfcomm.sys + 2009-12-29 19:44 . 2008-04-13 21:53 13776 c:\windows\system32\drivers\recagent.sys + 2009-12-29 19:44 . 2008-04-13 22:13 12672 c:\windows\system32\drivers\mutohpen.sys + 2009-12-29 19:44 . 2008-04-13 21:53 11868 c:\windows\system32\drivers\mdmxsdk.sys + 2009-12-29 19:45 . 2008-04-13 22:15 46592 c:\windows\system32\drivers\irbus.sys + 2009-12-29 19:44 . 2008-04-13 22:15 19200 c:\windows\system32\drivers\hidir.sys + 2009-12-29 19:44 . 2008-04-13 22:16 25600 c:\windows\system32\drivers\hidbth.sys + 2009-12-29 19:44 . 2008-04-13 22:06 46464 c:\windows\system32\drivers\gagp30kx.sys + 2009-12-29 19:44 . 2008-04-14 03:41 15423 c:\windows\system32\drivers\ch7xxnt5.dll + 2009-12-29 19:44 . 2008-04-13 22:16 18944 c:\windows\system32\drivers\bthusb.sys + 2009-12-29 19:44 . 2008-04-13 22:16 36480 c:\windows\system32\drivers\bthprint.sys + 2009-12-29 19:44 . 2008-04-13 22:16 37888 c:\windows\system32\drivers\bthmodem.sys + 2009-12-29 19:44 . 2008-04-13 22:16 17024 c:\windows\system32\drivers\bthenum.sys + 2009-12-29 19:44 . 2008-04-14 03:41 17279 c:\windows\system32\drivers\atv10nt5.dll + 2009-12-29 19:44 . 2008-04-14 03:41 14143 c:\windows\system32\drivers\atv06nt5.dll + 2009-12-29 19:44 . 2008-04-14 03:41 25471 c:\windows\system32\drivers\atv04nt5.dll + 2009-12-29 19:44 . 2008-04-14 03:41 11359 c:\windows\system32\drivers\atv02nt5.dll + 2009-12-29 19:44 . 2008-04-14 03:41 21183 c:\windows\system32\drivers\atv01nt5.dll + 2009-12-29 19:44 . 2008-04-13 20:04 63488 c:\windows\system32\drivers\atinxsxx.sys + 2009-12-29 19:44 . 2008-04-13 20:04 31744 c:\windows\system32\drivers\atinxbxx.sys + 2009-12-29 19:44 . 2008-04-13 20:04 73216 c:\windows\system32\drivers\atintuxx.sys + 2009-12-29 19:44 . 2008-04-13 20:04 13824 c:\windows\system32\drivers\atinttxx.sys + 2009-12-29 19:44 . 2008-04-13 20:04 28672 c:\windows\system32\drivers\atinsnxx.sys + 2009-12-29 19:44 . 2008-04-13 20:04 52224 c:\windows\system32\drivers\atinraxx.sys + 2009-12-29 19:44 . 2008-04-13 20:04 14336 c:\windows\system32\drivers\atinpdxx.sys + 2009-12-29 19:44 . 2008-04-13 20:04 13824 c:\windows\system32\drivers\atinmdxx.sys + 2009-12-29 19:44 . 2008-04-13 20:04 57856 c:\windows\system32\drivers\atinbtxx.sys + 2009-12-29 19:44 . 2008-04-13 20:04 34735 c:\windows\system32\drivers\ati1xsxx.sys + 2009-12-29 19:44 . 2008-04-13 20:04 29455 c:\windows\system32\drivers\ati1xbxx.sys + 2009-12-29 19:44 . 2008-04-13 20:04 36463 c:\windows\system32\drivers\ati1tuxx.sys + 2009-12-29 19:44 . 2008-04-13 20:04 21343 c:\windows\system32\drivers\ati1ttxx.sys + 2009-12-29 19:44 . 2008-04-13 20:04 26367 c:\windows\system32\drivers\ati1snxx.sys + 2009-12-29 19:44 . 2008-04-13 20:04 63663 c:\windows\system32\drivers\ati1rvxx.sys + 2009-12-29 19:44 . 2008-04-13 20:04 30671 c:\windows\system32\drivers\ati1raxx.sys + 2009-12-29 19:44 . 2008-04-13 20:04 12047 c:\windows\system32\drivers\ati1pdxx.sys + 2009-12-29 19:44 . 2008-04-13 20:04 11615 c:\windows\system32\drivers\ati1mdxx.sys + 2009-12-29 19:44 . 2008-04-13 20:04 56623 c:\windows\system32\drivers\ati1btxx.sys + 2009-12-29 19:44 . 2008-04-13 22:06 43008 c:\windows\system32\drivers\amdagp.sys + 2009-12-29 19:44 . 2008-04-13 22:06 42752 c:\windows\system32\drivers\alim1541.sys + 2009-12-29 19:44 . 2008-04-13 22:06 44928 c:\windows\system32\drivers\agpcpq.sys + 2009-12-29 19:44 . 2008-04-13 22:06 42368 c:\windows\system32\drivers\agp440.sys + 2009-12-29 19:47 . 2009-12-29 19:47 32768 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\MSHist012009122920091230\index.dat + 2009-05-13 14:36 . 2009-12-29 19:47 32768 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat - 2009-05-13 14:36 . 2009-12-29 16:50 32768 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat + 2009-12-29 19:47 . 2009-12-29 19:47 16384 c:\windows\system32\config\systemprofile\Cookies\index.dat + 2009-12-29 19:45 . 2008-04-14 03:41 32768 c:\windows\system32\ativtmxx.dll + 2009-12-29 19:45 . 2008-04-14 03:42 32866 c:\windows\slrundll.exe + 2008-04-14 03:42 . 2008-04-14 03:42 82944 c:\windows\ServicePackFiles\ServicePackCache\i386\msgsc.dll + 2009-12-29 19:45 . 2008-04-14 03:41 33792 c:\windows\ServicePackFiles\ServicePackCache\i386\custsat.dll + 2009-12-29 19:44 . 2008-04-14 03:42 18944 c:\windows\ServicePackFiles\i386\xrxscnui.dll + 2009-12-29 19:44 . 2008-04-14 03:42 11776 c:\windows\ServicePackFiles\i386\xolehlp.dll + 2009-12-29 19:44 . 2008-04-14 03:42 50176 c:\windows\ServicePackFiles\i386\xmlprovi.dll + 2009-12-29 19:44 . 2008-04-14 03:42 30720 c:\windows\ServicePackFiles\i386\xcopy.exe + 2009-12-29 19:44 . 2008-04-14 03:42 91648 c:\windows\ServicePackFiles\i386\xactsrv.dll + 2009-12-29 19:44 . 2008-04-14 03:42 52736 c:\windows\ServicePackFiles\i386\wzcsapi.dll + 2009-12-29 19:44 . 2008-04-13 20:04 19455 c:\windows\ServicePackFiles\i386\wvchntxx.sys + 2009-12-29 19:45 . 2008-04-14 03:42 32256 c:\windows\ServicePackFiles\i386\wups.dll + 2009-12-29 19:44 . 2008-04-14 03:42 18432 c:\windows\ServicePackFiles\i386\wtsapi32.dll + 2009-12-29 19:44 . 2008-04-14 03:42 50688 c:\windows\ServicePackFiles\i386\wstdecod.dll + 2009-12-29 19:44 . 2008-04-13 22:16 19200 c:\windows\ServicePackFiles\i386\wstcodec.sys + 2009-12-29 19:44 . 2008-04-14 03:42 22528 c:\windows\ServicePackFiles\i386\wsock32.dll + 2009-12-29 19:44 . 2008-04-14 03:42 41984 c:\windows\ServicePackFiles\i386\wsnmp32.dll + 2009-12-29 19:44 . 2008-04-13 20:04 12063 c:\windows\ServicePackFiles\i386\wsiintxx.sys + 2009-12-29 19:44 . 2008-04-14 03:42 19456 c:\windows\ServicePackFiles\i386\wshtcpip.dll + 2009-12-29 19:44 . 2008-04-14 03:42 11264 c:\windows\ServicePackFiles\i386\wshrm.dll + 2009-12-29 19:45 . 2008-04-14 03:42 14336 c:\windows\ServicePackFiles\i386\wship6.dll + 2009-12-29 19:44 . 2008-04-14 03:42 90112 c:\windows\ServicePackFiles\i386\wshext.dll + 2009-12-29 19:44 . 2008-04-14 03:42 36864 c:\windows\ServicePackFiles\i386\wshcon.dll + 2009-12-29 19:44 . 2008-04-14 03:42 80896 c:\windows\ServicePackFiles\i386\wscsvc.dll + 2009-12-29 19:45 . 2008-04-14 03:42 13824 c:\windows\ServicePackFiles\i386\wscntfy.exe + 2009-12-29 19:44 . 2008-04-14 03:42 19968 c:\windows\ServicePackFiles\i386\ws2help.dll + 2009-12-29 19:44 . 2008-04-14 03:42 82432 c:\windows\ServicePackFiles\i386\ws2_32.dll + 2009-12-29 19:44 . 2008-04-14 03:42 11264 c:\windows\ServicePackFiles\i386\wpnpinst.exe + 2009-12-29 19:44 . 2008-04-14 03:42 32256 c:\windows\ServicePackFiles\i386\wpabaln.exe + 2009-12-29 19:44 . 2008-04-14 03:42 95232 c:\windows\ServicePackFiles\i386\wmiutils.dll + 2009-12-29 19:44 . 2008-04-14 03:42 41472 c:\windows\ServicePackFiles\i386\wmipsess.dll + 2009-12-29 19:44 . 2008-04-14 03:42 62464 c:\windows\ServicePackFiles\i386\wmipjobj.dll + 2009-12-29 19:44 . 2008-04-14 03:42 61952 c:\windows\ServicePackFiles\i386\wmipiprt.dll + 2009-12-29 19:44 . 2008-04-14 03:42 60928 c:\windows\ServicePackFiles\i386\wmicookr.dll + 2009-12-29 19:44 . 2008-04-14 03:42 88576 c:\windows\ServicePackFiles\i386\wmiaprpl.dll + 2009-12-29 19:45 . 2008-04-14 03:42 92672 c:\windows\ServicePackFiles\i386\wlnotify.dll + 2009-12-29 19:44 . 2008-04-14 03:42 69120 c:\windows\ServicePackFiles\i386\wlanapi.dll + 2009-12-29 19:44 . 2008-04-14 03:42 53760 c:\windows\ServicePackFiles\i386\winsta.dll + 2009-12-29 19:44 . 2008-04-14 03:42 17408 c:\windows\ServicePackFiles\i386\winshfhc.dll + 2009-12-29 19:45 . 2008-04-14 03:42 99328 c:\windows\ServicePackFiles\i386\winscard.dll + 2009-12-29 19:44 . 2008-04-14 03:42 16896 c:\windows\ServicePackFiles\i386\winrnr.dll + 2009-12-29 19:44 . 2008-04-14 03:42 32256 c:\windows\ServicePackFiles\i386\winipsec.dll + 2009-12-29 19:44 . 2008-04-14 03:42 75776 c:\windows\ServicePackFiles\i386\wiascr.dll + 2009-12-29 19:44 . 2008-04-14 03:42 65024 c:\windows\ServicePackFiles\i386\wextract.exe + 2009-12-29 19:44 . 2008-04-14 03:42 68096 c:\windows\ServicePackFiles\i386\webclnt.dll + 2009-12-29 19:44 . 2008-04-13 22:47 83072 c:\windows\ServicePackFiles\i386\wdmaud.sys + 2009-12-29 19:44 . 2008-04-14 03:42 23552 c:\windows\ServicePackFiles\i386\wdmaud.drv + 2009-12-29 19:44 . 2008-04-14 03:42 49152 c:\windows\ServicePackFiles\i386\wdigest.dll + 2009-12-29 19:45 . 2008-04-13 20:04 23615 c:\windows\ServicePackFiles\i386\wch7xxnt.sys + 2009-12-29 19:45 . 2008-04-13 22:15 31744 c:\windows\ServicePackFiles\i386\wceusbsh.sys + 2009-12-29 19:44 . 2008-04-14 03:42 43520 c:\windows\ServicePackFiles\i386\wbemsvc.dll + 2009-12-29 19:44 . 2008-04-14 03:42 18944 c:\windows\ServicePackFiles\i386\wbemprox.dll + 2009-12-29 19:45 . 2008-04-14 03:42 43008 c:\windows\ServicePackFiles\i386\wbemperf.dll + 2009-12-29 19:44 . 2008-04-14 03:42 71680 c:\windows\ServicePackFiles\i386\wbemcons.dll + 2009-12-29 19:44 . 2008-04-13 20:04 25471 c:\windows\ServicePackFiles\i386\watv10nt.sys + 2009-12-29 19:44 . 2008-04-13 20:04 22271 c:\windows\ServicePackFiles\i386\watv06nt.sys + 2009-12-29 19:45 . 2008-04-13 20:04 33599 c:\windows\ServicePackFiles\i386\watv04nt.sys + 2009-12-29 19:44 . 2008-04-13 20:04 19551 c:\windows\ServicePackFiles\i386\watv02nt.sys + 2009-12-29 19:44 . 2008-04-13 20:04 29311 c:\windows\ServicePackFiles\i386\watv01nt.sys + 2009-12-29 19:44 . 2008-04-13 22:15 17664 c:\windows\ServicePackFiles\i386\watchdog.sys + 2009-12-29 19:44 . 2008-04-13 22:27 34560 c:\windows\ServicePackFiles\i386\wanarp.sys + 2009-12-29 19:45 . 2008-04-14 03:42 53248 c:\windows\ServicePackFiles\i386\wamreg51.dll + 2009-12-29 19:45 . 2008-04-14 03:42 76800 c:\windows\ServicePackFiles\i386\wam51.dll + 2009-12-29 19:44 . 2008-04-13 20:04 11935 c:\windows\ServicePackFiles\i386\wadv11nt.sys + 2009-12-29 19:45 . 2008-04-13 20:04 11871 c:\windows\ServicePackFiles\i386\wadv09nt.sys + 2009-12-29 19:44 . 2008-04-13 20:04 11295 c:\windows\ServicePackFiles\i386\wadv08nt.sys + 2009-12-29 19:44 . 2008-04-13 20:04 11807 c:\windows\ServicePackFiles\i386\wadv07nt.sys + 2009-12-29 19:44 . 2008-04-13 20:04 11775 c:\windows\ServicePackFiles\i386\wadv05nt.sys + 2009-12-29 19:44 . 2008-04-13 20:04 12127 c:\windows\ServicePackFiles\i386\wadv02nt.sys + 2009-12-29 19:44 . 2008-04-13 20:04 12415 c:\windows\ServicePackFiles\i386\wadv01nt.sys + 2009-12-29 19:44 . 2008-04-13 22:13 14208 c:\windows\ServicePackFiles\i386\wacompen.sys + 2009-12-29 19:45 . 2008-04-14 03:42 30208 c:\windows\ServicePackFiles\i386\wabmig.exe + 2009-12-29 19:44 . 2008-04-14 03:42 85504 c:\windows\ServicePackFiles\i386\wabimp.dll + 2009-12-29 19:44 . 2008-04-14 03:42 32768 c:\windows\ServicePackFiles\i386\wabfind.dll + 2009-12-29 19:44 . 2008-04-14 03:42 46080 c:\windows\ServicePackFiles\i386\wab.exe + 2009-12-29 19:45 . 2008-04-14 03:42 15872 c:\windows\ServicePackFiles\i386\w3ssl.dll + 2009-12-29 19:45 . 2008-04-13 22:11 52352 c:\windows\ServicePackFiles\i386\volsnap.sys + 2009-12-29 19:44 . 2008-04-13 22:14 81664 c:\windows\ServicePackFiles\i386\videoprt.sys + 2009-12-29 19:45 . 2008-04-13 22:06 42240 c:\windows\ServicePackFiles\i386\viaagp.sys + 2009-12-29 19:44 . 2008-04-13 22:14 20992 c:\windows\ServicePackFiles\i386\vga.sys + 2009-12-29 19:44 . 2008-04-14 03:42 53760 c:\windows\ServicePackFiles\i386\vfwwdm32.dll + 2009-12-29 19:45 . 2008-04-14 03:42 18944 c:\windows\ServicePackFiles\i386\version.dll + 2009-12-29 19:44 . 2008-04-14 03:42 26624 c:\windows\ServicePackFiles\i386\verifier.dll + 2009-12-29 19:44 . 2008-04-14 03:42 28672 c:\windows\ServicePackFiles\i386\verclsid.exe + 2009-12-29 19:45 . 2008-04-14 03:42 51712 c:\windows\ServicePackFiles\i386\vdmredir.dll + 2009-12-29 19:44 . 2008-04-14 03:42 26112 c:\windows\ServicePackFiles\i386\vdmdbg.dll + 2009-12-29 19:44 . 2008-04-14 03:42 11325 c:\windows\ServicePackFiles\i386\vchnt5.dll + 2009-12-29 19:44 . 2008-04-14 03:42 30749 c:\windows\ServicePackFiles\i386\vbajet32.dll + 2009-12-29 19:44 . 2008-04-14 03:42 50176 c:\windows\ServicePackFiles\i386\utilman.exe + 2009-12-29 19:44 . 2008-04-14 03:42 26112 c:\windows\ServicePackFiles\i386\userinit.exe + 2009-12-29 19:44 . 2008-04-14 03:42 74240 c:\windows\ServicePackFiles\i386\usbui.dll + 2009-12-29 19:44 . 2008-04-13 22:15 20608 c:\windows\ServicePackFiles\i386\usbuhci.sys + 2009-12-29 19:44 . 2008-04-13 22:15 26368 c:\windows\ServicePackFiles\i386\usbstor.sys + 2009-12-29 19:44 . 2008-04-13 22:15 26112 c:\windows\ServicePackFiles\i386\usbser.sys + 2009-12-29 19:44 . 2008-04-13 22:15 15104 c:\windows\ServicePackFiles\i386\usbscan.sys + 2009-12-29 19:45 . 2008-04-13 22:17 25856 c:\windows\ServicePackFiles\i386\usbprint.sys + 2009-12-29 19:44 . 2008-04-13 22:15 17152 c:\windows\ServicePackFiles\i386\usbohci.sys + 2009-12-29 19:44 . 2008-04-14 03:42 16896 c:\windows\ServicePackFiles\i386\usbmon.dll + 2009-12-29 19:45 . 2008-04-13 22:15 15872 c:\windows\ServicePackFiles\i386\usbintel.sys + 2009-12-29 19:44 . 2008-04-13 22:15 59520 c:\windows\ServicePackFiles\i386\usbhub.sys + 2009-12-29 19:44 . 2008-04-13 22:15 30208 c:\windows\ServicePackFiles\i386\usbehci.sys + 2009-12-29 19:45 . 2008-04-13 22:15 32128 c:\windows\ServicePackFiles\i386\usbccgp.sys + 2009-12-29 19:44 . 2008-04-13 22:15 25728 c:\windows\ServicePackFiles\i386\usbcamd2.sys + 2009-12-29 19:44 . 2008-04-13 22:15 25600 c:\windows\ServicePackFiles\i386\usbcamd.sys + 2009-12-29 19:44 . 2008-04-13 22:15 60032 c:\windows\ServicePackFiles\i386\usbaudio.sys + 2009-12-29 19:44 . 2008-04-13 22:26 12800 c:\windows\ServicePackFiles\i386\usb8023x.sys + 2009-12-29 19:44 . 2008-04-13 22:26 12800 c:\windows\ServicePackFiles\i386\usb8023.sys + 2009-12-29 19:44 . 2008-04-13 20:05 32384 c:\windows\ServicePackFiles\i386\usb101et.sys + 2009-12-29 19:44 . 2008-04-14 03:42 37888 c:\windows\ServicePackFiles\i386\url.dll + 2009-12-29 19:44 . 2008-04-14 03:42 18432 c:\windows\ServicePackFiles\i386\ups.exe + 2009-12-29 19:44 . 2008-04-14 03:42 16896 c:\windows\ServicePackFiles\i386\upnpcont.exe + 2009-12-29 19:45 . 2008-04-14 03:42 13824 c:\windows\ServicePackFiles\i386\uniplat.dll + 2009-12-29 19:44 . 2008-04-14 03:42 74240 c:\windows\ServicePackFiles\i386\unimdmat.dll + 2009-12-29 19:44 . 2008-04-14 03:42 35840 c:\windows\ServicePackFiles\i386\umandlg.dll + 2009-12-29 19:44 . 2008-04-14 03:42 26624 c:\windows\ServicePackFiles\i386\udhisapi.dll + 2009-12-29 19:44 . 2008-04-13 22:02 66048 c:\windows\ServicePackFiles\i386\udfs.sys + 2009-12-29 19:44 . 2008-04-13 22:06 44672 c:\windows\ServicePackFiles\i386\uagp35.sys + 2009-12-29 19:44 . 2008-04-14 03:42 60416 c:\windows\ServicePackFiles\i386\tzchange.exe + 2009-12-29 19:44 . 2008-04-14 03:42 57856 c:\windows\ServicePackFiles\i386\twext.dll + 2009-12-29 19:44 . 2008-04-14 03:42 50688 c:\windows\ServicePackFiles\i386\twain_32.dll + 2009-12-29 19:45 . 2008-04-13 22:26 12288 c:\windows\ServicePackFiles\i386\tunmp.sys + 2009-12-29 19:45 . 2008-04-14 03:42 16384 c:\windows\ServicePackFiles\i386\ttyui.dll + 2009-12-29 19:44 . 2007-04-02 19:01 39936 c:\windows\ServicePackFiles\i386\ttyres.dll + 2009-12-29 19:45 . 2008-04-14 03:42 50688 c:\windows\ServicePackFiles\i386\tspkg.dll + 2009-12-29 19:45 . 2008-04-14 03:42 53248 c:\windows\ServicePackFiles\i386\tsgqec.dll + 2009-12-29 19:45 . 2008-04-14 03:43 12168 c:\windows\ServicePackFiles\i386\tsddd.dll + 2008-04-14 03:41 . 2008-04-14 03:41 25600 c:\windows\ServicePackFiles\i386\tscupdc.dll + 2009-12-29 19:44 . 2007-10-30 13:36 13801 c:\windows\ServicePackFiles\i386\tscuinst.vbs + 2009-12-29 19:44 . 2007-12-12 14:03 18917 c:\windows\ServicePackFiles\i386\tscinst.vbs + 2009-12-29 19:45 . 2008-04-14 03:42 93696 c:\windows\ServicePackFiles\i386\tscfgwmi.dll + 2009-12-29 19:44 . 2008-04-14 03:42 90112 c:\windows\ServicePackFiles\i386\trkwks.dll + 2009-12-29 19:44 . 2008-04-14 03:42 12800 c:\windows\ServicePackFiles\i386\tree.com + 2009-12-29 19:44 . 2008-04-14 03:42 12288 c:\windows\ServicePackFiles\i386\tracert.exe + 2009-12-29 19:44 . 2008-04-14 03:42 82944 c:\windows\ServicePackFiles\i386\tp4mon.exe + 2009-12-29 19:45 . 2008-04-14 03:42 33792 c:\windows\ServicePackFiles\i386\tools.dll + 2007-12-17 15:30 . 2007-12-17 15:30 66592 c:\windows\ServicePackFiles\i386\togac.exe + 2009-12-29 19:45 . 2008-04-14 03:42 73216 c:\windows\ServicePackFiles\i386\tlntsvr.exe + 2009-12-29 19:45 . 2008-04-14 03:42 78336 c:\windows\ServicePackFiles\i386\tlntsess.exe + 2009-12-29 19:45 . 2008-04-14 03:42 61440 c:\windows\ServicePackFiles\i386\tlntadmn.exe + 2009-12-29 19:44 . 2008-04-14 03:43 40840 c:\windows\ServicePackFiles\i386\termdd.sys + 2008-04-14 03:42 . 2008-04-14 03:42 75776 c:\windows\ServicePackFiles\i386\telnet.exe + 2009-12-29 19:44 . 2008-04-14 03:43 21896 c:\windows\ServicePackFiles\i386\tdtcp.sys + 2009-12-29 19:44 . 2008-04-14 03:43 12040 c:\windows\ServicePackFiles\i386\tdpipe.sys + 2009-12-29 19:44 . 2008-04-13 22:30 19072 c:\windows\ServicePackFiles\i386\tdi.sys + 2007-04-02 20:06 . 2007-04-02 20:06 16384 c:\windows\ServicePackFiles\i386\tcptsat.dll + 2008-04-14 03:42 . 2008-04-14 03:42 32827 c:\windows\ServicePackFiles\i386\tcptest.exe + 2009-12-29 19:44 . 2008-04-14 03:42 45568 c:\windows\ServicePackFiles\i386\tcpmonui.dll + 2009-12-29 19:44 . 2008-04-14 03:42 45568 c:\windows\ServicePackFiles\i386\tcpmon.dll + 2009-12-29 19:44 . 2008-04-14 03:42 14848 c:\windows\ServicePackFiles\i386\tcpmib.dll + 2009-12-29 19:45 . 2008-04-14 03:42 77824 c:\windows\ServicePackFiles\i386\tasklist.exe + 2009-12-29 19:45 . 2008-04-14 03:42 76288 c:\windows\ServicePackFiles\i386\taskkill.exe + 2009-12-29 19:44 . 2008-04-13 22:10 14976 c:\windows\ServicePackFiles\i386\tape.sys + 2009-12-29 19:45 . 2008-04-14 03:42 33792 c:\windows\ServicePackFiles\i386\tabletoc.dll + 2007-06-27 16:29 . 2007-06-27 16:29 61440 c:\windows\ServicePackFiles\i386\system.web.regularexpressions.dll + 2007-06-27 16:29 . 2007-06-27 16:29 77824 c:\windows\ServicePackFiles\i386\system.security.dll + 2008-04-13 19:41 . 2008-04-13 19:41 48640 c:\windows\ServicePackFiles\i386\system.enterpriseservices.thunk.dll + 2007-06-27 16:28 . 2007-06-27 16:28 65536 c:\windows\ServicePackFiles\i386\system.drawing.design.dll + 2007-06-27 16:28 . 2007-06-27 16:28 86016 c:\windows\ServicePackFiles\i386\system.directoryservices.dll + 2007-06-27 16:27 . 2007-06-27 16:27 77824 c:\windows\ServicePackFiles\i386\system.configuration.install.dll + 2009-12-29 19:45 . 2008-04-14 03:42 71680 c:\windows\ServicePackFiles\i386\sysinfo.exe + 2009-12-29 19:44 . 2008-04-13 22:45 60800 c:\windows\ServicePackFiles\i386\sysaudio.sys + 2009-12-29 19:45 . 2008-04-14 03:42 57856 c:\windows\ServicePackFiles\i386\synceng.dll + 2009-12-29 19:44 . 2008-04-13 22:15 56576 c:\windows\ServicePackFiles\i386\swmidi.sys + 2009-12-29 19:44 . 2008-04-14 03:42 14336 c:\windows\ServicePackFiles\i386\svchost.exe + 2009-12-29 19:45 . 2008-04-14 03:42 46592 c:\windows\ServicePackFiles\i386\svcext51.dll + 2008-04-14 03:42 . 2008-04-14 03:42 65601 c:\windows\ServicePackFiles\i386\stub_fpsrvwin.exe + 2008-04-14 03:42 . 2008-04-14 03:42 16449 c:\windows\ServicePackFiles\i386\stub_fpsrvadm.exe + 2009-12-29 19:44 . 2008-04-14 03:42 75776 c:\windows\ServicePackFiles\i386\strmfilt.dll + 2009-12-29 19:44 . 2008-04-13 22:16 15232 c:\windows\ServicePackFiles\i386\streamip.sys + 2009-12-29 19:45 . 2008-04-13 22:15 49408 c:\windows\ServicePackFiles\i386\stream.sys + 2009-12-29 19:44 . 2008-04-14 03:42 74752 c:\windows\ServicePackFiles\i386\storprop.dll + 2009-12-29 19:45 . 2008-04-14 03:42 14848 c:\windows\ServicePackFiles\i386\stimon.exe + 2009-12-29 19:45 . 2008-04-14 03:42 68096 c:\windows\ServicePackFiles\i386\sti.dll + 2009-12-29 19:44 . 2008-04-14 03:42 86528 c:\windows\ServicePackFiles\i386\stdprov.dll + 2009-12-29 19:44 . 2008-04-14 03:42 59392 c:\windows\ServicePackFiles\i386\stclient.dll + 2009-12-29 19:45 . 2008-04-14 03:42 33280 c:\windows\ServicePackFiles\i386\sstub.dll + 2009-12-29 19:44 . 2008-04-14 03:42 14336 c:\windows\ServicePackFiles\i386\ssstars.scr + 2009-12-29 19:45 . 2008-04-14 03:42 46592 c:\windows\ServicePackFiles\i386\sspifilt.dll + 2009-12-29 19:44 . 2008-04-14 03:42 18944 c:\windows\ServicePackFiles\i386\ssmyst.scr + 2009-12-29 19:44 . 2008-04-14 03:42 47104 c:\windows\ServicePackFiles\i386\ssmypics.scr + 2009-12-29 19:44 . 2008-04-14 03:42 20992 c:\windows\ServicePackFiles\i386\ssmarque.scr + 2009-12-29 19:45 . 2008-04-14 03:42 45056 c:\windows\ServicePackFiles\i386\ssinc51.dll + 2009-12-29 19:44 . 2008-04-14 03:42 71680 c:\windows\ServicePackFiles\i386\ssdpsrv.dll + 2009-12-29 19:44 . 2008-04-14 03:42 34816 c:\windows\ServicePackFiles\i386\ssdpapi.dll + 2009-12-29 19:45 . 2008-04-14 03:42 19968 c:\windows\ServicePackFiles\i386\ssbezier.scr + 2009-12-29 19:44 . 2008-04-14 03:42 96768 c:\windows\ServicePackFiles\i386\srvsvc.dll + 2009-12-29 19:44 . 2008-04-14 03:42 67584 c:\windows\ServicePackFiles\i386\srclient.dll + 2009-12-29 19:45 . 2008-04-14 03:42 58434 c:\windows\ServicePackFiles\i386\srchctls.dll + 2009-12-29 19:44 . 2008-04-13 22:06 73472 c:\windows\ServicePackFiles\i386\sr.sys + 2008-04-14 03:42 . 2008-04-14 03:42 20992 c:\windows\ServicePackFiles\i386\spupdwxp.exe + 2009-12-29 19:44 . 2008-04-14 03:42 57856 c:\windows\ServicePackFiles\i386\spoolsv.exe + 2009-12-29 19:44 . 2008-04-14 03:42 75264 c:\windows\ServicePackFiles\i386\spoolss.dll + 2008-04-14 03:42 . 2008-04-14 03:42 11264 c:\windows\ServicePackFiles\i386\spnpinst.exe + 2009-12-29 19:45 . 2008-04-13 22:13 12800 c:\windows\ServicePackFiles\i386\spiisupd.exe + 2009-12-29 19:44 . 2008-04-13 20:13 62976 c:\windows\ServicePackFiles\i386\spgrmr.dll + 2009-12-29 19:45 . 2008-04-14 03:42 24576 c:\windows\ServicePackFiles\i386\sort.exe + 2009-12-29 19:44 . 2008-04-13 22:16 25344 c:\windows\ServicePackFiles\i386\sonydcam.sys + 2009-12-29 19:44 . 2008-04-14 03:42 39936 c:\windows\ServicePackFiles\i386\snmpthrd.dll + 2009-12-29 19:45 . 2008-04-14 03:42 18944 c:\windows\ServicePackFiles\i386\snmpapi.dll + 2009-12-29 19:44 . 2008-04-14 03:42 33280 c:\windows\ServicePackFiles\i386\snmp.exe + 2009-12-29 19:44 . 2008-04-14 03:42 34816 c:\windows\ServicePackFiles\i386\sniffpol.dll + 2009-12-29 19:45 . 2008-04-14 03:42 10752 c:\windows\ServicePackFiles\i386\smtpapi.dll + 2009-12-29 19:44 . 2008-04-14 03:42 50688 c:\windows\ServicePackFiles\i386\smss.exe + 2009-12-29 19:44 . 2008-04-14 03:42 89600 c:\windows\ServicePackFiles\i386\smlogsvc.exe + 2009-12-29 19:45 . 2008-04-13 22:06 16000 c:\windows\ServicePackFiles\i386\smbbatt.sys + 2009-12-29 19:44 . 2008-04-13 21:53 13240 c:\windows\ServicePackFiles\i386\slwdmsup.sys + 2009-12-29 19:45 . 2008-04-14 03:42 73796 c:\windows\ServicePackFiles\i386\slserv.exe + 2009-12-29 19:44 . 2008-04-14 03:42 32866 c:\windows\ServicePackFiles\i386\slrundll.exe + 2009-12-29 19:44 . 2008-04-13 21:53 95424 c:\windows\ServicePackFiles\i386\slnthal.sys + 2009-12-29 19:44 . 2008-04-13 22:16 11136 c:\windows\ServicePackFiles\i386\slip.sys + 2009-12-29 19:45 . 2008-04-14 03:42 73832 c:\windows\ServicePackFiles\i386\slcoinst.dll + 2009-12-29 19:44 . 2008-04-14 03:42 98304 c:\windows\ServicePackFiles\i386\slbiop.dll + 2009-12-29 19:45 . 2008-04-14 03:42 25088 c:\windows\ServicePackFiles\i386\slayerxp.dll + 2009-12-29 19:44 . 2008-04-13 20:05 63547 c:\windows\ServicePackFiles\i386\sla30nd5.sys + 2009-12-29 19:45 . 2008-04-14 03:42 26112 c:\windows\ServicePackFiles\i386\skeys.exe + 2009-12-29 19:44 . 2008-04-13 20:05 32768 c:\windows\ServicePackFiles\i386\sisnic.sys + 2009-12-29 19:44 . 2008-04-13 22:06 40960 c:\windows\ServicePackFiles\i386\sisagp.sys + 2009-12-29 19:44 . 2008-04-14 03:42 70144 c:\windows\ServicePackFiles\i386\sigverif.exe + 2009-12-29 19:45 . 2008-04-14 03:42 13312 c:\windows\ServicePackFiles\i386\sigtab.dll + 2009-12-29 19:44 . 2008-04-14 03:42 19456 c:\windows\ServicePackFiles\i386\shutdown.exe + 2008-04-14 03:42 . 2008-04-14 03:42 16437 c:\windows\ServicePackFiles\i386\shtml.exe + 2008-04-14 03:42 . 2008-04-14 03:42 20536 c:\windows\ServicePackFiles\i386\shtml.dll + 2009-12-29 19:44 . 2008-04-14 03:42 27648 c:\windows\ServicePackFiles\i386\shscrap.dll + 2009-12-29 19:45 . 2008-04-14 03:42 77824 c:\windows\ServicePackFiles\i386\shrpubw.exe + 2009-12-29 19:44 . 2008-04-14 03:42 45056 c:\windows\ServicePackFiles\i386\shmgrate.exe + 2009-12-29 19:44 . 2008-04-14 03:42 65024 c:\windows\ServicePackFiles\i386\shimeng.dll + 2009-12-29 19:44 . 2008-04-14 03:42 68096 c:\windows\ServicePackFiles\i386\shgina.dll + 2009-12-29 19:44 . 2008-04-14 03:42 25088 c:\windows\ServicePackFiles\i386\shfolder.dll + 2009-12-29 19:44 . 2008-04-13 22:10 11392 c:\windows\ServicePackFiles\i386\sfloppy.sys + 2009-12-29 19:44 . 2008-04-13 22:10 11008 c:\windows\ServicePackFiles\i386\sffp_sd.sys + 2009-12-29 19:44 . 2008-04-13 22:10 10240 c:\windows\ServicePackFiles\i386\sffp_mmc.sys + 2009-12-29 19:44 . 2008-04-13 22:10 11904 c:\windows\ServicePackFiles\i386\sffdisk.sys + 2009-12-29 19:44 . 2008-04-14 03:42 32768 c:\windows\ServicePackFiles\i386\setupn.exe + 2009-12-29 19:44 . 2008-04-14 03:42 73216 c:\windows\ServicePackFiles\i386\setup50.exe + 2009-12-29 19:44 . 2008-04-14 03:42 23040 c:\windows\ServicePackFiles\i386\setup.exe + 2007-12-17 15:29 . 2007-12-17 15:29 66592 c:\windows\ServicePackFiles\i386\setregni.exe + 2009-12-29 19:44 . 2008-04-14 03:42 31232 c:\windows\ServicePackFiles\i386\sethc.exe + 2009-12-29 19:44 . 2008-04-14 03:42 56320 c:\windows\ServicePackFiles\i386\servdeps.dll + 2009-12-29 19:44 . 2008-04-13 22:45 64512 c:\windows\ServicePackFiles\i386\serial.sys + 2009-12-29 19:44 . 2008-04-13 22:10 15744 c:\windows\ServicePackFiles\i386\serenum.sys + 2009-12-29 19:45 . 2008-04-14 03:42 39424 c:\windows\ServicePackFiles\i386\sens.dll + 2009-12-29 19:45 . 2008-04-14 03:42 54784 c:\windows\ServicePackFiles\i386\sendmail.dll + 2009-12-29 19:44 . 2008-04-14 03:42 29184 c:\windows\ServicePackFiles\i386\sendcmsg.dll + 2009-12-29 19:44 . 2008-04-14 03:42 56320 c:\windows\ServicePackFiles\i386\secur32.dll + 2009-12-29 19:44 . 2008-04-14 03:42 18944 c:\windows\ServicePackFiles\i386\seclogon.dll + 2009-12-29 19:45 . 2008-04-14 03:42 18944 c:\windows\ServicePackFiles\i386\secedit.exe + 2009-12-29 19:44 . 2008-04-13 20:09 20480 c:\windows\ServicePackFiles\i386\secdrv.sys + 2009-12-29 19:44 . 2008-04-14 03:42 29184 c:\windows\ServicePackFiles\i386\sdhcinst.dll + 2009-12-29 19:44 . 2008-04-13 22:06 79232 c:\windows\ServicePackFiles\i386\sdbus.sys + 2009-12-29 19:44 . 2008-04-14 03:42 77312 c:\windows\ServicePackFiles\i386\sdbinst.exe + 2009-12-29 19:44 . 2008-04-13 22:15 11520 c:\windows\ServicePackFiles\i386\scsiscan.sys + 2009-12-29 19:44 . 2008-04-13 22:10 96384 c:\windows\ServicePackFiles\i386\scsiport.sys + 2009-12-29 19:44 . 2008-04-14 03:42 36352 c:\windows\ServicePackFiles\i386\scrcons.exe + 2009-12-29 19:45 . 2008-04-14 03:42 20480 c:\windows\ServicePackFiles\i386\sclgntfy.dll + 2009-12-29 19:44 . 2008-04-14 03:42 95744 c:\windows\ServicePackFiles\i386\scardsvr.exe + 2009-12-29 19:44 . 2008-04-14 03:42 69632 c:\windows\ServicePackFiles\i386\scarddlg.dll + 2009-12-29 19:44 . 2008-04-13 22:10 43904 c:\windows\ServicePackFiles\i386\sbp2port.sys + 2009-12-29 19:45 . 2008-04-14 03:42 13312 c:\windows\ServicePackFiles\i386\savedump.exe + 2009-12-29 19:44 . 2008-04-14 03:42 64000 c:\windows\ServicePackFiles\i386\samlib.dll + 2009-12-29 19:44 . 2008-04-14 03:42 45568 c:\windows\ServicePackFiles\i386\safrslv.dll + 2009-12-29 19:45 . 2008-04-14 03:42 29696 c:\windows\ServicePackFiles\i386\safrdm.dll + 2009-12-29 19:44 . 2008-04-14 03:42 43520 c:\windows\ServicePackFiles\i386\safrcdlg.dll + 2009-12-29 19:44 . 2008-04-14 03:42 29696 c:\windows\ServicePackFiles\i386\rw450ext.dll + 2009-12-29 19:44 . 2008-04-14 03:42 27648 c:\windows\ServicePackFiles\i386\rw430ext.dll + 2009-12-29 19:44 . 2008-04-14 03:42 29184 c:\windows\ServicePackFiles\i386\rw330ext.dll + 2009-12-29 19:44 . 2008-04-14 03:42 27648 c:\windows\ServicePackFiles\i386\rw001ext.dll + 2009-12-29 19:44 . 2008-04-14 03:42 14336 c:\windows\ServicePackFiles\i386\runonce.exe + 2009-12-29 19:44 . 2008-04-14 03:42 33280 c:\windows\ServicePackFiles\i386\rundll32.exe + 2009-12-29 19:44 . 2008-04-14 03:42 44032 c:\windows\ServicePackFiles\i386\rtutils.dll + 2009-12-29 19:44 . 2008-04-13 20:05 20992 c:\windows\ServicePackFiles\i386\rtl8139.sys + 2009-12-29 19:45 . 2008-04-14 03:42 31744 c:\windows\ServicePackFiles\i386\rtipxmib.dll + 2009-12-29 19:44 . 2008-04-14 03:42 77312 c:\windows\ServicePackFiles\i386\rtcshare.exe + 2009-12-29 19:45 . 2008-04-14 03:42 92672 c:\windows\ServicePackFiles\i386\rsvpsp.dll + 2009-12-29 19:44 . 2008-04-14 03:42 18944 c:\windows\ServicePackFiles\i386\rsmps.dll + 2009-12-29 19:44 . 2008-04-14 03:42 39936 c:\windows\ServicePackFiles\i386\rshx32.dll + 2009-12-29 19:44 . 2008-04-14 03:42 14848 c:\windows\ServicePackFiles\i386\rsh.exe + 2009-12-29 19:45 . 2008-04-14 03:42 61440 c:\windows\ServicePackFiles\i386\rrcm.dll + 2009-12-29 19:44 . 2008-04-13 22:10 79104 c:\windows\ServicePackFiles\i386\rocket.sys + 2009-12-29 19:44 . 2008-04-13 22:26 30592 c:\windows\ServicePackFiles\i386\rndismpx.sys + 2009-12-29 19:44 . 2008-04-13 22:26 30592 c:\windows\ServicePackFiles\i386\rndismp.sys + 2009-12-29 19:44 . 2008-04-14 03:42 11776 c:\windows\ServicePackFiles\i386\riafui2.dll + 2009-12-29 19:45 . 2008-04-14 03:42 11776 c:\windows\ServicePackFiles\i386\riafui1.dll + 2009-12-29 19:44 . 2008-04-13 22:16 59136 c:\windows\ServicePackFiles\i386\rfcomm.sys + 2009-12-29 19:45 . 2008-04-14 03:42 13824 c:\windows\ServicePackFiles\i386\rexec.exe + 2009-12-29 19:44 . 2008-04-14 03:42 58880 c:\windows\ServicePackFiles\i386\resutils.dll + 2009-12-29 19:44 . 2008-04-14 03:42 60416 c:\windows\ServicePackFiles\i386\remotepg.dll + 2009-12-29 19:44 . 2008-04-14 03:42 11776 c:\windows\ServicePackFiles\i386\regsvr32.exe + 2007-06-27 16:27 . 2007-06-27 16:27 11264 c:\windows\ServicePackFiles\i386\regsvcs.exe + 2009-12-29 19:44 . 2008-04-14 03:42 59904 c:\windows\ServicePackFiles\i386\regsvc.dll + 2007-06-27 16:27 . 2007-06-27 16:27 32768 c:\windows\ServicePackFiles\i386\regcode.dll + 2007-06-27 16:27 . 2007-06-27 16:27 28672 c:\windows\ServicePackFiles\i386\regasm.exe + 2009-12-29 19:44 . 2008-04-14 03:42 49664 c:\windows\ServicePackFiles\i386\regapi.dll + 2009-12-29 19:44 . 2008-04-14 03:42 50176 c:\windows\ServicePackFiles\i386\reg.exe + 2009-12-29 19:45 . 2008-04-13 22:10 57600 c:\windows\ServicePackFiles\i386\redbook.sys + 2009-12-29 19:44 . 2008-04-13 21:53 13776 c:\windows\ServicePackFiles\i386\recagent.sys + 2009-12-29 19:45 . 2008-04-14 03:42 67072 c:\windows\ServicePackFiles\i386\rdshost.exe + 2009-12-29 19:45 . 2008-04-14 03:42 13824 c:\windows\ServicePackFiles\i386\rdsaddin.exe + 2009-12-29 19:45 . 2008-04-14 03:43 87176 c:\windows\ServicePackFiles\i386\rdpwsx.dll + 2009-12-29 19:44 . 2008-04-14 03:42 19968 c:\windows\ServicePackFiles\i386\rdpsnd.dll + 2009-12-29 19:45 . 2008-04-14 03:43 92424 c:\windows\ServicePackFiles\i386\rdpdd.dll + 2009-12-29 19:44 . 2008-04-14 03:42 62976 c:\windows\ServicePackFiles\i386\rdpclip.exe + 2009-12-29 19:44 . 2008-04-14 03:42 21504 c:\windows\ServicePackFiles\i386\rcp.exe + 2009-12-29 19:44 . 2008-04-14 03:42 35840 c:\windows\ServicePackFiles\i386\rcimlby.exe + 2009-12-29 19:44 . 2008-04-14 03:42 58368 c:\windows\ServicePackFiles\i386\rastapi.dll + 2009-12-29 19:45 . 2008-04-14 03:42 16384 c:\windows\ServicePackFiles\i386\rassapi.dll + 2009-12-29 19:44 . 2008-04-14 03:42 61952 c:\windows\ServicePackFiles\i386\rasqec.dll + 2009-12-29 19:45 . 2008-04-13 22:49 48384 c:\windows\ServicePackFiles\i386\raspptp.sys + 2009-12-29 19:44 . 2008-04-13 22:27 41472 c:\windows\ServicePackFiles\i386\raspppoe.sys + 2009-12-29 19:44 . 2008-04-14 03:42 56832 c:\windows\ServicePackFiles\i386\rasphone.exe + 2009-12-29 19:44 . 2008-04-14 03:42 61440 c:\windows\ServicePackFiles\i386\rasman.dll + 2009-12-29 19:44 . 2008-04-13 22:49 51328 c:\windows\ServicePackFiles\i386\rasl2tp.sys + 2009-12-29 19:44 . 2008-04-14 03:42 79872 c:\windows\ServicePackFiles\i386\raschap.dll + 2009-12-29 19:44 . 2008-04-14 03:42 88576 c:\windows\ServicePackFiles\i386\rasauto.dll + 2009-12-29 19:44 . 2008-04-13 22:11 20736 c:\windows\ServicePackFiles\i386\ramdisk.sys + 2009-12-29 19:44 . 2008-04-14 03:42 43520 c:\windows\ServicePackFiles\i386\racpldlg.dll + 2009-12-29 19:44 . 2008-04-14 03:42 76800 c:\windows\ServicePackFiles\i386\qutil.dll + 2009-12-29 19:44 . 2008-04-14 03:42 19968 c:\windows\ServicePackFiles\i386\qprocess.exe + 2009-12-29 19:44 . 2008-04-14 03:42 18944 c:\windows\ServicePackFiles\i386\qmgrprxy.dll + 2009-12-29 19:44 . 2008-04-14 03:42 62464 c:\windows\ServicePackFiles\i386\qcliprov.dll + 2009-12-29 19:44 . 2008-04-14 03:42 34304 c:\windows\ServicePackFiles\i386\pstorsvc.dll + 2009-12-29 19:45 . 2008-04-14 03:42 43520 c:\windows\ServicePackFiles\i386\pstorec.dll + 2009-12-29 19:44 . 2008-04-13 22:26 69120 c:\windows\ServicePackFiles\i386\psched.sys + 2009-12-29 19:45 . 2008-04-14 03:42 96768 c:\windows\ServicePackFiles\i386\psbase.dll + 2009-12-29 19:44 . 2008-04-14 03:42 23040 c:\windows\ServicePackFiles\i386\psapi.dll + 2009-12-29 19:44 . 2008-04-14 03:42 50176 c:\windows\ServicePackFiles\i386\proquota.exe + 2009-12-29 19:44 . 2008-04-14 03:42 27648 c:\windows\ServicePackFiles\i386\profmap.dll + 2009-12-29 19:44 . 2008-04-13 22:01 35840 c:\windows\ServicePackFiles\i386\processr.sys + 2009-12-29 19:45 . 2008-04-13 22:11 17664 c:\windows\ServicePackFiles\i386\ppa3.sys + 2009-12-29 19:44 . 2008-04-14 03:42 17408 c:\windows\ServicePackFiles\i386\powrprof.dll + 2009-12-29 19:44 . 2008-04-14 03:42 49152 c:\windows\ServicePackFiles\i386\powercfg.exe + 2009-12-29 19:45 . 2008-04-14 03:42 92672 c:\windows\ServicePackFiles\i386\policman.dll + 2009-12-29 19:45 . 2008-04-14 03:42 58880 c:\windows\ServicePackFiles\i386\pnrpnsp.dll + 2009-12-29 19:44 . 2008-04-14 03:42 39424 c:\windows\ServicePackFiles\i386\pngfilt.dll + 2009-12-29 19:44 . 2008-04-14 03:42 52736 c:\windows\ServicePackFiles\i386\plotui.dll + 2009-12-29 19:44 . 2008-04-14 03:42 44544 c:\windows\ServicePackFiles\i386\plotter.dll + 2009-12-29 19:44 . 2008-04-14 03:42 15360 c:\windows\ServicePackFiles\i386\pjlmon.dll + 2009-12-29 19:44 . 2008-04-14 03:42 17920 c:\windows\ServicePackFiles\i386\ping.exe + 2008-04-14 03:41 . 2008-04-14 03:41 24064 c:\windows\ServicePackFiles\i386\pidgen.dll + 2009-12-29 19:45 . 2008-04-14 03:42 35328 c:\windows\ServicePackFiles\i386\pid.dll + 2009-12-29 19:44 . 2008-04-13 22:14 28032 c:\windows\ServicePackFiles\i386\perm3.sys + 2009-12-29 19:44 . 2008-04-13 22:14 27904 c:\windows\ServicePackFiles\i386\perm2.sys + 2009-12-29 19:44 . 2008-04-14 03:42 34816 c:\windows\ServicePackFiles\i386\perfproc.dll + 2009-12-29 19:44 . 2008-04-14 03:42 25088 c:\windows\ServicePackFiles\i386\perfos.dll + 2009-12-29 19:45 . 2008-04-14 03:42 17920 c:\windows\ServicePackFiles\i386\perfnet.dll + 2009-12-29 19:44 . 2008-04-14 03:42 15872 c:\windows\ServicePackFiles\i386\perfmon.exe + 2009-12-29 19:44 . 2008-04-14 03:42 26624 c:\windows\ServicePackFiles\i386\perfdisk.dll + 2009-12-29 19:44 . 2008-04-14 03:42 39936 c:\windows\ServicePackFiles\i386\perfctrs.dll + 2008-04-13 19:41 . 2008-04-13 19:41 20480 c:\windows\ServicePackFiles\i386\perfcounter.dll + 2009-12-29 19:44 . 2008-04-13 22:10 24960 c:\windows\ServicePackFiles\i386\pciidex.sys + 2009-12-29 19:44 . 2008-04-13 22:06 68224 c:\windows\ServicePackFiles\i386\pci.sys + 2009-12-29 19:44 . 2008-04-14 03:42 38400 c:\windows\ServicePackFiles\i386\pchsvc.dll + 2009-12-29 19:45 . 2008-04-13 20:05 29502 c:\windows\ServicePackFiles\i386\pca200e.sys + 2009-12-29 19:44 . 2008-04-14 03:42 67584 c:\windows\ServicePackFiles\i386\pautoenr.dll + 2009-12-29 19:44 . 2008-04-13 22:10 19712 c:\windows\ServicePackFiles\i386\partmgr.sys + 2009-12-29 19:44 . 2008-04-13 22:10 80128 c:\windows\ServicePackFiles\i386\parport.sys + 2009-12-29 19:44 . 2008-04-14 03:42 58368 c:\windows\ServicePackFiles\i386\packager.exe + 2009-12-29 19:44 . 2008-04-13 22:01 42752 c:\windows\ServicePackFiles\i386\p3.sys + 2009-12-29 19:45 . 2008-04-14 03:42 67584 c:\windows\ServicePackFiles\i386\osuninst.dll + 2009-12-29 19:45 . 2008-04-14 03:42 67584 c:\windows\ServicePackFiles\i386\opnfiles.exe + 2009-12-29 19:44 . 2008-04-14 03:42 51200 c:\windows\ServicePackFiles\i386\oobebaln.exe + 2009-12-29 19:44 . 2008-04-14 03:42 84992 c:\windows\ServicePackFiles\i386\olepro32.dll + 2009-12-29 19:44 . 2008-04-14 03:42 65536 c:\windows\ServicePackFiles\i386\oledb32r.dll + 2009-12-29 19:44 . 2008-04-14 03:42 37376 c:\windows\ServicePackFiles\i386\olecnv32.dll + 2009-12-29 19:44 . 2008-04-14 03:42 74752 c:\windows\ServicePackFiles\i386\olecli32.dll + 2009-12-29 19:44 . 2008-04-13 22:16 61696 c:\windows\ServicePackFiles\i386\ohci1394.sys + 2009-12-29 19:44 . 2008-04-14 03:42 35328 c:\windows\ServicePackFiles\i386\oemiglib.dll + 2009-12-29 19:45 . 2008-04-14 03:42 60416 c:\windows\ServicePackFiles\i386\oemig50.exe + 2009-12-29 19:44 . 2008-04-14 03:42 20511 c:\windows\ServicePackFiles\i386\odtext32.dll + 2009-12-29 19:44 . 2008-04-14 03:42 20510 c:\windows\ServicePackFiles\i386\odpdx32.dll + 2009-12-29 19:44 . 2008-04-14 03:42 20510 c:\windows\ServicePackFiles\i386\odfox32.dll + 2009-12-29 19:44 . 2008-04-14 03:42 20510 c:\windows\ServicePackFiles\i386\odexl32.dll + 2009-12-29 19:44 . 2008-04-14 03:42 20511 c:\windows\ServicePackFiles\i386\oddbse32.dll + 2009-12-29 19:44 . 2008-04-13 20:56 12288 c:\windows\ServicePackFiles\i386\odbcp32r.dll + 2009-12-29 19:44 . 2008-04-14 03:40 53279 c:\windows\ServicePackFiles\i386\odbcji32.dll + 2009-12-29 19:44 . 2008-04-13 20:56 94208 c:\windows\ServicePackFiles\i386\odbcint.dll + 2009-12-29 19:44 . 2008-04-14 03:42 65536 c:\windows\ServicePackFiles\i386\odbccu32.dll + 2009-12-29 19:44 . 2008-04-14 03:42 65536 c:\windows\ServicePackFiles\i386\odbccr32.dll + 2009-12-29 19:44 . 2008-04-14 03:42 69632 c:\windows\ServicePackFiles\i386\odbcconf.exe + 2009-12-29 19:44 . 2008-04-14 03:42 24576 c:\windows\ServicePackFiles\i386\odbcbcp.dll + 2009-12-29 19:44 . 2008-04-14 03:42 32768 c:\windows\ServicePackFiles\i386\odbcad32.exe + 2009-12-29 19:44 . 2008-04-14 03:42 16384 c:\windows\ServicePackFiles\i386\odbc32gt.dll + 2009-12-29 19:45 . 2007-04-02 17:35 26224 c:\windows\ServicePackFiles\i386\odbc16gt.dll + 2009-12-29 19:44 . 2008-04-14 03:42 17408 c:\windows\ServicePackFiles\i386\ocmsn.dll + 2009-12-29 19:44 . 2008-04-14 03:42 67584 c:\windows\ServicePackFiles\i386\ocmanage.dll + 2009-12-29 19:44 . 2008-04-14 03:42 15360 c:\windows\ServicePackFiles\i386\ocgen.dll + 2009-12-29 19:44 . 2008-04-14 03:42 96256 c:\windows\ServicePackFiles\i386\occache.dll + 2009-12-29 19:44 . 2008-04-14 03:40 86016 c:\windows\ServicePackFiles\i386\obepopc.dll + 2009-12-29 19:44 . 2007-04-02 22:14 77824 c:\windows\ServicePackFiles\i386\obemtllc.dll + 2009-12-29 19:45 . 2008-04-14 03:42 65536 c:\windows\ServicePackFiles\i386\nwwks.dll + 2009-12-29 19:44 . 2008-04-13 22:26 88320 c:\windows\ServicePackFiles\i386\nwlnkipx.sys + 2009-12-29 19:45 . 2008-04-14 03:42 64000 c:\windows\ServicePackFiles\i386\nwapi32.dll + 2009-12-29 19:44 . 2008-04-14 03:42 15360 c:\windows\ServicePackFiles\i386\ntvdmd.dll + 2009-12-29 19:44 . 2008-04-14 03:42 91136 c:\windows\ServicePackFiles\i386\ntprint.dll + 2009-12-29 19:44 . 2008-04-14 03:42 62976 c:\windows\ServicePackFiles\i386\ntoc.dll + 2009-12-29 19:44 . 2008-04-14 03:42 40960 c:\windows\ServicePackFiles\i386\ntmsapi.dll + 2009-12-29 19:45 . 2008-04-14 03:42 44032 c:\windows\ServicePackFiles\i386\ntlanman.dll + 2009-12-29 19:45 . 2008-04-13 20:19 34560 c:\windows\ServicePackFiles\i386\ntio804.sys + 2009-12-29 19:44 . 2008-04-13 20:19 35424 c:\windows\ServicePackFiles\i386\ntio412.sys + 2009-12-29 19:44 . 2008-04-13 20:19 35648 c:\windows\ServicePackFiles\i386\ntio411.sys + 2009-12-29 19:44 . 2008-04-13 20:19 34560 c:\windows\ServicePackFiles\i386\ntio404.sys + 2009-12-29 19:44 . 2008-04-13 20:19 33840 c:\windows\ServicePackFiles\i386\ntio.sys + 2009-12-29 19:44 . 2008-04-14 03:42 67072 c:\windows\ServicePackFiles\i386\ntdsapi.dll + 2008-04-13 20:13 . 2008-04-13 20:13 47564 c:\windows\ServicePackFiles\i386\ntdetect.com + 2009-12-29 19:44 . 2008-04-14 03:42 76800 c:\windows\ServicePackFiles\i386\nslookup.exe + 2009-12-29 19:45 . 2008-04-14 03:42 44544 c:\windows\ServicePackFiles\i386\nsepm.dll + 2009-12-29 19:44 . 2008-04-13 22:24 28672 c:\windows\ServicePackFiles\i386\nscirda.sys + 2009-12-29 19:44 . 2008-04-14 03:42 54784 c:\windows\ServicePackFiles\i386\npptools.dll + 2009-12-29 19:45 . 2008-04-14 03:42 15360 c:\windows\ServicePackFiles\i386\nppagent.exe + 2009-12-29 19:45 . 2008-04-13 22:02 30848 c:\windows\ServicePackFiles\i386\npfs.sys + 2009-12-29 19:45 . 2008-04-14 03:42 69120 c:\windows\ServicePackFiles\i386\notepad.exe + 2009-12-29 19:44 . 2008-04-13 22:23 40320 c:\windows\ServicePackFiles\i386\nmnt.sys + 2009-12-29 19:45 . 2008-04-14 03:42 28672 c:\windows\ServicePackFiles\i386\nmmkcert.dll + 2009-12-29 19:44 . 2008-04-14 03:42 77824 c:\windows\ServicePackFiles\i386\nmcom.dll + 2009-12-29 19:44 . 2008-04-14 03:42 81920 c:\windows\ServicePackFiles\i386\nmchat.dll + 2009-12-29 19:44 . 2008-04-14 03:42 28672 c:\windows\ServicePackFiles\i386\nmasnt.dll + 2009-12-29 19:44 . 2008-04-14 03:42 98304 c:\windows\ServicePackFiles\i386\nlhtml.dll + 2009-12-29 19:44 . 2008-04-13 22:21 61824 c:\windows\ServicePackFiles\i386\nic1394.sys + 2009-12-29 19:44 . 2008-04-14 03:42 80896 c:\windows\ServicePackFiles\i386\netui0.dll + 2009-12-29 19:44 . 2008-04-14 03:42 36864 c:\windows\ServicePackFiles\i386\netstat.exe + 2009-12-29 19:44 . 2008-04-14 03:42 86016 c:\windows\ServicePackFiles\i386\netsh.exe + 2009-12-29 19:44 . 2008-04-14 03:42 11776 c:\windows\ServicePackFiles\i386\netrap.dll + 2009-12-29 19:44 . 2008-04-14 03:42 77312 c:\windows\ServicePackFiles\i386\netoc.dll + 2007-12-17 15:29 . 2007-12-17 15:29 82976 c:\windows\ServicePackFiles\i386\netfxupdate.exe + 2009-12-29 19:44 . 2008-04-13 22:26 34688 c:\windows\ServicePackFiles\i386\netbios.sys + 2009-12-29 19:44 . 2008-04-14 03:42 42496 c:\windows\ServicePackFiles\i386\net.exe + 2009-12-29 19:44 . 2008-04-13 22:27 40576 c:\windows\ServicePackFiles\i386\ndproxy.sys + 2009-12-29 19:44 . 2008-04-13 22:50 91520 c:\windows\ServicePackFiles\i386\ndiswan.sys + 2009-12-29 19:44 . 2008-04-13 22:26 14592 c:\windows\ServicePackFiles\i386\ndisuio.sys + 2009-12-29 19:44 . 2008-04-13 22:27 10112 c:\windows\ServicePackFiles\i386\ndistapi.sys + 2009-12-29 19:44 . 2008-04-14 03:42 57344 c:\windows\ServicePackFiles\i386\ndisnpp.dll + 2009-12-29 19:45 . 2008-04-13 22:16 10880 c:\windows\ServicePackFiles\i386\ndisip.sys + 2009-12-29 19:45 . 2008-04-14 03:42 18944 c:\windows\ServicePackFiles\i386\nddenb32.dll + 2009-12-29 19:44 . 2008-04-14 03:42 17920 c:\windows\ServicePackFiles\i386\nddeapi.dll + 2009-12-29 19:44 . 2008-04-14 03:42 47104 c:\windows\ServicePackFiles\i386\ncprov.dll + 2009-12-29 19:44 . 2008-04-14 03:42 36352 c:\windows\ServicePackFiles\i386\ncobjapi.dll + 2009-12-29 19:44 . 2008-04-14 03:42 53760 c:\windows\ServicePackFiles\i386\narrator.exe + 2009-12-29 19:44 . 2008-04-14 03:42 30208 c:\windows\ServicePackFiles\i386\napipsec.dll + 2009-12-29 19:44 . 2008-04-13 22:16 85248 c:\windows\ServicePackFiles\i386\nabtsfec.sys + 2009-12-29 19:44 . 2008-04-14 03:42 90624 c:\windows\ServicePackFiles\i386\mydocs.dll + 2009-12-29 19:44 . 2008-04-13 22:13 12672 c:\windows\ServicePackFiles\i386\mutohpen.sys + 2009-12-29 19:44 . 2008-04-14 03:42 90624 c:\windows\ServicePackFiles\i386\muisetup.exe + 2009-12-29 19:44 . 2008-04-14 03:42 91648 c:\windows\ServicePackFiles\i386\mtxoci.dll + 2009-12-29 19:44 . 2008-04-14 03:42 34304 c:\windows\ServicePackFiles\i386\mtxlegih.dll + 2009-12-29 19:44 . 2008-04-14 03:42 30720 c:\windows\ServicePackFiles\i386\mtxdm.dll + 2009-12-29 19:44 . 2008-04-14 03:42 66560 c:\windows\ServicePackFiles\i386\mtxclu.dll + 2009-12-29 19:44 . 2008-04-14 03:42 16896 c:\windows\ServicePackFiles\i386\msyuv.dll + 2009-12-29 19:44 . 2008-04-14 03:42 24576 c:\windows\ServicePackFiles\i386\msxactps.dll + 2009-12-29 19:44 . 2008-04-14 03:42 72704 c:\windows\ServicePackFiles\i386\msw3prt.dll + 2009-12-29 19:44 . 2008-04-13 22:00 61440 c:\windows\ServicePackFiles\i386\msvcrt40.dll + 2009-12-29 19:44 . 2008-04-14 03:42 57344 c:\windows\ServicePackFiles\i386\msvcirt.dll + 2009-12-29 19:44 . 2008-04-14 03:42 12288 c:\windows\ServicePackFiles\i386\mstinit.exe + 2009-12-29 19:44 . 2008-04-13 22:16 49024 c:\windows\ServicePackFiles\i386\mstape.sys + 2009-12-29 19:44 . 2008-04-14 03:42 57344 c:\windows\ServicePackFiles\i386\mst123.dll + 2009-12-29 19:44 . 2008-04-13 22:06 15488 c:\windows\ServicePackFiles\i386\mssmbios.sys + 2009-12-29 19:44 . 2008-04-13 21:45 76800 c:\windows\ServicePackFiles\i386\msshamsg.dll + 2009-12-29 19:44 . 2008-04-14 03:42 11264 c:\windows\ServicePackFiles\i386\msrle32.dll + 2009-12-29 19:44 . 2008-04-13 19:53 48128 c:\windows\ServicePackFiles\i386\msprivs.dll + 2009-12-29 19:44 . 2008-04-14 03:42 29696 c:\windows\ServicePackFiles\i386\mspatcha.dll + 2009-12-29 19:44 . 2008-04-13 20:54 20480 c:\windows\ServicePackFiles\i386\msorc32r.dll + 2009-12-29 19:45 . 2008-04-14 03:42 29184 c:\windows\ServicePackFiles\i386\msoobe.exe + 2009-12-29 19:44 . 2008-04-14 03:42 19456 c:\windows\ServicePackFiles\i386\msobweb.dll + 2009-12-29 19:44 . 2008-04-14 03:42 30720 c:\windows\ServicePackFiles\i386\msobshel.dll + 2009-12-29 19:44 . 2008-04-14 03:42 16384 c:\windows\ServicePackFiles\i386\msobdl.dll + 2009-12-29 19:45 . 2008-04-14 03:42 39936 c:\windows\ServicePackFiles\i386\mslwvtts.dll + 2009-12-29 19:44 . 2008-04-14 03:42 25088 c:\windows\ServicePackFiles\i386\mslbui.dll + 2009-12-29 19:44 . 2007-04-02 16:19 60192 c:\windows\ServicePackFiles\i386\msjter40.dll + 2009-12-29 19:44 . 2008-04-14 03:42 15360 c:\windows\ServicePackFiles\i386\msisip.dll + 2009-12-29 19:44 . 2008-04-14 03:42 40960 c:\windows\ServicePackFiles\i386\msiregmv.exe + 2009-12-29 19:45 . 2008-04-13 22:24 22016 c:\windows\ServicePackFiles\i386\msircomm.sys + 2009-12-29 19:44 . 2008-04-14 03:42 60416 c:\windows\ServicePackFiles\i386\msimn.exe + 2009-12-29 19:44 . 2008-04-14 03:42 78848 c:\windows\ServicePackFiles\i386\msiexec.exe + 2009-12-29 19:44 . 2008-04-14 03:42 51712 c:\windows\ServicePackFiles\i386\msident.dll + 2009-12-29 19:44 . 2008-04-13 19:56 56832 c:\windows\ServicePackFiles\i386\mshtmler.dll + 2009-12-29 19:44 . 2008-04-14 03:42 29184 c:\windows\ServicePackFiles\i386\mshta.exe + 2009-12-29 19:44 . 2008-04-14 03:42 33792 c:\windows\ServicePackFiles\i386\msgsvc.dll + 2008-04-14 03:42 . 2008-04-14 03:42 82944 c:\windows\ServicePackFiles\i386\msgsc.dll + 2009-12-29 19:45 . 2008-04-14 03:42 15360 c:\windows\ServicePackFiles\i386\msgrocm.dll + 2009-12-29 19:45 . 2008-04-13 22:26 35072 c:\windows\ServicePackFiles\i386\msgpc.sys + 2009-12-29 19:45 . 2008-04-13 22:02 19072 c:\windows\ServicePackFiles\i386\msfs.sys + 2009-12-29 19:44 . 2008-04-13 22:16 51200 c:\windows\ServicePackFiles\i386\msdv.sys + 2009-12-29 19:44 . 2008-04-14 03:42 90112 c:\windows\ServicePackFiles\i386\msdtcstp.dll + 2009-12-29 19:45 . 2008-04-14 03:42 58880 c:\windows\ServicePackFiles\i386\msdtclog.dll + 2009-12-29 19:44 . 2008-04-14 03:42 14336 c:\windows\ServicePackFiles\i386\msdmo.dll + 2009-12-29 19:45 . 2008-04-14 03:42 36864 c:\windows\ServicePackFiles\i386\msdfmap.dll + 2009-12-29 19:45 . 2008-04-14 03:42 20480 c:\windows\ServicePackFiles\i386\msdatt.dll + 2009-12-29 19:44 . 2008-04-14 03:42 94208 c:\windows\ServicePackFiles\i386\msdatl3.dll + 2009-12-29 19:45 . 2008-04-13 20:56 16384 c:\windows\ServicePackFiles\i386\msdasqlr.dll + 2009-12-29 19:44 . 2008-04-13 20:56 16384 c:\windows\ServicePackFiles\i386\msdaremr.dll + 2009-12-29 19:44 . 2008-04-13 20:56 16384 c:\windows\ServicePackFiles\i386\msdaprsr.dll + 2009-12-29 19:44 . 2008-04-14 03:42 77824 c:\windows\ServicePackFiles\i386\msdaosp.dll + 2009-12-29 19:44 . 2008-04-13 20:54 16384 c:\windows\ServicePackFiles\i386\msdaorar.dll + 2009-12-29 19:45 . 2008-04-14 03:42 68608 c:\windows\ServicePackFiles\i386\msctfp.dll + 2009-12-29 19:44 . 2008-04-14 03:42 36864 c:\windows\ServicePackFiles\i386\mscpxl32.dll + 2009-12-29 19:44 . 2008-04-13 20:56 12288 c:\windows\ServicePackFiles\i386\mscpx32r.dll + 2008-04-13 19:40 . 2008-04-13 19:40 69632 c:\windows\ServicePackFiles\i386\mscorsn.dll + 2008-04-13 19:40 . 2008-04-13 19:40 46592 c:\windows\ServicePackFiles\i386\mscorsec.dll + 2008-04-13 19:40 . 2008-04-13 19:40 94208 c:\windows\ServicePackFiles\i386\mscorpe.dll + 2008-04-13 19:40 . 2008-04-13 19:40 86016 c:\windows\ServicePackFiles\i386\mscorld.dll + 2008-04-13 19:40 . 2008-04-13 19:40 73728 c:\windows\ServicePackFiles\i386\mscorie.dll + 2008-04-13 19:40 . 2008-04-13 19:40 69632 c:\windows\ServicePackFiles\i386\mscordbc.dll + 2009-12-29 19:45 . 2008-04-14 03:42 69632 c:\windows\ServicePackFiles\i386\msconf.dll + 2009-12-29 19:44 . 2008-04-14 03:42 73728 c:\windows\ServicePackFiles\i386\mscms.dll + 2009-12-29 19:44 . 2008-04-14 03:42 57344 c:\windows\ServicePackFiles\i386\msasn1.dll + 2009-12-29 19:44 . 2008-04-14 03:42 86016 c:\windows\ServicePackFiles\i386\msapsspc.dll + 2009-12-29 19:44 . 2008-04-14 03:42 57344 c:\windows\ServicePackFiles\i386\msadrh15.dll + 2009-12-29 19:44 . 2008-04-14 03:42 57344 c:\windows\ServicePackFiles\i386\msador15.dll + 2009-12-29 19:44 . 2008-04-13 20:56 24576 c:\windows\ServicePackFiles\i386\msader15.dll + 2009-12-29 19:44 . 2008-04-13 20:56 24576 c:\windows\ServicePackFiles\i386\msaddsr.dll + 2009-12-29 19:44 . 2008-04-14 03:42 53248 c:\windows\ServicePackFiles\i386\msadcs.dll + 2009-12-29 19:44 . 2008-04-13 20:55 16384 c:\windows\ServicePackFiles\i386\msadcor.dll + 2009-12-29 19:45 . 2008-04-13 20:55 16384 c:\windows\ServicePackFiles\i386\msadcfr.dll + 2009-12-29 19:44 . 2008-04-14 03:42 61440 c:\windows\ServicePackFiles\i386\msadcf.dll + 2009-12-29 19:44 . 2008-04-13 20:55 20480 c:\windows\ServicePackFiles\i386\msadcer.dll + 2009-12-29 19:44 . 2008-04-14 03:42 71680 c:\windows\ServicePackFiles\i386\msacm32.dll + 2009-12-29 19:45 . 2008-04-14 03:42 49152 c:\windows\ServicePackFiles\i386\mqupgrd.dll + 2009-12-29 19:45 . 2008-04-14 03:41 95744 c:\windows\ServicePackFiles\i386\mqsec.dll + 2009-12-29 19:45 . 2008-04-14 03:41 89088 c:\windows\ServicePackFiles\i386\mqlogmgr.dll + 2009-12-29 19:45 . 2008-04-14 03:41 16896 c:\windows\ServicePackFiles\i386\mqise.dll + 2009-12-29 19:45 . 2008-04-14 03:41 47616 c:\windows\ServicePackFiles\i386\mqdscli.dll + 2009-12-29 19:45 . 2008-04-14 03:42 19968 c:\windows\ServicePackFiles\i386\mqbkup.exe + 2009-12-29 19:45 . 2008-04-13 22:09 92544 c:\windows\ServicePackFiles\i386\mqac.sys + 2009-12-29 19:44 . 2008-04-14 03:41 53248 c:\windows\ServicePackFiles\i386\mprdim.dll + 2009-12-29 19:45 . 2008-04-14 03:41 87040 c:\windows\ServicePackFiles\i386\mprapi.dll + 2009-12-29 19:44 . 2008-04-14 03:41 59904 c:\windows\ServicePackFiles\i386\mpr.dll + 2009-12-29 19:45 . 2008-04-13 22:16 15232 c:\windows\ServicePackFiles\i386\mpe.sys + 2009-12-29 19:44 . 2008-04-13 22:09 42368 c:\windows\ServicePackFiles\i386\mountmgr.sys + 2009-12-29 19:44 . 2008-04-13 22:09 23040 c:\windows\ServicePackFiles\i386\mouclass.sys + 2009-12-29 19:44 . 2008-04-14 03:42 16896 c:\windows\ServicePackFiles\i386\more.com + 2009-12-29 19:44 . 2008-04-14 03:42 16384 c:\windows\ServicePackFiles\i386\mofcomp.exe + 2009-12-29 19:44 . 2008-04-13 22:30 30080 c:\windows\ServicePackFiles\i386\modem.sys + 2009-12-29 19:45 . 2008-04-14 03:42 32768 c:\windows\ServicePackFiles\i386\mnmsrvc.exe + 2009-12-29 19:44 . 2008-04-14 03:41 34560 c:\windows\ServicePackFiles\i386\mnmdd.dll + 2009-12-29 19:44 . 2008-04-13 20:24 68768 c:\windows\ServicePackFiles\i386\mmsystem.dll + 2009-12-29 19:45 . 2008-04-14 03:41 17408 c:\windows\ServicePackFiles\i386\mmfutil.dll + 2009-12-29 19:44 . 2008-04-14 03:41 61440 c:\windows\ServicePackFiles\i386\mmcshext.dll + 2009-12-29 19:44 . 2008-04-14 03:42 33792 c:\windows\ServicePackFiles\i386\mmcperf.exe + 2009-12-29 19:44 . 2008-04-14 03:41 40960 c:\windows\ServicePackFiles\i386\mmcexr.dll + 2009-12-29 19:44 . 2008-04-14 03:41 28672 c:\windows\ServicePackFiles\i386\mmc30r.dll + 2009-12-29 19:44 . 2008-04-14 03:41 29696 c:\windows\ServicePackFiles\i386\mimefilt.dll + 2009-12-29 19:44 . 2008-04-14 03:41 60928 c:\windows\ServicePackFiles\i386\miglibnt.dll + 2009-12-29 19:44 . 2008-04-14 03:41 18944 c:\windows\ServicePackFiles\i386\midimap.dll + 2009-12-29 19:44 . 2008-04-14 03:41 14848 c:\windows\ServicePackFiles\i386\mgmtapi.dll + 2009-12-29 19:44 . 2008-04-14 03:41 22528 c:\windows\ServicePackFiles\i386\mfcsubs.dll + 2009-12-29 19:44 . 2008-04-14 03:41 40960 c:\windows\ServicePackFiles\i386\mf3216.dll + 2009-12-29 19:45 . 2008-04-13 22:06 63744 c:\windows\ServicePackFiles\i386\mf.sys + 2009-12-29 19:45 . 2008-04-14 03:41 85504 c:\windows\ServicePackFiles\i386\metada51.dll + 2009-12-29 19:44 . 2008-04-13 22:11 26112 c:\windows\ServicePackFiles\i386\memstpci.sys + 2009-12-29 19:45 . 2008-04-14 03:41 16896 c:\windows\ServicePackFiles\i386\medctroc.dll + 2009-12-29 19:44 . 2008-04-13 21:53 11868 c:\windows\ServicePackFiles\i386\mdmxsdk.sys + 2009-12-29 19:44 . 2008-04-14 03:41 86016 c:\windows\ServicePackFiles\i386\mdmxsdk.dll + 2009-12-29 19:45 . 2008-04-14 03:41 37888 c:\windows\ServicePackFiles\i386\md5filt.dll + 2009-12-29 19:44 . 2008-04-14 03:41 23552 c:\windows\ServicePackFiles\i386\mciwave.dll + 2009-12-29 19:45 . 2008-04-14 03:41 23040 c:\windows\ServicePackFiles\i386\mciseq.dll + 2009-12-29 19:44 . 2008-04-14 03:41 35328 c:\windows\ServicePackFiles\i386\mciqtz32.dll + 2009-12-29 19:44 . 2008-04-14 03:41 84480 c:\windows\ServicePackFiles\i386\mciavi32.dll + 2009-12-29 19:44 . 2008-04-14 03:41 14336 c:\windows\ServicePackFiles\i386\mcastmib.dll + 2009-12-29 19:44 . 2008-04-14 03:42 57344 c:\windows\ServicePackFiles\i386\makecab.exe + 2009-12-29 19:45 . 2008-04-14 03:42 72704 c:\windows\ServicePackFiles\i386\magnify.exe + 2009-12-29 19:44 . 2008-04-13 20:09 20864 c:\windows\ServicePackFiles\i386\lwadihid.sys + 2009-12-29 19:44 . 2008-04-14 03:42 13312 c:\windows\ServicePackFiles\i386\lsass.exe + 2009-12-29 19:44 . 2008-04-14 03:41 18944 c:\windows\ServicePackFiles\i386\lprmon.dll + 2009-12-29 19:44 . 2008-04-14 03:41 10240 c:\windows\ServicePackFiles\i386\lprhelp.dll + 2009-12-29 19:44 . 2008-04-14 03:41 22016 c:\windows\ServicePackFiles\i386\lpk.dll + 2009-12-29 19:45 . 2008-04-14 03:41 22528 c:\windows\ServicePackFiles\i386\lpdsvc.dll + 2009-12-29 19:45 . 2008-04-14 03:41 13312 c:\windows\ServicePackFiles\i386\lonsint.dll + 2009-12-29 19:45 . 2008-04-14 03:42 59392 c:\windows\ServicePackFiles\i386\logman.exe + 2009-12-29 19:44 . 2008-04-14 03:41 19968 c:\windows\ServicePackFiles\i386\log.dll + 2009-12-29 19:44 . 2008-04-14 03:42 75264 c:\windows\ServicePackFiles\i386\locator.exe + 2009-12-29 19:45 . 2008-04-14 03:41 11776 c:\windows\ServicePackFiles\i386\localui.dll + 2009-12-29 19:44 . 2008-04-14 03:41 97280 c:\windows\ServicePackFiles\i386\loadperf.dll + 2009-12-29 19:44 . 2008-04-14 03:41 33792 c:\windows\ServicePackFiles\i386\lmmib2.dll + 2009-12-29 19:45 . 2008-04-14 03:41 13824 c:\windows\ServicePackFiles\i386\lmhsvc.dll + 2009-12-29 19:45 . 2008-04-14 03:41 19968 c:\windows\ServicePackFiles\i386\linkinfo.dll + 2009-12-29 19:44 . 2008-04-14 03:41 58880 c:\windows\ServicePackFiles\i386\licwmi.dll + 2009-12-29 19:44 . 2008-04-14 03:41 22016 c:\windows\ServicePackFiles\i386\licmgr10.dll + 2009-12-29 19:44 . 2008-04-13 22:10 34688 c:\windows\ServicePackFiles\i386\lbrtfdc.sys + 2009-12-29 19:45 . 2008-04-14 03:41 86073 c:\windows\ServicePackFiles\i386\lang\voicesub.dll + 2009-12-29 19:45 . 2008-04-14 03:41 76288 c:\windows\ServicePackFiles\i386\lang\uniime.dll + 2009-12-29 19:45 . 2008-04-14 03:41 10240 c:\windows\ServicePackFiles\i386\lang\tmigrate.dll + 2009-12-29 19:45 . 2008-04-13 20:13 44032 c:\windows\ServicePackFiles\i386\lang\tintlphr.exe + 2009-12-29 19:45 . 2008-04-14 03:40 67584 c:\windows\ServicePackFiles\i386\lang\pmigrate.dll + 2009-12-29 19:45 . 2008-04-13 20:13 70144 c:\windows\ServicePackFiles\i386\lang\pintlphr.exe + 2009-12-29 19:45 . 2008-04-14 03:40 53760 c:\windows\ServicePackFiles\i386\lang\pintlcsd.dll + 2009-12-29 19:45 . 2008-04-14 03:40 15360 c:\windows\ServicePackFiles\i386\lang\padrs804.dll + 2009-12-29 19:45 . 2008-04-14 03:40 15872 c:\windows\ServicePackFiles\i386\lang\padrs404.dll + 2009-12-29 19:45 . 2008-04-13 20:13 59392 c:\windows\ServicePackFiles\i386\lang\imscinst.exe + 2009-12-29 19:45 . 2008-04-14 03:39 81976 c:\windows\ServicePackFiles\i386\lang\imjpdct.dll + 2009-12-29 19:45 . 2008-04-14 03:39 86016 c:\windows\ServicePackFiles\i386\lang\imekrmbx.dll + 2009-12-29 19:45 . 2008-04-13 20:13 57399 c:\windows\ServicePackFiles\i386\lang\cplexe.exe + 2009-12-29 19:45 . 2008-04-14 03:39 56320 c:\windows\ServicePackFiles\i386\lang\chtskdic.dll + 2009-12-29 19:45 . 2008-04-14 03:39 97792 c:\windows\ServicePackFiles\i386\lang\chtmbx.dll + 2009-12-29 19:44 . 2008-04-14 03:41 37376 c:\windows\ServicePackFiles\i386\l2store.dll + 2008-04-13 22:01 . 2008-04-13 22:01 92288 c:\windows\ServicePackFiles\i386\ksecdd.sys + 2009-12-29 19:45 . 2008-04-14 03:41 24576 c:\windows\ServicePackFiles\i386\krnlprov.dll + 2009-12-29 19:45 . 2008-04-13 20:23 92224 c:\windows\ServicePackFiles\i386\krnl386.exe + 2008-04-14 03:39 . 2008-04-14 03:39 24576 c:\windows\ServicePackFiles\i386\kpropid.dll + 2008-04-14 03:39 . 2008-04-14 03:39 24064 c:\windows\ServicePackFiles\i386\kperpid.dll + 2008-04-14 03:39 . 2008-04-14 03:39 24576 c:\windows\ServicePackFiles\i386\knpropid.dll + 2008-04-14 03:39 . 2008-04-14 03:39 24064 c:\windows\ServicePackFiles\i386\knperpid.dll + 2009-12-29 19:44 . 2008-04-14 03:41 61440 c:\windows\ServicePackFiles\i386\kmsvc.dll + 2009-12-29 19:44 . 2008-04-13 20:20 42537 c:\windows\ServicePackFiles\i386\keyboard.sys + 2009-12-29 19:44 . 2008-04-14 03:41 48640 c:\windows\ServicePackFiles\i386\kdsui.dll + 2009-12-29 19:45 . 2008-04-13 22:09 14592 c:\windows\ServicePackFiles\i386\kbdhid.sys + 2009-12-29 19:44 . 2008-04-13 22:09 24576 c:\windows\ServicePackFiles\i386\kbdclass.sys + 2009-12-29 19:44 . 2008-04-14 03:41 15872 c:\windows\ServicePackFiles\i386\jsproxy.dll + 2007-06-27 16:24 . 2007-06-27 16:24 40960 c:\windows\ServicePackFiles\i386\jsc.exe + 2009-12-29 19:44 . 2008-04-14 03:41 27648 c:\windows\ServicePackFiles\i386\jgpl400.dll + 2009-12-29 19:44 . 2008-04-14 03:41 47616 c:\windows\ServicePackFiles\i386\iyuv_32.dll + 2009-12-29 19:44 . 2008-04-14 03:41 54272 c:\windows\ServicePackFiles\i386\ixsso.dll + 2009-12-29 19:45 . 2008-04-14 03:41 32768 c:\windows\ServicePackFiles\i386\isrdbg32.dll + 2008-04-14 03:40 . 2008-04-14 03:40 24064 c:\windows\ServicePackFiles\i386\ispid.dll + 2009-12-29 19:44 . 2008-04-14 03:41 81920 c:\windows\ServicePackFiles\i386\isign32.dll + 2008-04-14 03:40 . 2008-04-14 03:40 24064 c:\windows\ServicePackFiles\i386\isenpid.dll + 2009-12-29 19:45 . 2008-04-14 03:41 26624 c:\windows\ServicePackFiles\i386\iscomlog.dll + 2009-12-29 19:45 . 2008-04-14 03:41 68608 c:\windows\ServicePackFiles\i386\isatq.dll + 2009-12-29 19:44 . 2008-04-13 22:06 37248 c:\windows\ServicePackFiles\i386\isapnp.sys + 2009-12-29 19:44 . 2008-04-14 03:41 28160 c:\windows\ServicePackFiles\i386\irmon.dll + 2009-12-29 19:44 . 2008-04-13 22:24 11264 c:\windows\ServicePackFiles\i386\irenum.sys + 2009-12-29 19:44 . 2008-04-13 22:24 88192 c:\windows\ServicePackFiles\i386\irda.sys + 2009-12-29 19:45 . 2008-04-13 22:15 46592 c:\windows\ServicePackFiles\i386\irbus.sys + 2009-12-29 19:44 . 2008-04-14 03:41 22016 c:\windows\ServicePackFiles\i386\ipxwan.dll + 2009-12-29 19:44 . 2008-04-14 03:42 23552 c:\windows\ServicePackFiles\i386\ipxroute.exe + 2009-12-29 19:44 . 2008-04-14 03:41 59904 c:\windows\ServicePackFiles\i386\ipv6mon.dll + 2009-12-29 19:45 . 2008-04-14 03:42 53248 c:\windows\ServicePackFiles\i386\ipv6.exe + 2008-04-14 03:39 . 2008-04-14 03:39 24064 c:\windows\ServicePackFiles\i386\ipselpid.dll + 2009-12-29 19:44 . 2008-04-13 22:49 75264 c:\windows\ServicePackFiles\i386\ipsec.sys + 2009-12-29 19:44 . 2008-04-14 03:41 35328 c:\windows\ServicePackFiles\i386\iprip.dll + 2009-12-29 19:44 . 2008-04-13 22:27 20864 c:\windows\ServicePackFiles\i386\ipinip.sys + 2009-12-29 19:44 . 2008-04-14 03:41 94720 c:\windows\ServicePackFiles\i386\iphlpapi.dll + 2008-04-14 03:39 . 2008-04-14 03:39 24064 c:\windows\ServicePackFiles\i386\ipevlpid.dll + 2009-12-29 19:45 . 2008-04-14 03:42 55808 c:\windows\ServicePackFiles\i386\ipconfig.exe + 2009-12-29 19:45 . 2008-04-13 22:23 36608 c:\windows\ServicePackFiles\i386\ip6fw.sys + 2009-12-29 19:45 . 2008-04-13 22:01 36352 c:\windows\ServicePackFiles\i386\intelppm.sys + 2007-06-27 16:24 . 2007-06-27 16:24 24576 c:\windows\ServicePackFiles\i386\installutil.exe + 2009-12-29 19:45 . 2008-04-14 03:41 96256 c:\windows\ServicePackFiles\i386\inseng.dll + 2009-12-29 19:45 . 2008-04-14 03:41 13312 c:\windows\ServicePackFiles\i386\infoadmn.dll + 2009-12-29 19:44 . 2008-04-14 03:42 20480 c:\windows\ServicePackFiles\i386\inetwiz.exe + 2009-12-29 19:44 . 2008-04-13 19:52 48128 c:\windows\ServicePackFiles\i386\inetres.dll + 2009-12-29 19:44 . 2008-04-14 03:41 15872 c:\windows\ServicePackFiles\i386\inetppui.dll + 2009-12-29 19:44 . 2008-04-14 03:41 75264 c:\windows\ServicePackFiles\i386\inetpp.dll + 2009-12-29 19:44 . 2008-04-14 03:41 32768 c:\windows\ServicePackFiles\i386\inetmib1.dll + 2009-12-29 19:45 . 2008-04-14 03:42 15360 c:\windows\ServicePackFiles\i386\inetin51.exe + 2009-12-29 19:44 . 2008-04-14 03:41 35840 c:\windows\ServicePackFiles\i386\imgutil.dll + 2009-12-29 19:45 . 2008-04-14 03:41 36921 c:\windows\ServicePackFiles\i386\imeshare.dll + 2009-12-29 19:44 . 2008-04-13 22:11 42112 c:\windows\ServicePackFiles\i386\imapi.sys + 2009-12-29 19:45 . 2008-04-14 03:41 81920 c:\windows\ServicePackFiles\i386\ils.dll + 2009-12-29 19:45 . 2008-04-14 03:42 30720 c:\windows\ServicePackFiles\i386\iisrstas.exe + 2009-12-29 19:45 . 2008-04-14 03:41 64512 c:\windows\ServicePackFiles\i386\iismap.dll + 2009-12-29 19:45 . 2008-04-14 03:41 79872 c:\windows\ServicePackFiles\i386\iislog51.dll + 2009-12-29 19:45 . 2008-04-14 03:41 68608 c:\windows\ServicePackFiles\i386\iisext51.dll + 2009-12-29 19:45 . 2008-04-14 03:41 25088 c:\windows\ServicePackFiles\i386\iisadmin.dll + 2009-12-29 19:44 . 2008-04-14 03:42 93184 c:\windows\ServicePackFiles\i386\iexplore.exe + 2009-12-29 19:44 . 2008-04-14 03:41 62976 c:\windows\ServicePackFiles\i386\iesetup.dll + 2009-12-29 19:44 . 2008-04-14 03:41 48640 c:\windows\ServicePackFiles\i386\iernonce.dll + 2007-06-27 16:24 . 2007-06-27 16:24 32768 c:\windows\ServicePackFiles\i386\iehost.dll + 2009-12-29 19:44 . 2008-04-14 03:41 81920 c:\windows\ServicePackFiles\i386\ieencode.dll + 2009-12-29 19:45 . 2008-04-14 03:42 18432 c:\windows\ServicePackFiles\i386\iedw.exe + 2009-12-29 19:44 . 2008-04-14 03:42 34304 c:\windows\ServicePackFiles\i386\ie4uinit.exe + 2009-12-29 19:45 . 2008-04-14 03:41 49152 c:\windows\ServicePackFiles\i386\icwutil.dll + 2009-12-29 19:44 . 2008-04-14 03:42 24576 c:\windows\ServicePackFiles\i386\icwrmind.exe + 2009-12-29 19:44 . 2008-04-14 03:41 65536 c:\windows\ServicePackFiles\i386\icwphbk.dll + 2009-12-29 19:45 . 2008-04-14 03:41 32768 c:\windows\ServicePackFiles\i386\icwdl.dll + 2009-12-29 19:44 . 2008-04-14 03:41 73728 c:\windows\ServicePackFiles\i386\icwdial.dll + 2009-12-29 19:44 . 2008-04-14 03:42 86016 c:\windows\ServicePackFiles\i386\icwconn2.exe + 2009-12-29 19:44 . 2008-04-14 03:41 61440 c:\windows\ServicePackFiles\i386\icwconn.dll + 2009-12-29 19:44 . 2008-04-14 03:41 80384 c:\windows\ServicePackFiles\i386\iccvid.dll + 2009-12-29 19:44 . 2008-04-14 03:41 11264 c:\windows\ServicePackFiles\i386\icaapi.dll + 2009-12-29 19:44 . 2008-04-13 22:48 52480 c:\windows\ServicePackFiles\i386\i8042prt.sys + 2009-12-29 19:44 . 2008-04-13 22:11 18560 c:\windows\ServicePackFiles\i386\i2omp.sys + 2009-12-29 19:45 . 2008-04-14 03:41 41984 c:\windows\ServicePackFiles\i386\htui.dll + 2009-12-29 19:45 . 2008-04-14 03:41 61440 c:\windows\ServicePackFiles\i386\httpod51.dll + 2009-12-29 19:44 . 2008-04-14 03:41 24576 c:\windows\ServicePackFiles\i386\httpapi.dll + 2009-12-29 19:44 . 2008-04-14 03:41 32285 c:\windows\ServicePackFiles\i386\hsfcisp2.dll + 2009-12-29 19:44 . 2008-04-14 03:42 18432 c:\windows\ServicePackFiles\i386\hscupd.exe + 2009-12-29 19:45 . 2008-04-14 03:41 87552 c:\windows\ServicePackFiles\i386\hpfud50.dll + 2009-12-29 19:44 . 2008-04-14 03:41 10240 c:\windows\ServicePackFiles\i386\hpcjrrps.dll + 2009-12-29 19:45 . 2008-04-14 03:41 10752 c:\windows\ServicePackFiles\i386\hpcjrr.dll + 2009-12-29 19:44 . 2008-04-14 03:41 39936 c:\windows\ServicePackFiles\i386\hostmib.dll + 2009-12-29 19:45 . 2008-04-14 03:41 38912 c:\windows\ServicePackFiles\i386\hmmapi.dll + 2009-12-29 19:44 . 2008-04-14 03:41 72704 c:\windows\ServicePackFiles\i386\hlink.dll + 2009-12-29 19:44 . 2008-04-13 22:15 10368 c:\windows\ServicePackFiles\i386\hidusb.sys + 2009-12-29 19:44 . 2008-04-14 03:41 21504 c:\windows\ServicePackFiles\i386\hidserv.dll + 2009-12-29 19:44 . 2008-04-13 22:15 24960 c:\windows\ServicePackFiles\i386\hidparse.sys + 2009-12-29 19:44 . 2008-04-13 22:15 19200 c:\windows\ServicePackFiles\i386\hidir.sys + 2009-12-29 19:44 . 2008-04-13 22:15 36864 c:\windows\ServicePackFiles\i386\hidclass.sys + 2009-12-29 19:44 . 2008-04-13 22:16 25600 c:\windows\ServicePackFiles\i386\hidbth.sys + 2009-12-29 19:44 . 2008-04-13 22:06 20352 c:\windows\ServicePackFiles\i386\hidbatt.sys + 2009-12-29 19:44 . 2008-04-14 03:41 20992 c:\windows\ServicePackFiles\i386\hid.dll + 2009-12-29 19:44 . 2008-04-14 03:41 41472 c:\windows\ServicePackFiles\i386\hhsetup.dll + 2009-12-29 19:44 . 2008-04-14 03:42 10752 c:\windows\ServicePackFiles\i386\hh.exe + 2009-12-29 19:44 . 2008-04-14 03:42 15872 c:\windows\ServicePackFiles\i386\help.exe + 2009-12-29 19:44 . 2008-04-13 22:01 77696 c:\windows\ServicePackFiles\i386\halsp.dll + 2009-12-29 19:44 . 2008-04-13 22:01 81152 c:\windows\ServicePackFiles\i386\halacpi.dll + 2009-12-29 19:44 . 2008-04-14 03:41 57344 c:\windows\ServicePackFiles\i386\h323cc.dll + 2009-12-29 19:45 . 2008-04-14 03:41 32256 c:\windows\ServicePackFiles\i386\gzip.dll + 2009-12-29 19:44 . 2008-04-13 22:10 28288 c:\windows\ServicePackFiles\i386\grserial.sys + 2009-12-29 19:45 . 2008-04-14 03:42 39424 c:\windows\ServicePackFiles\i386\grpconv.exe + 2009-12-29 19:45 . 2008-04-14 03:42 59904 c:\windows\ServicePackFiles\i386\getmac.exe + 2009-12-29 19:45 . 2008-04-13 22:15 59136 c:\windows\ServicePackFiles\i386\gckernel.sys + 2009-12-29 19:44 . 2008-04-13 22:15 10624 c:\windows\ServicePackFiles\i386\gameenum.sys + 2009-12-29 19:44 . 2008-04-13 22:06 46464 c:\windows\ServicePackFiles\i386\gagp30kx.sys + 2009-12-29 19:45 . 2008-04-14 03:41 23552 c:\windows\ServicePackFiles\i386\fxsmon.dll + 2009-12-29 19:44 . 2008-04-14 03:41 23552 c:\windows\ServicePackFiles\i386\fxsext32.dll + 2009-12-29 19:44 . 2008-04-14 03:41 55296 c:\windows\ServicePackFiles\i386\fxsevent.dll + 2009-12-29 19:44 . 2008-04-14 03:41 26624 c:\windows\ServicePackFiles\i386\fxsdrv.dll + 2009-12-29 19:44 . 2008-04-14 03:41 72192 c:\windows\ServicePackFiles\i386\fxscom.dll + 2009-12-29 19:44 . 2008-04-14 03:41 60416 c:\windows\ServicePackFiles\i386\fwcfg.dll + 2009-12-29 19:44 . 2008-04-14 03:42 42496 c:\windows\ServicePackFiles\i386\ftp.exe + 2008-04-14 03:42 . 2008-04-14 03:42 28728 c:\windows\ServicePackFiles\i386\fpsrvadm.exe + 2008-04-14 03:42 . 2008-04-14 03:42 20538 c:\windows\ServicePackFiles\i386\fpremadm.exe + 2008-04-14 03:41 . 2008-04-14 03:41 20541 c:\windows\ServicePackFiles\i386\fpexedll.dll + 2008-04-14 03:41 . 2008-04-14 03:41 94208 c:\windows\ServicePackFiles\i386\fpencode.dll + 2008-04-14 03:41 . 2008-04-14 03:41 20541 c:\windows\ServicePackFiles\i386\fpadmdll.dll + 2008-04-14 03:42 . 2008-04-14 03:42 24632 c:\windows\ServicePackFiles\i386\fpadmcgi.exe + 2008-04-14 03:42 . 2008-04-14 03:42 15120 c:\windows\ServicePackFiles\i386\fp98sadm.exe + 2008-04-14 03:41 . 2008-04-14 03:41 49212 c:\windows\ServicePackFiles\i386\fp4awebs.dll + 2008-04-14 03:41 . 2008-04-14 03:41 32826 c:\windows\ServicePackFiles\i386\fp4avss.dll + 2008-04-14 03:41 . 2008-04-14 03:41 41020 c:\windows\ServicePackFiles\i386\fp4avnb.dll + 2008-04-14 03:41 . 2008-04-14 03:41 49210 c:\windows\ServicePackFiles\i386\fp4areg.dll + 2008-04-14 03:41 . 2008-04-14 03:41 82035 c:\windows\ServicePackFiles\i386\fp4anscp.dll + 2009-12-29 19:44 . 2008-04-14 03:41 32828 c:\windows\ServicePackFiles\i386\fp40ext.dll + 2009-12-29 19:44 . 2008-04-14 03:42 29696 c:\windows\ServicePackFiles\i386\format.com + 2009-12-29 19:44 . 2008-04-13 20:05 34173 c:\windows\ServicePackFiles\i386\forehe.sys + 2009-12-29 19:44 . 2008-04-14 03:42 20992 c:\windows\ServicePackFiles\i386\fontview.exe + 2009-12-29 19:44 . 2008-04-14 03:41 80896 c:\windows\ServicePackFiles\i386\fontsub.dll + 2009-12-29 19:44 . 2008-04-14 03:42 23040 c:\windows\ServicePackFiles\i386\fltmc.exe + 2009-12-29 19:44 . 2008-04-14 03:41 16896 c:\windows\ServicePackFiles\i386\fltlib.dll + 2009-12-29 19:44 . 2008-04-13 22:10 20480 c:\windows\ServicePackFiles\i386\flpydisk.sys + 2009-12-29 19:44 . 2008-04-14 03:41 87552 c:\windows\ServicePackFiles\i386\fldrclnr.dll + 2009-12-29 19:44 . 2008-04-13 22:03 44544 c:\windows\ServicePackFiles\i386\fips.sys + 2009-12-29 19:44 . 2008-04-14 03:42 27136 c:\windows\ServicePackFiles\i386\findstr.exe + 2009-12-29 19:44 . 2008-04-14 03:41 21504 c:\windows\ServicePackFiles\i386\feclient.dll + 2009-12-29 19:45 . 2008-04-14 03:41 73728 c:\windows\ServicePackFiles\i386\fdeploy.dll + 2009-12-29 19:45 . 2008-04-13 22:10 27392 c:\windows\ServicePackFiles\i386\fdc.sys + 2008-04-14 03:42 . 2008-04-14 03:42 20992 c:\windows\ServicePackFiles\i386\faxpatch.exe + 2009-12-29 19:44 . 2008-04-14 03:41 80384 c:\windows\ServicePackFiles\i386\faultrep.dll + 2009-12-29 19:45 . 2008-04-14 03:42 24064 c:\windows\ServicePackFiles\i386\extrac32.exe + 2009-12-29 19:45 . 2008-04-14 03:41 55808 c:\windows\ServicePackFiles\i386\extmgr.dll + 2009-12-29 19:45 . 2008-04-14 03:41 14336 c:\windows\ServicePackFiles\i386\exstrace.dll + 2009-12-29 19:45 . 2008-04-14 03:42 82944 c:\windows\ServicePackFiles\i386\evtrig.exe + 2009-12-29 19:45 . 2008-04-14 03:41 45056 c:\windows\ServicePackFiles\i386\evtgprov.dll + 2009-12-29 19:45 . 2008-04-14 03:42 92160 c:\windows\ServicePackFiles\i386\evntwin.exe + 2009-12-29 19:44 . 2008-04-14 03:41 21504 c:\windows\ServicePackFiles\i386\evntrprv.dll + 2009-12-29 19:45 . 2008-04-14 03:42 24064 c:\windows\ServicePackFiles\i386\evntcmd.exe + 2009-12-29 19:44 . 2008-04-14 03:41 56320 c:\windows\ServicePackFiles\i386\eventlog.dll + 2009-12-29 19:45 . 2008-04-14 03:42 50688 c:\windows\ServicePackFiles\i386\evcreate.exe + 2009-12-29 19:45 . 2008-04-14 03:41 23040 c:\windows\ServicePackFiles\i386\ersvc.dll + 2009-12-29 19:45 . 2008-04-13 19:56 40960 c:\windows\ServicePackFiles\i386\ep9res.dll + 2009-12-29 19:44 . 2008-04-14 03:41 20480 c:\windows\ServicePackFiles\i386\encapi.dll + 2009-12-29 19:45 . 2008-04-14 03:41 26624 c:\windows\ServicePackFiles\i386\efsadu.dll + 2009-12-29 19:44 . 2008-04-14 03:41 33792 c:\windows\ServicePackFiles\i386\eapsvc.dll + 2009-12-29 19:44 . 2008-04-14 03:41 59392 c:\windows\ServicePackFiles\i386\eapqec.dll + 2009-12-29 19:44 . 2008-04-14 03:41 40960 c:\windows\ServicePackFiles\i386\eappprxy.dll + 2009-12-29 19:44 . 2008-04-14 03:41 94208 c:\windows\ServicePackFiles\i386\eappgnui.dll + 2009-12-29 19:44 . 2008-04-14 03:41 30720 c:\windows\ServicePackFiles\i386\eapolqec.dll + 2009-12-29 19:44 . 2008-04-13 22:08 71168 c:\windows\ServicePackFiles\i386\dxg.sys + 2009-12-29 19:45 . 2008-04-14 03:42 17920 c:\windows\ServicePackFiles\i386\dvdupgrd.exe + 2009-12-29 19:44 . 2008-04-14 03:42 10752 c:\windows\ServicePackFiles\i386\dumprep.exe + 2009-12-29 19:44 . 2008-04-14 03:41 19456 c:\windows\ServicePackFiles\i386\dswave.dll + 2009-12-29 19:45 . 2008-04-14 03:41 51200 c:\windows\ServicePackFiles\i386\dssec.dll + 2009-12-29 19:44 . 2008-04-14 03:41 92672 c:\windows\ServicePackFiles\i386\dskquota.dll + 2009-12-29 19:44 . 2008-04-14 03:41 71680 c:\windows\ServicePackFiles\i386\dsdmoprp.dll + 2009-12-29 19:44 . 2008-04-14 03:41 16384 c:\windows\ServicePackFiles\i386\ds32gt.dll + 2009-12-29 19:45 . 2008-04-14 03:42 62976 c:\windows\ServicePackFiles\i386\drvqry.exe + 2009-12-29 19:44 . 2008-04-14 03:41 14336 c:\windows\ServicePackFiles\i386\drprov.dll + 2009-12-29 19:45 . 2008-04-13 22:15 60160 c:\windows\ServicePackFiles\i386\drmk.sys + 2009-12-29 19:44 . 2008-04-14 03:41 57344 c:\windows\ServicePackFiles\i386\dpwsockx.dll + 2009-12-29 19:44 . 2008-04-14 03:42 83456 c:\windows\ServicePackFiles\i386\dpvsetup.exe + 2009-12-29 19:44 . 2008-04-14 03:41 21504 c:\windows\ServicePackFiles\i386\dpvacm.dll + 2009-12-29 19:44 . 2008-04-14 03:42 17920 c:\windows\ServicePackFiles\i386\dpnsvr.exe + 2009-12-29 19:44 . 2008-04-14 03:41 60928 c:\windows\ServicePackFiles\i386\dpnhupnp.dll + 2009-12-29 19:44 . 2008-04-14 03:41 35328 c:\windows\ServicePackFiles\i386\dpnhpast.dll + 2009-12-29 19:44 . 2008-04-14 03:41 23552 c:\windows\ServicePackFiles\i386\dpmodemx.dll + 2009-12-29 19:44 . 2008-04-14 03:42 29696 c:\windows\ServicePackFiles\i386\dplaysvr.exe + 2009-12-29 19:44 . 2008-04-14 03:41 56320 c:\windows\ServicePackFiles\i386\dot3msm.dll + 2009-12-29 19:44 . 2008-04-14 03:41 39936 c:\windows\ServicePackFiles\i386\dot3clnt.dll + 2009-12-29 19:44 . 2008-04-14 03:41 57856 c:\windows\ServicePackFiles\i386\dot3cfg.dll + 2009-12-29 19:45 . 2008-04-14 03:41 26112 c:\windows\ServicePackFiles\i386\dot3api.dll + 2009-12-29 19:45 . 2008-04-13 20:24 53840 c:\windows\ServicePackFiles\i386\dosx.exe + 2009-12-29 19:44 . 2008-04-14 03:41 48128 c:\windows\ServicePackFiles\i386\docprop2.dll + 2009-12-29 19:44 . 2008-04-14 03:41 45568 c:\windows\ServicePackFiles\i386\dnsrslvr.dll + 2009-12-29 19:45 . 2008-04-14 03:41 52224 c:\windows\ServicePackFiles\i386\dmutil.dll + 2009-12-29 19:44 . 2008-04-13 22:15 52864 c:\windows\ServicePackFiles\i386\dmusic.sys + 2009-12-29 19:44 . 2008-04-14 03:41 23552 c:\windows\ServicePackFiles\i386\dmserver.dll + 2009-12-29 19:44 . 2008-04-14 03:41 82432 c:\windows\ServicePackFiles\i386\dmscript.dll + 2009-12-29 19:45 . 2008-04-14 03:42 15872 c:\windows\ServicePackFiles\i386\dmremote.exe + 2009-12-29 19:44 . 2008-04-14 03:41 35840 c:\windows\ServicePackFiles\i386\dmloader.dll + 2009-12-29 19:44 . 2008-04-14 03:41 61440 c:\windows\ServicePackFiles\i386\dmcompos.dll + 2009-12-29 19:44 . 2008-04-14 03:41 28672 c:\windows\ServicePackFiles\i386\dmband.dll + 2009-12-29 19:44 . 2008-04-14 03:41 32768 c:\windows\ServicePackFiles\i386\dispex.dll + 2009-12-29 19:45 . 2008-04-13 22:10 14208 c:\windows\ServicePackFiles\i386\diskdump.sys + 2009-12-29 19:44 . 2008-04-13 22:10 36352 c:\windows\ServicePackFiles\i386\disk.sys + 2009-12-29 19:44 . 2008-04-14 03:41 86528 c:\windows\ServicePackFiles\i386\directdb.dll + 2009-12-29 19:44 . 2008-04-14 03:41 39936 c:\windows\ServicePackFiles\i386\dimsroam.dll + 2009-12-29 19:44 . 2008-04-14 03:41 19456 c:\windows\ServicePackFiles\i386\dimsntfy.dll + 2009-12-29 19:44 . 2008-04-14 03:41 68608 c:\windows\ServicePackFiles\i386\digest.dll + 2009-12-29 19:44 . 2008-04-14 03:42 87040 c:\windows\ServicePackFiles\i386\diantz.exe + 2009-12-29 19:44 . 2008-04-14 03:41 48640 c:\windows\ServicePackFiles\i386\dhcpqec.dll + 2009-12-29 19:44 . 2008-04-14 03:41 28672 c:\windows\ServicePackFiles\i386\dfsshlex.dll + 2009-12-29 19:44 . 2008-04-14 03:41 39424 c:\windows\ServicePackFiles\i386\dfrgsnap.dll + 2009-12-29 19:44 . 2008-04-14 03:42 82944 c:\windows\ServicePackFiles\i386\dfrgfat.exe + 2009-12-29 19:44 . 2008-04-14 03:41 59904 c:\windows\ServicePackFiles\i386\devenum.dll + 2009-12-29 19:44 . 2008-04-14 03:42 25088 c:\windows\ServicePackFiles\i386\defrag.exe + 2009-12-29 19:44 . 2008-04-14 03:41 27136 c:\windows\ServicePackFiles\i386\ddrawex.dll + 2009-12-29 19:44 . 2008-04-14 03:42 30208 c:\windows\ServicePackFiles\i386\ddeshare.exe + 2009-12-29 19:44 . 2008-04-14 03:41 40960 c:\windows\ServicePackFiles\i386\dcap32.dll + 2009-12-29 19:45 . 2008-04-14 03:41 28672 c:\windows\ServicePackFiles\i386\dbnmpntw.dll + 2009-12-29 19:44 . 2008-04-14 03:41 24576 c:\windows\ServicePackFiles\i386\dbmsrpcn.dll + 2009-12-29 19:44 . 2008-04-14 03:41 25088 c:\windows\ServicePackFiles\i386\davclnt.dll + 2009-12-29 19:45 . 2008-04-14 03:42 42496 c:\windows\ServicePackFiles\i386\davcdata.exe + 2009-12-29 19:45 . 2008-04-14 03:41 54272 c:\windows\ServicePackFiles\i386\dataclen.dll + 2009-12-29 19:45 . 2008-04-13 20:06 48640 c:\windows\ServicePackFiles\i386\cwrwdm.sys + 2009-12-29 19:45 . 2008-04-14 03:41 33792 c:\windows\ServicePackFiles\i386\custsat.dll + 2009-12-29 19:45 . 2008-04-14 03:42 15360 c:\windows\ServicePackFiles\i386\ctfmon.exe + 2009-12-29 19:44 . 2008-04-14 03:41 32256 c:\windows\ServicePackFiles\i386\csrsrv.dll + 2008-04-13 19:40 . 2008-04-13 19:40 49152 c:\windows\ServicePackFiles\i386\csc.exe + 2009-12-29 19:45 . 2008-04-14 03:41 62464 c:\windows\ServicePackFiles\i386\cryptsvc.dll + 2009-12-29 19:45 . 2008-04-14 03:41 64512 c:\windows\ServicePackFiles\i386\cryptnet.dll + 2009-12-29 19:45 . 2008-04-14 03:41 53760 c:\windows\ServicePackFiles\i386\cryptext.dll + 2009-12-29 19:44 . 2008-04-14 03:41 33280 c:\windows\ServicePackFiles\i386\cryptdll.dll + 2009-12-29 19:44 . 2008-04-14 03:41 74752 c:\windows\ServicePackFiles\i386\cryptdlg.dll + 2009-12-29 19:45 . 2008-04-13 22:01 36736 c:\windows\ServicePackFiles\i386\crusoe.sys + 2009-12-29 19:44 . 2008-04-14 03:41 12800 c:\windows\ServicePackFiles\i386\credssp.dll + 2009-12-29 19:44 . 2008-04-14 03:41 35328 c:\windows\ServicePackFiles\i386\corpol.dll + 2008-04-13 19:40 . 2008-04-13 19:40 69632 c:\windows\ServicePackFiles\i386\corperfmonext.dll + 2009-12-29 19:45 . 2008-04-14 03:42 27648 c:\windows\ServicePackFiles\i386\conime.exe + 2009-12-29 19:44 . 2008-04-14 03:41 45056 c:\windows\ServicePackFiles\i386\confmrsl.dll + 2009-12-29 19:44 . 2008-04-14 03:41 97792 c:\windows\ServicePackFiles\i386\comrepl.dll + 2009-12-29 19:45 . 2008-04-14 03:41 24064 c:\windows\ServicePackFiles\i386\compfilt.dll + 2009-12-29 19:44 . 2008-04-13 22:06 10240 c:\windows\ServicePackFiles\i386\compbatt.sys + 2009-12-29 19:44 . 2008-04-14 03:41 28160 c:\windows\ServicePackFiles\i386\comaddin.dll + 2009-12-29 19:44 . 2008-04-14 03:41 60416 c:\windows\ServicePackFiles\i386\colbact.dll + 2009-12-29 19:44 . 2008-04-13 20:14 17920 c:\windows\ServicePackFiles\i386\cobramsg.dll + 2009-12-29 19:45 . 2008-04-14 03:41 46592 c:\windows\ServicePackFiles\i386\coadmin.dll + 2009-12-29 19:45 . 2008-04-14 03:41 79360 c:\windows\ServicePackFiles\i386\cnbjmon2.dll + 2009-12-29 19:45 . 2008-04-14 03:41 47104 c:\windows\ServicePackFiles\i386\cnbjmon.dll + 2009-12-29 19:45 . 2008-04-14 03:41 39424 c:\windows\ServicePackFiles\i386\cmutil.dll + 2009-12-29 19:44 . 2008-04-14 03:42 63488 c:\windows\ServicePackFiles\i386\cmstp.exe + 2009-12-29 19:44 . 2008-04-14 03:41 13312 c:\windows\ServicePackFiles\i386\cmsetacl.dll + 2009-12-29 19:45 . 2008-04-14 03:42 39936 c:\windows\ServicePackFiles\i386\cmmon32.exe + 2009-12-29 19:44 . 2008-04-14 03:42 25600 c:\windows\ServicePackFiles\i386\cmdl32.exe + 2009-12-29 19:44 . 2008-04-14 03:41 15872 c:\windows\ServicePackFiles\i386\cmcfg32.dll + 2009-12-29 19:44 . 2008-04-13 22:06 13952 c:\windows\ServicePackFiles\i386\cmbatt.sys + 2009-12-29 19:45 . 2008-04-14 03:41 58368 c:\windows\ServicePackFiles\i386\clusapi.dll + 2009-12-29 19:45 . 2008-04-14 03:42 33280 c:\windows\ServicePackFiles\i386\clipsrv.exe + 2009-12-29 19:44 . 2008-04-14 03:42 20480 c:\windows\ServicePackFiles\i386\cliconfg.exe + 2009-12-29 19:44 . 2008-04-14 03:41 77824 c:\windows\ServicePackFiles\i386\cliconfg.dll + 2009-12-29 19:44 . 2008-04-14 03:42 64000 c:\windows\ServicePackFiles\i386\cleanmgr.exe + 2009-12-29 19:44 . 2008-04-13 22:46 49536 c:\windows\ServicePackFiles\i386\classpnp.sys + 2009-12-29 19:45 . 2008-04-14 03:42 56832 c:\windows\ServicePackFiles\i386\cipher.exe + 2009-12-29 19:44 . 2008-04-14 03:41 69120 c:\windows\ServicePackFiles\i386\ciodm.dll + 2009-12-29 19:44 . 2008-04-14 03:41 15423 c:\windows\ServicePackFiles\i386\ch7xxnt5.dll + 2009-12-29 19:44 . 2008-04-14 03:39 16896 c:\windows\ServicePackFiles\i386\cfgmgr32.dll + 2009-12-29 19:44 . 2008-04-14 03:41 38912 c:\windows\ServicePackFiles\i386\cfgbkend.dll + 2009-12-29 19:44 . 2008-04-13 22:10 62976 c:\windows\ServicePackFiles\i386\cdrom.sys + 2009-12-29 19:44 . 2008-04-14 03:41 66560 c:\windows\ServicePackFiles\i386\cdm.dll + 2009-12-29 19:45 . 2008-04-13 22:44 63744 c:\windows\ServicePackFiles\i386\cdfs.sys + 2009-12-29 19:45 . 2008-04-13 22:16 17024 c:\windows\ServicePackFiles\i386\ccdecode.sys + 2009-12-29 19:44 . 2008-04-14 03:41 85504 c:\windows\ServicePackFiles\i386\catsrvps.dll + 2007-06-27 16:23 . 2007-06-27 16:23 94208 c:\windows\ServicePackFiles\i386\caspol.exe + 2009-12-29 19:45 . 2008-04-14 03:41 50688 c:\windows\ServicePackFiles\i386\camocx.dll + 2009-12-29 19:44 . 2008-04-14 03:42 19968 c:\windows\ServicePackFiles\i386\cacls.exe + 2009-12-29 19:44 . 2008-04-14 03:41 84480 c:\windows\ServicePackFiles\i386\cabview.dll + 2008-04-14 03:41 . 2008-04-14 03:41 60416 c:\windows\ServicePackFiles\i386\cabinet.dll + 2009-12-29 19:44 . 2008-04-14 03:41 50688 c:\windows\ServicePackFiles\i386\btpanui.dll + 2009-12-29 19:44 . 2008-04-13 22:16 18944 c:\windows\ServicePackFiles\i386\bthusb.sys + 2009-12-29 19:44 . 2008-04-14 03:41 30208 c:\windows\ServicePackFiles\i386\bthserv.dll + 2009-12-29 19:45 . 2008-04-13 22:16 36480 c:\windows\ServicePackFiles\i386\bthprint.sys + 2009-12-29 19:44 . 2008-04-13 22:16 37888 c:\windows\ServicePackFiles\i386\bthmodem.sys + 2009-12-29 19:44 . 2008-04-13 22:16 17024 c:\windows\ServicePackFiles\i386\bthenum.sys + 2009-12-29 19:44 . 2008-04-14 03:41 20992 c:\windows\ServicePackFiles\i386\bthci.dll + 2009-12-29 19:44 . 2008-04-14 03:41 78336 c:\windows\ServicePackFiles\i386\browsewm.dll + 2009-12-29 19:44 . 2008-04-14 03:41 77824 c:\windows\ServicePackFiles\i386\browser.dll + 2009-12-29 19:45 . 2008-04-13 20:33 63488 c:\windows\ServicePackFiles\i386\browselc.dll + 2009-12-29 19:45 . 2008-04-13 22:23 71552 c:\windows\ServicePackFiles\i386\bridge.sys + 2009-12-29 19:44 . 2008-04-14 03:42 71680 c:\windows\ServicePackFiles\i386\blastcln.exe + 2009-12-29 19:44 . 2008-04-14 03:41 17408 c:\windows\ServicePackFiles\i386\bidispl.dll + 2009-12-29 19:44 . 2008-04-13 22:16 11776 c:\windows\ServicePackFiles\i386\bdasup.sys + 2009-12-29 19:44 . 2008-04-13 22:06 14208 c:\windows\ServicePackFiles\i386\battc.sys + 2009-12-29 19:44 . 2008-04-14 03:41 29184 c:\windows\ServicePackFiles\i386\batmeter.dll + 2009-12-29 19:44 . 2008-04-14 03:41 52736 c:\windows\ServicePackFiles\i386\basesrv.dll + 2009-12-29 19:44 . 2008-04-14 03:41 84992 c:\windows\ServicePackFiles\i386\avifil32.dll + 2009-12-29 19:44 . 2008-04-13 22:16 13696 c:\windows\ServicePackFiles\i386\avcstrm.sys + 2009-12-29 19:44 . 2008-04-13 22:16 38912 c:\windows\ServicePackFiles\i386\avc.sys + 2009-12-29 19:44 . 2008-04-14 03:42 11264 c:\windows\ServicePackFiles\i386\autolfn.exe + 2009-12-29 19:44 . 2008-04-14 03:41 62464 c:\windows\ServicePackFiles\i386\authz.dll + 2008-04-14 03:42 . 2008-04-14 03:42 16439 c:\windows\ServicePackFiles\i386\author.exe + 2008-04-14 03:41 . 2008-04-14 03:41 20540 c:\windows\ServicePackFiles\i386\author.dll + 2009-12-29 19:44 . 2008-04-14 03:42 14336 c:\windows\ServicePackFiles\i386\auditusr.exe + 2009-12-29 19:44 . 2008-04-14 03:41 42496 c:\windows\ServicePackFiles\i386\audiosrv.dll + 2009-12-29 19:44 . 2008-04-14 03:41 17279 c:\windows\ServicePackFiles\i386\atv10nt5.dll + 2009-12-29 19:44 . 2008-04-14 03:41 14143 c:\windows\ServicePackFiles\i386\atv06nt5.dll + 2009-12-29 19:44 . 2008-04-14 03:41 25471 c:\windows\ServicePackFiles\i386\atv04nt5.dll + 2009-12-29 19:44 . 2008-04-14 03:41 11359 c:\windows\ServicePackFiles\i386\atv02nt5.dll + 2009-12-29 19:44 . 2008-04-14 03:41 21183 c:\windows\ServicePackFiles\i386\atv01nt5.dll + 2009-12-29 19:44 . 2008-04-14 03:42 12288 c:\windows\ServicePackFiles\i386\attrib.exe + 2009-12-29 19:44 . 2008-04-14 03:41 30208 c:\windows\ServicePackFiles\i386\atmlib.dll + 2009-12-29 19:44 . 2008-04-13 22:21 55808 c:\windows\ServicePackFiles\i386\atmlane.sys + 2009-12-29 19:44 . 2008-04-13 22:21 59904 c:\windows\ServicePackFiles\i386\atmarpc.sys + 2009-12-29 19:44 . 2008-04-14 03:42 11264 c:\windows\ServicePackFiles\i386\atmadm.exe + 2009-12-29 19:44 . 2008-04-14 03:41 58880 c:\windows\ServicePackFiles\i386\atl.dll + 2009-12-29 19:44 . 2008-04-14 03:41 32768 c:\windows\ServicePackFiles\i386\ativtmxx.dll + 2009-12-29 19:44 . 2008-04-13 20:04 63488 c:\windows\ServicePackFiles\i386\atinxsxx.sys + 2009-12-29 19:44 . 2008-04-13 20:04 31744 c:\windows\ServicePackFiles\i386\atinxbxx.sys + 2009-12-29 19:44 . 2008-04-13 20:04 73216 c:\windows\ServicePackFiles\i386\atintuxx.sys + 2009-12-29 19:45 . 2008-04-13 20:04 13824 c:\windows\ServicePackFiles\i386\atinttxx.sys + 2009-12-29 19:44 . 2008-04-13 20:04 28672 c:\windows\ServicePackFiles\i386\atinsnxx.sys + 2009-12-29 19:44 . 2008-04-13 20:04 52224 c:\windows\ServicePackFiles\i386\atinraxx.sys + 2009-12-29 19:45 . 2008-04-13 20:04 14336 c:\windows\ServicePackFiles\i386\atinpdxx.sys + 2009-12-29 19:45 . 2008-04-13 20:04 13824 c:\windows\ServicePackFiles\i386\atinmdxx.sys + 2009-12-29 19:44 . 2008-04-13 20:04 57856 c:\windows\ServicePackFiles\i386\atinbtxx.sys + 2009-12-29 19:44 . 2008-04-13 20:04 34735 c:\windows\ServicePackFiles\i386\ati1xsxx.sys + 2009-12-29 19:45 . 2008-04-13 20:04 29455 c:\windows\ServicePackFiles\i386\ati1xbxx.sys + 2009-12-29 19:44 . 2008-04-13 20:04 36463 c:\windows\ServicePackFiles\i386\ati1tuxx.sys + 2009-12-29 19:45 . 2008-04-13 20:04 21343 c:\windows\ServicePackFiles\i386\ati1ttxx.sys + 2009-12-29 19:45 . 2008-04-13 20:04 26367 c:\windows\ServicePackFiles\i386\ati1snxx.sys + 2009-12-29 19:45 . 2008-04-13 20:04 63663 c:\windows\ServicePackFiles\i386\ati1rvxx.sys + 2009-12-29 19:44 . 2008-04-13 20:04 30671 c:\windows\ServicePackFiles\i386\ati1raxx.sys + 2009-12-29 19:44 . 2008-04-13 20:04 12047 c:\windows\ServicePackFiles\i386\ati1pdxx.sys + 2009-12-29 19:44 . 2008-04-13 20:04 11615 c:\windows\ServicePackFiles\i386\ati1mdxx.sys + 2009-12-29 19:44 . 2008-04-13 20:04 56623 c:\windows\ServicePackFiles\i386\ati1btxx.sys + 2009-12-29 19:45 . 2008-04-13 22:10 96512 c:\windows\ServicePackFiles\i386\atapi.sys + 2009-12-29 19:44 . 2008-04-14 03:42 25088 c:\windows\ServicePackFiles\i386\at.exe + 2009-12-29 19:44 . 2008-04-13 22:27 14336 c:\windows\ServicePackFiles\i386\asyncmac.sys + 2009-12-29 19:44 . 2008-04-14 03:41 65024 c:\windows\ServicePackFiles\i386\asycfilt.dll + 2009-12-29 19:45 . 2008-04-14 03:42 32768 c:\windows\ServicePackFiles\i386\asr_pfu.exe + 2009-12-29 19:45 . 2008-04-14 03:42 30208 c:\windows\ServicePackFiles\i386\asr_fmt.exe + 2008-04-13 19:40 . 2008-04-13 19:40 32768 c:\windows\ServicePackFiles\i386\aspnet_wp.exe + 2008-04-13 19:40 . 2008-04-13 19:40 32768 c:\windows\ServicePackFiles\i386\aspnet_state.exe + 2008-04-13 19:40 . 2008-04-13 19:40 24576 c:\windows\ServicePackFiles\i386\aspnet_regiis.exe + 2008-04-13 19:40 . 2008-04-13 19:40 20480 c:\windows\ServicePackFiles\i386\aspnet_filter.dll + 2009-12-29 19:45 . 2008-04-13 22:21 60800 c:\windows\ServicePackFiles\i386\arp1394.sys + 2009-12-29 19:44 . 2008-04-13 20:05 36224 c:\windows\ServicePackFiles\i386\an983.sys + 2009-12-29 19:44 . 2008-04-14 03:41 70656 c:\windows\ServicePackFiles\i386\amstream.dll + 2009-12-29 19:45 . 2008-04-13 22:01 37760 c:\windows\ServicePackFiles\i386\amdk7.sys + 2009-12-29 19:44 . 2008-04-13 22:01 37376 c:\windows\ServicePackFiles\i386\amdk6.sys + 2009-12-29 19:44 . 2008-04-13 22:06 43008 c:\windows\ServicePackFiles\i386\amdagp.sys + 2009-12-29 19:44 . 2008-04-14 03:41 17408 c:\windows\ServicePackFiles\i386\alrsvc.dll + 2009-12-29 19:44 . 2008-04-13 22:06 42752 c:\windows\ServicePackFiles\i386\alim1541.sys + 2009-12-29 19:44 . 2008-04-14 03:42 44544 c:\windows\ServicePackFiles\i386\alg.exe + 2009-12-29 19:44 . 2008-04-14 03:42 98304 c:\windows\ServicePackFiles\i386\ahui.exe + 2009-12-29 19:45 . 2008-04-14 03:41 24064 c:\windows\ServicePackFiles\i386\agtintl.dll + 2009-12-29 19:44 . 2007-04-02 21:56 20480 c:\windows\ServicePackFiles\i386\agt0c0a.dll + 2009-12-29 19:44 . 2007-04-02 21:56 20992 c:\windows\ServicePackFiles\i386\agt0816.dll + 2009-12-29 19:44 . 2007-04-02 21:56 19456 c:\windows\ServicePackFiles\i386\agt0804.dll + 2009-12-29 19:45 . 2007-04-02 21:56 19456 c:\windows\ServicePackFiles\i386\agt041f.dll + 2009-12-29 19:45 . 2007-04-02 21:56 19456 c:\windows\ServicePackFiles\i386\agt041d.dll + 2009-12-29 19:44 . 2007-04-02 21:56 19456 c:\windows\ServicePackFiles\i386\agt0419.dll + 2009-12-29 19:44 . 2007-04-02 21:56 20480 c:\windows\ServicePackFiles\i386\agt0416.dll + 2009-12-29 19:45 . 2007-04-02 21:56 19456 c:\windows\ServicePackFiles\i386\agt0415.dll + 2009-12-29 19:44 . 2007-04-02 21:56 19456 c:\windows\ServicePackFiles\i386\agt0414.dll + 2009-12-29 19:45 . 2007-04-02 21:56 20992 c:\windows\ServicePackFiles\i386\agt0413.dll + 2009-12-29 19:44 . 2007-04-02 21:56 19456 c:\windows\ServicePackFiles\i386\agt0412.dll + 2009-12-29 19:45 . 2007-04-02 21:56 19456 c:\windows\ServicePackFiles\i386\agt0411.dll + 2009-12-29 19:44 . 2007-04-02 21:56 20992 c:\windows\ServicePackFiles\i386\agt0410.dll + 2009-12-29 19:45 . 2007-04-02 21:56 19968 c:\windows\ServicePackFiles\i386\agt040e.dll + 2009-12-29 19:44 . 2007-04-02 21:56 19456 c:\windows\ServicePackFiles\i386\agt040d.dll + 2009-12-29 19:45 . 2007-04-02 21:56 21504 c:\windows\ServicePackFiles\i386\agt040c.dll + 2009-12-29 19:44 . 2007-04-02 21:56 19456 c:\windows\ServicePackFiles\i386\agt040b.dll + 2009-12-29 19:44 . 2008-04-13 21:02 19968 c:\windows\ServicePackFiles\i386\agt0409.dll + 2009-12-29 19:45 . 2007-04-02 21:56 22016 c:\windows\ServicePackFiles\i386\agt0408.dll + 2009-12-29 19:44 . 2007-04-02 21:56 21504 c:\windows\ServicePackFiles\i386\agt0407.dll + 2009-12-29 19:45 . 2007-04-02 21:56 19456 c:\windows\ServicePackFiles\i386\agt0406.dll + 2009-12-29 19:44 . 2007-04-02 21:56 19456 c:\windows\ServicePackFiles\i386\agt0405.dll + 2009-12-29 19:45 . 2007-04-02 21:56 19456 c:\windows\ServicePackFiles\i386\agt0404.dll + 2009-12-29 19:44 . 2007-04-02 21:56 19456 c:\windows\ServicePackFiles\i386\agt0401.dll + 2009-12-29 19:45 . 2008-04-13 22:06 44928 c:\windows\ServicePackFiles\i386\agpcpq.sys + 2009-12-29 19:44 . 2008-04-13 22:06 42368 c:\windows\ServicePackFiles\i386\agp440.sys + 2009-12-29 19:45 . 2008-04-14 03:41 44032 c:\windows\ServicePackFiles\i386\agentsr.dll + 2009-12-29 19:44 . 2008-04-14 03:41 24064 c:\windows\ServicePackFiles\i386\agentpsh.dll + 2009-12-29 19:44 . 2008-04-14 03:41 49152 c:\windows\ServicePackFiles\i386\agentmpx.dll + 2009-12-29 19:44 . 2008-04-14 03:41 57344 c:\windows\ServicePackFiles\i386\agentdpv.dll + 2009-12-29 19:45 . 2008-04-14 03:41 42496 c:\windows\ServicePackFiles\i386\agentdp2.dll + 2009-12-29 19:44 . 2008-04-14 03:41 24064 c:\windows\ServicePackFiles\i386\agentanm.dll + 2009-12-29 19:45 . 2008-04-14 03:41 99840 c:\windows\ServicePackFiles\i386\advpack.dll + 2009-12-29 19:45 . 2007-04-02 16:40 85813 c:\windows\ServicePackFiles\i386\adsutil.vbs + 2009-12-29 19:44 . 2008-04-14 03:41 68096 c:\windows\ServicePackFiles\i386\adsmsext.dll + 2009-12-29 19:45 . 2008-04-14 03:41 43520 c:\windows\ServicePackFiles\i386\admwprox.dll + 2009-12-29 19:44 . 2008-04-14 03:41 61440 c:\windows\ServicePackFiles\i386\admparse.dll + 2009-12-29 19:45 . 2008-04-13 20:06 10880 c:\windows\ServicePackFiles\i386\admjoy.sys + 2008-04-14 03:42 . 2008-04-14 03:42 16439 c:\windows\ServicePackFiles\i386\admin.exe + 2008-04-14 03:41 . 2008-04-14 03:41 20540 c:\windows\ServicePackFiles\i386\admin.dll + 2009-12-29 19:45 . 2008-04-14 03:41 29696 c:\windows\ServicePackFiles\i386\admexs.dll + 2009-12-29 19:44 . 2008-04-14 03:41 98304 c:\windows\ServicePackFiles\i386\actxprxy.dll + 2009-12-29 19:44 . 2008-04-14 03:41 39424 c:\windows\ServicePackFiles\i386\acadproc.dll + 2009-12-29 19:44 . 2008-04-13 20:06 84480 c:\windows\ServicePackFiles\i386\ac97via.sys + 2009-12-29 19:44 . 2008-04-13 22:16 48128 c:\windows\ServicePackFiles\i386\61883.sys + 2009-12-29 19:44 . 2008-04-13 22:10 12288 c:\windows\ServicePackFiles\i386\4mmdat.sys + 2009-12-29 19:44 . 2008-04-13 22:16 53376 c:\windows\ServicePackFiles\i386\1394bus.sys + 2008-04-14 03:41 . 2008-04-14 03:41 25600 c:\windows\Installer\tsclientmsitrans\tscupdc.dll + 2009-12-29 19:45 . 2007-10-30 13:36 13801 c:\windows\Installer\tsclientmsitrans\tscuinst.vbs + 2009-12-29 19:45 . 2007-12-12 14:03 18917 c:\windows\Installer\tsclientmsitrans\tscinst.vbs + 2008-04-14 03:42 . 2008-04-14 03:42 7680 c:\windows\system32\spdwnwxp.exe + 2009-12-29 19:45 . 2008-04-14 03:42 9728 c:\windows\system32\rwnh.dll + 2009-12-29 19:44 . 2008-04-13 22:06 5888 c:\windows\system32\drivers\smbali.sys + 2009-12-29 19:44 . 2008-04-14 03:42 3901 c:\windows\system32\drivers\siint5.dll + 2009-12-29 19:44 . 2008-04-14 03:41 3775 c:\windows\system32\drivers\adv11nt5.dll + 2009-12-29 19:44 . 2008-04-14 03:41 3711 c:\windows\system32\drivers\adv09nt5.dll + 2009-12-29 19:44 . 2008-04-14 03:41 3135 c:\windows\system32\drivers\adv08nt5.dll + 2009-12-29 19:44 . 2008-04-14 03:41 3647 c:\windows\system32\drivers\adv07nt5.dll + 2009-12-29 19:44 . 2008-04-14 03:41 3615 c:\windows\system32\drivers\adv05nt5.dll + 2009-12-29 19:44 . 2008-04-14 03:41 3967 c:\windows\system32\drivers\adv02nt5.dll + 2009-12-29 19:44 . 2008-04-14 03:41 4255 c:\windows\system32\drivers\adv01nt5.dll + 2009-12-29 19:45 . 2008-04-13 22:13 9728 c:\windows\system32\comsdupd.exe + 2009-12-29 19:44 . 2008-04-14 03:42 6656 c:\windows\ServicePackFiles\i386\wuauserv.dll + 2009-12-29 19:45 . 2008-04-14 03:42 8192 c:\windows\ServicePackFiles\i386\wshirda.dll + 2009-12-29 19:45 . 2008-04-14 03:42 5632 c:\windows\ServicePackFiles\i386\wmm2res2.dll + 2009-12-29 19:44 . 2008-04-14 03:42 7680 c:\windows\ServicePackFiles\i386\wmm2ext.dll + 2009-12-29 19:44 . 2008-04-14 03:42 4096 c:\windows\ServicePackFiles\i386\wmm2eres.dll + 2009-12-29 19:44 . 2008-04-13 20:40 6656 c:\windows\ServicePackFiles\i386\wmiapres.dll + 2009-12-29 19:44 . 2008-04-13 22:06 8832 c:\windows\ServicePackFiles\i386\wmiacpi.sys + 2009-12-29 19:44 . 2008-04-14 03:41 5632 c:\windows\ServicePackFiles\i386\wmi.dll + 2009-12-29 19:45 . 2008-04-14 03:42 5632 c:\windows\ServicePackFiles\i386\winver.exe + 2009-12-29 19:44 . 2008-04-13 20:24 5120 c:\windows\ServicePackFiles\i386\winnls.dll + 2009-12-29 19:44 . 2008-04-13 22:10 5376 c:\windows\ServicePackFiles\i386\viaide.sys + 2009-12-29 19:44 . 2008-04-14 03:42 8704 c:\windows\ServicePackFiles\i386\tty.dll + 2009-12-29 19:44 . 2008-01-18 18:43 2247 c:\windows\ServicePackFiles\i386\tscdsbl.bat + 2009-12-29 19:45 . 2008-04-14 03:42 7168 c:\windows\ServicePackFiles\i386\tlntsvrp.dll + 2009-12-29 19:44 . 2008-04-13 22:09 4352 c:\windows\ServicePackFiles\i386\swenum.sys + 2009-12-29 19:45 . 2008-04-14 03:42 8192 c:\windows\ServicePackFiles\i386\staxmem.dll + 2009-12-29 19:44 . 2008-04-13 22:15 6272 c:\windows\ServicePackFiles\i386\splitter.sys + 2008-04-14 03:42 . 2008-04-14 03:42 7680 c:\windows\ServicePackFiles\i386\spdwnwxp.exe + 2009-12-29 19:45 . 2008-04-13 22:10 7552 c:\windows\ServicePackFiles\i386\sonyait.sys + 2009-12-29 19:44 . 2008-04-14 03:42 8704 c:\windows\ServicePackFiles\i386\snmptrap.exe + 2009-12-29 19:45 . 2008-04-14 03:42 6144 c:\windows\ServicePackFiles\i386\snmpmib.dll + 2009-12-29 19:44 . 2008-04-14 03:42 8192 c:\windows\ServicePackFiles\i386\smbinst.exe + 2009-12-29 19:44 . 2008-04-13 22:06 6912 c:\windows\ServicePackFiles\i386\smbclass.sys + 2009-12-29 19:44 . 2008-04-13 22:06 5888 c:\windows\ServicePackFiles\i386\smbali.sys + 2009-12-29 19:45 . 2008-04-14 03:42 3901 c:\windows\ServicePackFiles\i386\siint5.dll + 2009-12-29 19:44 . 2008-04-14 03:42 5120 c:\windows\ServicePackFiles\i386\sfc.dll + 2009-12-29 19:44 . 2008-04-14 03:42 7168 c:\windows\ServicePackFiles\i386\sensapi.dll + 2009-12-29 19:45 . 2008-04-14 03:42 5632 c:\windows\ServicePackFiles\i386\security.dll + 2006-12-31 05:57 . 2006-12-31 05:57 4569 c:\windows\ServicePackFiles\i386\secupd.dat + 2009-12-29 19:44 . 2008-04-14 03:42 9216 c:\windows\ServicePackFiles\i386\scrnsave.scr + 2009-12-29 19:45 . 2008-04-14 03:42 9728 c:\windows\ServicePackFiles\i386\rwnh.dll + 2009-12-29 19:45 . 2008-04-14 03:42 4096 c:\windows\ServicePackFiles\i386\rpcref.dll + 2009-12-29 19:44 . 2008-04-13 20:22 3338 c:\windows\ServicePackFiles\i386\redir.exe + 2009-12-29 19:44 . 2008-04-14 03:42 7680 c:\windows\ServicePackFiles\i386\rasadhlp.dll + 2009-12-29 19:44 . 2008-04-13 22:10 6016 c:\windows\ServicePackFiles\i386\qic157.sys + 2009-12-29 19:45 . 2008-04-14 03:42 7680 c:\windows\ServicePackFiles\i386\pwsdata.dll + 2009-12-29 19:44 . 2008-04-14 03:42 9216 c:\windows\ServicePackFiles\i386\proxycfg.exe + 2009-12-29 19:45 . 2008-04-13 22:10 8832 c:\windows\ServicePackFiles\i386\powerfil.sys + 2009-12-29 19:44 . 2008-04-14 03:42 8192 c:\windows\ServicePackFiles\i386\ntlsapi.dll + 2009-12-29 19:44 . 2008-04-14 03:42 4096 c:\windows\ServicePackFiles\i386\nddeapir.exe + 2009-12-29 19:44 . 2008-04-14 03:42 9728 c:\windows\ServicePackFiles\i386\ncpsres.dll + 2009-12-29 19:45 . 2008-04-14 03:42 4096 c:\windows\ServicePackFiles\i386\mtxex.dll + 2009-12-29 19:44 . 2008-04-13 22:09 5504 c:\windows\ServicePackFiles\i386\mstee.sys + 2009-12-29 19:44 . 2008-04-13 22:09 4992 c:\windows\ServicePackFiles\i386\mspqm.sys + 2009-12-29 19:44 . 2008-04-13 22:09 5376 c:\windows\ServicePackFiles\i386\mspclock.sys + 2009-12-29 19:44 . 2008-04-13 22:09 7552 c:\windows\ServicePackFiles\i386\mskssrv.sys + 2009-12-29 19:44 . 2008-04-14 03:42 4608 c:\windows\ServicePackFiles\i386\msimg32.dll + 2009-12-29 19:44 . 2008-04-14 03:42 6656 c:\windows\ServicePackFiles\i386\msidle.dll + 2009-12-29 19:44 . 2008-04-14 03:42 6144 c:\windows\ServicePackFiles\i386\msdtc.exe + 2009-12-29 19:44 . 2008-04-14 03:42 4096 c:\windows\ServicePackFiles\i386\msdaurl.dll + 2009-12-29 19:44 . 2008-04-14 03:42 4096 c:\windows\ServicePackFiles\i386\msdasc.dll + 2009-12-29 19:44 . 2008-04-14 03:42 4096 c:\windows\ServicePackFiles\i386\msdaer.dll + 2009-12-29 19:44 . 2008-04-14 03:42 4096 c:\windows\ServicePackFiles\i386\msdaenum.dll + 2009-12-29 19:44 . 2008-04-14 03:42 4096 c:\windows\ServicePackFiles\i386\msdadc.dll + 2008-04-13 19:41 . 2008-04-13 19:41 8704 c:\windows\ServicePackFiles\i386\mscortim.dll + 2009-12-29 19:44 . 2008-04-14 03:40 3584 c:\windows\ServicePackFiles\i386\msafd.dll + 2009-12-29 19:45 . 2008-04-14 03:42 4608 c:\windows\ServicePackFiles\i386\mqsvc.exe + 2009-12-29 19:44 . 2008-04-14 03:41 6656 c:\windows\ServicePackFiles\i386\mmcfxcr.dll + 2009-12-29 19:44 . 2008-04-14 03:42 7680 c:\windows\ServicePackFiles\i386\migregdb.exe + 2009-12-29 19:44 . 2008-04-13 22:10 7040 c:\windows\ServicePackFiles\i386\ltotape.sys + 2009-12-29 19:44 . 2008-04-14 03:41 4096 c:\windows\ServicePackFiles\i386\ksuser.dll + 2009-12-29 19:44 . 2008-04-14 03:41 8192 c:\windows\ServicePackFiles\i386\koc.dll + 2009-12-29 19:44 . 2008-04-13 22:01 7424 c:\windows\ServicePackFiles\i386\kd1394.dll + 2009-12-29 19:45 . 2008-04-14 03:39 7168 c:\windows\ServicePackFiles\i386\kbdukx.dll + 2009-12-29 19:44 . 2008-04-14 03:39 7680 c:\windows\ServicePackFiles\i386\kbdsmsno.dll + 2009-12-29 19:44 . 2008-04-14 03:39 7680 c:\windows\ServicePackFiles\i386\kbdsmsfi.dll + 2009-12-29 19:45 . 2008-04-14 03:39 6144 c:\windows\ServicePackFiles\i386\kbdpash.dll + 2009-12-29 19:44 . 2008-04-14 03:39 7168 c:\windows\ServicePackFiles\i386\kbdno1.dll + 2009-12-29 19:44 . 2008-04-14 03:39 6144 c:\windows\ServicePackFiles\i386\kbdnepr.dll + 2008-04-14 03:39 . 2008-04-14 03:39 7168 c:\windows\ServicePackFiles\i386\kbdnec.dll

ComboFix 09-12-28.06 - owner 29/12/2009 21:18:01.2.2 - x86 Microsoft Windows XP Professional 5.1.2600.3.1251.359.1033.18.2047.1515 [GMT 2:00] Running from: c:\documents and settings\owner\Desktop\ComboFix.exe Command switches used :: c:\documents and settings\owner\Desktop\CFScript.txt file zipped: c:\windows\system32\ghzv.dll . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\windows\system32\ghzv.dll c:\windows\system32\spoolsv.exe . . . is infected!! . --------------- FCopy --------------- c:\windows\$NtUninstallKB956572$\services.exe --> c:\windows\system32\services.exe c:\windows\$NtUninstallKB956572$\services.exe --> c:\windows\$hf_mig$\KB956572\SP3QFE\services.exe . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Service_ssta ((((((((((((((((((((((((( Files Created from 2009-11-28 to 2009-12-29 ))))))))))))))))))))))))))))))) . 2009-12-29 18:53 . 2009-12-29 18:57 -------- d-----w- C:\ComboFix 2009-12-29 17:11 . 2009-12-29 17:11 -------- d-----w- c:\documents and settings\owner\Application Data\Malwarebytes 2009-12-29 17:11 . 2009-12-03 14:14 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2009-12-29 17:11 . 2009-12-29 17:11 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes 2009-12-29 17:11 . 2009-12-03 14:13 19160 ----a-w- c:\windows\system32\drivers\mbam.sys 2009-12-29 16:54 . 2009-12-29 17:10 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy 2009-12-28 22:22 . 2009-12-28 22:35 -------- d-----w- c:\program files\DiskInternals 2009-12-28 21:47 . 2009-12-28 21:47 52224 ----a-w- c:\documents and settings\owner\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll 2009-12-28 21:47 . 2009-12-28 21:47 117760 ----a-w- c:\documents and settings\owner\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL 2009-12-28 21:47 . 2009-12-28 21:47 -------- d-----w- c:\documents and settings\All Users\Application Data\SUPERAntiSpyware.com 2009-12-28 21:47 . 2009-12-28 21:47 -------- d-----w- c:\program files\SUPERAntiSpyware 2009-12-28 21:47 . 2009-12-28 21:47 -------- d-----w- c:\documents and settings\owner\Application Data\SUPERAntiSpyware.com 2009-12-28 20:50 . 2009-12-28 20:50 -------- d-----w- c:\documents and settings\owner\Local Settings\Application Data\Threat Expert 2009-12-28 20:25 . 2009-12-28 19:09 877848 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgupd.exe 2009-12-28 20:25 . 2009-12-28 19:09 798488 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avginet.dll 2009-12-28 20:25 . 2009-12-28 19:09 1657112 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgupd.dll 2009-12-28 19:34 . 2009-12-28 19:34 -------- d-----w- c:\program files\Notepad2 2009-12-28 19:10 . 2009-12-28 19:19 -------- d-----w- C:\$AVG 2009-12-28 19:09 . 2009-12-28 19:09 -------- d-----w- c:\program files\AVG 2009-12-28 19:09 . 2009-12-29 18:48 -------- d-----w- c:\documents and settings\All Users\Application Data\avg9 2009-12-28 19:09 . 2009-12-28 19:12 -------- d-----w- c:\windows\SxsCaPendDel . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-12-29 16:10 . 2009-05-29 16:22 -------- d-----w- c:\documents and settings\owner\Application Data\Skype 2009-12-29 05:07 . 2009-06-06 19:40 -------- d-----w- c:\documents and settings\owner\Application Data\skypePM 2009-12-28 21:46 . 2009-05-13 14:58 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard 2009-12-28 21:38 . 2009-05-17 18:38 -------- d---a-w- c:\documents and settings\All Users\Application Data\Temp 2009-12-23 18:19 . 2009-05-13 14:37 64920 ----a-w- c:\documents and settings\owner\Local Settings\Application Data\GDIPFONTCACHEV1.DAT 2009-11-21 16:17 . 2009-06-06 18:43 -------- d-----w- c:\program files\BS_Player . (((((((((((((((((((((((((((((((((((((((((( SR_Search )))))))))))))))))))))))))))))))))))))))))))))))))))))))) . ------- Sigcheck ------- [-] 2008-04-14 . 0FD06E8FF4681CBA88A0F17103D79E5F . 14848 . . [5.1.2600.5512] . . c:\windows\system32\lsass.exe [-] 2009-02-06 . 9B8B77C0300BA1252BCADF3CB5066959 . 113152 . . [5.1.2600.5755] . . c:\windows\system32\services.exe [7] 2008-04-14 . 0E776ED5F7CC9F94299E70461B7B8185 . 108544 . . [5.1.2600.5512] . . c:\windows\$hf_mig$\KB956572\SP3QFE\services.exe [7] 2008-04-14 . 0E776ED5F7CC9F94299E70461B7B8185 . 108544 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB956572$\services.exe [-] 2008-04-14 . 1FC9BD5BFEF57ADDCDD5ABB0299DF88C . 58880 . . [5.1.2600.5512] . . c:\windows\system32\spoolsv.exe [-] 2008-04-14 . CB55786ECEB588353AF6EB0241E25842 . 512000 . . [5.1.2600.5512] . . c:\windows\system32\winlogon.exe [-] 2008-04-14 . D5875E6AD586C323999CCE4DBD56F981 . 17408 . . [5.1.2600.5512] . . c:\windows\system32\svchost.exe [-] 2008-04-14 . C75E5F4D567D28AA38A45AE8B8DF9367 . 1036288 . . [6.00.2900.5512] . . c:\windows\explorer.exe . ((((((((((((((((((((((((((((( SnapShot@2009-12-29_18.56.50 ))))))))))))))))))))))))))))))))))))))))) . + 2009-12-29 19:20 . 2009-12-29 19:20 16384 c:\windows\temp\Perflib_Perfdata_1e4.dat + 2009-05-13 14:54 . 2008-04-14 02:42 108544 c:\windows\$hf_mig$\KB956572\SP3QFE\services.exe . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NetworxHelper"="c:\program files\Telnet\Helper\Helper.exe" [2009-05-27 975872] "LogitechCommunicationsManager"="c:\program files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe" [2007-02-07 488984] "LogitechQuickCamRibbon"="c:\program files\Logitech\QuickCam10\QuickCam10.exe" [2007-02-07 774168] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-04-30 13750272] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360] c:\documents and settings\All Users\Start Menu\Programs\Startup\ HD ADeck.lnk - c:\program files\VIA\VIAudioi\HDADeck\HDeck.exe [2009-5-13 30003200] Logitech Desktop Messenger.lnk - c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [2009-6-27 67128] [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks] "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon] 2009-09-03 12:21 548352 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.dll [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] 2009-02-27 14:10 35696 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BDRegion] 2008-06-27 13:50 91432 ----a-w- c:\program files\Cyberlink\Shared Files\brs.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update] 2009-05-14 12:43 133104 ----atw- c:\documents and settings\owner\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup] 2004-06-14 14:18 221184 ----a-w- c:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler] 2004-06-14 14:18 81920 ----a-w- c:\program files\Common Files\InstallShield\UpdateService\issch.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS] 2008-04-14 02:42 1695232 ------w- c:\program files\Messenger\msmsgs.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon] 2009-04-30 21:30 13750272 ----a-w- c:\windows\system32\nvcpl.dll [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter] 2009-04-30 21:30 86016 ----a-w- c:\windows\system32\nvmctray.dll [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz] 2009-04-30 21:31 1657376 ----a-w- c:\windows\system32\nwiz.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PDVD8LanguageShortcut] 2007-12-14 08:36 50472 ------w- e:\program files\CyberLink\PowerDVD8\PowerDVD8\Language\Language.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl8] 2008-03-20 17:23 83240 ------w- e:\program files\CyberLink\PowerDVD8\PowerDVD8\PDVD8Serv.exe [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\StrongDC++\\StrongDC.exe"= "c:\\Program Files\\BitComet\\BitComet.exe"= "c:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"= "c:\\WINDOWS\\system32\\dpvsetup.exe"= "c:\\Program Files\\Skype\\Phone\\Skype.exe"= "c:\program files\Telnet\Helper\winvnc.exe"= c:\program files\Telnet\Helper\winvnc.exe:192.168.11.0/255.255.255.0:Enabled:Telnet-BG Helper VNC [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009 "14233:TCP"= 14233:TCP:BitComet 14233 TCP "14233:UDP"= 14233:UDP:BitComet 14233 UDP [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings] "AllowOutboundPacketTooBig"= 1 (0x1) "AllowOutboundDestinationUnreachable"= 1 (0x1) "AllowOutboundSourceQuench"= 1 (0x1) "AllowRedirect"= 1 (0x1) "AllowInboundEchoRequest"= 1 (0x1) "AllowInboundRouterRequest"= 1 (0x1) "AllowOutboundTimeExceeded"= 1 (0x1) "AllowOutboundParameterProblem"= 1 (0x1) "AllowInboundTimestampRequest"= 1 (0x1) "AllowInboundMaskRequest"= 1 (0x1) R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [16/12/2009 16:26 9968] R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [16/12/2009 16:26 74480] R2 {FE4C91E7-22C2-4D0C-9F6B-82F1B7742054};{FE4C91E7-22C2-4D0C-9F6B-82F1B7742054};e:\program files\CyberLink\PowerDVD8\PowerDVD8\000.fcl [27/06/2008 15:50 61424] R3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys [13/05/2009 16:48 845184] S3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [16/12/2009 16:27 7408] . ------- Supplementary Scan ------- . uStart Page = hxxp://www.google.bg/ IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 TCP: {7579514D-A978-46F3-98D4-90526BFDB884} = 89.190.192.162,213.240.241.253 Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - c:\program files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll . ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-12-29 21:20 Windows 5.1.2600 Service Pack 3 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** [HKEY_LOCAL_MACHINE\System\ControlSet003\Services\{FE4C91E7-22C2-4D0C-9F6B-82F1B7742054}] "ImagePath"="\??\e:\program files\CyberLink\PowerDVD8\PowerDVD8\000.fcl" . --------------------- LOCKED REGISTRY KEYS --------------------- [HKEY_USERS\S-1-5-21-776561741-838170752-1801674531-1003\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{24C5C30C-1341-963B-A6AB-4F4407E3F718}*] @Allowed: (Read) (RestrictedCode) @Allowed: (Read) (RestrictedCode) [HKEY_USERS\S-1-5-21-776561741-838170752-1801674531-1003\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{9761FFE2-E147-2634-946F-34353E2724C4}*] @Allowed: (Read) (RestrictedCode) @Allowed: (Read) (RestrictedCode) . --------------------- DLLs Loaded Under Running Processes --------------------- - - - - - - - > 'winlogon.exe'(536) c:\program files\SUPERAntiSpyware\SASWINLO.dll c:\documents and settings\owner\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL c:\documents and settings\owner\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll - - - - - - - > 'explorer.exe'(7596) c:\program files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll c:\windows\system32\WPDShServiceObj.dll c:\windows\system32\PortableDeviceTypes.dll c:\windows\system32\PortableDeviceApi.dll . ------------------------ Other Running Processes ------------------------ . c:\windows\system32\nvsvc32.exe c:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exe c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE c:\windows\system32\wscntfy.exe c:\program files\Common Files\LogiShrd\LComMgr\LVComSX.exe c:\program files\Common Files\Logishrd\LQCVFX\COCIManager.exe . ************************************************************************** . Completion time: 2009-12-29 21:21:39 - machine was rebooted ComboFix-quarantined-files.txt 2009-12-29 19:21 ComboFix2.txt 2009-12-29 18:57 Pre-Run: 14 419 365 888 bytes free Post-Run: 14 326 210 560 bytes free - - End Of File - - E0BC4B17C8FA9BC3CDA552487510BCAC

ComboFix 09-12-28.06 - owner 29/12/2009 20:54:32.1.2 - x86 Microsoft Windows XP Professional 5.1.2600.3.1251.359.1033.18.2047.1502 [GMT 2:00] Running from: c:\documents and settings\owner\Desktop\ComboFix.exe . ((((((((((((((((((((((((( Files Created from 2009-11-28 to 2009-12-29 ))))))))))))))))))))))))))))))) . 2009-12-29 17:11 . 2009-12-29 17:11 -------- d-----w- c:\documents and settings\owner\Application Data\Malwarebytes 2009-12-29 17:11 . 2009-12-03 14:14 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2009-12-29 17:11 . 2009-12-29 17:11 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes 2009-12-29 17:11 . 2009-12-03 14:13 19160 ----a-w- c:\windows\system32\drivers\mbam.sys 2009-12-29 16:54 . 2009-12-29 17:10 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy 2009-12-28 22:22 . 2009-12-28 22:35 -------- d-----w- c:\program files\DiskInternals 2009-12-28 21:47 . 2009-12-28 21:47 52224 ----a-w- c:\documents and settings\owner\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll 2009-12-28 21:47 . 2009-12-28 21:47 117760 ----a-w- c:\documents and settings\owner\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL 2009-12-28 21:47 . 2009-12-28 21:47 -------- d-----w- c:\documents and settings\All Users\Application Data\SUPERAntiSpyware.com 2009-12-28 21:47 . 2009-12-28 21:47 -------- d-----w- c:\program files\SUPERAntiSpyware 2009-12-28 21:47 . 2009-12-28 21:47 -------- d-----w- c:\documents and settings\owner\Application Data\SUPERAntiSpyware.com 2009-12-28 20:50 . 2009-12-28 20:50 -------- d-----w- c:\documents and settings\owner\Local Settings\Application Data\Threat Expert 2009-12-28 20:25 . 2009-12-28 19:09 877848 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgupd.exe 2009-12-28 20:25 . 2009-12-28 19:09 798488 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avginet.dll 2009-12-28 20:25 . 2009-12-28 19:09 1657112 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgupd.dll 2009-12-28 19:34 . 2009-12-28 19:34 -------- d-----w- c:\program files\Notepad2 2009-12-28 19:10 . 2009-12-28 19:19 -------- d-----w- C:\$AVG 2009-12-28 19:09 . 2009-12-28 19:09 -------- d-----w- c:\program files\AVG 2009-12-28 19:09 . 2009-12-29 18:48 -------- d-----w- c:\documents and settings\All Users\Application Data\avg9 2009-12-28 19:09 . 2009-12-28 19:12 -------- d-----w- c:\windows\SxsCaPendDel . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-12-29 16:10 . 2009-05-29 16:22 -------- d-----w- c:\documents and settings\owner\Application Data\Skype 2009-12-29 05:07 . 2009-06-06 19:40 -------- d-----w- c:\documents and settings\owner\Application Data\skypePM 2009-12-28 21:46 . 2009-05-13 14:58 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard 2009-12-28 21:38 . 2009-05-17 18:38 -------- d---a-w- c:\documents and settings\All Users\Application Data\Temp 2009-12-23 18:19 . 2009-05-13 14:37 64920 ----a-w- c:\documents and settings\owner\Local Settings\Application Data\GDIPFONTCACHEV1.DAT 2009-11-21 16:17 . 2009-06-06 18:43 -------- d-----w- c:\program files\BS_Player . ------- Sigcheck ------- [-] 2008-04-14 . D41D8CD98F00B204E9800998ECF8427E . 14848 . . [5.1.2600.5512] . . c:\windows\system32\lsass.exe [-] 2009-02-06 . D41D8CD98F00B204E9800998ECF8427E . 113152 . . [5.1.2600.5755] . . c:\windows\system32\services.exe [7] 2009-02-06 . 020CEAAEDC8EB655B6506B8C70D53BB6 . 110592 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\services.exe [7] 2008-04-14 . 0E776ED5F7CC9F94299E70461B7B8185 . 108544 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB956572$\services.exe [-] 2008-04-14 . D41D8CD98F00B204E9800998ECF8427E . 58880 . . [5.1.2600.5512] . . c:\windows\system32\spoolsv.exe [-] 2008-04-14 . D41D8CD98F00B204E9800998ECF8427E . 512000 . . [5.1.2600.5512] . . c:\windows\system32\winlogon.exe [-] 2008-04-14 . D41D8CD98F00B204E9800998ECF8427E . 17408 . . [5.1.2600.5512] . . c:\windows\system32\svchost.exe [-] 2008-04-14 . D41D8CD98F00B204E9800998ECF8427E . 1036288 . . [6.00.2900.5512] . . c:\windows\explorer.exe . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks] "{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}"= "c:\program files\BS_Player\tbBS_0.dll" [2009-11-21 2166296] [HKEY_CLASSES_ROOT\clsid\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}] [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}] 2009-11-21 16:17 2166296 ----a-w- c:\program files\BS_Player\tbBS_0.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] "{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}"= "c:\program files\BS_Player\tbBS_0.dll" [2009-11-21 2166296] [HKEY_CLASSES_ROOT\clsid\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}] [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser] "{FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5}"= "c:\program files\BS_Player\tbBS_0.dll" [2009-11-21 2166296] [HKEY_CLASSES_ROOT\clsid\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2009-12-16 2002160] "SpybotSD TeaTimer"="e:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NetworxHelper"="c:\program files\Telnet\Helper\Helper.exe" [2009-05-27 975872] "LogitechCommunicationsManager"="c:\program files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe" [2007-02-07 488984] "LogitechQuickCamRibbon"="c:\program files\Logitech\QuickCam10\QuickCam10.exe" [2007-02-07 774168] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-04-30 13750272] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360] c:\documents and settings\All Users\Start Menu\Programs\Startup\ HD ADeck.lnk - c:\program files\VIA\VIAudioi\HDADeck\HDeck.exe [2009-5-13 30003200] Logitech Desktop Messenger.lnk - c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [2009-6-27 67128] [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks] "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] "MJrGddASAtp"= {740DEDEF-DEA7-4745-E053-0C0E839CF9C9} - c:\windows\system32\ghzv.dll [2009-03-21 32768] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon] 2009-09-03 12:21 548352 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.dll [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] 2009-02-27 14:10 35696 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BDRegion] 2008-06-27 13:50 91432 ----a-w- c:\program files\Cyberlink\Shared Files\brs.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update] 2009-05-14 12:43 133104 ----atw- c:\documents and settings\owner\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup] 2004-06-14 14:18 221184 ----a-w- c:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler] 2004-06-14 14:18 81920 ----a-w- c:\program files\Common Files\InstallShield\UpdateService\issch.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS] 2008-04-14 02:42 1695232 ------w- c:\program files\Messenger\msmsgs.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon] 2009-04-30 21:30 13750272 ----a-w- c:\windows\system32\nvcpl.dll [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter] 2009-04-30 21:30 86016 ----a-w- c:\windows\system32\nvmctray.dll [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz] 2009-04-30 21:31 1657376 ----a-w- c:\windows\system32\nwiz.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PDVD8LanguageShortcut] 2007-12-14 08:36 50472 ------w- e:\program files\CyberLink\PowerDVD8\PowerDVD8\Language\Language.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl8] 2008-03-20 17:23 83240 ------w- e:\program files\CyberLink\PowerDVD8\PowerDVD8\PDVD8Serv.exe [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\StrongDC++\\StrongDC.exe"= "c:\\Program Files\\BitComet\\BitComet.exe"= "c:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"= "c:\\WINDOWS\\system32\\dpvsetup.exe"= "c:\\Program Files\\Skype\\Phone\\Skype.exe"= "c:\program files\Telnet\Helper\winvnc.exe"= c:\program files\Telnet\Helper\winvnc.exe:192.168.11.0/255.255.255.0:Enabled:Telnet-BG Helper VNC [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009 "14233:TCP"= 14233:TCP:BitComet 14233 TCP "14233:UDP"= 14233:UDP:BitComet 14233 UDP [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings] "AllowOutboundPacketTooBig"= 1 (0x1) "AllowOutboundDestinationUnreachable"= 1 (0x1) "AllowOutboundSourceQuench"= 1 (0x1) "AllowRedirect"= 1 (0x1) "AllowInboundEchoRequest"= 1 (0x1) "AllowInboundRouterRequest"= 1 (0x1) "AllowOutboundTimeExceeded"= 1 (0x1) "AllowOutboundParameterProblem"= 1 (0x1) "AllowInboundTimestampRequest"= 1 (0x1) "AllowInboundMaskRequest"= 1 (0x1) R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [16/12/2009 16:26 9968] R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [16/12/2009 16:26 74480] R2 {FE4C91E7-22C2-4D0C-9F6B-82F1B7742054};{FE4C91E7-22C2-4D0C-9F6B-82F1B7742054};e:\program files\CyberLink\PowerDVD8\PowerDVD8\000.fcl [27/06/2008 15:50 61424] R3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [16/12/2009 16:27 7408] R3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys [13/05/2009 16:48 845184] S0 ssta;ssta;c:\windows\system32\drivers\ukfl.sys --> c:\windows\system32\drivers\ukfl.sys [?] . ------- Supplementary Scan ------- . uStart Page = hxxp://www.google.bg/ IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 TCP: {7579514D-A978-46F3-98D4-90526BFDB884} = 89.190.192.162,213.240.241.253 Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - c:\program files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll . - - - - ORPHANS REMOVED - - - - MSConfigStartUp-J8RPLTROBQ - c:\docume~1\owner\LOCALS~1\Temp\i.exe MSConfigStartUp-nodenable - c:\program files\eset\nodenable.exe AddRemove-HijackThis - e:\program files\Trend Micro\HijackThis\HijackThis.exe ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-12-29 20:56 Windows 5.1.2600 Service Pack 3 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** [HKEY_LOCAL_MACHINE\System\ControlSet003\Services\{FE4C91E7-22C2-4D0C-9F6B-82F1B7742054}] "ImagePath"="\??\e:\program files\CyberLink\PowerDVD8\PowerDVD8\000.fcl" . --------------------- LOCKED REGISTRY KEYS --------------------- [HKEY_USERS\S-1-5-21-776561741-838170752-1801674531-1003\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{24C5C30C-1341-963B-A6AB-4F4407E3F718}*] @Allowed: (Read) (RestrictedCode) @Allowed: (Read) (RestrictedCode) [HKEY_USERS\S-1-5-21-776561741-838170752-1801674531-1003\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{9761FFE2-E147-2634-946F-34353E2724C4}*] @Allowed: (Read) (RestrictedCode) @Allowed: (Read) (RestrictedCode) . --------------------- DLLs Loaded Under Running Processes --------------------- - - - - - - - > 'winlogon.exe'(532) c:\program files\SUPERAntiSpyware\SASWINLO.dll c:\documents and settings\owner\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL c:\documents and settings\owner\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll - - - - - - - > 'explorer.exe'(5084) c:\windows\system32\WPDShServiceObj.dll c:\windows\system32\PortableDeviceTypes.dll c:\windows\system32\PortableDeviceApi.dll . Completion time: 2009-12-29 20:57:29 ComboFix-quarantined-files.txt 2009-12-29 18:57 Pre-Run: 13 324 857 344 bytes free Post-Run: 14 404 419 584 bytes free WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS [operating systems] c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect Current=3 Default=3 Failed=2 LastKnownGood=4 Sets=1,2,3,4 - - End Of File - - 2FC76F677BB42AE3CE89E6F164E50B12

Nod32 ми откри Win32/Olmarik trojan в операционната памет и ми даде съобщение, че не може да го изчисти. Прочетох следните теми: http://www.kaldata.com/forums/index.php?showtopic=132819 http://www.kaldata.com/forums/index.php?showtopic=136617 Ето логовете: Malwarebytes' Anti-Malware 1.42 Версия на базата от данни: 3450 Windows 5.1.2600 Service Pack 3 Internet Explorer 6.0.2900.5512 29/12/2009 20:07:27 mbam-log-2009-12-29 (20-07-27).txt Тип сканиране: Пълно сканиране (C:\|E:\|) Сканирани обекти: 149885 Изминало време: 12 minute(s), 19 second(s) Заразени процеси в паметта: 0 Заразени модули в паметта: 0 Заразени ключове в регистратурата: 1 Заразени стойности в регистратурата: 0 Заразени информационни обекти в регистратурата: 0 Заразени папки: 0 Заразени файлове: 7 Заразени процеси в паметта: (Не бяха открити заплахи) Заразени модули в паметта: (Не бяха открити заплахи) Заразени ключове в регистратурата: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\gasfkyuwkosram (Rootkit.TDSS) -> Quarantined and deleted successfully. Заразени стойности в регистратурата: (Не бяха открити заплахи) Заразени информационни обекти в регистратурата: (Не бяха открити заплахи) Заразени папки: (Не бяха открити заплахи) Заразени файлове: C:\WINDOWS\system32\gasfkymqevpnws.dll (Rootkit.TDSS) -> Quarantined and deleted successfully. C:\WINDOWS\system32\gasfkysvptamdb.dll (Rootkit.TDSS) -> Quarantined and deleted successfully. C:\WINDOWS\system32\gasfkywhdsticr.dll (Rootkit.TDSS) -> Quarantined and deleted successfully. C:\WINDOWS\system32\gasfkywipxfmqp.dll (Rootkit.TDSS) -> Quarantined and deleted successfully. C:\WINDOWS\system32\drivers\gasfkyltqskdui.sys (Rootkit.TDSS) -> Quarantined and deleted successfully. C:\WINDOWS\system32\gasfkyovsbenbg.dat (Rootkit.TDSS) -> Quarantined and deleted successfully. C:\WINDOWS\system32\gasfkytklyoqol.dat (Rootkit.TDSS) -> Quarantined and deleted successfully. Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 20:17:17, on 29/12/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\AVG\AVG9\avgrsx.exe C:\WINDOWS\system32\spoolsv.exe c:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exe C:\Program Files\AVG\AVG9\avgcsrvx.exe C:\Program Files\AVG\AVG9\avgwdsvc.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\WINDOWS\system32\svchost.exe C:\Program Files\AVG\AVG9\avgnsx.exe C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Telnet\Helper\Helper.exe C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe C:\Program Files\Logitech\QuickCam10\QuickCam10.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe C:\Program Files\Common Files\LogiShrd\LComMgr\LVComSX.exe C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe C:\Program Files\AVG\AVG9\avgchsvx.exe C:\WINDOWS\system32\NOTEPAD.EXE C:\Documents and Settings\owner\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Documents and Settings\owner\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Documents and Settings\owner\Local Settings\Application Data\Google\Chrome\Application\chrome.exe E:\Program Files\Trend Micro\HijackThis\kaldata.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.bg/ R3 - URLSearchHook: BS Player Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files\BS_Player\tbBS_0.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - e:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: BS Player Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files\BS_Player\tbBS_0.dll O3 - Toolbar: BS Player Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files\BS_Player\tbBS_0.dll O4 - HKLM\..\Run: [NetworxHelper] C:\Program Files\Telnet\Helper\Helper.exe O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe" O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam10\QuickCam10.exe" /hide O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [sUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe O4 - HKCU\..\Run: [spybotSD TeaTimer] e:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: HD ADeck.lnk = C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - e:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - e:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O17 - HKLM\System\CCS\Services\Tcpip\..\{7579514D-A978-46F3-98D4-90526BFDB884}: NameServer = 89.190.192.162,213.240.241.253 O17 - HKLM\System\CS2\Services\Tcpip\..\{7579514D-A978-46F3-98D4-90526BFDB884}: NameServer = 77.70.16.1 O17 - HKLM\System\CS3\Services\Tcpip\..\{7579514D-A978-46F3-98D4-90526BFDB884}: NameServer = 89.190.192.162,213.240.241.253 O17 - HKLM\System\CS4\Services\Tcpip\..\{7579514D-A978-46F3-98D4-90526BFDB884}: NameServer = 89.190.192.162,213.240.241.253 O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll O21 - SSODL: MJrGddASAtp - {740DEDEF-DEA7-4745-E053-0C0E839CF9C9} - C:\WINDOWS\system32\ghzv.dll O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exe O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe -- End of file - 7008 bytes