aiuto!! - Sicurezza VIRUS - Aiutamici Forum

Benvenuto Ospite

Aiutamici Forum » FORUM - Istruzioni e Guide » Sicurezza VIRUS » aiuto!!

aiuto!!

Opzioni

Topic Precedente · Topic Sucessivo

emiliorc

Inviato: Wednesday, December 01, 2010 4:11:06 PM

Rank: AiutAmico

Iscritto dal : 12/11/2009
Posts: 68

Ho il PC che mi si impalal spesso mi controllate il log?
grazie

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16.10.11, on 01/12/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Programmi\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\Programmi\Intel\IntelDH\CCU\AlertService.exe
C:\WINDOWS\Explorer.EXE
C:\Programmi\Application Updater\ApplicationUpdater.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Programmi\Intel\Intel Matrix Storage Manager\Iaantmon.exe
C:\Programmi\Java\jre6\bin\jqs.exe
c:\Programmi\File comuni\LightScribe\LSSrvc.exe
C:\Programmi\File comuni\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\WINDOWS\system32\CAPRPCSK.EXE
C:\Programmi\File comuni\Research In Motion\Auto Update\RIMAutoUpdate.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\CAPPSWK.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Programmi\Microsoft ActiveSync\wcescomm.exe
C:\Programmi\File comuni\InstallShield\UpdateService\ISUSPM.exe
C:\PROGRA~1\MI3AA1~1\rapimgr.exe
C:\Programmi\Research In Motion\BlackBerry\DesktopMgr.exe
C:\Programmi\File comuni\Research In Motion\RIMDeviceManager\RIMDeviceManager.exe
C:\Programmi\File comuni\Research In Motion\USB Drivers\BbDevMgr.exe
C:\WINDOWS\system32\svchost.exe
C:\Programmi\TomTom HOME 2\TomTomHOMEService.exe
C:\Programmi\Intel\IntelDH\Intel Media Server\Media Server\bin\ISSM.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Programmi\Intel\IntelDH\Intel Media Server\Shells\MCLServiceATL.exe
C:\Programmi\Intel\IntelDH\Intel(R) Quick Resume Technology Drivers\Elservice.exe
C:\Programmi\internet explorer\iexplore.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\rsvp.exe
C:\Programmi\internet explorer\iexplore.exe
C:\Programmi\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.it/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://it.rd.yahoo.com/customize/ycomp/defaults/su/*http://it.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
R3 - URLSearchHook: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - (no file)
O2 - BHO: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Programmi\Dealio Toolbar\IE\4.1\dealioToolbarIE.dll
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programmi\Java\jre6\bin\ssv.dll
O2 - BHO: Guida per l'accesso a Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programmi\File comuni\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Programmi\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programmi\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programmi\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\WINDOWS\system32\eDStoolbar.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Programmi\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Programmi\Dealio Toolbar\IE\4.1\dealioToolbarIE.dll
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [BlackBerryAutoUpdate] C:\Programmi\File comuni\Research In Motion\Auto Update\RIMAutoUpdate.exe /background
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Programmi\File comuni\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Programmi\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [ISUSPM] "C:\Programmi\File comuni\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKUS\S-1-5-21-1360035731-1467615003-4010307876-1007\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'IUSR_NMPR')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmi\Java\jre6\bin\jp2iexp.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmi\Java\jre6\bin\jp2iexp.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra 'Tools' menuitem: Crea preferito portatile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: Ricerche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{A1BB8008-4690-4816-8963-5E774E50F046}: NameServer = 85.37.17.51 85.38.28.97
O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Programmi\File comuni\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Intel(R) Alert Service (AlertService) - Intel Corporation - C:\Programmi\Intel\IntelDH\CCU\AlertService.exe
O23 - Service: Application Updater - Spigot, Inc. - C:\Programmi\Application Updater\ApplicationUpdater.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Programmi\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Programmi\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Programmi\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Intel(R) Quick Resume technology (ELService) - Intel Corporation - C:\Programmi\Intel\IntelDH\Intel(R) Quick Resume Technology Drivers\Elservice.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Programmi\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programmi\File comuni\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Intel(R) Software Services Manager (ISSM) - Intel Corporation - C:\Programmi\Intel\IntelDH\Intel Media Server\Media Server\bin\ISSM.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programmi\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Programmi\File comuni\LightScribe\LSSrvc.exe
O23 - Service: Server Multimediale Intel(R) Viiv(TM) (M1 Server) - Unknown owner - C:\Programmi\Intel\IntelDH\Intel Media Server\Media Server\bin\mediaserver.exe
O23 - Service: Intel(R) Application Tracker (MCLServiceATL) - Intel Corporation - C:\Programmi\Intel\IntelDH\Intel Media Server\Shells\MCLServiceATL.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SonicWall VPN Client Service (RampartSvc) - SonicWALL, Inc. - C:\Programmi\SonicWALL\SonicWALL Global VPN Client\RampartSvc.exe
O23 - Service: Intel(R) Remoting Service (Remote UI Service) - Intel Corporation - C:\Programmi\Intel\IntelDH\Intel Media Server\Shells\Remote UI Service.exe
O23 - Service: Roxio UPnP Renderer 9 - Sonic Solutions - C:\Programmi\Roxio\Digital Home 9\RoxioUPnPRenderer9.exe
O23 - Service: Roxio Upnp Server 9 - Sonic Solutions - C:\Programmi\Roxio\Digital Home 9\RoxioUpnpService9.exe
O23 - Service: LiveShare P2P Server 9 (RoxLiveShare9) - Sonic Solutions - C:\Programmi\File comuni\Roxio Shared\9.0\SharedCOM\RoxLiveShare9.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Programmi\File comuni\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Programmi\File comuni\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: ServiceLayer - Nokia. - C:\Programmi\Nokia\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: TomTomHOMEService - TomTom - C:\Programmi\TomTom HOME 2\TomTomHOMEService.exe

--
End of file - 9971 bytes

Torna in alto

Sponsor

Inviato: Wednesday, December 01, 2010 4:11:06 PM

Torna in alto

r16

Inviato: Wednesday, December 01, 2010 6:12:24 PM

Rank: AiutAmico

Iscritto dal : 8/7/2007
Posts: 11,016

Disattiva il ripristino configurazione di sistema, e tienilo disattivato, fino alla soluzione del problema http://guide.aiutamici.com/guide?C1=7&C2=68&ID=80121

Avvia hijackthis, metti la spunta alle voci che andrò ad elencarti e con tutte le applicazioni chiuse e disconnesso da Internet,premi su "fix checked":

Commenta:

R3 - URLSearchHook: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - (no file)
O2 - BHO: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Programmi\Dealio Toolbar\IE\4.1\dealioToolbarIE.dll
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O3 - Toolbar: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Programmi\Dealio Toolbar\IE\4.1\dealioToolbarIE.dll
O4 - HKLM\..\Run: [BlackBerryAutoUpdate] C:\Programmi\File comuni\Research In Motion\Auto Update\RIMAutoUpdate.exe /background
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Programmi\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [ISUSPM] "C:\Programmi\File comuni\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O23 - Service: Application Updater - Spigot, Inc. - C:\Programmi\Application Updater\ApplicationUpdater.exe

Trova e cancella i file in rosso: (è una cartella)
C:\Programmi\Application Updater\ApplicationUpdater.exe

Dai una pulita (registro compreso)con CCleaner: http://www.aiutamici.com/software?ID=11223
Nella schermata iniziale di CCleaner, clicca su Opzioni e poi Avanzate, togli il segno di spunta a: Cancella i file in Windows Temp solo se più vecchi di 48 ore. (poi esegui le pulizie)

Poi:
Scarica ed installa MalwareBytes:
clicca qui per il download : http://www.aiutamici.com/software?id=80346
Prima di fare la scansione AGGIORNALO. (è molto importante)
Esegui una scansione completa del sistema.
Elimina gli eventuali file infetti trovati.
Posta il log.

Torna in alto

emiliorc

Inviato: Wednesday, December 01, 2010 7:27:50 PM

Rank: AiutAmico

Iscritto dal : 12/11/2009
Posts: 68

ecco cosa mi esce dopo tutte le operazioni
Malwarebytes' Anti-Malware 1.50
www.malwarebytes.org

Versione database: 5214

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

01/12/2010 19.27.07
mbam-log-2010-12-01 (19-27-07).txt

Tipo di scansione: Scansione completa (C:\|D:\|)
Elementi esaminati: 314677
Tempo trascorso: 49 minuti, 9 secondi

Processi infetti in memoria: 0
Moduli di memoria infetti: 0
Chiavi di registro infette: 0
Valori di registro infetti: 1
Voci infette nei dati di registro: 0
Cartelle infette: 0
File infetti: 2

Processi infetti in memoria:
(Non sono stati rilevati elementi nocivi)

Moduli di memoria infetti:
(Non sono stati rilevati elementi nocivi)

Chiavi di registro infette:
(Non sono stati rilevati elementi nocivi)

Valori di registro infetti:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\PROGRAMMI\FILE COMUNI\SPIGOT\WTXPCOM\COMPONENTS\WIDGITOOLBARFF.DLL (Adware.WidgiToolbar) -> Value: WIDGITOOLBARFF.DLL -> Quarantined and deleted successfully.

Voci infette nei dati di registro:
(Non sono stati rilevati elementi nocivi)

Cartelle infette:
(Non sono stati rilevati elementi nocivi)

File infetti:
c:\programmi\dealio toolbar\widgihelper.exe (Adware.WidgiToolbar) -> Quarantined and deleted successfully.
c:\programmi\file comuni\Spigot\wtxpcom\components\widgitoolbarff.dll (Adware.WidgiToolbar) -> Quarantined and deleted successfully.

Torna in alto

r16

Inviato: Wednesday, December 01, 2010 9:24:35 PM

Rank: AiutAmico

Iscritto dal : 8/7/2007
Posts: 11,016

Hai eliminato la voce 023 di HJT?
O23 - Service: Application Updater - Spigot, Inc. - C:\Programmi\Application Updater\ApplicationUpdater.exe

Hai eliminato la cartella segnata in rosso che ti ho indicato?
C:\Programmi\Application Updater\ApplicationUpdater.exe

I file che Malwarebytes ti ha eliminato, sono collegati a quel servizio, e a quella cartella.

Scarica Combofix (usa Internet Explorer)

http://download.bleepingcomputer.com/sUBs/ComboFix.exe

Salvalo sul desktop. (è obligatorio)

Importante: Disabilita il tuo antivirus e chiudi TUTTI i programmi aperti,(Firewall compreso) e dopo aver scaricato COMBOFIX, chiudi la connessione.

Doppio click su combofix.exe (se usi Vista: tasto destro su Combofix.exe e clicca su: "Esegui come Amministratore" )

E' probabile che ti siano inviati messaggi dall'antivirus,(o dallo stesso Combofix) tu ignorali.

Se ti verrà chiesto se vuoi Installare LA CONSOLE DI RIPRISTINO DI EMERGENZA, clicca NO.

Durante l'operazione di scansione è importante non usare il PC (neanche il mouse) e attendere pazientemente la fine delle operazioni.
Al termine, verrà creato un file log sul Desktop, chiamato C:\ComboFix.txt.
Postalo qui.

Torna in alto

emiliorc

Inviato: Thursday, December 02, 2010 7:08:37 PM

Rank: AiutAmico

Iscritto dal : 12/11/2009
Posts: 68

ciao ecco cosa e' uscito dopo combofix
grazie
Emilio

ComboFix 10-12-01.01 - Administrator 02/12/2010 18.52.44.5.2 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.39.1040.18.1006.485 [GMT 1:00]
Eseguito da: c:\documents and settings\Emilio\Desktop\ComboFix.exe
AV: avast! Antivirus *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
.

((((((((((((((((((((((((((((((((((((( Altre eliminazioni )))))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\Emilio\Dati applicazioni\ACD Systems\ACDSee\ImageDB.ddf
c:\documents and settings\Emilio\Dati applicazioni\Dealio
c:\documents and settings\Emilio\Dati applicazioni\Dealio\res\widgets.xml
c:\documents and settings\Emilio\Dati applicazioni\Dealio\temp\http___www_dealio_com_rss_coupons-deals_dotd_.xml
c:\documents and settings\Emilio\Dati applicazioni\Dealio\temp\http___www_dealio_com_rss_coupons-deals_top_7days__cnid=[CHANNEL_ID]&ccv=[CODE_VER]&ISN=[ISN].xml
c:\documents and settings\Rosanna\Dati applicazioni\Dealio
c:\documents and settings\Rosanna\Dati applicazioni\Dealio\res\widgets.xml
c:\documents and settings\Rosanna\Dati applicazioni\Dealio\temp\http___www_dealio_com_rss_coupons-deals_dotd_.xml
c:\programmi\Dealio Toolbar
c:\programmi\Dealio Toolbar\FF\chrome.manifest
c:\programmi\Dealio Toolbar\FF\chrome\content\chevron.js
c:\programmi\Dealio Toolbar\FF\chrome\content\chevron.xul
c:\programmi\Dealio Toolbar\FF\chrome\content\login.js
c:\programmi\Dealio Toolbar\FF\chrome\content\login.xul
c:\programmi\Dealio Toolbar\FF\chrome\content\parser.js
c:\programmi\Dealio Toolbar\FF\chrome\content\RssTickerWidget.js
c:\programmi\Dealio Toolbar\FF\chrome\content\searchbox.js
c:\programmi\Dealio Toolbar\FF\chrome\content\searchbox.xul
c:\programmi\Dealio Toolbar\FF\chrome\content\utils.js
c:\programmi\Dealio Toolbar\FF\chrome\content\widgichevron.js
c:\programmi\Dealio Toolbar\FF\chrome\content\widgicomm.js
c:\programmi\Dealio Toolbar\FF\chrome\content\widgihandling.js
c:\programmi\Dealio Toolbar\FF\chrome\content\widgilisteners.js
c:\programmi\Dealio Toolbar\FF\chrome\content\widgitoolbarplugin.js
c:\programmi\Dealio Toolbar\FF\chrome\content\widgitoolbarplugin.xul
c:\programmi\Dealio Toolbar\FF\chrome\content\widgiui.js
c:\programmi\Dealio Toolbar\FF\chrome\locale\EN-US\searchbox.dtd
c:\programmi\Dealio Toolbar\FF\chrome\locale\EN-US\widgitoolbarplugin.dtd
c:\programmi\Dealio Toolbar\FF\chrome\locale\EN-US\widgitoolbarplugin.properties
c:\programmi\Dealio Toolbar\FF\chrome\locale\EN-US\yahoo-search.gif
c:\programmi\Dealio Toolbar\FF\chrome\skin\amazon.gif
c:\programmi\Dealio Toolbar\FF\chrome\skin\apple.gif
c:\programmi\Dealio Toolbar\FF\chrome\skin\barnes.gif
c:\programmi\Dealio Toolbar\FF\chrome\skin\bestbuy.gif
c:\programmi\Dealio Toolbar\FF\chrome\skin\chevron.gif
c:\programmi\Dealio Toolbar\FF\chrome\skin\dealio_logo.gif
c:\programmi\Dealio Toolbar\FF\chrome\skin\dealio_logo_hover.gif
c:\programmi\Dealio Toolbar\FF\chrome\skin\ebay.gif
c:\programmi\Dealio Toolbar\FF\chrome\skin\icon_settings.gif
c:\programmi\Dealio Toolbar\FF\chrome\skin\macys.gif
c:\programmi\Dealio Toolbar\FF\chrome\skin\newegg.gif
c:\programmi\Dealio Toolbar\FF\chrome\skin\overstock.gif
c:\programmi\Dealio Toolbar\FF\chrome\skin\search-button-hover.gif
c:\programmi\Dealio Toolbar\FF\chrome\skin\search-button.gif
c:\programmi\Dealio Toolbar\FF\chrome\skin\search-chevron-hover.gif
c:\programmi\Dealio Toolbar\FF\chrome\skin\search-chevron.gif
c:\programmi\Dealio Toolbar\FF\chrome\skin\search_amazon.gif
c:\programmi\Dealio Toolbar\FF\chrome\skin\search_dealio.gif
c:\programmi\Dealio Toolbar\FF\chrome\skin\search_ebay.gif
c:\programmi\Dealio Toolbar\FF\chrome\skin\search_yahoo.gif
c:\programmi\Dealio Toolbar\FF\chrome\skin\searchbox.css
c:\programmi\Dealio Toolbar\FF\chrome\skin\splitter.gif
c:\programmi\Dealio Toolbar\FF\chrome\skin\target.gif
c:\programmi\Dealio Toolbar\FF\chrome\skin\walmart.gif
c:\programmi\Dealio Toolbar\FF\chrome\skin\widgitoolbarplugin.css
c:\programmi\Dealio Toolbar\FF\install.rdf
c:\programmi\Dealio Toolbar\IE\4.1\config.ini
c:\programmi\Dealio Toolbar\Res\amazon.gif
c:\programmi\Dealio Toolbar\Res\apple.gif
c:\programmi\Dealio Toolbar\Res\barnes.gif
c:\programmi\Dealio Toolbar\Res\bestbuy.gif
c:\programmi\Dealio Toolbar\Res\dealio_logo.gif
c:\programmi\Dealio Toolbar\Res\dealio_logo_hover.gif
c:\programmi\Dealio Toolbar\Res\ebay.gif
c:\programmi\Dealio Toolbar\Res\icon_settings.gif
c:\programmi\Dealio Toolbar\Res\macys.gif
c:\programmi\Dealio Toolbar\Res\newegg.gif
c:\programmi\Dealio Toolbar\Res\overstock.gif
c:\programmi\Dealio Toolbar\Res\search-button-hover.gif
c:\programmi\Dealio Toolbar\Res\search-button.gif
c:\programmi\Dealio Toolbar\Res\search-chevron-hover.gif
c:\programmi\Dealio Toolbar\Res\search-chevron.gif
c:\programmi\Dealio Toolbar\Res\search_amazon.gif
c:\programmi\Dealio Toolbar\Res\search_dealio.gif
c:\programmi\Dealio Toolbar\Res\search_ebay.gif
c:\programmi\Dealio Toolbar\Res\search_yahoo.gif
c:\programmi\Dealio Toolbar\Res\target.gif
c:\programmi\Dealio Toolbar\Res\walmart.gif
c:\programmi\Dealio Toolbar\Res\widgets.xml
c:\programmi\Search Settings
c:\windows\daemon.dll
c:\windows\XSxS

.
((((((((((((((((((((((((( Files Creati Da 2010-11-02 al 2010-12-02 )))))))))))))))))))))))))))))))))))
.

2010-12-01 15:02 . 2010-12-01 15:02 -------- d-----w- c:\documents and settings\Emilio\Dati applicazioni\InstallShield
2010-12-01 15:02 . 2010-12-01 15:02 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\InstallShield
2010-12-01 15:02 . 2010-12-01 15:02 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Sonic
2010-12-01 15:00 . 2010-12-01 15:02 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Roxio
2010-12-01 15:00 . 2010-12-01 15:01 -------- d-----w- c:\programmi\Roxio
2010-12-01 15:00 . 2010-12-01 15:00 -------- d-----w- c:\programmi\File comuni\Sonic Shared
2010-11-30 19:20 . 2010-12-01 15:14 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Research In Motion
2010-11-30 19:16 . 2010-12-01 15:16 256 ----a-w- c:\windows\system32\pool.bin
2010-11-30 19:16 . 2010-12-01 15:14 -------- d-----w- c:\documents and settings\Emilio\Dati applicazioni\Research In Motion
2010-11-30 18:45 . 2009-01-09 16:18 27136 ----a-r- c:\windows\system32\drivers\RimSerial.sys
2010-11-30 18:44 . 2010-12-01 15:01 -------- d-----w- c:\programmi\File comuni\Roxio Shared
2010-11-30 18:44 . 2010-11-30 18:44 -------- d-----w- c:\programmi\File comuni\Research In Motion
2010-11-30 18:44 . 2010-12-01 15:14 -------- d-----w- c:\programmi\Research In Motion
2010-11-24 05:43 . 2010-11-24 05:43 -------- d-----w- c:\programmi\File comuni\Spigot
2010-11-12 13:41 . 2010-11-12 13:41 -------- d-----w- c:\programmi\School

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-11-29 16:42 . 2009-12-12 22:34 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-11-29 16:42 . 2009-12-12 22:34 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-10-01 13:20 . 2010-10-08 12:16 307200 ----a-w- c:\windows\system32\TubeFinder.exe
2010-09-07 15:12 . 2010-08-19 17:27 38848 ----a-w- c:\windows\avastSS.scr
2010-09-07 15:11 . 2010-08-19 17:27 167592 ----a-w- c:\windows\system32\aswBoot.exe
2010-09-07 14:52 . 2010-08-19 17:28 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-09-07 14:52 . 2010-08-19 17:28 165584 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-09-07 14:47 . 2010-08-19 17:28 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-09-07 14:47 . 2010-08-19 17:28 100176 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2010-09-07 14:47 . 2010-08-19 17:28 94544 ----a-w- c:\windows\system32\drivers\aswmon.sys
2010-09-07 14:47 . 2010-08-19 17:28 17744 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-09-07 14:46 . 2010-08-19 17:28 28880 ----a-w- c:\windows\system32\drivers\aavmker4.sys
.

((((((((((((((((((((((((((((( SnapShot@2009-12-13_14.57.27 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-07-11 22:02 . 2009-07-11 22:02 51008 c:\windows\WinSxS\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_f0ccd4aa\vcomp90.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 59728 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90rus.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 42832 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90kor.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 43344 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90jpn.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 61264 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90ita.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 62800 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90fra.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 61760 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90esp.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 61776 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90esn.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 53568 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90enu.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 63296 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90deu.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 36688 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90cht.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 35648 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90chs.dll
+ 2009-07-11 22:05 . 2009-07-11 22:05 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfcm90u.dll
+ 2009-07-11 22:05 . 2009-07-11 22:05 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfcm90.dll
+ 2009-07-11 18:54 . 2009-07-11 18:54 65536 c:\windows\WinSxS\x86_Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e79c4723\vcomp.dll
+ 2009-07-11 18:32 . 2009-07-11 18:32 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80KOR.dll
+ 2009-07-11 18:32 . 2009-07-11 18:32 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80JPN.dll
+ 2009-07-11 18:32 . 2009-07-11 18:32 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ITA.dll
+ 2009-07-11 18:32 . 2009-07-11 18:32 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80FRA.dll
+ 2009-07-11 18:32 . 2009-07-11 18:32 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ESP.dll
+ 2009-07-11 18:32 . 2009-07-11 18:32 57344 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ENU.dll
+ 2009-07-11 18:32 . 2009-07-11 18:32 65536 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80DEU.dll
+ 2009-07-11 18:32 . 2009-07-11 18:32 45056 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80CHT.dll
+ 2009-07-11 18:32 . 2009-07-11 18:32 40960 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80CHS.dll
+ 2009-07-11 23:07 . 2009-07-11 23:07 57856 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfcm80u.dll
+ 2009-07-11 23:19 . 2009-07-11 23:19 69632 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfcm80.dll
+ 2009-12-17 07:40 . 1999-11-10 10:05 86016 c:\windows\unvise32qt.exe
+ 2010-12-02 15:23 . 2010-12-02 15:23 16384 c:\windows\temp\Perflib_Perfdata_228.dat
+ 2007-03-26 00:00 . 2007-03-26 00:00 88824 c:\windows\system32\vxblock.dll
+ 2009-07-26 15:44 . 2009-07-26 15:44 48448 c:\windows\system32\sirenacm.dll
+ 2010-11-30 19:21 . 2009-01-09 16:18 27136 c:\windows\system32\ReinstallBackups\0020\DriverFiles\RimSerial.sys
+ 2010-11-30 18:45 . 2009-01-09 16:18 27136 c:\windows\system32\ReinstallBackups\0013\DriverFiles\RimSerial.sys
+ 2007-05-01 15:48 . 2007-05-01 15:48 64760 c:\windows\system32\pxinsa64.exe
+ 2007-05-01 15:48 . 2007-05-01 15:48 66296 c:\windows\system32\pxcpya64.exe
+ 2006-09-18 22:34 . 2010-11-09 19:49 85626 c:\windows\system32\perfc010.dat
+ 2006-09-18 22:34 . 2010-11-09 19:49 72576 c:\windows\system32\perfc009.dat
+ 2009-11-05 20:17 . 2009-11-05 20:17 11600 c:\windows\system32\mui\0409\mscorees.dll
+ 2004-09-07 20:00 . 2009-11-27 17:12 17920 c:\windows\system32\msyuv.dll
+ 2010-11-01 11:43 . 2010-09-03 12:33 24576 c:\windows\system32\msxml3a.dll
+ 2004-09-07 20:00 . 2009-11-27 16:07 28672 c:\windows\system32\msvidc32.dll
- 2004-09-07 20:00 . 2008-04-14 02:13 11264 c:\windows\system32\msrle32.dll
+ 2004-09-07 20:00 . 2009-11-27 16:07 11264 c:\windows\system32\msrle32.dll
- 2006-11-07 20:03 . 2009-10-29 07:40 55296 c:\windows\system32\msfeedsbs.dll
+ 2006-11-07 20:03 . 2010-05-06 10:32 55296 c:\windows\system32\msfeedsbs.dll
+ 2006-05-10 05:25 . 2010-05-06 10:32 25600 c:\windows\system32\jsproxy.dll
- 2006-05-10 05:25 . 2009-10-29 07:40 25600 c:\windows\system32\jsproxy.dll
+ 2004-09-07 20:00 . 2009-11-27 16:07 48128 c:\windows\system32\iyuv_32.dll
+ 2007-05-01 15:48 . 2007-05-01 15:48 68344 c:\windows\system32\drvins64.exe
+ 2008-05-20 17:33 . 2008-05-20 17:33 22784 c:\windows\system32\drivers\RimUsb.sys
+ 2007-05-01 02:00 . 2007-05-01 02:00 43528 c:\windows\system32\drivers\pxhelp20.sys
- 2004-09-07 20:00 . 2008-04-13 18:40 96512 c:\windows\system32\drivers\atapi.sys
+ 2009-12-13 20:19 . 2008-04-13 18:40 96512 c:\windows\system32\drivers\atapi.sys
- 2009-06-27 13:10 . 2009-10-29 07:40 12800 c:\windows\system32\dllcache\xpshims.dll
+ 2009-06-27 13:10 . 2010-05-06 10:32 12800 c:\windows\system32\dllcache\xpshims.dll
+ 2009-11-27 17:12 . 2009-11-27 17:12 17920 c:\windows\system32\dllcache\msyuv.dll
+ 2004-09-07 20:00 . 2009-11-27 16:07 28672 c:\windows\system32\dllcache\msvidc32.dll
+ 2009-11-27 16:07 . 2009-11-27 16:07 11264 c:\windows\system32\dllcache\msrle32.dll
- 2007-05-11 12:43 . 2009-10-29 07:40 55296 c:\windows\system32\dllcache\msfeedsbs.dll
+ 2007-05-11 12:43 . 2010-05-06 10:32 55296 c:\windows\system32\dllcache\msfeedsbs.dll
- 2006-05-10 05:25 . 2009-10-29 07:40 25600 c:\windows\system32\dllcache\jsproxy.dll
+ 2006-05-10 05:25 . 2010-05-06 10:32 25600 c:\windows\system32\dllcache\jsproxy.dll
+ 2009-11-27 16:07 . 2009-11-27 16:07 48128 c:\windows\system32\dllcache\iyuv_32.dll
+ 2009-12-14 07:08 . 2009-12-14 07:08 33280 c:\windows\system32\dllcache\csrsrv.dll
+ 2009-06-10 14:13 . 2009-11-27 16:07 85504 c:\windows\system32\dllcache\avifil32.dll
- 2009-06-10 14:13 . 2009-06-10 14:13 85504 c:\windows\system32\dllcache\avifil32.dll
+ 2010-03-05 14:38 . 2010-03-05 14:38 65536 c:\windows\system32\dllcache\asycfilt.dll
+ 2010-11-01 16:10 . 2005-08-23 02:03 66048 c:\windows\system32\cygz.dll
+ 2010-11-01 16:10 . 2005-11-20 02:13 31744 c:\windows\system32\cygintl-3.dll
+ 2004-09-07 20:00 . 2009-12-14 07:08 33280 c:\windows\system32\csrsrv.dll
- 2004-09-07 20:00 . 2009-06-10 14:13 85504 c:\windows\system32\avifil32.dll
+ 2004-09-07 20:00 . 2009-11-27 16:07 85504 c:\windows\system32\avifil32.dll
+ 2004-09-07 20:00 . 2010-03-05 14:38 65536 c:\windows\system32\asycfilt.dll
+ 2010-04-07 21:48 . 2010-04-07 21:48 32768 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
- 2008-07-29 18:16 . 2008-07-29 18:16 32768 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
+ 2010-03-23 03:31 . 2010-03-23 03:31 30544 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
+ 2010-04-01 09:42 . 2010-04-01 09:42 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll
- 2008-05-27 23:49 . 2008-05-27 23:49 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
+ 2010-03-31 12:51 . 2010-03-31 12:51 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
- 2008-05-27 23:49 . 2008-05-27 23:49 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
+ 2010-03-31 12:51 . 2010-03-31 12:51 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
+ 2010-03-31 12:51 . 2010-03-31 12:51 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
- 2008-05-27 23:49 . 2008-05-27 23:49 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
- 2008-05-28 00:30 . 2008-05-28 00:30 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
+ 2010-03-31 13:32 . 2010-03-31 13:32 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
+ 2010-03-31 13:32 . 2010-03-31 13:32 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll
- 2003-02-20 17:19 . 2003-02-20 17:19 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll
+ 2004-07-19 16:54 . 2010-02-09 16:22 81920 c:\windows\Microsoft.NET\Framework\v1.0.3705\System.Security.dll
+ 2010-10-25 18:36 . 2010-10-25 18:36 38400 c:\windows\Installer\2ef5ee9.msi
+ 2010-01-15 13:35 . 2010-01-15 13:35 27136 c:\windows\Installer\16c1ebc.msi
+ 2010-01-15 13:34 . 2010-01-15 13:34 83456 c:\windows\Installer\16c1eaa.msi
+ 2010-01-15 13:34 . 2010-01-15 13:34 58880 c:\windows\Installer\16c1ea4.msi
+ 2010-01-15 13:35 . 2010-01-15 13:35 80395 c:\windows\Installer\{E0ABA486-A39B-4B96-BD80-757396151079}\MsblIco.Exe
+ 2010-11-24 05:43 . 2010-11-24 05:43 53248 c:\windows\Installer\{C1F83B10-0BEB-475f-BBA2-E235B02B9826}\ARPPRODUCTICON.exe
+ 2010-12-01 15:02 . 2010-12-01 15:02 25214 c:\windows\Installer\{B98BE95C-E76F-4246-B8E6-BEB8EE791D06}\NewShortcut4_8E832933A07340209FB8DBADC480B69B.exe
+ 2010-12-01 15:02 . 2010-12-01 15:02 25214 c:\windows\Installer\{B98BE95C-E76F-4246-B8E6-BEB8EE791D06}\NewShortcut33_8E832933A07340209FB8DBADC480B69B.exe
+ 2010-12-01 15:02 . 2010-12-01 15:02 25214 c:\windows\Installer\{B98BE95C-E76F-4246-B8E6-BEB8EE791D06}\NewShortcut24_8E832933A07340209FB8DBADC480B69B_1.exe
+ 2010-12-01 15:02 . 2010-12-01 15:02 25214 c:\windows\Installer\{B98BE95C-E76F-4246-B8E6-BEB8EE791D06}\MediaManager8.exe_8E832933A07340209FB8DBADC480B69B.exe
+ 2010-12-01 15:02 . 2010-12-01 15:02 25214 c:\windows\Installer\{B98BE95C-E76F-4246-B8E6-BEB8EE791D06}\ARPPRODUCTICON.exe
+ 2007-01-24 15:45 . 2010-06-11 01:16 57344 c:\windows\Installer\{90A10410-6000-11D3-8CFE-0150048383C9}\joticon.exe
- 2007-01-24 15:45 . 2009-03-17 02:01 57344 c:\windows\Installer\{90A10410-6000-11D3-8CFE-0150048383C9}\joticon.exe
+ 2007-01-24 15:42 . 2010-06-11 01:17 12288 c:\windows\Installer\{90510410-6000-11D3-8CFE-0150048383C9}\cagicon.exe
- 2007-01-24 15:42 . 2009-03-17 02:04 12288 c:\windows\Installer\{90510410-6000-11D3-8CFE-0150048383C9}\cagicon.exe
- 2007-01-24 15:40 . 2009-12-10 20:38 27136 c:\windows\Installer\{90170410-6000-11D3-8CFE-0150048383C9}\oisicon.exe
+ 2007-01-24 15:40 . 2010-06-11 01:16 27136 c:\windows\Installer\{90170410-6000-11D3-8CFE-0150048383C9}\oisicon.exe
- 2007-01-24 15:40 . 2009-12-10 20:38 12288 c:\windows\Installer\{90170410-6000-11D3-8CFE-0150048383C9}\cagicon.exe
+ 2007-01-24 15:40 . 2010-06-11 01:16 12288 c:\windows\Installer\{90170410-6000-11D3-8CFE-0150048383C9}\cagicon.exe
+ 2010-08-30 12:25 . 2010-08-30 12:25 34632 c:\windows\Installer\{90120000-0020-0410-0000-0000000FF1CE}\O12ConvIcon.exe
- 2007-01-24 15:35 . 2009-12-10 20:39 23040 c:\windows\Installer\{90110410-6000-11D3-8CFE-0150048383C9}\unbndico.exe
+ 2007-01-24 15:35 . 2010-06-11 01:17 23040 c:\windows\Installer\{90110410-6000-11D3-8CFE-0150048383C9}\unbndico.exe
+ 2007-01-24 15:35 . 2010-06-11 01:17 61440 c:\windows\Installer\{90110410-6000-11D3-8CFE-0150048383C9}\pubs.exe
- 2007-01-24 15:35 . 2009-12-10 20:39 61440 c:\windows\Installer\{90110410-6000-11D3-8CFE-0150048383C9}\pubs.exe
- 2007-01-24 15:35 . 2009-12-10 20:39 27136 c:\windows\Installer\{90110410-6000-11D3-8CFE-0150048383C9}\oisicon.exe
+ 2007-01-24 15:35 . 2010-06-11 01:17 27136 c:\windows\Installer\{90110410-6000-11D3-8CFE-0150048383C9}\oisicon.exe
+ 2007-01-24 15:35 . 2010-06-11 01:17 11264 c:\windows\Installer\{90110410-6000-11D3-8CFE-0150048383C9}\mspicons.exe
- 2007-01-24 15:35 . 2009-12-10 20:39 11264 c:\windows\Installer\{90110410-6000-11D3-8CFE-0150048383C9}\mspicons.exe
- 2007-01-24 15:35 . 2009-12-10 20:39 86016 c:\windows\Installer\{90110410-6000-11D3-8CFE-0150048383C9}\inficon.exe
+ 2007-01-24 15:35 . 2010-06-11 01:17 86016 c:\windows\Installer\{90110410-6000-11D3-8CFE-0150048383C9}\inficon.exe
- 2007-01-24 15:35 . 2009-12-10 20:39 12288 c:\windows\Installer\{90110410-6000-11D3-8CFE-0150048383C9}\cagicon.exe
+ 2007-01-24 15:35 . 2010-06-11 01:17 12288 c:\windows\Installer\{90110410-6000-11D3-8CFE-0150048383C9}\cagicon.exe
+ 2010-10-25 18:36 . 2010-10-25 18:36 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
+ 2010-12-01 15:02 . 2010-12-01 15:02 38400 c:\windows\Installer\{7A9DC8F6-2466-4E04-BF51-BE499C5D02BD}\RoxioCentral.exe
+ 2010-11-30 18:45 . 2010-11-30 19:21 49152 c:\windows\Installer\{5630F663-28CC-4D4E-8541-BD9B0C0D36E7}\RedirectorEXE2_770DFD1204C24F4DA163D64FACCB5CBD.exe
+ 2010-11-30 18:45 . 2010-11-30 19:20 49152 c:\windows\Installer\{5630F663-28CC-4D4E-8541-BD9B0C0D36E7}\RedirectorEXE1_770DFD1204C24F4DA163D64FACCB5CBD.exe
+ 2010-11-30 18:45 . 2010-11-30 19:20 49152 c:\windows\Installer\{5630F663-28CC-4D4E-8541-BD9B0C0D36E7}\RedirectorEXE_770DFD1204C24F4DA163D64FACCB5CBD.exe
+ 2010-11-30 18:45 . 2010-11-30 19:21 69632 c:\windows\Installer\{5630F663-28CC-4D4E-8541-BD9B0C0D36E7}\NewShortcut600_C6ABA3677F944B9FBB00F060701B0B5A.exe
+ 2010-11-30 18:45 . 2010-11-30 19:21 69632 c:\windows\Installer\{5630F663-28CC-4D4E-8541-BD9B0C0D36E7}\NewShortcut60_C6ABA3677F944B9FBB00F060701B0B5A.exe
+ 2010-11-30 18:45 . 2010-11-30 19:21 69632 c:\windows\Installer\{5630F663-28CC-4D4E-8541-BD9B0C0D36E7}\NewShortcut6_C6ABA3677F944B9FBB00F060701B0B5A.exe
+ 2010-11-30 18:45 . 2010-11-30 19:20 69632 c:\windows\Installer\{5630F663-28CC-4D4E-8541-BD9B0C0D36E7}\NewShortcut5_C6ABA3677F944B9FBB00F060701B0B5A.exe
+ 2010-11-30 18:45 . 2010-11-30 19:20 69632 c:\windows\Installer\{5630F663-28CC-4D4E-8541-BD9B0C0D36E7}\NewShortcut4_C6ABA3677F944B9FBB00F060701B0B5A.exe
+ 2010-11-30 18:45 . 2010-11-30 19:20 69632 c:\windows\Installer\{5630F663-28CC-4D4E-8541-BD9B0C0D36E7}\NewShortcut3_C6ABA3677F944B9FBB00F060701B0B5A.exe
+ 2010-11-30 18:45 . 2010-11-30 19:20 69632 c:\windows\Installer\{5630F663-28CC-4D4E-8541-BD9B0C0D36E7}\NewShortcut12_C6ABA3677F944B9FBB00F060701B0B5A.exe
+ 2010-11-30 18:45 . 2010-11-30 19:20 69632 c:\windows\Installer\{5630F663-28CC-4D4E-8541-BD9B0C0D36E7}\DesktopMgr.exe
+ 2010-01-15 13:35 . 2010-01-15 13:35 62304 c:\windows\Installer\{49C77D21-F91F-4296-B7DF-19C5FF51AF4D}\IconWlc.exe
+ 2010-04-06 07:46 . 2010-04-06 07:46 22486 c:\windows\Installer\{15382D89-6EF6-4D21-9484-B500F2B10E46}\NewShortcut1_3278016E37314C2092483418FC03D7EE.exe
+ 2010-04-06 07:46 . 2010-04-06 07:46 22486 c:\windows\Installer\{15382D89-6EF6-4D21-9484-B500F2B10E46}\ARPPRODUCTICON.exe
+ 2007-06-20 04:33 . 2007-06-20 04:33 86424 c:\windows\Installer\$PatchCache$\Managed\0140150900063D11C8EF10054038389C\11.0.8173\DBSHARE.DLL
+ 2007-03-22 18:13 . 2007-03-22 18:13 23904 c:\windows\Installer\$PatchCache$\Managed\0140110900063D11C8EF10054038389C\11.0.8173\IPDMCTRL.DLL
+ 2010-06-11 01:10 . 2009-12-21 19:06 12800 c:\windows\ie8updates\KB982381-IE8\xpshims.dll
+ 2010-06-11 01:10 . 2009-12-21 19:06 55296 c:\windows\ie8updates\KB982381-IE8\msfeedsbs.dll
+ 2010-06-11 01:10 . 2009-12-21 19:06 25600 c:\windows\ie8updates\KB982381-IE8\jsproxy.dll
+ 2010-01-22 13:32 . 2009-10-29 07:40 12800 c:\windows\ie8updates\KB978207-IE8\xpshims.dll
+ 2010-01-22 13:32 . 2009-10-29 07:40 55296 c:\windows\ie8updates\KB978207-IE8\msfeedsbs.dll
+ 2010-01-22 13:32 . 2009-10-29 07:40 25600 c:\windows\ie8updates\KB978207-IE8\jsproxy.dll
+ 2009-11-27 17:12 . 2009-11-27 17:12 17920 c:\windows\Driver Cache\i386\msyuv.dll
+ 2009-11-27 16:07 . 2009-11-27 16:07 48128 c:\windows\Driver Cache\i386\iyuv_32.dll
+ 2006-06-30 11:00 . 2006-06-30 11:00 29616 c:\windows\Downloaded Program Files\dwusplay.dll
+ 2010-06-11 01:13 . 2010-06-11 01:13 90112 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_337dd3a8\System.Drawing.Design.dll
+ 2010-06-11 01:13 . 2010-06-11 01:13 61440 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_08acb2d9\CustomMarshalers.dll
+ 2010-06-11 01:16 . 2010-06-11 01:16 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\1c1629f536fa9874ef08d09fb19ab0f0\System.Windows.Presentation.ni.dll
+ 2010-06-11 01:15 . 2010-06-11 01:15 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\1464c662c302ea6372a885161b983732\System.Web.DynamicData.Design.ni.dll
+ 2010-06-11 01:14 . 2010-06-11 01:14 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\5d535ecadf77ac2d9278a1661beb2855\System.ComponentModel.DataAnnotations.ni.dll
+ 2010-06-11 01:08 . 2010-06-11 01:08 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\e67992626a30603458b0df22841c2423\PresentationFontCache.ni.exe
+ 2010-06-11 01:07 . 2010-06-11 01:07 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\6be27d744e6e2bfc4b0e25bd2998ef7c\PresentationCFFRasterizer.ni.dll
+ 2010-06-11 01:15 . 2010-06-11 01:15 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\4a52287444c36c89310856b38ff52fe0\Microsoft.Vsa.ni.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2010-06-11 01:06 . 2010-06-11 01:06 32768 c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
- 2009-03-17 06:14 . 2009-03-17 06:14 32768 c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2010-06-11 01:12 . 2010-06-11 01:12 81920 c:\windows\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll
+ 2010-06-11 01:14 . 2010-06-11 01:14 81920 c:\windows\assembly\GAC\System.Security\1.0.3300.0__b03f5f7f11d50a3a\System.Security.dll
+ 2010-06-11 01:14 . 2004-07-19 16:54 77824 c:\windows\$NtUninstallKB979904$\system.security.dll
+ 2010-06-11 01:07 . 2008-04-14 02:13 65024 c:\windows\$NtUninstallKB979482$\asycfilt.dll
+ 2010-02-10 17:44 . 2008-04-14 02:13 32256 c:\windows\$NtUninstallKB978037$\csrsrv.dll
+ 2010-02-10 17:44 . 2004-09-07 20:00 25600 c:\windows\$NtUninstallKB977914$\msvidc32.dll
+ 2010-02-10 17:44 . 2008-04-14 02:13 11264 c:\windows\$NtUninstallKB977914$\msrle32.dll
+ 2010-02-10 17:44 . 2008-04-14 02:13 47616 c:\windows\$NtUninstallKB977914$\iyuv_32.dll
+ 2010-02-10 17:44 . 2009-06-10 14:13 85504 c:\windows\$NtUninstallKB977914$\avifil32.dll
+ 2010-02-10 17:44 . 2008-04-14 02:13 16896 c:\windows\$NtUninstallKB975560$\msyuv.dll
+ 2010-06-11 01:10 . 2008-07-08 13:06 26488 c:\windows\$hf_mig$\KB982381-IE8\update\spcustom.dll
+ 2010-06-11 01:10 . 2008-07-08 13:06 18808 c:\windows\$hf_mig$\KB982381-IE8\spmsg.dll
+ 2010-06-10 10:54 . 2010-05-06 10:27 12800 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\xpshims.dll
+ 2010-06-10 10:54 . 2010-05-06 10:27 55296 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\msfeedsbs.dll
+ 2010-06-10 10:54 . 2010-05-06 10:27 25600 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\jsproxy.dll
+ 2010-06-11 01:17 . 2009-05-26 11:41 26488 c:\windows\$hf_mig$\KB980218\update\spcustom.dll
+ 2010-06-11 01:17 . 2009-05-26 11:41 18808 c:\windows\$hf_mig$\KB980218\spmsg.dll
+ 2010-06-11 01:13 . 2008-07-08 13:06 26488 c:\windows\$hf_mig$\KB980195\update\spcustom.dll
+ 2010-06-11 01:13 . 2008-07-08 13:06 18808 c:\windows\$hf_mig$\KB980195\spmsg.dll
+ 2010-06-11 01:10 . 2009-05-26 09:01 26488 c:\windows\$hf_mig$\KB979559\update\spcustom.dll
+ 2010-06-11 01:10 . 2009-05-26 09:01 18808 c:\windows\$hf_mig$\KB979559\spmsg.dll
+ 2010-06-11 01:07 . 2009-05-26 11:41 26488 c:\windows\$hf_mig$\KB979482\update\spcustom.dll
+ 2010-06-11 01:07 . 2009-05-26 11:41 18808 c:\windows\$hf_mig$\KB979482\spmsg.dll
+ 2010-03-05 14:53 . 2010-03-05 14:53 65536 c:\windows\$hf_mig$\KB979482\SP3QFE\asycfilt.dll
+ 2010-02-10 17:43 . 2009-05-26 11:41 26488 c:\windows\$hf_mig$\KB978706\update\spcustom.dll
+ 2010-02-10 17:43 . 2009-05-26 11:41 18808 c:\windows\$hf_mig$\KB978706\spmsg.dll
+ 2010-05-12 15:01 . 2009-05-26 11:41 26488 c:\windows\$hf_mig$\KB978542\update\spcustom.dll
+ 2010-05-12 15:01 . 2009-05-26 11:41 18808 c:\windows\$hf_mig$\KB978542\spmsg.dll
+ 2010-02-10 17:47 . 2009-05-26 11:41 26488 c:\windows\$hf_mig$\KB978262\update\spcustom.dll
+ 2010-02-10 17:47 . 2009-05-26 11:41 18808 c:\windows\$hf_mig$\KB978262\spmsg.dll
+ 2010-02-10 17:44 . 2009-05-26 11:41 26488 c:\windows\$hf_mig$\KB978251\update\spcustom.dll
+ 2010-02-10 17:44 . 2009-05-26 11:41 18808 c:\windows\$hf_mig$\KB978251\spmsg.dll
+ 2010-01-22 13:32 . 2008-07-08 13:06 26488 c:\windows\$hf_mig$\KB978207-IE8\update\spcustom.dll
+ 2010-01-22 13:32 . 2008-07-08 13:06 18808 c:\windows\$hf_mig$\KB978207-IE8\spmsg.dll
+ 2010-01-22 06:08 . 2009-12-21 19:01 12800 c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\xpshims.dll
+ 2010-01-22 06:08 . 2009-12-21 19:01 55296 c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\msfeedsbs.dll
+ 2010-01-22 06:08 . 2009-12-21 19:01 25600 c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\jsproxy.dll
+ 2010-02-10 17:44 . 2009-05-26 11:41 26488 c:\windows\$hf_mig$\KB978037\update\spcustom.dll
+ 2010-02-10 17:44 . 2009-05-26 11:41 18808 c:\windows\$hf_mig$\KB978037\spmsg.dll
+ 2009-12-14 07:10 . 2009-12-14 07:10 33280 c:\windows\$hf_mig$\KB978037\SP3QFE\csrsrv.dll
+ 2010-02-10 17:44 . 2009-05-26 11:41 26488 c:\windows\$hf_mig$\KB977914\update\spcustom.dll
+ 2010-02-10 17:44 . 2009-05-26 11:41 18808 c:\windows\$hf_mig$\KB977914\spmsg.dll
+ 2009-11-27 16:29 . 2009-11-27 16:29 28672 c:\windows\$hf_mig$\KB977914\SP3QFE\msvidc32.dll
+ 2009-11-27 16:29 . 2009-11-27 16:29 11264 c:\windows\$hf_mig$\KB977914\SP3QFE\msrle32.dll
+ 2009-11-27 16:29 . 2009-11-27 16:29 48128 c:\windows\$hf_mig$\KB977914\SP3QFE\iyuv_32.dll
+ 2009-11-27 16:29 . 2009-11-27 16:29 85504 c:\windows\$hf_mig$\KB977914\SP3QFE\avifil32.dll
+ 2010-02-10 17:42 . 2009-05-26 11:41 26488 c:\windows\$hf_mig$\KB977165\update\spcustom.dll
+ 2010-02-10 17:42 . 2009-05-26 11:41 18808 c:\windows\$hf_mig$\KB977165\spmsg.dll
+ 2010-02-10 17:44 . 2009-05-26 11:41 26488 c:\windows\$hf_mig$\KB975713\update\spcustom.dll
+ 2010-02-10 17:44 . 2009-05-26 11:41 18808 c:\windows\$hf_mig$\KB975713\spmsg.dll
+ 2010-06-11 01:07 . 2008-07-08 13:06 26488 c:\windows\$hf_mig$\KB975562\update\spcustom.dll
+ 2010-06-11 01:07 . 2008-07-08 13:06 18808 c:\windows\$hf_mig$\KB975562\spmsg.dll
+ 2010-03-11 05:42 . 2008-07-08 13:06 26488 c:\windows\$hf_mig$\KB975561\update\spcustom.dll
+ 2010-03-11 05:42 . 2008-07-08 13:06 18808 c:\windows\$hf_mig$\KB975561\spmsg.dll
+ 2010-02-10 17:44 . 2009-05-26 11:41 26488 c:\windows\$hf_mig$\KB975560\update\spcustom.dll
+ 2010-02-10 17:44 . 2009-05-26 11:41 18808 c:\windows\$hf_mig$\KB975560\spmsg.dll
+ 2009-11-27 17:24 . 2009-11-27 17:24 17920 c:\windows\$hf_mig$\KB975560\SP3QFE\msyuv.dll
+ 2010-02-10 17:46 . 2008-07-08 13:06 26488 c:\windows\$hf_mig$\KB971468\update\spcustom.dll
+ 2010-02-10 17:46 . 2008-07-08 13:06 18808 c:\windows\$hf_mig$\KB971468\spmsg.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
+ 2004-09-07 20:00 . 2009-11-27 16:07 8704 c:\windows\system32\tsbyuv.dll
+ 2010-10-08 12:15 . 2009-06-19 17:51 9728 c:\windows\system32\PCCLPFR.DLL
+ 2007-02-02 03:00 . 2007-02-02 03:00 9464 c:\windows\system32\drivers\cdralw2k.sys
+ 2007-02-02 03:00 . 2007-02-02 03:00 9336 c:\windows\system32\drivers\cdr4_xp.sys
+ 2009-11-27 16:07 . 2009-11-27 16:07 8704 c:\windows\system32\dllcache\tsbyuv.dll
+ 2010-12-01 15:02 . 2010-12-01 15:02 3638 c:\windows\Installer\{B98BE95C-E76F-4246-B8E6-BEB8EE791D06}\NewShortcut38_8E832933A07340209FB8DBADC480B69B.exe
- 2007-01-24 15:45 . 2009-03-17 02:01 4096 c:\windows\Installer\{90A10410-6000-11D3-8CFE-0150048383C9}\opwicon.exe
+ 2007-01-24 15:45 . 2010-06-11 01:16 4096 c:\windows\Installer\{90A10410-6000-11D3-8CFE-0150048383C9}\opwicon.exe
- 2007-01-24 15:42 . 2009-03-17 02:04 4096 c:\windows\Installer\{90510410-6000-11D3-8CFE-0150048383C9}\opwicon.exe
+ 2007-01-24 15:42 . 2010-06-11 01:17 4096 c:\windows\Installer\{90510410-6000-11D3-8CFE-0150048383C9}\opwicon.exe
+ 2007-01-24 15:44 . 2010-06-11 01:17 4096 c:\windows\Installer\{903B0410-6000-11D3-8CFE-0150048383C9}\opwicon.exe
- 2007-01-24 15:44 . 2009-12-10 20:38 4096 c:\windows\Installer\{903B0410-6000-11D3-8CFE-0150048383C9}\opwicon.exe
+ 2007-01-24 15:40 . 2010-06-11 01:16 4096 c:\windows\Installer\{90170410-6000-11D3-8CFE-0150048383C9}\opwicon.exe
- 2007-01-24 15:40 . 2009-12-10 20:38 4096 c:\windows\Installer\{90170410-6000-11D3-8CFE-0150048383C9}\opwicon.exe
+ 2007-01-24 15:35 . 2010-06-11 01:17 4096 c:\windows\Installer\{90110410-6000-11D3-8CFE-0150048383C9}\opwicon.exe
- 2007-01-24 15:35 . 2009-12-10 20:39 4096 c:\windows\Installer\{90110410-6000-11D3-8CFE-0150048383C9}\opwicon.exe
+ 2010-12-01 15:14 . 2010-12-01 15:14 6318 c:\windows\Installer\{40A594D0-1490-4979-9382-D2B764F949C6}\ICO_ARPProductIcon.exe
+ 2009-11-27 16:07 . 2009-11-27 16:07 8704 c:\windows\Driver Cache\i386\tsbyuv.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2010-02-10 17:44 . 2004-09-07 20:00 8192 c:\windows\$NtUninstallKB977914$\tsbyuv.dll
+ 2009-11-27 16:29 . 2009-11-27 16:29 8704 c:\windows\$hf_mig$\KB977914\SP3QFE\tsbyuv.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 653120 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcr90.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 569664 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcp90.dll
+ 2009-07-11 22:05 . 2009-07-11 22:05 225280 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcm90.dll
+ 2008-03-04 02:17 . 2008-03-04 02:17 655872 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30304.0_x-ww_003f2b36\msvcr90.dll
+ 2008-03-04 02:17 . 2008-03-04 02:17 572928 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30304.0_x-ww_003f2b36\msvcp90.dll
+ 2008-03-03 20:52 . 2008-03-03 20:52 225280 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30304.0_x-ww_003f2b36\msvcm90.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 159032 c:\windows\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_353599c2\atl90.dll
+ 2009-07-11 23:12 . 2009-07-11 23:12 632656 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcr80.dll
+ 2009-07-11 23:09 . 2009-07-11 23:09 554832 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcp80.dll
+ 2009-07-11 23:08 . 2009-07-11 23:08 479232 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcm80.dll
- 2006-05-10 05:25 . 2009-10-29 07:40 916480 c:\windows\system32\wininet.dll
+ 2006-05-10 05:25 . 2010-05-06 10:32 916480 c:\windows\system32\wininet.dll
+ 2004-12-07 08:11 . 2004-12-07 08:11 258352 c:\windows\system32\unicows.dll
+ 2006-05-10 05:25 . 2009-12-08 09:23 474624 c:\windows\system32\shlwapi.dll
+ 2007-04-04 16:08 . 2007-04-04 16:08 158456 c:\windows\system32\pxwma.dll
+ 2007-04-04 16:08 . 2007-04-04 16:08 379640 c:\windows\system32\PxWave.dll
+ 2007-04-04 16:08 . 2007-04-04 16:08 187128 c:\windows\system32\PxMas.dll
+ 2007-05-01 15:48 . 2007-05-01 15:48 118520 c:\windows\system32\pxinsi64.exe
+ 2009-06-18 00:02 . 2009-06-18 00:02 559600 c:\windows\system32\pxdrv.dll
+ 2007-05-01 15:48 . 2007-05-01 15:48 120056 c:\windows\system32\pxcpyi64.exe
+ 2007-04-04 16:08 . 2007-04-04 16:08 551672 c:\windows\system32\Px.dll
+ 2006-09-18 22:34 . 2010-11-09 19:49 493144 c:\windows\system32\perfh010.dat
+ 2006-09-18 22:34 . 2010-11-09 19:49 445370 c:\windows\system32\perfh009.dat
- 2004-09-07 20:00 . 2009-10-29 07:40 206848 c:\windows\system32\occache.dll
+ 2004-09-07 20:00 . 2010-05-06 10:32 206848 c:\windows\system32\occache.dll
+ 2006-05-10 05:25 . 2010-05-06 10:32 611840 c:\windows\system32\mstime.dll
- 2006-05-10 05:25 . 2009-03-08 02:32 611840 c:\windows\system32\mstime.dll
- 2004-09-07 20:00 . 2008-04-14 02:14 346112 c:\windows\system32\mspaint.exe
+ 2004-09-07 20:00 . 2009-12-17 07:40 346112 c:\windows\system32\mspaint.exe
+ 2006-11-07 20:03 . 2010-05-06 10:32 599040 c:\windows\system32\msfeeds.dll
+ 2009-12-25 19:15 . 2009-11-02 19:42 195456 c:\windows\system32\MpSigStub.exe
+ 2010-11-10 05:36 . 2010-11-10 05:36 233936 c:\windows\system32\Macromed\Flash\FlashUtil10l_ActiveX.exe
+ 2010-11-10 05:37 . 2010-11-10 05:37 311248 c:\windows\system32\Macromed\Flash\FlashUtil10l_ActiveX.dll
- 2006-03-17 09:11 . 2008-04-11 19:04 691712 c:\windows\system32\inetcomm.dll
+ 2006-03-17 09:11 . 2010-01-29 14:59 691712 c:\windows\system32\inetcomm.dll
+ 2006-05-10 05:25 . 2010-05-06 10:32 184320 c:\windows\system32\iepeers.dll
- 2006-05-10 05:25 . 2009-10-29 07:40 184320 c:\windows\system32\iepeers.dll
- 2004-09-07 20:00 . 2009-10-29 07:40 387584 c:\windows\system32\iedkcs32.dll
+ 2004-09-07 20:00 . 2010-05-06 10:32 387584 c:\windows\system32\iedkcs32.dll
+ 2004-09-07 20:00 . 2010-05-05 13:30 173056 c:\windows\system32\ie4uinit.exe
- 2004-09-07 20:00 . 2009-10-28 14:40 173056 c:\windows\system32\ie4uinit.exe
+ 2006-09-18 22:24 . 2010-12-01 15:04 394368 c:\windows\system32\FNTCACHE.DAT
+ 2005-05-10 00:17 . 2009-12-31 16:50 353792 c:\windows\system32\drivers\srv.sys
+ 2006-05-05 09:41 . 2009-12-04 18:22 455424 c:\windows\system32\drivers\mrxsmb.sys
- 2006-05-10 05:25 . 2009-10-29 07:40 916480 c:\windows\system32\dllcache\wininet.dll
+ 2006-05-10 05:25 . 2010-05-06 10:32 916480 c:\windows\system32\dllcache\wininet.dll
+ 2008-10-19 17:44 . 2009-12-31 16:50 353792 c:\windows\system32\dllcache\srv.sys
+ 2009-01-07 16:21 . 2009-12-08 09:23 474624 c:\windows\system32\dllcache\shlwapi.dll
- 2004-09-07 20:00 . 2009-10-29 07:40 206848 c:\windows\system32\dllcache\occache.dll
+ 2004-09-07 20:00 . 2010-05-06 10:32 206848 c:\windows\system32\dllcache\occache.dll
- 2006-05-10 05:25 . 2009-03-08 02:32 611840 c:\windows\system32\dllcache\mstime.dll
+ 2006-05-10 05:25 . 2010-05-06 10:32 611840 c:\windows\system32\dllcache\mstime.dll
- 2004-09-07 20:00 . 2008-04-14 02:14 346112 c:\windows\system32\dllcache\mspaint.exe
+ 2004-09-07 20:00 . 2009-12-17 07:40 346112 c:\windows\system32\dllcache\mspaint.exe
+ 2007-05-11 12:43 . 2010-05-06 10:32 599040 c:\windows\system32\dllcache\msfeeds.dll
+ 2008-11-15 13:25 . 2009-12-04 18:22 455424 c:\windows\system32\dllcache\mrxsmb.sys
- 2008-08-25 05:58 . 2008-04-11 19:04 691712 c:\windows\system32\dllcache\inetcomm.dll
+ 2008-08-25 05:58 . 2010-01-29 14:59 691712 c:\windows\system32\dllcache\inetcomm.dll
+ 2009-06-27 13:10 . 2010-05-06 10:32 247808 c:\windows\system32\dllcache\ieproxy.dll
+ 2006-05-10 05:25 . 2010-05-06 10:32 184320 c:\windows\system32\dllcache\iepeers.dll
- 2006-05-10 05:25 . 2009-10-29 07:40 184320 c:\windows\system32\dllcache\iepeers.dll
+ 2010-06-10 10:54 . 2010-05-06 10:32 743424 c:\windows\system32\dllcache\iedvtool.dll
- 2004-09-07 20:00 . 2009-10-29 07:40 387584 c:\windows\system32\dllcache\iedkcs32.dll
+ 2004-09-07 20:00 . 2010-05-06 10:32 387584 c:\windows\system32\dllcache\iedkcs32.dll
+ 2004-09-07 20:00 . 2010-05-05 13:30 173056 c:\windows\system32\dllcache\ie4uinit.exe
- 2004-09-07 20:00 . 2009-10-28 14:40 173056 c:\windows\system32\dllcache\ie4uinit.exe
+ 2010-04-20 05:30 . 2010-04-20 05:30 285696 c:\windows\system32\dllcache\atmfd.dll
+ 2010-11-01 16:10 . 2005-07-11 23:50 235520 c:\windows\system32\cygpng12.dll
+ 2010-11-01 16:10 . 2005-11-20 02:25 969728 c:\windows\system32\cygiconv-2.dll
+ 2010-11-01 16:10 . 2005-09-06 23:12 383488 c:\windows\system32\cygfreetype-6.dll
+ 2007-09-04 11:04 . 2007-09-04 11:04 113136 c:\windows\system32\cdrtc.dll
+ 2007-09-04 11:04 . 2007-09-04 11:04 100848 c:\windows\system32\cdral.dll
+ 2010-06-15 01:56 . 2010-06-15 01:56 507904 c:\windows\system32\btwapi.dll
- 2004-09-07 20:00 . 2008-04-14 02:11 285696 c:\windows\system32\atmfd.dll
+ 2004-09-07 20:00 . 2010-04-20 05:30 285696 c:\windows\system32\atmfd.dll
+ 2010-04-07 21:48 . 2010-04-07 21:48 970752 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
- 2008-07-29 18:16 . 2008-07-29 18:16 110592 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMdiagnostics.dll
+ 2010-04-07 21:48 . 2010-04-07 21:48 110592 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMdiagnostics.dll
+ 2010-03-23 03:31 . 2010-03-23 03:31 435024 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
- 2008-07-25 10:17 . 2008-07-25 10:17 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
+ 2010-02-09 10:22 . 2010-02-09 10:22 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
- 2008-05-27 23:49 . 2008-05-27 23:49 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
+ 2010-03-31 12:51 . 2010-03-31 12:51 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
- 2008-05-27 23:48 . 2008-05-27 23:48 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
+ 2010-03-31 12:49 . 2010-03-31 12:49 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
+ 2010-03-31 13:32 . 2010-03-31 13:32 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
- 2008-05-28 00:30 . 2008-05-28 00:30 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
+ 2010-12-01 15:14 . 2010-12-01 15:14 998400 c:\windows\Installer\8f1c1.msi
+ 2010-04-19 14:58 . 2010-04-19 14:58 146944 c:\windows\Installer\8969ef.msi
+ 2009-12-25 19:12 . 2009-12-25 19:12 301056 c:\windows\Installer\50b0b.msi
+ 2010-02-24 22:14 . 2010-02-24 22:14 543232 c:\windows\Installer\30ba89f.msp
+ 2010-04-21 12:15 . 2010-04-21 12:15 424960 c:\windows\Installer\19d0651.msi
+ 2010-11-01 13:38 . 2010-11-01 13:38 331264 c:\windows\Installer\1994d06.msi
+ 2010-01-15 13:35 . 2010-01-15 13:35 430080 c:\windows\Installer\16c1eed.msi
+ 2010-01-15 13:35 . 2010-01-15 13:35 155648 c:\windows\Installer\16c1ed0.msi
+ 2010-01-15 13:35 . 2010-01-15 13:35 202752 c:\windows\Installer\16c1eb6.msi
+ 2010-01-15 13:35 . 2010-01-15 13:35 152576 c:\windows\Installer\16c1eb0.msi
+ 2010-01-15 13:34 . 2010-01-15 13:34 107008 c:\windows\Installer\16c1e9e.msi
+ 2010-08-19 17:28 . 2010-08-19 17:28 219648 c:\windows\Installer\15083c.msi
+ 2010-08-30 12:25 . 2010-08-30 12:25 381952 c:\windows\Installer\11fe3a.msi
+ 2007-01-24 15:45 . 2010-06-11 01:16 135168 c:\windows\Installer\{90A10410-6000-11D3-8CFE-0150048383C9}\misc.exe
- 2007-01-24 15:45 . 2009-03-17 02:01 135168 c:\windows\Installer\{90A10410-6000-11D3-8CFE-0150048383C9}\misc.exe
+ 2007-01-24 15:42 . 2010-06-11 01:17 176128 c:\windows\Installer\{90510410-6000-11D3-8CFE-0150048383C9}\visicon.exe
- 2007-01-24 15:42 . 2009-03-17 02:04 176128 c:\windows\Installer\{90510410-6000-11D3-8CFE-0150048383C9}\visicon.exe
+ 2007-01-24 15:42 . 2010-06-11 01:17 135168 c:\windows\Installer\{90510410-6000-11D3-8CFE-0150048383C9}\misc.exe
- 2007-01-24 15:42 . 2009-03-17 02:04 135168 c:\windows\Installer\{90510410-6000-11D3-8CFE-0150048383C9}\misc.exe
+ 2007-01-24 15:44 . 2010-06-11 01:17 147456 c:\windows\Installer\{903B0410-6000-11D3-8CFE-0150048383C9}\pj11icon.exe
- 2007-01-24 15:44 . 2009-12-10 20:38 147456 c:\windows\Installer\{903B0410-6000-11D3-8CFE-0150048383C9}\pj11icon.exe
- 2007-01-24 15:44 . 2009-12-10 20:38 135168 c:\windows\Installer\{903B0410-6000-11D3-8CFE-0150048383C9}\misc.exe
+ 2007-01-24 15:44 . 2010-06-11 01:17 135168 c:\windows\Installer\{903B0410-6000-11D3-8CFE-0150048383C9}\misc.exe
+ 2007-01-24 15:40 . 2010-06-11 01:16 135168 c:\windows\Installer\{90170410-6000-11D3-8CFE-0150048383C9}\misc.exe
- 2007-01-24 15:40 . 2009-12-10 20:38 135168 c:\windows\Installer\{90170410-6000-11D3-8CFE-0150048383C9}\misc.exe
+ 2007-01-24 15:40 . 2010-06-11 01:16 282624 c:\windows\Installer\{90170410-6000-11D3-8CFE-0150048383C9}\fpicon.exe
- 2007-01-24 15:40 . 2009-12-10 20:38 282624 c:\windows\Installer\{90170410-6000-11D3-8CFE-0150048383C9}\fpicon.exe
+ 2007-01-24 15:35 . 2010-06-11 01:17 409600 c:\windows\Installer\{90110410-6000-11D3-8CFE-0150048383C9}\xlicons.exe
- 2007-01-24 15:35 . 2009-12-10 20:39 409600 c:\windows\Installer\{90110410-6000-11D3-8CFE-0150048383C9}\xlicons.exe
- 2007-01-24 15:35 . 2009-12-10 20:39 286720 c:\windows\Installer\{90110410-6000-11D3-8CFE-0150048383C9}\wordicon.exe
+ 2007-01-24 15:35 . 2010-06-11 01:17 286720 c:\windows\Installer\{90110410-6000-11D3-8CFE-0150048383C9}\wordicon.exe
- 2007-01-24 15:35 . 2009-12-10 20:39 249856 c:\windows\Installer\{90110410-6000-11D3-8CFE-0150048383C9}\pptico.exe
+ 2007-01-24 15:35 . 2010-06-11 01:17 249856 c:\windows\Installer\{90110410-6000-11D3-8CFE-0150048383C9}\pptico.exe
- 2007-01-24 15:35 . 2009-12-10 20:39 794624 c:\windows\Installer\{90110410-6000-11D3-8CFE-0150048383C9}\outicon.exe
+ 2007-01-24 15:35 . 2010-06-11 01:17 794624 c:\windows\Installer\{90110410-6000-11D3-8CFE-0150048383C9}\outicon.exe
- 2007-01-24 15:35 . 2009-12-10 20:39 135168 c:\windows\Installer\{90110410-6000-11D3-8CFE-0150048383C9}\misc.exe
+ 2007-01-24 15:35 . 2010-06-11 01:17 135168 c:\windows\Installer\{90110410-6000-11D3-8CFE-0150048383C9}\misc.exe
+ 2007-01-24 15:35 . 2010-06-11 01:17 593920 c:\windows\Installer\{90110410-6000-11D3-8CFE-0150048383C9}\accicons.exe
- 2007-01-24 15:35 . 2009-12-10 20:39 593920 c:\windows\Installer\{90110410-6000-11D3-8CFE-0150048383C9}\accicons.exe
+ 2007-06-20 04:34 . 2007-06-20 04:34 186264 c:\windows\Installer\$PatchCache$\Managed\0140150900063D11C8EF10054038389C\11.0.8173\SQLSHARE.DLL
+ 2007-06-20 04:29 . 2007-06-20 04:29 335256 c:\windows\Installer\$PatchCache$\Managed\0140150900063D11C8EF10054038389C\11.0.8173\PDSBASE.DLL
+ 2007-06-20 04:34 . 2007-06-20 04:34 147864 c:\windows\Installer\$PatchCache$\Managed\0140150900063D11C8EF10054038389C\11.0.8173\IMUTIL.DLL
+ 2007-06-20 04:29 . 2007-06-20 04:29 537496 c:\windows\Installer\$PatchCache$\Managed\0140150900063D11C8EF10054038389C\11.0.8173\IMCOMMON.DLL
+ 2007-06-20 04:34 . 2007-06-20 04:34 135576 c:\windows\Installer\$PatchCache$\Managed\0140150900063D11C8EF10054038389C\11.0.8173\BRTVIEW.DLL
+ 2009-03-16 02:04 . 2009-03-16 02:04 103776 c:\windows\Installer\$PatchCache$\Managed\0140110900063D11C8EF10054038389C\11.0.8173\IPATHPIA.DLL
+ 2010-06-11 01:10 . 2009-12-21 19:06 916480 c:\windows\ie8updates\KB982381-IE8\wininet.dll
+ 2010-06-11 01:10 . 2010-02-22 14:27 402296 c:\windows\ie8updates\KB982381-IE8\spuninst\updspapi.dll
+ 2010-06-11 01:10 . 2008-07-08 13:06 233848 c:\windows\ie8updates\KB982381-IE8\spuninst\spuninst.exe
+ 2010-06-11 01:10 . 2009-12-21 19:06 206848 c:\windows\ie8updates\KB982381-IE8\occache.dll
+ 2010-06-11 01:10 . 2009-03-08 02:32 611840 c:\windows\ie8updates\KB982381-IE8\mstime.dll
+ 2010-06-11 01:10 . 2009-12-21 19:06 594432 c:\windows\ie8updates\KB982381-IE8\msfeeds.dll
+ 2010-06-11 01:10 . 2009-12-21 19:06 246272 c:\windows\ie8updates\KB982381-IE8\ieproxy.dll
+ 2010-06-11 01:10 . 2009-12-21 19:06 184320 c:\windows\ie8updates\KB982381-IE8\iepeers.dll
+ 2010-06-11 01:10 . 2009-03-08 02:35 742912 c:\windows\ie8updates\KB982381-IE8\iedvtool.dll
+ 2010-06-11 01:10 . 2009-12-21 19:06 387584 c:\windows\ie8updates\KB982381-IE8\iedkcs32.dll
+ 2010-06-11 01:10 . 2009-12-21 13:20 173056 c:\windows\ie8updates\KB982381-IE8\ie4uinit.exe
+ 2010-01-22 13:32 . 2009-10-29 07:40 916480 c:\windows\ie8updates\KB978207-IE8\wininet.dll
+ 2010-01-22 13:32 . 2009-05-26 11:41 402296 c:\windows\ie8updates\KB978207-IE8\spuninst\updspapi.dll
+ 2010-01-22 13:32 . 2008-07-08 13:06 233848 c:\windows\ie8updates\KB978207-IE8\spuninst\spuninst.exe
+ 2010-01-22 13:32 . 2009-10-29 07:40 206848 c:\windows\ie8updates\KB978207-IE8\occache.dll
+ 2010-01-22 13:32 . 2009-10-29 07:40 594432 c:\windows\ie8updates\KB978207-IE8\msfeeds.dll
+ 2010-01-22 13:32 . 2009-10-29 07:40 246272 c:\windows\ie8updates\KB978207-IE8\ieproxy.dll
+ 2010-01-22 13:32 . 2009-10-29 07:40 184320 c:\windows\ie8updates\KB978207-IE8\iepeers.dll
+ 2010-01-22 13:32 . 2009-10-29 07:40 387584 c:\windows\ie8updates\KB978207-IE8\iedkcs32.dll
+ 2010-01-22 13:32 . 2009-10-28 14:40 173056 c:\windows\ie8updates\KB978207-IE8\ie4uinit.exe
+ 2010-04-21 12:24 . 2010-04-21 12:24 473600 c:\windows\Easy CD-DA Extractor 11.1\uninstall.exe
+ 2008-11-15 13:25 . 2009-12-04 18:22 455424 c:\windows\Driver Cache\i386\mrxsmb.sys
+ 2008-10-24 08:14 . 2008-10-24 08:14 488736 c:\windows\Downloaded Program Files\isusweb.dll
+ 2007-03-20 14:25 . 2007-03-20 14:25 205744 c:\windows\Downloaded Program Files\dwusplay.exe
+ 2010-06-11 01:13 . 2010-06-11 01:13 835584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_c1a06518\System.Drawing.dll
+ 2010-06-11 01:13 . 2010-06-11 01:13 192512 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_34ee8772\System.Drawing.Design.dll
+ 2010-06-11 01:13 . 2010-06-11 01:13 118784 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_dbc5f71b\CustomMarshalers.dll
+ 2010-06-11 01:12 . 2010-06-11 01:12 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\4d07b1ccecca66f320c1a0971dd614d1\WsatConfig.ni.exe
+ 2010-06-11 01:10 . 2010-06-11 01:10 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\a7c702f75d47bf841b9587e582c2d0b2\WindowsFormsIntegration.ni.dll
+ 2010-06-11 01:10 . 2010-06-11 01:10 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\3a78043c85333d5af49a0d958912ae4a\UIAutomationClient.ni.dll
+ 2010-06-11 01:16 . 2010-06-11 01:16 400896 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\747e84d81d1de2041661f0f71b04734a\System.Xml.Linq.ni.dll
+ 2010-06-11 01:15 . 2010-06-11 01:15 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\d51dfbd8d5431eb89181baaa24863e15\System.Web.Routing.ni.dll
+ 2010-06-11 01:09 . 2010-06-11 01:09 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\436dde9611932489da3dc8a1be170843\System.Web.RegularExpressions.ni.dll
+ 2010-06-11 01:16 . 2010-06-11 01:16 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\e8ef769b3e899e62b26daadee50b97ed\System.Web.Extensions.Design.ni.dll
+ 2010-06-11 01:16 . 2010-06-11 01:16 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\ce3b446b7bee5c47949c994ec89b1649\System.Web.Entity.ni.dll
+ 2010-06-11 01:16 . 2010-06-11 01:16 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\ad04fe1182e55e7c01066b62a4bee6b5\System.Web.Entity.Design.ni.dll
+ 2010-06-11 01:15 . 2010-06-11 01:15 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\20ba0d4d182a1a9c1f54c00d3bc29a68\System.Web.DynamicData.ni.dll
+ 2010-06-11 01:15 . 2010-06-11 01:15 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\c97ecf9250c2f0794262534f27f98b72\System.Web.Abstractions.ni.dll
+ 2010-06-11 01:09 . 2010-06-11 01:09 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\9c56656c88979cf18de6cbcb6587ba8f\System.Transactions.ni.dll
+ 2010-06-11 01:09 . 2010-06-11 01:09 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\5adb0f89d469632511aed9d88cfe05c4\System.ServiceProcess.ni.dll
+ 2010-06-11 01:07 . 2010-06-11 01:07 679936 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\42b2ffb594dbd5652a576a0dce28722c\System.Security.ni.dll
+ 2010-06-11 01:08 . 2010-06-11 01:08 311296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\3231473e2ec4451c8f218930fda80d19\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2010-06-11 01:09 . 2010-06-11 01:09 771584 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\2077ce69bd24a095dd54683ae26454d4\System.Runtime.Remoting.ni.dll
+ 2010-06-11 01:15 . 2010-06-11 01:15 621056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\f90965b9d9a6a6604c9a66f57c37c026\System.Net.ni.dll
+ 2010-06-11 01:16 . 2010-06-11 01:16 593408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Messaging\07da2b0e44d62f3c65d6516f4e2f94bb\System.Messaging.ni.dll
+ 2010-06-11 01:15 . 2010-06-11 01:15 998400 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\16670b6870746e5a8dc4a73a76a90bed\System.Management.ni.dll
+ 2010-06-11 01:15 . 2010-06-11 01:15 330752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\e6bd59fec415e273c173170c6508180a\System.Management.Instrumentation.ni.dll
+ 2010-06-11 01:11 . 2010-06-11 01:11 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\e3eb86170cba4c80e6e22ca33c63c218\System.IO.Log.ni.dll
+ 2010-06-11 01:13 . 2010-06-11 01:13 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\cfa48936affc9a5fb89f0bf66cc52a47\System.IdentityModel.Selectors.ni.dll
+ 2010-06-11 01:09 . 2010-06-11 01:09 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\e9edc5cd12ebb513b4a3c53cb4640771\System.EnterpriseServices.Wrapper.dll
+ 2010-06-11 01:09 . 2010-06-11 01:09 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\e9edc5cd12ebb513b4a3c53cb4640771\System.EnterpriseServices.ni.dll
+ 2010-06-11 01:09 . 2010-06-11 01:09 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\aeba6820f20655dec7fe0fe05aaeb818\System.Drawing.Design.ni.dll
+ 2010-06-11 01:09 . 2010-06-11 01:09 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\9ef70079beca3a9982a3aa76ebc0ddd8\System.DirectoryServices.Protocols.ni.dll
+ 2010-06-11 01:15 . 2010-06-11 01:15 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\277619716d9136216065bea970365c65\System.DirectoryServices.AccountManagement.ni.dll
+ 2010-06-11 01:15 . 2010-06-11 01:15 939008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\90b67e13866b176ae6cbdb23144f724d\System.Data.Services.Client.ni.dll
+ 2010-06-11 01:15 . 2010-06-11 01:15 354816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\131a477d41a8669b15696128b94c2636\System.Data.Services.Design.ni.dll
+ 2010-06-11 01:15 . 2010-06-11 01:15 756736 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\d4990681ce373d81a52b231ee4c4afea\System.Data.Entity.Design.ni.dll
+ 2010-06-11 01:14 . 2010-06-11 01:14 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\9e9d66a3a0e16fceead505c25af569eb\System.Data.DataSetExtensions.ni.dll
+ 2010-06-11 01:06 . 2010-06-11 01:06 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\631b3eba1ba5bd3c3f027f34011cadeb\System.Configuration.ni.dll
+ 2010-06-11 01:09 . 2010-06-11 01:09 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\39e4f9a276fb12125d8a1444d8b65a84\System.Configuration.Install.ni.dll
+ 2010-06-11 01:13 . 2010-06-11 01:13 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\849916c5cb3ff7763d15a3976766c2f6\System.AddIn.ni.dll
+ 2010-06-11 01:12 . 2010-06-11 01:12 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\f38a426b90e6c526dcb2c435c7380450\SMSvcHost.ni.exe
+ 2010-06-11 01:12 . 2010-06-11 01:12 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\6cabc7d1700c224e8b41ff2f96a3087c\SMDiagnostics.ni.dll
+ 2010-06-11 01:12 . 2010-06-11 01:12 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\5c8f5ca36498f43980d64820d8186c8a\ServiceModelReg.ni.exe
+ 2010-06-11 01:09 . 2010-06-11 01:09 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\ae733e4062edba3a33bb0a632bef66bf\PresentationFramework.Royale.ni.dll
+ 2010-06-11 01:09 . 2010-06-11 01:09 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\3ffad524016f0aba7b11a8aa33301a65\PresentationFramework.Aero.ni.dll
+ 2010-06-11 01:09 . 2010-06-11 01:09 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\201968d038a23a4688310fed1eeaddaa\PresentationFramework.Classic.ni.dll
+ 2010-06-11 01:09 . 2010-06-11 01:09 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\1ead87ca8eb84c595c77c70e3b2df88d\PresentationFramework.Luna.ni.dll
+ 2010-06-11 01:13 . 2010-06-11 01:13 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\7700963610c1af364aa934c3c824b7b4\MSBuild.ni.exe
+ 2010-06-11 01:12 . 2010-06-11 01:12 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\c74d4c69c49992dfb23ba512081dc3de\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2010-06-11 01:07 . 2010-06-11 01:07 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\a6a9f24b1a8984eaafbabb1ee968e359\Microsoft.Build.Utilities.ni.dll
+ 2010-06-11 01:13 . 2010-06-11 01:13 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\2fa81d363cb1496be2427d848a867409\Microsoft.Build.Utilities.v3.5.ni.dll
+ 2010-06-11 01:13 . 2010-06-11 01:13 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\c4c360df9c1024ebc3f0de77f5cf8b1c\Microsoft.Build.Engine.ni.dll
+ 2010-06-11 01:13 . 2010-06-11 01:13 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\c9386dcd89c2518a74115f3bfd861830\Microsoft.Build.Conversion.v3.5.ni.dll
+ 2010-06-11 01:12 . 2010-06-11 01:12 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\abb62e3ed74c974f0282bc7ea5d3f1c1\ComSvcConfig.ni.exe
+ 2010-06-11 01:13 . 2010-06-11 01:13 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\6d34f00b6a782d15bec70d6cdb00b5e8\AspNetMMCExt.ni.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2010-06-11 01:06 . 2010-06-11 01:06 970752 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2010-06-11 01:06 . 2010-06-11 01:06 438272 c:\windows\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089\System.IdentityModel.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2010-06-11 01:06 . 2010-06-11 01:06 110592 c:\windows\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll
- 2009-03-17 06:14 . 2009-03-17 06:14 110592 c:\windows\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2010-06-11 01:01 . 2010-06-11 01:01 111624 c:\windows\assembly\GAC\Microsoft.Office.Interop.InfoPath\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.InfoPath.dll
+ 2010-06-11 01:17 . 2009-05-26 11:41 402296 c:\windows\$NtUninstallKB980218$\spuninst\updspapi.dll
+ 2010-06-11 01:17 . 2009-05-26 11:41 233848 c:\windows\$NtUninstallKB980218$\spuninst\spuninst.exe
+ 2010-06-11 01:17 . 2008-04-14 02:11 285696 c:\windows\$NtUninstallKB980218$\atmfd.dll
+ 2010-06-11 01:13 . 2008-07-08 13:06 402296 c:\windows\$NtUninstallKB980195$\spuninst\updspapi.dll
+ 2010-06-11 01:13 . 2008-07-08 13:06 233848 c:\windows\$NtUninstallKB980195$\spuninst\spuninst.exe
+ 2010-06-11 01:14 . 2009-04-13 10:42 390880 c:\windows\$NtUninstallKB979904$\spuninst\updspapi.dll
+ 2010-06-11 01:14 . 2009-04-13 10:42 215776 c:\windows\$NtUninstallKB979904$\spuninst\spuninst.exe
+ 2010-06-11 01:10 . 2009-05-26 11:41 402296 c:\windows\$NtUninstallKB979559$\spuninst\updspapi.dll
+ 2010-06-11 01:10 . 2009-05-26 09:01 233848 c:\windows\$NtUninstallKB979559$\spuninst\spuninst.exe
+ 2010-06-11 01:07 . 2009-05-26 11:41 402296 c:\windows\$NtUninstallKB979482$\spuninst\updspapi.dll
+ 2010-06-11 01:07 . 2009-05-26 11:41 233848 c:\windows\$NtUninstallKB979482$\spuninst\spuninst.exe
+ 2010-02-10 17:43 . 2009-05-26 11:41 402296 c:\windows\$NtUninstallKB978706$\spuninst\updspapi.dll
+ 2010-02-10 17:43 . 2009-05-26 11:41 233848 c:\windows\$NtUninstallKB978706$\spuninst\spuninst.exe
+ 2010-02-10 17:43 . 2008-04-14 02:14 346112 c:\windows\$NtUninstallKB978706$\mspaint.exe
+ 2010-06-11 01:07 . 2007-07-27 21:11 382840 c:\windows\$NtUninstallKB978695_WM9$\spuninst\updspapi.dll
+ 2010-06-11 01:07 . 2007-07-27 19:05 233848 c:\windows\$NtUninstallKB978695_WM9$\spuninst\spuninst.exe
+ 2010-05-12 15:01 . 2009-05-26 11:41 402296 c:\windows\$NtUninstallKB978542$\spuninst\updspapi.dll
+ 2010-05-12 15:01 . 2009-05-26 11:41 233848 c:\windows\$NtUninstallKB978542$\spuninst\spuninst.exe
+ 2010-05-12 15:01 . 2008-04-11 19:04 691712 c:\windows\$NtUninstallKB978542$\inetcomm.dll
+ 2010-02-10 17:47 . 2009-05-26 11:41 402296 c:\windows\$NtUninstallKB978262$\spuninst\updspapi.dll
+ 2010-02-10 17:47 . 2009-05-26 11:41 233848 c:\windows\$NtUninstallKB978262$\spuninst\spuninst.exe
+ 2010-02-10 17:44 . 2009-05-26 11:41 402296 c:\windows\$NtUninstallKB978251$\spuninst\updspapi.dll
+ 2010-02-10 17:44 . 2009-05-26 11:41 233848 c:\windows\$NtUninstallKB978251$\spuninst\spuninst.exe
+ 2010-02-10 17:44 . 2008-10-24 11:21 455296 c:\windows\$NtUninstallKB978251$\mrxsmb.sys
+ 2010-02-10 17:44 . 2009-05-26 11:41 402296 c:\windows\$NtUninstallKB978037$\spuninst\updspapi.dll
+ 2010-02-10 17:44 . 2009-05-26 11:41 233848 c:\windows\$NtUninstallKB978037$\spuninst\spuninst.exe
+ 2010-02-10 17:44 . 2009-05-26 11:41 402296 c:\windows\$NtUninstallKB977914$\spuninst\updspapi.dll
+ 2010-02-10 17:44 . 2009-05-26 11:41 233848 c:\windows\$NtUninstallKB977914$\spuninst\spuninst.exe
+ 2010-02-10 17:42 . 2009-05-26 11:41 402296 c:\windows\$NtUninstallKB977165$\spuninst\updspapi.dll
+ 2010-02-10 17:42 . 2009-05-26 11:41 233848 c:\windows\$NtUninstallKB977165$\spuninst\spuninst.exe
+ 2010-02-10 17:44 . 2009-05-26 11:41 402296 c:\windows\$NtUninstallKB975713$\spuninst\updspapi.dll
+ 2010-02-10 17:44 . 2009-05-26 11:41 233848 c:\windows\$NtUninstallKB975713$\spuninst\spuninst.exe
+ 2010-02-10 17:44 . 2008-04-14 02:13 474112 c:\windows\$NtUninstallKB975713$\shlwapi.dll
+ 2010-06-11 01:07 . 2009-05-26 11:41 402296 c:\windows\$NtUninstallKB975562$\spuninst\updspapi.dll
+ 2010-06-11 01:07 . 2008-07-08 13:06 233848 c:\windows\$NtUninstallKB975562$\spuninst\spuninst.exe
+ 2010-03-11 05:42 . 2009-05-26 16:11 402296 c:\windows\$NtUninstallKB975561$\spuninst\updspapi.dll
+ 2010-03-11 05:42 . 2008-07-08 13:06 233848 c:\windows\$NtUninstallKB975561$\spuninst\spuninst.exe
+ 2010-02-10 17:44 . 2009-05-26 11:41 402296 c:\windows\$NtUninstallKB975560$\spuninst\updspapi.dll
+ 2010-02-10 17:44 . 2009-05-26 11:41 233848 c:\windows\$NtUninstallKB975560$\spuninst\spuninst.exe
+ 2010-02-10 17:46 . 2008-12-11 10:57 333952 c:\windows\$NtUninstallKB971468$\srv.sys
+ 2010-02-10 17:46 . 2008-07-08 13:06 402296 c:\windows\$NtUninstallKB971468$\spuninst\updspapi.dll
+ 2010-02-10 17:46 . 2008-07-08 13:06 233848 c:\windows\$NtUninstallKB971468$\spuninst\spuninst.exe
+ 2010-06-11 01:10 . 2010-02-22 14:27 402296 c:\windows\$hf_mig$\KB982381-IE8\update\updspapi.dll
+ 2010-06-11 01:10 . 2009-05-26 11:41 763768 c:\windows\$hf_mig$\KB982381-IE8\update\update.exe
+ 2010-06-11 01:10 . 2008-07-08 13:06 233848 c:\windows\$hf_mig$\KB982381-IE8\spuninst.exe
+ 2010-06-10 10:54 . 2010-05-06 10:27 919040 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\wininet.dll
+ 2010-06-10 10:54 . 2010-05-06 10:27 206848 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\occache.dll
+ 2010-06-10 10:54 . 2010-05-06 10:27 611840 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\mstime.dll
+ 2010-06-10 10:54 . 2010-05-06 10:27 599040 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\msfeeds.dll
+ 2010-06-10 10:54 . 2010-05-06 10:26 247808 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\ieproxy.dll
+ 2010-06-10 10:54 . 2010-05-06 10:26 184320 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\iepeers.dll
+ 2010-06-10 10:54 . 2010-05-06 10:26 743424 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\iedvtool.dll
+ 2010-06-10 10:54 . 2010-05-06 10:26 387584 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\iedkcs32.dll
+ 2010-06-10 10:54 . 2010-05-05 13:55 173056 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\ie4uinit.exe
+ 2010-06-11 01:17 . 2009-05-26 11:41 402296 c:\windows\$hf_mig$\KB980218\update\updspapi.dll
+ 2010-06-11 01:17 . 2009-05-26 11:41 763768 c:\windows\$hf_mig$\KB980218\update\update.exe
+ 2010-06-11 01:17 . 2009-05-26 11:41 233848 c:\windows\$hf_mig$\KB980218\spuninst.exe
+ 2010-04-20 05:37 . 2010-04-20 05:37 285824 c:\windows\$hf_mig$\KB980218\SP3QFE\atmfd.dll
+ 2010-06-11 01:13 . 2008-07-08 13:06 402296 c:\windows\$hf_mig$\KB980195\update\updspapi.dll
+ 2010-06-11 01:13 . 2008-07-08 13:06 763768 c:\windows\$hf_mig$\KB980195\update\update.exe
+ 2010-06-11 01:13 . 2008-07-08 13:06 233848 c:\windows\$hf_mig$\KB980195\spuninst.exe
+ 2010-06-11 01:10 . 2009-05-26 11:41 402296 c:\windows\$hf_mig$\KB979559\update\updspapi.dll
+ 2010-06-11 01:10 . 2009-05-26 11:41 763768 c:\windows\$hf_mig$\KB979559\update\update.exe
+ 2010-06-11 01:10 . 2009-05-26 09:01 233848 c:\windows\$hf_mig$\KB979559\spuninst.exe
+ 2010-06-11 01:07 . 2009-05-26 11:41 402296 c:\windows\$hf_mig$\KB979482\update\updspapi.dll
+ 2010-06-11 01:07 . 2009-05-26 11:41 763768 c:\windows\$hf_mig$\KB979482\update\update.exe
+ 2010-06-11 01:07 . 2009-05-26 11:41 233848 c:\windows\$hf_mig$\KB979482\spuninst.exe
+ 2010-02-10 17:43 . 2009-05-26 11:41 402296 c:\windows\$hf_mig$\KB978706\update\updspapi.dll
+ 2010-02-10 17:43 . 2009-05-26 11:41 763768 c:\windows\$hf_mig$\KB978706\update\update.exe
+ 2010-02-10 17:43 . 2009-05-26 11:41 233848 c:\windows\$hf_mig$\KB978706\spuninst.exe
+ 2009-12-17 07:38 . 2009-12-17 07:38 346112 c:\windows\$hf_mig$\KB978706\SP3QFE\mspaint.exe
+ 2010-05-12 15:01 . 2009-05-26 11:41 402296 c:\windows\$hf_mig$\KB978542\update\updspapi.dll
+ 2010-05-12 15:01 . 2009-05-26 11:41 763768 c:\windows\$hf_mig$\KB978542\update\update.exe
+ 2010-05-12 15:01 . 2009-05-26 11:41 233848 c:\windows\$hf_mig$\KB978542\spuninst.exe
+ 2010-01-29 14:54 . 2010-01-29 14:54 691712 c:\windows\$hf_mig$\KB978542\SP3QFE\inetcomm.dll
+ 2010-02-10 17:47 . 2009-05-26 11:41 402296 c:\windows\$hf_mig$\KB978262\update\updspapi.dll
+ 2010-02-10 17:47 . 2009-05-26 11:41 763768 c:\windows\$hf_mig$\KB978262\update\update.exe
+ 2010-02-10 17:47 . 2009-05-26 11:41 233848 c:\windows\$hf_mig$\KB978262\spuninst.exe
+ 2010-02-10 17:44 . 2009-05-26 11:41 402296 c:\windows\$hf_mig$\KB978251\update\updspapi.dll
+ 2010-02-10 17:44 . 2009-05-26 11:41 763768 c:\windows\$hf_mig$\KB978251\update\update.exe
+ 2010-02-10 17:44 . 2009-05-26 11:41 233848 c:\windows\$hf_mig$\KB978251\spuninst.exe
+ 2010-02-10 17:08 . 2009-12-04 17:25 456832 c:\windows\$hf_mig$\KB978251\SP3QFE\mrxsmb.sys
+ 2010-01-22 13:32 . 2009-05-26 11:41 402296 c:\windows\$hf_mig$\KB978207-IE8\update\updspapi.dll
+ 2010-01-22 13:32 . 2009-05-26 11:41 763768 c:\windows\$hf_mig$\KB978207-IE8\update\update.exe
+ 2010-01-22 13:32 . 2008-07-08 13:06 233848 c:\windows\$hf_mig$\KB978207-IE8\spuninst.exe
+ 2010-01-22 06:08 . 2009-12-21 19:01 916480 c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\wininet.dll
+ 2010-01-22 06:08 . 2009-12-21 19:01 206848 c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\occache.dll
+ 2010-01-22 06:08 . 2009-12-21 19:01 594432 c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\msfeeds.dll
+ 2010-01-22 06:08 . 2009-12-21 19:01 246272 c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\ieproxy.dll
+ 2010-01-22 06:08 . 2009-12-21 19:01 184320 c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\iepeers.dll
+ 2010-01-22 06:08 . 2009-12-21 19:00 387584 c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\iedkcs32.dll
+ 2010-01-22 06:08 . 2009-12-21 13:22 173056 c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\ie4uinit.exe
+ 2010-02-10 17:44 . 2009-05-26 11:41 402296 c:\windows\$hf_mig$\KB978037\update\updspapi.dll
+ 2010-02-10 17:44 . 2009-05-26 11:41 763768 c:\windows\$hf_mig$\KB978037\update\update.exe
+ 2010-02-10 17:44 . 2009-05-26 11:41 233848 c:\windows\$hf_mig$\KB978037\spuninst.exe
+ 2010-02-10 17:44 . 2009-05-26 11:41 402296 c:\windows\$hf_mig$\KB977914\update\updspapi.dll
+ 2010-02-10 17:44 . 2009-05-26 11:41 763768 c:\windows\$hf_mig$\KB977914\update\update.exe
+ 2010-02-10 17:44 . 2009-05-26 11:41 233848 c:\windows\$hf_mig$\KB977914\spuninst.exe
+ 2010-02-10 17:42 . 2009-05-26 11:41 402296 c:\windows\$hf_mig$\KB977165\update\updspapi.dll
+ 2010-02-10 17:42 . 2009-05-26 11:41 763768 c:\windows\$hf_mig$\KB977165\update\update.exe
+ 2010-02-10 17:42 . 2009-05-26 11:41 233848 c:\windows\$hf_mig$\KB977165\spuninst.exe
+ 2010-02-10 17:44 . 2009-05-26 11:41 402296 c:\windows\$hf_mig$\KB975713\update\updspapi.dll
+ 2010-02-10 17:44 . 2009-05-26 11:41 763768 c:\windows\$hf_mig$\KB975713\update\update.exe
+ 2010-02-10 17:44 . 2009-05-26 11:41 233848 c:\windows\$hf_mig$\KB975713\spuninst.exe
+ 2009-12-08 09:02 . 2009-12-08 09:02 474624 c:\windows\$hf_mig$\KB975713\SP3QFE\shlwapi.dll
+ 2010-06-11 01:07 . 2009-05-26 11:41 402296 c:\windows\$hf_mig$\KB975562\update\updspapi.dll
+ 2010-06-11 01:07 . 2009-05-26 11:41 763768 c:\windows\$hf_mig$\KB975562\update\update.exe
+ 2010-06-11 01:07 . 2008-07-08 13:06 233848 c:\windows\$hf_mig$\KB975562\spuninst.exe
+ 2010-03-11 05:42 . 2009-05-26 16:11 402296 c:\windows\$hf_mig$\KB975561\update\updspapi.dll
+ 2010-03-11 05:42 . 2009-05-26 11:41 763768 c:\windows\$hf_mig$\KB975561\update\update.exe
+ 2010-03-11 05:42 . 2008-07-08 13:06 233848 c:\windows\$hf_mig$\KB975561\spuninst.exe
+ 2010-02-10 17:44 . 2009-05-26 11:41 402296 c:\windows\$hf_mig$\KB975560\update\updspapi.dll
+ 2010-02-10 17:44 . 2009-05-26 11:41 763768 c:\windows\$hf_mig$\KB975560\update\update.exe
+ 2010-02-10 17:44 . 2009-05-26 11:41 233848 c:\windows\$hf_mig$\KB975560\spuninst.exe
+ 2010-02-10 17:46 . 2008-07-08 13:06 402296 c:\windows\$hf_mig$\KB971468\update\updspapi.dll
+ 2010-02-10 17:46 . 2008-07-08 13:06 763768 c:\windows\$hf_mig$\KB971468\update\update.exe
+ 2010-02-10 17:46 . 2008-07-08 13:06 233848 c:\windows\$hf_mig$\KB971468\spuninst.exe
+ 2010-02-10 17:11 . 2010-01-01 07:58 353792 c:\windows\$hf_mig$\KB971468\SP3QFE\srv.sys
+ 2009-07-11 22:02 . 2009-07-11 22:02 3780424 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfc90u.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 3765048 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfc90.dll
+ 2009-07-11 18:46 . 2009-07-11 18:46 1093120 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfc80u.dll
+ 2009-07-11 18:46 . 2009-07-11 18:46 1105920 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfc80.dll
+ 2005-08-03 16:29 . 2010-04-06 02:52 2462720 c:\windows\system32\WMVCore.dll
+ 2005-10-06 03:08 . 2010-05-02 08:06 1851264 c:\windows\system32\win32k.sys
+ 2006-05-10 05:25 . 2010-05-06 10:32 1209344 c:\windows\system32\urlmon.dll
+ 2005-08-30 04:15 . 2010-02-05 18:25 1296896 c:\windows\system32\quartz.dll
- 2005-09-29 18:27 . 2009-08-04 17:26 2148864 c:\windows\system32\ntoskrnl.exe
+ 2005-09-29 18:27 . 2009-12-09 10:07 2148864 c:\windows\system32\ntoskrnl.exe
+ 2005-09-29 18:28 . 2009-12-09 10:07 2027520 c:\windows\system32\ntkrnlpa.exe
- 2005-09-29 18:28 . 2009-08-04 17:26 2027520 c:\windows\system32\ntkrnlpa.exe
+ 2006-05-19 15:08 . 2010-05-06 10:32 5950976 c:\windows\system32\mshtml.dll
- 2006-10-17 10:57 . 2009-10-29 07:40 1985536 c:\windows\system32\iertutil.dll
+ 2006-10-17 10:57 . 2010-05-06 10:32 1985536 c:\windows\system32\iertutil.dll
+ 2010-11-01 11:43 . 2010-09-03 12:33 1700352 c:\windows\system32\GdiPlus.dll
+ 2005-08-03 16:29 . 2010-04-06 02:52 2462720 c:\windows\system32\dllcache\WMVCore.dll
+ 2008-10-27 18:51 . 2010-05-02 08:06 1851264 c:\windows\system32\dllcache\win32k.sys
+ 2006-05-10 05:25 . 2010-05-06 10:32 1209344 c:\windows\system32\dllcache\urlmon.dll
+ 2008-05-07 05:10 . 2010-02-05 18:25 1296896 c:\windows\system32\dllcache\quartz.dll
- 2008-11-05 13:50 . 2009-08-04 20:56 2192896 c:\windows\system32\dllcache\ntoskrnl.exe
+ 2008-11-05 13:50 . 2009-12-09 10:07 2192896 c:\windows\system32\dllcache\ntoskrnl.exe
+ 2008-11-05 13:50 . 2009-12-09 10:07 2027520 c:\windows\system32\dllcache\ntkrpamp.exe
- 2008-11-05 13:50 . 2009-08-04 17:26 2027520 c:\windows\system32\dllcache\ntkrpamp.exe
+ 2008-11-05 13:50 . 2009-12-09 10:07 2069760 c:\windows\system32\dllcache\ntkrnlpa.exe
- 2008-11-05 13:50 . 2009-08-04 17:26 2069760 c:\windows\system32\dllcache\ntkrnlpa.exe
+ 2008-11-05 13:50 . 2009-12-09 10:07 2148864 c:\windows\system32\dllcache\ntkrnlmp.exe
- 2008-11-05 13:50 . 2009-08-04 17:26 2148864 c:\windows\system32\dllcache\ntkrnlmp.exe
- 2009-08-12 17:59 . 2009-07-10 13:26 1315328 c:\windows\system32\dllcache\msoe.dll
+ 2009-08-12 17:59 . 2010-01-29 14:59 1315328 c:\windows\system32\dllcache\msoe.dll
+ 2006-05-19 15:08 . 2010-05-06 10:32 5950976 c:\windows\system32\dllcache\mshtml.dll
+ 2010-03-10 11:51 . 2009-10-23 15:28 3558912 c:\windows\system32\dllcache\moviemk.exe
- 2007-05-11 12:43 . 2009-10-29 07:40 1985536 c:\windows\system32\dllcache\iertutil.dll
+ 2007-05-11 12:43 . 2010-05-06 10:32 1985536 c:\windows\system32\dllcache\iertutil.dll
+ 2010-11-01 16:10 . 2006-06-09 19:37 1090048 c:\windows\system32\cygxml2-2.dll
+ 2010-11-01 16:10 . 2006-07-30 18:22 1875110 c:\windows\system32\cygwin1.dll
+ 2010-04-07 21:48 . 2010-04-07 21:48 5967872 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.dll
- 2008-11-25 03:59 . 2008-11-25 03:59 5242880 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
+ 2010-03-23 03:32 . 2010-03-23 03:32 5242880 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
+ 2010-03-23 03:32 . 2010-03-23 03:32 3182592 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
+ 2010-04-01 09:42 . 2010-04-01 09:42 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
- 2008-05-28 00:35 . 2008-05-28 00:35 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
- 2008-05-28 00:35 . 2008-05-28 00:35 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
+ 2010-04-01 09:42 . 2010-04-01 09:42 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
- 2008-05-27 23:48 . 2008-05-27 23:48 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
+ 2010-03-31 12:50 . 2010-03-31 12:50 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
+ 2010-03-31 12:50 . 2010-03-31 12:50 2527232 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
+ 2010-04-01 09:42 . 2010-04-01 09:42 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
- 2008-05-27 23:43 . 2008-05-27 23:43 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
+ 2010-12-01 15:02 . 2010-12-01 15:02 1135616 c:\windows\Installer\d1c56c.msi
+ 2010-04-06 07:46 . 2010-04-06 07:46 1107456 c:\windows\Installer\85a627.msi
+ 2010-11-24 05:43 . 2010-11-24 05:43 1016832 c:\windows\Installer\58c63.msi
+ 2010-02-04 17:11 . 2010-02-04 17:11 5526528 c:\windows\Installer\3d74e6b.msp
+ 2010-01-27 16:53 . 2010-01-27 16:53 6820864 c:\windows\Installer\3d74e55.msp
+ 2010-05-03 14:27 . 2010-05-03 14:27 6825472 c:\windows\Installer\30ba940.msp
+ 2010-05-03 14:11 . 2010-05-03 14:11 4149760 c:\windows\Installer\30ba90c.msp
+ 2010-05-04 20:25 . 2010-05-04 20:25 7681024 c:\windows\Installer\30ba8e7.msp
+ 2010-05-10 15:17 . 2010-05-10 15:17 5520896 c:\windows\Installer\30ba8d1.msp
+ 2010-04-11 20:17 . 2010-04-11 20:17 2607104 c:\windows\Installer\30ba8ac.msp
+ 2010-04-11 20:17 . 2010-04-11 20:17 4210688 c:\windows\Installer\30ba8ab.msp
+ 2010-05-03 14:06 . 2010-05-03 14:06 5053952 c:\windows\Installer\30ba892.msp
+ 2010-03-30 10:34 . 2010-03-30 10:34 3826688 c:\windows\Installer\30ba87c.msp
+ 2010-01-19 16:51 . 2010-01-19 16:51 5524480 c:\windows\Installer\137716a.msp
+ 2010-01-19 17:29 . 2010-01-19 17:29 5050368 c:\windows\Installer\1377154.msp
+ 2007-06-20 04:30 . 2007-06-20 04:30 2279776 c:\windows\Installer\$PatchCache$\Managed\0140150900063D11C8EF10054038389C\11.0.8173\VISFILT.DLL
+ 2007-06-20 04:30 . 2007-06-20 04:30 2715992 c:\windows\Installer\$PatchCache$\Managed\0140150900063D11C8EF10054038389C\11.0.8173\SG.DLL
+ 2007-04-19 12:49 . 2007-04-19 12:49 1661280 c:\windows\Installer\$PatchCache$\Managed\0140110900063D11C8EF10054038389C\11.0.8173\PPTVIEW.EXE
+ 2007-04-30 13:57 . 2007-04-30 13:57 7084384 c:\windows\Installer\$PatchCache$\Managed\0140110900063D11C8EF10054038389C\11.0.8173\INFOPATH.EXE
+ 2010-06-11 01:10 . 2009-12-21 19:06 1208832 c:\windows\ie8updates\KB982381-IE8\urlmon.dll
+ 2010-06-11 01:10 . 2009-12-21 19:06 5942784 c:\windows\ie8updates\KB982381-IE8\mshtml.dll
+ 2010-06-11 01:10 . 2009-12-21 19:06 1985536 c:\windows\ie8updates\KB982381-IE8\iertutil.dll
+ 2010-01-22 13:32 . 2009-10-29 07:40 1208832 c:\windows\ie8updates\KB978207-IE8\urlmon.dll
+ 2010-01-22 13:32 . 2009-10-29 07:40 5940736 c:\windows\ie8updates\KB978207-IE8\mshtml.dll
+ 2010-01-22 13:32 . 2009-10-29 07:40 1985536 c:\windows\ie8updates\KB978207-IE8\iertutil.dll
+ 2008-11-05 13:50 . 2009-12-09 10:07 2192896 c:\windows\Driver Cache\i386\ntoskrnl.exe
- 2008-11-05 13:50 . 2009-08-04 20:56 2192896 c:\windows\Driver Cache\i386\ntoskrnl.exe
- 2008-11-05 13:50 . 2009-08-04 17:26 2027520 c:\windows\Driver Cache\i386\ntkrpamp.exe
+ 2008-11-05 13:50 . 2009-12-09 10:07 2027520 c:\windows\Driver Cache\i386\ntkrpamp.exe
- 2008-11-05 13:50 . 2009-08-04 17:26 2069760 c:\windows\Driver Cache\i386\ntkrnlpa.exe
+ 2008-11-05 13:50 . 2009-12-09 10:07 2069760 c:\windows\Driver Cache\i386\ntkrnlpa.exe
+ 2008-11-05 13:50 . 2009-12-09 10:07 2148864 c:\windows\Driver Cache\i386\ntkrnlmp.exe
- 2008-11-05 13:50 . 2009-08-04 17:26 2148864 c:\windows\Driver Cache\i386\ntkrnlmp.exe
+ 2010-09-14 15:11 . 2010-09-14 15:11 2826192 c:\windows\Downloaded Program Files\FP_AX_CAB_INSTALLER.exe
+ 2009-12-06 13:32 . 2009-12-06 13:32 1966080 c:\windows\assembly\temp\M92DMRWNSX\System.dll
+ 2009-12-06 13:33 . 2009-12-06 13:33 3391488 c:\windows\assembly\temp\CZ2NC1O3QZ\mscorlib.dll
+ 2009-12-06 13:32 . 2009-12-06 13:32 1232896 c:\windows\assembly\temp\89CJMHKFWD\System.dll
+ 2010-06-11 01:13 . 2010-06-11 01:13 4792320 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_7d387678\System.dll
+ 2010-06-11 01:13 . 2010-06-11 01:13 1966080 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_1cb03c15\System.dll
+ 2010-06-11 01:13 . 2010-06-11 01:13 2088960 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_fc427bdb\System.Xml.dll
+ 2010-06-11 01:14 . 2010-06-11 01:14 5513216 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_e92d1364\System.Xml.dll
+ 2010-06-11 01:13 . 2010-06-11 01:13 7884800 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_fdcce658\System.Windows.Forms.dll
+ 2010-06-11 01:13 . 2010-06-11 01:13 3018752 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_558a4170\System.Windows.Forms.dll
+ 2010-06-11 01:14 . 2010-06-11 01:14 2244608 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_79675e59\System.Drawing.dll
+ 2010-06-11 01:14 . 2010-06-11 01:14 3395584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_90776a0b\System.Design.dll
+ 2010-06-11 01:13 . 2010-06-11 01:13 1466368 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_7e19f723\System.Design.dll
+ 2010-06-11 01:14 . 2010-06-11 01:14 8908800 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_a9abfa3a\mscorlib.dll
+ 2010-06-11 01:13 . 2010-06-11 01:13 3391488 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_166eaf54\mscorlib.dll
+ 2010-06-11 01:07 . 2010-06-11 01:07 3313664 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\f231461883859922a040002dddfb7b12\WindowsBase.ni.dll
+ 2010-06-11 01:10 . 2010-06-11 01:10 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\48b66876f72f472db62de48ae4369406\UIAutomationClientsideProviders.ni.dll
+ 2010-06-11 01:06 . 2010-06-11 01:06 7949824 c:\windows\assembly\NativeImages_v2.0.50727_32\System\37217abe2c5164e59aba251860f4c79e\System.ni.dll
+ 2010-06-11 01:07 . 2010-06-11 01:07 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\563a54b98adb70fae862974042298348\System.Xml.ni.dll
+ 2010-06-11 01:16 . 2010-06-11 01:16 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\016b75f60a18535c8d6b3e5d861ab559\System.WorkflowServices.ni.dll
+ 2010-06-11 01:16 . 2010-06-11 01:16 1908224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\6dacae37d337004345518976fb57099e\System.Workflow.Runtime.ni.dll
+ 2010-06-11 01:16 . 2010-06-11 01:16 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\c7b832bbc5bb11c6c7f128c801ce90d7\System.Workflow.ComponentModel.ni.dll
+ 2010-06-11 01:16 . 2010-06-11 01:16 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\b9ea6ea910293cd6f13f765775867ebd\System.Workflow.Activities.ni.dll
+ 2010-06-11 01:09 . 2010-06-11 01:09 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\8ef8d556899a4a10b7f288a80925489f\System.Web.Services.ni.dll
+ 2010-06-11 01:16 . 2010-06-11 01:16 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\5dfda43f1991ee6ba345d62b2be4801c\System.Web.Mobile.ni.dll
+ 2010-06-11 01:15 . 2010-06-11 01:15 2403328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\f08b3b8cdf548e3dfe61f342536175eb\System.Web.Extensions.ni.dll
+ 2010-06-11 01:10 . 2010-06-11 01:10 1917952 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\2d6a5dbee4506bf643b853e41668afa3\System.Speech.ni.dll
+ 2010-06-11 01:15 . 2010-06-11 01:15 1706496 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\169fe0ad9d59982a2a6b89779c09885b\System.ServiceModel.Web.ni.dll
+ 2010-06-11 01:11 . 2010-06-11 01:11 2345472 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\8b2710a63ecd363315ef16b257588b95\System.Runtime.Serialization.ni.dll
+ 2010-06-11 01:08 . 2010-06-11 01:08 1035264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\161b423dc4e86e569af019e838d39de5\System.Printing.ni.dll
+ 2010-06-11 01:11 . 2010-06-11 01:11 1070080 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\ad4fb86064d7a1ebcb9ee997e7208ac1\System.IdentityModel.ni.dll
+ 2010-06-11 01:07 . 2010-06-11 01:07 1587200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\f3440ea00eb3c40dc073b2fe03843638\System.Drawing.ni.dll
+ 2010-06-11 01:08 . 2010-06-11 01:08 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\7deab2494d53763cd83c567e71e0d8e0\System.DirectoryServices.ni.dll
+ 2010-06-11 01:07 . 2010-06-11 01:07 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\b81efadfee7702624b713c6d86f7e369\System.Deployment.ni.dll
+ 2010-06-11 01:09 . 2010-06-11 01:09 6616576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\50130ef751b98a4a11bd4ab73af7cab5\System.Data.ni.dll
+ 2010-06-11 01:07 . 2010-06-11 01:07 2510336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\f71abf392c5ca05a4e46a5d1c4c72856\System.Data.SqlXml.ni.dll
+ 2010-06-11 01:15 . 2010-06-11 01:15 1328128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\5e6311aff5ada83d0f854922fa62faf6\System.Data.Services.ni.dll
+ 2010-06-11 01:09 . 2010-06-11 01:09 1115136 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\f249a2dbc8dcb91860d0997c163c73ff\System.Data.OracleClient.ni.dll
+ 2010-06-11 01:10 . 2010-06-11 01:10 2516480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\c3ba3367d03779ad6e76c5d4cdfe572a\System.Data.Linq.ni.dll
+ 2010-06-11 01:15 . 2010-06-11 01:15 9924096 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\6abf820d8ec57a0561c3367727d274df\System.Data.Entity.ni.dll
+ 2010-06-11 01:09 . 2010-06-11 01:09 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\e98726349766935ec0e9b980f19a046a\System.Core.ni.dll
+ 2010-06-11 01:08 . 2010-06-11 01:08 2128896 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\fc373f0a8dbd173c63b6b95551b1c673\ReachFramework.ni.dll
+ 2010-06-11 01:08 . 2010-06-11 01:08 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\ead93b6a4f0101cb99d09f3e3fc6491c\PresentationUI.ni.dll
+ 2010-06-11 01:06 . 2010-06-11 01:06 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\20ef773b20f6ce721ae60e5c2c2e8f80\PresentationBuildTasks.ni.dll
+ 2010-06-11 01:13 . 2010-06-11 01:13 1712128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\935b855860088a86bb65d37a19f059cc\Microsoft.VisualBasic.ni.dll
+ 2010-06-11 01:12 . 2010-06-11 01:12 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\7a266de493d30eed21cb60ebe300be53\Microsoft.Transactions.Bridge.ni.dll
+ 2010-06-11 01:15 . 2010-06-11 01:15 2332160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\9db8f9f7fe63ca4451bb5316a3ebb009\Microsoft.JScript.ni.dll
+ 2010-06-11 01:13 . 2010-06-11 01:13 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\c96be82d6cb00367db4e3553272165ef\Microsoft.Build.Tasks.v3.5.ni.dll
+ 2010-06-11 01:13 . 2010-06-11 01:13 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\3815de5b052187b5d9375681a6784255\Microsoft.Build.Tasks.ni.dll
+ 2010-06-11 01:13 . 2010-06-11 01:13 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\43fc6723d08e9ce88701c29653efd224\Microsoft.Build.Engine.ni.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 3182592 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2010-06-11 01:06 . 2010-06-11 01:06 5967872 c:\windows\assembly\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089\System.ServiceModel.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
+ 2010-06-11 01:05 . 2010-06-11 01:05 4546560 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
- 2009-12-06 13:34 . 2009-12-06 13:34 4546560 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
- 2009-12-06 13:32 . 2009-12-06 13:32 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
+ 2010-06-11 01:12 . 2010-06-11 01:12 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
- 2009-12-06 13:32 . 2009-12-06 13:32 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
+ 2010-06-11 01:12 . 2010-06-11 01:12 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
+ 2010-06-11 01:10 . 2009-08-14 15:12 1850624 c:\windows\$NtUninstallKB979559$\win32k.sys
+ 2010-06-11 01:07 . 2009-05-20 02:56 2458112 c:\windows\$NtUninstallKB978695_WM9$\wmvcore.dll
+ 2010-05-12 15:01 . 2009-07-10 13:26 1315328 c:\windows\$NtUninstallKB978542$\msoe.dll
+ 2010-02-10 17:42 . 2009-08-04 17:26 2148864 c:\windows\$NtUninstallKB977165$\ntoskrnl.exe
+ 2010-02-10 17:42 . 2009-08-04 17:26 2027520 c:\windows\$NtUninstallKB977165$\ntkrpamp.exe
+ 2010-02-10 17:42 . 2009-08-04 17:26 2027520 c:\windows\$NtUninstallKB977165$\ntkrnlpa.exe
+ 2010-02-10 17:42 . 2009-08-04 17:26 2148864 c:\windows\$NtUninstallKB977165$\ntkrnlmp.exe
+ 2010-06-11 01:07 . 2009-11-27 17:12 1296896 c:\windows\$NtUninstallKB975562$\quartz.dll
+ 2010-03-11 05:42 . 2008-04-14 02:14 3558912 c:\windows\$NtUninstallKB975561$\moviemk.exe
+ 2010-02-10 17:44 . 2009-06-03 19:09 1296384 c:\windows\$NtUninstallKB975560$\quartz.dll
+ 2010-06-10 10:54 . 2010-05-06 10:27 1209856 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\urlmon.dll
+ 2010-06-10 10:54 . 2010-05-06 10:27 5953024 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\mshtml.dll
+ 2010-06-10 10:54 . 2010-05-06 10:26 1986048 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\iertutil.dll
+ 2010-05-02 08:01 . 2010-05-02 08:01 1860352 c:\windows\$hf_mig$\KB979559\SP3QFE\win32k.sys
+ 2010-01-29 14:54 . 2010-01-29 14:54 1315328 c:\windows\$hf_mig$\KB978542\SP3QFE\msoe.dll
+ 2010-01-22 06:08 . 2009-12-21 19:01 1209344 c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\urlmon.dll
+ 2010-01-22 06:08 . 2009-12-21 19:01 5945856 c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\mshtml.dll
+ 2010-01-22 06:08 . 2009-12-21 19:01 1986048 c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\iertutil.dll
+ 2009-12-09 14:31 . 2009-12-09 14:31 2193024 c:\windows\$hf_mig$\KB977165\SP3QFE\ntoskrnl.exe
+ 2010-02-10 17:07 . 2009-12-09 10:01 2027520 c:\windows\$hf_mig$\KB977165\SP3QFE\ntkrpamp.exe
+ 2009-12-09 14:31 . 2009-12-09 14:31 2069888 c:\windows\$hf_mig$\KB977165\SP3QFE\ntkrnlpa.exe
+ 2010-02-10 17:07 . 2009-12-09 10:01 2148864 c:\windows\$hf_mig$\KB977165\SP3QFE\ntkrnlmp.exe
+ 2010-02-05 18:28 . 2010-02-05 18:28 1296896 c:\windows\$hf_mig$\KB975562\SP3QFE\quartz.dll
+ 2010-03-10 11:51 . 2009-10-23 14:53 3558912 c:\windows\$hf_mig$\KB975561\SP3QFE\moviemk.exe
+ 2009-11-27 17:24 . 2009-11-27 17:24 1296896 c:\windows\$hf_mig$\KB975560\SP3QFE\quartz.dll
+ 2007-03-03 13:06 . 2010-05-28 19:37 32472008 c:\windows\system32\MRT.exe
+ 2006-11-07 20:03 . 2010-05-06 10:32 11076096 c:\windows\system32\ieframe.dll
+ 2007-05-11 12:43 . 2010-05-06 10:32 11076096 c:\windows\system32\dllcache\ieframe.dll
+ 2010-04-02 17:29 . 2010-04-02 17:29 11413504 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\M979906\M979906Uninstall.msp
+ 2010-12-01 15:02 . 2010-12-01 15:02 28059648 c:\windows\Installer\d1c56b.msi
+ 2010-05-11 09:30 . 2010-05-11 09:30 11194880 c:\windows\Installer\30ba94d.msp
+ 2010-04-02 10:30 . 2010-04-02 10:30 17456640 c:\windows\Installer\30ba92b.msp
+ 2010-05-11 12:21 . 2010-05-11 12:21 11985408 c:\windows\Installer\30ba8f6.msp
+ 2010-04-11 20:17 . 2010-04-11 20:17 14599680 c:\windows\Installer\30ba8bb.msp
+ 2010-10-25 18:36 . 2010-10-25 18:36 20303872 c:\windows\Installer\2ef5ef0.msp
+ 2010-11-30 18:45 . 2010-11-30 18:45 17038848 c:\windows\Installer\1047917.msi
+ 2010-06-11 01:10 . 2009-12-21 19:06 11070464 c:\windows\ie8updates\KB982381-IE8\ieframe.dll
+ 2010-01-22 13:32 . 2009-10-29 07:40 11069952 c:\windows\ie8updates\KB978207-IE8\ieframe.dll
+ 2010-06-11 01:08 . 2010-06-11 01:08 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\2dfe045e4b1577fdea9a2f456db0afc2\System.Windows.Forms.ni.dll
+ 2010-06-11 01:09 . 2010-06-11 01:09 11797504 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\d987cf1de4ba688da92e212a374232c2\System.Web.ni.dll
+ 2010-06-11 01:12 . 2010-06-11 01:12 17403904 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\8b74f2fe3f3632f95ff4ddb8c4839a1e\System.ServiceModel.ni.dll
+ 2010-06-11 01:09 . 2010-06-11 01:09 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\f352c5cb50bee105e4c873ca050f9f46\System.Design.ni.dll
+ 2010-06-11 01:08 . 2010-06-11 01:08 14327808 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\ca898d942e4d85af4c3d5f14a77c359a\PresentationFramework.ni.dll
+ 2010-06-11 01:07 . 2010-06-11 01:07 12216320 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\ba8f917fd89d7afa8885c2a326379f03\PresentationCore.ni.dll
+ 2010-05-06 13:56 . 2010-05-06 13:56 11078144 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\ieframe.dll
+ 2009-12-22 13:01 . 2009-12-22 13:01 11070976 c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\ieframe.dll
.
-- Snapshot per reimpostare la data corrente --
.
((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* i valori vuoti & legittimi/default non sono visualizzati.
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-09-07 2838912]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-04-27 7573504]
"RoxWatchTray"="c:\programmi\File comuni\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe" [2009-07-08 236016]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
2008-04-14 02:14 15360 ------w- c:\windows\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\H/PC Connection Agent]
2006-06-21 01:52 1211176 ----a-w- c:\programmi\Microsoft ActiveSync\wcescomm.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
2006-04-27 16:47 7573504 ----a-w- c:\windows\system32\nvcpl.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002ASync]
2004-09-07 20:00 455168 -c--a-w- c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SearchSettings]
2010-10-22 15:47 524288 ----a-w- c:\programmi\File comuni\Spigot\Search Settings\SearchSettings.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TomTomHOME.exe]
2009-11-13 11:31 247144 ----a-w- c:\programmi\TomTom HOME 2\TomTomHOMERunner.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"CCALib8"=2 (0x2)
"Adobe LM Service"=3 (0x3)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Programmi\\Acer Zone\\Picture Slide DVD\\Component\\CLSLDVD.exe"=
"c:\\Programmi\\Acer Zone\\Plug and Record\\Component\\ARAWP.exe"=
"c:\\Programmi\\Acer Zone\\Plug and Record\\Component\\DVAX2Process.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Programmi\\Microsoft Office\\OFFICE11\\FRONTPG.EXE"=
"c:\\Programmi\\Messenger\\msmsgs.exe"=
"c:\programmi\Microsoft ActiveSync\rapimgr.exe"= c:\programmi\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager
"c:\programmi\Microsoft ActiveSync\wcescomm.exe"= c:\programmi\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager
"c:\programmi\Microsoft ActiveSync\WCESMgr.exe"= c:\programmi\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application
"c:\\Programmi\\SonicWALL\\SonicWALL Global VPN Client\\SWGVpnClient.exe"=
"c:\\Programmi\\File comuni\\Nokia\\Service Layer\\A\\nsl_host_process.exe"=
"c:\\Programmi\\Nokia\\Nokia Software Updater\\nsu_ui_client.exe"=
"c:\\Programmi\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Programmi\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Programmi\\eMule\\emule.exe"=
"c:\\Programmi\\Java\\jre6\\bin\\javaw.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"26675:TCP"= 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service
"3389:TCP"= 3389:TCP:*:Disabled:Remote Desktop
"65533:TCP"= 65533:TCP:Services
"52344:TCP"= 52344:TCP:Services
"2479:TCP"= 2479:TCP:Services
"6031:TCP"= 6031:TCP:Services
"3246:TCP"= 3246:TCP:Services
"2865:TCP"= 2865:TCP:Services
"4348:TCP"= 4348:TCP:Services
"7193:TCP"= 7193:TCP:Services
"3647:TCP"= 3647:TCP:Services

R0 d347bus;d347bus;c:\windows\system32\drivers\d347bus.sys [15/01/2007 7.08.40 155136]
R0 d347prt;d347prt;c:\windows\system32\drivers\d347prt.sys [15/01/2007 7.08.40 5248]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [19/08/2010 18.28.06 165584]
R1 RCFOX;SonicWALL IPsec Driver;c:\windows\system32\drivers\RCFOX.SYS [12/03/2009 19.17.53 91136]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [19/08/2010 18.28.06 17744]
R2 RapidPort;RapidPort;c:\windows\system32\drivers\CAPLPTN.SYS [31/07/2008 13.28.26 22912]
R2 TomTomHOMEService;TomTomHOMEService;c:\programmi\TomTom HOME 2\TomTomHOMEService.exe [13/11/2009 12.31.14 92008]
R3 LVHybrid;LVHybrid service;c:\windows\system32\drivers\LVHybrid.sys [15/05/2006 19.04.00 892032]
S3 NDISKIO;NDISKIO;\??\c:\docume~1\Emilio\IMPOST~1\Temp\3ee74ac1.nmc\nse\bin\ndiskio.sys --> c:\docume~1\Emilio\IMPOST~1\Temp\3ee74ac1.nmc\nse\bin\ndiskio.sys [?]
S3 rcvpn;SonicWALL VPN Adapter;c:\windows\system32\drivers\rcvpn.sys [12/03/2009 19.15.53 23180]
S3 UnhookMBRS;UnhookMBRS;\??\c:\docume~1\Emilio\IMPOST~1\Temp\3ee74ac1.nmc\nse\bin\unhookmbrs.sys --> c:\docume~1\Emilio\IMPOST~1\Temp\3ee74ac1.nmc\nse\bin\unhookmbrs.sys [?]
S4 Application Updater;Application Updater;"c:\programmi\Application Updater\ApplicationUpdater.exe" --> c:\programmi\Application Updater\ApplicationUpdater.exe [?]
S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [11/12/2009 18.50.48 691696]
.
Contenuto della cartella 'Scheduled Tasks'

2010-12-02 c:\windows\Tasks\OGADaily.job
- c:\windows\system32\OGAVerify.exe [2008-12-31 16:04]

2010-12-02 c:\windows\Tasks\OGALogon.job
- c:\windows\system32\OGAVerify.exe [2008-12-31 16:04]
.
.
------- Scansione supplementare -------
.
uStart Page = hxxp://global.acer.com
DPF: Microsoft XML Parser for Java - file:///C:/WINDOWS/Java/classes/xmldso.cab
FF - ProfilePath -
.
- - - - CHIAVI ORFANE RIMOSSE - - - -

MSConfigStartUp-IncrediMail - c:\programmi\IncrediMail\bin\IncMail.exe
MSConfigStartUp-UfSeAgnt - c:\programmi\Trend Micro\Internet Security\UfSeAgnt.exe

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-12-02 18:57
Windows 5.1.2600 Service Pack 3 NTFS

scansione processi nascosti ...

scansione entrate autostart nascoste ...

Scansione files nascosti ...

Scansione completata con successo
Files nascosti: 0

**************************************************************************
.
--------------------- CHIAVI DI REGISTRO BLOCCATE ---------------------

[HKEY_USERS\S-1-5-21-1360035731-1467615003-4010307876-1005\Software\Microsoft\Windows Mobile Disc\W*i*n*d*o*w*s* *M*o*b*i*l*e*"!\CriticalAppInstall\ActiveSync]
"Name"="ActiveSync"
"DisplayName"="Microsoft ActiveSync"
"Param1"="ActiveSync"
"Type"="wellknown"
"Order"=dword:00000001
"State"=dword:0000000b

[HKEY_USERS\S-1-5-21-1360035731-1467615003-4010307876-1005\Software\Microsoft\Windows Mobile Disc\W*i*n*d*o*w*s* *M*o*b*i*l*e*"!\CriticalAppInstall\IESettings]
"Name"="IESettings"
"Type"="IESettings"
"Order"=dword:00000004
"State"=dword:0000000b

[HKEY_USERS\S-1-5-21-1360035731-1467615003-4010307876-1005\Software\Microsoft\Windows Mobile Disc\W*i*n*d*o*w*s* *M*o*b*i*l*e*"!\CriticalAppInstall\MediaFiles]
"Name"="MediaFiles"
"Type"="MediaFiles"
"Order"=dword:00000003
"State"=dword:0000000b

[HKEY_USERS\S-1-5-21-1360035731-1467615003-4010307876-1005\Software\Microsoft\Windows Mobile Disc\W*i*n*d*o*w*s* *M*o*b*i*l*e*"!\CriticalAppInstall\NPW]
"Name"="NPW"
"Param1"="NPW"
"Type"="wellknown"
"Order"=dword:00000002
"State"=dword:0000000b

[HKEY_USERS\S-1-5-21-1360035731-1467615003-4010307876-1005\Software\Microsoft\Windows Mobile Disc\W*i*n*d*o*w*s* *M*o*b*i*l*e*"!\CriticalAppInstall\Outlook]
"Name"="Outlook"
"DisplayName"="Microsoft Outlook"
"Param1"="Outlook"
"Type"="wellknown"
"Order"=dword:00000000
"State"=dword:00000020

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"

[HKEY_LOCAL_MACHINE\software\DeterministicNetworks\DNE\Parameters]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,79,00,73,00,\

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\h–€|ÿÿÿÿ¤•€|ù•9~*]
"0140710900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"
"0140110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\€–€|ÿÿÿÿÀ•€|ù•9~*]
"0140110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"
"0140710900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"
.
Ora fine scansione: 2010-12-02 19:00:30
ComboFix-quarantined-files.txt 2010-12-02 18:00
ComboFix2.txt 2009-12-21 19:02
ComboFix3.txt 2009-12-13 15:00

Pre-Run: 24.976.506.880 byte disponibili
Post-Run: 25.046.671.360 byte disponibili

WindowsXP-KB310994-SP2-Pro-BootDisk-ITA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Windows XP Media Center Edition" /noexecute=optin /fastdetect

- - End Of File - - 9C1385EB5A5C1402E6DF98174FEB9418

Torna in alto

emiliorc

Inviato: Thursday, December 02, 2010 7:10:51 PM

Rank: AiutAmico

Iscritto dal : 12/11/2009
Posts: 68

Mi sa che ho risposto si alla console di ripristino ho fatto qualche danno?

Torna in alto

r16

Inviato: Thursday, December 02, 2010 10:35:19 PM

Rank: AiutAmico

Iscritto dal : 8/7/2007
Posts: 11,016

emiliorc ha scritto:

Mi sa che ho risposto si alla console di ripristino ho fatto qualche danno?

No, non hai fatto danni.
Hai solo installato la console di ripristino di emergenza.

Apri un file di testo con il Block Note sul Desktop
Ci incolli il codice che vedi qui sotto, e salvi il file di testo obbligatoriamente con il nome CFScript.txt

Code:

KillAll::
File::
c:\programmi\File comuni\Spigot\Search Settings\SearchSettings.exe
Folder::
c:\programmi\File comuni\Spigot
c:\programmi\File comuni\Spigot\Search Settings
c:\programmi\Application Updater
Registry::
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SearchSettings]
Driver::
NDISKIO
UnhookMBRS
Application Updater
RegLock::
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]

e trascinalo sull'icona di ComboFix.
Attendi la fine dei lavori, senza toccare tastiera, mouse o altro.
Posta il log aggiornato di combofix

Torna in alto

emiliorc

Inviato: Friday, December 03, 2010 4:20:41 PM

Rank: AiutAmico

Iscritto dal : 12/11/2009
Posts: 68

ciao ecco cosa e' uscito:
ComboFix 10-12-02.06 - Emilio 03/12/2010 16.10.10.6.2 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.39.1040.18.1006.417 [GMT 1:00]
Eseguito da: c:\documents and settings\Emilio\Desktop\ComboFix.exe
Opzioni usate :: c:\documents and settings\Emilio\Desktop\CFScript.txt
AV: avast! Antivirus *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}

FILE ::
"c:\programmi\File comuni\Spigot\Search Settings\SearchSettings.exe"
.

((((((((((((((((((((((((((((((((((((( Altre eliminazioni )))))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\programmi\File comuni\Spigot
c:\programmi\File comuni\Spigot\Search Settings\config.ini
c:\programmi\File comuni\Spigot\Search Settings\SearchSettings.exe
c:\programmi\File comuni\Spigot\Search Settings\yahoo_ff.xml
c:\programmi\File comuni\Spigot\Search Settings\yahoo_ie.xml
c:\programmi\File comuni\Spigot\wtxpcom\chrome.manifest
c:\programmi\File comuni\Spigot\wtxpcom\components\IFBHOHelperWidgiToolbar.xpt
c:\programmi\File comuni\Spigot\wtxpcom\components\IFBHOWidgiToolbar.xpt
c:\programmi\File comuni\Spigot\wtxpcom\install.rdf

.
((((((((((((((((((((((((((((((((((((((( Driver/Servizi )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_APPLICATION_UPDATER
-------\Legacy_NDISKIO
-------\Legacy_UNHOOKMBRS
-------\Service_Application Updater
-------\Service_NDISKIO
-------\Service_UnhookMBRS

((((((((((((((((((((((((( Files Creati Da 2010-11-03 al 2010-12-03 )))))))))))))))))))))))))))))))))))
.

2010-12-02 18:00 . 2010-12-02 18:00 -------- d-sh--w- c:\documents and settings\Administrator\IETldCache
2010-12-01 15:02 . 2010-12-01 15:02 -------- d-----w- c:\documents and settings\Emilio\Dati applicazioni\InstallShield
2010-12-01 15:02 . 2010-12-01 15:02 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\InstallShield
2010-12-01 15:02 . 2010-12-01 15:02 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Sonic
2010-12-01 15:00 . 2010-12-01 15:02 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Roxio
2010-12-01 15:00 . 2010-12-01 15:01 -------- d-----w- c:\programmi\Roxio
2010-12-01 15:00 . 2010-12-01 15:00 -------- d-----w- c:\programmi\File comuni\Sonic Shared
2010-11-30 19:20 . 2010-12-01 15:14 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Research In Motion
2010-11-30 19:16 . 2010-12-03 14:58 256 ----a-w- c:\windows\system32\pool.bin
2010-11-30 19:16 . 2010-12-01 15:14 -------- d-----w- c:\documents and settings\Emilio\Dati applicazioni\Research In Motion
2010-11-30 18:45 . 2009-01-09 16:18 27136 ----a-r- c:\windows\system32\drivers\RimSerial.sys
2010-11-30 18:44 . 2010-12-01 15:01 -------- d-----w- c:\programmi\File comuni\Roxio Shared
2010-11-30 18:44 . 2010-11-30 18:44 -------- d-----w- c:\programmi\File comuni\Research In Motion
2010-11-30 18:44 . 2010-12-01 15:14 -------- d-----w- c:\programmi\Research In Motion
2010-11-12 13:41 . 2010-11-12 13:41 -------- d-----w- c:\programmi\School

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-11-29 16:42 . 2009-12-12 22:34 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-11-29 16:42 . 2009-12-12 22:34 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-10-01 13:20 . 2010-10-08 12:16 307200 ----a-w- c:\windows\system32\TubeFinder.exe
2010-09-07 15:12 . 2010-08-19 17:27 38848 ----a-w- c:\windows\avastSS.scr
2010-09-07 15:11 . 2010-08-19 17:27 167592 ----a-w- c:\windows\system32\aswBoot.exe
2010-09-07 14:52 . 2010-08-19 17:28 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-09-07 14:52 . 2010-08-19 17:28 165584 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-09-07 14:47 . 2010-08-19 17:28 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-09-07 14:47 . 2010-08-19 17:28 100176 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2010-09-07 14:47 . 2010-08-19 17:28 94544 ----a-w- c:\windows\system32\drivers\aswmon.sys
2010-09-07 14:47 . 2010-08-19 17:28 17744 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-09-07 14:46 . 2010-08-19 17:28 28880 ----a-w- c:\windows\system32\drivers\aavmker4.sys
.

((((((((((((((((((((((((((((( SnapShot_2010-12-02_17.58.03 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-12-03 15:16 . 2010-12-03 15:16 16384 c:\windows\temp\Perflib_Perfdata_5fc.dat
.
((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* i valori vuoti & legittimi/default non sono visualizzati.
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-09-07 2838912]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-04-27 7573504]
"RoxWatchTray"="c:\programmi\File comuni\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe" [2009-07-08 236016]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
2008-04-14 02:14 15360 ------w- c:\windows\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\H/PC Connection Agent]
2006-06-21 01:52 1211176 ----a-w- c:\programmi\Microsoft ActiveSync\wcescomm.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
2006-04-27 16:47 7573504 ----a-w- c:\windows\system32\nvcpl.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002ASync]
2004-09-07 20:00 455168 -c--a-w- c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TomTomHOME.exe]
2009-11-13 11:31 247144 ----a-w- c:\programmi\TomTom HOME 2\TomTomHOMERunner.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"CCALib8"=2 (0x2)
"Adobe LM Service"=3 (0x3)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Programmi\\Acer Zone\\Picture Slide DVD\\Component\\CLSLDVD.exe"=
"c:\\Programmi\\Acer Zone\\Plug and Record\\Component\\ARAWP.exe"=
"c:\\Programmi\\Acer Zone\\Plug and Record\\Component\\DVAX2Process.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Programmi\\Microsoft Office\\OFFICE11\\FRONTPG.EXE"=
"c:\\Programmi\\Messenger\\msmsgs.exe"=
"c:\programmi\Microsoft ActiveSync\rapimgr.exe"= c:\programmi\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager
"c:\programmi\Microsoft ActiveSync\wcescomm.exe"= c:\programmi\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager
"c:\programmi\Microsoft ActiveSync\WCESMgr.exe"= c:\programmi\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application
"c:\\Programmi\\SonicWALL\\SonicWALL Global VPN Client\\SWGVpnClient.exe"=
"c:\\Programmi\\File comuni\\Nokia\\Service Layer\\A\\nsl_host_process.exe"=
"c:\\Programmi\\Nokia\\Nokia Software Updater\\nsu_ui_client.exe"=
"c:\\Programmi\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Programmi\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Programmi\\eMule\\emule.exe"=
"c:\\Programmi\\Java\\jre6\\bin\\javaw.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"26675:TCP"= 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service
"3389:TCP"= 3389:TCP:*:Disabled:Remote Desktop
"65533:TCP"= 65533:TCP:Services
"52344:TCP"= 52344:TCP:Services
"2479:TCP"= 2479:TCP:Services
"6031:TCP"= 6031:TCP:Services
"3246:TCP"= 3246:TCP:Services
"2865:TCP"= 2865:TCP:Services
"4348:TCP"= 4348:TCP:Services
"7193:TCP"= 7193:TCP:Services
"3647:TCP"= 3647:TCP:Services

R0 d347bus;d347bus;c:\windows\system32\drivers\d347bus.sys [15/01/2007 7.08.40 155136]
R0 d347prt;d347prt;c:\windows\system32\drivers\d347prt.sys [15/01/2007 7.08.40 5248]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [19/08/2010 18.28.06 165584]
R1 RCFOX;SonicWALL IPsec Driver;c:\windows\system32\drivers\RCFOX.SYS [12/03/2009 19.17.53 91136]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [19/08/2010 18.28.06 17744]
R2 RapidPort;RapidPort;c:\windows\system32\drivers\CAPLPTN.SYS [31/07/2008 13.28.26 22912]
R2 TomTomHOMEService;TomTomHOMEService;c:\programmi\TomTom HOME 2\TomTomHOMEService.exe [13/11/2009 12.31.14 92008]
R3 LVHybrid;LVHybrid service;c:\windows\system32\drivers\LVHybrid.sys [15/05/2006 19.04.00 892032]
S3 rcvpn;SonicWALL VPN Adapter;c:\windows\system32\drivers\rcvpn.sys [12/03/2009 19.15.53 23180]
S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [11/12/2009 18.50.48 691696]
.
Contenuto della cartella 'Scheduled Tasks'

2010-12-02 c:\windows\Tasks\OGADaily.job
- c:\windows\system32\OGAVerify.exe [2008-12-31 16:04]

2010-12-03 c:\windows\Tasks\OGALogon.job
- c:\windows\system32\OGAVerify.exe [2008-12-31 16:04]
.
.
------- Scansione supplementare -------
.
uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
uStart Page = hxxp://www.google.it/
uInternet Settings,ProxyOverride = 127.0.0.1;*.local
uSearchURL,(Default) = hxxp://it.rd.yahoo.com/customize/ycomp/defaults/su/*http://it.yahoo.com
DPF: Microsoft XML Parser for Java - file:///C:/WINDOWS/Java/classes/xmldso.cab
FF - ProfilePath - c:\documents and settings\Emilio\Dati applicazioni\Mozilla\Firefox\Profiles\ee00ssmv.default\
FF - prefs.js: browser.search.selectedEngine - MyStart Cerca
FF - prefs.js: browser.startup.homepage - hxxp://www.google.it/
FF - prefs.js: keyword.URL - hxxp://mystart.incredimail.com/?loc=ff_address_bar_im2_test_v2&search=
FF - plugin: c:\programmi\File comuni\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll
FF - Extension: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\programmi\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Extension: Java Console: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} - c:\programmi\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}
FF - Extension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Extension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\documents and settings\Emilio\Dati applicazioni\Mozilla\Firefox\Profiles\ee00ssmv.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-12-03 16:18
Windows 5.1.2600 Service Pack 3 NTFS

scansione processi nascosti ...

scansione entrate autostart nascoste ...

Scansione files nascosti ...

Scansione completata con successo
Files nascosti: 0

**************************************************************************
.
--------------------- CHIAVI DI REGISTRO BLOCCATE ---------------------

[HKEY_USERS\S-1-5-21-1360035731-1467615003-4010307876-1005\Software\Microsoft\Windows Mobile Disc\W*i*n*d*o*w*s* *M*o*b*i*l*e*"!\CriticalAppInstall\ActiveSync]
"Name"="ActiveSync"
"DisplayName"="Microsoft ActiveSync"
"Param1"="ActiveSync"
"Type"="wellknown"
"Order"=dword:00000001
"State"=dword:0000000b

[HKEY_USERS\S-1-5-21-1360035731-1467615003-4010307876-1005\Software\Microsoft\Windows Mobile Disc\W*i*n*d*o*w*s* *M*o*b*i*l*e*"!\CriticalAppInstall\IESettings]
"Name"="IESettings"
"Type"="IESettings"
"Order"=dword:00000004
"State"=dword:0000000b

[HKEY_USERS\S-1-5-21-1360035731-1467615003-4010307876-1005\Software\Microsoft\Windows Mobile Disc\W*i*n*d*o*w*s* *M*o*b*i*l*e*"!\CriticalAppInstall\MediaFiles]
"Name"="MediaFiles"
"Type"="MediaFiles"
"Order"=dword:00000003
"State"=dword:0000000b

[HKEY_USERS\S-1-5-21-1360035731-1467615003-4010307876-1005\Software\Microsoft\Windows Mobile Disc\W*i*n*d*o*w*s* *M*o*b*i*l*e*"!\CriticalAppInstall\NPW]
"Name"="NPW"
"Param1"="NPW"
"Type"="wellknown"
"Order"=dword:00000002
"State"=dword:0000000b

[HKEY_USERS\S-1-5-21-1360035731-1467615003-4010307876-1005\Software\Microsoft\Windows Mobile Disc\W*i*n*d*o*w*s* *M*o*b*i*l*e*"!\CriticalAppInstall\Outlook]
"Name"="Outlook"
"DisplayName"="Microsoft Outlook"
"Param1"="Outlook"
"Type"="wellknown"
"Order"=dword:00000000
"State"=dword:00000020

[HKEY_LOCAL_MACHINE\software\DeterministicNetworks\DNE\Parameters]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,79,00,73,00,\

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\h–€|ÿÿÿÿ¤•€|ù•9~*]
"0140710900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"
"0140110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\€–€|ÿÿÿÿÀ•€|ù•9~*]
"0140110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"
"0140710900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"
.
--------------------- Dlls caricate dai processi in esecuzione ---------------------

- - - - - - - > 'explorer.exe'(3636)
c:\windows\system32\WININET.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Altri processi in esecuzione ------------------------
.
c:\programmi\Alwil Software\Avast5\AvastSvc.exe
c:\acer\Empowering Technology\ePerformance\MemCheck.exe
c:\programmi\Intel\IntelDH\CCU\AlertService.exe
c:\windows\eHome\ehRecvr.exe
c:\windows\eHome\ehSched.exe
c:\programmi\Intel\Intel Matrix Storage Manager\Iaantmon.exe
c:\programmi\Java\jre6\bin\jqs.exe
c:\programmi\File comuni\LightScribe\LSSrvc.exe
c:\programmi\File comuni\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\windows\system32\nvsvc32.exe
c:\windows\system32\CAPRPCSK.EXE
c:\windows\system32\spool\drivers\w32x86\3\CAPPSWK.EXE
c:\progra~1\MI3AA1~1\rapimgr.exe
c:\windows\ehome\mcrdsvc.exe
c:\programmi\Intel\IntelDH\Intel(R) Quick Resume Technology Drivers\Elservice.exe
c:\programmi\Intel\IntelDH\Intel Media Server\Media Server\bin\ISSM.exe
c:\programmi\Intel\IntelDH\Intel Media Server\Shells\MCLServiceATL.exe
c:\windows\system32\dllhost.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Ora fine scansione: 2010-12-03 16:20:19 - Il pc è stato riavviato
ComboFix-quarantined-files.txt 2010-12-03 15:20
ComboFix2.txt 2010-12-02 18:00
ComboFix3.txt 2009-12-21 19:02
ComboFix4.txt 2009-12-13 15:00

Pre-Run: 25.069.375.488 byte disponibili
Post-Run: 24.851.542.016 byte disponibili
- - End Of File - - D058A0C63279AB7D87743A241044871F

grazie

Torna in alto

r16

Inviato: Friday, December 03, 2010 6:17:23 PM

Rank: AiutAmico

Iscritto dal : 8/7/2007
Posts: 11,016

Ciao.
Disattiva il ripristino configurazione di sistema, e tienilo disattivato, fino alla soluzione del problema http://guide.aiutamici.com/guide?C1=7&C2=68&ID=80121

Per eliminare i vari Tooll scaricati: (Combofix)
Scarica OTC by OldTimer sul desktop:
http://oldtimer.geekstogo.com/OTC.exe
doppio clic per eseguirlo
Clicca su CleanUp.
Ti chiederà di riavviare il pc.
Clicca sì.

Scarica TFC by OldTimer sul desktop (serve per ripulire le cartelle temporanee)
http://oldtimer.geekstogo.com/TFC.exe
chiudi tutti i programmi
avvia TFC, clicca su "start"
al termine della scansione ti chiederà il riavvio, dai ok.

Dai una pulita (registro compreso)con CCleaner http://www.aiutamici.com/software?ID=11223
Poi:
Provvedi a svuotare del suo contenuto la cartella Prefetch :
clicca su Risorse del Computer
clicca su Disco locale C:
cerca, all’interno delle cartelle che saranno visualizzate la cartella Windows, aprila ed, al suo interno, cerca la cartella Prefetch, la apri ed elimina tutte le voci conservate al suo interno ( non eliminare la cartella)
SVUOTA IL CESTINO.

Poi:
Lancia Hijackthis e pulisci gli ADS in questo modo:(esclusivamente, su partizioni in NTFS):
clicca sulla voce Open the misc tool section
clicca su Open ads spy .
togli la spunta alla voce Quick scan (windows base folder only)
clicca su Scan.
Aspetta pazientemente la fine della scansione.
se venissero rilevati ADS, spunta tutte le caselline e clicca su Remove selected

Fai uno ScanDisk, e una deframmentazione del HD.
Riattiva il ripristino configurazione di sistema e, se tutto è a posto, creane uno nuovo.

Il pc, non dovrebbe più "impallarsi".

Torna in alto

Utenti presenti in questo topic

Guest

Aiutamici Forum » FORUM - Istruzioni e Guide » Sicurezza VIRUS » aiuto!!

Salta al Forum

Aggiunta nuovi Topic disabilitata in questo forum.
Risposte disabilitate in questo forum.
Eliminazione tuoi Post disabilitata in questo forum.
Modifica dei tuoi post disabilitata in questo forum.
Creazione Sondaggi disabilitata in questo forum.
Voto ai sondaggi disabilitato in questo forum.

Invia topic via Email

RSS Feed

Watch this topic

Stampa topic

Normale

Threaded