Screenbeat Napisano 26 Marca 2009 Zgłoś Napisano 26 Marca 2009 (edytowane) Witam, Po kilku godzinach pracy na komputerze wlasnie dzieje sie cos takiego, chyba to zaden wirus/spyware bo skanowalem kompa combofixem no i avp wlasnie 8O Procesu nie mozna zakonczyc 'operacja niedozwolona'. http://img148.imageshack.us/img148/4886/25376593.jpg Jakies pomysly? Athlon 5000+/2gb/WinXP Edytowane 26 Marca 2009 przez Screenbeat Cytuj Udostępnij tę odpowiedź Odnośnik do odpowiedzi Udostępnij na innych stronach More sharing options...
-talib- Napisano 27 Marca 2009 Zgłoś Napisano 27 Marca 2009 Mnie na inny proces troche pomógł format C 8O Też się pytałem.................. :) 8O Cytuj Udostępnij tę odpowiedź Odnośnik do odpowiedzi Udostępnij na innych stronach More sharing options...
Screenbeat Napisano 27 Marca 2009 Zgłoś Napisano 27 Marca 2009 (edytowane) » Naciśnij aby pokazać/ukryć tekst oznaczony jako spoiler « - "Log z hijackthis." Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 3:24:51 AM, on 03/27/2009 Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Google\Update\GoogleUpdate.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Razer\Krait\razerhid.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\WINDOWS\RTHDCPL.EXE C:\Program Files\Tlen.pl\tlen.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\PnkBstrA.exe C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe C:\Program Files\bin32\nSvcAppFlt.exe C:\Program Files\bin32\nSvcIp.exe C:\Program Files\Razer\Krait\razertra.exe C:\WINDOWS\system32\wbem\wmiapsrv.exe C:\Program Files\Razer\Krait\razerofa.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = L1cza R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\NEOSTR~1\SEARCH~1.DLL (file missing) O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [Krait] C:\Program Files\Razer\Krait\razerhid.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe" O4 - HKCU\..\Run: [Komunikator] C:\Program Files\Tlen.pl\tlen.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\RunOnce: [WiseStubReboot] MSIEXEC /quiet SKIP_PPU_DRIVER_INSTALL=1 /I "C:\Program Files\Common Files\Wise Installation Wizard\WISDD1865F0AD7340FBB23E1822E02396FF_9_09_0203.MSI" TRANSFORMS="C:\Program Files\Common Files\Wise Installation Wizard\WISDD1865F0AD7340FBB23E1822E02396FF_9_09_0203.MST" WISE_SETUP_EXE_PATH="c:\nvidia\winxp\182.08\is\PhysX_9.09.0203_SystemSoftware.exe" O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: Dodaj do listy blokowanych banerów - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm O9 - Extra button: Statystyki ochrony WWW - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O10 - Unknown file in Winsock LSP: c:\windows\system32\nvlsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\nvlsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\nvlsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\nvlsp.dll O17 - HKLM\System\CCS\Services\Tcpip\..\{7C2F544C-D52B-4047-A496-08C86EF43692}: NameServer = 194.204.159.1,194.204.152.34 O17 - HKLM\System\CCS\Services\Tcpip\..\{DD43F089-83A3-492D-A437-DC34DA96645B}: NameServer = 194.204.159.1,194.204.152.34 O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\bin32\nSvcAppFlt.exe O23 - Service: Us3uga Google Update (gupdate1c9a2bd82723a14) (gupdate1c9a2bd82723a14) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: ForceWare IP service (nSvcIp) - Unknown owner - C:\Program Files\bin32\nSvcIp.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- End of file - 6410 bytes na hijackithis.de po wklejeniu loga wyskakuje mi ze C:\Program Files\bin32\nSvcIp.exe C:\Program Files\bin32\nSvcAppFlt.exe Possibly nasty! According to our database this process runs normally in c:\programme\nvidia~1\bin\! Check if you know this process and arrange a viruscheck where required. ForceWare IP service No ale skanowalem kasperskym to i nic nie wykrylo. Edytowane 27 Marca 2009 przez Kolobos Cytuj Udostępnij tę odpowiedź Odnośnik do odpowiedzi Udostępnij na innych stronach More sharing options...
Kolobos Napisano 27 Marca 2009 Zgłoś Napisano 27 Marca 2009 (edytowane) Moze zmien antywirus na Comodo IS lub Avira. Logi dawaj w spoilerze! Do tego hjt jest zbedny, za to mozesz dac combofix. Edytowane 27 Marca 2009 przez Kolobos Cytuj Udostępnij tę odpowiedź Odnośnik do odpowiedzi Udostępnij na innych stronach More sharing options...
Screenbeat Napisano 27 Marca 2009 Zgłoś Napisano 27 Marca 2009 (edytowane) [spoiler=Combofix.] ComboFix 09-03-26.03 - PanDuzePE 2009-03-27 15:13:17.2 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.3.1250.48.1045.18.1919.1273 [GMT 1:00] Uruchomiony z: c:\documents and settings\PanDuzePE\Pulpit\ComboFix.exe AV: Kaspersky Internet Security *On-access scanning disabled* (Updated) FW: Kaspersky Internet Security *disabled* * Utworzono nowy punkt przywracania . ((((((((((((((((((((((((( Pliki utworzone od 2009-02-27 do 2009-03-27 ))))))))))))))))))))))))))))))) . 2009-03-27 03:24 . 2009-03-27 03:24 <DIR> d-------- c:\program files\Trend Micro 2009-03-26 10:25 . 2009-03-26 10:25 <DIR> d-------- c:\windows\system32\Futuremark 2009-03-26 10:25 . 2009-03-26 10:25 <DIR> d-------- c:\program files\Futuremark 2009-03-26 10:25 . 2004-10-25 20:02 21,664 --a------ c:\windows\system32\drivers\Entech.sys 2009-03-26 10:25 . 2001-11-19 18:05 3,972 --------- c:\windows\system32\drivers\PciBus.sys 2009-03-25 21:55 . 2009-03-26 10:33 <DIR> d-------- c:\program files\PowerStrip 2009-03-25 21:07 . 2009-03-25 21:07 <DIR> d-------- c:\windows\system32\xlive 2009-03-24 19:55 . 2009-03-24 19:55 <DIR> d-------- c:\program files\foobar2000 2009-03-24 19:55 . 2009-03-27 14:24 <DIR> d-------- c:\documents and settings\PanDuzePE\Dane aplikacji\foobar2000 2009-03-24 17:03 . 2009-03-24 17:03 <DIR> d-------- c:\documents and settings\PanDuzePE\WINDOWS 2009-03-24 00:38 . 2009-03-24 00:40 <DIR> d-------- c:\documents and settings\PanDuzePE\Dane aplikacji\Ice Age 2 2009-03-24 00:37 . 2009-03-25 21:25 107,888 --a------ c:\windows\system32\CmdLineExt.dll 2009-03-23 22:51 . 2009-03-23 22:52 1 --a------ C:\DXOkay.bin 2009-03-23 19:49 . 2009-03-23 23:57 <DIR> d-------- c:\program files\Poker Heaven 2009-03-23 13:23 . 2009-03-23 15:42 138,464 --a------ c:\windows\system32\drivers\PnkBstrK.sys 2009-03-23 13:23 . 2009-03-23 13:23 22,328 --a------ c:\documents and settings\PanDuzePE\Dane aplikacji\PnkBstrK.sys 2009-03-23 13:22 . 2009-03-23 13:22 682,280 --a------ c:\windows\system32\pbsvc.exe 2009-03-23 13:22 . 2009-03-23 15:42 111,928 --a------ c:\windows\system32\PnkBstrB.exe 2009-03-23 13:22 . 2009-03-23 13:22 66,872 --a------ c:\windows\system32\PnkBstrA.exe 2009-03-22 19:41 . 2009-03-22 19:41 <DIR> d--hs---- c:\documents and settings\elephant\IETldCache 2009-03-22 16:44 . 2009-03-22 16:44 <DIR> d-------- c:\program files\PostgreSQL 2009-03-22 16:44 . 2009-03-27 15:14 <DIR> d--h----- c:\documents and settings\elephant\Ustawienia lokalne 2009-03-22 16:44 . 2009-03-10 19:17 <DIR> d-------- c:\documents and settings\elephant\Ulubione 2009-03-22 16:44 . 2009-03-10 18:22 <DIR> d--h----- c:\documents and settings\elephant\Szablony 2009-03-22 16:44 . 2009-03-10 19:17 <DIR> d-------- c:\documents and settings\elephant\Pulpit 2009-03-22 16:44 . 2009-03-10 19:17 <DIR> d-------- c:\documents and settings\elephant\Moje dokumenty 2009-03-22 16:44 . 2009-03-10 19:17 <DIR> dr------- c:\documents and settings\elephant\Menu Start 2009-03-22 16:44 . 2009-03-10 19:17 <DIR> dr-h----- c:\documents and settings\elephant\Dane aplikacji 2009-03-22 16:44 . 2009-03-22 19:41 <DIR> d-------- c:\documents and settings\elephant 2009-03-22 12:48 . 2001-05-11 13:18 420,240 --a------ c:\windows\system32\mpg4c32.dll 2009-03-22 12:48 . 2001-05-16 17:54 309,616 --a------ c:\windows\system32\wmv8dmod.dll 2009-03-22 12:48 . 2001-03-26 04:41 245,760 --a------ c:\windows\system32\mp4sds32.ax 2009-03-22 12:28 . 2009-03-22 16:47 <DIR> d-------- c:\program files\PokerStrategy 2009-03-21 17:43 . 2009-03-21 17:43 <DIR> d-------- c:\program files\XP Codec Pack 2009-03-21 17:43 . 2008-07-09 10:05 421,888 --a------ c:\windows\system32\ac3filter.acm 2009-03-21 12:58 . 2009-03-21 12:58 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\Electronic Arts 2009-03-21 12:42 . 2009-03-21 12:42 <DIR> d-------- c:\windows\system32\AGEIA 2009-03-21 12:42 . 2009-03-21 12:42 <DIR> d-------- c:\program files\AGEIA Technologies 2009-03-20 15:49 . 2009-03-20 15:49 <DIR> d-------- c:\program files\SAGEM 2009-03-20 00:54 . 2009-03-20 00:54 <DIR> d--hs---- c:\documents and settings\PanDuzePE\IECompatCache 2009-03-20 00:53 . 2009-03-20 00:53 <DIR> d--hs---- c:\documents and settings\PanDuzePE\PrivacIE 2009-03-20 00:52 . 2009-03-20 00:52 <DIR> d--hs---- c:\documents and settings\PanDuzePE\IETldCache 2009-03-20 00:49 . 2009-03-20 00:49 <DIR> d-------- c:\windows\ie8updates 2009-03-20 00:47 . 2009-03-20 00:49 <DIR> d--h-c--- c:\windows\ie8 2009-03-20 00:46 . 2009-02-28 05:55 105,984 -----c--- c:\windows\system32\dllcache\iecompat.dll 2009-03-20 00:45 . 2009-03-20 00:45 <DIR> d-------- c:\program files\Windows Media Connect 2 2009-03-20 00:43 . 2009-03-23 13:22 <DIR> d-------- c:\windows\system32\LogFiles 2009-03-20 00:43 . 2009-03-20 00:44 <DIR> d-------- c:\windows\system32\drivers\UMDF 2009-03-18 19:55 . 2009-03-08 04:39 11,063,808 --a--c--- c:\windows\system32\dllcache\ieframe.dll 2009-03-18 19:55 . 2009-02-06 21:07 3,698,584 --a--c--- c:\windows\system32\dllcache\ieapfltr.dat 2009-03-18 19:55 . 2009-03-08 04:32 1,985,024 --a--c--- c:\windows\system32\dllcache\iertutil.dll 2009-03-18 19:55 . 2009-03-08 14:15 1,294,336 --a--c--- c:\windows\system32\dllcache\ieframe.dll.mui 2009-03-18 19:55 . 2009-03-08 04:32 594,432 --a--c--- c:\windows\system32\dllcache\msfeeds.dll 2009-03-18 19:55 . 2009-03-08 04:11 445,952 --a--c--- c:\windows\system32\dllcache\ieapfltr.dll 2009-03-18 19:55 . 2009-03-08 04:31 59,904 --a--c--- c:\windows\system32\dllcache\icardie.dll 2009-03-18 19:55 . 2009-03-08 04:31 55,296 --a--c--- c:\windows\system32\dllcache\msfeedsbs.dll 2009-03-18 19:55 . 2008-12-19 10:10 13,824 -----c--- c:\windows\system32\dllcache\ieudinit.exe 2009-03-18 19:54 . 2009-03-18 19:54 <DIR> d--hs---- c:\documents and settings\PanDuzePE\UserData 2009-03-18 19:43 . 2009-03-27 03:18 <DIR> d-------- C:\hands 2009-03-18 19:11 . 2009-03-27 03:21 <DIR> d-------- c:\program files\Poker Tracker V2 2009-03-18 19:11 . 2003-06-26 14:52 464,128 --a------ c:\windows\system32\csimxctl.ocx 2009-03-18 19:11 . 2003-06-17 14:54 87,280 --a------ c:\windows\system32\wsatrace.dll 2009-03-17 19:37 . 2009-03-20 00:52 <DIR> d-------- c:\windows\system32\pl-pl 2009-03-17 19:37 . 2009-03-17 19:37 <DIR> d-------- c:\windows\system32\pl 2009-03-17 19:37 . 2009-03-17 19:37 <DIR> d-------- c:\windows\system32\bits 2009-03-17 19:37 . 2009-03-17 19:37 <DIR> d-------- c:\windows\l2schemas 2009-03-17 19:35 . 2009-03-17 19:37 <DIR> d-------- c:\windows\ServicePackFiles 2009-03-17 19:24 . 2003-10-16 18:07 32,768 --a------ c:\windows\system32\WooDial2000.dll 2009-03-17 19:23 . 2003-12-08 11:53 70,688 --a------ c:\windows\system32\drivers\alcaudsl.sys 2009-03-17 19:23 . 2003-12-08 11:53 53,600 --a------ c:\windows\system32\drivers\alcan5wn.sys 2009-03-17 19:23 . 2003-12-08 11:53 5,606 --a------ c:\windows\system32\stci.dll 2009-03-17 19:23 . 2003-12-08 11:53 5,280 --a------ c:\windows\system32\drivers\alcawh.sys 2009-03-17 19:23 . 2003-12-08 11:53 3,968 --a------ c:\windows\system32\drivers\alcacr.sys 2009-03-17 19:22 . 2009-03-18 17:57 <DIR> d-------- c:\program files\Neostrada TP 2009-03-17 19:21 . 2009-03-17 19:21 <DIR> d--hs---- c:\windows\ftpcache 2009-03-14 20:25 . 2009-03-14 20:25 <DIR> d-------- c:\program files\xp-AntiSpy 2009-03-14 10:20 . 2009-03-26 01:59 <DIR> d-------- C:\Fraps 2009-03-14 10:17 . 2009-03-27 12:45 <DIR> d-a------ c:\documents and settings\All Users\Dane aplikacji\TEMP 2009-03-13 09:02 . 2009-03-13 09:02 <DIR> d-------- c:\program files\Common Files\Adobe 2009-03-12 11:56 . 2009-03-12 11:56 <DIR> d-------- c:\documents and settings\PanDuzePE\Dane aplikacji\Leadertech 2009-03-12 11:54 . 2008-05-30 14:19 507,400 --a------ c:\windows\system32\XAudio2_1.dll 2009-03-12 11:54 . 2008-05-30 14:18 238,088 --a------ c:\windows\system32\xactengine3_1.dll 2009-03-12 11:54 . 2008-05-30 14:17 65,032 --a------ c:\windows\system32\XAPOFX1_0.dll 2009-03-12 11:54 . 2008-05-30 14:17 25,608 --a------ c:\windows\system32\X3DAudio1_4.dll 2009-03-12 11:53 . 2009-03-12 11:53 <DIR> d-------- c:\windows\Logs 2009-03-12 11:53 . 2008-05-30 14:11 3,850,760 --a------ c:\windows\system32\D3DX9_38.dll 2009-03-12 11:53 . 2008-05-30 14:11 1,491,992 --a------ c:\windows\system32\D3DCompiler_38.dll 2009-03-12 11:53 . 2008-05-30 14:11 467,984 --a------ c:\windows\system32\d3dx10_38.dll 2009-03-12 11:42 . 2007-03-12 16:42 3,495,784 --a------ c:\windows\system32\d3dx9_33.dll 2009-03-12 11:40 . 2000-08-19 19:29 268,048 --a------ c:\windows\system32\dxtmeta2.dll 2009-03-12 10:07 . 2009-03-12 10:07 <DIR> d-------- c:\program files\Alcohol Soft 2009-03-12 10:04 . 2009-03-12 10:04 685,816 --a------ c:\windows\system32\drivers\sptd.sys 2009-03-12 03:50 . 2009-03-12 03:52 <DIR> d-------- c:\program files\Google 2009-03-12 03:50 . 2009-03-27 00:46 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\Google Updater 2009-03-12 03:36 . 2009-03-12 03:36 360,320 --a------ c:\windows\system32\drivers\TCPIP.SYS.ORIGINAL 2009-03-11 22:16 . 2008-04-14 18:20 221,184 --a------ c:\windows\system32\wmpns.dll 2009-03-11 20:06 . 2009-03-11 20:06 <DIR> d-------- c:\program files\Kaspersky Lab 2009-03-11 20:06 . 2009-03-27 09:49 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\Kaspersky Lab 2009-03-11 20:06 . 2009-03-27 14:59 3,544,608 --ahs---- c:\windows\system32\drivers\fidbox.dat 2009-03-11 20:06 . 2009-03-27 09:48 434,208 --ahs---- c:\windows\system32\drivers\fidbox2.dat 2009-03-11 20:06 . 2009-03-11 20:37 101,287 --a------ c:\windows\system32\drivers\klin.dat 2009-03-11 20:06 . 2009-03-11 20:37 89,601 --a------ c:\windows\system32\drivers\klick.dat 2009-03-11 20:06 . 2009-03-27 14:58 30,868 --ahs---- c:\windows\system32\drivers\fidbox.idx 2009-03-11 20:06 . 2009-03-27 09:48 3,612 --ahs---- c:\windows\system32\drivers\fidbox2.idx 2009-03-11 19:08 . 2009-03-11 19:08 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\Kaspersky Lab Setup Files 2009-03-11 07:57 . 2009-03-08 04:41 5,937,152 --a--c--- c:\windows\system32\dllcache\mshtml.dll 2009-03-11 07:57 . 2008-08-14 14:26 2,190,464 -----c--- c:\windows\system32\dllcache\ntoskrnl.exe 2009-03-11 07:57 . 2008-08-14 14:26 2,146,816 -----c--- c:\windows\system32\dllcache\ntkrnlmp.exe 2009-03-11 07:57 . 2008-08-14 14:26 2,067,328 -----c--- c:\windows\system32\dllcache\ntkrnlpa.exe 2009-03-11 07:57 . 2008-08-14 14:26 2,025,472 -----c--- c:\windows\system32\dllcache\ntkrpamp.exe 2009-03-11 07:57 . 2008-10-16 02:02 1,499,136 -----c--- c:\windows\system32\dllcache\shdocvw.dll 2009-03-11 07:57 . 2009-03-08 04:34 1,206,784 --a--c--- c:\windows\system32\dllcache\urlmon.dll 2009-03-11 07:57 . 2009-03-08 04:34 914,944 --a--c--- c:\windows\system32\dllcache\wininet.dll 2009-03-11 07:57 . 2008-06-14 18:36 273,024 --------- c:\windows\system32\drivers\bthport.sys 2009-03-11 07:57 . 2008-06-14 18:36 273,024 -----c--- c:\windows\system32\dllcache\bthport.sys 2009-03-11 07:56 . 2008-05-08 15:02 203,136 -----c--- c:\windows\system32\dllcache\rmcast.sys 2009-03-11 07:55 . 2008-04-11 20:06 691,712 -----c--- c:\windows\system32\dllcache\inetcomm.dll 2009-03-11 07:55 . 2008-10-24 12:21 455,296 -----c--- c:\windows\system32\dllcache\mrxsmb.sys 2009-03-11 07:55 . 2008-10-15 17:36 337,408 -----c--- c:\windows\system32\dllcache\netapi32.dll 2009-03-11 07:55 . 2008-12-11 11:57 333,952 -----c--- c:\windows\system32\dllcache\srv.sys 2009-03-11 07:52 . 2009-03-20 00:49 <DIR> d--h----- c:\windows\$hf_mig$ 2009-03-11 00:09 . 2009-03-11 00:09 <DIR> d-------- c:\program files\Teamspeak2_RC2 2009-03-11 00:09 . 2009-03-11 00:09 <DIR> d-------- c:\documents and settings\PanDuzePE\Dane aplikacji\teamspeak2 2009-03-11 00:09 . 2009-03-11 00:09 34,064 --a------ c:\windows\system32\lhacm.acm 2009-03-10 22:24 . 2009-03-27 12:44 <DIR> d-------- c:\documents and settings\PanDuzePE\Dane aplikacji\Azureus . (((((((((((((((((((((((((((((((((((((((( Sekcja Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-03-26 09:25 --------- d--h--w c:\program files\InstallShield Installation Information 2009-03-23 18:32 --------- d-----w c:\documents and settings\PanDuzePE\Dane aplikacji\Tlen.pl 2009-03-23 14:18 --------- d-----w c:\program files\Tlen.pl 2009-03-22 10:08 361,600 ----a-w c:\windows\system32\drivers\tcpip.sys 2009-03-18 17:37 --------- d-----w c:\program files\Common Files\InstallShield 2009-03-14 06:37 0 ----a-w c:\program files\FirstPacketPrograms.txt 2009-03-11 19:37 33,808 ----a-w c:\windows\system32\drivers\klbg.sys 2009-03-10 17:52 410,984 ----a-w c:\windows\system32\deploytk.dll 2009-03-10 17:52 --------- d-----w c:\program files\Java 2009-03-10 17:45 --------- d-----w c:\documents and settings\All Users\Dane aplikacji\Tlen.pl 2009-03-10 17:44 --------- d-----w c:\program files\Valve 2009-03-10 17:43 --------- d-----w c:\program files\Razer 2009-03-10 17:41 --------- d-----w c:\program files\HD Tune 2009-03-10 17:40 --------- d-----w c:\program files\EuroSuper Poker 2009-03-10 17:36 --------- d-----w c:\program files\Realtek 2009-03-10 17:32 --------- d-----w c:\program files\profile 2009-03-10 17:32 --------- d-----w c:\program files\log 2009-03-10 17:32 --------- d-----w c:\program files\bin32 2009-03-10 17:30 --------- d-----w c:\program files\AMD 2009-03-10 17:30 --------- d-----w c:\documents and settings\PanDuzePE\Dane aplikacji\InstallShield 2009-03-10 17:25 --------- d-----w c:\program files\microsoft frontpage 2009-03-10 17:24 --------- d-----w c:\program files\Usługi online 2009-03-08 03:34 914,944 ----a-w c:\windows\system32\wininet.dll 2009-03-08 03:34 43,008 ----a-w c:\windows\system32\licmgr10.dll 2009-03-08 03:33 420,352 ----a-w c:\windows\system32\vbscript.dll 2009-03-08 03:33 18,944 ----a-w c:\windows\system32\corpol.dll 2009-03-08 03:32 72,704 ----a-w c:\windows\system32\admparse.dll 2009-03-08 03:32 71,680 ----a-w c:\windows\system32\iesetup.dll 2009-03-08 03:31 48,128 ----a-w c:\windows\system32\mshtmler.dll 2009-03-08 03:31 45,568 ----a-w c:\windows\system32\mshta.exe 2009-03-08 03:31 34,816 ----a-w c:\windows\system32\imgutil.dll 2009-03-08 03:22 156,160 ----a-w c:\windows\system32\msls31.dll 2009-02-16 22:17 453,152 ----a-w c:\windows\system32\NVUNINST.EXE 2009-02-09 14:07 1,847,040 ----a-w c:\windows\system32\win32k.sys 2009-01-07 17:21 26,144 ----a-w c:\windows\system32\spupdsvc.exe 2009-01-07 17:20 265,720 ----a-w c:\windows\system32\msdbg2.dll 2009-01-07 17:20 26,112 ----a-w c:\windows\system32\idndl.dll 2009-01-07 17:20 24,576 ----a-w c:\windows\system32\nlsdl.dll 2009-01-07 17:20 23,552 ----a-w c:\windows\system32\normaliz.dll 2009-01-03 08:07 81,920 ----a-w c:\windows\system32\frapsvid.dll . ------- Sigcheck ------- 2008-06-20 11:44 360960 744e57c99232201ae98c49168b918f48 c:\windows\$hf_mig$\KB951748\SP2QFE\tcpip.sys 2008-06-20 12:51 361600 9aefa14bd6b182d61e3119fa5f436d3d c:\windows\$hf_mig$\KB951748\SP3GDR\tcpip.sys 2008-06-20 12:59 361600 ad978a1b783b5719720cff204b666c8e c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys 2009-03-14 20:26 360320 3adce4790f591bf160a94f6f08039577 c:\windows\$NtServicePackUninstall$\tcpip.sys 2008-04-13 20:20 361344 93ea8d04ec73a85db02eb8805988f733 c:\windows\$NtUninstallKB951748$\tcpip.sys 2004-08-03 22:14 359040 9f4b36614a0fc234525ba224957de55c c:\windows\$NtUninstallKB951748_0$\tcpip.sys 2009-03-22 11:08 361344 68f06fe0021b01e670af37b8c5964fdf c:\windows\ServicePackFiles\i386\tcpip.sys 2008-04-13 20:20 361344 93ea8d04ec73a85db02eb8805988f733 c:\windows\SoftwareDistribution\Download\bb44941ebc6c98c13a74d1f65de46494\tcpip.sys 2009-03-22 11:08 361600 cbeebeb899e31ef52b962cb31fc8ca5c c:\windows\system32\dllcache\tcpip.sys 2009-03-22 11:08 361600 cbeebeb899e31ef52b962cb31fc8ca5c c:\windows\system32\drivers\tcpip.sys . ((((((((((((((((((((((((((((( SnapShot@2009-03-19_10.53.46.09 ))))))))))))))))))))))))))))))))))))))))) . + 2009-03-25 20:08:39 53,248 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll + 2009-03-25 20:08:39 12,800 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll + 2009-03-25 20:08:39 473,600 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll + 2009-03-25 20:08:36 2,676,224 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2009-03-25 20:08:37 2,846,720 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2009-03-25 20:08:37 563,712 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2009-03-25 20:08:37 567,296 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2009-03-25 20:08:37 576,000 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2009-03-25 20:08:38 577,024 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2009-03-25 20:08:38 577,536 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2009-03-25 20:08:38 577,536 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2009-03-25 20:08:38 578,560 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2009-03-25 20:08:39 578,560 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2009-03-25 20:08:39 145,920 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll + 2009-03-25 20:08:39 159,232 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll + 2009-03-25 20:08:39 364,544 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll + 2009-03-25 20:08:39 178,176 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll + 2009-03-25 20:08:38 223,232 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll + 2009-03-22 11:33:13 68,608 ----a-w c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll + 2009-03-22 11:33:16 72,192 ----a-w c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll + 2009-03-22 11:33:16 4,308,992 ----a-w c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll + 2009-03-22 11:33:16 482,304 ----a-w c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll + 2009-03-22 11:33:15 2,878,976 ----a-w c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll + 2009-03-22 11:33:12 258,048 ----a-w c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll + 2009-03-22 11:33:12 114,176 ----a-w c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll + 2009-03-22 11:33:18 260,096 ----a-w c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll + 2009-03-22 11:33:14 5,025,792 ----a-w c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll + 2009-03-22 11:33:13 10,752 ----a-w c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll + 2009-03-22 11:33:12 503,808 ----a-w c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll + 2009-03-22 11:33:12 13,312 ----a-w c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll + 2009-03-22 11:33:15 8,192 ----a-w c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll + 2009-03-22 11:33:15 36,864 ----a-w c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll + 2009-03-22 11:33:16 5,632 ----a-w c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll + 2009-03-22 11:33:13 413,696 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll + 2009-03-22 11:33:13 36,864 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll + 2009-03-22 11:33:13 647,168 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll + 2009-03-22 11:33:13 73,728 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll + 2009-03-22 11:33:12 745,472 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll + 2009-03-22 11:33:19 110,592 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll + 2009-03-22 11:33:18 372,736 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll + 2009-03-22 11:33:12 28,672 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll + 2009-03-22 11:33:18 667,648 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll + 2009-03-22 11:33:19 5,632 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll + 2009-03-22 11:33:12 12,800 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll + 2009-03-22 11:33:12 32,768 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll + 2009-03-22 11:33:12 7,168 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll + 2009-03-22 11:33:17 110,592 ----a-w c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll + 2009-03-22 11:33:13 81,920 ----a-w c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll + 2009-03-22 11:33:17 389,120 ----a-w c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll + 2009-03-22 11:33:16 716,800 ----a-w c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll + 2009-03-22 11:33:12 884,736 ----a-w c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll + 2009-03-22 11:33:15 5,050,368 ----a-w c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll + 2009-03-22 11:33:14 188,416 ----a-w c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll + 2009-03-22 11:33:14 397,312 ----a-w c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll + 2009-03-22 11:33:14 81,920 ----a-w c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll + 2009-03-22 11:33:18 700,416 ----a-w c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll + 2009-03-22 11:33:17 368,640 ----a-w c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll + 2009-03-22 11:33:18 258,048 ----a-w c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll + 2009-03-22 11:33:17 299,008 ----a-w c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll + 2009-03-22 11:33:17 131,072 ----a-w c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll + 2009-03-22 11:33:13 258,048 ----a-w c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll + 2009-03-22 11:33:14 114,688 ----a-w c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll + 2009-03-22 11:33:18 835,584 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll + 2009-03-22 11:33:14 86,016 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll + 2009-03-22 11:33:14 823,296 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll + 2009-03-22 11:33:15 5,316,608 ----a-w c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll + 2009-03-22 11:33:15 2,035,712 ----a-w c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll + 2009-03-22 11:33:17 3,018,752 ----a-w c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll + 2009-03-22 12:06:52 26,624 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\879ccbfd13547d42b569a5e15e2af183\Accessibility.ni.dll + 2009-03-22 12:06:56 860,160 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\d211f9de68c36c4aa309c0c6dd49460a\AspNetMMCExt.ni.dll + 2009-03-22 12:06:57 237,568 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\0e017b8659f9db4088534847dbce0b97\CustomMarshalers.ni.dll + 2009-03-22 12:06:57 15,360 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\8b07f4110f9dca46952db9bb7eead45c\dfsvc.ni.exe + 2009-03-22 12:06:59 880,640 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\c87fe43f34aafa4aafda09574016c9a9\Microsoft.Build.Engine.ni.dll + 2009-03-22 12:07:00 81,920 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\c1bbbc661f21d14a9c07a044afdbfecd\Microsoft.Build.Framework.ni.dll + 2009-03-22 12:07:04 1,691,648 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\ac2fd41bc29b82429727fdcbbb04f628\Microsoft.Build.Tasks.ni.dll + 2009-03-22 12:07:04 163,840 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\6d9d9f7a391b064cb13fa9303af369ef\Microsoft.Build.Utilities.ni.dll + 2009-03-22 12:07:07 1,724,416 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\b7c1719b79815f4dbffc9971ca8f2532\Microsoft.VisualBasic.ni.dll + 2009-03-22 11:33:35 11,415,552 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\e436f9655ba08841baa59c66fd944eef\mscorlib.ni.dll + 2009-03-22 12:07:08 962,560 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\4ef1d2e31b644e4483349901490b7aa1\System.Configuration.ni.dll + 2009-03-22 11:34:03 6,688,768 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\67f8a9586f474041a5b72b904916df08\System.Data.ni.dll + 2009-03-22 12:07:10 1,712,128 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\214e526725fbb1478051df46fbfdfaaf\System.Deployment.ni.dll + 2009-03-22 11:34:11 10,723,328 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\dc47680ca804544d90257ec170866395\System.Design.ni.dll + 2009-03-22 12:07:12 1,220,608 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\68c01b2359104c4fa0a56f44d955876e\System.DirectoryServices.ni.dll + 2009-03-22 12:07:13 512,000 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\9a59d4757f177c40a24ace6257de6d9f\System.DirectoryServices.Protocols.ni.dll + 2009-03-22 11:33:44 229,376 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\114ae84d5e20d54b8cc6edaf383a6a16\System.Drawing.Design.ni.dll + 2009-03-22 11:33:46 1,626,112 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\1225ad3fd8407645b26868b5b417ccea\System.Drawing.ni.dll + 2009-03-22 12:07:14 659,456 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\4fb8d9b128c76f4bb68ebfe8967dc305\System.EnterpriseServices.ni.dll + 2009-03-22 12:07:14 294,912 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\4fb8d9b128c76f4bb68ebfe8967dc305\System.EnterpriseServices.Wrapper.dll + 2009-03-22 12:07:15 729,088 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\ec8467f7b058584496aa2dbe703b9cde\System.Security.ni.dll + 2009-03-22 12:07:16 684,032 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\3c66db3cdccb0e41a0e0ab9ee7ba3e7f\System.Transactions.ni.dll + 2009-03-22 12:07:35 2,310,144 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\fa7a8e1c0492cc4e86b5213eaf58a201\System.Web.Mobile.ni.dll + 2009-03-22 12:07:36 237,568 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\a2fe90dd01f9394db3bdf79ca2a2a481\System.Web.RegularExpressions.ni.dll + 2009-03-22 12:07:39 1,945,600 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\719e346e101473459e75238a67e33096\System.Web.Services.ni.dll + 2009-03-22 12:07:31 11,808,768 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\83be16a36081944fac765b5314a0e8dc\System.Web.ni.dll + 2009-03-22 11:33:54 13,107,200 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\78108a29772d564d9ce7b5f11ef9636f\System.Windows.Forms.ni.dll + 2009-03-22 11:33:58 5,640,192 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\7665d3fb5dc5d848b4c6e1a6d3da2838\System.Xml.ni.dll + 2009-03-22 11:33:43 8,093,696 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System\f15349d885c6034da1e70d82959e2a86\System.ni.dll + 2007-08-13 17:39:20 71,680 -c----w c:\windows\ie8\admparse.dll + 2008-12-20 23:03:39 124,928 -c----w c:\windows\ie8\advpack.dll + 2007-08-13 17:42:54 17,408 -c----w c:\windows\ie8\corpol.dll + 2008-12-20 23:03:39 347,136 -c----w c:\windows\ie8\dxtmsft.dll + 2008-12-20 23:03:39 214,528 -c----w c:\windows\ie8\dxtrans.dll + 2007-08-13 17:18:02 60,416 -c----w c:\windows\ie8\hmmapi.dll + 2008-12-20 23:03:40 63,488 -c----w c:\windows\ie8\icardie.dll + 2008-12-19 09:13:43 70,656 -c----w c:\windows\ie8\ie4uinit.exe + 2008-12-20 23:03:40 153,088 -c----w c:\windows\ie8\ieakeng.dll + 2008-12-20 23:03:40 230,400 -c----w c:\windows\ie8\ieaksie.dll + 2008-12-19 05:23:56 161,792 -c----w c:\windows\ie8\ieakui.dll + 2007-04-17 09:32:38 2,455,488 -c----w c:\windows\ie8\ieapfltr.dat + 2008-12-20 23:03:41 383,488 -c----w c:\windows\ie8\ieapfltr.dll + 2008-12-20 23:03:41 384,512 -c----w c:\windows\ie8\iedkcs32.dll + 2007-08-13 17:45:18 78,336 -c----w c:\windows\ie8\ieencode.dll + 2008-12-20 23:03:44 6,066,688 -c----w c:\windows\ie8\ieframe.dll + 2007-08-13 17:54:10 191,488 -c----w c:\windows\ie8\iepeers.dll + 2007-08-13 17:54:10 287,744 -c----w c:\windows\ie8\ieproxy.dll + 2008-12-20 23:03:45 44,544 -c----w c:\windows\ie8\iernonce.dll + 2008-12-20 23:03:45 267,776 -c----w c:\windows\ie8\iertutil.dll + 2007-08-13 17:39:12 55,296 -c----w c:\windows\ie8\iesetup.dll + 2007-08-13 17:54:10 180,736 -c----w c:\windows\ie8\ieui.dll + 2008-12-19 05:25:25 634,024 -c----w c:\windows\ie8\iexplore.exe + 2007-08-13 17:36:06 36,352 -c----w c:\windows\ie8\imgutil.dll + 2007-08-13 17:39:02 92,672 -c----w c:\windows\ie8\inseng.dll + 2008-05-09 10:56:45 512,000 -c----w c:\windows\ie8\jscript.dll + 2008-12-20 23:03:47 27,648 -c----w c:\windows\ie8\jsproxy.dll + 2007-08-13 17:44:18 40,960 -c----w c:\windows\ie8\licmgr10.dll + 2008-12-20 23:03:47 459,264 -c----w c:\windows\ie8\msfeeds.dll + 2008-12-20 23:03:47 52,224 -c----w c:\windows\ie8\msfeedsbs.dll + 2007-08-13 17:36:40 12,288 -c----w c:\windows\ie8\msfeedssync.exe + 2007-08-13 17:32:30 45,568 -c----w c:\windows\ie8\mshta.exe + 2009-01-16 20:30:38 3,594,752 -c----w c:\windows\ie8\mshtml.dll + 2008-12-20 23:03:51 477,696 -c----w c:\windows\ie8\mshtmled.dll + 2007-08-13 17:01:12 48,128 -c----w c:\windows\ie8\mshtmler.dll + 2007-08-13 17:54:10 156,160 -c----w c:\windows\ie8\msls31.dll + 2008-12-20 23:03:51 193,024 -c----w c:\windows\ie8\msrating.dll + 2008-12-20 23:03:51 671,232 -c----w c:\windows\ie8\mstime.dll + 2008-12-20 23:03:51 102,912 -c----w c:\windows\ie8\occache.dll + 2008-12-20 23:03:51 44,544 -c----w c:\windows\ie8\pngfilt.dll + 2006-09-06 16:43:48 216,288 -c----w c:\windows\ie8\spuninst.exe + 2009-03-08 15:45:24 58,464 -c----w c:\windows\ie8\spuninst\iecustom.dll + 2009-01-07 17:21:32 234,528 -c----w c:\windows\ie8\spuninst\spuninst.exe + 2009-01-07 17:21:32 397,856 -c----w c:\windows\ie8\spuninst\updspapi.dll + 2008-12-20 23:03:51 105,984 -c----w c:\windows\ie8\url.dll + 2008-12-20 23:03:52 1,160,192 -c----w c:\windows\ie8\urlmon.dll + 2008-05-09 10:56:45 430,080 -c----w c:\windows\ie8\vbscript.dll + 2008-05-27 17:26:31 765,952 -c----w c:\windows\ie8\vgx.dll + 2008-12-20 23:03:52 233,472 -c----w c:\windows\ie8\webcheck.dll + 2007-08-13 17:45:16 206,336 -c----w c:\windows\ie8\winfxdocobj.exe + 2008-12-20 23:03:53 826,368 -c----w c:\windows\ie8\wininet.dll + 2009-03-08 03:35:04 2,048 -c----w c:\windows\ie8updates\KB968220-IE8\iecompat.dll + 2007-11-30 12:40:46 234,360 -c----w c:\windows\ie8updates\KB968220-IE8\spuninst\spuninst.exe + 2007-11-30 12:40:47 398,200 -c----w c:\windows\ie8updates\KB968220-IE8\spuninst\updspapi.dll - 2008-04-14 17:21:45 208,896 ----a-w c:\windows\inf\unregmp2.exe + 2007-06-27 15:00:02 318,976 ----a-w c:\windows\inf\unregmp2.exe + 2009-03-25 20:24:02 136,914 ----a-r c:\windows\Installer\{6FCFA783-CE7B-4018-AC48-0E6EEAAEA322}\ARPPRODUCTICON.exe + 2009-03-25 20:24:02 176,128 ----a-r c:\windows\Installer\{6FCFA783-CE7B-4018-AC48-0E6EEAAEA322}\LPCLauncher.exe_6FCFA783CE7B4018AC480E6EEAAEA322.exe + 2009-03-25 20:24:02 176,128 ----a-r c:\windows\Installer\{6FCFA783-CE7B-4018-AC48-0E6EEAAEA322}\LPCLauncher.exe1_6FCFA783CE7B4018AC480E6EEAAEA322.exe + 2009-03-23 22:13:49 295,606 ----a-r c:\windows\Installer\{9A996B6A-846E-4A89-B9C4-17546B7BE49F}\Burnout.exe + 2009-03-21 11:56:57 302,430 ----a-r c:\windows\Installer\{AEDBD563-24BB-4EE3-8366-A654DAC2D988}\ME_Icon.exe + 2009-03-22 15:47:40 9,158 ----a-r c:\windows\Installer\{D4EB3763-9586-405D-B376-DE98C8C9285E}\_0FF1B3C50488207EA025F4.exe + 2009-03-22 15:47:40 9,158 ----a-r c:\windows\Installer\{D4EB3763-9586-405D-B376-DE98C8C9285E}\_2617CA5FB16F9465FB40E4.exe + 2009-03-22 15:47:40 9,158 ----a-r c:\windows\Installer\{D4EB3763-9586-405D-B376-DE98C8C9285E}\_3CEC75B8A69109852E30F8.exe + 2009-03-22 15:47:40 9,158 ----a-r c:\windows\Installer\{D4EB3763-9586-405D-B376-DE98C8C9285E}\_6FEFF9B68218417F98F549.exe + 2009-03-23 12:22:28 11,502 ----a-r c:\windows\Installer\{D80A6A73-E58A-4673-AFF5-F12D7110661F}\ARPPRODUCTICON.exe + 1995-04-02 23:00:00 12,288 ----a-r c:\windows\MCIOLE.DLL + 2005-03-18 15:23:10 53,248 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.AudioVideoPlayback.dll + 2005-03-18 15:23:10 12,800 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.Diagnostics.dll + 2005-03-18 15:23:14 473,600 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.Direct3D.dll + 2004-09-29 11:38:58 2,676,224 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.Direct3DX.dll + 2005-03-18 15:23:10 145,920 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectDraw.dll + 2005-03-18 15:23:10 159,232 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectInput.dll + 2005-03-18 15:23:14 364,544 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectPlay.dll + 2005-03-18 15:23:12 178,176 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectSound.dll + 2005-03-18 15:23:14 223,232 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.dll + 2004-12-01 14:53:06 2,846,720 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2903.0\Microsoft.DirectX.Direct3DX.dll + 2005-02-05 18:32:54 563,712 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2904.0\Microsoft.DirectX.Direct3DX.dll + 2005-03-18 16:23:14 567,296 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2905.0\Microsoft.DirectX.Direct3DX.dll + 2005-05-26 14:15:56 576,000 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2906.0\Microsoft.DirectX.Direct3DX.dll + 2005-07-22 16:21:34 577,024 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2907.0\Microsoft.DirectX.Direct3DX.dll + 2005-09-28 13:11:52 577,536 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2908.0\Microsoft.DirectX.Direct3DX.dll + 2005-12-05 16:20:50 577,536 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2909.0\Microsoft.DirectX.Direct3DX.dll + 2006-02-03 06:40:48 578,560 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2910.0\Microsoft.DirectX.Direct3DX.dll + 2006-03-31 10:27:50 578,560 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2911.0\Microsoft.DirectX.Direct3DX.dll + 2005-09-23 06:28:52 72,704 ----a-w c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe + 2005-09-23 06:29:04 5,120 ----a-w c:\windows\Microsoft.NET\Framework\sbs_diasymreader.dll + 2005-09-23 06:29:04 5,120 ----a-w c:\windows\Microsoft.NET\Framework\sbs_iehost.dll + 2005-09-23 06:29:04 5,120 ----a-w c:\windows\Microsoft.NET\Framework\sbs_microsoft.jscript.dll + 2005-09-23 06:29:04 5,632 ----a-w c:\windows\Microsoft.NET\Framework\sbs_microsoft.vsa.vb.codedomprocessor.dll + 2005-09-23 06:29:04 5,120 ----a-w c:\windows\Microsoft.NET\Framework\sbs_mscordbi.dll + 2005-09-23 06:29:04 5,120 ----a-w c:\windows\Microsoft.NET\Framework\sbs_mscorrc.dll + 2005-09-23 06:29:04 5,120 ----a-w c:\windows\Microsoft.NET\Framework\sbs_mscorsec.dll + 2005-09-23 06:29:04 5,120 ----a-w c:\windows\Microsoft.NET\Framework\sbs_system.configuration.install.dll + 2005-09-23 06:29:04 5,120 ----a-w c:\windows\Microsoft.NET\Framework\sbs_system.data.dll + 2005-09-23 06:29:04 5,120 ----a-w c:\windows\Microsoft.NET\Framework\sbs_system.enterpriseservices.dll + 2005-09-23 06:29:04 5,120 ----a-w c:\windows\Microsoft.NET\Framework\sbs_VsaVb7rt.dll + 2005-09-23 06:29:04 5,120 ----a-w c:\windows\Microsoft.NET\Framework\sbs_wminet_utils.dll + 2005-09-23 06:28:52 7,680 ----a-w c:\windows\Microsoft.NET\Framework\sbscmp10.dll + 2005-09-23 06:28:56 7,680 ----a-w c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll + 2005-09-23 06:28:58 7,680 ----a-w c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll + 2005-09-23 06:28:56 7,680 ----a-w c:\windows\Microsoft.NET\Framework\SharedReg12.dll + 2005-09-23 06:28:52 86,528 ----a-w c:\windows\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll + 2005-09-23 06:28:36 18,944 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll + 2005-09-23 06:28:42 136,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll + 2005-09-23 06:28:44 4,608 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll + 2005-09-23 06:29:04 183,808 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll + 2005-09-23 06:28:28 208,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll + 2005-09-23 06:28:56 10,752 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll + 2005-09-23 06:28:58 138,240 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll + 2005-09-23 06:28:36 87,552 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\alink.dll + 2005-09-23 06:28:58 55,488 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe + 2005-09-23 06:28:32 36,864 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe + 2005-09-23 06:28:32 10,752 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll + 2005-09-23 06:28:32 8,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll + 2005-09-23 06:28:32 23,552 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll + 2005-09-23 06:28:32 70,656 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll + 2005-09-23 06:28:32 13,824 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe + 2005-09-23 06:28:32 26,824 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe + 2005-09-23 06:28:32 106,496 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe + 2005-09-23 06:28:32 29,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe + 2005-09-23 06:28:32 29,888 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe + 2005-09-23 06:28:32 503,808 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll + 2005-09-23 06:28:56 106,496 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CasPol.exe + 2005-09-23 06:28:56 88,576 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll + 2005-09-23 06:28:42 76,984 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\csc.exe + 2005-09-23 06:28:42 1,144,832 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cscomp.dll + 2005-09-23 06:28:42 13,312 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll + 2005-09-23 06:28:58 17,920 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll + 2005-09-23 06:28:56 68,608 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll + 2005-09-23 06:28:44 31,936 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe + 2005-09-23 06:28:38 52,736 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\dfdll.dll + 2005-09-23 06:28:38 4,608 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe + 2005-09-23 06:29:12 547,840 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll + 2005-09-23 06:28:56 788,992 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll + 2005-09-23 06:28:50 9,216 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\fusion.dll + 2005-09-23 06:28:56 9,728 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExec.exe + 2005-09-23 06:28:56 8,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll + 2005-09-23 06:28:56 36,864 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEHost.dll + 2005-09-23 06:28:56 5,632 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll + 2005-09-23 06:28:56 224,952 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ilasm.exe + 2005-09-23 06:28:56 28,672 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe + 2005-09-23 06:28:56 55,296 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll + 2005-09-23 06:28:56 72,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll + 2005-09-23 06:28:48 40,960 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe + 2005-09-23 06:01:16 609,472 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe + 2005-09-23 05:29:48 80,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1025.dll + 2005-09-23 05:32:24 80,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1028.dll + 2005-09-23 05:34:10 82,944 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1029.dll + 2005-09-23 05:34:12 81,920 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1030.dll + 2005-09-23 05:34:44 85,504 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1031.dll + 2005-09-23 05:36:24 87,552 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1032.dll + 2005-09-23 02:46:14 80,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1033.dll + 2005-09-23 05:38:26 81,408 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1035.dll + 2005-09-23 05:38:52 86,016 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1036.dll + 2005-09-23 05:40:30 80,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1037.dll + 2005-09-23 05:40:32 83,968 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1038.dll + 2005-09-23 05:40:56 84,480 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1040.dll + 2005-09-23 05:42:58 80,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1041.dll + 2005-09-23 05:44:58 80,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1042.dll + 2005-09-23 05:46:38 83,456 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1043.dll + 2005-09-23 05:46:38 81,920 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1044.dll + 2005-09-23 05:46:40 83,456 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1045.dll + 2005-09-23 05:47:04 82,432 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1046.dll + 2005-09-23 05:47:30 82,432 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1049.dll + 2005-09-23 05:47:32 81,920 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1053.dll + 2005-09-23 05:47:32 80,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1055.dll + 2005-09-23 05:30:18 80,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.2052.dll + 2005-09-23 05:47:06 84,480 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.2070.dll + 2005-09-23 05:29:50 80,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.3076.dll + 2005-09-23 05:36:48 85,504 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.3082.dll + 2005-09-23 06:57:06 245,408 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\unicows.dll + 2005-09-23 06:28:48 413,696 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll + 2005-09-23 06:28:48 36,864 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll + 2005-09-23 06:28:48 647,168 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll + 2005-09-23 06:28:48 73,728 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll + 2005-09-23 06:28:48 745,472 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll + 2005-09-23 06:29:10 110,592 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll + 2005-09-23 06:29:10 372,736 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll + 2005-09-23 06:29:08 667,648 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll + 2005-09-23 06:28:30 28,672 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll + 2005-09-23 06:29:10 5,632 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll + 2005-09-23 06:28:30 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll + 2005-09-23 06:28:30 12,800 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll + 2005-09-23 06:28:30 7,168 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll + 2005-09-23 06:28:32 87,552 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll + 2005-09-23 06:28:48 69,632 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe + 2005-09-23 06:28:56 800,768 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll + 2005-09-23 06:28:56 73,216 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll + 2005-09-23 06:28:56 288,768 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll + 2005-09-23 06:28:56 36,864 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorie.dll + 2005-09-23 06:28:56 326,144 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll + 2005-09-23 06:28:56 81,408 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorld.dll + 2005-09-23 06:28:56 4,308,992 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll + 2005-09-23 06:28:56 102,400 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll + 2005-09-23 06:29:00 330,752 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll + 2005-09-23 06:28:56 67,072 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll + 2005-09-23 06:28:50 9,216 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll + 2005-09-23 06:28:56 226,816 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll + 2005-09-23 06:28:56 66,240 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe + 2005-09-23 06:28:56 10,240 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscortim.dll + 2005-09-23 06:28:50 5,615,616 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll + 2005-09-23 06:29:00 22,528 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MUI\0409\mscorsecr.dll + 2005-09-23 06:28:56 96,440 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ngen.exe + 2005-09-23 06:28:56 14,848 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\normalization.dll + 2005-09-23 06:28:56 78,336 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll + 2005-09-23 06:28:50 136,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\peverify.dll + 2005-09-23 06:28:56 53,248 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe + 2005-09-23 06:28:56 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe + 2005-09-23 06:29:02 59,072 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe + 2005-09-23 06:28:58 7,680 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll + 2005-09-23 06:28:56 107,520 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\shfusion.dll + 2005-09-23 06:29:00 85,504 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll + 2005-09-23 06:28:56 377,344 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll + 2005-09-23 06:28:56 110,592 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll + 2005-09-23 06:28:58 389,120 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll + 2005-09-23 06:28:56 81,920 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll + 2005-09-23 06:28:56 2,878,976 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.dll + 2005-09-23 06:28:56 482,304 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll + 2005-09-23 06:28:56 716,800 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll + 2005-09-23 06:28:38 884,736 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll + 2005-09-23 06:28:56 5,050,368 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll + 2005-09-23 06:28:56 397,312 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll + 2005-09-23 06:28:56 188,416 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll + 2005-09-23 06:28:56 3,018,752 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll + 2005-09-23 06:28:56 81,920 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll + 2005-09-23 06:28:56 700,416 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll + 2005-09-23 06:28:56 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll + 2005-09-23 06:28:56 47,616 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll + 2005-09-23 06:28:56 114,176 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll + 2005-09-23 06:28:56 368,640 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Management.dll + 2005-09-23 06:28:56 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll + 2005-09-23 06:28:56 299,008 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll + 2005-09-23 06:28:56 131,072 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll + 2005-09-23 06:28:56 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll + 2005-09-23 06:28:56 114,688 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll + 2005-09-23 06:28:56 260,096 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll + 2005-09-23 06:28:56 5,025,792 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll + 2005-09-23 06:28:56 835,584 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll + 2005-09-23 06:28:56 86,016 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll + 2005-09-23 06:28:56 823,296 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll + 2005-09-23 06:28:56 5,316,608 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll + 2005-09-23 06:28:56 2,035,712 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.XML.dll + 2005-09-23 06:28:56 71,680 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL + 2005-09-23 06:29:06 1,140,920 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe + 2005-09-23 06:28:30 1,306,624 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll + 2005-09-23 06:28:32 298,496 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll + 2005-09-23 06:28:56 28,160 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll + 1995-04-02 23:00:00 117,536 ----a-r c:\windows\MPLAYER.EXE + 1995-04-02 23:00:00 12,800 ----a-w c:\windows\system\ACMCMPRS.DLL + 1995-04-02 23:00:00 102,400 ----a-w c:\windows\system\COMPOBJ.DLL + 1995-04-02 23:00:00 14,208 ----a-w c:\windows\system\CTL3D.DLL + 1995-04-02 23:00:00 18,384 ----a-w c:\windows\system\DCISVGA.DRV + 1995-04-02 23:00:00 7,168 ----a-w c:\windows\system\DISPDIB.DLL + 1995-04-02 23:00:00 65,408 ----a-r c:\windows\system\ICCVID.DRV + 1995-04-02 23:00:00 77,664 ----a-r c:\windows\system\IR21.DLL + 1995-04-02 23:00:00 151,056 ----a-r c:\windows\system\IR32.DLL + 1995-04-02 23:00:00 50,016 ----a-r c:\windows\system\IYVU9.DLL + 1995-04-02 23:00:00 49,616 ----a-r c:\windows\system\MSACM.DLL + 1995-04-02 23:00:00 22,816 ----a-r c:\windows\system\MSACM.DRV + 1995-04-02 23:00:00 11,776 ----a-r c:\windows\system\MSRLE.DRV + 1995-04-02 23:00:00 43,520 ----a-r c:\windows\system\MSVIDC.DRV + 1995-04-02 23:00:00 313,344 ----a-w c:\windows\system\OLE2.DLL + 1995-04-02 23:00:00 57,328 ----a-w c:\windows\system\OLE2CONV.DLL + 1995-04-02 23:00:00 98,336 ----a-w c:\windows\system\OLE2DISP.DLL + 1995-04-02 23:00:00 147,440 ----a-w c:\windows\system\OLE2NLS.DLL + 1995-04-02 23:00:00 55,808 ----a-w c:\windows\system\OLE2PROX.DLL + 1995-04-02 23:00:00 157,184 ----a-w c:\windows\system\STORAGE.DLL + 1995-04-02 23:00:00 153,312 ----a-w c:\windows\system\TYPELIB.DLL + 1994-12-05 23:00:00 92,208 ----a-r c:\windows\system\WING.DLL + 1994-12-05 23:00:00 12,800 ----a-r c:\windows\system\WING32.DLL + 1994-12-05 23:00:00 188,960 ----a-r c:\windows\system\WINGDE.DLL + 1994-12-05 23:00:00 6,736 ----a-r c:\windows\system\WINGDIB.DRV - 2008-12-20 23:03:39 124,928 ----a-w c:\windows\system32\advpack.dll + 2009-03-08 03:32:48 128,512 ----a-w c:\windows\system32\advpack.dll + 2008-10-07 08:13:20 58,648 ----a-w c:\windows\system32\AgCPanelFrench.dll + 2008-10-07 08:13:20 58,648 ----a-w c:\windows\system32\AgCPanelGerman.dll + 2008-10-07 08:13:20 58,648 ----a-w c:\windows\system32\AgCPanelJapanese.dll + 2008-10-07 08:13:20 58,648 ----a-w c:\windows\system32\AgCPanelKorean.dll + 2008-10-07 08:13:20 58,648 ----a-w c:\windows\system32\AgCPanelPortugese.dll + 2008-10-07 08:13:20 58,648 ----a-w c:\windows\system32\AgCPanelSimplifiedChinese.dll + 2008-10-07 08:13:20 58,648 ----a-w c:\windows\system32\AgCPanelSpanish.dll + 2008-10-07 08:13:20 58,648 ----a-w c:\windows\system32\AgCPanelSwedish.dll + 2008-10-07 08:13:22 58,648 ----a-w c:\windows\system32\AgCPanelTraditionalChinese.dll + 2008-10-07 08:13:18 199,885 ----a-w c:\windows\system32\AGEIA\AG1011\app.bin + 2008-10-07 08:13:20 119,473 ----a-w c:\windows\system32\AGEIA\AG1011\diag.bin + 2008-10-07 08:13:20 214,629 ----a-w c:\windows\system32\AGEIA\AG1021\app.bin + 2008-10-07 08:13:20 116,977 ----a-w c:\windows\system32\AGEIA\AG1021\diag.bin - 2008-04-14 15:59:14 8,192 ----a-w c:\windows\system32\asferror.dll + 2006-12-01 10:42:34 7,168 ----a-w c:\windows\system32\asferror.dll + 2004-08-10 06:50:22 77,889 ----a-w c:\windows\system32\atrc.dll + 2006-10-18 20:47:08 276,992 ------w c:\windows\system32\audiodev.dll - 2008-04-14 17:20:04 286,720 ----a-w c:\windows\system32\blackbox.dll + 2006-10-18 20:47:10 542,720 ----a-w c:\windows\system32\blackbox.dll - 2008-04-14 17:20:09 159,232 ----a-w c:\windows\system32\cewmdm.dll + 2006-10-18 20:47:10 229,376 ----a-w c:\windows\system32\cewmdm.dll + 2004-08-10 06:50:00 65,602 ----a-w c:\windows\system32\cook.dll + 2005-09-23 06:28:38 83,456 ----a-w c:\windows\system32\dfshim.dll - 2007-08-13 17:39:20 71,680 -c----w c:\windows\system32\dllcache\admparse.dll + 2009-03-08 03:32:56 72,704 -c--a-w c:\windows\system32\dllcache\admparse.dll - 2008-12-20 23:03:39 124,928 -c----w c:\windows\system32\dllcache\advpack.dll + 2009-03-08 03:32:48 128,512 -c--a-w c:\windows\system32\dllcache\advpack.dll - 2008-04-14 15:59:14 8,192 -c--a-w c:\windows\system32\dllcache\asferror.dll + 2006-12-01 10:42:34 7,168 -c--a-w c:\windows\system32\dllcache\asferror.dll - 2008-04-14 17:20:04 286,720 -c--a-w c:\windows\system32\dllcache\blackbox.dll + 2006-10-18 20:47:10 542,720 -c--a-w c:\windows\system32\dllcache\blackbox.dll - 2008-04-14 17:20:09 159,232 -c--a-w c:\windows\system32\dllcache\cewmdm.dll + 2006-10-18 20:47:10 229,376 -c--a-w c:\windows\system32\dllcache\cewmdm.dll - 2007-08-13 17:42:54 17,408 -c----w c:\windows\system32\dllcache\corpol.dll + 2009-03-08 03:33:40 18,944 -c--a-w c:\windows\system32\dllcache\corpol.dll - 2008-04-14 17:22:02 695,808 -c--a-w c:\windows\system32\dllcache\drmv2clt.dll + 2006-10-18 20:47:10 991,744 -c--a-w c:\windows\system32\dllcache\drmv2clt.dll - 2008-12-20 23:03:39 347,136 -c----w c:\windows\system32\dllcache\dxtmsft.dll + 2009-03-08 03:31:44 348,160 -c--a-w c:\windows\system32\dllcache\dxtmsft.dll - 2008-12-20 23:03:39 214,528 -c----w c:\windows\system32\dllcache\dxtrans.dll + 2009-03-08 03:31:38 216,064 -c--a-w c:\windows\system32\dllcache\dxtrans.dll - 2007-08-13 17:18:02 60,416 -c----w c:\windows\system32\dllcache\hmmapi.dll + 2009-03-08 03:24:28 68,608 -c--a-w c:\windows\system32\dllcache\hmmapi.dll - 2008-12-19 09:13:43 70,656 -c----w c:\windows\system32\dllcache\ie4uinit.exe + 2009-03-08 03:32:54 173,056 -c--a-w c:\windows\system32\dllcache\ie4uinit.exe - 2008-12-20 23:03:40 153,088 -c----w c:\windows\system32\dllcache\ieakeng.dll + 2009-03-08 03:33:02 125,952 -c--a-w c:\windows\system32\dllcache\ieakeng.dll - 2008-12-20 23:03:40 230,400 -c----w c:\windows\system32\dllcache\ieaksie.dll + 2009-03-08 03:33:08 229,376 -c--a-w c:\windows\system32\dllcache\ieaksie.dll - 2008-12-19 05:23:56 161,792 -c----w c:\windows\system32\dllcache\ieakui.dll + 2009-03-08 03:32:52 163,840 -c--a-w c:\windows\system32\dllcache\ieakui.dll - 2008-12-20 23:03:41 384,512 -c----w c:\windows\system32\dllcache\iedkcs32.dll + 2009-03-08 13:09:26 391,536 -c--a-w c:\windows\system32\dllcache\iedkcs32.dll - 2007-08-13 17:54:10 191,488 -c----w c:\windows\system32\dllcache\iepeers.dll + 2009-03-08 03:31:56 183,808 -c--a-w c:\windows\system32\dllcache\iepeers.dll - 2008-12-20 23:03:45 44,544 -c----w c:\windows\system32\dllcache\iernonce.dll + 2009-03-08 03:32:50 55,808 -c--a-w c:\windows\system32\dllcache\iernonce.dll - 2007-08-13 17:39:12 55,296 -c----w c:\windows\system32\dllcache\iesetup.dll + 2009-03-08 03:32:50 71,680 -c--a-w c:\windows\system32\dllcache\iesetup.dll - 2008-12-19 05:25:25 634,024 -c----w c:\windows\system32\dllcache\iexplore.exe + 2009-03-08 13:09:26 638,816 -c--a-w c:\windows\system32\dllcache\iexplore.exe - 2007-08-13 17:36:06 36,352 -c----w c:\windows\system32\dllcache\imgutil.dll + 2009-03-08 03:31:38 34,816 -c--a-w c:\windows\system32\dllcache\imgutil.dll - 2007-08-13 17:39:02 92,672 -c----w c:\windows\system32\dllcache\inseng.dll + 2009-03-08 03:32:46 94,720 -c--a-w c:\windows\system32\dllcache\inseng.dll - 2008-05-09 10:56:45 512,000 -c----w c:\windows\system32\dllcache\jscript.dll + 2009-03-08 03:33:16 726,528 -c--a-w c:\windows\system32\dllcache\jscript.dll - 2008-12-20 23:03:47 27,648 -c----w c:\windows\system32\dllcache\jsproxy.dll + 2009-03-08 03:33:26 25,600 -c--a-w c:\windows\system32\dllcache\jsproxy.dll - 2008-04-14 17:20:34 6,656 -c--a-w c:\windows\system32\dllcache\laprxy.dll + 2006-10-18 20:47:14 11,264 -c--a-w c:\windows\system32\dllcache\LAPRXY.dll - 2007-08-13 17:44:18 40,960 -c----w c:\windows\system32\dllcache\licmgr10.dll + 2009-03-08 03:34:30 43,008 -c--a-w c:\windows\system32\dllcache\licmgr10.dll - 2008-06-10 02:11:20 103,936 -c--a-w c:\windows\system32\dllcache\logagent.exe + 2008-06-18 00:09:22 100,864 -c--a-w c:\windows\system32\dllcache\logagent.exe - 2008-04-14 17:20:35 310,272 -c--a-w c:\windows\system32\dllcache\mp43dmod.dll + 2006-10-18 20:47:14 4,096 -c--a-w c:\windows\system32\dllcache\MP43DMOD.dll - 2008-04-14 17:20:35 384,512 -c--a-w c:\windows\system32\dllcache\mp4sdmod.dll + 2006-10-18 20:47:14 4,096 -c--a-w c:\windows\system32\dllcache\MP4SDMOD.dll - 2008-04-14 17:20:35 240,640 -c--a-w c:\windows\system32\dllcache\mpg4dmod.dll + 2006-10-18 20:47:14 4,096 -c--a-w c:\windows\system32\dllcache\MPG4DMOD.dll - 2008-04-14 17:20:35 368,640 -c--a-w c:\windows\system32\dllcache\mpvis.dll + 2006-12-01 10:42:56 244,224 -c--a-w c:\windows\system32\dllcache\mpvis.dll - 2007-08-13 17:32:30 45,568 -c----w c:\windows\system32\dllcache\mshta.exe + 2009-03-08 03:31:02 45,568 -c--a-w c:\windows\system32\dllcache\mshta.exe - 2008-12-20 23:03:51 477,696 -c----w c:\windows\system32\dllcache\mshtmled.dll + 2009-03-08 03:31:26 66,560 -c--a-w c:\windows\system32\dllcache\mshtmled.dll - 2007-08-13 17:01:12 48,128 -c----w c:\windows\system32\dllcache\mshtmler.dll + 2009-03-08 03:31:18 48,128 -c--a-w c:\windows\system32\dllcache\mshtmler.dll - 2007-08-13 17:54:10 156,160 -c--a-w c:\windows\system32\dllcache\msls31.dll + 2009-03-08 03:22:38 156,160 -c--a-w c:\windows\system32\dllcache\msls31.dll - 2008-04-14 17:22:00 259,072 -c--a-w c:\windows\system32\dllcache\msnetobj.dll + 2006-10-18 20:47:16 179,712 -c--a-w c:\windows\system32\dllcache\msnetobj.dll - 2008-04-14 17:20:39 52,736 -c--a-w c:\windows\system32\dllcache\mspmsnsv.dll + 2006-10-18 20:47:16 27,136 -c--a-w c:\windows\system32\dllcache\mspmsnsv.dll - 2008-04-14 17:20:39 201,728 -c--a-w c:\windows\system32\dllcache\mspmsp.dll + 2006-10-18 20:47:16 175,616 -c--a-w c:\windows\system32\dllcache\mspmsp.dll - 2008-12-20 23:03:51 193,024 -c----w c:\windows\system32\dllcache\msrating.dll + 2009-03-08 03:34:18 193,536 -c--a-w c:\windows\system32\dllcache\msrating.dll - 2008-04-14 17:22:00 356,352 -c--a-w c:\windows\system32\dllcache\msscp.dll + 2006-12-04 15:21:50 414,720 -c--a-w c:\windows\system32\dllcache\msscp.dll - 2008-12-20 23:03:51 671,232 -c----w c:\windows\system32\dllcache\mstime.dll + 2009-03-08 03:32:04 611,840 -c--a-w c:\windows\system32\dllcache\mstime.dll - 2008-04-14 17:20:39 246,272 -c--a-w c:\windows\system32\dllcache\mswmdm.dll + 2006-10-18 20:47:16 321,536 -c--a-w c:\windows\system32\dllcache\mswmdm.dll - 2008-12-20 23:03:51 102,912 -c----w c:\windows\system32\dllcache\occache.dll + 2009-03-08 03:34:18 109,568 -c--a-w c:\windows\system32\dllcache\occache.dll - 2008-12-20 23:03:51 44,544 -c----w c:\windows\system32\dllcache\pngfilt.dll + 2009-03-08 03:31:36 46,592 -c--a-w c:\windows\system32\dllcache\pngfilt.dll - 2008-04-14 17:21:40 774,144 -c--a-w c:\windows\system32\dllcache\setup_wm.exe + 2006-12-01 10:49:02 1,677,824 -c--a-w c:\windows\system32\dllcache\setup_wm.exe + 2009-01-07 17:20:54 134,144 -c----w c:\windows\system32\dllcache\sqmapi.dll - 2008-04-14 17:21:45 208,896 -c--a-w c:\windows\system32\dllcache\unregmp2.exe + 2007-06-27 15:00:02 318,976 -c--a-w c:\windows\system32\dllcache\unregmp2.exe - 2008-12-20 23:03:51 105,984 -c----w c:\windows\system32\dllcache\url.dll + 2009-03-08 03:34:28 105,984 -c--a-w c:\windows\system32\dllcache\url.dll - 2008-05-09 10:56:45 430,080 -c----w c:\windows\system32\dllcache\vbscript.dll + 2009-03-08 03:33:06 420,352 -c--a-w c:\windows\system32\dllcache\vbscript.dll - 2008-05-27 17:26:31 765,952 -c----w c:\windows\system32\dllcache\vgx.dll + 2009-03-08 03:33:48 759,296 -c--a-w c:\windows\system32\dllcache\VGX.dll - 2008-12-20 23:03:52 233,472 -c----w c:\windows\system32\dllcache\webcheck.dll + 2009-03-08 03:34:48 236,544 -c--a-w c:\windows\system32\dllcache\webcheck.dll - 2008-04-14 17:20:57 408,064 -c--a-w c:\windows\system32\dllcache\wmadmod.dll + 2006-10-18 20:47:18 757,248 -c--a-w c:\windows\system32\dllcache\WMADMOD.dll - 2008-04-14 17:20:57 670,720 -c--a-w c:\windows\system32\dllcache\wmadmoe.dll + 2006-10-18 20:47:18 1,117,696 -c--a-w c:\windows\system32\dllcache\WMADMOE.dll - 2008-04-14 17:20:57 230,912 -c--a-w c:\windows\system32\dllcache\wmasf.dll + 2007-10-25 08:28:30 222,720 -c--a-w c:\windows\system32\dllcache\wmasf.dll - 2008-04-14 17:20:57 27,136 -c--a-w c:\windows\system32\dllcache\wmdmlog.dll + 2006-10-18 20:47:18 33,792 -c--a-w c:\windows\system32\dllcache\wmdmlog.dll - 2008-04-14 17:20:57 23,552 -c--a-w c:\windows\system32\dllcache\wmdmps.dll + 2006-10-18 20:47:18 37,376 -c--a-w c:\windows\system32\dllcache\wmdmps.dll - 2008-04-14 16:09:04 190,976 -c--a-w c:\windows\system32\dllcache\wmerror.dll + 2006-12-01 10:45:42 258,560 -c--a-w c:\windows\system32\dllcache\wmerror.dll - 2008-04-14 17:20:58 151,552 -c--a-w c:\windows\system32\dllcache\wmidx.dll + 2006-10-18 20:47:20 157,184 -c--a-w c:\windows\system32\dllcache\wmidx.dll - 2008-06-10 05:11:46 1,053,696 -c--a-w c:\windows\system32\dllcache\WMNetmgr.dll + 2008-06-18 04:03:08 938,496 -c--a-w c:\windows\system32\dllcache\WMNetmgr.dll - 2008-04-14 17:20:58 4,874,240 -c--a-w c:\windows\system32\dllcache\wmp.dll + 2008-11-11 17:34:42 10,838,016 -c--a-w c:\windows\system32\dllcache\wmp.dll - 2008-04-14 17:20:58 114,688 -c--a-w c:\windows\system32\dllcache\wmpasf.dll + 2006-10-18 20:47:20 242,688 -c--a-w c:\windows\system32\dllcache\wmpasf.dll - 2008-04-14 17:20:58 98,304 -c--a-w c:\windows\system32\dllcache\wmpband.dll + 2006-12-01 10:45:50 96,256 -c--a-w c:\windows\system32\dllcache\wmpband.dll - 2008-04-14 17:20:58 233,472 -c--a-w c:\windows\system32\dllcache\wmpdxm.dll + 2006-10-18 20:47:20 314,880 -c--a-w c:\windows\system32\dllcache\wmpdxm.dll - 2008-04-14 17:21:50 73,728 -c--a-w c:\windows\system32\dllcache\wmplayer.exe + 2006-12-01 10:46:06 64,000 -c--a-w c:\windows\system32\dllcache\wmplayer.exe - 2008-04-14 16:15:41 2,977,792 -c--a-w c:\windows\system32\dllcache\wmploc.dll + 2006-12-01 11:01:50 8,277,504 -c--a-w c:\windows\system32\dllcache\wmploc.dll - 2008-04-14 17:20:58 102,400 -c--a-w c:\windows\system32\dllcache\wmpshell.dll + 2006-12-01 10:46:18 99,840 -c--a-w c:\windows\system32\dllcache\wmpshell.dll - 2008-04-14 17:20:58 759,296 -c--a-w c:\windows\system32\dllcache\wmsdmod.dll + 2006-10-18 20:47:22 4,096 -c--a-w c:\windows\system32\dllcache\wmsdmod.dll - 2008-04-14 17:20:58 1,119,744 -c--a-w c:\windows\system32\dllcache\wmsdmoe2.dll + 2006-10-18 20:47:22 4,096 -c--a-w c:\windows\system32\dllcache\wmsdmoe2.dll - 2008-04-14 17:20:58 485,376 -c--a-w c:\windows\system32\dllcache\wmspdmod.dll + 2006-10-18 20:47:22 603,648 -c--a-w c:\windows\system32\dllcache\WMSPDMOD.dll - 2008-04-14 17:20:58 897,024 -c--a-w c:\windows\system32\dllcache\wmspdmoe.dll + 2006-10-18 20:47:22 1,329,152 -c--a-w c:\windows\system32\dllcache\WMSPDMOE.dll - 2008-11-07 15:45:32 2,174,976 -c--a-w c:\windows\system32\dllcache\WMVCore.dll + 2008-06-18 04:03:14 2,458,112 -c--a-w c:\windows\system32\dllcache\WMVCore.dll - 2008-04-14 17:20:58 809,984 -c--a-w c:\windows\system32\dllcache\wmvdmod.dll + 2006-10-18 20:47:22 4,096 -c--a-w c:\windows\system32\dllcache\wmvdmod.dll - 2008-04-14 17:20:58 1,001,472 -c--a-w c:\windows\system32\dllcache\wmvdmoe2.dll + 2006-10-18 20:47:22 4,096 -c--a-w c:\windows\system32\dllcache\wmvdmoe2.dll + 2007-07-15 01:37:04 27,992 ----a-w c:\windows\system32\drivers\pstrip.sys + 2006-10-18 20:47:22 671,232 ------w c:\windows\system32\drivers\UMDF\wpdmtpdr.dll + 2006-10-18 19:00:00 38,528 ------w c:\windows\system32\drivers\wpdusb.sys + 2006-09-28 17:55:50 77,568 ------w c:\windows\system32\drivers\WudfPf.sys + 2006-09-28 18:00:34 82,944 ------w c:\windows\system32\drivers\WudfRd.sys + 2006-10-18 19:00:46 249,856 ------w c:\windows\system32\drmupgds.exe - 2008-04-14 17:22:02 695,808 ----a-w c:\windows\system32\drmv2clt.dll + 2006-10-18 20:47:10 991,744 ----a-w c:\windows\system32\drmv2clt.dll + 2004-08-10 06:50:48 102,464 ----a-w c:\windows\system32\drv1.dll + 2004-08-10 06:51:08 176,195 ----a-w c:\windows\system32\drv2.dll + 2004-11-24 19:25:52 335,872 ----a-w c:\windows\system32\drvc.dll - 2008-12-20 23:03:39 347,136 ------w c:\windows\system32\dxtmsft.dll + 2009-03-08 03:31:44 348,160 ----a-w c:\windows\system32\dxtmsft.dll - 2008-12-20 23:03:39 214,528 ------w c:\windows\system32\dxtrans.dll + 2009-03-08 03:31:38 216,064 ----a-w c:\windows\system32\dxtrans.dll + 2004-10-03 17:50:54 129,024 ----a-w c:\windows\system32\ff_mpeg2enc.dll + 2008-12-17 17:17:34 239,247 ----a-w c:\windows\system32\ff_theora.dll + 2008-12-17 17:22:48 57,344 ----a-w c:\windows\system32\ff_vfw.dll + 2008-12-17 17:22:58 93,184 ----a-w c:\windows\system32\ff_wmv9.dll + 2008-12-17 17:41:18 884,237 ----a-w c:\windows\system32\ff_x264.dll + 2005-01-13 17:46:00 40,448 ------w c:\windows\system32\Futuremark\MSC\Direcpll.dll + 2004-08-10 06:52:54 241,723 ----a-w c:\windows\system32\hxltcolor.dll - 2008-12-20 23:03:40 63,488 ----a-w c:\windows\system32\icardie.dll + 2009-03-08 03:31:52 59,904 ----a-w c:\windows\system32\icardie.dll - 2008-12-19 09:13:43 70,656 ------w c:\windows\system32\ie4uinit.exe + 2009-03-08 03:32:54 173,056 ----a-w c:\windows\system32\ie4uinit.exe - 2008-12-20 23:03:40 153,088 ------w c:\windows\system32\ieakeng.dll + 2009-03-08 03:33:02 125,952 ----a-w c:\windows\system32\ieakeng.dll - 2008-12-20 23:03:40 230,400 ------w c:\windows\system32\ieaksie.dll + 2009-03-08 03:33:08 229,376 ----a-w c:\windows\system32\ieaksie.dll - 2008-12-19 05:23:56 161,792 ------w c:\windows\system32\ieakui.dll + 2009-03-08 03:32:52 163,840 ----a-w c:\windows\system32\ieakui.dll - 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\system32\ieapfltr.dat + 2009-02-06 20:07:58 3,698,584 ----a-w c:\windows\system32\ieapfltr.dat - 2008-12-20 23:03:41 383,488 ----a-w c:\windows\system32\ieapfltr.dll + 2009-03-08 03:11:12 445,952 ----a-w c:\windows\system32\ieapfltr.dll - 2008-12-20 23:03:41 384,512 ------w c:\windows\system32\iedkcs32.dll + 2009-03-08 13:09:26 391,536 ----a-w c:\windows\system32\iedkcs32.dll - 2008-12-20 23:03:44 6,066,688 ----a-w c:\windows\system32\ieframe.dll + 2009-03-08 03:39:48 11,063,808 ----a-w c:\windows\system32\ieframe.dll - 2007-08-13 17:54:10 191,488 ----a-w c:\windows\system32\iepeers.dll + 2009-03-08 03:31:56 183,808 ----a-w c:\windows\system32\iepeers.dll - 2008-12-20 23:03:45 44,544 ------w c:\windows\system32\iernonce.dll + 2009-03-08 03:32:50 55,808 ----a-w c:\windows\system32\iernonce.dll - 2008-12-20 23:03:45 267,776 ----a-w c:\windows\system32\iertutil.dll + 2009-03-08 03:32:22 1,985,024 ----a-w c:\windows\system32\iertutil.dll - 2008-12-19 09:10:15 13,824 ----a-w c:\windows\system32\ieudinit.exe + 2009-03-08 03:32:52 36,864 ----a-w c:\windows\system32\ieudinit.exe - 2007-08-13 17:54:10 180,736 ------w c:\windows\system32\ieui.dll + 2009-03-08 03:22:46 164,352 ----a-w c:\windows\system32\ieui.dll - 2007-08-13 17:39:02 92,672 ----a-w c:\windows\system32\inseng.dll + 2009-03-08 03:32:46 94,720 ----a-w c:\windows\system32\inseng.dll - 2008-05-09 10:56:45 512,000 ----a-w c:\windows\system32\jscript.dll + 2009-03-08 03:33:16 726,528 ----a-w c:\windows\system32\jscript.dll - 2008-12-20 23:03:47 27,648 ------w c:\windows\system32\jsproxy.dll + 2009-03-08 03:33:26 25,600 ----a-w c:\windows\system32\jsproxy.dll - 2008-04-14 17:20:34 6,656 ----a-w c:\windows\system32\laprxy.dll + 2006-10-18 20:47:14 11,264 ----a-w c:\windows\system32\LAPRXY.dll + 2008-12-19 15:15:58 4,338,246 ----a-w c:\windows\system32\libavcodec.dll + 2008-12-17 16:59:54 560,802 ----a-w c:\windows\system32\libmplayer.dll - 2008-06-10 02:11:20 103,936 ----a-w c:\windows\system32\logagent.exe + 2008-06-18 00:09:22 100,864 ----a-w c:\windows\system32\logagent.exe + 2006-10-18 20:47:14 212,992 ------w c:\windows\system32\MFPLAT.dll + 2006-10-18 20:47:14 259,072 ------w c:\windows\system32\MP43DECD.dll - 2008-04-14 17:20:35 310,272 ----a-w c:\windows\system32\mp43dmod.dll + 2006-10-18 20:47:14 4,096 ----a-w c:\windows\system32\MP43DMOD.dll + 2006-10-18 20:47:14 317,440 ------w c:\windows\system32\MP4SDECD.dll - 2008-04-14 17:20:35 384,512 ----a-w c:\windows\system32\mp4sdmod.dll + 2006-10-18 20:47:14 4,096 ----a-w c:\windows\system32\MP4SDMOD.dll + 2006-10-18 20:47:14 259,072 ------w c:\windows\system32\MPG4DECD.dll - 2008-04-14 17:20:35 240,640 ----a-w c:\windows\system32\mpg4dmod.dll + 2006-10-18 20:47:14 4,096 ----a-w c:\windows\system32\MPG4DMOD.dll + 2005-09-23 06:28:52 270,848 ----a-w c:\windows\system32\mscoree.dll + 2005-09-23 06:28:52 150,016 ----a-w c:\windows\system32\mscorier.dll + 2005-09-23 06:28:52 74,240 ----a-w c:\windows\system32\mscories.dll + 2006-10-02 14:28:42 312,128 ------w c:\windows\system32\msdelta.dll - 2008-12-20 23:03:47 459,264 ----a-w c:\windows\system32\msfeeds.dll + 2009-03-08 03:32:26 594,432 ----a-w c:\windows\system32\msfeeds.dll - 2008-12-20 23:03:47 52,224 ----a-w c:\windows\system32\msfeedsbs.dll + 2009-03-08 03:31:52 55,296 ----a-w c:\windows\system32\msfeedsbs.dll - 2007-08-13 17:36:40 12,288 ------w c:\windows\system32\msfeedssync.exe + 2009-03-08 03:31:54 13,312 ----a-w c:\windows\system32\msfeedssync.exe - 2009-01-16 20:30:38 3,594,752 ----a-w c:\windows\system32\mshtml.dll + 2009-03-08 03:41:16 5,937,152 ----a-w c:\windows\system32\mshtml.dll - 2008-12-20 23:03:51 477,696 ------w c:\windows\system32\mshtmled.dll + 2009-03-08 03:31:26 66,560 ----a-w c:\windows\system32\mshtmled.dll + 2007-04-30 15:50:50 903,072 ----a-w c:\windows\system32\msidcrl40.dll - 2008-04-14 17:22:00 259,072 ----a-w c:\windows\system32\msnetobj.dll + 2006-10-18 20:47:16 179,712 ----a-w c:\windows\system32\msnetobj.dll - 2008-04-14 17:20:39 52,736 ----a-w c:\windows\system32\mspmsnsv.dll + 2006-10-18 20:47:16 27,136 ----a-w c:\windows\system32\mspmsnsv.dll - 2008-04-14 17:20:39 201,728 ----a-w c:\windows\system32\mspmsp.dll + 2006-10-18 20:47:16 175,616 ----a-w c:\windows\system32\mspmsp.dll - 2008-12-20 23:03:51 193,024 ------w c:\windows\system32\msrating.dll + 2009-03-08 03:34:18 193,536 ----a-w c:\windows\system32\msrating.dll - 2008-04-14 17:22:00 356,352 ----a-w c:\windows\system32\msscp.dll + 2006-12-04 15:21:50 414,720 ----a-w c:\windows\system32\msscp.dll - 2008-12-20 23:03:51 671,232 ------w c:\windows\system32\mstime.dll + 2009-03-08 03:32:04 611,840 ----a-w c:\windows\system32\mstime.dll + 2003-02-21 02:42:00 348,160 ----a-w c:\windows\system32\msvcr71.dll - 2008-04-14 17:20:39 246,272 ----a-w c:\windows\system32\mswmdm.dll + 2006-10-18 20:47:16 321,536 ----a-w c:\windows\system32\mswmdm.dll + 2005-09-23 06:29:00 6,144 ----a-w c:\windows\system32\mui\0409\mscorees.dll + 2005-09-23 06:28:56 32,768 ----a-w c:\windows\system32\netfxperf.dll - 2008-12-20 23:03:51 102,912 ------w c:\windows\system32\occache.dll + 2009-03-08 03:34:18 109,568 ----a-w c:\windows\system32\occache.dll + 2004-04-20 22:00:00 172,032 ----a-w c:\windows\system32\OptimFROG.dll - 2009-03-17 18:29:34 40,128 ----a-w c:\windows\system32\perfc009.dat + 2009-03-22 11:34:13 58,732 ----a-w c:\windows\system32\perfc009.dat - 2009-03-17 18:29:34 49,712 ----a-w c:\windows\system32\perfc015.dat + 2009-03-22 11:34:13 74,450 ----a-w c:\windows\system32\perfc015.dat - 2009-03-17 18:29:34 311,740 ----a-w c:\windows\system32\perfh009.dat + 2009-03-22 11:34:13 392,432 ----a-w c:\windows\system32\perfh009.dat - 2009-03-17 18:29:34 355,830 ----a-w c:\windows\system32\perfh015.dat + 2009-03-22 11:34:13 448,348 ----a-w c:\windows\system32\perfh015.dat + 2008-10-15 08:04:28 288,024 ----a-w c:\windows\system32\PhysXCompatCplUI.exe + 2008-10-15 08:04:28 288,024 ----a-w c:\windows\system32\PhysXCplUI.exe + 2008-10-07 08:13:30 197,912 ----a-w c:\windows\system32\physxcudart_20.dll + 2008-10-07 08:13:28 23,320 ----a-w c:\windows\system32\PhysXDevice.dll + 2008-10-17 08:29:00 70,936 ----a-w c:\windows\system32\PhysXLoader.dll + 2003-11-25 23:32:02 123,392 ----a-w c:\windows\system32\pncrt.dll - 2008-12-20 23:03:51 44,544 ------w c:\windows\system32\pngfilt.dll + 2009-03-08 03:31:36 46,592 ----a-w c:\windows\system32\pngfilt.dll + 2006-10-18 20:47:18 284,160 ------w c:\windows\system32\PortableDeviceApi.dll + 2006-10-18 20:47:18 101,888 ------w c:\windows\system32\PortableDeviceClassExtension.dll + 2006-10-18 20:47:18 166,912 ------w c:\windows\system32\PortableDeviceTypes.dll + 2006-10-18 20:47:18 132,096 ------w c:\windows\system32\PortableDeviceWiaCompat.dll + 2006-10-18 20:47:18 199,168 ------w c:\windows\system32\PortableDeviceWMDRM.dll - 2008-04-14 17:20:44 237,568 ----a-w c:\windows\system32\qasf.dll + 2006-10-18 20:47:18 211,456 ----a-w c:\windows\system32\qasf.dll + 2004-08-10 06:50:40 49,216 ----a-w c:\windows\system32\rv10.dll + 2004-08-10 06:51:00 57,411 ----a-w c:\windows\system32\rv20.dll + 2004-08-10 06:52:14 49,221 ----a-w c:\windows\system32\rv30.dll + 2004-08-10 06:52:16 49,221 ----a-w c:\windows\system32\rv40.dll + 2006-11-02 16:10:16 80,912 ----a-w c:\windows\system32\sherlock2.exe + 2004-08-10 06:50:12 106,561 ----a-w c:\windows\system32\sipr.dll - 2008-07-09 07:57:12 19,320 ------w c:\windows\system32\spmsg.dll + 2009-01-07 17:21:32 18,976 ------w c:\windows\system32\spmsg.dll - 2008-12-20 23:03:51 105,984 ----a-w c:\windows\system32\url.dll + 2009-03-08 03:34:28 105,984 ----a-w c:\windows\system32\url.dll - 2008-12-20 23:03:52 1,160,192 ----a-w c:\windows\system32\urlmon.dll + 2009-03-08 03:34:56 1,206,784 ----a-w c:\windows\system32\urlmon.dll + 2006-10-18 20:58:00 8,704 ------w c:\windows\system32\uwdf.exe + 2008-11-29 20:26:36 991,232 ----a-w c:\windows\system32\VSFilter.dll + 2006-10-18 20:47:18 4,096 ------w c:\windows\system32\wdfapi.dll + 2006-10-18 20:58:00 8,704 ------w c:\windows\system32\wdfmgr.exe - 2008-12-20 23:03:52 233,472 ----a-w c:\windows\system32\webcheck.dll + 2009-03-08 03:34:48 236,544 ----a-w c:\windows\system32\webcheck.dll - 2007-08-13 17:45:16 206,336 ------w c:\windows\system32\WinFXDocObj.exe + 2009-03-08 03:34:48 208,384 ----a-w c:\windows\system32\WinFXDocObj.exe - 2008-04-14 17:20:57 408,064 ----a-w c:\windows\system32\wmadmod.dll + 2006-10-18 20:47:18 757,248 ----a-w c:\windows\system32\WMADMOD.dll - 2008-04-14 17:20:57 670,720 ----a-w c:\windows\system32\wmadmoe.dll + 2006-10-18 20:47:18 1,117,696 ----a-w c:\windows\system32\WMADMOE.dll - 2008-04-14 17:20:57 230,912 ----a-w c:\windows\system32\wmasf.dll + 2007-10-25 08:28:30 222,720 ----a-w c:\windows\system32\wmasf.dll - 2008-04-14 17:20:57 27,136 ----a-w c:\windows\system32\wmdmlog.dll + 2006-10-18 20:47:18 33,792 ----a-w c:\windows\system32\wmdmlog.dll - 2008-04-14 17:20:57 23,552 ----a-w c:\windows\system32\wmdmps.dll + 2006-10-18 20:47:18 37,376 ----a-w c:\windows\system32\wmdmps.dll + 2006-10-18 20:47:18 429,056 ------w c:\windows\system32\wmdrmdev.dll + 2006-10-18 20:47:20 348,672 ------w c:\windows\system32\wmdrmnet.dll + 2006-10-18 20:47:20 535,040 ------w c:\windows\system32\wmdrmsdk.dll - 2008-04-14 16:09:04 190,976 ----a-w c:\windows\system32\wmerror.dll + 2006-12-01 10:45:42 258,560 ----a-w c:\windows\system32\wmerror.dll - 2008-04-14 17:20:58 151,552 ----a-w c:\windows\system32\wmidx.dll + 2006-10-18 20:47:20 157,184 ----a-w c:\windows\system32\wmidx.dll - 2008-06-10 05:11:46 1,053,696 ----a-w c:\windows\system32\WMNetmgr.dll + 2008-06-18 04:03:08 938,496 ----a-w c:\windows\system32\WMNetmgr.dll - 2008-04-14 17:20:58 4,874,240 ----a-w c:\windows\system32\wmp.dll + 2008-11-11 17:34:42 10,838,016 ----a-w c:\windows\system32\wmp.dll - 2008-04-14 17:20:58 114,688 ----a-w c:\windows\system32\wmpasf.dll + 2006-10-18 20:47:20 242,688 ----a-w c:\windows\system32\wmpasf.dll - 2008-04-14 17:20:58 233,472 ----a-w c:\windows\system32\wmpdxm.dll + 2006-10-18 20:47:20 314,880 ----a-w c:\windows\system32\wmpdxm.dll + 2008-06-24 17:12:58 295,936 ------w c:\windows\system32\wmpeffects.dll + 2006-10-18 20:47:20 1,661,440 ------w c:\windows\system32\wmpencen.dll - 2008-04-14 16:15:41 2,977,792 ----a-w c:\windows\system32\wmploc.dll + 2006-12-01 11:01:50 8,277,504 ----a-w c:\windows\system32\wmploc.dll + 2006-10-18 20:47:20 613,376 ------w c:\windows\system32\wmpmde.dll + 2006-10-18 20:47:20 130,048 ------w c:\windows\system32\wmpps.dll - 2008-04-14 17:20:58 102,400 ----a-w c:\windows\system32\wmpshell.dll + 2006-12-01 10:46:18 99,840 ----a-w c:\windows\system32\wmpshell.dll + 2006-10-18 20:47:20 204,288 ------w c:\windows\system32\wmpsrcwp.dll - 2008-04-14 17:20:58 759,296 ----a-w c:\windows\system32\wmsdmod.dll + 2006-10-18 20:47:22 4,096 ----a-w c:\windows\system32\wmsdmod.dll - 2008-04-14 17:20:58 1,119,744 ----a-w c:\windows\system32\wmsdmoe2.dll + 2006-10-18 20:47:22 4,096 ----a-w c:\windows\system32\wmsdmoe2.dll - 2008-04-14 17:20:58 485,376 ----a-w c:\windows\system32\wmspdmod.dll + 2006-10-18 20:47:22 603,648 ----a-w c:\windows\system32\WMSPDMOD.dll - 2008-04-14 17:20:58 897,024 ----a-w c:\windows\system32\wmspdmoe.dll + 2006-10-18 20:47:22 1,329,152 ----a-w c:\windows\system32\WMSPDMOE.dll + 2006-10-18 20:47:22 4,096 ------w c:\windows\system32\WMVADVD.dll + 2006-10-18 20:47:22 4,096 ------w c:\windows\system32\WMVADVE.DLL - 2008-11-07 15:45:32 2,174,976 ----a-w c:\windows\system32\WMVCore.dll + 2008-06-18 04:03:14 2,458,112 ----a-w c:\windows\system32\WMVCore.dll + 2006-10-18 20:47:22 1,543,680 ------w c:\windows\system32\WMVDECOD.dll - 2008-04-14 17:20:58 809,984 ----a-w c:\windows\system32\wmvdmod.dll + 2006-10-18 20:47:22 4,096 ----a-w c:\windows\system32\wmvdmod.dll - 2008-04-14 17:20:58 1,001,472 ----a-w c:\windows\system32\wmvdmoe2.dll + 2006-10-18 20:47:22 4,096 ----a-w c:\windows\system32\wmvdmoe2.dll + 2006-10-18 20:47:22 1,574,912 ------w c:\windows\system32\WMVENCOD.dll + 2006-10-18 20:47:22 1,382,912 ------w c:\windows\system32\WMVSDECD.dll + 2006-10-18 20:47:22 767,488 ------w c:\windows\system32\WMVSENCD.dll + 2006-10-18 20:47:22 656,896 ------w c:\windows\system32\WMVXENCD.dll + 2006-10-18 20:47:22 629,760 ------w c:\windows\system32\wpd_ci.dll + 2006-10-18 20:47:22 35,840 ------w c:\windows\system32\wpdconns.dll + 2006-10-18 20:47:22 154,624 ------w c:\windows\system32\wpdmtp.dll + 2006-10-18 20:47:22 63,488 ------w c:\windows\system32\wpdmtpus.dll + 2006-10-18 20:47:22 2,603,008 ------w c:\windows\system32\WpdShext.dll + 2006-10-18 19:00:14 17,408 ------w c:\windows\system32\wpdshextautoplay.exe + 2006-11-02 10:52:52 42,496 ------w c:\windows\system32\wpdshextres.dll + 2006-10-18 20:47:22 133,632 ------w c:\windows\system32\WPDShServiceObj.dll + 2006-10-18 20:47:22 356,352 ------w c:\windows\system32\wpdsp.dll + 2006-09-28 19:13:26 95,344 ------w c:\windows\system32\WUDFCoinstaller.dll + 2006-09-28 17:56:38 146,432 ------w c:\windows\system32\WudfHost.exe + 2006-09-28 17:56:16 165,376 ------w c:\windows\system32\WudfPlatform.dll + 2006-09-28 17:56:14 55,808 ------w c:\windows\system32\WudfSvc.dll + 2006-09-28 17:56:38 316,416 ------w c:\windows\system32\WUDFx.dll + 2007-11-26 20:56:20 10,155,840 ----a-w c:\windows\system32\xlive.dll + 2007-09-18 14:01:02 134,144 ----a-w c:\windows\system32\xlive\sqmapi.dll + 2007-11-26 20:56:20 13,653,824 ----a-w c:\windows\system32\xlivefnt.dll - 2008-04-14 17:21:01 121,856 ------w c:\windows\system32\xmllite.dll + 2009-01-07 17:21:04 121,856 ----a-w c:\windows\system32\xmllite.dll + 2009-03-27 08:49:32 16,384 ----atw c:\windows\Temp\Perflib_Perfdata_124.dat + 2005-09-23 06:29:16 479,232 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\msvcm80.dll + 2005-09-23 06:29:16 548,864 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\msvcp80.dll + 2005-09-23 06:29:16 626,688 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\msvcr80.dll + 2007-11-06 19:23:58 224,768 ----a-w c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcm90.dll + 2007-11-07 00:19:34 568,832 ----a-w c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcp90.dll + 2007-11-07 00:19:34 655,872 ----a-w c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcr90.dll + 2009-03-22 11:33:12 258,048 ----a-w c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll + 2009-03-22 11:33:12 114,176 ----a-w c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll . -- Migawka wyzerowana -- . ((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Komunikator"="c:\program files\Tlen.pl\tlen.exe" [2009-01-17 5853672] "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] "WiseStubReboot"="MSIEXEC" [X] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-02-18 13680640] "Krait"="c:\program files\Razer\Krait\razerhid.exe" [2007-02-16 126976] "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-03-10 148888] "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-02-18 86016] "AVP"="c:\program files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe" [2009-03-11 206088] "nwiz"="nwiz.exe" [2009-02-18 c:\windows\system32\nwiz.exe] "RTHDCPL"="RTHDCPL.EXE" [2008-11-17 c:\windows\RTHDCPL.EXE] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "vidc.ffds"= ffdshow.ax "msacm.ac3filter"= ac3filter.acm [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck] c:\windows\system32\dumprep 0 -k [X] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] --a------ 2009-02-27 17:10 35696 c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam] --a------ 2009-03-20 12:03 1410296 c:\program files\Valve\Steam\Steam.exe [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\Tlen.pl\\tlen.exe"= "c:\\Program Files\\Valve\\Steam\\SteamApps\\kulej94\\counter-strike\\hl.exe"= "c:\\Program Files\\Vuze\\Azureus.exe"= "c:\\Program Files\\Valve\\Steam\\SteamApps\\kulej94\\condition zero deleted scenes\\hl.exe"= "c:\\Program Files\\Valve\\Steam\\SteamApps\\kulej94\\condition zero\\hl.exe"= "e:\\Downloads\\Pro.Evolution.Soccer.2009.Full-Rip.Skullptura\\Pro.Evolution.Soccer.2009.Full-Rip.Skullptura\\PES 2009\\pes2009.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "e:\\mirros edge\\Binaries\\MirrorsEdge.exe"= "c:\\WINDOWS\\system32\\PnkBstrA.exe"= "c:\\WINDOWS\\system32\\PnkBstrB.exe"= "e:\\Call of Duty - World at War\\CoDWaWmp.exe"= "e:\\Call of Duty - World at War\\CoDWaW.exe"= "e:\\Electronic Arts\\Burnout Paradise The Ultimate Box\\BurnoutLauncher.exe"= "e:\\Electronic Arts\\Burnout Paradise The Ultimate Box\\BurnoutConfigTool.exe"= "e:\\Electronic Arts\\Burnout Paradise The Ultimate Box\\BurnoutParadise.exe"= "e:\\Lost planet\\LostPlanetColoniesDX9.exe"= "e:\\Lost planet\\LostPlanetColoniesDX10.exe"= R0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\system32\drivers\klbg.sys [2008-01-29 33808] R2 PStrip;PSTRIP;c:\windows\system32\drivers\pstrip.sys [2007-07-15 27992] R3 KLFLTDEV;Kaspersky Lab KLFltDev;c:\windows\system32\drivers\klfltdev.sys [2008-03-13 26640] R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\drivers\klim5.sys [2008-04-30 24592] R3 krait03;Razer krait USB Filter Driver;c:\windows\system32\drivers\krait.sys [2009-03-10 13324] R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32.sys [2009-03-10 38176] S2 gupdate1c9a2bd82723a14;Usługa Google Update (gupdate1c9a2bd82723a14);c:\program files\Google\Update\GoogleUpdate.exe [2009-03-12 133104] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}] "c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP . Zawartość folderu 'Zaplanowane zadania' 2009-03-27 c:\windows\Tasks\Google Software Updater.job - c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-03-22 19:41] 2009-03-27 c:\windows\Tasks\GoogleUpdateTaskMachine.job - c:\program files\Google\Update\GoogleUpdate.exe [2009-03-12 03:51] 2009-03-27 c:\windows\Tasks\User_Feed_Synchronization-{1721BDE1-A7DD-4317-AAED-ADACC2D20650}.job - c:\windows\system32\msfeedssync.exe [2009-03-08 04:31] . . ------- Skan uzupełniający ------- . LSP: %SYSTEMROOT%\system32\nvLsp.dll TCP: {7C2F544C-D52B-4047-A496-08C86EF43692} = 194.204.159.1,194.204.152.34 TCP: {DD43F089-83A3-492D-A437-DC34DA96645B} = 194.204.159.1,194.204.152.34 FF - ProfilePath - c:\documents and settings\PanDuzePE\Dane aplikacji\Mozilla\Firefox\Profiles\0e46uh9z.default\ FF - plugin: c:\program files\Google\Google Updater\2.4.1536.6592\npCIDetect13.dll FF - plugin: c:\program files\Google\Update\1.2.141.5\npGoogleOneClick7.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\npganymedenet.dll . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-03-27 15:14:32 Windows 5.1.2600 Dodatek Service Pack 3 NTFS skanowanie ukrytych procesów ... skanowanie ukrytych wpisów autostartu ... skanowanie ukrytych plików ... skanowanie pomyślnie ukończone ukryte pliki: 0 ************************************************************************** . --------------------- Pliki DLL ładowane pod uruchomionymi procesami --------------------- - - - - - - - > 'lsass.exe'(1296) c:\windows\system32\nvLsp.dll . Czas ukończenia: 2009-03-27 15:15:09 ComboFix-quarantined-files.txt 2009-03-27 14:15:07 ComboFix2.txt 2009-03-19 09:54:16 Przed: 4,845,379,584 bajtów wolnych Po: 5,185,925,120 bajtów wolnych 1067 --- E O F --- 2009-03-20 14:43:26 Edytowane 27 Marca 2009 przez Kolobos Cytuj Udostępnij tę odpowiedź Odnośnik do odpowiedzi Udostępnij na innych stronach More sharing options...
Kolobos Napisano 27 Marca 2009 Zgłoś Napisano 27 Marca 2009 Wszystko wyglada ok, zmien antywirus jak juz pisalem wczesniej. Cytuj Udostępnij tę odpowiedź Odnośnik do odpowiedzi Udostępnij na innych stronach More sharing options...
Screenbeat Napisano 27 Marca 2009 Zgłoś Napisano 27 Marca 2009 (edytowane) Wszystko wyglada ok, zmien antywirus jak juz pisalem wczesniej. No wiesz, rada pewnie i by odniosla skutek ale... przyzwyczailem sie juz do niego. Pozatym zaplacilem wkoncu te 100 zl i przydaloby sie zeby dzialal. wyglada mi to na cos w stylu jakby wczytywal na biezaco te pliki do skanowania i potem nie czyscil ich z pamieci Edytowane 27 Marca 2009 przez Screenbeat Cytuj Udostępnij tę odpowiedź Odnośnik do odpowiedzi Udostępnij na innych stronach More sharing options...
MaKaR Napisano 29 Marca 2009 Zgłoś Napisano 29 Marca 2009 Skoro masz produkt z licencją to napisz może do wsparcia technicznego. Myślę że oni prędzej będą wiedzieć dlaczego tak się dzieje niż my. Twoje logi wyglądają czysto więc może producent AVP będzie wiedział w czym leży problem Cytuj Udostępnij tę odpowiedź Odnośnik do odpowiedzi Udostępnij na innych stronach More sharing options...
