Problemy z explorerem i startem systemu

Dla specjalistów Bezpieczeństwo
#1

Witam, po zainstalowaniu nowych aktualizacji do winxp oraz explorera ten ostatni zaczął szaleć - dziwaczne otwieranie sie okienek, niewykrywanie pewnych stron itd.

Olałem bo i w większej części korzystam z opery, tyle że później cały system zaczął dziwnie pracować - zawieszanie sie na ekranie startowym (przy wyborze konta i ładowaniu ustawień osobistych), panelu sterowania (jakis problem z użyciem pliku o rozszerzeniu cpl).

Przejechałem antywirem - wirusy usuniete. Następnie hijackthis oraz combofixem, logi poniżej; poprawnie otwiera sie jedynie chyba w trybie awaryjnym…:confused:

za okazaną pomoc z góry thx.

Logfile of HijackThis v1.99.1

Scan saved at 14:22:44, on 2008-04-14

Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)


Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

C:\Program Files\Alwil Software\Avast4\ashServ.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\system32\userinit.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe

C:\Program Files\Creative\SBAudigy\Surround Mixer\CTSysVol.exe

C:\WINDOWS\system32\Rundll32.exe

C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

C:\Program Files\A4Tech\Mouse\Amoumain.exe

C:\WINDOWS\system32\RUNDLL32.EXE

C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe

C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe

C:\WINDOWS\system32\CTsvcCDA.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\system32\PnkBstrA.exe

C:\Documents and Settings\Kiwaczek\Pulpit\HijackThis.exe


R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.pless.pl/

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.irfanview.net/faq.htm

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll

O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"

O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy\Surround Mixer\CTSysVol.exe /r

O4 - HKLM\..\Run: [P17Helper] Rundll32 P17.dll,P17Helper

O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE

O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

O4 - HKLM\..\Run: [WheelMouse] C:\Program Files\A4Tech\Mouse\Amoumain.exe

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler

O8 - Extra context menu item: &Download All with FlashGet - C:\Program Files\FlashGet\jc_all.htm

O8 - Extra context menu item: &Download with FlashGet - C:\Program Files\FlashGet\jc_link.htm

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll

O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe

O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe

O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} (MksSkanerOnline Class) - http://www.mks.com.pl/skaner/SkanerOnline.cab

O17 - HKLM\System\CCS\Services\Tcpip\..\{ED1BC818-B687-450E-AC16-FA4B9082D7B6}: NameServer = 192.168.1.1

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe

O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)

O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)

O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
#2 
+ 2003-02-21 03:42:22	348,160	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW2400\_msvcr71.dll

+ 2004-07-14 23:34:50	94,208	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW2400\_PerfCounter.dll

+ 2003-02-20 18:09:34	253,952	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\shfusion.dll

+ 2003-02-20 18:09:34	122,880	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\shfusres.dll

+ 2004-07-14 23:35:04	319,488	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SOS.dll

+ 2003-02-21 06:26:38	77,824	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Configuration.Install.dll

+ 2004-07-15 13:32:00	1,294,336	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Data.dll

+ 2004-07-15 13:31:14	303,104	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Data.OracleClient.dll

+ 2004-07-15 13:29:02	1,703,936	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Design.dll

+ 2004-07-15 13:28:54	90,112	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.DirectoryServices.dll

+ 2007-04-13 20:35:38	1,232,896	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.dll

+ 2003-02-21 06:26:48	65,536	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Drawing.Design.dll

+ 2004-07-15 13:28:58	466,944	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Drawing.dll

+ 2004-07-15 13:28:56	241,664	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.EnterpriseServices.dll

+ 2004-07-14 23:35:12	66,560	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.EnterpriseServices.Thunk.dll

+ 2004-07-15 13:31:58	372,736	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Management.dll

+ 2004-07-15 13:31:12	241,664	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Messaging.dll

+ 2004-07-15 13:28:58	323,584	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Runtime.Remoting.dll

+ 2004-07-15 13:31:54	131,072	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Runtime.Serialization.Formatters.Soap.dll

+ 2004-07-15 13:28:52	77,824	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Security.dll

+ 2004-07-15 13:28:54	126,976	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.ServiceProcess.dll

+ 2007-04-13 20:35:46	1,265,664	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Web.dll

+ 2004-07-15 13:28:58	819,200	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Web.Mobile.dll

+ 2004-07-15 13:28:52	57,344	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Web.RegularExpressions.dll

+ 2004-07-15 13:31:16	573,440	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Web.Services.dll

+ 2004-07-15 13:32:02	2,052,096	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Windows.Forms.dll

+ 2004-07-15 13:29:00	1,339,392	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.XML.dll

+ 2004-06-22 12:51:38	53,248	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe

+ 2004-07-15 10:23:20	737,280	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\vbc.exe

+ 2004-07-15 07:15:14	1,032,192	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\VsaVb7rt.dll

+ 2004-07-15 01:11:56	31,744	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\WMINet_Utils.dll

+ 2005-09-23 06:28:36	18,944	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll

+ 2005-09-23 06:28:42	136,192	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll

+ 2005-09-23 06:28:44	4,608	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll

+ 2005-09-23 06:29:04	183,808	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll

+ 2005-09-23 06:28:28	208,896	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll

+ 2005-09-23 06:28:56	10,752	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll

+ 2005-09-23 06:28:58	138,240	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll

+ 2005-09-23 06:28:36	87,552	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\alink.dll

+ 2007-04-13 02:21:18	58,712	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe

+ 2005-09-23 06:28:32	36,864	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe

+ 2007-04-13 02:20:52	10,752	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll

+ 2007-04-13 02:20:52	8,192	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll

+ 2007-04-13 02:20:52	23,552	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll

+ 2007-04-13 02:20:50	75,264	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll

+ 2005-09-23 06:28:32	13,824	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe

+ 2007-04-13 02:20:52	32,608	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe

+ 2005-09-23 06:28:32	106,496	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe

+ 2007-04-13 02:20:52	33,632	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe

+ 2007-04-13 02:20:52	32,600	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe

+ 2007-04-13 02:20:52	507,904	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll

+ 2005-09-23 06:28:56	106,496	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CasPol.exe

+ 2007-04-13 02:21:16	88,576	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll

+ 2005-09-23 06:28:42	76,984	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\csc.exe

+ 2005-09-23 06:28:42	1,144,832	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cscomp.dll

+ 2005-09-23 06:28:42	13,312	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll

+ 2005-09-23 06:28:58	17,920	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Culture.dll

+ 2005-09-23 06:28:56	68,608	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll

+ 2005-09-23 06:28:44	31,936	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cvtres.exe

+ 2005-09-23 06:28:38	52,736	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfdll.dll

+ 2007-04-13 02:20:58	5,120	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe

+ 2005-09-23 06:29:12	547,840	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll

+ 2005-09-23 06:28:56	788,992	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll

+ 2005-09-23 06:28:50	9,216	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fusion.dll

+ 2007-04-13 02:21:16	9,728	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEExec.exe

+ 2005-09-23 06:28:56	8,192	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll

+ 2005-09-23 06:28:56	36,864	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEHost.dll

+ 2005-09-23 06:28:56	5,632	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll

+ 2007-04-13 02:21:16	228,688	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ilasm.exe

+ 2007-04-13 02:21:16	28,672	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe

+ 2005-09-23 06:28:56	55,296	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll

+ 2005-09-23 06:28:56	72,192	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll

+ 2005-09-23 06:28:48	40,960	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\jsc.exe

+ 2005-09-23 06:01:16	609,472	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe

+ 2005-09-23 05:29:48	80,896	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1025.dll

+ 2005-09-23 05:32:24	80,896	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1028.dll

+ 2005-09-23 05:34:10	82,944	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1029.dll

+ 2005-09-23 05:34:12	81,920	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1030.dll

+ 2005-09-23 05:34:44	85,504	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1031.dll

+ 2005-09-23 05:36:24	87,552	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1032.dll

+ 2005-09-23 02:46:14	80,896	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1033.dll

+ 2005-09-23 05:38:26	81,408	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1035.dll

+ 2005-09-23 05:38:52	86,016	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1036.dll

+ 2005-09-23 05:40:30	80,896	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1037.dll

+ 2005-09-23 05:40:32	83,968	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1038.dll

+ 2005-09-23 05:40:56	84,480	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1040.dll

+ 2005-09-23 05:42:58	80,896	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1041.dll

+ 2005-09-23 05:44:58	80,896	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1042.dll

+ 2005-09-23 05:46:38	83,456	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1043.dll

+ 2005-09-23 05:46:38	81,920	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1044.dll

+ 2005-09-23 05:46:40	83,456	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1045.dll

+ 2005-09-23 05:47:04	82,432	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1046.dll

+ 2005-09-23 05:47:30	82,432	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1049.dll

+ 2005-09-23 05:47:32	81,920	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1053.dll

+ 2005-09-23 05:47:32	80,896	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1055.dll

+ 2005-09-23 05:30:18	80,896	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.2052.dll

+ 2005-09-23 05:47:06	84,480	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.2070.dll

+ 2005-09-23 05:29:50	80,896	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.3076.dll

+ 2005-09-23 05:36:48	85,504	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.3082.dll

+ 2005-09-23 06:57:06	245,408	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\unicows.dll

+ 2007-04-13 02:21:10	413,696	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll

+ 2005-09-23 06:28:48	36,864	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll

+ 2007-04-13 02:21:10	647,168	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll

+ 2005-09-23 06:28:48	73,728	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll

+ 2007-04-13 02:21:08	749,568	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll

+ 2005-09-23 06:29:10	110,592	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll

+ 2005-09-23 06:29:10	372,736	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll

+ 2005-09-23 06:29:08	667,648	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll

+ 2005-09-23 06:28:30	28,672	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll

+ 2005-09-23 06:29:10	5,632	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll

+ 2005-09-23 06:28:30	32,768	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll

+ 2005-09-23 06:28:30	12,800	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll

+ 2005-09-23 06:28:30	7,168	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll

+ 2007-04-13 02:20:52	87,040	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll

+ 2005-09-23 06:28:48	69,632	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe

+ 2007-04-13 02:21:18	802,304	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll

+ 2005-09-23 06:28:56	73,216	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll

+ 2005-09-23 06:28:56	288,768	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll

+ 2007-04-13 02:21:16	36,864	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorie.dll

+ 2007-04-13 02:21:16	326,656	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll

+ 2005-09-23 06:28:56	81,408	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorld.dll

+ 2007-04-13 02:21:16	4,308,992	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll

+ 2007-04-13 02:21:16	102,912	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll

+ 2005-09-23 06:29:00	330,752	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll

+ 2005-09-23 06:28:56	67,072	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll

+ 2005-09-23 06:28:50	9,216	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll

+ 2007-04-13 02:21:18	227,328	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll

+ 2007-04-13 02:21:18	68,952	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

+ 2005-09-23 06:28:56	10,240	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscortim.dll

+ 2007-04-13 02:21:12	5,634,048	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll

+ 2005-09-23 06:29:00	22,528	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MUI\[u]0[/u]409\mscorsecr.dll

+ 2007-04-13 02:21:16	99,152	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ngen.exe

+ 2007-04-13 02:21:18	15,360	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\normalization.dll

+ 2005-09-23 06:28:56	78,336	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll

+ 2007-04-13 02:21:12	136,192	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\peverify.dll

+ 2005-09-23 06:28:56	53,248	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe

+ 2005-09-23 06:28:56	32,768	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe

+ 2005-09-23 06:29:02	59,072	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe

+ 2005-09-23 06:28:58	7,680	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll

+ 2005-09-23 06:28:56	107,520	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\shfusion.dll

+ 2005-09-23 06:29:00	85,504	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll

+ 2007-04-13 02:21:18	382,464	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\SOS.dll

+ 2007-04-13 02:21:18	110,592	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll

+ 2007-04-13 02:21:18	413,696	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll

+ 2005-09-23 06:28:56	81,920	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll

+ 2007-04-13 02:21:16	2,902,016	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.dll

+ 2007-04-13 02:21:18	482,304	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll

+ 2007-04-13 02:21:18	716,800	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll

+ 2007-04-13 02:20:58	888,832	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll

+ 2007-04-13 02:21:16	5,001,216	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Design.dll

+ 2005-09-23 06:28:56	397,312	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll

+ 2007-04-13 02:21:18	188,416	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll

+ 2007-04-13 02:21:16	2,940,928	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.dll

+ 2005-09-23 06:28:56	81,920	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll

+ 2007-04-13 02:21:16	577,536	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll

+ 2007-04-13 02:21:16	258,048	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll

+ 2007-04-13 02:21:18	47,616	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll

+ 2007-04-13 02:21:18	114,176	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll

+ 2007-04-13 02:21:16	372,736	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Management.dll

+ 2005-09-23 06:28:56	258,048	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll

+ 2007-04-13 02:21:16	299,008	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll

+ 2005-09-23 06:28:56	131,072	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll

+ 2005-09-23 06:28:56	258,048	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Security.dll

+ 2005-09-23 06:28:56	114,688	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll

+ 2007-04-13 02:21:18	260,096	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll

+ 2007-04-13 02:21:16	5,156,864	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.dll

+ 2005-09-23 06:28:56	835,584	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll

+ 2005-09-23 06:28:56	86,016	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll

+ 2005-09-23 06:28:56	823,296	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll

+ 2007-04-13 02:21:16	5,152,768	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll

+ 2007-04-13 02:21:16	2,027,520	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.XML.dll

+ 2005-09-23 06:28:56	71,680	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL

+ 2007-04-13 02:21:28	1,166,672	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\vbc.exe

+ 2007-04-13 02:20:50	1,330,688	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll

+ 2007-04-13 02:20:52	406,016	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\webengine.dll

+ 2005-09-23 06:28:56	28,160	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll

+ 2000-08-31 06:00:00	28,160	----a-w	C:\WINDOWS\Nircmd.exe

+ 2002-02-27 16:50:00	197,120	----a-w	C:\WINDOWS\patchw32.dll

+ 2007-12-04 13:28:17	2,426	----a-w	C:\WINDOWS\pchealth\helpctr\PackageStore\SkuStore.bin

+ 2000-08-31 06:00:00	98,816	----a-w	C:\WINDOWS\sed.exe

+ 2000-08-31 06:00:00	161,792	----a-w	C:\WINDOWS\swreg.exe

+ 2000-08-31 06:00:00	136,704	----a-w	C:\WINDOWS\swsc.exe

+ 2000-08-31 06:00:00	212,480	----a-w	C:\WINDOWS\swxcacls.exe

+ 2001-08-17 19:36:34	2,000	----a-w	C:\WINDOWS\system\KEYBOARD.DRV

+ 2001-10-26 13:45:18	73,616	----a-w	C:\WINDOWS\system\MCIAVI.DRV

+ 2001-10-26 13:45:18	25,296	----a-w	C:\WINDOWS\system\MCISEQ.DRV

+ 2001-10-26 13:45:18	28,160	----a-w	C:\WINDOWS\system\MCIWAVE.DRV

+ 2001-08-17 19:36:40	2,032	----a-w	C:\WINDOWS\system\MOUSE.DRV

+ 2001-08-17 19:36:36	1,744	----a-w	C:\WINDOWS\system\SOUND.DRV

+ 2001-08-17 19:36:30	3,360	----a-w	C:\WINDOWS\system\SYSTEM.DRV

+ 2001-10-26 14:51:12	4,096	----a-w	C:\WINDOWS\system\TIMER.DRV

+ 2001-08-17 19:36:40	2,176	----a-w	C:\WINDOWS\system\VGA.DRV

+ 2001-08-17 19:36:54	13,600	----a-w	C:\WINDOWS\system\WFWNET.DRV

+ 2004-08-03 22:44:32	146,432	----a-w	C:\WINDOWS\system\WINSPOOL.DRV

- 2004-08-03 22:43:52	61,440	----a-w	C:\WINDOWS\system32\admparse.dll

+ 2007-08-13 16:39:20	71,680	----a-w	C:\WINDOWS\system32\admparse.dll

- 2004-08-03 22:43:52	100,864	----a-w	C:\WINDOWS\system32\advpack.dll

+ 2007-08-13 16:39:00	123,904	----a-w	C:\WINDOWS\system32\advpack.dll

+ 2001-03-02 19:52:40	15,360	----a-w	C:\WINDOWS\system32\asfsipc.dll

- 2007-10-11 06:14:30	1,023,488	----a-w	C:\WINDOWS\system32\browseui.dll

+ 2007-12-07 01:08:12	1,023,488	----a-w	C:\WINDOWS\system32\browseui.dll

- 2007-10-11 06:14:30	151,552	----a-w	C:\WINDOWS\system32\cdfview.dll

+ 2007-12-07 01:08:12	151,552	----a-w	C:\WINDOWS\system32\cdfview.dll

+ 2001-08-17 19:36:36	10,544	----a-w	C:\WINDOWS\system32\comm.drv

- 2004-08-03 22:43:56	35,328	----a-w	C:\WINDOWS\system32\corpol.dll

+ 2007-08-13 16:42:54	17,408	----a-w	C:\WINDOWS\system32\corpol.dll

- 2007-10-11 06:14:30	1,055,744	----a-w	C:\WINDOWS\system32\danim.dll

+ 2007-12-07 01:08:12	1,055,744	----a-w	C:\WINDOWS\system32\danim.dll

+ 2004-08-03 22:56:48	1,788	----a-w	C:\WINDOWS\system32\Dcache.bin

+ 2005-09-23 06:28:38	83,456	----a-w	C:\WINDOWS\system32\dfshim.dll

+ 2007-08-13 16:39:20	71,680	-c----w	C:\WINDOWS\system32\dllcache\admparse.dll

+ 2007-08-13 16:39:00	123,904	-c----w	C:\WINDOWS\system32\dllcache\advpack.dll

- 2007-10-11 06:14:30	1,023,488	-c----w	C:\WINDOWS\system32\dllcache\browseui.dll

+ 2007-12-07 01:08:12	1,023,488	----a-w	C:\WINDOWS\system32\dllcache\browseui.dll

- 2007-10-11 06:14:30	151,552	-c----w	C:\WINDOWS\system32\dllcache\cdfview.dll

+ 2007-12-07 01:08:12	151,552	----a-w	C:\WINDOWS\system32\dllcache\cdfview.dll

+ 2007-08-13 16:42:54	17,408	-c----w	C:\WINDOWS\system32\dllcache\corpol.dll

- 2005-01-28 12:44:28	28,672	-c--a-w	C:\WINDOWS\system32\dllcache\custsat.dll

+ 2007-08-13 16:54:10	33,792	-c--a-w	C:\WINDOWS\system32\dllcache\custsat.dll

- 2007-10-11 06:14:30	1,055,744	-c----w	C:\WINDOWS\system32\dllcache\danim.dll

+ 2007-12-07 01:08:12	1,055,744	----a-w	C:\WINDOWS\system32\dllcache\danim.dll

+ 2004-08-03 22:07:58	2,944	-c--a-w	C:\WINDOWS\system32\dllcache\drmkaud.sys

- 2007-10-11 06:14:30	357,888	-c----w	C:\WINDOWS\system32\dllcache\dxtmsft.dll

+ 2007-08-13 16:35:46	346,624	-c--a-w	C:\WINDOWS\system32\dllcache\dxtmsft.dll

- 2007-10-11 06:14:30	205,312	-c----w	C:\WINDOWS\system32\dllcache\dxtrans.dll

+ 2007-08-13 16:35:38	214,528	-c--a-w	C:\WINDOWS\system32\dllcache\dxtrans.dll

- 2007-10-11 06:14:30	55,808	-c----w	C:\WINDOWS\system32\dllcache\extmgr.dll

+ 2007-08-13 16:54:10	131,584	-c--a-w	C:\WINDOWS\system32\dllcache\extmgr.dll

+ 2007-08-13 16:18:02	60,416	-c----w	C:\WINDOWS\system32\dllcache\hmmapi.dll

+ 2007-08-13 16:39:06	54,784	-c----w	C:\WINDOWS\system32\dllcache\ie4uinit.exe

+ 2007-08-13 16:39:26	152,064	-c----w	C:\WINDOWS\system32\dllcache\ieakeng.dll

+ 2007-08-13 16:39:54	229,376	-c----w	C:\WINDOWS\system32\dllcache\ieaksie.dll

+ 2007-08-13 15:56:54	161,792	-c----w	C:\WINDOWS\system32\dllcache\ieakui.dll

+ 2007-08-13 16:39:50	382,976	-c----w	C:\WINDOWS\system32\dllcache\iedkcs32.dll

- 2007-10-10 11:16:27	18,432	-c----w	C:\WINDOWS\system32\dllcache\iedw.exe

+ 2007-08-13 16:44:02	69,120	-c--a-w	C:\WINDOWS\system32\dllcache\iedw.exe

+ 2007-08-13 16:45:18	78,336	-c----w	C:\WINDOWS\system32\dllcache\ieencode.dll

- 2007-10-11 06:14:30	251,392	-c----w	C:\WINDOWS\system32\dllcache\iepeers.dll

+ 2007-08-13 16:54:10	191,488	-c--a-w	C:\WINDOWS\system32\dllcache\iepeers.dll

+ 2007-08-13 16:39:10	43,008	-c----w	C:\WINDOWS\system32\dllcache\iernonce.dll

+ 2007-08-13 16:39:12	55,296	-c----w	C:\WINDOWS\system32\dllcache\iesetup.dll

+ 2007-08-13 16:43:56	622,080	-c----w	C:\WINDOWS\system32\dllcache\iexplore.exe

+ 2007-08-13 16:36:06	36,352	-c----w	C:\WINDOWS\system32\dllcache\imgutil.dll

- 2007-10-11 06:14:30	96,768	-c----w	C:\WINDOWS\system32\dllcache\inseng.dll

+ 2007-08-13 16:39:02	92,672	-c--a-w	C:\WINDOWS\system32\dllcache\inseng.dll

- 2007-11-14 07:28:56	450,560	-c----w	C:\WINDOWS\system32\dllcache\jscript.dll

+ 2007-08-13 16:38:04	491,520	-c--a-w	C:\WINDOWS\system32\dllcache\jscript.dll

- 2007-10-11 06:14:30	16,384	-c----w	C:\WINDOWS\system32\dllcache\jsproxy.dll

+ 2007-08-13 16:54:10	27,136	-c--a-w	C:\WINDOWS\system32\dllcache\jsproxy.dll

+ 2007-08-13 16:44:18	40,960	-c----w	C:\WINDOWS\system32\dllcache\licmgr10.dll

+ 2007-11-07 09:29:33	723,968	-c----w	C:\WINDOWS\system32\dllcache\lsasrv.dll

+ 2007-07-06 10:05:47	72,960	-c----w	C:\WINDOWS\system32\dllcache\mqac.sys

+ 2007-07-06 12:51:40	138,240	-c----w	C:\WINDOWS\system32\dllcache\mqad.dll

+ 2007-07-06 12:51:40	47,104	-c----w	C:\WINDOWS\system32\dllcache\mqdscli.dll

+ 2007-07-06 12:51:40	16,896	-c----w	C:\WINDOWS\system32\dllcache\mqise.dll

+ 2007-07-06 12:51:40	660,992	-c----w	C:\WINDOWS\system32\dllcache\mqqm.dll

+ 2007-07-06 12:51:40	177,152	-c----w	C:\WINDOWS\system32\dllcache\mqrt.dll

+ 2007-07-06 12:51:40	95,744	-c----w	C:\WINDOWS\system32\dllcache\mqsec.dll

+ 2007-07-06 12:51:40	48,640	-c----w	C:\WINDOWS\system32\dllcache\mqupgrd.dll

+ 2007-07-06 12:51:40	512,000	-c----w	C:\WINDOWS\system32\dllcache\mqutil.dll

+ 2007-12-18 09:51:35	179,584	-c----w	C:\WINDOWS\system32\dllcache\mrxdav.sys

+ 2007-08-13 16:32:30	45,568	-c----w	C:\WINDOWS\system32\dllcache\mshta.exe

- 2007-10-30 10:19:06	3,079,680	-c----w	C:\WINDOWS\system32\dllcache\mshtml.dll

+ 2007-08-13 16:54:12	3,578,368	-c--a-w	C:\WINDOWS\system32\dllcache\mshtml.dll

- 2007-10-11 06:14:31	449,024	-c----w	C:\WINDOWS\system32\dllcache\mshtmled.dll

+ 2007-08-13 16:54:10	475,648	-c--a-w	C:\WINDOWS\system32\dllcache\mshtmled.dll

+ 2007-08-13 16:01:12	48,128	-c----w	C:\WINDOWS\system32\dllcache\mshtmler.dll

+ 2007-08-13 16:54:10	156,160	-c----w	C:\WINDOWS\system32\dllcache\msls31.dll

- 2007-10-11 06:14:31	146,432	-c----w	C:\WINDOWS\system32\dllcache\msrating.dll

+ 2007-08-13 16:44:26	192,000	-c--a-w	C:\WINDOWS\system32\dllcache\msrating.dll

- 2007-10-11 06:14:31	532,480	-c----w	C:\WINDOWS\system32\dllcache\mstime.dll

+ 2007-08-13 16:54:10	670,720	-c--a-w	C:\WINDOWS\system32\dllcache\mstime.dll

+ 2007-08-13 16:44:06	101,376	-c----w	C:\WINDOWS\system32\dllcache\occache.dll

+ 2007-12-04 18:42:02	550,912	-c----w	C:\WINDOWS\system32\dllcache\oleaut32.dll

- 2007-10-11 06:14:31	39,424	-c----w	C:\WINDOWS\system32\dllcache\pngfilt.dll

+ 2007-08-13 16:36:12	44,544	-c--a-w	C:\WINDOWS\system32\dllcache\pngfilt.dll

- 2007-10-11 06:14:31	1,494,528	-c----w	C:\WINDOWS\system32\dllcache\shdocvw.dll

+ 2007-12-07 01:08:13	1,494,528	----a-w	C:\WINDOWS\system32\dllcache\shdocvw.dll

- 2007-10-11 06:14:31	474,112	-c----w	C:\WINDOWS\system32\dllcache\shlwapi.dll

+ 2007-12-07 01:08:13	474,112	----a-w	C:\WINDOWS\system32\dllcache\shlwapi.dll

+ 2007-08-13 16:44:30	105,984	-c----w	C:\WINDOWS\system32\dllcache\url.dll

- 2007-10-11 06:14:32	616,448	-c----w	C:\WINDOWS\system32\dllcache\urlmon.dll

+ 2007-08-13 16:54:10	1,162,240	-c--a-w	C:\WINDOWS\system32\dllcache\urlmon.dll

+ 2007-08-13 16:54:10	413,696	-c----w	C:\WINDOWS\system32\dllcache\vbscript.dll

+ 2007-08-13 16:54:10	765,952	-c----w	C:\WINDOWS\system32\dllcache\VGX.dll

+ 2004-08-03 23:44:32	23,552	-c--a-w	C:\WINDOWS\system32\dllcache\wdmaud.drv

+ 2007-08-13 16:54:10	231,424	-c----w	C:\WINDOWS\system32\dllcache\webcheck.dll

- 2007-10-11 06:14:32	662,016	-c----w	C:\WINDOWS\system32\dllcache\wininet.dll

+ 2007-08-13 16:54:10	818,688	-c--a-w	C:\WINDOWS\system32\dllcache\wininet.dll

- 2005-01-28 12:44:28	5,525,504	-c--a-w	C:\WINDOWS\system32\dllcache\wmp.dll

+ 2007-04-30 07:20:24	5,537,792	-c--a-w	C:\WINDOWS\system32\dllcache\wmp.dll

+ 2007-06-29 13:47:34	34,304	----a-w	C:\WINDOWS\system32\drivers\AmdLLD.sys

+ 2002-07-17 08:05:10	16,512	----a-w	C:\WINDOWS\system32\drivers\ASPI32.SYS

- 2007-12-04 14:56:02	93,264	----a-w	C:\WINDOWS\system32\drivers\aswmon.sys

+ 2008-01-17 15:34:01	93,264	----a-w	C:\WINDOWS\system32\drivers\aswmon.sys

+ 2006-05-19 21:16:24	2,432	------w	C:\WINDOWS\system32\drivers\cdr4_xp.sys

+ 2006-05-19 21:16:24	2,560	------w	C:\WINDOWS\system32\drivers\cdralw2k.sys

+ 2004-08-03 22:07:58	2,944	----a-w	C:\WINDOWS\system32\drivers\drmkaud.sys

- 2004-08-03 20:58:22	72,960	----a-w	C:\WINDOWS\system32\drivers\mqac.sys

+ 2007-07-06 10:05:47	72,960	----a-w	C:\WINDOWS\system32\drivers\mqac.sys

- 2004-08-03 21:00:58	181,248	----a-w	C:\WINDOWS\system32\drivers\mrxdav.sys

+ 2007-12-18 09:51:35	179,584	----a-w	C:\WINDOWS\system32\drivers\mrxdav.sys

+ 2001-08-17 19:47:40	2,944	----a-w	C:\WINDOWS\system32\drivers\null.sys

+ 2007-07-15 02:37:04	27,992	----a-w	C:\WINDOWS\system32\drivers\pstrip.sys

- 2006-05-16 20:23:54	46,080	------w	C:\WINDOWS\system32\drivers\PxHelp20.sys

+ 2007-03-07 23:51:00	43,528	------w	C:\WINDOWS\system32\drivers\PxHelp20.sys

+ 2007-08-07 00:15:07	33,052	----a-w	C:\WINDOWS\system32\drivers\scdemu.sys

- 2004-07-17 09:36:38	27,440	----a-w	C:\WINDOWS\system32\drivers\secdrv.sys

+ 2007-11-13 10:25:55	20,480	----a-w	C:\WINDOWS\system32\drivers\secdrv.sys

+ 2005-03-03 17:53:57	48,640	----a-w	C:\WINDOWS\system32\drivers\sfdrv01.sys

+ 2005-02-23 15:59:54	6,656	----a-w	C:\WINDOWS\system32\drivers\sfhlp02.sys

+ 2004-12-03 10:20:41	20,544	----a-w	C:\WINDOWS\system32\drivers\sfsync02.sys

- 2007-10-11 06:14:30	357,888	----a-w	C:\WINDOWS\system32\dxtmsft.dll

+ 2007-08-13 16:35:46	346,624	----a-w	C:\WINDOWS\system32\dxtmsft.dll

- 2007-10-11 06:14:30	205,312	----a-w	C:\WINDOWS\system32\dxtrans.dll

+ 2007-08-13 16:35:38	214,528	----a-w	C:\WINDOWS\system32\dxtrans.dll

- 2007-10-11 06:14:30	55,808	----a-w	C:\WINDOWS\system32\extmgr.dll

+ 2007-08-13 16:54:10	131,584	----a-w	C:\WINDOWS\system32\extmgr.dll

- 2007-12-04 20:09:51	108,600	----a-w	C:\WINDOWS\system32\FNTCACHE.DAT

+ 2008-01-06 12:41:24	102,232	----a-w	C:\WINDOWS\system32\FNTCACHE.DAT

+ 2007-08-13 16:36:26	61,952	------w	C:\WINDOWS\system32\icardie.dll

+ 2006-06-29 06:05:44	26,112	------w	C:\WINDOWS\system32\idndl.dll

- 2004-08-03 22:44:22	34,304	----a-w	C:\WINDOWS\system32\ie4uinit.exe

+ 2007-08-13 16:39:06	54,784	----a-w	C:\WINDOWS\system32\ie4uinit.exe

- 2004-08-03 22:44:00	139,264	----a-w	C:\WINDOWS\system32\ieakeng.dll

+ 2007-08-13 16:39:26	152,064	----a-w	C:\WINDOWS\system32\ieakeng.dll

- 2004-08-03 22:44:00	219,648	----a-w	C:\WINDOWS\system32\ieaksie.dll

+ 2007-08-13 16:39:54	229,376	----a-w	C:\WINDOWS\system32\ieaksie.dll

- 2001-10-26 15:28:02	237,568	----a-w	C:\WINDOWS\system32\ieakui.dll

+ 2007-08-13 15:56:54	161,792	----a-w	C:\WINDOWS\system32\ieakui.dll

+ 2007-02-12 14:10:12	2,451,312	------w	C:\WINDOWS\system32\ieapfltr.dat

+ 2007-07-11 10:27:48	383,488	------w	C:\WINDOWS\system32\ieapfltr.dll

- 2004-08-03 22:44:00	323,584	----a-w	C:\WINDOWS\system32\iedkcs32.dll

+ 2007-08-13 16:39:50	382,976	----a-w	C:\WINDOWS\system32\iedkcs32.dll

- 2004-08-03 22:44:00	81,920	----a-w	C:\WINDOWS\system32\ieencode.dll

+ 2007-08-13 16:45:18	78,336	----a-w	C:\WINDOWS\system32\ieencode.dll

+ 2007-08-13 16:54:10	6,049,280	------w	C:\WINDOWS\system32\ieframe.dll

- 2007-10-11 06:14:30	251,392	----a-w	C:\WINDOWS\system32\iepeers.dll

+ 2007-08-13 16:54:10	191,488	----a-w	C:\WINDOWS\system32\iepeers.dll

- 2004-08-03 22:44:00	48,640	----a-w	C:\WINDOWS\system32\iernonce.dll

+ 2007-08-13 16:39:10	43,008	----a-w	C:\WINDOWS\system32\iernonce.dll

+ 2007-08-13 16:34:04	266,752	------w	C:\WINDOWS\system32\iertutil.dll

- 2004-08-03 22:44:00	63,488	----a-w	C:\WINDOWS\system32\iesetup.dll

+ 2007-08-13 16:39:12	55,296	----a-w	C:\WINDOWS\system32\iesetup.dll

+ 2007-08-13 16:39:10	13,312	----a-w	C:\WINDOWS\system32\ieudinit.exe

+ 2007-08-13 16:54:10	180,736	------w	C:\WINDOWS\system32\ieui.dll

- 2004-08-03 22:44:00	35,840	----a-w	C:\WINDOWS\system32\imgutil.dll

+ 2007-08-13 16:36:06	36,352	----a-w	C:\WINDOWS\system32\imgutil.dll

- 2007-10-11 06:14:30	96,768	----a-w	C:\WINDOWS\system32\inseng.dll

+ 2007-08-13 16:39:02	92,672	----a-w	C:\WINDOWS\system32\inseng.dll

- 2007-09-24 21:30:28	135,168	----a-w	C:\WINDOWS\system32\java.exe

+ 2008-02-22 00:23:35	135,168	----a-w	C:\WINDOWS\system32\java.exe

- 2007-09-24 21:30:30	135,168	----a-w	C:\WINDOWS\system32\javaw.exe

+ 2008-02-22 00:23:39	135,168	----a-w	C:\WINDOWS\system32\javaw.exe

- 2007-09-24 22:31:42	139,264	----a-w	C:\WINDOWS\system32\javaws.exe

+ 2008-02-22 01:33:32	139,264	----a-w	C:\WINDOWS\system32\javaws.exe

- 2007-11-14 07:28:56	450,560	----a-w	C:\WINDOWS\system32\jscript.dll

+ 2007-08-13 16:38:04	491,520	----a-w	C:\WINDOWS\system32\jscript.dll

- 2007-10-11 06:14:30	16,384	----a-w	C:\WINDOWS\system32\jsproxy.dll

+ 2007-08-13 16:54:10	27,136	----a-w	C:\WINDOWS\system32\jsproxy.dll

+ 2001-08-17 19:36:34	2,000	----a-w	C:\WINDOWS\system32\keyboard.drv

+ 2001-10-26 13:45:18	223,680	----a-w	C:\WINDOWS\system32\lanman.drv

- 2004-08-03 22:44:02	22,016	----a-w	C:\WINDOWS\system32\licmgr10.dll

+ 2007-08-13 16:44:18	40,960	----a-w	C:\WINDOWS\system32\licmgr10.dll

- 2006-08-17 12:30:06	723,968	----a-w	C:\WINDOWS\system32\lsasrv.dll

+ 2007-11-07 09:29:33	723,968	----a-w	C:\WINDOWS\system32\lsasrv.dll

+ 2001-10-26 15:27:00	2,560	----a-w	C:\WINDOWS\system32\lz32.dll

+ 2001-10-26 13:45:18	73,616	----a-w	C:\WINDOWS\system32\mciavi.drv

+ 2001-10-26 13:45:18	25,296	----a-w	C:\WINDOWS\system32\mciseq.drv

+ 2001-10-26 13:45:18	28,160	----a-w	C:\WINDOWS\system32\mciwave.drv

+ 2001-08-17 19:36:40	2,032	----a-w	C:\WINDOWS\system32\mouse.drv

- 2004-08-03 22:44:04	138,240	----a-w	C:\WINDOWS\system32\mqad.dll

+ 2007-07-06 12:51:40	138,240	----a-w	C:\WINDOWS\system32\mqad.dll

- 2004-08-03 22:44:04	47,104	----a-w	C:\WINDOWS\system32\mqdscli.dll

+ 2007-07-06 12:51:40	47,104	----a-w	C:\WINDOWS\system32\mqdscli.dll

- 2004-08-03 22:44:04	16,896	----a-w	C:\WINDOWS\system32\mqise.dll

+ 2007-07-06 12:51:40	16,896	----a-w	C:\WINDOWS\system32\mqise.dll

- 2004-08-03 22:44:04	660,992	----a-w	C:\WINDOWS\system32\mqqm.dll

+ 2007-07-06 12:51:40	660,992	----a-w	C:\WINDOWS\system32\mqqm.dll

- 2004-08-03 22:44:04	177,152	----a-w	C:\WINDOWS\system32\mqrt.dll

+ 2007-07-06 12:51:40	177,152	----a-w	C:\WINDOWS\system32\mqrt.dll

- 2004-08-03 22:44:04	95,744	----a-w	C:\WINDOWS\system32\mqsec.dll

+ 2007-07-06 12:51:40	95,744	----a-w	C:\WINDOWS\system32\mqsec.dll

- 2004-08-03 22:44:04	48,640	----a-w	C:\WINDOWS\system32\mqupgrd.dll

+ 2007-07-06 12:51:40	48,640	----a-w	C:\WINDOWS\system32\mqupgrd.dll

- 2004-08-03 22:44:04	512,000	----a-w	C:\WINDOWS\system32\mqutil.dll

+ 2007-07-06 12:51:40	512,000	----a-w	C:\WINDOWS\system32\mqutil.dll

- 2007-12-02 23:00:05	18,684,536	----a-w	C:\WINDOWS\system32\MRT.exe

+ 2008-04-05 20:56:22	19,836,024	----a-w	C:\WINDOWS\system32\MRT.exe

+ 2001-10-26 15:30:08	20,992	----a-w	C:\WINDOWS\system32\msacm32.drv

+ 2007-04-13 02:21:14	271,360	----a-w	C:\WINDOWS\system32\mscoree.dll

+ 2005-09-23 06:28:52	150,016	----a-w	C:\WINDOWS\system32\mscorier.dll

+ 2005-09-23 06:28:52	74,240	----a-w	C:\WINDOWS\system32\mscories.dll

+ 2007-08-13 16:54:10	458,752	------w	C:\WINDOWS\system32\msfeeds.dll

+ 2007-08-13 16:54:10	50,688	------w	C:\WINDOWS\system32\msfeedsbs.dll

+ 2007-08-13 16:36:40	12,288	------w	C:\WINDOWS\system32\msfeedssync.exe

+ 2004-08-03 22:44:32	188,416	----a-w	C:\WINDOWS\system32\msh261.drv

+ 2004-08-03 22:54:52	294,912	----a-w	C:\WINDOWS\system32\msh263.drv

- 2004-08-03 22:44:24	29,184	----a-w	C:\WINDOWS\system32\mshta.exe

+ 2007-08-13 16:32:30	45,568	----a-w	C:\WINDOWS\system32\mshta.exe

- 2007-10-30 10:19:06	3,079,680	----a-w	C:\WINDOWS\system32\mshtml.dll

+ 2007-08-13 16:54:12	3,578,368	----a-w	C:\WINDOWS\system32\mshtml.dll

- 2007-10-11 06:14:31	449,024	----a-w	C:\WINDOWS\system32\mshtmled.dll

+ 2007-08-13 16:54:10	475,648	----a-w	C:\WINDOWS\system32\mshtmled.dll

- 2004-08-03 22:42:58	57,344	----a-w	C:\WINDOWS\system32\mshtmler.dll

+ 2007-08-13 16:01:12	48,128	----a-w	C:\WINDOWS\system32\mshtmler.dll

- 2001-10-26 15:26:58	146,432	----a-w	C:\WINDOWS\system32\msls31.dll

+ 2007-08-13 16:54:10	156,160	----a-w	C:\WINDOWS\system32\msls31.dll

- 2007-10-11 06:14:31	146,432	----a-w	C:\WINDOWS\system32\msrating.dll

+ 2007-08-13 16:44:26	192,000	----a-w	C:\WINDOWS\system32\msrating.dll

- 2007-10-11 06:14:31	532,480	----a-w	C:\WINDOWS\system32\mstime.dll

+ 2007-08-13 16:54:10	670,720	----a-w	C:\WINDOWS\system32\mstime.dll

+ 2003-03-19 00:52:16	6,144	----a-w	C:\WINDOWS\system32\msvkas.dll

+ 2003-02-20 17:43:36	4,096	----a-w	C:\WINDOWS\system32\mui\[u]0[/u]409\mscoreer.dll

+ 2006-12-22 12:02:36	6,144	----a-w	C:\WINDOWS\system32\mui\[u]0[/u]409\mscorees.dll

+ 2003-02-20 18:16:34	32,768	----a-w	C:\WINDOWS\system32\netfxperf.dll

+ 2001-08-17 19:13:24	2,656	----a-w	C:\WINDOWS\system32\netware.drv

+ 2006-06-28 15:59:26	24,576	------w	C:\WINDOWS\system32\nlsdl.dll

+ 2006-06-29 06:05:44	23,552	------w	C:\WINDOWS\system32\normaliz.dll

+ 2001-03-02 19:52:42	8,704	----a-w	C:\WINDOWS\system32\npwmsdrm.dll

- 2004-08-03 22:44:08	97,280	----a-w	C:\WINDOWS\system32\occache.dll

+ 2007-08-13 16:44:06	101,376	----a-w	C:\WINDOWS\system32\occache.dll

- 2007-05-17 11:30:17	549,376	----a-w	C:\WINDOWS\system32\oleaut32.dll

+ 2007-12-04 18:42:02	550,912	----a-w	C:\WINDOWS\system32\oleaut32.dll

- 2007-12-22 12:29:44	39,992	----a-w	C:\WINDOWS\system32\perfc009.dat

+ 2008-03-30 14:22:28	62,344	----a-w	C:\WINDOWS\system32\perfc009.dat

- 2007-12-22 12:29:44	49,492	----a-w	C:\WINDOWS\system32\perfc015.dat

+ 2008-03-30 14:22:28	79,188	----a-w	C:\WINDOWS\system32\perfc015.dat

- 2007-12-22 12:29:44	311,604	----a-w	C:\WINDOWS\system32\perfh009.dat

+ 2008-03-30 14:22:28	401,064	----a-w	C:\WINDOWS\system32\perfh009.dat

- 2007-12-22 12:29:44	355,486	----a-w	C:\WINDOWS\system32\perfh015.dat

+ 2008-03-30 14:22:28	457,678	----a-w	C:\WINDOWS\system32\perfh015.dat

- 2007-10-11 06:14:31	39,424	----a-w	C:\WINDOWS\system32\pngfilt.dll

+ 2007-08-13 16:36:12	44,544	----a-w	C:\WINDOWS\system32\pngfilt.dll

- 2006-05-16 20:23:54	430,080	------w	C:\WINDOWS\system32\px.dll

+ 2007-03-07 23:51:00	547,576	------w	C:\WINDOWS\system32\px.dll

- 2006-05-16 20:23:54	57,344	------w	C:\WINDOWS\system32\pxcpya64.exe

+ 2007-03-07 23:51:00	64,760	------w	C:\WINDOWS\system32\pxcpya64.exe

- 2006-05-16 20:23:54	450,560	------w	C:\WINDOWS\system32\pxdrv.dll

+ 2007-03-07 23:51:00	510,712	------w	C:\WINDOWS\system32\pxdrv.dll

- 2006-05-16 20:23:54	61,440	------w	C:\WINDOWS\system32\pxhpinst.exe

+ 2007-03-07 23:51:00	72,440	------w	C:\WINDOWS\system32\pxhpinst.exe

- 2006-05-16 20:23:54	56,832	------w	C:\WINDOWS\system32\pxinsa64.exe

+ 2007-03-07 23:51:00	64,760	------w	C:\WINDOWS\system32\pxinsa64.exe

- 2006-05-16 20:23:54	176,128	------w	C:\WINDOWS\system32\pxmas.dll

+ 2007-03-07 23:51:00	187,128	------w	C:\WINDOWS\system32\pxmas.dll

- 2006-05-16 20:23:54	1,257,472	------w	C:\WINDOWS\system32\pxsfs.dll

+ 2007-03-07 23:51:00	1,628,920	------w	C:\WINDOWS\system32\pxsfs.dll

- 2006-05-16 20:23:56	339,968	------w	C:\WINDOWS\system32\pxwave.dll

+ 2007-03-07 23:51:00	379,640	------w	C:\WINDOWS\system32\pxwave.dll

+ 2004-08-03 23:44:32	23,552	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]000\DriverFiles\i386\wdmaud.drv

- 2007-10-04 16:14:00	5,783,424	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]001\DriverFiles\nv4_disp.dll

+ 2007-12-05 00:41:00	5,773,568	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]001\DriverFiles\nv4_disp.dll

- 2007-10-04 16:14:00	6,854,464	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]001\DriverFiles\nv4_mini.sys

+ 2007-12-05 00:41:00	7,435,392	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]001\DriverFiles\nv4_mini.sys

- 2007-10-04 16:14:00	364,544	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]001\DriverFiles\nvapi.dll

+ 2007-12-05 00:41:00	385,024	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]001\DriverFiles\nvapi.dll

- 2007-10-04 16:14:00	36,864	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]001\DriverFiles\nvcod.dll

+ 2007-12-05 00:41:00	35,328	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]001\DriverFiles\nvcod.dll

- 2007-10-04 16:14:00	8,491,008	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]001\DriverFiles\nvcpl.dll

+ 2007-12-05 00:41:00	8,523,776	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]001\DriverFiles\nvcpl.dll

+ 2007-12-05 00:41:00	1,089,536	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]001\DriverFiles\nvcuda.dll

- 2007-10-04 16:14:00	6,344,704	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]001\DriverFiles\nvdisps.dll

+ 2007-12-05 00:41:00	6,549,504	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]001\DriverFiles\nvdisps.dll

- 2007-10-04 16:14:00	3,334,144	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]001\DriverFiles\nvgames.dll

+ 2007-12-05 00:41:00	3,420,160	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]001\DriverFiles\nvgames.dll

- 2007-10-04 16:14:00	229,376	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]001\DriverFiles\nvmccs.dll

+ 2007-12-05 00:41:00	229,376	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]001\DriverFiles\nvmccs.dll

- 2007-10-04 16:14:00	188,416	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]001\DriverFiles\nvmccss.dll

+ 2007-12-05 00:41:00	188,416	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]001\DriverFiles\nvmccss.dll

- 2007-10-04 16:14:00	81,920	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]001\DriverFiles\nvmctray.dll

+ 2007-12-05 00:41:00	81,920	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]001\DriverFiles\nvmctray.dll

- 2007-10-04 16:14:00	1,150,976	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]001\DriverFiles\nvmobls.dll

+ 2007-12-05 00:41:00	1,228,800	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]001\DriverFiles\nvmobls.dll

- 2007-10-04 16:14:00	286,720	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]001\DriverFiles\nvnt4cpl.dll

+ 2007-12-05 00:41:00	286,720	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]001\DriverFiles\nvnt4cpl.dll

- 2007-10-04 16:14:00	6,750,208	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]001\DriverFiles\nvoglnt.dll

+ 2007-12-05 00:41:00	6,901,760	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]001\DriverFiles\nvoglnt.dll

- 2007-10-04 16:14:00	155,716	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]001\DriverFiles\nvsvc32.exe

+ 2007-12-05 00:41:00	155,716	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]001\DriverFiles\nvsvc32.exe

- 2007-10-04 16:14:00	3,551,232	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]001\DriverFiles\nvvitvs.dll

+ 2007-12-05 00:41:00	3,710,976	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]001\DriverFiles\nvvitvs.dll

- 2007-10-04 16:14:00	81,920	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]001\DriverFiles\nvwddi.dll

+ 2007-12-05 00:41:00	81,920	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]001\DriverFiles\nvwddi.dll

- 2007-10-04 16:14:00	2,371,584	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]001\DriverFiles\nvwss.dll

+ 2007-12-05 00:41:00	2,498,560	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]001\DriverFiles\nvwss.dll

- 2007-10-11 06:14:31	1,494,528	----a-w	C:\WINDOWS\system32\shdocvw.dll

+ 2007-12-07 01:08:13	1,494,528	----a-w	C:\WINDOWS\system32\shdocvw.dll

- 2007-10-11 06:14:31	474,112	----a-w	C:\WINDOWS\system32\shlwapi.dll

+ 2007-12-07 01:08:13	474,112	----a-w	C:\WINDOWS\system32\shlwapi.dll

+ 2007-03-15 11:00:36	466,432	----a-w	C:\WINDOWS\system32\SkanerOnline.dll

+ 2007-01-19 08:40:42	89,088	----a-w	C:\WINDOWS\system32\SkanerOnlineUninstall.exe

+ 2001-08-17 19:36:36	1,744	----a-w	C:\WINDOWS\system32\sound.drv

- 2007-03-06 03:28:35	16,096	------w	C:\WINDOWS\system32\spmsg.dll

+ 2006-09-06 15:43:48	16,096	------w	C:\WINDOWS\system32\spmsg.dll

- 2005-06-28 09:21:34	22,752	----a-w	C:\WINDOWS\system32\spupdsvc.exe

+ 2006-09-06 15:43:48	22,752	----a-w	C:\WINDOWS\system32\spupdsvc.exe

+ 2001-08-17 19:36:30	3,360	----a-w	C:\WINDOWS\system32\system.drv

+ 2001-10-26 14:51:12	4,096	----a-w	C:\WINDOWS\system32\timer.drv

- 2004-08-03 22:44:14	37,888	----a-w	C:\WINDOWS\system32\url.dll

+ 2007-08-13 16:44:30	105,984	----a-w	C:\WINDOWS\system32\url.dll

- 2007-10-11 06:14:32	616,448	----a-w	C:\WINDOWS\system32\urlmon.dll

+ 2007-08-13 16:54:10	1,162,240	----a-w	C:\WINDOWS\system32\urlmon.dll

+ 2003-02-20 18:06:20	282,624	----a-w	C:\WINDOWS\system32\URTTemp\fusion.dll

+ 2003-02-20 18:06:24	155,648	----a-w	C:\WINDOWS\system32\URTTemp\mscoree.dll

+ 2003-02-20 18:09:18	77,824	----a-w	C:\WINDOWS\system32\URTTemp\mscorsn.dll

+ 2003-02-20 18:08:32	2,482,176	----a-w	C:\WINDOWS\system32\URTTemp\mscorwks.dll

+ 2003-02-21 03:42:22	348,160	----a-w	C:\WINDOWS\system32\URTTemp\msvcr71.dll

+ 2003-02-21 04:16:08	49,152	----a-w	C:\WINDOWS\system32\URTTemp\regtlib.exe

- 2004-08-03 22:44:14	417,792	----a-w	C:\WINDOWS\system32\vbscript.dll

+ 2007-08-13 16:54:10	413,696	----a-w	C:\WINDOWS\system32\vbscript.dll

+ 2001-08-17 19:36:40	2,176	----a-w	C:\WINDOWS\system32\vga.drv

- 2006-05-16 20:23:56	28,672	------w	C:\WINDOWS\system32\vxblock.dll

+ 2007-03-07 23:51:00	39,672	------w	C:\WINDOWS\system32\vxblock.dll

+ 2004-08-03 23:44:32	23,552	----a-w	C:\WINDOWS\system32\wdmaud.drv

- 2004-08-03 22:44:14	279,552	----a-w	C:\WINDOWS\system32\webcheck.dll

+ 2007-08-13 16:54:10	231,424	----a-w	C:\WINDOWS\system32\webcheck.dll

+ 2001-08-17 19:36:54	13,600	----a-w	C:\WINDOWS\system32\wfwnet.drv

+ 2007-08-13 16:45:16	206,336	------w	C:\WINDOWS\system32\WinFXDocObj.exe

+ 1994-09-20 23:00:00	12,800	----a-w	C:\WINDOWS\system32\WING32.DLL

- 2007-10-11 06:14:32	662,016	----a-w	C:\WINDOWS\system32\wininet.dll

+ 2007-08-13 16:54:10	818,688	----a-w	C:\WINDOWS\system32\wininet.dll

+ 2001-08-17 19:36:46	2,864	----a-w	C:\WINDOWS\system32\winsock.dll

+ 2004-08-03 22:44:32	146,432	----a-w	C:\WINDOWS\system32\winspool.drv

+ 2001-08-17 19:36:40	2,112	----a-w	C:\WINDOWS\system32\winspool.exe

- 2005-01-28 12:44:28	5,525,504	----a-w	C:\WINDOWS\system32\wmp.dll

+ 2007-04-30 07:20:24	5,537,792	----a-w	C:\WINDOWS\system32\wmp.dll

+ 2001-03-17 20:34:12	22,528	----a-w	C:\WINDOWS\system32\WNASPI32.DLL

+ 2001-08-17 19:36:52	2,736	----a-w	C:\WINDOWS\system32\wowdeb.exe

+ 2006-07-14 15:51:51	121,856	------w	C:\WINDOWS\system32\xmllite.dll

- 2007-10-29 15:35:22	122,368	----a-w	C:\WINDOWS\system32\xpsp3res.dll

+ 2007-12-06 23:40:40	368,640	----a-w	C:\WINDOWS\system32\xpsp3res.dll

+ 2000-12-08 20:59:38	122,880	----a-w	C:\WINDOWS\UnGins.exe

+ 2000-08-31 06:00:00	49,152	----a-w	C:\WINDOWS\VFind.exe

+ 2006-06-05 13:14:28	479,232	----a-w	C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\msvcm80.dll

+ 2006-06-05 13:14:28	548,864	----a-w	C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\msvcp80.dll

+ 2006-06-05 13:14:28	626,688	----a-w	C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\msvcr80.dll

+ 2008-01-05 18:50:42	258,048	----a-w	C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll

+ 2008-01-05 18:50:42	114,176	----a-w	C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll

+ 2000-08-31 06:00:00	68,096	----a-w	C:\WINDOWS\zip.exe

.

-- Snapshot reset to current date --

.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* empty entries & legit default entries are not shown 

REGEDIT4


[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"ISUSPM"="C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" [2006-09-10 23:56 218032]

"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 00:44 15360]


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-12-05 02:41 8523776]

"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 05:25 144784]

"CTSysVol"="C:\Program Files\Creative\SBAudigy\Surround Mixer\CTSysVol.exe" [2005-10-31 11:51 57344]

"P17Helper"="P17.dll" [2005-05-03 20:38 64512 C:\WINDOWS\system32\P17.DLL]

"UpdReg"="C:\WINDOWS\UpdReg.EXE" [2000-05-11 02:00 90112]

"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2008-03-29 19:37 79224]

"nwiz"="nwiz.exe" [2007-12-05 02:41 1626112 C:\WINDOWS\system32\nwiz.exe]

"amd_dc_opt"="C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe" [2007-07-23 12:06 77824]

"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2007-12-05 02:41 81920]

"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-05-11 14:06 40048]


[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-04 00:44 15360]


[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Adobe Reader Speed Launch.lnk]

path=C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Reader Speed Launch.lnk

backup=C:\WINDOWS\pss\Adobe Reader Speed Launch.lnkCommon Startup


[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Adobe Reader Synchronizer.lnk]

path=C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Reader Synchronizer.lnk

backup=C:\WINDOWS\pss\Adobe Reader Synchronizer.lnkCommon Startup


[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Device Detector 3.lnk]

path=C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Device Detector 3.lnk

backup=C:\WINDOWS\pss\Device Detector 3.lnkCommon Startup


[HKLM\~\startupfolder\C:^Documents and Settings^Kiwaczek^Menu Start^Programy^Autostart^MagicDisc.lnk]

path=C:\Documents and Settings\Kiwaczek\Menu Start\Programy\Autostart\MagicDisc.lnk

backup=C:\WINDOWS\pss\MagicDisc.lnkStartup


[HKLM\~\startupfolder\C:^Documents and Settings^Kiwaczek^Menu Start^Programy^Autostart^OpenOffice.org 2.3.lnk]

path=C:\Documents and Settings\Kiwaczek\Menu Start\Programy\Autostart\OpenOffice.org 2.3.lnk

backup=C:\WINDOWS\pss\OpenOffice.org 2.3.lnkStartup


[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BearShare]

--a------ 2006-08-01 18:04 3313664 C:\Program Files\BearShare\BearShare.exe


[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Flashget]

--a------ 2007-09-25 10:10 2007088 C:\Program Files\FlashGet\flashget.exe


[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Komunikator]

--a------ 2007-11-07 16:33 6234624 C:\Program Files\Tlen.pl\tlen.exe


[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]

--a------ 2001-07-09 12:50 155648 C:\WINDOWS\system32\NeroCheck.exe


[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]

--a------ 2007-12-05 02:41 1626112 C:\WINDOWS\system32\nwiz.exe


[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]

C:\Program Files\Valve\Steam\\Steam.exe


[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]

--a------ 2008-04-01 20:49 36352 C:\Program Files\Winamp\winampa.exe


[HKEY_LOCAL_MACHINE\software\microsoft\security center]

"AntiVirusOverride"=dword:00000001


[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"C:\\Program Files\\Tlen.pl\\tlen.exe"=

"C:\\Program Files\\FlashGet\\flashget.exe"=

"C:\\Program Files\\BearShare\\BearShare.exe"=

"C:\\Program Files\\Honor_pol\\MOHAA.EXE"=

"C:\\Program Files\\Raven\\SOF\\SoF.exe"=

"C:\\Program Files\\Electronic Arts\\Crytek\\Crysis\\Bin32\\Crysis.exe"=

"C:\\Program Files\\Electronic Arts\\Crytek\\Crysis\\Bin32\\CrysisDedicatedServer.exe"=

"C:\\Program Files\\Opera\\Opera.exe"=

"C:\\Program Files\\THQ\\S.T.A.L.K.E.R. - Shadow of Chernobyl\\bin\\XR_3DA.exe"=

"C:\\Program Files\\THQ\\S.T.A.L.K.E.R. - Shadow of Chernobyl\\bin\\dedicated\\XR_3DA.exe"=


S1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-03-29 19:31]

S2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-03-29 19:35]

S2 PStrip;PStrip;C:\WINDOWS\system32\drivers\pstrip.sys [2007-07-15 04:37]

S3 Amps2prt;A4Tech PS/2 Port Mouse Driver;C:\WINDOWS\system32\DRIVERS\Amps2prt.sys [2007-02-10 03:04]

S3 ASPI;Advanced SCSI Programming Interface Driver;C:\WINDOWS\System32\DRIVERS\ASPI32.sys [2002-07-17 10:05]

S3 VNUSB;VN Series Device;C:\WINDOWS\system32\DRIVERS\VNUSB.sys [2003-12-15 19:22]


[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\H]

\Shell\AutoRun\command - H:\setup.exe


[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{53ba6d58-0732-11dd-ab59-001d9200d72c}]

\Shell\AutoRun\command - G:\22wcb21o.exe

\Shell\explore\Command - G:\22wcb21o.exe

\Shell\open\Command - G:\22wcb21o.exe


[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{698bfc3c-da2d-11dc-aaf9-001d9200d72c}]

\Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL wscript.exe pagefile.sys.vbs


.

**************************************************************************


catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2008-04-14 16:34:01

Windows 5.1.2600 Dodatek Service Pack 2 NTFS


scanning hidden processes ... 


scanning hidden autostart entries ...


scanning hidden files ... 


scan completed successfully 

hidden files: 0 


**************************************************************************

.

Completion time: 2008-04-14 16:35:44

ComboFix-quarantined-files.txt 2008-04-14 14:35:42

ComboFix2.txt 2007-12-23 19:48:40


Pre-Run: 37,900,668,928 bajtów wolnych

Post-Run: 37,890,641,920 bajtów wolnych

.

2008-04-09 20:17:50	--- E O F ---
#3

Ja w logach nic nie widzę

#4

Zmiana zasad wklejania logów na forum - viewtopic.php?f=16&t=213350

Nie pisz posta pod postem!