"System error"

Witam :>

Od niedawna borykam się z pewnym problemem. Oczywiście chodzi o uruchamianie się następującego komunikatu przy większości akcjach wykonywanych w Windowsie (otwieranie plików, i IE):

errorpx0.jpg

A teraz logi z :

Combofix

http://wklej.org/id/78e80620c6

oraz HijackThis

http://wklej.org/id/3248e49eaa

Pozdrawiam i licze na pomoc :slight_smile:

fix w hijackthis

Pobierz ComboFix, ale nie uruchamiaj

Wklej do notatnika:

File::

C:\WINDOWS\wona.dll

Plik -> zapisz jako -> CFScript.txt (najwygodniej będzie, jeśli zapiszesz w takiej lokalizacji, by ikonka CFScript.txt znalazła się obok ikonki ComboFix.exe)

Przeciągnij i upuść ikonkę CFScript.txt na ikonkę ComboFix.exe tak jak tu ->

02f8f1e3c410a4cc.gif

Powinno się rozpocząć usuwanie i powstanie log, daj ten log na forum.

Wygląda na to że zadziałało :>

Log z ComboFix: http://wklej.org/id/1894e40fca

W logu jest czysto

Czy występują jeszcze jakieś problemy??

Przeskanuj komputer tym (uruchom przez IE) http://www.kaspersky.pl/virusscanner.html Daj raport z niego na forum

Mam ten sam problem cały czas wyskakuje mi system error! zrobiłem combo fixem wszystko według przepisu trzy razy i nic Wielka prośba może ktoś powie co jeszcze można zrobić system chodzi pozatym elegancko tylko to okienko pozdrawiam

Witam ten sam problem “System error…” przy kazdym wjesciu w foldery itp. log z combo fixa ponizej. Z góry dzieki

ComboFix 08-05-01.3 - sikor 2008-05-07 23:49:55.1 - NTFSx86

Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.649 [GMT 2:00]

Running from: C:\Documents and Settings\sikor\Pulpit\ComboFix.exe

* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED!!

.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

.

C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ASWLNPkg.dll

C:\smp.bat

.

((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.

-------\Legacy_ASBroker

-------\Service_ASBroker

((((((((((((((((((((((((( Files Created from 2008-04-07 to 2008-05-07 )))))))))))))))))))))))))))))))

.

2008-04-30 00:31 . 2004-08-04 00:44 159,232 --a------ C:\WINDOWS\system32\ptpusd.dll

2008-04-30 00:31 . 2004-08-03 22:58 15,104 --a------ C:\WINDOWS\system32\drivers\usbscan.sys

2008-04-30 00:31 . 2004-08-03 22:58 15,104 --a–c— C:\WINDOWS\system32\dllcache\usbscan.sys

2008-04-30 00:31 . 2001-10-26 17:29 5,632 --a------ C:\WINDOWS\system32\ptpusb.dll

2008-04-25 00:01 . 2008-04-25 00:01 216,064 --a------ C:\WINDOWS\psokru.dll

2008-04-25 00:01 . 2008-04-25 00:01 216,064 --a------ C:\WINDOWS\pokru.dll

2008-04-25 00:00 . 2008-04-25 00:00 217,600 --a------ C:\WINDOWS\zonsal.dll

2008-04-24 23:16 . 2008-04-24 23:17

2008-04-22 18:02 . 2008-04-22 18:02 0 --a------ C:\WINDOWS\tosOBEX.INI

2008-04-22 17:55 . 2008-04-22 17:55

2008-04-22 17:55 . 2005-10-17 17:09 987,136 --a------ C:\WINDOWS\system32\wcourier.exe

2008-04-22 17:52 . 2008-04-22 17:52

2008-04-22 17:52 . 2005-02-17 23:07 5,632 --a------ C:\WINDOWS\system32\drivers\ATKACPI.sys

2008-04-22 17:44 . 2008-04-22 17:44

2008-04-22 17:42 . 2008-04-22 17:42

2008-04-22 17:36 . 2008-04-22 17:36

2008-04-22 17:35 . 2008-04-22 17:35

2008-04-22 17:35 . 2008-04-22 17:35

2008-04-20 13:04 . 2008-04-20 13:04 1,280,201 --a------ C:\wrar371pl.exe

.

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2008-04-22 15:55 --------- d–h--w C:\Program Files\InstallShield Installation Information

2008-04-22 15:47 --------- d-----w C:\Program Files\ASUS

2008-03-18 12:15 --------- d-----w C:\Program Files\DAEMON Tools

2008-03-18 12:13 685,816 ----a-w C:\WINDOWS\system32\drivers\sptd.sys

2008-03-16 15:26 163,644 ----a-w C:\WINDOWS\system32\drivers\secdrv.sys

2008-03-16 14:29 --------- d-----w C:\Documents and Settings\sikor\Dane aplikacji\Ashampoo

2008-03-16 14:29 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\ashampoo

2008-03-16 14:28 --------- d-----w C:\Program Files\Ashampoo

2008-03-16 14:28 --------- d-----w C:\Documents and Settings\sikor\Dane aplikacji\Thinstall

.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* empty entries legit default entries are not shown

REGEDIT4

[HKEY_LOCAL_MACHINE~\Browser Helper Objects{95E1D855-9232-48F7-80D9-1ADB65B7939C}]

2008-04-25 00:01 216064 --a------ C:\WINDOWS\pokru.dll

[HKEY_LOCAL_MACHINE~\Browser Helper Objects{E4DA88ED-E01E-4D88-ADC4-A3E1ED557C6A}]

2008-04-25 00:00 217600 --a------ C:\WINDOWS\zonsal.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\Secure Disks]

@={666C7836-A9B6-4AB4-94ED-DC238C81E925}

[HKEY_CLASSES_ROOT\CLSID{666C7836-A9B6-4AB4-94ED-DC238C81E925}]

2006-10-27 00:35 391168 -ra------ C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\SFSShell.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

“DAEMON Tools”=“C:\Program Files\DAEMON Tools\daemon.exe” [2007-08-29 17:09 171464]

“Gadu-Gadu”=“D:\Programy\Gadu-Gadu\gg.exe” [2008-03-20 12:04 2127296]

“antispy”=“D:\Program Files\IEAntiVirus\ieav.exe” []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

“SynTPEnh”=“C:\Program Files\Synaptics\SynTP\SynTPEnh.exe” [2006-05-25 20:02 786521]

“avast!”=“d:\Programy\Avast4\ashDisp.exe” [2007-12-04 15:00 79224]

“CognizanceTS”=“C:\PROGRA~1\ASUSSE~1\ASUSSE~1\Bin\ASTSVCC.dll” [2003-12-22 05:12 17920]

“ASUS Live Update”=“C:\Program Files\ASUS\ASUS Live Update\ALU.exe” [2006-02-21 15:20 180224]

“PowerForPhone”=“C:\Program Files\PowerForPhone\PowerForPhone\PowerForPhone.exe” [2006-09-07 17:58 778240]

“ATKMEDIA”=“C:\Program Files\ASUS\ATK Media\DMEDIA.EXE” [2006-05-16 16:29 53248]

“HControl”=“C:\WINDOWS\ATK0100\HControl.exe” [2006-08-23 22:22 110592]

“Wireless Console 2”=“C:\Program Files\Wireless Console 2\wcourier.exe” [2005-10-17 17:09 987136]

[HKEY_USERS.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

“CTFMON.EXE”=“C:\WINDOWS\system32\CTFMON.EXE” [2004-08-03 23:44 15360]

C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\

Bluetooth Manager.lnk - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe [2006-05-16 11:42:52 1777664]

Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 11:01:04 83360]

MultiFrame.lnk - C:\Program Files\ASUS\Asus MultiFrame\MultiFrame.exe [2008-04-22 17:43:38 491520]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\OneCard]

C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ASWLNPkg.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]

“AppInit_DLLs”=APSHook.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]

“VIDC.YV12”= yv12vfw.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ACMON]

–a------ 2006-05-30 11:28 811008 C:\Program Files\ASUS\Splendid\ACMON.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]

–a------ 2005-05-03 18:43 69632 C:\WINDOWS\Alcmtr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATICCC]

–a------ 2006-05-10 11:12 90112 C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATKMEDIA]

–a------ 2006-05-16 16:29 53248 C:\Program Files\ASUS\ATK Media\DMEDIA.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]

–a------ 2004-08-03 23:44 15360 C:\WINDOWS\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]

–a------ 2006-07-21 16:56 16261632 C:\WINDOWS\RTHDCPL.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyTel]

–a------ 2006-05-16 18:04 2879488 C:\WINDOWS\SkyTel.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SMSERIAL]

–a------ 2006-08-07 13:11 573440 C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]

–a------ 2007-05-15 00:22 35328 d:\Programy\Winamp\winampa.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center]

“FirewallOverride”=dword:00000001

[HKLM~\services\sharedaccess\parameters\firewallpolicy\standardprofile]

“EnableFirewall”= 0 (0x0)

[HKLM~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

“%windir%\system32\sessmgr.exe”=

R0 hotcore3;hotcore3;C:\WINDOWS\system32\drivers\hotcore3.sys [2007-11-06 10:06]

R1 ItSDisk;ItSDisk;C:\WINDOWS\system32\Drivers\ItSDisk.sys [2006-05-17 01:14]

R2 ASChannel;Local Communication Channel;C:\WINDOWS\System32\svchost.exe [2004-08-03 23:44]

S3 ipswuio;ipswuio;C:\WINDOWS\system32\DRIVERS\ipswuio.sys [2006-01-24 11:45]

S3 usbscan;Sterownik skanera USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 22:58]

S3 usbstor;Sterownik magazynu masowego USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 22:08]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

Cognizance REG_MULTI_SZ ASBroker ASChannel

.

**************************************************************************

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2008-05-07 23:53:10

Windows 5.1.2600 Dodatek Service Pack 2 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully

hidden files: 0

**************************************************************************

.

--------------------- DLLs Loaded Under Running Processes ---------------------

PROCESS: C:\WINDOWS\explorer.exe

  • C:\Program Files\ASUS\Asus MultiFrame\HookTitle.dll

.

------------------------ Other Running Processes ------------------------

.

C:\WINDOWS\system32\ati2evxx.exe

C:\WINDOWS\system32\ati2evxx.exe

D:\Programy\Avast4\aswUpdSv.exe

D:\Programy\Avast4\ashServ.exe

D:\Programy\Avast4\ashMaiSv.exe

D:\Programy\Avast4\ashWebSv.exe

C:\WINDOWS\ATK0100\ATKOSD.exe

C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe

C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe

C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHSP.exe

C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosOBEX.exe

C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtProc.exe

.

**************************************************************************

.

Completion time: 2008-05-07 23:54:30 - machine was rebooted

ComboFix-quarantined-files.txt 2008-05-07 21:54:26

Pre-Run: 5,626,933,248 bajtów wolnych

Post-Run: 5,623,848,960 bajt˘w wolnych

156

Pobierz ComboFix, ale nie uruchamiaj

Wklej do notatnika:

File::

C:\WINDOWS\psokru.dll

C:\WINDOWS\pokru.dll

C:\WINDOWS\zonsal.dll


Registry::

[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{95E1D855-9232-48F7-80D9-1ADB65B7939C}]

[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{E4DA88ED-E01E-4D88-ADC4-A3E1ED557C6A}]

Plik -> zapisz jako -> CFScript.txt (najwygodniej będzie, jeśli zapiszesz w takiej lokalizacji, by ikonka CFScript.txt znalazła się obok ikonki ComboFix.exe)

Przeciągnij i upuść ikonkę CFScript.txt na ikonkę ComboFix.exe tak jak tu ->

02f8f1e3c410a4cc.gif

Powinno się rozpocząć usuwanie i powstanie log, daj ten log na forum.

Witam log wyglada tak:

ComboFix 08-05-01.3 - sikor 2008-05-11 13:29:20.2 - NTFSx86

Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.641 [GMT 2:00]

Running from: C:\Documents and Settings\sikor\Pulpit\ComboFix.exe

Command switches used :: C:\Documents and Settings\sikor\Pulpit\CFScript.txt

* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED!!

FILE ::

C:\WINDOWS\pokru.dll

C:\WINDOWS\psokru.dll

C:\WINDOWS\zonsal.dll

.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

.

C:\WINDOWS\pokru.dll

C:\WINDOWS\psokru.dll

C:\WINDOWS\zonsal.dll

.

((((((((((((((((((((((((( Files Created from 2008-04-11 to 2008-05-11 )))))))))))))))))))))))))))))))

.

2008-05-09 21:02 . 2007-07-09 15:11 584,192 -----c— C:\WINDOWS\system32\dllcache\rpcrt4.dll

2008-05-09 17:43 . 2008-05-09 17:43

2008-05-08 03:56 . 2008-05-11 10:41

2008-04-30 00:31 . 2004-08-04 00:44 159,232 --a------ C:\WINDOWS\system32\ptpusd.dll

2008-04-30 00:31 . 2004-08-03 22:58 15,104 --a------ C:\WINDOWS\system32\drivers\usbscan.sys

2008-04-30 00:31 . 2004-08-03 22:58 15,104 --a–c— C:\WINDOWS\system32\dllcache\usbscan.sys

2008-04-30 00:31 . 2001-10-26 17:29 5,632 --a------ C:\WINDOWS\system32\ptpusb.dll

2008-04-24 23:16 . 2008-04-24 23:17

2008-04-22 18:02 . 2008-04-22 18:02 0 --a------ C:\WINDOWS\tosOBEX.INI

2008-04-22 17:55 . 2008-04-22 17:55

2008-04-22 17:55 . 2005-10-17 17:09 987,136 --a------ C:\WINDOWS\system32\wcourier.exe

2008-04-22 17:52 . 2008-04-22 17:52

2008-04-22 17:52 . 2005-02-17 23:07 5,632 --a------ C:\WINDOWS\system32\drivers\ATKACPI.sys

2008-04-22 17:44 . 2008-04-22 17:44

2008-04-22 17:42 . 2008-04-22 17:42

2008-04-22 17:36 . 2008-04-22 17:36

2008-04-22 17:35 . 2008-04-22 17:35

2008-04-22 17:35 . 2008-04-22 17:35

2008-04-20 13:04 . 2008-04-20 13:04 1,280,201 --a------ C:\wrar371pl.exe

.

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2008-04-22 15:55 --------- d–h--w C:\Program Files\InstallShield Installation Information

2008-04-22 15:47 --------- d-----w C:\Program Files\ASUS

2008-03-20 08:09 1,845,504 ----a-w C:\WINDOWS\system32\win32k.sys

2008-03-18 12:15 --------- d-----w C:\Program Files\DAEMON Tools

2008-03-18 12:13 685,816 ----a-w C:\WINDOWS\system32\drivers\sptd.sys

2008-03-16 14:29 --------- d-----w C:\Documents and Settings\sikor\Dane aplikacji\Ashampoo

2008-03-16 14:29 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\ashampoo

2008-03-16 14:28 --------- d-----w C:\Program Files\Ashampoo

2008-03-16 14:28 --------- d-----w C:\Documents and Settings\sikor\Dane aplikacji\Thinstall

2008-02-20 06:51 282,624 ----a-w C:\WINDOWS\system32\gdi32.dll

2008-02-20 05:38 45,568 ----a-w C:\WINDOWS\system32\dnsrslvr.dll

2008-02-16 09:05 662,016 ----a-w C:\WINDOWS\system32\wininet.dll

.

((((((((((((((((((((((((((((( snapshot@2008-05-07_23.54.13.96 )))))))))))))))))))))))))))))))))))))))))

.

  • 2004-11-17 17:41:27 351,744 ----a-w C:\WINDOWS$hf_mig$\KB873339\SP2QFE\hypertrm.dll

  • 2004-10-14 08:35:44 9,216 ----a-w C:\WINDOWS$hf_mig$\KB873339\spmsg.dll

  • 2004-10-14 08:36:26 171,520 ----a-w C:\WINDOWS$hf_mig$\KB873339\spuninst.exe

  • 2004-10-14 08:36:24 21,504 ----a-w C:\WINDOWS$hf_mig$\KB873339\update\spcustom.dll

  • 2004-10-14 08:35:44 662,016 ----a-w C:\WINDOWS$hf_mig$\KB873339\update\update.exe

  • 2004-10-14 09:35:44 9,216 ----a-w C:\WINDOWS$hf_mig$\KB885836\spmsg.dll

  • 2004-10-14 09:36:26 171,520 ----a-w C:\WINDOWS$hf_mig$\KB885836\spuninst.exe

  • 2004-10-14 09:36:24 21,504 ----a-w C:\WINDOWS$hf_mig$\KB885836\update\spcustom.dll

  • 2004-10-14 09:35:44 662,016 ----a-w C:\WINDOWS$hf_mig$\KB885836\update\update.exe

  • 2005-04-22 05:20:49 57,344 ----a-w C:\WINDOWS$hf_mig$\KB890046\SP2QFE\agentdpv.dll

  • 2005-05-17 00:44:58 18,944 ----a-w C:\WINDOWS$hf_mig$\KB890046\SP2QFE\spru0415.dll

  • 2005-02-24 18:36:08 16,096 ----a-w C:\WINDOWS$hf_mig$\KB890046\spmsg.dll

  • 2005-02-24 18:36:08 212,704 ----a-w C:\WINDOWS$hf_mig$\KB890046\spuninst.exe

  • 2005-02-24 18:36:08 22,240 ----a-w C:\WINDOWS$hf_mig$\KB890046\update\spcustom.dll

  • 2005-02-24 18:36:08 725,728 ----a-w C:\WINDOWS$hf_mig$\KB890046\update\update.exe

  • 2005-02-24 18:36:08 387,296 ----a-w C:\WINDOWS$hf_mig$\KB890046\update\updspapi.dll

  • 2004-11-30 12:47:26 9,216 ----a-w C:\WINDOWS$hf_mig$\KB891781\spmsg.dll

  • 2004-11-30 18:22:46 171,520 ----a-w C:\WINDOWS$hf_mig$\KB891781\spuninst.exe

  • 2004-11-30 18:22:46 21,504 ----a-w C:\WINDOWS$hf_mig$\KB891781\update\spcustom.dll

  • 2004-11-30 12:47:26 662,016 ----a-w C:\WINDOWS$hf_mig$\KB891781\update\update.exe

  • 2005-07-08 16:30:47 249,344 ----a-w C:\WINDOWS$hf_mig$\KB893756\SP2QFE\tapisrv.dll

  • 2005-02-24 18:36:08 16,096 ----a-w C:\WINDOWS$hf_mig$\KB893756\spmsg.dll

  • 2005-02-24 18:36:08 212,704 ----a-w C:\WINDOWS$hf_mig$\KB893756\spuninst.exe

  • 2005-07-07 17:27:08 30,720 ----a-w C:\WINDOWS$hf_mig$\KB893756\update\arpidfix.exe

  • 2005-02-24 18:36:08 22,240 ----a-w C:\WINDOWS$hf_mig$\KB893756\update\spcustom.dll

  • 2005-02-24 18:36:08 725,728 ----a-w C:\WINDOWS$hf_mig$\KB893756\update\update.exe

  • 2005-02-24 18:36:08 387,296 ----a-w C:\WINDOWS$hf_mig$\KB893756\update\updspapi.dll

  • 2005-05-26 23:26:50 10,752 ----a-w C:\WINDOWS$hf_mig$\KB896358\SP2QFE\hh.exe

  • 2005-05-27 02:11:33 41,472 ----a-w C:\WINDOWS$hf_mig$\KB896358\SP2QFE\hhsetup.dll

  • 2005-05-27 02:11:33 155,136 ----a-w C:\WINDOWS$hf_mig$\KB896358\SP2QFE\itircl.dll

  • 2005-05-27 02:11:33 137,216 ----a-w C:\WINDOWS$hf_mig$\KB896358\SP2QFE\itss.dll

  • 2005-02-24 18:36:08 16,096 ----a-w C:\WINDOWS$hf_mig$\KB896358\spmsg.dll

  • 2005-02-24 18:36:08 212,704 ----a-w C:\WINDOWS$hf_mig$\KB896358\spuninst.exe

  • 2005-02-24 18:36:08 22,240 ----a-w C:\WINDOWS$hf_mig$\KB896358\update\spcustom.dll

  • 2005-02-24 18:36:08 725,728 ----a-w C:\WINDOWS$hf_mig$\KB896358\update\update.exe

  • 2005-02-24 18:36:08 387,296 ----a-w C:\WINDOWS$hf_mig$\KB896358\update\updspapi.dll

  • 2005-06-11 00:17:13 57,856 ----a-w C:\WINDOWS$hf_mig$\KB896423\SP2QFE\spoolsv.exe

  • 2005-02-24 18:36:08 16,096 ----a-w C:\WINDOWS$hf_mig$\KB896423\spmsg.dll

  • 2005-02-24 18:36:08 212,704 ----a-w C:\WINDOWS$hf_mig$\KB896423\spuninst.exe

  • 2005-06-29 14:54:32 30,720 ----a-w C:\WINDOWS$hf_mig$\KB896423\update\arpidfix.exe

  • 2005-02-24 18:36:08 22,240 ----a-w C:\WINDOWS$hf_mig$\KB896423\update\spcustom.dll

  • 2005-02-24 18:36:08 725,728 ----a-w C:\WINDOWS$hf_mig$\KB896423\update\update.exe

  • 2005-02-24 18:36:08 387,296 ----a-w C:\WINDOWS$hf_mig$\KB896423\update\updspapi.dll

  • 2005-06-15 17:49:36 297,984 ----a-w C:\WINDOWS$hf_mig$\KB899587\SP2QFE\kerberos.dll

  • 2005-02-24 18:36:08 16,096 ----a-w C:\WINDOWS$hf_mig$\KB899587\spmsg.dll

  • 2005-02-24 18:36:08 212,704 ----a-w C:\WINDOWS$hf_mig$\KB899587\spuninst.exe

  • 2005-06-29 14:54:32 30,720 ----a-w C:\WINDOWS$hf_mig$\KB899587\update\arpidfix.exe

  • 2005-02-24 18:36:08 22,240 ----a-w C:\WINDOWS$hf_mig$\KB899587\update\spcustom.dll

  • 2005-02-24 18:36:08 725,728 ----a-w C:\WINDOWS$hf_mig$\KB899587\update\update.exe

  • 2005-02-24 18:36:08 387,296 ----a-w C:\WINDOWS$hf_mig$\KB899587\update\updspapi.dll

  • 2005-06-10 04:06:01 139,528 ----a-w C:\WINDOWS$hf_mig$\KB899591\SP2QFE\rdpwd.sys

  • 2005-02-24 18:36:08 16,096 ----a-w C:\WINDOWS$hf_mig$\KB899591\spmsg.dll

  • 2005-02-24 18:36:08 212,704 ----a-w C:\WINDOWS$hf_mig$\KB899591\spuninst.exe

  • 2005-06-29 14:54:32 30,720 ----a-w C:\WINDOWS$hf_mig$\KB899591\update\arpidfix.exe

  • 2005-02-24 18:36:08 22,240 ----a-w C:\WINDOWS$hf_mig$\KB899591\update\spcustom.dll

  • 2005-02-24 18:36:08 725,728 ----a-w C:\WINDOWS$hf_mig$\KB899591\update\update.exe

  • 2005-02-24 18:36:08 387,296 ----a-w C:\WINDOWS$hf_mig$\KB899591\update\updspapi.dll

  • 2006-02-15 00:30:07 142,464 ----a-w C:\WINDOWS$hf_mig$\KB900485\SP2QFE\aec.sys

  • 2005-10-12 23:21:28 16,096 ----a-w C:\WINDOWS$hf_mig$\KB900485\spmsg.dll

  • 2005-10-12 23:21:30 216,288 ----a-w C:\WINDOWS$hf_mig$\KB900485\spuninst.exe

  • 2005-10-12 23:21:27 22,752 ----a-w C:\WINDOWS$hf_mig$\KB900485\update\spcustom.dll

  • 2005-10-12 23:21:33 723,680 ----a-w C:\WINDOWS$hf_mig$\KB900485\update\update.exe

  • 2005-10-12 23:21:40 386,784 ----a-w C:\WINDOWS$hf_mig$\KB900485\update\updspapi.dll

  • 2005-09-10 01:54:09 2,068,480 ----a-w C:\WINDOWS$hf_mig$\KB901017\SP2QFE\cdosys.dll

  • 2005-02-24 18:36:08 16,096 ----a-w C:\WINDOWS$hf_mig$\KB901017\spmsg.dll

  • 2005-02-24 18:36:08 212,704 ----a-w C:\WINDOWS$hf_mig$\KB901017\spuninst.exe

  • 2005-09-09 14:26:26 30,720 ----a-w C:\WINDOWS$hf_mig$\KB901017\update\arpidfix.exe

  • 2005-02-24 18:36:08 22,240 ----a-w C:\WINDOWS$hf_mig$\KB901017\update\spcustom.dll

  • 2005-02-24 18:36:08 725,728 ----a-w C:\WINDOWS$hf_mig$\KB901017\update\update.exe

  • 2005-02-24 18:36:08 387,296 ----a-w C:\WINDOWS$hf_mig$\KB901017\update\updspapi.dll

  • 2005-07-26 04:36:43 225,792 ----a-w C:\WINDOWS$hf_mig$\KB902400\SP2QFE\catsrv.dll

  • 2005-07-26 04:36:43 625,152 ----a-w C:\WINDOWS$hf_mig$\KB902400\SP2QFE\catsrvut.dll

  • 2005-07-26 04:36:43 110,080 ----a-w C:\WINDOWS$hf_mig$\KB902400\SP2QFE\clbcatex.dll

  • 2005-07-26 04:36:44 498,688 ----a-w C:\WINDOWS$hf_mig$\KB902400\SP2QFE\clbcatq.dll

  • 2005-07-26 04:36:44 60,416 ----a-w C:\WINDOWS$hf_mig$\KB902400\SP2QFE\colbact.dll

  • 2005-07-26 04:36:44 195,072 ----a-w C:\WINDOWS$hf_mig$\KB902400\SP2QFE\comadmin.dll

  • 2005-07-26 04:36:44 97,792 ----a-w C:\WINDOWS$hf_mig$\KB902400\SP2QFE\comrepl.dll

  • 2005-07-26 04:36:45 1,267,200 ----a-w C:\WINDOWS$hf_mig$\KB902400\SP2QFE\comsvcs.dll

  • 2005-07-26 04:36:45 540,160 ----a-w C:\WINDOWS$hf_mig$\KB902400\SP2QFE\comuid.dll

  • 2005-07-26 04:36:45 243,200 ----a-w C:\WINDOWS$hf_mig$\KB902400\SP2QFE\es.dll

  • 2005-07-25 23:42:35 8,704 ----a-w C:\WINDOWS$hf_mig$\KB902400\SP2QFE\migregdb.exe

  • 2005-07-26 04:36:46 425,472 ----a-w C:\WINDOWS$hf_mig$\KB902400\SP2QFE\msdtcprx.dll

  • 2005-07-26 04:36:46 945,152 ----a-w C:\WINDOWS$hf_mig$\KB902400\SP2QFE\msdtctm.dll

  • 2005-07-26 04:36:47 161,280 ----a-w C:\WINDOWS$hf_mig$\KB902400\SP2QFE\msdtcuiu.dll

  • 2005-07-26 04:36:47 66,560 ----a-w C:\WINDOWS$hf_mig$\KB902400\SP2QFE\mtxclu.dll

  • 2005-07-26 04:36:47 91,136 ----a-w C:\WINDOWS$hf_mig$\KB902400\SP2QFE\mtxoci.dll

  • 2005-07-26 04:36:48 1,285,632 ----a-w C:\WINDOWS$hf_mig$\KB902400\SP2QFE\ole32.dll

  • 2005-07-26 04:36:48 75,264 ----a-w C:\WINDOWS$hf_mig$\KB902400\SP2QFE\olecli32.dll

  • 2005-07-26 04:36:48 37,376 ----a-w C:\WINDOWS$hf_mig$\KB902400\SP2QFE\olecnv32.dll

  • 2005-07-26 04:36:49 398,336 ----a-w C:\WINDOWS$hf_mig$\KB902400\SP2QFE\rpcss.dll

  • 2005-07-26 04:36:49 101,376 ----a-w C:\WINDOWS$hf_mig$\KB902400\SP2QFE\txflog.dll

  • 2005-07-26 04:36:50 11,776 ----a-w C:\WINDOWS$hf_mig$\KB902400\SP2QFE\xolehlp.dll

  • 2005-02-24 18:36:08 16,096 ----a-w C:\WINDOWS$hf_mig$\KB902400\spmsg.dll

  • 2005-02-24 18:36:08 212,704 ----a-w C:\WINDOWS$hf_mig$\KB902400\spuninst.exe

  • 2005-07-25 17:21:18 30,720 ----a-w C:\WINDOWS$hf_mig$\KB902400\update\arpidfix.exe

  • 2005-02-24 18:36:08 22,240 ----a-w C:\WINDOWS$hf_mig$\KB902400\update\spcustom.dll

  • 2005-02-24 18:36:08 725,728 ----a-w C:\WINDOWS$hf_mig$\KB902400\update\update.exe

  • 2005-02-24 18:36:08 387,296 ----a-w C:\WINDOWS$hf_mig$\KB902400\update\updspapi.dll

  • 2006-06-22 10:46:21 180,736 ----a-w C:\WINDOWS$hf_mig$\KB911280\SP2QFE\rasmans.dll

  • 2005-10-12 23:21:28 16,096 ----a-w C:\WINDOWS$hf_mig$\KB911280\spmsg.dll

  • 2005-10-12 23:21:30 216,288 ----a-w C:\WINDOWS$hf_mig$\KB911280\spuninst.exe

  • 2005-10-12 23:21:27 22,752 ----a-w C:\WINDOWS$hf_mig$\KB911280\update\spcustom.dll

  • 2005-10-12 23:21:33 723,680 ----a-w C:\WINDOWS$hf_mig$\KB911280\update\update.exe

  • 2005-10-12 23:21:40 386,784 ----a-w C:\WINDOWS$hf_mig$\KB911280\update\updspapi.dll

  • 2006-03-23 05:53:42 143,360 ----a-w C:\WINDOWS$hf_mig$\KB911562\SP2QFE\msadco.dll

  • 2005-10-12 23:21:28 16,096 ----a-w C:\WINDOWS$hf_mig$\KB911562\spmsg.dll

  • 2005-10-12 23:21:30 216,288 ----a-w C:\WINDOWS$hf_mig$\KB911562\spuninst.exe

  • 2005-10-12 23:21:27 22,752 ----a-w C:\WINDOWS$hf_mig$\KB911562\update\spcustom.dll

  • 2005-10-12 23:21:33 723,680 ----a-w C:\WINDOWS$hf_mig$\KB911562\update\update.exe

  • 2005-10-12 23:21:40 386,784 ----a-w C:\WINDOWS$hf_mig$\KB911562\update\updspapi.dll

  • 2006-01-04 04:19:30 68,096 ----a-w C:\WINDOWS$hf_mig$\KB911927\SP2QFE\webclnt.dll

  • 2005-10-12 23:21:28 16,096 ----a-w C:\WINDOWS$hf_mig$\KB911927\spmsg.dll

  • 2005-10-12 23:21:30 216,288 ----a-w C:\WINDOWS$hf_mig$\KB911927\spuninst.exe

  • 2005-10-12 23:21:27 22,752 ----a-w C:\WINDOWS$hf_mig$\KB911927\update\spcustom.dll

  • 2005-10-12 23:21:33 723,680 ----a-w C:\WINDOWS$hf_mig$\KB911927\update\update.exe

  • 2005-10-12 23:21:40 386,784 ----a-w C:\WINDOWS$hf_mig$\KB911927\update\updspapi.dll

  • 2006-05-19 14:19:33 111,616 ----a-w C:\WINDOWS$hf_mig$\KB914388\SP2QFE\dhcpcsvc.dll

  • 2006-05-19 14:19:33 147,456 ----a-w C:\WINDOWS$hf_mig$\KB914388\SP2QFE\dnsapi.dll

  • 2006-05-19 14:19:33 95,744 ----a-w C:\WINDOWS$hf_mig$\KB914388\SP2QFE\iphlpapi.dll

  • 2005-10-12 23:21:28 16,096 ----a-w C:\WINDOWS$hf_mig$\KB914388\spmsg.dll

  • 2005-10-12 23:21:30 216,288 ----a-w C:\WINDOWS$hf_mig$\KB914388\spuninst.exe

  • 2005-10-12 23:21:27 22,752 ----a-w C:\WINDOWS$hf_mig$\KB914388\update\spcustom.dll

  • 2005-10-12 23:21:33 723,680 ----a-w C:\WINDOWS$hf_mig$\KB914388\update\update.exe

  • 2005-10-12 23:21:40 386,784 ----a-w C:\WINDOWS$hf_mig$\KB914388\update\updspapi.dll

  • 2006-06-01 19:46:23 163,840 ----a-w C:\WINDOWS$hf_mig$\KB918439\SP2QFE\jgdw400.dll

  • 2006-06-01 19:46:23 27,648 ----a-w C:\WINDOWS$hf_mig$\KB918439\SP2QFE\jgpl400.dll

  • 2005-10-12 23:21:28 16,096 ----a-w C:\WINDOWS$hf_mig$\KB918439\spmsg.dll

  • 2005-10-12 23:21:30 216,288 ----a-w C:\WINDOWS$hf_mig$\KB918439\spuninst.exe

  • 2005-10-12 23:21:27 22,752 ----a-w C:\WINDOWS$hf_mig$\KB918439\update\spcustom.dll

  • 2005-10-12 23:21:33 723,680 ----a-w C:\WINDOWS$hf_mig$\KB918439\update\update.exe

  • 2005-10-12 23:21:40 386,784 ----a-w C:\WINDOWS$hf_mig$\KB918439\update\updspapi.dll

  • 2006-07-13 11:43:08 202,496 ----a-w C:\WINDOWS$hf_mig$\KB919007\SP2QFE\rmcast.sys

  • 2005-10-12 23:21:28 16,096 ----a-w C:\WINDOWS$hf_mig$\KB919007\spmsg.dll

  • 2005-10-12 23:21:30 216,288 ----a-w C:\WINDOWS$hf_mig$\KB919007\spuninst.exe

  • 2005-10-12 23:21:27 22,752 ----a-w C:\WINDOWS$hf_mig$\KB919007\update\spcustom.dll

  • 2005-10-12 23:21:33 723,680 ----a-w C:\WINDOWS$hf_mig$\KB919007\update\update.exe

  • 2005-10-12 23:21:40 386,784 ----a-w C:\WINDOWS$hf_mig$\KB919007\update\updspapi.dll

  • 2006-07-21 08:32:07 72,704 ----a-w C:\WINDOWS$hf_mig$\KB920670\SP2QFE\hlink.dll

  • 2005-10-12 23:27:18 16,096 ----a-w C:\WINDOWS$hf_mig$\KB920670\spmsg.dll

  • 2005-10-12 23:27:18 216,288 ----a-w C:\WINDOWS$hf_mig$\KB920670\spuninst.exe

  • 2005-10-12 23:27:17 22,752 ----a-w C:\WINDOWS$hf_mig$\KB920670\update\spcustom.dll

  • 2005-10-12 23:27:20 723,680 ----a-w C:\WINDOWS$hf_mig$\KB920670\update\update.exe

  • 2005-10-12 23:27:31 386,784 ----a-w C:\WINDOWS$hf_mig$\KB920670\update\updspapi.dll

  • 2006-06-22 05:23:23 69,120 ----a-w C:\WINDOWS$hf_mig$\KB920685\SP2QFE\ciodm.dll

  • 2006-06-22 05:23:24 1,439,744 ----a-w C:\WINDOWS$hf_mig$\KB920685\SP2QFE\query.dll

  • 2005-10-12 23:21:28 16,096 ----a-w C:\WINDOWS$hf_mig$\KB920685\spmsg.dll

  • 2005-10-12 23:21:30 216,288 ----a-w C:\WINDOWS$hf_mig$\KB920685\spuninst.exe

  • 2005-10-12 23:21:27 22,752 ----a-w C:\WINDOWS$hf_mig$\KB920685\update\spcustom.dll

  • 2005-10-12 23:21:33 723,680 ----a-w C:\WINDOWS$hf_mig$\KB920685\update\update.exe

  • 2005-10-12 23:21:40 386,784 ----a-w C:\WINDOWS$hf_mig$\KB920685\update\updspapi.dll

  • 2006-06-14 08:50:19 172,416 ----a-w C:\WINDOWS$hf_mig$\KB920872\SP2QFE\kmixer.sys

  • 2006-06-14 08:50:19 6,272 ----a-w C:\WINDOWS$hf_mig$\KB920872\SP2QFE\splitter.sys

  • 2006-06-14 09:17:04 82,944 ----a-w C:\WINDOWS$hf_mig$\KB920872\SP2QFE\wdmaud.sys

  • 2005-10-12 23:21:28 16,096 ----a-w C:\WINDOWS$hf_mig$\KB920872\spmsg.dll

  • 2005-10-12 23:21:30 216,288 ----a-w C:\WINDOWS$hf_mig$\KB920872\spuninst.exe

  • 2005-10-12 23:21:27 22,752 ----a-w C:\WINDOWS$hf_mig$\KB920872\update\spcustom.dll

  • 2005-10-12 23:21:33 723,680 ----a-w C:\WINDOWS$hf_mig$\KB920872\update\update.exe

  • 2005-10-12 23:21:40 386,784 ----a-w C:\WINDOWS$hf_mig$\KB920872\update\updspapi.dll

  • 2006-08-16 12:14:48 100,352 ----a-w C:\WINDOWS$hf_mig$\KB922819\SP2QFE\6to4svc.dll

  • 2006-08-16 10:13:39 225,664 ----a-w C:\WINDOWS$hf_mig$\KB922819\SP2QFE\tcpip6.sys

  • 2005-10-12 23:27:18 16,096 ----a-w C:\WINDOWS$hf_mig$\KB922819\spmsg.dll

  • 2005-10-12 23:27:18 216,288 ----a-w C:\WINDOWS$hf_mig$\KB922819\spuninst.exe

  • 2005-10-12 23:27:17 22,752 ----a-w C:\WINDOWS$hf_mig$\KB922819\update\spcustom.dll

  • 2005-10-12 23:27:20 723,680 ----a-w C:\WINDOWS$hf_mig$\KB922819\update\update.exe

  • 2005-10-12 23:27:31 386,784 ----a-w C:\WINDOWS$hf_mig$\KB922819\update\updspapi.dll

  • 2006-08-14 12:00:42 332,928 ----a-w C:\WINDOWS$hf_mig$\KB923414\SP2QFE\srv.sys

  • 2005-10-12 23:27:18 16,096 ----a-w C:\WINDOWS$hf_mig$\KB923414\spmsg.dll

  • 2005-10-12 23:27:18 216,288 ----a-w C:\WINDOWS$hf_mig$\KB923414\spuninst.exe

  • 2005-10-12 23:27:17 22,752 ----a-w C:\WINDOWS$hf_mig$\KB923414\update\spcustom.dll

  • 2005-10-12 23:27:20 723,680 ----a-w C:\WINDOWS$hf_mig$\KB923414\update\update.exe

  • 2005-10-12 23:27:31 386,784 ----a-w C:\WINDOWS$hf_mig$\KB923414\update\updspapi.dll

  • 2006-10-13 12:43:17 64,000 ----a-w C:\WINDOWS$hf_mig$\KB923980\SP2QFE\nwapi32.dll

  • 2006-10-13 12:43:17 143,360 ----a-w C:\WINDOWS$hf_mig$\KB923980\SP2QFE\nwprovau.dll

  • 2006-10-13 10:39:12 163,456 ----a-w C:\WINDOWS$hf_mig$\KB923980\SP2QFE\nwrdr.sys

  • 2006-10-13 12:43:17 65,536 ----a-w C:\WINDOWS$hf_mig$\KB923980\SP2QFE\nwwks.dll

  • 2005-10-12 23:27:18 16,096 ----a-w C:\WINDOWS$hf_mig$\KB923980\spmsg.dll

  • 2005-10-12 23:27:18 216,288 ----a-w C:\WINDOWS$hf_mig$\KB923980\spuninst.exe

  • 2005-10-12 23:27:17 22,752 ----a-w C:\WINDOWS$hf_mig$\KB923980\update\spcustom.dll

  • 2005-10-12 23:27:20 723,680 ----a-w C:\WINDOWS$hf_mig$\KB923980\update\update.exe

  • 2005-10-12 23:27:31 386,784 ----a-w C:\WINDOWS$hf_mig$\KB923980\update\updspapi.dll

  • 2006-08-17 12:43:18 728,576 ----a-w C:\WINDOWS$hf_mig$\KB924270\SP2QFE\lsasrv.dll

  • 2006-08-17 12:43:18 337,408 ----a-w C:\WINDOWS$hf_mig$\KB924270\SP2QFE\netapi32.dll

  • 2006-08-17 12:43:18 132,096 ----a-w C:\WINDOWS$hf_mig$\KB924270\SP2QFE\wkssvc.dll

  • 2005-10-12 23:21:28 16,096 ----a-w C:\WINDOWS$hf_mig$\KB924270\spmsg.dll

  • 2005-10-12 23:21:30 216,288 ----a-w C:\WINDOWS$hf_mig$\KB924270\spuninst.exe

  • 2005-10-12 23:21:27 22,752 ----a-w C:\WINDOWS$hf_mig$\KB924270\update\spcustom.dll

  • 2005-10-12 23:21:33 723,680 ----a-w C:\WINDOWS$hf_mig$\KB924270\update\update.exe

  • 2005-10-12 23:21:40 386,784 ----a-w C:\WINDOWS$hf_mig$\KB924270\update\updspapi.dll

  • 2006-09-04 06:15:25 1,497,088 ----a-w C:\WINDOWS$hf_mig$\KB924496\SP2QFE\shdocvw.dll

  • 2005-10-12 23:21:28 16,096 ----a-w C:\WINDOWS$hf_mig$\KB924496\spmsg.dll

  • 2005-10-12 23:21:30 216,288 ----a-w C:\WINDOWS$hf_mig$\KB924496\spuninst.exe

  • 2005-10-12 23:21:27 22,752 ----a-w C:\WINDOWS$hf_mig$\KB924496\update\spcustom.dll

  • 2005-10-12 23:21:33 723,680 ----a-w C:\WINDOWS$hf_mig$\KB924496\update\update.exe

  • 2005-10-12 23:21:40 386,784 ----a-w C:\WINDOWS$hf_mig$\KB924496\update\updspapi.dll

  • 2007-03-08 15:51:57 282,112 ----a-w C:\WINDOWS$hf_mig$\KB925902\SP2QFE\gdi32.dll

  • 2007-03-08 15:51:57 40,960 ----a-w C:\WINDOWS$hf_mig$\KB925902\SP2QFE\mf3216.dll

  • 2007-03-08 15:51:57 579,584 ----a-w C:\WINDOWS$hf_mig$\KB925902\SP2QFE\user32.dll

  • 2007-03-08 15:49:53 1,844,224 ----a-w C:\WINDOWS$hf_mig$\KB925902\SP2QFE\win32k.sys

  • 2006-01-19 19:30:18 16,096 ----a-w C:\WINDOWS$hf_mig$\KB925902\spmsg.dll

  • 2006-01-19 19:30:18 216,288 ----a-w C:\WINDOWS$hf_mig$\KB925902\spuninst.exe

  • 2006-01-19 19:30:18 22,752 ----a-w C:\WINDOWS$hf_mig$\KB925902\update\spcustom.dll

  • 2006-01-19 19:30:18 723,680 ----a-w C:\WINDOWS$hf_mig$\KB925902\update\update.exe

  • 2006-01-19 19:30:19 386,784 ----a-w C:\WINDOWS$hf_mig$\KB925902\update\updspapi.dll

  • 2006-10-16 17:15:56 123,392 ----a-w C:\WINDOWS$hf_mig$\KB926436\SP2QFE\oledlg.dll

  • 2005-10-12 23:27:18 16,096 ----a-w C:\WINDOWS$hf_mig$\KB926436\spmsg.dll

  • 2005-10-12 23:27:18 216,288 ----a-w C:\WINDOWS$hf_mig$\KB926436\spuninst.exe

  • 2005-10-12 23:27:17 22,752 ----a-w C:\WINDOWS$hf_mig$\KB926436\update\spcustom.dll

  • 2005-10-12 23:27:20 723,680 ----a-w C:\WINDOWS$hf_mig$\KB926436\update\update.exe

  • 2005-10-12 23:27:31 386,784 ----a-w C:\WINDOWS$hf_mig$\KB926436\update\updspapi.dll

  • 2006-12-26 13:20:53 536,576 ----a-w C:\WINDOWS$hf_mig$\KB927779\SP2QFE\msado15.dll

  • 2006-12-26 13:20:53 180,224 ----a-w C:\WINDOWS$hf_mig$\KB927779\SP2QFE\msadomd.dll

  • 2006-12-26 13:20:53 200,704 ----a-w C:\WINDOWS$hf_mig$\KB927779\SP2QFE\msadox.dll

  • 2006-12-26 13:20:53 102,400 ----a-w C:\WINDOWS$hf_mig$\KB927779\SP2QFE\msjro.dll

  • 2006-01-19 19:30:18 16,096 ----a-w C:\WINDOWS$hf_mig$\KB927779\spmsg.dll

  • 2006-01-19 19:30:18 216,288 ----a-w C:\WINDOWS$hf_mig$\KB927779\spuninst.exe

  • 2006-01-19 19:30:18 22,752 ----a-w C:\WINDOWS$hf_mig$\KB927779\update\spcustom.dll

  • 2006-01-19 19:30:18 723,680 ----a-w C:\WINDOWS$hf_mig$\KB927779\update\update.exe

  • 2006-01-19 19:30:19 386,784 ----a-w C:\WINDOWS$hf_mig$\KB927779\update\updspapi.dll

  • 2006-12-19 18:49:38 334,336 ----a-w C:\WINDOWS$hf_mig$\KB927802\SP2QFE\wiaservc.dll

  • 2005-10-12 23:21:28 16,096 ----a-w C:\WINDOWS$hf_mig$\KB927802\spmsg.dll

  • 2005-10-12 23:21:30 216,288 ----a-w C:\WINDOWS$hf_mig$\KB927802\spuninst.exe

  • 2005-10-12 23:21:27 22,752 ----a-w C:\WINDOWS$hf_mig$\KB927802\update\spcustom.dll

  • 2005-10-12 23:21:33 723,680 ----a-w C:\WINDOWS$hf_mig$\KB927802\update\update.exe

  • 2005-10-12 23:21:40 386,784 ----a-w C:\WINDOWS$hf_mig$\KB927802\update\updspapi.dll

  • 2006-12-19 21:49:20 8,487,424 ----a-w C:\WINDOWS$hf_mig$\KB928255\SP2QFE\shell32.dll

  • 2006-12-19 21:49:20 135,680 ----a-w C:\WINDOWS$hf_mig$\KB928255\SP2QFE\shsvcs.dll

  • 2006-12-19 16:30:12 265,216 ----a-w C:\WINDOWS$hf_mig$\KB928255\SP2QFE\spru0415.dll

  • 2006-01-19 19:30:18 16,096 ----a-w C:\WINDOWS$hf_mig$\KB928255\spmsg.dll

  • 2006-01-19 19:30:18 216,288 ----a-w C:\WINDOWS$hf_mig$\KB928255\spuninst.exe

  • 2006-01-19 19:30:18 22,752 ----a-w C:\WINDOWS$hf_mig$\KB928255\update\spcustom.dll

  • 2006-01-19 19:30:18 723,680 ----a-w C:\WINDOWS$hf_mig$\KB928255\update\update.exe

  • 2006-01-19 19:30:19 386,784 ----a-w C:\WINDOWS$hf_mig$\KB928255\update\updspapi.dll

  • 2007-05-16 15:30:57 86,528 ----a-w C:\WINDOWS$hf_mig$\KB929123\SP2QFE\directdb.dll

  • 2007-05-16 15:30:57 683,520 ----a-w C:\WINDOWS$hf_mig$\KB929123\SP2QFE\inetcomm.dll

  • 2007-05-16 15:30:58 1,314,816 ----a-w C:\WINDOWS$hf_mig$\KB929123\SP2QFE\msoe.dll

  • 2007-05-16 15:30:59 510,976 ----a-w C:\WINDOWS$hf_mig$\KB929123\SP2QFE\wab32.dll

  • 2007-05-16 15:30:59 85,504 ----a-w C:\WINDOWS$hf_mig$\KB929123\SP2QFE\wabimp.dll

  • 2006-01-19 19:30:18 16,096 ----a-w C:\WINDOWS$hf_mig$\KB929123\spmsg.dll

  • 2006-01-19 19:30:18 216,288 ----a-w C:\WINDOWS$hf_mig$\KB929123\spuninst.exe

  • 2006-01-19 19:30:18 22,752 ----a-w C:\WINDOWS$hf_mig$\KB929123\update\spcustom.dll

  • 2006-01-19 19:30:18 723,680 ----a-w C:\WINDOWS$hf_mig$\KB929123\update\update.exe

  • 2006-01-19 19:30:19 386,784 ----a-w C:\WINDOWS$hf_mig$\KB929123\update\updspapi.dll

  • 2007-03-17 13:47:17 293,376 ----a-w C:\WINDOWS$hf_mig$\KB930178\SP2QFE\winsrv.dll

  • 2005-10-12 23:21:28 16,096 ----a-w C:\WINDOWS$hf_mig$\KB930178\spmsg.dll

  • 2005-10-12 23:21:30 216,288 ----a-w C:\WINDOWS$hf_mig$\KB930178\spuninst.exe

  • 2005-10-12 23:21:27 22,752 ----a-w C:\WINDOWS$hf_mig$\KB930178\update\spcustom.dll

  • 2005-10-12 23:21:33 723,680 ----a-w C:\WINDOWS$hf_mig$\KB930178\update\update.exe

  • 2005-10-12 23:21:40 386,784 ----a-w C:\WINDOWS$hf_mig$\KB930178\update\updspapi.dll

  • 2007-02-05 20:21:35 185,856 ----a-w C:\WINDOWS$hf_mig$\KB931261\SP2QFE\upnphost.dll

  • 2006-01-19 19:30:18 16,096 ----a-w C:\WINDOWS$hf_mig$\KB931261\spmsg.dll

  • 2006-01-19 19:30:18 216,288 ----a-w C:\WINDOWS$hf_mig$\KB931261\spuninst.exe

  • 2006-01-19 19:30:18 22,752 ----a-w C:\WINDOWS$hf_mig$\KB931261\update\spcustom.dll

  • 2006-01-19 19:30:18 723,680 ----a-w C:\WINDOWS$hf_mig$\KB931261\update\update.exe

  • 2006-01-19 19:30:19 386,784 ----a-w C:\WINDOWS$hf_mig$\KB931261\update\updspapi.dll

  • 2007-02-28 16:09:20 2,139,136 ----a-w C:\WINDOWS$hf_mig$\KB931784\SP2QFE\ntkrnlmp.exe

  • 2007-02-28 16:09:26 2,060,672 ----a-w C:\WINDOWS$hf_mig$\KB931784\SP2QFE\ntkrnlpa.exe

  • 2007-02-28 16:09:16 2,018,816 ----a-w C:\WINDOWS$hf_mig$\KB931784\SP2QFE\ntkrpamp.exe

  • 2007-02-28 16:09:25 2,183,424 ----a-w C:\WINDOWS$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe

  • 2005-10-12 23:21:28 16,096 ----a-w C:\WINDOWS$hf_mig$\KB931784\spmsg.dll

  • 2005-10-12 23:21:30 216,288 ----a-w C:\WINDOWS$hf_mig$\KB931784\spuninst.exe

  • 2005-10-12 23:21:27 22,752 ----a-w C:\WINDOWS$hf_mig$\KB931784\update\spcustom.dll

  • 2005-10-12 23:21:33 723,680 ----a-w C:\WINDOWS$hf_mig$\KB931784\update\update.exe

  • 2005-10-12 23:21:40 386,784 ----a-w C:\WINDOWS$hf_mig$\KB931784\update\updspapi.dll

  • 2007-06-26 06:07:43 1,104,896 ----a-w C:\WINDOWS$hf_mig$\KB936021\SP2QFE\msxml3.dll

  • 2005-10-12 23:21:28 16,096 ----a-w C:\WINDOWS$hf_mig$\KB936021\spmsg.dll

  • 2005-10-12 23:21:30 216,288 ----a-w C:\WINDOWS$hf_mig$\KB936021\spuninst.exe

  • 2005-10-12 23:21:27 22,752 ----a-w C:\WINDOWS$hf_mig$\KB936021\update\spcustom.dll

  • 2005-10-12 23:21:33 723,680 ----a-w C:\WINDOWS$hf_mig$\KB936021\update\update.exe

  • 2005-10-12 23:21:40 386,784 ----a-w C:\WINDOWS$hf_mig$\KB936021\update\updspapi.dll

  • 2007-04-23 10:14:23 364,160 ----a-w C:\WINDOWS$hf_mig$\KB936357\SP2QFE\update.sys

  • 2006-01-19 19:30:18 16,096 ----a-w C:\WINDOWS$hf_mig$\KB936357\spmsg.dll

  • 2006-01-19 19:30:18 216,288 ----a-w C:\WINDOWS$hf_mig$\KB936357\spuninst.exe

  • 2006-01-19 19:30:18 22,752 ----a-w C:\WINDOWS$hf_mig$\KB936357\update\spcustom.dll

  • 2006-01-19 19:30:18 723,680 ----a-w C:\WINDOWS$hf_mig$\KB936357\update\update.exe

  • 2006-01-19 19:30:19 386,784 ----a-w C:\WINDOWS$hf_mig$\KB936357\update\updspapi.dll

  • 2007-07-06 09:52:38 72,960 ----a-w C:\WINDOWS$hf_mig$\KB937894\SP2QFE\mqac.sys

  • 2007-07-06 13:10:31 138,240 ----a-w C:\WINDOWS$hf_mig$\KB937894\SP2QFE\mqad.dll

  • 2007-07-06 13:10:31 47,104 ----a-w C:\WINDOWS$hf_mig$\KB937894\SP2QFE\mqdscli.dll

  • 2007-07-06 13:10:31 16,896 ----a-w C:\WINDOWS$hf_mig$\KB937894\SP2QFE\mqise.dll

  • 2007-07-06 13:10:31 660,992 ----a-w C:\WINDOWS$hf_mig$\KB937894\SP2QFE\mqqm.dll

  • 2007-07-06 13:10:31 177,152 ----a-w C:\WINDOWS$hf_mig$\KB937894\SP2QFE\mqrt.dll

  • 2007-07-06 13:10:31 95,744 ----a-w C:\WINDOWS$hf_mig$\KB937894\SP2QFE\mqsec.dll

  • 2007-07-06 13:10:31 48,640 ----a-w C:\WINDOWS$hf_mig$\KB937894\SP2QFE\mqupgrd.dll

  • 2007-07-06 13:10:31 512,000 ----a-w C:\WINDOWS$hf_mig$\KB937894\SP2QFE\mqutil.dll

  • 2005-10-12 23:21:28 16,096 ----a-w C:\WINDOWS$hf_mig$\KB937894\spmsg.dll

  • 2005-10-12 23:21:30 216,288 ----a-w C:\WINDOWS$hf_mig$\KB937894\spuninst.exe

  • 2005-10-12 23:21:27 22,752 ----a-w C:\WINDOWS$hf_mig$\KB937894\update\spcustom.dll

  • 2005-10-12 23:21:33 723,680 ----a-w C:\WINDOWS$hf_mig$\KB937894\update\update.exe

  • 2005-10-12 23:21:40 386,784 ----a-w C:\WINDOWS$hf_mig$\KB937894\update\updspapi.dll

  • 2007-06-13 13:12:07 1,034,752 ----a-w C:\WINDOWS$hf_mig$\KB938828\SP2QFE\explorer.exe

  • 2005-10-12 23:21:28 16,096 ----a-w C:\WINDOWS$hf_mig$\KB938828\spmsg.dll

  • 2005-10-12 23:21:30 216,288 ----a-w C:\WINDOWS$hf_mig$\KB938828\spuninst.exe

  • 2005-10-12 23:21:27 22,752 ----a-w C:\WINDOWS$hf_mig$\KB938828\update\spcustom.dll

  • 2005-10-12 23:21:33 723,680 ----a-w C:\WINDOWS$hf_mig$\KB938828\update\update.exe

  • 2005-10-12 23:21:40 386,784 ----a-w C:\WINDOWS$hf_mig$\KB938828\update\updspapi.dll

  • 2007-10-30 16:53:32 360,832 ----a-w C:\WINDOWS$hf_mig$\KB941644\SP2QFE\tcpip.sys

  • 2007-03-06 03:28:35 16,096 ----a-w C:\WINDOWS$hf_mig$\KB941644\spmsg.dll

  • 2007-03-06 03:28:40 216,288 ----a-w C:\WINDOWS$hf_mig$\KB941644\spuninst.exe

  • 2007-03-06 03:28:33 22,752 ----a-w C:\WINDOWS$hf_mig$\KB941644\update\spcustom.dll

  • 2007-03-06 03:28:58 723,680 ----a-w C:\WINDOWS$hf_mig$\KB941644\update\update.exe

  • 2007-03-06 03:29:50 386,784 ----a-w C:\WINDOWS$hf_mig$\KB941644\update\updspapi.dll

  • 2008-03-20 08:01:00 1,846,144 ----a-w C:\WINDOWS$hf_mig$\KB941693\SP2QFE\win32k.sys

  • 2007-03-06 03:28:35 16,096 ----a-w C:\WINDOWS$hf_mig$\KB941693\spmsg.dll

  • 2007-03-06 03:28:40 216,288 ----a-w C:\WINDOWS$hf_mig$\KB941693\spuninst.exe

  • 2007-03-06 03:28:33 22,752 ----a-w C:\WINDOWS$hf_mig$\KB941693\update\spcustom.dll

  • 2007-03-06 03:28:58 723,680 ----a-w C:\WINDOWS$hf_mig$\KB941693\update\update.exe

  • 2007-03-06 03:29:50 386,784 ----a-w C:\WINDOWS$hf_mig$\KB941693\update\updspapi.dll

  • 2007-11-13 11:02:46 60,416 ----a-w C:\WINDOWS$hf_mig$\KB942763\SP2QFE\tzchange.exe

  • 2007-03-06 03:28:35 16,096 ----a-w C:\WINDOWS$hf_mig$\KB942763\spmsg.dll

  • 2007-03-06 03:28:40 216,288 ----a-w C:\WINDOWS$hf_mig$\KB942763\spuninst.exe

  • 2007-03-06 03:28:33 22,752 ----a-w C:\WINDOWS$hf_mig$\KB942763\update\spcustom.dll

  • 2007-03-06 03:28:58 723,680 ----a-w C:\WINDOWS$hf_mig$\KB942763\update\update.exe

  • 2007-03-06 03:29:50 386,784 ----a-w C:\WINDOWS$hf_mig$\KB942763\update\updspapi.dll

  • 2007-12-18 09:38:59 179,712 ----a-w C:\WINDOWS$hf_mig$\KB946026\SP2QFE\mrxdav.sys

  • 2007-03-06 03:28:35 16,096 ----a-w C:\WINDOWS$hf_mig$\KB946026\spmsg.dll

  • 2007-03-06 03:28:40 216,288 ----a-w C:\WINDOWS$hf_mig$\KB946026\spuninst.exe

  • 2007-03-06 03:28:33 22,752 ----a-w C:\WINDOWS$hf_mig$\KB946026\update\spcustom.dll

  • 2007-03-06 03:28:58 723,680 ----a-w C:\WINDOWS$hf_mig$\KB946026\update\update.exe

  • 2007-03-06 03:29:50 386,784 ----a-w C:\WINDOWS$hf_mig$\KB946026\update\updspapi.dll

  • 2008-02-16 09:32:31 1,024,000 ----a-w C:\WINDOWS$hf_mig$\KB947864\SP2QFE\browseui.dll

  • 2008-02-16 09:32:31 151,552 ----a-w C:\WINDOWS$hf_mig$\KB947864\SP2QFE\cdfview.dll

  • 2008-02-16 09:32:31 1,055,744 ----a-w C:\WINDOWS$hf_mig$\KB947864\SP2QFE\danim.dll

  • 2008-02-16 09:32:31 357,888 ----a-w C:\WINDOWS$hf_mig$\KB947864\SP2QFE\dxtmsft.dll

  • 2008-02-16 09:32:31 205,312 ----a-w C:\WINDOWS$hf_mig$\KB947864\SP2QFE\dxtrans.dll

  • 2008-02-16 09:32:31 55,808 ----a-w C:\WINDOWS$hf_mig$\KB947864\SP2QFE\extmgr.dll

  • 2008-02-15 09:07:53 18,432 ----a-w C:\WINDOWS$hf_mig$\KB947864\SP2QFE\iedw.exe

  • 2008-02-16 09:32:31 251,904 ----a-w C:\WINDOWS$hf_mig$\KB947864\SP2QFE\iepeers.dll

  • 2008-02-16 09:32:32 96,768 ----a-w C:\WINDOWS$hf_mig$\KB947864\SP2QFE\inseng.dll

  • 2008-02-16 09:32:32 16,384 ----a-w C:\WINDOWS$hf_mig$\KB947864\SP2QFE\jsproxy.dll

  • 2008-02-16 09:32:33 3,087,872 ----a-w C:\WINDOWS$hf_mig$\KB947864\SP2QFE\mshtml.dll

  • 2008-02-16 09:32:33 449,024 ----a-w C:\WINDOWS$hf_mig$\KB947864\SP2QFE\mshtmled.dll

  • 2008-02-16 09:32:33 146,432 ----a-w C:\WINDOWS$hf_mig$\KB947864\SP2QFE\msrating.dll

  • 2008-02-16 09:32:34 532,480 ----a-w C:\WINDOWS$hf_mig$\KB947864\SP2QFE\mstime.dll

  • 2008-02-16 09:32:34 39,424 ----a-w C:\WINDOWS$hf_mig$\KB947864\SP2QFE\pngfilt.dll

  • 2008-02-16 09:32:34 1,499,136 ----a-w C:\WINDOWS$hf_mig$\KB947864\SP2QFE\shdocvw.dll

  • 2008-02-16 09:32:35 474,112 ----a-w C:\WINDOWS$hf_mig$\KB947864\SP2QFE\shlwapi.dll

  • 2008-02-15 23:03:24 369,152 ----a-w C:\WINDOWS$hf_mig$\KB947864\SP2QFE\spru0415.dll

  • 2008-02-16 09:32:35 619,520 ----a-w C:\WINDOWS$hf_mig$\KB947864\SP2QFE\urlmon.dll

  • 2008-02-16 09:32:35 668,672 ----a-w C:\WINDOWS$hf_mig$\KB947864\SP2QFE\wininet.dll

  • 2007-03-06 03:28:35 16,096 ----a-w C:\WINDOWS$hf_mig$\KB947864\spmsg.dll

  • 2007-03-06 03:28:40 216,288 ----a-w C:\WINDOWS$hf_mig$\KB947864\spuninst.exe

  • 2007-03-06 03:28:33 22,752 ----a-w C:\WINDOWS$hf_mig$\KB947864\update\spcustom.dll

  • 2007-03-06 03:28:58 723,680 ----a-w C:\WINDOWS$hf_mig$\KB947864\update\update.exe

  • 2007-03-06 03:29:50 386,784 ----a-w C:\WINDOWS$hf_mig$\KB947864\update\updspapi.dll

  • 2008-05-07 21:52:24 2,048 --s-a-w C:\WINDOWS\bootstat.dat
  • 2008-05-11 11:15:24 2,048 --s-a-w C:\WINDOWS\bootstat.dat

  • 2006-02-15 00:22:26 142,464 ------w C:\WINDOWS\Driver Cache\i386\aec.sys

  • 2006-03-17 00:33:10 262,784 ------w C:\WINDOWS\Driver Cache\i386\http.sys

  • 2006-06-14 08:47:45 172,416 ------w C:\WINDOWS\Driver Cache\i386\kmixer.sys

  • 2006-05-05 09:41:45 453,120 ------w C:\WINDOWS\Driver Cache\i386\mrxsmb.sys

  • 2007-02-28 16:04:45 2,137,600 ------w C:\WINDOWS\Driver Cache\i386\ntkrnlmp.exe

  • 2007-02-28 16:04:56 2,058,880 ------w C:\WINDOWS\Driver Cache\i386\ntkrnlpa.exe

  • 2007-02-28 16:04:47 2,017,280 ------w C:\WINDOWS\Driver Cache\i386\ntkrpamp.exe

  • 2007-02-28 16:04:58 2,181,632 ------w C:\WINDOWS\Driver Cache\i386\ntoskrnl.exe

  • 2006-06-14 08:47:46 6,400 ------w C:\WINDOWS\Driver Cache\i386\splitter.sys

  • 2006-06-14 09:00:45 82,944 ------w C:\WINDOWS\Driver Cache\i386\wdmaud.sys

  • 2004-08-03 21:44:20 1,033,728 ----a-w C:\WINDOWS\explorer.exe
  • 2007-06-13 13:23:49 1,034,752 ----a-w C:\WINDOWS\explorer.exe
  • 2004-08-03 21:44:22 10,752 ----a-w C:\WINDOWS\hh.exe
  • 2005-05-26 23:22:01 10,752 ----a-w C:\WINDOWS\hh.exe
  • 2004-08-03 21:43:54 41,984 ----a-w C:\WINDOWS\msagent\agentdp2.dll
  • 2006-10-12 13:56:14 42,496 ----a-w C:\WINDOWS\msagent\agentdp2.dll
  • 2004-08-03 21:43:54 58,880 ----a-w C:\WINDOWS\msagent\agentdpv.dll
  • 2007-03-09 14:00:46 57,344 ----a-w C:\WINDOWS\msagent\agentdpv.dll
  • 2004-08-03 21:44:18 256,512 ----a-w C:\WINDOWS\msagent\agentsvr.exe
  • 2006-10-12 11:54:07 256,512 ----a-w C:\WINDOWS\msagent\agentsvr.exe
  • 2004-08-03 21:43:52 100,352 ----a-w C:\WINDOWS\system32\6to4svc.dll
  • 2006-08-16 11:59:43 100,352 ----a-w C:\WINDOWS\system32\6to4svc.dll
  • 2004-08-03 21:43:54 56,832 ----a-w C:\WINDOWS\system32\authz.dll
  • 2005-03-02 18:18:38 56,832 ----a-w C:\WINDOWS\system32\authz.dll
  • 2004-08-03 21:43:54 1,017,344 ----a-w C:\WINDOWS\system32\browseui.dll
  • 2008-02-16 09:05:10 1,023,488 ----a-w C:\WINDOWS\system32\browseui.dll
  • 2004-08-03 21:43:54 229,888 ----a-w C:\WINDOWS\system32\catsrv.dll
  • 2005-07-26 04:42:32 225,792 ----a-w C:\WINDOWS\system32\catsrv.dll
  • 2004-08-03 21:43:54 628,224 ----a-w C:\WINDOWS\system32\catsrvut.dll
  • 2005-07-26 04:42:33 625,152 ----a-w C:\WINDOWS\system32\catsrvut.dll
  • 2004-08-03 21:43:54 151,040 ----a-w C:\WINDOWS\system32\cdfview.dll
  • 2008-02-16 09:05:10 151,552 ----a-w C:\WINDOWS\system32\cdfview.dll
  • 2004-08-03 21:43:54 2,067,968 ----a-w C:\WINDOWS\system32\cdosys.dll
  • 2005-09-10 01:55:33 2,067,968 ----a-w C:\WINDOWS\system32\cdosys.dll
  • 2004-08-03 21:43:54 69,120 ----a-w C:\WINDOWS\system32\ciodm.dll
  • 2006-06-22 05:18:13 69,120 ----a-w C:\WINDOWS\system32\ciodm.dll
  • 2004-08-03 21:43:54 110,080 ----a-w C:\WINDOWS\system32\clbcatex.dll
  • 2005-07-26 04:42:33 110,080 ----a-w C:\WINDOWS\system32\clbcatex.dll
  • 2004-08-03 21:43:54 501,248 ----a-w C:\WINDOWS\system32\clbcatq.dll
  • 2005-07-26 04:42:33 498,688 ----a-w C:\WINDOWS\system32\clbcatq.dll
  • 2004-08-03 21:43:56 62,464 ----a-w C:\WINDOWS\system32\colbact.dll
  • 2005-07-26 04:42:33 60,416 ----a-w C:\WINDOWS\system32\colbact.dll
  • 2004-08-03 21:43:56 195,584 ----a-w C:\WINDOWS\system32\Com\comadmin.dll
  • 2005-07-26 04:42:33 195,072 ----a-w C:\WINDOWS\system32\Com\comadmin.dll
  • 2004-08-03 21:43:56 611,328 ----a-w C:\WINDOWS\system32\comctl32.dll
  • 2006-08-25 15:51:15 617,472 ----a-w C:\WINDOWS\system32\comctl32.dll
  • 2001-10-26 16:29:26 82,432 ----a-w C:\WINDOWS\system32\comrepl.dll
  • 2005-07-26 04:42:33 97,792 ----a-w C:\WINDOWS\system32\comrepl.dll
  • 2004-08-03 21:43:56 1,251,840 ----a-w C:\WINDOWS\system32\comsvcs.dll
  • 2005-07-26 04:42:34 1,267,200 ----a-w C:\WINDOWS\system32\comsvcs.dll
  • 2004-08-03 21:43:56 540,160 ----a-w C:\WINDOWS\system32\comuid.dll
  • 2005-07-26 04:42:34 540,160 ----a-w C:\WINDOWS\system32\comuid.dll
  • 2004-08-03 21:43:56 1,055,232 ----a-w C:\WINDOWS\system32\danim.dll
  • 2008-02-16 09:05:11 1,055,744 ----a-w C:\WINDOWS\system32\danim.dll
  • 2004-08-03 21:43:56 110,592 ----a-w C:\WINDOWS\system32\dhcpcsvc.dll
  • 2006-05-19 13:26:53 111,104 ----a-w C:\WINDOWS\system32\dhcpcsvc.dll
  • 2004-08-03 21:43:52 100,352 -c–a-w C:\WINDOWS\system32\dllcache\6to4svc.dll
  • 2006-08-16 11:59:43 100,352 -c–a-w C:\WINDOWS\system32\dllcache\6to4svc.dll
  • 2004-08-03 21:39:38 142,464 -c–a-w C:\WINDOWS\system32\dllcache\aec.sys
  • 2006-02-15 00:22:26 142,464 -c–a-w C:\WINDOWS\system32\dllcache\aec.sys
  • 2004-08-03 21:43:54 41,984 -c–a-w C:\WINDOWS\system32\dllcache\agentdp2.dll
  • 2006-10-12 13:56:14 42,496 -c–a-w C:\WINDOWS\system32\dllcache\agentdp2.dll
  • 2004-08-03 21:43:54 58,880 -c–a-w C:\WINDOWS\system32\dllcache\agentdpv.dll
  • 2007-03-09 14:00:46 57,344 -c–a-w C:\WINDOWS\system32\dllcache\agentdpv.dll
  • 2004-08-03 21:44:18 256,512 -c–a-w C:\WINDOWS\system32\dllcache\agentsvr.exe
  • 2006-10-12 11:54:07 256,512 -c–a-w C:\WINDOWS\system32\dllcache\agentsvr.exe
  • 2004-08-03 21:43:54 56,832 -c–a-w C:\WINDOWS\system32\dllcache\authz.dll
  • 2005-03-02 18:18:38 56,832 -c–a-w C:\WINDOWS\system32\dllcache\authz.dll
  • 2004-08-03 21:43:54 1,017,344 -c–a-w C:\WINDOWS\system32\dllcache\browseui.dll
  • 2008-02-16 09:05:10 1,023,488 -c–a-w C:\WINDOWS\system32\dllcache\browseui.dll
  • 2004-08-03 21:43:54 229,888 -c–a-w C:\WINDOWS\system32\dllcache\catsrv.dll
  • 2005-07-26 04:42:32 225,792 -c–a-w C:\WINDOWS\system32\dllcache\catsrv.dll
  • 2004-08-03 21:43:54 628,224 -c–a-w C:\WINDOWS\system32\dllcache\catsrvut.dll
  • 2005-07-26 04:42:33 625,152 -c–a-w C:\WINDOWS\system32\dllcache\catsrvut.dll
  • 2004-08-03 21:43:54 151,040 -c–a-w C:\WINDOWS\system32\dllcache\cdfview.dll
  • 2008-02-16 09:05:10 151,552 -c–a-w C:\WINDOWS\system32\dllcache\cdfview.dll
  • 2004-08-03 21:43:54 2,067,968 -c–a-w C:\WINDOWS\system32\dllcache\cdosys.dll
  • 2005-09-10 01:55:33 2,067,968 -c–a-w C:\WINDOWS\system32\dllcache\cdosys.dll
  • 2004-08-03 21:43:54 69,120 -c–a-w C:\WINDOWS\system32\dllcache\ciodm.dll
  • 2006-06-22 05:18:13 69,120 -c–a-w C:\WINDOWS\system32\dllcache\ciodm.dll
  • 2004-08-03 21:43:54 110,080 -c–a-w C:\WINDOWS\system32\dllcache\clbcatex.dll
  • 2005-07-26 04:42:33 110,080 -c–a-w C:\WINDOWS\system32\dllcache\clbcatex.dll
  • 2004-08-03 21:43:54 501,248 -c–a-w C:\WINDOWS\system32\dllcache\clbcatq.dll
  • 2005-07-26 04:42:33 498,688 -c–a-w C:\WINDOWS\system32\dllcache\clbcatq.dll
  • 2004-08-03 21:43:56 62,464 -c–a-w C:\WINDOWS\system32\dllcache\colbact.dll
  • 2005-07-26 04:42:33 60,416 -c–a-w C:\WINDOWS\system32\dllcache\colbact.dll
  • 2004-08-03 21:43:56 195,584 -c–a-w C:\WINDOWS\system32\dllcache\comadmin.dll
  • 2005-07-26 04:42:33 195,072 -c–a-w C:\WINDOWS\system32\dllcache\comadmin.dll
  • 2004-08-03 21:43:56 611,328 -c–a-w C:\WINDOWS\system32\dllcache\comctl32.dll
  • 2006-08-25 15:51:15 617,472 -c–a-w C:\WINDOWS\system32\dllcache\comctl32.dll
  • 2001-10-26 16:29:26 82,432 -c–a-w C:\WINDOWS\system32\dllcache\comrepl.dll
  • 2005-07-26 04:42:33 97,792 -c–a-w C:\WINDOWS\system32\dllcache\comrepl.dll
  • 2004-08-03 21:43:56 1,251,840 -c–a-w C:\WINDOWS\system32\dllcache\comsvcs.dll
  • 2005-07-26 04:42:34 1,267,200 -c–a-w C:\WINDOWS\system32\dllcache\comsvcs.dll
  • 2004-08-03 21:43:56 540,160 -c–a-w C:\WINDOWS\system32\dllcache\comuid.dll
  • 2005-07-26 04:42:34 540,160 -c–a-w C:\WINDOWS\system32\dllcache\comuid.dll
  • 2004-08-03 21:43:56 1,055,232 -c–a-w C:\WINDOWS\system32\dllcache\danim.dll
  • 2008-02-16 09:05:11 1,055,744 -c–a-w C:\WINDOWS\system32\dllcache\danim.dll
  • 2004-08-03 21:43:56 110,592 -c–a-w C:\WINDOWS\system32\dllcache\dhcpcsvc.dll
  • 2006-05-19 13:26:53 111,104 -c–a-w C:\WINDOWS\system32\dllcache\dhcpcsvc.dll
  • 2004-08-03 21:43:56 81,408 -c–a-w C:\WINDOWS\system32\dllcache\directdb.dll
  • 2007-05-16 15:18:58 86,528 -c–a-w C:\WINDOWS\system32\dllcache\directdb.dll
  • 2004-08-03 21:43:56 148,480 -c–a-w C:\WINDOWS\system32\dllcache\dnsapi.dll
  • 2008-02-20 05:38:07 148,992 -c–a-w C:\WINDOWS\system32\dllcache\dnsapi.dll
  • 2004-08-03 21:43:56 45,568 -c–a-w C:\WINDOWS\system32\dllcache\dnsrslvr.dll
  • 2008-02-20 05:38:07 45,568 -c–a-w C:\WINDOWS\system32\dllcache\dnsrslvr.dll
  • 2004-08-03 21:43:58 499,229 -c–a-w C:\WINDOWS\system32\dllcache\dxmasf.dll
  • 2006-08-24 11:18:20 499,766 -c–a-w C:\WINDOWS\system32\dllcache\dxmasf.dll
  • 2004-08-03 21:43:58 357,888 -c–a-w C:\WINDOWS\system32\dllcache\dxtmsft.dll
  • 2008-02-16 09:05:11 357,888 -c–a-w C:\WINDOWS\system32\dllcache\dxtmsft.dll
  • 2004-08-03 21:43:58 201,728 -c–a-w C:\WINDOWS\system32\dllcache\dxtrans.dll
  • 2008-02-16 09:05:11 205,312 -c–a-w C:\WINDOWS\system32\dllcache\dxtrans.dll
  • 2004-08-03 21:43:58 243,200 -c–a-w C:\WINDOWS\system32\dllcache\es.dll
  • 2005-07-26 04:42:34 243,200 -c–a-w C:\WINDOWS\system32\dllcache\es.dll
  • 2004-08-03 21:43:58 1,092,608 -c–a-w C:\WINDOWS\system32\dllcache\esent.dll
  • 2005-10-20 22:30:53 1,092,608 -c–a-w C:\WINDOWS\system32\dllcache\esent.dll
  • 2004-08-03 21:44:20 1,033,728 -c–a-w C:\WINDOWS\system32\dllcache\explorer.exe
  • 2007-06-13 13:23:49 1,034,752 -c–a-w C:\WINDOWS\system32\dllcache\explorer.exe
  • 2004-08-03 21:43:58 55,808 -c–a-w C:\WINDOWS\system32\dllcache\extmgr.dll
  • 2008-02-16 09:05:11 55,808 -c–a-w C:\WINDOWS\system32\dllcache\extmgr.dll
  • 2004-08-03 21:43:58 16,896 -c–a-w C:\WINDOWS\system32\dllcache\fltlib.dll
  • 2006-08-21 12:28:21 16,896 -c–a-w C:\WINDOWS\system32\dllcache\fltlib.dll
  • 2004-08-03 21:44:20 22,528 -c–a-w C:\WINDOWS\system32\dllcache\fltmc.exe
  • 2006-08-21 09:14:58 23,040 -c–a-w C:\WINDOWS\system32\dllcache\fltmc.exe
  • 2004-08-03 20:01:20 124,800 -c–a-w C:\WINDOWS\system32\dllcache\fltmgr.sys
  • 2006-08-21 09:14:58 128,896 -c–a-w C:\WINDOWS\system32\dllcache\fltmgr.sys
  • 2001-10-26 16:29:30 79,360 -c–a-w C:\WINDOWS\system32\dllcache\fontsub.dll
  • 2005-10-17 21:21:40 80,896 -c–a-w C:\WINDOWS\system32\dllcache\fontsub.dll
  • 2004-08-03 21:44:00 278,016 -c–a-w C:\WINDOWS\system32\dllcache\gdi32.dll
  • 2008-02-20 06:51:41 282,624 -c–a-w C:\WINDOWS\system32\dllcache\gdi32.dll
  • 2004-08-03 21:44:22 10,752 -c–a-w C:\WINDOWS\system32\dllcache\hh.exe
  • 2005-05-26 23:22:01 10,752 -c–a-w C:\WINDOWS\system32\dllcache\hh.exe
  • 2004-08-03 21:44:00 38,912 -c–a-w C:\WINDOWS\system32\dllcache\hhsetup.dll
  • 2005-05-27 02:08:15 41,472 -c–a-w C:\WINDOWS\system32\dllcache\hhsetup.dll
  • 2001-10-26 16:29:30 77,850 -c–a-w C:\WINDOWS\system32\dllcache\hlink.dll
  • 2006-07-21 08:29:01 72,704 -c–a-w C:\WINDOWS\system32\dllcache\hlink.dll
  • 2004-08-03 21:44:00 253,952 -c–a-w C:\WINDOWS\system32\dllcache\icm32.dll
  • 2005-06-29 01:52:57 254,976 -c–a-w C:\WINDOWS\system32\dllcache\icm32.dll
  • 2004-08-03 21:44:22 18,432 -c–a-w C:\WINDOWS\system32\dllcache\iedw.exe
  • 2008-02-15 09:23:37 18,432 -c–a-w C:\WINDOWS\system32\dllcache\iedw.exe
  • 2004-08-03 21:44:00 249,344 -c–a-w C:\WINDOWS\system32\dllcache\iepeers.dll
  • 2008-02-16 09:05:11 251,392 -c–a-w C:\WINDOWS\system32\dllcache\iepeers.dll
  • 2004-08-03 21:44:00 678,400 -c–a-w C:\WINDOWS\system32\dllcache\inetcomm.dll
  • 2007-08-21 06:18:06 683,520 -c–a-w C:\WINDOWS\system32\dllcache\inetcomm.dll
  • 2004-08-03 21:44:02 96,768 -c–a-w C:\WINDOWS\system32\dllcache\inseng.dll
  • 2008-02-16 09:05:11 96,768 -c–a-w C:\WINDOWS\system32\dllcache\inseng.dll
  • 2004-08-03 21:44:02 95,744 -c–a-w C:\WINDOWS\system32\dllcache\iphlpapi.dll
  • 2006-05-19 13:26:53 95,744 -c–a-w C:\WINDOWS\system32\dllcache\iphlpapi.dll
  • 2004-08-03 20:04:52 134,912 -c–a-w C:\WINDOWS\system32\dllcache\ipnat.sys
  • 2004-09-29 22:28:37 134,912 -c–a-w C:\WINDOWS\system32\dllcache\ipnat.sys
  • 2004-08-03 21:44:02 143,872 -c–a-w C:\WINDOWS\system32\dllcache\itircl.dll
  • 2005-05-27 02:08:15 155,136 -c–a-w C:\WINDOWS\system32\dllcache\itircl.dll
  • 2004-08-03 21:44:02 134,144 -c–a-w C:\WINDOWS\system32\dllcache\itss.dll
  • 2005-05-27 02:08:15 137,216 -c–a-w C:\WINDOWS\system32\dllcache\itss.dll

  • 2006-06-01 18:49:32 163,840 -c----w C:\WINDOWS\system32\dllcache\jgdw400.dll

  • 2006-06-01 18:49:32 27,648 -c----w C:\WINDOWS\system32\dllcache\jgpl400.dll

  • 2004-08-03 21:44:02 450,560 -c–a-w C:\WINDOWS\system32\dllcache\jscript.dll
  • 2007-12-18 14:42:55 450,560 -c–a-w C:\WINDOWS\system32\dllcache\jscript.dll
  • 2004-08-03 21:44:02 15,872 -c–a-w C:\WINDOWS\system32\dllcache\jsproxy.dll
  • 2008-02-16 09:05:11 16,384 -c–a-w C:\WINDOWS\system32\dllcache\jsproxy.dll
  • 2004-08-03 21:44:02 294,400 -c–a-w C:\WINDOWS\system32\dllcache\kerberos.dll
  • 2005-06-15 17:51:00 295,936 -c–a-w C:\WINDOWS\system32\dllcache\kerberos.dll
  • 2004-08-03 21:44:02 1,012,224 -c–a-w C:\WINDOWS\system32\dllcache\kernel32.dll
  • 2007-04-16 15:54:44 1,013,248 -c–a-w C:\WINDOWS\system32\dllcache\kernel32.dll
  • 2004-08-03 22:07:50 171,776 -c–a-w C:\WINDOWS\system32\dllcache\kmixer.sys
  • 2006-06-14 08:47:45 172,416 -c–a-w C:\WINDOWS\system32\dllcache\kmixer.sys
  • 2004-08-03 21:44:02 723,968 -c–a-w C:\WINDOWS\system32\dllcache\lsasrv.dll
  • 2007-11-07 09:29:33 723,968 -c–a-w C:\WINDOWS\system32\dllcache\lsasrv.dll

  • 2007-03-08 15:38:47 40,960 -c----w C:\WINDOWS\system32\dllcache\mf3216.dll

  • 2001-10-26 16:29:34 924,432 -c–a-w C:\WINDOWS\system32\dllcache\mfc40u.dll
  • 2006-11-01 19:19:04 927,504 -c–a-w C:\WINDOWS\system32\dllcache\mfc40u.dll
  • 2004-08-03 21:44:02 1,024,000 -c–a-w C:\WINDOWS\system32\dllcache\mfc42u.dll
  • 2006-10-14 08:13:25 981,760 -c–a-w C:\WINDOWS\system32\dllcache\mfc42u.dll

W dniu 11.05.2008 , o godzinie 13:51 został dopisany post przez riddicq

i reszta bo sie nie zmiescilo…

2007-07-06 10:05:47 72,960 -c----w C:\WINDOWS\system32\dllcache\mqac.sys

  • 2007-07-06 12:51:40 138,240 -c----w C:\WINDOWS\system32\dllcache\mqad.dll

  • 2007-07-06 12:51:40 47,104 -c----w C:\WINDOWS\system32\dllcache\mqdscli.dll

  • 2007-07-06 12:51:40 16,896 -c----w C:\WINDOWS\system32\dllcache\mqise.dll

  • 2007-07-06 12:51:40 660,992 -c----w C:\WINDOWS\system32\dllcache\mqqm.dll

  • 2007-07-06 12:51:40 177,152 -c----w C:\WINDOWS\system32\dllcache\mqrt.dll

  • 2007-07-06 12:51:40 95,744 -c----w C:\WINDOWS\system32\dllcache\mqsec.dll

  • 2007-07-06 12:51:40 48,640 -c----w C:\WINDOWS\system32\dllcache\mqupgrd.dll

  • 2007-07-06 12:51:40 512,000 -c----w C:\WINDOWS\system32\dllcache\mqutil.dll

  • 2007-12-18 09:51:35 179,584 -c----w C:\WINDOWS\system32\dllcache\mrxdav.sys

  • 2006-05-05 09:41:45 453,120 -c----w C:\WINDOWS\system32\dllcache\mrxsmb.sys

  • 2004-08-03 21:44:04 143,360 -c–a-w C:\WINDOWS\system32\dllcache\msadco.dll
  • 2006-03-23 05:51:28 143,360 -c–a-w C:\WINDOWS\system32\dllcache\msadco.dll
  • 2004-08-03 21:44:04 536,576 -c–a-w C:\WINDOWS\system32\dllcache\msado15.dll
  • 2006-12-26 13:09:22 536,576 -c–a-w C:\WINDOWS\system32\dllcache\msado15.dll
  • 2004-08-03 21:44:04 180,224 -c–a-w C:\WINDOWS\system32\dllcache\msadomd.dll
  • 2006-12-26 13:09:22 180,224 -c–a-w C:\WINDOWS\system32\dllcache\msadomd.dll
  • 2004-08-03 21:44:04 200,704 -c–a-w C:\WINDOWS\system32\dllcache\msadox.dll
  • 2006-12-26 13:09:22 200,704 -c–a-w C:\WINDOWS\system32\dllcache\msadox.dll

  • 2006-11-27 14:55:46 539,136 -c----w C:\WINDOWS\system32\dllcache\msftedit.dll

W dniu 11.05.2008 , o godzinie 13:49 został dopisany post przez riddicq

i drua czesc bo sie nie zmiescilo ;|

  • 2008-02-16 22:35:14 3,080,704 -c----w C:\WINDOWS\system32\dllcache\mshtml.dll

  • 2008-02-16 09:05:13 449,024 -c----w C:\WINDOWS\system32\dllcache\mshtmled.dll

  • 2004-08-03 21:44:06 102,400 -c–a-w C:\WINDOWS\system32\dllcache\msjro.dll
  • 2006-12-26 13:09:22 102,400 -c–a-w C:\WINDOWS\system32\dllcache\msjro.dll

  • 2007-05-16 15:19:02 1,314,816 -c----w C:\WINDOWS\system32\dllcache\msoe.dll

  • 2008-02-16 09:05:13 146,432 -c----w C:\WINDOWS\system32\dllcache\msrating.dll

  • 2008-02-16 09:05:13 532,480 -c----w C:\WINDOWS\system32\dllcache\mstime.dll

  • 2007-06-26 06:10:36 1,104,896 -c----w C:\WINDOWS\system32\dllcache\msxml3.dll

  • 2004-08-03 21:44:08 332,288 -c–a-w C:\WINDOWS\system32\dllcache\netapi32.dll
  • 2006-08-17 12:30:06 332,288 -c–a-w C:\WINDOWS\system32\dllcache\netapi32.dll
  • 2004-08-03 21:44:08 364,544 -c–a-w C:\WINDOWS\system32\dllcache\npdsplay.dll
  • 2005-11-29 14:27:06 364,544 -c–a-w C:\WINDOWS\system32\dllcache\npdsplay.dll
  • 2004-08-03 20:15:10 574,592 -c–a-w C:\WINDOWS\system32\dllcache\ntfs.sys
  • 2007-02-09 11:10:35 574,464 -c–a-w C:\WINDOWS\system32\dllcache\ntfs.sys

  • 2007-02-28 16:04:45 2,137,600 -c----w C:\WINDOWS\system32\dllcache\ntkrnlmp.exe

  • 2007-02-28 16:04:56 2,058,880 -c----w C:\WINDOWS\system32\dllcache\ntkrnlpa.exe

  • 2007-02-28 16:04:47 2,017,280 -c----w C:\WINDOWS\system32\dllcache\ntkrpamp.exe

  • 2007-02-28 16:04:58 2,181,632 -c----w C:\WINDOWS\system32\dllcache\ntoskrnl.exe

  • 2001-10-26 16:29:40 58,880 -c–a-w C:\WINDOWS\system32\dllcache\nwapi32.dll
  • 2006-10-13 12:41:11 64,000 -c–a-w C:\WINDOWS\system32\dllcache\nwapi32.dll

  • 2006-10-13 12:41:11 143,872 -c----w C:\WINDOWS\system32\dllcache\nwprovau.dll

  • 2006-10-13 10:23:15 163,584 -c----w C:\WINDOWS\system32\dllcache\nwrdr.sys

  • 2006-10-13 12:41:11 65,536 -c----w C:\WINDOWS\system32\dllcache\nwwks.dll

  • 2004-08-03 21:44:08 1,281,024 -c–a-w C:\WINDOWS\system32\dllcache\ole32.dll
  • 2005-07-26 04:42:36 1,284,608 -c–a-w C:\WINDOWS\system32\dllcache\ole32.dll
  • 2004-08-03 21:44:08 553,472 -c–a-w C:\WINDOWS\system32\dllcache\oleaut32.dll
  • 2007-12-04 18:42:02 550,912 -c–a-w C:\WINDOWS\system32\dllcache\oleaut32.dll

  • 2006-10-16 16:16:22 123,392 -c----w C:\WINDOWS\system32\dllcache\oledlg.dll

  • 2008-02-16 09:05:14 39,424 -c----w C:\WINDOWS\system32\dllcache\pngfilt.dll

  • 2007-10-29 22:44:30 1,291,264 -c----w C:\WINDOWS\system32\dllcache\quartz.dll

  • 2006-06-22 05:18:14 1,439,744 -c----w C:\WINDOWS\system32\dllcache\query.dll

  • 2006-06-26 17:45:40 8,192 -c----w C:\WINDOWS\system32\dllcache\rasadhlp.dll

  • 2006-06-22 10:54:46 181,248 -c----w C:\WINDOWS\system32\dllcache\rasmans.dll

  • 2006-05-05 09:47:57 174,592 -c----w C:\WINDOWS\system32\dllcache\rdbss.sys

  • 2004-08-03 21:44:10 431,616 -c–a-w C:\WINDOWS\system32\dllcache\riched20.dll
  • 2006-11-27 14:55:46 433,152 -c–a-w C:\WINDOWS\system32\dllcache\riched20.dll

  • 2006-07-13 08:48:58 202,240 -c----w C:\WINDOWS\system32\dllcache\rmcast.sys

  • 2004-08-03 21:44:10 144,896 -c–a-w C:\WINDOWS\system32\dllcache\schannel.dll
  • 2007-04-25 14:23:30 144,896 -c–a-w C:\WINDOWS\system32\dllcache\schannel.dll

  • 2008-02-16 09:05:15 1,494,528 -c----w C:\WINDOWS\system32\dllcache\shdocvw.dll

  • 2007-10-25 16:57:22 8,483,328 -c----w C:\WINDOWS\system32\dllcache\shell32.dll

  • 2008-02-16 09:05:15 474,112 -c----w C:\WINDOWS\system32\dllcache\shlwapi.dll

  • 2006-12-19 21:51:04 135,168 -c----w C:\WINDOWS\system32\dllcache\shsvcs.dll

  • 2004-08-03 22:07:48 6,400 -c–a-w C:\WINDOWS\system32\dllcache\splitter.sys
  • 2006-06-14 08:47:46 6,400 -c–a-w C:\WINDOWS\system32\dllcache\splitter.sys

  • 2006-08-14 10:34:41 332,928 -c----w C:\WINDOWS\system32\dllcache\srv.sys

  • 2004-08-03 21:44:14 246,302 -c–a-w C:\WINDOWS\system32\dllcache\strmdll.dll
  • 2006-08-24 11:19:52 246,814 -c–a-w C:\WINDOWS\system32\dllcache\strmdll.dll

  • 2006-10-20 01:39:31 714,240 -c----w C:\WINDOWS\system32\dllcache\sxs.dll

  • 2007-10-30 17:20:55 360,064 -c----w C:\WINDOWS\system32\dllcache\tcpip.sys

  • 2006-08-16 09:37:30 225,664 -c----w C:\WINDOWS\system32\dllcache\tcpip6.sys

  • 2004-08-03 21:44:14 118,784 -c–a-w C:\WINDOWS\system32\dllcache\umpnpmgr.dll
  • 2005-08-23 03:40:06 123,904 -c–a-w C:\WINDOWS\system32\dllcache\umpnpmgr.dll

  • 2007-04-23 10:32:54 364,160 -c----w C:\WINDOWS\system32\dllcache\update.sys

  • 2007-02-05 20:19:48 185,856 -c----w C:\WINDOWS\system32\dllcache\upnphost.dll

  • 2004-08-03 21:44:14 602,112 -c–a-w C:\WINDOWS\system32\dllcache\urlmon.dll
  • 2008-02-16 09:05:15 616,960 -c–a-w C:\WINDOWS\system32\dllcache\urlmon.dll

  • 2007-03-08 15:38:47 579,072 -c----w C:\WINDOWS\system32\dllcache\user32.dll

  • 2004-08-03 21:44:14 417,792 -c–a-w C:\WINDOWS\system32\dllcache\vbscript.dll
  • 2007-12-18 14:42:55 417,792 -c–a-w C:\WINDOWS\system32\dllcache\vbscript.dll

  • 2007-06-26 13:57:29 851,968 -c----w C:\WINDOWS\system32\dllcache\vgx.dll

  • 2007-05-16 15:19:02 510,976 -c----w C:\WINDOWS\system32\dllcache\wab32.dll

  • 2007-05-16 15:19:02 85,504 -c----w C:\WINDOWS\system32\dllcache\wabimp.dll

  • 2004-08-03 22:15:06 82,944 -c–a-w C:\WINDOWS\system32\dllcache\wdmaud.sys
  • 2006-06-14 09:00:45 82,944 -c–a-w C:\WINDOWS\system32\dllcache\wdmaud.sys

  • 2006-12-19 18:18:25 334,336 -c----w C:\WINDOWS\system32\dllcache\wiaservc.dll

  • 2008-03-20 08:09:45 1,845,504 -c----w C:\WINDOWS\system32\dllcache\win32k.sys

  • 2004-08-03 21:44:16 658,944 -c–a-w C:\WINDOWS\system32\dllcache\wininet.dll
  • 2008-02-16 09:05:15 662,016 -c–a-w C:\WINDOWS\system32\dllcache\wininet.dll

  • 2007-03-17 13:45:36 293,376 -c----w C:\WINDOWS\system32\dllcache\winsrv.dll

  • 2006-08-17 12:30:06 132,096 -c----w C:\WINDOWS\system32\dllcache\wkssvc.dll

  • 2007-10-25 08:00:50 230,912 -c----w C:\WINDOWS\system32\dllcache\wmasf.dll

  • 2007-10-25 08:01:10 2,109,440 -c----w C:\WINDOWS\system32\dllcache\wmvcore.dll

  • 2004-08-03 21:43:56 148,480 ----a-w C:\WINDOWS\system32\dnsapi.dll
  • 2008-02-20 05:38:07 148,992 ----a-w C:\WINDOWS\system32\dnsapi.dll
  • 2004-08-03 21:39:38 142,464 ----a-w C:\WINDOWS\system32\drivers\aec.sys
  • 2006-02-15 00:22:26 142,464 ----a-w C:\WINDOWS\system32\drivers\aec.sys
  • 2004-08-03 20:01:20 124,800 ----a-w C:\WINDOWS\system32\drivers\fltMgr.sys
  • 2006-08-21 09:14:58 128,896 ----a-w C:\WINDOWS\system32\drivers\fltmgr.sys
  • 2004-08-03 20:00:14 263,040 ----a-w C:\WINDOWS\system32\drivers\http.sys
  • 2006-03-17 00:33:10 262,784 ----a-w C:\WINDOWS\system32\drivers\http.sys
  • 2004-08-03 20:04:52 134,912 ----a-w C:\WINDOWS\system32\drivers\ipnat.sys
  • 2004-09-29 22:28:37 134,912 ----a-w C:\WINDOWS\system32\drivers\ipnat.sys
  • 2004-08-03 22:07:50 171,776 ----a-w C:\WINDOWS\system32\drivers\kmixer.sys
  • 2006-06-14 08:47:45 172,416 ----a-w C:\WINDOWS\system32\drivers\kmixer.sys
  • 2004-08-03 19:58:22 72,960 ----a-w C:\WINDOWS\system32\drivers\mqac.sys
  • 2007-07-06 10:05:47 72,960 ----a-w C:\WINDOWS\system32\drivers\mqac.sys
  • 2004-08-03 20:00:58 181,248 ----a-w C:\WINDOWS\system32\drivers\mrxdav.sys
  • 2007-12-18 09:51:35 179,584 ----a-w C:\WINDOWS\system32\drivers\mrxdav.sys
  • 2004-08-03 20:15:18 451,456 ----a-w C:\WINDOWS\system32\drivers\mrxsmb.sys
  • 2006-05-05 09:41:45 453,120 ----a-w C:\WINDOWS\system32\drivers\mrxsmb.sys
  • 2004-08-03 20:15:10 574,592 ----a-w C:\WINDOWS\system32\drivers\ntfs.sys
  • 2007-02-09 11:10:35 574,464 ----a-w C:\WINDOWS\system32\drivers\ntfs.sys
  • 2004-08-03 20:02:24 163,584 ----a-w C:\WINDOWS\system32\drivers\nwrdr.sys
  • 2006-10-13 10:23:15 163,584 ----a-w C:\WINDOWS\system32\drivers\nwrdr.sys
  • 2004-08-03 20:20:08 176,512 ----a-w C:\WINDOWS\system32\drivers\rdbss.sys
  • 2006-05-05 09:47:57 174,592 ----a-w C:\WINDOWS\system32\drivers\rdbss.sys
  • 2004-08-03 21:44:42 139,400 ----a-w C:\WINDOWS\system32\drivers\rdpwd.sys
  • 2005-06-10 04:11:36 139,528 ----a-w C:\WINDOWS\system32\drivers\rdpwd.sys
  • 2001-08-17 20:52:24 200,064 ----a-w C:\WINDOWS\system32\drivers\RMCast.sys
  • 2006-07-13 08:48:58 202,240 ----a-w C:\WINDOWS\system32\drivers\rmcast.sys
  • 2008-03-16 15:26:24 163,644 ----a-w C:\WINDOWS\system32\drivers\secdrv.sys
  • 2007-11-13 10:25:55 20,480 ----a-w C:\WINDOWS\system32\drivers\secdrv.sys
  • 2004-08-03 22:07:48 6,400 ----a-w C:\WINDOWS\system32\drivers\splitter.sys
  • 2006-06-14 08:47:46 6,400 ----a-w C:\WINDOWS\system32\drivers\splitter.sys
  • 2004-08-03 20:14:46 336,256 ----a-w C:\WINDOWS\system32\drivers\srv.sys
  • 2006-08-14 10:34:41 332,928 ----a-w C:\WINDOWS\system32\drivers\srv.sys
  • 2004-08-03 20:14:42 359,040 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys
  • 2007-10-30 17:20:55 360,064 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys
  • 2004-08-03 20:07:46 223,616 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys
  • 2006-08-16 09:37:30 225,664 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys
  • 2004-08-03 19:58:34 209,408 ----a-w C:\WINDOWS\system32\drivers\update.sys
  • 2007-04-23 10:32:54 364,160 ----a-w C:\WINDOWS\system32\drivers\update.sys
  • 2004-08-03 22:15:06 82,944 ----a-w C:\WINDOWS\system32\drivers\wdmaud.sys
  • 2006-06-14 09:00:45 82,944 ----a-w C:\WINDOWS\system32\drivers\wdmaud.sys
  • 2004-08-03 21:43:58 499,229 ----a-w C:\WINDOWS\system32\dxmasf.dll
  • 2006-08-24 11:18:20 499,766 ----a-w C:\WINDOWS\system32\dxmasf.dll
  • 2004-08-03 21:43:58 357,888 ----a-w C:\WINDOWS\system32\dxtmsft.dll
  • 2008-02-16 09:05:11 357,888 ----a-w C:\WINDOWS\system32\dxtmsft.dll
  • 2004-08-03 21:43:58 201,728 ----a-w C:\WINDOWS\system32\dxtrans.dll
  • 2008-02-16 09:05:11 205,312 ----a-w C:\WINDOWS\system32\dxtrans.dll
  • 2004-08-03 21:43:58 243,200 ----a-w C:\WINDOWS\system32\es.dll
  • 2005-07-26 04:42:34 243,200 ----a-w C:\WINDOWS\system32\es.dll
  • 2004-08-03 21:43:58 1,092,608 ----a-w C:\WINDOWS\system32\esent.dll
  • 2005-10-20 22:30:53 1,092,608 ----a-w C:\WINDOWS\system32\esent.dll
  • 2004-08-03 21:43:58 55,808 ----a-w C:\WINDOWS\system32\extmgr.dll
  • 2008-02-16 09:05:11 55,808 ----a-w C:\WINDOWS\system32\extmgr.dll
  • 2004-08-03 21:43:58 16,896 ----a-w C:\WINDOWS\system32\fltlib.dll
  • 2006-08-21 12:28:21 16,896 ----a-w C:\WINDOWS\system32\fltlib.dll
  • 2004-08-03 21:44:20 22,528 ----a-w C:\WINDOWS\system32\fltMc.exe
  • 2006-08-21 09:14:58 23,040 ----a-w C:\WINDOWS\system32\fltmc.exe
  • 2008-03-18 15:41:22 112,584 ----a-w C:\WINDOWS\system32\FNTCACHE.DAT
  • 2008-05-11 11:15:18 112,584 ----a-w C:\WINDOWS\system32\FNTCACHE.DAT
  • 2001-10-26 16:29:30 79,360 ----a-w C:\WINDOWS\system32\fontsub.dll
  • 2005-10-17 21:21:40 80,896 ----a-w C:\WINDOWS\system32\fontsub.dll
  • 2004-08-03 21:44:00 38,912 ----a-w C:\WINDOWS\system32\hhsetup.dll
  • 2005-05-27 02:08:15 41,472 ----a-w C:\WINDOWS\system32\hhsetup.dll
  • 2001-10-26 16:29:30 77,850 ----a-w C:\WINDOWS\system32\hlink.dll
  • 2006-07-21 08:29:01 72,704 ----a-w C:\WINDOWS\system32\hlink.dll
  • 2004-08-03 21:44:00 349,696 ----a-w C:\WINDOWS\system32\hypertrm.dll
  • 2004-11-17 17:43:29 351,744 ----a-w C:\WINDOWS\system32\hypertrm.dll
  • 2004-08-03 21:44:00 253,952 ----a-w C:\WINDOWS\system32\icm32.dll
  • 2005-06-29 01:52:57 254,976 ----a-w C:\WINDOWS\system32\icm32.dll
  • 2004-08-03 21:44:00 249,344 ----a-w C:\WINDOWS\system32\iepeers.dll
  • 2008-02-16 09:05:11 251,392 ----a-w C:\WINDOWS\system32\iepeers.dll
  • 2004-08-03 21:44:00 678,400 ----a-w C:\WINDOWS\system32\inetcomm.dll
  • 2007-08-21 06:18:06 683,520 ----a-w C:\WINDOWS\system32\inetcomm.dll
  • 2004-08-03 21:44:02 96,768 ----a-w C:\WINDOWS\system32\inseng.dll
  • 2008-02-16 09:05:11 96,768 ----a-w C:\WINDOWS\system32\inseng.dll
  • 2004-08-03 21:44:02 95,744 ----a-w C:\WINDOWS\system32\iphlpapi.dll
  • 2006-05-19 13:26:53 95,744 ----a-w C:\WINDOWS\system32\iphlpapi.dll
  • 2004-08-03 21:44:02 143,872 ----a-w C:\WINDOWS\system32\itircl.dll
  • 2005-05-27 02:08:15 155,136 ----a-w C:\WINDOWS\system32\itircl.dll
  • 2004-08-03 21:44:02 134,144 ----a-w C:\WINDOWS\system32\itss.dll
  • 2005-05-27 02:08:15 137,216 ----a-w C:\WINDOWS\system32\itss.dll
  • 2001-10-26 16:29:32 144,896 ----a-w C:\WINDOWS\system32\jgdw400.dll
  • 2006-06-01 18:49:32 163,840 ----a-w C:\WINDOWS\system32\jgdw400.dll
  • 2001-10-26 16:29:32 42,496 ----a-w C:\WINDOWS\system32\jgpl400.dll
  • 2006-06-01 18:49:32 27,648 ----a-w C:\WINDOWS\system32\jgpl400.dll
  • 2004-08-03 21:44:02 450,560 ----a-w C:\WINDOWS\system32\jscript.dll
  • 2007-12-18 14:42:55 450,560 ----a-w C:\WINDOWS\system32\jscript.dll
  • 2004-08-03 21:44:02 15,872 ----a-w C:\WINDOWS\system32\jsproxy.dll
  • 2008-02-16 09:05:11 16,384 ----a-w C:\WINDOWS\system32\jsproxy.dll
  • 2004-08-03 21:44:02 294,400 ----a-w C:\WINDOWS\system32\kerberos.dll
  • 2005-06-15 17:51:00 295,936 ----a-w C:\WINDOWS\system32\kerberos.dll
  • 2004-08-03 21:44:02 1,012,224 ----a-w C:\WINDOWS\system32\kernel32.dll
  • 2007-04-16 15:54:44 1,013,248 ----a-w C:\WINDOWS\system32\kernel32.dll
  • 2004-08-03 21:44:02 18,944 ----a-w C:\WINDOWS\system32\linkinfo.dll
  • 2005-09-01 02:28:38 19,968 ----a-w C:\WINDOWS\system32\linkinfo.dll
  • 2004-08-03 21:44:02 723,968 ----a-w C:\WINDOWS\system32\lsasrv.dll
  • 2007-11-07 09:29:33 723,968 ----a-w C:\WINDOWS\system32\lsasrv.dll

  • 2006-01-21 14:01:22 25,088 ----a-w C:\WINDOWS\system32\Macromed\Flash\genuinst.exe

  • 2008-03-25 03:21:18 2,889,088 ----a-w C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

  • 2008-03-25 03:21:20 218,496 ----a-w C:\WINDOWS\system32\Macromed\Flash\NPSWF32_FlashUtil.exe

  • 2008-05-07 21:55:42 70,264 ----a-w C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe

  • 2006-01-03 23:14:12 20,480 ----a-w C:\WINDOWS\system32\Macromed\Flash\UninstFl.exe

  • 2004-08-03 21:44:02 39,936 ----a-w C:\WINDOWS\system32\mf3216.dll
  • 2007-03-08 15:38:47 40,960 ----a-w C:\WINDOWS\system32\mf3216.dll
  • 2001-10-26 16:29:34 924,432 ----a-w C:\WINDOWS\system32\mfc40u.dll
  • 2006-11-01 19:19:04 927,504 ----a-w C:\WINDOWS\system32\mfc40u.dll
  • 2004-08-03 21:44:02 1,024,000 ----a-w C:\WINDOWS\system32\mfc42u.dll
  • 2006-10-14 08:13:25 981,760 ----a-w C:\WINDOWS\system32\mfc42u.dll
  • 2004-08-03 21:44:04 138,240 ----a-w C:\WINDOWS\system32\mqad.dll
  • 2007-07-06 12:51:40 138,240 ----a-w C:\WINDOWS\system32\mqad.dll
  • 2004-08-03 21:44:04 47,104 ----a-w C:\WINDOWS\system32\mqdscli.dll
  • 2007-07-06 12:51:40 47,104 ----a-w C:\WINDOWS\system32\mqdscli.dll
  • 2004-08-03 21:44:04 16,896 ----a-w C:\WINDOWS\system32\mqise.dll
  • 2007-07-06 12:51:40 16,896 ----a-w C:\WINDOWS\system32\mqise.dll
  • 2004-08-03 21:44:04 660,992 ----a-w C:\WINDOWS\system32\mqqm.dll
  • 2007-07-06 12:51:40 660,992 ----a-w C:\WINDOWS\system32\mqqm.dll
  • 2004-08-03 21:44:04 177,152 ----a-w C:\WINDOWS\system32\mqrt.dll
  • 2007-07-06 12:51:40 177,152 ----a-w C:\WINDOWS\system32\mqrt.dll
  • 2004-08-03 21:44:04 95,744 ----a-w C:\WINDOWS\system32\mqsec.dll
  • 2007-07-06 12:51:40 95,744 ----a-w C:\WINDOWS\system32\mqsec.dll
  • 2004-08-03 21:44:04 48,640 ----a-w C:\WINDOWS\system32\mqupgrd.dll
  • 2007-07-06 12:51:40 48,640 ----a-w C:\WINDOWS\system32\mqupgrd.dll
  • 2004-08-03 21:44:04 512,000 ----a-w C:\WINDOWS\system32\mqutil.dll
  • 2007-07-06 12:51:40 512,000 ----a-w C:\WINDOWS\system32\mqutil.dll
  • 2004-08-03 21:44:04 73,728 ----a-w C:\WINDOWS\system32\mscms.dll
  • 2005-06-29 01:52:57 74,240 ----a-w C:\WINDOWS\system32\mscms.dll
  • 2004-08-03 21:44:04 425,472 ----a-w C:\WINDOWS\system32\msdtcprx.dll
  • 2006-03-01 19:44:19 426,496 ----a-w C:\WINDOWS\system32\msdtcprx.dll
  • 2004-08-03 21:44:04 949,248 ----a-w C:\WINDOWS\system32\msdtctm.dll
  • 2006-03-01 19:44:19 956,416 ----a-w C:\WINDOWS\system32\msdtctm.dll
  • 2004-08-03 21:44:04 161,280 ----a-w C:\WINDOWS\system32\msdtcuiu.dll
  • 2006-03-01 19:44:19 161,280 ----a-w C:\WINDOWS\system32\msdtcuiu.dll
  • 2004-08-03 21:44:06 537,088 ----a-w C:\WINDOWS\system32\msftedit.dll
  • 2006-11-27 14:55:46 539,136 ----a-w C:\WINDOWS\system32\msftedit.dll
  • 2004-08-03 21:44:06 3,003,392 ----a-w C:\WINDOWS\system32\mshtml.dll
  • 2008-02-16 22:35:14 3,080,704 ----a-w C:\WINDOWS\system32\mshtml.dll
  • 2004-08-03 21:44:06 448,512 ----a-w C:\WINDOWS\system32\mshtmled.dll
  • 2008-02-16 09:05:13 449,024 ----a-w C:\WINDOWS\system32\mshtmled.dll
  • 2005-05-04 13:45:32 2,890,240 ----a-w C:\WINDOWS\system32\msi.dll
  • 2007-04-18 16:14:32 2,854,400 ----a-w C:\WINDOWS\system32\msi.dll
  • 2004-08-03 21:44:06 146,432 ----a-w C:\WINDOWS\system32\msrating.dll
  • 2008-02-16 09:05:13 146,432 ----a-w C:\WINDOWS\system32\msrating.dll
  • 2004-08-03 21:44:06 530,432 ----a-w C:\WINDOWS\system32\mstime.dll
  • 2008-02-16 09:05:13 532,480 ----a-w C:\WINDOWS\system32\mstime.dll
  • 2004-08-03 21:44:06 1,236,480 ----a-w C:\WINDOWS\system32\msxml3.dll
  • 2007-06-26 06:10:36 1,104,896 ----a-w C:\WINDOWS\system32\msxml3.dll
  • 2004-08-03 21:44:06 66,560 ----a-w C:\WINDOWS\system32\mtxclu.dll
  • 2006-03-01 19:44:19 66,560 ----a-w C:\WINDOWS\system32\mtxclu.dll
  • 2004-08-03 21:44:08 90,112 ----a-w C:\WINDOWS\system32\mtxoci.dll
  • 2006-03-01 19:44:19 91,136 ----a-w C:\WINDOWS\system32\mtxoci.dll
  • 2004-08-03 21:44:08 332,288 ----a-w C:\WINDOWS\system32\netapi32.dll
  • 2006-08-17 12:30:06 332,288 ----a-w C:\WINDOWS\system32\netapi32.dll
  • 2004-08-03 21:44:08 198,144 ----a-w C:\WINDOWS\system32\netman.dll
  • 2005-08-22 18:36:16 197,632 ----a-w C:\WINDOWS\system32\netman.dll
  • 2004-08-03 21:54:52 2,016,768 ----a-w C:\WINDOWS\system32\ntkrnlpa.exe
  • 2007-02-28 16:04:47 2,017,280 ----a-w C:\WINDOWS\system32\ntkrnlpa.exe
  • 2004-08-03 21:38:52 2,149,888 ----a-w C:\WINDOWS\system32\ntoskrnl.exe
  • 2007-02-28 16:04:45 2,137,600 ----a-w C:\WINDOWS\system32\ntoskrnl.exe
  • 2001-10-26 16:29:40 58,880 ----a-w C:\WINDOWS\system32\nwapi32.dll
  • 2006-10-13 12:41:11 64,000 ----a-w C:\WINDOWS\system32\nwapi32.dll
  • 2004-08-03 21:44:08 145,920 ----a-w C:\WINDOWS\system32\nwprovau.dll
  • 2006-10-13 12:41:11 143,872 ----a-w C:\WINDOWS\system32\nwprovau.dll
  • 2004-08-03 21:44:08 64,000 ----a-w C:\WINDOWS\system32\nwwks.dll
  • 2006-10-13 12:41:11 65,536 ----a-w C:\WINDOWS\system32\nwwks.dll
  • 2004-08-03 21:44:08 1,281,024 ----a-w C:\WINDOWS\system32\ole32.dll
  • 2005-07-26 04:42:36 1,284,608 ----a-w C:\WINDOWS\system32\ole32.dll
  • 2004-08-03 21:44:08 553,472 ----a-w C:\WINDOWS\system32\oleaut32.dll
  • 2007-12-04 18:42:02 550,912 ----a-w C:\WINDOWS\system32\oleaut32.dll
  • 2001-10-26 16:29:40 69,120 ----a-w C:\WINDOWS\system32\olecli32.dll
  • 2005-07-26 04:42:36 75,264 ----a-w C:\WINDOWS\system32\olecli32.dll
  • 2001-10-26 16:29:40 34,304 ----a-w C:\WINDOWS\system32\olecnv32.dll
  • 2005-07-26 04:42:36 37,888 ----a-w C:\WINDOWS\system32\olecnv32.dll
  • 2001-10-26 16:29:40 118,272 ----a-w C:\WINDOWS\system32\oledlg.dll
  • 2006-10-16 16:16:22 123,392 ----a-w C:\WINDOWS\system32\oledlg.dll
  • 2008-03-30 08:24:29 58,930 ----a-w C:\WINDOWS\system32\perfc009.dat
  • 2008-05-11 08:32:04 58,930 ----a-w C:\WINDOWS\system32\perfc009.dat
  • 2008-03-30 08:24:29 74,648 ----a-w C:\WINDOWS\system32\perfc015.dat
  • 2008-05-11 08:32:04 74,648 ----a-w C:\WINDOWS\system32\perfc015.dat
  • 2008-03-30 08:24:29 392,630 ----a-w C:\WINDOWS\system32\perfh009.dat
  • 2008-05-11 08:32:04 392,630 ----a-w C:\WINDOWS\system32\perfh009.dat
  • 2008-03-30 08:24:29 448,586 ----a-w C:\WINDOWS\system32\perfh015.dat
  • 2008-05-11 08:32:04 448,586 ----a-w C:\WINDOWS\system32\perfh015.dat
  • 2004-08-03 21:44:10 39,424 ----a-w C:\WINDOWS\system32\pngfilt.dll
  • 2008-02-16 09:05:14 39,424 ----a-w C:\WINDOWS\system32\pngfilt.dll
  • 2004-08-03 21:44:10 1,291,264 ----a-w C:\WINDOWS\system32\quartz.dll
  • 2007-10-29 22:44:30 1,291,264 ----a-w C:\WINDOWS\system32\quartz.dll
  • 2004-08-03 21:44:10 1,439,744 ----a-w C:\WINDOWS\system32\query.dll
  • 2006-06-22 05:18:14 1,439,744 ----a-w C:\WINDOWS\system32\query.dll
  • 2004-08-03 21:44:10 8,192 ----a-w C:\WINDOWS\system32\rasadhlp.dll
  • 2006-06-26 17:45:40 8,192 ----a-w C:\WINDOWS\system32\rasadhlp.dll
  • 2004-08-03 21:44:10 174,080 ----a-w C:\WINDOWS\system32\rasmans.dll
  • 2006-06-22 10:54:46 181,248 ----a-w C:\WINDOWS\system32\rasmans.dll
  • 2004-08-03 21:44:10 431,616 ----a-w C:\WINDOWS\system32\riched20.dll
  • 2006-11-27 14:55:46 433,152 ----a-w C:\WINDOWS\system32\riched20.dll
  • 2004-08-03 21:44:10 581,120 ----a-w C:\WINDOWS\system32\rpcrt4.dll
  • 2007-07-09 13:11:53 584,192 ----a-w C:\WINDOWS\system32\rpcrt4.dll
  • 2004-08-03 21:44:10 395,776 ----a-w C:\WINDOWS\system32\rpcss.dll
  • 2005-07-26 04:42:36 397,824 ----a-w C:\WINDOWS\system32\rpcss.dll
  • 2004-08-03 21:44:10 144,896 ----a-w C:\WINDOWS\system32\schannel.dll
  • 2007-04-25 14:23:30 144,896 ----a-w C:\WINDOWS\system32\schannel.dll
  • 2004-08-03 21:44:10 1,483,264 ----a-w C:\WINDOWS\system32\shdocvw.dll
  • 2008-02-16 09:05:15 1,494,528 ----a-w C:\WINDOWS\system32\shdocvw.dll
  • 2004-08-03 21:44:10 8,412,672 ----a-w C:\WINDOWS\system32\shell32.dll
  • 2007-10-25 16:57:22 8,483,328 ----a-w C:\WINDOWS\system32\shell32.dll
  • 2004-08-03 21:44:12 473,600 ----a-w C:\WINDOWS\system32\shlwapi.dll
  • 2008-02-16 09:05:15 474,112 ----a-w C:\WINDOWS\system32\shlwapi.dll
  • 2004-08-03 21:44:12 135,168 ----a-w C:\WINDOWS\system32\shsvcs.dll
  • 2006-12-19 21:51:04 135,168 ----a-w C:\WINDOWS\system32\shsvcs.dll

  • 2006-01-19 19:30:18 16,096 ------w C:\WINDOWS\system32\spmsg.dll

  • 2004-08-03 21:44:28 57,856 ----a-w C:\WINDOWS\system32\spoolsv.exe
  • 2005-06-10 23:53:32 57,856 ----a-w C:\WINDOWS\system32\spoolsv.exe
  • 2004-11-18 08:42:52 22,752 ----a-w C:\WINDOWS\system32\spupdsvc.exe
  • 2005-06-28 07:21:34 22,752 ----a-w C:\WINDOWS\system32\spupdsvc.exe
  • 2004-08-03 21:44:12 96,768 ----a-w C:\WINDOWS\system32\srvsvc.dll
  • 2004-12-07 19:34:12 96,768 ----a-w C:\WINDOWS\system32\srvsvc.dll
  • 2004-08-03 21:44:14 246,302 ----a-w C:\WINDOWS\system32\strmdll.dll
  • 2006-08-24 11:19:52 246,814 ----a-w C:\WINDOWS\system32\strmdll.dll
  • 2004-08-03 21:44:14 714,240 ----a-w C:\WINDOWS\system32\sxs.dll
  • 2006-10-20 01:39:31 714,240 ----a-w C:\WINDOWS\system32\sxs.dll
  • 2004-08-03 21:44:14 210,432 ----a-w C:\WINDOWS\system32\t2embed.dll
  • 2005-10-17 21:21:40 118,272 ----a-w C:\WINDOWS\system32\t2embed.dll
  • 2004-08-03 21:44:14 246,272 ----a-w C:\WINDOWS\system32\tapisrv.dll
  • 2005-07-08 16:29:17 249,344 ----a-w C:\WINDOWS\system32\tapisrv.dll
  • 2004-08-03 21:44:28 77,312 ----a-w C:\WINDOWS\system32\telnet.exe
  • 2005-05-11 02:31:23 77,824 ----a-w C:\WINDOWS\system32\telnet.exe
  • 2004-08-03 21:44:14 101,376 ----a-w C:\WINDOWS\system32\txflog.dll
  • 2005-07-26 04:42:36 101,376 ----a-w C:\WINDOWS\system32\txflog.dll

  • 2007-11-13 11:31:11 60,416 ------w C:\WINDOWS\system32\tzchange.exe

  • 2004-08-03 21:44:14 118,784 ----a-w C:\WINDOWS\system32\umpnpmgr.dll
  • 2005-08-23 03:40:06 123,904 ----a-w C:\WINDOWS\system32\umpnpmgr.dll
  • 2004-08-03 21:44:14 185,856 ----a-w C:\WINDOWS\system32\upnphost.dll
  • 2007-02-05 20:19:48 185,856 ----a-w C:\WINDOWS\system32\upnphost.dll
  • 2004-08-03 21:44:14 602,112 ----a-w C:\WINDOWS\system32\urlmon.dll
  • 2008-02-16 09:05:15 616,960 ----a-w C:\WINDOWS\system32\urlmon.dll
  • 2004-08-03 21:44:14 578,560 ----a-w C:\WINDOWS\system32\user32.dll
  • 2007-03-08 15:38:47 579,072 ----a-w C:\WINDOWS\system32\user32.dll
  • 2004-08-03 21:44:14 417,792 ----a-w C:\WINDOWS\system32\vbscript.dll
  • 2007-12-18 14:42:55 417,792 ----a-w C:\WINDOWS\system32\vbscript.dll

  • 2006-03-17 00:38:01 28,672 ------w C:\WINDOWS\system32\verclsid.exe

  • 2004-08-03 21:44:14 67,584 ----a-w C:\WINDOWS\system32\webclnt.dll
  • 2006-01-04 03:36:30 68,096 ----a-w C:\WINDOWS\system32\webclnt.dll
  • 2004-08-03 21:44:16 333,824 ----a-w C:\WINDOWS\system32\wiaservc.dll
  • 2006-12-19 18:18:25 334,336 ----a-w C:\WINDOWS\system32\wiaservc.dll
  • 2004-08-03 21:44:16 291,328 ----a-w C:\WINDOWS\system32\winsrv.dll
  • 2007-03-17 13:45:36 293,376 ----a-w C:\WINDOWS\system32\winsrv.dll
  • 2004-08-03 21:44:16 132,096 ----a-w C:\WINDOWS\system32\wkssvc.dll
  • 2006-08-17 12:30:06 132,096 ----a-w C:\WINDOWS\system32\wkssvc.dll
  • 2004-08-03 21:44:16 230,400 ----a-w C:\WINDOWS\system32\wmasf.dll
  • 2007-10-25 08:00:50 230,912 ----a-w C:\WINDOWS\system32\wmasf.dll
  • 2004-08-03 21:44:36 2,105,344 ----a-w C:\WINDOWS\system32\wmvcore.dll
  • 2007-10-25 08:01:10 2,109,440 ----a-w C:\WINDOWS\system32\wmvcore.dll
  • 2004-08-03 21:44:18 11,776 ----a-w C:\WINDOWS\system32\xolehlp.dll
  • 2006-03-01 19:44:19 11,776 ----a-w C:\WINDOWS\system32\xolehlp.dll
  • 2004-12-18 13:07:08 2,048 ------w C:\WINDOWS\system32\xpsp3res.dll
  • 2008-02-15 23:03:24 369,152 ----a-w C:\WINDOWS\system32\xpsp3res.dll
  • 2008-05-07 21:52:40 16,384 ----atw C:\WINDOWS\TEMP\Perflib_Perfdata_1dc.dat
  • 2008-05-11 11:15:46 16,384 ----atw C:\WINDOWS\TEMP\Perflib_Perfdata_1dc.dat

  • 2007-01-19 12:52:03 74,802 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\atl.dll

  • 2007-01-19 12:52:03 995,383 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\mfc42.dll

  • 2007-01-19 12:52:04 1,011,774 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\mfc42u.dll

  • 2007-01-19 12:52:04 401,462 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\msvcp60.dll

  • 2006-08-25 15:51:13 1,054,208 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll

.

– Snapshot reset to current date –

.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* empty entries legit default entries are not shown

REGEDIT4

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\Secure Disks]

@={666C7836-A9B6-4AB4-94ED-DC238C81E925}

[HKEY_CLASSES_ROOT\CLSID{666C7836-A9B6-4AB4-94ED-DC238C81E925}]

2006-10-27 00:35 391168 -ra------ C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\SFSShell.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

“DAEMON Tools”=“C:\Program Files\DAEMON Tools\daemon.exe” [2007-08-29 17:09 171464]

“Gadu-Gadu”=“D:\Programy\Gadu-Gadu\gg.exe” [2008-03-20 12:04 2127296]

“antispy”=“D:\Program Files\IEAntiVirus\ieav.exe” []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

“SynTPEnh”=“C:\Program Files\Synaptics\SynTP\SynTPEnh.exe” [2006-05-25 20:02 786521]

“avast!”=“d:\Programy\Avast4\ashDisp.exe” [2007-12-04 15:00 79224]

“CognizanceTS”=“C:\PROGRA~1\ASUSSE~1\ASUSSE~1\Bin\ASTSVCC.dll” [2003-12-22 05:12 17920]

“ASUS Live Update”=“C:\Program Files\ASUS\ASUS Live Update\ALU.exe” [2006-02-21 15:20 180224]

“PowerForPhone”=“C:\Program Files\PowerForPhone\PowerForPhone\PowerForPhone.exe” [2006-09-07 17:58 778240]

“ATKMEDIA”=“C:\Program Files\ASUS\ATK Media\DMEDIA.EXE” [2006-05-16 16:29 53248]

“HControl”=“C:\WINDOWS\ATK0100\HControl.exe” [2006-08-23 22:22 110592]

“Wireless Console 2”=“C:\Program Files\Wireless Console 2\wcourier.exe” [2005-10-17 17:09 987136]

[HKEY_USERS.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

“CTFMON.EXE”=“C:\WINDOWS\system32\CTFMON.EXE” [2004-08-03 23:44 15360]

C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\

Bluetooth Manager.lnk - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe [2006-05-16 11:42:52 1777664]

Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 11:01:04 83360]

MultiFrame.lnk - C:\Program Files\ASUS\Asus MultiFrame\MultiFrame.exe [2008-04-22 17:43:38 491520]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\OneCard]

C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ASWLNPkg.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]

“AppInit_DLLs”=APSHook.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]

“VIDC.YV12”= yv12vfw.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ACMON]

–a------ 2006-05-30 11:28 811008 C:\Program Files\ASUS\Splendid\ACMON.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]

–a------ 2005-05-03 18:43 69632 C:\WINDOWS\Alcmtr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATICCC]

–a------ 2006-05-10 11:12 90112 C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATKMEDIA]

–a------ 2006-05-16 16:29 53248 C:\Program Files\ASUS\ATK Media\DMEDIA.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]

–a------ 2004-08-03 23:44 15360 C:\WINDOWS\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]

–a------ 2006-07-21 16:56 16261632 C:\WINDOWS\RTHDCPL.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyTel]

–a------ 2006-05-16 18:04 2879488 C:\WINDOWS\SkyTel.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SMSERIAL]

–a------ 2006-08-07 13:11 573440 C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]

–a------ 2007-05-15 00:22 35328 d:\Programy\Winamp\winampa.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center]

“FirewallOverride”=dword:00000001

[HKLM~\services\sharedaccess\parameters\firewallpolicy\standardprofile]

“EnableFirewall”= 0 (0x0)

[HKLM~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

“%windir%\system32\sessmgr.exe”=

R0 hotcore3;hotcore3;C:\WINDOWS\system32\drivers\hotcore3.sys [2007-11-06 10:06]

R1 ItSDisk;ItSDisk;C:\WINDOWS\system32\Drivers\ItSDisk.sys [2006-05-17 01:14]

R2 ASChannel;Local Communication Channel;C:\WINDOWS\System32\svchost.exe [2004-08-03 23:44]

S3 ipswuio;ipswuio;C:\WINDOWS\system32\DRIVERS\ipswuio.sys [2006-01-24 11:45]

S3 usbscan;Sterownik skanera USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 22:58]

S3 usbstor;Sterownik magazynu masowego USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 22:08]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

Cognizance REG_MULTI_SZ ASBroker ASChannel

*Newly Created Service* - CATCHME

.

**************************************************************************

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2008-05-11 13:30:11

Windows 5.1.2600 Dodatek Service Pack 2 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully

hidden files: 0

**************************************************************************

.

Completion time: 2008-05-11 13:30:37

ComboFix-quarantined-files.txt 2008-05-11 11:30:34

ComboFix2.txt 2008-05-07 21:54:31

Pre-Run: 4,401,192,960 bajtów wolnych

Post-Run: 4,390,129,664 bajtów wolnych

1018 — E O F — 2008-05-11 09:04:09

Log wyglada na czysty

Usuń ręcznie folder C: \Qoobox,usuń instalkę Combofix z dysku

Wykonaj optymalizację autostartu

Wyłącz przywracanie systemu na wszystkich dyskach. Instrukcja

Przeskanuj komputer tym (uruchom przez IE) http://www.kaspersky.pl/virusscanner.html Daj raport z niego na forum

Włącz przywracanie systemu.