Ga naar inhoud

patrickvan71

Lid
  • Items

    155
  • Registratiedatum

  • Laatst bezocht

Alles dat geplaatst werd door patrickvan71

  1. bij deze uitgevoerd heb programma's ook geubdate, behalve internet explorer welke versie moet ik nemen voor windows xp
  2. nu reageerd hij normaal heb nog niets abnormaal ondervonden
  3. ComboFix 11-10-30.02 - Patrick 30/10/2011 13:44:11.5.2 - x86 Microsoft Windows XP Home Edition 5.1.2600.3.1252.32.1043.18.1012.504 [GMT 1:00] Gestart vanuit: c:\documents and settings\Patrick\Bureaublad\ComboFix.exe gebruikte Opdracht switches :: c:\documents and settings\Patrick\Bureaublad\CFScript.txt..txt . . (((((((((((((((((((( Bestanden Gemaakt van 2011-09-28 to 2011-10-30 )))))))))))))))))))))))))))))) . . 2011-10-29 13:23 . 2011-08-31 15:00 22216 ----a-w- c:\windows\system32\drivers\mbam.sys 2011-10-29 13:23 . 2011-10-29 13:23 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2011-10-29 10:04 . 2011-10-29 10:04 -------- d-----w- c:\program files\Common Files\Java 2011-10-29 10:01 . 2011-10-03 00:37 73728 ----a-w- c:\windows\system32\javacpl.cpl . . . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2011-10-03 03:06 . 2010-05-01 09:28 472808 ----a-w- c:\windows\system32\deployJava1.dll 2011-09-26 09:41 . 2008-07-29 18:59 614912 ----a-w- c:\windows\system32\uiautomationcore.dll 2011-09-26 09:41 . 2008-04-15 21:00 23040 ----a-w- c:\windows\system32\oleaccrc.dll 2011-09-26 09:41 . 2008-04-15 21:00 220160 ----a-w- c:\windows\system32\oleacc.dll 2011-09-09 09:12 . 2008-04-15 21:00 602624 ----a-w- c:\windows\system32\crypt32.dll 2011-09-06 14:09 . 2008-04-15 21:00 1859072 ----a-w- c:\windows\system32\win32k.sys 2011-08-17 21:25 . 2007-08-13 16:54 832512 ----a-w- c:\windows\system32\wininet.dll 2011-08-17 21:25 . 2008-04-15 21:00 78336 ----a-w- c:\windows\system32\ieencode.dll 2011-08-17 21:25 . 2007-08-13 16:45 1830912 ----a-w- c:\windows\system32\inetcpl.cpl 2011-08-17 21:25 . 2008-04-15 21:00 17408 ----a-w- c:\windows\system32\corpol.dll 2011-08-17 13:49 . 2008-06-20 11:40 138496 ----a-w- c:\windows\system32\drivers\afd.sys 2011-08-17 12:22 . 2008-04-15 21:00 389120 ----a-w- c:\windows\system32\html.iec 2011-08-12 11:51 . 2006-09-06 15:43 26488 ----a-w- c:\windows\system32\spupdsvc.exe 2011-08-12 11:09 . 2011-08-12 11:09 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl . . ((((((((((((((((((((((((((((( SnapShot_2011-10-30_11.36.51 ))))))))))))))))))))))))))))))))))))))))) . - 2008-08-22 08:38 . 2011-10-30 11:18 92398 c:\windows\system32\perfc013.dat + 2008-08-22 08:38 . 2011-10-30 11:40 92398 c:\windows\system32\perfc013.dat - 2008-08-22 08:38 . 2011-10-30 11:18 72514 c:\windows\system32\perfc009.dat + 2008-08-22 08:38 . 2011-10-30 11:40 72514 c:\windows\system32\perfc009.dat + 2011-10-30 12:12 . 2011-10-30 12:12 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\ac92806d5bd508eb25f1b4b73a36b101\System.ComponentModel.DataAnnotations.ni.dll + 2011-10-30 12:12 . 2011-10-30 12:12 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\e6a9cd66d11a21776dbf425e8e28099c\System.AddIn.Contract.ni.dll + 2011-10-30 12:12 . 2011-10-30 12:12 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\aefe683674c97a998f4e908c1a7ee7c6\Microsoft.Build.Framework.ni.dll + 2011-10-30 12:12 . 2011-10-30 12:12 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\845eef4d09f28da6ee05d99f93c90f6e\Microsoft.Build.Framework.ni.dll + 2011-10-30 12:11 . 2011-10-30 12:11 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\ab7ce2d94ca725c3889a4e3c1ee88ece\dfsvc.ni.exe - 2008-08-22 08:38 . 2011-10-30 11:18 511428 c:\windows\system32\perfh013.dat + 2008-08-22 08:38 . 2011-10-30 11:40 511428 c:\windows\system32\perfh013.dat - 2008-08-22 08:38 . 2011-10-30 11:18 443248 c:\windows\system32\perfh009.dat + 2008-08-22 08:38 . 2011-10-30 11:40 443248 c:\windows\system32\perfh009.dat + 2011-10-30 12:11 . 2011-10-30 12:11 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\c8627df7adb416722d8e0f05c57fef6b\WsatConfig.ni.exe + 2011-10-30 12:12 . 2011-10-30 12:12 679936 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\36c12de583ee81e9c99acb72b09d77ac\System.Security.ni.dll + 2011-10-30 12:21 . 2011-10-30 12:21 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\33e9b0c368c31ef37a2ec7b5a181044b\System.DirectoryServices.Protocols.ni.dll + 2011-10-30 12:21 . 2011-10-30 12:21 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\11cdd1c0d65428cd3505d3813d36638c\System.DirectoryServices.AccountManagement.ni.dll + 2011-10-30 12:21 . 2011-10-30 12:21 939008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\e5ada332a9bc3c982e6aede6ba354196\System.Data.Services.Client.ni.dll + 2011-10-30 12:21 . 2011-10-30 12:21 354816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\3f179f373f31817a914b639a56cc0497\System.Data.Services.Design.ni.dll + 2011-10-30 12:21 . 2011-10-30 12:21 756736 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\fee1a48b769a8c4beb335ee5ce006091\System.Data.Entity.Design.ni.dll + 2011-10-30 12:12 . 2011-10-30 12:12 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\b9d9ff5d03e90ede1116794f2c7dd6da\System.Data.DataSetExtensions.ni.dll + 2011-10-30 12:12 . 2011-10-30 12:12 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\bce0720436dc6cb76006377f295ea365\System.Configuration.ni.dll + 2011-10-30 12:12 . 2011-10-30 12:12 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\3048737e9e3bf5173121a084337256bc\System.AddIn.ni.dll + 2011-10-30 12:11 . 2011-10-30 12:11 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\6e45cf503f025c5fe814ea7e52f62a78\SMSvcHost.ni.exe + 2011-10-30 12:11 . 2011-10-30 12:11 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\474a341340f687bcbd7777f2820a8c7a\SMDiagnostics.ni.dll + 2011-10-30 12:11 . 2011-10-30 12:11 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\f2df1ca28301bfe7e1d52b86c8394217\ServiceModelReg.ni.exe + 2011-10-30 12:11 . 2011-10-30 12:11 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\04595f414c49cf2a65b349648ba23e62\MSBuild.ni.exe + 2011-10-30 12:11 . 2011-10-30 12:11 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\4cbd7ed9fbf9f1b3cbdf23906cc0f5a3\Microsoft.Transactions.Bridge.Dtc.ni.dll + 2011-10-30 12:12 . 2011-10-30 12:12 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\ff6d4892775fd1f9b137f7c92ea453f2\Microsoft.Build.Utilities.ni.dll + 2011-10-30 12:12 . 2011-10-30 12:12 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\47ff0720cb80a0fc0bbd15ddc3d12adc\Microsoft.Build.Utilities.v3.5.ni.dll + 2011-10-30 12:12 . 2011-10-30 12:12 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\da112c5757e3c68d6369b6aa46cc9682\Microsoft.Build.Engine.ni.dll + 2011-10-30 12:12 . 2011-10-30 12:12 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\dc278e1123086ae32fec8f7e9751db14\Microsoft.Build.Conversion.v3.5.ni.dll + 2011-10-30 12:12 . 2011-10-30 12:12 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\3e6deccf191ab943d3a0812a38ab5c97\CustomMarshalers.ni.dll + 2011-10-30 12:11 . 2011-10-30 12:11 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\4e68d5df30b197ff72c75f1c3c24b949\ComSvcConfig.ni.exe + 2011-10-30 12:14 . 2011-10-30 12:14 9309696 c:\windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP29.tmp\System.Data.Entity.dll + 2011-10-30 12:21 . 2011-10-30 12:21 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\91cd88a803768151c6262853d3454ba7\System.DirectoryServices.ni.dll + 2011-10-30 12:21 . 2011-10-30 12:21 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\cc5ac99e8af2738e85cda5525fdd944f\System.Deployment.ni.dll + 2011-10-30 12:12 . 2011-10-30 12:12 2510336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\ef748704f543a8791e23387652d34dfb\System.Data.SqlXml.ni.dll + 2011-10-30 12:21 . 2011-10-30 12:21 1328128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\541142d8742e6e88f1e729fafee04e71\System.Data.Services.ni.dll + 2011-10-30 12:21 . 2011-10-30 12:21 9924096 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\a3ce22c2a84fdcb008d72d230ee0b2c0\System.Data.Entity.ni.dll + 2011-10-30 12:12 . 2011-10-30 12:12 1712128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\24331b719aa25ac2b21099e32232840c\Microsoft.VisualBasic.ni.dll + 2011-10-30 12:11 . 2011-10-30 12:11 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\ce1ecd602ca089eb13a9b428dc7f0449\Microsoft.Transactions.Bridge.ni.dll + 2011-10-30 12:12 . 2011-10-30 12:12 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\50e7c5eb58c982dba7b21cd10a69b095\Microsoft.Build.Tasks.ni.dll + 2011-10-30 12:12 . 2011-10-30 12:12 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\415cef6abab5bb959f200f6c537bc289\Microsoft.Build.Tasks.v3.5.ni.dll + 2011-10-30 12:12 . 2011-10-30 12:12 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\eea7bcc8d356e3f2dcb4f36dfc1c6bc0\Microsoft.Build.Engine.ni.dll + 2011-10-30 12:11 . 2011-10-30 12:11 17403904 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\ceadaf3b3d017c7a1ef10a06f8009f6f\System.ServiceModel.ni.dll . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-11-09 68856] "msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2010-04-16 3872080] "SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-02-28 141848] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-02-28 166424] "Persistence"="c:\windows\system32\igfxpers.exe" [2008-02-28 137752] "RTHDCPL"="RTHDCPL.EXE" [2008-05-16 16862720] "AzMixerSel"="c:\program files\Realtek\Audio\InstallShield\AzMixerSel.exe" [2006-07-17 53248] "IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2008-04-15 208952] "MSPY2002"="c:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2008-04-15 59392] "PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2008-04-15 455168] "PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2008-04-15 455168] "LManager"="c:\progra~1\LAUNCH~1\QtZgAcer.EXE" [2008-05-14 821768] "Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2010-08-23 30192] "eRecoveryService"="c:\acer\Empowering Technology\eRecovery\eRAgent.exe" [2008-05-22 425984] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-09-07 37296] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696] . [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-15 15360] . c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\ InterVideo WinCinema Manager.lnk - c:\program files\InterVideo\Common\Bin\WinCinemaMgr.exe [2008-6-4 114688] . [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"= "c:\\Program Files\\Messenger\\msmsgs.exe"= "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= "c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"= . R3 M3000Srv;Acer Crystal Eye webcam Driver;c:\windows\system32\drivers\M3000KNT.sys [5/05/2008 17:01 254976] S2 gupdate;Google Updateservice (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2/02/2010 9:12 135664] S3 GoogleDesktopManager-051210-111108;Google Desktop Manager 5.9.1005.12335;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [9/11/2009 16:27 30192] S3 gupdatem;Google Update-service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2/02/2010 9:12 135664] S3 hwusbdev;Huawei DataCard USB PNP Device;c:\windows\system32\drivers\ewusbdev.sys [21/01/2011 14:29 100736] S3 JMCR;JMCR;c:\windows\system32\drivers\jmcr.sys [9/11/2009 16:55 96856] . Inhoud van de 'Gedeelde Taken' map . 2011-10-30 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-02-02 08:11] . 2011-10-30 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-02-02 08:11] . . ------- Bijkomende Scan ------- . uStart Page = hxxp://www.google.com/ mStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0413&s=0&o=xph&d=1109&m=aoa150 uInternet Connection Wizard,ShellNext = iexplore IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000 IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html IE: Verzenden naar &Bluetooth-apparaat... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm TCP: Interfaces\{20DECBF1-1328-4324-8D13-5EDD85164977}: NameServer = 212.224.255.252 212.65.63.217 . . ************************************************************************** . catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover Rootkit scan 2011-10-30 13:49 Windows 5.1.2600 Service Pack 3 NTFS . scannen van verborgen processen ... . scannen van verborgen autostart items ... . scannen van verborgen bestanden ... . Scan succesvol afgerond verborgen bestanden: 0 . ************************************************************************** . --------------------- DLLs Geladen Onder Lopende Processen --------------------- . - - - - - - - > 'explorer.exe'(3092) c:\windows\system32\WPDShServiceObj.dll c:\windows\system32\PortableDeviceTypes.dll c:\windows\system32\PortableDeviceApi.dll . Voltooingstijd: 2011-10-30 13:52:40 ComboFix-quarantined-files.txt 2011-10-30 12:52 ComboFix2.txt 2011-10-30 11:40 ComboFix3.txt 2010-06-22 11:46 ComboFix4.txt 2010-06-09 20:13 . Pre-Run: 96.262.377.472 bytes beschikbaar Post-Run: 96.252.628.992 bytes beschikbaar . - - End Of File - - B6255C2DDC1BF8E174EBB8DEABB27096 Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 13:55:25, on 30/10/2011 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.17103) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\system32\igfxtray.exe C:\WINDOWS\system32\hkcmd.exe C:\WINDOWS\system32\igfxpers.exe C:\WINDOWS\RTHDCPL.EXE C:\WINDOWS\system32\igfxsrvc.exe C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Mobistar Internet Everywhere\Mobistar Internet Everywhere.exe C:\WINDOWS\explorer.exe C:\WINDOWS\system32\notepad.exe C:\Program Files\internet explorer\iexplore.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = iGoogle Redirect R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll (file missing) O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\Audio\InstallShield\AzMixerSel.exe O4 - HKLM\..\Run: [iMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html O8 - Extra context menu item: Verzenden naar &Bluetooth-apparaat... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{20DECBF1-1328-4324-8D13-5EDD85164977}: NameServer = 212.224.255.252 212.65.63.217 O17 - HKLM\System\CS1\Services\Tcpip\..\{20DECBF1-1328-4324-8D13-5EDD85164977}: NameServer = 212.224.255.252 212.65.63.217 O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe O23 - Service: Google Desktop Manager 5.9.1005.12335 (GoogleDesktopManager-051210-111108) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe -- End of file - 7966 bytes
  4. ComboFix 11-10-30.01 - Patrick 30/10/2011 12:24:49.4.2 - x86 Microsoft Windows XP Home Edition 5.1.2600.3.1252.32.1043.18.1012.524 [GMT 1:00] Gestart vanuit: c:\documents and settings\Patrick\Bureaublad\ComboFix.exe . . (((((((((((((((((((( Bestanden Gemaakt van 2011-09-28 to 2011-10-30 )))))))))))))))))))))))))))))) . . 2011-10-29 13:23 . 2011-08-31 15:00 22216 ----a-w- c:\windows\system32\drivers\mbam.sys 2011-10-29 13:23 . 2011-10-29 13:23 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2011-10-29 10:04 . 2011-10-29 10:04 -------- d-----w- c:\program files\Common Files\Java 2011-10-29 10:01 . 2011-10-03 00:37 73728 ----a-w- c:\windows\system32\javacpl.cpl . . . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2011-10-03 03:06 . 2010-05-01 09:28 472808 ----a-w- c:\windows\system32\deployJava1.dll 2011-09-26 09:41 . 2008-07-29 18:59 614912 ----a-w- c:\windows\system32\uiautomationcore.dll 2011-09-26 09:41 . 2008-04-15 21:00 23040 ----a-w- c:\windows\system32\oleaccrc.dll 2011-09-26 09:41 . 2008-04-15 21:00 220160 ----a-w- c:\windows\system32\oleacc.dll 2011-09-09 09:12 . 2008-04-15 21:00 602624 ----a-w- c:\windows\system32\crypt32.dll 2011-09-06 14:09 . 2008-04-15 21:00 1859072 ----a-w- c:\windows\system32\win32k.sys 2011-08-17 21:25 . 2007-08-13 16:54 832512 ----a-w- c:\windows\system32\wininet.dll 2011-08-17 21:25 . 2008-04-15 21:00 78336 ----a-w- c:\windows\system32\ieencode.dll 2011-08-17 21:25 . 2007-08-13 16:45 1830912 ----a-w- c:\windows\system32\inetcpl.cpl 2011-08-17 21:25 . 2008-04-15 21:00 17408 ----a-w- c:\windows\system32\corpol.dll 2011-08-17 13:49 . 2008-06-20 11:40 138496 ----a-w- c:\windows\system32\drivers\afd.sys 2011-08-17 12:22 . 2008-04-15 21:00 389120 ----a-w- c:\windows\system32\html.iec 2011-08-12 11:51 . 2006-09-06 15:43 26488 ----a-w- c:\windows\system32\spupdsvc.exe 2011-08-12 11:09 . 2011-08-12 11:09 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl . . ((((((((((((((((((((((((((((( SnapShot@2010-06-22_11.43.29 ))))))))))))))))))))))))))))))))))))))))) . + 2011-05-13 18:17 . 2011-05-13 18:17 65536 c:\windows\WinSxS\x86_Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_452bf920\vcomp.dll + 2011-05-13 17:45 . 2011-05-13 17:45 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80KOR.dll + 2011-05-13 17:45 . 2011-05-13 17:45 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80JPN.dll + 2011-05-13 17:45 . 2011-05-13 17:45 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80ITA.dll + 2011-05-13 17:45 . 2011-05-13 17:45 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80FRA.dll + 2011-05-13 17:45 . 2011-05-13 17:45 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80ESP.dll + 2011-05-13 17:45 . 2011-05-13 17:45 57344 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80ENU.dll + 2011-05-13 17:45 . 2011-05-13 17:45 65536 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80DEU.dll + 2011-05-13 17:45 . 2011-05-13 17:45 45056 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80CHT.dll + 2011-05-13 17:45 . 2011-05-13 17:45 40960 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80CHS.dll + 2011-05-13 23:06 . 2011-05-13 23:06 57856 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_150c9e8b\mfcm80u.dll + 2011-05-13 23:23 . 2011-05-13 23:23 69632 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_150c9e8b\mfcm80.dll + 2011-05-13 16:37 . 2011-05-13 16:37 97280 c:\windows\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_a4c618fa\ATL80.dll + 2011-10-30 11:36 . 2011-10-30 11:36 16384 c:\windows\temp\Perflib_Perfdata_7e4.dat - 2008-03-27 10:40 . 2010-04-21 13:28 46080 c:\windows\system32\tzchange.exe + 2008-03-27 10:40 . 2011-07-08 13:49 46080 c:\windows\system32\tzchange.exe + 2008-04-15 21:00 . 2010-08-27 05:55 99840 c:\windows\system32\srvsvc.dll + 2008-04-15 21:00 . 2010-08-17 13:17 58880 c:\windows\system32\spoolsv.exe + 2006-10-26 17:56 . 2009-02-27 02:42 66440 c:\windows\system32\spool\drivers\w32x86\msonpui.dll + 2006-10-26 17:56 . 2009-02-27 02:42 66440 c:\windows\system32\spool\drivers\w32x86\3\msonpui.dll + 2009-12-07 11:25 . 2011-08-12 11:51 18808 c:\windows\system32\spmsg.dll - 2009-12-07 11:25 . 2009-05-26 11:41 18808 c:\windows\system32\spmsg.dll + 2010-04-16 21:12 . 2010-04-16 21:12 48464 c:\windows\system32\sirenacm.dll + 2011-01-21 13:17 . 2008-04-14 20:00 23552 c:\windows\system32\ReinstallBackups\0015\DriverFiles\i386\mouclass.sys + 2011-01-21 13:17 . 2008-04-15 21:00 53504 c:\windows\system32\ReinstallBackups\0015\DriverFiles\i386\i8042prt.sys + 2010-03-30 22:16 . 2010-03-30 22:16 99176 c:\windows\system32\PresentationHostProxy.dll - 2007-08-13 16:36 . 2010-05-04 17:21 44544 c:\windows\system32\pngfilt.dll + 2007-08-13 16:36 . 2011-08-17 21:25 44544 c:\windows\system32\pngfilt.dll + 2008-08-22 08:38 . 2011-10-30 11:18 92398 c:\windows\system32\perfc013.dat + 2008-08-22 08:38 . 2011-10-30 11:18 72514 c:\windows\system32\perfc009.dat + 2009-11-06 23:07 . 2009-11-06 23:07 49488 c:\windows\system32\netfxperf.dll + 2006-10-26 17:56 . 2009-02-27 02:42 31640 c:\windows\system32\msonpmon.dll + 2007-08-13 16:54 . 2011-08-17 21:25 52224 c:\windows\system32\msfeedsbs.dll - 2007-08-13 16:54 . 2010-05-04 17:21 52224 c:\windows\system32\msfeedsbs.dll - 2007-08-13 16:54 . 2010-05-04 17:21 27648 c:\windows\system32\jsproxy.dll + 2007-08-13 16:54 . 2011-08-17 21:25 27648 c:\windows\system32\jsproxy.dll + 2008-04-15 21:00 . 2010-11-18 18:15 86016 c:\windows\system32\isign32.dll - 2008-04-15 21:00 . 2008-04-15 21:00 86016 c:\windows\system32\isign32.dll + 2007-08-13 16:39 . 2011-08-17 12:21 13824 c:\windows\system32\ieudinit.exe - 2007-08-13 16:39 . 2010-05-04 12:40 13824 c:\windows\system32\ieudinit.exe + 2007-08-13 16:39 . 2011-08-17 21:25 44544 c:\windows\system32\iernonce.dll - 2007-08-13 16:39 . 2010-05-04 17:21 44544 c:\windows\system32\iernonce.dll - 2007-08-13 16:39 . 2010-05-04 12:40 70656 c:\windows\system32\ie4uinit.exe + 2007-08-13 16:39 . 2011-08-17 12:21 70656 c:\windows\system32\ie4uinit.exe - 2008-04-15 21:00 . 2008-04-15 21:00 80384 c:\windows\system32\iccvid.dll + 2008-04-15 21:00 . 2010-06-17 14:03 80384 c:\windows\system32\iccvid.dll + 2007-08-13 16:36 . 2011-08-17 21:25 63488 c:\windows\system32\icardie.dll - 2007-08-13 16:36 . 2010-05-04 17:21 63488 c:\windows\system32\icardie.dll + 2008-04-15 21:00 . 2010-11-02 15:17 40960 c:\windows\system32\drivers\ndproxy.sys + 2008-04-15 21:00 . 2011-07-08 14:02 10496 c:\windows\system32\drivers\ndistapi.sys + 2011-01-21 13:29 . 2007-08-09 03:13 24448 c:\windows\system32\drivers\ewdcsc.sys + 2008-04-15 21:00 . 2009-04-20 17:22 45568 c:\windows\system32\dnsrslvr.dll - 2008-04-15 21:00 . 2008-04-15 21:00 45568 c:\windows\system32\dnsrslvr.dll + 2008-04-15 21:00 . 2010-10-11 14:59 45568 c:\windows\system32\dllcache\wab.exe + 2008-04-15 21:00 . 2010-08-27 05:55 99840 c:\windows\system32\dllcache\srvsvc.dll + 2008-04-15 21:00 . 2010-08-17 13:17 58880 c:\windows\system32\dllcache\spoolsv.exe - 2007-08-13 16:36 . 2010-05-04 17:21 44544 c:\windows\system32\dllcache\pngfilt.dll + 2007-08-13 16:36 . 2011-08-17 21:25 44544 c:\windows\system32\dllcache\pngfilt.dll + 2008-04-15 21:00 . 2011-09-26 09:41 23040 c:\windows\system32\dllcache\oleaccrc.dll + 2008-04-15 21:00 . 2010-11-02 15:17 40960 c:\windows\system32\dllcache\ndproxy.sys + 2008-04-15 21:00 . 2011-07-08 14:02 10496 c:\windows\system32\dllcache\ndistapi.sys + 2009-08-29 07:32 . 2011-08-17 21:25 52224 c:\windows\system32\dllcache\msfeedsbs.dll - 2009-08-29 07:32 . 2010-05-04 17:21 52224 c:\windows\system32\dllcache\msfeedsbs.dll + 2007-08-13 16:54 . 2011-08-17 21:25 27648 c:\windows\system32\dllcache\jsproxy.dll - 2007-08-13 16:54 . 2010-05-04 17:21 27648 c:\windows\system32\dllcache\jsproxy.dll + 2008-04-15 21:00 . 2010-11-18 18:15 86016 c:\windows\system32\dllcache\isign32.dll - 2008-04-15 21:00 . 2008-04-15 21:00 86016 c:\windows\system32\dllcache\isign32.dll - 2009-08-28 10:32 . 2010-05-04 12:40 13824 c:\windows\system32\dllcache\ieudinit.exe + 2009-08-28 10:32 . 2011-08-17 12:21 13824 c:\windows\system32\dllcache\ieudinit.exe - 2007-08-13 16:39 . 2010-05-04 17:21 44544 c:\windows\system32\dllcache\iernonce.dll + 2007-08-13 16:39 . 2011-08-17 21:25 44544 c:\windows\system32\dllcache\iernonce.dll - 2008-04-15 21:00 . 2010-05-04 17:21 78336 c:\windows\system32\dllcache\ieencode.dll + 2008-04-15 21:00 . 2011-08-17 21:25 78336 c:\windows\system32\dllcache\ieencode.dll - 2007-08-13 16:39 . 2010-05-04 12:40 70656 c:\windows\system32\dllcache\ie4uinit.exe + 2007-08-13 16:39 . 2011-08-17 12:21 70656 c:\windows\system32\dllcache\ie4uinit.exe - 2009-08-29 07:32 . 2010-05-04 17:21 63488 c:\windows\system32\dllcache\icardie.dll + 2009-08-29 07:32 . 2011-08-17 21:25 63488 c:\windows\system32\dllcache\icardie.dll - 2008-04-15 21:00 . 2008-04-15 21:00 45568 c:\windows\system32\dllcache\dnsrslvr.dll + 2008-04-15 21:00 . 2009-04-20 17:22 45568 c:\windows\system32\dllcache\dnsrslvr.dll - 2008-04-15 21:00 . 2009-12-14 07:10 33280 c:\windows\system32\dllcache\csrsrv.dll + 2008-04-15 21:00 . 2011-04-26 11:07 33280 c:\windows\system32\dllcache\csrsrv.dll + 2008-04-15 21:00 . 2011-08-17 21:25 17408 c:\windows\system32\dllcache\corpol.dll - 2008-04-15 21:00 . 2010-05-04 17:21 17408 c:\windows\system32\dllcache\corpol.dll + 2008-04-15 21:00 . 2011-04-26 11:07 33280 c:\windows\system32\csrsrv.dll - 2008-04-15 21:00 . 2009-12-14 07:10 33280 c:\windows\system32\csrsrv.dll - 2009-11-09 15:10 . 2009-11-09 15:28 32768 c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat + 2009-11-09 15:10 . 2011-09-21 09:06 32768 c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat - 2009-11-09 15:10 . 2009-11-09 15:28 32768 c:\windows\system32\config\systemprofile\Local Settings\Geschiedenis\History.IE5\index.dat + 2009-11-09 15:10 . 2011-09-21 09:06 32768 c:\windows\system32\config\systemprofile\Local Settings\Geschiedenis\History.IE5\index.dat + 2011-09-21 09:24 . 2011-09-21 09:06 16384 c:\windows\system32\config\systemprofile\Cookies\index.dat + 2009-11-06 23:07 . 2009-11-06 23:07 13648 c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll + 2010-09-22 07:43 . 2010-09-22 07:43 30544 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe - 2010-03-23 03:31 . 2010-03-23 03:31 30544 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe - 2010-04-01 09:42 . 2010-04-01 09:42 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll + 2011-07-08 12:00 . 2011-07-08 12:00 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll - 2010-03-31 12:51 . 2010-03-31 12:51 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll + 2011-07-07 10:04 . 2011-07-07 10:04 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll - 2010-03-31 12:51 . 2010-03-31 12:51 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll + 2011-07-07 10:04 . 2011-07-07 10:04 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll - 2010-03-31 12:51 . 2010-03-31 12:51 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll + 2011-07-07 10:03 . 2011-07-07 10:03 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll - 2010-03-31 13:32 . 2010-03-31 13:32 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe + 2011-07-07 11:09 . 2011-07-07 11:09 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe - 2010-03-31 13:32 . 2010-03-31 13:32 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll + 2011-07-07 11:09 . 2011-07-07 11:09 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll + 2009-11-06 23:07 . 2009-11-06 23:07 13648 c:\windows\Microsoft.NET\Framework\SharedReg12.dll + 2009-11-06 23:07 . 2009-11-06 23:07 13648 c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll + 2009-11-06 23:07 . 2009-11-06 23:07 13648 c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll + 2009-11-06 23:07 . 2009-11-06 23:07 13648 c:\windows\Microsoft.NET\Framework\sbscmp10.dll + 2009-11-06 23:07 . 2009-11-06 23:07 13664 c:\windows\Microsoft.NET\Framework\sbs_wminet_utils.dll + 2009-11-06 23:07 . 2009-11-06 23:07 13688 c:\windows\Microsoft.NET\Framework\sbs_system.enterpriseservices.dll + 2009-11-06 23:07 . 2009-11-06 23:07 13664 c:\windows\Microsoft.NET\Framework\sbs_system.data.dll + 2009-11-06 23:07 . 2009-11-06 23:07 13696 c:\windows\Microsoft.NET\Framework\sbs_system.configuration.install.dll + 2009-11-06 23:07 . 2009-11-06 23:07 13656 c:\windows\Microsoft.NET\Framework\sbs_mscorsec.dll + 2009-11-06 23:07 . 2009-11-06 23:07 13656 c:\windows\Microsoft.NET\Framework\sbs_mscorrc.dll + 2009-11-06 23:07 . 2009-11-06 23:07 13656 c:\windows\Microsoft.NET\Framework\sbs_mscordbi.dll + 2009-11-06 23:07 . 2009-11-06 23:07 13672 c:\windows\Microsoft.NET\Framework\sbs_microsoft.jscript.dll + 2009-11-06 23:07 . 2009-11-06 23:07 13664 c:\windows\Microsoft.NET\Framework\sbs_diasymreader.dll + 2009-11-06 23:07 . 2009-11-06 23:07 86864 c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe + 2011-10-29 10:08 . 2011-10-29 10:08 22016 c:\windows\Installer\7ea5a.msi + 2011-07-22 01:31 . 2011-07-22 01:31 19968 c:\windows\Installer\1fdf04.msi + 2011-01-10 08:13 . 2011-01-10 08:13 22016 c:\windows\Installer\187489.msi + 2011-01-10 08:11 . 2011-01-10 08:11 27136 c:\windows\Installer\18745c.msi + 2011-01-10 08:11 . 2011-01-10 08:11 83456 c:\windows\Installer\187445.msi + 2011-01-10 08:11 . 2011-01-10 08:11 58880 c:\windows\Installer\18743c.msi + 2011-01-10 08:12 . 2011-01-10 08:12 80395 c:\windows\Installer\{CC38A00D-7EED-46CE-9281-D1D97B81F22A}\MsblIco.Exe + 2011-02-09 07:46 . 2011-02-09 07:46 65536 c:\windows\Installer\{C656142F-EFE1-44CD-BFAD-6CBC6DCB9860}\Shortcut0.C3A146F5_4B48_11D5_A819_00B0D0428C0C.exe - 2009-11-09 17:19 . 2009-11-09 17:19 65536 c:\windows\Installer\{C656142F-EFE1-44CD-BFAD-6CBC6DCB9860}\Shortcut0.C3A146F5_4B48_11D5_A819_00B0D0428C0C.exe + 2011-01-10 08:11 . 2011-01-10 08:11 61272 c:\windows\Installer\{C20C2630-B3A7-44BA-BDD0-31E256AE490E}\IconWlc.exe + 2008-08-21 20:42 . 2011-10-30 11:09 35088 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\oisicon.exe - 2008-08-21 20:42 . 2010-06-19 10:50 35088 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\oisicon.exe - 2008-08-21 20:42 . 2010-06-19 10:50 18704 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\mspicons.exe + 2008-08-21 20:42 . 2011-10-30 11:09 18704 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\mspicons.exe + 2008-08-21 20:42 . 2011-10-30 11:09 20240 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\cagicon.exe - 2008-08-21 20:42 . 2010-06-19 10:50 20240 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\cagicon.exe + 2010-06-08 08:48 . 2011-10-29 14:21 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll - 2010-06-08 08:48 . 2010-06-08 08:48 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll + 2011-01-10 08:13 . 2011-01-10 08:13 58945 c:\windows\Installer\{2869F5EA-93C3-48E5-80DF-DB696BC84A91}\wlmail.exe - 2009-11-16 11:29 . 2009-11-16 11:29 58945 c:\windows\Installer\{2869F5EA-93C3-48E5-80DF-DB696BC84A91}\wlmail.exe + 2010-09-23 02:47 . 2010-09-23 02:47 35760 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\reader_sl.exe + 2010-09-23 01:03 . 2010-09-23 01:03 99776 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\eula.exe + 2010-09-20 21:07 . 2010-09-20 21:07 70584 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\adobeextractfiles.dll + 2010-09-23 00:52 . 2010-09-23 00:52 27048 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\acrotextextractor.exe + 2010-09-22 16:12 . 2010-09-22 16:12 15800 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\AcroRd32Info.exe + 2009-02-26 12:09 . 2009-02-26 12:09 10120 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.6612\XLCALL32.DLL + 2009-02-26 17:43 . 2009-02-26 17:43 71520 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.6612\XL12CNVP.DLL + 2009-02-26 16:45 . 2009-02-26 16:45 20808 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.6612\WRD12EXE.EXE + 2006-07-24 08:50 . 2006-07-24 08:50 47920 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.6612\VBAME.DLL + 2009-02-26 13:24 . 2009-02-26 13:24 71536 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.6612\ONFILTER.DLL + 2009-02-26 13:24 . 2009-02-26 13:24 97680 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.6612\ONENOTEM.EXE + 2006-07-24 08:50 . 2006-07-24 08:50 92976 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.6612\MSADDNDR.DLL + 2006-10-26 18:13 . 2006-10-26 18:13 56192 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\ACECNFLT.EXE + 2011-10-29 14:10 . 2011-06-21 18:37 44544 c:\windows\ie7updates\KB2586448-IE7\pngfilt.dll + 2011-10-29 14:10 . 2011-06-21 18:37 52224 c:\windows\ie7updates\KB2586448-IE7\msfeedsbs.dll + 2011-10-29 14:10 . 2011-06-21 18:37 27648 c:\windows\ie7updates\KB2586448-IE7\jsproxy.dll + 2011-10-29 14:10 . 2011-06-21 11:46 13824 c:\windows\ie7updates\KB2586448-IE7\ieudinit.exe + 2011-10-29 14:10 . 2011-06-21 18:37 44544 c:\windows\ie7updates\KB2586448-IE7\iernonce.dll + 2011-10-29 14:10 . 2011-06-21 18:37 78336 c:\windows\ie7updates\KB2586448-IE7\ieencode.dll + 2011-10-29 14:10 . 2011-06-21 11:46 70656 c:\windows\ie7updates\KB2586448-IE7\ie4uinit.exe + 2011-10-29 14:10 . 2011-06-21 18:37 63488 c:\windows\ie7updates\KB2586448-IE7\icardie.dll + 2011-10-29 14:10 . 2011-06-21 18:37 17408 c:\windows\ie7updates\KB2586448-IE7\corpol.dll + 2011-08-12 14:58 . 2011-04-25 15:44 44544 c:\windows\ie7updates\KB2559049-IE7\pngfilt.dll + 2011-08-12 14:58 . 2011-04-25 15:44 52224 c:\windows\ie7updates\KB2559049-IE7\msfeedsbs.dll + 2011-08-12 14:58 . 2011-04-25 15:44 27648 c:\windows\ie7updates\KB2559049-IE7\jsproxy.dll + 2011-08-12 14:58 . 2011-04-25 12:01 13824 c:\windows\ie7updates\KB2559049-IE7\ieudinit.exe + 2011-08-12 14:58 . 2011-04-25 15:44 44544 c:\windows\ie7updates\KB2559049-IE7\iernonce.dll + 2011-08-12 14:58 . 2011-04-25 15:44 78336 c:\windows\ie7updates\KB2559049-IE7\ieencode.dll + 2011-08-12 14:58 . 2011-04-25 12:01 70656 c:\windows\ie7updates\KB2559049-IE7\ie4uinit.exe + 2011-08-12 14:58 . 2011-04-25 15:44 63488 c:\windows\ie7updates\KB2559049-IE7\icardie.dll + 2011-08-12 14:58 . 2011-04-25 15:44 17408 c:\windows\ie7updates\KB2559049-IE7\corpol.dll + 2011-06-23 23:10 . 2011-02-17 18:55 44544 c:\windows\ie7updates\KB2530548-IE7\pngfilt.dll + 2011-06-23 23:10 . 2011-02-17 18:55 52224 c:\windows\ie7updates\KB2530548-IE7\msfeedsbs.dll + 2011-06-23 23:10 . 2011-02-17 18:55 27648 c:\windows\ie7updates\KB2530548-IE7\jsproxy.dll + 2011-06-23 23:10 . 2011-02-17 11:44 13824 c:\windows\ie7updates\KB2530548-IE7\ieudinit.exe + 2011-06-23 23:10 . 2011-02-17 18:55 44544 c:\windows\ie7updates\KB2530548-IE7\iernonce.dll + 2011-06-23 23:10 . 2011-02-17 18:55 78336 c:\windows\ie7updates\KB2530548-IE7\ieencode.dll + 2011-06-23 23:10 . 2011-02-17 11:44 70656 c:\windows\ie7updates\KB2530548-IE7\ie4uinit.exe + 2011-06-23 23:10 . 2011-02-17 18:55 63488 c:\windows\ie7updates\KB2530548-IE7\icardie.dll + 2011-06-23 23:10 . 2011-02-17 18:55 17408 c:\windows\ie7updates\KB2530548-IE7\corpol.dll + 2011-04-21 08:02 . 2010-12-20 23:06 44544 c:\windows\ie7updates\KB2497640-IE7\pngfilt.dll + 2011-04-21 08:02 . 2010-12-20 23:06 52224 c:\windows\ie7updates\KB2497640-IE7\msfeedsbs.dll + 2011-04-21 08:02 . 2010-12-20 23:06 27648 c:\windows\ie7updates\KB2497640-IE7\jsproxy.dll + 2011-04-21 08:02 . 2010-12-20 12:55 13824 c:\windows\ie7updates\KB2497640-IE7\ieudinit.exe + 2011-04-21 08:02 . 2010-12-20 23:06 44544 c:\windows\ie7updates\KB2497640-IE7\iernonce.dll + 2011-04-21 08:02 . 2010-12-20 23:06 78336 c:\windows\ie7updates\KB2497640-IE7\ieencode.dll + 2011-04-21 08:02 . 2010-12-20 12:55 70656 c:\windows\ie7updates\KB2497640-IE7\ie4uinit.exe + 2011-04-21 08:02 . 2010-12-20 23:06 63488 c:\windows\ie7updates\KB2497640-IE7\icardie.dll + 2011-04-21 08:02 . 2010-12-20 23:06 17408 c:\windows\ie7updates\KB2497640-IE7\corpol.dll + 2011-02-10 08:43 . 2010-11-06 00:25 44544 c:\windows\ie7updates\KB2482017-IE7\pngfilt.dll + 2011-02-10 08:43 . 2010-11-06 00:25 52224 c:\windows\ie7updates\KB2482017-IE7\msfeedsbs.dll + 2011-02-10 08:43 . 2010-11-06 00:25 27648 c:\windows\ie7updates\KB2482017-IE7\jsproxy.dll + 2011-02-10 08:43 . 2010-11-03 12:25 13824 c:\windows\ie7updates\KB2482017-IE7\ieudinit.exe + 2011-02-10 08:43 . 2010-11-06 00:25 44544 c:\windows\ie7updates\KB2482017-IE7\iernonce.dll + 2011-02-10 08:43 . 2010-11-06 00:25 78336 c:\windows\ie7updates\KB2482017-IE7\ieencode.dll + 2011-02-10 08:43 . 2010-11-03 12:25 70656 c:\windows\ie7updates\KB2482017-IE7\ie4uinit.exe + 2011-02-10 08:43 . 2010-11-06 00:25 63488 c:\windows\ie7updates\KB2482017-IE7\icardie.dll + 2011-02-10 08:43 . 2010-11-06 00:25 17408 c:\windows\ie7updates\KB2482017-IE7\corpol.dll + 2010-12-17 00:44 . 2010-09-09 13:35 44544 c:\windows\ie7updates\KB2416400-IE7\pngfilt.dll + 2010-12-17 00:44 . 2010-09-09 13:35 52224 c:\windows\ie7updates\KB2416400-IE7\msfeedsbs.dll + 2010-12-17 00:44 . 2010-09-09 13:35 27648 c:\windows\ie7updates\KB2416400-IE7\jsproxy.dll + 2010-12-17 00:44 . 2010-09-08 15:57 13824 c:\windows\ie7updates\KB2416400-IE7\ieudinit.exe + 2010-12-17 00:44 . 2010-09-09 13:35 44544 c:\windows\ie7updates\KB2416400-IE7\iernonce.dll + 2010-12-17 00:44 . 2010-09-09 13:35 78336 c:\windows\ie7updates\KB2416400-IE7\ieencode.dll + 2010-12-17 00:44 . 2010-09-08 15:57 70656 c:\windows\ie7updates\KB2416400-IE7\ie4uinit.exe + 2010-12-17 00:44 . 2010-09-09 13:35 63488 c:\windows\ie7updates\KB2416400-IE7\icardie.dll + 2010-12-17 00:44 . 2010-09-09 13:35 17408 c:\windows\ie7updates\KB2416400-IE7\corpol.dll + 2010-10-18 07:45 . 2010-06-24 12:19 44544 c:\windows\ie7updates\KB2360131-IE7\pngfilt.dll + 2010-10-18 07:45 . 2010-06-24 12:19 52224 c:\windows\ie7updates\KB2360131-IE7\msfeedsbs.dll + 2010-10-18 07:45 . 2010-06-24 12:19 27648 c:\windows\ie7updates\KB2360131-IE7\jsproxy.dll + 2010-10-18 07:45 . 2010-06-23 12:08 13824 c:\windows\ie7updates\KB2360131-IE7\ieudinit.exe + 2010-10-18 07:45 . 2010-06-24 12:19 44544 c:\windows\ie7updates\KB2360131-IE7\iernonce.dll + 2010-10-18 07:45 . 2010-06-24 12:19 78336 c:\windows\ie7updates\KB2360131-IE7\ieencode.dll + 2010-10-18 07:45 . 2010-06-23 12:08 70656 c:\windows\ie7updates\KB2360131-IE7\ie4uinit.exe + 2010-10-18 07:45 . 2010-06-24 12:19 63488 c:\windows\ie7updates\KB2360131-IE7\icardie.dll + 2010-10-18 07:45 . 2010-06-24 12:19 17408 c:\windows\ie7updates\KB2360131-IE7\corpol.dll + 2010-08-15 12:27 . 2010-05-04 17:21 44544 c:\windows\ie7updates\KB2183461-IE7\pngfilt.dll + 2010-08-15 12:27 . 2010-05-04 17:21 52224 c:\windows\ie7updates\KB2183461-IE7\msfeedsbs.dll + 2010-08-15 12:27 . 2010-05-04 17:21 27648 c:\windows\ie7updates\KB2183461-IE7\jsproxy.dll + 2010-08-15 12:27 . 2010-05-04 12:40 13824 c:\windows\ie7updates\KB2183461-IE7\ieudinit.exe + 2010-08-15 12:27 . 2010-05-04 17:21 44544 c:\windows\ie7updates\KB2183461-IE7\iernonce.dll + 2010-08-15 12:27 . 2010-05-04 17:21 78336 c:\windows\ie7updates\KB2183461-IE7\ieencode.dll + 2010-08-15 12:27 . 2010-05-04 12:40 70656 c:\windows\ie7updates\KB2183461-IE7\ie4uinit.exe + 2010-08-15 12:27 . 2010-05-04 17:21 63488 c:\windows\ie7updates\KB2183461-IE7\icardie.dll + 2010-08-15 12:27 . 2010-05-04 17:21 17408 c:\windows\ie7updates\KB2183461-IE7\corpol.dll + 2011-10-29 14:09 . 2011-10-29 14:09 90112 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_4fa48c3d\System.Drawing.Design.dll + 2011-10-29 14:09 . 2011-10-29 14:09 61440 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_7eac6ff5\CustomMarshalers.dll + 2011-10-30 10:21 . 2011-10-30 10:21 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\888b745ca99d39692c2e9af222e5eae8\UIAutomationProvider.ni.dll + 2011-10-30 10:16 . 2011-10-30 10:16 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\66873b557d5c7013e4c630361473b0c2\PresentationFontCache.ni.exe + 2011-10-29 14:20 . 2011-10-29 14:20 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\5b30652a7b802199984f93b5e414260f\PresentationCFFRasterizer.ni.dll + 2011-10-30 10:53 . 2011-10-30 10:53 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\d86a3346c3d90ff12d0df9d7726f3ece\Accessibility.ni.dll + 2011-10-29 14:17 . 2011-10-29 14:17 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll - 2010-06-19 10:40 . 2010-06-19 10:40 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll + 2011-10-29 14:17 . 2011-10-29 14:17 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll - 2010-06-19 10:40 . 2010-06-19 10:40 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll - 2010-06-19 10:41 . 2010-06-19 10:41 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll + 2011-10-29 14:18 . 2011-10-29 14:18 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll + 2011-10-29 14:17 . 2011-10-29 14:17 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll - 2010-06-19 10:40 . 2010-06-19 10:40 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll - 2010-06-19 10:41 . 2010-06-19 10:41 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll + 2011-10-29 14:17 . 2011-10-29 14:17 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll + 2011-10-29 14:17 . 2011-10-29 14:17 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll - 2010-06-19 10:41 . 2010-06-19 10:41 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll - 2010-06-19 10:41 . 2010-06-19 10:41 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll + 2011-10-29 14:17 . 2011-10-29 14:17 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll + 2011-10-29 14:17 . 2011-10-29 14:17 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll - 2010-06-19 10:41 . 2010-06-19 10:41 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll + 2011-10-29 14:17 . 2011-10-29 14:17 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll - 2010-06-19 10:40 . 2010-06-19 10:40 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll + 2011-10-29 14:17 . 2011-10-29 14:17 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll - 2010-06-19 10:40 . 2010-06-19 10:40 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll - 2010-06-19 10:40 . 2010-06-19 10:40 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll + 2011-10-29 14:17 . 2011-10-29 14:17 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll - 2010-06-19 10:40 . 2010-06-19 10:40 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll + 2011-10-29 14:17 . 2011-10-29 14:17 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll + 2011-10-29 14:17 . 2011-10-29 14:17 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll - 2010-06-19 10:40 . 2010-06-19 10:40 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll - 2010-06-19 10:52 . 2010-06-19 10:52 81920 c:\windows\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll + 2011-10-29 14:08 . 2011-10-29 14:08 81920 c:\windows\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll + 2011-10-30 11:08 . 2011-10-30 11:08 11144 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Word.dll - 2009-11-25 18:57 . 2009-11-25 18:57 63336 c:\windows\assembly\GAC\Microsoft.Vbe.Interop\12.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.dll + 2011-10-30 11:08 . 2011-10-30 11:08 63336 c:\windows\assembly\GAC\Microsoft.Vbe.Interop\12.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.dll + 2010-08-15 12:16 . 2008-04-15 21:00 80384 c:\windows\$NtUninstallKB982665$\iccvid.dll + 2011-08-25 18:57 . 2010-11-03 13:12 46080 c:\windows\$NtUninstallKB2570791$\tzchange.exe + 2011-08-25 18:57 . 2011-07-09 00:32 16896 c:\windows\$NtUninstallKB2570791$\spuninst\tzchange.dll + 2011-08-12 14:53 . 2008-04-15 21:00 10112 c:\windows\$NtUninstallKB2566454$\ndistapi.sys + 2011-04-21 07:54 . 2008-04-15 21:00 45568 c:\windows\$NtUninstallKB2509553$\dnsrslvr.dll + 2011-07-22 01:32 . 2010-12-09 14:30 33280 c:\windows\$NtUninstallKB2507938$\csrsrv.dll + 2011-02-10 08:42 . 2009-12-14 07:10 33280 c:\windows\$NtUninstallKB2476687$\csrsrv.dll + 2010-12-17 00:46 . 2010-06-21 14:46 46080 c:\windows\$NtUninstallKB2443685$\tzchange.exe + 2010-12-17 00:46 . 2010-11-05 05:57 16896 c:\windows\$NtUninstallKB2443685$\spuninst\tzchange.dll + 2010-12-17 00:46 . 2008-04-15 21:00 86016 c:\windows\$NtUninstallKB2443105$\isign32.dll + 2010-12-17 00:46 . 2008-04-15 21:00 40576 c:\windows\$NtUninstallKB2440591$\ndproxy.sys + 2010-12-17 00:41 . 2008-04-15 21:00 46080 c:\windows\$NtUninstallKB2423089$\wab.exe + 2010-10-01 07:19 . 2008-04-15 21:00 57856 c:\windows\$NtUninstallKB2347290$\spoolsv.exe + 2010-10-18 07:46 . 2008-04-15 21:00 96768 c:\windows\$NtUninstallKB2345886$\srvsvc.dll + 2010-10-01 07:13 . 2010-04-21 13:28 46080 c:\windows\$NtUninstallKB2158563$\tzchange.exe + 2010-10-01 07:13 . 2010-06-23 00:57 16896 c:\windows\$NtUninstallKB2158563$\spuninst\tzchange.dll + 2010-10-01 07:19 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB982802\update\spcustom.dll + 2010-10-01 07:19 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB982802\spmsg.dll + 2010-08-15 12:16 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB982665\update\spcustom.dll + 2010-08-15 12:16 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB982665\spmsg.dll + 2010-06-17 14:02 . 2010-06-17 14:02 80384 c:\windows\$hf_mig$\KB982665\SP3QFE\iccvid.dll + 2010-08-15 12:27 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB982214\update\spcustom.dll + 2010-08-15 12:27 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB982214\spmsg.dll + 2010-10-18 07:43 . 2009-05-26 11:41 26488 c:\windows\$hf_mig$\KB982132\update\spcustom.dll + 2010-10-18 07:43 . 2009-05-26 11:41 18808 c:\windows\$hf_mig$\KB982132\spmsg.dll + 2010-08-15 12:17 . 2009-05-26 11:41 26488 c:\windows\$hf_mig$\KB981997\update\spcustom.dll + 2010-08-15 12:17 . 2009-05-26 11:41 18808 c:\windows\$hf_mig$\KB981997\spmsg.dll + 2010-10-18 07:27 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB981957\update\spcustom.dll + 2010-10-18 07:27 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB981957\spmsg.dll + 2010-08-15 12:26 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB981852\update\spcustom.dll + 2010-08-15 11:30 . 2010-06-17 13:47 16896 c:\windows\$hf_mig$\KB981852\update\mpsyschk.dll + 2010-08-15 12:26 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB981852\spmsg.dll + 2010-10-01 07:17 . 2009-05-26 11:41 26488 c:\windows\$hf_mig$\KB981322\update\spcustom.dll + 2010-10-01 07:17 . 2009-05-26 11:41 18808 c:\windows\$hf_mig$\KB981322\spmsg.dll + 2010-08-15 12:20 . 2009-05-26 11:41 26488 c:\windows\$hf_mig$\KB980436\update\spcustom.dll + 2010-08-15 12:20 . 2009-05-26 11:41 18808 c:\windows\$hf_mig$\KB980436\spmsg.dll + 2010-10-18 07:41 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB979687\update\spcustom.dll + 2010-10-18 07:41 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB979687\spmsg.dll + 2011-03-30 10:20 . 2008-07-08 13:07 26488 c:\windows\$hf_mig$\KB971029\update\spcustom.dll + 2011-03-30 10:20 . 2008-07-08 13:07 18808 c:\windows\$hf_mig$\KB971029\spmsg.dll + 2011-09-15 22:35 . 2010-07-05 13:21 26488 c:\windows\$hf_mig$\KB2616676\update\spcustom.dll + 2011-09-15 22:35 . 2010-07-05 13:21 18808 c:\windows\$hf_mig$\KB2616676\spmsg.dll + 2011-09-09 08:48 . 2010-07-05 13:21 26488 c:\windows\$hf_mig$\KB2607712\update\spcustom.dll + 2011-09-09 08:48 . 2010-07-05 13:21 18808 c:\windows\$hf_mig$\KB2607712\spmsg.dll + 2011-09-15 22:30 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB2570947\update\spcustom.dll + 2011-09-15 22:30 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB2570947\spmsg.dll + 2011-08-12 14:57 . 2010-07-05 13:21 26488 c:\windows\$hf_mig$\KB2570222\update\spcustom.dll + 2011-08-12 14:57 . 2010-07-05 13:21 18808 c:\windows\$hf_mig$\KB2570222\spmsg.dll + 2011-08-12 14:58 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB2567680\update\spcustom.dll + 2011-08-12 14:58 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB2567680\spmsg.dll + 2011-08-12 14:53 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB2566454\update\spcustom.dll + 2011-08-12 14:53 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB2566454\spmsg.dll + 2011-08-12 12:28 . 2011-07-08 13:51 10496 c:\windows\$hf_mig$\KB2566454\SP3QFE\ndistapi.sys + 2011-08-12 14:53 . 2010-07-05 13:21 26488 c:\windows\$hf_mig$\KB2562937\update\spcustom.dll + 2011-08-12 14:53 . 2010-07-05 13:21 18808 c:\windows\$hf_mig$\KB2562937\spmsg.dll + 2011-08-12 14:58 . 2010-07-05 13:21 26488 c:\windows\$hf_mig$\KB2559049-IE7\update\spcustom.dll + 2011-08-12 14:58 . 2010-07-05 13:21 18808 c:\windows\$hf_mig$\KB2559049-IE7\spmsg.dll + 2011-06-21 18:36 . 2011-06-21 18:36 44544 c:\windows\$hf_mig$\KB2559049-IE7\SP3QFE\pngfilt.dll + 2011-06-21 18:36 . 2011-06-21 18:36 52224 c:\windows\$hf_mig$\KB2559049-IE7\SP3QFE\msfeedsbs.dll + 2011-06-21 18:36 . 2011-06-21 18:36 27648 c:\windows\$hf_mig$\KB2559049-IE7\SP3QFE\jsproxy.dll + 2011-06-21 12:08 . 2011-06-21 12:08 13824 c:\windows\$hf_mig$\KB2559049-IE7\SP3QFE\ieudinit.exe + 2011-06-21 18:36 . 2011-06-21 18:36 44544 c:\windows\$hf_mig$\KB2559049-IE7\SP3QFE\iernonce.dll + 2011-06-21 18:36 . 2011-06-21 18:36 78336 c:\windows\$hf_mig$\KB2559049-IE7\SP3QFE\ieencode.dll + 2011-06-21 12:09 . 2011-06-21 12:09 70656 c:\windows\$hf_mig$\KB2559049-IE7\SP3QFE\ie4uinit.exe + 2011-06-21 18:36 . 2011-06-21 18:36 63488 c:\windows\$hf_mig$\KB2559049-IE7\SP3QFE\icardie.dll + 2011-06-21 18:36 . 2011-06-21 18:36 17408 c:\windows\$hf_mig$\KB2559049-IE7\SP3QFE\corpol.dll + 2011-07-22 01:32 . 2010-07-05 13:21 26488 c:\windows\$hf_mig$\KB2555917\update\spcustom.dll + 2011-07-22 01:32 . 2010-07-05 13:21 18808 c:\windows\$hf_mig$\KB2555917\spmsg.dll + 2011-06-23 22:34 . 2010-07-05 13:21 26488 c:\windows\$hf_mig$\KB2544893\update\spcustom.dll + 2011-06-23 22:34 . 2010-07-05 13:21 18808 c:\windows\$hf_mig$\KB2544893\spmsg.dll + 2011-06-23 22:49 . 2010-07-05 13:21 26488 c:\windows\$hf_mig$\KB2544521-IE7\update\spcustom.dll + 2011-06-23 22:49 . 2010-07-05 13:21 18808 c:\windows\$hf_mig$\KB2544521-IE7\spmsg.dll + 2011-07-22 01:31 . 2010-07-05 13:21 26488 c:\windows\$hf_mig$\KB2541763\update\spcustom.dll + 2011-07-22 01:31 . 2010-07-05 13:21 18808 c:\windows\$hf_mig$\KB2541763\spmsg.dll + 2011-06-23 22:43 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB2536276\update\spcustom.dll + 2011-06-23 22:43 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB2536276\spmsg.dll + 2011-08-12 14:58 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB2536276-v2\update\spcustom.dll + 2011-08-12 14:58 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB2536276-v2\spmsg.dll + 2011-06-23 22:44 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB2535512\update\spcustom.dll + 2011-06-23 22:44 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB2535512\spmsg.dll + 2011-06-23 23:10 . 2010-07-05 13:21 26488 c:\windows\$hf_mig$\KB2530548-IE7\update\spcustom.dll + 2011-06-23 23:10 . 2010-07-05 13:21 18808 c:\windows\$hf_mig$\KB2530548-IE7\spmsg.dll + 2011-04-25 15:40 . 2011-04-25 15:40 44544 c:\windows\$hf_mig$\KB2530548-IE7\SP3QFE\pngfilt.dll + 2011-04-25 15:40 . 2011-04-25 15:40 52224 c:\windows\$hf_mig$\KB2530548-IE7\SP3QFE\msfeedsbs.dll + 2011-04-25 15:40 . 2011-04-25 15:40 27648 c:\windows\$hf_mig$\KB2530548-IE7\SP3QFE\jsproxy.dll + 2011-04-25 11:36 . 2011-04-25 11:36 13824 c:\windows\$hf_mig$\KB2530548-IE7\SP3QFE\ieudinit.exe + 2011-04-25 15:40 . 2011-04-25 15:40 44544 c:\windows\$hf_mig$\KB2530548-IE7\SP3QFE\iernonce.dll + 2011-04-25 15:40 . 2011-04-25 15:40 78336 c:\windows\$hf_mig$\KB2530548-IE7\SP3QFE\ieencode.dll + 2011-04-25 11:36 . 2011-04-25 11:36 70656 c:\windows\$hf_mig$\KB2530548-IE7\SP3QFE\ie4uinit.exe + 2011-04-25 15:40 . 2011-04-25 15:40 63488 c:\windows\$hf_mig$\KB2530548-IE7\SP3QFE\icardie.dll + 2011-04-25 15:40 . 2011-04-25 15:40 17408 c:\windows\$hf_mig$\KB2530548-IE7\SP3QFE\corpol.dll + 2011-03-30 10:21 . 2010-07-05 13:21 26488 c:\windows\$hf_mig$\KB2524375\update\spcustom.dll + 2011-03-30 10:21 . 2010-07-05 13:21 18808 c:\windows\$hf_mig$\KB2524375\spmsg.dll + 2011-04-21 07:15 . 2010-07-05 13:21 26488 c:\windows\$hf_mig$\KB2511455\update\spcustom.dll + 2011-04-21 07:15 . 2010-07-05 13:21 18808 c:\windows\$hf_mig$\KB2511455\spmsg.dll + 2011-05-11 05:54 . 2010-07-05 13:21 26488 c:\windows\$hf_mig$\KB2510581\update\spcustom.dll + 2011-05-11 05:54 . 2010-07-05 13:21 18808 c:\windows\$hf_mig$\KB2510581\spmsg.dll + 2011-04-21 07:54 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB2509553\update\spcustom.dll + 2011-04-21 07:54 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB2509553\spmsg.dll + 2009-04-20 17:09 . 2009-04-20 17:09 45568 c:\windows\$hf_mig$\KB2509553\SP3QFE\dnsrslvr.dll + 2011-04-21 07:54 . 2010-07-05 13:21 26488 c:\windows\$hf_mig$\KB2508429\update\spcustom.dll + 2011-04-21 07:54 . 2010-07-05 13:21 18808 c:\windows\$hf_mig$\KB2508429\spmsg.dll + 2011-04-21 07:19 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB2508272\update\spcustom.dll + 2011-04-21 07:19 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB2508272\spmsg.dll + 2011-07-22 01:32 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB2507938\update\spcustom.dll + 2011-07-22 01:32 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB2507938\spmsg.dll + 2011-04-26 11:02 . 2011-04-26 11:02 33280 c:\windows\$hf_mig$\KB2507938\SP3QFE\csrsrv.dll + 2011-04-21 07:54 . 2010-07-05 13:21 26488 c:\windows\$hf_mig$\KB2507618\update\spcustom.dll + 2011-04-21 07:54 . 2010-07-05 13:21 18808 c:\windows\$hf_mig$\KB2507618\spmsg.dll + 2011-05-11 05:54 . 2010-07-05 13:21 26488 c:\windows\$hf_mig$\KB2506223\update\spcustom.dll + 2011-05-11 05:54 . 2010-07-05 13:21 18808 c:\windows\$hf_mig$\KB2506223\spmsg.dll + 2011-04-21 07:54 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB2506212\update\spcustom.dll + 2011-04-21 07:54 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB2506212\spmsg.dll + 2011-06-23 22:44 . 2010-07-05 13:21 26488 c:\windows\$hf_mig$\KB2503665\update\spcustom.dll + 2011-06-23 22:44 . 2010-07-05 13:21 18808 c:\windows\$hf_mig$\KB2503665\spmsg.dll + 2011-04-21 07:54 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB2503658\update\spcustom.dll + 2011-04-21 07:54 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB2503658\spmsg.dll + 2011-04-21 08:02 . 2010-07-05 13:21 26488 c:\windows\$hf_mig$\KB2497640-IE7\update\spcustom.dll + 2011-04-21 08:02 . 2010-07-05 13:21 18808 c:\windows\$hf_mig$\KB2497640-IE7\spmsg.dll + 2011-02-17 18:55 . 2011-02-17 18:55 44544 c:\windows\$hf_mig$\KB2497640-IE7\SP3QFE\pngfilt.dll + 2011-02-17 18:55 . 2011-02-17 18:55 52224 c:\windows\$hf_mig$\KB2497640-IE7\SP3QFE\msfeedsbs.dll + 2011-02-17 18:55 . 2011-02-17 18:55 27648 c:\windows\$hf_mig$\KB2497640-IE7\SP3QFE\jsproxy.dll + 2011-02-17 11:43 . 2011-02-17 11:43 13824 c:\windows\$hf_mig$\KB2497640-IE7\SP3QFE\ieudinit.exe + 2011-02-17 18:55 . 2011-02-17 18:55 44544 c:\windows\$hf_mig$\KB2497640-IE7\SP3QFE\iernonce.dll + 2011-02-17 18:55 . 2011-02-17 18:55 78336 c:\windows\$hf_mig$\KB2497640-IE7\SP3QFE\ieencode.dll + 2011-02-17 11:43 . 2011-02-17 11:43 70656 c:\windows\$hf_mig$\KB2497640-IE7\SP3QFE\ie4uinit.exe + 2011-02-17 18:55 . 2011-02-17 18:55 63488 c:\windows\$hf_mig$\KB2497640-IE7\SP3QFE\icardie.dll + 2011-02-17 18:55 . 2011-02-17 18:55 17408 c:\windows\$hf_mig$\KB2497640-IE7\SP3QFE\corpol.dll + 2011-05-11 05:55 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB2491683\update\spcustom.dll + 2011-05-11 05:55 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB2491683\spmsg.dll + 2011-04-21 08:04 . 2010-07-05 13:21 26488 c:\windows\$hf_mig$\KB2485663\update\spcustom.dll + 2011-04-21 08:04 . 2010-07-05 13:21 18808 c:\windows\$hf_mig$\KB2485663\spmsg.dll + 2011-02-10 08:49 . 2010-07-05 13:21 26488 c:\windows\$hf_mig$\KB2485376\update\spcustom.dll + 2011-02-10 08:49 . 2010-07-05 13:21 18808 c:\windows\$hf_mig$\KB2485376\spmsg.dll + 2011-02-10 08:48 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB2483185\update\spcustom.dll + 2011-02-10 08:48 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB2483185\spmsg.dll + 2011-02-10 08:43 . 2010-07-05 13:21 26488 c:\windows\$hf_mig$\KB2482017-IE7\update\spcustom.dll + 2011-02-10 08:43 . 2010-07-05 13:21 18808 c:\windows\$hf_mig$\KB2482017-IE7\spmsg.dll + 2010-12-20 23:14 . 2010-12-20 23:14 44544 c:\windows\$hf_mig$\KB2482017-IE7\SP3QFE\pngfilt.dll + 2010-12-20 23:14 . 2010-12-20 23:14 52224 c:\windows\$hf_mig$\KB2482017-IE7\SP3QFE\msfeedsbs.dll + 2010-12-20 23:14 . 2010-12-20 23:14 27648 c:\windows\$hf_mig$\KB2482017-IE7\SP3QFE\jsproxy.dll + 2010-12-20 12:48 . 2010-12-20 12:48 13824 c:\windows\$hf_mig$\KB2482017-IE7\SP3QFE\ieudinit.exe + 2010-12-20 23:14 . 2010-12-20 23:14 44544 c:\windows\$hf_mig$\KB2482017-IE7\SP3QFE\iernonce.dll + 2010-12-20 23:14 . 2010-12-20 23:14 78336 c:\windows\$hf_mig$\KB2482017-IE7\SP3QFE\ieencode.dll + 2010-12-20 12:48 . 2010-12-20 12:48 70656 c:\windows\$hf_mig$\KB2482017-IE7\SP3QFE\ie4uinit.exe + 2010-12-20 23:14 . 2010-12-20 23:14 63488 c:\windows\$hf_mig$\KB2482017-IE7\SP3QFE\icardie.dll + 2010-12-20 23:14 . 2010-12-20 23:14 17408 c:\windows\$hf_mig$\KB2482017-IE7\SP3QFE\corpol.dll + 2011-03-30 10:21 . 2010-07-05 13:21 26488 c:\windows\$hf_mig$\KB2481109\update\spcustom.dll + 2011-03-30 10:21 . 2010-07-05 13:21 18808 c:\windows\$hf_mig$\KB2481109\spmsg.dll + 2011-02-02 07:57 . 2011-02-02 07:57 53248 c:\windows\$hf_mig$\KB2481109\SP3QFE\tsgqec.dll + 2011-03-30 10:30 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB2479943\update\spcustom.dll + 2011-03-30 10:30 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB2479943\spmsg.dll + 2011-02-10 08:48 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB2479628\update\spcustom.dll + 2011-02-10 08:48 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB2479628\spmsg.dll + 2011-02-10 08:49 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB2478971\update\spcustom.dll + 2011-02-10 08:49 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB2478971\spmsg.dll + 2011-02-10 08:42 . 2010-07-05 13:21 26488 c:\windows\$hf_mig$\KB2478960\update\spcustom.dll + 2011-02-10 08:42 . 2010-07-05 13:21 18808 c:\windows\$hf_mig$\KB2478960\spmsg.dll + 2011-02-10 08:42 . 2010-07-05 13:21 26488 c:\windows\$hf_mig$\KB2476687\update\spcustom.dll + 2011-02-10 08:42 . 2010-07-05 13:21 18808 c:\windows\$hf_mig$\KB2476687\spmsg.dll + 2010-12-09 14:28 . 2010-12-09 14:28 33280 c:\windows\$hf_mig$\KB2476687\SP3QFE\csrsrv.dll + 2011-06-23 22:45 . 2010-07-05 13:21 26488 c:\windows\$hf_mig$\KB2476490\update\spcustom.dll + 2011-06-23 22:45 . 2010-07-05 13:21 18808 c:\windows\$hf_mig$\KB2476490\spmsg.dll + 2010-12-17 00:45 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB2467659\update\spcustom.dll + 2010-12-17 00:45 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB2467659\spmsg.dll + 2010-12-17 00:46 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB2443105\update\spcustom.dll + 2010-12-17 00:46 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB2443105\spmsg.dll + 2010-11-18 18:15 . 2010-11-18 18:15 86016 c:\windows\$hf_mig$\KB2443105\SP3QFE\isign32.dll + 2010-12-17 00:46 . 2009-05-26 11:41 26488 c:\windows\$hf_mig$\KB2440591\update\spcustom.dll + 2010-12-17 00:46 . 2009-05-26 11:41 18808 c:\windows\$hf_mig$\KB2440591\spmsg.dll + 2010-12-16 19:45 . 2010-11-03 05:55 40960 c:\windows\$hf_mig$\KB2440591\SP3QFE\ndproxy.sys + 2010-12-17 00:46 . 2009-05-26 11:41 26488 c:\windows\$hf_mig$\KB2436673\update\spcustom.dll + 2010-12-17 00:46 . 2009-05-26 11:41 18808 c:\windows\$hf_mig$\KB2436673\spmsg.dll + 2010-12-17 00:41 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB2423089\update\spcustom.dll + 2010-12-17 00:41 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB2423089\spmsg.dll + 2010-12-16 19:43 . 2010-10-11 14:55 45568 c:\windows\$hf_mig$\KB2423089\SP3QFE\wab.exe + 2011-01-18 08:59 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB2419632\update\spcustom.dll + 2011-01-18 08:59 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB2419632\spmsg.dll + 2010-12-17 00:44 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB2416400-IE7\update\spcustom.dll + 2010-12-17 00:44 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB2416400-IE7\spmsg.dll + 2010-11-06 00:23 . 2010-11-06 00:23 44544 c:\windows\$hf_mig$\KB2416400-IE7\SP3QFE\pngfilt.dll + 2010-11-06 00:23 . 2010-11-06 00:23 52224 c:\windows\$hf_mig$\KB2416400-IE7\SP3QFE\msfeedsbs.dll + 2010-11-06 00:23 . 2010-11-06 00:23 27648 c:\windows\$hf_mig$\KB2416400-IE7\SP3QFE\jsproxy.dll + 2010-11-03 12:00 . 2010-11-03 12:00 13824 c:\windows\$hf_mig$\KB2416400-IE7\SP3QFE\ieudinit.exe + 2010-11-06 00:23 . 2010-11-06 00:23 44544 c:\windows\$hf_mig$\KB2416400-IE7\SP3QFE\iernonce.dll + 2010-11-06 00:23 . 2010-11-06 00:23 78336 c:\windows\$hf_mig$\KB2416400-IE7\SP3QFE\ieencode.dll + 2010-11-03 12:00 . 2010-11-03 12:00 70656 c:\windows\$hf_mig$\KB2416400-IE7\SP3QFE\ie4uinit.exe + 2010-11-06 00:23 . 2010-11-06 00:23 63488 c:\windows\$hf_mig$\KB2416400-IE7\SP3QFE\icardie.dll + 2010-11-06 00:23 . 2010-11-06 00:23 17408 c:\windows\$hf_mig$\KB2416400-IE7\SP3QFE\corpol.dll + 2011-02-10 08:42 . 2010-07-05 13:21 26488 c:\windows\$hf_mig$\KB2393802\update\spcustom.dll + 2011-02-10 07:18 . 2010-12-10 05:42 16896 c:\windows\$hf_mig$\KB2393802\update\mpsyschk.dll + 2011-02-10 08:42 . 2010-07-05 13:21 18808 c:\windows\$hf_mig$\KB2393802\spmsg.dll + 2010-10-18 07:47 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB2387149\update\spcustom.dll + 2010-10-18 07:47 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB2387149\spmsg.dll + 2010-10-18 07:25 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB2360937\update\spcustom.dll + 2010-10-18 07:25 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB2360937\spmsg.dll + 2010-10-18 07:45 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB2360131-IE7\update\spcustom.dll + 2010-10-18 07:45 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB2360131-IE7\spmsg.dll + 2010-09-09 13:32 . 2010-09-09 13:32 44544 c:\windows\$hf_mig$\KB2360131-IE7\SP3QFE\pngfilt.dll + 2010-09-09 13:32 . 2010-09-09 13:32 52224 c:\windows\$hf_mig$\KB2360131-IE7\SP3QFE\msfeedsbs.dll + 2010-09-09 13:32 . 2010-09-09 13:32 27648 c:\windows\$hf_mig$\KB2360131-IE7\SP3QFE\jsproxy.dll + 2010-09-08 15:48 . 2010-09-08 15:48 13824 c:\windows\$hf_mig$\KB2360131-IE7\SP3QFE\ieudinit.exe + 2010-09-09 13:32 . 2010-09-09 13:32 44544 c:\windows\$hf_mig$\KB2360131-IE7\SP3QFE\iernonce.dll + 2010-09-09 13:32 . 2010-09-09 13:32 78336 c:\windows\$hf_mig$\KB2360131-IE7\SP3QFE\ieencode.dll + 2010-09-08 15:48 . 2010-09-08 15:48 70656 c:\windows\$hf_mig$\KB2360131-IE7\SP3QFE\ie4uinit.exe + 2010-09-09 13:32 . 2010-09-09 13:32 63488 c:\windows\$hf_mig$\KB2360131-IE7\SP3QFE\icardie.dll + 2010-09-09 13:32 . 2010-09-09 13:32 17408 c:\windows\$hf_mig$\KB2360131-IE7\SP3QFE\corpol.dll + 2010-10-01 07:19 . 2009-05-26 11:41 26488 c:\windows\$hf_mig$\KB2347290\update\spcustom.dll + 2010-10-01 07:19 . 2009-05-26 11:41 18808 c:\windows\$hf_mig$\KB2347290\spmsg.dll + 2010-08-17 13:19 . 2010-08-17 13:19 58880 c:\windows\$hf_mig$\KB2347290\SP3QFE\spoolsv.exe + 2010-10-18 07:46 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB2345886\update\spcustom.dll + 2010-10-18 07:46 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB2345886\spmsg.dll + 2010-08-27 06:02 . 2010-08-27 06:02 99840 c:\windows\$hf_mig$\KB2345886\SP3QFE\srvsvc.dll + 2010-12-17 00:46 . 2009-05-26 11:41 26488 c:\windows\$hf_mig$\KB2296199\update\spcustom.dll + 2010-12-17 00:46 . 2009-05-26 11:41 18808 c:\windows\$hf_mig$\KB2296199\spmsg.dll + 2010-08-09 10:56 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB2286198\update\spcustom.dll + 2010-08-09 10:56 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB2286198\spmsg.dll + 2010-10-18 07:46 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB2279986\update\spcustom.dll + 2010-10-18 07:46 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB2279986\spmsg.dll + 2010-10-01 07:20 . 2009-05-26 09:01 26488 c:\windows\$hf_mig$\KB2259922\update\spcustom.dll + 2010-10-01 07:20 . 2009-05-26 09:01 18808 c:\windows\$hf_mig$\KB2259922\spmsg.dll + 2010-07-31 07:43 . 2009-05-26 11:41 26488 c:\windows\$hf_mig$\KB2229593\update\spcustom.dll + 2010-07-31 07:43 . 2009-05-26 11:41 18808 c:\windows\$hf_mig$\KB2229593\spmsg.dll + 2010-08-15 12:27 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB2183461-IE7\update\spcustom.dll + 2010-08-15 12:27 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB2183461-IE7\spmsg.dll + 2010-06-24 12:19 . 2010-06-24 12:19 44544 c:\windows\$hf_mig$\KB2183461-IE7\SP3QFE\pngfilt.dll + 2010-06-24 12:19 . 2010-06-24 12:19 52224 c:\windows\$hf_mig$\KB2183461-IE7\SP3QFE\msfeedsbs.dll + 2010-06-24 12:19 . 2010-06-24 12:19 27648 c:\windows\$hf_mig$\KB2183461-IE7\SP3QFE\jsproxy.dll + 2010-06-23 11:29 . 2010-06-23 11:29 13824 c:\windows\$hf_mig$\KB2183461-IE7\SP3QFE\ieudinit.exe + 2010-06-24 12:19 . 2010-06-24 12:19 44544 c:\windows\$hf_mig$\KB2183461-IE7\SP3QFE\iernonce.dll + 2010-06-24 12:19 . 2010-06-24 12:19 78336 c:\windows\$hf_mig$\KB2183461-IE7\SP3QFE\ieencode.dll + 2010-06-23 11:29 . 2010-06-23 11:29 70656 c:\windows\$hf_mig$\KB2183461-IE7\SP3QFE\ie4uinit.exe + 2010-06-24 12:19 . 2010-06-24 12:19 63488 c:\windows\$hf_mig$\KB2183461-IE7\SP3QFE\icardie.dll + 2010-06-24 12:19 . 2010-06-24 12:19 17408 c:\windows\$hf_mig$\KB2183461-IE7\SP3QFE\corpol.dll + 2010-08-15 12:20 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB2160329\update\spcustom.dll + 2010-08-15 12:20 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB2160329\spmsg.dll + 2010-10-01 07:14 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB2141007\update\spcustom.dll + 2010-10-01 07:14 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB2141007\spmsg.dll + 2010-10-01 07:19 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB2121546\update\spcustom.dll + 2010-10-01 07:19 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB2121546\spmsg.dll + 2010-08-15 12:27 . 2009-05-26 11:41 26488 c:\windows\$hf_mig$\KB2115168\update\spcustom.dll + 2010-08-15 12:27 . 2009-05-26 11:41 18808 c:\windows\$hf_mig$\KB2115168\spmsg.dll + 2010-08-15 12:26 . 2009-05-26 11:41 26488 c:\windows\$hf_mig$\KB2079403\update\spcustom.dll + 2010-08-15 12:26 . 2009-05-26 11:41 18808 c:\windows\$hf_mig$\KB2079403\spmsg.dll - 2010-06-19 10:40 . 2010-06-19 10:40 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll + 2011-10-29 14:17 . 2011-10-29 14:17 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll + 2008-05-05 06:25 . 2011-02-17 12:54 5632 c:\windows\system32\xpsp4res.dll - 2010-06-19 10:40 . 2010-06-19 10:40 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll + 2011-10-29 14:17 . 2011-10-29 14:17 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll - 2010-06-19 10:41 . 2010-06-19 10:41 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll + 2011-10-29 14:18 . 2011-10-29 14:18 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll + 2011-10-29 14:17 . 2011-10-29 14:17 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll - 2010-06-19 10:40 . 2010-06-19 10:40 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll + 2011-10-29 14:17 . 2011-10-29 14:17 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll - 2010-06-19 10:40 . 2010-06-19 10:40 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll + 2010-10-01 07:19 . 2008-05-05 06:25 3072 c:\windows\$NtUninstallKB982802$\xpsp4res.dll + 2011-04-21 07:54 . 2010-08-27 01:43 5632 c:\windows\$NtUninstallKB2508429$\xpsp4res.dll + 2010-10-18 07:25 . 2010-07-22 06:19 5632 c:\windows\$NtUninstallKB2360937$\xpsp4res.dll + 2010-10-18 07:46 . 2010-08-13 16:44 5632 c:\windows\$NtUninstallKB2345886$\xpsp4res.dll + 2010-07-22 06:19 . 2010-07-22 06:19 5632 c:\windows\$hf_mig$\KB982802\SP3QFE\sprv0413.dll + 2010-07-12 13:19 . 2010-07-12 13:19 5632 c:\windows\$hf_mig$\KB979687\SP3QFE\sprv0413.dll + 2011-02-17 12:54 . 2011-02-17 12:54 5632 c:\windows\$hf_mig$\KB2508429\SP3QFE\sprv0413.dll + 2010-10-18 07:01 . 2010-08-13 16:44 5632 c:\windows\$hf_mig$\KB2360937\SP3QFE\sprv0413.dll + 2010-08-27 01:43 . 2010-08-27 01:43 5632 c:\windows\$hf_mig$\KB2345886\SP3QFE\sprv0413.dll + 2010-04-17 01:11 . 2010-04-17 01:11 307056 c:\windows\WLXPGSS.SCR - 2010-06-19 10:41 . 2010-06-19 10:41 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll + 2011-10-29 14:17 . 2011-10-29 14:17 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll - 2010-06-19 10:41 . 2010-06-19 10:41 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll + 2011-10-29 14:17 . 2011-10-29 14:17 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll + 2011-05-13 23:17 . 2011-05-13 23:17 632656 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcr80.dll + 2011-05-13 23:12 . 2011-05-13 23:12 554832 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcp80.dll + 2011-05-13 23:11 . 2011-05-13 23:11 479232 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcm80.dll + 2010-10-18 07:44 . 2008-04-15 21:00 221184 c:\windows\system32\wmpns.dll - 2008-04-15 21:00 . 2008-04-15 21:00 293888 c:\windows\system32\winsrv.dll + 2008-04-15 21:00 . 2011-06-20 17:44 293888 c:\windows\system32\winsrv.dll + 2007-08-13 16:54 . 2011-08-17 21:25 233472 c:\windows\system32\webcheck.dll - 2007-08-13 16:54 . 2010-05-04 17:21 233472 c:\windows\system32\webcheck.dll + 2008-05-09 10:56 . 2011-03-04 06:44 434176 c:\windows\system32\vbscript.dll + 2008-04-15 21:00 . 2010-04-16 15:38 406016 c:\windows\system32\usp10.dll - 2008-04-15 21:00 . 2008-04-15 21:00 406016 c:\windows\system32\usp10.dll + 2007-08-13 16:44 . 2011-08-17 21:25 106496 c:\windows\system32\url.dll + 2008-04-15 21:00 . 2010-08-27 08:03 119808 c:\windows\system32\t2embed.dll - 2008-04-15 21:00 . 2009-10-15 16:38 119808 c:\windows\system32\t2embed.dll + 2006-10-26 17:56 . 2009-02-27 02:42 863128 c:\windows\system32\spool\drivers\w32x86\msonpdrv.dll + 2006-10-26 17:56 . 2009-02-27 02:42 863128 c:\windows\system32\spool\drivers\w32x86\3\msonpdrv.dll - 2008-04-15 21:00 . 2008-04-15 21:00 135680 c:\windows\system32\shsvcs.dll + 2008-04-15 21:00 . 2009-07-27 23:19 135680 c:\windows\system32\shsvcs.dll + 2008-04-15 21:00 . 2011-01-21 14:44 441344 c:\windows\system32\shimgvw.dll + 2008-04-15 21:00 . 2011-04-29 17:25 151552 c:\windows\system32\schannel.dll + 2008-04-15 21:00 . 2011-02-09 13:54 270848 c:\windows\system32\sbe.dll - 2008-04-15 21:00 . 2008-04-15 21:00 270848 c:\windows\system32\sbe.dll + 2008-04-15 21:00 . 2010-08-16 08:45 590848 c:\windows\system32\rpcrt4.dll + 2011-01-21 13:17 . 2008-04-25 01:39 327680 c:\windows\system32\ReinstallBackups\0015\DriverFiles\Tutorial.exe + 2011-01-21 13:17 . 2008-04-25 01:21 241664 c:\windows\system32\ReinstallBackups\0015\DriverFiles\SynZMetr.exe + 2011-01-21 13:17 . 2008-04-25 01:34 946176 c:\windows\system32\ReinstallBackups\0015\DriverFiles\SynTPCpl.dll + 2011-01-21 13:17 . 2008-04-25 01:31 102400 c:\windows\system32\ReinstallBackups\0015\DriverFiles\SynTPCOM.dll + 2011-01-21 13:17 . 2008-04-25 02:07 110592 c:\windows\system32\ReinstallBackups\0015\DriverFiles\SynTPCo4.dll + 2011-01-21 13:17 . 2008-04-25 01:31 151552 c:\windows\system32\ReinstallBackups\0015\DriverFiles\SynTPAPI.dll + 2011-01-21 13:17 . 2008-04-25 01:17 225024 c:\windows\system32\ReinstallBackups\0015\DriverFiles\SynTP.sys + 2011-01-21 13:17 . 2008-04-25 01:20 233472 c:\windows\system32\ReinstallBackups\0015\DriverFiles\SynMood.exe + 2011-01-21 13:17 . 2008-04-25 01:39 630784 c:\windows\system32\ReinstallBackups\0015\DriverFiles\SynISDLL.dll + 2011-01-21 13:17 . 2008-04-25 01:19 200704 c:\windows\system32\ReinstallBackups\0015\DriverFiles\SynCtrl.dll + 2011-01-21 13:17 . 2008-04-25 01:19 163840 c:\windows\system32\ReinstallBackups\0015\DriverFiles\SynCOM.dll + 2011-01-21 13:17 . 2008-04-25 01:22 139264 c:\windows\system32\ReinstallBackups\0015\DriverFiles\SynAcer.exe + 2011-01-21 13:17 . 2008-04-25 02:08 118784 c:\windows\system32\ReinstallBackups\0015\DriverFiles\InstNT.exe + 2010-03-30 22:10 . 2010-03-30 22:10 295264 c:\windows\system32\PresentationHost.exe + 2008-08-22 08:38 . 2011-10-30 11:18 511428 c:\windows\system32\perfh013.dat + 2008-08-22 08:38 . 2011-10-30 11:18 443248 c:\windows\system32\perfh009.dat - 2008-04-15 21:00 . 2008-04-15 21:00 551936 c:\windows\system32\oleaut32.dll + 2008-04-15 21:00 . 2010-12-20 17:32 551936 c:\windows\system32\oleaut32.dll + 2008-04-15 21:00 . 2010-11-09 14:52 249856 c:\windows\system32\odbc32.dll - 2008-04-15 21:00 . 2008-04-15 21:00 249856 c:\windows\system32\odbc32.dll + 2007-08-13 16:44 . 2011-08-17 21:25 102912 c:\windows\system32\occache.dll - 2007-08-13 16:44 . 2010-05-04 17:21 102912 c:\windows\system32\occache.dll + 2008-04-15 21:00 . 2010-12-09 15:15 739328 c:\windows\system32\ntdll.dll + 2008-06-20 17:49 . 2008-06-20 16:04 247296 c:\windows\system32\mswsock.dll - 2008-06-20 17:49 . 2008-06-20 17:49 247296 c:\windows\system32\mswsock.dll + 2008-04-15 21:00 . 2011-01-27 11:57 677888 c:\windows\system32\mstsc.exe - 2008-04-15 21:00 . 2008-04-15 21:00 677888 c:\windows\system32\mstsc.exe - 2007-08-13 16:54 . 2010-05-04 17:21 671232 c:\windows\system32\mstime.dll + 2007-08-13 16:54 . 2011-08-17 21:25 671232 c:\windows\system32\mstime.dll + 2007-08-13 16:44 . 2011-08-17 21:25 193024 c:\windows\system32\msrating.dll - 2007-08-13 16:44 . 2010-05-04 17:21 193024 c:\windows\system32\msrating.dll + 2007-08-13 16:54 . 2011-08-17 21:25 478720 c:\windows\system32\mshtmled.dll + 2007-08-13 16:54 . 2011-08-17 21:25 468480 c:\windows\system32\msfeeds.dll + 2009-11-06 23:07 . 2009-11-06 23:07 297808 c:\windows\system32\mscoree.dll + 2006-10-18 20:47 . 2010-03-30 10:24 317440 c:\windows\system32\mp4sdecd.dll - 2006-10-18 20:47 . 2006-10-18 20:47 317440 c:\windows\system32\MP4SDECD.dll + 2008-04-15 21:00 . 2011-02-08 13:33 974848 c:\windows\system32\mfc42u.dll + 2008-04-15 21:00 . 2011-02-08 13:33 978944 c:\windows\system32\mfc42.dll + 2008-04-15 21:00 . 2010-09-18 06:53 953856 c:\windows\system32\mfc40u.dll + 2008-04-15 21:00 . 2010-09-18 06:53 954368 c:\windows\system32\mfc40.dll + 2011-08-12 11:09 . 2011-08-12 11:09 243360 c:\windows\system32\Macromed\Flash\FlashUtil10v_ActiveX.exe + 2011-08-12 11:09 . 2011-08-12 11:09 328864 c:\windows\system32\Macromed\Flash\FlashUtil10v_ActiveX.dll - 2008-04-15 21:00 . 2009-06-25 08:27 735232 c:\windows\system32\lsasrv.dll + 2008-04-15 21:00 . 2010-12-20 17:25 735232 c:\windows\system32\lsasrv.dll + 2008-04-15 21:00 . 2010-12-22 12:34 301568 c:\windows\system32\kerberos.dll - 2008-04-15 21:00 . 2009-06-25 08:27 301568 c:\windows\system32\kerberos.dll + 2008-05-09 10:56 . 2011-03-04 06:44 512000 c:\windows\system32\jscript.dll - 2008-05-09 10:56 . 2009-08-13 15:24 512000 c:\windows\system32\jscript.dll + 2011-10-29 10:01 . 2011-10-03 03:06 157472 c:\windows\system32\javaws.exe - 2010-05-01 09:28 . 2010-05-01 09:28 145184 c:\windows\system32\javaw.exe + 2011-10-29 10:01 . 2011-10-03 03:06 145184 c:\windows\system32\javaw.exe - 2010-05-01 09:28 . 2010-05-01 09:28 145184 c:\windows\system32\java.exe + 2011-10-29 10:01 . 2011-10-03 03:06 145184 c:\windows\system32\java.exe + 2008-04-15 21:00 . 2011-05-02 15:31 692736 c:\windows\system32\inetcomm.dll + 2007-08-13 16:34 . 2011-08-17 21:25 268288 c:\windows\system32\iertutil.dll - 2007-08-13 16:34 . 2010-05-04 17:21 268288 c:\windows\system32\iertutil.dll + 2007-08-13 16:54 . 2011-08-17 21:25 192512 c:\windows\system32\iepeers.dll - 2007-08-13 16:54 . 2010-05-04 17:21 192512 c:\windows\system32\iepeers.dll + 2007-08-13 16:39 . 2011-08-17 21:25 384512 c:\windows\system32\iedkcs32.dll - 2007-07-11 10:27 . 2010-05-04 17:21 380928 c:\windows\system32\ieapfltr.dll + 2007-07-11 10:27 . 2011-08-17 21:25 380928 c:\windows\system32\ieapfltr.dll - 2007-08-13 15:56 . 2010-04-16 11:43 161792 c:\windows\system32\ieakui.dll + 2007-08-13 15:56 . 2011-08-17 11:00 161792 c:\windows\system32\ieakui.dll + 2007-08-13 16:39 . 2011-08-17 21:25 230400 c:\windows\system32\ieaksie.dll - 2007-08-13 16:39 . 2010-05-04 17:21 230400 c:\windows\system32\ieaksie.dll - 2007-08-13 16:39 . 2010-05-04 17:21 153088 c:\windows\system32\ieakeng.dll + 2007-08-13 16:39 . 2011-08-17 21:25 153088 c:\windows\system32\ieakeng.dll + 2008-04-15 21:00 . 2011-02-11 14:44 236544 c:\windows\system32\fxscover.exe + 2008-08-22 08:34 . 2011-10-30 10:14 253472 c:\windows\system32\FNTCACHE.DAT - 2008-08-22 08:34 . 2010-06-19 10:54 253472 c:\windows\system32\FNTCACHE.DAT - 2007-08-13 16:54 . 2010-05-04 17:21 133120 c:\windows\system32\extmgr.dll + 2007-08-13 16:54 . 2011-08-17 21:25 133120 c:\windows\system32\extmgr.dll - 2008-04-15 21:00 . 2008-04-15 21:00 186880 c:\windows\system32\encdec.dll + 2008-04-15 21:00 . 2011-02-09 13:54 186880 c:\windows\system32\encdec.dll + 2007-08-13 16:35 . 2011-08-17 21:25 214528 c:\windows\system32\dxtrans.dll - 2007-08-13 16:35 . 2010-05-04 17:21 214528 c:\windows\system32\dxtrans.dll + 2007-08-13 16:35 . 2011-08-17 21:25 347136 c:\windows\system32\dxtmsft.dll - 2007-08-13 16:35 . 2010-05-04 17:21 347136 c:\windows\system32\dxtmsft.dll + 2008-04-15 21:00 . 2011-02-17 13:18 357888 c:\windows\system32\drivers\srv.sys - 2008-04-15 21:00 . 2008-04-15 21:00 139656 c:\windows\system32\drivers\rdpwd.sys + 2008-04-15 21:00 . 2011-06-24 14:10 139656 c:\windows\system32\drivers\rdpwd.sys + 2008-04-15 21:00 . 2011-04-21 13:37 105472 c:\windows\system32\drivers\mup.sys + 2008-04-15 21:00 . 2011-07-15 13:29 456320 c:\windows\system32\drivers\mrxsmb.sys + 2011-01-21 13:29 . 2009-06-22 19:00 112640 c:\windows\system32\drivers\ewusbnet.sys + 2009-11-09 17:20 . 2009-09-10 13:55 102528 c:\windows\system32\drivers\ewusbmdm.sys + 2011-01-21 13:29 . 2009-07-24 17:33 100736 c:\windows\system32\drivers\ewusbdev.sys + 2008-06-20 17:49 . 2011-03-03 06:55 149504 c:\windows\system32\dnsapi.dll + 2008-04-15 21:00 . 2010-07-16 11:58 221184 c:\windows\system32\dllcache\wordpad.exe + 2008-04-15 21:00 . 2011-06-20 17:44 293888 c:\windows\system32\dllcache\winsrv.dll - 2008-04-15 21:00 . 2008-04-15 21:00 293888 c:\windows\system32\dllcache\winsrv.dll + 2007-08-13 16:54 . 2011-08-17 21:25 832512 c:\windows\system32\dllcache\wininet.dll - 2007-08-13 16:54 . 2010-05-04 17:21 832512 c:\windows\system32\dllcache\wininet.dll - 2007-08-13 16:54 . 2010-05-04 17:21 233472 c:\windows\system32\dllcache\webcheck.dll + 2007-08-13 16:54 . 2011-08-17 21:25 233472 c:\windows\system32\dllcache\webcheck.dll + 2007-08-13 16:54 . 2011-04-30 08:50 766464 c:\windows\system32\dllcache\vgx.dll + 2008-05-09 10:56 . 2011-03-04 06:44 434176 c:\windows\system32\dllcache\vbscript.dll + 2008-04-15 21:00 . 2010-04-16 15:38 406016 c:\windows\system32\dllcache\usp10.dll - 2008-04-15 21:00 . 2008-04-15 21:00 406016 c:\windows\system32\dllcache\usp10.dll + 2007-08-13 16:44 . 2011-08-17 21:25 106496 c:\windows\system32\dllcache\url.dll + 2008-04-15 21:00 . 2010-08-27 08:03 119808 c:\windows\system32\dllcache\t2embed.dll - 2008-04-15 21:00 . 2009-10-15 16:38 119808 c:\windows\system32\dllcache\t2embed.dll + 2008-04-15 21:00 . 2011-02-17 13:18 357888 c:\windows\system32\dllcache\srv.sys - 2008-04-15 21:00 . 2008-04-15 21:00 135680 c:\windows\system32\dllcache\shsvcs.dll + 2008-04-15 21:00 . 2009-07-27 23:19 135680 c:\windows\system32\dllcache\shsvcs.dll + 2008-04-15 21:00 . 2011-01-21 14:44 441344 c:\windows\system32\dllcache\shimgvw.dll + 2008-04-15 21:00 . 2011-04-29 17:25 151552 c:\windows\system32\dllcache\schannel.dll + 2008-04-15 21:00 . 2011-02-09 13:54 270848 c:\windows\system32\dllcache\sbe.dll - 2008-04-15 21:00 . 2008-04-15 21:00 270848 c:\windows\system32\dllcache\sbe.dll + 2008-04-15 21:00 . 2010-08-16 08:45 590848 c:\windows\system32\dllcache\rpcrt4.dll - 2008-04-15 21:00 . 2008-04-15 21:00 139656 c:\windows\system32\dllcache\rdpwd.sys + 2008-04-15 21:00 . 2011-06-24 14:10 139656 c:\windows\system32\dllcache\rdpwd.sys + 2008-04-15 21:00 . 2010-12-20 17:32 551936 c:\windows\system32\dllcache\oleaut32.dll - 2008-04-15 21:00 . 2008-04-15 21:00 551936 c:\windows\system32\dllcache\oleaut32.dll + 2008-04-15 21:00 . 2011-09-26 09:41 220160 c:\windows\system32\dllcache\oleacc.dll + 2008-04-15 21:00 . 2010-11-09 14:52 249856 c:\windows\system32\dllcache\odbc32.dll - 2008-04-15 21:00 . 2008-04-15 21:00 249856 c:\windows\system32\dllcache\odbc32.dll - 2007-08-13 16:44 . 2010-05-04 17:21 102912 c:\windows\system32\dllcache\occache.dll + 2007-08-13 16:44 . 2011-08-17 21:25 102912 c:\windows\system32\dllcache\occache.dll + 2008-04-15 21:00 . 2010-12-09 15:15 739328 c:\windows\system32\dllcache\ntdll.dll + 2008-04-15 21:00 . 2011-04-21 13:37 105472 c:\windows\system32\dllcache\mup.sys + 2008-06-20 17:49 . 2008-06-20 16:04 247296 c:\windows\system32\dllcache\mswsock.dll - 2008-06-20 17:49 . 2008-06-20 17:49 247296 c:\windows\system32\dllcache\mswsock.dll - 2007-08-13 16:54 . 2010-05-04 17:21 671232 c:\windows\system32\dllcache\mstime.dll + 2007-08-13 16:54 . 2011-08-17 21:25 671232 c:\windows\system32\dllcache\mstime.dll + 2007-08-13 16:44 . 2011-08-17 21:25 193024 c:\windows\system32\dllcache\msrating.dll - 2007-08-13 16:44 . 2010-05-04 17:21 193024 c:\windows\system32\dllcache\msrating.dll - 2008-04-15 21:00 . 2008-04-15 21:00 102400 c:\windows\system32\dllcache\msjro.dll + 2008-04-15 21:00 . 2010-11-09 14:52 102400 c:\windows\system32\dllcache\msjro.dll + 2007-08-13 16:54 . 2011-08-17 21:25 478720 c:\windows\system32\dllcache\mshtmled.dll + 2009-08-29 07:32 . 2011-08-17 21:25 468480 c:\windows\system32\dllcache\msfeeds.dll + 2008-04-15 21:00 . 2010-11-09 14:52 200704 c:\windows\system32\dllcache\msadox.dll - 2008-04-15 21:00 . 2008-04-15 21:00 200704 c:\windows\system32\dllcache\msadox.dll + 2008-04-15 21:00 . 2010-11-09 14:52 180224 c:\windows\system32\dllcache\msadomd.dll - 2008-04-15 21:00 . 2008-04-15 21:00 180224 c:\windows\system32\dllcache\msadomd.dll - 2008-04-15 21:00 . 2008-04-15 21:00 536576 c:\windows\system32\dllcache\msado15.dll + 2008-04-15 21:00 . 2010-11-09 14:52 536576 c:\windows\system32\dllcache\msado15.dll - 2008-04-15 21:00 . 2008-04-15 21:00 143360 c:\windows\system32\dllcache\msadco.dll + 2008-04-15 21:00 . 2010-11-09 14:52 143360 c:\windows\system32\dllcache\msadco.dll + 2009-11-09 16:02 . 2011-07-15 13:29 456320 c:\windows\system32\dllcache\mrxsmb.sys + 2010-03-30 10:24 . 2010-03-30 10:24 317440 c:\windows\system32\dllcache\mp4sdecd.dll + 2008-04-15 21:00 . 2011-02-08 13:33 974848 c:\windows\system32\dllcache\mfc42u.dll + 2008-04-15 21:00 . 2011-02-08 13:33 978944 c:\windows\system32\dllcache\mfc42.dll + 2008-04-15 21:00 . 2010-09-18 06:53 953856 c:\windows\system32\dllcache\mfc40u.dll + 2008-04-15 21:00 . 2010-09-18 06:53 954368 c:\windows\system32\dllcache\mfc40.dll + 2008-04-15 21:00 . 2010-12-20 17:25 735232 c:\windows\system32\dllcache\lsasrv.dll - 2008-04-15 21:00 . 2009-06-25 08:27 735232 c:\windows\system32\dllcache\lsasrv.dll + 2008-04-15 21:00 . 2011-01-27 11:57 677888 c:\windows\system32\dllcache\lhmstsc.exe - 2008-04-15 21:00 . 2008-04-15 21:00 677888 c:\windows\system32\dllcache\lhmstsc.exe + 2008-04-15 21:00 . 2010-12-22 12:34 301568 c:\windows\system32\dllcache\kerberos.dll - 2008-04-15 21:00 . 2009-06-25 08:27 301568 c:\windows\system32\dllcache\kerberos.dll - 2008-05-09 10:56 . 2009-08-13 15:24 512000 c:\windows\system32\dllcache\jscript.dll + 2008-05-09 10:56 . 2011-03-04 06:44 512000 c:\windows\system32\dllcache\jscript.dll + 2008-04-15 21:00 . 2011-05-02 15:31 692736 c:\windows\system32\dllcache\inetcomm.dll + 2007-08-13 16:43 . 2011-08-17 11:01 634632 c:\windows\system32\dllcache\iexplore.exe - 2009-08-29 07:32 . 2010-05-04 17:21 268288 c:\windows\system32\dllcache\iertutil.dll + 2009-08-29 07:32 . 2011-08-17 21:25 268288 c:\windows\system32\dllcache\iertutil.dll + 2007-08-13 16:54 . 2011-08-17 21:25 192512 c:\windows\system32\dllcache\iepeers.dll - 2007-08-13 16:54 . 2010-05-04 17:21 192512 c:\windows\system32\dllcache\iepeers.dll + 2007-08-13 16:39 . 2011-08-17 21:25 384512 c:\windows\system32\dllcache\iedkcs32.dll - 2009-08-29 07:32 . 2010-05-04 17:21 380928 c:\windows\system32\dllcache\ieapfltr.dll + 2009-08-29 07:32 . 2011-08-17 21:25 380928 c:\windows\system32\dllcache\ieapfltr.dll + 2007-08-13 15:56 . 2011-08-17 11:00 161792 c:\windows\system32\dllcache\ieakui.dll - 2007-08-13 15:56 . 2010-04-16 11:43 161792 c:\windows\system32\dllcache\ieakui.dll - 2007-08-13 16:39 . 2010-05-04 17:21 230400 c:\windows\system32\dllcache\ieaksie.dll + 2007-08-13 16:39 . 2011-08-17 21:25 230400 c:\windows\system32\dllcache\ieaksie.dll - 2007-08-13 16:39 . 2010-05-04 17:21 153088 c:\windows\system32\dllcache\ieakeng.dll + 2007-08-13 16:39 . 2011-08-17 21:25 153088 c:\windows\system32\dllcache\ieakeng.dll + 2008-04-15 21:00 . 2010-06-14 14:31 744448 c:\windows\system32\dllcache\helpsvc.exe - 2008-04-15 21:00 . 2008-04-15 21:00 744448 c:\windows\system32\dllcache\helpsvc.exe + 2008-04-15 21:00 . 2011-02-11 14:44 236544 c:\windows\system32\dllcache\fxscover.exe - 2007-08-13 16:54 . 2010-05-04 17:21 133120 c:\windows\system32\dllcache\extmgr.dll + 2007-08-13 16:54 . 2011-08-17 21:25 133120 c:\windows\system32\dllcache\extmgr.dll + 2008-04-15 21:00 . 2011-02-09 13:54 186880 c:\windows\system32\dllcache\encdec.dll - 2008-04-15 21:00 . 2008-04-15 21:00 186880 c:\windows\system32\dllcache\encdec.dll + 2007-08-13 16:35 . 2011-08-17 21:25 214528 c:\windows\system32\dllcache\dxtrans.dll - 2007-08-13 16:35 . 2010-05-04 17:21 214528 c:\windows\system32\dllcache\dxtrans.dll - 2007-08-13 16:35 . 2010-05-04 17:21 347136 c:\windows\system32\dllcache\dxtmsft.dll + 2007-08-13 16:35 . 2011-08-17 21:25 347136 c:\windows\system32\dllcache\dxtmsft.dll + 2008-06-20 17:49 . 2011-03-03 06:55 149504 c:\windows\system32\dllcache\dnsapi.dll + 2008-04-15 21:00 . 2011-09-09 09:12 602624 c:\windows\system32\dllcache\crypt32.dll - 2008-04-15 21:00 . 2008-04-15 21:00 602624 c:\windows\system32\dllcache\crypt32.dll + 2008-04-15 21:00 . 2010-08-23 16:13 617472 c:\windows\system32\dllcache\comctl32.dll - 2008-04-15 21:00 . 2008-04-15 21:00 617472 c:\windows\system32\dllcache\comctl32.dll + 2008-04-15 21:00 . 2011-02-15 12:56 290432 c:\windows\system32\dllcache\atmfd.dll + 2008-06-20 11:40 . 2011-08-17 13:49 138496 c:\windows\system32\dllcache\afd.sys - 2008-06-20 11:40 . 2008-08-14 10:04 138496 c:\windows\system32\dllcache\afd.sys - 2007-08-13 16:39 . 2010-05-04 17:21 124928 c:\windows\system32\dllcache\advpack.dll + 2007-08-13 16:39 . 2011-08-17 21:25 124928 c:\windows\system32\dllcache\advpack.dll - 2008-04-15 21:00 . 2008-04-15 21:00 617472 c:\windows\system32\comctl32.dll + 2008-04-15 21:00 . 2010-08-23 16:13 617472 c:\windows\system32\comctl32.dll + 2008-04-15 21:00 . 2011-02-15 12:56 290432 c:\windows\system32\atmfd.dll - 2007-08-13 16:39 . 2010-05-04 17:21 124928 c:\windows\system32\advpack.dll + 2007-08-13 16:39 . 2011-08-17 21:25 124928 c:\windows\system32\advpack.dll + 2011-02-11 14:44 . 2011-02-11 14:44 236544 c:\windows\ServicePackFiles\ServicePackCache\i386\fxscover.exe + 2008-04-15 21:00 . 2010-06-14 14:31 744448 c:\windows\pchealth\helpctr\binaries\helpsvc.exe - 2008-04-15 21:00 . 2008-04-15 21:00 744448 c:\windows\pchealth\helpctr\binaries\HelpSvc.exe + 2010-03-30 22:16 . 2010-03-30 22:16 130408 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationHostDLL.dll + 2010-09-22 07:43 . 2010-09-22 07:43 435024 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll - 2010-03-23 03:31 . 2010-03-23 03:31 435024 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll + 2011-07-07 03:18 . 2011-07-07 03:18 388936 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll + 2011-03-25 04:15 . 2011-03-25 04:15 363856 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll - 2009-08-07 22:51 . 2009-08-07 22:51 989016 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll + 2011-07-07 03:18 . 2011-07-07 03:18 989016 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll + 2011-07-07 10:04 . 2011-07-07 10:04 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll - 2010-03-31 12:51 . 2010-03-31 12:51 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll + 2011-07-07 10:01 . 2011-07-07 10:01 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll - 2010-03-31 12:49 . 2010-03-31 12:49 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll + 2011-07-07 11:09 . 2011-07-07 11:09 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll - 2010-03-31 13:32 . 2010-03-31 13:32 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll + 2011-10-29 10:04 . 2011-10-29 10:04 203776 c:\windows\Installer\7ea55.msi + 2010-08-04 13:13 . 2010-08-04 13:13 686080 c:\windows\Installer\30dc94.msp + 2011-06-23 22:32 . 2011-06-23 22:32 467456 c:\windows\Installer\25a56.msi + 2010-09-23 19:02 . 2010-09-23 19:02 798208 c:\windows\Installer\1d179a.msp + 2011-01-10 08:15 . 2011-01-10 08:15 778752 c:\windows\Installer\1874ff.msi + 2011-01-10 08:14 . 2011-01-10 08:14 477696 c:\windows\Installer\1874c3.msi + 2011-01-10 08:13 . 2011-01-10 08:13 861184 c:\windows\Installer\1874b6.msi + 2011-01-10 08:12 . 2011-01-10 08:12 429056 c:\windows\Installer\187482.msi + 2011-01-10 08:11 . 2011-01-10 08:11 149504 c:\windows\Installer\187451.msi + 2010-07-23 00:03 . 2010-07-23 00:03 338432 c:\windows\Installer\11d4c8e.msp - 2008-08-21 20:42 . 2010-06-19 10:50 888080 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\wordicon.exe + 2008-08-21 20:42 . 2011-10-30 11:09 888080 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\wordicon.exe + 2008-08-21 20:42 . 2011-10-30 11:09 922384 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\pptico.exe - 2008-08-21 20:42 . 2010-06-19 10:50 922384 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\pptico.exe + 2008-08-21 20:42 . 2011-10-30 11:09 217864 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\misc.exe - 2008-08-21 20:42 . 2010-06-19 10:50 217864 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\misc.exe - 2008-08-21 20:42 . 2010-06-19 10:50 184080 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\joticon.exe + 2008-08-21 20:42 . 2011-10-30 11:09 184080 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\joticon.exe + 2011-10-30 11:03 . 2011-10-30 11:03 217864 c:\windows\Installer\{90120000-006E-0413-0000-0000000FF1CE}\misc.exe - 2009-11-25 18:55 . 2009-11-25 18:55 217864 c:\windows\Installer\{90120000-006E-0413-0000-0000000FF1CE}\misc.exe + 2011-01-10 08:15 . 2011-01-10 08:15 132096 c:\windows\Installer\{6FEC9863-5EF2-4A07-9D0B-CA81B47E3F59}\WLXPhotoGalleryIcon.exe + 2010-09-20 21:07 . 2010-09-20 21:07 338856 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\readerupdater.exe + 2010-09-22 16:10 . 2010-09-22 16:10 103864 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\nppdf32.dll + 2010-09-10 16:17 . 2010-09-10 16:17 684032 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\JP2KLib.dll + 2010-09-22 18:41 . 2010-09-22 18:41 542168 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\AdobeCollabSync.exe + 2010-09-20 21:07 . 2010-09-20 21:07 932288 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\adobearm.exe + 2010-09-23 02:47 . 2010-09-23 02:47 349616 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\AcroRd32.exe + 2010-09-22 16:04 . 2010-09-22 16:04 660912 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\AcroPDF.dll + 2010-09-22 17:39 . 2010-09-22 17:39 280024 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\acrobroker.exe + 2010-09-20 21:07 . 2010-09-20 21:07 338856 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\acrobatupdater.exe + 2010-09-22 16:50 . 2010-09-22 16:50 251296 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\a3dutility.exe + 2011-01-14 05:10 . 2011-01-14 05:10 155520 c:\windows\Installer\$PatchCache$\Managed\00004109500200000000000000F01FEC\14.0.5130\GKWORD6.DLL + 2011-01-14 05:10 . 2011-01-14 05:10 140160 c:\windows\Installer\$PatchCache$\Managed\00004109500200000000000000F01FEC\14.0.5130\GKEXCEL2.DLL + 2007-06-07 17:51 . 2007-06-07 17:51 465800 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.6612\OUTLFLTR.DLL + 2008-03-19 05:27 . 2008-03-19 05:27 661536 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.6612\OGALEGIT.DLL + 2006-07-24 08:50 . 2006-07-24 08:50 125744 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.6612\MSSTDFMT.DLL + 2008-10-25 05:18 . 2008-10-25 05:18 172880 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.6612\IEAWSDC.DLL + 2006-10-26 18:13 . 2006-10-26 18:13 764800 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\ACECNF.DLL + 2011-10-29 14:10 . 2011-06-21 18:37 832512 c:\windows\ie7updates\KB2586448-IE7\wininet.dll + 2011-10-29 14:10 . 2011-06-21 18:37 233472 c:\windows\ie7updates\KB2586448-IE7\webcheck.dll + 2011-10-29 14:10 . 2011-06-21 18:37 106496 c:\windows\ie7updates\KB2586448-IE7\url.dll + 2011-10-29 14:10 . 2010-07-05 13:21 401272 c:\windows\ie7updates\KB2586448-IE7\spuninst\updspapi.dll + 2011-10-29 14:10 . 2010-07-05 13:21 234872 c:\windows\ie7updates\KB2586448-IE7\spuninst\spuninst.exe + 2011-10-29 14:10 . 2011-06-21 18:37 102912 c:\windows\ie7updates\KB2586448-IE7\occache.dll + 2011-10-29 14:10 . 2011-06-21 18:37 671232 c:\windows\ie7updates\KB2586448-IE7\mstime.dll + 2011-10-29 14:10 . 2011-06-21 18:37 193024 c:\windows\ie7updates\KB2586448-IE7\msrating.dll + 2011-10-29 14:10 . 2011-06-21 18:37 478720 c:\windows\ie7updates\KB2586448-IE7\mshtmled.dll + 2011-10-29 14:10 . 2011-06-21 18:37 468480 c:\windows\ie7updates\KB2586448-IE7\msfeeds.dll + 2011-10-29 14:10 . 2011-06-20 11:29 634648 c:\windows\ie7updates\KB2586448-IE7\iexplore.exe + 2011-10-29 14:10 . 2011-06-21 18:37 268288 c:\windows\ie7updates\KB2586448-IE7\iertutil.dll + 2011-10-29 14:10 . 2011-06-21 18:37 192512 c:\windows\ie7updates\KB2586448-IE7\iepeers.dll + 2011-10-29 14:10 . 2011-06-21 18:37 384512 c:\windows\ie7updates\KB2586448-IE7\iedkcs32.dll + 2011-10-29 14:10 . 2011-06-21 18:37 380928 c:\windows\ie7updates\KB2586448-IE7\ieapfltr.dll + 2011-10-29 14:10 . 2011-06-20 11:27 161792 c:\windows\ie7updates\KB2586448-IE7\ieakui.dll + 2011-10-29 14:10 . 2011-06-21 18:37 230400 c:\windows\ie7updates\KB2586448-IE7\ieaksie.dll + 2011-10-29 14:10 . 2011-06-21 18:37 153088 c:\windows\ie7updates\KB2586448-IE7\ieakeng.dll + 2011-10-29 14:10 . 2011-06-21 18:37 133120 c:\windows\ie7updates\KB2586448-IE7\extmgr.dll + 2011-10-29 14:10 . 2011-06-21 18:37 214528 c:\windows\ie7updates\KB2586448-IE7\dxtrans.dll + 2011-10-29 14:10 . 2011-06-21 18:37 347136 c:\windows\ie7updates\KB2586448-IE7\dxtmsft.dll + 2011-10-29 14:10 . 2011-06-21 18:37 124928 c:\windows\ie7updates\KB2586448-IE7\advpack.dll + 2011-08-12 14:58 . 2011-04-25 15:44 832512 c:\windows\ie7updates\KB2559049-IE7\wininet.dll + 2011-08-12 14:58 . 2011-04-25 15:44 233472 c:\windows\ie7updates\KB2559049-IE7\webcheck.dll + 2011-08-12 14:58 . 2011-04-25 15:44 105984 c:\windows\ie7updates\KB2559049-IE7\url.dll + 2011-08-12 14:58 . 2010-07-05 13:21 401272 c:\windows\ie7updates\KB2559049-IE7\spuninst\updspapi.dll + 2011-08-12 14:58 . 2010-07-05 13:21 234872 c:\windows\ie7updates\KB2559049-IE7\spuninst\spuninst.exe + 2011-08-12 14:58 . 2011-04-25 15:44 102912 c:\windows\ie7updates\KB2559049-IE7\occache.dll + 2011-08-12 14:58 . 2011-04-25 15:44 671232 c:\windows\ie7updates\KB2559049-IE7\mstime.dll + 2011-08-12 14:58 . 2011-04-25 15:44 193024 c:\windows\ie7updates\KB2559049-IE7\msrating.dll + 2011-08-12 14:58 . 2011-04-25 15:44 478208 c:\windows\ie7updates\KB2559049-IE7\mshtmled.dll + 2011-08-12 14:58 . 2011-04-25 15:44 468480 c:\windows\ie7updates\KB2559049-IE7\msfeeds.dll + 2011-08-12 14:58 . 2011-04-21 10:58 634648 c:\windows\ie7updates\KB2559049-IE7\iexplore.exe + 2011-08-12 14:58 . 2011-04-25 15:44 268288 c:\windows\ie7updates\KB2559049-IE7\iertutil.dll + 2011-08-12 14:58 . 2011-04-25 15:44 192512 c:\windows\ie7updates\KB2559049-IE7\iepeers.dll + 2011-08-12 14:58 . 2011-04-25 15:44 384512 c:\windows\ie7updates\KB2559049-IE7\iedkcs32.dll + 2011-08-12 14:58 . 2011-04-25 15:44 380928 c:\windows\ie7updates\KB2559049-IE7\ieapfltr.dll + 2011-08-12 14:58 . 2011-04-21 10:56 161792 c:\windows\ie7updates\KB2559049-IE7\ieakui.dll + 2011-08-12 14:58 . 2011-04-25 15:44 230400 c:\windows\ie7updates\KB2559049-IE7\ieaksie.dll + 2011-08-12 14:58 . 2011-04-25 15:44 153088 c:\windows\ie7updates\KB2559049-IE7\ieakeng.dll + 2011-08-12 14:58 . 2011-04-25 15:44 133120 c:\windows\ie7updates\KB2559049-IE7\extmgr.dll + 2011-08-12 14:58 . 2011-04-25 15:44 214528 c:\windows\ie7updates\KB2559049-IE7\dxtrans.dll + 2011-08-12 14:58 . 2011-04-25 15:44 347136 c:\windows\ie7updates\KB2559049-IE7\dxtmsft.dll + 2011-08-12 14:58 . 2011-04-25 15:44 124928 c:\windows\ie7updates\KB2559049-IE7\advpack.dll + 2011-06-23 22:49 . 2008-05-27 17:30 765952 c:\windows\ie7updates\KB2544521-IE7\vgx.dll + 2011-06-23 22:49 . 2010-07-05 13:21 401272 c:\windows\ie7updates\KB2544521-IE7\spuninst\updspapi.dll + 2011-06-23 22:49 . 2010-07-05 13:21 234872 c:\windows\ie7updates\KB2544521-IE7\spuninst\spuninst.exe + 2011-06-23 23:10 . 2011-02-17 18:55 832512 c:\windows\ie7updates\KB2530548-IE7\wininet.dll + 2011-06-23 23:10 . 2011-02-17 18:55 233472 c:\windows\ie7updates\KB2530548-IE7\webcheck.dll + 2011-06-23 23:10 . 2011-02-17 18:55 105984 c:\windows\ie7updates\KB2530548-IE7\url.dll + 2011-06-23 23:10 . 2010-07-05 13:21 401272 c:\windows\ie7updates\KB2530548-IE7\spuninst\updspapi.dll + 2011-06-23 23:10 . 2010-07-05 13:21 234872 c:\windows\ie7updates\KB2530548-IE7\spuninst\spuninst.exe + 2011-06-23 23:10 . 2011-02-17 18:55 102912 c:\windows\ie7updates\KB2530548-IE7\occache.dll + 2011-06-23 23:10 . 2011-02-17 18:55 671232 c:\windows\ie7updates\KB2530548-IE7\mstime.dll + 2011-06-23 23:10 . 2011-02-17 18:55 193024 c:\windows\ie7updates\KB2530548-IE7\msrating.dll + 2011-06-23 23:10 . 2011-02-17 18:55 478208 c:\windows\ie7updates\KB2530548-IE7\mshtmled.dll + 2011-06-23 23:10 . 2011-02-17 18:55 468480 c:\windows\ie7updates\KB2530548-IE7\msfeeds.dll + 2011-06-23 23:10 . 2011-02-14 12:17 634648 c:\windows\ie7updates\KB2530548-IE7\iexplore.exe + 2011-06-23 23:10 . 2011-02-17 18:55 268288 c:\windows\ie7updates\KB2530548-IE7\iertutil.dll + 2011-06-23 23:10 . 2011-02-17 18:55 192512 c:\windows\ie7updates\KB2530548-IE7\iepeers.dll + 2011-06-23 23:10 . 2011-02-17 18:55 384512 c:\windows\ie7updates\KB2530548-IE7\iedkcs32.dll + 2011-06-23 23:10 . 2011-02-17 18:55 380928 c:\windows\ie7updates\KB2530548-IE7\ieapfltr.dll + 2011-06-23 23:10 . 2011-02-14 12:15 161792 c:\windows\ie7updates\KB2530548-IE7\ieakui.dll + 2011-06-23 23:10 . 2011-02-17 18:55 230400 c:\windows\ie7updates\KB2530548-IE7\ieaksie.dll + 2011-06-23 23:10 . 2011-02-17 18:55 153088 c:\windows\ie7updates\KB2530548-IE7\ieakeng.dll + 2011-06-23 23:10 . 2011-02-17 18:55 133120 c:\windows\ie7updates\KB2530548-IE7\extmgr.dll + 2011-06-23 23:10 . 2011-02-17 18:55 214528 c:\windows\ie7updates\KB2530548-IE7\dxtrans.dll + 2011-06-23 23:10 . 2011-02-17 18:55 347136 c:\windows\ie7updates\KB2530548-IE7\dxtmsft.dll + 2011-06-23 23:10 . 2011-02-17 18:55 124928 c:\windows\ie7updates\KB2530548-IE7\advpack.dll + 2011-04-21 08:02 . 2010-12-20 23:06 832512 c:\windows\ie7updates\KB2497640-IE7\wininet.dll + 2011-04-21 08:02 . 2010-12-20 23:06 233472 c:\windows\ie7updates\KB2497640-IE7\webcheck.dll + 2011-04-21 08:02 . 2010-12-20 23:06 105984 c:\windows\ie7updates\KB2497640-IE7\url.dll + 2011-04-21 08:02 . 2010-07-05 13:21 401272 c:\windows\ie7updates\KB2497640-IE7\spuninst\updspapi.dll + 2011-04-21 08:02 . 2010-07-05 13:21 234872 c:\windows\ie7updates\KB2497640-IE7\spuninst\spuninst.exe + 2011-04-21 08:02 . 2010-12-20 23:06 102912 c:\windows\ie7updates\KB2497640-IE7\occache.dll + 2011-04-21 08:02 . 2010-12-20 23:06 671232 c:\windows\ie7updates\KB2497640-IE7\mstime.dll + 2011-04-21 08:02 . 2010-12-20 23:06 193024 c:\windows\ie7updates\KB2497640-IE7\msrating.dll + 2011-04-21 08:02 . 2010-12-20 23:06 478208 c:\windows\ie7updates\KB2497640-IE7\mshtmled.dll + 2011-04-21 08:02 . 2010-12-20 23:06 468480 c:\windows\ie7updates\KB2497640-IE7\msfeeds.dll + 2011-04-21 08:02 . 2010-12-20 11:25 634648 c:\windows\ie7updates\KB2497640-IE7\iexplore.exe + 2011-04-21 08:02 . 2010-12-20 23:06 268288 c:\windows\ie7updates\KB2497640-IE7\iertutil.dll + 2011-04-21 08:02 . 2010-12-20 23:06 192512 c:\windows\ie7updates\KB2497640-IE7\iepeers.dll + 2011-04-21 08:02 . 2010-12-20 23:06 384512 c:\windows\ie7updates\KB2497640-IE7\iedkcs32.dll + 2011-04-21 08:02 . 2010-12-20 23:06 380928 c:\windows\ie7updates\KB2497640-IE7\ieapfltr.dll + 2011-04-21 08:02 . 2010-12-20 11:23 161792 c:\windows\ie7updates\KB2497640-IE7\ieakui.dll + 2011-04-21 08:02 . 2010-12-20 23:06 230400 c:\windows\ie7updates\KB2497640-IE7\ieaksie.dll + 2011-04-21 08:02 . 2010-12-20 23:06 153088 c:\windows\ie7updates\KB2497640-IE7\ieakeng.dll + 2011-04-21 08:02 . 2010-12-20 23:06 133120 c:\windows\ie7updates\KB2497640-IE7\extmgr.dll + 2011-04-21 08:02 . 2010-12-20 23:06 214528 c:\windows\ie7updates\KB2497640-IE7\dxtrans.dll + 2011-04-21 08:02 . 2010-12-20 23:06 347136 c:\windows\ie7updates\KB2497640-IE7\dxtmsft.dll + 2011-04-21 08:02 . 2010-12-20 23:06 124928 c:\windows\ie7updates\KB2497640-IE7\advpack.dll + 2011-02-10 08:43 . 2010-11-06 00:25 832512 c:\windows\ie7updates\KB2482017-IE7\wininet.dll + 2011-02-10 08:43 . 2010-11-06 00:25 233472 c:\windows\ie7updates\KB2482017-IE7\webcheck.dll + 2011-02-10 08:43 . 2010-11-06 00:25 105984 c:\windows\ie7updates\KB2482017-IE7\url.dll + 2011-02-10 08:43 . 2010-07-05 13:21 401272 c:\windows\ie7updates\KB2482017-IE7\spuninst\updspapi.dll + 2011-02-10 08:43 . 2010-07-05 13:21 234872 c:\windows\ie7updates\KB2482017-IE7\spuninst\spuninst.exe + 2011-02-10 08:43 . 2010-11-06 00:25 102912 c:\windows\ie7updates\KB2482017-IE7\occache.dll + 2011-02-10 08:43 . 2010-11-06 00:25 671232 c:\windows\ie7updates\KB2482017-IE7\mstime.dll + 2011-02-10 08:43 . 2010-11-06 00:25 193024 c:\windows\ie7updates\KB2482017-IE7\msrating.dll + 2011-02-10 08:43 . 2010-11-06 00:25 478208 c:\windows\ie7updates\KB2482017-IE7\mshtmled.dll + 2011-02-10 08:43 . 2010-11-06 00:25 468480 c:\windows\ie7updates\KB2482017-IE7\msfeeds.dll + 2011-02-10 08:43 . 2010-10-18 11:07 634648 c:\windows\ie7updates\KB2482017-IE7\iexplore.exe + 2011-02-10 08:43 . 2010-11-06 00:25 268288 c:\windows\ie7updates\KB2482017-IE7\iertutil.dll + 2011-02-10 08:43 . 2010-11-06 00:25 192512 c:\windows\ie7updates\KB2482017-IE7\iepeers.dll + 2011-02-10 08:43 . 2010-11-06 00:25 384512 c:\windows\ie7updates\KB2482017-IE7\iedkcs32.dll + 2011-02-10 08:43 . 2010-11-06 00:25 380928 c:\windows\ie7updates\KB2482017-IE7\ieapfltr.dll + 2011-02-10 08:43 . 2010-10-18 11:06 161792 c:\windows\ie7updates\KB2482017-IE7\ieakui.dll + 2011-02-10 08:43 . 2010-11-06 00:25 230400 c:\windows\ie7updates\KB2482017-IE7\ieaksie.dll + 2011-02-10 08:43 . 2010-11-06 00:25 153088 c:\windows\ie7updates\KB2482017-IE7\ieakeng.dll + 2011-02-10 08:43 . 2010-11-06 00:25 133120 c:\windows\ie7updates\KB2482017-IE7\extmgr.dll + 2011-02-10 08:43 . 2010-11-06 00:25 214528 c:\windows\ie7updates\KB2482017-IE7\dxtrans.dll + 2011-02-10 08:43 . 2010-11-06 00:25 347136 c:\windows\ie7updates\KB2482017-IE7\dxtmsft.dll + 2011-02-10 08:43 . 2010-11-06 00:25 124928 c:\windows\ie7updates\KB2482017-IE7\advpack.dll + 2010-12-17 00:44 . 2010-09-09 13:35 832512 c:\windows\ie7updates\KB2416400-IE7\wininet.dll + 2010-12-17 00:44 . 2010-09-09 13:35 233472 c:\windows\ie7updates\KB2416400-IE7\webcheck.dll + 2010-12-17 00:44 . 2010-09-09 13:35 105984 c:\windows\ie7updates\KB2416400-IE7\url.dll + 2010-12-17 00:44 . 2010-02-22 14:29 401272 c:\windows\ie7updates\KB2416400-IE7\spuninst\updspapi.dll + 2010-12-17 00:44 . 2010-02-22 14:29 234872 c:\windows\ie7updates\KB2416400-IE7\spuninst\spuninst.exe + 2010-12-17 00:44 . 2010-09-09 13:35 102912 c:\windows\ie7updates\KB2416400-IE7\occache.dll + 2010-12-17 00:44 . 2010-09-09 13:35 671232 c:\windows\ie7updates\KB2416400-IE7\mstime.dll + 2010-12-17 00:44 . 2010-09-09 13:35 193024 c:\windows\ie7updates\KB2416400-IE7\msrating.dll + 2010-12-17 00:44 . 2010-09-09 13:35 478208 c:\windows\ie7updates\KB2416400-IE7\mshtmled.dll + 2010-12-17 00:44 . 2010-09-09 13:35 468480 c:\windows\ie7updates\KB2416400-IE7\msfeeds.dll + 2010-12-17 00:44 . 2010-08-25 11:30 634648 c:\windows\ie7updates\KB2416400-IE7\iexplore.exe + 2010-12-17 00:44 . 2010-09-09 13:35 268288 c:\windows\ie7updates\KB2416400-IE7\iertutil.dll + 2010-12-17 00:44 . 2010-09-09 13:35 192512 c:\windows\ie7updates\KB2416400-IE7\iepeers.dll + 2010-12-17 00:44 . 2010-09-09 13:35 384512 c:\windows\ie7updates\KB2416400-IE7\iedkcs32.dll + 2010-12-17 00:44 . 2010-09-09 13:35 380928 c:\windows\ie7updates\KB2416400-IE7\ieapfltr.dll + 2010-12-17 00:44 . 2010-08-25 11:29 161792 c:\windows\ie7updates\KB2416400-IE7\ieakui.dll + 2010-12-17 00:44 . 2010-09-09 13:35 230400 c:\windows\ie7updates\KB2416400-IE7\ieaksie.dll + 2010-12-17 00:44 . 2010-09-09 13:35 153088 c:\windows\ie7updates\KB2416400-IE7\ieakeng.dll + 2010-12-17 00:44 . 2010-09-09 13:35 133120 c:\windows\ie7updates\KB2416400-IE7\extmgr.dll + 2010-12-17 00:44 . 2010-09-09 13:35 214528 c:\windows\ie7updates\KB2416400-IE7\dxtrans.dll + 2010-12-17 00:44 . 2010-09-09 13:35 347136 c:\windows\ie7updates\KB2416400-IE7\dxtmsft.dll + 2010-12-17 00:44 . 2010-09-09 13:35 124928 c:\windows\ie7updates\KB2416400-IE7\advpack.dll + 2010-10-18 07:45 . 2010-06-24 12:19 832512 c:\windows\ie7updates\KB2360131-IE7\wininet.dll + 2010-10-18 07:45 . 2010-06-24 12:19 233472 c:\windows\ie7updates\KB2360131-IE7\webcheck.dll + 2010-10-18 07:45 . 2010-06-24 12:19 105984 c:\windows\ie7updates\KB2360131-IE7\url.dll + 2010-10-18 07:45 . 2010-02-22 14:29 401272 c:\windows\ie7updates\KB2360131-IE7\spuninst\updspapi.dll + 2010-10-18 07:45 . 2010-02-22 14:29 234872 c:\windows\ie7updates\KB2360131-IE7\spuninst\spuninst.exe + 2010-10-18 07:45 . 2010-06-24 12:19 102912 c:\windows\ie7updates\KB2360131-IE7\occache.dll + 2010-10-18 07:45 . 2010-06-24 12:19 671232 c:\windows\ie7updates\KB2360131-IE7\mstime.dll + 2010-10-18 07:45 . 2010-06-24 12:19 193024 c:\windows\ie7updates\KB2360131-IE7\msrating.dll + 2010-10-18 07:45 . 2010-06-24 12:19 477696 c:\windows\ie7updates\KB2360131-IE7\mshtmled.dll + 2010-10-18 07:45 . 2010-06-24 12:19 459264 c:\windows\ie7updates\KB2360131-IE7\msfeeds.dll + 2010-10-18 07:45 . 2010-06-17 15:12 634656 c:\windows\ie7updates\KB2360131-IE7\iexplore.exe + 2010-10-18 07:45 . 2010-06-24 12:19 268288 c:\windows\ie7updates\KB2360131-IE7\iertutil.dll + 2010-10-18 07:45 . 2010-06-24 12:19 192512 c:\windows\ie7updates\KB2360131-IE7\iepeers.dll + 2010-10-18 07:45 . 2010-06-24 12:19 385024 c:\windows\ie7updates\KB2360131-IE7\iedkcs32.dll + 2010-10-18 07:45 . 2010-06-24 12:19 380928 c:\windows\ie7updates\KB2360131-IE7\ieapfltr.dll + 2010-10-18 07:45 . 2010-06-17 15:11 161792 c:\windows\ie7updates\KB2360131-IE7\ieakui.dll + 2010-10-18 07:45 . 2010-06-24 12:19 230400 c:\windows\ie7updates\KB2360131-IE7\ieaksie.dll + 2010-10-18 07:45 . 2010-06-24 12:19 153088 c:\windows\ie7updates\KB2360131-IE7\ieakeng.dll + 2010-10-18 07:45 . 2010-06-24 12:19 133120 c:\windows\ie7updates\KB2360131-IE7\extmgr.dll + 2010-10-18 07:45 . 2010-06-24 12:19 214528 c:\windows\ie7updates\KB2360131-IE7\dxtrans.dll + 2010-10-18 07:45 . 2010-06-24 12:19 347136 c:\windows\ie7updates\KB2360131-IE7\dxtmsft.dll + 2010-10-18 07:45 . 2010-06-24 12:19 124928 c:\windows\ie7updates\KB2360131-IE7\advpack.dll + 2010-08-15 12:27 . 2010-05-04 17:21 832512 c:\windows\ie7updates\KB2183461-IE7\wininet.dll + 2010-08-15 12:27 . 2010-05-04 17:21 233472 c:\windows\ie7updates\KB2183461-IE7\webcheck.dll + 2010-08-15 12:27 . 2010-05-04 17:21 105984 c:\windows\ie7updates\KB2183461-IE7\url.dll + 2010-08-15 12:27 . 2010-02-22 14:29 401272 c:\windows\ie7updates\KB2183461-IE7\spuninst\updspapi.dll + 2010-08-15 12:27 . 2010-02-22 14:29 234872 c:\windows\ie7updates\KB2183461-IE7\spuninst\spuninst.exe + 2010-08-15 12:27 . 2010-05-04 17:21 102912 c:\windows\ie7updates\KB2183461-IE7\occache.dll + 2010-08-15 12:27 . 2010-05-04 17:21 671232 c:\windows\ie7updates\KB2183461-IE7\mstime.dll + 2010-08-15 12:27 . 2010-05-04 17:21 193024 c:\windows\ie7updates\KB2183461-IE7\msrating.dll + 2010-08-15 12:27 . 2010-05-04 17:21 477696 c:\windows\ie7updates\KB2183461-IE7\mshtmled.dll + 2010-08-15 12:27 . 2010-05-04 17:21 459264 c:\windows\ie7updates\KB2183461-IE7\msfeeds.dll + 2010-08-15 12:27 . 2010-04-16 11:43 634656 c:\windows\ie7updates\KB2183461-IE7\iexplore.exe + 2010-08-15 12:27 . 2010-05-04 17:21 268288 c:\windows\ie7updates\KB2183461-IE7\iertutil.dll + 2010-08-15 12:27 . 2010-05-04 17:21 192512 c:\windows\ie7updates\KB2183461-IE7\iepeers.dll + 2010-08-15 12:27 . 2010-05-04 17:21 385024 c:\windows\ie7updates\KB2183461-IE7\iedkcs32.dll + 2010-08-15 12:27 . 2010-05-04 17:21 380928 c:\windows\ie7updates\KB2183461-IE7\ieapfltr.dll + 2010-08-15 12:27 . 2010-04-16 11:43 161792 c:\windows\ie7updates\KB2183461-IE7\ieakui.dll + 2010-08-15 12:27 . 2010-05-04 17:21 230400 c:\windows\ie7updates\KB2183461-IE7\ieaksie.dll + 2010-08-15 12:27 . 2010-05-04 17:21 153088 c:\windows\ie7updates\KB2183461-IE7\ieakeng.dll + 2010-08-15 12:27 . 2010-05-04 17:21 133120 c:\windows\ie7updates\KB2183461-IE7\extmgr.dll + 2010-08-15 12:27 . 2010-05-04 17:21 214528 c:\windows\ie7updates\KB2183461-IE7\dxtrans.dll + 2010-08-15 12:27 . 2010-05-04 17:21 347136 c:\windows\ie7updates\KB2183461-IE7\dxtmsft.dll + 2010-08-15 12:27 . 2010-05-04 17:21 124928 c:\windows\ie7updates\KB2183461-IE7\advpack.dll + 2011-10-29 14:09 . 2011-10-29 14:09 835584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_afc5f7db\System.Drawing.dll + 2011-10-29 14:10 . 2011-10-29 14:10 192512 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_aea3db20\System.Drawing.Design.dll + 2011-10-29 14:10 . 2011-10-29 14:10 118784 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_40aa9ce9\CustomMarshalers.dll + 2011-10-30 10:21 . 2011-10-30 10:21 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\a2c1bb3c5b1447b398e72c56091ca571\WindowsFormsIntegration.ni.dll + 2011-10-30 10:21 . 2011-10-30 10:21 187904 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\f102afdffdbe2565bcedb7fa0626b865\UIAutomationTypes.ni.dll + 2011-10-30 10:21 . 2011-10-30 10:21 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\ba55240b7753047f8d1b03ef473bf74e\UIAutomationClient.ni.dll + 2011-10-30 11:33 . 2011-10-30 11:33 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\20a77c41ee12362d303fb2574fcd5a24\System.IO.Log.ni.dll + 2011-10-30 11:33 . 2011-10-30 11:33 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\41c3a2fcffc58b20023c7d54e57ea956\System.IdentityModel.Selectors.ni.dll + 2011-10-30 10:20 . 2011-10-30 10:20 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\896eca06e2d9377b2dc4fad56ce49b07\System.Drawing.Design.ni.dll + 2011-10-30 10:18 . 2011-10-30 10:18 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\c2ebcc8d60422f224b4088f3d7a2ac1f\PresentationFramework.Luna.ni.dll + 2011-10-30 10:18 . 2011-10-30 10:18 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\94cfc00ad448575bfb0e67c53b514cd5\PresentationFramework.Aero.ni.dll + 2011-10-30 10:18 . 2011-10-30 10:18 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\478d57d96f3d8d5fc15c7ac635a4a6a1\PresentationFramework.Classic.ni.dll + 2011-10-30 10:18 . 2011-10-30 10:18 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\23c5852ff8ed973ff9b63ce9ba7f91f0\PresentationFramework.Royale.ni.dll + 2011-10-30 10:53 . 2011-10-30 10:53 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\e1bcee92f5af50d560d577c0a99ea3bd\AspNetMMCExt.ni.dll + 2011-10-29 14:17 . 2011-10-29 14:17 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll - 2010-06-19 10:40 . 2010-06-19 10:40 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll - 2010-06-19 10:40 . 2010-06-19 10:40 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll + 2011-10-29 14:17 . 2011-10-29 14:17 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll + 2011-10-29 14:17 . 2011-10-29 14:17 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll - 2010-06-19 10:40 . 2010-06-19 10:40 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll - 2010-06-19 10:41 . 2010-06-19 10:41 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll + 2011-10-29 14:17 . 2011-10-29 14:17 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll - 2010-06-19 10:41 . 2010-06-19 10:41 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll + 2011-10-29 14:17 . 2011-10-29 14:17 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll - 2010-06-19 10:41 . 2010-06-19 10:41 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll + 2011-10-29 14:17 . 2011-10-29 14:17 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll + 2011-10-29 14:17 . 2011-10-29 14:17 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll - 2010-06-19 10:41 . 2010-06-19 10:41 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll + 2011-10-29 14:17 . 2011-10-29 14:17 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll - 2010-06-19 10:41 . 2010-06-19 10:41 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll - 2010-06-19 10:41 . 2010-06-19 10:41 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll + 2011-10-29 14:17 . 2011-10-29 14:17 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll + 2011-10-29 14:17 . 2011-10-29 14:17 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll - 2010-06-19 10:41 . 2010-06-19 10:41 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll - 2010-06-19 10:40 . 2010-06-19 10:40 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll + 2011-10-29 14:17 . 2011-10-29 14:17 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll + 2011-10-29 14:18 . 2011-10-29 14:18 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll - 2010-06-19 10:41 . 2010-06-19 10:41 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll + 2011-10-29 14:18 . 2011-10-29 14:18 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll - 2010-06-19 10:41 . 2010-06-19 10:41 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll + 2011-10-29 14:18 . 2011-10-29 14:18 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll - 2010-06-19 10:41 . 2010-06-19 10:41 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll + 2011-10-29 14:18 . 2011-10-29 14:18 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll - 2010-06-19 10:41 . 2010-06-19 10:41 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll + 2011-10-29 14:17 . 2011-10-29 14:17 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll - 2010-06-19 10:40 . 2010-06-19 10:40 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll - 2010-06-19 10:40 . 2010-06-19 10:40 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll + 2011-10-29 14:17 . 2011-10-29 14:17 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll - 2010-06-19 10:40 . 2010-06-19 10:40 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll + 2011-10-29 14:17 . 2011-10-29 14:17 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll + 2011-10-29 14:17 . 2011-10-29 14:17 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll - 2010-06-19 10:40 . 2010-06-19 10:40 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll + 2011-10-29 14:17 . 2011-10-29 14:17 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll - 2010-06-19 10:41 . 2010-06-19 10:41 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll - 2010-06-19 10:41 . 2010-06-19 10:41 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll + 2011-10-29 14:17 . 2011-10-29 14:17 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll + 2011-10-29 14:17 . 2011-10-29 14:17 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll - 2010-06-19 10:40 . 2010-06-19 10:40 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll + 2011-10-29 14:17 . 2011-10-29 14:17 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll - 2010-06-19 10:41 . 2010-06-19 10:41 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll - 2010-06-19 10:41 . 2010-06-19 10:41 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll + 2011-10-29 14:17 . 2011-10-29 14:17 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll - 2010-06-19 10:41 . 2010-06-19 10:41 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll + 2011-10-29 14:17 . 2011-10-29 14:17 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll - 2010-06-19 10:41 . 2010-06-19 10:41 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll + 2011-10-29 14:18 . 2011-10-29 14:18 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll - 2009-11-25 18:57 . 2009-11-25 18:57 870256 c:\windows\assembly\GAC\Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Word.dll + 2011-10-30 11:08 . 2011-10-30 11:08 870256 c:\windows\assembly\GAC\Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Word.dll + 2011-10-30 11:09 . 2011-10-30 11:09 350080 c:\windows\assembly\GAC\Microsoft.Office.Interop.PowerPoint\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.PowerPoint.dll + 2011-10-30 11:08 . 2011-10-30 11:08 149368 c:\windows\assembly\GAC\Microsoft.Office.Interop.Graph\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Graph.dll + 2010-10-01 07:19 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB982802$\spuninst\updspapi.dll + 2010-10-01 07:19 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB982802$\spuninst\spuninst.exe + 2010-10-01 07:19 . 2009-04-15 14:55 585216 c:\windows\$NtUninstallKB982802$\rpcrt4.dll + 2010-08-15 12:16 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB982665$\spuninst\updspapi.dll + 2010-08-15 12:16 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB982665$\spuninst\spuninst.exe + 2010-08-15 12:27 . 2009-12-31 16:50 353792 c:\windows\$NtUninstallKB982214$\srv.sys + 2010-08-15 12:27 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB982214$\spuninst\updspapi.dll + 2010-08-15 12:27 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB982214$\spuninst\spuninst.exe + 2010-10-18 07:43 . 2009-10-15 16:38 119808 c:\windows\$NtUninstallKB982132$\t2embed.dll + 2010-10-18 07:43 . 2009-05-26 11:41 401272 c:\windows\$NtUninstallKB982132$\spuninst\updspapi.dll + 2010-10-18 07:43 . 2009-05-26 11:41 234872 c:\windows\$NtUninstallKB982132$\spuninst\spuninst.exe + 2010-08-15 12:17 . 2009-05-26 11:41 401272 c:\windows\$NtUninstallKB981997$\spuninst\updspapi.dll + 2010-08-15 12:17 . 2009-05-26 11:41 234872 c:\windows\$NtUninstallKB981997$\spuninst\spuninst.exe + 2010-10-18 07:27 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB981957$\spuninst\updspapi.dll + 2010-10-18 07:27 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB981957$\spuninst\spuninst.exe + 2010-08-15 12:26 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB981852$\spuninst\updspapi.dll + 2010-08-15 12:26 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB981852$\spuninst\spuninst.exe + 2010-10-01 07:17 . 2008-04-15 21:00 406016 c:\windows\$NtUninstallKB981322$\usp10.dll + 2010-10-01 07:17 . 2009-05-26 11:41 401272 c:\windows\$NtUninstallKB981322$\spuninst\updspapi.dll + 2010-10-01 07:17 . 2009-05-26 11:41 234872 c:\windows\$NtUninstallKB981322$\spuninst\spuninst.exe + 2010-08-15 12:20 . 2009-05-26 11:41 401272 c:\windows\$NtUninstallKB980436$\spuninst\updspapi.dll + 2010-08-15 12:20 . 2009-05-26 11:41 234872 c:\windows\$NtUninstallKB980436$\spuninst\spuninst.exe + 2010-08-15 12:20 . 2009-06-25 08:27 147456 c:\windows\$NtUninstallKB980436$\schannel.dll + 2010-10-18 07:41 . 2008-04-21 21:16 218624 c:\windows\$NtUninstallKB979687$\wordpad.exe + 2010-10-18 07:41 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB979687$\spuninst\updspapi.dll + 2010-10-18 07:41 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB979687$\spuninst\spuninst.exe + 2010-10-01 07:20 . 2007-07-27 21:11 382840 c:\windows\$NtUninstallKB975558_WM8$\spuninst\updspapi.dll + 2010-10-01 07:20 . 2007-07-27 19:04 234872 c:\windows\$NtUninstallKB975558_WM8$\spuninst\spuninst.exe + 2010-10-01 07:20 . 2006-10-18 20:47 317440 c:\windows\$NtUninstallKB975558_WM8$\mp4sdecd.dll + 2011-03-30 10:20 . 2009-05-26 11:41 401272 c:\windows\$NtUninstallKB971029$\spuninst\updspapi.dll + 2011-03-30 10:20 . 2008-07-08 13:07 234872 c:\windows\$NtUninstallKB971029$\spuninst\spuninst.exe + 2011-03-30 10:20 . 2008-04-15 21:00 135680 c:\windows\$NtUninstallKB971029$\shsvcs.dll + 2011-09-15 22:35 . 2010-07-05 13:21 401272 c:\windows\$NtUninstallKB2616676$\spuninst\updspapi.dll + 2011-09-15 22:35 . 2010-07-05 13:21 234872 c:\windows\$NtUninstallKB2616676$\spuninst\spuninst.exe + 2011-09-15 22:35 . 2011-09-03 10:17 602624 c:\windows\$NtUninstallKB2616676$\crypt32.dll + 2011-09-09 08:48 . 2010-07-05 13:21 401272 c:\windows\$NtUninstallKB2607712$\spuninst\updspapi.dll + 2011-09-09 08:48 . 2010-07-05 13:21 234872 c:\windows\$NtUninstallKB2607712$\spuninst\spuninst.exe + 2011-09-09 08:48 . 2008-04-15 21:00 602624 c:\windows\$NtUninstallKB2607712$\crypt32.dll + 2011-09-15 22:30 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB2570947$\spuninst\updspapi.dll + 2011-09-15 22:30 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB2570947$\spuninst\spuninst.exe + 2011-08-25 18:57 . 2010-07-05 13:21 401272 c:\windows\$NtUninstallKB2570791$\spuninst\updspapi.dll + 2011-08-25 18:57 . 2010-07-05 13:21 234872 c:\windows\$NtUninstallKB2570791$\spuninst\spuninst.exe + 2011-08-12 14:57 . 2010-07-05 13:21 401272 c:\windows\$NtUninstallKB2570222$\spuninst\updspapi.dll + 2011-08-12 14:57 . 2010-07-05 13:21 234872 c:\windows\$NtUninstallKB2570222$\spuninst\spuninst.exe + 2011-08-12 14:57 . 2008-04-15 21:00 139656 c:\windows\$NtUninstallKB2570222$\rdpwd.sys + 2011-08-12 14:58 . 2011-04-26 11:07 293888 c:\windows\$NtUninstallKB2567680$\winsrv.dll + 2011-08-12 14:58 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB2567680$\spuninst\updspapi.dll + 2011-08-12 14:58 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB2567680$\spuninst\spuninst.exe + 2011-08-12 14:53 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB2566454$\spuninst\updspapi.dll + 2011-08-12 14:53 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB2566454$\spuninst\spuninst.exe + 2011-08-12 14:53 . 2010-07-05 13:21 401272 c:\windows\$NtUninstallKB2562937$\spuninst\updspapi.dll + 2011-08-12 14:53 . 2010-07-05 13:21 234872 c:\windows\$NtUninstallKB2562937$\spuninst\spuninst.exe + 2011-07-22 01:32 . 2010-07-05 13:21 401272 c:\windows\$NtUninstallKB2555917$\spuninst\updspapi.dll + 2011-07-22 01:32 . 2010-07-05 13:21 234872 c:\windows\$NtUninstallKB2555917$\spuninst\spuninst.exe + 2011-06-23 22:34 . 2010-07-05 13:21 401272 c:\windows\$NtUninstallKB2544893$\spuninst\updspapi.dll + 2011-06-23 22:34 . 2010-07-05 13:21 234872 c:\windows\$NtUninstallKB2544893$\spuninst\spuninst.exe + 2011-06-23 22:34 . 2011-03-07 05:33 692736 c:\windows\$NtUninstallKB2544893$\inetcomm.dll + 2011-07-22 01:31 . 2010-07-05 13:21 401272 c:\windows\$NtUninstallKB2541763$\spuninst\updspapi.dll + 2011-07-22 01:31 . 2010-07-05 13:21 234872 c:\windows\$NtUninstallKB2541763$\spuninst\spuninst.exe + 2011-07-22 01:31 . 2010-06-30 12:33 149504 c:\windows\$NtUninstallKB2541763$\schannel.dll + 2011-06-23 22:43 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB2536276$\spuninst\updspapi.dll + 2011-06-23 22:43 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB2536276$\spuninst\spuninst.exe + 2011-06-23 22:43 . 2011-02-17 13:18 455936 c:\windows\$NtUninstallKB2536276$\mrxsmb.sys + 2011-08-12 14:58 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB2536276-v2$\spuninst\updspapi.dll + 2011-08-12 14:58 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB2536276-v2$\spuninst\spuninst.exe + 2011-08-12 14:58 . 2011-04-29 16:19 456320 c:\windows\$NtUninstallKB2536276-v2$\mrxsmb.sys + 2011-06-23 22:44 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB2535512$\spuninst\updspapi.dll + 2011-06-23 22:44 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB2535512$\spuninst\spuninst.exe + 2011-06-23 22:44 . 2008-04-15 21:00 105344 c:\windows\$NtUninstallKB2535512$\mup.sys + 2011-03-30 10:21 . 2010-07-05 13:21 401272 c:\windows\$NtUninstallKB2524375$\spuninst\updspapi.dll + 2011-03-30 10:21 . 2010-07-05 13:21 234872 c:\windows\$NtUninstallKB2524375$\spuninst\spuninst.exe + 2011-04-21 07:15 . 2010-07-05 13:21 401272 c:\windows\$NtUninstallKB2511455$\spuninst\updspapi.dll + 2011-04-21 07:15 . 2010-07-05 13:21 234872 c:\windows\$NtUninstallKB2511455$\spuninst\spuninst.exe + 2011-04-21 07:15 . 2010-02-24 13:11 455680 c:\windows\$NtUninstallKB2511455$\mrxsmb.sys + 2011-05-11 05:54 . 2010-03-09 11:11 430080 c:\windows\$NtUninstallKB2510581$\vbscript.dll + 2011-05-11 05:54 . 2010-07-05 13:21 401272 c:\windows\$NtUninstallKB2510581$\spuninst\updspapi.dll + 2011-05-11 05:54 . 2010-07-05 13:21 234872 c:\windows\$NtUninstallKB2510581$\spuninst\spuninst.exe + 2011-05-11 05:54 . 2009-08-13 15:24 512000 c:\windows\$NtUninstallKB2510581$\jscript.dll + 2011-04-21 07:54 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB2509553$\spuninst\updspapi.dll + 2011-04-21 07:54 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB2509553$\spuninst\spuninst.exe + 2011-04-21 07:54 . 2008-06-20 17:49 247296 c:\windows\$NtUninstallKB2509553$\mswsock.dll + 2011-04-21 07:54 . 2008-06-20 17:49 147968 c:\windows\$NtUninstallKB2509553$\dnsapi.dll + 2011-04-21 07:54 . 2008-08-14 10:04 138496 c:\windows\$NtUninstallKB2509553$\afd.sys + 2011-04-21 07:54 . 2010-08-26 13:39 357248 c:\windows\$NtUninstallKB2508429$\srv.sys + 2011-04-21 07:54 . 2010-07-05 13:21 401272 c:\windows\$NtUninstallKB2508429$\spuninst\updspapi.dll + 2011-04-21 07:54 . 2010-07-05 13:21 234872 c:\windows\$NtUninstallKB2508429$\spuninst\spuninst.exe + 2011-04-21 07:19 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB2508272$\spuninst\updspapi.dll + 2011-04-21 07:19 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB2508272$\spuninst\spuninst.exe + 2011-07-22 01:32 . 2010-06-18 17:47 293888 c:\windows\$NtUninstallKB2507938$\winsrv.dll + 2011-07-22 01:32 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB2507938$\spuninst\updspapi.dll + 2011-07-22 01:32 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB2507938$\spuninst\spuninst.exe + 2011-04-21 07:54 . 2010-07-05 13:21 401272 c:\windows\$NtUninstallKB2507618$\spuninst\updspapi.dll + 2011-04-21 07:54 . 2010-07-05 13:21 234872 c:\windows\$NtUninstallKB2507618$\spuninst\spuninst.exe + 2011-04-21 07:54 . 2011-01-07 14:09 290048 c:\windows\$NtUninstallKB2507618$\atmfd.dll + 2011-05-11 05:54 . 2010-07-05 13:21 401272 c:\windows\$NtUninstallKB2506223$\spuninst\updspapi.dll + 2011-05-11 05:54 . 2010-07-05 13:21 234872 c:\windows\$NtUninstallKB2506223$\spuninst\spuninst.exe + 2011-04-21 07:54 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB2506212$\spuninst\updspapi.dll + 2011-04-21 07:54 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB2506212$\spuninst\spuninst.exe + 2011-04-21 07:54 . 2010-09-18 10:23 974848 c:\windows\$NtUninstallKB2506212$\mfc42u.dll + 2011-04-21 07:54 . 2010-09-18 06:53 974848 c:\windows\$NtUninstallKB2506212$\mfc42.dll + 2011-06-23 22:44 . 2010-07-05 13:21 401272 c:\windows\$NtUninstallKB2503665$\spuninst\updspapi.dll + 2011-06-23 22:44 . 2010-07-05 13:21 234872 c:\windows\$NtUninstallKB2503665$\spuninst\spuninst.exe + 2011-06-23 22:44 . 2008-10-16 14:43 138496 c:\windows\$NtUninstallKB2503665$\afd.sys + 2011-04-21 07:54 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB2503658$\spuninst\updspapi.dll + 2011-04-21 07:54 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB2503658$\spuninst\spuninst.exe + 2011-04-21 07:54 . 2010-06-09 07:45 692736 c:\windows\$NtUninstallKB2503658$\inetcomm.dll + 2011-05-11 05:55 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB2491683$\spuninst\updspapi.dll + 2011-05-11 05:55 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB2491683$\spuninst\spuninst.exe + 2011-05-11 05:55 . 2008-04-15 21:00 236032 c:\windows\$NtUninstallKB2491683$\fxscover.exe + 2011-04-21 08:04 . 2010-07-05 13:21 401272 c:\windows\$NtUninstallKB2485663$\spuninst\updspapi.dll + 2011-04-21 08:04 . 2010-07-05 13:21 234872 c:\windows\$NtUninstallKB2485663$\spuninst\spuninst.exe + 2011-02-10 08:49 . 2010-07-05 13:21 401272 c:\windows\$NtUninstallKB2485376$\spuninst\updspapi.dll + 2011-02-10 08:49 . 2010-07-05 13:21 234872 c:\windows\$NtUninstallKB2485376$\spuninst\spuninst.exe + 2011-02-10 08:49 . 2010-10-28 13:09 290048 c:\windows\$NtUninstallKB2485376$\atmfd.dll + 2011-02-10 08:48 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB2483185$\spuninst\updspapi.dll + 2011-02-10 08:48 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB2483185$\spuninst\spuninst.exe + 2011-02-10 08:48 . 2008-04-15 21:00 440320 c:\windows\$NtUninstallKB2483185$\shimgvw.dll + 2011-03-30 10:21 . 2010-07-05 13:21 401272 c:\windows\$NtUninstallKB2481109$\spuninst\updspapi.dll + 2011-03-30 10:21 . 2010-07-05 13:21 234872 c:\windows\$NtUninstallKB2481109$\spuninst\spuninst.exe + 2011-03-30 10:21 . 2008-04-15 21:00 677888 c:\windows\$NtUninstallKB2481109$\mstsc.exe + 2011-03-30 10:21 . 2008-04-15 21:00 677888 c:\windows\$NtUninstallKB2481109$\lhmstsc.exe + 2011-03-30 10:30 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB2479943$\spuninst\updspapi.dll + 2011-03-30 10:30 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB2479943$\spuninst\spuninst.exe + 2011-03-30 10:30 . 2008-04-15 21:00 270848 c:\windows\$NtUninstallKB2479943$\sbe.dll + 2011-03-30 10:30 . 2008-04-15 21:00 186880 c:\windows\$NtUninstallKB2479943$\encdec.dll + 2011-02-10 08:48 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB2479628$\spuninst\updspapi.dll + 2011-02-10 08:48 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB2479628$\spuninst\spuninst.exe + 2011-02-10 08:49 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB2478971$\spuninst\updspapi.dll + 2011-02-10 08:49 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB2478971$\spuninst\spuninst.exe + 2011-02-10 08:49 . 2009-06-25 08:27 301568 c:\windows\$NtUninstallKB2478971$\kerberos.dll + 2011-02-10 08:42 . 2010-07-05 13:21 401272 c:\windows\$NtUninstallKB2478960$\spuninst\updspapi.dll + 2011-02-10 08:42 . 2010-07-05 13:21 234872 c:\windows\$NtUninstallKB2478960$\spuninst\spuninst.exe + 2011-02-10 08:42 . 2009-06-25 08:27 735232 c:\windows\$NtUninstallKB2478960$\lsasrv.dll + 2011-02-10 08:42 . 2010-07-05 13:21 401272 c:\windows\$NtUninstallKB2476687$\spuninst\updspapi.dll + 2011-02-10 08:42 . 2010-07-05 13:21 234872 c:\windows\$NtUninstallKB2476687$\spuninst\spuninst.exe + 2011-06-23 22:45 . 2010-07-05 13:21 401272 c:\windows\$NtUninstallKB2476490$\spuninst\updspapi.dll + 2011-06-23 22:45 . 2010-07-05 13:21 234872 c:\windows\$NtUninstallKB2476490$\spuninst\spuninst.exe + 2011-06-23 22:45 . 2008-04-15 21:00 551936 c:\windows\$NtUninstallKB2476490$\oleaut32.dll + 2010-12-17 00:45 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB2467659$\spuninst\updspapi.dll + 2010-12-17 00:45 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB2467659$\spuninst\spuninst.exe + 2010-12-17 00:46 . 2009-05-26 11:41 401272 c:\windows\$NtUninstallKB2443685$\spuninst\updspapi.dll + 2010-12-17 00:46 . 2009-05-26 11:41 234872 c:\windows\$NtUninstallKB2443685$\spuninst\spuninst.exe + 2010-12-17 00:46 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB2443105$\spuninst\updspapi.dll + 2010-12-17 00:46 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB2443105$\spuninst\spuninst.exe + 2010-12-17 00:46 . 2009-05-26 11:41 401272 c:\windows\$NtUninstallKB2440591$\spuninst\updspapi.dll + 2010-12-17 00:46 . 2009-05-26 11:41 234872 c:\windows\$NtUninstallKB2440591$\spuninst\spuninst.exe + 2010-12-17 00:46 . 2009-05-26 11:41 401272 c:\windows\$NtUninstallKB2436673$\spuninst\updspapi.dll + 2010-12-17 00:46 . 2009-05-26 11:41 234872 c:\windows\$NtUninstallKB2436673$\spuninst\spuninst.exe + 2010-12-17 00:41 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB2423089$\spuninst\updspapi.dll + 2010-12-17 00:41 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB2423089$\spuninst\spuninst.exe + 2011-01-18 08:59 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB2419632$\spuninst\updspapi.dll + 2011-01-18 08:59 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB2419632$\spuninst\spuninst.exe + 2011-01-18 08:59 . 2008-04-15 21:00 249856 c:\windows\$NtUninstallKB2419632$\odbc32.dll + 2011-01-18 08:59 . 2008-04-15 21:00 102400 c:\windows\$NtUninstallKB2419632$\msjro.dll + 2011-01-18 08:59 . 2008-04-15 21:00 200704 c:\windows\$NtUninstallKB2419632$\msadox.dll + 2011-01-18 08:59 . 2008-04-15 21:00 180224 c:\windows\$NtUninstallKB2419632$\msadomd.dll + 2011-01-18 08:59 . 2008-04-15 21:00 536576 c:\windows\$NtUninstallKB2419632$\msado15.dll + 2011-01-18 08:59 . 2008-04-15 21:00 143360 c:\windows\$NtUninstallKB2419632$\msadco.dll + 2011-04-21 08:02 . 2009-05-26 11:41 401272 c:\windows\$NtUninstallKB2412687$\spuninst\updspapi.dll + 2011-04-21 08:02 . 2009-05-26 11:41 234872 c:\windows\$NtUninstallKB2412687$\spuninst\spuninst.exe + 2011-02-10 08:42 . 2010-07-05 13:21 401272 c:\windows\$NtUninstallKB2393802$\spuninst\updspapi.dll + 2011-02-10 08:42 . 2010-07-05 13:21 234872 c:\windows\$NtUninstallKB2393802$\spuninst\spuninst.exe + 2011-02-10 08:42 . 2009-02-09 10:56 735744 c:\windows\$NtUninstallKB2393802$\ntdll.dll + 2010-10-18 07:47 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB2387149$\spuninst\updspapi.dll + 2010-10-18 07:47 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB2387149$\spuninst\spuninst.exe + 2010-10-18 07:47 . 2008-04-15 21:00 981760 c:\windows\$NtUninstallKB2387149$\mfc42u.dll + 2010-10-18 07:47 . 2008-04-15 21:00 927504 c:\windows\$NtUninstallKB2387149$\mfc40u.dll + 2010-10-18 07:47 . 2008-04-15 21:00 924432 c:\windows\$NtUninstallKB2387149$\mfc40.dll + 2010-10-18 07:44 . 2007-07-27 21:11 382840 c:\windows\$NtUninstallKB2378111_WM9$\spuninst\updspapi.dll + 2010-10-18 07:44 . 2007-07-27 19:04 234872 c:\windows\$NtUninstallKB2378111_WM9$\spuninst\spuninst.exe + 2010-10-18 07:25 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB2360937$\spuninst\updspapi.dll + 2010-10-18 07:25 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB2360937$\spuninst\spuninst.exe + 2010-10-18 07:25 . 2010-07-22 15:46 590848 c:\windows\$NtUninstallKB2360937$\rpcrt4.dll + 2010-10-01 07:19 . 2009-05-26 11:41 401272 c:\windows\$NtUninstallKB2347290$\spuninst\updspapi.dll + 2010-10-01 07:19 . 2009-05-26 11:41 234872 c:\windows\$NtUninstallKB2347290$\spuninst\spuninst.exe + 2010-10-18 07:46 . 2010-06-21 15:27 354304 c:\windows\$NtUninstallKB2345886$\srv.sys + 2010-10-18 07:46 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB2345886$\spuninst\updspapi.dll + 2010-10-18 07:46 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB2345886$\spuninst\spuninst.exe + 2010-12-17 00:46 . 2009-05-26 11:41 401272 c:\windows\$NtUninstallKB2296199$\spuninst\updspapi.dll + 2010-12-17 00:46 . 2009-05-26 11:41 234872 c:\windows\$NtUninstallKB2296199$\spuninst\spuninst.exe + 2010-12-17 00:46 . 2010-09-01 11:52 285824 c:\windows\$NtUninstallKB2296199$\atmfd.dll + 2010-10-18 07:46 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB2296011$\spuninst\updspapi.dll + 2010-10-18 07:46 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB2296011$\spuninst\spuninst.exe + 2010-10-18 07:46 . 2008-04-15 21:00 617472 c:\windows\$NtUninstallKB2296011$\comctl32.dll + 2010-08-09 10:56 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB2286198$\spuninst\updspapi.dll + 2010-08-09 10:56 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB2286198$\spuninst\spuninst.exe + 2010-10-18 07:46 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB2279986$\spuninst\updspapi.dll + 2010-10-18 07:46 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB2279986$\spuninst\spuninst.exe + 2010-10-18 07:46 . 2010-04-20 05:35 285696 c:\windows\$NtUninstallKB2279986$\atmfd.dll + 2010-10-01 07:20 . 2009-05-26 09:01 401272 c:\windows\$NtUninstallKB2259922$\spuninst\updspapi.dll + 2010-10-01 07:20 . 2009-05-26 09:01 234872 c:\windows\$NtUninstallKB2259922$\spuninst\spuninst.exe + 2010-07-31 07:43 . 2010-02-22 17:59 401272 c:\windows\$NtUninstallKB2229593$\spuninst\updspapi.dll + 2010-07-31 07:43 . 2009-05-26 11:41 234872 c:\windows\$NtUninstallKB2229593$\spuninst\spuninst.exe + 2010-07-31 07:43 . 2008-04-15 21:00 744448 c:\windows\$NtUninstallKB2229593$\helpsvc.exe + 2010-08-15 12:20 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB2160329$\spuninst\updspapi.dll + 2010-08-15 12:20 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB2160329$\spuninst\spuninst.exe + 2010-10-01 07:13 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB2158563$\spuninst\updspapi.dll + 2010-10-01 07:13 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB2158563$\spuninst\spuninst.exe + 2010-10-01 07:14 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB2141007$\spuninst\updspapi.dll + 2010-10-01 07:14 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB2141007$\spuninst\spuninst.exe + 2010-10-01 07:14 . 2010-01-29 15:01 691712 c:\windows\$NtUninstallKB2141007$\inetcomm.dll + 2010-10-01 07:19 . 2008-04-15 21:00 293888 c:\windows\$NtUninstallKB2121546$\winsrv.dll + 2010-10-01 07:19 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB2121546$\spuninst\updspapi.dll + 2010-10-01 07:19 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB2121546$\spuninst\spuninst.exe + 2010-08-15 12:27 . 2009-05-26 11:41 401272 c:\windows\$NtUninstallKB2115168$\spuninst\updspapi.dll + 2010-08-15 12:27 . 2009-05-26 11:41 234872 c:\windows\$NtUninstallKB2115168$\spuninst\spuninst.exe + 2010-08-15 12:26 . 2009-05-26 11:41 401272 c:\windows\$NtUninstallKB2079403$\spuninst\updspapi.dll + 2010-08-15 12:26 . 2009-05-26 11:41 234872 c:\windows\$NtUninstallKB2079403$\spuninst\spuninst.exe + 2010-10-01 07:19 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB982802\update\updspapi.dll + 2010-10-01 07:19 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB982802\update\update.exe + 2010-10-01 07:19 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB982802\spuninst.exe + 2010-07-23 06:17 . 2010-07-23 06:17 590848 c:\windows\$hf_mig$\KB982802\SP3QFE\rpcrt4.dll + 2010-08-15 12:16 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB982665\update\updspapi.dll + 2010-08-15 12:16 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB982665\update\update.exe + 2010-08-15 12:16 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB982665\spuninst.exe + 2010-08-15 12:27 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB982214\update\updspapi.dll + 2010-08-15 12:27 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB982214\update\update.exe + 2010-08-15 12:27 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB982214\spuninst.exe + 2010-08-15 11:30 . 2010-06-21 14:18 354304 c:\windows\$hf_mig$\KB982214\SP3QFE\srv.sys + 2010-10-18 07:43 . 2009-05-26 11:41 401272 c:\windows\$hf_mig$\KB982132\update\updspapi.dll + 2010-10-18 07:43 . 2009-05-26 11:41 765304 c:\windows\$hf_mig$\KB982132\update\update.exe + 2010-10-18 07:43 . 2009-05-26 11:41 234872 c:\windows\$hf_mig$\KB982132\spuninst.exe + 2010-08-27 08:02 . 2010-08-27 08:02 119808 c:\windows\$hf_mig$\KB982132\SP3QFE\t2embed.dll + 2010-08-15 12:17 . 2009-05-26 11:41 401272 c:\windows\$hf_mig$\KB981997\update\updspapi.dll + 2010-08-15 12:17 . 2009-05-26 11:41 765304 c:\windows\$hf_mig$\KB981997\update\update.exe + 2010-08-15 12:17 . 2009-05-26 11:41 234872 c:\windows\$hf_mig$\KB981997\spuninst.exe + 2010-10-18 07:27 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB981957\update\updspapi.dll + 2010-10-18 07:27 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB981957\update\update.exe + 2010-10-18 07:27 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB981957\spuninst.exe + 2010-08-15 12:26 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB981852\update\updspapi.dll + 2010-08-15 12:26 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB981852\update\update.exe + 2010-08-15 12:26 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB981852\spuninst.exe + 2010-10-01 07:17 . 2009-05-26 11:41 401272 c:\windows\$hf_mig$\KB981322\update\updspapi.dll + 2010-10-01 07:17 . 2009-05-26 11:41 765304 c:\windows\$hf_mig$\KB981322\update\update.exe + 2010-10-01 07:17 . 2009-05-26 11:41 234872 c:\windows\$hf_mig$\KB981322\spuninst.exe + 2010-04-16 15:31 . 2010-04-16 15:31 406016 c:\windows\$hf_mig$\KB981322\SP3QFE\usp10.dll + 2010-08-15 12:20 . 2009-05-26 11:41 401272 c:\windows\$hf_mig$\KB980436\update\updspapi.dll + 2010-08-15 12:20 . 2009-05-26 11:41 765304 c:\windows\$hf_mig$\KB980436\update\update.exe + 2010-08-15 12:20 . 2009-05-26 11:41 234872 c:\windows\$hf_mig$\KB980436\spuninst.exe + 2010-06-30 12:25 . 2010-06-30 12:25 149504 c:\windows\$hf_mig$\KB980436\SP3QFE\schannel.dll + 2010-10-18 07:41 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB979687\update\updspapi.dll + 2010-10-18 07:41 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB979687\update\update.exe + 2010-10-18 07:41 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB979687\spuninst.exe + 2010-07-16 11:57 . 2010-07-16 11:57 221184 c:\windows\$hf_mig$\KB979687\SP3QFE\wordpad.exe + 2011-03-30 10:20 . 2009-05-26 11:41 401272 c:\windows\$hf_mig$\KB971029\update\updspapi.dll + 2011-03-30 10:20 . 2009-05-26 11:41 765304 c:\windows\$hf_mig$\KB971029\update\update.exe + 2011-03-30 10:20 . 2008-07-08 13:07 234872 c:\windows\$hf_mig$\KB971029\spuninst.exe + 2009-07-27 22:23 . 2009-07-27 22:23 135680 c:\windows\$hf_mig$\KB971029\SP3QFE\shsvcs.dll + 2011-09-15 22:35 . 2010-07-05 13:21 401272 c:\windows\$hf_mig$\KB2616676\update\updspapi.dll + 2011-09-15 22:35 . 2010-07-05 13:21 765304 c:\windows\$hf_mig$\KB2616676\update\update.exe + 2011-09-15 22:35 . 2010-07-05 13:21 234872 c:\windows\$hf_mig$\KB2616676\spuninst.exe + 2011-09-09 09:11 . 2011-09-09 09:11 603136 c:\windows\$hf_mig$\KB2616676\SP3QFE\crypt32.dll + 2011-09-09 08:48 . 2010-07-05 13:21 401272 c:\windows\$hf_mig$\KB2607712\update\updspapi.dll + 2011-09-09 08:48 . 2010-07-05 13:21 765304 c:\windows\$hf_mig$\KB2607712\update\update.exe + 2011-09-09 08:48 . 2010-07-05 13:21 234872 c:\windows\$hf_mig$\KB2607712\spuninst.exe + 2011-09-03 10:16 . 2011-09-03 10:16 603136 c:\windows\$hf_mig$\KB2607712\SP3QFE\crypt32.dll + 2011-09-15 22:30 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB2570947\update\updspapi.dll + 2011-09-15 22:30 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB2570947\update\update.exe + 2011-09-15 22:30 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB2570947\spuninst.exe + 2011-08-12 14:57 . 2010-07-05 13:21 401272 c:\windows\$hf_mig$\KB2570222\update\updspapi.dll + 2011-08-12 14:57 . 2010-07-05 13:21 765304 c:\windows\$hf_mig$\KB2570222\update\update.exe + 2011-08-12 14:57 . 2010-07-05 13:21 234872 c:\windows\$hf_mig$\KB2570222\spuninst.exe + 2011-08-12 11:23 . 2011-06-24 14:09 139656 c:\windows\$hf_mig$\KB2570222\SP3QFE\rdpwd.sys + 2011-08-12 14:58 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB2567680\update\updspapi.dll + 2011-08-12 14:58 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB2567680\update\update.exe + 2011-08-12 14:58 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB2567680\spuninst.exe + 2011-06-20 17:43 . 2011-06-20 17:43 293888 c:\windows\$hf_mig$\KB2567680\SP3QFE\winsrv.dll + 2011-08-12 14:53 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB2566454\update\updspapi.dll + 2011-08-12 14:53 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB2566454\update\update.exe + 2011-08-12 14:53 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB2566454\spuninst.exe + 2011-08-12 14:53 . 2010-07-05 13:21 401272 c:\windows\$hf_mig$\KB2562937\update\updspapi.dll + 2011-08-12 14:53 . 2010-07-05 13:21 765304 c:\windows\$hf_mig$\KB2562937\update\update.exe + 2011-08-12 14:53 . 2010-07-05 13:21 234872 c:\windows\$hf_mig$\KB2562937\spuninst.exe + 2011-08-12 14:58 . 2010-07-05 13:21 401272 c:\windows\$hf_mig$\KB2559049-IE7\update\updspapi.dll + 2011-08-12 14:58 . 2010-07-05 13:21 765304 c:\windows\$hf_mig$\KB2559049-IE7\update\update.exe + 2011-08-12 14:58 . 2010-07-05 13:21 234872 c:\windows\$hf_mig$\KB2559049-IE7\spuninst.exe + 2011-06-21 18:36 . 2011-06-21 18:36 841216 c:\windows\$hf_mig$\KB2559049-IE7\SP3QFE\wininet.dll + 2011-06-21 18:36 . 2011-06-21 18:36 233472 c:\windows\$hf_mig$\KB2559049-IE7\SP3QFE\webcheck.dll + 2011-06-21 18:36 . 2011-06-21 18:36 106496 c:\windows\$hf_mig$\KB2559049-IE7\SP3QFE\url.dll + 2011-06-21 18:36 . 2011-06-21 18:36 102912 c:\windows\$hf_mig$\KB2559049-IE7\SP3QFE\occache.dll + 2011-06-21 18:36 . 2011-06-21 18:36 671232 c:\windows\$hf_mig$\KB2559049-IE7\SP3QFE\mstime.dll + 2011-06-21 18:36 . 2011-06-21 18:36 193024 c:\windows\$hf_mig$\KB2559049-IE7\SP3QFE\msrating.dll + 2011-06-21 18:36 . 2011-06-21 18:36 478720 c:\windows\$hf_mig$\KB2559049-IE7\SP3QFE\mshtmled.dll + 2011-06-21 18:36 . 2011-06-21 18:36 468480 c:\windows\$hf_mig$\KB2559049-IE7\SP3QFE\msfeeds.dll + 2011-06-20 10:38 . 2011-06-20 10:38 634648 c:\windows\$hf_mig$\KB2559049-IE7\SP3QFE\iexplore.exe + 2011-06-21 18:36 . 2011-06-21 18:36 268288 c:\windows\$hf_mig$\KB2559049-IE7\SP3QFE\iertutil.dll + 2011-06-21 18:36 . 2011-06-21 18:36 193024 c:\windows\$hf_mig$\KB2559049-IE7\SP3QFE\iepeers.dll + 2011-06-21 18:36 . 2011-06-21 18:36 388608 c:\windows\$hf_mig$\KB2559049-IE7\SP3QFE\iedkcs32.dll + 2011-06-21 18:36 . 2011-06-21 18:36 380928 c:\windows\$hf_mig$\KB2559049-IE7\SP3QFE\ieapfltr.dll + 2011-06-20 10:36 . 2011-06-20 10:36 161792 c:\windows\$hf_mig$\KB2559049-IE7\SP3QFE\ieakui.dll + 2011-06-21 18:36 . 2011-06-21 18:36 230400 c:\windows\$hf_mig$\KB2559049-IE7\SP3QFE\ieaksie.dll + 2011-06-21 18:36 . 2011-06-21 18:36 153088 c:\windows\$hf_mig$\KB2559049-IE7\SP3QFE\ieakeng.dll + 2011-06-21 18:36 . 2011-06-21 18:36 132608 c:\windows\$hf_mig$\KB2559049-IE7\SP3QFE\extmgr.dll + 2011-06-21 18:36 . 2011-06-21 18:36 214528 c:\windows\$hf_mig$\KB2559049-IE7\SP3QFE\dxtrans.dll + 2011-06-21 18:36 . 2011-06-21 18:36 347136 c:\windows\$hf_mig$\KB2559049-IE7\SP3QFE\dxtmsft.dll + 2011-06-21 18:36 . 2011-06-21 18:36 124928 c:\windows\$hf_mig$\KB2559049-IE7\SP3QFE\advpack.dll + 2011-07-22 01:32 . 2010-07-05 13:21 401272 c:\windows\$hf_mig$\KB2555917\update\updspapi.dll + 2011-07-22 01:32 . 2010-07-05 13:21 765304 c:\windows\$hf_mig$\KB2555917\update\update.exe + 2011-07-22 01:32 . 2010-07-05 13:21 234872 c:\windows\$hf_mig$\KB2555917\spuninst.exe + 2011-06-23 22:34 . 2010-07-05 13:21 401272 c:\windows\$hf_mig$\KB2544893\update\updspapi.dll + 2011-06-23 22:34 . 2010-07-05 13:21 765304 c:\windows\$hf_mig$\KB2544893\update\update.exe + 2011-06-23 22:34 . 2010-07-05 13:21 234872 c:\windows\$hf_mig$\KB2544893\spuninst.exe + 2011-06-22 09:37 . 2011-05-02 15:30 692736 c:\windows\$hf_mig$\KB2544893\SP3QFE\inetcomm.dll + 2011-06-23 22:49 . 2010-07-05 13:21 401272 c:\windows\$hf_mig$\KB2544521-IE7\update\updspapi.dll + 2011-06-23 22:49 . 2010-07-05 13:21 765304 c:\windows\$hf_mig$\KB2544521-IE7\update\update.exe + 2011-06-23 22:49 . 2010-07-05 13:21 234872 c:\windows\$hf_mig$\KB2544521-IE7\spuninst.exe + 2011-06-22 09:43 . 2011-04-30 08:49 766464 c:\windows\$hf_mig$\KB2544521-IE7\SP3QFE\vgx.dll + 2011-07-22 01:31 . 2010-07-05 13:21 401272 c:\windows\$hf_mig$\KB2541763\update\updspapi.dll + 2011-07-22 01:31 . 2010-07-05 13:21 765304 c:\windows\$hf_mig$\KB2541763\update\update.exe + 2011-07-22 01:31 . 2010-07-05 13:21 234872 c:\windows\$hf_mig$\KB2541763\spuninst.exe + 2011-04-29 17:23 . 2011-04-29 17:23 151552 c:\windows\$hf_mig$\KB2541763\SP3QFE\schannel.dll + 2011-06-23 22:43 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB2536276\update\updspapi.dll + 2011-06-23 22:43 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB2536276\update\update.exe + 2011-06-23 22:43 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB2536276\spuninst.exe + 2011-06-22 09:38 . 2011-04-29 16:47 457856 c:\windows\$hf_mig$\KB2536276\SP3QFE\mrxsmb.sys + 2011-08-12 14:58 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB2536276-v2\update\updspapi.dll + 2011-08-12 14:58 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB2536276-v2\update\update.exe + 2011-08-12 14:58 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB2536276-v2\spuninst.exe + 2011-08-12 11:54 . 2011-07-15 13:29 457856 c:\windows\$hf_mig$\KB2536276-v2\SP3QFE\mrxsmb.sys + 2011-06-23 22:44 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB2535512\update\updspapi.dll + 2011-06-23 22:44 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB2535512\update\update.exe + 2011-06-23 22:44 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB2535512\spuninst.exe + 2011-06-22 09:40 . 2011-04-21 13:52 105472 c:\windows\$hf_mig$\KB2535512\SP3QFE\mup.sys + 2011-06-23 23:10 . 2010-07-05 13:21 401272 c:\windows\$hf_mig$\KB2530548-IE7\update\updspapi.dll + 2011-06-23 23:10 . 2010-07-05 13:21 765304 c:\windows\$hf_mig$\KB2530548-IE7\update\update.exe + 2011-06-23 23:10 . 2010-07-05 13:21 234872 c:\windows\$hf_mig$\KB2530548-IE7\spuninst.exe + 2011-04-25 15:40 . 2011-04-25 15:40 841216 c:\windows\$hf_mig$\KB2530548-IE7\SP3QFE\wininet.dll + 2011-04-25 15:40 . 2011-04-25 15:40 233472 c:\windows\$hf_mig$\KB2530548-IE7\SP3QFE\webcheck.dll + 2011-04-25 15:40 . 2011-04-25 15:40 105984 c:\windows\$hf_mig$\KB2530548-IE7\SP3QFE\url.dll + 2011-04-25 15:40 . 2011-04-25 15:40 102912 c:\windows\$hf_mig$\KB2530548-IE7\SP3QFE\occache.dll + 2011-04-25 15:40 . 2011-04-25 15:40 671232 c:\windows\$hf_mig$\KB2530548-IE7\SP3QFE\mstime.dll + 2011-04-25 15:40 . 2011-04-25 15:40 193024 c:\windows\$hf_mig$\KB2530548-IE7\SP3QFE\msrating.dll + 2011-04-25 15:40 . 2011-04-25 15:40 478208 c:\windows\$hf_mig$\KB2530548-IE7\SP3QFE\mshtmled.dll + 2011-04-25 15:40 . 2011-04-25 15:40 468480 c:\windows\$hf_mig$\KB2530548-IE7\SP3QFE\msfeeds.dll + 2011-04-21 10:34 . 2011-04-21 10:34 634648 c:\windows\$hf_mig$\KB2530548-IE7\SP3QFE\iexplore.exe + 2011-04-25 15:40 . 2011-04-25 15:40 268288 c:\windows\$hf_mig$\KB2530548-IE7\SP3QFE\iertutil.dll + 2011-04-25 15:40 . 2011-04-25 15:40 193024 c:\windows\$hf_mig$\KB2530548-IE7\SP3QFE\iepeers.dll + 2011-04-25 15:40 . 2011-04-25 15:40 388608 c:\windows\$hf_mig$\KB2530548-IE7\SP3QFE\iedkcs32.dll + 2011-04-25 15:40 . 2011-04-25 15:40 380928 c:\windows\$hf_mig$\KB2530548-IE7\SP3QFE\ieapfltr.dll + 2011-04-21 10:33 . 2011-04-21 10:33 161792 c:\windows\$hf_mig$\KB2530548-IE7\SP3QFE\ieakui.dll + 2011-04-25 15:40 . 2011-04-25 15:40 230400 c:\windows\$hf_mig$\KB2530548-IE7\SP3QFE\ieaksie.dll + 2011-04-25 15:40 . 2011-04-25 15:40 153088 c:\windows\$hf_mig$\KB2530548-IE7\SP3QFE\ieakeng.dll + 2011-04-25 15:40 . 2011-04-25 15:40 132608 c:\windows\$hf_mig$\KB2530548-IE7\SP3QFE\extmgr.dll + 2011-04-25 15:40 . 2011-04-25 15:40 214528 c:\windows\$hf_mig$\KB2530548-IE7\SP3QFE\dxtrans.dll + 2011-04-25 15:40 . 2011-04-25 15:40 347136 c:\windows\$hf_mig$\KB2530548-IE7\SP3QFE\dxtmsft.dll + 2011-04-25 15:40 . 2011-04-25 15:40 124928 c:\windows\$hf_mig$\KB2530548-IE7\SP3QFE\advpack.dll + 2011-03-30 10:21 . 2010-07-05 13:21 401272 c:\windows\$hf_mig$\KB2524375\update\updspapi.dll + 2011-03-30 10:21 . 2010-07-05 13:21 765304 c:\windows\$hf_mig$\KB2524375\update\update.exe + 2011-03-30 10:21 . 2010-07-05 13:21 234872 c:\windows\$hf_mig$\KB2524375\spuninst.exe + 2011-04-21 07:15 . 2010-07-05 13:21 401272 c:\windows\$hf_mig$\KB2511455\update\updspapi.dll + 2011-04-21 07:15 . 2010-07-05 13:21 765304 c:\windows\$hf_mig$\KB2511455\update\update.exe + 2011-04-21 07:15 . 2010-07-05 13:21 234872 c:\windows\$hf_mig$\KB2511455\spuninst.exe + 2011-04-20 09:35 . 2011-02-17 13:19 457472 c:\windows\$hf_mig$\KB2511455\SP3QFE\mrxsmb.sys + 2011-05-11 05:54 . 2010-07-05 13:21 401272 c:\windows\$hf_mig$\KB2510581\update\updspapi.dll + 2011-05-11 05:54 . 2010-07-05 13:21 765304 c:\windows\$hf_mig$\KB2510581\update\update.exe + 2011-05-11 05:54 . 2010-07-05 13:21 234872 c:\windows\$hf_mig$\KB2510581\spuninst.exe + 2011-03-04 06:42 . 2011-03-04 06:42 434176 c:\windows\$hf_mig$\KB2510581\SP3QFE\vbscript.dll + 2011-03-04 06:42 . 2011-03-04 06:42 512000 c:\windows\$hf_mig$\KB2510581\SP3QFE\jscript.dll + 2011-04-21 07:54 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB2509553\update\updspapi.dll + 2011-04-21 07:54 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB2509553\update\update.exe + 2011-04-21 07:54 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB2509553\spuninst.exe + 2008-06-20 11:16 . 2008-06-20 11:16 225856 c:\windows\$hf_mig$\KB2509553\SP3QFE\tcpip6.sys + 2008-06-20 11:59 . 2008-06-20 11:59 361600 c:\windows\$hf_mig$\KB2509553\SP3QFE\tcpip.sys + 2008-06-20 17:45 . 2008-06-20 17:45 247296 c:\windows\$hf_mig$\KB2509553\SP3QFE\mswsock.dll + 2011-03-03 06:53 . 2011-03-03 06:53 149504 c:\windows\$hf_mig$\KB2509553\SP3QFE\dnsapi.dll + 2008-10-16 15:07 . 2008-10-16 15:07 138496 c:\windows\$hf_mig$\KB2509553\SP3QFE\afd.sys + 2011-04-21 07:54 . 2010-07-05 13:21 401272 c:\windows\$hf_mig$\KB2508429\update\updspapi.dll + 2011-04-21 07:54 . 2010-07-05 13:21 765304 c:\windows\$hf_mig$\KB2508429\update\update.exe + 2011-04-21 07:54 . 2010-07-05 13:21 234872 c:\windows\$hf_mig$\KB2508429\spuninst.exe + 2011-02-17 13:19 . 2011-02-17 13:19 357888 c:\windows\$hf_mig$\KB2508429\SP3QFE\srv.sys + 2011-04-21 07:19 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB2508272\update\updspapi.dll + 2011-04-21 07:19 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB2508272\update\update.exe + 2011-04-21 07:19 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB2508272\spuninst.exe + 2011-07-22 01:32 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB2507938\update\updspapi.dll + 2011-07-22 01:32 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB2507938\update\update.exe + 2011-07-22 01:32 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB2507938\spuninst.exe + 2011-04-26 11:02 . 2011-04-26 11:02 293888 c:\windows\$hf_mig$\KB2507938\SP3QFE\winsrv.dll + 2011-04-21 07:54 . 2010-07-05 13:21 401272 c:\windows\$hf_mig$\KB2507618\update\updspapi.dll + 2011-04-21 07:54 . 2010-07-05 13:21 765304 c:\windows\$hf_mig$\KB2507618\update\update.exe + 2011-04-21 07:54 . 2010-07-05 13:21 234872 c:\windows\$hf_mig$\KB2507618\spuninst.exe + 2011-02-15 13:05 . 2011-02-15 13:05 290432 c:\windows\$hf_mig$\KB2507618\SP3QFE\atmfd.dll + 2011-05-11 05:54 . 2010-07-05 13:21 401272 c:\windows\$hf_mig$\KB2506223\update\updspapi.dll + 2011-05-11 05:54 . 2010-07-05 13:21 765304 c:\windows\$hf_mig$\KB2506223\update\update.exe + 2011-05-11 05:54 . 2010-07-05 13:21 234872 c:\windows\$hf_mig$\KB2506223\spuninst.exe + 2011-04-21 07:54 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB2506212\update\updspapi.dll + 2011-04-21 07:54 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB2506212\update\update.exe + 2011-04-21 07:54 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB2506212\spuninst.exe + 2011-02-08 13:32 . 2011-02-08 13:32 974848 c:\windows\$hf_mig$\KB2506212\SP3QFE\mfc42u.dll + 2011-02-08 13:32 . 2011-02-08 13:32 978944 c:\windows\$hf_mig$\KB2506212\SP3QFE\mfc42.dll + 2011-06-23 22:44 . 2010-07-05 13:21 401272 c:\windows\$hf_mig$\KB2503665\update\updspapi.dll + 2011-06-23 22:44 . 2010-07-05 13:21 765304 c:\windows\$hf_mig$\KB2503665\update\update.exe + 2011-06-23 22:44 . 2010-07-05 13:21 234872 c:\windows\$hf_mig$\KB2503665\spuninst.exe + 2011-06-22 09:40 . 2011-02-16 13:25 138496 c:\windows\$hf_mig$\KB2503665\SP3QFE\afd.sys + 2011-04-21 07:54 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB2503658\update\updspapi.dll + 2011-04-21 07:54 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB2503658\update\update.exe + 2011-04-21 07:54 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB2503658\spuninst.exe + 2011-03-07 05:31 . 2011-03-07 05:31 692736 c:\windows\$hf_mig$\KB2503658\SP3QFE\inetcomm.dll + 2011-04-21 08:02 . 2010-07-05 13:21 401272 c:\windows\$hf_mig$\KB2497640-IE7\update\updspapi.dll + 2011-04-21 08:02 . 2010-07-05 13:21 765304 c:\windows\$hf_mig$\KB2497640-IE7\update\update.exe + 2011-04-21 08:02 . 2010-07-05 13:21 234872 c:\windows\$hf_mig$\KB2497640-IE7\spuninst.exe + 2011-02-17 18:55 . 2011-02-17 18:55 841216 c:\windows\$hf_mig$\KB2497640-IE7\SP3QFE\wininet.dll + 2011-02-17 18:55 . 2011-02-17 18:55 233472 c:\windows\$hf_mig$\KB2497640-IE7\SP3QFE\webcheck.dll + 2011-02-17 18:55 . 2011-02-17 18:55 105984 c:\windows\$hf_mig$\KB2497640-IE7\SP3QFE\url.dll + 2011-02-17 18:55 . 2011-02-17 18:55 102912 c:\windows\$hf_mig$\KB2497640-IE7\SP3QFE\occache.dll + 2011-02-17 18:55 . 2011-02-17 18:55 671232 c:\windows\$hf_mig$\KB2497640-IE7\SP3QFE\mstime.dll + 2011-02-17 18:55 . 2011-02-17 18:55 193024 c:\windows\$hf_mig$\KB2497640-IE7\SP3QFE\msrating.dll + 2011-02-17 18:55 . 2011-02-17 18:55 478208 c:\windows\$hf_mig$\KB2497640-IE7\SP3QFE\mshtmled.dll + 2011-02-17 18:55 . 2011-02-17 18:55 468480 c:\windows\$hf_mig$\KB2497640-IE7\SP3QFE\msfeeds.dll + 2011-02-14 11:36 . 2011-02-14 11:36 634648 c:\windows\$hf_mig$\KB2497640-IE7\SP3QFE\iexplore.exe + 2011-02-17 18:55 . 2011-02-17 18:55 268288 c:\windows\$hf_mig$\KB2497640-IE7\SP3QFE\iertutil.dll + 2011-02-17 18:55 . 2011-02-17 18:55 193024 c:\windows\$hf_mig$\KB2497640-IE7\SP3QFE\iepeers.dll + 2011-02-17 18:55 . 2011-02-17 18:55 388608 c:\windows\$hf_mig$\KB2497640-IE7\SP3QFE\iedkcs32.dll + 2011-02-17 18:55 . 2011-02-17 18:55 380928 c:\windows\$hf_mig$\KB2497640-IE7\SP3QFE\ieapfltr.dll + 2011-02-14 11:35 . 2011-02-14 11:35 161792 c:\windows\$hf_mig$\KB2497640-IE7\SP3QFE\ieakui.dll + 2011-02-17 18:55 . 2011-02-17 18:55 230400 c:\windows\$hf_mig$\KB2497640-IE7\SP3QFE\ieaksie.dll + 2011-02-17 18:55 . 2011-02-17 18:55 153088 c:\windows\$hf_mig$\KB2497640-IE7\SP3QFE\ieakeng.dll + 2011-02-17 18:55 . 2011-02-17 18:55 132608 c:\windows\$hf_mig$\KB2497640-IE7\SP3QFE\extmgr.dll + 2011-02-17 18:55 . 2011-02-17 18:55 214528 c:\windows\$hf_mig$\KB2497640-IE7\SP3QFE\dxtrans.dll + 2011-02-17 18:55 . 2011-02-17 18:55 347136 c:\windows\$hf_mig$\KB2497640-IE7\SP3QFE\dxtmsft.dll + 2011-02-17 18:55 . 2011-02-17 18:55 124928 c:\windows\$hf_mig$\KB2497640-IE7\SP3QFE\advpack.dll + 2011-05-11 05:55 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB2491683\update\updspapi.dll + 2011-05-11 05:55 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB2491683\update\update.exe + 2011-05-11 05:55 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB2491683\spuninst.exe + 2011-02-11 14:43 . 2011-02-11 14:43 236544 c:\windows\$hf_mig$\KB2491683\SP3QFE\fxscover.exe + 2011-04-21 08:04 . 2010-07-05 13:21 401272 c:\windows\$hf_mig$\KB2485663\update\updspapi.dll + 2011-04-21 08:04 . 2010-07-05 13:21 765304 c:\windows\$hf_mig$\KB2485663\update\update.exe + 2011-04-21 08:04 . 2010-07-05 13:21 234872 c:\windows\$hf_mig$\KB2485663\spuninst.exe + 2011-02-10 08:49 . 2010-07-05 13:21 401272 c:\windows\$hf_mig$\KB2485376\update\updspapi.dll + 2011-02-10 08:49 . 2010-07-05 13:21 765304 c:\windows\$hf_mig$\KB2485376\update\update.exe + 2011-02-10 08:49 . 2010-07-05 13:21 234872 c:\windows\$hf_mig$\KB2485376\spuninst.exe + 2011-01-07 14:09 . 2011-01-07 14:09 290048 c:\windows\$hf_mig$\KB2485376\SP3QFE\atmfd.dll + 2011-02-10 08:48 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB2483185\update\updspapi.dll + 2011-02-10 08:48 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB2483185\update\update.exe + 2011-02-10 08:48 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB2483185\spuninst.exe + 2011-01-21 14:42 . 2011-01-21 14:42 441856 c:\windows\$hf_mig$\KB2483185\SP3QFE\shimgvw.dll + 2011-02-10 08:43 . 2010-07-05 13:21 401272 c:\windows\$hf_mig$\KB2482017-IE7\update\updspapi.dll + 2011-02-10 08:43 . 2010-07-05 13:21 765304 c:\windows\$hf_mig$\KB2482017-IE7\update\update.exe + 2011-02-10 08:43 . 2010-07-05 13:21 234872 c:\windows\$hf_mig$\KB2482017-IE7\spuninst.exe + 2010-12-20 23:14 . 2010-12-20 23:14 841216 c:\windows\$hf_mig$\KB2482017-IE7\SP3QFE\wininet.dll + 2010-12-20 23:14 . 2010-12-20 23:14 233472 c:\windows\$hf_mig$\KB2482017-IE7\SP3QFE\webcheck.dll + 2010-12-20 23:14 . 2010-12-20 23:14 105984 c:\windows\$hf_mig$\KB2482017-IE7\SP3QFE\url.dll + 2010-12-20 23:14 . 2010-12-20 23:14 102912 c:\windows\$hf_mig$\KB2482017-IE7\SP3QFE\occache.dll + 2010-12-20 23:14 . 2010-12-20 23:14 671232 c:\windows\$hf_mig$\KB2482017-IE7\SP3QFE\mstime.dll + 2010-12-20 23:14 . 2010-12-20 23:14 193024 c:\windows\$hf_mig$\KB2482017-IE7\SP3QFE\msrating.dll + 2010-12-20 23:14 . 2010-12-20 23:14 478208 c:\windows\$hf_mig$\KB2482017-IE7\SP3QFE\mshtmled.dll + 2010-12-20 23:14 . 2010-12-20 23:14 468480 c:\windows\$hf_mig$\KB2482017-IE7\SP3QFE\msfeeds.dll + 2010-12-20 10:49 . 2010-12-20 10:49 634648 c:\windows\$hf_mig$\KB2482017-IE7\SP3QFE\iexplore.exe + 2010-12-20 23:14 . 2010-12-20 23:14 268288 c:\windows\$hf_mig$\KB2482017-IE7\SP3QFE\iertutil.dll + 2010-12-20 23:14 . 2010-12-20 23:14 193024 c:\windows\$hf_mig$\KB2482017-IE7\SP3QFE\iepeers.dll + 2010-12-20 23:14 . 2010-12-20 23:14 388608 c:\windows\$hf_mig$\KB2482017-IE7\SP3QFE\iedkcs32.dll + 2010-12-20 23:14 . 2010-12-20 23:14 380928 c:\windows\$hf_mig$\KB2482017-IE7\SP3QFE\ieapfltr.dll + 2010-12-20 10:48 . 2010-12-20 10:48 161792 c:\windows\$hf_mig$\KB2482017-IE7\SP3QFE\ieakui.dll + 2010-12-20 23:14 . 2010-12-20 23:14 230400 c:\windows\$hf_mig$\KB2482017-IE7\SP3QFE\ieaksie.dll + 2010-12-20 23:14 . 2010-12-20 23:14 153088 c:\windows\$hf_mig$\KB2482017-IE7\SP3QFE\ieakeng.dll + 2010-12-20 23:14 . 2010-12-20 23:14 132608 c:\windows\$hf_mig$\KB2482017-IE7\SP3QFE\extmgr.dll + 2010-12-20 23:14 . 2010-12-20 23:14 214528 c:\windows\$hf_mig$\KB2482017-IE7\SP3QFE\dxtrans.dll + 2010-12-20 23:14 . 2010-12-20 23:14 347136 c:\windows\$hf_mig$\KB2482017-IE7\SP3QFE\dxtmsft.dll + 2010-12-20 23:14 . 2010-12-20 23:14 124928 c:\windows\$hf_mig$\KB2482017-IE7\SP3QFE\advpack.dll + 2011-03-30 10:21 . 2010-07-05 13:21 401272 c:\windows\$hf_mig$\KB2481109\update\updspapi.dll + 2011-03-30 10:21 . 2010-07-05 13:21 765304 c:\windows\$hf_mig$\KB2481109\update\update.exe + 2011-03-30 10:21 . 2010-07-05 13:21 234872 c:\windows\$hf_mig$\KB2481109\spuninst.exe + 2011-01-27 11:41 . 2011-01-27 11:41 677888 c:\windows\$hf_mig$\KB2481109\SP3QFE\lhmstsc.exe + 2011-02-02 07:57 . 2011-02-02 07:57 136192 c:\windows\$hf_mig$\KB2481109\SP3QFE\aaclient.dll + 2011-03-30 10:30 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB2479943\update\updspapi.dll + 2011-03-30 10:30 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB2479943\update\update.exe + 2011-03-30 10:30 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB2479943\spuninst.exe + 2011-02-09 13:52 . 2011-02-09 13:52 270848 c:\windows\$hf_mig$\KB2479943\SP3QFE\sbe.dll + 2011-02-09 13:52 . 2011-02-09 13:52 186880 c:\windows\$hf_mig$\KB2479943\SP3QFE\encdec.dll + 2011-02-10 08:48 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB2479628\update\updspapi.dll + 2011-02-10 08:48 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB2479628\update\update.exe + 2011-02-10 08:48 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB2479628\spuninst.exe + 2011-02-10 08:49 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB2478971\update\updspapi.dll + 2011-02-10 08:49 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB2478971\update\update.exe + 2011-02-10 08:49 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB2478971\spuninst.exe + 2010-12-22 12:32 . 2010-12-22 12:32 301568 c:\windows\$hf_mig$\KB2478971\SP3QFE\kerberos.dll + 2011-02-10 08:42 . 2010-07-05 13:21 401272 c:\windows\$hf_mig$\KB2478960\update\updspapi.dll + 2011-02-10 08:42 . 2010-07-05 13:21 765304 c:\windows\$hf_mig$\KB2478960\update\update.exe + 2011-02-10 08:42 . 2010-07-05 13:21 234872 c:\windows\$hf_mig$\KB2478960\spuninst.exe + 2010-12-20 17:24 . 2010-12-20 17:24 735232 c:\windows\$hf_mig$\KB2478960\SP3QFE\lsasrv.dll + 2011-02-10 08:42 . 2010-07-05 13:21 401272 c:\windows\$hf_mig$\KB2476687\update\updspapi.dll + 2011-02-10 08:42 . 2010-07-05 13:21 765304 c:\windows\$hf_mig$\KB2476687\update\update.exe + 2011-02-10 08:42 . 2010-07-05 13:21 234872 c:\windows\$hf_mig$\KB2476687\spuninst.exe + 2011-06-23 22:45 . 2010-07-05 13:21 401272 c:\windows\$hf_mig$\KB2476490\update\updspapi.dll + 2011-06-23 22:45 . 2010-07-05 13:21 765304 c:\windows\$hf_mig$\KB2476490\update\update.exe + 2011-06-23 22:45 . 2010-07-05 13:21 234872 c:\windows\$hf_mig$\KB2476490\spuninst.exe + 2010-12-20 17:30 . 2010-12-20 17:30 552448 c:\windows\$hf_mig$\KB2476490\SP3QFE\oleaut32.dll + 2010-12-17 00:45 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB2467659\update\updspapi.dll + 2010-12-17 00:45 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB2467659\update\update.exe + 2010-12-17 00:45 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB2467659\spuninst.exe + 2010-12-17 00:46 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB2443105\update\updspapi.dll + 2010-12-17 00:46 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB2443105\update\update.exe + 2010-12-17 00:46 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB2443105\spuninst.exe + 2010-12-17 00:46 . 2009-05-26 11:41 401272 c:\windows\$hf_mig$\KB2440591\update\updspapi.dll + 2010-12-17 00:46 . 2009-05-26 11:41 765304 c:\windows\$hf_mig$\KB2440591\update\update.exe + 2010-12-17 00:46 . 2009-05-26 11:41 234872 c:\windows\$hf_mig$\KB2440591\spuninst.exe + 2010-12-17 00:46 . 2009-05-26 11:41 401272 c:\windows\$hf_mig$\KB2436673\update\updspapi.dll + 2010-12-17 00:46 . 2009-05-26 11:41 765304 c:\windows\$hf_mig$\KB2436673\update\update.exe + 2010-12-17 00:46 . 2009-05-26 11:41 234872 c:\windows\$hf_mig$\KB2436673\spuninst.exe + 2010-12-17 00:41 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB2423089\update\updspapi.dll + 2010-12-17 00:41 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB2423089\update\update.exe + 2010-12-17 00:41 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB2423089\spuninst.exe + 2011-01-18 08:59 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB2419632\update\updspapi.dll + 2011-01-18 08:59 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB2419632\update\update.exe + 2011-01-18 08:59 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB2419632\spuninst.exe + 2010-11-09 14:51 . 2010-11-09 14:51 253952 c:\windows\$hf_mig$\KB2419632\SP3QFE\odbc32.dll + 2010-11-09 14:51 . 2010-11-09 14:51 102400 c:\windows\$hf_mig$\KB2419632\SP3QFE\msjro.dll + 2010-11-09 14:51 . 2010-11-09 14:51 200704 c:\windows\$hf_mig$\KB2419632\SP3QFE\msadox.dll + 2010-11-09 14:51 . 2010-11-09 14:51 180224 c:\windows\$hf_mig$\KB2419632\SP3QFE\msadomd.dll + 2010-11-09 14:51 . 2010-11-09 14:51 565248 c:\windows\$hf_mig$\KB2419632\SP3QFE\msado15.dll + 2010-11-09 14:51 . 2010-11-09 14:51 143360 c:\windows\$hf_mig$\KB2419632\SP3QFE\msadco.dll + 2010-12-17 00:44 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB2416400-IE7\update\updspapi.dll + 2010-12-17 00:44 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB2416400-IE7\update\update.exe + 2010-12-17 00:44 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB2416400-IE7\spuninst.exe + 2010-11-06 00:23 . 2010-11-06 00:23 841216 c:\windows\$hf_mig$\KB2416400-IE7\SP3QFE\wininet.dll + 2010-11-06 00:23 . 2010-11-06 00:23 233472 c:\windows\$hf_mig$\KB2416400-IE7\SP3QFE\webcheck.dll + 2010-11-06 00:23 . 2010-11-06 00:23 105984 c:\windows\$hf_mig$\KB2416400-IE7\SP3QFE\url.dll + 2010-11-06 00:23 . 2010-11-06 00:23 102912 c:\windows\$hf_mig$\KB2416400-IE7\SP3QFE\occache.dll + 2010-11-06 00:23 . 2010-11-06 00:23 671232 c:\windows\$hf_mig$\KB2416400-IE7\SP3QFE\mstime.dll + 2010-11-06 00:23 . 2010-11-06 00:23 193024 c:\windows\$hf_mig$\KB2416400-IE7\SP3QFE\msrating.dll + 2010-11-06 00:23 . 2010-11-06 00:23 478208 c:\windows\$hf_mig$\KB2416400-IE7\SP3QFE\mshtmled.dll + 2010-11-06 00:23 . 2010-11-06 00:23 468480 c:\windows\$hf_mig$\KB2416400-IE7\SP3QFE\msfeeds.dll + 2010-10-18 10:36 . 2010-10-18 10:36 634648 c:\windows\$hf_mig$\KB2416400-IE7\SP3QFE\iexplore.exe + 2010-11-06 00:23 . 2010-11-06 00:23 268288 c:\windows\$hf_mig$\KB2416400-IE7\SP3QFE\iertutil.dll + 2010-11-06 00:23 . 2010-11-06 00:23 193024 c:\windows\$hf_mig$\KB2416400-IE7\SP3QFE\iepeers.dll + 2010-11-06 00:23 . 2010-11-06 00:23 388608 c:\windows\$hf_mig$\KB2416400-IE7\SP3QFE\iedkcs32.dll + 2010-11-06 00:23 . 2010-11-06 00:23 380928 c:\windows\$hf_mig$\KB2416400-IE7\SP3QFE\ieapfltr.dll + 2010-10-18 10:34 . 2010-10-18 10:34 161792 c:\windows\$hf_mig$\KB2416400-IE7\SP3QFE\ieakui.dll + 2010-11-06 00:23 . 2010-11-06 00:23 230400 c:\windows\$hf_mig$\KB2416400-IE7\SP3QFE\ieaksie.dll + 2010-11-06 00:23 . 2010-11-06 00:23 153088 c:\windows\$hf_mig$\KB2416400-IE7\SP3QFE\ieakeng.dll + 2010-11-06 00:23 . 2010-11-06 00:23 132608 c:\windows\$hf_mig$\KB2416400-IE7\SP3QFE\extmgr.dll + 2010-11-06 00:23 . 2010-11-06 00:23 214528 c:\windows\$hf_mig$\KB2416400-IE7\SP3QFE\dxtrans.dll + 2010-11-06 00:23 . 2010-11-06 00:23 347136 c:\windows\$hf_mig$\KB2416400-IE7\SP3QFE\dxtmsft.dll + 2010-11-06 00:23 . 2010-11-06 00:23 124928 c:\windows\$hf_mig$\KB2416400-IE7\SP3QFE\advpack.dll + 2011-02-10 08:42 . 2010-07-05 13:21 401272 c:\windows\$hf_mig$\KB2393802\update\updspapi.dll + 2011-02-10 08:42 . 2010-07-05 13:21 765304 c:\windows\$hf_mig$\KB2393802\update\update.exe + 2011-02-10 08:42 . 2010-07-05 13:21 234872 c:\windows\$hf_mig$\KB2393802\spuninst.exe + 2011-02-10 07:18 . 2010-12-09 15:15 739328 c:\windows\$hf_mig$\KB2393802\SP3QFE\ntdll.dll + 2010-10-18 07:47 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB2387149\update\updspapi.dll + 2010-10-18 07:47 . 2010-07-05 13:21 765304 c:\windows\$hf_mig$\KB2387149\update\update.exe + 2010-10-18 07:47 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB2387149\spuninst.exe + 2010-10-18 07:14 . 2010-09-18 07:18 974848 c:\windows\$hf_mig$\KB2387149\SP3QFE\mfc42u.dll + 2010-10-18 07:14 . 2010-09-18 07:18 974848 c:\windows\$hf_mig$\KB2387149\SP3QFE\mfc42.dll + 2010-10-18 07:14 . 2010-09-18 07:18 953856 c:\windows\$hf_mig$\KB2387149\SP3QFE\mfc40u.dll + 2010-10-18 07:14 . 2010-09-18 07:18 954368 c:\windows\$hf_mig$\KB2387149\SP3QFE\mfc40.dll + 2010-10-18 07:25 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB2360937\update\updspapi.dll + 2010-10-18 07:25 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB2360937\update\update.exe + 2010-10-18 07:25 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB2360937\spuninst.exe + 2010-10-18 07:01 . 2010-08-16 08:44 590848 c:\windows\$hf_mig$\KB2360937\SP3QFE\rpcrt4.dll + 2010-10-18 07:45 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB2360131-IE7\update\updspapi.dll + 2010-10-18 07:45 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB2360131-IE7\update\update.exe + 2010-10-18 07:45 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB2360131-IE7\spuninst.exe + 2010-09-09 13:32 . 2010-09-09 13:32 841216 c:\windows\$hf_mig$\KB2360131-IE7\SP3QFE\wininet.dll + 2010-09-09 13:32 . 2010-09-09 13:32 233472 c:\windows\$hf_mig$\KB2360131-IE7\SP3QFE\webcheck.dll + 2010-09-09 13:32 . 2010-09-09 13:32 105984 c:\windows\$hf_mig$\KB2360131-IE7\SP3QFE\url.dll + 2010-09-09 13:32 . 2010-09-09 13:32 102912 c:\windows\$hf_mig$\KB2360131-IE7\SP3QFE\occache.dll + 2010-09-09 13:32 . 2010-09-09 13:32 671232 c:\windows\$hf_mig$\KB2360131-IE7\SP3QFE\mstime.dll + 2010-09-09 13:32 . 2010-09-09 13:32 193024 c:\windows\$hf_mig$\KB2360131-IE7\SP3QFE\msrating.dll + 2010-09-09 13:32 . 2010-09-09 13:32 478208 c:\windows\$hf_mig$\KB2360131-IE7\SP3QFE\mshtmled.dll + 2010-09-09 13:32 . 2010-09-09 13:32 468480 c:\windows\$hf_mig$\KB2360131-IE7\SP3QFE\msfeeds.dll + 2010-08-25 11:07 . 2010-08-25 11:07 634648 c:\windows\$hf_mig$\KB2360131-IE7\SP3QFE\iexplore.exe + 2010-09-09 13:32 . 2010-09-09 13:32 268288 c:\windows\$hf_mig$\KB2360131-IE7\SP3QFE\iertutil.dll + 2010-09-09 13:32 . 2010-09-09 13:32 193024 c:\windows\$hf_mig$\KB2360131-IE7\SP3QFE\iepeers.dll + 2010-09-09 13:32 . 2010-09-09 13:32 388608 c:\windows\$hf_mig$\KB2360131-IE7\SP3QFE\iedkcs32.dll + 2010-09-09 13:32 . 2010-09-09 13:32 380928 c:\windows\$hf_mig$\KB2360131-IE7\SP3QFE\ieapfltr.dll + 2010-08-25 11:06 . 2010-08-25 11:06 161792 c:\windows\$hf_mig$\KB2360131-IE7\SP3QFE\ieakui.dll + 2010-09-09 13:32 . 2010-09-09 13:32 230400 c:\windows\$hf_mig$\KB2360131-IE7\SP3QFE\ieaksie.dll + 2010-09-09 13:32 . 2010-09-09 13:32 153088 c:\windows\$hf_mig$\KB2360131-IE7\SP3QFE\ieakeng.dll + 2010-09-09 13:32 . 2010-09-09 13:32 132608 c:\windows\$hf_mig$\KB2360131-IE7\SP3QFE\extmgr.dll + 2010-09-09 13:32 . 2010-09-09 13:32 214528 c:\windows\$hf_mig$\KB2360131-IE7\SP3QFE\dxtrans.dll + 2010-09-09 13:32 . 2010-09-09 13:32 347136 c:\windows\$hf_mig$\KB2360131-IE7\SP3QFE\dxtmsft.dll + 2010-09-09 13:32 . 2010-09-09 13:32 124928 c:\windows\$hf_mig$\KB2360131-IE7\SP3QFE\advpack.dll + 2010-10-01 07:19 . 2009-05-26 11:41 401272 c:\windows\$hf_mig$\KB2347290\update\updspapi.dll + 2010-10-01 07:19 . 2009-05-26 11:41 765304 c:\windows\$hf_mig$\KB2347290\update\update.exe + 2010-10-01 07:19 . 2009-05-26 11:41 234872 c:\windows\$hf_mig$\KB2347290\spuninst.exe + 2010-10-18 07:46 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB2345886\update\updspapi.dll + 2010-10-18 07:46 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB2345886\update\update.exe + 2010-10-18 07:46 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB2345886\spuninst.exe + 2010-08-26 13:37 . 2010-08-26 13:37 357248 c:\windows\$hf_mig$\KB2345886\SP3QFE\srv.sys + 2010-12-17 00:46 . 2009-05-26 11:41 401272 c:\windows\$hf_mig$\KB2296199\update\updspapi.dll + 2010-12-17 00:46 . 2009-05-26 11:41 765304 c:\windows\$hf_mig$\KB2296199\update\update.exe + 2010-12-17 00:46 . 2009-05-26 11:41 234872 c:\windows\$hf_mig$\KB2296199\spuninst.exe + 2010-10-28 13:05 . 2010-10-28 13:05 290048 c:\windows\$hf_mig$\KB2296199\SP3QFE\atmfd.dll + 2010-08-09 10:56 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB2286198\update\updspapi.dll + 2010-08-09 10:56 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB2286198\update\update.exe + 2010-08-09 10:56 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB2286198\spuninst.exe + 2010-10-18 07:46 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB2279986\update\updspapi.dll + 2010-10-18 07:46 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB2279986\update\update.exe + 2010-10-18 07:46 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB2279986\spuninst.exe + 2010-09-01 11:50 . 2010-09-01 11:50 285824 c:\windows\$hf_mig$\KB2279986\SP3QFE\atmfd.dll + 2010-10-01 07:20 . 2009-05-26 09:01 401272 c:\windows\$hf_mig$\KB2259922\update\updspapi.dll + 2010-10-01 07:20 . 2009-05-26 09:01 765304 c:\windows\$hf_mig$\KB2259922\update\update.exe + 2010-10-01 07:20 . 2009-05-26 09:01 234872 c:\windows\$hf_mig$\KB2259922\spuninst.exe + 2010-07-31 07:43 . 2010-02-22 17:59 401272 c:\windows\$hf_mig$\KB2229593\update\updspapi.dll + 2010-07-31 07:43 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB2229593\update\update.exe + 2010-07-31 07:43 . 2009-05-26 11:41 234872 c:\windows\$hf_mig$\KB2229593\spuninst.exe + 2010-07-18 13:00 . 2010-06-14 14:38 744448 c:\windows\$hf_mig$\KB2229593\SP3QFE\helpsvc.exe + 2010-08-15 12:27 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB2183461-IE7\update\updspapi.dll + 2010-08-15 12:27 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB2183461-IE7\update\update.exe + 2010-08-15 12:27 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB2183461-IE7\spuninst.exe + 2010-06-24 12:19 . 2010-06-24 12:19 841216 c:\windows\$hf_mig$\KB2183461-IE7\SP3QFE\wininet.dll + 2010-06-24 12:19 . 2010-06-24 12:19 233472 c:\windows\$hf_mig$\KB2183461-IE7\SP3QFE\webcheck.dll + 2010-06-24 12:19 . 2010-06-24 12:19 105984 c:\windows\$hf_mig$\KB2183461-IE7\SP3QFE\url.dll + 2010-06-24 12:19 . 2010-06-24 12:19 102912 c:\windows\$hf_mig$\KB2183461-IE7\SP3QFE\occache.dll + 2010-06-24 12:19 . 2010-06-24 12:19 671232 c:\windows\$hf_mig$\KB2183461-IE7\SP3QFE\mstime.dll + 2010-06-24 12:19 . 2010-06-24 12:19 193024 c:\windows\$hf_mig$\KB2183461-IE7\SP3QFE\msrating.dll + 2010-06-24 12:19 . 2010-06-24 12:19 477696 c:\windows\$hf_mig$\KB2183461-IE7\SP3QFE\mshtmled.dll + 2010-06-24 12:19 . 2010-06-24 12:19 459264 c:\windows\$hf_mig$\KB2183461-IE7\SP3QFE\msfeeds.dll + 2010-06-17 14:45 . 2010-06-17 14:45 634648 c:\windows\$hf_mig$\KB2183461-IE7\SP3QFE\iexplore.exe + 2010-06-24 12:19 . 2010-06-24 12:19 268288 c:\windows\$hf_mig$\KB2183461-IE7\SP3QFE\iertutil.dll + 2010-06-24 12:19 . 2010-06-24 12:19 193024 c:\windows\$hf_mig$\KB2183461-IE7\SP3QFE\iepeers.dll + 2010-06-24 12:19 . 2010-06-24 12:19 388608 c:\windows\$hf_mig$\KB2183461-IE7\SP3QFE\iedkcs32.dll + 2010-06-24 12:19 . 2010-06-24 12:19 380928 c:\windows\$hf_mig$\KB2183461-IE7\SP3QFE\ieapfltr.dll + 2010-06-17 14:43 . 2010-06-17 14:43 161792 c:\windows\$hf_mig$\KB2183461-IE7\SP3QFE\ieakui.dll + 2010-06-24 12:19 . 2010-06-24 12:19 230400 c:\windows\$hf_mig$\KB2183461-IE7\SP3QFE\ieaksie.dll + 2010-06-24 12:19 . 2010-06-24 12:19 153088 c:\windows\$hf_mig$\KB2183461-IE7\SP3QFE\ieakeng.dll + 2010-06-24 12:19 . 2010-06-24 12:19 132608 c:\windows\$hf_mig$\KB2183461-IE7\SP3QFE\extmgr.dll + 2010-06-24 12:19 . 2010-06-24 12:19 214528 c:\windows\$hf_mig$\KB2183461-IE7\SP3QFE\dxtrans.dll + 2010-06-24 12:19 . 2010-06-24 12:19 347136 c:\windows\$hf_mig$\KB2183461-IE7\SP3QFE\dxtmsft.dll + 2010-06-24 12:19 . 2010-06-24 12:19 124928 c:\windows\$hf_mig$\KB2183461-IE7\SP3QFE\advpack.dll + 2010-08-15 12:20 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB2160329\update\updspapi.dll + 2010-08-15 12:20 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB2160329\update\update.exe + 2010-08-15 12:20 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB2160329\spuninst.exe + 2010-10-01 07:14 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB2141007\update\updspapi.dll + 2010-10-01 07:14 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB2141007\update\update.exe + 2010-10-01 07:14 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB2141007\spuninst.exe + 2010-06-09 07:42 . 2010-06-09 07:42 692736 c:\windows\$hf_mig$\KB2141007\SP3QFE\inetcomm.dll + 2010-10-01 07:19 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB2121546\update\updspapi.dll + 2010-10-01 07:19 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB2121546\update\update.exe + 2010-10-01 07:19 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB2121546\spuninst.exe + 2010-06-18 17:46 . 2010-06-18 17:46 293888 c:\windows\$hf_mig$\KB2121546\SP3QFE\winsrv.dll + 2010-08-15 12:27 . 2009-05-26 11:41 401272 c:\windows\$hf_mig$\KB2115168\update\updspapi.dll + 2010-08-15 12:27 . 2009-05-26 11:41 765304 c:\windows\$hf_mig$\KB2115168\update\update.exe + 2010-08-15 12:27 . 2009-05-26 11:41 234872 c:\windows\$hf_mig$\KB2115168\spuninst.exe + 2010-08-15 12:26 . 2009-05-26 11:41 401272 c:\windows\$hf_mig$\KB2079403\update\updspapi.dll + 2010-08-15 12:26 . 2009-05-26 11:41 765304 c:\windows\$hf_mig$\KB2079403\update\update.exe + 2010-08-15 12:26 . 2009-05-26 11:41 234872 c:\windows\$hf_mig$\KB2079403\spuninst.exe + 2011-04-21 07:09 . 2010-10-23 00:48 1748992 c:\windows\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6002.22509_x-ww_c7dad023\GdiPlus.dll + 2010-10-18 07:13 . 2010-08-23 16:13 1054208 c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll + 2011-05-13 18:04 . 2011-05-13 18:04 1093120 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_150c9e8b\mfc80u.dll + 2011-05-13 18:04 . 2011-05-13 18:04 1101824 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_150c9e8b\mfc80.dll + 2007-08-13 16:54 . 2011-08-17 21:25 1168896 c:\windows\system32\urlmon.dll + 2008-04-15 21:00 . 2011-01-21 14:44 8509440 c:\windows\system32\shell32.dll + 2011-01-21 13:17 . 2008-04-25 01:38 5824512 c:\windows\system32\ReinstallBackups\0015\DriverFiles\SynTPRes.dll + 2011-01-21 13:17 . 2008-04-25 01:32 1044480 c:\windows\system32\ReinstallBackups\0015\DriverFiles\SynTPEnh.exe + 2008-04-15 21:00 . 2010-07-16 12:01 1287680 c:\windows\system32\ole32.dll + 2008-04-15 21:00 . 2010-12-09 15:14 2153472 c:\windows\system32\ntoskrnl.exe + 2008-04-15 21:00 . 2010-12-09 15:14 2031616 c:\windows\system32\ntkrnlpa.exe - 2008-04-15 21:00 . 2009-07-31 04:35 1172480 c:\windows\system32\msxml3.dll + 2008-04-15 21:00 . 2010-06-14 07:43 1172480 c:\windows\system32\msxml3.dll + 2008-04-15 21:00 . 2011-02-02 07:58 2067456 c:\windows\system32\mstscax.dll + 2007-08-13 16:54 . 2011-09-05 07:45 3615744 c:\windows\system32\mshtml.dll + 2007-08-13 16:54 . 2011-08-17 21:25 6076416 c:\windows\system32\ieframe.dll + 2011-07-07 01:28 . 2011-07-07 01:28 1193320 c:\windows\system32\FM20.DLL + 2008-04-15 21:00 . 2011-09-06 14:09 1859072 c:\windows\system32\dllcache\win32k.sys + 2007-08-13 16:54 . 2011-08-17 21:25 1168896 c:\windows\system32\dllcache\urlmon.dll + 2008-04-15 21:00 . 2011-01-21 14:44 8509440 c:\windows\system32\dllcache\shell32.dll + 2008-04-15 21:00 . 2010-07-16 12:01 1287680 c:\windows\system32\dllcache\ole32.dll + 2009-08-04 21:59 . 2010-12-09 15:14 2197120 c:\windows\system32\dllcache\ntoskrnl.exe + 2009-11-13 09:45 . 2010-12-09 15:14 2031616 c:\windows\system32\dllcache\ntkrpamp.exe + 2009-11-13 09:45 . 2010-12-09 15:14 2073728 c:\windows\system32\dllcache\ntkrnlpa.exe + 2009-11-13 09:45 . 2010-12-09 15:14 2153472 c:\windows\system32\dllcache\ntkrnlmp.exe - 2008-04-15 21:00 . 2009-07-31 04:35 1172480 c:\windows\system32\dllcache\msxml3.dll + 2008-04-15 21:00 . 2010-06-14 07:43 1172480 c:\windows\system32\dllcache\msxml3.dll + 2007-08-13 16:54 . 2011-09-05 07:45 3615744 c:\windows\system32\dllcache\mshtml.dll - 2008-04-15 21:00 . 2009-10-23 15:28 3558912 c:\windows\system32\dllcache\moviemk.exe + 2008-04-15 21:00 . 2010-06-18 13:36 3558912 c:\windows\system32\dllcache\moviemk.exe + 2008-04-15 21:00 . 2011-02-02 07:58 2067456 c:\windows\system32\dllcache\lhmstscx.dll + 2009-08-29 07:32 . 2011-08-17 21:25 6076416 c:\windows\system32\dllcache\ieframe.dll + 2009-11-06 23:06 . 2009-11-06 23:06 1130824 c:\windows\system32\dfshim.dll - 2008-07-25 10:17 . 2008-07-25 10:17 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll + 2011-03-25 04:15 . 2011-03-25 04:15 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll + 2010-09-22 07:44 . 2010-09-22 07:44 5242880 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll - 2010-03-23 03:32 . 2010-03-23 03:32 5242880 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll - 2010-03-23 03:32 . 2010-03-23 03:32 3182592 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll + 2011-04-28 19:50 . 2011-04-28 19:50 3182592 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll + 2011-07-07 03:18 . 2011-07-07 03:18 5912400 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll + 2011-07-07 03:18 . 2011-07-07 03:18 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll - 2010-04-01 09:42 . 2010-04-01 09:42 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll + 2011-07-08 11:59 . 2011-07-08 11:59 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll - 2010-04-01 09:42 . 2010-04-01 09:42 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll + 2011-07-08 11:59 . 2011-07-08 11:59 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll - 2010-03-31 12:50 . 2010-03-31 12:50 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll + 2011-07-07 10:02 . 2011-07-07 10:02 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll - 2010-03-31 12:50 . 2010-03-31 12:50 2527232 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll + 2011-07-07 10:02 . 2011-07-07 10:02 2527232 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll - 2010-04-01 09:42 . 2010-04-01 09:42 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll + 2011-07-08 11:59 . 2011-07-08 11:59 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll + 2011-05-01 22:06 . 2011-05-01 22:06 2705920 c:\windows\Installer\da78da.msp + 2011-06-24 09:26 . 2011-06-24 09:26 3940864 c:\windows\Installer\7c6c74.msi + 2010-10-07 17:43 . 2010-10-07 17:43 1980416 c:\windows\Installer\6b326.msp + 2010-09-17 05:04 . 2010-09-17 05:04 9401856 c:\windows\Installer\6b315.msp + 2010-07-10 18:14 . 2010-07-10 18:14 2850816 c:\windows\Installer\4b89f5.msp + 2009-11-08 22:25 . 2009-11-08 22:25 1935360 c:\windows\Installer\45266b.msp + 2011-03-17 18:01 . 2011-03-17 18:01 9563648 c:\windows\Installer\2d70f.msp + 2011-01-11 15:50 . 2011-01-11 15:50 8177152 c:\windows\Installer\2d6fe.msp + 2010-11-20 21:33 . 2010-11-20 21:33 1980928 c:\windows\Installer\2d6ed.msp + 2011-09-15 17:40 . 2011-09-15 17:40 4760064 c:\windows\Installer\2d2587.msp + 2011-09-15 17:40 . 2011-09-15 17:40 7959552 c:\windows\Installer\2d2581.msp + 2011-04-29 10:28 . 2011-04-29 10:28 1995264 c:\windows\Installer\25a88.msp + 2011-04-29 10:33 . 2011-04-29 10:33 8173568 c:\windows\Installer\25a6d.msp + 2011-01-18 21:36 . 2011-01-18 21:36 2687488 c:\windows\Installer\25a5c.msp + 2011-04-29 10:31 . 2011-04-29 10:31 9006080 c:\windows\Installer\2186c2.msp + 2011-09-07 23:36 . 2011-09-07 23:36 6069248 c:\windows\Installer\215846.msp + 2011-04-29 10:27 . 2011-04-29 10:27 4158464 c:\windows\Installer\1de3bb.msp + 2010-08-13 16:01 . 2010-08-13 16:01 8993280 c:\windows\Installer\1d17cd.msp + 2010-08-13 15:59 . 2010-08-13 15:59 8182272 c:\windows\Installer\1d17bc.msp + 2010-08-13 16:02 . 2010-08-13 16:02 2545664 c:\windows\Installer\1d17ab.msp + 2010-08-13 16:00 . 2010-08-13 16:00 9404928 c:\windows\Installer\1d1793.msp + 2010-09-23 05:39 . 2010-09-23 05:39 4265472 c:\windows\Installer\1d1781.msp + 2011-01-11 15:49 . 2011-01-11 15:49 9003008 c:\windows\Installer\13b65a.msp + 2010-11-20 21:32 . 2010-11-20 21:32 4165120 c:\windows\Installer\13b63f.msp + 2011-08-10 15:43 . 2011-08-10 15:43 3795968 c:\windows\Installer\115249b.msp + 2011-09-06 19:46 . 2011-09-06 19:46 9006080 c:\windows\Installer\115248a.msp + 2011-08-10 15:42 . 2011-08-10 15:42 7070208 c:\windows\Installer\1152479.msp + 2011-07-21 10:34 . 2011-07-21 10:34 3456000 c:\windows\Installer\1152469.msp + 2011-09-06 19:48 . 2011-09-06 19:48 8181248 c:\windows\Installer\115245e.msp + 2011-07-27 05:39 . 2011-07-27 05:39 9892352 c:\windows\Installer\115244d.msp - 2008-08-21 20:42 . 2010-06-19 10:50 1172240 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\xlicons.exe + 2008-08-21 20:42 . 2011-10-30 11:09 1172240 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\xlicons.exe + 2010-09-22 16:05 . 2010-09-22 16:05 2405784 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\rt3d.dll + 2010-09-16 01:08 . 2010-09-16 01:08 6210560 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\authplay.dll + 2010-06-19 15:51 . 2010-06-19 15:51 5713920 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\AGM.dll + 2011-01-14 05:10 . 2011-01-14 05:10 2395008 c:\windows\Installer\$PatchCache$\Managed\00004109500200000000000000F01FEC\14.0.5130\GKWORD.DLL + 2011-01-14 05:10 . 2011-01-14 05:10 2180992 c:\windows\Installer\$PatchCache$\Managed\00004109500200000000000000F01FEC\14.0.5130\GKPOWERPOINT.DLL + 2011-01-14 05:10 . 2011-01-14 05:10 3443072 c:\windows\Installer\$PatchCache$\Managed\00004109500200000000000000F01FEC\14.0.5130\GKEXCEL.DLL + 2009-10-09 21:10 . 2009-10-09 21:10 2594632 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.6612\VBE6.DLL + 2006-10-26 18:25 . 2006-10-26 18:25 2172688 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\PSRCHFEA.DLL + 2011-10-29 14:10 . 2011-06-21 18:37 1168896 c:\windows\ie7updates\KB2586448-IE7\urlmon.dll + 2011-10-29 14:10 . 2011-07-22 16:30 3613696 c:\windows\ie7updates\KB2586448-IE7\mshtml.dll + 2011-10-29 14:10 . 2011-06-21 18:37 6076416 c:\windows\ie7updates\KB2586448-IE7\ieframe.dll + 2011-08-12 14:58 . 2011-04-25 15:44 1168896 c:\windows\ie7updates\KB2559049-IE7\urlmon.dll + 2011-08-12 14:58 . 2011-04-25 15:44 3608576 c:\windows\ie7updates\KB2559049-IE7\mshtml.dll + 2011-08-12 14:58 . 2011-04-25 15:44 6076416 c:\windows\ie7updates\KB2559049-IE7\ieframe.dll + 2011-06-23 23:10 . 2011-02-17 18:55 1168384 c:\windows\ie7updates\KB2530548-IE7\urlmon.dll + 2011-06-23 23:10 . 2011-02-17 18:55 3607040 c:\windows\ie7updates\KB2530548-IE7\mshtml.dll + 2011-06-23 23:10 . 2011-02-17 18:55 6075904 c:\windows\ie7updates\KB2530548-IE7\ieframe.dll + 2011-04-21 08:02 . 2010-12-20 23:06 1168384 c:\windows\ie7updates\KB2497640-IE7\urlmon.dll + 2011-04-21 08:02 . 2010-12-20 23:06 3606528 c:\windows\ie7updates\KB2497640-IE7\mshtml.dll + 2011-04-21 08:02 . 2010-12-20 23:06 6075904 c:\windows\ie7updates\KB2497640-IE7\ieframe.dll + 2011-02-10 08:43 . 2010-11-06 00:25 1168384 c:\windows\ie7updates\KB2482017-IE7\urlmon.dll + 2011-02-10 08:43 . 2010-11-06 00:25 3604480 c:\windows\ie7updates\KB2482017-IE7\mshtml.dll + 2011-02-10 08:43 . 2010-11-06 00:25 6075904 c:\windows\ie7updates\KB2482017-IE7\ieframe.dll + 2010-12-17 00:44 . 2010-09-09 13:35 1168384 c:\windows\ie7updates\KB2416400-IE7\urlmon.dll + 2010-12-17 00:44 . 2010-09-09 13:35 3601920 c:\windows\ie7updates\KB2416400-IE7\mshtml.dll + 2010-12-17 00:44 . 2010-09-09 13:35 6075904 c:\windows\ie7updates\KB2416400-IE7\ieframe.dll + 2010-10-18 07:45 . 2010-06-24 12:19 1168384 c:\windows\ie7updates\KB2360131-IE7\urlmon.dll + 2010-10-18 07:45 . 2010-06-24 12:19 3600896 c:\windows\ie7updates\KB2360131-IE7\mshtml.dll + 2010-10-18 07:45 . 2010-06-24 12:19 6067200 c:\windows\ie7updates\KB2360131-IE7\ieframe.dll + 2010-08-15 12:27 . 2010-05-04 17:21 1168384 c:\windows\ie7updates\KB2183461-IE7\urlmon.dll + 2010-08-15 12:27 . 2010-05-04 17:21 3600384 c:\windows\ie7updates\KB2183461-IE7\mshtml.dll + 2010-08-15 12:27 . 2010-05-04 17:21 6067200 c:\windows\ie7updates\KB2183461-IE7\ieframe.dll + 2011-08-04 19:24 . 2011-08-04 19:24 3126944 c:\windows\Downloaded Program Files\FP_AX_CAB_INSTALLER.exe + 2011-10-29 14:09 . 2011-10-29 14:09 1966080 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_1a60bf69\System.dll + 2011-10-29 14:10 . 2011-10-29 14:10 4792320 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_0d2380b5\System.dll + 2011-10-29 14:09 . 2011-10-29 14:09 2088960 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_deb61e36\System.Xml.dll + 2011-10-29 14:10 . 2011-10-29 14:10 5513216 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_7ff05dba\System.Xml.dll + 2011-10-29 14:09 . 2011-10-29 14:09 3018752 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_c79b1455\System.Windows.Forms.dll + 2011-10-29 14:10 . 2011-10-29 14:10 7884800 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_401b55f1\System.Windows.Forms.dll + 2011-10-29 14:10 . 2011-10-29 14:10 2244608 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_30946f11\System.Drawing.dll + 2011-10-29 14:10 . 2011-10-29 14:10 3395584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_c4c5bdc6\System.Design.dll + 2011-10-29 14:09 . 2011-10-29 14:09 1470464 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_7877c979\System.Design.dll + 2011-10-29 14:09 . 2011-10-29 14:09 3391488 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_79027220\mscorlib.dll + 2011-10-29 14:10 . 2011-10-29 14:10 8908800 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_54708185\mscorlib.dll + 2011-10-29 14:20 . 2011-10-29 14:20 3325440 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\1adc4ae51a5ac63e896a1402749ca495\WindowsBase.ni.dll + 2011-10-30 10:21 . 2011-10-30 10:21 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\55d4813580b1e5d268ff0564942cee9c\UIAutomationClientsideProviders.ni.dll + 2010-10-18 09:29 . 2010-10-18 09:29 4312064 c:\windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPF8.tmp\System.Workflow.ComponentModel.dll + 2011-10-29 14:20 . 2011-10-29 14:20 7950848 c:\windows\assembly\NativeImages_v2.0.50727_32\System\af39f6e644af02873b9bae319f2bfb13\System.ni.dll + 2011-10-30 10:21 . 2011-10-30 10:21 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\70cacc44f0b4257f6037eda7a59a0aeb\System.Xml.ni.dll + 2011-10-30 10:20 . 2011-10-30 10:20 1917952 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\10d7daa3d1e62a0e40587cdc707be93f\System.Speech.ni.dll + 2011-10-30 11:33 . 2011-10-30 11:33 2345472 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\afd6134c090faf8c29cd64d4835142b2\System.Runtime.Serialization.ni.dll + 2011-10-30 10:20 . 2011-10-30 10:20 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\0f8e14bfdb27645fb1a92ce26f9bf521\System.Printing.ni.dll + 2011-10-30 11:33 . 2011-10-30 11:33 1070080 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\d14065ede44df8e9b5d6b60c5ddccc69\System.IdentityModel.ni.dll + 2011-10-30 10:20 . 2011-10-30 10:20 1587200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\c10bea3c4bb7ef654651141bf9419090\System.Drawing.ni.dll + 2011-10-30 10:19 . 2011-10-30 10:19 6616576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\ec323cf1df697cc0a45f67de685db90c\System.Data.ni.dll + 2011-10-30 10:19 . 2011-10-30 10:19 2516480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\d96a94076acb8e0c5a96a1b2de4b3a7a\System.Data.Linq.ni.dll + 2011-10-30 10:19 . 2011-10-30 10:19 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\d507b9e0e50e453793ee5e01c07a5485\System.Core.ni.dll + 2011-10-30 10:19 . 2011-10-30 10:19 2128896 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\714e9504255565bd9076fe13628e104a\ReachFramework.ni.dll + 2011-10-30 10:18 . 2011-10-30 10:18 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\7dc6ee14234b0686182ced75f7dae990\PresentationUI.ni.dll + 2011-10-29 14:20 . 2011-10-29 14:20 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\b42ad515bb20ec1f1250c040371c6730\PresentationBuildTasks.ni.dll + 2010-06-24 10:50 . 2010-06-24 10:50 1249280 c:\windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll - 2010-06-19 10:41 . 2010-06-19 10:41 3182592 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll + 2011-10-29 14:18 . 2011-10-29 14:18 3182592 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll - 2010-06-19 10:41 . 2010-06-19 10:41 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll + 2011-10-29 14:18 . 2011-10-29 14:18 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll - 2010-06-19 10:40 . 2010-06-19 10:40 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll + 2011-10-29 14:17 . 2011-10-29 14:17 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll - 2009-11-14 10:16 . 2009-11-14 10:16 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll + 2010-10-18 07:42 . 2010-10-18 07:42 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll + 2011-10-29 14:17 . 2011-10-29 14:17 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll - 2010-06-19 10:40 . 2010-06-19 10:40 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll + 2010-06-24 10:50 . 2010-06-24 10:50 5279744 c:\windows\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll - 2010-06-19 10:40 . 2010-06-19 10:40 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll + 2011-10-29 14:17 . 2011-10-29 14:17 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll + 2011-10-29 14:18 . 2011-10-29 14:18 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll - 2010-06-19 10:41 . 2010-06-19 10:41 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll + 2010-06-24 10:50 . 2010-06-24 10:50 4210688 c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll - 2009-11-14 10:08 . 2009-11-14 10:08 4210688 c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll + 2011-10-29 14:17 . 2011-10-29 14:17 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll - 2010-06-19 10:52 . 2010-06-19 10:52 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll + 2011-10-29 14:08 . 2011-10-29 14:08 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll - 2010-06-19 10:52 . 2010-06-19 10:52 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll + 2011-10-29 14:08 . 2011-10-29 14:08 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll + 2011-10-30 11:08 . 2011-10-30 11:08 1279864 c:\windows\assembly\GAC\Microsoft.Office.Interop.Excel\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Excel.dll + 2010-08-15 12:17 . 2009-10-23 15:28 3558912 c:\windows\$NtUninstallKB981997$\moviemk.exe + 2010-10-18 07:27 . 2010-06-24 09:02 1852032 c:\windows\$NtUninstallKB981957$\win32k.sys + 2010-08-15 12:26 . 2010-02-16 19:09 2150912 c:\windows\$NtUninstallKB981852$\ntoskrnl.exe + 2010-08-15 12:26 . 2010-02-16 19:09 2029056 c:\windows\$NtUninstallKB981852$\ntkrpamp.exe + 2010-08-15 12:26 . 2010-02-16 19:09 2029056 c:\windows\$NtUninstallKB981852$\ntkrnlpa.exe + 2010-08-15 12:26 . 2010-02-16 19:09 2150912 c:\windows\$NtUninstallKB981852$\ntkrnlmp.exe + 2010-10-18 07:41 . 2008-04-15 21:00 1287168 c:\windows\$NtUninstallKB979687$\ole32.dll + 2011-07-22 01:32 . 2011-03-03 13:53 1858048 c:\windows\$NtUninstallKB2555917$\win32k.sys + 2011-05-11 05:54 . 2010-12-31 14:04 1855104 c:\windows\$NtUninstallKB2506223$\win32k.sys + 2011-02-10 08:48 . 2010-07-27 06:30 8509440 c:\windows\$NtUninstallKB2483185$\shell32.dll + 2011-03-30 10:21 . 2009-06-10 08:22 2066432 c:\windows\$NtUninstallKB2481109$\mstscax.dll + 2011-03-30 10:21 . 2008-04-15 21:00 2061824 c:\windows\$NtUninstallKB2481109$\lhmstscx.dll + 2011-02-10 08:48 . 2010-10-26 14:00 1853440 c:\windows\$NtUninstallKB2479628$\win32k.sys + 2010-12-17 00:46 . 2010-09-01 07:57 1852928 c:\windows\$NtUninstallKB2436673$\win32k.sys + 2011-02-10 08:42 . 2010-04-28 05:45 2150912 c:\windows\$NtUninstallKB2393802$\ntoskrnl.exe + 2011-02-10 08:42 . 2010-04-28 05:45 2029056 c:\windows\$NtUninstallKB2393802$\ntkrpamp.exe + 2011-02-10 08:42 . 2010-04-28 05:45 2029056 c:\windows\$NtUninstallKB2393802$\ntkrnlpa.exe + 2011-02-10 08:42 . 2010-04-28 05:45 2150912 c:\windows\$NtUninstallKB2393802$\ntkrnlmp.exe + 2010-10-18 07:47 . 2008-04-15 21:00 1028096 c:\windows\$NtUninstallKB2387149$\mfc42.dll + 2010-08-09 10:56 . 2008-06-17 19:03 8508416 c:\windows\$NtUninstallKB2286198$\shell32.dll + 2010-08-15 12:20 . 2010-05-02 08:10 1851392 c:\windows\$NtUninstallKB2160329$\win32k.sys + 2010-08-15 12:26 . 2009-07-31 04:35 1172480 c:\windows\$NtUninstallKB2079403$\msxml3.dll + 2010-08-15 11:24 . 2010-06-18 13:43 3558912 c:\windows\$hf_mig$\KB981997\SP3QFE\moviemk.exe + 2010-09-01 07:57 . 2010-09-01 07:57 1862016 c:\windows\$hf_mig$\KB981957\SP3QFE\win32k.sys + 2010-08-15 11:30 . 2010-04-28 05:20 2194432 c:\windows\$hf_mig$\KB981852\SP3QFE\ntoskrnl.exe + 2010-08-15 11:30 . 2010-04-28 05:20 2029056 c:\windows\$hf_mig$\KB981852\SP3QFE\ntkrpamp.exe + 2010-04-28 21:20 . 2010-04-28 21:20 2071296 c:\windows\$hf_mig$\KB981852\SP3QFE\ntkrnlpa.exe + 2010-08-15 11:30 . 2010-04-28 05:20 2150912 c:\windows\$hf_mig$\KB981852\SP3QFE\ntkrnlmp.exe + 2010-07-16 11:59 . 2010-07-16 11:59 1288704 c:\windows\$hf_mig$\KB979687\SP3QFE\ole32.dll + 2009-07-27 22:23 . 2009-07-27 22:23 8509952 c:\windows\$hf_mig$\KB971029\SP3QFE\shell32.dll + 2011-06-21 18:36 . 2011-06-21 18:36 1172992 c:\windows\$hf_mig$\KB2559049-IE7\SP3QFE\urlmon.dll + 2011-07-22 16:28 . 2011-07-22 16:28 3615744 c:\windows\$hf_mig$\KB2559049-IE7\SP3QFE\mshtml.dll + 2011-06-21 18:36 . 2011-06-21 18:36 6081024 c:\windows\$hf_mig$\KB2559049-IE7\SP3QFE\ieframe.dll + 2011-08-12 13:40 . 2009-06-29 08:33 2452872 c:\windows\$hf_mig$\KB2559049-IE7\SP3QFE\ieapfltr.dat + 2011-06-06 11:36 . 2011-06-06 11:36 1868032 c:\windows\$hf_mig$\KB2555917\SP3QFE\win32k.sys + 2011-04-25 15:40 . 2011-04-25 15:40 1172480 c:\windows\$hf_mig$\KB2530548-IE7\SP3QFE\urlmon.dll + 2011-04-25 15:40 . 2011-04-25 15:40 3610624 c:\windows\$hf_mig$\KB2530548-IE7\SP3QFE\mshtml.dll + 2011-04-25 15:40 . 2011-04-25 15:40 6081024 c:\windows\$hf_mig$\KB2530548-IE7\SP3QFE\ieframe.dll + 2011-06-22 10:26 . 2009-06-29 08:33 2452872 c:\windows\$hf_mig$\KB2530548-IE7\SP3QFE\ieapfltr.dat + 2011-03-03 13:52 . 2011-03-03 13:52 1867008 c:\windows\$hf_mig$\KB2506223\SP3QFE\win32k.sys + 2011-02-17 18:55 . 2011-02-17 18:55 1172480 c:\windows\$hf_mig$\KB2497640-IE7\SP3QFE\urlmon.dll + 2011-02-17 18:55 . 2011-02-17 18:55 3609600 c:\windows\$hf_mig$\KB2497640-IE7\SP3QFE\mshtml.dll + 2011-02-17 18:55 . 2011-02-17 18:55 6080000 c:\windows\$hf_mig$\KB2497640-IE7\SP3QFE\ieframe.dll + 2011-04-21 07:30 . 2009-06-29 08:33 2452872 c:\windows\$hf_mig$\KB2497640-IE7\SP3QFE\ieapfltr.dat + 2011-01-21 14:42 . 2011-01-21 14:42 8510464 c:\windows\$hf_mig$\KB2483185\SP3QFE\shell32.dll + 2010-12-20 23:14 . 2010-12-20 23:14 1171968 c:\windows\$hf_mig$\KB2482017-IE7\SP3QFE\urlmon.dll + 2010-12-20 23:14 . 2010-12-20 23:14 3609088 c:\windows\$hf_mig$\KB2482017-IE7\SP3QFE\mshtml.dll + 2010-12-20 23:14 . 2010-12-20 23:14 6080000 c:\windows\$hf_mig$\KB2482017-IE7\SP3QFE\ieframe.dll + 2011-02-10 07:19 . 2009-06-29 08:33 2452872 c:\windows\$hf_mig$\KB2482017-IE7\SP3QFE\ieapfltr.dat + 2011-02-02 07:57 . 2011-02-02 07:57 2069504 c:\windows\$hf_mig$\KB2481109\SP3QFE\lhmstscx.dll + 2010-12-31 14:02 . 2010-12-31 14:02 1864192 c:\windows\$hf_mig$\KB2479628\SP3QFE\win32k.sys + 2010-10-26 14:05 . 2010-10-26 14:05 1862400 c:\windows\$hf_mig$\KB2436673\SP3QFE\win32k.sys + 2010-11-06 00:23 . 2010-11-06 00:23 1171968 c:\windows\$hf_mig$\KB2416400-IE7\SP3QFE\urlmon.dll + 2010-11-06 00:23 . 2010-11-06 00:23 3607040 c:\windows\$hf_mig$\KB2416400-IE7\SP3QFE\mshtml.dll + 2010-11-06 00:23 . 2010-11-06 00:23 6080000 c:\windows\$hf_mig$\KB2416400-IE7\SP3QFE\ieframe.dll + 2010-12-16 19:46 . 2009-06-29 08:33 2452872 c:\windows\$hf_mig$\KB2416400-IE7\SP3QFE\ieapfltr.dat + 2011-02-10 07:18 . 2010-12-09 15:14 2197120 c:\windows\$hf_mig$\KB2393802\SP3QFE\ntoskrnl.exe + 2011-02-10 07:18 . 2010-12-09 15:14 2031616 c:\windows\$hf_mig$\KB2393802\SP3QFE\ntkrpamp.exe + 2010-12-09 19:44 . 2010-12-09 19:44 2073728 c:\windows\$hf_mig$\KB2393802\SP3QFE\ntkrnlpa.exe + 2011-02-10 07:18 . 2010-12-09 15:14 2153472 c:\windows\$hf_mig$\KB2393802\SP3QFE\ntkrnlmp.exe + 2010-09-09 13:32 . 2010-09-09 13:32 1171968 c:\windows\$hf_mig$\KB2360131-IE7\SP3QFE\urlmon.dll + 2010-09-09 13:32 . 2010-09-09 13:32 3605504 c:\windows\$hf_mig$\KB2360131-IE7\SP3QFE\mshtml.dll + 2010-09-09 13:32 . 2010-09-09 13:32 6080000 c:\windows\$hf_mig$\KB2360131-IE7\SP3QFE\ieframe.dll + 2010-10-18 07:18 . 2009-06-29 08:33 2452872 c:\windows\$hf_mig$\KB2360131-IE7\SP3QFE\ieapfltr.dat + 2010-07-27 06:29 . 2010-07-27 06:29 8510464 c:\windows\$hf_mig$\KB2286198\SP3QFE\shell32.dll + 2010-06-24 12:19 . 2010-06-24 12:19 1171968 c:\windows\$hf_mig$\KB2183461-IE7\SP3QFE\urlmon.dll + 2010-06-24 12:19 . 2010-06-24 12:19 3603968 c:\windows\$hf_mig$\KB2183461-IE7\SP3QFE\mshtml.dll + 2010-06-24 12:19 . 2010-06-24 12:19 6071296 c:\windows\$hf_mig$\KB2183461-IE7\SP3QFE\ieframe.dll + 2010-08-15 11:31 . 2009-06-29 08:33 2452872 c:\windows\$hf_mig$\KB2183461-IE7\SP3QFE\ieapfltr.dat + 2010-06-24 21:30 . 2010-06-24 21:30 1861248 c:\windows\$hf_mig$\KB2160329\SP3QFE\win32k.sys + 2010-06-14 07:40 . 2010-06-14 07:40 1172480 c:\windows\$hf_mig$\KB2079403\SP3QFE\msxml3.dll + 2008-04-15 21:00 . 2010-08-25 21:36 10841088 c:\windows\system32\wmp.dll - 2008-04-15 21:00 . 2009-07-13 22:43 10841088 c:\windows\system32\wmp.dll + 2009-11-14 09:24 . 2011-10-29 14:11 48324552 c:\windows\system32\MRT.exe + 2008-04-15 21:00 . 2010-08-25 21:36 10841088 c:\windows\system32\dllcache\wmp.dll - 2008-04-15 21:00 . 2009-07-13 22:43 10841088 c:\windows\system32\dllcache\wmp.dll + 2011-07-12 20:49 . 2011-07-12 20:49 11459584 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\M2572067\M2572067Uninstall.msp + 2011-01-31 10:45 . 2011-01-31 10:45 11135488 c:\windows\Installer\7c6d1d.msp + 2011-06-08 04:39 . 2011-06-08 04:39 19798016 c:\windows\Installer\7c6d1c.msp + 2011-01-06 13:04 . 2011-01-06 13:04 20304384 c:\windows\Installer\6fff7.msp + 2010-05-19 11:08 . 2010-05-19 11:08 11408896 c:\windows\Installer\4b89ff.msp + 2010-07-10 18:06 . 2010-07-10 18:06 10120192 c:\windows\Installer\4b89e4.msp + 2010-03-30 23:23 . 2010-03-30 23:23 15638528 c:\windows\Installer\452677.msp + 2011-10-29 14:19 . 2011-10-29 14:19 20333568 c:\windows\Installer\439649.msp + 2011-07-11 18:43 . 2011-07-11 18:43 11641344 c:\windows\Installer\43963e.msp + 2011-07-12 13:50 . 2011-07-12 13:50 17555968 c:\windows\Installer\439635.msp + 2010-10-01 07:17 . 2010-10-01 07:17 20303872 c:\windows\Installer\30dc84.msp + 2011-09-15 17:38 . 2011-09-15 17:38 10838528 c:\windows\Installer\2d2578.msp + 2011-09-15 17:37 . 2011-09-15 17:37 14140416 c:\windows\Installer\2d256e.msp + 2011-09-15 17:42 . 2011-09-15 17:42 38326272 c:\windows\Installer\2d242e.msp + 2011-09-15 17:42 . 2011-09-15 17:42 14895104 c:\windows\Installer\2d2421.msp + 2011-06-23 22:45 . 2011-06-23 22:45 20333056 c:\windows\Installer\25a78.msp + 2011-03-22 07:40 . 2011-03-22 07:40 20308992 c:\windows\Installer\25708.msp + 2011-03-28 01:27 . 2011-03-28 01:27 15456256 c:\windows\Installer\2186ce.msp + 2010-09-24 05:08 . 2010-09-24 05:08 17518080 c:\windows\Installer\1d1778.msp + 2011-04-21 08:04 . 2011-04-21 08:04 20314624 c:\windows\Installer\13b64a.msp + 2011-02-11 18:47 . 2011-02-11 18:47 12028928 c:\windows\Installer\13b62d.msp + 2010-09-23 01:03 . 2010-09-23 01:03 20460984 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\AcroRd32.dll + 2011-10-30 10:20 . 2011-10-30 10:20 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\71a2ae9ad561a62181cbd9fb11e9de7a\System.Windows.Forms.ni.dll + 2011-10-30 10:20 . 2011-10-30 10:20 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\c6374d32e4af7b7e3e46b32176f76558\System.Design.ni.dll + 2011-10-30 10:18 . 2011-10-30 10:18 14328320 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\054488924fcc579cce9fa0209dafe28b\PresentationFramework.ni.dll + 2011-10-30 10:16 . 2011-10-30 10:16 12215808 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\b2f0318713eca304eaa9d86fc17edb96\PresentationCore.ni.dll + 2011-10-29 14:19 . 2011-10-29 14:19 11490816 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\ca87ba84221991839abbe7d4bc9c6721\mscorlib.ni.dll + 2010-10-18 07:44 . 2009-07-13 22:43 10841088 c:\windows\$NtUninstallKB2378111_WM9$\wmp.dll + 2011-09-15 17:34 . 2011-09-15 17:34 428804608 c:\windows\Installer\2d2563.msp . -- Snapshot teruggezet naar huidige datum -- . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-11-09 68856] "msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2010-04-16 3872080] "SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480] "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-15 15360] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "LaunchApp"="Alaunch" [X] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-02-28 141848] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-02-28 166424] "Persistence"="c:\windows\system32\igfxpers.exe" [2008-02-28 137752] "RTHDCPL"="RTHDCPL.EXE" [2008-05-16 16862720] "AzMixerSel"="c:\program files\Realtek\Audio\InstallShield\AzMixerSel.exe" [2006-07-17 53248] "IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2008-04-15 208952] "MSPY2002"="c:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2008-04-15 59392] "PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2008-04-15 455168] "PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2008-04-15 455168] "LManager"="c:\progra~1\LAUNCH~1\QtZgAcer.EXE" [2008-05-14 821768] "Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2010-08-23 30192] "eRecoveryService"="c:\acer\Empowering Technology\eRecovery\eRAgent.exe" [2008-05-22 425984] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-09-07 37296] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] "AvgUninstallURL"="start Uninstallation survey | AVG Nederland" [?] . [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-15 15360] . c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\ InterVideo WinCinema Manager.lnk - c:\program files\InterVideo\Common\Bin\WinCinemaMgr.exe [2008-6-4 114688] . [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"= "c:\\Program Files\\Messenger\\msmsgs.exe"= "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= "c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"= . R3 M3000Srv;Acer Crystal Eye webcam Driver;c:\windows\system32\drivers\M3000KNT.sys [5/05/2008 17:01 254976] S2 gupdate;Google Updateservice (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2/02/2010 9:12 135664] S3 GoogleDesktopManager-051210-111108;Google Desktop Manager 5.9.1005.12335;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [9/11/2009 16:27 30192] S3 gupdatem;Google Update-service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2/02/2010 9:12 135664] S3 hwusbdev;Huawei DataCard USB PNP Device;c:\windows\system32\drivers\ewusbdev.sys [21/01/2011 14:29 100736] S3 JMCR;JMCR;c:\windows\system32\drivers\jmcr.sys [9/11/2009 16:55 96856] . Inhoud van de 'Gedeelde Taken' map . 2011-10-30 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-02-02 08:11] . 2011-10-29 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-02-02 08:11] . . ------- Bijkomende Scan ------- . uStart Page = hxxp://www.google.com/ mStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0413&s=0&o=xph&d=1109&m=aoa150 uInternet Connection Wizard,ShellNext = iexplore IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000 IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html IE: Verzenden naar &Bluetooth-apparaat... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm TCP: Interfaces\{20DECBF1-1328-4324-8D13-5EDD85164977}: NameServer = 212.224.255.252 212.65.63.217 . - - - - ORPHANS VERWIJDERD - - - - . Toolbar-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file) WebBrowser-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file) WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file) . . . ************************************************************************** . catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover Rootkit scan 2011-10-30 12:36 Windows 5.1.2600 Service Pack 3 NTFS . scannen van verborgen processen ... . scannen van verborgen autostart items ... . scannen van verborgen bestanden ... . Scan succesvol afgerond verborgen bestanden: 0 . ************************************************************************** . --------------------- DLLs Geladen Onder Lopende Processen --------------------- . - - - - - - - > 'explorer.exe'(2612) c:\windows\system32\WPDShServiceObj.dll c:\windows\system32\btncopy.dll c:\windows\system32\PortableDeviceTypes.dll c:\windows\system32\PortableDeviceApi.dll . ------------------------ Andere Aktieve Processen ------------------------ . c:\program files\WIDCOMM\Bluetooth Software\bin\btwdins.exe c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe c:\program files\Common Files\InterVideo\RegMgr\iviRegMgr.exe c:\program files\Java\jre6\bin\jqs.exe c:\windows\system32\wscntfy.exe c:\windows\RTHDCPL.EXE c:\windows\system32\igfxsrvc.exe c:\windows\system32\igfxext.exe c:\docume~1\Patrick\LOCALS~1\Temp\RtkBtMnt.exe . ************************************************************************** . Voltooingstijd: 2011-10-30 12:40:56 - machine werd herstart ComboFix-quarantined-files.txt 2011-10-30 11:40 ComboFix2.txt 2010-06-22 11:46 ComboFix3.txt 2010-06-09 20:13 . Pre-Run: 96.050.798.592 bytes beschikbaar Post-Run: 96.338.075.648 bytes beschikbaar . - - End Of File - - 21F01DD97B1530775A7C0EA512DFA07E
  5. Results of screen317's Security Check version 0.99.24 Windows XP Service Pack 3 x86 Internet Explorer 7 Out of date! `````````````````````````````` Antivirus/Firewall Check: ``````````````````````````````` Anti-malware/Other Utilities Check: Spybot - Search & Destroy HijackThis 2.0.2 CCleaner Java 6 Update 29 Out of date Java installed! Adobe Flash Player ( 10.0.45.2) Flash Player Out of Date! ```````````````````````````````` Process Check: objlist.exe by Laurent ``````````End of Log```````````` Malwarebytes' Anti-Malware 1.51.2.1300 www.malwarebytes.org Databaseversie: 8040 Windows 5.1.2600 Service Pack 3 Internet Explorer 7.0.5730.13 29/10/2011 15:37:53 mbam-log-2011-10-29 (15-37-52).txt Scantype: Snelle scan Objecten gescand: 172802 Verstreken tijd: 11 minuut/minuten, 48 seconde(n) Geheugenprocessen geïnfecteerd: 0 Geheugenmodulen geïnfecteerd: 0 Registersleutels geïnfecteerd: 0 Registerwaarden geïnfecteerd: 0 Registerdata geïnfecteerd: 0 Mappen geïnfecteerd: 0 Bestanden geïnfecteerd: 0 Geheugenprocessen geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Geheugenmodulen geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Registersleutels geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Registerwaarden geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Registerdata geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Mappen geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Bestanden geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 15:39:42, on 29/10/2011 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.17099) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\system32\igfxtray.exe C:\WINDOWS\system32\igfxsrvc.exe C:\WINDOWS\system32\hkcmd.exe C:\WINDOWS\system32\igfxpers.exe C:\WINDOWS\RTHDCPL.EXE C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe C:\Acer\Empowering Technology\eRecovery\eRAgent.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe C:\WINDOWS\system32\igfxext.exe C:\DOCUME~1\Patrick\LOCALS~1\Temp\RtkBtMnt.exe C:\Program Files\Mobistar Internet Everywhere\Mobistar Internet Everywhere.exe C:\Program Files\internet explorer\iexplore.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = iGoogle Redirect R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll (file missing) O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file) O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O4 - HKLM\..\Run: [LaunchApp] Alaunch O4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\Audio\InstallShield\AzMixerSel.exe O4 - HKLM\..\Run: [iMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\RunOnce: [AvgUninstallURL] cmd.exe /c start Uninstallation survey | AVG Nederland O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html O8 - Extra context menu item: Verzenden naar &Bluetooth-apparaat... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{20DECBF1-1328-4324-8D13-5EDD85164977}: NameServer = 212.224.255.252 212.65.63.217 O17 - HKLM\System\CS1\Services\Tcpip\..\{20DECBF1-1328-4324-8D13-5EDD85164977}: NameServer = 212.224.255.252 212.65.63.217 O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe O23 - Service: Google Desktop Manager 5.9.1005.12335 (GoogleDesktopManager-051210-111108) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe -- End of file - 8929 bytes
  6. hie het logje Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 13:14:17, on 29/10/2011 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.17099) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\igfxtray.exe C:\WINDOWS\system32\hkcmd.exe C:\WINDOWS\system32\igfxpers.exe C:\WINDOWS\system32\igfxsrvc.exe C:\WINDOWS\RTHDCPL.EXE C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe C:\Acer\Empowering Technology\eRecovery\eRAgent.exe C:\Program Files\Ask.com\Updater\Updater.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe C:\WINDOWS\system32\igfxext.exe C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE C:\DOCUME~1\Patrick\LOCALS~1\Temp\RtkBtMnt.exe C:\Program Files\Mobistar Internet Everywhere\Mobistar Internet Everywhere.exe C:\Program Files\internet explorer\iexplore.exe C:\Program Files\Windows Live\Contacts\wlcomm.exe C:\Program Files\AVG\AVG9\avgchsvx.exe C:\Program Files\AVG\AVG9\avgrsx.exe C:\Program Files\AVG\AVG9\avgchsvx.exe C:\Program Files\AVG\AVG9\avgcsrvx.exe C:\Program Files\AVG\AVG9\avgwdsvc.exe C:\Program Files\AVG\AVG9\avgnsx.exe C:\Program Files\AVG\AVG9\avgemc.exe C:\Program Files\AVG\AVG9\avgcsrvx.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = iGoogle Redirect R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen R3 - URLSearchHook: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O4 - HKLM\..\Run: [LaunchApp] Alaunch O4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\Audio\InstallShield\AzMixerSel.exe O4 - HKLM\..\Run: [iMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files\Ask.com\Updater\Updater.exe" O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: BTTray.lnk = ? O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html O8 - Extra context menu item: Verzenden naar &Bluetooth-apparaat... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{20DECBF1-1328-4324-8D13-5EDD85164977}: NameServer = 212.224.255.252 212.65.63.217 O17 - HKLM\System\CS1\Services\Tcpip\..\{20DECBF1-1328-4324-8D13-5EDD85164977}: NameServer = 212.224.255.252 212.65.63.217 O18 - Protocol: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll O23 - Service: AVG Security Toolbar Service - Unknown owner - C:\Program Files\AVG\AVG9\Toolbar\ToolbarBroker.exe O23 - Service: AVG Free E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgemc.exe O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe O23 - Service: Google Desktop Manager 5.9.1005.12335 (GoogleDesktopManager-051210-111108) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe -- End of file - 10379 bytes
  7. over enkele weken heb ik hetzelfde probleem gehad met mijn pc en is hier opgelost nu heeft mijn laptob hetzelfde maar dan nog erger als ik een programma wil open doen gaat dit zeer traag je mag doen wat je wil in alles werkt hij traag moet soms 1 minuut wachten eer hij start opent kan iemand mij hier ook mee helpen dank op voorhand mvg Patrick
  8. ComboFix 11-10-24.02 - HP_Eigenaar 24/10/2011 14:22:02.5.2 - x86 Microsoft Windows XP Home Edition 5.1.2600.3.1252.31.1043.18.1023.457 [GMT 2:00] Gestart vanuit: c:\documents and settings\HP_Eigenaar\Bureaublad\ComboFix.exe gebruikte Opdracht switches :: c:\documents and settings\HP_Eigenaar\Bureaublad\CFScript.txt..txt . . (((((((((((((((((((( Bestanden Gemaakt van 2011-09-24 to 2011-10-24 )))))))))))))))))))))))))))))) . . 2011-10-06 16:22 . 2011-10-06 16:22 -------- d-----w- c:\documents and settings\All Users\Application Data\{3C0AACBF-B491-4BE5-BAF9-AA46E0629E42} 2011-10-06 16:16 . 2011-10-06 16:16 -------- d-----w- c:\documents and settings\HP_Eigenaar\Application Data\Uniblue 2011-10-06 16:16 . 2011-10-06 16:16 -------- d-----w- c:\program files\Uniblue 2011-10-06 14:50 . 2011-10-06 14:50 388096 ----a-r- c:\documents and settings\HP_Eigenaar\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe 2011-10-06 10:52 . 2011-10-06 10:52 -------- d-----w- c:\documents and settings\HP_Eigenaar\Application Data\Garmin . . . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2011-10-06 13:29 . 2011-05-23 13:35 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2011-09-26 09:41 . 2010-09-07 21:38 23040 ----a-w- c:\windows\system32\oleaccrc.dll 2011-09-26 09:41 . 2008-07-29 17:59 614912 ----a-w- c:\windows\system32\uiautomationcore.dll 2011-09-26 09:41 . 2010-09-07 21:38 220160 ----a-w- c:\windows\system32\oleacc.dll 2011-09-09 09:12 . 2010-09-07 21:34 602624 ----a-w- c:\windows\system32\crypt32.dll 2011-09-06 14:09 . 2010-09-07 21:39 1859072 ----a-w- c:\windows\system32\win32k.sys 2011-08-22 23:41 . 2004-08-04 11:00 916480 ----a-w- c:\windows\system32\wininet.dll 2011-08-22 23:41 . 2010-09-07 21:37 43520 ----a-w- c:\windows\system32\licmgr10.dll 2011-08-22 23:41 . 2010-09-07 21:36 1469440 ------w- c:\windows\system32\inetcpl.cpl 2011-08-22 11:58 . 2010-09-07 21:36 385024 ----a-w- c:\windows\system32\html.iec 2011-08-17 13:49 . 2010-09-07 21:27 138496 ----a-w- c:\windows\system32\drivers\afd.sys 2011-04-14 16:57 . 2011-05-23 09:07 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll . . ((((((((((((((((((((((((((((( SnapShot_2011-10-23_20.30.33 ))))))))))))))))))))))))))))))))))))))))) . + 2011-10-24 11:48 . 2011-10-24 11:48 16384 c:\windows\Temp\Perflib_Perfdata_644.dat + 2011-10-24 00:52 . 2011-10-24 00:52 22016 c:\windows\Installer\e04cac.msi . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2010-04-16 3872080] "NokiaOviSuite2"="c:\program files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe" [2011-07-21 966712] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-09-13 39408] "TomTomHOME.exe"="c:\program files\TomTom HOME 2\TomTomHOMERunner.exe" [2010-08-24 247144] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NokiaMServer"="c:\program files\Common Files\Nokia\MPlatform\NokiaMServer" [X] "hpsysdrv"="c:\windows\system\hpsysdrv.exe" [1998-05-07 52736] "Snelkoppeling naar eigenschappenvenster voor High Definition Audio"="HDAShCut.exe" [2005-01-07 61952] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2005-08-02 7110656] "nwiz"="nwiz.exe" [2005-08-02 1519616] "SoundMan"="SOUNDMAN.EXE" [2005-05-04 90112] "AlcWzrd"="ALCWZRD.EXE" [2005-05-04 2805248] "RemoteControl"="c:\program files\ASUS\ASUS Remote\RemoteControlAppl.exe" [2005-06-10 61440] "HPHUPD08"="c:\program files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe" [2005-06-02 49152] "KBD"="c:\hp\KBD\KBD.EXE" [2005-02-02 61440] "Home Theater SchSvr"="c:\program files\Common Files\InterVideo\SchSvr\SchSvr.exe" [2005-07-18 106496] "WINREMOTE"="c:\program files\InterVideo\Common\Bin\WinRemote.exe" [2005-07-18 262144] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2005-05-04 278528] "Recguard"="c:\windows\SMINST\RECGUARD.EXE" [2004-04-14 233472] "PS2"="c:\windows\system32\ps2.exe" [2004-10-25 90112] "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2005-10-11 98304] "Launch SilverCrest OMC807"="c:\program files\SilverCrest OMC807 Driver\MouClient_FD2_9063RL.exe" [2010-06-28 860160] "beid"="c:\program files\Belgium Identity Card\beid35gui.exe" [2010-08-12 2060288] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-09-07 37296] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920] "NokiaMusic FastStart"="c:\program files\Nokia\Ovi Player\NokiaOviPlayer.exe" [2010-10-20 2192752] "HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2011-01-12 49208] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] "AvgUninstallURL"="start Free Uninstall Survey | AVG Nederland" [?] . c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\ HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2009-5-21 275768] Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360] . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys] @="Driver" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc] @="Service" . [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"= "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"= "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"= "c:\\Program Files\\iTunes\\iTunes.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\Messenger\\msmsgs.exe"= "c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"= "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= "c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"= "c:\\Program Files\\Common Files\\HP\\Digital Imaging\\Bin\\hpqPhotoCrm.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxs08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgplgtupl.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgpc01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgm.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgh.exe"= "c:\\Program Files\\HP\\HP Software Update\\HPWUCli.exe"= "c:\\Program Files\\HP\\Digital Imaging\\smart web printing\\SmartWebPrintExe.exe"= "c:\\Program Files\\Nokia\\Nokia Ovi Suite\\NokiaOviSuite.exe"= "c:\\Program Files\\Common Files\\Nokia\\Service Layer\\A\\nsl_host_process.exe"= "c:\\WINDOWS\\pchealth\\helpctr\\binaries\\helpctr.exe"= . R2 LcSvrAdm;ELSA Administration Service;c:\elsawin\bin\LcSvrAdm.exe [7/09/2010 19:54 147456] R2 LcSvrDba;ELSA DBA Server;c:\elsawin\bin\LcSvrDba.exe [7/09/2010 19:54 233472] R2 LcSvrHis;ELSA Historie Server;c:\elsawin\bin\LcSvrHis.exe [7/09/2010 19:54 217088] R2 LcSvrPAS;ELSA PASS Server;c:\elsawin\bin\LcSvrPas.exe [7/09/2010 19:54 368640] R2 TomTomHOMEService;TomTomHOMEService;c:\program files\TomTom HOME 2\TomTomHOMEService.exe [24/08/2010 11:38 92008] R3 3xHybrid;3xHybrid service;c:\windows\system32\drivers\3xHybrid.sys [11/10/2005 17:14 2786176] R3 InputFilter_Hid_FlexDef2b;Siliten HID Devices(FlexDef2b) Driver Service;c:\windows\system32\drivers\InputFilter_FlexDef2b.sys [23/09/2010 21:54 14848] R3 LcSvrAuf;ELSA Auftragsverwaltungs Service;c:\elsawin\bin\LcSvrAuf.exe [7/09/2010 19:54 1302528] S2 gupdate;Google Updateservice (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [13/09/2010 15:22 136176] S2 LcSvrSaz;ELSA xTime Server;c:\elsawin\bin\LcSvrSaz.exe --> c:\elsawin\bin\LcSvrSaz.exe [?] S3 ACSSCR;ACR38 Smart Card Reader;c:\windows\system32\drivers\a38usb.sys [5/10/2010 18:10 33536] S3 cpuz135;cpuz135;\??\c:\windows\TEMP\cpuz135\cpuz135_x32.sys --> c:\windows\TEMP\cpuz135\cpuz135_x32.sys [?] S3 Futuremark SystemInfo Service;Futuremark SystemInfo Service;c:\program files\Common Files\Futuremark Shared\Futuremark SystemInfo\FMSISvc.exe [23/05/2011 10:54 129440] S3 gupdatem;Google Update-service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [13/09/2010 15:22 136176] . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] HPService REG_MULTI_SZ HPSLPSVC HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12 hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc . Inhoud van de 'Gedeelde Taken' map . 2011-10-24 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-09-13 13:22] . 2011-10-24 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-09-13 13:22] . 2011-10-23 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1158552649-2627598947-2617169825-1008Core.job - c:\documents and settings\HP_Eigenaar\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2010-09-07 14:59] . 2011-10-24 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1158552649-2627598947-2617169825-1008UA.job - c:\documents and settings\HP_Eigenaar\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2010-09-07 14:59] . 2011-10-24 c:\windows\Tasks\User_Feed_Synchronization-{0B2E3EB1-E7B8-43E9-91E4-F5DE6EFABA99}.job - c:\windows\system32\msfeedssync.exe [2009-03-08 02:31] . . ------- Bijkomende Scan ------- . uStart Page = hxxp://www.google.be/ uInternet Connection Wizard,ShellNext = iexplore IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~2\Office10\EXCEL.EXE/3000 IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html IE: Verzenden naar &Bluetooth-apparaat... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm TCP: DhcpNameServer = 195.130.130.3 195.130.131.3 DPF: Garmin Communicator Plug-In - hxxps://static.garmincdn.com/gcp/ie/3.0.1.0/GarminAxControl.CAB FF - ProfilePath - c:\documents and settings\HP_Eigenaar\Application Data\Mozilla\Firefox\Profiles\jjogq8cj.default\ FF - prefs.js: network.proxy.type - 0 . . ************************************************************************** . catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover Rootkit scan 2011-10-24 14:31 Windows 5.1.2600 Service Pack 3 NTFS . scannen van verborgen processen ... . scannen van verborgen autostart items ... . scannen van verborgen bestanden ... . Scan succesvol afgerond verborgen bestanden: 0 . ************************************************************************** . --------------------- DLLs Geladen Onder Lopende Processen --------------------- . - - - - - - - > 'explorer.exe'(2876) c:\windows\system32\nview.dll c:\windows\system32\NVWRSNL.DLL c:\windows\system32\nvwddi.dll c:\windows\system32\webcheck.dll c:\windows\system32\WPDShServiceObj.dll c:\windows\system32\PortableDeviceTypes.dll c:\windows\system32\PortableDeviceApi.dll . Voltooingstijd: 2011-10-24 14:34:02 ComboFix-quarantined-files.txt 2011-10-24 12:33 ComboFix2.txt 2011-10-23 20:40 ComboFix3.txt 2011-10-11 12:26 ComboFix4.txt 2011-10-08 13:13 ComboFix5.txt 2011-10-24 12:20 . Pre-Run: 126.577.704.960 bytes beschikbaar Post-Run: 126.593.204.224 bytes beschikbaar . - - End Of File - - B8BF0F346FE341A1C2EBB3227410EBA4 sorry voor de lata reactie maar ben op vakantie geweest snelheid is nu veel beter
  9. ComboFix 11-10-08.01 - HP_Eigenaar 08/10/2011 15:00:24.2.2 - x86 Microsoft Windows XP Home Edition 5.1.2600.3.1252.31.1043.18.1023.663 [GMT 2:00] Gestart vanuit: c:\documents and settings\HP_Eigenaar\Bureaublad\ComboFix.exe AV: AVG Anti-Virus Free Edition 2011 *Disabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF} . . (((((((((((((((((((((((((((((((((( Andere Verwijderingen ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\documents and settings\Default User\WINDOWS c:\documents and settings\HP_Eigenaar\WINDOWS c:\program files\google\common\google updater\googleupdaterservice.exe c:\windows\IsUn0407.exe c:\windows\IsUn0413.exe c:\windows\system32\config\systemprofile\WINDOWS c:\windows\unin0407.exe . . (((((((((((((((((((( Bestanden Gemaakt van 2011-09-08 to 2011-10-08 )))))))))))))))))))))))))))))) . . 2011-10-06 16:22 . 2011-10-06 16:22 -------- d-----w- c:\documents and settings\All Users\Application Data\{3C0AACBF-B491-4BE5-BAF9-AA46E0629E42} 2011-10-06 16:16 . 2011-10-06 16:16 -------- d-----w- c:\documents and settings\HP_Eigenaar\Application Data\Uniblue 2011-10-06 16:16 . 2011-10-06 16:16 -------- d-----w- c:\program files\Uniblue 2011-10-06 14:50 . 2011-10-06 14:50 388096 ----a-r- c:\documents and settings\HP_Eigenaar\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe 2011-10-06 10:52 . 2011-10-06 10:52 -------- d-----w- c:\documents and settings\HP_Eigenaar\Application Data\Garmin 2011-09-16 13:36 . 2011-10-06 14:04 -------- d--h--r- c:\documents and settings\HP_Eigenaar\Onlangs geopend . . . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2011-10-06 13:29 . 2011-05-23 13:35 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2011-09-09 09:12 . 2010-09-07 21:34 602624 ----a-w- c:\windows\system32\crypt32.dll 2011-07-15 13:29 . 2004-08-04 11:00 456320 ----a-w- c:\windows\system32\drivers\mrxsmb.sys 2011-04-14 16:57 . 2011-05-23 09:07 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll . . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2010-04-16 3872080] "NokiaOviSuite2"="c:\program files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe" [2011-07-21 966712] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-09-13 39408] "TomTomHOME.exe"="c:\program files\TomTom HOME 2\TomTomHOMERunner.exe" [2010-08-24 247144] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NokiaMServer"="c:\program files\Common Files\Nokia\MPlatform\NokiaMServer" [X] "hpsysdrv"="c:\windows\system\hpsysdrv.exe" [1998-05-07 52736] "Snelkoppeling naar eigenschappenvenster voor High Definition Audio"="HDAShCut.exe" [2005-01-07 61952] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2005-08-02 7110656] "nwiz"="nwiz.exe" [2005-08-02 1519616] "SoundMan"="SOUNDMAN.EXE" [2005-05-04 90112] "AlcWzrd"="ALCWZRD.EXE" [2005-05-04 2805248] "RemoteControl"="c:\program files\ASUS\ASUS Remote\RemoteControlAppl.exe" [2005-06-10 61440] "HPHUPD08"="c:\program files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe" [2005-06-02 49152] "KBD"="c:\hp\KBD\KBD.EXE" [2005-02-02 61440] "Home Theater SchSvr"="c:\program files\Common Files\InterVideo\SchSvr\SchSvr.exe" [2005-07-18 106496] "WINREMOTE"="c:\program files\InterVideo\Common\Bin\WinRemote.exe" [2005-07-18 262144] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2005-05-04 278528] "Recguard"="c:\windows\SMINST\RECGUARD.EXE" [2004-04-14 233472] "PS2"="c:\windows\system32\ps2.exe" [2004-10-25 90112] "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2005-10-11 98304] "Launch SilverCrest OMC807"="c:\program files\SilverCrest OMC807 Driver\MouClient_FD2_9063RL.exe" [2010-06-28 860160] "beid"="c:\program files\Belgium Identity Card\beid35gui.exe" [2010-08-12 2060288] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-09-07 37296] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920] "NokiaMusic FastStart"="c:\program files\Nokia\Ovi Player\NokiaOviPlayer.exe" [2010-10-20 2192752] "AVG_TRAY"="c:\program files\AVG\AVG10\avgtray.exe" [2011-09-10 2338656] "HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2011-01-12 49208] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696] . c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\ HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2009-5-21 275768] Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360] . [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager] BootExecute REG_MULTI_SZ autocheck autochk *\0c:\progra~1\AVG\AVG10\avgchsvx.exe /sync\0c:\progra~1\AVG\AVG10\avgrsx.exe /sync /restart . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys] @="Driver" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc] @="Service" . [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus] "DisableMonitoring"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall] "DisableMonitoring"=dword:00000001 . [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"= "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"= "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"= "c:\\Program Files\\iTunes\\iTunes.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\Messenger\\msmsgs.exe"= "c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"= "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= "c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"= "c:\\Program Files\\Common Files\\HP\\Digital Imaging\\Bin\\hpqPhotoCrm.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxs08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgplgtupl.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgpc01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgm.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgh.exe"= "c:\\Program Files\\HP\\HP Software Update\\HPWUCli.exe"= "c:\\Program Files\\HP\\Digital Imaging\\smart web printing\\SmartWebPrintExe.exe"= "c:\\Program Files\\Nokia\\Nokia Ovi Suite\\NokiaOviSuite.exe"= "c:\\Program Files\\Common Files\\Nokia\\Service Layer\\A\\nsl_host_process.exe"= "c:\\WINDOWS\\pchealth\\helpctr\\binaries\\helpctr.exe"= "c:\\Program Files\\AVG\\AVG10\\avgmfapx.exe"= "c:\\Program Files\\AVG\\AVG10\\avgdiagex.exe"= "c:\\Program Files\\AVG\\AVG10\\avgnsx.exe"= "c:\\Program Files\\AVG\\AVG10\\avgemcx.exe"= . R0 AVGIDSEH;AVGIDSEH;c:\windows\system32\drivers\AVGIDSEH.sys [13/09/2010 16:27 22992] R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\drivers\avgrkx86.sys [7/09/2010 4:48 32592] R1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [8/12/2010 5:12 248656] R1 Avgtdix;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [12/11/2010 14:19 297168] R2 avgwd;AVG WatchDog;c:\program files\AVG\AVG10\avgwdsvc.exe [8/02/2011 5:33 269520] R2 LcSvrAdm;ELSA Administration Service;c:\elsawin\bin\LcSvrAdm.exe [7/09/2010 19:54 147456] R2 LcSvrDba;ELSA DBA Server;c:\elsawin\bin\LcSvrDba.exe [7/09/2010 19:54 233472] R2 LcSvrHis;ELSA Historie Server;c:\elsawin\bin\LcSvrHis.exe [7/09/2010 19:54 217088] R2 LcSvrPAS;ELSA PASS Server;c:\elsawin\bin\LcSvrPas.exe [7/09/2010 19:54 368640] R2 TomTomHOMEService;TomTomHOMEService;c:\program files\TomTom HOME 2\TomTomHOMEService.exe [24/08/2010 11:38 92008] R3 3xHybrid;3xHybrid service;c:\windows\system32\drivers\3xHybrid.sys [11/10/2005 17:14 2786176] R3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\drivers\AVGIDSDriver.sys [3/08/2010 16:23 134480] R3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\drivers\AVGIDSFilter.sys [3/08/2010 16:23 24144] R3 AVGIDSShim;AVGIDSShim;c:\windows\system32\drivers\AVGIDSShim.sys [3/08/2010 16:23 27216] R3 InputFilter_Hid_FlexDef2b;Siliten HID Devices(FlexDef2b) Driver Service;c:\windows\system32\drivers\InputFilter_FlexDef2b.sys [23/09/2010 21:54 14848] R3 LcSvrAuf;ELSA Auftragsverwaltungs Service;c:\elsawin\bin\LcSvrAuf.exe [7/09/2010 19:54 1302528] S2 AVGIDSAgent;AVGIDSAgent;c:\program files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe [18/08/2011 1:33 7390560] S2 gupdate;Google Updateservice (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [13/09/2010 15:22 136176] S2 LcSvrSaz;ELSA xTime Server;c:\elsawin\bin\LcSvrSaz.exe --> c:\elsawin\bin\LcSvrSaz.exe [?] S3 ACSSCR;ACR38 Smart Card Reader;c:\windows\system32\drivers\a38usb.sys [5/10/2010 18:10 33536] S3 cpuz135;cpuz135;\??\c:\windows\TEMP\cpuz135\cpuz135_x32.sys --> c:\windows\TEMP\cpuz135\cpuz135_x32.sys [?] S3 Futuremark SystemInfo Service;Futuremark SystemInfo Service;c:\program files\Common Files\Futuremark Shared\Futuremark SystemInfo\FMSISvc.exe [23/05/2011 10:54 129440] S3 gupdatem;Google Update-service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [13/09/2010 15:22 136176] . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] HPService REG_MULTI_SZ HPSLPSVC HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12 hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc . Inhoud van de 'Gedeelde Taken' map . 2011-10-07 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-09-13 13:22] . 2011-10-08 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-09-13 13:22] . 2011-10-07 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1158552649-2627598947-2617169825-1008Core.job - c:\documents and settings\HP_Eigenaar\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2010-09-07 14:59] . 2011-10-08 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1158552649-2627598947-2617169825-1008UA.job - c:\documents and settings\HP_Eigenaar\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2010-09-07 14:59] . 2011-10-08 c:\windows\Tasks\User_Feed_Synchronization-{0B2E3EB1-E7B8-43E9-91E4-F5DE6EFABA99}.job - c:\windows\system32\msfeedssync.exe [2009-03-08 02:31] . . ------- Bijkomende Scan ------- . uStart Page = hxxp://www.google.be/ uInternet Connection Wizard,ShellNext = iexplore IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~2\Office10\EXCEL.EXE/3000 IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html IE: Verzenden naar &Bluetooth-apparaat... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm TCP: DhcpNameServer = 195.130.130.3 195.130.131.3 DPF: Garmin Communicator Plug-In - hxxps://static.garmincdn.com/gcp/ie/3.0.1.0/GarminAxControl.CAB FF - ProfilePath - c:\documents and settings\HP_Eigenaar\Application Data\Mozilla\Firefox\Profiles\jjogq8cj.default\ FF - prefs.js: browser.search.selectedEngine - BearShare Web Search FF - prefs.js: browser.startup.homepage - hxxp://search.bearshare.com/ FF - prefs.js: keyword.URL - hxxp://search.bearshare.com/web?src=ffb&systemid=2&q= FF - prefs.js: network.proxy.type - 0 . - - - - ORPHANS VERWIJDERD - - - - . AddRemove-Adobe Acrobat 5.0 - c:\windows\ISUN0407.EXE AddRemove-Microsoft Interactive Training - c:\windows\IsUn0413.exe AddRemove-{09FF4DB8-7DE9-4D47-B7DB-915DB7D9A8CA} - c:\documents and settings\All Users\Application Data\{3C0AACBF-B491-4BE5-BAF9-AA46E0629E42}\bm_installer.exe . . . ************************************************************************** . catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover Rootkit scan 2011-10-08 15:10 Windows 5.1.2600 Service Pack 3 NTFS . scannen van verborgen processen ... . scannen van verborgen autostart items ... . scannen van verborgen bestanden ... . Scan succesvol afgerond verborgen bestanden: 0 . ************************************************************************** . Voltooingstijd: 2011-10-08 15:13:44 ComboFix-quarantined-files.txt 2011-10-08 13:13 ComboFix2.txt 2011-02-03 19:36 . Pre-Run: 126.525.071.360 bytes beschikbaar Post-Run: 127.009.951.744 bytes beschikbaar . - - End Of File - - 33CF8DE05884347818F661C6FF039CFC
  10. Hier het logje Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 16:50:37, on 6/10/2011 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\PROGRA~1\AVG\AVG10\avgchsvx.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\windows\system\hpsysdrv.exe C:\WINDOWS\SOUNDMAN.EXE C:\WINDOWS\ALCWZRD.EXE C:\Program Files\ASUS\ASUS Remote\RemoteControlAppl.exe C:\HP\KBD\KBD.EXE C:\WINDOWS\system32\rundll32.exe C:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe C:\Program Files\InterVideo\Common\Bin\WinRemote.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\SilverCrest OMC807 Driver\MouClient_FD2_9063RL.exe C:\Program Files\Belgium Identity Card\beid35gui.exe C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe C:\Program Files\AVG\AVG10\avgtray.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\AVG\AVG10\Identity Protection\agent\bin\avgidsmonitor.exe C:\Program Files\AVG\AVG10\avgwdsvc.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\ElsaWin\bin\LcSvrAdm.exe C:\ElsaWin\bin\LcSvrDba.exe C:\ElsaWin\bin\LcSvrHis.exe C:\ElsaWin\bin\LcSvrPas.exe C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\AVG\AVG10\avgnsx.exe C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\PC Connectivity Solution\ServiceLayer.exe C:\ElsaWin\bin\LcSvrAuf.exe C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe C:\Program Files\PC Connectivity Solution\Transports\NclBCBTSrv.exe C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrv.exe C:\PROGRA~1\AVG\AVG10\avgrsx.exe C:\Program Files\AVG\AVG10\avgcsrvx.exe C:\Program Files\Windows Live\Contacts\wlcomm.exe C:\Program Files\internet explorer\iexplore.exe C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_clipbook.exe C:\Program Files\internet explorer\iexplore.exe C:\Program Files\internet explorer\iexplore.exe C:\WINDOWS\system32\msiexec.exe C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG10\avgssie.dll O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe O4 - HKLM\..\Run: [snelkoppeling naar eigenschappenvenster voor High Definition Audio] HDAShCut.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE O4 - HKLM\..\Run: [RemoteControl] C:\Program Files\ASUS\ASUS Remote\RemoteControlAppl.exe O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE O4 - HKLM\..\Run: [Home Theater SchSvr] "C:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe" O4 - HKLM\..\Run: [WINREMOTE] "C:\Program Files\InterVideo\Common\Bin\WinRemote.exe" O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [Launch SilverCrest OMC807] C:\Program Files\SilverCrest OMC807 Driver\MouClient_FD2_9063RL.exe O4 - HKLM\..\Run: [beid] "C:\Program Files\Belgium Identity Card\beid35gui.exe" /startup O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [NokiaMServer] C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup O4 - HKLM\..\Run: [NokiaMusic FastStart] "C:\Program Files\Nokia\Ovi Player\NokiaOviPlayer.exe" /command:faststart O4 - HKLM\..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG10\avgtray.exe O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\HP_Eigenaar\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [NokiaOviSuite2] C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe -tray O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe" O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html O8 - Extra context menu item: Verzenden naar &Bluetooth-apparaat... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra button: Toon of verberg HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O9 - Extra button: Verbindingshelp - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra 'Tools' menuitem: Verbindingshelp - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: Garmin Communicator Plug-In - https://static.garmincdn.com/gcp/ie/3.0.1.0/GarminAxControl.CAB O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) - https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab O16 - DPF: {D1E7CBDA-E60E-4970-A01C-37301EF7BF98} (FuturemarkSystemInfoX Class) - http://clients.futuremark.com/openapi/receivers/FMSI.cab O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG10\avgpp.dll O18 - Protocol: vw-wi - {0F3C833F-FB28-40EA-8CB9-6A55B996C3F6} - C:\ElsaWin\bin\wiProt.dll O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG10\avgwdsvc.exe O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe O23 - Service: Futuremark SystemInfo Service - Futuremark Corporation - C:\Program Files\Common Files\Futuremark Shared\Futuremark SystemInfo\FMSISvc.exe O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: iPod-service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: ELSA Administration Service (LcSvrAdm) - Volkswagen AG - C:\ElsaWin\bin\LcSvrAdm.exe O23 - Service: ELSA Auftragsverwaltungs Service (LcSvrAuf) - Volkswagen AG - C:\ElsaWin\bin\LcSvrAuf.exe O23 - Service: ELSA DBA Server (LcSvrDba) - Volkswagen AG - C:\ElsaWin\bin\LcSvrDba.exe O23 - Service: ELSA Historie Server (LcSvrHis) - Volkswagen AG - C:\ElsaWin\bin\LcSvrHis.exe O23 - Service: ELSA PASS Server (LcSvrPAS) - Volkswagen AG - C:\ElsaWin\bin\LcSvrPas.exe O23 - Service: ELSA xTime Server (LcSvrSaz) - Unknown owner - C:\ElsaWin\bin\LcSvrSaz.exe (file missing) O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe -- End of file - 14025 bytes
  11. ik heb dus een probleem met mijn pc hij werkt met alles traag er staat windows xp op zelfs als ik deze computer wil openen , moet ik een 30 tal sec wachten eer het open gaat tevens met alles wat ik open wil doen en soms wilt hij gewoon niets doen en krijg ik een vakje met programma reageert niet wat zou dit kunnen zijn hat is een hp w5240 intel pentium 4cpu 3.20 Ghz 1.0 Gb Nividia Geforce 6200 se Turbocache
  12. hallo, helpte ook niet heb hem maar bij winkel terug binnen gedaan want mijn dochter zonder laptob is ik mijn pc afgeven want nu zit ze altijd op de mijne
  13. mijn dochter haar laptob wil niet meer opstarten zelfs niet als ik herstelschijf erin steek weet niet wat ze er mee uitgezet heeft wie kan mij helpen als ik hem opstart krijg ik enkel zwart scherm dan een windows achtergrond zonder tekst enkel achtergrond
  14. ik gebruik nu google chrome en gaat heel wat vlugger Heb even niet gereageerd want was op vakantie
  15. google chrome heb ik ook maar dan is hij iets vlugger maar blijft hij ook soms hangen dat het ni normaal is. Zou het niet aan mijn pc kunnen liggen?
  16. CCleaner had ik er al opstaan en is reeds gebeurd.
  17. Hallo heb de test gedaan Last Result: Download Speed: 27802 kbps (3475.3 KB/sec transfer rate) Upload Speed: 1119 kbps (139.9 KB/sec transfer rate) Latency: 10 ms zaterdag 7 mei 2011 10:20:01 En als ik via google chrome probeer heeft hij het ook blijft altijd hangen soms meer en soms minder
  18. maar ik heb die browser al zo lang en nooit problemen met gehad nu moet ik soms 30 sec wachten eer iets open gaat krijg dan zandloper te zien en moet wachten is echt ni normaal
  19. http://speccy.piriform.com/results/oV7fq3kp8R5tV0mOXr2oH1A ik heb telenet ExpressXL modem Motorola SBV 51213 snelheid download 15 Mbps upload 1 Mbps snelheidstest download 27.35 Mbps upload 1.08 Mbps http://www.speedtest.net/result/1257663602.png
  20. internet werkt traag zoals ik in titel al zei hier een logje Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 13:21:48, on 18/04/2011 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\PROGRA~1\AVG\AVG10\avgchsvx.exe C:\PROGRA~1\AVG\AVG10\avgrsx.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\windows\system\hpsysdrv.exe C:\WINDOWS\SOUNDMAN.EXE C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\ALCWZRD.EXE C:\Program Files\ASUS\ASUS Remote\RemoteControlAppl.exe C:\HP\KBD\KBD.EXE C:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe C:\Program Files\InterVideo\Common\Bin\WinRemote.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\AVG\AVG10\avgwdsvc.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\SilverCrest OMC807 Driver\MouClient_FD2_9063RL.exe C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe C:\Program Files\Belgium Identity Card\beid35gui.exe C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe C:\Program Files\AVG\AVG10\avgtray.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe C:\WINDOWS\system32\ctfmon.exe C:\ElsaWin\bin\LcSvrAdm.exe C:\ElsaWin\bin\LcSvrDba.exe C:\Program Files\AVG\AVG10\Identity Protection\agent\bin\avgidsmonitor.exe C:\ElsaWin\bin\LcSvrHis.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\ElsaWin\bin\LcSvrPas.exe C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\AVG\AVG10\avgnsx.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\iPod\bin\iPodService.exe C:\ElsaWin\bin\LcSvrAuf.exe C:\Program Files\PC Connectivity Solution\ServiceLayer.exe C:\Program Files\internet explorer\iexplore.exe C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe C:\Program Files\internet explorer\iexplore.exe C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe C:\Program Files\Common Files\Nokia\NoA\nokiaaserver.exe C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_clipbook.exe C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG10\avgssie.dll O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.6209.1142\swg.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe O4 - HKLM\..\Run: [snelkoppeling naar eigenschappenvenster voor High Definition Audio] HDAShCut.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE O4 - HKLM\..\Run: [RemoteControl] C:\Program Files\ASUS\ASUS Remote\RemoteControlAppl.exe O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE O4 - HKLM\..\Run: [Home Theater SchSvr] "C:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe" O4 - HKLM\..\Run: [WINREMOTE] "C:\Program Files\InterVideo\Common\Bin\WinRemote.exe" O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [Launch SilverCrest OMC807] C:\Program Files\SilverCrest OMC807 Driver\MouClient_FD2_9063RL.exe O4 - HKLM\..\Run: [beid] "C:\Program Files\Belgium Identity Card\beid35gui.exe" /startup O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [NokiaMServer] C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup O4 - HKLM\..\Run: [NokiaMusic FastStart] "C:\Program Files\Nokia\Ovi Player\NokiaOviPlayer.exe" /command:faststart O4 - HKLM\..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG10\avgtray.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\HP_Eigenaar\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [NokiaOviSuite2] C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe -tray O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe" O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html O8 - Extra context menu item: Verzenden naar &Bluetooth-apparaat... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra button: Toon of verberg HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O9 - Extra button: Verbindingshelp - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra 'Tools' menuitem: Verbindingshelp - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) - https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG10\avgpp.dll O18 - Protocol: vw-wi - {0F3C833F-FB28-40EA-8CB9-6A55B996C3F6} - C:\ElsaWin\bin\wiProt.dll O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG10\avgwdsvc.exe O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: iPod-service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: ELSA Administration Service (LcSvrAdm) - Volkswagen AG - C:\ElsaWin\bin\LcSvrAdm.exe O23 - Service: ELSA Auftragsverwaltungs Service (LcSvrAuf) - Volkswagen AG - C:\ElsaWin\bin\LcSvrAuf.exe O23 - Service: ELSA DBA Server (LcSvrDba) - Volkswagen AG - C:\ElsaWin\bin\LcSvrDba.exe O23 - Service: ELSA Historie Server (LcSvrHis) - Volkswagen AG - C:\ElsaWin\bin\LcSvrHis.exe O23 - Service: ELSA PASS Server (LcSvrPAS) - Volkswagen AG - C:\ElsaWin\bin\LcSvrPas.exe O23 - Service: ELSA xTime Server (LcSvrSaz) - Unknown owner - C:\ElsaWin\bin\LcSvrSaz.exe (file missing) O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe -- End of file - 13396 bytes
  21. ComboFix 11-03-03.01 - Patrick 03/03/2011 19:27:20.4.2 - x86 Microsoft Windows XP Home Edition 5.1.2600.3.1252.32.1043.18.1022.640 [GMT 1:00] Gestart vanuit: c:\documents and settings\Patrick\Bureaublad\ComboFix.exe gebruikte Opdracht switches :: c:\documents and settings\Patrick\Bureaublad\CFScript.txt..txt * Nieuw herstelpunt werd aangemaakt FILE :: "c:\windows\system32\ConduitEngine.tmp" . (((((((((((((((((((((((((((((((((( Andere Verwijderingen ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\32788R22FWJFW(2) c:\32788r22fwjfw(2)\License(2)\Curl - license.txt c:\32788r22fwjfw(2)\License(2)\dumphive-license.txt c:\32788r22fwjfw(2)\License(2)\EXTRACT.TXT c:\32788r22fwjfw(2)\License(2)\FI - license.txt c:\32788r22fwjfw(2)\License(2)\mtee.txt.txt c:\32788r22fwjfw(2)\License(2)\UnxUtilsDist.html c:\32788r22fwjfw(2)\License(2)\Zip - license.txt c:\documents and settings\All Users\Application Data\lGfHeLc06504 c:\documents and settings\All Users\Application Data\lGfHeLc06504\lGfHeLc06504 c:\windows\system32\ConduitEngine.tmp . (((((((((((((((((((( Bestanden Gemaakt van 2011-02-03 to 2011-03-03 )))))))))))))))))))))))))))))) . 2011-03-01 19:51 . 2010-12-20 17:09 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2011-03-01 19:51 . 2010-12-20 17:08 20952 ----a-w- c:\windows\system32\drivers\mbam.sys 2011-03-01 19:45 . 2011-03-01 19:45 388096 ----a-r- c:\documents and settings\Patrick\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe 2011-03-01 19:45 . 2011-03-01 19:45 -------- d-----w- c:\program files\Trend Micro 2011-02-28 18:51 . 2011-02-02 20:40 472808 ----a-w- c:\windows\system32\deployJava1.dll 2011-02-28 18:50 . 2011-02-28 18:50 -------- d-----w- c:\documents and settings\All Users\Application Data\McAfee 2011-02-28 18:15 . 2011-02-28 18:15 -------- d-----w- c:\windows\system32\wbem\Repository 2011-02-28 18:14 . 2011-03-03 18:21 -------- d--h--r- c:\documents and settings\Patrick\Onlangs geopend 2011-02-28 17:06 . 2011-02-28 18:14 -------- d-----w- c:\documents and settings\All Users\Application Data\AVG10 2011-02-28 17:02 . 2011-02-28 18:14 -------- d-----w- c:\documents and settings\All Users\Application Data\MFAData 2011-02-28 16:47 . 2011-02-28 18:14 -------- d-s---w- c:\documents and settings\Administrator . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2011-02-02 18:19 . 2008-10-29 10:08 73728 ----a-w- c:\windows\system32\javacpl.cpl 2011-01-21 14:44 . 2004-08-04 08:00 441344 ----a-w- c:\windows\system32\shimgvw.dll 2011-01-07 14:09 . 2004-08-04 08:00 290048 ----a-w- c:\windows\system32\atmfd.dll 2010-12-31 14:04 . 2004-08-04 08:00 1855104 ----a-w- c:\windows\system32\win32k.sys 2010-12-22 12:34 . 2004-08-04 08:00 301568 ----a-w- c:\windows\system32\kerberos.dll 2010-12-20 23:52 . 2004-08-04 08:00 916480 ----a-w- c:\windows\system32\wininet.dll 2010-12-20 23:52 . 2004-08-04 08:00 43520 ----a-w- c:\windows\system32\licmgr10.dll 2010-12-20 23:52 . 2004-08-04 08:00 1469440 ------w- c:\windows\system32\inetcpl.cpl 2010-12-20 17:25 . 2004-08-04 08:00 735232 ----a-w- c:\windows\system32\lsasrv.dll 2010-12-20 12:55 . 2004-08-04 08:00 385024 ----a-w- c:\windows\system32\html.iec 2010-12-09 15:15 . 2004-08-04 08:00 739328 ----a-w- c:\windows\system32\ntdll.dll 2010-12-09 15:14 . 2004-08-04 08:00 2031616 ------w- c:\windows\system32\ntkrnlpa.exe 2010-12-09 15:14 . 2004-08-04 08:00 2153472 ------w- c:\windows\system32\ntoskrnl.exe 2010-12-09 14:30 . 2004-08-04 08:00 33280 ----a-w- c:\windows\system32\csrsrv.dll 2009-04-25 12:23 . 2009-04-25 12:23 547496 ----a-w- c:\program files\ChromeSetup.exe 2004-08-09 21:30 . 2007-07-08 11:54 40960 ----a-w- c:\program files\Uninstall_CDS.exe . ((((((((((((((((((((((((((((( SnapShot@2011-03-02_19.13.21 ))))))))))))))))))))))))))))))))))))))))) . + 2011-03-03 17:53 . 2011-03-03 17:53 16384 c:\windows\Temp\Perflib_Perfdata_2a4.dat - 2004-09-08 11:27 . 2011-03-02 16:32 91336 c:\windows\system32\perfc013.dat + 2004-09-08 11:27 . 2011-03-03 17:57 91336 c:\windows\system32\perfc013.dat - 2004-09-08 11:27 . 2011-03-02 16:32 71708 c:\windows\system32\perfc009.dat + 2004-09-08 11:27 . 2011-03-03 17:57 71708 c:\windows\system32\perfc009.dat - 2009-07-31 13:15 . 2011-03-01 21:04 1660 c:\windows\bthservsdp.dat + 2009-07-31 13:15 . 2011-03-03 17:52 1660 c:\windows\bthservsdp.dat + 2004-09-08 11:27 . 2011-03-03 17:57 509810 c:\windows\system32\perfh013.dat - 2004-09-08 11:27 . 2011-03-02 16:32 509810 c:\windows\system32\perfh013.dat - 2004-09-08 11:27 . 2011-03-02 16:32 441772 c:\windows\system32\perfh009.dat + 2004-09-08 11:27 . 2011-03-03 17:57 441772 c:\windows\system32\perfh009.dat . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2010-04-16 3872080] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-06-19 68856] "Google Update"="c:\documents and settings\Patrick\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" [2009-04-25 133104] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2005-12-15 7331840] "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2005-12-15 86016] "nwiz"="nwiz.exe" [2005-12-15 1519616] "High Definition Audio Property Page Shortcut"="CHDAudPropShortcut.exe" [2005-11-08 61952] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064] "HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2006-02-19 49152] "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2005-11-11 761945] "hpWirelessAssistant"="c:\program files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe" [2005-12-13 507904] "QPService"="c:\program files\HP\QuickPlay\QPService.exe" [2005-12-12 94208] "eabconfg.cpl"="c:\program files\HPQ\Quick Launch Buttons\EabServr.exe" [2005-12-07 409600] "Cpqset"="c:\program files\HPQ\Default Settings\cpqset.exe" [2005-06-29 233534] "RecGuard"="c:\windows\SMINST\RecGuard.exe" [2005-10-11 1187840] "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-05-27 413696] "BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 110592] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360] c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\ Adobe Reader Snelle start.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2004-12-14 29696] HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2006-2-19 288472] HP Photosmart Premier Snelstart.lnk - c:\program files\HP\Digital Imaging\bin\hpqthb08.exe [2005-9-24 73728] Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys] @="Driver" [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"= "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\Bonjour\\mDNSResponder.exe"= "c:\\WINDOWS\\system32\\dpvsetup.exe"= "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= "c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"= S2 gupdate;Google Updateservice (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [7/01/2010 17:12 135664] . Inhoud van de 'Gedeelde Taken' map 2009-11-02 c:\windows\Tasks\AppleSoftwareUpdate.job - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-04-11 15:57] 2011-03-03 c:\windows\Tasks\Google Software Updater.job - c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2007-02-08 17:09] 2011-03-03 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-01-07 16:11] 2011-03-03 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-01-07 16:11] 2011-02-27 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1534048935-4134155108-1236404486-1006Core.job - c:\documents and settings\Patrick\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-04-25 12:23] 2011-03-03 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1534048935-4134155108-1236404486-1006UA.job - c:\documents and settings\Patrick\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-04-25 12:23] 2010-11-21 c:\windows\Tasks\OGADaily.job - c:\windows\system32\OGAVerify.exe [2008-12-31 16:04] 2011-03-03 c:\windows\Tasks\OGALogon.job - c:\windows\system32\OGAVerify.exe [2008-12-31 16:04] . . ------- Bijkomende Scan ------- . uDefault_Search_URL = hxxp://www.google.com/ie uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 uInternet Connection Wizard,ShellNext = iexplore uInternet Settings,ProxyOverride = *.local uSearchAssistant = hxxp://www.google.com/ie uSearchURL,(Default) = hxxp://www.google.com/search?q=%s IE: &Google Zoeken - c:\program files\Google\GoogleToolbar1.dll/cmsearch.html IE: &Woord vertalen in het Nederlands - c:\program files\Google\GoogleToolbar1.dll/cmwordtrans.html IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200 IE: Add to Windows &Live Favorites - Welcome to Windows Live IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~2\Office10\EXCEL.EXE/3000 IE: Free YouTube Download - c:\documents and settings\Patrick\Application Data\DVDVideoSoftIEHelpers\freeyoutubedownload.htm IE: Free YouTube to MP3 Converter - c:\documents and settings\Patrick\Application Data\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm IE: Gelijkwaardige pagina's - c:\program files\Google\GoogleToolbar1.dll/cmsimilar.html IE: Koppelingspagina's - c:\program files\Google\GoogleToolbar1.dll/cmbacklinks.html IE: Opgeslagen momentopname van de pagina - c:\program files\Google\GoogleToolbar1.dll/cmcache.html . ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover Rootkit scan 2011-03-03 19:38 Windows 5.1.2600 Service Pack 3 NTFS scannen van verborgen processen ... scannen van verborgen autostart items ... HKLM\Software\Microsoft\Windows\CurrentVersion\Run Cpqset = c:\program files\HPQ\Default Settings\cpqset.exe????????????n??|?????? ???B?????????????hLC? ?????? scannen van verborgen bestanden ... Scan succesvol afgerond verborgen bestanden: 0 ************************************************************************** . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe,-101" [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation] "Enabled"=dword:00000001 [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32] @="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe" [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" [HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}] @Denied: (A 2) (Everyone) @="IFlashBroker4" [HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . Voltooingstijd: 2011-03-03 19:40:50 ComboFix-quarantined-files.txt 2011-03-03 18:40 ComboFix2.txt 2011-03-02 19:15 ComboFix3.txt 2010-02-12 13:10 Pre-Run: 24.942.821.376 bytes beschikbaar Post-Run: 24.964.964.352 bytes beschikbaar - - End Of File - - 5901951200918F305A2297862F8E89D5 Pc werkt terug normaal Bedankt antivirus had ik verwijderd voor combifix heb nu terug avg geinstalleerd ---------- Post toegevoegd om 19:44 ---------- Vorige post was om 19:43 ---------- Moet ik nu nog iets doen?
  22. ComboFix 11-03-02.01 - Patrick 02/03/2011 20:03:55.3.2 - x86 Microsoft Windows XP Home Edition 5.1.2600.3.1252.32.1043.18.1022.654 [GMT 1:00] Gestart vanuit: c:\documents and settings\Patrick\Bureaublad\ComboFix.exe . (((((((((((((((((((((((((((((((((( Andere Verwijderingen ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\program files\Adobe\SHFOLDER.dll . (((((((((((((((((((( Bestanden Gemaakt van 2011-02-02 to 2011-03-02 )))))))))))))))))))))))))))))) . 2011-03-01 19:51 . 2010-12-20 17:09 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2011-03-01 19:51 . 2010-12-20 17:08 20952 ----a-w- c:\windows\system32\drivers\mbam.sys 2011-03-01 19:45 . 2011-03-01 19:45 388096 ----a-r- c:\documents and settings\Patrick\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe 2011-03-01 19:45 . 2011-03-01 19:45 -------- d-----w- c:\program files\Trend Micro 2011-02-28 18:51 . 2011-02-02 20:40 472808 ----a-w- c:\windows\system32\deployJava1.dll 2011-02-28 18:50 . 2011-02-28 18:50 -------- d-----w- c:\documents and settings\All Users\Application Data\McAfee 2011-02-28 18:20 . 2011-02-28 18:20 0 ----a-w- c:\windows\system32\ConduitEngine.tmp 2011-02-28 18:15 . 2011-02-28 18:15 -------- d-----w- c:\windows\system32\wbem\Repository 2011-02-28 18:14 . 2011-03-01 19:41 -------- d--h--r- c:\documents and settings\Patrick\Onlangs geopend 2011-02-28 17:06 . 2011-02-28 18:14 -------- d-----w- c:\documents and settings\All Users\Application Data\AVG10 2011-02-28 17:02 . 2011-02-28 18:14 -------- d-----w- c:\documents and settings\All Users\Application Data\MFAData 2011-02-28 16:47 . 2011-02-28 18:14 -------- d-s---w- c:\documents and settings\Administrator 2011-02-28 16:40 . 2011-02-28 18:14 -------- d-----w- C:\32788R22FWJFW(2) 2011-02-27 16:44 . 2011-02-28 18:14 -------- d-----w- c:\documents and settings\All Users\Application Data\lGfHeLc06504 . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2011-02-02 18:19 . 2008-10-29 10:08 73728 ----a-w- c:\windows\system32\javacpl.cpl 2011-01-21 14:44 . 2004-08-04 08:00 441344 ----a-w- c:\windows\system32\shimgvw.dll 2011-01-07 14:09 . 2004-08-04 08:00 290048 ----a-w- c:\windows\system32\atmfd.dll 2010-12-31 14:04 . 2004-08-04 08:00 1855104 ----a-w- c:\windows\system32\win32k.sys 2010-12-22 12:34 . 2004-08-04 08:00 301568 ----a-w- c:\windows\system32\kerberos.dll 2010-12-20 23:52 . 2004-08-04 08:00 916480 ----a-w- c:\windows\system32\wininet.dll 2010-12-20 23:52 . 2004-08-04 08:00 43520 ----a-w- c:\windows\system32\licmgr10.dll 2010-12-20 23:52 . 2004-08-04 08:00 1469440 ------w- c:\windows\system32\inetcpl.cpl 2010-12-20 17:25 . 2004-08-04 08:00 735232 ----a-w- c:\windows\system32\lsasrv.dll 2010-12-20 12:55 . 2004-08-04 08:00 385024 ----a-w- c:\windows\system32\html.iec 2010-12-09 15:15 . 2004-08-04 08:00 739328 ----a-w- c:\windows\system32\ntdll.dll 2010-12-09 15:14 . 2004-08-04 08:00 2031616 ------w- c:\windows\system32\ntkrnlpa.exe 2010-12-09 15:14 . 2004-08-04 08:00 2153472 ------w- c:\windows\system32\ntoskrnl.exe 2010-12-09 14:30 . 2004-08-04 08:00 33280 ----a-w- c:\windows\system32\csrsrv.dll 2009-04-25 12:23 . 2009-04-25 12:23 547496 ----a-w- c:\program files\ChromeSetup.exe 2004-08-09 21:30 . 2007-07-08 11:54 40960 ----a-w- c:\program files\Uninstall_CDS.exe . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2010-04-16 3872080] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-06-19 68856] "Google Update"="c:\documents and settings\Patrick\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" [2009-04-25 133104] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2005-12-15 7331840] "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2005-12-15 86016] "nwiz"="nwiz.exe" [2005-12-15 1519616] "High Definition Audio Property Page Shortcut"="CHDAudPropShortcut.exe" [2005-11-08 61952] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064] "HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2006-02-19 49152] "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2005-11-11 761945] "hpWirelessAssistant"="c:\program files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe" [2005-12-13 507904] "QPService"="c:\program files\HP\QuickPlay\QPService.exe" [2005-12-12 94208] "eabconfg.cpl"="c:\program files\HPQ\Quick Launch Buttons\EabServr.exe" [2005-12-07 409600] "Cpqset"="c:\program files\HPQ\Default Settings\cpqset.exe" [2005-06-29 233534] "RecGuard"="c:\windows\SMINST\RecGuard.exe" [2005-10-11 1187840] "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-05-27 413696] "BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 110592] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360] c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\ Adobe Reader Snelle start.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2004-12-14 29696] HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2006-2-19 288472] HP Photosmart Premier Snelstart.lnk - c:\program files\HP\Digital Imaging\bin\hpqthb08.exe [2005-9-24 73728] Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys] @="Driver" [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"= "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\Bonjour\\mDNSResponder.exe"= "c:\\WINDOWS\\system32\\dpvsetup.exe"= "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= "c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"= S2 gupdate;Google Updateservice (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [7/01/2010 17:12 135664] . Inhoud van de 'Gedeelde Taken' map 2009-11-02 c:\windows\Tasks\AppleSoftwareUpdate.job - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-04-11 15:57] 2011-03-02 c:\windows\Tasks\Google Software Updater.job - c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2007-02-08 17:09] 2011-03-02 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-01-07 16:11] 2011-03-02 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-01-07 16:11] 2011-02-27 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1534048935-4134155108-1236404486-1006Core.job - c:\documents and settings\Patrick\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-04-25 12:23] 2011-03-02 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1534048935-4134155108-1236404486-1006UA.job - c:\documents and settings\Patrick\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-04-25 12:23] 2010-11-21 c:\windows\Tasks\OGADaily.job - c:\windows\system32\OGAVerify.exe [2008-12-31 16:04] 2011-03-02 c:\windows\Tasks\OGALogon.job - c:\windows\system32\OGAVerify.exe [2008-12-31 16:04] . . ------- Bijkomende Scan ------- . uDefault_Search_URL = hxxp://www.google.com/ie uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 uInternet Connection Wizard,ShellNext = iexplore uInternet Settings,ProxyOverride = *.local uSearchAssistant = hxxp://www.google.com/ie uSearchURL,(Default) = hxxp://www.google.com/search?q=%s IE: &Google Zoeken - c:\program files\Google\GoogleToolbar1.dll/cmsearch.html IE: &Woord vertalen in het Nederlands - c:\program files\Google\GoogleToolbar1.dll/cmwordtrans.html IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200 IE: Add to Windows &Live Favorites - Welcome to Windows Live IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~2\Office10\EXCEL.EXE/3000 IE: Free YouTube Download - c:\documents and settings\Patrick\Application Data\DVDVideoSoftIEHelpers\freeyoutubedownload.htm IE: Free YouTube to MP3 Converter - c:\documents and settings\Patrick\Application Data\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm IE: Gelijkwaardige pagina's - c:\program files\Google\GoogleToolbar1.dll/cmsimilar.html IE: Koppelingspagina's - c:\program files\Google\GoogleToolbar1.dll/cmbacklinks.html IE: Opgeslagen momentopname van de pagina - c:\program files\Google\GoogleToolbar1.dll/cmcache.html . - - - - ORPHANS VERWIJDERD - - - - WebBrowser-{4924FDED-CB88-443F-9D2D-75BF1043DCCC} - (no file) WebBrowser-{30F9B915-B755-4826-820B-08FBA6BD249D} - (no file) ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover Rootkit scan 2011-03-02 20:13 Windows 5.1.2600 Service Pack 3 NTFS scannen van verborgen processen ... scannen van verborgen autostart items ... HKLM\Software\Microsoft\Windows\CurrentVersion\Run Cpqset = c:\program files\HPQ\Default Settings\cpqset.exe????????????n??|?????? ???B?????????????hLC? ?????? scannen van verborgen bestanden ... Scan succesvol afgerond verborgen bestanden: 0 ************************************************************************** . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe,-101" [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation] "Enabled"=dword:00000001 [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32] @="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe" [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" [HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}] @Denied: (A 2) (Everyone) @="IFlashBroker4" [HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . Voltooingstijd: 2011-03-02 20:15:54 ComboFix-quarantined-files.txt 2011-03-02 19:15 ComboFix2.txt 2010-02-12 13:10 Pre-Run: 24.817.778.688 bytes beschikbaar Post-Run: 25.009.266.688 bytes beschikbaar WindowsXP-KB310994-SP2-Home-BootDisk-NLD.exe [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS [operating systems] c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons UnsupportedDebug="do not select this" /debug multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect - - End Of File - - F614F4FB6641E3910C1735CB24040A3E Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 20:18:12, on 2/03/2011 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe C:\Program Files\HP\QuickPlay\QPService.exe C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\PROGRA~1\HPQ\SHARED\HPQTOA~1.EXE C:\WINDOWS\system32\notepad.exe C:\WINDOWS\explorer.exe C:\Program Files\internet explorer\iexplore.exe C:\Program Files\internet explorer\iexplore.exe C:\Program Files\Windows Live\Toolbar\wltuser.exe C:\Program Files\Microsoft\Search Enhancement Pack\SCServer\SCServer.exe C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /nodetect O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] CHDAudPropShortcut.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe" O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe O4 - HKLM\..\Run: [RecGuard] C:\Windows\SMINST\RecGuard.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [bluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Patrick\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: Adobe Reader Snelle start.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: HP Photosmart Premier Snelstart.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: &Google Zoeken - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html O8 - Extra context menu item: &Woord vertalen in het Nederlands - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200 O8 - Extra context menu item: Add to Windows &Live Favorites - Welcome to Windows Live O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O8 - Extra context menu item: Free YouTube Download - C:\Documents and Settings\Patrick\Application Data\DVDVideoSoftIEHelpers\freeyoutubedownload.htm O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Documents and Settings\Patrick\Application Data\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm O8 - Extra context menu item: Gelijkwaardige pagina's - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html O8 - Extra context menu item: Koppelingspagina's - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html O8 - Extra context menu item: Opgeslagen momentopname van de pagina - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- End of file - 9996 bytes
  23. Malwarebytes' Anti-Malware 1.50.1.1100 www.malwarebytes.org Databaseversie: 5919 Windows 5.1.2600 Service Pack 3 Internet Explorer 8.0.6001.18702 1/03/2011 21:00:43 mbam-log-2011-03-01 (21-00-43).txt Scantype: Snelle scan Objecten gescand: 177054 Verstreken tijd: 8 minuut/minuten, 13 seconde(n) Geheugenprocessen geïnfecteerd: 0 Geheugenmodulen geïnfecteerd: 0 Registersleutels geïnfecteerd: 0 Registerwaarden geïnfecteerd: 0 Registerdata geïnfecteerd: 1 Mappen geïnfecteerd: 0 Bestanden geïnfecteerd: 3 Geheugenprocessen geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Geheugenmodulen geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Registersleutels geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Registerwaarden geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Registerdata geïnfecteerd: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\StartMenuLogoff (PUM.Hijack.StartMenu) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. Mappen geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Bestanden geïnfecteerd: c:\documents and settings\Patrick\local settings\Temp\jar_cache6801319985002409751.tmp (Trojan.FakeAlert) -> Quarantined and deleted successfully. c:\documents and settings\Patrick\local settings\Temp\csrss.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\crt.dat (Malware.Trace) -> Quarantined and deleted successfully. Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 21:06:18, on 1/03/2011 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe C:\WINDOWS\system32\wuauclt.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe C:\Program Files\HP\QuickPlay\QPService.exe C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe C:\PROGRA~1\HPQ\SHARED\HPQTOA~1.EXE C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\Program Files\internet explorer\iexplore.exe C:\Program Files\internet explorer\iexplore.exe C:\Program Files\Windows Live\Toolbar\wltuser.exe C:\Program Files\Microsoft\Search Enhancement Pack\SCServer\SCServer.exe C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: Musicbario - {4924fded-cb88-443f-9d2d-75bf1043dccc} - C:\Program Files\Musicbario\prxtbMus0.dll O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /nodetect O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] CHDAudPropShortcut.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe" O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe O4 - HKLM\..\Run: [RecGuard] C:\Windows\SMINST\RecGuard.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [bluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Patrick\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: Adobe Reader Snelle start.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: HP Photosmart Premier Snelstart.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: &Google Zoeken - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html O8 - Extra context menu item: &Woord vertalen in het Nederlands - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200 O8 - Extra context menu item: Add to Windows &Live Favorites - Welcome to Windows Live O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O8 - Extra context menu item: Free YouTube Download - C:\Documents and Settings\Patrick\Application Data\DVDVideoSoftIEHelpers\freeyoutubedownload.htm O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Documents and Settings\Patrick\Application Data\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm O8 - Extra context menu item: Gelijkwaardige pagina's - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html O8 - Extra context menu item: Koppelingspagina's - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html O8 - Extra context menu item: Opgeslagen momentopname van de pagina - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- End of file - 10344 bytes
×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.