Internet Explorer, Firefox will not load plus BSOD

chen1276 · 20-Oct-2009, 10:12 PM #1

All,

Thanks for your help on this issue in advance.

I know that my computer is infected with malware but it's been a while since I've done battle and these buggers have become more difficult to remove in the interim - figure I would get some help this time from the Pros.

I currently cannot start either IE, Firefox, or Google Chrome. IE will not load and double clicking on the app results in a BSOD with a STOP: 0x0000008E exception code. Firefox starts and then crashes immediately. Chrome will start but will not load any pages whatsoever. Only Netscape works at the moment. Adaware scan is clean. Spybot S&D found a number of bugs including: Zlob.Downloader, Dropper.Mondo, Torpig, Win32.Agent.pz, and Win32.Bredolab.B. My HijackThis log is as follows:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:04:51 PM, on 10/20/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\S24EvMon.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZCfgSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\SCardSvr.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\System32\basfipm.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Binn\sqlservr.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\System32\RegSrvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Apoint\Apoint.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\WINDOWS\System32\DSentry.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Hewlett-Packard\HP Media Vault 2100\HPMVTray.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\System32\1XConfig.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\PicoZip\PicoZipTray.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\DvzCommon\DvzMsgr.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Palm\HOTSYNC.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Apoint\Apntex.exe
C:\Program Files\Skype\Plugin Manager\SkypePM.exe
C:\Program Files\Netscape\Netscape\Netscp.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\NOTEPAD.EXE

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R3 - URLSearchHook: (no name) - {EEA590B3-0976-7A81-25F5-0545707825B0} - (no file)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\sdra64.exe,
N3 - Netscape 7: user_pref("browser.startup.homepage", "http://home.netscape.com/bookmark/7_2/home.html"); (C:\Documents and Settings\HANK CHEN\Application Data\Mozilla\Profiles\default\7r22e9xl.slt\prefs.js)
N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CSBWeb_01.src "); (C:\Documents and Settings\HANK CHEN\Application Data\Mozilla\Profiles\default\7r22e9xl.slt\prefs.js)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {2501dc7e-f8e8-6c15-ac49-4e0d689e4e18} - C:\WINDOWS\oxeyopogicab.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: IeCaptureBho Object - {7c1ce531-09e9-4fc5-9803-1c2956615786} - C:\Program Files\Google\Google Desktop Search\GoogleDesktopIE.dll
O2 - BHO: (no name) - {EEA590B3-0976-7A81-25F5-0545707825B0} - (no file)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [bascstray] BascsTray.exe
O4 - HKLM\..\Run: [DVDSentry] C:\WINDOWS\System32\DSentry.exe
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [PRONoMgr.exe] c:\Program Files\Intel\PROSetWireless\NCS\PROSet\PRONoMgr.exe
O4 - HKLM\..\Run: [TempRemove] "C:\Program Files\Crystal Ball\CB Predictor\terminator.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [HPMVTray] "C:\Program Files\Hewlett-Packard\HP Media Vault 2100\HPMVTray.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Cduboqoyejami] rundll32.exe "C:\WINDOWS\oxeyopogicab.dll",e
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [PicoZip] C:\Program Files\PicoZip\PicoZipTray.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Hank Chen\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - Startup: HotSync Manager.lnk = C:\Program Files\Palm\HOTSYNC.EXE
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Dataviz Messenger.lnk = C:\WINDOWS\DvzCommon\DvzMsgr.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: VPN Client.lnk = ?
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {dfb852a3-47f8-48c4-a200-58cab36fd2a2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {dfb852a3-47f8-48c4-a200-58cab36fd2a2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [java_sun] Java (Sun)
O16 - DPF: {41D2C0E9-DA08-4B73-B899-656371EAE058} (PhotoLdr Control) - http://hpmediavault/Webshare/ActivexDLL/PhotoLdr.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ge...sh/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{1B05AFD6-682C-4E0C-9A7A-DD3AB58CA55D}: NameServer = 203.252.32.4,200.255.255.65
O17 - HKLM\System\CS1\Services\Tcpip\..\{1B05AFD6-682C-4E0C-9A7A-DD3AB58CA55D}: NameServer = 203.252.32.4,200.255.255.65
O17 - HKLM\System\CS3\Services\Tcpip\..\{1B05AFD6-682C-4E0C-9A7A-DD3AB58CA55D}: NameServer = 203.252.32.4,200.255.255.65
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: bersk.dll
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Broadcom ASF IP monitoring service v6.0.3 (BAsfIpM) - Broadcom Corp. - C:\WINDOWS\System32\basfipm.exe
O23 - Service: Background Intelligent Transfer Service (BITS) - Unknown owner - C:\WINDOWS\
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
O23 - Service: Google Desktop Manager 5.7.806.10245 (GoogleDesktopManager-061008-081103) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (javaquickstarterservice) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: kbdbr.exe - Unknown owner - C:\WINDOWS\system32\kbdbr.exe (file missing)
O23 - Service: Microsoft authenticate service (MsaSvc) - Unknown owner - C:\WINDOWS\system32\msasvc.exe (file missing)
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: RegSrvc - Intel Corporation - C:\WINDOWS\System32\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\WINDOWS\System32\S24EvMon.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: Automatic Updates (wuauserv) - Unknown owner - C:\WINDOWS\

--
End of file - 10859 bytes

Appreciate any help you guys can lend to my issue!

**sjpritch25** · 23-Oct-2009, 01:31 PM #2

Welcome to TSG

Download Combofix from this webpage: http://www.bleepingcomputer.com/comb...o-use-combofix

**Note: It is important that it is saved directly to your desktop**

--------------------------------------------------------------------

1. Close any open browsers.

2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

--------------------------------------------------------------------

Double click on combofix.exe & follow the prompts.

When finished, it will produce a report for you.
Please post the "C:\ComboFix.txt" along with a new HijackThis log for further review.

Note:
Do not mouseclick combofix's window while it's running. That may cause it to stall

chen1276 · 23-Oct-2009, 10:42 PM #3

Thanks for your help!

Here's the result of the Combofix run:

ComboFix 09-10-22.01 - Hank Chen 10/23/2009 21:16.2.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.510.178 [GMT -4:00]
Running from: c:\documents and settings\Hank Chen\Desktop\ComboFix.exe
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\Internet Explorer\rasadhlp.dll
c:\program files\Internet Explorer\setupapi.dll
c:\program files\Mozilla Firefox\rasadhlp.dll
c:\program files\Mozilla Firefox\setupapi.dll
c:\windows\imasilarefozuzi.dll
c:\windows\oxeyopogicab.dll
c:\windows\SPT320.dll
c:\windows\system32\1.tmp
c:\windows\system32\3.tmp
c:\windows\system32\4.tmp
c:\windows\system32\5.tmp
c:\windows\system32\6.tmp
c:\windows\system32\7.tmp
c:\windows\system32\8.tmp
c:\windows\system32\9.tmp
c:\windows\system32\A.tmp
c:\windows\system32\B.tmp
c:\windows\system32\C.tmp
c:\windows\system32\D.tmp
c:\windows\system32\digiwet.dll
c:\windows\system32\drivers\9d277716.sys
c:\windows\system32\drivers\fad.sys
c:\windows\system32\dumphive.exe
c:\windows\system32\E.tmp
c:\windows\system32\lowsec
c:\windows\system32\lowsec\local.ds
c:\windows\system32\lowsec\user.ds
c:\windows\system32\paradise.dll
c:\windows\system32\Process.exe
c:\windows\system32\SrchSTS.exe
c:\windows\system32\tmp.reg

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_MSASVC
-------\Service_MsaSvc
-------\Service_9d277716

((((((((((((((((((((((((( Files Created from 2009-09-24 to 2009-10-24 )))))))))))))))))))))))))))))))
.

2009-10-23 19:38 . 2009-10-23 19:38 1735 ----a-w- c:\windows\aducosuw.dll
2009-10-23 12:35 . 2009-10-23 12:35 1735 ----a-w- c:\windows\ocepojuyiboxavow.dll
2009-10-22 23:22 . 2009-10-22 23:22 1735 ----a-w- c:\windows\itatanekule.dll
2009-10-22 19:36 . 2009-10-22 19:36 1735 ----a-w- c:\windows\ocelahet.dll
2009-10-22 01:19 . 2009-10-22 01:19 1735 ----a-w- c:\windows\eyejeroy.dll
2009-10-21 22:56 . 2009-10-21 22:56 1735 ----a-w- c:\windows\ahapahogevo.dll
2009-10-21 19:17 . 2009-10-21 19:17 1735 ----a-w- c:\windows\oxetafuzacan.dll
2009-10-21 18:11 . 2009-10-21 18:11 1735 ----a-w- c:\windows\esetofok.dll
2009-10-21 17:05 . 2009-10-21 17:05 1735 ----a-w- c:\windows\usiporereweril.dll
2009-10-21 13:47 . 2009-10-21 13:47 1735 ----a-w- c:\windows\usofiyupadewiyo.dll
2009-10-21 12:23 . 2009-10-21 12:23 1735 ----a-w- c:\windows\agitejig.dll
2009-10-21 11:17 . 2009-10-21 11:17 1735 ----a-w- c:\windows\ijaducen.dll
2009-10-21 10:11 . 2009-10-21 10:11 1735 ----a-w- c:\windows\osegatagacuticab.dll
2009-10-21 09:05 . 2009-10-21 09:05 1735 ----a-w- c:\windows\ufizifowasi.dll
2009-10-21 07:59 . 2009-10-21 07:59 1735 ----a-w- c:\windows\ileyozew.dll
2009-10-21 06:53 . 2009-10-21 06:53 1735 ----a-w- c:\windows\ofawubixax.dll
2009-10-21 05:47 . 2009-10-21 05:47 1735 ----a-w- c:\windows\enuyotevokomas.dll
2009-10-21 04:41 . 2009-10-21 04:41 1735 ----a-w- c:\windows\enolowunika.dll
2009-10-21 03:35 . 2009-10-21 03:35 1735 ----a-w- c:\windows\urukeyoj.dll
2009-10-21 02:29 . 2009-10-21 02:29 1735 ----a-w- c:\windows\isosohah.dll
2009-10-21 01:23 . 2009-10-21 01:23 1735 ----a-w- c:\windows\owulofose.dll
2009-10-21 01:03 . 2009-10-21 01:03 -------- d-----w- c:\program files\Trend Micro
2009-10-21 00:18 . 2009-10-21 00:18 1735 ----a-w- c:\windows\eqidilawetidalu.dll
2009-10-21 00:16 . 2009-10-21 00:17 -------- d-----w- c:\documents and settings\Hank Chen\Local Settings\Application Data\Temp
2009-10-20 23:40 . 2009-10-20 23:40 1735 ----a-w- c:\windows\Hwexohofa.dat
2009-10-20 22:42 . 2009-10-20 22:42 1735 ----a-w- c:\windows\isisapamot.dll
2009-10-20 12:26 . 2009-10-20 12:26 1735 ----a-w- c:\windows\olasijeg.dll
2009-10-20 12:17 . 2009-10-20 12:17 -------- d-sh--w- c:\documents and settings\LocalService\IETldCache
2009-10-20 11:34 . 2009-10-20 11:34 1735 ----a-w- c:\windows\akugucoboj.dll
2009-10-20 10:28 . 2009-10-20 10:28 1735 ----a-w- c:\windows\enozesesu.dll
2009-10-20 09:22 . 2009-10-20 09:22 1735 ----a-w- c:\windows\amuyeval.dll
2009-10-20 08:16 . 2009-10-20 08:16 1735 ----a-w- c:\windows\aderaqil.dll
2009-10-20 07:10 . 2009-10-20 07:10 1735 ----a-w- c:\windows\ovayiyukejub.dll
2009-10-20 06:04 . 2009-10-20 06:04 1735 ----a-w- c:\windows\exoxitoke.dll
2009-10-20 04:58 . 2009-10-20 04:58 1735 ----a-w- c:\windows\orikuyepebeham.dll
2009-10-20 03:52 . 2009-10-20 03:52 1735 ----a-w- c:\windows\ewefatah.dll
2009-10-20 02:46 . 2009-10-20 02:46 1735 ----a-w- c:\windows\awuvuniw.dll
2009-10-20 01:40 . 2009-10-20 01:40 1735 ----a-w- c:\windows\utanulam.dll
2009-10-20 00:34 . 2009-10-20 00:34 1735 ----a-w- c:\windows\ebejazeti.dll
2009-10-19 16:47 . 2009-10-19 16:47 1735 ----a-w- c:\windows\ozigoxutuxunaka.dll
2009-10-19 13:17 . 2009-10-19 13:17 1735 ----a-w- c:\windows\eduniyanu.dll
2009-10-19 00:03 . 2009-10-19 00:03 1735 ----a-w- c:\windows\ugubecidu.dll
2009-10-17 19:21 . 2009-10-17 19:21 3121 ----a-w- c:\windows\ilelapeya.dll
2009-10-17 17:07 . 2009-10-17 17:07 3121 ----a-w- c:\windows\ocadipotafapi.dll
2009-10-16 12:16 . 2009-10-16 12:16 3121 ----a-w- c:\windows\ovabuyud.dll
2009-10-16 01:10 . 2009-10-16 01:10 3121 ----a-w- c:\windows\owegobey.dll
2009-10-16 00:04 . 2009-10-16 00:04 3121 ----a-w- c:\windows\ijohajilesoqaxa.dll
2009-10-15 23:52 . 2009-10-15 23:52 -------- d-----w- c:\program files\TeaTimer (Spybot - Search & Destroy)
2009-10-15 23:52 . 2009-10-15 23:52 -------- d-----w- c:\program files\SDHelper (Spybot - Search & Destroy)
2009-10-15 23:26 . 2009-10-15 23:26 3121 ----a-w- c:\windows\axusebebebagu.dll
2009-10-15 16:07 . 2009-10-15 16:07 3121 ----a-w- c:\windows\ifirulipiz.dll
2009-10-15 11:56 . 2009-10-15 11:56 3121 ----a-w- c:\windows\ofulijefedawev.dll
2009-10-14 17:10 . 2009-10-14 17:10 3121 ----a-w- c:\windows\icemutivo.dll
2009-10-14 12:27 . 2009-10-14 12:27 3121 ----a-w- c:\windows\utoxipabusaxupe.dll
2009-10-14 00:24 . 2009-10-14 00:24 3121 ----a-w- c:\windows\ovilamut.dll
2009-10-13 22:34 . 2009-10-13 22:34 3121 ----a-w- c:\windows\opuxatesuxid.dll
2009-10-13 19:50 . 2009-10-13 19:50 3121 ----a-w- c:\windows\isiyozoxujesazu.dll
2009-10-13 15:02 . 2009-10-13 15:02 3121 ----a-w- c:\windows\ihojecuxiqivoq.dll
2009-10-13 12:04 . 2009-10-13 12:04 3121 ----a-w- c:\windows\icohikilugo.dll
2009-10-13 00:40 . 2009-10-13 00:40 3121 ----a-w- c:\windows\ofetehihehate.dll
2009-10-12 18:15 . 2009-10-12 18:15 3121 ----a-w- c:\windows\uvaxecug.dll
2009-10-12 15:55 . 2009-10-12 15:55 3121 ----a-w- c:\windows\akexafesujo.dll
2009-10-12 11:28 . 2009-10-12 11:28 3121 ----a-w- c:\windows\ohozuteroyow.dll
2009-10-12 00:52 . 2009-10-12 00:52 3121 ----a-w- c:\windows\azubexob.dll
2009-10-11 23:46 . 2009-10-11 23:46 3121 ----a-w- c:\windows\upifepov.dll
2009-10-10 11:58 . 2009-10-10 11:58 3121 ----a-w- c:\windows\ucejifoha.dll
2009-10-10 00:46 . 2009-10-10 00:46 3121 ----a-w- c:\windows\emaxoret.dll
2009-10-09 21:01 . 2009-10-09 21:01 3121 ----a-w- c:\windows\amojacuq.dll
2009-10-09 19:34 . 2009-10-09 19:34 3121 ----a-w- c:\windows\oluroviqohuwu.dll
2009-09-28 11:28 . 2009-09-28 11:28 -------- d-sh--w- c:\documents and settings\NetworkService\IETldCache
2009-09-28 11:28 . 2009-09-28 11:28 -------- d-sh--w- c:\windows\system32\config\systemprofile\IETldCache
2009-09-28 11:28 . 2009-09-28 11:28 -------- d-sh--w- c:\documents and settings\Hank Chen\IETldCache
2009-09-27 21:07 . 2009-09-27 21:11 -------- dc-h--w- c:\windows\ie8

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-10-24 01:21 . 2005-04-29 04:07 -------- d-----w- c:\documents and settings\Hank Chen\Application Data\Skype
2009-10-21 00:28 . 2004-07-27 00:06 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-10-16 01:41 . 2004-07-20 02:54 -------- d-----w- c:\program files\Java
2009-10-16 00:31 . 2004-07-28 15:56 -------- d-----w- c:\program files\Google
2009-10-15 23:58 . 2004-07-27 00:06 -------- d-----w- c:\program files\Spybot - Search & Destroy
2009-08-28 13:18 . 2009-08-28 13:18 175616 --s-a-w- c:\windows\system32\drivers\xwoarh.sys
2008-09-05 15:49 . 2005-05-09 13:34 122880 ----a-w- c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PicoZip"="c:\program files\PicoZip\PicoZipTray.exe" [2004-07-05 449536]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2008-04-14 1695232]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2006-12-12 25343016]
"updateMgr"="c:\program files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [2006-03-30 313472]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-01-26 2144088]
"Google Update"="c:\documents and settings\Hank Chen\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" [2009-10-21 133104]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Apoint"="c:\program files\Apoint\Apoint.exe" [2004-02-02 155648]
"Dell QuickSet"="c:\program files\Dell\QuickSet\quickset.exe" [2004-03-05 487424]
"DVDSentry"="c:\windows\System32\DSentry.exe" [2002-07-17 28672]
"AdaptecDirectCD"="c:\program files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe" [2002-12-17 684032]
"PRONoMgr.exe"="c:\program files\Intel\PROSetWireless\NCS\PROSet\PRONoMgr.exe" [2003-12-19 86016]
"TempRemove"="c:\program files\Crystal Ball\CB Predictor\terminator.exe" [2003-11-06 7680]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2004-12-13 180269]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2005-12-20 278528]
"igfxtray"="c:\windows\system32\igfxtray.exe" [2005-09-20 94208]
"igfxhkcmd"="c:\windows\system32\hkcmd.exe" [2005-09-20 77824]
"igfxpers"="c:\windows\system32\igfxpers.exe" [2005-09-20 114688]
"Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2008-09-05 29744]
"HPMVTray"="c:\program files\Hewlett-Packard\HP Media Vault 2100\HPMVTray.exe" [2008-01-24 374064]
"HP Software Update"="c:\program files\Hp\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-07-25 149280]

c:\documents and settings\Hank Chen\Start Menu\Programs\Startup\
HotSync Manager.lnk - c:\program files\Palm\HOTSYNC.EXE [2003-10-14 299008]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-9-24 29696]
Dataviz Messenger.lnk - c:\windows\DvzCommon\DvzMsgr.exe [2003-7-1 24576]
Digital Line Detect.lnk - c:\program files\Digital Line Detect\DLG.exe [2004-7-19 24576]
VPN Client.lnk - c:\windows\Installer\{3E5562ED-69AB-4CEC-91E2-64E18EC5ACC6}\Icon3E5562ED7.ico [2004-9-10 6144]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\Sebring]
2004-01-13 19:17 110592 ----a-w- c:\windows\SYSTEM32\LgNotify.dll

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\Auth orizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Money 2006\\MNYCoreFiles\\msmoney.exe"=
"c:\\Program Files\\Palm\\HOTSYNC.EXE"=
"c:\\Program Files\\Hewlett-Packard\\HP Media Vault 2100\\NASDriveMapper.exe"=
"c:\\Program Files\\Hewlett-Packard\\HP Media Vault 2100\\NASCfg.exe"=
"c:\\Program Files\\Hewlett-Packard\\HP Media Vault 2100\\HPMVTray.exe"=
"c:\\Program Files\\Hewlett-Packard\\HP Media Vault 2100\\NASSelector.exe"=
"c:\\Program Files\\NewTech Infosystems\\NTI Shadow 3\\shadow.exe"=
"c:\\Program Files\\Hewlett-Packard\\HP Media Vault 2100\\DoTask.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Hp\\Digital Imaging\\bin\\hpqscnvw.exe"=
"c:\\Program Files\\Hp\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\Hp\\Digital Imaging\\bin\\hpqnrs08.exe"=
"c:\\Program Files\\TVUPlayer\\TVUPlayer.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

R3 GTICARD;GTICARD;c:\windows\SYSTEM32\DRIVERS\gticard.sys [2/14/2003 4:03 PM 59328]
S2 kbdbr.exe;kbdbr.exe;c:\windows\system32\kbdbr.exe --> c:\windows\system32\kbdbr.exe [?]
S2 xwoarh;xwoarh;c:\windows\SYSTEM32\DRIVERS\xwoarh.sys [8/28/2009 9:18 AM 175616]
S3 {E2B953A7-195A-44F9-9BA3-3D5F4E32BB55};AIM 3.0 Part 01 Codec Driver CH-7009-B;c:\windows\SYSTEM32\DRIVERS\wa301b.sys [1/1/1980 1:00 AM 33847]
S3 GoogleDesktopManager-061008-081103;Google Desktop Manager 5.7.806.10245;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [11/3/2004 3:12 PM 29744]
.
Contents of the 'Scheduled Tasks' folder

2009-10-22 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1868879660-976857361-759642186-1005Core.job
- c:\documents and settings\Hank Chen\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-10-21 00:16]

2009-10-23 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1868879660-976857361-759642186-1005UA.job
- c:\documents and settings\Hank Chen\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-10-21 00:16]
.
.
------- Supplementary Scan -------
.
uDefault_Search_URL = hxxp://www.google.com/ie
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
TCP: {1B05AFD6-682C-4E0C-9A7A-DD3AB58CA55D} = 203.252.32.4,200.255.255.65
DPF: {41D2C0E9-DA08-4B73-B899-656371EAE058} - hxxp://hpmediavault/Webshare/ActivexDLL/PhotoLdr.cab
FF - ProfilePath - c:\documents and settings\Hank Chen\Application Data\Mozilla\Firefox\Profiles\cjqlaqna.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://my.yahoo.com
FF - component: c:\program files\Mozilla Firefox\components\GoogleDesktopMozilla.dll
FF - plugin: c:\documents and settings\Hank Chen\Application Data\Mozilla\Firefox\Profiles\cjqlaqna.default\extensions\firefox@tvunetwor ks.com\plugins\npTVUAx.dll
FF - plugin: c:\program files\Google\Picasa3\npPicasa3.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npGoogleGadgetPluginFirefoxWin.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\NPUploader.dll
FF - plugin: c:\program files\Viewpoint\Viewpoint Media Player\npViewpoint.dll
FF - HiddenExtension: XUL Cache: {E7E29EF7-AA72-4B0C-AFF9-4B3BC55673C5} - c:\documents and settings\Hank Chen\Local Settings\Application Data\{E7E29EF7-AA72-4B0C-AFF9-4B3BC55673C5}
FF - HiddenExtension: XUL Cache: {21E7E408-EE4B-4372-B8DB-9F8905EDC627} - c:\documents and settings\Fay Chen\Local Settings\Application Data\{21E7E408-EE4B-4372-B8DB-9F8905EDC627}\

---- FIREFOX POLICIES ----
FF - user.js: yahoo.homepage.dontask - true.
- - - - ORPHANS REMOVED - - - -

URLSearchHooks-{EEA590B3-0976-7A81-25F5-0545707825B0} - (no file)
BHO-{2501dc7e-f8e8-6c15-ac49-4e0d689e4e18} - c:\windows\oxeyopogicab.dll
BHO-{EEA590B3-0976-7A81-25F5-0545707825B0} - (no file)
HKLM-Run-Cduboqoyejami - c:\windows\oxeyopogicab.dll
HKLM-Run-bascstray - BascsTray.exe
SafeBoot-xwoarh

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-10-23 21:27
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_LOCAL_MACHINE\software\DeterministicNetworks\DNE\Parameters]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00, 79,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,79,00,73,00, \
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(1260)
c:\windows\System32\LgNotify.dll

- - - - - - - > 'explorer.exe'(1840)
c:\windows\system32\ieframe.dll
c:\windows\system32\OneX.DLL
c:\windows\system32\eappprxy.dll
c:\windows\system32\webcheck.dll
.
------------------------ Other Running Processes ------------------------
.
c:\windows\System32\S24EvMon.exe
c:\windows\System32\SCardSvr.exe
c:\windows\system32\ZCfgSvc.exe
c:\program files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
c:\windows\System32\basfipm.exe
c:\program files\Cisco Systems\VPN Client\cvpnd.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Binn\sqlservr.exe
c:\windows\system32\HPZipm12.exe
c:\windows\System32\RegSrvc.exe
c:\windows\system32\wdfmgr.exe
c:\program files\Canon\CAL\CALMAIN.exe
c:\windows\system32\wscntfy.exe
c:\windows\System32\1XConfig.exe
c:\combofix\CF10573.exe
c:\windows\system32\igfxsrvc.exe
c:\program files\iPod\bin\iPodService.exe
c:\program files\Apoint\Apntex.exe
c:\program files\Skype\Plugin Manager\SkypePM.exe
c:\combofix\PEV.cfxxe
.
**************************************************************************
.
Completion time: 2009-10-24 21:33 - machine was rebooted
ComboFix-quarantined-files.txt 2009-10-24 01:33
ComboFix2.txt 2007-04-29 05:35

Pre-Run: 667,586,560 bytes free
Post-Run: 583,639,040 bytes free

- - End Of File - - 7F488D41793EE2F5F7342888CDC5DF80

Here's the new Hijackthis log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:36:51 PM, on 10/23/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\ZCfgSvc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\System32\basfipm.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Binn\sqlservr.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\System32\RegSrvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\1XConfig.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Apoint\Apoint.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\WINDOWS\System32\DSentry.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Hewlett-Packard\HP Media Vault 2100\HPMVTray.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Apoint\Apntex.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Palm\HOTSYNC.EXE
C:\Program Files\Skype\Plugin Manager\SkypePM.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Netscape\Netscape\Netscp.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
N3 - Netscape 7: user_pref("browser.startup.homepage", "http://home.netscape.com/bookmark/7_2/home.html"); (C:\Documents and Settings\HANK CHEN\Application Data\Mozilla\Profiles\default\7r22e9xl.slt\prefs.js)
N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CSBWeb_01.src "); (C:\Documents and Settings\HANK CHEN\Application Data\Mozilla\Profiles\default\7r22e9xl.slt\prefs.js)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: IeCaptureBho Object - {7c1ce531-09e9-4fc5-9803-1c2956615786} - C:\Program Files\Google\Google Desktop Search\GoogleDesktopIE.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [DVDSentry] C:\WINDOWS\System32\DSentry.exe
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [PRONoMgr.exe] c:\Program Files\Intel\PROSetWireless\NCS\PROSet\PRONoMgr.exe
O4 - HKLM\..\Run: [TempRemove] "C:\Program Files\Crystal Ball\CB Predictor\terminator.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [HPMVTray] "C:\Program Files\Hewlett-Packard\HP Media Vault 2100\HPMVTray.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [PicoZip] C:\Program Files\PicoZip\PicoZipTray.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Hank Chen\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - Startup: HotSync Manager.lnk = C:\Program Files\Palm\HOTSYNC.EXE
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Dataviz Messenger.lnk = C:\WINDOWS\DvzCommon\DvzMsgr.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: VPN Client.lnk = ?
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {dfb852a3-47f8-48c4-a200-58cab36fd2a2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {dfb852a3-47f8-48c4-a200-58cab36fd2a2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [java_sun] Java (Sun)
O16 - DPF: {41D2C0E9-DA08-4B73-B899-656371EAE058} (PhotoLdr Control) - http://hpmediavault/Webshare/ActivexDLL/PhotoLdr.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ge...sh/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{1B05AFD6-682C-4E0C-9A7A-DD3AB58CA55D}: NameServer = 203.252.32.4,200.255.255.65
O17 - HKLM\System\CS1\Services\Tcpip\..\{1B05AFD6-682C-4E0C-9A7A-DD3AB58CA55D}: NameServer = 203.252.32.4,200.255.255.65
O17 - HKLM\System\CS3\Services\Tcpip\..\{1B05AFD6-682C-4E0C-9A7A-DD3AB58CA55D}: NameServer = 203.252.32.4,200.255.255.65
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Broadcom ASF IP monitoring service v6.0.3 (BAsfIpM) - Broadcom Corp. - C:\WINDOWS\System32\basfipm.exe
O23 - Service: Background Intelligent Transfer Service (BITS) - Unknown owner - C:\WINDOWS\
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
O23 - Service: Google Desktop Manager 5.7.806.10245 (GoogleDesktopManager-061008-081103) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (javaquickstarterservice) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: kbdbr.exe - Unknown owner - C:\WINDOWS\system32\kbdbr.exe (file missing)
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: RegSrvc - Intel Corporation - C:\WINDOWS\System32\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\WINDOWS\System32\S24EvMon.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: Automatic Updates (wuauserv) - Unknown owner - C:\WINDOWS\

--
End of file - 9781 bytes

**sjpritch25** · 23-Oct-2009, 11:23 PM #4

Please make sure you connected to the internet because ComboFix will be uploading a file.

1. Close any open browsers.

2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

3. Open notepad and copy/paste the text in the quotebox below into it:

Code:

http://forums.techguy.org/malware-removal-hijackthis-logs/870264-internet-explorer-firefox-will-not.html#post6995080

Collect::[70]
c:\windows\aducosuw.dll
c:\windows\ocepojuyiboxavow.dll
c:\windows\itatanekule.dll
c:\windows\ocelahet.dll
c:\windows\eyejeroy.dll
c:\windows\ahapahogevo.dll
c:\windows\oxetafuzacan.dll
c:\windows\esetofok.dll
c:\windows\usiporereweril.dll
c:\windows\usofiyupadewiyo.dll
c:\windows\agitejig.dll
c:\windows\ijaducen.dll
c:\windows\osegatagacuticab.dll
c:\windows\ufizifowasi.dll
c:\windows\ileyozew.dll
c:\windows\ofawubixax.dll
c:\windows\enuyotevokomas.dll
c:\windows\enolowunika.dll
c:\windows\urukeyoj.dll
c:\windows\isosohah.dll
c:\windows\owulofose.dll
c:\windows\eqidilawetidalu.dll
c:\windows\Hwexohofa.dat
c:\windows\isisapamot.dll
c:\windows\olasijeg.dll
c:\windows\akugucoboj.dll
c:\windows\enozesesu.dll
c:\windows\amuyeval.dll
c:\windows\aderaqil.dll
c:\windows\ovayiyukejub.dll
c:\windows\exoxitoke.dll
c:\windows\orikuyepebeham.dll
c:\windows\ewefatah.dll
c:\windows\awuvuniw.dll
c:\windows\utanulam.dll
c:\windows\ebejazeti.dll
c:\windows\ozigoxutuxunaka.dll
c:\windows\eduniyanu.dll
c:\windows\ugubecidu.dll
c:\windows\ilelapeya.dll
c:\windows\ocadipotafapi.dll
c:\windows\ovabuyud.dll
c:\windows\owegobey.dll
c:\windows\ijohajilesoqaxa.dll
c:\windows\axusebebebagu.dll
c:\windows\ifirulipiz.dll
c:\windows\ofulijefedawev.dll
c:\windows\icemutivo.dll
c:\windows\utoxipabusaxupe.dll
c:\windows\ovilamut.dll
c:\windows\opuxatesuxid.dll
c:\windows\isiyozoxujesazu.dll
c:\windows\ihojecuxiqivoq.dll
c:\windows\icohikilugo.dll
c:\windows\ofetehihehate.dll
c:\windows\ofetehihehate.dll
c:\windows\akexafesujo.dll
c:\windows\ohozuteroyow.dll
c:\windows\azubexob.dll
c:\windows\upifepov.dll
c:\windows\upifepov.dll
c:\windows\emaxoret.dll
c:\windows\amojacuq.dll
c:\windows\oluroviqohuwu.dll
c:\windows\system32\kbdbr.exe
c:\windows\SYSTEM32\DRIVERS\xwoarh.sys
Driver::
xwoarh
kbdbr.exe

Save this as CFScript.txt, in the same location as ComboFix.exe

Refering to the picture above, drag CFScript into ComboFix.exe

When finished, it shall produce a log for you at C:\ComboFix.txt which I will require in your next reply.

You receive a message that a file was submitted successfully

chen1276 · 24-Oct-2009, 10:53 PM #5

Done! The ComboFix.txt log is below.

I forgot to mention two additional pieces of information:
1. Each time I ran ComboFix, I initially experienced a BSOD. Upon re-running, everything progressed smoothly
2. After the first ComboFix run, I already noted some improvements - Firefox began working again, but IE was still going to BSOD upon startup.

Here's the log:

ComboFix 09-10-24.01 - Hank Chen 10/24/2009 21:24.3.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.510.232 [GMT -4:00]
Running from: c:\documents and settings\Hank Chen\Desktop\ComboFix.exe
Command switches used :: c:\documents and settings\Hank Chen\Desktop\CFScript.txt

file zipped: c:\windows\aderaqil.dll
file zipped: c:\windows\aducosuw.dll
file zipped: c:\windows\agitejig.dll
file zipped: c:\windows\ahapahogevo.dll
file zipped: c:\windows\akexafesujo.dll
file zipped: c:\windows\akugucoboj.dll
file zipped: c:\windows\amojacuq.dll
file zipped: c:\windows\amuyeval.dll
file zipped: c:\windows\awuvuniw.dll
file zipped: c:\windows\axusebebebagu.dll
file zipped: c:\windows\azubexob.dll
file zipped: c:\windows\ebejazeti.dll
file zipped: c:\windows\eduniyanu.dll
file zipped: c:\windows\emaxoret.dll
file zipped: c:\windows\enolowunika.dll
file zipped: c:\windows\enozesesu.dll
file zipped: c:\windows\enuyotevokomas.dll
file zipped: c:\windows\eqidilawetidalu.dll
file zipped: c:\windows\esetofok.dll
file zipped: c:\windows\ewefatah.dll
file zipped: c:\windows\exoxitoke.dll
file zipped: c:\windows\eyejeroy.dll
file zipped: c:\windows\Hwexohofa.dat
file zipped: c:\windows\icemutivo.dll
file zipped: c:\windows\icohikilugo.dll
file zipped: c:\windows\ifirulipiz.dll
file zipped: c:\windows\ihojecuxiqivoq.dll
file zipped: c:\windows\ijaducen.dll
file zipped: c:\windows\ijohajilesoqaxa.dll
file zipped: c:\windows\ilelapeya.dll
file zipped: c:\windows\ileyozew.dll
file zipped: c:\windows\isisapamot.dll
file zipped: c:\windows\isiyozoxujesazu.dll
file zipped: c:\windows\isosohah.dll
file zipped: c:\windows\itatanekule.dll
file zipped: c:\windows\ocadipotafapi.dll
file zipped: c:\windows\ocelahet.dll
file zipped: c:\windows\ocepojuyiboxavow.dll
file zipped: c:\windows\ofawubixax.dll
file zipped: c:\windows\ofetehihehate.dll
file zipped: c:\windows\ofulijefedawev.dll
file zipped: c:\windows\ohozuteroyow.dll
file zipped: c:\windows\olasijeg.dll
file zipped: c:\windows\oluroviqohuwu.dll
file zipped: c:\windows\opuxatesuxid.dll
file zipped: c:\windows\orikuyepebeham.dll
file zipped: c:\windows\osegatagacuticab.dll
file zipped: c:\windows\ovabuyud.dll
file zipped: c:\windows\ovayiyukejub.dll
file zipped: c:\windows\ovilamut.dll
file zipped: c:\windows\owegobey.dll
file zipped: c:\windows\owulofose.dll
file zipped: c:\windows\oxetafuzacan.dll
file zipped: c:\windows\ozigoxutuxunaka.dll
file zipped: c:\windows\SYSTEM32\DRIVERS\xwoarh.sys
file zipped: c:\windows\ufizifowasi.dll
file zipped: c:\windows\ugubecidu.dll
file zipped: c:\windows\upifepov.dll
file zipped: c:\windows\urukeyoj.dll
file zipped: c:\windows\usiporereweril.dll
file zipped: c:\windows\usofiyupadewiyo.dll
file zipped: c:\windows\utanulam.dll
file zipped: c:\windows\utoxipabusaxupe.dll
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\aderaqil.dll
c:\windows\aducosuw.dll
c:\windows\agitejig.dll
c:\windows\ahapahogevo.dll
c:\windows\akexafesujo.dll
c:\windows\akugucoboj.dll
c:\windows\amojacuq.dll
c:\windows\amuyeval.dll
c:\windows\awuvuniw.dll
c:\windows\axusebebebagu.dll
c:\windows\azubexob.dll
c:\windows\ebejazeti.dll
c:\windows\eduniyanu.dll
c:\windows\emaxoret.dll
c:\windows\enolowunika.dll
c:\windows\enozesesu.dll
c:\windows\enuyotevokomas.dll
c:\windows\eqidilawetidalu.dll
c:\windows\esetofok.dll
c:\windows\ewefatah.dll
c:\windows\exoxitoke.dll
c:\windows\eyejeroy.dll
c:\windows\Hwexohofa.dat
c:\windows\icemutivo.dll
c:\windows\icohikilugo.dll
c:\windows\ifirulipiz.dll
c:\windows\ihojecuxiqivoq.dll
c:\windows\ijaducen.dll
c:\windows\ijohajilesoqaxa.dll
c:\windows\ilelapeya.dll
c:\windows\ileyozew.dll
c:\windows\isisapamot.dll
c:\windows\isiyozoxujesazu.dll
c:\windows\isosohah.dll
c:\windows\itatanekule.dll
c:\windows\ocadipotafapi.dll
c:\windows\ocelahet.dll
c:\windows\ocepojuyiboxavow.dll
c:\windows\ofawubixax.dll
c:\windows\ofetehihehate.dll
c:\windows\ofulijefedawev.dll
c:\windows\ohozuteroyow.dll
c:\windows\olasijeg.dll
c:\windows\oluroviqohuwu.dll
c:\windows\opuxatesuxid.dll
c:\windows\orikuyepebeham.dll
c:\windows\osegatagacuticab.dll
c:\windows\ovabuyud.dll
c:\windows\ovayiyukejub.dll
c:\windows\ovilamut.dll
c:\windows\owegobey.dll
c:\windows\owulofose.dll
c:\windows\oxetafuzacan.dll
c:\windows\ozigoxutuxunaka.dll
c:\windows\SYSTEM32\DRIVERS\xwoarh.sys
c:\windows\ufizifowasi.dll
c:\windows\ugubecidu.dll
c:\windows\upifepov.dll
c:\windows\urukeyoj.dll
c:\windows\usiporereweril.dll
c:\windows\usofiyupadewiyo.dll
c:\windows\utanulam.dll
c:\windows\utoxipabusaxupe.dll

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_KBDBR.EXE
-------\Legacy_xwoarh
-------\Service_kbdbr.exe
-------\Service_xwoarh

((((((((((((((((((((((((( Files Created from 2009-09-25 to 2009-10-25 )))))))))))))))))))))))))))))))
.

2009-10-21 01:03 . 2009-10-21 01:03 -------- d-----w- c:\program files\Trend Micro
2009-10-21 00:16 . 2009-10-21 00:17 -------- d-----w- c:\documents and settings\Hank Chen\Local Settings\Application Data\Temp
2009-10-20 12:17 . 2009-10-20 12:17 -------- d-sh--w- c:\documents and settings\LocalService\IETldCache
2009-10-15 23:52 . 2009-10-15 23:52 -------- d-----w- c:\program files\TeaTimer (Spybot - Search & Destroy)
2009-10-15 23:52 . 2009-10-15 23:52 -------- d-----w- c:\program files\SDHelper (Spybot - Search & Destroy)
2009-10-12 18:15 . 2009-10-12 18:15 3121 ----a-w- c:\windows\uvaxecug.dll
2009-10-10 11:58 . 2009-10-10 11:58 3121 ----a-w- c:\windows\ucejifoha.dll
2009-09-28 11:28 . 2009-09-28 11:28 -------- d-sh--w- c:\documents and settings\NetworkService\IETldCache
2009-09-28 11:28 . 2009-09-28 11:28 -------- d-sh--w- c:\windows\system32\config\systemprofile\IETldCache
2009-09-28 11:28 . 2009-09-28 11:28 -------- d-sh--w- c:\documents and settings\Hank Chen\IETldCache
2009-09-27 21:07 . 2009-09-27 21:11 -------- dc-h--w- c:\windows\ie8

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-10-25 01:30 . 2005-04-29 04:07 -------- d-----w- c:\documents and settings\Hank Chen\Application Data\Skype
2009-10-21 00:28 . 2004-07-27 00:06 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-10-16 01:41 . 2004-07-20 02:54 -------- d-----w- c:\program files\Java
2009-10-16 00:31 . 2004-07-28 15:56 -------- d-----w- c:\program files\Google
2009-10-15 23:58 . 2004-07-27 00:06 -------- d-----w- c:\program files\Spybot - Search & Destroy
2008-09-05 15:49 . 2005-05-09 13:34 122880 ----a-w- c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
.

((((((((((((((((((((((((((((( SnapShot@2009-10-24_01.27.54 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-10-25 01:35 . 2009-10-25 01:35 16384 c:\windows\Temp\Perflib_Perfdata_418.dat
+ 2009-10-25 01:35 . 2009-10-25 01:35 16384 c:\windows\Temp\Perflib_Perfdata_3f8.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PicoZip"="c:\program files\PicoZip\PicoZipTray.exe" [2004-07-05 449536]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2008-04-14 1695232]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2006-12-12 25343016]
"updateMgr"="c:\program files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [2006-03-30 313472]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-01-26 2144088]
"Google Update"="c:\documents and settings\Hank Chen\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" [2009-10-21 133104]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Apoint"="c:\program files\Apoint\Apoint.exe" [2004-02-02 155648]
"Dell QuickSet"="c:\program files\Dell\QuickSet\quickset.exe" [2004-03-05 487424]
"DVDSentry"="c:\windows\System32\DSentry.exe" [2002-07-17 28672]
"AdaptecDirectCD"="c:\program files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe" [2002-12-17 684032]
"PRONoMgr.exe"="c:\program files\Intel\PROSetWireless\NCS\PROSet\PRONoMgr.exe" [2003-12-19 86016]
"TempRemove"="c:\program files\Crystal Ball\CB Predictor\terminator.exe" [2003-11-06 7680]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2004-12-13 180269]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2005-12-20 278528]
"igfxtray"="c:\windows\system32\igfxtray.exe" [2005-09-20 94208]
"igfxhkcmd"="c:\windows\system32\hkcmd.exe" [2005-09-20 77824]
"igfxpers"="c:\windows\system32\igfxpers.exe" [2005-09-20 114688]
"Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2008-09-05 29744]
"HPMVTray"="c:\program files\Hewlett-Packard\HP Media Vault 2100\HPMVTray.exe" [2008-01-24 374064]
"HP Software Update"="c:\program files\Hp\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-07-25 149280]
"Cduboqoyejami"="c:\windows\oxeyopogicab.dll" [BU]

c:\documents and settings\Hank Chen\Start Menu\Programs\Startup\
HotSync Manager.lnk - c:\program files\Palm\HOTSYNC.EXE [2003-10-14 299008]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-9-24 29696]
Dataviz Messenger.lnk - c:\windows\DvzCommon\DvzMsgr.exe [2003-7-1 24576]
Digital Line Detect.lnk - c:\program files\Digital Line Detect\DLG.exe [2004-7-19 24576]
VPN Client.lnk - c:\windows\Installer\{3E5562ED-69AB-4CEC-91E2-64E18EC5ACC6}\Icon3E5562ED7.ico [2004-9-10 6144]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\Sebring]
2004-01-13 19:17 110592 ----a-w- c:\windows\SYSTEM32\LgNotify.dll

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\Auth orizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Money 2006\\MNYCoreFiles\\msmoney.exe"=
"c:\\Program Files\\Palm\\HOTSYNC.EXE"=
"c:\\Program Files\\Hewlett-Packard\\HP Media Vault 2100\\NASDriveMapper.exe"=
"c:\\Program Files\\Hewlett-Packard\\HP Media Vault 2100\\NASCfg.exe"=
"c:\\Program Files\\Hewlett-Packard\\HP Media Vault 2100\\HPMVTray.exe"=
"c:\\Program Files\\Hewlett-Packard\\HP Media Vault 2100\\NASSelector.exe"=
"c:\\Program Files\\NewTech Infosystems\\NTI Shadow 3\\shadow.exe"=
"c:\\Program Files\\Hewlett-Packard\\HP Media Vault 2100\\DoTask.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Hp\\Digital Imaging\\bin\\hpqscnvw.exe"=
"c:\\Program Files\\Hp\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\Hp\\Digital Imaging\\bin\\hpqnrs08.exe"=
"c:\\Program Files\\TVUPlayer\\TVUPlayer.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

R3 GTICARD;GTICARD;c:\windows\SYSTEM32\DRIVERS\gticard.sys [2/14/2003 4:03 PM 59328]
S3 {E2B953A7-195A-44F9-9BA3-3D5F4E32BB55};AIM 3.0 Part 01 Codec Driver CH-7009-B;c:\windows\SYSTEM32\DRIVERS\wa301b.sys [1/1/1980 1:00 AM 33847]
S3 GoogleDesktopManager-061008-081103;Google Desktop Manager 5.7.806.10245;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [11/3/2004 3:12 PM 29744]
.
Contents of the 'Scheduled Tasks' folder

2009-10-25 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1868879660-976857361-759642186-1005Core.job
- c:\documents and settings\Hank Chen\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-10-21 00:16]

2009-10-25 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1868879660-976857361-759642186-1005UA.job
- c:\documents and settings\Hank Chen\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-10-21 00:16]
.
.
------- Supplementary Scan -------
.
uDefault_Search_URL = hxxp://www.google.com/ie
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
TCP: {1B05AFD6-682C-4E0C-9A7A-DD3AB58CA55D} = 203.252.32.4,200.255.255.65
DPF: {41D2C0E9-DA08-4B73-B899-656371EAE058} - hxxp://hpmediavault/Webshare/ActivexDLL/PhotoLdr.cab
FF - ProfilePath - c:\documents and settings\Hank Chen\Application Data\Mozilla\Firefox\Profiles\cjqlaqna.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://my.yahoo.com
FF - component: c:\program files\Mozilla Firefox\components\GoogleDesktopMozilla.dll
FF - plugin: c:\documents and settings\Hank Chen\Local Settings\Application Data\Google\Update\1.2.183.7\npGoogleOneClick8.dll
FF - plugin: c:\program files\Google\Picasa3\npPicasa3.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npGoogleGadgetPluginFirefoxWin.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\NPUploader.dll
FF - plugin: c:\program files\Viewpoint\Viewpoint Media Player\npViewpoint.dll
FF - HiddenExtension: XUL Cache: {E7E29EF7-AA72-4B0C-AFF9-4B3BC55673C5} - c:\documents and settings\Hank Chen\Local Settings\Application Data\{E7E29EF7-AA72-4B0C-AFF9-4B3BC55673C5}
FF - HiddenExtension: XUL Cache: {21E7E408-EE4B-4372-B8DB-9F8905EDC627} - c:\documents and settings\Fay Chen\Local Settings\Application Data\{21E7E408-EE4B-4372-B8DB-9F8905EDC627}\

---- FIREFOX POLICIES ----
FF - user.js: yahoo.homepage.dontask - true.
- - - - ORPHANS REMOVED - - - -

BHO-{EEA590B3-0976-7A81-25F5-0545707825B0} - (no file)

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-10-24 21:35
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_LOCAL_MACHINE\software\DeterministicNetworks\DNE\Parameters]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00, 79,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,79,00,73,00, \
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(1260)
c:\windows\System32\LgNotify.dll

- - - - - - - > 'explorer.exe'(2424)
c:\windows\system32\ieframe.dll
c:\windows\system32\OneX.DLL
c:\windows\system32\eappprxy.dll
c:\windows\system32\webcheck.dll
.
------------------------ Other Running Processes ------------------------
.
c:\windows\System32\S24EvMon.exe
c:\windows\System32\SCardSvr.exe
c:\program files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
c:\windows\System32\basfipm.exe
c:\program files\Cisco Systems\VPN Client\cvpnd.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Binn\sqlservr.exe
c:\windows\system32\HPZipm12.exe
c:\windows\System32\RegSrvc.exe
c:\windows\system32\ZCfgSvc.exe
c:\windows\system32\wdfmgr.exe
c:\program files\Canon\CAL\CALMAIN.exe
c:\windows\system32\wscntfy.exe
c:\windows\System32\1XConfig.exe
c:\combofix\CF15929.exe
c:\windows\system32\igfxsrvc.exe
c:\program files\iPod\bin\iPodService.exe
c:\program files\Apoint\Apntex.exe
c:\program files\Skype\Plugin Manager\SkypePM.exe
c:\combofix\PEV.cfxxe
.
**************************************************************************
.
Completion time: 2009-10-25 21:45 - machine was rebooted
ComboFix-quarantined-files.txt 2009-10-25 01:44
ComboFix2.txt 2009-10-24 01:33
ComboFix3.txt 2007-04-29 05:35

Pre-Run: 600,051,712 bytes free
Post-Run: 314,232,832 bytes free

- - End Of File - - 09239F81D52E60D218044230017C6A2B

**sjpritch25** · 25-Oct-2009, 06:23 PM #6

1. Close any open browsers.

2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

3. Open notepad and copy/paste the text in the quotebox below into it:

Code:

File::
c:\windows\uvaxecug.dll
c:\windows\ucejifoha.dll

Save this as CFScript.txt, in the same location as ComboFix.exe

Refering to the picture above, drag CFScript into ComboFix.exe

When finished, it shall produce a log for you at C:\ComboFix.txt which I will require in your next reply.

====================================================

Navigate to the following folder
C:\Qoobox\Quarantine\

Please visit this site and follow the instructions for uploading the [70]-Submit_2009-10-24@24.21.zipfile.

chen1276 · 31-Oct-2009, 10:33 PM #7

Sorry for the delay. I uploaded the malware files as requested.

Here's the new ComboFix.log.

ComboFix 09-10-24.01 - Hank Chen 10/31/2009 21:08.4.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.510.311 [GMT -4:00]
Running from: c:\documents and settings\Hank Chen\Desktop\ComboFix.exe
Command switches used :: c:\documents and settings\Hank Chen\Desktop\CFScript.txt

FILE ::
"c:\windows\ucejifoha.dll"
"c:\windows\uvaxecug.dll"
.

((((((((((((((((((((((((( Files Created from 2009-10-01 to 2009-11-01 )))))))))))))))))))))))))))))))
.

2009-10-28 00:53 . 2009-10-28 00:53 -------- d-----w- C:\8bc6ec040f871e4edc209e29
2009-10-27 11:58 . 2009-10-27 11:58 -------- d-----w- c:\documents and settings\Hank Chen\Local Settings\Application Data\PCHealth
2009-10-26 01:13 . 2009-10-26 01:13 -------- d-sh--w- c:\documents and settings\Default User\IETldCache
2009-10-26 01:12 . 2009-10-26 01:12 -------- d-----w- c:\windows\system32\XPSViewer
2009-10-26 01:12 . 2009-10-26 01:12 -------- d-----w- c:\program files\MSBuild
2009-10-26 01:12 . 2009-10-26 01:12 -------- d-----w- c:\program files\Reference Assemblies
2009-10-26 01:11 . 2008-07-06 12:06 89088 ------w- c:\windows\system32\dllcache\filterpipelineprintproc.dll
2009-10-26 01:11 . 2008-07-06 12:06 117760 ------w- c:\windows\system32\prntvpt.dll
2009-10-26 01:11 . 2008-07-06 10:50 597504 ------w- c:\windows\system32\dllcache\printfilterpipelinesvc.exe
2009-10-26 01:11 . 2009-10-26 01:11 -------- d-----w- C:\f1b2e36d1e2d4eced3ab
2009-10-26 01:11 . 2008-07-06 12:06 575488 ------w- c:\windows\system32\xpsshhdr.dll
2009-10-26 01:11 . 2008-07-06 12:06 575488 ------w- c:\windows\system32\dllcache\xpsshhdr.dll
2009-10-26 01:11 . 2008-07-06 12:06 1676288 ------w- c:\windows\system32\xpssvcs.dll
2009-10-26 01:11 . 2008-07-06 12:06 1676288 ------w- c:\windows\system32\dllcache\xpssvcs.dll
2009-10-25 12:20 . 2009-10-25 12:20 -------- d-----w- c:\windows\system32\KB905474
2009-10-25 12:20 . 2009-03-11 02:26 1403264 ----a-w- c:\windows\system32\KB905474\wganotifypackageinner.exe
2009-10-25 12:20 . 2009-03-11 02:18 453512 ----a-w- c:\windows\system32\KB905474\wgasetup.exe
2009-10-25 12:08 . 2009-10-25 12:27 -------- d-----w- c:\windows\ie8updates
2009-10-25 02:03 . 2009-10-25 02:03 -------- d-sh--w- c:\documents and settings\Hank Chen\PrivacIE
2009-10-25 01:46 . 2009-08-29 08:08 12800 ------w- c:\windows\system32\dllcache\xpshims.dll
2009-10-25 01:46 . 2009-08-29 08:08 246272 ------w- c:\windows\system32\dllcache\ieproxy.dll
2009-10-25 01:45 . 2009-06-21 21:44 153088 ------w- c:\windows\system32\dllcache\triedit.dll
2009-10-25 01:44 . 2009-07-10 13:27 1315328 ------w- c:\windows\system32\dllcache\msoe.dll
2009-10-21 01:03 . 2009-10-21 01:03 -------- d-----w- c:\program files\Trend Micro
2009-10-21 00:16 . 2009-11-01 00:46 -------- d-----w- c:\documents and settings\Hank Chen\Local Settings\Application Data\Temp
2009-10-20 12:17 . 2009-10-20 12:17 -------- d-sh--w- c:\documents and settings\LocalService\IETldCache
2009-10-15 23:52 . 2009-10-15 23:52 -------- d-----w- c:\program files\TeaTimer (Spybot - Search & Destroy)
2009-10-15 23:52 . 2009-10-15 23:52 -------- d-----w- c:\program files\SDHelper (Spybot - Search & Destroy)
2009-10-12 18:15 . 2009-10-12 18:15 3121 ----a-w- c:\windows\uvaxecug.dll
2009-10-10 11:58 . 2009-10-10 11:58 3121 ----a-w- c:\windows\ucejifoha.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-11-01 01:16 . 2005-04-29 04:07 -------- d-----w- c:\documents and settings\Hank Chen\Application Data\Skype
2009-10-29 12:14 . 2004-08-02 14:47 58464 ----a-w- c:\documents and settings\Hank Chen\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-10-21 00:28 . 2004-07-27 00:06 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-10-16 01:41 . 2004-07-20 02:54 -------- d-----w- c:\program files\Java
2009-10-16 00:31 . 2004-07-28 15:56 -------- d-----w- c:\program files\Google
2009-10-15 23:58 . 2004-07-27 00:06 -------- d-----w- c:\program files\Spybot - Search & Destroy
2009-09-11 14:18 . 2004-03-19 22:40 136192 ----a-w- c:\windows\system32\msv1_0.dll
2009-09-04 21:03 . 2004-03-30 01:48 58880 ----a-w- c:\windows\system32\msasn1.dll
2009-08-29 08:08 . 2004-02-06 23:05 916480 ----a-w- c:\windows\system32\wininet.dll
2009-08-26 08:00 . 2004-03-19 22:43 247326 ----a-w- c:\windows\system32\strmdll.dll
2009-08-05 09:01 . 2002-12-12 05:14 204800 ----a-w- c:\windows\system32\mswebdvd.dll
2009-08-05 00:44 . 2003-04-24 08:57 2189184 ------w- c:\windows\system32\ntoskrnl.exe
2009-08-04 14:20 . 2003-04-24 08:57 2066048 ------w- c:\windows\system32\ntkrnlpa.exe
2008-09-05 15:49 . 2005-05-09 13:34 122880 ----a-w- c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
.

((((((((((((((((((((((((((((( SnapShot@2009-10-24_01.27.54 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-10-31 12:35 . 2009-10-31 12:35 16384 c:\windows\Temp\Perflib_Perfdata_540.dat
+ 2004-03-19 22:44 . 2009-06-25 08:25 54272 c:\windows\SYSTEM32\wdigest.dll
+ 2007-01-29 08:58 . 2009-07-14 11:03 46080 c:\windows\SYSTEM32\tzchange.exe
+ 2008-07-30 01:10 . 2008-07-30 01:10 26112 c:\windows\SYSTEM32\TsWpfWrp.exe
+ 2004-03-19 22:43 . 2009-06-12 12:31 80896 c:\windows\SYSTEM32\tlntsess.exe
+ 2003-08-05 21:15 . 2009-06-12 12:31 76288 c:\windows\SYSTEM32\telnet.exe
+ 2009-10-26 01:11 . 2008-07-06 12:06 89088 c:\windows\SYSTEM32\SPOOL\PRTPROCS\W32X86\filterpipelineprintproc.dll
+ 2004-03-19 22:42 . 2009-06-25 08:25 56832 c:\windows\SYSTEM32\secur32.dll
- 2004-03-19 22:42 . 2009-02-03 19:59 56832 c:\windows\SYSTEM32\secur32.dll
+ 2008-07-29 23:59 . 2008-07-29 23:59 43544 c:\windows\SYSTEM32\PresentationHostProxy.dll
+ 2004-07-20 02:42 . 2009-10-26 01:17 80628 c:\windows\SYSTEM32\PERFC009.DAT
+ 2008-07-25 15:17 . 2008-07-25 15:17 15360 c:\windows\SYSTEM32\MUI\0409\mscorees.dll
+ 2006-11-08 02:03 . 2009-08-29 08:08 55296 c:\windows\SYSTEM32\msfeedsbs.dll
- 2006-11-08 02:03 . 2009-03-08 08:31 55296 c:\windows\SYSTEM32\msfeedsbs.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 83968 c:\windows\SYSTEM32\mscories.dll
+ 2004-03-19 22:38 . 2009-08-29 08:08 25600 c:\windows\SYSTEM32\jsproxy.dll
- 2004-03-19 22:38 . 2009-03-08 08:33 25600 c:\windows\SYSTEM32\jsproxy.dll
+ 2008-07-29 23:24 . 2008-07-29 23:24 97800 c:\windows\SYSTEM32\infocardapi.dll
+ 2008-07-29 23:24 . 2008-07-29 23:24 11264 c:\windows\SYSTEM32\icardres.dll
+ 2004-03-19 22:37 . 2009-07-29 04:37 81920 c:\windows\SYSTEM32\fontsub.dll
+ 2008-07-30 01:10 . 2008-07-30 01:10 73720 c:\windows\SYSTEM32\dxva2.dll
+ 2004-03-19 22:38 . 2009-06-24 11:18 92928 c:\windows\SYSTEM32\DRIVERS\ksecdd.sys
+ 2009-06-25 08:25 . 2009-06-25 08:25 54272 c:\windows\SYSTEM32\DLLCACHE\wdigest.dll
+ 2009-06-12 12:31 . 2009-06-12 12:31 80896 c:\windows\SYSTEM32\DLLCACHE\tlntsess.exe
+ 2009-06-12 12:31 . 2009-06-12 12:31 76288 c:\windows\SYSTEM32\DLLCACHE\telnet.exe
+ 2009-02-03 19:59 . 2009-06-25 08:25 56832 c:\windows\SYSTEM32\DLLCACHE\secur32.dll
- 2009-02-03 19:59 . 2009-02-03 19:59 56832 c:\windows\SYSTEM32\DLLCACHE\secur32.dll
- 2007-05-10 16:39 . 2009-03-08 08:31 55296 c:\windows\SYSTEM32\DLLCACHE\msfeedsbs.dll
+ 2007-05-10 16:39 . 2009-08-29 08:08 55296 c:\windows\SYSTEM32\DLLCACHE\msfeedsbs.dll
+ 2009-09-04 21:03 . 2009-09-04 21:03 58880 c:\windows\SYSTEM32\DLLCACHE\msasn1.dll
+ 2009-06-24 11:18 . 2009-06-24 11:18 92928 c:\windows\SYSTEM32\DLLCACHE\ksecdd.sys
- 2006-05-10 05:22 . 2009-03-08 08:33 25600 c:\windows\SYSTEM32\DLLCACHE\jsproxy.dll
+ 2006-05-10 05:22 . 2009-08-29 08:08 25600 c:\windows\SYSTEM32\DLLCACHE\jsproxy.dll
+ 2009-07-29 04:37 . 2009-07-29 04:37 81920 c:\windows\SYSTEM32\DLLCACHE\fontsub.dll
+ 2009-06-10 14:13 . 2009-06-10 14:13 84992 c:\windows\SYSTEM32\DLLCACHE\avifil32.dll
+ 2009-07-17 19:01 . 2009-07-17 19:01 58880 c:\windows\SYSTEM32\DLLCACHE\atl.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 96760 c:\windows\SYSTEM32\dfshim.dll
+ 2004-03-19 22:34 . 2009-06-10 14:13 84992 c:\windows\SYSTEM32\avifil32.dll
- 2004-03-19 22:34 . 2008-04-14 00:11 84992 c:\windows\SYSTEM32\avifil32.dll
+ 2004-03-19 22:33 . 2009-07-17 19:01 58880 c:\windows\SYSTEM32\atl.dll
- 2004-03-19 22:33 . 2008-04-14 00:11 58880 c:\windows\SYSTEM32\atl.dll
+ 2008-07-30 03:40 . 2008-07-30 03:40 70648 c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
+ 2008-07-30 03:40 . 2008-07-30 03:40 91136 c:\windows\Microsoft.NET\Framework\v3.5\MSBuild.exe
+ 2008-07-30 03:40 . 2008-07-30 03:40 41984 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft.VisualC.STLCLR.dll
+ 2008-07-30 03:40 . 2008-07-30 03:40 40960 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft.Data.Entity.Build.Tasks.d ll
+ 2008-07-29 22:47 . 2008-07-29 22:47 89080 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.2052.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 92664 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1042.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 95224 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1041.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 89592 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1028.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 84480 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.2052.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 94720 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1042.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 97792 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1041.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 84992 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1028.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 97280 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\DeleteTemp.exe
+ 2008-07-30 03:40 . 2008-07-30 03:40 95224 c:\windows\Microsoft.NET\Framework\v3.5\EdmGen.exe
+ 2008-07-30 03:40 . 2008-07-30 03:40 78856 c:\windows\Microsoft.NET\Framework\v3.5\DataSvcUtil.exe
+ 2008-07-30 03:40 . 2008-07-30 03:40 41984 c:\windows\Microsoft.NET\Framework\v3.5\AddInUtil.exe
+ 2008-07-30 03:40 . 2008-07-30 03:40 41992 c:\windows\Microsoft.NET\Framework\v3.5\AddInProcess32.exe
+ 2008-07-30 03:40 . 2008-07-30 03:40 41992 c:\windows\Microsoft.NET\Framework\v3.5\AddInProcess.exe
+ 2008-07-30 01:10 . 2008-07-30 01:10 46104 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
+ 2008-07-29 23:59 . 2008-07-29 23:59 32768 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationCFFRasterizer.dll
+ 2008-07-30 01:10 . 2008-07-30 01:10 71160 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PenIMC.dll
+ 2008-07-29 23:32 . 2008-07-29 23:32 17448 c:\windows\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\PerformanceCounterInstaller.exe
+ 2008-07-29 23:16 . 2008-07-29 23:16 32768 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
+ 2008-07-29 23:16 . 2008-07-29 23:16 73728 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.Install.dll
+ 2008-07-29 23:16 . 2008-07-29 23:16 20504 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceMonikerSupport.dll
+ 2008-07-29 23:16 . 2008-07-29 23:16 11280 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelEvents.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 37896 c:\windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 81400 c:\windows\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL
+ 2008-07-25 15:17 . 2008-07-25 15:17 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions .dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 57392 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thu nk.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install. dll
- 2005-09-23 11:28 . 2005-09-23 11:28 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install. dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 95232 c:\windows\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 16896 c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 61952 c:\windows\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe
- 2005-09-23 11:28 . 2005-09-23 11:28 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
+ 2008-07-25 15:17 . 2008-07-25 15:17 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
+ 2008-07-25 15:17 . 2008-07-25 15:17 53248 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
- 2005-09-23 11:28 . 2005-09-23 11:28 53248 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
+ 2008-07-25 15:17 . 2008-07-25 15:17 88584 c:\windows\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 24584 c:\windows\Microsoft.NET\Framework\v2.0.50727\normalization.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 31744 c:\windows\Microsoft.NET\Framework\v2.0.50727\MUI\0409\mscorsecr.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 19456 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscortim.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 69632 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
+ 2008-07-25 15:16 . 2008-07-25 15:16 18944 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 77312 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 94208 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorld.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 46592 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorie.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 83456 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 69632 c:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
+ 2008-07-25 15:16 . 2008-07-25 15:16 69632 c:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
+ 2008-07-25 15:16 . 2008-07-25 15:16 97792 c:\windows\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 12800 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProce ssor.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 12800 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProce ssor.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 40960 c:\windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe
- 2005-09-23 11:28 . 2005-09-23 11:28 40960 c:\windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe
+ 2008-07-25 15:17 . 2008-07-25 15:17 72192 c:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 72192 c:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 65032 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
- 2005-09-23 11:28 . 2005-09-23 11:28 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
+ 2008-07-25 15:17 . 2008-07-25 15:17 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEHost.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 18936 c:\windows\Microsoft.NET\Framework\v2.0.50727\fusion.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 62968 c:\windows\Microsoft.NET\Framework\v2.0.50727\dfdll.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 35320 c:\windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
+ 2008-07-25 15:17 . 2008-07-25 15:17 69120 c:\windows\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 27136 c:\windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 13312 c:\windows\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 13312 c:\windows\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 80376 c:\windows\Microsoft.NET\Framework\v2.0.50727\csc.exe
+ 2008-07-25 15:17 . 2008-07-25 15:17 89608 c:\windows\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll
+ 2008-11-25 08:59 . 2008-11-25 08:59 31560 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
+ 2008-07-25 15:16 . 2008-07-25 15:16 34312 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
+ 2008-07-25 15:16 . 2008-07-25 15:16 33288 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
+ 2008-07-25 15:16 . 2008-07-25 15:16 24576 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
+ 2008-07-25 15:16 . 2008-07-25 15:16 84480 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 33800 c:\windows\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 17416 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 22024 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
+ 2008-07-25 15:16 . 2008-07-25 15:16 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
+ 2008-07-25 15:17 . 2008-07-25 15:17 58880 c:\windows\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
+ 2008-07-25 15:16 . 2008-07-25 15:16 98808 c:\windows\Microsoft.NET\Framework\v2.0.50727\alink.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 10752 c:\windows\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 10752 c:\windows\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 13824 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll
+ 2009-06-24 23:56 . 2009-06-24 23:56 73728 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe
- 2007-04-14 00:58 . 2007-04-14 00:58 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
+ 2008-05-28 04:49 . 2008-05-28 04:49 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
- 2007-04-14 00:57 . 2007-04-14 00:57 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
+ 2008-05-28 04:49 . 2008-05-28 04:49 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
- 2007-04-14 00:57 . 2007-04-14 00:57 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
+ 2008-05-28 04:49 . 2008-05-28 04:49 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
+ 2008-05-28 05:30 . 2008-05-28 05:30 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
- 2007-04-14 01:30 . 2007-04-14 01:30 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
+ 2008-07-25 15:16 . 2008-07-25 15:16 96768 c:\windows\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 16896 c:\windows\Microsoft.NET\Framework\SharedReg12.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 16896 c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 16896 c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 16896 c:\windows\Microsoft.NET\Framework\sbscmp10.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 82944 c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe
+ 2008-07-30 01:07 . 2008-07-30 01:07 23040 c:\windows\Installer\2098a4e.msp
+ 2009-10-26 01:10 . 2009-10-26 01:10 88576 c:\windows\Installer\2058394.msi
+ 2009-10-25 12:27 . 2009-03-08 08:33 12288 c:\windows\ie8updates\KB974455-IE8\xpshims.dll
+ 2009-10-25 12:27 . 2009-03-08 08:31 55296 c:\windows\ie8updates\KB974455-IE8\msfeedsbs.dll
+ 2009-10-25 12:27 . 2009-03-08 08:33 25600 c:\windows\ie8updates\KB974455-IE8\jsproxy.dll
+ 2009-10-26 01:11 . 2008-07-06 12:06 89088 c:\windows\Driver Cache\I386\filterpipelineprintproc.dll

chen1276 · 31-Oct-2009, 10:36 PM #8

Part 2 of the report

+ 2009-10-25 12:14 . 2009-10-25 12:14 90112 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000. 0__b03f5f7f11d50a3a_29f076e8\System.Drawing.Design.dll
+ 2009-10-25 12:14 . 2009-10-25 12:14 61440 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b0 3f5f7f11d50a3a_fcf75543\CustomMarshalers.dll
+ 2009-10-26 12:07 . 2009-10-26 12:07 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\a715aa4 42ef87ae99b3ade185599249d\UIAutomationProvider.ni.dll
+ 2009-10-26 18:55 . 2009-10-26 18:55 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\423f794 d1f4ed6e120fbb02e436491cb\System.Windows.Presentation.ni.dll
+ 2009-10-26 18:55 . 2009-10-26 18:55 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\19ca174 7c1ea18a3b639b302bca8df93\System.Web.DynamicData.Design.ni.dll
+ 2009-10-26 18:53 . 2009-10-26 18:53 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\532438e 2acfcadc469a4d468c51f8451\System.ComponentModel.DataAnnotations.ni.dll
+ 2009-10-26 18:53 . 2009-10-26 18:53 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\597b20e 1b053d6a510cfe033c07a63e6\System.AddIn.Contract.ni.dll
+ 2009-10-26 12:04 . 2009-10-26 12:04 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\2d7408a 0232f2e2efd0d7adf5dfa733a\PresentationFontCache.ni.exe
+ 2009-10-26 12:03 . 2009-10-26 12:03 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\c8fd2d9 233f8ea3031fb16f697635231\PresentationCFFRasterizer.ni.dll
+ 2009-10-26 18:54 . 2009-10-26 18:54 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\790cf1edb17ee4 1b59be62ecbd59613b\Microsoft.Vsa.ni.dll
+ 2009-10-26 18:52 . 2009-10-26 18:52 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\e9aba2e ab90d647356f65e66053da02b\Microsoft.Build.Framework.ni.dll
+ 2009-10-26 18:52 . 2009-10-26 18:52 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\28343d4 70d992f169ca0e7cdb3cc3117\Microsoft.Build.Framework.ni.dll
+ 2009-10-26 18:52 . 2009-10-26 18:52 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\f4e38208e88cb4cc314a1d 6543b9fcc6\dfsvc.ni.exe
+ 2009-10-26 18:52 . 2009-10-26 18:52 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\11eb4f6606ba01 e5128805759121ea6c\Accessibility.ni.dll
+ 2009-10-26 01:12 . 2009-10-26 01:12 94208 c:\windows\assembly\GAC_MSIL\WindowsFormsIntegration\3.0.0.0__31bf3856ad364 e35\WindowsFormsIntegration.dll
+ 2009-10-26 01:12 . 2009-10-26 01:12 98304 c:\windows\assembly\GAC_MSIL\UIAutomationTypes\3.0.0.0__31bf3856ad364e35\UI AutomationTypes.dll
+ 2009-10-26 01:12 . 2009-10-26 01:12 40960 c:\windows\assembly\GAC_MSIL\UIAutomationProvider\3.0.0.0__31bf3856ad364e35 \UIAutomationProvider.dll
+ 2009-10-26 01:13 . 2009-10-26 01:13 12288 c:\windows\assembly\GAC_MSIL\System.Windows.Presentation\3.5.0.0__b77a5c561 934e089\System.Windows.Presentation.dll
+ 2009-10-26 01:13 . 2009-10-26 01:13 61440 c:\windows\assembly\GAC_MSIL\System.Web.Routing\3.5.0.0__31bf3856ad364e35\S ystem.Web.Routing.dll
+ 2009-10-26 01:16 . 2009-10-26 01:16 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7 f11d50a3a\System.Web.RegularExpressions.dll
+ 2009-10-26 01:13 . 2009-10-26 01:13 32768 c:\windows\assembly\GAC_MSIL\System.Web.DynamicData.Design\3.5.0.0__31bf385 6ad364e35\System.Web.DynamicData.Design.dll
+ 2009-10-26 01:13 . 2009-10-26 01:13 77824 c:\windows\assembly\GAC_MSIL\System.Web.Abstractions\3.5.0.0__31bf3856ad364 e35\System.Web.Abstractions.dll
+ 2009-10-26 01:12 . 2009-10-26 01:12 32768 c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c 561934e089\System.ServiceModel.WasHosting.dll
+ 2009-10-26 01:12 . 2009-10-26 01:12 73728 c:\windows\assembly\GAC_MSIL\System.ServiceModel.Install\3.0.0.0__b77a5c561 934e089\System.ServiceModel.Install.dll
+ 2009-10-26 01:16 . 2009-10-26 01:16 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3 a\System.Drawing.Design.dll
- 2008-05-30 02:21 . 2008-05-30 02:21 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3 a\System.Drawing.Design.dll
+ 2009-10-26 01:13 . 2009-10-26 01:13 53248 c:\windows\assembly\GAC_MSIL\System.Data.DataSetExtensions\3.5.0.0__b77a5c5 61934e089\System.Data.DataSetExtensions.dll
+ 2009-10-26 01:17 . 2009-10-26 01:17 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f 11d50a3a\System.Configuration.Install.dll
- 2008-05-30 02:21 . 2008-05-30 02:21 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f 11d50a3a\System.Configuration.Install.dll
+ 2009-10-26 01:13 . 2009-10-26 01:13 57344 c:\windows\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\3.5.0.0_ _31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
+ 2009-10-26 01:13 . 2009-10-26 01:13 45056 c:\windows\assembly\GAC_MSIL\System.AddIn.Contract\2.0.0.0__b03f5f7f11d50a3 a\System.AddIn.Contract.dll
+ 2009-10-26 01:12 . 2009-10-26 01:12 46104 c:\windows\assembly\GAC_MSIL\PresentationFontCache\3.0.0.0__31bf3856ad364e3 5\PresentationFontCache.exe
+ 2009-10-26 01:12 . 2009-10-26 01:12 32768 c:\windows\assembly\GAC_MSIL\PresentationCFFRasterizer\3.0.0.0__31bf3856ad3 64e35\PresentationCFFRasterizer.dll
- 2008-05-30 02:20 . 2008-05-30 02:20 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Micros oft.Vsa.dll
+ 2009-10-26 01:16 . 2009-10-26 01:16 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Micros oft.Vsa.dll
+ 2009-10-26 01:16 . 2009-10-26 01:16 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03 f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
- 2008-05-30 02:20 . 2008-05-30 02:20 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03 f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2009-10-26 01:13 . 2009-10-26 01:13 41984 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\1.0.0.0__b03f5f7f11d5 0a3a\Microsoft.VisualC.STLCLR.dll
+ 2009-10-26 01:16 . 2009-10-26 01:16 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d 50a3a\Microsoft.VisualBasic.Vsa.dll
- 2008-05-30 02:20 . 2008-05-30 02:20 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d 50a3a\Microsoft.VisualBasic.Vsa.dll
+ 2009-10-26 01:16 . 2009-10-26 01:16 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d 50a3a\Microsoft.Build.Utilities.dll
+ 2009-10-26 01:13 . 2009-10-26 01:13 94208 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities.v3.5\3.5.0.0__b03f5f 7f11d50a3a\Microsoft.Build.Utilities.v3.5.dll
+ 2009-10-26 01:13 . 2009-10-26 01:13 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\3.5.0.0__b03f5f7f11d 50a3a\Microsoft.Build.Framework.dll
- 2008-05-30 02:20 . 2008-05-30 02:20 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d 50a3a\Microsoft.Build.Framework.dll
+ 2009-10-26 01:16 . 2009-10-26 01:16 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d 50a3a\Microsoft.Build.Framework.dll
+ 2009-10-26 01:16 . 2009-10-26 01:16 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
- 2008-05-30 02:20 . 2008-05-30 02:20 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd. dll
+ 2009-10-26 01:16 . 2009-10-26 01:16 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd. dll
- 2008-05-30 02:20 . 2008-05-30 02:20 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Access ibility.dll
+ 2009-10-26 01:16 . 2009-10-26 01:16 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Access ibility.dll
- 2008-05-30 02:21 . 2008-05-30 02:21 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrappe r.dll
+ 2009-10-26 01:16 . 2009-10-26 01:16 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrappe r.dll
+ 2009-10-26 01:16 . 2009-10-26 01:16 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\Custo mMarshalers.dll
+ 2009-10-26 01:16 . 2009-10-26 01:16 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
+ 2008-07-30 03:40 . 2008-07-30 03:40 5632 c:\windows\Microsoft.NET\Framework\v3.5\Sentinel.v3.5Client.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 7168 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 7168 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll
- 2005-09-23 11:29 . 2005-09-23 11:29 5632 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 5632 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 6656 c:\windows\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 8192 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 8192 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 9728 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
- 2005-09-23 11:28 . 2005-09-23 11:28 9728 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
+ 2008-07-25 15:16 . 2008-07-25 15:16 5120 c:\windows\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
+ 2009-10-26 01:13 . 2009-10-26 01:13 5632 c:\windows\assembly\GAC_MSIL\Sentinel.v3.5Client\3.5.0.0__b03f5f7f11d50a3a\ Sentinel.v3.5Client.dll
+ 2009-10-26 01:16 . 2009-10-26 01:16 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Micr osoft_VsaVb.dll
- 2008-05-30 02:20 . 2008-05-30 02:20 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Micr osoft_VsaVb.dll
- 2008-05-30 02:21 . 2008-05-30 02:21 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Mi crosoft.VisualC.Dll
+ 2009-10-26 01:17 . 2009-10-26 01:17 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Mi crosoft.VisualC.Dll
+ 2009-10-26 01:16 . 2009-10-26 01:16 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
- 2008-05-30 02:21 . 2008-05-30 02:21 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecR emote.dll
+ 2009-10-26 01:16 . 2009-10-26 01:16 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecR emote.dll
+ 2009-10-26 01:16 . 2009-10-26 01:16 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
+ 2009-10-26 01:16 . 2009-10-26 01:16 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
- 2008-05-30 02:20 . 2008-05-30 02:20 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
+ 2007-11-07 06:19 . 2007-11-07 06:19 655872 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcr90.dll
+ 2007-11-07 06:19 . 2007-11-07 06:19 568832 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcp90.dll
+ 2007-11-07 01:23 . 2007-11-07 01:23 224768 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcm90.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 635904 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcr80.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 558080 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcp80.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 479232 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcm80.dll
+ 2008-07-30 01:26 . 2008-07-30 01:26 301568 c:\windows\SYSTEM32\XPSViewer\XPSViewer.exe
+ 2004-08-04 07:56 . 2009-04-10 05:01 413032 c:\windows\SYSTEM32\wmspdmod.dll
+ 2004-08-04 07:56 . 2009-07-13 14:08 286720 c:\windows\SYSTEM32\wmpdxm.dll
+ 2003-10-21 16:06 . 2009-06-10 06:14 132096 c:\windows\SYSTEM32\wkssvc.dll
- 2003-10-21 16:06 . 2008-04-14 00:12 132096 c:\windows\SYSTEM32\wkssvc.dll
+ 2008-07-29 23:59 . 2008-07-29 23:59 161296 c:\windows\SYSTEM32\UIAutomationCore.dll
+ 2004-03-19 22:43 . 2009-07-29 04:37 119808 c:\windows\SYSTEM32\t2embed.dll
+ 2009-10-26 01:11 . 2008-07-06 12:06 765440 c:\windows\SYSTEM32\SPOOL\XPSEP\i386\mxdwdrv.dll
+ 2009-10-26 01:11 . 2008-07-06 12:06 765440 c:\windows\SYSTEM32\SPOOL\XPSEP\i386\i386\mxdwdrv.dll
+ 2009-10-26 01:11 . 2008-07-06 12:06 748032 c:\windows\SYSTEM32\SPOOL\XPSEP\amd64\mxdwdrv.dll
+ 2009-10-26 01:11 . 2008-07-06 12:06 748032 c:\windows\SYSTEM32\SPOOL\XPSEP\amd64\amd64\mxdwdrv.dll
+ 2009-10-26 01:11 . 2008-07-06 12:06 147456 c:\windows\SYSTEM32\SPOOL\PRTPROCS\x64\filterpipelineprintproc.dll
+ 2009-10-26 01:11 . 2008-07-06 10:50 597504 c:\windows\SYSTEM32\SPOOL\PRTPROCS\W32X86\printfilterpipelinesvc.exe
- 2004-09-08 19:50 . 2007-05-15 08:08 761344 c:\windows\SYSTEM32\SPOOL\DRIVERS\W32X86\3\unires.dll
+ 2004-09-08 19:50 . 2008-03-13 04:52 761344 c:\windows\SYSTEM32\SPOOL\DRIVERS\W32X86\3\unires.dll
+ 2004-09-08 19:50 . 2008-07-06 12:06 744960 c:\windows\SYSTEM32\SPOOL\DRIVERS\W32X86\3\unidrvui.dll
+ 2004-09-08 19:50 . 2008-07-06 12:06 373248 c:\windows\SYSTEM32\SPOOL\DRIVERS\W32X86\3\unidrv.dll
- 2004-09-08 19:50 . 2008-04-14 00:12 373248 c:\windows\SYSTEM32\SPOOL\DRIVERS\W32X86\3\unidrv.dll
+ 2009-10-26 01:11 . 2008-07-06 12:06 198656 c:\windows\SYSTEM32\SPOOL\DRIVERS\W32X86\3\mxdwdui.dll
+ 2009-10-26 01:11 . 2008-07-06 12:06 765440 c:\windows\SYSTEM32\SPOOL\DRIVERS\W32X86\3\mxdwdrv.dll
+ 2004-03-30 01:48 . 2009-06-25 08:25 147456 c:\windows\SYSTEM32\schannel.dll
+ 2004-03-06 02:16 . 2009-04-15 14:51 585216 c:\windows\SYSTEM32\rpcrt4.dll
+ 2006-08-24 20:15 . 2006-08-24 20:15 150808 c:\windows\SYSTEM32\rgb9rast_2.dll
+ 2008-07-29 23:59 . 2008-07-29 23:59 781344 c:\windows\SYSTEM32\PresentationNative_v0300.dll
+ 2008-07-30 00:35 . 2008-07-30 00:35 326160 c:\windows\SYSTEM32\PresentationHost.exe
+ 2008-07-29 23:59 . 2008-07-29 23:59 105016 c:\windows\SYSTEM32\PresentationCFFRasterizerNative_v0300.dll
+ 2004-07-20 02:42 . 2009-10-26 01:17 463768 c:\windows\SYSTEM32\PERFH009.DAT
+ 2004-03-19 22:41 . 2009-08-29 08:08 206848 c:\windows\SYSTEM32\occache.dll
- 2006-11-08 02:03 . 2009-03-08 08:32 594432 c:\windows\SYSTEM32\msfeeds.dll
+ 2006-11-08 02:03 . 2009-08-29 08:08 594432 c:\windows\SYSTEM32\msfeeds.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 158720 c:\windows\SYSTEM32\mscorier.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 282112 c:\windows\SYSTEM32\mscoree.dll
+ 2004-03-30 01:48 . 2009-06-25 08:25 730112 c:\windows\SYSTEM32\lsasrv.dll
+ 2004-03-19 22:38 . 2009-05-07 15:32 345600 c:\windows\SYSTEM32\localspl.dll
+ 2004-03-19 22:38 . 2009-06-25 08:25 301568 c:\windows\SYSTEM32\kerberos.dll
+ 2003-01-13 19:57 . 2009-06-22 06:44 726528 c:\windows\SYSTEM32\jscript.dll
- 2003-01-13 19:57 . 2009-03-08 08:33 726528 c:\windows\SYSTEM32\jscript.dll
+ 2004-03-19 22:38 . 2009-08-29 08:08 184320 c:\windows\SYSTEM32\iepeers.dll
+ 2004-03-19 22:38 . 2009-08-29 08:08 387584 c:\windows\SYSTEM32\iedkcs32.dll
+ 2004-03-19 22:38 . 2009-08-28 10:35 173056 c:\windows\SYSTEM32\ie4uinit.exe
- 2004-03-19 22:38 . 2009-03-08 08:32 173056 c:\windows\SYSTEM32\ie4uinit.exe
+ 2008-07-29 23:24 . 2008-07-29 23:24 622080 c:\windows\SYSTEM32\icardagt.exe
+ 2004-03-20 18:22 . 2009-10-26 11:59 216856 c:\windows\SYSTEM32\FNTCACHE.DAT
+ 2008-07-30 01:10 . 2008-07-30 01:10 493048 c:\windows\SYSTEM32\evr.dll
+ 2004-08-04 07:56 . 2009-04-10 05:01 413032 c:\windows\SYSTEM32\DLLCACHE\wmspdmod.dll
+ 2004-08-04 07:56 . 2009-07-13 14:08 286720 c:\windows\SYSTEM32\DLLCACHE\wmpdxm.dll
+ 2009-06-10 06:14 . 2009-06-10 06:14 132096 c:\windows\SYSTEM32\DLLCACHE\wkssvc.dll
+ 2006-05-10 05:23 . 2009-08-29 08:08 916480 c:\windows\SYSTEM32\DLLCACHE\wininet.dll
+ 2009-07-29 04:37 . 2009-07-29 04:37 119808 c:\windows\SYSTEM32\DLLCACHE\t2embed.dll
- 2006-08-21 14:52 . 2008-10-03 10:02 247326 c:\windows\SYSTEM32\DLLCACHE\strmdll.dll
+ 2006-08-21 14:52 . 2009-08-26 08:00 247326 c:\windows\SYSTEM32\DLLCACHE\strmdll.dll
+ 2008-12-05 06:54 . 2009-06-25 08:25 147456 c:\windows\SYSTEM32\DLLCACHE\schannel.dll
+ 2009-04-15 14:51 . 2009-04-15 14:51 585216 c:\windows\SYSTEM32\DLLCACHE\rpcrt4.dll
+ 2006-10-17 17:04 . 2009-08-29 08:08 206848 c:\windows\SYSTEM32\DLLCACHE\occache.dll
+ 2009-08-05 09:01 . 2009-08-05 09:01 204800 c:\windows\SYSTEM32\DLLCACHE\mswebdvd.dll
+ 2009-06-25 08:25 . 2009-09-11 14:18 136192 c:\windows\SYSTEM32\DLLCACHE\msv1_0.dll
+ 2007-05-10 16:39 . 2009-08-29 08:08 594432 c:\windows\SYSTEM32\DLLCACHE\msfeeds.dll
- 2007-05-10 16:39 . 2009-03-08 08:32 594432 c:\windows\SYSTEM32\DLLCACHE\msfeeds.dll
+ 2009-04-15 14:31 . 2009-06-25 08:25 730112 c:\windows\SYSTEM32\DLLCACHE\lsasrv.dll
+ 2009-05-07 15:32 . 2009-05-07 15:32 345600 c:\windows\SYSTEM32\DLLCACHE\localspl.dll
+ 2009-06-25 08:25 . 2009-06-25 08:25 301568 c:\windows\SYSTEM32\DLLCACHE\kerberos.dll
+ 2008-05-09 10:53 . 2009-06-22 06:44 726528 c:\windows\SYSTEM32\DLLCACHE\jscript.dll
- 2008-05-09 10:53 . 2009-03-08 08:33 726528 c:\windows\SYSTEM32\DLLCACHE\jscript.dll
+ 2006-05-10 05:22 . 2009-08-29 08:08 184320 c:\windows\SYSTEM32\DLLCACHE\iepeers.dll
+ 2006-11-07 08:27 . 2009-08-29 08:08 387584 c:\windows\SYSTEM32\DLLCACHE\iedkcs32.dll
- 2006-11-07 08:26 . 2009-03-08 08:32 173056 c:\windows\SYSTEM32\DLLCACHE\ie4uinit.exe
+ 2006-11-07 08:26 . 2009-08-28 10:35 173056 c:\windows\SYSTEM32\DLLCACHE\ie4uinit.exe
+ 2008-07-30 03:40 . 2008-07-30 03:40 196104 c:\windows\Microsoft.NET\Framework\v3.5\WFServicesReg.exe
+ 2008-07-30 03:40 . 2008-07-30 03:40 802816 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft.Build.Tasks.v3.5.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 984056 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapUI.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 107512 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 111096 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.3082.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 110072 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.2070.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 106488 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1055.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 105976 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1053.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 107000 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1049.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 107512 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1046.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 109048 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1045.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 106488 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1044.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 108536 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1043.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 110072 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1040.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 111096 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1038.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 101368 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1037.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 112120 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1036.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 106488 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1035.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 113656 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1032.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 111608 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1031.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 108536 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1030.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 108536 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1029.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 102904 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1025.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 689152 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vsscenario.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 413184 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vsbasereqs.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 632320 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vs70uimgr.dll
+ 2009-10-26 01:13 . 2009-10-26 01:13 652800 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vs_setup.msi
+ 2008-07-29 22:47 . 2008-07-29 22:47 110080 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 131584 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.3082.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 131072 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.2070.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 121344 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1055.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 121344 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1053.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 123904 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1049.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 122880 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1046.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 128512 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1045.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 121856 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1044.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 129024 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1043.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 128512 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1040.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 132096 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1038.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 111104 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1037.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 133120 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1036.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 122368 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1035.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 137728 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1032.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 130048 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1031.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 126464 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1030.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 125440 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1029.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 113152 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1025.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 269304 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
+ 2008-07-29 22:47 . 2008-07-29 22:47 177152 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\HtmlLite.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 276984 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\dlmgr.dll
+ 2008-07-30 03:15 . 2008-07-30 03:15 225490 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\baseline.dat
+ 2008-07-30 03:40 . 2008-07-30 03:40 233976 c:\windows\Microsoft.NET\Framework\v3.5\1033\vbc7ui.dll
+ 2008-07-30 03:40 . 2008-07-30 03:40 168448 c:\windows\Microsoft.NET\Framework\v3.5\1033\cscompui.dll
+ 2008-07-30 00:35 . 2008-07-30 00:35 864256 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationUI.dll
+ 2008-07-29 23:59 . 2008-07-29 23:59 132120 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationHostDLL.dll
+ 2008-07-30 01:10 . 2008-07-30 01:10 806928 c:\windows\Microsoft.NET\Framework\v3.0\WPF\NaturalLanguage6.dll
+ 2008-07-29 23:16 . 2008-07-29 23:16 152576 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\WsatConfig.exe
+ 2008-07-29 23:16 . 2008-07-29 23:16 966656 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
+ 2008-07-29 23:16 . 2008-07-29 23:16 132096 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
+ 2008-07-29 23:16 . 2008-07-29 23:16 110592 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMdiagnostics.dll
+ 2008-07-29 23:16 . 2008-07-29 23:16 156688 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelReg.exe
+ 2008-07-29 23:16 . 2008-07-29 23:16 163840 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\Microsoft.Transactions.Bridge.Dtc.dll
+ 2008-07-29 23:16 . 2008-07-29 23:16 397312 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\Microsoft.Transactions.Bridge.dll
+ 2008-07-29 23:24 . 2008-07-29 23:24 881664 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
+ 2008-07-29 23:16 . 2008-07-29 23:16 168968 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ComSvcConfig.exe
+ 2008-11-25 08:59 . 2008-11-25 08:59 436040 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll

chen1276 · 31-Oct-2009, 10:39 PM #9

Part 3 of the report

+ 2008-07-25 15:17 . 2008-07-25 15:17 839680 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 835584 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 835584 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 261632 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 114688 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 114688 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 131072 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization. Formatters.Soap.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 131072 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization. Formatters.Soap.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 303104 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 372736 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Management.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 113664 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wra pper.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 626688 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 188416 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Prot ocols.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 188416 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Prot ocols.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 401408 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 970752 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 745472 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll
+ 2008-11-25 08:59 . 2008-11-25 08:59 486400 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 425984 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 392184 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 118784 c:\windows\Microsoft.NET\Framework\v2.0.50727\shfusion.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 143360 c:\windows\Microsoft.NET\Framework\v2.0.50727\peverify.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 100856 c:\windows\Microsoft.NET\Framework\v2.0.50727\ngen.exe
+ 2008-07-25 15:17 . 2008-07-25 15:17 230912 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 345600 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 114176 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll
+ 2008-11-25 08:59 . 2008-11-25 08:59 364872 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 308224 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll
+ 2008-11-25 08:59 . 2008-11-25 08:59 990032 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 659456 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 372736 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compati bility.dll
- 2005-09-23 11:29 . 2005-09-23 11:29 372736 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compati bility.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compati bility.Data.dll
- 2005-09-23 11:29 . 2005-09-23 11:29 110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compati bility.Data.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 749568 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 655360 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 348160 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 230904 c:\windows\Microsoft.NET\Framework\v2.0.50727\ilasm.exe
+ 2008-07-25 15:17 . 2008-07-25 15:17 798224 c:\windows\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 575496 c:\windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 106496 c:\windows\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
- 2005-09-23 11:28 . 2005-09-23 11:28 106496 c:\windows\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
+ 2008-07-25 15:16 . 2008-07-25 15:16 507904 c:\windows\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 106496 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
- 2005-09-23 11:28 . 2005-09-23 11:28 106496 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
+ 2008-07-25 15:17 . 2008-07-25 15:17 147968 c:\windows\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 218112 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 193016 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 145408 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll
- 2007-04-14 00:58 . 2007-04-14 00:58 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
+ 2008-05-28 04:49 . 2008-05-28 04:49 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
+ 2008-05-28 04:48 . 2008-05-28 04:48 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
- 2007-04-14 00:56 . 2007-04-14 00:56 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
+ 2008-05-28 05:30 . 2008-05-28 05:30 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
- 2007-04-14 01:30 . 2007-04-14 01:30 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
+ 2009-03-20 15:48 . 2009-03-20 15:48 183808 c:\windows\Installer\2ca294d.msp
+ 2008-12-13 13:58 . 2008-12-13 13:58 754688 c:\windows\Installer\20b0aaa.msp
+ 2009-10-26 01:13 . 2009-10-26 01:13 648192 c:\windows\Installer\20b0a87.msi
+ 2008-07-30 01:23 . 2008-07-30 01:23 250880 c:\windows\Installer\2098a57.msp
+ 2008-07-30 01:28 . 2008-07-30 01:28 278016 c:\windows\Installer\2098a55.msp
+ 2008-07-29 23:40 . 2008-07-29 23:40 291840 c:\windows\Installer\2098a53.msp
+ 2009-10-26 01:12 . 2009-10-26 01:12 137728 c:\windows\Installer\2098a4d.msi
+ 2008-07-29 21:35 . 2008-07-29 21:35 553472 c:\windows\Installer\2058399.msp
+ 2008-07-29 21:33 . 2008-07-29 21:33 506368 c:\windows\Installer\2058397.msp
+ 2008-07-29 21:37 . 2008-07-29 21:37 911360 c:\windows\Installer\2058396.msp
+ 2009-10-25 12:27 . 2009-03-08 08:34 914944 c:\windows\ie8updates\KB974455-IE8\wininet.dll
+ 2009-10-25 12:27 . 2009-05-26 11:40 382840 c:\windows\ie8updates\KB974455-IE8\spuninst\updspapi.dll
+ 2009-10-25 12:27 . 2008-07-08 13:02 231288 c:\windows\ie8updates\KB974455-IE8\spuninst\spuninst.exe
+ 2009-10-25 12:27 . 2009-03-08 08:34 109568 c:\windows\ie8updates\KB974455-IE8\occache.dll
+ 2009-10-25 12:27 . 2009-03-08 08:32 594432 c:\windows\ie8updates\KB974455-IE8\msfeeds.dll
+ 2009-10-25 12:27 . 2009-03-08 08:33 246784 c:\windows\ie8updates\KB974455-IE8\ieproxy.dll
+ 2009-10-25 12:27 . 2009-03-08 08:31 183808 c:\windows\ie8updates\KB974455-IE8\iepeers.dll
+ 2009-10-25 12:27 . 2009-03-08 18:09 391536 c:\windows\ie8updates\KB974455-IE8\iedkcs32.dll
+ 2009-10-25 12:27 . 2009-03-08 08:32 173056 c:\windows\ie8updates\KB974455-IE8\ie4uinit.exe
+ 2009-10-25 12:08 . 2008-07-08 13:02 382840 c:\windows\ie8updates\KB971961-IE8\spuninst\updspapi.dll
+ 2009-10-25 12:08 . 2008-07-08 13:02 231288 c:\windows\ie8updates\KB971961-IE8\spuninst\spuninst.exe
+ 2009-10-25 12:08 . 2009-03-08 08:33 726528 c:\windows\ie8updates\KB971961-IE8\jscript.dll
+ 2009-10-26 01:11 . 2008-03-13 04:52 761344 c:\windows\Driver Cache\I386\unires.dll
+ 2009-10-26 01:11 . 2008-07-06 12:06 744960 c:\windows\Driver Cache\I386\unidrvui.dll
+ 2009-10-26 01:11 . 2008-07-06 12:06 373248 c:\windows\Driver Cache\I386\unidrv.dll
+ 2009-10-26 01:11 . 2008-07-06 12:06 198656 c:\windows\Driver Cache\I386\mxdwdui.dll
+ 2009-10-26 01:11 . 2008-07-06 12:06 765440 c:\windows\Driver Cache\I386\mxdwdrv.dll
+ 2009-10-25 12:14 . 2009-10-25 12:14 835584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f 5f7f11d50a3a_f8194476\System.Drawing.dll
+ 2009-10-25 12:14 . 2009-10-25 12:14 192512 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000. 0__b03f5f7f11d50a3a_ba17d0a3\System.Drawing.Design.dll
+ 2009-10-25 12:14 . 2009-10-25 12:14 118784 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b0 3f5f7f11d50a3a_341f1b39\CustomMarshalers.dll
+ 2009-10-26 18:52 . 2009-10-26 18:52 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\2ef5bc3a2edd7570b b23886a4f32294a\WsatConfig.ni.exe
+ 2009-10-26 12:07 . 2009-10-26 12:07 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\6a81809 9f0386e2356ae94f886a2196f\WindowsFormsIntegration.ni.dll
+ 2009-10-26 12:07 . 2009-10-26 12:07 187904 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\a6d9503962 d47c722231c1478f180695\UIAutomationTypes.ni.dll
+ 2009-10-26 12:07 . 2009-10-26 12:07 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\5c028c3d8 db6c0f0277673ea4a2d89fb\UIAutomationClient.ni.dll
+ 2009-10-26 18:55 . 2009-10-26 18:55 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\bb77ea11f 46ab438b2b7ed7c180011a1\System.Web.Routing.ni.dll
+ 2009-10-26 18:55 . 2009-10-26 18:55 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\6ee2552 20d90dcbe80c990e443051cc5\System.Web.RegularExpressions.ni.dll
+ 2009-10-26 18:55 . 2009-10-26 18:55 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\58f6204 4fa702ea6f936071aa5520baa\System.Web.Extensions.Design.ni.dll
+ 2009-10-26 18:55 . 2009-10-26 18:55 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\79c29ac85d d57dd485ab60118ac292ff\System.Web.Entity.ni.dll
+ 2009-10-26 18:55 . 2009-10-26 18:55 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\d3d65e3 4fa60f0b6c72ca0d12ec89933\System.Web.Entity.Design.ni.dll
+ 2009-10-26 18:55 . 2009-10-26 18:55 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\b7891f5 659db299dbd1b3c72db7edb9f\System.Web.DynamicData.ni.dll
+ 2009-10-26 18:55 . 2009-10-26 18:55 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\00ec087 41a765c707bd9169346064a81\System.Web.Abstractions.ni.dll
+ 2009-10-26 18:54 . 2009-10-26 18:54 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\5a555c9a e6984c40157cf940bb519f7c\System.Transactions.ni.dll
+ 2009-10-26 18:54 . 2009-10-26 18:54 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\ea33669 39280c1715f1c620e33ee3c8a\System.ServiceProcess.ni.dll
+ 2009-10-26 18:52 . 2009-10-26 18:52 676352 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\1c8df2da3322 2c048d683017f2095f04\System.Security.ni.dll
+ 2009-10-26 18:54 . 2009-10-26 18:54 311296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\bfd6e16 d8c3589cd2bd3f8d46f0a5402\System.Runtime.Serialization.Formatters.Soap.ni.d ll
+ 2009-10-26 18:54 . 2009-10-26 18:54 621056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\519d9c618341b136f 9b963ffb7495308\System.Net.ni.dll
+ 2009-10-26 18:54 . 2009-10-26 18:54 998400 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\8642fdfbf0 2a6cb6f01169fe6fdb5d11\System.Management.ni.dll
+ 2009-10-26 18:54 . 2009-10-26 18:54 330752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\1d3fbbd 23ce1e8637ef4f40a8d23cd32\System.Management.Instrumentation.ni.dll
+ 2009-10-26 12:30 . 2009-10-26 12:30 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\7c367a96b10d62 6ec8cbf8149272d845\System.IO.Log.ni.dll
+ 2009-10-26 12:30 . 2009-10-26 12:30 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\68e7114 7704ef0d34d9a4bece7767fc5\System.IdentityModel.Selectors.ni.dll
+ 2009-10-26 18:54 . 2009-10-26 18:54 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\4267bd9 08175603006c6c90bb5d900c7\System.EnterpriseServices.Wrapper.dll
+ 2009-10-26 18:54 . 2009-10-26 18:54 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\4267bd9 08175603006c6c90bb5d900c7\System.EnterpriseServices.ni.dll
+ 2009-10-26 12:06 . 2009-10-26 12:06 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\18bbe2b 6717e7f1d1dd672526e9889ee\System.Drawing.Design.ni.dll
+ 2009-10-26 18:54 . 2009-10-26 18:54 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\c434a07 332ce490711c27fd0edb7562f\System.DirectoryServices.Protocols.ni.dll
+ 2009-10-26 18:54 . 2009-10-26 18:54 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\8b3bb7a 2c2f3ffe94c866283f1cd5957\System.DirectoryServices.AccountManagement.ni.dll
+ 2009-10-26 18:54 . 2009-10-26 18:54 939008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\a4b887f 476fa4b8746a93a9fc2208560\System.Data.Services.Client.ni.dll
+ 2009-10-26 18:54 . 2009-10-26 18:54 354816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\1cf3aca d6553d6c59df576794f4e8bd6\System.Data.Services.Design.ni.dll
+ 2009-10-26 18:54 . 2009-10-26 18:54 756736 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\392de34 573f9f8ec885714f2f3e7f07f\System.Data.Entity.Design.ni.dll
+ 2009-10-26 18:53 . 2009-10-26 18:53 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\1db495f f00bbd14df4af6680c4de0653\System.Data.DataSetExtensions.ni.dll
+ 2009-10-26 18:52 . 2009-10-26 18:52 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\b82c00e 2d24305ad6cb08556e3779b75\System.Configuration.ni.dll
+ 2009-10-26 18:54 . 2009-10-26 18:54 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\de514e4 84e49b04b016949d57ffac03e\System.Configuration.Install.ni.dll
+ 2009-10-26 18:53 . 2009-10-26 18:53 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\ce984d754e3c0b6 be4504b785cc43574\System.AddIn.ni.dll
+ 2009-10-26 18:52 . 2009-10-26 18:52 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\045dd501b7257b1cc2 6083538ae69045\SMSvcHost.ni.exe
+ 2009-10-26 18:52 . 2009-10-26 18:52 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\9790551187e294 b4ed3aaa1c221891c7\SMDiagnostics.ni.dll
+ 2009-10-26 18:52 . 2009-10-26 18:52 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\10a0c9707876 fc1f65e64b811a28b020\ServiceModelReg.ni.exe
+ 2009-10-26 12:05 . 2009-10-26 12:05 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\f475294 d8c7dc2dd4febeef27bc0417e\PresentationFramework.Classic.ni.dll
+ 2009-10-26 12:05 . 2009-10-26 12:05 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\8003aba f6bcf70f7eb620d06837e897b\PresentationFramework.Luna.ni.dll
+ 2009-10-26 12:05 . 2009-10-26 12:05 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\59a6787 4d8d8475faa5be1d993083d12\PresentationFramework.Aero.ni.dll
+ 2009-10-26 12:05 . 2009-10-26 12:05 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\2c980c9 a5051d723c6ec2a78a3d0e2b3\PresentationFramework.Royale.ni.dll
+ 2009-10-26 18:52 . 2009-10-26 18:52 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\6d38e317128608bc4516 ea46ab94590e\MSBuild.ni.exe
+ 2009-10-26 18:52 . 2009-10-26 18:52 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\1820d6a 012fc0e16c3e1d29d973cd2d0\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2009-10-26 18:53 . 2009-10-26 18:53 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\55b9eff 9e23359faed4351386c062238\Microsoft.Build.Utilities.ni.dll
+ 2009-10-26 18:53 . 2009-10-26 18:53 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\4217124 db1ea5de5f1a1f3eea75e8d32\Microsoft.Build.Utilities.v3.5.ni.dll
+ 2009-10-26 18:52 . 2009-10-26 18:52 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\96825c3 4d7e1f7df1923ff2123bed8da\Microsoft.Build.Engine.ni.dll
+ 2009-10-26 18:52 . 2009-10-26 18:52 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\9b321eb f67587237f576df6104a32588\Microsoft.Build.Conversion.v3.5.ni.dll
+ 2009-10-26 18:52 . 2009-10-26 18:52 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\9bea05938be e3555c5aa8763d89a68f9\CustomMarshalers.ni.dll
+ 2009-10-26 18:52 . 2009-10-26 18:52 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\12629e2f3e31545 9bee67cbbaac85cb2\ComSvcConfig.ni.exe
+ 2009-10-26 18:52 . 2009-10-26 18:52 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\b5b2feadc3943e3 976daebc0bcd2b5e2\AspNetMMCExt.ni.dll
+ 2009-10-26 01:12 . 2009-10-26 01:12 385024 c:\windows\assembly\GAC_MSIL\UIAutomationClientsideProviders\3.0.0.0__31bf3 856ad364e35\UIAutomationClientsideProviders.dll
+ 2009-10-26 01:12 . 2009-10-26 01:12 167936 c:\windows\assembly\GAC_MSIL\UIAutomationClient\3.0.0.0__31bf3856ad364e35\U IAutomationClient.dll
+ 2009-10-26 01:13 . 2009-10-26 01:13 139264 c:\windows\assembly\GAC_MSIL\System.Xml.Linq\3.5.0.0__b77a5c561934e089\Syst em.Xml.Linq.dll
+ 2009-10-26 01:13 . 2009-10-26 01:13 507904 c:\windows\assembly\GAC_MSIL\System.WorkflowServices\3.5.0.0__31bf3856ad364 e35\System.WorkflowServices.dll
+ 2009-10-26 01:12 . 2009-10-26 01:12 540672 c:\windows\assembly\GAC_MSIL\System.Workflow.Runtime\3.0.0.0__31bf3856ad364 e35\System.Workflow.Runtime.dll
+ 2009-10-26 01:16 . 2009-10-26 01:16 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\ System.Web.Services.dll
- 2008-05-30 02:21 . 2008-05-30 02:21 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\Sy stem.Web.Mobile.dll
+ 2009-10-26 01:16 . 2009-10-26 01:16 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\Sy stem.Web.Mobile.dll
+ 2009-10-26 01:13 . 2009-10-26 01:13 335872 c:\windows\assembly\GAC_MSIL\System.Web.Extensions.Design\3.5.0.0__31bf3856 ad364e35\System.Web.Extensions.Design.dll
+ 2009-10-26 01:19 . 2009-10-26 01:19 139264 c:\windows\assembly\GAC_MSIL\System.Web.Entity\3.5.0.0__b77a5c561934e089\Sy stem.Web.Entity.dll
+ 2009-10-26 01:13 . 2009-10-26 01:13 131072 c:\windows\assembly\GAC_MSIL\System.Web.Entity.Design\3.5.0.0__b77a5c561934 e089\System.Web.Entity.Design.dll
+ 2009-10-26 01:19 . 2009-10-26 01:19 229376 c:\windows\assembly\GAC_MSIL\System.Web.DynamicData\3.5.0.0__31bf3856ad364e 35\System.Web.DynamicData.dll
+ 2009-10-26 01:12 . 2009-10-26 01:12 688128 c:\windows\assembly\GAC_MSIL\System.Speech\3.0.0.0__31bf3856ad364e35\System .Speech.dll
+ 2009-10-26 01:16 . 2009-10-26 01:16 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3 a\System.ServiceProcess.dll
- 2008-05-30 02:21 . 2008-05-30 02:21 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3 a\System.ServiceProcess.dll
+ 2009-10-26 01:13 . 2009-10-26 01:13 569344 c:\windows\assembly\GAC_MSIL\System.ServiceModel.Web\3.5.0.0__31bf3856ad364 e35\System.ServiceModel.Web.dll
- 2008-05-30 02:20 . 2008-05-30 02:20 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\Syst em.Security.dll
+ 2009-10-26 01:16 . 2009-10-26 01:16 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\Syst em.Security.dll
+ 2009-10-26 01:12 . 2009-10-26 01:12 966656 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c56 1934e089\System.Runtime.Serialization.dll
+ 2009-10-26 01:16 . 2009-10-26 01:16 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2 .0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
- 2008-05-30 02:21 . 2008-05-30 02:21 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2 .0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2009-10-26 01:16 . 2009-10-26 01:16 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e 089\System.Runtime.Remoting.dll
+ 2009-10-26 01:13 . 2009-10-26 01:13 233472 c:\windows\assembly\GAC_MSIL\System.Net\3.5.0.0__b03f5f7f11d50a3a\System.Ne t.dll
- 2008-05-30 02:21 . 2008-05-30 02:21 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\Sys tem.Messaging.dll
+ 2009-10-26 01:16 . 2009-10-26 01:16 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\Sys tem.Messaging.dll
+ 2009-10-26 01:16 . 2009-10-26 01:16 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\Sy stem.Management.dll
+ 2009-10-26 01:13 . 2009-10-26 01:13 143360 c:\windows\assembly\GAC_MSIL\System.Management.Instrumentation\3.5.0.0__b77 a5c561934e089\System.Management.Instrumentation.dll
+ 2009-10-26 01:12 . 2009-10-26 01:12 131072 c:\windows\assembly\GAC_MSIL\System.IO.Log\3.0.0.0__b03f5f7f11d50a3a\System .IO.Log.dll
+ 2009-10-26 01:12 . 2009-10-26 01:12 430080 c:\windows\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089 \System.IdentityModel.dll
+ 2009-10-26 01:12 . 2009-10-26 01:12 126976 c:\windows\assembly\GAC_MSIL\System.IdentityModel.Selectors\3.0.0.0__b77a5c 561934e089\System.IdentityModel.Selectors.dll
+ 2009-10-26 01:16 . 2009-10-26 01:16 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\Syste m.Drawing.dll
+ 2009-10-26 01:16 . 2009-10-26 01:16 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d5 0a3a\System.DirectoryServices.dll
- 2008-05-30 02:21 . 2008-05-30 02:21 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b0 3f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2009-10-26 01:16 . 2009-10-26 01:16 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b0 3f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2009-10-26 01:13 . 2009-10-26 01:13 286720 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\3.5 .0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
+ 2009-10-26 01:17 . 2009-10-26 01:17 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\Sy stem.Deployment.dll
+ 2009-10-26 01:17 . 2009-10-26 01:17 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\S ystem.Data.SqlXml.dll
+ 2009-10-26 01:19 . 2009-10-26 01:19 442368 c:\windows\assembly\GAC_MSIL\System.Data.Services\3.5.0.0__b77a5c561934e089 \System.Data.Services.dll
+ 2009-10-26 01:13 . 2009-10-26 01:13 114688 c:\windows\assembly\GAC_MSIL\System.Data.Services.Design\3.5.0.0__b77a5c561 934e089\System.Data.Services.Design.dll
+ 2009-10-26 01:19 . 2009-10-26 01:19 294912 c:\windows\assembly\GAC_MSIL\System.Data.Services.Client\3.5.0.0__b77a5c561 934e089\System.Data.Services.Client.dll
+ 2009-10-26 01:13 . 2009-10-26 01:13 684032 c:\windows\assembly\GAC_MSIL\System.Data.Linq\3.5.0.0__b77a5c561934e089\Sys tem.Data.Linq.dll
+ 2009-10-26 01:13 . 2009-10-26 01:13 229376 c:\windows\assembly\GAC_MSIL\System.Data.Entity.Design\3.5.0.0__b77a5c56193 4e089\System.Data.Entity.Design.dll
+ 2009-10-26 01:13 . 2009-10-26 01:13 667648 c:\windows\assembly\GAC_MSIL\System.Core\3.5.0.0__b77a5c561934e089\System.C ore.dll
+ 2009-10-26 01:17 . 2009-10-26 01:17 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a \System.configuration.dll
+ 2009-10-26 01:13 . 2009-10-26 01:13 163840 c:\windows\assembly\GAC_MSIL\System.AddIn\3.5.0.0__b77a5c561934e089\System. AddIn.dll
+ 2009-10-26 01:17 . 2009-10-26 01:17 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dl l
- 2008-05-30 02:21 . 2008-05-30 02:21 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dl l
+ 2009-10-26 01:12 . 2009-10-26 01:12 110592 c:\windows\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiag nostics.dll
+ 2009-10-26 01:12 . 2009-10-26 01:12 528384 c:\windows\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\Reach Framework.dll
+ 2009-10-26 01:12 . 2009-10-26 01:12 864256 c:\windows\assembly\GAC_MSIL\PresentationUI\3.0.0.0__31bf3856ad364e35\Prese ntationUI.dll
+ 2009-10-26 01:12 . 2009-10-26 01:12 163840 c:\windows\assembly\GAC_MSIL\PresentationFramework.Royale\3.0.0.0__31bf3856 ad364e35\PresentationFramework.Royale.dll
+ 2009-10-26 01:12 . 2009-10-26 01:12 397312 c:\windows\assembly\GAC_MSIL\PresentationFramework.Luna\3.0.0.0__31bf3856ad 364e35\PresentationFramework.Luna.dll
+ 2009-10-26 01:12 . 2009-10-26 01:12 139264 c:\windows\assembly\GAC_MSIL\PresentationFramework.Classic\3.0.0.0__31bf385 6ad364e35\PresentationFramework.Classic.dll
+ 2009-10-26 01:12 . 2009-10-26 01:12 196608 c:\windows\assembly\GAC_MSIL\PresentationFramework.Aero\3.0.0.0__31bf3856ad 364e35\PresentationFramework.Aero.dll
+ 2009-10-26 01:12 . 2009-10-26 01:12 598016 c:\windows\assembly\GAC_MSIL\PresentationBuildTasks\3.0.0.0__31bf3856ad364e 35\PresentationBuildTasks.dll

chen1276 · 31-Oct-2009, 10:41 PM **#10**

Part 4 of the report

+ 2009-10-26 01:16 . 2009-10-26 01:16 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3 a\Microsoft.VisualBasic.dll
+ 2009-10-26 01:16 . 2009-10-26 01:16 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b 03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2008-05-30 02:21 . 2008-05-30 02:21 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b 03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2008-05-30 02:21 . 2008-05-30 02:21 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0 .0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2009-10-26 01:16 . 2009-10-26 01:16 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0 .0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2009-10-26 01:12 . 2009-10-26 01:12 397312 c:\windows\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\3.0.0.0__b03f5f7 f11d50a3a\Microsoft.Transactions.Bridge.dll
+ 2009-10-26 01:16 . 2009-10-26 01:16 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Mi crosoft.JScript.dll
+ 2009-10-26 01:16 . 2009-10-26 01:16 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3 a\Microsoft.Build.Tasks.dll
+ 2009-10-26 01:13 . 2009-10-26 01:13 802816 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks.v3.5\3.5.0.0__b03f5f7f11 d50a3a\Microsoft.Build.Tasks.v3.5.dll
+ 2009-10-26 01:13 . 2009-10-26 01:13 733184 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\3.5.0.0__b03f5f7f11d50a 3a\Microsoft.Build.Engine.dll
+ 2009-10-26 01:16 . 2009-10-26 01:16 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a 3a\Microsoft.Build.Engine.dll
+ 2009-10-26 01:13 . 2009-10-26 01:13 106496 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Conversion.v3.5\3.5.0.0__b03f5 f7f11d50a3a\Microsoft.Build.Conversion.v3.5.dll
+ 2009-10-26 01:16 . 2009-10-26 01:16 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetM MCExt.dll
+ 2009-10-26 01:16 . 2009-10-26 01:16 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\Sy stem.Transactions.dll
+ 2009-10-26 01:12 . 2009-10-26 01:12 368640 c:\windows\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System .Printing.dll
+ 2009-10-26 01:16 . 2009-10-26 01:16 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50 a3a\System.EnterpriseServices.Wrapper.dll
+ 2009-10-26 01:16 . 2009-10-26 01:16 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50 a3a\System.EnterpriseServices.dll
- 2008-05-30 02:20 . 2008-05-30 02:20 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50 a3a\System.EnterpriseServices.dll
+ 2009-10-26 01:17 . 2009-10-26 01:17 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e0 89\System.Data.OracleClient.dll
+ 2009-10-26 01:12 . 2009-10-26 01:12 163840 c:\windows\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\3.0.0.0__b03f5 f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
+ 2009-10-25 01:46 . 2009-08-13 13:55 1748992 c:\windows\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6001.2 2319_x-ww_f0b4c2df\GdiPlus.dll
+ 2004-03-19 22:45 . 2009-05-20 16:24 2373504 c:\windows\SYSTEM32\WMVCore.dll
+ 2004-08-04 07:56 . 2009-07-13 14:08 5537792 c:\windows\SYSTEM32\wmp.dll
- 2004-08-04 07:56 . 2007-04-30 12:20 5537792 c:\windows\SYSTEM32\wmp.dll
+ 2003-09-25 14:35 . 2009-04-17 12:26 1847168 c:\windows\SYSTEM32\win32k.sys
+ 2004-01-21 21:20 . 2009-08-29 08:08 1208832 c:\windows\SYSTEM32\urlmon.dll
+ 2009-10-26 01:11 . 2008-07-06 12:06 1676288 c:\windows\SYSTEM32\SPOOL\XPSEP\i386\xpssvcs.dll
+ 2009-10-26 01:11 . 2008-07-06 12:06 1676288 c:\windows\SYSTEM32\SPOOL\XPSEP\i386\i386\xpssvcs.dll
+ 2009-10-26 01:11 . 2008-07-06 21:36 2936832 c:\windows\SYSTEM32\SPOOL\XPSEP\amd64\xpssvcs.dll
+ 2009-10-26 01:11 . 2008-07-06 21:36 2936832 c:\windows\SYSTEM32\SPOOL\XPSEP\amd64\amd64\xpssvcs.dll
+ 2009-10-26 01:11 . 2008-07-06 12:06 1676288 c:\windows\SYSTEM32\SPOOL\DRIVERS\W32X86\3\XpsSvcs.dll
- 2004-03-19 22:42 . 2008-04-14 00:12 1435648 c:\windows\SYSTEM32\query.dll
+ 2004-03-19 22:42 . 2009-07-17 16:22 1435648 c:\windows\SYSTEM32\query.dll
+ 2003-05-30 14:00 . 2009-06-03 19:09 1291264 c:\windows\SYSTEM32\quartz.dll
+ 2004-03-19 22:40 . 2009-06-10 13:19 2066432 c:\windows\SYSTEM32\mstscax.dll
+ 2004-07-07 22:37 . 2009-08-29 08:08 5940224 c:\windows\SYSTEM32\mshtml.dll
+ 2006-10-17 16:57 . 2009-08-29 08:08 1985536 c:\windows\SYSTEM32\iertutil.dll
+ 2004-03-19 22:45 . 2009-05-20 16:24 2373504 c:\windows\SYSTEM32\DLLCACHE\WMVCore.dll
- 2004-08-04 07:56 . 2007-04-30 12:20 5537792 c:\windows\SYSTEM32\DLLCACHE\wmp.dll
+ 2004-08-04 07:56 . 2009-07-13 14:08 5537792 c:\windows\SYSTEM32\DLLCACHE\wmp.dll
+ 2008-10-14 19:37 . 2009-04-17 12:26 1847168 c:\windows\SYSTEM32\DLLCACHE\win32k.sys
+ 2006-05-10 05:23 . 2009-08-29 08:08 1208832 c:\windows\SYSTEM32\DLLCACHE\urlmon.dll
+ 2009-07-17 16:22 . 2009-07-17 16:22 1435648 c:\windows\SYSTEM32\DLLCACHE\query.dll
+ 2008-05-07 05:12 . 2009-06-03 19:09 1291264 c:\windows\SYSTEM32\DLLCACHE\quartz.dll
+ 2008-10-14 17:42 . 2009-08-05 00:44 2189184 c:\windows\SYSTEM32\DLLCACHE\ntoskrnl.exe
+ 2008-10-14 17:42 . 2009-08-04 14:20 2023936 c:\windows\SYSTEM32\DLLCACHE\ntkrpamp.exe
- 2008-10-14 17:42 . 2009-02-06 10:32 2023936 c:\windows\SYSTEM32\DLLCACHE\ntkrpamp.exe
- 2008-10-14 17:42 . 2009-02-07 23:02 2066048 c:\windows\SYSTEM32\DLLCACHE\ntkrnlpa.exe
+ 2008-10-14 17:42 . 2009-08-04 14:20 2066048 c:\windows\SYSTEM32\DLLCACHE\ntkrnlpa.exe
- 2008-10-14 17:43 . 2009-02-06 11:06 2145280 c:\windows\SYSTEM32\DLLCACHE\ntkrnlmp.exe
+ 2008-10-14 17:43 . 2009-08-04 15:13 2145280 c:\windows\SYSTEM32\DLLCACHE\ntkrnlmp.exe
+ 2009-06-10 13:19 . 2009-06-10 13:19 2066432 c:\windows\SYSTEM32\DLLCACHE\mstscax.dll
+ 2006-05-19 15:08 . 2009-08-29 08:08 5940224 c:\windows\SYSTEM32\DLLCACHE\mshtml.dll
+ 2007-05-10 16:39 . 2009-08-29 08:08 1985536 c:\windows\SYSTEM32\DLLCACHE\iertutil.dll
+ 2008-07-30 03:40 . 2008-07-30 03:40 1720824 c:\windows\Microsoft.NET\Framework\v3.5\vbc.exe
+ 2008-07-29 22:47 . 2008-07-29 22:47 1054208 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vs_setup.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 1364992 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\SITSetup.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 1064448 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\gencomp.dll
+ 2008-07-30 03:40 . 2008-07-30 03:40 1548280 c:\windows\Microsoft.NET\Framework\v3.5\csc.exe
+ 2008-12-05 23:35 . 2008-12-05 23:35 1736528 c:\windows\Microsoft.NET\Framework\v3.0\WPF\wpfgfx_v0300.dll
+ 2008-07-30 01:10 . 2008-07-30 01:10 2637840 c:\windows\Microsoft.NET\Framework\v3.0\WPF\NlsLexicons0009.dll
+ 2008-07-30 01:10 . 2008-07-30 01:10 4883464 c:\windows\Microsoft.NET\Framework\v3.0\WPF\NlsData0009.dll
+ 2008-12-06 00:12 . 2008-12-06 00:12 5931008 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 1344000 c:\windows\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 1172472 c:\windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe
+ 2008-11-25 08:59 . 2008-11-25 08:59 2048000 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.XML.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
+ 2008-11-25 08:59 . 2008-11-25 08:59 5242880 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 3149824 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 5062656 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 2933248 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.dll
+ 2008-11-25 08:59 . 2008-11-25 08:59 5813576 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
+ 2008-11-25 08:59 . 2008-11-25 08:59 4546560 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 1163768 c:\windows\Microsoft.NET\Framework\v2.0.50727\cscomp.dll
+ 2008-05-28 05:35 . 2008-05-28 05:35 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
- 2007-04-14 01:35 . 2007-04-14 01:35 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
+ 2008-05-28 05:35 . 2008-05-28 05:35 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
- 2007-04-14 01:35 . 2007-04-14 01:35 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
- 2007-04-14 00:57 . 2007-04-14 00:57 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
+ 2008-05-28 04:48 . 2008-05-28 04:48 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
- 2007-04-14 00:57 . 2007-04-14 00:57 2523136 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
+ 2008-05-28 04:48 . 2008-05-28 04:48 2523136 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
- 2007-04-14 00:50 . 2007-04-14 00:50 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
+ 2008-05-28 04:43 . 2008-05-28 04:43 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
+ 2008-12-13 13:57 . 2008-12-13 13:57 8397824 c:\windows\Installer\20b0a95.msp
+ 2008-07-29 23:26 . 2008-07-29 23:26 1043456 c:\windows\Installer\2098a56.msp
+ 2008-07-30 00:37 . 2008-07-30 00:37 2679808 c:\windows\Installer\2098a54.msp
+ 2008-07-30 01:15 . 2008-07-30 01:15 3697664 c:\windows\Installer\2098a52.msp
+ 2008-07-29 23:34 . 2008-07-29 23:34 1448448 c:\windows\Installer\2098a51.msp
+ 2008-07-30 00:22 . 2008-07-30 00:22 4137984 c:\windows\Installer\2098a50.msp
+ 2008-07-29 23:18 . 2008-07-29 23:18 3376640 c:\windows\Installer\2098a4f.msp
+ 2008-07-29 21:45 . 2008-07-29 21:45 2543616 c:\windows\Installer\205839d.msp
+ 2008-07-29 21:29 . 2008-07-29 21:29 2926080 c:\windows\Installer\205839c.msp
+ 2008-07-29 21:41 . 2008-07-29 21:41 6487040 c:\windows\Installer\205839b.msp
+ 2008-07-29 21:39 . 2008-07-29 21:39 3403264 c:\windows\Installer\205839a.msp
+ 2008-07-29 21:43 . 2008-07-29 21:43 1013248 c:\windows\Installer\2058398.msp
+ 2008-07-29 21:31 . 2008-07-29 21:31 6083072 c:\windows\Installer\2058395.msp
+ 2009-10-25 12:27 . 2009-03-08 08:34 1206784 c:\windows\ie8updates\KB974455-IE8\urlmon.dll
+ 2009-10-25 12:27 . 2009-03-08 08:41 5937152 c:\windows\ie8updates\KB974455-IE8\mshtml.dll
+ 2009-10-25 12:27 . 2009-03-08 08:32 1985024 c:\windows\ie8updates\KB974455-IE8\iertutil.dll
+ 2008-10-14 17:42 . 2009-08-05 00:44 2189184 c:\windows\Driver Cache\I386\ntoskrnl.exe
+ 2008-10-14 17:42 . 2009-08-04 14:20 2023936 c:\windows\Driver Cache\I386\ntkrpamp.exe
- 2008-10-14 17:42 . 2009-02-06 10:32 2023936 c:\windows\Driver Cache\I386\ntkrpamp.exe
- 2008-10-14 17:42 . 2009-02-07 23:02 2066048 c:\windows\Driver Cache\I386\ntkrnlpa.exe
+ 2008-10-14 17:42 . 2009-08-04 14:20 2066048 c:\windows\Driver Cache\I386\ntkrnlpa.exe
- 2008-10-14 17:43 . 2009-02-06 11:06 2145280 c:\windows\Driver Cache\I386\ntkrnlmp.exe
+ 2008-10-14 17:43 . 2009-08-04 15:13 2145280 c:\windows\Driver Cache\I386\ntkrnlmp.exe
+ 2009-10-25 12:14 . 2009-10-25 12:14 4792320 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934 e089_efcb0f50\System.dll
+ 2009-10-25 12:13 . 2009-10-25 12:13 1966080 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934 e089_104975c7\System.dll
+ 2009-10-25 12:14 . 2009-10-25 12:14 2088960 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c56 1934e089_c53eef10\System.Xml.dll
+ 2009-10-25 12:15 . 2009-10-25 12:15 5513216 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c56 1934e089_302cc186\System.Xml.dll
+ 2009-10-25 12:14 . 2009-10-25 12:14 3018752 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0 __b77a5c561934e089_bf7dcaa7\System.Windows.Forms.dll
+ 2009-10-25 12:14 . 2009-10-25 12:14 7884800 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0 __b77a5c561934e089_a636480a\System.Windows.Forms.dll
+ 2009-10-25 12:15 . 2009-10-25 12:15 2244608 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f 5f7f11d50a3a_20fe0dc7\System.Drawing.dll
+ 2009-10-25 12:15 . 2009-10-25 12:15 3395584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5 f7f11d50a3a_9a1e4da6\System.Design.dll
+ 2009-10-25 12:14 . 2009-10-25 12:14 1470464 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5 f7f11d50a3a_373166ae\System.Design.dll
+ 2009-10-25 12:14 . 2009-10-25 12:14 3391488 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c5619 34e089_a8f65f5a\mscorlib.dll
+ 2009-10-25 12:15 . 2009-10-25 12:15 8908800 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c5619 34e089_095d8548\mscorlib.dll
+ 2009-10-26 12:03 . 2009-10-26 12:03 3313664 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\14cd5f4b61d35f9b 76327d6be9853755\WindowsBase.ni.dll
+ 2009-10-26 12:07 . 2009-10-26 12:07 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\f3c7957 351aec85f526a3350c9718b1e\UIAutomationClientsideProviders.ni.dll
+ 2009-10-26 01:19 . 2009-10-26 01:19 7599104 c:\windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2F5.tmp\System.dll
+ 2009-10-26 12:01 . 2009-10-26 12:02 7868416 c:\windows\assembly\NativeImages_v2.0.50727_32\System\80978a322d7dd39f0a71b e1251ae395a\System.ni.dll
+ 2009-10-26 12:07 . 2009-10-26 12:07 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\773a9786013451d3b aaeff003dc4230f\System.Xml.ni.dll
+ 2009-10-26 18:56 . 2009-10-26 18:56 1908224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\d265da3 6954fcb4cb7ad5adc693ea0f2\System.Workflow.Runtime.ni.dll
+ 2009-10-26 18:55 . 2009-10-26 18:55 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\693a8fb e6f7ad6e4e429052da4317e59\System.Workflow.ComponentModel.ni.dll
+ 2009-10-26 18:55 . 2009-10-26 18:55 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\cc99fbb ac0b6e4e9ca62093e49b0c16b\System.Workflow.Activities.ni.dll
+ 2009-10-26 18:55 . 2009-10-26 18:55 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\b57bb002 a655920cbfa2bee29d1e22b7\System.Web.Services.ni.dll
+ 2009-10-26 18:55 . 2009-10-26 18:55 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\81197e32ec 931f439b3114e9031b65d6\System.Web.Mobile.ni.dll
+ 2009-10-26 18:55 . 2009-10-26 18:55 2403328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\7f64c9d 25471b72e1e957bdfe67947c8\System.Web.Extensions.ni.dll
+ 2009-10-26 12:06 . 2009-10-26 12:06 1917440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\63cf639b6e0a3c 25c1643c85016e7422\System.Speech.ni.dll
+ 2009-10-26 18:54 . 2009-10-26 18:54 1706496 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\340cad1 7fe57947eacbc8fa2cea780da\System.ServiceModel.Web.ni.dll
+ 2009-10-26 12:30 . 2009-10-26 12:30 2338304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\034c91b 133dee73d452652c52767b5ea\System.Runtime.Serialization.ni.dll
+ 2009-10-26 12:06 . 2009-10-26 12:06 1035264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\646ab52eef34 3380aa002c220dc31e13\System.Printing.ni.dll
+ 2009-10-26 12:30 . 2009-10-26 12:30 1056768 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\c2de847 9e54852f56996f79bc93acb13\System.IdentityModel.ni.dll
+ 2009-10-26 12:06 . 2009-10-26 12:06 1587200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\3da96ee075bab 9202626ae44c18d226c\System.Drawing.ni.dll
+ 2009-10-26 18:54 . 2009-10-26 18:54 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\543aced 762f6b0c3f8e037955941afc6\System.DirectoryServices.ni.dll
+ 2009-10-26 18:54 . 2009-10-26 18:54 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\a6b5862448 6714fa71e5e35186850ff0\System.Deployment.ni.dll
+ 2009-10-26 12:05 . 2009-10-26 12:05 6616576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\c70731047b002263 8b3f9fb158948a03\System.Data.ni.dll
+ 2009-10-26 18:52 . 2009-10-26 18:52 2510336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\826b09ab0 d0e36f4d631b4cd335df511\System.Data.SqlXml.ni.dll
+ 2009-10-26 18:54 . 2009-10-26 18:54 1328128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\956a513 dcbd44d5a6801840ef2b0b47b\System.Data.Services.ni.dll
+ 2009-10-26 12:05 . 2009-10-26 12:05 2516480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\0bbec79460b 1137df5313f9baf7b246f\System.Data.Linq.ni.dll
+ 2009-10-26 18:54 . 2009-10-26 18:54 9924096 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\6479f975b 105808a8d9e7a7fdc762551\System.Data.Entity.ni.dll
+ 2009-10-26 12:05 . 2009-10-26 12:05 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\47d87251e93256c6 35eb73403b8db33e\System.Core.ni.dll
+ 2009-10-26 12:05 . 2009-10-26 12:05 2128896 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\4bfb3048bf200 a6a8592d1b4ba861a7f\ReachFramework.ni.dll
+ 2009-10-26 12:05 . 2009-10-26 12:05 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\6bafb1a2a7379 4ddb9761cb321c9e7e2\PresentationUI.ni.dll
+ 2009-10-26 12:03 . 2009-10-26 12:03 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\e634bc4 c4a00635a0a254febab0e2e2c\PresentationBuildTasks.ni.dll
+ 2009-10-26 18:53 . 2009-10-26 18:53 1712128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\1c86afc 399d0fdd8e069266ffbe748d1\Microsoft.VisualBasic.ni.dll
+ 2009-10-26 18:52 . 2009-10-26 18:52 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\6b2f62f 5e981913fce1d223f645d9ddf\Microsoft.Transactions.Bridge.ni.dll
+ 2009-10-26 18:54 . 2009-10-26 18:54 2332160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\b261961046 545831aa60963e84905968\Microsoft.JScript.ni.dll
+ 2009-10-26 18:52 . 2009-10-26 18:52 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\bd24149 2d96db39f20e758c13c845033\Microsoft.Build.Tasks.ni.dll
+ 2009-10-26 18:53 . 2009-10-26 18:53 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\a47100d 8f4574bed2d49d83d0ab8964e\Microsoft.Build.Tasks.v3.5.ni.dll
+ 2009-10-26 18:52 . 2009-10-26 18:52 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\6cfe582 681724965fb817e8ece5f0909\Microsoft.Build.Engine.ni.dll
+ 2009-10-26 01:12 . 2009-10-26 01:12 1245184 c:\windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsB ase.dll
+ 2009-10-26 01:17 . 2009-10-26 01:17 3149824 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
+ 2009-10-26 01:17 . 2009-10-26 01:17 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XM L.dll
+ 2009-10-26 01:12 . 2009-10-26 01:12 1630208 c:\windows\assembly\GAC_MSIL\System.Workflow.ComponentModel\3.0.0.0__31bf38 56ad364e35\System.Workflow.ComponentModel.dll
+ 2009-10-26 01:12 . 2009-10-26 01:12 1138688 c:\windows\assembly\GAC_MSIL\System.Workflow.Activities\3.0.0.0__31bf3856ad 364e35\System.Workflow.Activities.dll
+ 2009-10-26 01:16 . 2009-10-26 01:16 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089 \System.Windows.Forms.dll
+ 2009-10-26 01:19 . 2009-10-26 01:19 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e3 5\System.Web.Extensions.dll
+ 2009-10-26 01:18 . 2009-10-26 01:18 5931008 c:\windows\assembly\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089\ System.ServiceModel.dll
+ 2009-10-26 01:16 . 2009-10-26 01:16 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System .Design.dll
+ 2009-10-26 01:13 . 2009-10-26 01:13 2879488 c:\windows\assembly\GAC_MSIL\System.Data.Entity\3.5.0.0__b77a5c561934e089\S ystem.Data.Entity.dll
+ 2009-10-26 01:18 . 2009-10-26 01:18 5283840 c:\windows\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e3 5\PresentationFramework.dll
+ 2009-10-26 01:16 . 2009-10-26 01:16 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web. dll
+ 2009-10-26 01:17 . 2009-10-26 01:17 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Dat a.dll
+ 2009-10-26 01:12 . 2009-10-26 01:12 4210688 c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\Prese ntationCore.dll
+ 2009-10-26 01:16 . 2009-10-26 01:16 4546560 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
- 2007-07-12 03:27 . 2007-07-12 03:27 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
+ 2009-10-25 12:13 . 2009-10-25 12:13 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
+ 2009-10-25 12:13 . 2009-10-25 12:13 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web. dll
- 2007-07-12 03:27 . 2007-07-12 03:27 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web. dll
+ 2005-05-12 04:11 . 2009-10-02 15:01 25198016 c:\windows\SYSTEM32\MRT.exe
+ 2006-11-08 02:03 . 2009-08-29 08:08 11069440 c:\windows\SYSTEM32\ieframe.dll
+ 2007-05-10 16:39 . 2009-08-29 08:08 11069440 c:\windows\SYSTEM32\DLLCACHE\ieframe.dll
+ 2009-08-11 01:08 . 2009-08-11 01:08 11315712 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\M953297\M953297Uninsta ll.msp
+ 2009-08-15 00:32 . 2009-08-15 00:32 11110912 c:\windows\Installer\2ca294f.msp
+ 2009-08-15 00:32 . 2009-08-15 00:32 11110912 c:\windows\Installer\2ac86d0.msp
+ 2009-08-10 18:09 . 2009-08-10 18:09 17254912 c:\windows\Installer\2481eab.msp
+ 2008-12-13 14:21 . 2008-12-13 14:21 10473472 c:\windows\Installer\20b0a9f.msp
+ 2009-10-25 12:27 . 2009-03-08 08:39 11063808 c:\windows\ie8updates\KB974455-IE8\ieframe.dll
+ 2009-10-26 12:06 . 2009-10-26 12:06 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\6340625 9e94d5c0ff5b79401dfe113ce\System.Windows.Forms.ni.dll
+ 2009-10-26 18:55 . 2009-10-26 18:55 11796992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\3963ce03d445a8619 abbf388d590134b\System.Web.ni.dll
+ 2009-10-26 18:52 . 2009-10-26 18:52 17317888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\41460330 13edebd7e0cb604e504ebfee\System.ServiceModel.ni.dll
+ 2009-10-26 12:06 . 2009-10-26 12:06 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\8ee220bc3cce4f 7bbd7818946519ed7f\System.Design.ni.dll
+ 2009-10-26 12:04 . 2009-10-26 12:04 14327808 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\96e710f 47c601cba3f2348a8d11ddede\PresentationFramework.ni.dll
+ 2009-10-26 12:04 . 2009-10-26 12:04 12216320 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\956375d487c bef36165b3250030e3574\PresentationCore.ni.dll
+ 2009-10-26 01:18 . 2009-10-26 01:18 11486720 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\6d667f19d6873618869 90f3ca0f49816\mscorlib.ni.dll
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

c:\documents and settings\Hank Chen\Start Menu\Programs\Startup\
HotSync Manager.lnk - c:\program files\Palm\HOTSYNC.EXE [2003-10-14 299008]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-9-24 29696]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\Sebring]
2004-01-13 19:17 110592 ----a-w- c:\windows\SYSTEM32\LgNotify.dll

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\Auth orizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Money 2006\\MNYCoreFiles\\msmoney.exe"=
"c:\\Program Files\\Palm\\HOTSYNC.EXE"=
"c:\\Program Files\\Hewlett-Packard\\HP Media Vault 2100\\NASDriveMapper.exe"=
"c:\\Program Files\\Hewlett-Packard\\HP Media Vault 2100\\NASCfg.exe"=
"c:\\Program Files\\Hewlett-Packard\\HP Media Vault 2100\\HPMVTray.exe"=
"c:\\Program Files\\Hewlett-Packard\\HP Media Vault 2100\\NASSelector.exe"=
"c:\\Program Files\\NewTech Infosystems\\NTI Shadow 3\\shadow.exe"=
"c:\\Program Files\\Hewlett-Packard\\HP Media Vault 2100\\DoTask.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Hp\\Digital Imaging\\bin\\hpqscnvw.exe"=
"c:\\Program Files\\Hp\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\Hp\\Digital Imaging\\bin\\hpqnrs08.exe"=
"c:\\Program Files\\TVUPlayer\\TVUPlayer.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

R3 GTICARD;GTICARD;c:\windows\SYSTEM32\DRIVERS\gticard.sys [2/14/2003 4:03 PM 59328]
S3 {E2B953A7-195A-44F9-9BA3-3D5F4E32BB55};AIM 3.0 Part 01 Codec Driver CH-7009-B;c:\windows\SYSTEM32\DRIVERS\wa301b.sys [1/1/1980 1:00 AM 33847]
S3 GoogleDesktopManager-061008-081103;Google Desktop Manager 5.7.806.10245;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [11/3/2004 3:12 PM 29744]
.
Contents of the 'Scheduled Tasks' folder

2009-11-01 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1868879660-976857361-759642186-1005Core.job
- c:\documents and settings\Hank Chen\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-10-21 00:16]

2009-11-01 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1868879660-976857361-759642186-1005UA.job
- c:\documents and settings\Hank Chen\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-10-21 00:16]

2009-10-31 c:\windows\Tasks\WGASetup.job
- c:\windows\system32\KB905474\wgasetup.exe [2009-10-25 02:18]
.
.

chen1276 · 31-Oct-2009, 10:42 PM **#11**

Last part of the report

------- Supplementary Scan -------
.
uDefault_Search_URL = hxxp://www.google.com/ie
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
TCP: {1B05AFD6-682C-4E0C-9A7A-DD3AB58CA55D} = 203.252.32.4,200.255.255.65
DPF: {41D2C0E9-DA08-4B73-B899-656371EAE058} - hxxp://hpmediavault/Webshare/ActivexDLL/PhotoLdr.cab
FF - ProfilePath - c:\documents and settings\Hank Chen\Application Data\Mozilla\Firefox\Profiles\cjqlaqna.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://my.yahoo.com
FF - component: c:\program files\Mozilla Firefox\components\GoogleDesktopMozilla.dll
FF - plugin: c:\program files\Google\Picasa3\npPicasa3.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npGoogleGadgetPluginFirefoxWin.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\NPUploader.dll
FF - plugin: c:\program files\Viewpoint\Viewpoint Media Player\npViewpoint.dll
FF - HiddenExtension: XUL Cache: {E7E29EF7-AA72-4B0C-AFF9-4B3BC55673C5} - c:\documents and settings\Hank Chen\Local Settings\Application Data\{E7E29EF7-AA72-4B0C-AFF9-4B3BC55673C5}
FF - HiddenExtension: XUL Cache: {21E7E408-EE4B-4372-B8DB-9F8905EDC627} - c:\documents and settings\Fay Chen\Local Settings\Application Data\{21E7E408-EE4B-4372-B8DB-9F8905EDC627}\
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- FIREFOX POLICIES ----
FF - user.js: yahoo.homepage.dontask - true.
- - - - ORPHANS REMOVED - - - -

BHO-{EEA590B3-0976-7A81-25F5-0545707825B0} - (no file)

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-10-31 21:16
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(1264)
c:\windows\System32\LgNotify.dll

- - - - - - - > 'explorer.exe'(2644)
c:\windows\system32\WININET.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\webcheck.dll
.
Completion time: 2009-11-01 21:19
ComboFix-quarantined-files.txt 2009-11-01 01:19
ComboFix2.txt 2009-10-25 01:45
ComboFix3.txt 2009-10-24 01:33
ComboFix4.txt 2007-04-29 05:35

Pre-Run: 1,699,840 bytes free
Post-Run: 43,270,144 bytes free

- - End Of File - - 4D73D8A011DA150B1CB130EF76F5DE34

**sjpritch25** · 02-Nov-2009, 08:37 PM **#12**

Did you upload that file for me?

Please run the CFScript again it didn't get copy and pasted correctly. Thanks

chen1276 · 03-Nov-2009, 12:37 AM **#13**

Yes, I uploaded both files in the C:\QooBox\Quarantine folder, although they are named slightly different than you describe:
[70]-Submit_2009-10-24_21.12.53
[70]-Submit_2009-10-24_21.24.09

You are correct, the script didn't seem to run correctly the first time. I re-ran it, successfully (I believe) this time. Is there anyway to post the log file without having to post it in 4 chunks due to the 30K character limitation? Here's the first part of the updated log file:

ComboFix 09-11-01.04 - Hank Chen 11/02/2009 23:16.4.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.510.289 [GMT -5:00]
Running from: c:\documents and settings\Hank Chen\Desktop\ComboFix.exe
Command switches used :: c:\documents and settings\Hank Chen\Desktop\CFScript.txt

FILE ::
"c:\windows\ucejifoha.dll"
"c:\windows\uvaxecug.dll"
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\ucejifoha.dll
c:\windows\uvaxecug.dll

.
((((((((((((((((((((((((( Files Created from 2009-10-03 to 2009-11-03 )))))))))))))))))))))))))))))))
.

2009-11-03 03:55 . 2009-11-03 03:55 -------- d-----w- c:\windows\system32\wbem\Repository
2009-11-02 15:52 . 2009-11-02 15:52 -------- d-----w- c:\documents and settings\Fay Chen\Local Settings\Application Data\Mozilla
2009-11-02 15:52 . 2009-11-02 15:52 -------- d-sh--w- c:\documents and settings\Fay Chen\PrivacIE
2009-11-02 15:51 . 2009-11-02 15:51 -------- d-sh--w- c:\documents and settings\Fay Chen\IETldCache
2009-11-02 13:00 . 2009-11-02 13:00 -------- d-sh--w- c:\documents and settings\Hank Chen.CHENTEL2\IETldCache
2009-11-02 13:00 . 2009-11-02 13:00 -------- d--h--w- c:\documents and settings\Hank Chen.CHENTEL2\WLANProfiles
2009-11-02 13:00 . 2009-11-03 03:31 -------- d-----w- c:\documents and settings\Hank Chen.CHENTEL2
2009-11-02 12:44 . 2009-11-02 13:00 -------- d-----w- c:\documents and settings\TEMP
2009-11-01 17:09 . 2009-11-01 17:09 -------- d-----w- C:\412a1002f5adfc2f4cee
2009-10-28 00:53 . 2009-10-28 00:53 -------- d-----w- C:\8bc6ec040f871e4edc209e29
2009-10-27 11:58 . 2009-10-27 11:58 -------- d-----w- c:\documents and settings\Hank Chen\Local Settings\Application Data\PCHealth
2009-10-26 01:13 . 2009-10-26 01:13 -------- d-sh--w- c:\documents and settings\Default User\IETldCache
2009-10-26 01:12 . 2009-10-26 01:12 -------- d-----w- c:\windows\system32\XPSViewer
2009-10-26 01:12 . 2009-10-26 01:12 -------- d-----w- c:\program files\MSBuild
2009-10-26 01:12 . 2009-10-26 01:12 -------- d-----w- c:\program files\Reference Assemblies
2009-10-26 01:11 . 2008-07-06 12:06 89088 ------w- c:\windows\system32\dllcache\filterpipelineprintproc.dll
2009-10-26 01:11 . 2008-07-06 12:06 117760 ------w- c:\windows\system32\prntvpt.dll
2009-10-26 01:11 . 2008-07-06 10:50 597504 ------w- c:\windows\system32\dllcache\printfilterpipelinesvc.exe
2009-10-26 01:11 . 2009-10-26 01:11 -------- d-----w- C:\f1b2e36d1e2d4eced3ab
2009-10-26 01:11 . 2008-07-06 12:06 575488 ------w- c:\windows\system32\xpsshhdr.dll
2009-10-26 01:11 . 2008-07-06 12:06 575488 ------w- c:\windows\system32\dllcache\xpsshhdr.dll
2009-10-26 01:11 . 2008-07-06 12:06 1676288 ------w- c:\windows\system32\xpssvcs.dll
2009-10-26 01:11 . 2008-07-06 12:06 1676288 ------w- c:\windows\system32\dllcache\xpssvcs.dll
2009-10-25 12:20 . 2009-10-25 12:20 -------- d-----w- c:\windows\system32\KB905474
2009-10-25 12:20 . 2009-03-11 02:26 1403264 ----a-w- c:\windows\system32\KB905474\wganotifypackageinner.exe
2009-10-25 12:20 . 2009-03-11 02:18 453512 ----a-w- c:\windows\system32\KB905474\wgasetup.exe
2009-10-25 12:08 . 2009-10-25 12:27 -------- d-----w- c:\windows\ie8updates
2009-10-25 02:03 . 2009-10-25 02:03 -------- d-sh--w- c:\documents and settings\Hank Chen\PrivacIE
2009-10-25 01:46 . 2009-08-29 08:08 12800 ------w- c:\windows\system32\dllcache\xpshims.dll
2009-10-25 01:46 . 2009-08-29 08:08 246272 ------w- c:\windows\system32\dllcache\ieproxy.dll
2009-10-25 01:45 . 2009-06-21 21:44 153088 ------w- c:\windows\system32\dllcache\triedit.dll
2009-10-25 01:44 . 2009-07-10 13:27 1315328 ------w- c:\windows\system32\dllcache\msoe.dll
2009-10-21 01:03 . 2009-10-21 01:03 -------- d-----w- c:\program files\Trend Micro
2009-10-21 00:16 . 2009-11-01 00:46 -------- d-----w- c:\documents and settings\Hank Chen\Local Settings\Application Data\Temp
2009-10-20 12:17 . 2009-10-20 12:17 -------- d-sh--w- c:\documents and settings\LocalService\IETldCache
2009-10-15 23:52 . 2009-10-15 23:52 -------- d-----w- c:\program files\TeaTimer (Spybot - Search & Destroy)
2009-10-15 23:52 . 2009-10-15 23:52 -------- d-----w- c:\program files\SDHelper (Spybot - Search & Destroy)

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-11-03 04:21 . 2005-04-29 04:07 -------- d-----w- c:\documents and settings\Hank Chen\Application Data\Skype
2009-11-03 04:02 . 2009-11-03 04:02 5102 ----a-w- c:\windows\system32\PerfStringBackup.TMP
2009-11-02 15:39 . 2004-07-28 15:56 -------- d-----w- c:\program files\Google
2009-11-02 13:00 . 2004-12-13 20:06 -------- d-----w- c:\program files\Real
2009-10-29 12:14 . 2004-08-02 14:47 58464 ----a-w- c:\documents and settings\Hank Chen\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-10-21 00:28 . 2004-07-27 00:06 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-10-16 01:41 . 2004-07-20 02:54 -------- d-----w- c:\program files\Java
2009-10-15 23:58 . 2004-07-27 00:06 -------- d-----w- c:\program files\Spybot - Search & Destroy
2009-09-11 14:18 . 2004-03-19 22:40 136192 ----a-w- c:\windows\system32\msv1_0.dll
2009-09-04 21:03 . 2004-03-30 01:48 58880 ----a-w- c:\windows\system32\msasn1.dll
2009-08-29 08:08 . 2004-02-06 23:05 916480 ------w- c:\windows\system32\wininet.dll
2009-08-26 08:00 . 2004-03-19 22:43 247326 ----a-w- c:\windows\system32\strmdll.dll
2009-08-05 09:01 . 2002-12-12 05:14 204800 ----a-w- c:\windows\system32\mswebdvd.dll
2008-09-05 15:49 . 2005-05-09 13:34 122880 ----a-w- c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
.

((((((((((((((((((((((((((((( SnapShot@2009-10-24_01.27.54 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-11-03 03:57 . 2009-11-03 03:57 16384 c:\windows\Temp\Perflib_Perfdata_118.dat
+ 2004-03-19 22:44 . 2009-06-25 08:25 54272 c:\windows\SYSTEM32\wdigest.dll
+ 2007-01-29 08:58 . 2009-07-14 11:03 46080 c:\windows\SYSTEM32\tzchange.exe
+ 2008-07-30 01:10 . 2008-07-30 01:10 26112 c:\windows\SYSTEM32\TsWpfWrp.exe
+ 2004-03-19 22:43 . 2009-06-12 12:31 80896 c:\windows\SYSTEM32\tlntsess.exe
+ 2003-08-05 21:15 . 2009-06-12 12:31 76288 c:\windows\SYSTEM32\telnet.exe
+ 2009-10-26 01:11 . 2008-07-06 12:06 89088 c:\windows\SYSTEM32\SPOOL\PRTPROCS\W32X86\filterpipelineprintproc.dll
+ 2004-03-19 22:42 . 2009-06-25 08:25 56832 c:\windows\SYSTEM32\secur32.dll
- 2004-03-19 22:42 . 2009-02-03 19:59 56832 c:\windows\SYSTEM32\secur32.dll
+ 2008-07-29 23:59 . 2008-07-29 23:59 43544 c:\windows\SYSTEM32\PresentationHostProxy.dll
+ 2004-07-20 02:42 . 2009-11-03 04:02 81146 c:\windows\SYSTEM32\PERFC009.DAT
+ 2008-07-25 15:17 . 2008-07-25 15:17 15360 c:\windows\SYSTEM32\MUI\0409\mscorees.dll
+ 2006-11-08 02:03 . 2009-08-29 08:08 55296 c:\windows\SYSTEM32\msfeedsbs.dll
- 2006-11-08 02:03 . 2009-03-08 08:31 55296 c:\windows\SYSTEM32\msfeedsbs.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 83968 c:\windows\SYSTEM32\mscories.dll
- 2004-03-19 22:38 . 2009-03-08 08:33 25600 c:\windows\SYSTEM32\jsproxy.dll
+ 2004-03-19 22:38 . 2009-08-29 08:08 25600 c:\windows\SYSTEM32\jsproxy.dll
+ 2008-07-29 23:24 . 2008-07-29 23:24 97800 c:\windows\SYSTEM32\infocardapi.dll
+ 2008-07-29 23:24 . 2008-07-29 23:24 11264 c:\windows\SYSTEM32\icardres.dll
+ 2004-03-19 22:37 . 2009-07-29 04:37 81920 c:\windows\SYSTEM32\fontsub.dll
+ 2008-07-30 01:10 . 2008-07-30 01:10 73720 c:\windows\SYSTEM32\dxva2.dll
+ 2004-03-19 22:38 . 2009-06-24 11:18 92928 c:\windows\SYSTEM32\DRIVERS\ksecdd.sys
+ 2009-06-25 08:25 . 2009-06-25 08:25 54272 c:\windows\SYSTEM32\DLLCACHE\wdigest.dll
+ 2009-06-12 12:31 . 2009-06-12 12:31 80896 c:\windows\SYSTEM32\DLLCACHE\tlntsess.exe
+ 2009-06-12 12:31 . 2009-06-12 12:31 76288 c:\windows\SYSTEM32\DLLCACHE\telnet.exe
+ 2009-02-03 19:59 . 2009-06-25 08:25 56832 c:\windows\SYSTEM32\DLLCACHE\secur32.dll
- 2009-02-03 19:59 . 2009-02-03 19:59 56832 c:\windows\SYSTEM32\DLLCACHE\secur32.dll
- 2007-05-10 16:39 . 2009-03-08 08:31 55296 c:\windows\SYSTEM32\DLLCACHE\msfeedsbs.dll
+ 2007-05-10 16:39 . 2009-08-29 08:08 55296 c:\windows\SYSTEM32\DLLCACHE\msfeedsbs.dll
+ 2009-09-04 21:03 . 2009-09-04 21:03 58880 c:\windows\SYSTEM32\DLLCACHE\msasn1.dll
+ 2009-06-24 11:18 . 2009-06-24 11:18 92928 c:\windows\SYSTEM32\DLLCACHE\ksecdd.sys
- 2006-05-10 05:22 . 2009-03-08 08:33 25600 c:\windows\SYSTEM32\DLLCACHE\jsproxy.dll
+ 2006-05-10 05:22 . 2009-08-29 08:08 25600 c:\windows\SYSTEM32\DLLCACHE\jsproxy.dll
+ 2009-07-29 04:37 . 2009-07-29 04:37 81920 c:\windows\SYSTEM32\DLLCACHE\fontsub.dll
+ 2009-06-10 14:13 . 2009-06-10 14:13 84992 c:\windows\SYSTEM32\DLLCACHE\avifil32.dll
+ 2009-07-17 19:01 . 2009-07-17 19:01 58880 c:\windows\SYSTEM32\DLLCACHE\atl.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 96760 c:\windows\SYSTEM32\dfshim.dll
+ 2004-03-19 22:34 . 2009-06-10 14:13 84992 c:\windows\SYSTEM32\avifil32.dll
- 2004-03-19 22:34 . 2008-04-14 00:11 84992 c:\windows\SYSTEM32\avifil32.dll
- 2004-03-19 22:33 . 2008-04-14 00:11 58880 c:\windows\SYSTEM32\atl.dll
+ 2004-03-19 22:33 . 2009-07-17 19:01 58880 c:\windows\SYSTEM32\atl.dll
+ 2008-07-30 03:40 . 2008-07-30 03:40 70648 c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
+ 2008-07-30 03:40 . 2008-07-30 03:40 91136 c:\windows\Microsoft.NET\Framework\v3.5\MSBuild.exe
+ 2008-07-30 03:40 . 2008-07-30 03:40 41984 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft.VisualC.STLCLR.dll
+ 2008-07-30 03:40 . 2008-07-30 03:40 40960 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft.Data.Entity.Build.Tasks.d ll
+ 2008-07-29 22:47 . 2008-07-29 22:47 89080 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.2052.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 92664 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1042.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 95224 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1041.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 89592 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1028.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 84480 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.2052.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 94720 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1042.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 97792 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1041.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 84992 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1028.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 97280 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\DeleteTemp.exe
+ 2008-07-30 03:40 . 2008-07-30 03:40 95224 c:\windows\Microsoft.NET\Framework\v3.5\EdmGen.exe
+ 2008-07-30 03:40 . 2008-07-30 03:40 78856 c:\windows\Microsoft.NET\Framework\v3.5\DataSvcUtil.exe
+ 2008-07-30 03:40 . 2008-07-30 03:40 41984 c:\windows\Microsoft.NET\Framework\v3.5\AddInUtil.exe
+ 2008-07-30 03:40 . 2008-07-30 03:40 41992 c:\windows\Microsoft.NET\Framework\v3.5\AddInProcess32.exe
+ 2008-07-30 03:40 . 2008-07-30 03:40 41992 c:\windows\Microsoft.NET\Framework\v3.5\AddInProcess.exe
+ 2008-07-30 01:10 . 2008-07-30 01:10 46104 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
+ 2008-07-29 23:59 . 2008-07-29 23:59 32768 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationCFFRasterizer.dll
+ 2008-07-30 01:10 . 2008-07-30 01:10 71160 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PenIMC.dll
+ 2008-07-29 23:32 . 2008-07-29 23:32 17448 c:\windows\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\PerformanceCounterInstaller.exe
+ 2008-07-29 23:16 . 2008-07-29 23:16 32768 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
+ 2008-07-29 23:16 . 2008-07-29 23:16 73728 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.Install.dll
+ 2008-07-29 23:16 . 2008-07-29 23:16 20504 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceMonikerSupport.dll
+ 2008-07-29 23:16 . 2008-07-29 23:16 11280 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelEvents.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 37896 c:\windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 81400 c:\windows\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL
+ 2008-07-25 15:17 . 2008-07-25 15:17 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions .dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 57392 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thu nk.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install. dll
- 2005-09-23 11:28 . 2005-09-23 11:28 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install. dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 95232 c:\windows\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 16896 c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 61952 c:\windows\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe
+ 2008-07-25 15:17 . 2008-07-25 15:17 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
- 2005-09-23 11:28 . 2005-09-23 11:28 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
- 2005-09-23 11:28 . 2005-09-23 11:28 53248 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
+ 2008-07-25 15:17 . 2008-07-25 15:17 53248 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
+ 2008-07-25 15:17 . 2008-07-25 15:17 88584 c:\windows\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 24584 c:\windows\Microsoft.NET\Framework\v2.0.50727\normalization.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 31744 c:\windows\Microsoft.NET\Framework\v2.0.50727\MUI\0409\mscorsecr.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 19456 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscortim.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 69632 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
+ 2008-07-25 15:16 . 2008-07-25 15:16 18944 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 77312 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 94208 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorld.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 46592 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorie.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 83456 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 69632 c:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
+ 2008-07-25 15:16 . 2008-07-25 15:16 69632 c:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
+ 2008-07-25 15:16 . 2008-07-25 15:16 97792 c:\windows\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 12800 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProce ssor.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 12800 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProce ssor.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 40960 c:\windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe
+ 2008-07-25 15:16 . 2008-07-25 15:16 40960 c:\windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe
- 2005-09-23 11:28 . 2005-09-23 11:28 72192 c:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 72192 c:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 65032 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
+ 2008-07-25 15:17 . 2008-07-25 15:17 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
+ 2008-07-25 15:17 . 2008-07-25 15:17 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEHost.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 18936 c:\windows\Microsoft.NET\Framework\v2.0.50727\fusion.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 62968 c:\windows\Microsoft.NET\Framework\v2.0.50727\dfdll.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 35320 c:\windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
+ 2008-07-25 15:17 . 2008-07-25 15:17 69120 c:\windows\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 27136 c:\windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 13312 c:\windows\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 13312 c:\windows\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 80376 c:\windows\Microsoft.NET\Framework\v2.0.50727\csc.exe
+ 2008-07-25 15:17 . 2008-07-25 15:17 89608 c:\windows\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll
+ 2008-11-25 08:59 . 2008-11-25 08:59 31560 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
+ 2008-07-25 15:16 . 2008-07-25 15:16 34312 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
+ 2008-07-25 15:16 . 2008-07-25 15:16 33288 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
+ 2008-07-25 15:16 . 2008-07-25 15:16 24576 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
+ 2008-07-25 15:16 . 2008-07-25 15:16 84480 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 33800 c:\windows\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 17416 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 22024 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
+ 2008-07-25 15:16 . 2008-07-25 15:16 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
+ 2008-07-25 15:17 . 2008-07-25 15:17 58880 c:\windows\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
+ 2008-07-25 15:16 . 2008-07-25 15:16 98808 c:\windows\Microsoft.NET\Framework\v2.0.50727\alink.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 10752 c:\windows\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 10752 c:\windows\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 13824 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll
+ 2009-06-24 23:56 . 2009-06-24 23:56 73728 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe
+ 2008-05-28 04:49 . 2008-05-28 04:49 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
- 2007-04-14 00:58 . 2007-04-14 00:58 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
- 2007-04-14 00:57 . 2007-04-14 00:57 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
+ 2008-05-28 04:49 . 2008-05-28 04:49 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
+ 2008-05-28 04:49 . 2008-05-28 04:49 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
- 2007-04-14 00:57 . 2007-04-14 00:57 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
+ 2008-05-28 05:30 . 2008-05-28 05:30 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
- 2007-04-14 01:30 . 2007-04-14 01:30 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
+ 2008-07-25 15:16 . 2008-07-25 15:16 96768 c:\windows\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 16896 c:\windows\Microsoft.NET\Framework\SharedReg12.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 16896 c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 16896 c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 16896 c:\windows\Microsoft.NET\Framework\sbscmp10.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 82944 c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe
+ 2008-07-30 01:07 . 2008-07-30 01:07 23040 c:\windows\Installer\2098a4e.msp
+ 2009-10-26 01:10 . 2009-10-26 01:10 88576 c:\windows\Installer\2058394.msi
+ 2009-10-25 12:27 . 2009-03-08 08:33 12288 c:\windows\ie8updates\KB974455-IE8\xpshims.dll
+ 2009-10-25 12:27 . 2009-03-08 08:31 55296 c:\windows\ie8updates\KB974455-IE8\msfeedsbs.dll
+ 2009-10-25 12:27 . 2009-03-08 08:33 25600 c:\windows\ie8updates\KB974455-IE8\jsproxy.dll
+ 2009-10-26 01:11 . 2008-07-06 12:06 89088 c:\windows\Driver Cache\I386\filterpipelineprintproc.dll
+ 2009-10-25 12:14 . 2009-10-25 12:14 90112 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000. 0__b03f5f7f11d50a3a_29f076e8\System.Drawing.Design.dll
+ 2009-10-25 12:14 . 2009-10-25 12:14 61440 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b0 3f5f7f11d50a3a_fcf75543\CustomMarshalers.dll
+ 2009-10-26 12:07 . 2009-10-26 12:07 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\a715aa4 42ef87ae99b3ade185599249d\UIAutomationProvider.ni.dll
+ 2009-10-26 18:55 . 2009-10-26 18:55 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\423f794 d1f4ed6e120fbb02e436491cb\System.Windows.Presentation.ni.dll
+ 2009-10-26 18:55 . 2009-10-26 18:55 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\19ca174 7c1ea18a3b639b302bca8df93\System.Web.DynamicData.Design.ni.dll
+ 2009-10-26 18:53 . 2009-10-26 18:53 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\532438e 2acfcadc469a4d468c51f8451\System.ComponentModel.DataAnnotations.ni.dll
+ 2009-10-26 18:53 . 2009-10-26 18:53 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\597b20e 1b053d6a510cfe033c07a63e6\System.AddIn.Contract.ni.dll
+ 2009-10-26 12:04 . 2009-10-26 12:04 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\2d7408a 0232f2e2efd0d7adf5dfa733a\PresentationFontCache.ni.exe
+ 2009-10-26 12:03 . 2009-10-26 12:03 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\c8fd2d9 233f8ea3031fb16f697635231\PresentationCFFRasterizer.ni.dll
+ 2009-10-26 18:54 . 2009-10-26 18:54 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\790cf1edb17ee4 1b59be62ecbd59613b\Microsoft.Vsa.ni.dll
+ 2009-10-26 18:52 . 2009-10-26 18:52 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\e9aba2e ab90d647356f65e66053da02b\Microsoft.Build.Framework.ni.dll
+ 2009-10-26 18:52 . 2009-10-26 18:52 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\28343d4 70d992f169ca0e7cdb3cc3117\Microsoft.Build.Framework.ni.dll
+ 2009-10-26 18:52 . 2009-10-26 18:52 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\f4e38208e88cb4cc314a1d 6543b9fcc6\dfsvc.ni.exe
+ 2009-10-26 18:52 . 2009-10-26 18:52 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\11eb4f6606ba01 e5128805759121ea6c\Accessibility.ni.dll
+ 2009-10-26 01:12 . 2009-10-26 01:12 94208 c:\windows\assembly\GAC_MSIL\WindowsFormsIntegration\3.0.0.0__31bf3856ad364 e35\WindowsFormsIntegration.dll
+ 2009-10-26 01:12 . 2009-10-26 01:12 98304 c:\windows\assembly\GAC_MSIL\UIAutomationTypes\3.0.0.0__31bf3856ad364e35\UI AutomationTypes.dll
+ 2009-10-26 01:12 . 2009-10-26 01:12 40960 c:\windows\assembly\GAC_MSIL\UIAutomationProvider\3.0.0.0__31bf3856ad364e35 \UIAutomationProvider.dll
+ 2009-10-26 01:13 . 2009-10-26 01:13 12288 c:\windows\assembly\GAC_MSIL\System.Windows.Presentation\3.5.0.0__b77a5c561 934e089\System.Windows.Presentation.dll
+ 2009-10-26 01:13 . 2009-10-26 01:13 61440 c:\windows\assembly\GAC_MSIL\System.Web.Routing\3.5.0.0__31bf3856ad364e35\S ystem.Web.Routing.dll
+ 2009-11-03 04:08 . 2009-11-03 04:08 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7 f11d50a3a\System.Web.RegularExpressions.dll
+ 2009-10-26 01:13 . 2009-10-26 01:13 32768 c:\windows\assembly\GAC_MSIL\System.Web.DynamicData.Design\3.5.0.0__31bf385 6ad364e35\System.Web.DynamicData.Design.dll

**sjpritch25** · 03-Nov-2009, 01:47 PM **#14**

how is everything running??

chen1276 · 04-Nov-2009, 10:34 AM **#15**

Everything is running well now - thanks so much for your help!!

A strange event did occur 2 days ago though. While shutting down the computer, a Windows update was being installed but seemed to stall so I just unplugged the computer and took out the battery. Upon reboot, it seems like the user profile got corrupted as a totally different desktop came up. I used system restore to get the computer back to where it was before, and that worked out well. After that I re-ran Combofix as you instructed and everything worked out fine after that.

Separately - I am very careful with not downloading / installing anything suspicious on my computer. Any insight on what happened this time / how the malware got my on system or tips for avoiding this in the future?

Again, many thanks.

Tag Cloud
access acer asus bios bsod computer crash driver drivers error ethernet excel freeze gaming gpu hard drive hardware hdmi internet laptop mac malware memory monitor motherboard music network printer problem ram registry router server slow software sound trojan ubuntu 11.10 uninstall usb video virus vista wifi windows windows 7 windows 7 32 bit windows 7 64 bit windows xp wireless

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Find the solution to yourcomputer problem!

Find the solution to your
computer problem!