Continued
- 2008-12-30 18:47:15 20,240 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe
+ 2009-04-07 18:49:27 20,240 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe
- 2008-12-30 18:47:15 159,504 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\inficon.exe
+ 2009-04-07 18:49:27 159,504 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\inficon.exe
- 2008-12-30 18:47:15 184,080 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\joticon.exe
+ 2009-04-07 18:49:27 184,080 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\joticon.exe
- 2008-12-30 18:47:15 217,864 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe
+ 2009-04-07 18:49:27 217,864 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe
- 2008-12-30 18:47:15 18,704 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\mspicons.exe
+ 2009-04-07 18:49:27 18,704 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\mspicons.exe
- 2008-12-30 18:47:15 35,088 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe
+ 2009-04-07 18:49:27 35,088 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe
- 2008-12-30 18:47:15 845,584 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe
+ 2009-04-07 18:49:27 845,584 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe
- 2008-12-30 18:47:15 922,384 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pptico.exe
+ 2009-04-07 18:49:27 922,384 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pptico.exe
- 2008-12-30 18:47:15 272,648 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pubs.exe
+ 2009-04-07 18:49:27 272,648 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pubs.exe
- 2008-12-30 18:47:15 888,080 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe
+ 2009-04-07 18:49:27 888,080 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe
- 2008-12-30 18:47:15 1,172,240 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe
+ 2009-04-07 18:49:26 1,172,240 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe
- 2008-12-30 18:43:13 217,864 ----a-r c:\windows\Installer\{90120000-006E-0409-0000-0000000FF1CE}\misc.exe
+ 2009-04-07 18:47:02 217,864 ----a-r c:\windows\Installer\{90120000-006E-0409-0000-0000000FF1CE}\misc.exe
- 2003-08-26 23:24:28 179,713 ----a-w c:\windows\LOOP.EXE
+ 2003-08-27 19:39:58 198,656 ----a-w c:\windows\LOOP.exe
+ 2003-02-21 09:59:44 16,896 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\1033\alinkui.dll
+ 2003-02-21 10:55:06 94,208 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\1033\cscompui.dll
+ 2003-02-21 10:02:16 131,072 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\1033\vbc7ui.dll
+ 2003-02-21 12:04:20 155,648 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\1033\Vsavb7rtUI.dll
+ 2003-02-21 14:24:08 7,680 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\Accessibility.dll
+ 2003-02-21 12:00:36 98,304 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\alink.dll
+ 2003-02-21 02:19:42 24,576 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll
+ 2007-04-14 04:30:52 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
+ 2003-02-21 02:19:22 40,960 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_rc.dll
+ 2004-07-15 08:49:18 20,480 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_regiis.exe
+ 2004-07-15 08:49:26 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe
+ 2007-04-14 04:30:52 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
+ 2002-07-29 18:11:50 219,136 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\c_g18030.dll
+ 2003-02-21 14:24:10 94,208 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\CasPol.exe
+ 2003-02-21 14:24:32 49,152 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\ConfigWizards.exe
+ 2007-04-14 03:57:52 81,920 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
+ 2004-07-15 18:23:28 49,152 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\csc.exe
+ 2004-07-15 18:23:44 626,688 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\cscomp.dll
+ 2003-02-21 14:24:34 12,288 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\cscompmgd.dll
+ 2003-02-21 14:24:36 33,792 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\CustomMarshalers.dll
+ 2003-02-21 11:12:24 28,672 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\cvtres.exe
+ 2003-02-21 17:21:40 524,288 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\diasymreader.dll
+ 2003-02-21 02:16:32 798,720 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\EventLogMessages.dll
+ 2004-07-15 07:24:30 282,624 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\fusion.dll
+ 2003-10-08 21:30:14 81,920 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\gacutil.exe
+ 2003-02-21 14:24:38 7,680 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\IEExec.exe
+ 2004-07-15 21:31:00 8,192 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\IEExecRemote.dll
+ 2004-07-15 21:31:04 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\IEHost.dll
+ 2003-02-21 14:24:40 4,608 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\IIEHost.dll
+ 2004-07-15 07:35:30 196,608 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\ilasm.exe
+ 2003-02-21 14:24:42 15,872 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\InstallUtil.exe
+ 2003-02-21 02:22:24 40,960 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\InstallUtilLib.dll
+ 2003-02-21 14:24:44 26,112 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\ISymWrapper.dll
+ 2003-02-21 14:24:52 40,960 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\jsc.exe
+ 2004-07-15 21:28:58 720,896 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\Microsoft.JScript.dll
+ 2004-07-15 21:28:56 299,008 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\Microsoft.VisualBasic.dll
+ 2003-02-21 14:24:54 28,672 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\Microsoft.VisualBasic.Vsa.dll
+ 2003-02-21 14:25:02 6,144 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\Microsoft.VisualC.Dll
+ 2003-02-21 14:24:58 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\Microsoft.Vsa.dll
+ 2003-02-21 14:25:06 11,264 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2003-02-21 14:25:02 6,656 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\Microsoft_VsaVb.dll
+ 2004-07-15 21:28:50 49,152 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\MigPol.exe
+ 2004-07-15 21:28:50 49,152 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\MigPolWin.exe
+ 2003-02-21 14:25:06 1,564,672 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorcfg.dll
+ 2004-07-15 07:32:44 86,016 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscordbc.dll
+ 2004-07-15 07:32:46 233,472 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscordbi.dll
+ 2007-04-14 03:57:58 86,016 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
+ 2007-04-14 03:56:30 315,392 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
+ 2007-04-14 03:58:00 102,400 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
+ 2007-04-14 03:50:46 2,142,208 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
+ 2003-02-21 01:43:52 131,072 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscormmc.dll
+ 2003-02-21 02:06:34 65,536 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorpe.dll
+ 2004-07-15 07:33:22 143,360 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorrc.dll
+ 2004-07-15 07:33:24 81,920 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsec.dll
+ 2007-04-14 03:58:02 77,824 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
+ 2007-04-14 03:57:00 2,523,136 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
+ 2003-02-21 02:09:24 9,216 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscortim.dll
+ 2007-04-14 03:57:28 2,514,944 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
+ 2003-02-21 11:42:22 348,160 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\msvcr71.dll
+ 2003-02-21 02:18:34 20,480 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mtxoci8.dll
+ 2003-02-21 01:43:36 22,528 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\MUI\
0409\mscorsecr.dll
+ 2007-01-15 23:11:26 73,728 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\netfxupdate.exe
+ 2003-02-21 02:09:46 73,728 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\ngen.exe
+ 2004-07-15 07:34:50 94,208 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\PerfCounter.dll
+ 2003-02-21 14:25:24 28,672 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\RegAsm.exe
+ 2004-07-15 21:28:48 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\RegCode.dll
+ 2003-02-21 14:25:30 12,288 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\RegSvcs.exe
+ 2004-07-15 08:49:16 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW3436\_aspnet_isapi.dll
+ 2004-07-15 07:32:22 81,920 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW3436\_CORPerfMonExt.dll
+ 2004-07-15 07:24:30 282,624 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW3436\_fusion.dll
+ 2004-07-15 07:25:06 315,392 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW3436\_mscorjit.dll
+ 2004-07-15 21:29:02 2,138,112 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW3436\_mscorlib.dll
+ 2003-02-21 02:09:18 77,824 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW3436\_mscorsn.dll
+ 2004-07-15 07:26:52 2,510,848 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW3436\_mscorsvr.dll
+ 2004-07-15 07:28:34 2,502,656 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW3436\_mscorwks.dll
+ 2003-02-21 11:42:22 348,160 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW3436\_msvcr71.dll
+ 2004-07-15 07:34:50 94,208 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW3436\_PerfCounter.dll
+ 2003-02-21 02:09:34 253,952 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\shfusion.dll
+ 2003-02-21 02:09:34 122,880 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\shfusres.dll
+ 2004-07-15 07:35:04 319,488 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\SOS.dll
+ 2003-02-21 14:26:38 77,824 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Configuration.Install.dll
+ 2004-07-15 21:32:00 1,294,336 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Data.dll
+ 2004-07-15 21:31:14 303,104 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Data.OracleClient.dll
+ 2004-07-15 21:29:02 1,703,936 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Design.dll
+ 2004-07-15 21:28:54 90,112 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.DirectoryServices.dll
+ 2007-04-14 04:35:38 1,232,896 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
+ 2003-02-21 14:26:48 65,536 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Drawing.Design.dll
+ 2004-07-15 21:28:58 466,944 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Drawing.dll
+ 2004-07-15 21:28:56 241,664 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.EnterpriseServices.dll
+ 2004-07-15 07:35:12 66,560 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.EnterpriseServices.Thunk.dll
+ 2004-07-15 21:31:58 372,736 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Management.dll
+ 2004-07-15 21:31:12 241,664 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Messaging.dll
+ 2004-07-15 21:28:58 323,584 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Runtime.Remoting.dll
+ 2004-07-15 21:31:54 131,072 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Runtime.Serialization.Formatters.Soap.dll
+ 2004-07-15 21:28:52 77,824 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll
+ 2004-07-15 21:28:54 126,976 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.ServiceProcess.dll
+ 2007-04-14 04:35:46 1,265,664 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
+ 2004-07-15 21:28:58 819,200 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.Mobile.dll
+ 2004-07-15 21:28:52 57,344 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.RegularExpressions.dll
+ 2004-07-15 21:31:16 573,440 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.Services.dll
+ 2004-07-15 21:32:02 2,052,096 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Windows.Forms.dll
+ 2004-07-15 21:29:00 1,339,392 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.XML.dll
+ 2004-06-22 20:51:38 53,248 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe
+ 2004-07-15 18:23:20 737,280 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\vbc.exe
+ 2004-07-15 15:15:14 1,032,192 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\VsaVb7rt.dll
+ 2004-07-15 09:11:56 31,744 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\WMINet_Utils.dll
- 2008-12-20 23:15:11 124,928 ----a-w c:\windows\system32\advpack.dll
+ 2009-03-08 11:32:48 128,512 ----a-w c:\windows\system32\advpack.dll
- 2003-11-26 23:43:18 163,840 ----a-w c:\windows\system32\ArtFfct.dll
+ 2004-03-18 02:54:38 163,840 ----a-w c:\windows\system32\ArtFfct.dll
+ 1999-12-20 20:16:40 15,360 ----a-w c:\windows\system32\asfsipc.dll
+ 2009-02-05 21:11:35 1,256,296 ----a-w c:\windows\system32\aswBoot.exe
- 2003-03-19 02:05:48 89,088 ----a-w c:\windows\system32\atl71.dll
+ 2003-03-19 03:05:48 89,088 ----a-w c:\windows\system32\atl71.dll
+ 2009-02-05 21:04:45 97,480 ----a-w c:\windows\system32\AvastSS.scr
+ 2008-05-29 19:10:48 2,045,952 ----a-w c:\windows\system32\bconvert.dll
- 2006-02-15 07:31:52 102,400 ----a-w c:\windows\system32\Digi32.dll
+ 2007-10-31 07:34:44 196,608 ----a-w c:\windows\system32\Digi32.dll
- 2006-02-15 07:35:54 5,632 ----a-w c:\windows\system32\digicoin.dll
+ 2007-10-31 07:36:20 15,872 ----a-w c:\windows\system32\digicoin.dll
- 2006-02-15 07:31:22 98,304 ----a-w c:\windows\system32\Diomidi.DLL
+ 2007-10-31 07:35:00 172,032 ----a-w c:\windows\system32\Diomidi.DLL
- 2006-02-16 11:02:36 3,398,219 ----a-w c:\windows\system32\DirectIO.dll
+ 2007-10-31 10:16:02 3,683,014 ----a-w c:\windows\system32\DirectIO.dll
- 2007-08-14 01:39:20 71,680 -c--a-w c:\windows\system32\dllcache\admparse.dll
+ 2009-03-08 11:32:56 72,704 -c--a-w c:\windows\system32\dllcache\admparse.dll
- 2008-12-20 23:15:11 124,928 -c----w c:\windows\system32\dllcache\advpack.dll
+ 2009-03-08 11:32:48 128,512 -c--a-w c:\windows\system32\dllcache\advpack.dll
+ 2009-01-08 01:20:52 1,022,976 -c----w c:\windows\system32\dllcache\browseui.dll
+ 2009-03-08 11:33:40 18,944 -c----w c:\windows\system32\dllcache\corpol.dll
- 2008-12-20 23:15:12 347,136 -c----w c:\windows\system32\dllcache\dxtmsft.dll
+ 2009-03-08 11:31:44 348,160 -c--a-w c:\windows\system32\dllcache\dxtmsft.dll
- 2008-12-20 23:15:13 214,528 -c----w c:\windows\system32\dllcache\dxtrans.dll
+ 2009-03-08 11:31:38 216,064 -c--a-w c:\windows\system32\dllcache\dxtrans.dll
- 2007-08-14 01:18:02 60,416 -c--a-w c:\windows\system32\dllcache\hmmapi.dll
+ 2009-03-08 11:24:28 68,608 -c--a-w c:\windows\system32\dllcache\hmmapi.dll
- 2008-12-20 23:15:13 63,488 -c----w c:\windows\system32\dllcache\icardie.dll
+ 2009-03-08 11:31:52 59,904 -c--a-w c:\windows\system32\dllcache\icardie.dll
- 2008-12-19 09:10:15 70,656 -c----w c:\windows\system32\dllcache\ie4uinit.exe
+ 2009-03-08 11:32:54 173,056 -c--a-w c:\windows\system32\dllcache\ie4uinit.exe
- 2008-12-20 23:15:14 153,088 -c----w c:\windows\system32\dllcache\ieakeng.dll
+ 2009-03-08 11:33:02 125,952 -c--a-w c:\windows\system32\dllcache\ieakeng.dll
- 2008-12-20 23:15:14 230,400 -c----w c:\windows\system32\dllcache\ieaksie.dll
+ 2009-03-08 11:33:08 229,376 -c--a-w c:\windows\system32\dllcache\ieaksie.dll
- 2008-12-19 05:23:56 161,792 -c----w c:\windows\system32\dllcache\ieakui.dll
+ 2009-03-08 11:32:52 163,840 -c--a-w c:\windows\system32\dllcache\ieakui.dll
- 2007-04-17 09:32:38 2,455,488 -c----w c:\windows\system32\dllcache\ieapfltr.dat
+ 2009-02-07 04:07:58 3,698,584 -c--a-w c:\windows\system32\dllcache\ieapfltr.dat
- 2008-12-20 23:15:15 383,488 -c----w c:\windows\system32\dllcache\ieapfltr.dll
+ 2009-03-08 11:11:12 445,952 -c--a-w c:\windows\system32\dllcache\ieapfltr.dll
- 2008-12-20 23:15:16 384,512 -c----w c:\windows\system32\dllcache\iedkcs32.dll
+ 2009-03-08 21:09:26 391,536 -c--a-w c:\windows\system32\dllcache\iedkcs32.dll
- 2008-12-20 23:15:21 6,066,688 -c----w c:\windows\system32\dllcache\ieframe.dll
+ 2009-03-08 11:39:48 11,063,808 -c--a-w c:\windows\system32\dllcache\ieframe.dll
- 2007-08-14 01:54:10 191,488 -c--a-w c:\windows\system32\dllcache\iepeers.dll
+ 2009-03-08 11:31:56 183,808 -c--a-w c:\windows\system32\dllcache\iepeers.dll
- 2008-12-20 23:15:21 44,544 -c----w c:\windows\system32\dllcache\iernonce.dll
+ 2009-03-08 11:32:50 55,808 -c--a-w c:\windows\system32\dllcache\iernonce.dll
- 2008-12-20 23:15:22 267,776 -c----w c:\windows\system32\dllcache\iertutil.dll
+ 2009-03-08 11:32:22 1,985,024 -c--a-w c:\windows\system32\dllcache\iertutil.dll
- 2007-08-14 01:39:12 55,296 -c--a-w c:\windows\system32\dllcache\iesetup.dll
+ 2009-03-08 11:32:50 71,680 -c--a-w c:\windows\system32\dllcache\iesetup.dll
- 2008-12-19 05:25:25 634,024 -c----w c:\windows\system32\dllcache\iexplore.exe
+ 2009-03-08 21:09:26 638,816 -c--a-w c:\windows\system32\dllcache\iexplore.exe
- 2007-08-14 01:36:06 36,352 -c--a-w c:\windows\system32\dllcache\imgutil.dll
+ 2009-03-08 11:31:38 34,816 -c--a-w c:\windows\system32\dllcache\imgutil.dll
- 2007-08-14 01:39:02 92,672 -c--a-w c:\windows\system32\dllcache\inseng.dll
+ 2009-03-08 11:32:46 94,720 -c--a-w c:\windows\system32\dllcache\inseng.dll
- 2008-05-09 10:53:39 512,000 -c----w c:\windows\system32\dllcache\jscript.dll
+ 2009-03-08 11:33:16 726,528 -c--a-w c:\windows\system32\dllcache\jscript.dll
- 2008-12-20 23:15:23 27,648 -c----w c:\windows\system32\dllcache\jsproxy.dll
+ 2009-03-08 11:33:26 25,600 -c--a-w c:\windows\system32\dllcache\jsproxy.dll
- 2007-08-14 01:44:18 40,960 -c--a-w c:\windows\system32\dllcache\licmgr10.dll
+ 2009-03-08 11:34:30 43,008 -c--a-w c:\windows\system32\dllcache\licmgr10.dll
- 2008-12-20 23:15:23 459,264 -c----w c:\windows\system32\dllcache\msfeeds.dll
+ 2009-03-08 11:32:26 594,432 -c--a-w c:\windows\system32\dllcache\msfeeds.dll
- 2008-12-20 23:15:24 52,224 -c----w c:\windows\system32\dllcache\msfeedsbs.dll
+ 2009-03-08 11:31:52 55,296 -c--a-w c:\windows\system32\dllcache\msfeedsbs.dll
- 2007-08-14 01:32:30 45,568 -c--a-w c:\windows\system32\dllcache\mshta.exe
+ 2009-03-08 11:31:02 45,568 -c--a-w c:\windows\system32\dllcache\mshta.exe
- 2009-01-17 04:35:14 3,594,752 -c----w c:\windows\system32\dllcache\mshtml.dll
+ 2009-03-08 11:41:16 5,937,152 -c--a-w c:\windows\system32\dllcache\mshtml.dll
- 2008-12-20 23:15:30 477,696 -c----w c:\windows\system32\dllcache\mshtmled.dll
+ 2009-03-08 11:31:26 66,560 -c--a-w c:\windows\system32\dllcache\mshtmled.dll
- 2007-08-14 01:01:12 48,128 -c--a-w c:\windows\system32\dllcache\mshtmler.dll
+ 2009-03-08 11:31:18 48,128 -c--a-w c:\windows\system32\dllcache\mshtmler.dll
- 2007-08-14 01:54:10 156,160 -c--a-w c:\windows\system32\dllcache\msls31.dll
+ 2009-03-08 11:22:38 156,160 -c--a-w c:\windows\system32\dllcache\msls31.dll
- 2008-12-20 23:15:31 193,024 -c----w c:\windows\system32\dllcache\msrating.dll
+ 2009-03-08 11:34:18 193,536 -c--a-w c:\windows\system32\dllcache\msrating.dll
- 2008-12-20 23:15:32 671,232 -c----w c:\windows\system32\dllcache\mstime.dll
+ 2009-03-08 11:32:04 611,840 -c--a-w c:\windows\system32\dllcache\mstime.dll
- 2008-12-20 23:15:38 102,912 -c----w c:\windows\system32\dllcache\occache.dll
+ 2009-03-08 11:34:18 109,568 -c--a-w c:\windows\system32\dllcache\occache.dll
- 2008-12-20 23:15:38 44,544 -c----w c:\windows\system32\dllcache\pngfilt.dll
+ 2009-03-08 11:31:36 46,592 -c--a-w c:\windows\system32\dllcache\pngfilt.dll
+ 2008-12-05 06:54:55 144,896 -c----w c:\windows\system32\dllcache\schannel.dll
+ 2009-01-08 01:20:52 1,497,088 -c----w c:\windows\system32\dllcache\shdocvw.dll
+ 2008-06-17 19:02:19 8,461,312 -c----w c:\windows\system32\dllcache\shell32.dll
+ 2009-01-08 01:20:52 474,112 -c----w c:\windows\system32\dllcache\shlwapi.dll
+ 2009-01-08 01:20:54 134,144 -c----w c:\windows\system32\dllcache\sqmapi.dll
- 2008-12-20 23:15:39 105,984 -c----w c:\windows\system32\dllcache\url.dll
+ 2009-03-08 11:34:28 105,984 -c--a-w c:\windows\system32\dllcache\url.dll
- 2008-12-20 23:15:40 1,160,192 -c----w c:\windows\system32\dllcache\urlmon.dll
+ 2009-03-08 11:34:56 1,206,784 -c--a-w c:\windows\system32\dllcache\urlmon.dll
- 2008-05-09 10:53:40 430,080 -c----w c:\windows\system32\dllcache\vbscript.dll
+ 2009-03-08 11:33:06 420,352 -c--a-w c:\windows\system32\dllcache\vbscript.dll
- 2007-07-12 23:31:54 765,952 -c--a-w c:\windows\system32\dllcache\vgx.dll
+ 2009-03-08 11:33:48 759,296 -c--a-w c:\windows\system32\dllcache\VGX.dll
- 2008-12-20 23:15:40 233,472 -c----w c:\windows\system32\dllcache\webcheck.dll
+ 2009-03-08 11:34:48 236,544 -c--a-w c:\windows\system32\dllcache\webcheck.dll
- 2008-09-15 12:12:56 1,846,400 -c----w c:\windows\system32\dllcache\win32k.sys
+ 2009-02-09 11:13:27 1,846,784 -c----w c:\windows\system32\dllcache\win32k.sys
- 2008-12-20 23:15:41 826,368 -c----w c:\windows\system32\dllcache\wininet.dll
+ 2009-03-08 11:34:58 914,944 -c--a-w c:\windows\system32\dllcache\wininet.dll
- 2007-06-12 06:51:12 10,834,944 -c--a-w c:\windows\system32\dllcache\wmp.dll
+ 2008-11-12 01:34:42 10,838,016 -c--a-w c:\windows\system32\dllcache\wmp.dll
+ 2009-02-05 21:05:11 26,944 ----a-w c:\windows\system32\drivers\aavmker4.sys
+ 2009-02-05 21:07:12 20,560 ----a-w c:\windows\system32\drivers\aswFsBlk.sys
+ 2009-02-05 21:08:19 93,296 ----a-w c:\windows\system32\drivers\aswmon.sys
+ 2009-02-05 21:08:10 94,032 ----a-w c:\windows\system32\drivers\aswmon2.sys
+ 2009-02-05 21:06:10 23,152 ----a-w c:\windows\system32\drivers\aswRdr.sys
+ 2009-02-05 21:07:23 114,768 ----a-w c:\windows\system32\drivers\aswSP.sys
+ 2009-02-05 21:06:20 51,376 ----a-w c:\windows\system32\drivers\aswTdi.sys
- 2006-02-15 06:17:54 107,008 ----a-w c:\windows\system32\drivers\Dalwdm.sys
+ 2007-10-31 09:15:52 97,808 ----a-w c:\windows\system32\drivers\Dalwdm.sys
- 2006-02-15 07:29:26 16,384 ----a-w c:\windows\system32\drivers\DigiFilt.sys
+ 2006-12-09 05:50:28 16,384 ----a-w c:\windows\system32\drivers\DigiFilt.sys
- 2005-12-21 23:59:56 27,328 ----a-w c:\windows\system32\drivers\iLokDrvr.sys
+ 2007-09-05 19:05:02 54,256 ----a-w c:\windows\system32\drivers\iLokDrvr.sys
- 2005-12-22 17:34:00 72,032 ----a-w c:\windows\system32\drivers\TPkd.sys
+ 2007-09-05 19:04:34 79,408 ----a-w c:\windows\system32\drivers\TPkd.sys
- 2006-07-26 15:56:00 248,832 ----a-w c:\windows\system32\drivers\yk51x86.sys
+ 2007-12-06 16:51:00 285,952 ----a-w c:\windows\system32\drivers\yk51x86.sys
+ 2009-04-12 01:26:03 54,256 -c--a-w c:\windows\system32\DRVSTORE\iLokDrvr_59E52B1134BCBE10AFBB4D22AB2D85F4ADED304A\iLokDrvr.sys
- 2006-02-15 05:56:20 536,576 ----a-w c:\windows\system32\DSI.dll
+ 2007-10-31 07:03:12 659,456 ----a-w c:\windows\system32\DSI.dll
- 2008-12-20 23:15:12 347,136 ------w c:\windows\system32\dxtmsft.dll
+ 2009-03-08 11:31:44 348,160 ----a-w c:\windows\system32\dxtmsft.dll
- 2008-12-20 23:15:13 214,528 ------w c:\windows\system32\dxtrans.dll
+ 2009-03-08 11:31:38 216,064 ----a-w c:\windows\system32\dxtrans.dll
- 2006-02-15 05:54:54 1,395,484 ----a-w c:\windows\system32\ExpansionHD_Firmware.bin
+ 2007-10-31 07:03:00 1,362,460 ----a-w c:\windows\system32\ExpansionHD_Firmware.bin
- 2003-01-09 16:13:28 118,784 ----a-w c:\windows\system32\FDlg.dll
+ 2003-02-25 00:27:28 151,552 ----a-w c:\windows\system32\FDlg.dll
- 2006-10-26 21:10:08 1,190,688 ----a-w c:\windows\system32\FM20.DLL
+ 2007-08-23 08:03:38 1,195,888 ----a-w c:\windows\system32\FM20.DLL
- 2009-02-09 12:26:29 317,152 ----a-w c:\windows\system32\FNTCACHE.DAT
+ 2009-03-11 16:30:30 317,152 ----a-w c:\windows\system32\FNTCACHE.DAT
- 2008-12-20 23:15:13 63,488 ----a-w c:\windows\system32\icardie.dll
+ 2009-03-08 11:31:52 59,904 ----a-w c:\windows\system32\icardie.dll
- 2006-06-29 15:05:44 26,112 ----a-w c:\windows\system32\idndl.dll
+ 2009-01-08 01:20:36 26,112 ----a-w c:\windows\system32\idndl.dll
- 2008-12-19 09:10:15 70,656 ------w c:\windows\system32\ie4uinit.exe
+ 2009-03-08 11:32:54 173,056 ----a-w c:\windows\system32\ie4uinit.exe
- 2008-12-20 23:15:14 153,088 ------w c:\windows\system32\ieakeng.dll
+ 2009-03-08 11:33:02 125,952 ----a-w c:\windows\system32\ieakeng.dll
- 2008-12-20 23:15:14 230,400 ------w c:\windows\system32\ieaksie.dll
+ 2009-03-08 11:33:08 229,376 ----a-w c:\windows\system32\ieaksie.dll
- 2008-12-19 05:23:56 161,792 ------w c:\windows\system32\ieakui.dll
+ 2009-03-08 11:32:52 163,840 ----a-w c:\windows\system32\ieakui.dll
- 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\system32\ieapfltr.dat
+ 2009-02-07 04:07:58 3,698,584 ----a-w c:\windows\system32\ieapfltr.dat
- 2008-12-20 23:15:15 383,488 ----a-w c:\windows\system32\ieapfltr.dll
+ 2009-03-08 11:11:12 445,952 ----a-w c:\windows\system32\ieapfltr.dll
- 2008-12-20 23:15:16 384,512 ------w c:\windows\system32\iedkcs32.dll
+ 2009-03-08 21:09:26 391,536 ----a-w c:\windows\system32\iedkcs32.dll
- 2008-12-20 23:15:21 6,066,688 ----a-w c:\windows\system32\ieframe.dll
+ 2009-03-08 11:39:48 11,063,808 ----a-w c:\windows\system32\ieframe.dll
- 2007-08-14 01:54:10 191,488 ----a-w c:\windows\system32\iepeers.dll
+ 2009-03-08 11:31:56 183,808 ----a-w c:\windows\system32\iepeers.dll
- 2008-12-20 23:15:21 44,544 ------w c:\windows\system32\iernonce.dll
+ 2009-03-08 11:32:50 55,808 ----a-w c:\windows\system32\iernonce.dll
- 2008-12-20 23:15:22 267,776 ----a-w c:\windows\system32\iertutil.dll
+ 2009-03-08 11:32:22 1,985,024 ----a-w c:\windows\system32\iertutil.dll
- 2008-12-19 09:10:15 13,824 ----a-w c:\windows\system32\ieudinit.exe
+ 2009-03-08 11:32:52 36,864 ----a-w c:\windows\system32\ieudinit.exe
- 2007-08-14 01:54:10 180,736 ----a-w c:\windows\system32\ieui.dll
+ 2009-03-08 11:22:46 164,352 ----a-w c:\windows\system32\ieui.dll
- 2005-12-21 23:24:02 638,976 ----a-w c:\windows\system32\ilinet.dll
+ 2007-09-05 18:43:56 630,784 ------w c:\windows\system32\ilinet.dll
- 2007-08-14 01:39:02 92,672 ----a-w c:\windows\system32\inseng.dll
+ 2009-03-08 11:32:46 94,720 ----a-w c:\windows\system32\inseng.dll
- 2009-01-05 12:39:18 144,792 ----a-w c:\windows\system32\java.exe
+ 2009-03-09 12:19:11 144,792 ----a-w c:\windows\system32\java.exe
- 2009-01-05 12:39:18 144,792 ----a-w c:\windows\system32\javaw.exe
+ 2009-03-09 12:19:13 144,792 ----a-w c:\windows\system32\javaw.exe
- 2009-01-05 12:39:18 148,888 ----a-w c:\windows\system32\javaws.exe
+ 2009-03-09 12:19:13 148,888 ----a-w c:\windows\system32\javaws.exe
- 2008-05-09 10:53:39 512,000 ----a-w c:\windows\system32\jscript.dll
+ 2009-03-08 11:33:16 726,528 ----a-w c:\windows\system32\jscript.dll
- 2008-12-20 23:15:23 27,648 ------w c:\windows\system32\jsproxy.dll
+ 2009-03-08 11:33:26 25,600 ----a-w c:\windows\system32\jsproxy.dll
+ 2009-02-03 02:07:18 240,544 ----a-r c:\windows\system32\Macromed\Flash\FlashUtil10b.exe
- 2008-10-05 03:24:02 3,695,008 ----a-w c:\windows\system32\Macromed\Flash\NPSWF32.dll
+ 2009-02-03 02:15:28 3,771,296 ----a-w c:\windows\system32\Macromed\Flash\NPSWF32.dll
- 2008-10-05 03:24:04 235,936 ----a-w c:\windows\system32\Macromed\Flash\NPSWF32_FlashUtil.exe
+ 2009-02-03 02:15:30 240,544 ----a-w c:\windows\system32\Macromed\Flash\NPSWF32_FlashUtil.exe
- 2008-06-25 04:00:47 74,649 ----a-w c:\windows\system32\Macromed\Flash\uninstall_activeX.exe
+ 2009-03-01 05:29:33 88,590 ----a-w c:\windows\system32\Macromed\Flash\uninstall_activeX.exe
- 2008-10-29 16:07:51 84,661 ----a-w c:\windows\system32\Macromed\Flash\uninstall_plugin.exe
+ 2009-03-24 23:58:27 84,661 ----a-w c:\windows\system32\Macromed\Flash\uninstall_plugin.exe
- 2002-01-05 11:48:16 974,848 ----a-w c:\windows\system32\mfc70.dll
+ 2002-01-05 12:48:16 974,848 ----a-w c:\windows\system32\mfc70.dll
- 2003-03-19 03:44:36 40,960 ----a-w c:\windows\system32\MFC71CHS.DLL
+ 2003-03-19 04:44:36 40,960 ----a-w c:\windows\system32\MFC71CHS.DLL
- 2003-03-19 03:44:36 45,056 ----a-w c:\windows\system32\MFC71CHT.DLL
+ 2003-03-19 04:44:36 45,056 ----a-w c:\windows\system32\MFC71CHT.DLL
- 2003-03-19 03:44:34 65,536 ----a-w c:\windows\system32\MFC71DEU.DLL
+ 2003-03-19 04:44:34 65,536 ----a-w c:\windows\system32\MFC71DEU.DLL
- 2003-03-19 03:44:36 57,344 ----a-w c:\windows\system32\MFC71ENU.DLL
+ 2003-03-19 04:44:36 57,344 ----a-w c:\windows\system32\MFC71ENU.DLL
- 2003-03-19 03:44:34 61,440 ----a-w c:\windows\system32\MFC71ESP.DLL
+ 2003-03-19 04:44:34 61,440 ----a-w c:\windows\system32\MFC71ESP.DLL
- 2003-03-19 03:44:32 61,440 ----a-w c:\windows\system32\MFC71FRA.DLL
+ 2003-03-19 04:44:32 61,440 ----a-w c:\windows\system32\MFC71FRA.DLL
- 2003-03-19 03:44:34 61,440 ----a-w c:\windows\system32\MFC71ITA.DLL
+ 2003-03-19 04:44:34 61,440 ----a-w c:\windows\system32\MFC71ITA.DLL
- 2003-03-19 03:44:34 49,152 ----a-w c:\windows\system32\MFC71JPN.DLL
+ 2003-03-19 04:44:34 49,152 ----a-w c:\windows\system32\MFC71JPN.DLL
- 2003-03-19 03:44:36 49,152 ----a-w c:\windows\system32\MFC71KOR.DLL
+ 2003-03-19 04:44:36 49,152 ----a-w c:\windows\system32\MFC71KOR.DLL
- 2003-03-19 04:12:12 1,047,552 ----a-w c:\windows\system32\MFC71u.dll
+ 2003-03-19 05:12:12 1,047,552 ----a-w c:\windows\system32\MFC71u.dll
- 2009-02-03 23:21:12 21,244,864 ----a-w c:\windows\system32\MRT.exe
+ 2009-02-25 19:55:00 24,768,960 ----a-w c:\windows\system32\MRT.exe
+ 2009-01-08 01:20:18 265,720 ----a-w c:\windows\system32\msdbg2.dll
- 2008-12-20 23:15:23 459,264 ----a-w c:\windows\system32\msfeeds.dll
+ 2009-03-08 11:32:26 594,432 ----a-w c:\windows\system32\msfeeds.dll
- 2008-12-20 23:15:24 52,224 ----a-w c:\windows\system32\msfeedsbs.dll
+ 2009-03-08 11:31:52 55,296 ----a-w c:\windows\system32\msfeedsbs.dll
- 2007-08-14 01:36:40 12,288 ----a-w c:\windows\system32\msfeedssync.exe
+ 2009-03-08 11:31:54 13,312 ----a-w c:\windows\system32\msfeedssync.exe
- 2009-01-17 04:35:14 3,594,752 ----a-w c:\windows\system32\mshtml.dll
+ 2009-03-08 11:41:16 5,937,152 ----a-w c:\windows\system32\mshtml.dll
- 2008-12-20 23:15:30 477,696 ------w c:\windows\system32\mshtmled.dll
+ 2009-03-08 11:31:26 66,560 ----a-w c:\windows\system32\mshtmled.dll
- 2008-12-20 23:15:31 193,024 ------w c:\windows\system32\msrating.dll
+ 2009-03-08 11:34:18 193,536 ----a-w c:\windows\system32\msrating.dll
- 2008-12-20 23:15:32 671,232 ------w c:\windows\system32\mstime.dll
+ 2009-03-08 11:32:04 611,840 ----a-w c:\windows\system32\mstime.dll
+ 1998-06-17 07:00:00 516,173 ----a-w c:\windows\system32\Msvcp60d.dll
+ 2008-10-16 21:06:48 268,648 ----a-w c:\windows\system32\mucltui.dll
+ 2003-02-21 01:43:36 4,096 ----a-w c:\windows\system32\mui\
0409\mscoreer.dll
+ 2008-10-16 21:06:48 208,744 ----a-w c:\windows\system32\muweb.dll
+ 2003-12-15 23:02:20 69,632 ----a-w c:\windows\system32\NI_DFD.dll
+ 2003-12-04 19:47:56 69,632 ----a-w c:\windows\system32\NI_DFD_1_2_4.dll
+ 2003-12-15 23:02:20 69,632 ----a-w c:\windows\system32\NI_DFD_1_2_7.dll
+ 2004-01-15 19:41:44 65,536 ----a-w c:\windows\system32\NI_DFD_1_2_8.dll
+ 2004-02-26 01:19:00 69,632 ----a-w c:\windows\system32\NI_DFD_1_2_9.dll
+ 2008-05-29 19:07:24 61,440 ----a-w c:\windows\system32\NI_DFD_1_5.dll
+ 2003-12-04 19:47:56 69,632 ----a-w c:\windows\system32\NI_DFD_KOMPAKT.dll
+ 2008-05-29 19:07:24 393,216 ----a-w c:\windows\system32\NI_IRC_1_2.dll
- 2006-06-29 00:59:26 24,576 ----a-w c:\windows\system32\nlsdl.dll
+ 2009-01-08 01:20:38 24,576 ----a-w c:\windows\system32\nlsdl.dll
- 2006-06-29 15:05:44 23,552 ----a-w c:\windows\system32\normaliz.dll
+ 2009-01-08 01:20:36 23,552 ----a-w c:\windows\system32\normaliz.dll
+ 1999-12-20 20:16:40 8,704 ----a-w c:\windows\system32\npwmsdrm.dll
- 2008-12-20 23:15:38 102,912 ------w c:\windows\system32\occache.dll
+ 2009-03-08 11:34:18 109,568 ----a-w c:\windows\system32\occache.dll
- 2009-02-08 20:46:24 75,200 ----a-w c:\windows\system32\perfc009.dat
+ 2009-03-10 05:29:45 78,890 ----a-w c:\windows\system32\perfc009.dat
- 2009-02-08 20:46:24 450,516 ----a-w c:\windows\system32\perfh009.dat
+ 2009-03-10 05:29:45 458,844 ----a-w c:\windows\system32\perfh009.dat
- 2008-12-20 23:15:38 44,544 ------w c:\windows\system32\pngfilt.dll
+ 2009-03-08 11:31:36 46,592 ----a-w c:\windows\system32\pngfilt.dll
- 2001-06-27 16:13:38 217,088 ----a-w c:\windows\system32\qtmlClient.dll
+ 2001-06-27 17:13:38 217,088 ----a-w c:\windows\system32\qtmlClient.dll
+ 2007-12-06 16:51:00 285,952 ----a-w c:\windows\system32\ReinstallBackups\
0009\DriverFiles\yk51x86.sys
- 2008-04-14 00:12:05 144,384 ----a-w c:\windows\system32\schannel.dll
+ 2008-12-05 06:54:55 144,896 ----a-w c:\windows\system32\schannel.dll
- 2008-04-14 00:12:05 8,461,312 ----a-w c:\windows\system32\shell32.dll
+ 2008-06-17 19:02:19 8,461,312 ----a-w c:\windows\system32\shell32.dll
- 2008-07-09 07:38:24 17,272 ------w c:\windows\system32\spmsg.dll
+ 2009-01-08 01:20:58 16,928 ------w c:\windows\system32\spmsg.dll
- 2007-11-30 11:18:51 26,488 ----a-w c:\windows\system32\spupdsvc.exe
+ 2009-01-08 01:21:00 26,144 ----a-w c:\windows\system32\spupdsvc.exe
- 2008-12-20 23:15:39 105,984 ----a-w c:\windows\system32\url.dll
+ 2009-03-08 11:34:28 105,984 ----a-w c:\windows\system32\url.dll
- 2008-12-20 23:15:40 1,160,192 ----a-w c:\windows\system32\urlmon.dll
+ 2009-03-08 11:34:56 1,206,784 ----a-w c:\windows\system32\urlmon.dll
+ 2003-02-21 12:16:08 49,152 ----a-w c:\windows\system32\URTTEMP\regtlib.exe
- 2008-12-20 23:15:40 233,472 ----a-w c:\windows\system32\webcheck.dll
+ 2009-03-08 11:34:48 236,544 ----a-w c:\windows\system32\webcheck.dll
- 2007-08-14 01:45:16 206,336 ----a-w c:\windows\system32\WinFXDocObj.exe
+ 2009-03-08 11:34:48 208,384 ----a-w c:\windows\system32\WinFXDocObj.exe
- 2006-02-15 05:57:28 90,112 ----a-w c:\windows\system32\WinMMFix.dll
+ 2006-12-09 06:21:44 90,112 ----a-w c:\windows\system32\WinMMFix.dll
- 2007-06-12 06:51:12 10,834,944 ----a-w c:\windows\system32\wmp.dll
+ 2008-11-12 01:34:42 10,838,016 ----a-w c:\windows\system32\wmp.dll
- 2008-04-14 00:12:11 121,856 ----a-w c:\windows\system32\xmllite.dll
+ 2009-01-08 01:21:04 121,856 ----a-w c:\windows\system32\xmllite.dll
+ 2009-04-12 01:30:10 16,384 ----atw c:\windows\Temp\Perflib_Perfdata_5b8.dat
+ 2009-04-12 01:30:17 16,384 ----atw c:\windows\Temp\Perflib_Perfdata_7ec.dat
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-13 15360]
"DAEMON Tools Pro Agent"="c:\program files\DAEMON Tools Pro\DTProAgent.exe" [2009-01-26 228808]
"ISUSPM"="c:\program files\Common Files\InstallShield\UpdateService\ISUSPM.exe" [2006-09-11 218032]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2006-12-18 868352]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2008-09-06 413696]
"WD Drive Manager"="c:\program files\Western Digital\WD Drive Manager\WDBtnMgrUI.exe" [2008-01-30 438272]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-02-05 81000]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-03-09 148888]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2007-08-24 33648]
"DigidesignMMERefresh"="c:\program files\Digidesign\Drivers\MMERefresh.exe" [2007-10-31 77824]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.ac3filter"= ac3filter.acm
"vidc.hfyu"= huffyuv.dll
"msacm.divxa32"= DivXa32.acm
"midi2"= usbmn2x2.dll
"midi4"= usbmn2x2.dll
"MIDI1"= diomidi.dll
[HKLM\~\startupfolder\C:^Documents and Settings^hibb^Start Menu^Programs^Startup^DING!.lnk]
path=c:\documents and settings\hibb\Start Menu\Programs\Startup\DING!.lnk
backup=c:\windows\pss\DING!.lnkStartup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
--a------ 2008-01-11 22:16 39792 c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EPSON Stylus CX8400 Series]
--a------ 2007-02-15 06:00 179200 c:\windows\system32\spool\drivers\w32x86\3\E_FATICEA.EXE
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
--a------ 2007-08-24 07:00 33648 c:\program files\Microsoft Office\Office12\GrooveMonitor.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroCheck]
-ra------ 2001-07-09 02:50 155648 c:\windows\system32\NeroCheck.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PeerGuardian]
--a------ 2007-06-02 15:52 1457152 c:\program files\PeerGuardian2\pg2.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RoxWatchTray]
--a------ 2008-06-26 12:22 236016 c:\program files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"WMPNetworkSvc"=3 (0x3)
"RoxMediaDB9"=3 (0x3)
"RoxLiveShare9"=2 (0x2)
"Roxio Upnp Server 9"=2 (0x2)
"Roxio UPnP Renderer 9"=3 (0x3)
"ose"=3 (0x3)
"odserv"=3 (0x3)
"Microsoft Office Groove Audit Service"=3 (0x3)
"LexBceS"=2 (0x2)
"avg8wd"=2 (0x2)
"avg8emc"=2 (0x2)
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UpdatesDisableNotify"=dword:00000001
"AntiVirusOverride"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"f:\\Program Files\\Veoh Networks\\Veoh\\VeohClient.exe"=
"f:\\Program Files\\LimeWire\\LimeWire.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YServer.exe"=
"g:\\Program Files\\LimeWire\\LimeWire.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Western Digital\\WD Drive Manager\\WDBtnMgrSvc.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\java.exe"=
"c:\\Documents and Settings\\hibb\\Application Data\\Macromedia\\Flash Player\\www.macromedia.com\\bin\\octoshape\\octoshape.exe"=
R0 DigiFilter;DigiFilter;c:\windows\system32\drivers\DigiFilt.sys [2008-06-30 16384]
R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2009-02-20 114768]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2009-02-20 20560]
R2 DigiNet;Digidesign Ethernet Support;c:\windows\system32\drivers\diginet.sys [2009-04-11 16400]
R2 WDBtnMgrSvc.exe;WD Drive Manager Service;c:\program files\Western Digital\WD Drive Manager\WDBtnMgrSvc.exe [2008-01-30 106496]
R2 YahooAUService;Yahoo! Updater;c:\program files\Yahoo!\SoftwareUpdate\YahooAUService.exe [2008-11-09 602392]
R3 dalwdmservice;dal service;c:\windows\system32\drivers\Dalwdm.sys [2008-06-30 97808]
R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [2008-12-31 38496]
R3 USBMN2X2;M-Audio USB MidiSport 2x2;c:\windows\system32\drivers\usbmn2x2.sys [2008-06-30 22304]
S0 xtrrl;xtrrl;c:\windows\system32\drivers\saec.sys --> c:\windows\system32\drivers\saec.sys [?]
S3 ngrpci;NETGEAR FA310TX Fast Ethernet Adapter Driver;c:\windows\system32\drivers\Ngrpci.sys [2008-06-22 32840]
S3 USB22LDR;M-Audio USB MidiSport 2x2 Loader;c:\windows\system32\drivers\usb22ldr.sys [2008-06-30 14272]
S3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\drivers\wdcsam.sys [2008-12-18 11520]
--- Other Services/Drivers In Memory ---
*NewlyCreated* - DIGINET
*NewlyCreated* - DIGIREFRESH
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{A509B1FF-37FF-4bFF-8CFF-4F3A747040FF}]
c:\windows\system32\rundll32.exe c:\windows\system32\advpack.dll,LaunchINFSectionEx c:\program files\Internet Explorer\clrtour.inf,DefaultInstall.ResetTour,,12
.
- - - - ORPHANS REMOVED - - - -
HKLM-Run-RAMDrive - c:\program files\FarStone\VirtualDrive\VHD\RDTask.exe
HKLM-Run-Reg32 - c:\windows\System32\system\reg.exe
.
------- Supplementary Scan -------
.
uStart Page =
hxxp://www.yahoo.com/?fr=fp-yie8mSearch Bar =
hxxp://us.rd.yahoo.com/customize/ie/def ... earch.htmluSearchURL,(Default) =
hxxp://us.rd.yahoo.com/customize/ie/def ... .yahoo.comIE: E&xport to Microsoft Excel - c:\progra~1\MICROS~4\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\documents and settings\hibb\Application Data\Mozilla\Firefox\Profiles\91j58hoq.default\
FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll
FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll
.
**************************************************************************
catchme 0.3.1375 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.netRootkit scan 2009-04-11 19:42:32
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------
[HKEY_USERS\S-1-5-21-1229272821-823518204-725345543-1003\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:76,db,49,90,9b,6e,3a,e9,74,55,96,2f,4e,31,9a,fe,02,82,5d,54,a8,41,54,
6c,9b,1b,e2,45,bb,57,03,02,b9,13,96,d1,3a,30,79,f3,3e,0e,24,30,79,a8,80,c2,\
"??"=hex:01,a2,d7,9d,0d,a6,90,5e,41,de,a8,19,4d,4f,df,1a
.
Completion time: 2009-04-11 19:44:01
ComboFix-quarantined-files.txt 2009-04-12 02:43:59
ComboFix2.txt 2009-02-23 02:45:04
ComboFix3.txt 2009-02-21 04:14:43
Pre-Run: 358,251,606,016 bytes free
Post-Run: 360,569,311,232 bytes free
1008 --- E O F --- 2009-04-07 18:49:29
Posted: Sun Apr 12, 2009 3:36 am