Seneste forumindlæg
Køb / Salg
 * Uofficiel Black/White liste V3
Login / opret bruger

Forum \ Software \ Sikkerhed
Denne tråd er over 6 måneder gammel

Er du sikker på, at du har noget relevant at tilføje?

Nog der ville tjekke min HJT fil?

Af Gæst smiley-mann | 16-12-2007 02:08 | 1209 visninger | 19 svar, hop til seneste
Håber der også er nogen der lige ville tjekke min HJT fil og sige om det går godt for min computer elle skidt. :-) http://peecee.dk[...]
--
Gæstebruger, opret dit eget login og få din egen signatur.
#1
Arlet
Gigabruger
16-12-2007 14:41

Rapporter til Admin
1)Lad ccleaner lave en oprydning : www.arlet.dk[...] 2)Kør trin 1 her http://www.malwarecheck.dk[...] og læg loggen ind 3) Hent Combofix fra et af disse links, og gem den på dit skrivebord: http://download.bleepingcomputer.com[...] http://www.forospyware.com[...] http://subs.geekstogo.com[...] -- Kør så combofix.exe, som du hentede tidligere, og følg anvisningerne. Du bør ikke klikke på vinduet imens værktøjet kører, idet det kan få din computer til at fryse. Når combofix er færdig, og efter det har genstartet, skulle der gerne åbnes en logfil: combofix.txt Indholdet af denne fil må du gerne lægge herind. BEMÆRK at Combofix af nogle virusscannere bliver detekteret som inficeret. Dette har dog intet på sig. Vi skal se logs fra punkt 2 - 3
--
Med venlig hilsen Arlet www.arlet.dk[...] www.malwarecheck.dk[...]
#2
smiley-mann
Gæst
16-12-2007 14:45

Rapporter til Admin
Okay jeg ville prøve det, men kunne godt lige tænke mig at få af vide om, hvor slemt det ser ud? :-)
--
Gæstebruger, opret dit eget login og få din egen signatur.
#3
smiley-mann
Gæst
16-12-2007 14:50

Rapporter til Admin
Hmm, hvor henter jeg ccleaner henne? Det link du gav er vist gået død?
--
Gæstebruger, opret dit eget login og få din egen signatur.
#4
Normand
Supporter Aspirant
16-12-2007 15:07

Rapporter til Admin
Det link til ccleaner som Arlet linker til virker fint
--
As I Walk Through the Walley of the Blue Screen of Death..
#5
smiley-mann
Gæst
16-12-2007 15:14

Rapporter til Admin
hmm jeg får kun noget i retningen af følgende: ÿþ? ? ?? ? ?? ? ?? ? ??? ? ? ??F?i?r?e?w?a?l?l? ?? ? ?? ? ?? ? ? ? ? ? ????C?c?l?e?a?n?e?r?????? ? ? ? ?H?e?n?t? ?C?c?l?e?a?n?e?r? ?h?e?r?:?? ? ??h?t?t?p?:?/?/?w?w?w?.?f?i?l?e?h?i?p?p?o?.?c?o?m?/?d?o?w?n?l?o?a?d?_?c?c?l?e?a?n?e?r?/??? ? ?I?n?s?t?a?l?l?e?r? ?C?c?l?e?a?n?e?r?,? ?h?u?s?k? ?a?t? ?f?j?e?r?n?e? ?f?l?u?e?b?e?n?e?t? ?u?d? ?f?o?r? ?i?n?s?t?a?l?l?a?t?i?o?n? ?a?f? ?Y?a?h?o?o? ?t?o?o?l?b?a?r?.?? ?
--
Gæstebruger, opret dit eget login og få din egen signatur.
#6
smiley-mann
Gæst
16-12-2007 15:15

Rapporter til Admin
Men har dog fået det henet
--
Gæstebruger, opret dit eget login og få din egen signatur.
#7
Arlet
Gigabruger
16-12-2007 15:30

Rapporter til Admin
Det er meget svært at sige, for nogle gange kan man se meget i en hijackthis og andre gange er alt skjult, så jeg kan sige mere, når du har udført vejledningen..
--
Med venlig hilsen Arlet www.arlet.dk[...] www.malwarecheck.dk[...]
#8
smiley-mann
Gæst
16-12-2007 15:42

Rapporter til Admin
Ok - Helt iorden
--
Gæstebruger, opret dit eget login og få din egen signatur.
#9
smiley-mann
Gæst
16-12-2007 16:18

Rapporter til Admin
Okay jeg er færsig, men jeg kan ikk finde den log fra SAS. Og hvor nøjaghtigt ligger Statistics-Log henne?
--
Gæstebruger, opret dit eget login og få din egen signatur.
#10
Arlet
Gigabruger
16-12-2007 16:23

Rapporter til Admin
Under preferences og oppe i et af fanebladene
--
Med venlig hilsen Arlet www.arlet.dk[...] www.malwarecheck.dk[...]
#11
smiley-mann
Gæst
16-12-2007 16:31

Rapporter til Admin
Vi tager den lige fra start til slut GÅr jeg ind i: C:/Programmer/SuperAntiSpyware osv Kan du give mig den på den måde?
--
Gæstebruger, opret dit eget login og få din egen signatur.
#12
smiley-mann
Gæst
16-12-2007 16:44

Rapporter til Admin
Okay jeg har fundet det og her er de: SAS log: SUPERAntiSpyware Scan Log http://www.superantispyware.com[...] Generated 12/16/2007 at 04:04 PM Application Version : 3.9.1008 Core Rules Database Version : 3362 Trace Rules Database Version: 1361 Scan type : Complete Scan Total Scan Time : 00:44:13 Memory items scanned : 518 Memory threats detected : 0 Registry items scanned : 5736 Registry threats detected : 0 File items scanned : 35636 File threats detected : 0 Combofix log: ComboFix 07-12-16.3 - Smiley 2007-12-16 16:11:45.1 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.385 [GMT 1:00] Running from: C:\Documents and Settings\Smiley\Desktop\ComboFix.exe * Created a new restore point . ((((((((((((((((((((((((( Files Created from 2007-11-16 to 2007-12-16 ))))))))))))))))))))))))))))))) . 2007-12-16 15:17 . 2007-12-16 15:19 d-------- C:\Program Files\SUPERAntiSpyware 2007-12-16 15:17 . 2007-12-16 15:17 d-------- C:\Documents and Settings\Smiley\Application Data\SUPERAntiSpyware.com 2007-12-16 15:17 . 2007-12-16 15:17 d-------- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com 2007-12-16 15:04 . 2007-12-16 15:04 d-------- C:\Program Files\CCleaner 2007-12-16 02:25 . 2007-12-16 02:25 d-------- C:\Program Files\MSXML 6.0 2007-12-15 21:52 . 2007-10-11 00:55 6,065,664 -----c--- C:\WINDOWS\system32\dllcache\ieframe.dll 2007-12-15 21:52 . 2007-07-01 04:31 2,455,488 -----c--- C:\WINDOWS\system32\dllcache\ieapfltr.dat 2007-12-15 21:52 . 2007-07-01 04:36 991,232 -----c--- C:\WINDOWS\system32\dllcache\ieframe.dll.mui 2007-12-15 21:52 . 2007-10-11 00:55 459,264 -----c--- C:\WINDOWS\system32\dllcache\msfeeds.dll 2007-12-15 21:52 . 2007-10-11 00:55 383,488 -----c--- C:\WINDOWS\system32\dllcache\ieapfltr.dll 2007-12-15 21:52 . 2007-10-11 00:55 267,776 -----c--- C:\WINDOWS\system32\dllcache\iertutil.dll 2007-12-15 21:52 . 2007-10-11 00:55 63,488 -----c--- C:\WINDOWS\system32\dllcache\icardie.dll 2007-12-15 21:52 . 2007-10-11 00:55 52,224 -----c--- C:\WINDOWS\system32\dllcache\msfeedsbs.dll 2007-12-15 21:52 . 2007-10-10 11:59 13,824 -----c--- C:\WINDOWS\system32\dllcache\ieudinit.exe 2007-12-15 21:36 . 2007-12-15 21:36 d-------- C:\WINDOWS\system32\XPSViewer 2007-12-15 21:36 . 2007-12-15 21:36 d-------- C:\Program Files\Reference Assemblies 2007-12-15 21:35 . 2006-06-29 13:07 14,048 --------- C:\WINDOWS\system32\spmsg2.dll 2007-12-15 21:33 . 2007-12-15 21:33 d-------- C:\Program Files\Windows Media Connect 2 2007-12-15 21:30 . 2007-12-15 21:31 d-------- C:\WINDOWS\system32\drivers\UMDF 2007-12-15 21:19 . 2007-12-15 21:20 d-------- C:\WINDOWS\system32\URTTemp 2007-12-15 21:14 . 2006-11-13 07:02 288,768 --------- C:\WINDOWS\system32\rhttpaa.dll 2007-12-15 21:14 . 2006-11-13 07:02 116,736 --------- C:\WINDOWS\system32\aaclient.dll 2007-12-15 21:14 . 2006-11-13 07:02 36,352 --------- C:\WINDOWS\system32\tsgqec.dll 2007-12-15 21:11 . 2005-04-28 20:16 274,432 --a--c--- C:\WINDOWS\system32\dllcache\SET1DB.tmp 2007-12-15 21:11 . 2005-04-28 01:12 245,248 --a--c--- C:\WINDOWS\system32\dllcache\SET1D9.tmp 2007-12-15 21:11 . 2005-04-28 20:16 215,552 --a--c--- C:\WINDOWS\system32\dllcache\SET1D8.tmp 2007-12-15 21:11 . 2005-04-28 20:16 193,024 --a--c--- C:\WINDOWS\system32\dllcache\SET1D7.tmp 2007-12-15 21:11 . 2005-04-28 20:16 133,120 --a--c--- C:\WINDOWS\system32\dllcache\SET1DD.tmp 2007-12-15 21:11 . 2005-04-28 01:12 103,424 --a--c--- C:\WINDOWS\system32\dllcache\SET1DA.tmp 2007-12-15 21:11 . 2005-04-28 20:16 19,968 --a--c--- C:\WINDOWS\system32\dllcache\SET1DC.tmp 2007-12-15 14:10 . 2007-12-15 14:10 d-------- C:\Program Files\Windows Defender 2007-12-13 22:21 . 2007-12-13 22:21 737,280 --a------ C:\WINDOWS\iun6002.exe 2007-12-13 22:14 . 2007-12-13 22:14 12,800 --a------ C:\WINDOWS\BS_DEF.sys 2007-12-13 20:11 . 2007-12-13 20:11 69 --a------ C:\WINDOWS\NeroDigital.ini 2007-12-11 16:04 . 2004-08-04 00:56 159,232 --a------ C:\WINDOWS\system32\ptpusd.dll 2007-12-11 16:04 . 2001-08-17 22:36 5,632 --a------ C:\WINDOWS\system32\ptpusb.dll 2007-12-10 14:29 . 2007-12-10 14:29 d-------- C:\Program Files\Lavasoft 2007-12-10 14:29 . 2007-12-10 14:29 d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft 2007-12-10 14:28 . 2007-12-16 15:17 d-------- C:\Program Files\Common Files\Wise Installation Wizard 2007-12-08 22:29 . 2007-12-08 22:29 d-------- C:\Documents and Settings\All Users\Application Data\YoYoGames 2007-12-08 22:28 . 2007-12-08 22:28 0 --ah----- C:\WINDOWS\SwSys2.bmp 2007-12-08 22:28 . 2007-12-08 22:28 0 --ah----- C:\WINDOWS\SwSys1.bmp 2007-12-08 01:00 . 2007-12-08 01:00 796,672 --a------ C:\WINDOWS\GPInstall.exe 2007-12-07 12:19 . 2007-12-16 12:32 d-------- C:\Program Files\Steam 2007-12-06 21:45 . 2007-12-06 22:01 364 --a------ C:\WINDOWS\kaillera.ini 2007-12-06 18:23 . 2007-12-06 19:00 d-------- C:\Program Files\config 2007-12-06 18:23 . 2007-12-06 19:21 d-------- C:\Program Files\appcache 2007-12-06 18:22 . 2007-12-06 18:22 d-------- C:\Program Files\skins 2007-12-06 18:22 . 2007-12-06 18:22 d-------- C:\Program Files\resource 2007-12-06 18:22 . 2007-12-06 18:22 d--h----- C:\Program Files\old 2007-12-06 18:22 . 2007-12-06 18:22 d-------- C:\Program Files\Graphics 2007-12-06 18:22 . 2007-12-06 18:22 d-------- C:\Program Files\bin 2007-12-06 17:48 . 2007-12-07 12:17 d-------- C:\Program Files\SteamApps 2007-12-06 17:48 . 2007-12-07 12:17 d-------- C:\Program Files\Public 2007-12-05 19:12 . 2007-12-05 19:12 d-------- C:\Program Files\Boomtown 2007-12-05 17:40 . 2007-12-05 17:40 d-------- C:\Program Files\Bullfrog 2007-12-05 17:40 . 1998-07-30 17:40 305,152 --a------ C:\WINDOWS\IsUn0406.exe 2007-12-04 21:44 . 2007-12-04 21:44 d-------- C:\Program Files\GhostWall 2007-12-04 21:44 . 2007-12-16 12:32 6,520 --a------ C:\WINDOWS\system32\drivers\ghstwall.sys 2007-12-04 17:19 . 2007-12-04 17:19 76 --a------ C:\WINDOWS\dellstat.ini 2007-12-04 17:15 . 2007-12-04 17:15 d-------- C:\Program Files\Lexmark 1200 Series 2007-12-04 17:15 . 2007-12-04 17:15 d-------- C:\Documents and Settings\Smiley\WINDOWS 2007-12-04 17:15 . 2006-03-10 21:11 1,101,730 --a------ C:\WINDOWS\system32\LXCZLPA.HLP 2007-12-04 17:05 . 2007-12-04 17:05 0 --a------ C:\WINDOWS\PowerReg.dat 2007-12-03 21:26 . 2007-12-03 21:26 98,304 --a------ C:\WINDOWS\system32\CmdLineExt.dll 2007-12-03 14:47 . 2007-12-03 14:47 d-------- C:\Program Files\DivX 2007-12-03 14:39 . 2007-12-03 14:41 d--hsc--- C:\Program Files\Common Files\WindowsLiveInstaller 2007-12-03 14:38 . 2007-12-03 14:38 d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller 2007-12-02 22:07 . 2007-12-02 22:07 113 --a------ C:\WINDOWS\wininit.ini 2007-12-01 23:26 . 2007-12-01 23:26 d-------- C:\Program Files\Common Files\Ahead 2007-12-01 23:26 . 2007-12-01 23:26 d-------- C:\Program Files\Ahead 2007-12-01 23:26 . 2004-07-26 16:16 1,568,768 --------- C:\WINDOWS\system32\ImagX7.dll 2007-12-01 23:26 . 2004-07-26 16:16 476,320 --------- C:\WINDOWS\system32\ImagXpr7.dll 2007-12-01 23:26 . 2004-07-26 16:16 471,040 --------- C:\WINDOWS\system32\ImagXRA7.dll 2007-12-01 23:26 . 2004-07-09 08:43 364,544 --------- C:\WINDOWS\system32\TwnLib4.dll 2007-12-01 23:26 . 2004-07-26 16:16 262,144 --------- C:\WINDOWS\system32\ImagXR7.dll 2007-12-01 23:26 . 2006-01-12 15:40 155,648 --a------ C:\WINDOWS\system32\NeroCheck.exe 2007-12-01 23:26 . 2005-09-01 11:03 127,488 --------- C:\WINDOWS\system32\drivers\imagesrv.sys 2007-12-01 23:26 . 2000-06-26 10:45 106,496 --a------ C:\WINDOWS\system32\TwnLib20.dll 2007-12-01 23:26 . 2005-09-01 11:03 5,888 --------- C:\WINDOWS\system32\drivers\imagedrv.sys 2007-12-01 19:14 . 2007-12-03 18:31 d-------- C:\WINDOWS\SxsCaPendDel 2007-12-01 19:14 . 2007-12-03 14:33 d-------- C:\Documents and Settings\Smiley\Tracing 2007-12-01 19:13 . 2007-12-03 14:39 d-------- C:\Program Files\Windows Live 2007-12-01 12:24 . 2007-12-01 12:24 d-------- C:\Program Files\Avira 2007-12-01 12:04 . 2007-12-12 21:54 d-------- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files 2007-12-01 01:01 . 2007-12-07 14:07 22,328 --a------ C:\WINDOWS\system32\drivers\PnkBstrK.sys 2007-12-01 01:01 . 2007-12-07 14:07 22,328 --a------ C:\Documents and Settings\Smiley\Application Data\PnkBstrK.sys 2007-12-01 01:00 . 2007-12-07 14:07 103,736 --a------ C:\WINDOWS\system32\PnkBstrB.exe 2007-12-01 01:00 . 2007-12-07 14:07 66,872 --a------ C:\WINDOWS\system32\PnkBstrA.exe 2007-12-01 01:00 . 2007-12-01 01:00 319 --a------ C:\WINDOWS\game.ini 2007-12-01 00:43 . 2007-12-01 00:43 d--hs---- C:\WINDOWS\ftpcache 2007-12-01 00:28 . 2007-12-01 00:28 d-------- C:\Documents and Settings\Smiley\Application Data\WhenU 2007-12-01 00:24 . 2007-12-01 00:24 685,816 --a------ C:\WINDOWS\system32\drivers\sptd.sys 2007-11-28 21:38 . 2007-10-12 15:14 3,734,536 --a------ C:\WINDOWS\system32\d3dx9_36.dll 2007-11-28 21:38 . 2007-10-12 15:14 1,374,232 --a------ C:\WINDOWS\system32\D3DCompiler_36.dll 2007-11-28 21:38 . 2007-10-02 09:56 444,776 --a------ C:\WINDOWS\system32\d3dx10_36.dll 2007-11-28 21:38 . 2007-10-22 03:39 267,272 --a------ C:\WINDOWS\system32\xactengine2_10.dll 2007-11-28 14:24 . 2007-11-28 21:23 d-------- C:\NVIDIA 2007-11-28 12:28 . 2004-11-23 08:34 1,323,095 --a------ C:\WINDOWS\system32\odSupp_M.dll 2007-11-28 12:28 . 2005-08-08 10:58 372,736 --a------ C:\WINDOWS\system32\ANIWZCS2.dll . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2007-11-21 17:09 --------- d-----w C:\Program Files\microsoft frontpage 2007-11-13 10:25 20,480 ----a-w C:\WINDOWS\system32\drivers\secdrv.sys 2007-10-29 22:43 1,287,680 ----a-w C:\WINDOWS\system32\quartz.dll 2007-10-27 16:40 222,720 ----a-w C:\WINDOWS\system32\wmasf.dll 2007-10-22 02:37 17,928 ----a-w C:\WINDOWS\system32\X3DAudio1_2.dll 2007-10-20 00:56 200,704 ----a-w C:\WINDOWS\system32\ssldivx.dll 2007-10-20 00:56 1,044,480 ----a-w C:\WINDOWS\system32\libdivx.dll 2007-10-18 10:31 51,224 ----a-w C:\WINDOWS\system32\sirenacm.dll 2007-10-04 17:16 356,352 ----a-w C:\WINDOWS\system32\nvudisp.exe 2007-10-04 16:14 753,664 ----a-w C:\WINDOWS\system32\nvcplui.exe 2007-10-04 16:14 6,344,704 ----a-w C:\WINDOWS\system32\nvdisps.dll 2007-10-04 16:14 5,509,120 ----a-w C:\WINDOWS\system32\nvdispsr.dll 2007-10-04 16:14 458,752 ----a-w C:\WINDOWS\system32\nvmccssr.dll 2007-10-04 16:14 307,200 ----a-w C:\WINDOWS\system32\nvexpbar.dll 2007-10-04 16:14 3,629,056 ----a-w C:\WINDOWS\system32\nvvitvsr.dll 2007-10-04 16:14 3,551,232 ----a-w C:\WINDOWS\system32\nvvitvs.dll 2007-10-04 16:14 3,334,144 ----a-w C:\WINDOWS\system32\nvgames.dll 2007-10-04 16:14 3,166,208 ----a-w C:\WINDOWS\system32\nvgamesr.dll 2007-10-04 16:14 2,854,912 ----a-w C:\WINDOWS\system32\nvmoblsr.dll 2007-10-04 16:14 2,441,216 ----a-w C:\WINDOWS\system32\nvwssr.dll 2007-10-04 16:14 2,371,584 ----a-w C:\WINDOWS\system32\nvwss.dll 2007-10-04 16:14 188,416 ----a-w C:\WINDOWS\system32\nvmccss.dll 2007-10-04 16:14 1,150,976 ----a-w C:\WINDOWS\system32\nvmobls.dll 2007-10-04 16:14 1,073,152 ----a-w C:\WINDOWS\system32\nvcpluir.dll . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 13:00] "SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2007-08-31 16:46] "MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [2007-10-18 11:34] "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 17:24] "AdVantage"="C:\Program Files\AdVantage\AdVantage.exe" [] "Steam"="C:\Program Files\Steam\Steam.exe" [2007-12-07 12:19] "SUPERAntiSpyware"="C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2007-06-21 14:06] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="RUNDLL32.exe" [2004-08-04 13:00 C:\WINDOWS\system32\rundll32.exe] "nwiz"="nwiz.exe" [2005-12-14 07:51 C:\WINDOWS\system32\nwiz.exe] "ULiRaid"="C:\Program Files\ULi5287\ULi5287.exe" [2005-08-23 20:59] "High Definition Audio Property Page Shortcut"="HDAShCut.exe" [2004-10-27 15:21 C:\WINDOWS\system32\HdAShCut.exe] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11] "GhostWall"="C:\Program Files\GhostWall\ghostwall.exe" [2005-09-29 16:28] "GrooveMonitor"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-27 00:47] "SoundMAXPnP"="C:\Program Files\Analog Devices\Core\smax4pnp.exe" [2005-05-20 02:11] "SoundMAX"="C:\Program Files\Analog Devices\SoundMAX\smax4.exe" [2005-09-07 15:35] "WinampAgent"="C:\Program Files\Winamp\winampa.exe" [2007-10-10 06:28] "ANIWZCS2Service"="C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe" [2004-12-16 17:49] "avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2007-12-01 12:25] "NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2006-01-12 15:40] "Lexmark 1200 Series"="C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe" [2006-07-13 06:20] "NvMediaCenter"="RUNDLL32.exe" [2004-08-04 13:00 C:\WINDOWS\system32\rundll32.exe] "GameFace Messenger"="C:\Program Files\GameFace Messenger\GameFace.exe" [] "Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2006-11-03 19:20] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-04 13:00] C:\Documents and Settings\Smiley\Start Menu\Programs\Startup\ Screen Clipper and Launcher til OneNote 2007.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 20:24:54] [hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks] "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2006-12-20 13:55 77824] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon] C:\Program Files\SUPERAntiSpyware\SASWINLO.dll 2007-04-19 13:41 294912 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll R0 m5287;m5287;C:\WINDOWS\system32\DRIVERS\m5287.sys R2 ghstwall;ghstwall;\??\C:\WINDOWS\system32\drivers\ghstwall.sys R3 AEAudioService;AEAudio Service;C:\WINDOWS\system32\drivers\AEAudio.sys R3 P17;SB Live! 24-bit;C:\WINDOWS\system32\drivers\P17.sys R3 TAP;TAP-Win32 Adapter;C:\WINDOWS\system32\DRIVERS\tapdrvr.sys R3 ULI5261XP;ULi M526X Ethernet NT Driver;C:\WINDOWS\system32\DRIVERS\ULILAN51.SYS S3 BS_DEF;BS_DEF;\??\C:\WINDOWS\BS_DEF.sys S3 Video3D;ASUS Video3D Service;C:\WINDOWS\system32\Drivers\Video3D32.sys [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9e319e98-a1a5-11dc-b26a-001731977832}] \Shell\AutoRun\command - RavMon.exe *Newly Created Service* - CATCHME *Newly Created Service* - PROCEXP90 *Newly Created Service* - SASDIFSV *Newly Created Service* - SASENUM *Newly Created Service* - SASKUTIL . Contents of the 'Scheduled Tasks' folder "2007-12-16 11:34:07 C:\WINDOWS\Tasks\MP Scheduled Scan.job" - C:\Program Files\Windows Defender\MpCmdRun.exe "2007-12-16 15:07:01 C:\WINDOWS\Tasks\Søg efter opdateringer til Windows Live Toolbar.job" - C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE . ************************************************************************** catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net[...] Rootkit scan 2007-12-16 16:13:18 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0
--
Gæstebruger, opret dit eget login og få din egen signatur.
#13
Arlet
Ultrabruger
16-12-2007 20:29

Rapporter til Admin
Kopiér indholdet mellem de stiplede linier ind i et notepad-vindue, og gem indholdet på skrivebordet med navnet CFScript.txt. Når du gemmer, skal du sikre, at der under "filtyper" står "alle filer". ------------------------- File:: C:\WINDOWS\GPInstall.exe Folder:: C:\Documents and Settings\Smiley\Application Data\WhenU C:\Program Files\AdVantage Registry:: [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "AdVantage"=- ------------------------- Tag så fat i den nye fil med musen, og før den hen over Combofix-filen(den røde med X´et), hvorefter du "giver slip" med musen. - http://www.fromsej.saknet.dk[...] Så skulle Combofix gerne give sig til at arbejde. Muligvis vil den kræve en genstart, hvilket du skal tillade. Du bør ikke klikke på vinduet imens værktøjet kører, idet det kan få din computer til at fryse. Kopier indholdet af Combofix.txt her ind sammen med en ny hijackthis log
--
Med venlig hilsen Arlet www.arlet.dk[...] www.malwarecheck.dk[...]
#14
smiley-mann
Gæst
16-12-2007 20:41

Rapporter til Admin
Her er den fra combofix Den er lang: ComboFix 07-12-16.3 - Smiley 2007-12-16 20:35:12.2 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.467 [GMT 1:00] Running from: C:\Documents and Settings\Smiley\Desktop\ComboFix.exe Command switches used :: C:\Documents and Settings\Smiley\Desktop\CFScript.txt * Created a new restore point . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\Documents and Settings\Smiley\Application Data\WhenU C:\Documents and Settings\Smiley\Application Data\WhenU\dtStore.dat . ((((((((((((((((((((((((( Files Created from 2007-11-16 to 2007-12-16 ))))))))))))))))))))))))))))))) . 2007-12-16 18:01 . 2007-12-16 19:52 1,393 --a------ C:\WINDOWS\imsins.BAK 2007-12-16 15:17 . 2007-12-16 16:42 d-------- C:\Program Files\SUPERAntiSpyware 2007-12-16 15:17 . 2007-12-16 15:17 d-------- C:\Documents and Settings\Smiley\Application Data\SUPERAntiSpyware.com 2007-12-16 15:17 . 2007-12-16 15:17 d-------- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com 2007-12-16 15:04 . 2007-12-16 15:04 d-------- C:\Program Files\CCleaner 2007-12-16 02:25 . 2007-12-16 02:25 d-------- C:\Program Files\MSXML 6.0 2007-12-15 21:52 . 2007-10-11 00:55 6,065,664 -----c--- C:\WINDOWS\system32\dllcache\ieframe.dll 2007-12-15 21:52 . 2007-07-01 04:31 2,455,488 -----c--- C:\WINDOWS\system32\dllcache\ieapfltr.dat 2007-12-15 21:52 . 2007-07-01 04:36 991,232 -----c--- C:\WINDOWS\system32\dllcache\ieframe.dll.mui 2007-12-15 21:52 . 2007-10-11 00:55 459,264 -----c--- C:\WINDOWS\system32\dllcache\msfeeds.dll 2007-12-15 21:52 . 2007-10-11 00:55 383,488 -----c--- C:\WINDOWS\system32\dllcache\ieapfltr.dll 2007-12-15 21:52 . 2007-10-11 00:55 267,776 -----c--- C:\WINDOWS\system32\dllcache\iertutil.dll 2007-12-15 21:52 . 2007-10-11 00:55 63,488 -----c--- C:\WINDOWS\system32\dllcache\icardie.dll 2007-12-15 21:52 . 2007-10-11 00:55 52,224 -----c--- C:\WINDOWS\system32\dllcache\msfeedsbs.dll 2007-12-15 21:52 . 2007-10-10 11:59 13,824 -----c--- C:\WINDOWS\system32\dllcache\ieudinit.exe 2007-12-15 21:36 . 2007-12-16 20:05 d-------- C:\WINDOWS\system32\XPSViewer 2007-12-15 21:36 . 2007-12-15 21:36 d-------- C:\Program Files\Reference Assemblies 2007-12-15 21:35 . 2006-06-29 13:07 14,048 --------- C:\WINDOWS\system32\spmsg2.dll 2007-12-15 21:33 . 2007-12-15 21:33 d-------- C:\Program Files\Windows Media Connect 2 2007-12-15 21:30 . 2007-12-15 21:31 d-------- C:\WINDOWS\system32\drivers\UMDF 2007-12-15 21:19 . 2007-12-15 21:20 d-------- C:\WINDOWS\system32\URTTemp 2007-12-15 21:14 . 2006-11-13 07:02 288,768 --------- C:\WINDOWS\system32\rhttpaa.dll 2007-12-15 21:14 . 2006-11-13 07:02 116,736 --------- C:\WINDOWS\system32\aaclient.dll 2007-12-15 21:14 . 2006-11-13 07:02 36,352 --------- C:\WINDOWS\system32\tsgqec.dll 2007-12-15 21:11 . 2005-04-28 20:16 274,432 --a--c--- C:\WINDOWS\system32\dllcache\SET1DB.tmp 2007-12-15 21:11 . 2005-04-28 01:12 245,248 --a--c--- C:\WINDOWS\system32\dllcache\SET1D9.tmp 2007-12-15 21:11 . 2005-04-28 20:16 215,552 --a--c--- C:\WINDOWS\system32\dllcache\SET1D8.tmp 2007-12-15 21:11 . 2005-04-28 20:16 193,024 --a--c--- C:\WINDOWS\system32\dllcache\SET1D7.tmp 2007-12-15 21:11 . 2005-04-28 20:16 133,120 --a--c--- C:\WINDOWS\system32\dllcache\SET1DD.tmp 2007-12-15 21:11 . 2005-04-28 01:12 103,424 --a--c--- C:\WINDOWS\system32\dllcache\SET1DA.tmp 2007-12-15 21:11 . 2005-04-28 20:16 19,968 --a--c--- C:\WINDOWS\system32\dllcache\SET1DC.tmp 2007-12-15 14:10 . 2007-12-15 14:10 d-------- C:\Program Files\Windows Defender 2007-12-13 22:21 . 2007-12-13 22:21 737,280 --a------ C:\WINDOWS\iun6002.exe 2007-12-13 22:14 . 2007-12-13 22:14 12,800 --a------ C:\WINDOWS\BS_DEF.sys 2007-12-13 20:11 . 2007-12-13 20:11 69 --a------ C:\WINDOWS\NeroDigital.ini 2007-12-11 16:04 . 2004-08-04 00:56 159,232 --a------ C:\WINDOWS\system32\ptpusd.dll 2007-12-11 16:04 . 2001-08-17 22:36 5,632 --a------ C:\WINDOWS\system32\ptpusb.dll 2007-12-10 14:29 . 2007-12-10 14:29 d-------- C:\Program Files\Lavasoft 2007-12-10 14:29 . 2007-12-10 14:29 d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft 2007-12-10 14:28 . 2007-12-16 15:17 d-------- C:\Program Files\Common Files\Wise Installation Wizard 2007-12-08 22:29 . 2007-12-08 22:29 d-------- C:\Documents and Settings\All Users\Application Data\YoYoGames 2007-12-08 22:28 . 2007-12-08 22:28 0 --ah----- C:\WINDOWS\SwSys2.bmp 2007-12-08 22:28 . 2007-12-08 22:28 0 --ah----- C:\WINDOWS\SwSys1.bmp 2007-12-08 01:00 . 2007-12-08 01:00 796,672 --a------ C:\WINDOWS\GPInstall.exe 2007-12-07 12:19 . 2007-12-16 20:29 d-------- C:\Program Files\Steam 2007-12-06 21:45 . 2007-12-06 22:01 364 --a------ C:\WINDOWS\kaillera.ini 2007-12-06 18:23 . 2007-12-06 19:00 d-------- C:\Program Files\config 2007-12-06 18:23 . 2007-12-06 19:21 d-------- C:\Program Files\appcache 2007-12-06 18:22 . 2007-12-06 18:22 d-------- C:\Program Files\skins 2007-12-06 18:22 . 2007-12-06 18:22 d-------- C:\Program Files\resource 2007-12-06 18:22 . 2007-12-06 18:22 d--h----- C:\Program Files\old 2007-12-06 18:22 . 2007-12-06 18:22 d-------- C:\Program Files\Graphics 2007-12-06 18:22 . 2007-12-06 18:22 d-------- C:\Program Files\bin 2007-12-06 17:48 . 2007-12-07 12:17 d-------- C:\Program Files\SteamApps 2007-12-06 17:48 . 2007-12-07 12:17 d-------- C:\Program Files\Public 2007-12-05 19:12 . 2007-12-05 19:12 d-------- C:\Program Files\Boomtown 2007-12-05 17:40 . 2007-12-05 17:40 d-------- C:\Program Files\Bullfrog 2007-12-05 17:40 . 1998-07-30 17:40 305,152 --a------ C:\WINDOWS\IsUn0406.exe 2007-12-04 21:44 . 2007-12-04 21:44 d-------- C:\Program Files\GhostWall 2007-12-04 21:44 . 2007-12-16 20:29 6,520 --a------ C:\WINDOWS\system32\drivers\ghstwall.sys 2007-12-04 17:19 . 2007-12-04 17:19 76 --a------ C:\WINDOWS\dellstat.ini 2007-12-04 17:15 . 2007-12-04 17:15 d-------- C:\Program Files\Lexmark 1200 Series 2007-12-04 17:15 . 2007-12-04 17:15 d-------- C:\Documents and Settings\Smiley\WINDOWS 2007-12-04 17:15 . 2006-03-10 21:11 1,101,730 --a------ C:\WINDOWS\system32\LXCZLPA.HLP 2007-12-04 17:05 . 2007-12-04 17:05 0 --a------ C:\WINDOWS\PowerReg.dat 2007-12-03 21:26 . 2007-12-03 21:26 98,304 --a------ C:\WINDOWS\system32\CmdLineExt.dll 2007-12-03 14:47 . 2007-12-03 14:47 d-------- C:\Program Files\DivX 2007-12-03 14:39 . 2007-12-03 14:41 d--hsc--- C:\Program Files\Common Files\WindowsLiveInstaller 2007-12-03 14:38 . 2007-12-03 14:38 d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller 2007-12-02 22:07 . 2007-12-02 22:07 113 --a------ C:\WINDOWS\wininit.ini 2007-12-01 23:26 . 2007-12-01 23:26 d-------- C:\Program Files\Common Files\Ahead 2007-12-01 23:26 . 2007-12-01 23:26 d-------- C:\Program Files\Ahead 2007-12-01 23:26 . 2004-07-26 16:16 1,568,768 --------- C:\WINDOWS\system32\ImagX7.dll 2007-12-01 23:26 . 2004-07-26 16:16 476,320 --------- C:\WINDOWS\system32\ImagXpr7.dll 2007-12-01 23:26 . 2004-07-26 16:16 471,040 --------- C:\WINDOWS\system32\ImagXRA7.dll 2007-12-01 23:26 . 2004-07-09 08:43 364,544 --------- C:\WINDOWS\system32\TwnLib4.dll 2007-12-01 23:26 . 2004-07-26 16:16 262,144 --------- C:\WINDOWS\system32\ImagXR7.dll 2007-12-01 23:26 . 2006-01-12 15:40 155,648 --a------ C:\WINDOWS\system32\NeroCheck.exe 2007-12-01 23:26 . 2005-09-01 11:03 127,488 --------- C:\WINDOWS\system32\drivers\imagesrv.sys 2007-12-01 23:26 . 2000-06-26 10:45 106,496 --a------ C:\WINDOWS\system32\TwnLib20.dll 2007-12-01 23:26 . 2005-09-01 11:03 5,888 --------- C:\WINDOWS\system32\drivers\imagedrv.sys 2007-12-01 19:14 . 2007-12-03 18:31 d-------- C:\WINDOWS\SxsCaPendDel 2007-12-01 19:14 . 2007-12-03 14:33 d-------- C:\Documents and Settings\Smiley\Tracing 2007-12-01 19:13 . 2007-12-03 14:39 d-------- C:\Program Files\Windows Live 2007-12-01 12:24 . 2007-12-01 12:24 d-------- C:\Program Files\Avira 2007-12-01 12:04 . 2007-12-12 21:54 d-------- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files 2007-12-01 01:01 . 2007-12-07 14:07 22,328 --a------ C:\WINDOWS\system32\drivers\PnkBstrK.sys 2007-12-01 01:01 . 2007-12-07 14:07 22,328 --a------ C:\Documents and Settings\Smiley\Application Data\PnkBstrK.sys 2007-12-01 01:00 . 2007-12-07 14:07 103,736 --a------ C:\WINDOWS\system32\PnkBstrB.exe 2007-12-01 01:00 . 2007-12-07 14:07 66,872 --a------ C:\WINDOWS\system32\PnkBstrA.exe 2007-12-01 01:00 . 2007-12-01 01:00 319 --a------ C:\WINDOWS\game.ini 2007-12-01 00:43 . 2007-12-01 00:43 d--hs---- C:\WINDOWS\ftpcache 2007-12-01 00:24 . 2007-12-01 00:24 685,816 --a------ C:\WINDOWS\system32\drivers\sptd.sys 2007-11-28 21:38 . 2007-10-12 15:14 3,734,536 --a------ C:\WINDOWS\system32\d3dx9_36.dll 2007-11-28 21:38 . 2007-10-12 15:14 1,374,232 --a------ C:\WINDOWS\system32\D3DCompiler_36.dll 2007-11-28 21:38 . 2007-10-02 09:56 444,776 --a------ C:\WINDOWS\system32\d3dx10_36.dll 2007-11-28 21:38 . 2007-10-22 03:39 267,272 --a------ C:\WINDOWS\system32\xactengine2_10.dll 2007-11-28 14:24 . 2007-11-28 21:23 d-------- C:\NVIDIA 2007-11-28 12:28 . 2004-11-23 08:34 1,323,095 --a------ C:\WINDOWS\system32\odSupp_M.dll 2007-11-28 12:28 . 2005-08-08 10:58 372,736 --a------ C:\WINDOWS\system32\ANIWZCS2.dll . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2007-11-21 17:09 --------- d-----w C:\Program Files\microsoft frontpage 2007-11-13 10:25 20,480 ----a-w C:\WINDOWS\system32\drivers\secdrv.sys 2007-10-29 22:43 1,287,680 ----a-w C:\WINDOWS\system32\quartz.dll 2007-10-27 16:40 222,720 ----a-w C:\WINDOWS\system32\wmasf.dll 2007-10-24 00:47 96,760 ----a-w C:\WINDOWS\system32\dfshim.dll 2007-10-24 00:47 84,480 ----a-w C:\WINDOWS\system32\mscories.dll 2007-10-24 00:47 282,112 ----a-w C:\WINDOWS\system32\mscoree.dll 2007-10-24 00:47 158,720 ----a-w C:\WINDOWS\system32\mscorier.dll 2007-10-22 02:37 17,928 ----a-w C:\WINDOWS\system32\X3DAudio1_2.dll 2007-10-20 00:56 200,704 ----a-w C:\WINDOWS\system32\ssldivx.dll 2007-10-20 00:56 1,044,480 ----a-w C:\WINDOWS\system32\libdivx.dll 2007-10-18 10:31 51,224 ----a-w C:\WINDOWS\system32\sirenacm.dll 2007-10-11 08:55 88,576 ----a-w C:\WINDOWS\system32\infocardapi.dll 2007-10-11 08:55 579,584 ----a-w C:\WINDOWS\system32\icardagt.exe 2007-10-11 08:55 11,776 ----a-w C:\WINDOWS\system32\icardres.dll 2007-10-09 12:03 779,800 ----a-w C:\WINDOWS\system32\PresentationNative_v0300.dll 2007-10-09 12:03 73,752 ----a-w C:\WINDOWS\system32\dxva2.dll 2007-10-09 12:03 493,080 ----a-w C:\WINDOWS\system32\evr.dll 2007-10-09 12:03 350,744 ----a-w C:\WINDOWS\system32\PresentationHost.exe 2007-10-09 12:03 33,304 ----a-w C:\WINDOWS\system32\PresentationHostProxy.dll 2007-10-09 12:03 161,304 ----a-w C:\WINDOWS\system32\UIAutomationCore.dll 2007-10-09 12:03 106,520 ----a-w C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll 2007-10-09 12:03 1,986,072 ----a-w C:\WINDOWS\system32\milcore.dll 2007-10-09 11:58 16,896 ----a-w C:\WINDOWS\system32\tswpfwrp.exe 2007-10-04 17:16 356,352 ----a-w C:\WINDOWS\system32\nvudisp.exe 2007-10-04 16:14 753,664 ----a-w C:\WINDOWS\system32\nvcplui.exe 2007-10-04 16:14 6,344,704 ----a-w C:\WINDOWS\system32\nvdisps.dll 2007-10-04 16:14 5,509,120 ----a-w C:\WINDOWS\system32\nvdispsr.dll 2007-10-04 16:14 458,752 ----a-w C:\WINDOWS\system32\nvmccssr.dll 2007-10-04 16:14 307,200 ----a-w C:\WINDOWS\system32\nvexpbar.dll 2007-10-04 16:14 3,629,056 ----a-w C:\WINDOWS\system32\nvvitvsr.dll 2007-10-04 16:14 3,551,232 ----a-w C:\WINDOWS\system32\nvvitvs.dll 2007-10-04 16:14 3,334,144 ----a-w C:\WINDOWS\system32\nvgames.dll 2007-10-04 16:14 3,166,208 ----a-w C:\WINDOWS\system32\nvgamesr.dll 2007-10-04 16:14 2,854,912 ----a-w C:\WINDOWS\system32\nvmoblsr.dll 2007-10-04 16:14 2,441,216 ----a-w C:\WINDOWS\system32\nvwssr.dll 2007-10-04 16:14 2,371,584 ----a-w C:\WINDOWS\system32\nvwss.dll 2007-10-04 16:14 188,416 ----a-w C:\WINDOWS\system32\nvmccss.dll 2007-10-04 16:14 1,150,976 ----a-w C:\WINDOWS\system32\nvmobls.dll 2007-10-04 16:14 1,073,152 ----a-w C:\WINDOWS\system32\nvcpluir.dll . ((((((((((((((((((((((((((((( snapshot@2007-12-16_16.13.28,48 ))))))))))))))))))))))))))))))))))))))))) . - 2007-12-16 01:22:19 1,257,472 ----a-w C:\WINDOWS\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll + 2007-12-16 17:02:18 1,265,664 ----a-w C:\WINDOWS\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll - 2007-12-16 01:22:20 1,224,704 ----a-w C:\WINDOWS\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll + 2007-12-16 17:02:19 1,232,896 ----a-w C:\WINDOWS\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll - 2007-12-16 01:24:18 68,608 ----a-w C:\WINDOWS\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll + 2007-12-16 18:58:47 69,120 ----a-w C:\WINDOWS\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll - 2007-12-16 01:24:28 72,192 ----a-w C:\WINDOWS\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll + 2007-12-16 18:58:53 72,192 ----a-w C:\WINDOWS\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll - 2007-12-15 20:36:14 151,552 ----a-w C:\WINDOWS\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll + 2007-12-16 19:05:29 151,552 ----a-w C:\WINDOWS\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll - 2007-12-16 01:24:28 4,308,992 ----a-w C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll + 2007-12-16 18:58:31 4,444,160 ----a-w C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll - 2007-12-15 20:36:51 3,915,776 ----a-w C:\WINDOWS\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll + 2007-12-16 19:05:45 4,174,336 ----a-w C:\WINDOWS\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll - 2007-12-16 01:24:29 482,304 ----a-w C:\WINDOWS\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll + 2007-12-16 18:58:54 483,840 ----a-w C:\WINDOWS\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll - 2007-12-16 01:24:26 2,902,016 ----a-w C:\WINDOWS\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll + 2007-12-16 18:58:41 3,036,160 ----a-w C:\WINDOWS\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll - 2007-12-16 01:24:13 258,048 ----a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll + 2007-12-16 18:58:57 258,048 ----a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll - 2007-12-16 01:24:13 114,176 ----a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll + 2007-12-16 18:58:57 113,664 ----a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll - 2007-12-15 20:36:52 344,064 ----a-w C:\WINDOWS\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll + 2007-12-16 19:05:44 346,624 ----a-w C:\WINDOWS\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll - 2007-12-16 01:24:33 260,096 ----a-w C:\WINDOWS\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll + 2007-12-16 18:58:53 261,120 ----a-w C:\WINDOWS\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll - 2007-12-16 01:24:21 5,156,864 ----a-w C:\WINDOWS\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll + 2007-12-16 18:58:39 5,431,296 ----a-w C:\WINDOWS\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll - 2007-12-16 01:24:18 10,752 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll + 2007-12-16 18:58:45 10,752 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll - 2007-12-16 01:24:13 507,904 ----a-w C:\WINDOWS\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll + 2007-12-16 18:58:40 507,904 ----a-w C:\WINDOWS\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll - 2007-12-16 01:24:15 13,312 ----a-w C:\WINDOWS\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll + 2007-12-16 18:58:46 13,312 ----a-w C:\WINDOWS\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll - 2007-12-16 01:24:26 8,192 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll + 2007-12-16 18:58:49 8,192 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll - 2007-12-16 01:24:27 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll + 2007-12-16 18:58:50 77,824 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll - 2007-12-16 01:24:27 5,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll + 2007-12-16 18:58:51 6,656 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll - 2007-12-16 01:24:16 413,696 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll + 2007-12-16 18:58:58 348,160 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll - 2007-12-16 01:24:16 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll + 2007-12-16 18:58:59 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll - 2007-12-16 01:24:17 647,168 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll + 2007-12-16 18:59:00 655,360 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll - 2007-12-16 01:24:17 73,728 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll + 2007-12-16 18:59:00 77,824 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll - 2007-12-16 01:24:15 749,568 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll + 2007-12-16 18:58:51 749,568 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll - 2007-12-15 20:36:14 352,256 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll + 2007-12-16 19:05:29 397,312 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll - 2007-12-16 01:24:35 110,592 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll + 2007-12-16 18:58:50 110,592 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll - 2007-12-16 01:24:34 372,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll + 2007-12-16 18:58:49 372,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll - 2007-12-16 01:24:12 28,672 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll + 2007-12-16 18:58:55 28,672 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll - 2007-12-16 01:24:34 667,648 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll + 2007-12-16 18:58:48 671,744 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll - 2007-12-16 01:24:35 5,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll + 2007-12-16 18:58:36 5,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll - 2007-12-16 01:24:13 12,800 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll + 2007-12-16 18:58:56 12,800 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll - 2007-12-16 01:24:12 32,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll + 2007-12-16 18:58:48 32,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll - 2007-12-16 01:24:12 7,168 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll + 2007-12-16 18:58:47 7,168 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll - 2007-12-15 20:36:50 593,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\PresentationBuildTasks\3.0.0.0__31bf3856ad364e35\PresentationBuildTasks.dll + 2007-12-16 19:05:23 602,112 ----a-w C:\WINDOWS\assembly\GAC_MSIL\PresentationBuildTasks\3.0.0.0__31bf3856ad364e35\PresentationBuildTasks.dll - 2007-12-15 20:36:50 32,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\PresentationCFFRasterizer\3.0.0.0__31bf3856ad364e35\PresentationCFFRasterizer.dll + 2007-12-16 19:05:46 32,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\PresentationCFFRasterizer\3.0.0.0__31bf3856ad364e35\PresentationCFFRasterizer.dll - 2007-12-15 20:36:52 184,320 ----a-w C:\WINDOWS\assembly\GAC_MSIL\PresentationFramework.Aero\3.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll + 2007-12-16 19:05:39 184,320 ----a-w C:\WINDOWS\assembly\GAC_MSIL\PresentationFramework.Aero\3.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll - 2007-12-15 20:36:52 126,976 ----a-w C:\WINDOWS\assembly\GAC_MSIL\PresentationFramework.Classic\3.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll + 2007-12-16 19:05:38 131,072 ----a-w C:\WINDOWS\assembly\GAC_MSIL\PresentationFramework.Classic\3.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll - 2007-12-15 20:36:52 376,832 ----a-w C:\WINDOWS\assembly\GAC_MSIL\PresentationFramework.Luna\3.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll + 2007-12-16 19:05:38 376,832 ----a-w C:\WINDOWS\assembly\GAC_MSIL\PresentationFramework.Luna\3.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll - 2007-12-15 20:36:52 151,552 ----a-w C:\WINDOWS\assembly\GAC_MSIL\PresentationFramework.Royale\3.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll + 2007-12-16 19:05:37 151,552 ----a-w C:\WINDOWS\assembly\GAC_MSIL\PresentationFramework.Royale\3.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll - 2007-12-15 20:36:51 4,972,544 ----a-w C:\WINDOWS\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll + 2007-12-16 19:05:36 5,210,112 ----a-w C:\WINDOWS\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll - 2007-12-15 20:36:51 897,024 ----a-w C:\WINDOWS\assembly\GAC_MSIL\PresentationUI\3.0.0.0__31bf3856ad364e35\PresentationUI.dll + 2007-12-16 19:05:36 897,024 ----a-w C:\WINDOWS\assembly\GAC_MSIL\PresentationUI\3.0.0.0__31bf3856ad364e35\PresentationUI.dll - 2007-12-15 20:36:52 528,384 ----a-w C:\WINDOWS\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\ReachFramework.dll + 2007-12-16 19:05:44 528,384 ----a-w C:\WINDOWS\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\ReachFramework.dll - 2007-12-15 20:36:15 94,208 ----a-w C:\WINDOWS\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll + 2007-12-16 19:05:29 102,400 ----a-w C:\WINDOWS\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll - 2007-12-16 01:24:31 110,592 ----a-w C:\WINDOWS\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll + 2007-12-16 18:58:52 110,592 ----a-w C:\WINDOWS\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll - 2007-12-16 01:24:19 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll + 2007-12-16 18:58:52 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll - 2007-12-16 01:24:32 413,696 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll + 2007-12-16 18:58:40 425,984 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll - 2007-12-16 01:24:30 716,800 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll + 2007-12-16 18:58:42 741,376 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll - 2007-12-16 01:24:14 888,832 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll + 2007-12-16 18:58:42 933,888 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll - 2007-12-16 01:24:26 5,001,216 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll + 2007-12-16 18:59:01 5,070,848 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll - 2007-12-16 01:24:20 188,416 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll + 2007-12-16 18:58:59 188,416 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll - 2007-12-16 01:24:19 397,312 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll + 2007-12-16 18:58:45 401,408 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll - 2007-12-16 01:24:20 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll + 2007-12-16 18:58:56 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll - 2007-12-16 01:24:32 577,536 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll + 2007-12-16 18:58:36 630,784 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll - 2007-12-15 20:36:15 126,976 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.IdentityModel.Selectors\3.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll + 2007-12-16 19:05:50 126,976 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.IdentityModel.Selectors\3.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll - 2007-12-15 20:36:15 401,408 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089\System.IdentityModel.dll + 2007-12-16 19:05:50 430,080 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089\System.IdentityModel.dll - 2007-12-15 20:36:15 131,072 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.IO.Log\3.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll + 2007-12-16 19:05:29 131,072 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.IO.Log\3.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll - 2007-12-16 01:24:30 372,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll + 2007-12-16 18:58:57 372,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll - 2007-12-16 01:24:33 258,048 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll + 2007-12-16 18:58:55 258,048 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll - 2007-12-16 01:24:30 299,008 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll + 2007-12-16 18:58:54 299,008 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll - 2007-12-16 01:24:31 131,072 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll + 2007-12-16 18:58:53 131,072 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll - 2007-12-15 20:36:16 884,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll + 2007-12-16 19:05:29 929,792 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll - 2007-12-16 01:24:18 258,048 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll + 2007-12-16 18:58:37 258,048 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll - 2007-12-15 20:36:18 159,744 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.ServiceModel.Install\3.0.0.0__b77a5c561934e089\System.ServiceModel.Install.dll + 2007-12-16 19:05:23 159,744 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.ServiceModel.Install\3.0.0.0__b77a5c561934e089\System.ServiceModel.Install.dll - 2007-12-15 20:36:18 16,384 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll + 2007-12-16 19:05:23 32,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll - 2007-12-15 20:36:17 5,623,808 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089\System.ServiceModel.dll + 2007-12-16 19:05:27 5,971,968 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089\System.ServiceModel.dll - 2007-12-16 01:24:20 114,688 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll + 2007-12-16 18:58:37 114,688 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll - 2007-12-15 20:36:52 688,128 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Speech\3.0.0.0__31bf3856ad364e35\System.Speech.dll + 2007-12-16 19:05:23 688,128 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Speech\3.0.0.0__31bf3856ad364e35\System.Speech.dll - 2007-12-16 01:24:34 835,584 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll + 2007-12-16 18:58:44 884,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll - 2007-12-16 01:24:22 86,016 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll + 2007-12-16 18:58:44 90,112 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll - 2007-12-16 01:24:22 823,296 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll + 2007-12-16 18:58:43 839,680 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll - 2007-12-16 01:24:22 5,152,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll + 2007-12-16 18:58:46 5,013,504 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll - 2007-12-15 20:42:44 1,108,784 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Workflow.Activities\3.0.0.0__31bf3856ad364e35\System.Workflow.Activities.dll + 2007-12-16 19:05:48 1,152,040 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Workflow.Activities\3.0.0.0__31bf3856ad364e35\System.Workflow.Activities.dll - 2007-12-15 20:42:45 1,641,272 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Workflow.ComponentModel\3.0.0.0__31bf3856ad364e35\System.Workflow.ComponentModel.dll + 2007-12-16 19:05:48 1,635,376 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Workflow.ComponentModel\3.0.0.0__31bf3856ad364e35\System.Workflow.ComponentModel.dll - 2007-12-15 20:42:44 588,592 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Workflow.Runtime\3.0.0.0__31bf3856ad364e35\System.Workflow.Runtime.dll + 2007-12-16 19:05:48 578,592 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Workflow.Runtime\3.0.0.0__31bf3856ad364e35\System.Workflow.Runtime.dll - 2007-12-16 01:24:23 2,027,520 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll + 2007-12-16 18:58:38 2,068,480 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll - 2007-12-16 01:24:32 2,940,928 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll + 2007-12-16 18:58:43 3,076,096 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll - 2007-12-15 20:36:51 163,840 ----a-w C:\WINDOWS\assembly\GAC_MSIL\UIAutomationClient\3.0.0.0__31bf3856ad364e35\UIAutomationClient.dll + 2007-12-16 19:05:23 163,840 ----a-w C:\WINDOWS\assembly\GAC_MSIL\UIAutomationClient\3.0.0.0__31bf3856ad364e35\UIAutomationClient.dll - 2007-12-15 20:36:52 372,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\UIAutomationClientsideProviders\3.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll + 2007-12-16 19:05:23 372,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\UIAutomationClientsideProviders\3.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll - 2007-12-15 20:36:51 32,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\UIAutomationProvider\3.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll + 2007-12-16 19:05:44 32,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\UIAutomationProvider\3.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll - 2007-12-15 20:36:51 86,016 ----a-w C:\WINDOWS\assembly\GAC_MSIL\UIAutomationTypes\3.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll + 2007-12-16 19:05:44 86,016 ----a-w C:\WINDOWS\assembly\GAC_MSIL\UIAutomationTypes\3.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll - 2007-12-15 20:36:50 1,167,360 ----a-w C:\WINDOWS\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll + 2007-12-16 19:05:43 1,204,224 ----a-w C:\WINDOWS\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll - 2007-12-15 20:36:52 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\WindowsFormsIntegration\3.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll + 2007-12-16 19:05:22 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\WindowsFormsIntegration\3.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll + 2007-12-16 19:21:01 27,136 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Accessibility\c6772fd12a581ad3be49e3f2a80b5622\Accessibility.ni.dll + 2007-12-16 19:21:06 17,920 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\cd0730694ba5927a6efd32129783e1b4\Microsoft.VisualC.ni.dll + 2007-12-16 19:11:04 11,722,752 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll + 2007-12-16 19:22:36 40,960 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\3df824565150953afd560ca20237b881\PresentationCFFRasterizer.ni.dll + 2007-12-16 19:22:33 12,570,624 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationCore\[u]0[/u]11f8e31d197b4ccb6a61c2267a38e5c\PresentationCore.ni.dll + 2007-12-16 19:14:19 48,640 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\4ce7fd62d4107fbe996ab305eb21ee6a\PresentationFontCache.ni.exe + 2007-12-16 19:27:12 393,216 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\36c6cfd5d4e80d5c548f823b2bbf5457\PresentationFramework.Aero.ni.dll + 2007-12-16 19:27:16 552,960 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\3f18bff5107c9a8accae6c248fdf3c2e\PresentationFramework.Luna.ni.dll + 2007-12-16 19:24:09 15,036,416 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\60421dda88800b14dc101ed9dca422fe\PresentationFramework.ni.dll + 2007-12-16 19:27:20 274,432 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\81d2540bc1c18190d0431d9a61bee65b\PresentationFramework.Royale.ni.dll + 2007-12-16 19:27:14 245,760 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\9df61ec7aad39fe0bac82139cd84e5e5\PresentationFramework.Classic.ni.dll + 2007-12-16 19:24:18 2,035,712 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationUI\6d2716a55eb8ce6fc4cbf83f3ab329e3\PresentationUI.ni.dll + 2007-12-16 19:24:34 2,416,640 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\ReachFramework\840c64bba900a6ed333ca39e63a9ca3b\ReachFramework.ni.dll + 2007-12-16 19:18:30 163,840 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\c46625ea87db53ccf6194fe17ee05c19\System.Configuration.Install.ni.dll + 2007-12-16 19:14:43 1,011,712 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\eee9b48577689e92db5a7b5c5de98d9b\System.Configuration.ni.dll + 2007-12-16 19:27:06 1,183,744 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\1abdb47765d0696a2fc0a1095bac0249\System.Data.OracleClient.ni.dll + 2007-12-16 19:17:59 2,756,608 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\e59504af41afab5e04681af951d9b302\System.Data.SqlXml.ni.dll + 2007-12-16 19:25:12 7,049,216 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data\5f669e819da7010c1dca347a25597c42\System.Data.ni.dll + 2007-12-16 19:21:06 1,798,144 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Deployment\c7dea4895e1fa33d65e448c03de48d26\System.Deployment.ni.dll + 2007-12-16 19:26:59 10,969,088 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Design\c1e16b40e30a05c39be8aee46311841c\System.Design.ni.dll + 2007-12-16 19:24:45 1,224,704 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\914668b240550f529e54bb772c6fc881\System.DirectoryServices.ni.dll + 2007-12-16 19:27:09 512,000 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\f11bc82c09955cb8438d3885a99c297d\System.DirectoryServices.Protocols.ni.dll + 2007-12-16 19:27:00 229,376 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\b974f6c17d17a533adf6e7710c5a62fa\System.Drawing.Design.ni.dll + 2007-12-16 19:19:25 1,667,072 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\[u]0[/u]e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll + 2007-12-16 19:25:19 659,456 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\646131eda5f21f4e6216733d49c22c56\System.EnterpriseServices.ni.dll + 2007-12-16 19:25:19 294,912 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\646131eda5f21f4e6216733d49c22c56\System.EnterpriseServices.Wrapper.dll + 2007-12-16 19:24:40 1,134,592 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Printing\f94fbbe7d7c6e76d02cd9fb94ee8d910\System.Printing.ni.dll + 2007-12-16 19:25:23 815,104 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\[u]0[/u]898f6c1de8cb89413d206e3d6a3ce1d\System.Runtime.Remoting.ni.dll + 2007-12-16 19:18:42 339,968 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\1f5cf8178029f5b959a9af75cb8cfedb\System.Runtime.Serialization.Formatters.Soap.ni.dll + 2007-12-16 19:18:20 733,184 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Security\2b5994269cc5b996231c9b21afea9a91\System.Security.ni.dll + 2007-12-16 19:14:27 233,472 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\193ac978af569ad9ee45110b359961b9\System.ServiceProcess.ni.dll + 2007-12-16 19:25:16 679,936 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Transactions\12e0aa1030badf4524f897e3f57b037a\System.Transactions.ni.dll + 2007-12-16 19:27:07 237,568 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\b5b81faf46fc63c20d5339b36edd02fa\System.Web.RegularExpressions.ni.dll + 2007-12-16 19:26:20 1,986,560 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Services\38991368499e2109ea4099a0fe29c5a3\System.Web.Services.ni.dll + 2007-12-16 19:26:12 12,509,184 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\67cfb70213562afe2ca9b9066764af3a\System.Web.ni.dll + 2007-12-16 19:21:00 13,193,216 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll + 2007-12-16 19:16:32 5,771,264 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\c98cb65a79cfccb44ea727ebe4593ede\System.Xml.ni.dll + 2007-12-16 19:14:07 8,265,728 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll + 2007-12-16 19:22:34 50,688 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\9e249f5c0ef3e391c5aec1f9da805519\UIAutomationProvider.ni.dll + 2007-12-16 19:22:35 196,608 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\46e3ec015dd7b25d5ddc185534458122\UIAutomationTypes.ni.dll + 2007-12-16 19:21:24 3,395,584 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\WindowsBase\[u]0[/u]703021437c2ec71213a6b701771be86\WindowsBase.ni.dll + 2007-12-16 17:19:44 118,784 ----a-w C:\WINDOWS\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_995602d6\CustomMarshalers.dll + 2007-12-16 17:02:31 61,440 ----a-w C:\WINDOWS\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_e26853e3\CustomMarshalers.dll + 2007-12-16 17:20:12 8,908,800 ----a-w C:\WINDOWS\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_c8ea4d52\mscorlib.dll + 2007-12-16 17:19:28 3,391,488 ----a-w C:\WINDOWS\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_fd7b0b31\mscorlib.dll + 2007-12-16 17:19:17 1,470,464 ----a-w C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_cd7f1d04\System.Design.dll + 2007-12-16 17:20:03 3,395,584 ----a-w C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_ce430ee4\System.Design.dll + 2007-12-16 17:18:24 90,112 ----a-w C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_0652f68c\System.Drawing.Design.dll + 2007-12-16 17:19:45 192,512 ----a-w C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_d400cc71\System.Drawing.Design.dll + 2007-12-16 17:19:23 835,584 ----a-w C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_536ae4e9\System.Drawing.dll + 2007-12-16 17:20:07 2,244,608 ----a-w C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_fb4732b5\System.Drawing.dll + 2007-12-16 17:18:47 3,018,752 ----a-w C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_02b871a7\System.Windows.Forms.dll + 2007-12-16 17:19:54 7,884,800 ----a-w C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_055dfc8f\System.Windows.Forms.dll + 2007-12-16 17:19:03 2,088,960 ----a-w C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_8ebf40cd\System.Xml.dll + 2007-12-16 17:19:59 5,513,216 ----a-w C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_e9c7ab28\System.Xml.dll + 2007-12-16 17:02:28 1,966,080 ----a-w C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_5864f347\System.dll + 2007-12-16 17:19:42 4,788,224 ----a-w C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_7b658e5e\System.dll + 2007-03-06 01:22:41 213,216 -c----w C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe + 2007-03-06 01:23:51 371,424 -c----w C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\updspapi.dll + 2007-08-13 17:54:10 765,952 -c----w C:\WINDOWS\ie7updates\KB938127-IE7\vgx.dll + 2006-10-26 18:49:48 1,011,488 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109010090400000000000F01FEC\12.0.4518\MSDAIPP.DLL + 2006-10-26 18:49:46 970,528 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109010090400000000000F01FEC\12.0.4518\MSONSEXT.DLL + 2006-10-27 14:00:10 576,376 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\ACACEDAO.DLL + 2006-10-26 20:18:12 162,616 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\ACCWIZ.DLL + 2006-10-27 14:00:12 1,751,904 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\ACECORE.DLL + 2006-10-27 14:00:10 576,376 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\ACEDAO.DLL + 2006-10-27 14:00:06 47,976 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\ACEERR.DLL + 2006-10-27 14:00:08 191,360 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\ACEES.DLL + 2006-10-26 19:13:34 338,800 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\ACEEXCH.DLL + 2006-10-26 19:13:44 629,616 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\ACEEXCL.DLL + 2006-10-26 19:13:28 207,736 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\ACELTS.DLL + 2006-10-26 19:13:32 279,352 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\ACEODBC.DLL + 2006-10-26 19:13:08 15,160 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\ACEODDBS.DLL + 2006-10-26 19:13:08 15,160 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\ACEODEXL.DLL + 2006-10-26 19:13:08 15,160 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\ACEODPDX.DLL + 2006-10-26 19:13:12 15,160 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\ACEODTXT.DLL + 2006-10-27 14:00:06 387,960 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\ACEOLEDB.DLL + 2006-10-26 19:13:38 392,048 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\ACEPDE.DLL + 2006-10-26 19:13:30 260,976 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\ACER2X.DLL + 2006-10-26 19:13:32 289,648 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\ACER3X.DLL + 2006-10-26 19:13:20 56,120 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\ACERCLR.DLL + 2006-10-26 19:13:38 551,800 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\ACEREP.DLL + 2006-10-26 19:13:30 224,104 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\ACETXT.DLL + 2006-10-27 14:40:34 208,760 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\ACEWSS.DLL + 2006-10-26 19:13:34 371,568 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\ACEXBE.DLL + 2006-10-27 14:41:04 399,640 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\CDLMSO.DLL + 2006-10-26 18:59:24 205,616 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\CLVIEW.EXE + 2006-10-26 20:30:42 65,312 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\COLLIMP.DLL + 2006-10-27 14:16:36 133,936 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\CONTAB32.DLL + 2006-10-26 19:12:52 189,760 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\CONTACTPICKER.DLL + 2006-10-26 19:55:32 87,344 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\DLGSETP.DLL + 2006-10-26 23:48:08 234,784 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\DRAT.EXE + 2006-10-26 18:48:14 439,568 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\DWDCW20.DLL + 2006-10-26 13:10:08 1,190,688 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\FM20.DLL + 2006-10-26 13:04:58 75,576 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\FORM.DLL + 2006-10-26 18:21:24 1,682,232 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\FPSRVUTL.DLL + 2006-10-27 14:09:36 983,376 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\FPWEC.DLL + 2006-10-26 19:02:12 2,526,520 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\GRAPH.EXE + 2006-10-27 14:37:44 338,216 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\GROOVE.EXE + 2006-10-27 14:38:02 6,191,400 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\GROOVEACCOUNTMGR.DLL + 2006-10-27 14:37:44 284,448 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\GROOVEAUDIO.DLL + 2006-10-26 23:47:54 65,824 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\GROOVEAUDITSERVICE.EXE + 2006-10-27 14:37:40 34,088 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\GROOVEAUTOPROXY.DLL + 2006-10-27 14:37:44 300,336 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\GROOVECALENDARTOOL.DLL + 2006-10-26 23:47:44 33,568 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\GROOVECLEAN.EXE + 2006-10-27 14:37:56 2,689,336 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\GROOVECOMMONCOMPONENTS.DLL + 2006-10-27 14:38:00 3,508,544 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\GROOVECOMMUNICATIONSSERVICES.DLL + 2006-10-27 14:37:40 117,584 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\GROOVECOMMUNICATIONSSTATUSANDCONTROL.DLL + 2006-10-27 14:37:50 768,304 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\GROOVECOMPONENTMGR.DLL + 2006-10-27 14:37:52 1,359,648 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\GROOVECRYPTO.DLL + 2006-10-26 23:48:24 377,136 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\GROOVEDATAVIEWERTOOL.DLL + 2006-10-27 14:37:58 3,071,288 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\GROOVEDOCUMENTSHARETOOL.DLL + 2006-10-27 14:37:44 284,976 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\GROOVEFETCHSERVICES.DLL + 2006-10-26 23:48:00 197,920 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\GROOVEGAMES.DLL + 2006-10-26 23:48:18 317,736 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\GROOVEMIGRATOR.EXE + 2006-10-26 23:48:40 1,555,232 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\GROOVEMISC.DLL + 2006-10-26 23:47:42 31,016 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\GROOVEMONITOR.EXE + 2006-10-26 23:47:40 22,808 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\GROOVENEW.DLL + 2006-10-26 23:48:02 224,048 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\GROOVEPROJECTTOOLSET.DLL + 2006-10-27 14:38:04 7,053,096 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\GROOVERESOURCE.DLL + 2006-10-26 23:48:42 2,210,608 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\GROOVESHELLEXTENSIONS.DLL + 2006-10-26 23:48:18 363,304 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\GROOVESKETCHTOOL.DLL + 2006-10-26 23:47:40 16,688 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\GROOVESTDURLLAUNCHER.EXE + 2006-10-27 14:37:56 2,738,472 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\GROOVESTORAGEMGR.DLL + 2006-10-27 14:37:38 35,112 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\GROOVESYSTEMMODE.DLL + 2006-10-26 23:48:02 222,512 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\GROOVESYSTEMSERVICES.DLL + 2006-10-27 14:37:50 1,163,048 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\GROOVETEXTTOOLS.DLL + 2006-10-27 14:38:00 4,746,536 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\GROOVETRANSCEIVER.DLL + 2006-10-27 14:37:54 1,396,008 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\GROOVEUIFRAMEWORK.DLL + 2006-10-26 23:48:34 955,680 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\GROOVEUTIL.DLL + 2006-10-27 14:37:40 268,080 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\GROOVEWEBBROWSERTOOL2.DLL + 2006-10-26 23:48:26 572,216 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\GROOVEWEBPLATFORMSERVICES.DLL + 2006-10-27 14:37:48 631,080 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\GROOVEWEBSERVICES.DLL + 2006-10-26 19:12:52 173,328 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\IEAWSDC.DLL + 2006-10-27 14:10:08 1,439,032 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\INFOPATH.EXE + 2006-10-27 14:10:10 5,456,704 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\IPDESIGN.DLL + 2006-10-27 14:10:10 5,281,592 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\IPEDITOR.DLL + 2006-10-26 20:42:00 176,976 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\IPOLK.DLL + 2006-10-26 18:55:10 828,704 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\MEDCAT.DLL + 2006-10-26 19:55:48 340,248 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\MIMEDIR.DLL + 2006-10-27 14:04:08 497,504 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\MORPH9.DLL + 2006-10-27 14:01:34 10,371,880 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\MSACCESS.EXE + 2006-10-26 20:18:06 66,880 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\MSAEXP30.DLL + 2006-10-26 12:58:14 117,552 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\MSCONV97.DLL + 2006-10-27 13:59:06 161,080 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\MSOCF.DLL + 2006-10-26 18:48:12 14,664 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\MSOCFU.DLL + 2006-10-26 19:12:58 428,816 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\MSODCW.DLL + 2006-10-26 20:13:36 26,936 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\MSOEURO.DLL + 2006-10-26 19:00:08 6,635,320 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\MSORES.DLL + 2006-10-26 12:56:36 436,520 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\MSORUN.DLL + 2006-10-26 18:50:04 672,024 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\MSQRY32.EXE + 2006-10-26 12:56:40 505,136 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\MSSOAP30.DLL + 2006-10-26 18:55:12 832,800 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\MSTORDB.EXE + 2006-10-26 18:55:06 538,904 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\MSTORES.DLL + 2006-10-26 19:12:30 65,824 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\NAME.DLL + 2006-10-27 14:14:34 14,151,456 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\OART.DLL + 2006-10-26 19:06:54 232,816 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\ODEPLOY.EXE + 2006-10-26 19:14:06 7,033,152 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\OFFOWC.DLL + 2006-10-27 14:18:36 1,658,152 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\OGL.DLL + 2006-10-26 19:00:08 274,744 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\OIS.EXE + 2006-10-26 19:00:12 998,208 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\OISAPP.DLL + 2006-10-26 19:00:10 285,008 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\OISGRAPH.DLL + 2006-10-26 19:34:12 660,792 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\OMSMAIN.DLL + 2006-10-26 19:34:10 192,848 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\OMSXP32.DLL + 2006-10-26 19:32:42 604,000 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\ONBTTNIE.DLL + 2006-10-27 14:39:36 687,432 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\ONBTTNOL.DLL + 2006-10-27 14:03:04 1,018,664 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\ONENOTE.EXE + 2006-10-26 19:24:54 98,632 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\ONENOTEM.EXE + 2006-10-26 19:24:50 72,504 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\ONFILTER.DLL + 2006-10-26 19:24:58 1,165,112 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\ONLIBS.DLL + 2006-10-27 14:03:06 6,579,512 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\ONMAIN.DLL + 2006-10-26 19:23:00 782,720 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\ONSYNCPC.DLL + 2006-10-26 19:07:04 6,536,992 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\OSETUP.DLL + 2006-07-26 17:53:56 459,080 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\OUTLFLTR.DLL + 2006-10-27 14:16:44 594,256 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\OUTLMIME.DLL + 2006-10-27 14:16:40 176,976 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\OUTLPH.DLL + 2006-10-26 20:30:44 482,088 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\PORTCONN.DLL + 2006-10-27 14:04:06 465,200 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\POWERPNT.EXE + 2006-10-27 14:04:06 7,980,848 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\PPCORE.DLL + 2006-10-26 18:52:10 2,012,480 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\PPTVIEW.EXE + 2006-10-26 19:09:36 136,008 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\PRTF9.DLL + 2006-10-26 13:05:00 77,144 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\PSOM.DLL + 2006-10-26 19:55:54 413,472 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\PSTPRX32.DLL + 2006-10-27 14:04:06 624,456 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\PTXT9.DLL + 2006-10-26 20:13:38 38,168 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\REFEDIT.DLL + 2006-10-26 20:42:12 744,808 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\REGFORM.EXE + 2006-10-26 13:04:44 19,784 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\REVERSE.DLL + 2006-10-26 19:13:00 503,624 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\SELFCERT.EXE + 2006-10-26 19:06:58 439,600 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\SETUP.EXE + 2006-10-26 20:18:16 502,608 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\SOA.DLL + 2006-07-28 14:21:58 277,320 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\SSGEN.DLL + 2006-10-27 13:57:08 2,330,968 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\STSLIST.DLL + 2006-10-26 13:04:48 29,976 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\THOCRAPI.DLL + 2006-10-26 13:05:04 126,784 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\TWCUTCHR.DLL + 2006-10-26 13:05:02 86,840 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\TWCUTLIN.DLL + 2006-10-26 13:04:56 58,168 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\TWLAY32.DLL + 2006-10-26 13:04:48 27,456 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\TWORIENT.DLL + 2006-10-26 13:04:54 51,008 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\TWRECE.DLL + 2006-10-26 13:04:44 19,784 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\TWRECS.DLL + 2006-10-26 13:04:58 76,624 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\TWSTRUCT.DLL + 2006-09-29 23:42:56 2,583,344 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\VBE6.DLL + 2006-10-26 22:00:12 1,841,984 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\VVIEWDWG.DLL + 2006-10-26 21:58:38 3,732,792 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\VVIEWER.DLL + 2006-10-27 14:23:04 347,432 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\WINWORD.EXE + 2006-10-26 13:05:08 1,181,520 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\XIMAGE3B.DLL + 2006-10-26 20:17:08 11,072 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\XLCALL32.DLL + 2006-10-26 13:05:08 530,760 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\XPAGE3C.DLL - 2007-12-12 17:51:13 1,165,584 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\accicons.exe + 2007-12-16 19:13:46 1,165,584 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\accicons.exe - 2007-12-12 17:51:13 20,240 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe + 2007-12-16 19:13:47 20,240 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe - 2007-12-12 17:51:13 159,504 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\inficon.exe + 2007-12-16 19:13:47 159,504 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\inficon.exe - 2007-12-12 17:51:13 184,080 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\joticon.exe + 2007-12-16 19:13:47 184,080 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\joticon.exe - 2007-12-12 17:51:13 217,864 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe + 2007-12-16 19:13:47 217,864 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe - 2007-12-12 17:51:13 18,704 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\mspicons.exe + 2007-12-16 19:13:48 18,704 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\mspicons.exe - 2007-12-12 17:51:14 35,088 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe + 2007-12-16 19:13:48 35,088 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe - 2007-12-12 17:51:13 845,584 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe + 2007-12-16 19:13:47 845,584 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe - 2007-12-12 17:51:13 922,384 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pptico.exe + 2007-12-16 19:13:47 922,384 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pptico.exe - 2007-12-12 17:51:13 272,648 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pubs.exe + 2007-12-16 19:13:47 272,648 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pubs.exe - 2007-12-12 17:51:13 888,080 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe + 2007-12-16 19:13:48 888,080 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe - 2007-12-12 17:51:13 1,172,240 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe + 2007-12-16 19:13:47 1,172,240 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe - 2007-11-22 16:51:45 217,864 ----a-r C:\WINDOWS\Installer\{90120000-006E-0406-0000-0000000FF1CE}\misc.exe + 2007-12-16 19:16:58 217,864 ----a-r C:\WINDOWS\Installer\{90120000-006E-0406-0000-0000000FF1CE}\misc.exe - 2007-11-22 16:36:29 217,864 ----a-r C:\WINDOWS\Installer\{90120000-006E-0409-0000-0000000FF1CE}\misc.exe + 2007-12-16 19:16:34 217,864 ----a-r C:\WINDOWS\Installer\{90120000-006E-0409-0000-0000000FF1CE}\misc.exe - 2005-09-23 06:28:52 72,704 ----a-w C:\WINDOWS\Microsoft.NET\Framework\NETFXSBS10.exe + 2007-10-24 00:47:38 82,944 ----a-w C:\WINDOWS\Microsoft.NET\Framework\NETFXSBS10.exe - 2005-09-23 06:28:52 7,680 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbscmp10.dll + 2007-10-24 00:47:38 16,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbscmp10.dll - 2005-09-23 06:28:56 7,680 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbscmp20_mscorwks.dll + 2007-10-24 00:47:40 16,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbscmp20_mscorwks.dll - 2005-09-23 06:28:58 7,680 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbscmp20_perfcounter.dll + 2007-10-24 00:47:42 16,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbscmp20_perfcounter.dll - 2005-09-23 06:28:56 7,680 ----a-w C:\WINDOWS\Microsoft.NET\Framework\SharedReg12.dll + 2007-10-24 00:47:40 16,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\SharedReg12.dll - 2005-09-23 06:28:52 86,528 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll + 2007-10-24 00:47:38 97,280 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll - 2004-07-15 00:49:16 258,048 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll + 2007-04-13 20:30:52 258,048 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll - 2004-07-15 00:49:22 32,768 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe + 2007-04-13 20:30:52 32,768 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe - 2004-07-14 23:32:22 81,920 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll + 2007-04-13 19:57:52 81,920 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll - 2003-02-20 18:09:14 86,016 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorie.dll + 2007-04-13 19:57:58 86,016 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorie.dll - 2004-07-14 23:25:06 315,392 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll + 2007-04-13 19:56:30 315,392 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll - 2004-07-14 23:33:04 102,400 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorld.dll + 2007-04-13 19:58:00 102,400 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorld.dll - 2004-07-15 13:29:02 2,138,112 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll + 2007-04-13 19:50:46 2,142,208 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll - 2003-02-20 18:09:18 77,824 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll + 2007-04-13 19:58:02 77,824 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll - 2004-07-14 23:26:52 2,510,848 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll + 2007-04-13 19:57:00 2,523,136 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll - 2004-07-14 23:28:34 2,502,656 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll + 2007-04-13 19:57:28 2,514,944 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll - 2004-08-10 15:20:00 106,496 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\netfxupdate.exe + 2007-01-15 15:11:26 73,728 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\netfxupdate.exe + 2004-07-15 00:49:16 258,048 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3208\_aspnet_isapi.dll + 2004-07-14 23:32:22 81,920 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3208\_CORPerfMonExt.dll + 2004-07-14 23:24:30 282,624 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3208\_fusion.dll + 2004-07-14 23:25:06 315,392 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3208\_mscorjit.dll + 2004-07-15 13:29:02 2,138,112 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3208\_mscorlib.dll + 2003-02-20 18:09:18 77,824 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3208\_mscorsn.dll + 2004-07-14 23:26:52 2,510,848 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3208\_mscorsvr.dll + 2004-07-14 23:28:34 2,502,656 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3208\_mscorwks.dll + 2003-02-21 03:42:22 348,160 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3208\_msvcr71.dll + 2004-07-14 23:34:50 94,208 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3208\_PerfCounter.dll - 2004-07-15 13:31:16 1,224,704 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.dll + 2007-04-13 20:35:38 1,232,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.dll - 2004-07-15 13:29:00 1,257,472 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Web.dll + 2007-04-13 20:35:46 1,265,664 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Web.dll - 2005-09-23 06:28:36 18,944 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll + 2007-10-24 00:47:26 28,672 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll - 2005-09-23 06:28:42 136,192 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll + 2007-10-24 00:47:30 145,408 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll - 2005-09-23 06:28:44 4,608 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll + 2007-10-24 00:47:32 13,824 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll - 2005-09-23 06:29:04 183,808 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll + 2007-10-24 00:47:48 193,016 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll - 2005-09-23 06:28:28 208,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll + 2007-10-24 00:47:20 218,112 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll - 2005-09-23 06:28:56 10,752 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll + 2007-10-24 00:47:40 10,752 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll - 2005-09-23 06:28:58 138,240 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll + 2007-10-24 00:47:42 147,968 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll - 2005-09-23 06:28:36 87,552 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\alink.dll + 2007-10-24 00:47:26 99,320 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\alink.dll - 2007-04-13 02:21:18 58,712 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe + 2007-10-24 00:47:42 59,392 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe - 2005-09-23 06:28:32 36,864 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe + 2007-10-24 00:47:22 36,864 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe - 2007-04-13 02:20:52 10,752 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll + 2007-10-24 00:47:22 22,024 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll - 2007-04-13 02:20:52 8,192 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll + 2007-10-24 00:47:22 17,928 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll - 2007-04-13 02:20:52 23,552 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll + 2007-10-24 00:47:22 33,288 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll - 2007-04-13 02:20:50 75,264 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll + 2007-10-24 00:47:22 84,480 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll - 2005-09-23 06:28:32 13,824 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe + 2007-10-24 00:47:22 24,576 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe - 2007-04-13 02:20:52 32,608 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe + 2007-10-24 00:47:22 32,776 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe - 2005-09-23 06:28:32 106,496 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe + 2007-10-24 00:47:22 106,496 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe - 2007-04-13 02:20:52 33,632 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe + 2007-10-24 00:47:22 33,800 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe - 2007-04-13 02:20:52 32,600 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe + 2007-10-24 00:47:22 33,280 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe - 2007-04-13 02:20:52 507,904 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll + 2007-10-24 00:47:22 507,904 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll - 2005-09-23 06:28:56 106,496 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CasPol.exe + 2007-10-24 00:47:40 106,496 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CasPol.exe - 2007-04-13 02:21:16 88,576 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll + 2007-10-24 00:47:40 101,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll - 2005-09-23 06:28:42 76,984 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\csc.exe + 2007-10-24 00:47:30 80,376 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\csc.exe - 2005-09-23 06:28:42 1,144,832 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cscomp.dll + 2007-10-24 00:47:30 1,162,744 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cscomp.dll - 2005-09-23 06:28:42 13,312 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll + 2007-10-24 00:47:30 13,312 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll - 2005-09-23 06:28:58 17,920 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Culture.dll + 2007-10-24 00:47:42 27,136 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Culture.dll - 2005-09-23 06:28:56 68,608 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll + 2007-10-24 00:47:40 69,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll - 2005-09-23 06:28:44 31,936 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cvtres.exe + 2007-10-24 00:47:30 35,320 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cvtres.exe - 2005-09-23 06:28:38 52,736 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfdll.dll + 2007-10-24 00:47:28 66,552 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfdll.dll - 2007-04-13 02:20:58 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe + 2007-10-24 00:47:28 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe - 2005-09-23 06:29:12 547,840 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll + 2007-10-24 00:47:54 572,936 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll - 2005-09-23 06:28:56 788,992 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll + 2007-10-24 00:47:40 798,224 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll - 2005-09-23 06:28:50 9,216 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fusion.dll + 2007-10-24 00:47:36 18,936 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fusion.dll - 2007-04-13 02:21:16 9,728 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEExec.exe + 2007-10-24 00:47:40 9,728 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEExec.exe - 2005-09-23 06:28:56 8,192 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll + 2007-10-24 00:47:40 8,192 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll - 2005-09-23 06:28:56 36,864 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEHost.dll + 2007-10-24 00:47:40 77,824 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEHost.dll - 2005-09-23 06:28:56 5,632 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll + 2007-10-24 00:47:40 6,656 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll - 2007-04-13 02:21:16 228,688 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ilasm.exe + 2007-10-24 00:47:40 230,904 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ilasm.exe - 2007-04-13 02:21:16 28,672 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe + 2007-10-24 00:47:40 28,672 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe - 2005-09-23 06:28:56 55,296 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll + 2007-10-24 00:47:40 65,032 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll - 2005-09-23 06:28:56 72,192 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll + 2007-10-24 00:47:40 72,192 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll - 2005-09-23 06:28:48 40,960 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\jsc.exe + 2007-10-24 00:47:34 40,960 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\jsc.exe - 2007-04-13 02:21:10 413,696 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll + 2007-10-24 00:47:36 348,160 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll - 2005-09-23 06:28:48 36,864 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll + 2007-10-24 00:47:36 36,864 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll - 2007-04-13 02:21:10 647,168 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll + 2007-10-24 00:47:36 655,360 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll - 2005-09-23 06:28:48 73,728 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll + 2007-10-24 00:47:36 77,824 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll - 2007-04-13 02:21:08 749,568 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll + 2007-10-24 00:47:34 749,568 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll - 2005-09-23 06:29:10 110,592 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll + 2007-10-24 00:47:52 110,592 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll - 2005-09-23 06:29:10 372,736 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll + 2007-10-24 00:47:52 372,736 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll - 2005-09-23 06:29:08 667,648 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll + 2007-10-24 00:47:50 671,744 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll - 2005-09-23 06:28:30 28,672 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll + 2007-10-24 00:47:20 28,672 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll - 2005-09-23 06:29:10 5,632 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll + 2007-10-24 00:47:52 5,632 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll - 2005-09-23 06:28:30 32,768 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll + 2007-10-24 00:47:20 32,768 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll - 2005-09-23 06:28:30 12,800 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll + 2007-10-24 00:47:20 12,800 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll - 2005-09-23 06:28:30 7,168 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll + 2007-10-24 00:47:20 7,168 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll - 2007-04-13 02:20:52 87,040 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll + 2007-10-24 00:47:22 97,792 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll - 2005-09-23 06:28:48 69,632 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe + 2007-10-24 00:47:36 69,632 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe - 2007-04-13 02:21:18 802,304 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll + 2007-10-24 00:47:40 822,280 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll - 2005-09-23 06:28:56 73,216 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll + 2007-10-24 00:47:40 83,456 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll - 2005-09-23 06:28:56 288,768 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll + 2007-10-24 00:47:40 308,224 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll - 2007-04-13 02:21:16 36,864 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorie.dll + 2007-10-24 00:47:40 47,104 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorie.dll - 2007-04-13 02:21:16 326,656 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll + 2007-10-24 00:47:40 348,672 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll - 2005-09-23 06:28:56 81,408 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorld.dll + 2007-10-24 00:47:40 94,208 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorld.dll - 2007-04-13 02:21:16 4,308,992 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll + 2007-10-24 00:47:40 4,444,160 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll - 2007-04-13 02:21:16 102,912 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll + 2007-10-24 00:47:40 114,688 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll - 2005-09-23 06:29:00 330,752 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll + 2007-10-24 00:47:44 340,992 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll - 2005-09-23 06:28:56 67,072 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll + 2007-10-24 00:47:40 77,312 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll - 2005-09-23 06:28:50 9,216 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll + 2007-10-24 00:47:36 18,944 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll - 2007-04-13 02:21:18 227,328 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll + 2007-10-24 00:47:40 242,688 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll - 2007-04-13 02:21:18 68,952 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe + 2007-10-24 00:47:40 70,144 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe - 2005-09-23 06:28:56 10,240 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscortim.dll + 2007-10-24 00:47:40 19,456 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscortim.dll - 2007-04-13 02:21:12 5,634,048 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll + 2007-10-24 00:47:36 5,814,784 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll - 2005-09-23 06:29:00 22,528 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MUI\[u]0[/u]409\mscorsecr.dll + 2007-10-24 00:47:44 31,744 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MUI\[u]0[/u]409\mscorsecr.dll - 2007-04-13 02:21:16 99,152 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ngen.exe + 2007-10-24 00:47:40 101,880 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ngen.exe - 2007-04-13 02:21:18 15,360 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\normalization.dll + 2007-10-24 00:47:40 24,584 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\normalization.dll - 2005-09-23 06:28:56 78,336 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll + 2007-10-24 00:47:40 89,096 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll - 2007-04-13 02:21:12 136,192 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\peverify.dll + 2007-10-24 00:47:36 144,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\peverify.dll - 2005-09-23 06:28:56 53,248 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe + 2007-10-24 00:47:40 53,248 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe - 2005-09-23 06:28:56 32,768 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe + 2007-10-24 00:47:40 32,768 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe - 2005-09-23 06:29:02 59,072 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe + 2007-10-24 00:47:46 61,952 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe - 2005-09-23 06:28:58 7,680 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll + 2007-10-24 00:47:42 16,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll - 2005-09-23 06:28:56 107,520 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\shfusion.dll + 2007-10-24 00:47:40 119,296 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\shfusion.dll - 2005-09-23 06:29:00 85,504 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll + 2007-10-24 00:47:44 95,232 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll - 2007-04-13 02:21:18 382,464 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\SOS.dll + 2007-10-24 00:47:40 392,696 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\SOS.dll - 2007-04-13 02:21:18 110,592 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll + 2007-10-24 00:47:40 110,592 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll - 2007-04-13 02:21:18 413,696 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll + 2007-10-24 00:47:42 425,984 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll - 2005-09-23 06:28:56 81,920 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll + 2007-10-24 00:47:40 81,920 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll - 2007-04-13 02:21:16 2,902,016 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.dll + 2007-10-24 00:47:40 3,036,160 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.dll - 2007-04-13 02:21:18 482,304 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll + 2007-10-24 00:47:40 483,840 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll - 2007-04-13 02:21:18 716,800 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll + 2007-10-24 00:47:40 741,376 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll - 2007-04-13 02:20:58 888,832 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll + 2007-10-24 00:47:28 933,888 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll - 2007-04-13 02:21:16 5,001,216 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Design.dll + 2007-10-24 00:47:40 5,070,848 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Design.dll - 2005-09-23 06:28:56 397,312 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll + 2007-10-24 00:47:40 401,408 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll - 2007-04-13 02:21:18 188,416 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll + 2007-10-24 00:47:40 188,416 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll - 2007-04-13 02:21:16 2,940,928 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.dll + 2007-10-24 00:47:40 3,076,096 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.dll - 2005-09-23 06:28:56 81,920 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll + 2007-10-24 00:47:40 81,920 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll - 2007-04-13 02:21:16 577,536 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll + 2007-10-24 00:47:40 630,784 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll - 2007-04-13 02:21:16 258,048 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll + 2007-10-24 00:47:40 258,048 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll - 2007-04-13 02:21:18 47,616 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll + 2007-10-24 00:47:40 57,392 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll - 2007-04-13 02:21:18 114,176 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll + 2007-10-24 00:47:40 113,664 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll - 2007-04-13 02:21:16 372,736 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Management.dll + 2007-10-24 00:47:40 372,736 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Management.dll - 2005-09-23 06:28:56 258,048 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll + 2007-10-24 00:47:40 258,048 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll - 2007-04-13 02:21:16 299,008 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll + 2007-10-24 00:47:40 299,008 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll - 2005-09-23 06:28:56 131,072 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll + 2007-10-24 00:47:40 131,072 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll - 2005-09-23 06:28:56 258,048 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Security.dll + 2007-10-24 00:47:40 258,048 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Security.dll - 2005-09-23 06:28:56 114,688 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll + 2007-10-24 00:47:40 114,688 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll - 2007-04-13 02:21:18 260,096 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll + 2007-10-24 00:47:40 261,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll - 2007-04-13 02:21:16 5,156,864 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.dll + 2007-10-24 00:47:40 5,431,296 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.dll - 2005-09-23 06:28:56 835,584 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll + 2007-10-24 00:47:40 884,736 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll - 2005-09-23 06:28:56 86,016 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll + 2007-10-24 00:47:40 90,112 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll - 2005-09-23 06:28:56 823,296 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll + 2007-10-24 00:47:40 839,680 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll - 2007-04-13 02:21:16 5,152,768 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll + 2007-10-24 00:47:40 5,013,504 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll - 2007-04-13 02:21:16 2,027,520 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.XML.dll + 2007-10-24 00:47:40 2,068,480 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.XML.dll - 2005-09-23 06:28:56 71,680 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL + 2007-10-24 00:47:40 81,400 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL - 2007-04-13 02:21:28 1,166,672 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\vbc.exe + 2007-10-24 00:47:48 1,172,472 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\vbc.exe - 2007-04-13 02:20:50 1,330,688 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll + 2007-10-24 00:47:20 1,344,000 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll - 2007-04-13 02:20:52 406,016 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\webengine.dll + 2007-10-24 00:47:22 434,688 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\webengine.dll - 2005-09-23 06:28:56 28,160 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll + 2007-10-24 00:47:40 37,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll - 2006-10-30 02:34:02 159,744 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ComSvcConfig.exe + 2007-10-11 08:55:14 159,744 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ComSvcConfig.exe - 2006-10-30 02:33:58 741,376 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe + 2007-10-11 08:55:10 864,256 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe - 2006-10-30 02:34:00 352,256 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\Microsoft.Transactions.Bridge.dll + 2007-10-11 08:55:12 397,312 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\Microsoft.Transactions.Bridge.dll - 2006-10-30 02:34:00 151,552 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\Microsoft.Transactions.Bridge.Dtc.dll + 2007-10-11 08:55:12 151,552 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\Microsoft.Transactions.Bridge.Dtc.dll - 2006-10-30 02:34:02 61,440 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelReg.exe + 2007-10-11 08:55:14 61,440 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelReg.exe - 2006-10-30 02:34:02 11,264 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceMonikerSupport.dll + 2007-10-11 08:55:14 11,264 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceMonikerSupport.dll - 2006-10-30 02:34:00 94,208 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMDiagnostics.dll + 2007-10-11 08:55:14 102,400 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMDiagnostics.dll - 2006-10-30 02:34:02 122,880 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe + 2007-10-11 08:55:14 122,880 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe - 2006-10-30 02:34:02 884,736 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll + 2007-10-11 08:55:14 929,792 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll - 2006-10-30 02:34:02 5,623,808 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.dll + 2007-10-11 08:55:14 5,971,968 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.dll - 2006-10-30 02:34:00 159,744 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.Install.dll + 2007-10-11 08:55:14 159,744 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.Install.dll - 2006-10-30 02:34:00 16,384 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll + 2007-10-11 08:55:14 32,768 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll - 2006-10-30 02:34:02 143,360 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\WsatConfig.exe + 2007-10-11 08:55:14 143,360 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\WsatConfig.exe - 2006-07-25 20:32:00 14,648 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\PerformanceCounterInstaller.exe + 2007-10-06 02:18:12 16,936 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\PerformanceCounterInstaller.exe - 2006-10-20 20:29:46 72,992 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PenIMC.dll + 2007-10-09 12:03:00 76,312 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PenIMC.dll - 2006-10-20 20:21:24 32,768 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationCFFRasterizer.dll + 2007-10-09 11:58:12 32,768 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationCFFRasterizer.dll - 2006-10-20 20:21:24 36,864 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe + 2007-10-09 11:58:12 36,864 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe - 2006-10-20 20:29:52 106,272 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationHostDLL.dll + 2007-10-09 12:03:08 121,368 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationHostDLL.dll - 2006-10-20 20:21:26 897,024 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationUI.dll + 2007-10-09 11:58:14 897,024 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationUI.dll - 2006-10-20 20:21:26 14,848 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\XamlViewer\XamlViewer_v0300.exe + 2007-10-09 11:58:20 14,848 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\XamlViewer\XamlViewer_v0300.exe - 2006-10-14 15:43:18 27,648 -c----w C:\WINDOWS\system32\dllcache\FilterPipelinePrintProc.dll + 2007-03-22 19:24:58 28,160 -c----w C:\WINDOWS\system32\dllcache\FilterPipelinePrintProc.dll - 2004-08-04 12:00:00 123,904 -c----w C:\WINDOWS\system32\dllcache\guitrn.dll + 2005-04-28 19:16:29 133,120 -c--a-w C:\WINDOWS\system32\dllcache\guitrn.dll - 2004-08-04 12:00:00 19,968 -c----w C:\WINDOWS\system32\dllcache\log.dll + 2005-04-28 19:16:29 19,968 -c--a-w C:\WINDOWS\system32\dllcache\log.dll - 2004-08-04 12:00:00 201,216 -c----w C:\WINDOWS\system32\dllcache\migism.dll + 2005-04-28 19:16:29 274,432 -c--a-w C:\WINDOWS\system32\dllcache\migism.dll - 2004-08-04 12:00:00 103,424 -c----w C:\WINDOWS\system32\dllcache\migload.exe + 2005-04-28 00:12:58 103,424 -c--a-w C:\WINDOWS\system32\dllcache\migload.exe - 2004-08-04 12:00:00 240,128 -c----w C:\WINDOWS\system32\dllcache\migwiz.exe + 2005-04-28 00:12:57 245,248 -c--a-w C:\WINDOWS\system32\dllcache\migwiz.exe - 2004-08-04 12:00:00 116,224 -c----w C:\WINDOWS\system32\dllcache\p2p.dll + 2006-10-11 16:24:45 153,088 -c--a-w C:\WINDOWS\system32\dllcache\p2p.dll - 2004-08-04 12:00:00 86,016 -c----w C:\WINDOWS\system32\dllcache\p2pgasvc.dll + 2006-10-11 16:24:45 104,960 -c--a-w C:\WINDOWS\system32\dllcache\p2pgasvc.dll - 2004-08-04 12:00:00 312,320 -c----w C:\WINDOWS\system32\dllcache\p2pgraph.dll + 2006-10-11 16:24:45 313,344 -c--a-w C:\WINDOWS\system32\dllcache\p2pgraph.dll - 2004-08-04 12:00:00 88,064 -c----w C:\WINDOWS\system32\dllcache\p2pnetsh.dll + 2006-10-11 16:24:45 116,224 -c--a-w C:\WINDOWS\system32\dllcache\p2pnetsh.dll - 2004-08-04 12:00:00 526,848 -c----w C:\WINDOWS\system32\dllcache\p2psvc.dll + 2006-10-11 16:24:45 553,984 -c--a-w C:\WINDOWS\system32\dllcache\p2psvc.dll - 2004-08-04 12:00:00 48,640 -c----w C:\WINDOWS\system32\dllcache\pnrpnsp.dll + 2006-10-11 16:24:45 58,880 -c--a-w C:\WINDOWS\system32\dllcache\pnrpnsp.dll - 2006-10-14 15:44:44 671,744 -c----w C:\WINDOWS\system32\dllcache\PrintFilterPipelineSvc.exe + 2007-03-22 19:25:42 677,376 -c----w C:\WINDOWS\system32\dllcache\PrintFilterPipelineSvc.exe - 2004-08-04 12:00:00 202,752 -c----w C:\WINDOWS\system32\dllcache\script.dll + 2005-04-28 19:16:29 215,552 -c--a-w C:\WINDOWS\system32\dllcache\script.dll - 2007-10-26 03:36:51 8,454,656 -c----w C:\WINDOWS\system32\dllcache\shell32.dll + 2007-10-26 03:34:01 8,460,288 -c--a-w C:\WINDOWS\system32\dllcache\shell32.dll - 2004-08-04 12:00:00 168,960 -c----w C:\WINDOWS\system32\dllcache\sysmod.dll + 2005-04-28 19:16:29 193,024 -c--a-w C:\WINDOWS\system32\dllcache\sysmod.dll - 2007-08-13 17:54:10 765,952 -c--a-w C:\WINDOWS\system32\dllcache\VGX.dll + 2007-07-12 23:31:54 765,952 -c--a-w C:\WINDOWS\system32\dllcache\vgx.dll - 2006-10-14 19:21:58 580,352 -c----w C:\WINDOWS\system32\dllcache\XPSSHHDR.dll + 2007-03-23 05:07:54 583,504 -c----w C:\WINDOWS\system32\dllcache\XPSSHHDR.dll - 2006-10-14 19:22:00 1,698,048 -c----w C:\WINDOWS\system32\dllcache\XpsSvcs.dll + 2007-03-23 05:07:56 1,683,280 -c----w C:\WINDOWS\system32\dllcache\XpsSvcs.dll - 2006-10-26 13:10:08 1,190,688 ----a-w C:\WINDOWS\system32\FM20.DLL + 2007-08-23 00:03:38 1,195,888 ----a-w C:\WINDOWS\system32\FM20.DLL - 2007-12-15 20:59:40 266,208 ----a-w C:\WINDOWS\system32\FNTCACHE.DAT + 2007-12-16 19:28:31 266,208 ----a-w C:\WINDOWS\system32\FNTCACHE.DAT - 2005-09-23 06:29:00 6,144 ----a-w C:\WINDOWS\system32\mui\[u]0[/u]409\mscorees.dll + 2007-10-24 00:47:44 15,360 ----a-w C:\WINDOWS\system32\mui\[u]0[/u]409\mscorees.dll - 2004-08-04 12:00:00 116,224 ------w C:\WINDOWS\system32\p2p.dll + 2006-10-11 16:24:45 153,088 ----a-w C:\WINDOWS\system32\p2p.dll - 2004-08-04 12:00:00 86,016 ------w C:\WINDOWS\system32\p2pgasvc.dll + 2006-10-11 16:24:45 104,960 ----a-w C:\WINDOWS\system32\p2pgasvc.dll - 2004-08-04 12:00:00 312,320 ------w C:\WINDOWS\system32\p2pgraph.dll + 2006-10-11 16:24:45 313,344 ----a-w C:\WINDOWS\system32\p2pgraph.dll - 2004-08-04 12:00:00 88,064 ------w C:\WINDOWS\system32\p2pnetsh.dll + 2006-10-11 16:24:45 116,224 ----a-w C:\WINDOWS\system32\p2pnetsh.dll - 2004-08-04 12:00:00 526,848 ------w C:\WINDOWS\system32\p2psvc.dll + 2006-10-11 16:24:45 553,984 ----a-w C:\WINDOWS\system32\p2psvc.dll - 2007-12-16 01:24:45 70,260 ----a-w C:\WINDOWS\system32\perfc009.dat + 2007-12-16 18:59:09 71,444 ----a-w C:\WINDOWS\system32\perfc009.dat - 2007-12-16 01:24:45 436,496 ----a-w C:\WINDOWS\system32\perfh009.dat + 2007-12-16 18:59:09 441,760 ----a-w C:\WINDOWS\system32\perfh009.dat - 2004-08-04 12:00:00 48,640 ------w C:\WINDOWS\system32\pnrpnsp.dll + 2006-10-11 16:24:45 58,880 ----a-w C:\WINDOWS\system32\pnrpnsp.dll - 2006-10-14 15:43:38 124,416 ------w C:\WINDOWS\system32\prntvpt.dll + 2007-03-22 19:25:02 124,928 ------w C:\WINDOWS\system32\prntvpt.dll - 2007-10-26 03:36:51 8,454,656 ------w C:\WINDOWS\system32\shell32.dll + 2007-10-26 03:34:01 8,460,288 ----a-w C:\WINDOWS\system32\shell32.dll - 2006-10-14 15:43:18 751,104 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\mxdwdrv.dll + 2007-03-22 19:24:50 762,880 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\mxdwdrv.dll - 2006-10-14 15:42:40 131,584 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\mxdwdui.dll + 2007-03-22 19:24:34 131,584 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\mxdwdui.dll - 2006-10-14 15:42:18 376,320 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\unidrv.dll + 2007-03-22 19:24:06 376,832 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\unidrv.dll - 2006-10-14 15:42:28 510,464 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\unidrvui.dll + 2007-03-22 20:03:54 749,568 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\unidrvui.dll - 2006-10-14 15:40:36 619,008 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\unires.dll + 2007-03-22 20:03:58 761,344 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\unires.dll - 2006-10-14 19:22:00 1,698,048 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\XpsSvcs.dll + 2007-03-23 05:07:56 1,683,280 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\XpsSvcs.dll - 2006-10-14 15:44:44 671,744 ------w C:\WINDOWS\system32\spool\prtprocs\w32x86\PrintFilterPipelineSvc.exe + 2007-03-22 19:25:42 677,376 ------w C:\WINDOWS\system32\spool\prtprocs\w32x86\PrintFilterPipelineSvc.exe - 2006-10-14 16:12:14 737,792 ----a-w C:\WINDOWS\system32\spool\XPSEP\amd64\amd64\mxdwdrv.dll + 2007-03-22 19:53:16 746,496 ----a-w C:\WINDOWS\system32\spool\XPSEP\amd64\amd64\mxdwdrv.dll - 2006-10-14 19:09:04 2,946,304 ----a-w C:\WINDOWS\system32\spool\XPSEP\amd64\amd64\xpssvcs.dll + 2007-03-22 19:59:24 2,932,224 ----a-w C:\WINDOWS\system32\spool\XPSEP\amd64\amd64\xpssvcs.dll - 2006-10-14 16:12:14 737,792 ----a-w C:\WINDOWS\system32\spool\XPSEP\amd64\mxdwdrv.dll + 2007-03-22 19:53:16 746,496 ----a-w C:\WINDOWS\system32\spool\XPSEP\amd64\mxdwdrv.dll - 2006-10-14 19:09:04 2,946,304 ----a-w C:\WINDOWS\system32\spool\XPSEP\amd64\xpssvcs.dll + 2007-03-22 19:59:24 2,932,224 ----a-w C:\WINDOWS\system32\spool\XPSEP\amd64\xpssvcs.dll - 2006-10-14 15:43:18 751,104 ----a-w C:\WINDOWS\system32\spool\XPSEP\i386\i386\mxdwdrv.dll + 2007-03-22 19:24:50 762,880 ----a-w C:\WINDOWS\system32\spool\XPSEP\i386\i386\mxdwdrv.dll - 2006-10-14 19:22:00 1,698,048 ----a-w C:\WINDOWS\system32\spool\XPSEP\i386\i386\xpssvcs.dll + 2007-03-23 05:07:56 1,683,280 ----a-w C:\WINDOWS\system32\spool\XPSEP\i386\i386\xpssvcs.dll - 2006-10-14 15:43:18 751,104 ----a-w C:\WINDOWS\system32\spool\XPSEP\i386\mxdwdrv.dll + 2007-03-22 19:24:50 762,880 ----a-w C:\WINDOWS\system32\spool\XPSEP\i386\mxdwdrv.dll - 2006-10-14 19:22:00 1,698,048 ----a-w C:\WINDOWS\system32\spool\XPSEP\i386\xpssvcs.dll + 2007-03-23 05:07:56 1,683,280 ----a-w C:\WINDOWS\system32\spool\XPSEP\i386\xpssvcs.dll - 2004-08-04 12:00:00 123,904 ------w C:\WINDOWS\system32\usmt\guitrn.dll + 2005-04-28 19:16:29 133,120 ----a-w C:\WINDOWS\system32\usmt\guitrn.dll - 2004-08-04 12:00:00 19,968 ------w C:\WINDOWS\system32\usmt\log.dll + 2005-04-28 19:16:29 19,968 ----a-w C:\WINDOWS\system32\usmt\log.dll - 2004-08-04 12:00:00 201,216 ------w C:\WINDOWS\system32\usmt\migism.dll + 2005-04-28 19:16:29 274,432 ----a-w C:\WINDOWS\system32\usmt\migism.dll - 2004-08-04 12:00:00 103,424 ------w C:\WINDOWS\system32\usmt\migload.exe + 2005-04-28 00:12:58 103,424 ----a-w C:\WINDOWS\system32\usmt\migload.exe - 2004-08-04 12:00:00 240,128 ------w C:\WINDOWS\system32\usmt\migwiz.exe + 2005-04-28 00:12:57 245,248 ----a-w C:\WINDOWS\system32\usmt\migwiz.exe - 2004-08-04 12:00:00 202,752 ------w C:\WINDOWS\system32\usmt\script.dll + 2005-04-28 19:16:29 215,552 ----a-w C:\WINDOWS\system32\usmt\script.dll - 2004-08-04 12:00:00 168,960 ------w C:\WINDOWS\system32\usmt\sysmod.dll + 2005-04-28 19:16:29 193,024 ----a-w C:\WINDOWS\system32\usmt\sysmod.dll - 2004-08-04 12:00:00 49,152 ------w C:\WINDOWS\system32\wdigest.dll + 2006-03-24 04:37:50 49,152 ----a-w C:\WINDOWS\system32\wdigest.dll - 2007-10-29 10:26:53 115,712 ------w C:\WINDOWS\system32\xpsp3res.dll + 2007-10-29 10:04:03 350,720 ----a-w C:\WINDOWS\system32\xpsp3res.dll - 2006-10-14 19:21:58 580,352 ------w C:\WINDOWS\system32\XPSSHHDR.dll + 2007-03-23 05:07:54 583,504 ------w C:\WINDOWS\system32\XPSSHHDR.dll - 2006-10-14 19:22:00 1,698,048 ------w C:\WINDOWS\system32\XpsSvcs.dll + 2007-03-23 05:07:56 1,683,280 ------w C:\WINDOWS\system32\XpsSvcs.dll - 2006-10-20 20:29:54 304,928 ----a-w C:\WINDOWS\system32\XPSViewer\XPSViewer.exe + 2007-10-09 12:03:08 308,760 ----a-w C:\WINDOWS\system32\XPSViewer\XPSViewer.exe + 2007-12-16 18:58:49 8,192 ----a-w C:\WINDOWS\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll + 2007-10-24 00:47:56 479,232 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\msvcm80.dll + 2007-10-24 00:47:56 558,080 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\msvcp80.dll + 2007-10-24 00:47:56 635,904 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\msvcr80.dll - 2007-12-16 01:24:13 258,048 ----a-w C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll + 2007-12-16 18:58:57 258,048 ----a-w C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll - 2007-12-16 01:24:13 114,176 ----a-w C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll + 2007-12-16 18:58:57 113,664 ----a-w C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll . -- Snapshot reset to current date -- . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 13:00] "SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2007-08-31 16:46] "MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [2007-10-18 11:34] "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 17:24] "Steam"="C:\Program Files\Steam\Steam.exe" [2007-12-07 12:19] "SUPERAntiSpyware"="C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2007-06-21 14:06] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="RUNDLL32.exe" [2004-08-04 13:00 C:\WINDOWS\system32\rundll32.exe] "nwiz"="nwiz.exe" [2005-12-14 07:51 C:\WINDOWS\system32\nwiz.exe] "ULiRaid"="C:\Program Files\ULi5287\ULi5287.exe" [2005-08-23 20:59] "High Definition Audio Property Page Shortcut"="HDAShCut.exe" [2004-10-27 15:21 C:\WINDOWS\system32\HdAShCut.exe] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11] "GhostWall"="C:\Program Files\GhostWall\ghostwall.exe" [2005-09-29 16:28] "GrooveMonitor"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" [2007-08-24 07:00] "SoundMAXPnP"="C:\Program Files\Analog Devices\Core\smax4pnp.exe" [2005-05-20 02:11] "SoundMAX"="C:\Program Files\Analog Devices\SoundMAX\smax4.exe" [2005-09-07 15:35] "WinampAgent"="C:\Program Files\Winamp\winampa.exe" [2007-10-10 06:28] "ANIWZCS2Service"="C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe" [2004-12-16 17:49] "avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2007-12-01 12:25] "NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2006-01-12 15:40] "Lexmark 1200 Series"="C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe" [2006-07-13 06:20] "NvMediaCenter"="RUNDLL32.exe" [2004-08-04 13:00 C:\WINDOWS\system32\rundll32.exe] "GameFace Messenger"="C:\Program Files\GameFace Messenger\GameFace.exe" [] "Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2006-11-03 19:20] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-04 13:00] C:\Documents and Settings\Smiley\Start Menu\Programs\Startup\ Screen Clipper and Launcher til OneNote 2007.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE [2007-08-24 04:45:42] [hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks] "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2006-12-20 13:55 77824] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon] C:\Program Files\SUPERAntiSpyware\SASWINLO.dll 2007-04-19 13:41 294912 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll R0 m5287;m5287;C:\WINDOWS\system32\DRIVERS\m5287.sys R2 ghstwall;ghstwall;\??\C:\WINDOWS\system32\drivers\ghstwall.sys R3 AEAudioService;AEAudio Service;C:\WINDOWS\system32\drivers\AEAudio.sys R3 P17;SB Live! 24-bit;C:\WINDOWS\system32\drivers\P17.sys R3 TAP;TAP-Win32 Adapter;C:\WINDOWS\system32\DRIVERS\tapdrvr.sys R3 ULI5261XP;ULi M526X Ethernet NT Driver;C:\WINDOWS\system32\DRIVERS\ULILAN51.SYS S3 BS_DEF;BS_DEF;\??\C:\WINDOWS\BS_DEF.sys S3 Video3D;ASUS Video3D Service;C:\WINDOWS\system32\Drivers\Video3D32.sys [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9e319e98-a1a5-11dc-b26a-001731977832}] \Shell\AutoRun\command - RavMon.exe . Contents of the 'Scheduled Tasks' folder "2007-12-16 19:31:52 C:\WINDOWS\Tasks\MP Scheduled Scan.job" - C:\Program Files\Windows Defender\MpCmdRun.exe "2007-12-16 19:07:01 C:\WINDOWS\Tasks\Søg efter opdateringer til Windows Live Toolbar.job" - C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE . ************************************************************************** catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net[...] Rootkit scan 2007-12-16 20:37:14 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2007-12-16 20:38:15 C:\ComboFix2.txt ... 2007-12-16 16:14 . 2007-12-16 17:02:23 --- E O F --- Og her er den fra HJT: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 20:40:37, on 16-12-2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16574) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Windows Defender\MsMpEng.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\LEXPPS.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe C:\Program Files\ULi5287\ULi5287.exe C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe C:\Program Files\GhostWall\ghostwall.exe C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe C:\Program Files\Analog Devices\Core\smax4pnp.exe C:\Program Files\Analog Devices\SoundMAX\smax4.exe C:\Program Files\Winamp\winampa.exe C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe C:\Program Files\Windows Defender\MSASCui.exe C:\Program Files\Lexmark 1200 Series\lxczbmon.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\Steam\Steam.exe C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe C:\WINDOWS\ATKKBService.exe C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\PnkBstrA.exe C:\WINDOWS\system32\PnkBstrB.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Windows Live\Messenger\usnsvc.exe C:\WINDOWS\explorer.exe C:\WINDOWS\system32\notepad.exe C:\Documents and Settings\Smiley\Desktop\HiJackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com[...] R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com[...] R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com[...] R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com[...] R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com[...] O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: (no name) - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - (no file) O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544-FADC6B084872} - (no file) O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [ULiRaid] C:\Program Files\ULi5287\ULi5287.exe O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" O4 - HKLM\..\Run: [GhostWall] "C:\Program Files\GhostWall\ghostwall.exe" -minimize O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\smax4.exe" /tray O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe" O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [Lexmark 1200 Series] "C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe" O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [GameFace Messenger] C:\Program Files\GameFace Messenger\GameFace.exe O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\Steam.exe" -silent O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Startup: Screen Clipper and Launcher til OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Åbn på ny baggrundsfane - res://C:\Program Files\Windows Live Toolbar\Components\da-dk\msntabres.dll.mui/229?1d1070ad25db41cf82b39726c3e4d5f2 O8 - Extra context menu item: Åbn på ny forgrundsfane - res://C:\Program Files\Windows Live Toolbar\Components\da-dk\msntabres.dll.mui/230?1d1070ad25db41cf82b39726c3e4d5f2 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com[...] O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com[...] O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com[...] O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com[...] O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com[...] O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Alpha Networks Inc. - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe -- End of file - 10210 bytes
--
Gæstebruger, opret dit eget login og få din egen signatur.
#15
Arlet
Ultrabruger
16-12-2007 20:54

Rapporter til Admin
Hent Avenger ned til skrivebordet her fra: http://swandog46.geekstogo.com[...] 1. Dobbeltklik på avenger.exe 2. Sæt en prik i "Input Script Manually" og klik på Luppen - nu dukker der et lille vindue op, hvor du skal kopiere indholdet mellem de stiplede linier ind: ----------------------------- Files to delete: C:\WINDOWS\GPInstall.exe ----------------------------- 3. Klik på Trafiklyset i Avenger. Programmet vil opfordre dig til at genstarte computeren straks, hvilket du skal gøre. Programmet vil lukke din computer, slette filerne og starte computeren igen. 4. Efter genstarten vil der dukke et notepad-vindue op, med en log for Avengers handlinger. Den må du gerne lægge ind
--
Med venlig hilsen Arlet www.arlet.dk[...] www.malwarecheck.dk[...]
#16
smiley-mann
Gæst
16-12-2007 21:16

Rapporter til Admin
Logfile of The Avenger version 1, by Swandog46 Running from registry key: \Registry\Machine\System\CurrentControlSet\Services\gpqwbsxy ******************* Script file located at: \??\C:\WINDOWS\uyqni^hu.txt Script file opened successfully. Script file read successfully Backups directory opened successfully at C:\Avenger ******************* Beginning to process script file: File C:\WINDOWS\GPInstall.exe deleted successfully. Completed script processing. ******************* Finished! Terminate.
--
Gæstebruger, opret dit eget login og få din egen signatur.
#17
smiley-mann
Gæst
17-12-2007 14:41

Rapporter til Admin
Mangler der mere? Og kan jeg godt slette alle de programmer hvis vi er færdige?
--
Gæstebruger, opret dit eget login og få din egen signatur.
#18
Arlet
Ultrabruger
17-12-2007 20:41

Rapporter til Admin
Så ser det fint ud.. Kør lige til sidst trin 5 og 6 herfra: http://www.malwarecheck.dk[...] Du kan godt slette de programmer vi har brugt
--
Med venlig hilsen Arlet www.arlet.dk[...] www.malwarecheck.dk[...]
#19
Arlet
Ultrabruger
17-12-2007 20:41

Rapporter til Admin
Så ser det fint ud.. Kør lige til sidst trin 5 og 6 herfra: http://www.malwarecheck.dk[...] Du kan godt slette de programmer vi har brugt
--
Med venlig hilsen Arlet www.arlet.dk[...] www.malwarecheck.dk[...]

Opret svar til indlægget: Nog der ville tjekke min HJT fil?

Grundet øget spam aktivitet fra gæstebrugere, er det desværre ikke længere muligt, at oprette svar som gæst.

Hvis du ønsker at deltage i debatten, skal du oprette en brugerprofil.

Opret bruger | Login
NYHEDSBREV
Afstemning