Ga naar inhoud

HJT logje - Ik krijg constant reclame bij surfen via IE

mani88
 Delen

Aanbevolen berichten

mani88 Vergevorderde

mani88

Geplaatst:
Geplaatst:

Ik krijg de laatste tijd constant reclame als ik surf via Internet Explorer. Kan er iemand eens onderstaand HJT logje nakijken aub. Ik denk dat er iets serieus verkeerd zit op mijn computer..

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 11:51:58, on 5/03/2011

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE

C:\Program Files\Java\jre6\bin\jqs.exe

C:\WINDOWS\system32\PnkBstrA.exe

C:\WINDOWS\system32\PnkBstrB.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\ALCWZRD.EXE

C:\Program Files\Belgium Identity Card\beid35gui.exe

C:\Program Files\Common Files\Java\Java Update\jusched.exe

C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

C:\Program Files\Microsoft Security Client\msseces.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Documents and Settings\Computer\Local Settings\Application Data\Google\Update\1.2.183.39\GoogleCrashHandler.exe

C:\Program Files\Common Files\Java\Java Update\jucheck.exe

C:\Documents and Settings\Computer\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

C:\Documents and Settings\Computer\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

C:\Documents and Settings\Computer\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

C:\Documents and Settings\Computer\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

C:\Documents and Settings\Computer\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

C:\WINDOWS\system32\cmd.exe

C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe

C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

C:\Documents and Settings\Computer\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

C:\Documents and Settings\Computer\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Ask.com - International

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: lightspeedincome - {e3e4b70e-ae2b-d84c-5a45-1286fecb56d6} - C:\WINDOWS\system32\27bf27ff.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O3 - Toolbar: FrostWire Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll

O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE

O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon

O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon

O4 - HKLM\..\Run: [beid] "C:\Program Files\Belgium Identity Card\beid35gui.exe" /startup

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Computer\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c

O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000

O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1256370431375

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll

O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

O23 - Service: Canon Inkjet Printer/Scanner/Fax Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe

O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe

--

End of file - 6632 bytes

Link naar reactie
Delen op andere sites
kape Grootmeester

kape

Geplaatst:
Geplaatst:

Start Hijackthis op. Selecteer “Scan”. Selecteer alleen de items die hieronder zijn genoemd:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Ask.com – International

R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll

O2 - BHO: lightspeedincome - {e3e4b70e-ae2b-d84c-5a45-1286fecb56d6} - C:\WINDOWS\system32\27bf27ff.dll

O3 - Toolbar: FrostWire Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll

Klik op 'Fix checked' om de items te verwijderen.

Verwijder Ask Toolbar of Ask.com via Configuratiescherm -> Software (indien aanwezig) of verwijder anders volgende vetgedrukte map : C:\Program Files\Ask.com

Download MBAM (Malwarebytes Anti-Malware)

Dubbelklik op mbam-setup.exe om het programma te installeren.

Zorg ervoor dat er een vinkje geplaatst is voor Update Malwarebytes' Anti-Malware en Start Malwarebytes' Anti-Malware, Klik daarna op "Voltooien".

Indien een update gevonden werd, zal die gedownload en geïnstalleerd worden.

Wanneer het programma volledig up to date is, selecteer dan in het tabblad Scanner : "Snelle Scan", daarna klik op Scan.

Het scannen kan een tijdje duren, dus wees geduldig.

Wanneer de scan voltooid is, klik op OK, daarna "Bekijk Resultaten" om de resultaten te zien.

Zorg ervoor dat daar alles aangevinkt is, daarna klik op: Verwijder geselecteerde.

Na het verwijderen zal een log openen en zal er gevraagd worden om de computer opnieuw op te starten. (Zie verder).

Indien er de rootkit (TDSS) aanwezig is, zal MBAM vragen te herstarten. Doe dit dan ook.

MBAM zal na de herstart opnieuw scannen en de rootkit verwijderen.

Het log wordt automatisch bewaard door MBAM en kan je terugvinden door op de "Logs" tab te klikken in het programma.

Indien MBAM moeilijkheden heeft met het verwijderen van bepaalde bestanden zal het enkele meldingen geven waar je OK moet klikken. Daarna zal het vragen om de computer opnieuw op te starten... dus sta toe dat MBAM de computer opnieuw opstart.

Plak de inhoud van het logje in je volgende bericht, samen met een nieuw HijackThis log.

Link naar reactie
Delen op andere sites
mani88 Vergevorderde

mani88

Geplaatst:
  • Auteur
Geplaatst:

Alvast heel erg bedankt!

Logfile MBAM:

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Databaseversie: 4422

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

5/03/2011 13:47:01
mbam-log-2011-03-05 (13-47-01).txt

Scantype: Snelle scan
Objecten gescand: 132521
Verstreken tijd: 18 minuut/minuten, 54 seconde(n)

Geheugenprocessen geïnfecteerd: 0
Geheugenmodulen geïnfecteerd: 0
Registersleutels geïnfecteerd: 0
Registerwaarden geïnfecteerd: 0
Registerdata geïnfecteerd: 0
Mappen geïnfecteerd: 0
Bestanden geïnfecteerd: 0

Geheugenprocessen geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)

Geheugenmodulen geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)

Registersleutels geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)

Registerwaarden geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)

Registerdata geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)

Mappen geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)

Bestanden geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)

Logfile HJT:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:47:43, on 5/03/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ALCWZRD.EXE
C:\Program Files\Belgium Identity Card\beid35gui.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\Computer\Local Settings\Application Data\Google\Update\1.2.183.39\GoogleCrashHandler.exe
C:\Program Files\Common Files\Java\Java Update\jucheck.exe
C:\Documents and Settings\Computer\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Computer\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Computer\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Computer\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Computer\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Computer\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Computer\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://eu.ask.com/?o=14200&l=dis
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
O4 - HKLM\..\Run: [beid] "C:\Program Files\Belgium Identity Card\beid35gui.exe" /startup
O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Computer\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1256370431375
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Canon Inkjet Printer/Scanner/Fax Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe

--
End of file - 5889 bytes

Link naar reactie
Delen op andere sites
mani88 Vergevorderde

mani88

Geplaatst:
  • Auteur
Geplaatst:

Niet meteen, dus dat is toch al goed! ;)

Ik heb ook ComboFix eens laten lopen:

ComboFix 11-03-04.06 - Computer 05/03/2011  14:03:02.3.2 - x86
Microsoft Windows XP Professional  5.1.2600.3.1252.32.1043.18.511.197 [GMT 1:00]
Gestart vanuit: c:\documents and settings\Computer\Bureaublad\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {BCF43643-A118-4432-AEDE-D861FCBCFCDF}
AV: Microsoft Security Essentials *Disabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}
.
.
((((((((((((((((((((((((((((((((((   Andere Verwijderingen   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\Computer\Local Settings\Temporary Internet Files\1052ae3c
c:\documents and settings\Computer\Local Settings\Temporary Internet Files\7c836e5c
.
.
((((((((((((((((((((   Bestanden Gemaakt van 2011-02-05 to 2011-03-05  ))))))))))))))))))))))))))))))
.
.
2011-03-05 12:56 . 2011-03-05 12:56	28752	----a-w-	c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{9BA8C19B-D7E2-45E4-9879-FAD6971075F9}\MpKsl6e72f1b8.sys
2011-03-04 16:43 . 2011-02-10 21:54	5943120	----a-w-	c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{9BA8C19B-D7E2-45E4-9879-FAD6971075F9}\mpengine.dll
2011-03-02 17:32 . 2011-02-10 22:23	2635264	----a-w-	c:\program files\Mozilla Firefox\extensions\{50012027-8702-8c00-09e9-1de9969184b0}\components\bccb9b5b.dll
2011-02-26 14:09 . 2011-02-26 14:09	--------	d-----w-	c:\windows\Temp3EE94E58-33E0-98C0-89D7-98FB8CEC51E2-Signatures
2011-02-26 14:08 . 2011-02-26 14:12	--------	d-----w-	c:\program files\Microsoft Security Client
2011-02-15 20:00 . 2011-02-15 20:00	--------	d-----w-	c:\program files\Windows Live SkyDrive
2011-02-15 19:57 . 2011-02-15 19:57	84718440	----a-w-	c:\program files\Common Files\Windows Live\.cache\wlc14.tmp
.
.
(((((((((((((((((((((((((((((((((((((((   Find3M Rapport   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-03-02 17:32 . 2010-05-19 16:20	125939	----a-w-	c:\windows\system32\90c67a0d.exe
2011-02-10 21:54 . 2010-03-07 11:25	5943120	----a-w-	c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2011-01-21 14:44 . 2008-04-15 12:00	441344	----a-w-	c:\windows\system32\shimgvw.dll
2011-01-07 14:09 . 2008-04-15 12:00	290048	----a-w-	c:\windows\system32\atmfd.dll
2010-12-31 14:04 . 2008-04-15 12:00	1855104	----a-w-	c:\windows\system32\win32k.sys
2010-12-22 12:34 . 2008-04-15 12:00	301568	----a-w-	c:\windows\system32\kerberos.dll
2010-12-20 23:52 . 2008-04-15 12:00	916480	----a-w-	c:\windows\system32\wininet.dll
2010-12-20 23:52 . 2008-04-15 12:00	43520	----a-w-	c:\windows\system32\licmgr10.dll
2010-12-20 23:52 . 2008-04-15 12:00	1469440	------w-	c:\windows\system32\inetcpl.cpl
2010-12-20 17:25 . 2008-04-15 12:00	735232	----a-w-	c:\windows\system32\lsasrv.dll
2010-12-20 12:55 . 2008-04-15 12:00	385024	----a-w-	c:\windows\system32\html.iec
2010-12-09 15:15 . 2008-04-15 12:00	739328	----a-w-	c:\windows\system32\ntdll.dll
2010-12-09 15:14 . 2008-04-14 22:11	2031616	----a-w-	c:\windows\system32\ntkrnlpa.exe
2010-12-09 15:14 . 2008-04-15 12:00	2153472	----a-w-	c:\windows\system32\ntoskrnl.exe
2010-12-09 14:30 . 2008-04-15 12:00	33280	----a-w-	c:\windows\system32\csrsrv.dll
.
.
(((((((((((((((((((((((((((((   SnapShot@2010-08-13_09.13.26   )))))))))))))))))))))))))))))))))))))))))
.
+ 2011-03-05 12:56 . 2011-03-05 12:56	16384              c:\windows\Temp\Perflib_Perfdata_63c.dat
- 2008-04-15 12:00 . 2010-04-21 13:28	46080              c:\windows\system32\tzchange.exe
+ 2008-04-15 12:00 . 2010-11-03 13:12	46080              c:\windows\system32\tzchange.exe
+ 2008-04-15 12:00 . 2010-08-27 05:55	99840              c:\windows\system32\srvsvc.dll
+ 2008-04-15 12:00 . 2010-08-17 13:17	58880              c:\windows\system32\spoolsv.exe
+ 2010-02-16 13:11 . 2010-02-22 14:29	18808              c:\windows\system32\spmsg.dll
- 2010-02-16 13:11 . 2009-05-26 09:01	18808              c:\windows\system32\spmsg.dll
+ 2010-04-16 21:12 . 2010-04-16 21:12	48464              c:\windows\system32\sirenacm.dll
+ 2010-10-29 15:13 . 2010-10-29 15:13	75064              c:\windows\system32\PnkBstrA.exe
+ 2008-04-15 12:00 . 2010-10-31 07:28	86022              c:\windows\system32\perfc013.dat
- 2008-04-15 12:00 . 2010-08-12 15:08	86022              c:\windows\system32\perfc013.dat
- 2008-04-15 12:00 . 2010-08-12 15:08	67312              c:\windows\system32\perfc009.dat
+ 2008-04-15 12:00 . 2010-10-31 07:27	67312              c:\windows\system32\perfc009.dat
- 2008-04-15 12:00 . 2009-03-08 02:31	66560              c:\windows\system32\mshtmled.dll
+ 2008-04-15 12:00 . 2010-12-20 23:52	66560              c:\windows\system32\mshtmled.dll
+ 2009-03-08 02:31 . 2010-12-20 23:52	55296              c:\windows\system32\msfeedsbs.dll
- 2009-03-08 02:31 . 2010-06-24 12:27	55296              c:\windows\system32\msfeedsbs.dll
+ 2008-04-15 12:00 . 2010-12-20 23:52	25600              c:\windows\system32\jsproxy.dll
- 2008-04-15 12:00 . 2010-06-24 12:27	25600              c:\windows\system32\jsproxy.dll
- 2009-10-23 21:59 . 2008-04-15 12:00	86016              c:\windows\system32\isign32.dll
+ 2009-10-23 21:59 . 2010-11-18 18:15	86016              c:\windows\system32\isign32.dll
+ 2008-04-15 12:00 . 2010-11-02 15:17	40960              c:\windows\system32\drivers\ndproxy.sys
- 2009-10-24 09:04 . 2010-06-24 12:27	12800              c:\windows\system32\dllcache\xpshims.dll
+ 2009-10-24 09:04 . 2010-12-20 23:52	12800              c:\windows\system32\dllcache\xpshims.dll
+ 2009-10-23 21:59 . 2010-10-11 14:59	45568              c:\windows\system32\dllcache\wab.exe
+ 2008-04-15 12:00 . 2010-08-27 05:55	99840              c:\windows\system32\dllcache\srvsvc.dll
+ 2008-04-15 12:00 . 2010-08-17 13:17	58880              c:\windows\system32\dllcache\spoolsv.exe
+ 2008-04-15 12:00 . 2010-11-02 15:17	40960              c:\windows\system32\dllcache\ndproxy.sys
+ 2008-04-15 12:00 . 2010-12-20 23:52	66560              c:\windows\system32\dllcache\mshtmled.dll
- 2008-04-15 12:00 . 2009-03-08 02:31	66560              c:\windows\system32\dllcache\mshtmled.dll
+ 2009-10-24 09:04 . 2010-12-20 23:52	55296              c:\windows\system32\dllcache\msfeedsbs.dll
- 2009-10-24 09:04 . 2010-06-24 12:27	55296              c:\windows\system32\dllcache\msfeedsbs.dll
+ 2008-04-15 12:00 . 2010-12-20 23:52	43520              c:\windows\system32\dllcache\licmgr10.dll
+ 2008-04-15 12:00 . 2010-12-20 23:52	25600              c:\windows\system32\dllcache\jsproxy.dll
- 2008-04-15 12:00 . 2010-06-24 12:27	25600              c:\windows\system32\dllcache\jsproxy.dll
+ 2009-10-23 21:59 . 2010-11-18 18:15	86016              c:\windows\system32\dllcache\isign32.dll
- 2009-10-23 21:59 . 2008-04-15 12:00	86016              c:\windows\system32\dllcache\isign32.dll
+ 2008-04-15 12:00 . 2010-12-09 14:30	33280              c:\windows\system32\dllcache\csrsrv.dll
- 2008-04-15 12:00 . 2009-12-14 07:10	33280              c:\windows\system32\dllcache\csrsrv.dll
- 2010-03-23 03:31 . 2010-03-23 03:31	30544              c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
+ 2010-09-22 07:43 . 2010-09-22 07:43	30544              c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
+ 2011-02-15 20:00 . 2011-02-15 20:00	27136              c:\windows\Installer\14f15e.msi
+ 2011-02-15 19:59 . 2011-02-15 19:59	58880              c:\windows\Installer\14f13f.msi
+ 2011-02-26 14:11 . 2011-02-26 14:11	47616              c:\windows\Installer\12f3bc.msi
+ 2011-02-26 14:09 . 2011-02-26 14:09	27648              c:\windows\Installer\12f398.msi
+ 2011-02-15 20:01 . 2011-02-15 20:01	80395              c:\windows\Installer\{CC38A00D-7EED-46CE-9281-D1D97B81F22A}\MsblIco.Exe
+ 2011-02-15 19:59 . 2011-02-15 19:59	61272              c:\windows\Installer\{C20C2630-B3A7-44BA-BDD0-31E256AE490E}\IconWlc.exe
+ 2010-11-10 13:26 . 2010-11-10 13:26	38240              c:\windows\Installer\{90120000-0020-0413-0000-0000000FF1CE}\O12ConvIcon.exe
- 2010-08-12 14:56 . 2010-08-12 14:56	38240              c:\windows\Installer\{90120000-0020-0413-0000-0000000FF1CE}\O12ConvIcon.exe
+ 2009-10-23 22:27 . 2011-02-09 17:10	23040              c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\unbndico.exe
- 2009-10-23 22:27 . 2010-08-12 15:15	23040              c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\unbndico.exe
+ 2009-10-23 22:27 . 2011-02-09 17:10	61440              c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\pubs.exe
- 2009-10-23 22:27 . 2010-08-12 15:15	61440              c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\pubs.exe
+ 2009-10-23 22:27 . 2011-02-09 17:10	27136              c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\oisicon.exe
- 2009-10-23 22:27 . 2010-08-12 15:15	27136              c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\oisicon.exe
- 2009-10-23 22:27 . 2010-08-12 15:15	11264              c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\mspicons.exe
+ 2009-10-23 22:27 . 2011-02-09 17:10	11264              c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\mspicons.exe
- 2009-10-23 22:27 . 2010-08-12 15:15	86016              c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\inficon.exe
+ 2009-10-23 22:27 . 2011-02-09 17:10	86016              c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\inficon.exe
- 2009-10-23 22:27 . 2010-08-12 15:15	12288              c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\cagicon.exe
+ 2009-10-23 22:27 . 2011-02-09 17:10	12288              c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\cagicon.exe
+ 2010-06-04 11:44 . 2011-01-06 12:35	49152              c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
- 2010-06-04 11:44 . 2010-06-04 11:44	49152              c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
+ 2011-02-09 17:07 . 2010-11-06 00:23	12800              c:\windows\ie8updates\KB2482017-IE8\xpshims.dll
+ 2011-02-09 17:07 . 2010-11-06 00:23	66560              c:\windows\ie8updates\KB2482017-IE8\mshtmled.dll
+ 2011-02-09 17:07 . 2010-11-06 00:23	55296              c:\windows\ie8updates\KB2482017-IE8\msfeedsbs.dll
+ 2011-02-09 17:07 . 2010-11-06 00:23	43520              c:\windows\ie8updates\KB2482017-IE8\licmgr10.dll
+ 2011-02-09 17:07 . 2010-11-06 00:23	25600              c:\windows\ie8updates\KB2482017-IE8\jsproxy.dll
+ 2010-12-15 11:27 . 2010-09-10 05:52	12800              c:\windows\ie8updates\KB2416400-IE8\xpshims.dll
+ 2010-12-15 11:27 . 2010-09-10 05:52	66560              c:\windows\ie8updates\KB2416400-IE8\mshtmled.dll
+ 2010-12-15 11:27 . 2010-09-10 05:52	55296              c:\windows\ie8updates\KB2416400-IE8\msfeedsbs.dll
+ 2010-12-15 11:27 . 2010-09-10 05:52	43520              c:\windows\ie8updates\KB2416400-IE8\licmgr10.dll
+ 2010-12-15 11:27 . 2010-09-10 05:52	25600              c:\windows\ie8updates\KB2416400-IE8\jsproxy.dll
+ 2010-10-14 15:17 . 2010-06-24 12:27	12800              c:\windows\ie8updates\KB2360131-IE8\xpshims.dll
+ 2010-10-14 15:17 . 2009-03-08 02:31	66560              c:\windows\ie8updates\KB2360131-IE8\mshtmled.dll
+ 2010-10-14 15:17 . 2010-06-24 12:27	55296              c:\windows\ie8updates\KB2360131-IE8\msfeedsbs.dll
+ 2010-10-14 15:17 . 2009-03-08 02:34	43008              c:\windows\ie8updates\KB2360131-IE8\licmgr10.dll
+ 2010-10-14 15:17 . 2010-06-24 12:27	25600              c:\windows\ie8updates\KB2360131-IE8\jsproxy.dll
+ 2010-10-09 07:38 . 2010-10-09 07:38	36864              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\70ee6267f7bad40e8707d402277770c3\System.Web.DynamicData.Design.ni.dll
- 2010-08-12 15:07 . 2010-08-12 15:07	77824              c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2010-10-07 16:24 . 2010-10-07 16:24	77824              c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
- 2010-08-12 15:07 . 2010-08-12 15:07	81920              c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
+ 2010-10-07 16:24 . 2010-10-07 16:24	81920              c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
- 2010-08-12 15:08 . 2010-08-12 15:08	81920              c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
+ 2010-10-07 16:25 . 2010-10-07 16:25	81920              c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2010-08-12 15:08 . 2010-08-12 15:08	32768              c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
+ 2010-10-07 16:24 . 2010-10-07 16:24	32768              c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
+ 2010-10-07 16:24 . 2010-10-07 16:24	12800              c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
- 2010-08-12 15:08 . 2010-08-12 15:08	12800              c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
- 2010-08-12 15:08 . 2010-08-12 15:08	28672              c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
+ 2010-10-07 16:24 . 2010-10-07 16:24	28672              c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
- 2010-08-12 15:08 . 2010-08-12 15:08	77824              c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
+ 2010-10-07 16:24 . 2010-10-07 16:24	77824              c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
+ 2010-10-07 16:24 . 2010-10-07 16:24	36864              c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
- 2010-08-12 15:08 . 2010-08-12 15:08	36864              c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
- 2010-08-12 15:08 . 2010-08-12 15:08	77824              c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
+ 2010-10-07 16:24 . 2010-10-07 16:24	77824              c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
- 2010-08-12 15:08 . 2010-08-12 15:08	13312              c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
+ 2010-10-07 16:24 . 2010-10-07 16:24	13312              c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
+ 2010-10-07 16:24 . 2010-10-07 16:24	10752              c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
- 2010-08-12 15:08 . 2010-08-12 15:08	10752              c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2010-10-07 16:24 . 2010-10-07 16:24	72192              c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2010-08-12 15:08 . 2010-08-12 15:08	72192              c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2010-08-12 15:08 . 2010-08-12 15:08	69120              c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2010-10-07 16:24 . 2010-10-07 16:24	69120              c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2009-12-15 17:45 . 2010-11-21 12:26	49152              c:\windows\.jagex_cache_32\runescape\jagmisc.dll
- 2009-12-15 17:45 . 2010-08-07 16:43	49152              c:\windows\.jagex_cache_32\runescape\jagmisc.dll
+ 2009-12-15 17:45 . 2010-11-21 12:26	94208              c:\windows\.jagex_cache_32\runescape\jaggl.dll
- 2010-06-17 09:23 . 2010-08-07 16:43	81920              c:\windows\.jagex_cache_32\runescape\hw3d.dll
+ 2010-06-17 09:23 . 2010-11-21 12:26	81920              c:\windows\.jagex_cache_32\runescape\hw3d.dll
+ 2010-12-15 11:26 . 2010-06-21 14:46	46080              c:\windows\$NtUninstallKB2443685$\tzchange.exe
+ 2010-12-15 11:26 . 2010-11-05 05:57	16896              c:\windows\$NtUninstallKB2443685$\spuninst\tzchange.dll
+ 2010-12-15 11:27 . 2008-04-15 12:00	86016              c:\windows\$NtUninstallKB2443105$\isign32.dll
+ 2010-12-15 11:26 . 2008-04-15 12:00	40576              c:\windows\$NtUninstallKB2440591$\ndproxy.sys
+ 2010-12-15 11:22 . 2008-04-15 12:00	46080              c:\windows\$NtUninstallKB2423089$\wab.exe
+ 2010-09-15 13:40 . 2008-04-15 12:00	57856              c:\windows\$NtUninstallKB2347290$\spoolsv.exe
+ 2010-10-14 15:19 . 2008-04-15 12:00	96768              c:\windows\$NtUninstallKB2345886$\srvsvc.dll
+ 2010-09-29 19:31 . 2010-04-21 13:28	46080              c:\windows\$NtUninstallKB2158563$\tzchange.exe
+ 2010-09-29 19:31 . 2010-06-23 00:57	16896              c:\windows\$NtUninstallKB2158563$\spuninst\tzchange.dll
+ 2010-09-15 13:39 . 2010-02-22 14:29	26488              c:\windows\$hf_mig$\KB982802\update\spcustom.dll
+ 2010-09-15 13:39 . 2010-02-22 14:29	18808              c:\windows\$hf_mig$\KB982802\spmsg.dll
+ 2010-10-14 15:18 . 2009-05-26 11:41	26488              c:\windows\$hf_mig$\KB982132\update\spcustom.dll
+ 2010-10-14 15:18 . 2009-05-26 11:41	18808              c:\windows\$hf_mig$\KB982132\spmsg.dll
+ 2010-10-14 15:14 . 2010-02-22 14:29	26488              c:\windows\$hf_mig$\KB981957\update\spcustom.dll
+ 2010-10-14 15:14 . 2010-02-22 14:29	18808              c:\windows\$hf_mig$\KB981957\spmsg.dll
+ 2010-09-15 13:39 . 2009-05-26 11:41	26488              c:\windows\$hf_mig$\KB981322\update\spcustom.dll
+ 2010-09-15 13:39 . 2009-05-26 11:41	18808              c:\windows\$hf_mig$\KB981322\spmsg.dll
+ 2010-10-14 15:18 . 2010-02-22 14:29	26488              c:\windows\$hf_mig$\KB979687\update\spcustom.dll
+ 2010-10-14 15:18 . 2010-02-22 14:29	18808              c:\windows\$hf_mig$\KB979687\spmsg.dll
+ 2010-12-15 11:26 . 2010-02-22 14:29	26488              c:\windows\$hf_mig$\KB2467659\update\spcustom.dll
+ 2010-12-15 11:26 . 2010-02-22 14:29	18808              c:\windows\$hf_mig$\KB2467659\spmsg.dll
+ 2010-12-15 11:27 . 2010-02-22 14:29	26488              c:\windows\$hf_mig$\KB2443105\update\spcustom.dll
+ 2010-12-15 11:27 . 2010-02-22 14:29	18808              c:\windows\$hf_mig$\KB2443105\spmsg.dll
+ 2010-11-18 18:15 . 2010-11-18 18:15	86016              c:\windows\$hf_mig$\KB2443105\SP3QFE\isign32.dll
+ 2010-12-15 11:26 . 2009-05-26 11:41	26488              c:\windows\$hf_mig$\KB2440591\update\spcustom.dll
+ 2010-12-15 11:26 . 2009-05-26 11:41	18808              c:\windows\$hf_mig$\KB2440591\spmsg.dll
+ 2010-12-15 11:17 . 2010-11-03 05:55	40960              c:\windows\$hf_mig$\KB2440591\SP3QFE\ndproxy.sys
+ 2010-12-15 11:26 . 2009-05-26 11:41	26488              c:\windows\$hf_mig$\KB2436673\update\spcustom.dll
+ 2010-12-15 11:26 . 2009-05-26 11:41	18808              c:\windows\$hf_mig$\KB2436673\spmsg.dll
+ 2010-12-15 11:22 . 2010-02-22 14:29	26488              c:\windows\$hf_mig$\KB2423089\update\spcustom.dll
+ 2010-12-15 11:22 . 2010-02-22 14:29	18808              c:\windows\$hf_mig$\KB2423089\spmsg.dll
+ 2010-12-15 11:16 . 2010-10-11 14:55	45568              c:\windows\$hf_mig$\KB2423089\SP3QFE\wab.exe
+ 2011-01-12 12:47 . 2010-02-22 14:29	26488              c:\windows\$hf_mig$\KB2419632\update\spcustom.dll
+ 2011-01-12 12:47 . 2010-02-22 14:29	18808              c:\windows\$hf_mig$\KB2419632\spmsg.dll
+ 2010-12-15 11:27 . 2010-02-22 14:29	26488              c:\windows\$hf_mig$\KB2416400-IE8\update\spcustom.dll
+ 2010-12-15 11:27 . 2010-02-22 14:29	18808              c:\windows\$hf_mig$\KB2416400-IE8\spmsg.dll
+ 2010-12-15 11:17 . 2010-11-06 00:26	12800              c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\xpshims.dll
+ 2010-12-15 11:17 . 2010-11-06 00:26	66560              c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\mshtmled.dll
+ 2010-12-15 11:17 . 2010-11-06 00:26	55296              c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\msfeedsbs.dll
+ 2010-12-15 11:17 . 2010-11-06 00:26	43520              c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\licmgr10.dll
+ 2010-12-15 11:17 . 2010-11-06 00:26	25600              c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\jsproxy.dll
+ 2010-10-14 15:20 . 2010-02-22 14:29	26488              c:\windows\$hf_mig$\KB2387149\update\spcustom.dll
+ 2010-10-14 15:20 . 2010-02-22 14:29	18808              c:\windows\$hf_mig$\KB2387149\spmsg.dll
+ 2010-10-14 15:12 . 2010-02-22 14:29	26488              c:\windows\$hf_mig$\KB2360937\update\spcustom.dll
+ 2010-10-14 15:12 . 2010-02-22 14:29	18808              c:\windows\$hf_mig$\KB2360937\spmsg.dll
+ 2010-10-14 15:17 . 2010-02-22 14:29	26488              c:\windows\$hf_mig$\KB2360131-IE8\update\spcustom.dll
+ 2010-10-14 15:17 . 2010-02-22 14:29	18808              c:\windows\$hf_mig$\KB2360131-IE8\spmsg.dll
+ 2010-10-14 14:07 . 2010-09-10 05:51	12800              c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\xpshims.dll
+ 2010-10-14 14:08 . 2010-09-10 05:51	66560              c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\mshtmled.dll
+ 2010-10-14 14:08 . 2010-09-10 05:51	55296              c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\msfeedsbs.dll
+ 2010-10-14 14:08 . 2010-09-10 05:51	43520              c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\licmgr10.dll
+ 2010-10-14 14:08 . 2010-09-10 05:51	25600              c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\jsproxy.dll
+ 2010-09-15 13:40 . 2009-05-26 11:41	26488              c:\windows\$hf_mig$\KB2347290\update\spcustom.dll
+ 2010-09-15 13:40 . 2009-05-26 11:41	18808              c:\windows\$hf_mig$\KB2347290\spmsg.dll
+ 2010-08-17 13:19 . 2010-08-17 13:19	58880              c:\windows\$hf_mig$\KB2347290\SP3QFE\spoolsv.exe
+ 2010-10-14 15:19 . 2010-02-22 14:29	26488              c:\windows\$hf_mig$\KB2345886\update\spcustom.dll
+ 2010-10-14 15:19 . 2010-02-22 14:29	18808              c:\windows\$hf_mig$\KB2345886\spmsg.dll
+ 2010-08-27 06:02 . 2010-08-27 06:02	99840              c:\windows\$hf_mig$\KB2345886\SP3QFE\srvsvc.dll
+ 2010-12-15 11:27 . 2009-05-26 11:41	26488              c:\windows\$hf_mig$\KB2296199\update\spcustom.dll
+ 2010-12-15 11:27 . 2009-05-26 11:41	18808              c:\windows\$hf_mig$\KB2296199\spmsg.dll
+ 2010-10-14 15:19 . 2010-02-22 14:29	26488              c:\windows\$hf_mig$\KB2279986\update\spcustom.dll
+ 2010-10-14 15:19 . 2010-02-22 14:29	18808              c:\windows\$hf_mig$\KB2279986\spmsg.dll
+ 2010-09-15 13:40 . 2009-05-26 09:01	26488              c:\windows\$hf_mig$\KB2259922\update\spcustom.dll
+ 2010-09-15 13:40 . 2009-05-26 09:01	18808              c:\windows\$hf_mig$\KB2259922\spmsg.dll
+ 2010-09-15 13:35 . 2010-02-22 14:29	26488              c:\windows\$hf_mig$\KB2141007\update\spcustom.dll
+ 2010-09-15 13:35 . 2010-02-22 14:29	18808              c:\windows\$hf_mig$\KB2141007\spmsg.dll
+ 2010-09-15 13:39 . 2010-02-22 14:29	26488              c:\windows\$hf_mig$\KB2121546\update\spcustom.dll
+ 2010-09-15 13:39 . 2010-02-22 14:29	18808              c:\windows\$hf_mig$\KB2121546\spmsg.dll
- 2010-08-12 15:08 . 2010-08-12 15:08	8192              c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
+ 2010-10-07 16:24 . 2010-10-07 16:24	8192              c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
+ 2008-05-05 05:25 . 2010-08-27 01:43	5632              c:\windows\system32\xpsp4res.dll
- 2009-10-23 22:27 . 2010-08-12 15:15	4096              c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\opwicon.exe
+ 2009-10-23 22:27 . 2011-02-09 17:10	4096              c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\opwicon.exe
- 2010-08-12 15:08 . 2010-08-12 15:08	7168              c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
+ 2010-10-07 16:24 . 2010-10-07 16:24	7168              c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
+ 2010-10-07 16:24 . 2010-10-07 16:24	5632              c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2010-08-12 15:08 . 2010-08-12 15:08	5632              c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2010-10-07 16:24 . 2010-10-07 16:24	6656              c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
- 2010-08-12 15:08 . 2010-08-12 15:08	6656              c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
- 2010-08-12 15:08 . 2010-08-12 15:08	8192              c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2010-10-07 16:24 . 2010-10-07 16:24	8192              c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2010-09-15 13:39 . 2008-05-05 05:25	3072              c:\windows\$NtUninstallKB982802$\xpsp4res.dll
+ 2010-10-14 15:12 . 2010-07-22 06:19	5632              c:\windows\$NtUninstallKB2360937$\xpsp4res.dll
+ 2010-10-14 15:19 . 2010-08-13 16:44	5632              c:\windows\$NtUninstallKB2345886$\xpsp4res.dll
+ 2010-07-22 06:19 . 2010-07-22 06:19	5632              c:\windows\$hf_mig$\KB982802\SP3QFE\sprv0413.dll
+ 2010-07-12 13:19 . 2010-07-12 13:19	5632              c:\windows\$hf_mig$\KB979687\SP3QFE\sprv0413.dll
+ 2010-10-14 14:03 . 2010-08-13 16:44	5632              c:\windows\$hf_mig$\KB2360937\SP3QFE\sprv0413.dll
+ 2010-08-27 01:43 . 2010-08-27 01:43	5632              c:\windows\$hf_mig$\KB2345886\SP3QFE\sprv0413.dll
+ 2010-10-07 16:24 . 2010-10-07 16:24	113664              c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
- 2010-08-12 15:08 . 2010-08-12 15:08	113664              c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
- 2010-08-12 15:08 . 2010-08-12 15:08	258048              c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
+ 2010-10-07 16:24 . 2010-10-07 16:24	258048              c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
+ 2008-04-15 12:00 . 2010-06-18 17:47	293888              c:\windows\system32\winsrv.dll
- 2008-04-15 12:00 . 2008-04-15 12:00	293888              c:\windows\system32\winsrv.dll
+ 2008-04-15 12:00 . 2010-04-16 15:38	406016              c:\windows\system32\usp10.dll
- 2008-04-15 12:00 . 2008-04-15 12:00	406016              c:\windows\system32\usp10.dll
- 2008-04-15 12:00 . 2009-10-15 16:38	119808              c:\windows\system32\t2embed.dll
+ 2008-04-15 12:00 . 2010-08-27 08:03	119808              c:\windows\system32\t2embed.dll
+ 2008-04-15 12:00 . 2010-08-16 08:45	590848              c:\windows\system32\rpcrt4.dll
+ 2010-10-29 15:14 . 2010-10-29 15:54	215016              c:\windows\system32\PnkBstrB.exe
- 2008-04-15 12:00 . 2010-08-12 15:08	498912              c:\windows\system32\perfh013.dat
+ 2008-04-15 12:00 . 2010-10-31 07:28	498912              c:\windows\system32\perfh013.dat
+ 2008-04-15 12:00 . 2010-10-31 07:28	432356              c:\windows\system32\perfh009.dat
- 2008-04-15 12:00 . 2010-08-12 15:08	432356              c:\windows\system32\perfh009.dat
+ 2008-04-15 12:00 . 2010-11-09 14:52	249856              c:\windows\system32\odbc32.dll
- 2008-04-15 12:00 . 2008-04-15 12:00	249856              c:\windows\system32\odbc32.dll
+ 2008-04-15 12:00 . 2010-12-20 23:52	206848              c:\windows\system32\occache.dll
- 2008-04-15 12:00 . 2010-06-24 12:27	206848              c:\windows\system32\occache.dll
+ 2008-04-15 12:00 . 2010-12-20 23:52	611840              c:\windows\system32\mstime.dll
- 2008-04-15 12:00 . 2010-06-24 12:27	611840              c:\windows\system32\mstime.dll
+ 2009-03-08 02:32 . 2010-12-20 23:52	602112              c:\windows\system32\msfeeds.dll
+ 2010-03-06 11:16 . 2010-10-19 20:51	222080              c:\windows\system32\MpSigStub.exe
- 2008-04-15 12:00 . 2008-04-15 12:00	384512              c:\windows\system32\mp4sdmod.dll
+ 2008-04-15 12:00 . 2010-04-05 09:54	384512              c:\windows\system32\mp4sdmod.dll
+ 2008-04-15 12:00 . 2010-09-18 10:23	974848              c:\windows\system32\mfc42u.dll
+ 2008-04-15 12:00 . 2010-09-18 06:53	974848              c:\windows\system32\mfc42.dll
+ 2008-04-15 12:00 . 2010-09-18 06:53	953856              c:\windows\system32\mfc40u.dll
+ 2008-04-15 12:00 . 2010-09-18 06:53	954368              c:\windows\system32\mfc40.dll
+ 2009-10-23 21:59 . 2010-06-09 07:45	692736              c:\windows\system32\inetcomm.dll
- 2008-04-15 12:00 . 2010-06-24 12:27	184320              c:\windows\system32\iepeers.dll
+ 2008-04-15 12:00 . 2010-12-20 23:52	184320              c:\windows\system32\iepeers.dll
+ 2008-04-15 12:00 . 2010-12-20 23:52	387584              c:\windows\system32\iedkcs32.dll
- 2008-04-15 12:00 . 2010-06-24 12:27	387584              c:\windows\system32\iedkcs32.dll
+ 2008-04-15 12:00 . 2010-12-20 12:55	173568              c:\windows\system32\ie4uinit.exe
- 2009-10-23 23:44 . 2010-08-12 16:55	216856              c:\windows\system32\FNTCACHE.DAT
+ 2009-10-23 23:44 . 2011-02-09 18:30	216856              c:\windows\system32\FNTCACHE.DAT
+ 2008-04-15 12:00 . 2010-08-26 13:39	357248              c:\windows\system32\drivers\srv.sys
+ 2010-10-29 15:15 . 2010-10-29 15:15	138056              c:\windows\system32\drivers\PnkBstrK.sys
+ 2009-12-02 14:23 . 2010-10-24 20:25	165264              c:\windows\system32\drivers\MpFilter.sys
+ 2009-10-23 21:58 . 2010-07-16 11:58	221184              c:\windows\system32\dllcache\wordpad.exe
+ 2008-04-15 12:00 . 2010-06-18 17:47	293888              c:\windows\system32\dllcache\winsrv.dll
- 2008-04-15 12:00 . 2008-04-15 12:00	293888              c:\windows\system32\dllcache\winsrv.dll
- 2008-04-15 12:00 . 2010-06-24 12:27	916480              c:\windows\system32\dllcache\wininet.dll
+ 2008-04-15 12:00 . 2010-12-20 23:52	916480              c:\windows\system32\dllcache\wininet.dll
+ 2008-04-15 12:00 . 2010-04-16 15:38	406016              c:\windows\system32\dllcache\usp10.dll
- 2008-04-15 12:00 . 2008-04-15 12:00	406016              c:\windows\system32\dllcache\usp10.dll
- 2008-04-15 12:00 . 2009-10-15 16:38	119808              c:\windows\system32\dllcache\t2embed.dll
+ 2008-04-15 12:00 . 2010-08-27 08:03	119808              c:\windows\system32\dllcache\t2embed.dll
+ 2008-04-15 12:00 . 2010-08-26 13:39	357248              c:\windows\system32\dllcache\srv.sys
+ 2008-04-15 12:00 . 2011-01-21 14:44	441344              c:\windows\system32\dllcache\shimgvw.dll
+ 2008-04-15 12:00 . 2010-08-16 08:45	590848              c:\windows\system32\dllcache\rpcrt4.dll
+ 2008-04-15 12:00 . 2010-11-09 14:52	249856              c:\windows\system32\dllcache\odbc32.dll
- 2008-04-15 12:00 . 2008-04-15 12:00	249856              c:\windows\system32\dllcache\odbc32.dll
+ 2008-04-15 12:00 . 2010-12-20 23:52	206848              c:\windows\system32\dllcache\occache.dll
- 2008-04-15 12:00 . 2010-06-24 12:27	206848              c:\windows\system32\dllcache\occache.dll
+ 2008-04-15 12:00 . 2010-12-09 15:15	739328              c:\windows\system32\dllcache\ntdll.dll
- 2008-04-15 12:00 . 2010-06-24 12:27	611840              c:\windows\system32\dllcache\mstime.dll
+ 2008-04-15 12:00 . 2010-12-20 23:52	611840              c:\windows\system32\dllcache\mstime.dll
- 2009-10-23 21:59 . 2008-04-15 12:00	102400              c:\windows\system32\dllcache\msjro.dll
+ 2009-10-23 21:59 . 2010-11-09 14:52	102400              c:\windows\system32\dllcache\msjro.dll
+ 2009-10-24 09:04 . 2010-12-20 23:52	602112              c:\windows\system32\dllcache\msfeeds.dll
+ 2009-10-23 21:59 . 2010-11-09 14:52	200704              c:\windows\system32\dllcache\msadox.dll
- 2009-10-23 21:59 . 2008-04-15 12:00	200704              c:\windows\system32\dllcache\msadox.dll
- 2009-10-23 21:59 . 2008-04-15 12:00	180224              c:\windows\system32\dllcache\msadomd.dll
+ 2009-10-23 21:59 . 2010-11-09 14:52	180224              c:\windows\system32\dllcache\msadomd.dll
+ 2009-10-23 21:59 . 2010-11-09 14:52	536576              c:\windows\system32\dllcache\msado15.dll
- 2009-10-23 21:59 . 2008-04-15 12:00	536576              c:\windows\system32\dllcache\msado15.dll
+ 2009-10-23 21:59 . 2010-11-09 14:52	143360              c:\windows\system32\dllcache\msadco.dll
- 2009-10-23 21:59 . 2008-04-15 12:00	143360              c:\windows\system32\dllcache\msadco.dll
+ 2008-04-15 12:00 . 2010-04-05 09:54	384512              c:\windows\system32\dllcache\mp4sdmod.dll
- 2008-04-15 12:00 . 2008-04-15 12:00	384512              c:\windows\system32\dllcache\mp4sdmod.dll
+ 2008-04-15 12:00 . 2010-09-18 10:23	974848              c:\windows\system32\dllcache\mfc42u.dll
+ 2008-04-15 12:00 . 2010-09-18 06:53	974848              c:\windows\system32\dllcache\mfc42.dll
+ 2008-04-15 12:00 . 2010-09-18 06:53	953856              c:\windows\system32\dllcache\mfc40u.dll
+ 2008-04-15 12:00 . 2010-09-18 06:53	954368              c:\windows\system32\dllcache\mfc40.dll
+ 2008-04-15 12:00 . 2010-12-20 17:25	735232              c:\windows\system32\dllcache\lsasrv.dll
- 2008-04-15 12:00 . 2009-06-25 08:27	735232              c:\windows\system32\dllcache\lsasrv.dll
- 2008-04-15 12:00 . 2009-06-25 08:27	301568              c:\windows\system32\dllcache\kerberos.dll
+ 2008-04-15 12:00 . 2010-12-22 12:34	301568              c:\windows\system32\dllcache\kerberos.dll
+ 2009-10-23 21:59 . 2010-06-09 07:45	692736              c:\windows\system32\dllcache\inetcomm.dll
- 2009-10-24 09:04 . 2010-06-24 12:27	247808              c:\windows\system32\dllcache\ieproxy.dll
+ 2009-10-24 09:04 . 2010-12-20 23:52	247808              c:\windows\system32\dllcache\ieproxy.dll
- 2008-04-15 12:00 . 2010-06-24 12:27	184320              c:\windows\system32\dllcache\iepeers.dll
+ 2008-04-15 12:00 . 2010-12-20 23:52	184320              c:\windows\system32\dllcache\iepeers.dll
+ 2010-06-11 09:58 . 2010-12-20 23:52	743424              c:\windows\system32\dllcache\iedvtool.dll
- 2010-06-11 09:58 . 2010-06-24 12:27	743424              c:\windows\system32\dllcache\iedvtool.dll
+ 2008-04-15 12:00 . 2010-12-20 23:52	387584              c:\windows\system32\dllcache\iedkcs32.dll
- 2008-04-15 12:00 . 2010-06-24 12:27	387584              c:\windows\system32\dllcache\iedkcs32.dll
+ 2008-04-15 12:00 . 2010-12-20 12:55	173568              c:\windows\system32\dllcache\ie4uinit.exe
- 2008-04-15 12:00 . 2008-04-15 12:00	617472              c:\windows\system32\dllcache\comctl32.dll
+ 2008-04-15 12:00 . 2010-08-23 16:13	617472              c:\windows\system32\dllcache\comctl32.dll
+ 2008-04-15 12:00 . 2011-01-07 14:09	290048              c:\windows\system32\dllcache\atmfd.dll
+ 2008-04-15 12:00 . 2010-08-23 16:13	617472              c:\windows\system32\comctl32.dll
- 2008-04-15 12:00 . 2008-04-15 12:00	617472              c:\windows\system32\comctl32.dll
+ 2010-09-22 07:43 . 2010-09-22 07:43	435024              c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
- 2010-03-23 03:31 . 2010-03-23 03:31	435024              c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
+ 2010-09-23 19:02 . 2010-09-23 19:02	798208              c:\windows\Installer\ca92b.msp
+ 2011-02-15 20:01 . 2011-02-15 20:01	429056              c:\windows\Installer\14f185.msi
+ 2011-02-15 20:00 . 2011-02-15 20:00	202752              c:\windows\Installer\14f156.msi
+ 2011-02-15 19:59 . 2011-02-15 19:59	149504              c:\windows\Installer\14f14e.msi
+ 2011-02-26 14:11 . 2011-02-26 14:11	786432              c:\windows\Installer\12f3b4.msi
+ 2011-02-26 14:08 . 2011-02-26 14:08	479744              c:\windows\Installer\12f37a.msi
+ 2011-02-26 14:08 . 2011-02-26 14:08	301056              c:\windows\Installer\12f375.msi
+ 2010-11-12 11:13 . 2010-11-12 11:13	883712              c:\windows\Installer\112a2d.msp
- 2009-10-23 22:27 . 2010-08-12 15:15	409600              c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\xlicons.exe
+ 2009-10-23 22:27 . 2011-02-09 17:10	409600              c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\xlicons.exe
+ 2009-10-23 22:27 . 2011-02-09 17:10	286720              c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\wordicon.exe
- 2009-10-23 22:27 . 2010-08-12 15:15	286720              c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\wordicon.exe
+ 2009-10-23 22:27 . 2011-02-09 17:10	249856              c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\pptico.exe
- 2009-10-23 22:27 . 2010-08-12 15:15	249856              c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\pptico.exe
- 2009-10-23 22:27 . 2010-08-12 15:15	794624              c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\outicon.exe
+ 2009-10-23 22:27 . 2011-02-09 17:10	794624              c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\outicon.exe
+ 2009-10-23 22:27 . 2011-02-09 17:10	135168              c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\misc.exe
- 2009-10-23 22:27 . 2010-08-12 15:15	135168              c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\misc.exe
+ 2009-10-23 22:27 . 2011-02-09 17:10	593920              c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\accicons.exe
- 2009-10-23 22:27 . 2010-08-12 15:15	593920              c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\accicons.exe
+ 2010-09-22 17:10 . 2010-09-22 17:10	103864              c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73401B7449A0400000010\9.4.0\nppdf32.dll
+ 2011-02-09 17:07 . 2010-11-06 00:23	916480              c:\windows\ie8updates\KB2482017-IE8\wininet.dll
+ 2011-02-09 17:07 . 2010-07-05 13:21	401272              c:\windows\ie8updates\KB2482017-IE8\spuninst\updspapi.dll
+ 2011-02-09 17:07 . 2010-07-05 13:21	234872              c:\windows\ie8updates\KB2482017-IE8\spuninst\spuninst.exe
+ 2011-02-09 17:07 . 2010-11-06 00:23	206848              c:\windows\ie8updates\KB2482017-IE8\occache.dll
+ 2011-02-09 17:07 . 2010-11-06 00:23	611840              c:\windows\ie8updates\KB2482017-IE8\mstime.dll
+ 2011-02-09 17:07 . 2010-11-06 00:23	602112              c:\windows\ie8updates\KB2482017-IE8\msfeeds.dll
+ 2011-02-09 17:07 . 2010-11-06 00:23	247808              c:\windows\ie8updates\KB2482017-IE8\ieproxy.dll
+ 2011-02-09 17:07 . 2010-11-06 00:23	184320              c:\windows\ie8updates\KB2482017-IE8\iepeers.dll
+ 2011-02-09 17:07 . 2010-11-06 00:23	743424              c:\windows\ie8updates\KB2482017-IE8\iedvtool.dll
+ 2011-02-09 17:07 . 2010-11-06 00:23	387584              c:\windows\ie8updates\KB2482017-IE8\iedkcs32.dll
+ 2011-02-09 17:07 . 2010-11-03 12:26	173568              c:\windows\ie8updates\KB2482017-IE8\ie4uinit.exe
+ 2010-12-15 11:27 . 2010-09-10 05:52	916480              c:\windows\ie8updates\KB2416400-IE8\wininet.dll
+ 2010-12-15 11:27 . 2010-07-05 13:21	401272              c:\windows\ie8updates\KB2416400-IE8\spuninst\updspapi.dll
+ 2010-12-15 11:27 . 2010-02-22 14:29	234872              c:\windows\ie8updates\KB2416400-IE8\spuninst\spuninst.exe
+ 2010-12-15 11:27 . 2010-09-10 05:52	206848              c:\windows\ie8updates\KB2416400-IE8\occache.dll
+ 2010-12-15 11:27 . 2010-09-10 05:52	611840              c:\windows\ie8updates\KB2416400-IE8\mstime.dll
+ 2010-12-15 11:27 . 2010-09-10 05:52	602112              c:\windows\ie8updates\KB2416400-IE8\msfeeds.dll
+ 2010-12-15 11:27 . 2010-09-10 05:52	247808              c:\windows\ie8updates\KB2416400-IE8\ieproxy.dll
+ 2010-12-15 11:27 . 2010-09-10 05:52	184320              c:\windows\ie8updates\KB2416400-IE8\iepeers.dll
+ 2010-12-15 11:27 . 2010-09-10 05:52	743424              c:\windows\ie8updates\KB2416400-IE8\iedvtool.dll
+ 2010-12-15 11:27 . 2010-09-10 05:52	387584              c:\windows\ie8updates\KB2416400-IE8\iedkcs32.dll
+ 2010-12-15 11:27 . 2010-08-26 12:22	173056              c:\windows\ie8updates\KB2416400-IE8\ie4uinit.exe
+ 2010-10-14 15:17 . 2010-06-24 12:27	916480              c:\windows\ie8updates\KB2360131-IE8\wininet.dll
+ 2010-10-14 15:17 . 2010-07-05 13:21	401272              c:\windows\ie8updates\KB2360131-IE8\spuninst\updspapi.dll
+ 2010-10-14 15:17 . 2010-02-22 14:29	234872              c:\windows\ie8updates\KB2360131-IE8\spuninst\spuninst.exe
+ 2010-10-14 15:17 . 2010-06-24 12:27	206848              c:\windows\ie8updates\KB2360131-IE8\occache.dll
+ 2010-10-14 15:17 . 2010-06-24 12:27	611840              c:\windows\ie8updates\KB2360131-IE8\mstime.dll
+ 2010-10-14 15:17 . 2010-06-24 12:27	599040              c:\windows\ie8updates\KB2360131-IE8\msfeeds.dll
+ 2010-10-14 15:17 . 2010-06-24 12:27	247808              c:\windows\ie8updates\KB2360131-IE8\ieproxy.dll
+ 2010-10-14 15:17 . 2010-06-24 12:27	184320              c:\windows\ie8updates\KB2360131-IE8\iepeers.dll
+ 2010-10-14 15:17 . 2010-06-24 12:27	743424              c:\windows\ie8updates\KB2360131-IE8\iedvtool.dll
+ 2010-10-14 15:17 . 2010-06-24 12:27	387584              c:\windows\ie8updates\KB2360131-IE8\iedkcs32.dll
+ 2010-10-14 15:17 . 2010-06-23 12:08	173056              c:\windows\ie8updates\KB2360131-IE8\ie4uinit.exe
+ 2010-10-09 07:38 . 2010-10-09 07:38	129536              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\7f9a1ae146571025fd49914b5c71a39b\System.Web.Routing.ni.dll
+ 2010-10-09 07:38 . 2010-10-09 07:38	859648              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\b1646e54b708b9824f4193f87eb00c0e\System.Web.Extensions.Design.ni.dll
+ 2010-10-09 07:38 . 2010-10-09 07:38	328704              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\504a93e73da77c502ecf98bfdfc1485e\System.Web.Entity.ni.dll
+ 2010-10-09 07:38 . 2010-10-09 07:38	301056              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\f22334fbd9497d79448fffef515ae0cc\System.Web.Entity.Design.ni.dll
+ 2010-10-09 07:38 . 2010-10-09 07:38	547328              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\af5452305588da228a74e30324681d20\System.Web.DynamicData.ni.dll
+ 2010-10-09 07:38 . 2010-10-09 07:38	141312              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\9d9bca1a8993c427984aa1bc9c165a33\System.Web.Abstractions.ni.dll
+ 2010-10-07 17:10 . 2010-10-07 17:10	756736              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\165bd290e518b9397ca55192985fdee3\System.Data.Entity.Design.ni.dll
+ 2010-10-07 17:09 . 2010-10-07 17:09	320512              c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\72d3aacfca2e1ce835c210f5a1decb36\ServiceModelReg.ni.exe
+ 2010-10-07 17:09 . 2010-10-07 17:09	842240              c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\af4a3ae6d5c1cafa57002beb487b8d7a\AspNetMMCExt.ni.dll
+ 2010-10-07 16:24 . 2010-10-07 16:24	839680              c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
- 2010-08-12 15:07 . 2010-08-12 15:07	839680              c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2010-10-07 16:24 . 2010-10-07 16:24	835584              c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
- 2010-08-12 15:07 . 2010-08-12 15:07	835584              c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
- 2010-08-12 15:08 . 2010-08-12 15:08	114688              c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2010-10-07 16:24 . 2010-10-07 16:24	114688              c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2010-08-12 15:08 . 2010-08-12 15:08	258048              c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2010-10-07 16:24 . 2010-10-07 16:24	258048              c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2010-10-07 16:24 . 2010-10-07 16:24	131072              c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
- 2010-08-12 15:08 . 2010-08-12 15:08	131072              c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
- 2010-08-12 15:08 . 2010-08-12 15:08	303104              c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2010-10-07 16:24 . 2010-10-07 16:24	303104              c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2010-10-07 16:24 . 2010-10-07 16:24	258048              c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
- 2010-08-12 15:08 . 2010-08-12 15:08	258048              c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2010-10-07 16:24 . 2010-10-07 16:24	372736              c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
- 2010-08-12 15:08 . 2010-08-12 15:08	372736              c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2010-10-07 16:24 . 2010-10-07 16:24	626688              c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
- 2010-08-12 15:08 . 2010-08-12 15:08	626688              c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2010-10-07 16:24 . 2010-10-07 16:24	401408              c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2010-08-12 15:08 . 2010-08-12 15:08	401408              c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2010-10-07 16:24 . 2010-10-07 16:24	188416              c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
- 2010-08-12 15:08 . 2010-08-12 15:08	188416              c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
- 2010-08-12 15:08 . 2010-08-12 15:08	970752              c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2010-10-07 16:25 . 2010-10-07 16:25	970752              c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2010-10-07 16:25 . 2010-10-07 16:25	745472              c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
- 2010-08-12 15:08 . 2010-08-12 15:08	745472              c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2010-10-07 16:25 . 2010-10-07 16:25	425984              c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
- 2010-08-12 15:08 . 2010-08-12 15:08	425984              c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
- 2010-08-12 15:08 . 2010-08-12 15:08	110592              c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2010-10-07 16:25 . 2010-10-07 16:25	110592              c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
- 2010-08-12 15:08 . 2010-08-12 15:08	659456              c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2010-10-07 16:24 . 2010-10-07 16:24	659456              c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2010-10-07 16:24 . 2010-10-07 16:24	372736              c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2010-08-12 15:08 . 2010-08-12 15:08	372736              c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2010-08-12 15:08 . 2010-08-12 15:08	110592              c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2010-10-07 16:24 . 2010-10-07 16:24	110592              c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2010-10-07 16:24 . 2010-10-07 16:24	749568              c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
- 2010-08-12 15:08 . 2010-08-12 15:08	749568              c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
- 2010-08-12 15:08 . 2010-08-12 15:08	655360              c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
+ 2010-10-07 16:24 . 2010-10-07 16:24	655360              c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
- 2010-08-12 15:08 . 2010-08-12 15:08	348160              c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2010-10-07 16:24 . 2010-10-07 16:24	348160              c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
- 2010-08-12 15:07 . 2010-08-12 15:07	507904              c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2010-10-07 16:24 . 2010-10-07 16:24	507904              c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2010-10-07 16:24 . 2010-10-07 16:24	261632              c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
- 2010-08-12 15:08 . 2010-08-12 15:08	261632              c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2010-10-07 16:24 . 2010-10-07 16:24	113664              c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2010-08-12 15:08 . 2010-08-12 15:08	113664              c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2010-08-12 15:08 . 2010-08-12 15:08	258048              c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2010-10-07 16:24 . 2010-10-07 16:24	258048              c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2010-10-07 16:25 . 2010-10-07 16:25	486400              c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
- 2010-08-12 15:08 . 2010-08-12 15:08	486400              c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2010-02-10 11:54 . 2010-11-21 12:26	909824              c:\windows\.jagex_cache_32\runescape\sw3d.dll
+ 2010-06-17 09:22 . 2010-11-21 12:26	102400              c:\windows\.jagex_cache_32\runescape\jagdx.dll
- 2010-06-17 09:22 . 2010-08-07 16:43	102400              c:\windows\.jagex_cache_32\runescape\jagdx.dll
+ 2010-06-17 09:23 . 2010-11-21 12:26	148992              c:\windows\.jagex_cache_32\runescape\jaclib.dll
+ 2010-09-15 13:39 . 2010-02-22 14:29	401272              c:\windows\$NtUninstallKB982802$\spuninst\updspapi.dll
+ 2010-09-15 13:39 . 2010-02-22 14:29	234872              c:\windows\$NtUninstallKB982802$\spuninst\spuninst.exe
+ 2010-09-15 13:39 . 2009-04-15 14:55	585216              c:\windows\$NtUninstallKB982802$\rpcrt4.dll
+ 2010-10-14 15:18 . 2009-10-15 16:38	119808              c:\windows\$NtUninstallKB982132$\t2embed.dll
+ 2010-10-14 15:18 . 2009-05-26 11:41	401272              c:\windows\$NtUninstallKB982132$\spuninst\updspapi.dll
+ 2010-10-14 15:18 . 2009-05-26 11:41	234872              c:\windows\$NtUninstallKB982132$\spuninst\spuninst.exe
+ 2010-10-14 15:14 . 2010-02-22 14:29	401272              c:\windows\$NtUninstallKB981957$\spuninst\updspapi.dll
+ 2010-10-14 15:14 . 2010-02-22 14:29	234872              c:\windows\$NtUninstallKB981957$\spuninst\spuninst.exe
+ 2010-09-15 13:39 . 2008-04-15 12:00	406016              c:\windows\$NtUninstallKB981322$\usp10.dll
+ 2010-09-15 13:39 . 2009-05-26 11:41	401272              c:\windows\$NtUninstallKB981322$\spuninst\updspapi.dll
+ 2010-09-15 13:39 . 2009-05-26 11:41	234872              c:\windows\$NtUninstallKB981322$\spuninst\spuninst.exe
+ 2010-10-14 15:18 . 2008-04-21 21:16	218624              c:\windows\$NtUninstallKB979687$\wordpad.exe
+ 2010-10-14 15:18 . 2010-02-22 14:29	401272              c:\windows\$NtUninstallKB979687$\spuninst\updspapi.dll
+ 2010-10-14 15:18 . 2010-02-22 14:29	234872              c:\windows\$NtUninstallKB979687$\spuninst\spuninst.exe
+ 2010-09-15 13:40 . 2007-07-27 21:11	382840              c:\windows\$NtUninstallKB975558_WM8$\spuninst\updspapi.dll
+ 2010-09-15 13:40 . 2007-07-27 19:04	234872              c:\windows\$NtUninstallKB975558_WM8$\spuninst\spuninst.exe
+ 2010-09-15 13:40 . 2008-04-15 12:00	384512              c:\windows\$NtUninstallKB975558_WM8$\mp4sdmod.dll
+ 2010-12-15 11:26 . 2010-02-22 14:29	401272              c:\windows\$NtUninstallKB2467659$\spuninst\updspapi.dll
+ 2010-12-15 11:26 . 2010-02-22 14:29	234872              c:\windows\$NtUninstallKB2467659$\spuninst\spuninst.exe
+ 2010-12-15 11:26 . 2009-05-26 11:41	401272              c:\windows\$NtUninstallKB2443685$\spuninst\updspapi.dll
+ 2010-12-15 11:26 . 2009-05-26 11:41	234872              c:\windows\$NtUninstallKB2443685$\spuninst\spuninst.exe
+ 2010-12-15 11:27 . 2010-02-22 14:29	401272              c:\windows\$NtUninstallKB2443105$\spuninst\updspapi.dll
+ 2010-12-15 11:27 . 2010-02-22 14:29	234872              c:\windows\$NtUninstallKB2443105$\spuninst\spuninst.exe
+ 2010-12-15 11:26 . 2009-05-26 11:41	401272              c:\windows\$NtUninstallKB2440591$\spuninst\updspapi.dll
+ 2010-12-15 11:26 . 2009-05-26 11:41	234872              c:\windows\$NtUninstallKB2440591$\spuninst\spuninst.exe
+ 2010-12-15 11:26 . 2009-05-26 11:41	401272              c:\windows\$NtUninstallKB2436673$\spuninst\updspapi.dll
+ 2010-12-15 11:26 . 2009-05-26 11:41	234872              c:\windows\$NtUninstallKB2436673$\spuninst\spuninst.exe
+ 2010-12-15 11:22 . 2010-02-22 14:29	401272              c:\windows\$NtUninstallKB2423089$\spuninst\updspapi.dll
+ 2010-12-15 11:22 . 2010-02-22 14:29	234872              c:\windows\$NtUninstallKB2423089$\spuninst\spuninst.exe
+ 2011-01-12 12:47 . 2010-02-22 14:29	401272              c:\windows\$NtUninstallKB2419632$\spuninst\updspapi.dll
+ 2011-01-12 12:47 . 2010-02-22 14:29	234872              c:\windows\$NtUninstallKB2419632$\spuninst\spuninst.exe
+ 2011-01-12 12:47 . 2008-04-15 12:00	249856              c:\windows\$NtUninstallKB2419632$\odbc32.dll
+ 2011-01-12 12:47 . 2008-04-15 12:00	102400              c:\windows\$NtUninstallKB2419632$\msjro.dll
+ 2011-01-12 12:47 . 2008-04-15 12:00	200704              c:\windows\$NtUninstallKB2419632$\msadox.dll
+ 2011-01-12 12:47 . 2008-04-15 12:00	180224              c:\windows\$NtUninstallKB2419632$\msadomd.dll
+ 2011-01-12 12:47 . 2008-04-15 12:00	536576              c:\windows\$NtUninstallKB2419632$\msado15.dll
+ 2011-01-12 12:47 . 2008-04-15 12:00	143360              c:\windows\$NtUninstallKB2419632$\msadco.dll
+ 2010-10-14 15:20 . 2010-02-22 14:29	401272              c:\windows\$NtUninstallKB2387149$\spuninst\updspapi.dll
+ 2010-10-14 15:20 . 2010-02-22 14:29	234872              c:\windows\$NtUninstallKB2387149$\spuninst\spuninst.exe
+ 2010-10-14 15:20 . 2008-04-15 12:00	981760              c:\windows\$NtUninstallKB2387149$\mfc42u.dll
+ 2010-10-14 15:20 . 2008-04-15 12:00	927504              c:\windows\$NtUninstallKB2387149$\mfc40u.dll
+ 2010-10-14 15:20 . 2008-04-15 12:00	924432              c:\windows\$NtUninstallKB2387149$\mfc40.dll
+ 2010-10-14 15:19 . 2007-07-27 21:11	382840              c:\windows\$NtUninstallKB2378111_WM9$\spuninst\updspapi.dll
+ 2010-10-14 15:19 . 2007-07-27 19:04	234872              c:\windows\$NtUninstallKB2378111_WM9$\spuninst\spuninst.exe
+ 2010-10-14 15:12 . 2010-02-22 14:29	401272              c:\windows\$NtUninstallKB2360937$\spuninst\updspapi.dll
+ 2010-10-14 15:12 . 2010-02-22 14:29	234872              c:\windows\$NtUninstallKB2360937$\spuninst\spuninst.exe
+ 2010-10-14 15:12 . 2010-07-22 15:46	590848              c:\windows\$NtUninstallKB2360937$\rpcrt4.dll
+ 2010-09-15 13:40 . 2009-05-26 11:41	401272              c:\windows\$NtUninstallKB2347290$\spuninst\updspapi.dll
+ 2010-09-15 13:40 . 2009-05-26 11:41	234872              c:\windows\$NtUninstallKB2347290$\spuninst\spuninst.exe
+ 2010-10-14 15:19 . 2010-06-21 15:27	354304              c:\windows\$NtUninstallKB2345886$\srv.sys
+ 2010-10-14 15:19 . 2010-02-22 14:29	401272              c:\windows\$NtUninstallKB2345886$\spuninst\updspapi.dll
+ 2010-10-14 15:19 . 2010-02-22 14:29	234872              c:\windows\$NtUninstallKB2345886$\spuninst\spuninst.exe
+ 2010-12-15 11:27 . 2009-05-26 11:41	401272              c:\windows\$NtUninstallKB2296199$\spuninst\updspapi.dll
+ 2010-12-15 11:27 . 2009-05-26 11:41	234872              c:\windows\$NtUninstallKB2296199$\spuninst\spuninst.exe
+ 2010-12-15 11:27 . 2010-09-01 11:52	285824              c:\windows\$NtUninstallKB2296199$\atmfd.dll
+ 2010-10-14 15:19 . 2010-02-22 14:29	401272              c:\windows\$NtUninstallKB2296011$\spuninst\updspapi.dll
+ 2010-10-14 15:19 . 2010-02-22 14:29	234872              c:\windows\$NtUninstallKB2296011$\spuninst\spuninst.exe
+ 2010-10-14 15:19 . 2008-04-15 12:00	617472              c:\windows\$NtUninstallKB2296011$\comctl32.dll
+ 2010-10-14 15:19 . 2010-02-22 14:29	401272              c:\windows\$NtUninstallKB2279986$\spuninst\updspapi.dll
+ 2010-10-14 15:19 . 2010-02-22 14:29	234872              c:\windows\$NtUninstallKB2279986$\spuninst\spuninst.exe
+ 2010-10-14 15:19 . 2010-04-20 05:35	285696              c:\windows\$NtUninstallKB2279986$\atmfd.dll
+ 2010-09-15 13:40 . 2009-05-26 09:01	401272              c:\windows\$NtUninstallKB2259922$\spuninst\updspapi.dll
+ 2010-09-15 13:40 . 2009-05-26 09:01	234872              c:\windows\$NtUninstallKB2259922$\spuninst\spuninst.exe
+ 2010-09-29 19:31 . 2010-02-22 14:29	401272              c:\windows\$NtUninstallKB2158563$\spuninst\updspapi.dll
+ 2010-09-29 19:31 . 2010-02-22 14:29	234872              c:\windows\$NtUninstallKB2158563$\spuninst\spuninst.exe
+ 2010-09-15 13:35 . 2010-02-22 14:29	401272              c:\windows\$NtUninstallKB2141007$\spuninst\updspapi.dll
+ 2010-09-15 13:35 . 2010-02-22 14:29	234872              c:\windows\$NtUninstallKB2141007$\spuninst\spuninst.exe
+ 2010-09-15 13:35 . 2010-01-29 15:01	691712              c:\windows\$NtUninstallKB2141007$\inetcomm.dll
+ 2010-09-15 13:39 . 2008-04-15 12:00	293888              c:\windows\$NtUninstallKB2121546$\winsrv.dll
+ 2010-09-15 13:39 . 2010-02-22 14:29	401272              c:\windows\$NtUninstallKB2121546$\spuninst\updspapi.dll
+ 2010-09-15 13:39 . 2010-02-22 14:29	234872              c:\windows\$NtUninstallKB2121546$\spuninst\spuninst.exe
+ 2010-09-15 13:39 . 2010-02-22 14:29	401272              c:\windows\$hf_mig$\KB982802\update\updspapi.dll
+ 2010-09-15 13:39 . 2010-02-22 14:29	765304              c:\windows\$hf_mig$\KB982802\update\update.exe
+ 2010-09-15 13:39 . 2010-02-22 14:29	234872              c:\windows\$hf_mig$\KB982802\spuninst.exe
+ 2010-07-23 06:17 . 2010-07-23 06:17	590848              c:\windows\$hf_mig$\KB982802\SP3QFE\rpcrt4.dll
+ 2010-10-14 15:18 . 2009-05-26 11:41	401272              c:\windows\$hf_mig$\KB982132\update\updspapi.dll
+ 2010-10-14 15:18 . 2009-05-26 11:41	765304              c:\windows\$hf_mig$\KB982132\update\update.exe
+ 2010-10-14 15:18 . 2009-05-26 11:41	234872              c:\windows\$hf_mig$\KB982132\spuninst.exe
+ 2010-08-27 08:02 . 2010-08-27 08:02	119808              c:\windows\$hf_mig$\KB982132\SP3QFE\t2embed.dll
+ 2010-10-14 15:14 . 2010-02-22 14:29	401272              c:\windows\$hf_mig$\KB981957\update\updspapi.dll
+ 2010-10-14 15:14 . 2010-02-22 14:29	765304              c:\windows\$hf_mig$\KB981957\update\update.exe
+ 2010-10-14 15:14 . 2010-02-22 14:29	234872              c:\windows\$hf_mig$\KB981957\spuninst.exe
+ 2010-09-15 13:39 . 2009-05-26 11:41	401272              c:\windows\$hf_mig$\KB981322\update\updspapi.dll
+ 2010-09-15 13:39 . 2009-05-26 11:41	765304              c:\windows\$hf_mig$\KB981322\update\update.exe
+ 2010-09-15 13:39 . 2009-05-26 11:41	234872              c:\windows\$hf_mig$\KB981322\spuninst.exe
+ 2010-04-16 15:31 . 2010-04-16 15:31	406016              c:\windows\$hf_mig$\KB981322\SP3QFE\usp10.dll
+ 2010-10-14 15:18 . 2010-02-22 14:29	401272              c:\windows\$hf_mig$\KB979687\update\updspapi.dll
+ 2010-10-14 15:18 . 2010-02-22 14:29	765304              c:\windows\$hf_mig$\KB979687\update\update.exe
+ 2010-10-14 15:18 . 2010-02-22 14:29	234872              c:\windows\$hf_mig$\KB979687\spuninst.exe
+ 2010-07-16 11:57 . 2010-07-16 11:57	221184              c:\windows\$hf_mig$\KB979687\SP3QFE\wordpad.exe
+ 2010-12-15 11:26 . 2010-02-22 14:29	401272              c:\windows\$hf_mig$\KB2467659\update\updspapi.dll
+ 2010-12-15 11:26 . 2010-02-22 14:29	765304              c:\windows\$hf_mig$\KB2467659\update\update.exe
+ 2010-12-15 11:26 . 2010-02-22 14:29	234872              c:\windows\$hf_mig$\KB2467659\spuninst.exe
+ 2010-12-15 11:27 . 2010-02-22 14:29	401272              c:\windows\$hf_mig$\KB2443105\update\updspapi.dll
+ 2010-12-15 11:27 . 2010-02-22 14:29	765304              c:\windows\$hf_mig$\KB2443105\update\update.exe
+ 2010-12-15 11:27 . 2010-02-22 14:29	234872              c:\windows\$hf_mig$\KB2443105\spuninst.exe
+ 2010-12-15 11:26 . 2009-05-26 11:41	401272              c:\windows\$hf_mig$\KB2440591\update\updspapi.dll
+ 2010-12-15 11:26 . 2009-05-26 11:41	765304              c:\windows\$hf_mig$\KB2440591\update\update.exe
+ 2010-12-15 11:26 . 2009-05-26 11:41	234872              c:\windows\$hf_mig$\KB2440591\spuninst.exe
+ 2010-12-15 11:26 . 2009-05-26 11:41	401272              c:\windows\$hf_mig$\KB2436673\update\updspapi.dll
+ 2010-12-15 11:26 . 2009-05-26 11:41	765304              c:\windows\$hf_mig$\KB2436673\update\update.exe
+ 2010-12-15 11:26 . 2009-05-26 11:41	234872              c:\windows\$hf_mig$\KB2436673\spuninst.exe
+ 2010-12-15 11:22 . 2010-02-22 14:29	401272              c:\windows\$hf_mig$\KB2423089\update\updspapi.dll
+ 2010-12-15 11:22 . 2010-02-22 14:29	765304              c:\windows\$hf_mig$\KB2423089\update\update.exe
+ 2010-12-15 11:22 . 2010-02-22 14:29	234872              c:\windows\$hf_mig$\KB2423089\spuninst.exe
+ 2011-01-12 12:47 . 2010-02-22 14:29	401272              c:\windows\$hf_mig$\KB2419632\update\updspapi.dll
+ 2011-01-12 12:47 . 2010-02-22 14:29	765304              c:\windows\$hf_mig$\KB2419632\update\update.exe
+ 2011-01-12 12:47 . 2010-02-22 14:29	234872              c:\windows\$hf_mig$\KB2419632\spuninst.exe
+ 2010-11-09 14:51 . 2010-11-09 14:51	253952              c:\windows\$hf_mig$\KB2419632\SP3QFE\odbc32.dll
+ 2010-11-09 14:51 . 2010-11-09 14:51	102400              c:\windows\$hf_mig$\KB2419632\SP3QFE\msjro.dll
+ 2010-11-09 14:51 . 2010-11-09 14:51	200704              c:\windows\$hf_mig$\KB2419632\SP3QFE\msadox.dll
+ 2010-11-09 14:51 . 2010-11-09 14:51	180224              c:\windows\$hf_mig$\KB2419632\SP3QFE\msadomd.dll
+ 2010-11-09 14:51 . 2010-11-09 14:51	565248              c:\windows\$hf_mig$\KB2419632\SP3QFE\msado15.dll
+ 2010-11-09 14:51 . 2010-11-09 14:51	143360              c:\windows\$hf_mig$\KB2419632\SP3QFE\msadco.dll
+ 2010-12-15 11:27 . 2010-07-05 13:21	401272              c:\windows\$hf_mig$\KB2416400-IE8\update\updspapi.dll
+ 2010-12-15 11:27 . 2010-07-05 13:21	765304              c:\windows\$hf_mig$\KB2416400-IE8\update\update.exe
+ 2010-12-15 11:27 . 2010-02-22 14:29	234872              c:\windows\$hf_mig$\KB2416400-IE8\spuninst.exe
+ 2010-12-15 11:17 . 2010-11-06 00:26	919552              c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\wininet.dll
+ 2010-12-15 11:17 . 2010-11-06 00:26	206848              c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\occache.dll
+ 2010-12-15 11:17 . 2010-11-06 00:26	611840              c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\mstime.dll
+ 2010-12-15 11:17 . 2010-11-06 00:26	602112              c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\msfeeds.dll
+ 2010-12-15 11:17 . 2010-11-06 00:26	247808              c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\ieproxy.dll
+ 2010-12-15 11:17 . 2010-11-06 00:26	184320              c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\iepeers.dll
+ 2010-12-15 11:17 . 2010-11-06 00:26	743424              c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\iedvtool.dll
+ 2010-12-15 11:17 . 2010-11-06 00:26	387584              c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\iedkcs32.dll
+ 2010-12-15 11:17 . 2010-11-03 12:02	173568              c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\ie4uinit.exe
+ 2010-10-14 15:20 . 2010-02-22 14:29	401272              c:\windows\$hf_mig$\KB2387149\update\updspapi.dll
+ 2010-10-14 15:20 . 2010-07-05 13:21	765304              c:\windows\$hf_mig$\KB2387149\update\update.exe
+ 2010-10-14 15:20 . 2010-02-22 14:29	234872              c:\windows\$hf_mig$\KB2387149\spuninst.exe
+ 2010-10-14 14:14 . 2010-09-18 07:18	974848              c:\windows\$hf_mig$\KB2387149\SP3QFE\mfc42u.dll
+ 2010-10-14 14:14 . 2010-09-18 07:18	974848              c:\windows\$hf_mig$\KB2387149\SP3QFE\mfc42.dll
+ 2010-10-14 14:14 . 2010-09-18 07:18	953856              c:\windows\$hf_mig$\KB2387149\SP3QFE\mfc40u.dll
+ 2010-10-14 14:14 . 2010-09-18 07:18	954368              c:\windows\$hf_mig$\KB2387149\SP3QFE\mfc40.dll
+ 2010-10-14 15:12 . 2010-02-22 14:29	401272              c:\windows\$hf_mig$\KB2360937\update\updspapi.dll
+ 2010-10-14 15:12 . 2010-02-22 14:29	765304              c:\windows\$hf_mig$\KB2360937\update\update.exe
+ 2010-10-14 15:12 . 2010-02-22 14:29	234872              c:\windows\$hf_mig$\KB2360937\spuninst.exe
+ 2010-10-14 14:03 . 2010-08-16 08:44	590848              c:\windows\$hf_mig$\KB2360937\SP3QFE\rpcrt4.dll
+ 2010-10-14 15:17 . 2010-07-05 13:21	401272              c:\windows\$hf_mig$\KB2360131-IE8\update\updspapi.dll
+ 2010-10-14 15:17 . 2010-02-22 14:29	765304              c:\windows\$hf_mig$\KB2360131-IE8\update\update.exe
+ 2010-10-14 15:17 . 2010-02-22 14:29	234872              c:\windows\$hf_mig$\KB2360131-IE8\spuninst.exe
+ 2010-10-14 14:07 . 2010-09-10 05:51	919552              c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\wininet.dll
+ 2010-10-14 14:08 . 2010-09-10 05:51	206848              c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\occache.dll
+ 2010-10-14 14:08 . 2010-09-10 05:51	611840              c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\mstime.dll
+ 2010-10-14 14:08 . 2010-09-10 05:51	602112              c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\msfeeds.dll
+ 2010-10-14 14:08 . 2010-09-10 05:51	247808              c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\ieproxy.dll
+ 2010-10-14 14:08 . 2010-09-10 05:51	184320              c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\iepeers.dll
+ 2010-10-14 14:07 . 2010-09-10 05:51	743424              c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\iedvtool.dll
+ 2010-10-14 14:07 . 2010-09-10 05:51	387584              c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\iedkcs32.dll
+ 2010-10-14 14:07 . 2010-09-08 15:49	173056              c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\ie4uinit.exe
+ 2010-09-15 13:40 . 2009-05-26 11:41	401272              c:\windows\$hf_mig$\KB2347290\update\updspapi.dll
+ 2010-09-15 13:40 . 2009-05-26 11:41	765304              c:\windows\$hf_mig$\KB2347290\update\update.exe
+ 2010-09-15 13:40 . 2009-05-26 11:41	234872              c:\windows\$hf_mig$\KB2347290\spuninst.exe
+ 2010-10-14 15:19 . 2010-02-22 14:29	401272              c:\windows\$hf_mig$\KB2345886\update\updspapi.dll
+ 2010-10-14 15:19 . 2010-02-22 14:29	765304              c:\windows\$hf_mig$\KB2345886\update\update.exe
+ 2010-10-14 15:19 . 2010-02-22 14:29	234872              c:\windows\$hf_mig$\KB2345886\spuninst.exe
+ 2010-08-26 13:37 . 2010-08-26 13:37	357248              c:\windows\$hf_mig$\KB2345886\SP3QFE\srv.sys
+ 2010-12-15 11:27 . 2009-05-26 11:41	401272              c:\windows\$hf_mig$\KB2296199\update\updspapi.dll
+ 2010-12-15 11:27 . 2009-05-26 11:41	765304              c:\windows\$hf_mig$\KB2296199\update\update.exe
+ 2010-12-15 11:27 . 2009-05-26 11:41	234872              c:\windows\$hf_mig$\KB2296199\spuninst.exe
+ 2010-10-28 13:05 . 2010-10-28 13:05	290048              c:\windows\$hf_mig$\KB2296199\SP3QFE\atmfd.dll
+ 2010-10-14 15:19 . 2010-02-22 14:29	401272              c:\windows\$hf_mig$\KB2279986\update\updspapi.dll
+ 2010-10-14 15:19 . 2010-02-22 14:29	765304              c:\windows\$hf_mig$\KB2279986\update\update.exe
+ 2010-10-14 15:19 . 2010-02-22 14:29	234872              c:\windows\$hf_mig$\KB2279986\spuninst.exe
+ 2010-09-01 11:50 . 2010-09-01 11:50	285824              c:\windows\$hf_mig$\KB2279986\SP3QFE\atmfd.dll
+ 2010-09-15 13:40 . 2009-05-26 09:01	401272              c:\windows\$hf_mig$\KB2259922\update\updspapi.dll
+ 2010-09-15 13:40 . 2009-05-26 09:01	765304              c:\windows\$hf_mig$\KB2259922\update\update.exe
+ 2010-09-15 13:40 . 2009-05-26 09:01	234872              c:\windows\$hf_mig$\KB2259922\spuninst.exe
+ 2010-09-15 13:35 . 2010-02-22 14:29	401272              c:\windows\$hf_mig$\KB2141007\update\updspapi.dll
+ 2010-09-15 13:35 . 2010-02-22 14:29	765304              c:\windows\$hf_mig$\KB2141007\update\update.exe
+ 2010-09-15 13:35 . 2010-02-22 14:29	234872              c:\windows\$hf_mig$\KB2141007\spuninst.exe
+ 2010-06-09 07:42 . 2010-06-09 07:42	692736              c:\windows\$hf_mig$\KB2141007\SP3QFE\inetcomm.dll
+ 2010-09-15 13:39 . 2010-02-22 14:29	401272              c:\windows\$hf_mig$\KB2121546\update\updspapi.dll
+ 2010-09-15 13:39 . 2010-02-22 14:29	765304              c:\windows\$hf_mig$\KB2121546\update\update.exe
+ 2010-09-15 13:39 . 2010-02-22 14:29	234872              c:\windows\$hf_mig$\KB2121546\spuninst.exe
+ 2010-06-18 17:46 . 2010-06-18 17:46	293888              c:\windows\$hf_mig$\KB2121546\SP3QFE\winsrv.dll
+ 2010-10-14 14:12 . 2010-08-23 16:13	1054208              c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
+ 2011-02-26 14:09 . 2011-02-11 06:54	5943120              c:\windows\Temp3EE94E58-33E0-98C0-89D7-98FB8CEC51E2-Signatures\mpengine.dll
+ 2008-04-15 12:00 . 2010-08-25 05:23	5541888              c:\windows\system32\wmp.dll
+ 2008-04-15 12:00 . 2010-12-20 23:52	1210880              c:\windows\system32\urlmon.dll
- 2008-04-15 12:00 . 2010-07-27 06:30	8509440              c:\windows\system32\shell32.dll
+ 2008-04-15 12:00 . 2011-01-21 14:44	8509440              c:\windows\system32\shell32.dll
+ 2010-10-29 15:13 . 2010-10-29 15:13	2427248              c:\windows\system32\pbsvc_heroes.exe
+ 2008-04-15 12:00 . 2010-07-16 12:01	1287680              c:\windows\system32\ole32.dll
+ 2008-04-15 12:00 . 2010-12-20 23:52	5961216              c:\windows\system32\mshtml.dll
+ 2009-03-08 02:32 . 2010-12-20 23:52	1991680              c:\windows\system32\iertutil.dll
+ 2008-04-15 12:00 . 2010-08-25 05:23	5541888              c:\windows\system32\dllcache\wmp.dll
+ 2008-04-15 12:00 . 2010-12-31 14:04	1855104              c:\windows\system32\dllcache\win32k.sys
+ 2008-04-15 12:00 . 2010-12-20 23:52	1210880              c:\windows\system32\dllcache\urlmon.dll
- 2008-04-15 12:00 . 2010-07-27 06:30	8509440              c:\windows\system32\dllcache\shell32.dll
+ 2008-04-15 12:00 . 2011-01-21 14:44	8509440              c:\windows\system32\dllcache\shell32.dll
+ 2008-04-15 12:00 . 2010-07-16 12:01	1287680              c:\windows\system32\dllcache\ole32.dll
+ 2009-10-24 08:16 . 2010-12-09 15:14	2197120              c:\windows\system32\dllcache\ntoskrnl.exe
+ 2009-10-24 08:16 . 2010-12-09 15:14	2031616              c:\windows\system32\dllcache\ntkrpamp.exe
+ 2009-02-10 17:10 . 2010-12-09 15:14	2073728              c:\windows\system32\dllcache\ntkrnlpa.exe
+ 2009-10-24 08:16 . 2010-12-09 15:14	2153472              c:\windows\system32\dllcache\ntkrnlmp.exe
+ 2008-04-15 12:00 . 2010-12-20 23:52	5961216              c:\windows\system32\dllcache\mshtml.dll
+ 2009-10-24 09:04 . 2010-12-20 23:52	1991680              c:\windows\system32\dllcache\iertutil.dll
+ 2010-09-22 07:44 . 2010-09-22 07:44	5242880              c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
- 2010-03-23 03:32 . 2010-03-23 03:32	5242880              c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
+ 2011-01-17 15:06 . 2011-01-17 15:06	5518848              c:\windows\Installer\f122a.msp
+ 2010-08-05 10:59 . 2010-08-05 10:59	4033536              c:\windows\Installer\aae31b.msp
+ 2010-08-20 11:50 . 2010-08-20 11:50	5518848              c:\windows\Installer\aae2fb.msp
+ 2010-08-25 15:06 . 2010-08-25 15:06	6479360              c:\windows\Installer\aae2e6.msp
+ 2010-09-23 05:39 . 2010-09-23 05:39	4265472              c:\windows\Installer\7dc9c0.msp
+ 2010-08-13 15:59 . 2010-08-13 15:59	8182272              c:\windows\Installer\42aeeb.msp
+ 2010-08-13 16:02 . 2010-08-13 16:02	2545664              c:\windows\Installer\42aee3.msp
+ 2010-08-23 15:09 . 2010-08-23 15:09	7673344              c:\windows\Installer\42aedb.msp
+ 2010-10-04 14:32 . 2010-10-04 14:32	5517824              c:\windows\Installer\42aec6.msp
+ 2010-08-24 07:49 . 2010-08-24 07:49	6825472              c:\windows\Installer\42aeb1.msp
+ 2010-11-08 07:14 . 2010-11-08 07:14	3402752              c:\windows\Installer\16687a.msp
+ 2011-01-12 19:07 . 2011-01-12 19:07	3963904              c:\windows\Installer\166866.msi
+ 2010-09-17 05:04 . 2010-09-17 05:04	9401856              c:\windows\Installer\122598.msp
+ 2010-10-01 16:42 . 2010-10-01 16:42	5054464              c:\windows\Installer\12257b.msp
+ 2010-10-22 12:25 . 2010-10-22 12:25	5521408              c:\windows\Installer\122566.msp
+ 2010-10-22 14:45 . 2010-10-22 14:45	8444928              c:\windows\Installer\112a43.msp
+ 2010-12-06 14:02 . 2010-12-06 14:02	5518848              c:\windows\Installer\112a15.msp
+ 2010-10-01 20:53 . 2010-10-01 20:53	4147712              c:\windows\Installer\112a00.msp
+ 2010-09-16 02:08 . 2010-09-16 02:08	6210560              c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73401B7449A0400000010\9.4.0\authplay.dll
+ 2011-02-09 17:07 . 2010-11-06 00:23	1210880              c:\windows\ie8updates\KB2482017-IE8\urlmon.dll
+ 2011-02-09 17:07 . 2010-11-06 00:23	5959168              c:\windows\ie8updates\KB2482017-IE8\mshtml.dll
+ 2011-02-09 17:07 . 2010-11-06 00:23	1991680              c:\windows\ie8updates\KB2482017-IE8\iertutil.dll
+ 2010-12-15 11:27 . 2010-09-10 05:52	1210880              c:\windows\ie8updates\KB2416400-IE8\urlmon.dll
+ 2010-12-15 11:27 . 2010-09-10 05:52	5957120              c:\windows\ie8updates\KB2416400-IE8\mshtml.dll
+ 2010-12-15 11:27 . 2010-09-10 05:52	1986560              c:\windows\ie8updates\KB2416400-IE8\iertutil.dll
+ 2010-10-14 15:17 . 2010-06-24 12:27	1210368              c:\windows\ie8updates\KB2360131-IE8\urlmon.dll
+ 2010-10-14 15:17 . 2010-06-24 12:27	5951488              c:\windows\ie8updates\KB2360131-IE8\mshtml.dll
+ 2010-10-14 15:17 . 2010-06-24 12:27	1986560              c:\windows\ie8updates\KB2360131-IE8\iertutil.dll
+ 2009-10-24 08:16 . 2010-12-09 15:14	2197120              c:\windows\Driver Cache\i386\ntoskrnl.exe
+ 2009-10-24 08:16 . 2010-12-09 15:14	2031616              c:\windows\Driver Cache\i386\ntkrpamp.exe
+ 2009-02-10 17:10 . 2010-12-09 15:14	2073728              c:\windows\Driver Cache\i386\ntkrnlpa.exe
+ 2009-10-24 08:16 . 2010-12-09 15:14	2153472              c:\windows\Driver Cache\i386\ntkrnlmp.exe
+ 2010-10-09 07:39 . 2010-10-09 07:39	1356288              c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\bec60fe2e934a6284224ab45b0e981e2\System.WorkflowServices.ni.dll
+ 2010-10-09 07:38 . 2010-10-09 07:38	1908224              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\09da139c48e2f5e76994a5c0f2e5b19e\System.Workflow.Runtime.ni.dll
+ 2010-10-09 07:38 . 2010-10-09 07:38	4514304              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\6809417da74ff937e18b3034f1eac2f2\System.Workflow.ComponentModel.ni.dll
+ 2010-10-09 07:38 . 2010-10-09 07:38	2992640              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\6c91ee82035d30efa8893e7b0396bbb0\System.Workflow.Activities.ni.dll
+ 2010-10-09 07:38 . 2010-10-09 07:38	1840640              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\181254ba0cb690decedb950fd26d7bea\System.Web.Services.ni.dll
+ 2010-10-09 07:38 . 2010-10-09 07:38	2209280              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\4200f716e9a41cb91d17516ba864e586\System.Web.Mobile.ni.dll
+ 2010-10-09 07:38 . 2010-10-09 07:38	2405376              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\da367bc2ecf2c9c5b4f858b6dba9e2ea\System.Web.Extensions.ni.dll
+ 2010-10-09 07:38 . 2010-10-09 07:38	1706496              c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\8e34e273d036b7468fc4e951a1fde437\System.ServiceModel.Web.ni.dll
+ 2010-10-07 17:09 . 2010-10-07 17:09	1070080              c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\095bb4f033374647b6d66c51f16bb886\System.IdentityModel.ni.dll
+ 2010-10-07 17:10 . 2010-10-07 17:10	1328128              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\b8c9267d87b7358e1a5f00bf1572c313\System.Data.Services.ni.dll
+ 2010-10-07 17:10 . 2010-10-07 17:10	1712128              c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\a27783547338dbebf84101a685ba641b\Microsoft.VisualBasic.ni.dll
- 2010-08-12 15:08 . 2010-08-12 15:08	3182592              c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
+ 2010-10-07 16:25 . 2010-10-07 16:25	3182592              c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
+ 2010-10-07 16:25 . 2010-10-07 16:25	2048000              c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
- 2010-08-12 15:08 . 2010-08-12 15:08	2048000              c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
- 2010-08-12 15:07 . 2010-08-12 15:07	5025792              c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2010-10-07 16:24 . 2010-10-07 16:24	5025792              c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
- 2009-10-24 08:05 . 2009-10-24 08:05	1277952              c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
+ 2010-10-08 07:59 . 2010-10-08 07:59	1277952              c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
+ 2010-10-07 16:24 . 2010-10-07 16:24	5062656              c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
- 2010-08-12 15:07 . 2010-08-12 15:07	5062656              c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2010-10-07 16:24 . 2010-10-07 16:24	5242880              c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
- 2010-08-12 15:07 . 2010-08-12 15:07	5242880              c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
+ 2010-10-07 16:25 . 2010-10-07 16:25	2933248              c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
- 2010-08-12 15:08 . 2010-08-12 15:08	2933248              c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
- 2010-08-12 15:08 . 2010-08-12 15:08	4550656              c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2010-10-07 16:24 . 2010-10-07 16:24	4550656              c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2010-10-14 15:14 . 2010-06-24 09:02	1852032              c:\windows\$NtUninstallKB981957$\win32k.sys
+ 2010-10-14 15:18 . 2008-04-15 12:00	1287168              c:\windows\$NtUninstallKB979687$\ole32.dll
+ 2010-12-15 11:26 . 2010-09-01 07:57	1852928              c:\windows\$NtUninstallKB2436673$\win32k.sys
+ 2010-10-14 15:20 . 2008-04-15 12:00	1028096              c:\windows\$NtUninstallKB2387149$\mfc42.dll
+ 2010-10-14 15:19 . 2009-07-13 09:08	5537792              c:\windows\$NtUninstallKB2378111_WM9$\wmp.dll
+ 2010-09-01 07:57 . 2010-09-01 07:57	1862016              c:\windows\$hf_mig$\KB981957\SP3QFE\win32k.sys
+ 2010-07-16 11:59 . 2010-07-16 11:59	1288704              c:\windows\$hf_mig$\KB979687\SP3QFE\ole32.dll
+ 2010-10-26 14:05 . 2010-10-26 14:05	1862400              c:\windows\$hf_mig$\KB2436673\SP3QFE\win32k.sys
+ 2010-12-15 11:17 . 2010-11-06 00:26	1211904              c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\urlmon.dll
+ 2010-12-15 11:17 . 2010-11-06 00:26	5960704              c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\mshtml.dll
+ 2010-12-15 11:17 . 2010-11-06 00:26	1992192              c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\iertutil.dll
+ 2010-10-14 14:07 . 2010-09-10 05:51	1211904              c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\urlmon.dll
+ 2010-10-14 14:08 . 2010-09-10 05:51	5958656              c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\mshtml.dll
+ 2010-10-14 14:08 . 2010-09-10 05:51	1987072              c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\iertutil.dll
+ 2009-10-24 09:02 . 2011-02-09 17:07	37443528              c:\windows\system32\MRT.exe
+ 2009-03-08 02:39 . 2010-12-20 10:52	11080704              c:\windows\system32\ieframe.dll
+ 2009-10-24 09:04 . 2010-12-20 10:52	11080704              c:\windows\system32\dllcache\ieframe.dll
+ 2011-01-06 12:34 . 2011-01-06 12:34	20304384              c:\windows\Installer\a9a03a.msp
+ 2010-09-29 19:32 . 2010-09-29 19:32	20303872              c:\windows\Installer\1f0e069.msp
+ 2010-09-08 15:54 . 2010-09-08 15:54	20303872              c:\windows\Installer\1288ce7.msp
+ 2010-10-14 15:57 . 2010-10-14 15:57	11189248              c:\windows\Installer\122590.msp
+ 2011-02-09 17:07 . 2010-11-06 00:23	11080704              c:\windows\ie8updates\KB2482017-IE8\ieframe.dll
+ 2010-12-15 11:27 . 2010-09-10 05:52	11080192              c:\windows\ie8updates\KB2416400-IE8\ieframe.dll
+ 2010-10-14 15:17 . 2010-06-24 15:57	11077120              c:\windows\ie8updates\KB2360131-IE8\ieframe.dll
+ 2010-10-09 07:38 . 2010-10-09 07:38	11800576              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\41f436dae3c8146752d06130f7331527\System.Web.ni.dll
+ 2010-10-07 17:09 . 2010-10-07 17:09	17403904              c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\75aeb590008d6e166f7be18f935c52d2\System.ServiceModel.ni.dll
+ 2010-10-07 16:57 . 2010-10-07 16:57	10683392              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\fdc42078fd10e4dc8b05087900c63977\System.Design.ni.dll
+ 2010-11-06 04:56 . 2010-11-06 04:56	11082752              c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\ieframe.dll
+ 2010-09-10 09:21 . 2010-09-10 09:21	11082240              c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\ieframe.dll
.
-- Snapshot teruggezet naar huidige datum --
.
(((((((((((((((((((((((((((((((((((((   Reg Opstartpunten   )))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Google Update"="c:\documents and settings\Computer\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" [2009-10-23 133104]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AlcWzrd"="ALCWZRD.EXE" [2005-06-29 2806272]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2009-03-23 1983816]
"CanonSolutionMenu"="c:\program files\Canon\SolutionMenu\CNSLMAIN.exe" [2009-03-17 767312]
"beid"="c:\program files\Belgium Identity Card\beid35gui.exe" [2010-02-05 2056192]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-09-23 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2010-11-30 997408]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2010-09-20 22:07	932288	----a-r-	c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2010-09-23 03:47	35760	----a-w-	c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
2009-10-23 22:10	133104	----atw-	c:\documents and settings\Computer\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2009-11-12 15:33	141600	----a-w-	c:\program files\iTunes\iTunesHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
2005-06-21 13:09	90112	----a-w-	c:\windows\SOUNDMAN.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateManager]
2003-08-18 23:01	110592	----a-w-	c:\program files\Common Files\Sonic\Update Manager\sgtray.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"SpaceQuery Service"=2 (0x2)
"SLService"=2 (0x2)
"ose"=3 (0x3)
"Nero BackItUp Scheduler 4.0"=2 (0x2)
"JavaQuickStarterService"=2 (0x2)
"iPod Service"=3 (0x3)
"Bonjour Service"=2 (0x2)
"Bandoo Coordinator"=2 (0x2)
"ATI Smart"=2 (0x2)
"Ati HotKey Poller"=2 (0x2)
"Apple Mobile Device"=2 (0x2)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\WINDOWS\\pchealth\\helpctr\\binaries\\HelpCtr.exe"=
"c:\\Program Files\\FrostWire\\FrostWire.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
.
R1 MpKsl6e72f1b8;MpKsl6e72f1b8;c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{9BA8C19B-D7E2-45E4-9879-FAD6971075F9}\MpKsl6e72f1b8.sys [5/03/2011 13:56 28752]
R3 Cap713x;Cap713x Video Capture;c:\windows\system32\drivers\Cap713x.sys [8/10/2004 15:58 751104]
S0 TfFsMon;TfFsMon;c:\windows\system32\drivers\TfFsMon.sys --> c:\windows\system32\drivers\TfFsMon.sys [?]
S0 TfSysMon;TfSysMon;c:\windows\system32\drivers\TfSysMon.sys --> c:\windows\system32\drivers\TfSysMon.sys [?]
S2 Wlansvc;@%SystemRoot%\System32\wlansvc.dll,-257;c:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted [15/04/2008 13:00 14336]
S3 ACSSCR;ACR38 Smart Card Reader;c:\windows\system32\drivers\a38usb.sys [14/02/2010 20:24 33536]
S3 TfNetMon;TfNetMon;\??\c:\windows\system32\drivers\TfNetMon.sys --> c:\windows\system32\drivers\TfNetMon.sys [?]
.
--- Andere Services/Drivers In Geheugen ---
.
*NewlyCreated* - MPKSL6E72F1B8
.
Inhoud van de 'Gedeelde Taken' map
.
2010-12-30 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]
.
2011-02-27 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-73586283-1606980848-527237240-1003Core.job
- c:\documents and settings\Computer\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-10-23 22:10]
.
2011-03-05 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-73586283-1606980848-527237240-1003UA.job
- c:\documents and settings\Computer\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-10-23 22:10]
.
2011-03-05 c:\windows\Tasks\MP Scheduled Scan.job
- c:\program files\Microsoft Security Client\Antimalware\MpCmdRun.exe [2010-11-11 11:26]
.
2011-03-05 c:\windows\Tasks\OGALogon.job
- c:\windows\system32\OGAEXEC.exe [2009-08-03 14:07]
.
.
------- Bijkomende Scan -------
.
uStart Page = hxxp://eu.ask.com/?o=14200&l=dis
mSearch Bar = 
uInternet Settings,ProxyOverride = *.local
IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
FF - ProfilePath - c:\documents and settings\Computer\Application Data\Mozilla\Firefox\Profiles\7sskj9f9.default\
FF - prefs.js: browser.search.selectedEngine - Ask.com
FF - prefs.js: browser.startup.homepage - hxxp://eu.ask.com?o=14200&l=dis
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Belgium eID: belgiumeid@eid.belgium.be - c:\program files\Mozilla Firefox\extensions\belgiumeid@eid.belgium.be
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}
FF - Ext: z: {50012027-8702-8c00-09e9-1de9969184b0} - c:\program files\Mozilla Firefox\extensions\{50012027-8702-8c00-09e9-1de9969184b0}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\Java\jre6\lib\deploy\jqs\ff
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: Stylish: {46551EC9-40F0-4e47-8E18-8E5CF550CFB8} - %profile%\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}
FF - Ext: New Tab King: {FC5BAC7D-D696-4ba6-B913-CF8F000C33DF} - %profile%\extensions\{FC5BAC7D-D696-4ba6-B913-CF8F000C33DF}
FF - Ext: Battlefield Heroes Updater: battlefieldheroespatcher@ea.com - %profile%\extensions\battlefieldheroespatcher@ea.com
.
- - - - ORPHANS VERWIJDERD - - - -
.
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-03-05 14:09
Windows 5.1.2600 Service Pack 3 NTFS
.
scannen van verborgen processen ... 
.
scannen van verborgen autostart items ... 
.
scannen van verborgen bestanden ... 
.
Scan succesvol afgerond
verborgen bestanden: 0
.
**************************************************************************
.
--------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\h–€|ÿÿÿÿ¤•€|ù•9~*]
"3140110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"
.
--------------------- DLLs Geladen Onder Lopende Processen ---------------------
.
- - - - - - - > 'winlogon.exe'(600)
c:\windows\system32\Ati2evxx.dll
.
Voltooingstijd: 2011-03-05  14:12:25
ComboFix-quarantined-files.txt  2011-03-05 13:12
ComboFix2.txt  2010-08-13 09:15
.
Pre-Run: 221.670.924.288 bytes beschikbaar
Post-Run: 221.847.883.776 bytes beschikbaar
.
- - End Of File - - 0F41939AF79C0CC6AAA7DF1B97B8F8F1

Link naar reactie
Delen op andere sites
kape Grootmeester

kape

Geplaatst:
Geplaatst:

Open een kladblokbestand.

Kopieer en plak daarin de onderstaande vetgedrukte tekst.

File::

c:\windows\system32\90c67a0d.exe

FireFox::

FF - ProfilePath - c:\documents and settings\Computer\Application Data\Mozilla\Firefox\Profiles\7sskj9f9.default\

FF - prefs.js: browser.search.selectedEngine -

Sla dit bestand op je bureaublad op als CFScript.txt.

Sleep CFScript.txt in ComboFix.exe

Dit zal ComboFix doen herstarten. Start opnieuw op als dat gevraagd wordt.

Post na herstart de inhoud van de Combofix.txt in je volgende bericht.

Link naar reactie
Delen op andere sites
mani88 Vergevorderde

mani88

Geplaatst:
  • Auteur
Geplaatst: 
ComboFix 11-03-05.02 - Computer 06/03/2011  15:18:28.4.2 - x86
Microsoft Windows XP Professional  5.1.2600.3.1252.32.1043.18.511.290 [GMT 1:00]
Gestart vanuit: c:\documents and settings\Computer\Bureaublad\ComboFix.exe
gebruikte Opdracht switches :: c:\documents and settings\Computer\Bureaublad\CFScript.txt
AV: Microsoft Security Essentials *Disabled/Updated* {BCF43643-A118-4432-AEDE-D861FCBCFCDF}
AV: Microsoft Security Essentials *Disabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}
.
FILE ::
"c:\windows\system32\90c67a0d.exe"
.
.
((((((((((((((((((((((((((((((((((   Andere Verwijderingen   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\system32\90c67a0d.exe
.
.
((((((((((((((((((((   Bestanden Gemaakt van 2011-02-06 to 2011-03-06  ))))))))))))))))))))))))))))))
.
.
2011-03-06 13:23 . 2011-03-06 13:23	28752	----a-w-	c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{12F5C32B-EC05-4A30-9A37-2CCA7F2DAD6B}\MpKslcd83a27d.sys
2011-03-06 13:21 . 2011-02-10 21:54	5943120	----a-w-	c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{12F5C32B-EC05-4A30-9A37-2CCA7F2DAD6B}\mpengine.dll
2011-03-02 17:32 . 2011-02-10 22:23	2635264	----a-w-	c:\program files\Mozilla Firefox\extensions\{50012027-8702-8c00-09e9-1de9969184b0}\components\bccb9b5b.dll
2011-02-26 14:09 . 2011-02-26 14:09	--------	d-----w-	c:\windows\Temp3EE94E58-33E0-98C0-89D7-98FB8CEC51E2-Signatures
2011-02-26 14:08 . 2011-02-26 14:12	--------	d-----w-	c:\program files\Microsoft Security Client
2011-02-15 20:00 . 2011-02-15 20:00	--------	d-----w-	c:\program files\Windows Live SkyDrive
2011-02-15 19:57 . 2011-02-15 19:57	84718440	----a-w-	c:\program files\Common Files\Windows Live\.cache\wlc14.tmp
.
.
(((((((((((((((((((((((((((((((((((((((   Find3M Rapport   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-02-10 21:54 . 2010-03-07 11:25	5943120	----a-w-	c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2011-01-21 14:44 . 2008-04-15 12:00	441344	----a-w-	c:\windows\system32\shimgvw.dll
2011-01-07 14:09 . 2008-04-15 12:00	290048	----a-w-	c:\windows\system32\atmfd.dll
2010-12-31 14:04 . 2008-04-15 12:00	1855104	----a-w-	c:\windows\system32\win32k.sys
2010-12-22 12:34 . 2008-04-15 12:00	301568	----a-w-	c:\windows\system32\kerberos.dll
2010-12-20 23:52 . 2008-04-15 12:00	916480	----a-w-	c:\windows\system32\wininet.dll
2010-12-20 23:52 . 2008-04-15 12:00	43520	----a-w-	c:\windows\system32\licmgr10.dll
2010-12-20 23:52 . 2008-04-15 12:00	1469440	------w-	c:\windows\system32\inetcpl.cpl
2010-12-20 17:25 . 2008-04-15 12:00	735232	----a-w-	c:\windows\system32\lsasrv.dll
2010-12-20 12:55 . 2008-04-15 12:00	385024	----a-w-	c:\windows\system32\html.iec
2010-12-09 15:15 . 2008-04-15 12:00	739328	----a-w-	c:\windows\system32\ntdll.dll
2010-12-09 15:14 . 2008-04-14 22:11	2031616	----a-w-	c:\windows\system32\ntkrnlpa.exe
2010-12-09 15:14 . 2008-04-15 12:00	2153472	----a-w-	c:\windows\system32\ntoskrnl.exe
2010-12-09 14:30 . 2008-04-15 12:00	33280	----a-w-	c:\windows\system32\csrsrv.dll
.
.
(((((((((((((((((((((((((((((   SnapShot_2011-03-05_13.09.52   )))))))))))))))))))))))))))))))))))))))))
.
+ 2011-03-06 13:11 . 2011-03-06 13:11	16384              c:\windows\Temp\Perflib_Perfdata_748.dat
.
(((((((((((((((((((((((((((((((((((((   Reg Opstartpunten   )))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Google Update"="c:\documents and settings\Computer\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" [2009-10-23 133104]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AlcWzrd"="ALCWZRD.EXE" [2005-06-29 2806272]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2009-03-23 1983816]
"CanonSolutionMenu"="c:\program files\Canon\SolutionMenu\CNSLMAIN.exe" [2009-03-17 767312]
"beid"="c:\program files\Belgium Identity Card\beid35gui.exe" [2010-02-05 2056192]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-09-23 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2010-11-30 997408]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2010-09-20 22:07	932288	----a-r-	c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2010-09-23 03:47	35760	----a-w-	c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
2009-10-23 22:10	133104	----atw-	c:\documents and settings\Computer\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2009-11-12 15:33	141600	----a-w-	c:\program files\iTunes\iTunesHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
2005-06-21 13:09	90112	----a-w-	c:\windows\SOUNDMAN.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateManager]
2003-08-18 23:01	110592	----a-w-	c:\program files\Common Files\Sonic\Update Manager\sgtray.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"SpaceQuery Service"=2 (0x2)
"SLService"=2 (0x2)
"ose"=3 (0x3)
"Nero BackItUp Scheduler 4.0"=2 (0x2)
"JavaQuickStarterService"=2 (0x2)
"iPod Service"=3 (0x3)
"Bonjour Service"=2 (0x2)
"Bandoo Coordinator"=2 (0x2)
"ATI Smart"=2 (0x2)
"Ati HotKey Poller"=2 (0x2)
"Apple Mobile Device"=2 (0x2)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\WINDOWS\\pchealth\\helpctr\\binaries\\HelpCtr.exe"=
"c:\\Program Files\\FrostWire\\FrostWire.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
.
R1 MpKslbfb02441;MpKslbfb02441;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{7F7ACD2D-CB5F-4F4C-8324-7C0D60CC76D7}\MpKslbfb02441.sys --> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{7F7ACD2D-CB5F-4F4C-8324-7C0D60CC76D7}\MpKslbfb02441.sys [?]
R1 MpKslc8e8cc96;MpKslc8e8cc96;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{7F7ACD2D-CB5F-4F4C-8324-7C0D60CC76D7}\MpKslc8e8cc96.sys --> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{7F7ACD2D-CB5F-4F4C-8324-7C0D60CC76D7}\MpKslc8e8cc96.sys [?]
R1 MpKslcd83a27d;MpKslcd83a27d;c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{12F5C32B-EC05-4A30-9A37-2CCA7F2DAD6B}\MpKslcd83a27d.sys [6/03/2011 14:23 28752]
R3 Cap713x;Cap713x Video Capture;c:\windows\system32\drivers\Cap713x.sys [8/10/2004 15:58 751104]
S0 TfFsMon;TfFsMon;c:\windows\system32\drivers\TfFsMon.sys --> c:\windows\system32\drivers\TfFsMon.sys [?]
S0 TfSysMon;TfSysMon;c:\windows\system32\drivers\TfSysMon.sys --> c:\windows\system32\drivers\TfSysMon.sys [?]
S2 Wlansvc;@%SystemRoot%\System32\wlansvc.dll,-257;c:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted [15/04/2008 13:00 14336]
S3 ACSSCR;ACR38 Smart Card Reader;c:\windows\system32\drivers\a38usb.sys [14/02/2010 20:24 33536]
S3 TfNetMon;TfNetMon;\??\c:\windows\system32\drivers\TfNetMon.sys --> c:\windows\system32\drivers\TfNetMon.sys [?]
.
--- Andere Services/Drivers In Geheugen ---
.
*NewlyCreated* - MPKSLCD83A27D
.
Inhoud van de 'Gedeelde Taken' map
.
2010-12-30 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]
.
2011-02-27 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-73586283-1606980848-527237240-1003Core.job
- c:\documents and settings\Computer\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-10-23 22:10]
.
2011-03-06 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-73586283-1606980848-527237240-1003UA.job
- c:\documents and settings\Computer\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-10-23 22:10]
.
2011-03-06 c:\windows\Tasks\MP Scheduled Scan.job
- c:\program files\Microsoft Security Client\Antimalware\MpCmdRun.exe [2010-11-11 11:26]
.
2011-03-06 c:\windows\Tasks\OGALogon.job
- c:\windows\system32\OGAEXEC.exe [2009-08-03 14:07]
.
.
------- Bijkomende Scan -------
.
uStart Page = hxxp://eu.ask.com/?o=14200&l=dis
mSearch Bar = 
uInternet Settings,ProxyOverride = *.local
IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
FF - ProfilePath - c:\documents and settings\Computer\Application Data\Mozilla\Firefox\Profiles\7sskj9f9.default\
FF - prefs.js: browser.startup.homepage - hxxp://eu.ask.com?o=14200&l=dis
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Belgium eID: belgiumeid@eid.belgium.be - c:\program files\Mozilla Firefox\extensions\belgiumeid@eid.belgium.be
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}
FF - Ext: z: {50012027-8702-8c00-09e9-1de9969184b0} - c:\program files\Mozilla Firefox\extensions\{50012027-8702-8c00-09e9-1de9969184b0}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\Java\jre6\lib\deploy\jqs\ff
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: Stylish: {46551EC9-40F0-4e47-8E18-8E5CF550CFB8} - %profile%\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}
FF - Ext: New Tab King: {FC5BAC7D-D696-4ba6-B913-CF8F000C33DF} - %profile%\extensions\{FC5BAC7D-D696-4ba6-B913-CF8F000C33DF}
FF - Ext: Battlefield Heroes Updater: battlefieldheroespatcher@ea.com - %profile%\extensions\battlefieldheroespatcher@ea.com
.
- - - - ORPHANS VERWIJDERD - - - -
.
AddRemove-90c67a0d - c:\windows\system32\90c67a0d.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-03-06 15:23
Windows 5.1.2600 Service Pack 3 NTFS
.
scannen van verborgen processen ... 
.
scannen van verborgen autostart items ... 
.
scannen van verborgen bestanden ... 
.
Scan succesvol afgerond
verborgen bestanden: 0
.
**************************************************************************
.
--------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\h–€|ÿÿÿÿ¤•€|ù•9~*]
"3140110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"
.
--------------------- DLLs Geladen Onder Lopende Processen ---------------------
.
- - - - - - - > 'winlogon.exe'(600)
c:\windows\system32\Ati2evxx.dll
.
Voltooingstijd: 2011-03-06  15:26:31
ComboFix-quarantined-files.txt  2011-03-06 14:26
ComboFix2.txt  2011-03-05 13:12
ComboFix3.txt  2010-08-13 09:15
.
Pre-Run: 221.734.789.120 bytes beschikbaar
Post-Run: 221.725.167.616 bytes beschikbaar
.
- - End Of File - - F671466EC67EEF63496C2315A488BD18

Link naar reactie
Delen op andere sites
 Delen
Ga naar topic overzicht
Logo

OVER ONS

PC Helpforum helpt GRATIS computergebruikers sinds juli 2006. Ons team geeft via het forum professioneel antwoord op uw vragen en probeert uw pc problemen zo snel mogelijk op te lossen. Word lid vandaag, plaats je vraag online en het PC Helpforum-team helpt u graag verder!

SITEMAP

×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.