eli kone on viime päivien aikana hidastunut selvästi entisestä ja netti toimii todella hitaasti ja pätkii välillä. Osaisiko joku auttaa? tässä olisi hjt-loki. Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 16:08:59, on 10.9.2010 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\WINDOWS\vsnp2std.exe C:\WINDOWS\system32\userini.exe C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\uTorrent\uTorrent.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe C:\WINDOWS\system32\userini.exe C:\Program Files\PIXELA\Everio MediaBrowser\MBCameraMonitor.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe C:\Program Files\OpenOffice.org 2.4\program\soffice.exe C:\Program Files\OpenOffice.org 2.4\program\soffice.BIN C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\PC Connectivity Solution\ServiceLayer.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\WINDOWS\system32\wbem\wmiapsrv.exe C:\Program Files\Windows Live\Contacts\wlcomm.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Windows Live\Toolbar\wltuser.exe C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe C:\WINDOWS\system32\winlogon.exe C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe C:\Program Files\Skype\Toolbars\Shared\SkypeNames.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Microsoft\Search Enhancement Pack\SCServer\SCServer.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit O2 - BHO: Adobe PDF Reader -linkkiavustaja - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Windows Liven kirjautumisapuohjelma - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5612.1312\swg.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [snp2std] C:\WINDOWS\vsnp2std.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [userini] C:\WINDOWS\explorer.exe:userini.exe O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe" O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray O4 - HKCU\..\Run: [userini] C:\WINDOWS\explorer.exe:userini.exe O4 - HKLM\..\Policies\Explorer\Run: [userini] C:\WINDOWS\explorer.exe:userini.exe O4 - HKCU\..\Policies\Explorer\Run: [userini] C:\WINDOWS\explorer.exe:userini.exe O4 - HKUS\S-1-5-21-776561741-706699826-1417001333-1005\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'abc') O4 - HKUS\S-1-5-21-776561741-706699826-1417001333-1005\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'abc') O4 - HKUS\S-1-5-21-776561741-706699826-1417001333-1005\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" (User 'abc') O4 - HKUS\S-1-5-21-776561741-706699826-1417001333-1005\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background (User 'abc') O4 - HKUS\S-1-5-21-776561741-706699826-1417001333-1005\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray (User 'abc') O4 - HKUS\S-1-5-21-776561741-706699826-1417001333-1005\..\Run: [userini] C:\WINDOWS\system32\userini.exe (User 'abc') O4 - HKUS\S-1-5-21-776561741-706699826-1417001333-1005\..\Policies\Explorer\Run: [userini] C:\WINDOWS\system32\userini.exe (User 'abc') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Startup: OpenOffice.org 2.4.lnk = C:\Program Files\OpenOffice.org 2.4\program\quickstart.exe O4 - Global Startup: Camera Monitor SD.lnk = ? O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: HP Photosmart Premier -pikakäynnistys.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe O4 - Global Startup: McAfee Security Scan Plus.lnk = ? O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200 O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html O9 - Extra button: Lisää tämä blogiin - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &Lisää tämä blogiin tuotteessa Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/win...ls/en/x86/client/wuweb_site.cab?1212177961546 O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/mic...ls/en/x86/client/muweb_site.cab?1212178347750 O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553512000} - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O16 - DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} (AxisMediaControlEmb Class) - http://video.uralweb.ru/activex/amc.cab O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: Google-päivityspalvelu (gupdate1ca856f5a08ddb8) (gupdate1ca856f5a08ddb8) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- End of file - 10737 bytes
. Jos tämä => Malwarebytes' Anti-Malware ei tuota pöpöä löytänyt, niin => Ole hyvä ja lataa Combofix yhdestä alla olevista linkeistä: Linkki 3 * TÄRKEÄÄ !!! Tallenna ComboFix.exe työpöydällesi * Sulje/ota pois päältä kaikki virustorjunta- ja haittaohjelmien poisto-ohjelmat, jotta ne eivät häiritse ComboFixin ajoa. (ei palomuuria) * Tuplaklikkaa Combofix.exe ja noudata ohjeita. * Osana skannausta Combofix tarkistaa onko palautuskonsoli asennettuna. Nykypäivän haittaohjelmien takia on erittäin suositeltua olla asennettuna palautuskonsoli ennen haittaohjelmien poistoa. Windowsin palautuskonsoli mahdollistaa käynnistyksen erityiseen palautustilaan. Palautuskonsolin kautta voimme auttaa sinua helpommin mikäli haittaohjelmien poiston yhteydessä ilmenee ongelmia. * Seuraa ohjeita ja salli Combofixin ladata ja asentaa Microsoftin palautuskonsoli, ja kun pyydetään, hyväksy ohjelman takuuehdot asentaaksesi palautuskonsolin. **Huomaa: Jos palautuskonsoli on jo asennettuna, Combofix jatkaa eteenpäin. Kun Microsoftin palautuskonsoli on asennettu, sinun pitäisi nähdä seuraava viesti: Klikkaa Kyllä jatkaaksesi skannausta. Kun ComboFix on valmis, se luo raportin. Ole hyvä ja kopioi/liitä seuraavat raportit vastaukseesi: C:\ComboFix.txt Uusi HijackThis-loki Varoitus: ÄLÄ aja ComboFixia ilman valvontaa. Se ei ole lelu ja sitä ei tule käyttää rutiininomaisesti päivittäin. Jos tarvitset apua, katso yksityiskohtaisempi ohje: http://www.bleepingcomputer.com/combofix/fi/combofixin-kayttoohje ------------------------------------------------------- Lähetä => C:\ComboFix.txt Uusi HijackThis-loki
ComboFix 10-09-09.04 - Omistaja 10.09.2010 17:38:04.3.1 - x86 Microsoft Windows XP Home Edition 5.1.2600.3.1252.358.1035.18.1023.544 [GMT 3:00] Sijainti: c:\documents and settings\Omistaja\Työpöytä\Combo-Fix.exe.exe AV: Norman Virus Control ver. 5.99 *On-access scanning enabled* (Outdated) {EB9EFB40-AE72-4C43-B204-0FCD0E92D5F1} . ADS - explorer.exe: deleted 37376 bytes in 1 streams. (((((((((((((((((((((((((((((((((((((( Muut poistot )))))))))))))))))))))))))))))))))))))))))))))))))))))))) . c:\documents and settings\All Users\Application Data\sysReserve.ini c:\windows\system32\spool\prtprocs\w32x86\1uO3o7.dll c:\windows\system32\spool\prtprocs\w32x86\QGM9gMY9.dll c:\windows\system32\spool\prtprocs\w32x86\xMY31oCE.dll c:\windows\system32\spool\prtprocs\w32x86\xoCEIQG1i9.dll c:\windows\system32\userini.exe . ((((( Tiedostot, jotka on luotu seuraavalla aikavälillä: 2010-08-10 to 2010-09-10 ))))))))))))))))) . 2010-09-04 10:03 . 2010-09-04 10:03 -------- d-----w- c:\documents and settings\All Users\Application Data\PIXELA 2010-09-04 09:57 . 2010-09-04 09:57 -------- d-----w- c:\program files\PIXELA 2010-09-04 00:23 . 2010-09-04 00:23 503808 ----a-w- c:\documents and settings\abc\Application Data\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-7aed19b8-n\msvcp71.dll 2010-09-04 00:23 . 2010-09-04 00:23 499712 ----a-w- c:\documents and settings\abc\Application Data\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-7aed19b8-n\jmc.dll 2010-09-04 00:23 . 2010-09-04 00:23 348160 ----a-w- c:\documents and settings\abc\Application Data\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-7aed19b8-n\msvcr71.dll 2010-09-04 00:23 . 2010-09-04 00:23 61440 ----a-w- c:\documents and settings\abc\Application Data\Sun\Java\Deployment\SystemCache\6.0\42\4488892a-7bfb9227-n\decora-sse.dll 2010-09-04 00:23 . 2010-09-04 00:23 12800 ----a-w- c:\documents and settings\abc\Application Data\Sun\Java\Deployment\SystemCache\6.0\42\4488892a-7bfb9227-n\decora-d3d.dll 2010-09-04 00:22 . 2010-07-17 02:00 423656 ----a-w- c:\windows\system32\deployJava1.dll . (((((((((((((((((((((((((((((((((((( Find3M-raportti )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2010-09-10 14:41 . 2009-12-25 22:49 -------- d-----w- c:\documents and settings\Omistaja\Application Data\uTorrent 2010-09-10 14:11 . 2009-12-25 14:34 -------- d-----w- c:\documents and settings\Omistaja\Application Data\Skype 2010-09-10 14:11 . 2008-08-11 12:24 -------- d-----w- c:\documents and settings\Omistaja\Application Data\OpenOffice.org2 2010-09-10 13:36 . 2008-05-31 04:57 1034240 ----a-w- c:\windows\explorer.exe 2010-09-08 12:56 . 2009-11-10 15:21 -------- d-----w- c:\program files\Microsoft Silverlight 2010-09-04 09:57 . 2008-08-05 10:38 -------- d--h--w- c:\program files\InstallShield Installation Information 2010-09-04 00:23 . 2008-05-30 19:12 -------- d-----w- c:\program files\Common Files\Java 2010-09-04 00:22 . 2008-05-30 19:12 -------- d-----w- c:\program files\Java 2010-08-11 22:15 . 2008-05-31 04:57 85412 ----a-w- c:\windows\system32\perfc00B.dat 2010-08-11 22:15 . 2008-05-31 04:57 416174 ----a-w- c:\windows\system32\perfh00B.dat 2010-08-09 14:05 . 2010-08-09 14:05 -------- d-----w- c:\documents and settings\LocalService\Application Data\McAfee 2010-08-07 11:23 . 2010-08-07 11:23 -------- d-----w- c:\program files\McAfee Security Scan 2010-06-30 12:32 . 2008-05-31 04:57 149504 ----a-w- c:\windows\system32\schannel.dll 2010-06-24 12:26 . 2008-05-31 04:57 916480 ----a-w- c:\windows\system32\wininet.dll 2010-06-24 09:02 . 2008-05-31 04:57 1852160 ----a-w- c:\windows\system32\win32k.sys 2010-06-21 15:27 . 2008-05-31 04:57 354304 ----a-w- c:\windows\system32\drivers\srv.sys 2010-06-17 14:03 . 2008-05-31 04:57 80384 ----a-w- c:\windows\system32\iccvid.dll 2010-06-14 14:31 . 2008-05-30 19:08 744448 ----a-w- c:\windows\pchealth\helpctr\binaries\helpsvc.exe 2010-06-14 07:42 . 2008-05-31 04:57 1172480 ----a-w- c:\windows\system32\msxml3.dll 2006-05-03 10:06 . 2009-01-29 14:26 163328 --sh--r- c:\windows\system32\flvDX.dll 2007-02-21 11:47 . 2009-01-29 14:26 31232 --sh--r- c:\windows\system32\msfDX.dll 2008-03-16 13:30 . 2009-01-29 14:26 216064 --sh--r- c:\windows\system32\nbDX.dll . ((((((((((((((((((((((((((((( SnapShot@2010-01-01_10.59.40 ))))))))))))))))))))))))))))))))))))))))) . + 2010-09-10 13:44 . 2010-09-10 13:44 16384 c:\windows\temp\Perflib_Perfdata_1b4.dat + 2008-06-05 05:35 . 2010-04-21 13:28 46080 c:\windows\system32\tzchange.exe - 2008-06-05 05:35 . 2009-10-28 15:07 46080 c:\windows\system32\tzchange.exe + 2010-03-30 21:16 . 2010-03-30 21:16 99176 c:\windows\system32\PresentationHostProxy.dll - 2008-05-31 04:57 . 2009-12-28 22:50 71510 c:\windows\system32\perfc009.dat + 2008-05-31 04:57 . 2010-08-11 22:15 71510 c:\windows\system32\perfc009.dat + 2009-11-06 22:07 . 2009-11-06 22:07 49488 c:\windows\system32\netfxperf.dll + 2009-11-05 19:17 . 2009-11-05 19:17 11600 c:\windows\system32\mui\0409\mscorees.dll + 2004-09-14 16:11 . 2009-11-27 17:13 17920 c:\windows\system32\msyuv.dll + 2008-05-31 04:57 . 2009-11-27 16:09 28672 c:\windows\system32\msvidc32.dll - 2008-05-31 04:57 . 2008-04-14 16:11 11264 c:\windows\system32\msrle32.dll + 2008-05-31 04:57 . 2009-11-27 16:09 11264 c:\windows\system32\msrle32.dll + 2007-08-13 15:54 . 2010-06-24 12:26 55296 c:\windows\system32\msfeedsbs.dll - 2007-08-13 15:54 . 2009-10-29 07:43 55296 c:\windows\system32\msfeedsbs.dll + 2008-06-10 10:16 . 2010-03-04 16:03 84507 c:\windows\system32\Macromed\Flash\uninstall_activeX.exe + 2008-05-31 04:57 . 2010-06-24 12:26 25600 c:\windows\system32\jsproxy.dll - 2008-05-31 04:57 . 2009-10-29 07:43 25600 c:\windows\system32\jsproxy.dll + 2004-09-14 16:11 . 2009-11-27 16:09 48128 c:\windows\system32\iyuv_32.dll + 2008-05-31 04:57 . 2009-10-15 16:32 81920 c:\windows\system32\fontsub.dll - 2008-05-31 04:57 . 2009-06-16 14:39 81920 c:\windows\system32\fontsub.dll + 2009-12-30 07:25 . 2009-12-30 12:55 38224 c:\windows\system32\drivers\mbamswissarmy.sys - 2009-12-30 07:25 . 2009-09-10 12:54 38224 c:\windows\system32\drivers\mbamswissarmy.sys - 2009-08-18 14:11 . 2009-10-29 07:43 12800 c:\windows\system32\dllcache\xpshims.dll + 2009-08-18 14:11 . 2010-06-24 12:26 12800 c:\windows\system32\dllcache\xpshims.dll + 2009-11-27 17:13 . 2009-11-27 17:13 17920 c:\windows\system32\dllcache\msyuv.dll + 2008-05-31 04:57 . 2009-11-27 16:09 28672 c:\windows\system32\dllcache\msvidc32.dll + 2009-11-27 16:09 . 2009-11-27 16:09 11264 c:\windows\system32\dllcache\msrle32.dll - 2008-05-31 10:03 . 2009-10-29 07:43 55296 c:\windows\system32\dllcache\msfeedsbs.dll + 2008-05-31 10:03 . 2010-06-24 12:26 55296 c:\windows\system32\dllcache\msfeedsbs.dll - 2008-05-31 04:57 . 2009-10-29 07:43 25600 c:\windows\system32\dllcache\jsproxy.dll + 2008-05-31 04:57 . 2010-06-24 12:26 25600 c:\windows\system32\dllcache\jsproxy.dll + 2009-11-27 16:09 . 2009-11-27 16:09 48128 c:\windows\system32\dllcache\iyuv_32.dll + 2009-06-16 14:39 . 2009-10-15 16:32 81920 c:\windows\system32\dllcache\fontsub.dll - 2009-06-16 14:39 . 2009-06-16 14:39 81920 c:\windows\system32\dllcache\fontsub.dll + 2009-12-14 07:09 . 2009-12-14 07:09 33280 c:\windows\system32\dllcache\csrsrv.dll + 2009-12-22 18:39 . 2009-12-22 18:39 62592 c:\windows\system32\dllcache\cdrom.sys + 2010-01-13 14:01 . 2010-01-13 14:01 86528 c:\windows\system32\dllcache\cabview.dll + 2009-06-10 14:15 . 2009-11-27 16:09 84992 c:\windows\system32\dllcache\avifil32.dll - 2009-06-10 14:15 . 2009-06-10 14:15 84992 c:\windows\system32\dllcache\avifil32.dll + 2010-03-05 14:38 . 2010-03-05 14:38 65536 c:\windows\system32\dllcache\asycfilt.dll + 2008-05-31 04:57 . 2009-12-14 07:09 33280 c:\windows\system32\csrsrv.dll + 2010-06-29 12:05 . 2010-06-30 15:12 32768 c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat + 2008-05-30 19:14 . 2010-06-30 15:12 32768 c:\windows\system32\config\systemprofile\Local Settings\Sivuhistoria\History.IE5\index.dat - 2008-05-30 19:14 . 2009-12-31 14:20 32768 c:\windows\system32\config\systemprofile\Local Settings\Sivuhistoria\History.IE5\index.dat + 2010-06-29 12:05 . 2010-06-30 15:12 16384 c:\windows\system32\config\systemprofile\Cookies\index.dat + 2008-05-31 04:57 . 2010-01-13 14:01 86528 c:\windows\system32\cabview.dll - 2008-05-31 04:57 . 2009-06-10 14:15 84992 c:\windows\system32\avifil32.dll + 2008-05-31 04:57 . 2009-11-27 16:09 84992 c:\windows\system32\avifil32.dll + 2008-05-31 04:57 . 2010-03-05 14:38 65536 c:\windows\system32\asycfilt.dll + 2010-04-07 20:48 . 2010-04-07 20:48 32768 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll - 2008-07-29 17:16 . 2008-07-29 17:16 32768 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll + 2009-11-06 22:07 . 2009-11-06 22:07 13648 c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll + 2010-03-23 02:31 . 2010-03-23 02:31 30544 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe + 2010-04-01 08:42 . 2010-04-01 08:42 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll + 2010-03-31 11:51 . 2010-03-31 11:51 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll - 2008-05-27 21:49 . 2008-05-27 21:49 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll + 2010-03-31 11:51 . 2010-03-31 11:51 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll - 2008-05-27 21:49 . 2008-05-27 21:49 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll - 2008-05-27 21:49 . 2008-05-27 21:49 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll + 2010-03-31 11:51 . 2010-03-31 11:51 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll + 2010-03-31 12:32 . 2010-03-31 12:32 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe - 2008-05-27 22:30 . 2008-05-27 22:30 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe - 2003-02-20 17:19 . 2003-02-20 17:19 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll + 2010-03-31 12:32 . 2010-03-31 12:32 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll + 2009-11-06 22:07 . 2009-11-06 22:07 13648 c:\windows\Microsoft.NET\Framework\SharedReg12.dll + 2009-11-06 22:07 . 2009-11-06 22:07 13648 c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll + 2009-11-06 22:07 . 2009-11-06 22:07 13648 c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll + 2009-11-06 22:07 . 2009-11-06 22:07 13648 c:\windows\Microsoft.NET\Framework\sbscmp10.dll + 2009-11-06 22:07 . 2009-11-06 22:07 13664 c:\windows\Microsoft.NET\Framework\sbs_wminet_utils.dll + 2009-11-06 22:07 . 2009-11-06 22:07 13688 c:\windows\Microsoft.NET\Framework\sbs_system.enterpriseservices.dll + 2009-11-06 22:07 . 2009-11-06 22:07 13664 c:\windows\Microsoft.NET\Framework\sbs_system.data.dll + 2009-11-06 22:07 . 2009-11-06 22:07 13696 c:\windows\Microsoft.NET\Framework\sbs_system.configuration.install.dll + 2009-11-06 22:07 . 2009-11-06 22:07 13656 c:\windows\Microsoft.NET\Framework\sbs_mscorsec.dll + 2009-11-06 22:07 . 2009-11-06 22:07 13656 c:\windows\Microsoft.NET\Framework\sbs_mscorrc.dll + 2009-11-06 22:07 . 2009-11-06 22:07 13656 c:\windows\Microsoft.NET\Framework\sbs_mscordbi.dll + 2009-11-06 22:07 . 2009-11-06 22:07 13672 c:\windows\Microsoft.NET\Framework\sbs_microsoft.jscript.dll + 2009-11-06 22:07 . 2009-11-06 22:07 13664 c:\windows\Microsoft.NET\Framework\sbs_diasymreader.dll + 2009-11-06 22:07 . 2009-11-06 22:07 86864 c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe + 2010-06-15 15:56 . 2010-06-15 15:56 21504 c:\windows\Installer\22e0902.msi + 2010-06-04 22:36 . 2010-09-07 20:01 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll - 2009-04-27 13:52 . 2009-09-03 14:40 15086 c:\windows\Installer\{58FB2F9A-5F2D-40E8-82DF-4987E60AD8BD}\ARPPRODUCTICON.exe + 2009-04-27 13:52 . 2010-03-16 19:02 15086 c:\windows\Installer\{58FB2F9A-5F2D-40E8-82DF-4987E60AD8BD}\ARPPRODUCTICON.exe + 2010-06-09 23:09 . 2010-02-25 06:18 12800 c:\windows\ie8updates\KB982381-IE8\xpshims.dll + 2010-06-09 23:09 . 2010-02-25 06:18 55296 c:\windows\ie8updates\KB982381-IE8\msfeedsbs.dll + 2010-06-09 23:09 . 2010-02-25 06:18 25600 c:\windows\ie8updates\KB982381-IE8\jsproxy.dll + 2010-03-31 21:05 . 2009-12-21 19:08 12800 c:\windows\ie8updates\KB980182-IE8\xpshims.dll + 2010-03-31 21:05 . 2009-12-21 19:08 55296 c:\windows\ie8updates\KB980182-IE8\msfeedsbs.dll + 2010-03-31 21:05 . 2009-12-21 19:08 25600 c:\windows\ie8updates\KB980182-IE8\jsproxy.dll + 2010-01-23 01:00 . 2009-10-29 07:43 12800 c:\windows\ie8updates\KB978207-IE8\xpshims.dll + 2010-01-23 01:00 . 2009-10-29 07:43 55296 c:\windows\ie8updates\KB978207-IE8\msfeedsbs.dll + 2010-01-23 01:00 . 2009-10-29 07:43 25600 c:\windows\ie8updates\KB978207-IE8\jsproxy.dll + 2010-08-11 22:13 . 2010-05-06 10:34 12800 c:\windows\ie8updates\KB2183461-IE8\xpshims.dll + 2010-08-11 22:13 . 2010-05-06 10:34 55296 c:\windows\ie8updates\KB2183461-IE8\msfeedsbs.dll + 2010-08-11 22:13 . 2010-05-06 10:34 25600 c:\windows\ie8updates\KB2183461-IE8\jsproxy.dll + 2009-11-27 17:13 . 2009-11-27 17:13 17920 c:\windows\Driver Cache\i386\msyuv.dll + 2009-11-27 16:09 . 2009-11-27 16:09 48128 c:\windows\Driver Cache\i386\iyuv_32.dll + 2010-06-09 23:11 . 2010-06-09 23:11 90112 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_41a2873c\System.Drawing.Design.dll + 2010-06-09 23:11 . 2010-06-09 23:11 61440 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_507888e7\CustomMarshalers.dll + 2010-08-12 09:56 . 2010-08-12 09:56 47616 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveWriter\dd5ce29ac227f3d0fd81b84621a57477\WindowsLiveWriter.ni.exe + 2010-08-12 09:57 . 2010-08-12 09:57 99840 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\67a565eaa748e11f0953953cbdcd4e72\WindowsLive.Writer.Api.ni.dll + 2010-08-12 09:56 . 2010-08-12 09:56 24064 c:\windows\assembly\NativeImages_v2.0.50727_32\WiaProxy32\18b9e9f92e6e9266d5acd8c5bbf2ee19\WiaProxy32.ni.exe + 2010-08-12 09:45 . 2010-08-12 09:45 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\5ec9dec678303ebff0ef018edb5ec595\UIAutomationProvider.ni.dll + 2010-08-12 09:58 . 2010-08-12 09:58 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\46ef15b88ef577de4882c519329fc5d2\System.Windows.Presentation.ni.dll + 2010-08-12 09:58 . 2010-08-12 09:58 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\aada360296a42e0413579a19c771ec2d\System.Web.DynamicData.Design.ni.dll + 2010-08-12 09:57 . 2010-08-12 09:57 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\2b5ff2c6358c483eb1439b99badb54fd\System.ComponentModel.DataAnnotations.ni.dll + 2010-08-12 09:57 . 2010-08-12 09:57 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\6125ff5a4fcd93d70a246cbff3005d42\System.AddIn.Contract.ni.dll + 2010-08-11 22:17 . 2010-08-11 22:17 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\de26af01222270c121788161496fcfe7\PresentationFontCache.ni.exe + 2010-08-11 22:16 . 2010-08-11 22:16 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\3c5adeedb70e6e052a6556c6ab9b6918\PresentationCFFRasterizer.ni.dll + 2010-08-12 09:55 . 2010-08-12 09:55 20992 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.StylusR#\f4aed175261503128dab6af83e18ff3e\PaintDotNet.StylusReader.ni.dll + 2010-08-12 09:58 . 2010-08-12 09:58 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\5e5176efbfeb803b7f217525beec6844\Microsoft.Vsa.ni.dll + 2010-08-12 09:56 . 2010-08-12 09:56 15872 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\272d51526813ea113970b8e890c92ee2\Microsoft.VisualC.ni.dll + 2010-08-12 09:57 . 2010-08-12 09:57 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\e1d4e0b1f112000ab33bbaf88bd9ed99\Microsoft.Build.Framework.ni.dll + 2010-08-12 09:57 . 2010-08-12 09:57 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\4200cf5b7f247ec1b997808c6d1ba7d1\Microsoft.Build.Framework.ni.dll + 2010-08-12 09:55 . 2010-08-12 09:55 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\Interop.WIA\9635ebb159cfd1fdeada9e92dbb06347\Interop.WIA.ni.dll + 2010-08-12 09:57 . 2010-08-12 09:57 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\50b7fc7f36c76313cbb434b10923e4e9\dfsvc.ni.exe + 2010-08-12 09:55 . 2010-08-12 09:55 81408 c:\windows\assembly\NativeImages_v2.0.50727_32\DdsFileType\cd5c70a2e0b26ff9e79b4f9cf6483d5a\DdsFileType.ni.dll + 2010-08-12 09:55 . 2010-08-12 09:55 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\5ffa548547613dbc5a92f2c5b7cad196\Accessibility.ni.dll + 2010-08-11 22:14 . 2010-08-11 22:14 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll - 2009-10-15 21:34 . 2009-10-15 21:34 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll + 2010-06-09 23:05 . 2010-06-09 23:05 32768 c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll - 2009-02-26 09:21 . 2009-02-26 09:21 32768 c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll - 2009-10-15 21:34 . 2009-10-15 21:34 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll + 2010-08-11 22:14 . 2010-08-11 22:14 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll - 2009-10-15 21:35 . 2009-10-15 21:35 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll + 2010-08-11 22:15 . 2010-08-11 22:15 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll - 2009-10-15 21:34 . 2009-10-15 21:34 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll + 2010-08-11 22:15 . 2010-08-11 22:15 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll - 2009-10-15 21:34 . 2009-10-15 21:34 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll + 2010-08-11 22:15 . 2010-08-11 22:15 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll - 2009-10-15 21:34 . 2009-10-15 21:34 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll + 2010-08-11 22:15 . 2010-08-11 22:15 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll - 2009-10-15 21:34 . 2009-10-15 21:34 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll + 2010-08-11 22:15 . 2010-08-11 22:15 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll + 2010-08-11 22:15 . 2010-08-11 22:15 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll - 2009-10-15 21:34 . 2009-10-15 21:34 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll - 2009-10-15 21:34 . 2009-10-15 21:34 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll + 2010-08-11 22:15 . 2010-08-11 22:15 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll + 2010-08-11 22:15 . 2010-08-11 22:15 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll - 2009-10-15 21:34 . 2009-10-15 21:34 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll + 2010-08-11 22:15 . 2010-08-11 22:15 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll - 2009-10-15 21:34 . 2009-10-15 21:34 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll - 2009-10-15 21:34 . 2009-10-15 21:34 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll + 2010-08-11 22:15 . 2010-08-11 22:15 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll - 2009-10-15 21:34 . 2009-10-15 21:34 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll + 2010-08-11 22:15 . 2010-08-11 22:15 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll + 2010-06-09 23:11 . 2010-06-09 23:11 81920 c:\windows\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll + 2010-06-09 23:09 . 2008-07-08 13:03 26488 c:\windows\$hf_mig$\KB982381-IE8\update\spcustom.dll + 2010-06-09 23:09 . 2008-07-08 13:03 17272 c:\windows\$hf_mig$\KB982381-IE8\spmsg.dll + 2010-06-09 05:47 . 2010-05-06 10:28 12800 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\xpshims.dll + 2010-06-09 05:47 . 2010-05-06 10:28 55296 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\msfeedsbs.dll + 2010-06-09 05:47 . 2010-05-06 10:28 25600 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\jsproxy.dll + 2010-04-14 20:04 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB981332-IE8\update\spcustom.dll + 2010-04-14 20:04 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB981332-IE8\spmsg.dll + 2010-04-14 20:06 . 2009-05-26 09:01 26488 c:\windows\$hf_mig$\KB980232\update\spcustom.dll + 2010-04-14 20:06 . 2009-05-26 09:01 17272 c:\windows\$hf_mig$\KB980232\spmsg.dll + 2010-06-09 23:11 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB980218\update\spcustom.dll + 2010-06-09 23:11 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB980218\spmsg.dll + 2010-06-09 23:11 . 2008-07-08 13:03 26488 c:\windows\$hf_mig$\KB980195\update\spcustom.dll + 2010-06-09 23:11 . 2008-07-08 13:03 17272 c:\windows\$hf_mig$\KB980195\spmsg.dll + 2010-03-31 21:05 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB980182-IE8\update\spcustom.dll + 2010-03-31 21:05 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB980182-IE8\spmsg.dll + 2010-03-31 10:23 . 2010-02-25 06:12 12800 c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\xpshims.dll + 2010-03-31 10:23 . 2010-02-25 06:12 55296 c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\msfeedsbs.dll + 2010-03-31 10:23 . 2010-02-25 06:12 25600 c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\jsproxy.dll + 2010-04-14 20:06 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB979683\update\spcustom.dll + 2010-04-14 12:06 . 2010-03-05 14:54 16896 c:\windows\$hf_mig$\KB979683\update\mpsyschk.dll + 2010-04-14 20:06 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB979683\spmsg.dll + 2010-06-09 23:10 . 2009-05-26 09:01 26488 c:\windows\$hf_mig$\KB979559\update\spcustom.dll + 2010-06-09 23:10 . 2009-05-26 09:01 17272 c:\windows\$hf_mig$\KB979559\spmsg.dll + 2010-06-09 23:06 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB979482\update\spcustom.dll + 2010-06-09 23:06 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB979482\spmsg.dll + 2010-03-05 14:53 . 2010-03-05 14:53 65536 c:\windows\$hf_mig$\KB979482\SP3QFE\asycfilt.dll + 2010-04-14 20:04 . 2008-07-08 13:03 26488 c:\windows\$hf_mig$\KB979309\update\spcustom.dll + 2010-04-14 20:04 . 2008-07-08 13:03 17272 c:\windows\$hf_mig$\KB979309\spmsg.dll + 2010-01-13 13:49 . 2010-01-13 13:49 86528 c:\windows\$hf_mig$\KB979309\SP3QFE\cabview.dll + 2010-02-10 21:40 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB978706\update\spcustom.dll + 2010-02-10 21:40 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB978706\spmsg.dll + 2010-04-14 20:04 . 2008-07-08 13:03 26488 c:\windows\$hf_mig$\KB978601\update\spcustom.dll + 2010-04-14 20:04 . 2008-07-08 13:03 17272 c:\windows\$hf_mig$\KB978601\spmsg.dll + 2010-05-12 21:07 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB978542\update\spcustom.dll + 2010-05-12 21:07 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB978542\spmsg.dll + 2010-04-14 20:04 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB978338\update\spcustom.dll + 2010-04-14 20:04 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB978338\spmsg.dll + 2010-02-10 21:42 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB978262\update\spcustom.dll + 2010-02-10 21:42 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB978262\spmsg.dll + 2010-02-10 21:40 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB978251\update\spcustom.dll + 2010-02-10 21:40 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB978251\spmsg.dll + 2010-01-23 01:00 . 2008-07-08 13:03 26488 c:\windows\$hf_mig$\KB978207-IE8\update\spcustom.dll + 2010-01-23 01:00 . 2008-07-08 13:03 17272 c:\windows\$hf_mig$\KB978207-IE8\spmsg.dll + 2010-01-22 14:24 . 2009-12-21 19:02 12800 c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\xpshims.dll + 2010-01-22 14:25 . 2009-12-21 19:02 55296 c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\msfeedsbs.dll + 2010-01-22 14:25 . 2009-12-21 19:02 25600 c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\jsproxy.dll + 2010-02-10 21:40 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB978037\update\spcustom.dll + 2010-02-10 21:40 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB978037\spmsg.dll + 2009-12-14 07:11 . 2009-12-14 07:11 33280 c:\windows\$hf_mig$\KB978037\SP3QFE\csrsrv.dll + 2010-02-10 21:40 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB977914\update\spcustom.dll + 2010-02-10 21:40 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB977914\spmsg.dll + 2009-11-27 16:29 . 2009-11-27 16:29 28672 c:\windows\$hf_mig$\KB977914\SP3QFE\msvidc32.dll + 2009-11-27 16:29 . 2009-11-27 16:29 11264 c:\windows\$hf_mig$\KB977914\SP3QFE\msrle32.dll + 2009-11-27 16:29 . 2009-11-27 16:29 48128 c:\windows\$hf_mig$\KB977914\SP3QFE\iyuv_32.dll + 2009-11-27 16:29 . 2009-11-27 16:29 84992 c:\windows\$hf_mig$\KB977914\SP3QFE\avifil32.dll + 2010-04-14 20:04 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB977816\update\spcustom.dll + 2010-04-14 20:04 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB977816\spmsg.dll + 2010-02-10 21:40 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB977165\update\spcustom.dll + 2010-02-10 21:40 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB977165\spmsg.dll + 2010-02-24 21:52 . 2008-07-08 13:03 26488 c:\windows\$hf_mig$\KB976662-IE8\update\spcustom.dll + 2010-02-24 21:52 . 2008-07-08 13:03 17272 c:\windows\$hf_mig$\KB976662-IE8\spmsg.dll + 2010-02-10 21:40 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB975713\update\spcustom.dll + 2010-02-10 21:40 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB975713\spmsg.dll + 2010-06-09 23:06 . 2008-07-08 13:03 26488 c:\windows\$hf_mig$\KB975562\update\spcustom.dll + 2010-06-09 23:06 . 2008-07-08 13:03 17272 c:\windows\$hf_mig$\KB975562\spmsg.dll + 2010-03-10 22:18 . 2008-07-08 13:03 26488 c:\windows\$hf_mig$\KB975561\update\spcustom.dll + 2010-03-10 22:18 . 2008-07-08 13:03 17272 c:\windows\$hf_mig$\KB975561\spmsg.dll + 2010-02-10 21:40 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB975560\update\spcustom.dll + 2010-02-10 21:40 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB975560\spmsg.dll + 2009-11-27 17:24 . 2009-11-27 17:24 17920 c:\windows\$hf_mig$\KB975560\SP3QFE\msyuv.dll + 2010-01-13 22:04 . 2008-07-08 13:03 26488 c:\windows\$hf_mig$\KB972270\update\spcustom.dll + 2010-01-13 22:04 . 2008-07-08 13:03 17272 c:\windows\$hf_mig$\KB972270\spmsg.dll + 2010-01-13 14:02 . 2009-10-15 16:39 81920 c:\windows\$hf_mig$\KB972270\SP3QFE\fontsub.dll + 2010-02-10 21:42 . 2008-07-08 13:03 26488 c:\windows\$hf_mig$\KB971468\update\spcustom.dll + 2010-02-10 21:42 . 2008-07-08 13:03 17272 c:\windows\$hf_mig$\KB971468\spmsg.dll + 2010-01-13 22:04 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB955759\update\spcustom.dll + 2010-01-13 22:04 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB955759\spmsg.dll + 2010-08-03 23:15 . 2010-02-22 14:24 26488 c:\windows\$hf_mig$\KB2286198\update\spcustom.dll + 2010-08-03 23:15 . 2010-02-22 14:24 17272 c:\windows\$hf_mig$\KB2286198\spmsg.dll + 2010-07-14 21:57 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB2229593\update\spcustom.dll + 2010-07-14 21:57 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB2229593\spmsg.dll - 2009-10-15 21:34 . 2009-10-15 21:34 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll + 2010-08-11 22:15 . 2010-08-11 22:15 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll + 2001-10-05 16:31 . 2009-11-27 16:09 8704 c:\windows\system32\tsbyuv.dll + 2009-11-27 16:09 . 2009-11-27 16:09 8704 c:\windows\system32\dllcache\tsbyuv.dll + 2009-11-27 16:09 . 2009-11-27 16:09 8704 c:\windows\Driver Cache\i386\tsbyuv.dll + 2010-08-11 22:15 . 2010-08-11 22:15 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll - 2009-10-15 21:34 . 2009-10-15 21:34 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll + 2010-08-11 22:15 . 2010-08-11 22:15 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll - 2009-10-15 21:35 . 2009-10-15 21:35 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll + 2010-08-11 22:15 . 2010-08-11 22:15 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll - 2009-10-15 21:34 . 2009-10-15 21:34 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll - 2009-10-15 21:34 . 2009-10-15 21:34 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll + 2010-08-11 22:15 . 2010-08-11 22:15 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll + 2009-11-27 16:29 . 2009-11-27 16:29 8704 c:\windows\$hf_mig$\KB977914\SP3QFE\tsbyuv.dll - 2009-10-15 21:34 . 2009-10-15 21:34 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll + 2010-08-11 22:15 . 2010-08-11 22:15 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll - 2009-10-15 21:34 . 2009-10-15 21:34 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll + 2010-08-11 22:15 . 2010-08-11 22:15 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll + 2008-05-31 04:57 . 2009-12-24 07:00 177664 c:\windows\system32\wintrust.dll - 2008-05-31 04:57 . 2009-03-08 01:33 420352 c:\windows\system32\vbscript.dll + 2008-05-31 04:57 . 2010-03-10 06:16 420352 c:\windows\system32\vbscript.dll - 2008-05-31 04:57 . 2009-06-16 14:39 119808 c:\windows\system32\t2embed.dll + 2008-05-31 04:57 . 2009-10-15 16:32 119808 c:\windows\system32\t2embed.dll - 2008-05-31 04:57 . 2008-04-14 16:11 474112 c:\windows\system32\shlwapi.dll + 2008-05-31 04:57 . 2009-12-08 09:24 474112 c:\windows\system32\shlwapi.dll + 2010-03-30 21:10 . 2010-03-30 21:10 295264 c:\windows\system32\PresentationHost.exe - 2008-05-31 04:57 . 2009-12-28 22:50 441574 c:\windows\system32\perfh009.dat + 2008-05-31 04:57 . 2010-08-11 22:15 441574 c:\windows\system32\perfh009.dat - 2008-05-31 04:57 . 2009-10-29 07:43 206848 c:\windows\system32\occache.dll + 2008-05-31 04:57 . 2010-06-24 12:26 206848 c:\windows\system32\occache.dll - 2008-05-31 04:57 . 2009-03-08 01:32 611840 c:\windows\system32\mstime.dll + 2008-05-31 04:57 . 2010-06-24 12:26 611840 c:\windows\system32\mstime.dll - 2008-05-30 19:08 . 2008-04-14 16:12 344064 c:\windows\system32\mspaint.exe + 2008-05-30 19:08 . 2009-12-17 07:41 344064 c:\windows\system32\mspaint.exe + 2007-08-13 15:54 . 2010-06-24 12:26 599040 c:\windows\system32\msfeeds.dll + 2009-11-06 22:07 . 2009-11-06 22:07 297808 c:\windows\system32\mscoree.dll + 2010-08-07 11:29 . 2010-08-07 11:29 231888 c:\windows\system32\Macromed\Flash\FlashUtil10h_Plugin.exe + 2010-01-27 00:58 . 2010-01-27 00:58 256280 c:\windows\system32\Macromed\Flash\FlashUtil10e.exe + 2008-05-31 04:57 . 2009-12-09 05:54 726528 c:\windows\system32\jscript.dll - 2008-05-31 04:57 . 2009-06-22 06:47 726528 c:\windows\system32\jscript.dll + 2010-09-04 00:22 . 2010-07-17 02:00 153376 c:\windows\system32\javaws.exe + 2010-09-04 00:22 . 2010-07-17 02:00 145184 c:\windows\system32\javaw.exe - 2009-09-05 08:52 . 2009-09-05 08:52 145184 c:\windows\system32\javaw.exe + 2010-09-04 00:22 . 2010-07-17 02:00 145184 c:\windows\system32\java.exe - 2009-09-05 08:52 . 2009-09-05 08:52 145184 c:\windows\system32\java.exe + 2008-05-30 19:08 . 2010-01-29 15:00 691712 c:\windows\system32\inetcomm.dll - 2008-05-30 19:08 . 2008-04-11 19:05 691712 c:\windows\system32\inetcomm.dll + 2009-12-22 18:39 . 2009-12-22 18:39 922112 c:\windows\system32\imapi2fs.dll + 2009-12-22 18:39 . 2009-12-22 18:39 426496 c:\windows\system32\imapi2.dll + 2008-05-31 04:57 . 2010-06-24 12:26 184320 c:\windows\system32\iepeers.dll - 2008-05-31 04:57 . 2009-10-29 07:43 184320 c:\windows\system32\iepeers.dll + 2008-05-31 04:57 . 2010-06-24 12:26 387584 c:\windows\system32\iedkcs32.dll - 2008-05-31 04:57 . 2009-10-29 07:43 387584 c:\windows\system32\iedkcs32.dll + 2008-05-31 04:57 . 2010-06-23 12:08 173056 c:\windows\system32\ie4uinit.exe - 2008-05-31 04:57 . 2009-10-28 14:40 173056 c:\windows\system32\ie4uinit.exe + 2008-05-30 22:02 . 2010-08-12 09:40 128504 c:\windows\system32\FNTCACHE.DAT - 2008-05-30 22:02 . 2009-11-12 14:47 128504 c:\windows\system32\FNTCACHE.DAT + 2008-05-31 04:57 . 2010-02-11 12:02 226880 c:\windows\system32\drivers\tcpip6.sys + 2008-05-31 04:57 . 2010-02-24 13:11 455680 c:\windows\system32\drivers\mrxsmb.sys + 2009-12-24 07:00 . 2009-12-24 07:00 177664 c:\windows\system32\dllcache\wintrust.dll - 2008-05-31 04:57 . 2009-10-29 07:43 916480 c:\windows\system32\dllcache\wininet.dll + 2008-05-31 04:57 . 2010-06-24 12:26 916480 c:\windows\system32\dllcache\wininet.dll - 2008-05-09 10:55 . 2009-03-08 01:33 420352 c:\windows\system32\dllcache\vbscript.dll + 2008-05-09 10:55 . 2010-03-10 06:16 420352 c:\windows\system32\dllcache\vbscript.dll + 2008-06-20 11:08 . 2010-02-11 12:02 226880 c:\windows\system32\dllcache\tcpip6.sys + 2009-06-16 14:39 . 2009-10-15 16:32 119808 c:\windows\system32\dllcache\t2embed.dll - 2009-06-16 14:39 . 2009-06-16 14:39 119808 c:\windows\system32\dllcache\t2embed.dll + 2008-10-15 07:55 . 2010-06-21 15:27 354304 c:\windows\system32\dllcache\srv.sys - 2009-01-07 15:21 . 2009-01-07 15:21 474112 c:\windows\system32\dllcache\shlwapi.dll + 2009-01-07 15:21 . 2009-12-08 09:24 474112 c:\windows\system32\dllcache\shlwapi.dll + 2008-12-05 06:57 . 2010-06-30 12:32 149504 c:\windows\system32\dllcache\schannel.dll + 2008-05-31 04:57 . 2010-06-24 12:26 206848 c:\windows\system32\dllcache\occache.dll - 2008-05-31 04:57 . 2009-10-29 07:43 206848 c:\windows\system32\dllcache\occache.dll - 2008-05-31 04:57 . 2009-03-08 01:32 611840 c:\windows\system32\dllcache\mstime.dll + 2008-05-31 04:57 . 2010-06-24 12:26 611840 c:\windows\system32\dllcache\mstime.dll + 2009-12-17 07:41 . 2009-12-17 07:41 344064 c:\windows\system32\dllcache\mspaint.exe + 2008-05-31 10:03 . 2010-06-24 12:26 599040 c:\windows\system32\dllcache\msfeeds.dll + 2008-11-12 14:19 . 2010-02-24 13:11 455680 c:\windows\system32\dllcache\mrxsmb.sys - 2008-05-09 10:55 . 2009-06-22 06:47 726528 c:\windows\system32\dllcache\jscript.dll + 2008-05-09 10:55 . 2009-12-09 05:54 726528 c:\windows\system32\dllcache\jscript.dll - 2008-08-13 17:04 . 2008-04-11 19:05 691712 c:\windows\system32\dllcache\inetcomm.dll + 2008-08-13 17:04 . 2010-01-29 15:00 691712 c:\windows\system32\dllcache\inetcomm.dll + 2009-12-22 18:39 . 2009-12-22 18:39 922112 c:\windows\system32\dllcache\imapi2fs.dll + 2009-12-22 18:39 . 2009-12-22 18:39 426496 c:\windows\system32\dllcache\imapi2.dll + 2009-08-18 14:11 . 2010-06-24 12:26 247808 c:\windows\system32\dllcache\ieproxy.dll + 2008-05-31 04:57 . 2010-06-24 12:26 184320 c:\windows\system32\dllcache\iepeers.dll - 2008-05-31 04:57 . 2009-10-29 07:43 184320 c:\windows\system32\dllcache\iepeers.dll + 2010-06-09 05:47 . 2010-06-24 12:26 743424 c:\windows\system32\dllcache\iedvtool.dll + 2008-05-31 04:57 . 2010-06-24 12:26 387584 c:\windows\system32\dllcache\iedkcs32.dll - 2008-05-31 04:57 . 2009-10-29 07:43 387584 c:\windows\system32\dllcache\iedkcs32.dll - 2008-05-31 04:57 . 2009-10-28 14:40 173056 c:\windows\system32\dllcache\ie4uinit.exe + 2008-05-31 04:57 . 2010-06-23 12:08 173056 c:\windows\system32\dllcache\ie4uinit.exe + 2010-07-14 20:41 . 2010-06-14 14:31 744448 c:\windows\system32\dllcache\helpsvc.exe + 2010-04-20 05:31 . 2010-04-20 05:31 285696 c:\windows\system32\dllcache\atmfd.dll + 2010-01-13 14:03 . 2009-11-21 15:58 471552 c:\windows\system32\dllcache\aclayers.dll + 2010-02-12 04:34 . 2010-02-12 04:34 100864 c:\windows\system32\dllcache\6to4svc.dll + 2010-04-13 10:24 . 2010-02-12 10:03 293376 c:\windows\system32\browserchoice.exe + 2008-05-31 04:57 . 2010-04-20 05:31 285696 c:\windows\system32\atmfd.dll - 2008-05-31 04:57 . 2008-04-14 16:09 285696 c:\windows\system32\atmfd.dll + 2008-05-31 04:57 . 2010-02-12 04:34 100864 c:\windows\system32\6to4svc.dll + 2010-03-30 21:16 . 2010-03-30 21:16 130408 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationHostDLL.dll + 2010-04-07 20:48 . 2010-04-07 20:48 970752 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll - 2008-07-29 17:16 . 2008-07-29 17:16 110592 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMdiagnostics.dll + 2010-04-07 20:48 . 2010-04-07 20:48 110592 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMdiagnostics.dll + 2010-03-23 02:31 . 2010-03-23 02:31 435024 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll - 2008-07-25 09:17 . 2008-07-25 09:17 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll + 2010-02-09 09:22 . 2010-02-09 09:22 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll + 2010-05-11 03:40 . 2010-05-11 03:40 388936 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll + 2010-05-11 03:40 . 2010-05-11 03:40 989016 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll - 2009-08-07 20:51 . 2009-08-07 20:51 989016 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll - 2008-05-27 21:49 . 2008-05-27 21:49 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll + 2010-03-31 11:51 . 2010-03-31 11:51 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll + 2010-03-31 11:49 . 2010-03-31 11:49 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll - 2008-05-27 21:48 . 2008-05-27 21:48 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll - 2008-05-27 22:30 . 2008-05-27 22:30 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll + 2010-03-31 12:32 . 2010-03-31 12:32 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll + 2010-06-09 23:10 . 2010-06-09 23:10 200192 c:\windows\Installer\3bf5b4d.msi + 2010-02-24 21:14 . 2010-02-24 21:14 543232 c:\windows\Installer\3bf5b20.msp + 2010-06-11 16:07 . 2010-06-11 16:07 168960 c:\windows\Installer\31907f2.msp + 2010-09-04 00:23 . 2010-09-04 00:23 180224 c:\windows\Installer\2da1bd3.msi + 2010-06-09 23:09 . 2010-02-25 06:18 916480 c:\windows\ie8updates\KB982381-IE8\wininet.dll + 2010-06-09 23:09 . 2010-02-22 14:25 392056 c:\windows\ie8updates\KB982381-IE8\spuninst\updspapi.dll + 2010-06-09 23:09 . 2008-07-08 13:03 232824 c:\windows\ie8updates\KB982381-IE8\spuninst\spuninst.exe + 2010-06-09 23:09 . 2010-02-25 06:18 206848 c:\windows\ie8updates\KB982381-IE8\occache.dll + 2010-06-09 23:09 . 2010-02-25 06:18 611840 c:\windows\ie8updates\KB982381-IE8\mstime.dll + 2010-06-09 23:09 . 2010-02-25 06:18 594432 c:\windows\ie8updates\KB982381-IE8\msfeeds.dll + 2010-06-09 23:09 . 2010-02-25 06:18 247808 c:\windows\ie8updates\KB982381-IE8\ieproxy.dll + 2010-06-09 23:09 . 2010-02-25 06:18 184320 c:\windows\ie8updates\KB982381-IE8\iepeers.dll + 2010-06-09 23:09 . 2009-03-08 01:35 742912 c:\windows\ie8updates\KB982381-IE8\iedvtool.dll + 2010-06-09 23:09 . 2010-02-25 06:18 387584 c:\windows\ie8updates\KB982381-IE8\iedkcs32.dll + 2010-06-09 23:09 . 2010-02-24 09:55 173056 c:\windows\ie8updates\KB982381-IE8\ie4uinit.exe + 2010-04-14 20:04 . 2009-03-08 01:33 420352 c:\windows\ie8updates\KB981332-IE8\vbscript.dll + 2010-04-14 20:04 . 2009-05-26 11:40 392056 c:\windows\ie8updates\KB981332-IE8\spuninst\updspapi.dll + 2010-04-14 20:04 . 2009-05-26 11:40 232824 c:\windows\ie8updates\KB981332-IE8\spuninst\spuninst.exe + 2010-03-31 21:05 . 2009-12-21 19:08 916480 c:\windows\ie8updates\KB980182-IE8\wininet.dll + 2010-03-31 21:05 . 2009-05-26 11:40 392056 c:\windows\ie8updates\KB980182-IE8\spuninst\updspapi.dll + 2010-03-31 21:05 . 2009-05-26 11:40 232824 c:\windows\ie8updates\KB980182-IE8\spuninst\spuninst.exe + 2010-03-31 21:05 . 2009-12-21 19:08 206848 c:\windows\ie8updates\KB980182-IE8\occache.dll + 2010-03-31 21:05 . 2009-03-08 01:32 611840 c:\windows\ie8updates\KB980182-IE8\mstime.dll + 2010-03-31 21:05 . 2009-12-21 19:08 594432 c:\windows\ie8updates\KB980182-IE8\msfeeds.dll + 2010-03-31 21:05 . 2009-12-21 19:08 246272 c:\windows\ie8updates\KB980182-IE8\ieproxy.dll + 2010-03-31 21:05 . 2009-12-21 19:08 184320 c:\windows\ie8updates\KB980182-IE8\iepeers.dll + 2010-03-31 21:05 . 2009-12-21 19:08 387584 c:\windows\ie8updates\KB980182-IE8\iedkcs32.dll + 2010-03-31 21:05 . 2009-12-21 13:19 173056 c:\windows\ie8updates\KB980182-IE8\ie4uinit.exe + 2010-01-23 01:00 . 2009-10-29 07:43 916480 c:\windows\ie8updates\KB978207-IE8\wininet.dll + 2010-01-23 01:00 . 2009-05-26 11:40 392056 c:\windows\ie8updates\KB978207-IE8\spuninst\updspapi.dll + 2010-01-23 01:00 . 2008-07-08 13:03 232824 c:\windows\ie8updates\KB978207-IE8\spuninst\spuninst.exe + 2010-01-23 01:00 . 2009-10-29 07:43 206848 c:\windows\ie8updates\KB978207-IE8\occache.dll + 2010-01-23 01:00 . 2009-10-29 07:43 594432 c:\windows\ie8updates\KB978207-IE8\msfeeds.dll + 2010-01-23 01:00 . 2009-10-29 07:43 246272 c:\windows\ie8updates\KB978207-IE8\ieproxy.dll + 2010-01-23 01:00 . 2009-10-29 07:43 184320 c:\windows\ie8updates\KB978207-IE8\iepeers.dll + 2010-01-23 01:00 . 2009-10-29 07:43 387584 c:\windows\ie8updates\KB978207-IE8\iedkcs32.dll + 2010-01-23 01:00 . 2009-10-28 14:40 173056 c:\windows\ie8updates\KB978207-IE8\ie4uinit.exe + 2010-02-24 21:52 . 2008-07-08 13:03 392056 c:\windows\ie8updates\KB976662-IE8\spuninst\updspapi.dll + 2010-02-24 21:52 . 2008-07-08 13:03 232824 c:\windows\ie8updates\KB976662-IE8\spuninst\spuninst.exe + 2010-02-24 21:52 . 2009-06-22 06:47 726528 c:\windows\ie8updates\KB976662-IE8\jscript.dll + 2010-08-11 22:13 . 2010-05-06 10:34 916480 c:\windows\ie8updates\KB2183461-IE8\wininet.dll + 2010-08-11 22:13 . 2010-02-22 14:25 392056 c:\windows\ie8updates\KB2183461-IE8\spuninst\updspapi.dll + 2010-08-11 22:13 . 2009-05-26 09:01 232824 c:\windows\ie8updates\KB2183461-IE8\spuninst\spuninst.exe + 2010-08-11 22:13 . 2010-05-06 10:34 206848 c:\windows\ie8updates\KB2183461-IE8\occache.dll + 2010-08-11 22:13 . 2010-05-06 10:34 611840 c:\windows\ie8updates\KB2183461-IE8\mstime.dll + 2010-08-11 22:13 . 2010-05-06 10:34 599040 c:\windows\ie8updates\KB2183461-IE8\msfeeds.dll + 2010-08-11 22:13 . 2010-05-06 10:34 247808 c:\windows\ie8updates\KB2183461-IE8\ieproxy.dll + 2010-08-11 22:13 . 2010-05-06 10:34 184320 c:\windows\ie8updates\KB2183461-IE8\iepeers.dll + 2010-08-11 22:13 . 2010-05-06 10:34 743424 c:\windows\ie8updates\KB2183461-IE8\iedvtool.dll + 2010-08-11 22:13 . 2010-05-06 10:34 387584 c:\windows\ie8updates\KB2183461-IE8\iedkcs32.dll + 2010-08-11 22:13 . 2010-05-05 13:30 173056 c:\windows\ie8updates\KB2183461-IE8\ie4uinit.exe + 2008-11-12 14:19 . 2010-02-24 13:11 455680 c:\windows\Driver Cache\i386\mrxsmb.sys + 2007-02-22 21:41 . 2007-02-22 21:41 304544 c:\windows\Downloaded Program Files\MessengerStatsPAClient.dll + 2010-06-09 23:11 . 2010-06-09 23:11 835584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_33edb910\System.Drawing.dll + 2010-06-09 23:11 . 2010-06-09 23:11 192512 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_1ee55294\System.Drawing.Design.dll + 2010-06-09 23:11 . 2010-06-09 23:11 118784 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_efce9501\CustomMarshalers.dll + 2010-08-12 09:57 . 2010-08-12 09:57 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\a16b8bcca59515281688ec856c034698\WsatConfig.ni.exe + 2010-08-12 09:57 . 2010-08-12 09:57 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveLocal.Wr#\556ae36dd8238b6157bc1e8a7cccd550\WindowsLiveLocal.WriterPlugin.ni.dll + 2010-08-12 09:56 . 2010-08-12 09:56 118784 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\f06626ccee27150b618f6ff8e4b83dba\WindowsLive.Writer.Extensibility.ni.dll + 2010-08-12 09:56 . 2010-08-12 09:56 108544 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\e0e45d40fad4c1b13c93dbd1268410f3\WindowsLive.Writer.Passport.ni.dll + 2010-08-12 09:57 . 2010-08-12 09:57 594944 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\df15c0083bdfbbe4b1c7e83034ecd5f6\WindowsLive.Writer.HtmlEditor.ni.dll + 2010-08-12 09:56 . 2010-08-12 09:56 313856 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\c46d84073499887c745801bda334c97f\WindowsLive.Writer.Interop.SHDocVw.ni.dll + 2010-08-12 09:56 . 2010-08-12 09:56 152064 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\b2d5a953edeb3357a489c44f9f9000b2\WindowsLive.Writer.HtmlParser.ni.dll + 2010-08-12 09:57 . 2010-08-12 09:57 322048 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\8f73472385b353ebd6010d02ad42b2b6\WindowsLive.Writer.SpellChecker.ni.dll + 2010-08-12 09:57 . 2010-08-12 09:57 851968 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\84c1ee11d86bed17949850c394f4581c\WindowsLive.Writer.BlogClient.ni.dll + 2010-08-12 09:56 . 2010-08-12 09:56 428032 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\56faab9a03f8863e76f75d8b6c70185b\WindowsLive.Writer.Localization.ni.dll + 2010-08-12 09:56 . 2010-08-12 09:56 174080 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\4844cd1fac89240407ab5e2a4fe9c518\WindowsLive.Writer.BrowserControl.ni.dll + 2010-08-12 09:56 . 2010-08-12 09:56 334848 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\482300ac4d48e5c77dc319ec489e6bfc\WindowsLive.Writer.Interop.Mshtml.ni.dll + 2010-08-12 09:57 . 2010-08-12 09:57 119296 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\436529704b6c85b97f68a5489dc82ab2\WindowsLive.Writer.FileDestinations.ni.dll + 2010-08-12 09:56 . 2010-08-12 09:56 319488 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\3dce78aa75f081de7ad7cd480e64167a\WindowsLive.Writer.Interop.ni.dll + 2010-08-12 09:56 . 2010-08-12 09:56 843776 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\1931e1807dc35a71bda7ce8b517c84ef\WindowsLive.Writer.Controls.ni.dll + 2010-08-12 09:56 . 2010-08-12 09:56 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\18a657bcf90f1a3340e7e33ea4dad4c9\WindowsLive.Writer.Mshtml.ni.dll + 2010-08-12 09:57 . 2010-08-12 09:57 117760 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\088f2a6fd9107021e9b80ecc5c832334\WindowsLive.Writer.Instrumentation.ni.dll + 2010-08-12 09:57 . 2010-08-12 09:57 145920 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Client\4db92179406aa5a642aca6165defa8fe\WindowsLive.Client.ni.dll + 2010-08-12 09:45 . 2010-08-12 09:45 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\672c4d8e3c33e309c1ed90fa4cb85aba\WindowsFormsIntegration.ni.dll + 2010-08-12 09:45 . 2010-08-12 09:45 187904 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\cd91a32f4e36ccb2981c72c0d333e928\UIAutomationTypes.ni.dll + 2010-08-12 09:45 . 2010-08-12 09:45 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\9df760fdf8071c7b0de78f39de365e6a\UIAutomationClient.ni.dll + 2010-08-12 09:58 . 2010-08-12 09:58 400896 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\ff53d5b5249a2841ee196294429f51cf\System.Xml.Linq.ni.dll + 2010-08-12 09:58 . 2010-08-12 09:58 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\5e16c279496a553c988c6199f0cee8aa\System.Web.Routing.ni.dll + 2010-08-12 09:56 . 2010-08-12 09:56 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\d0ae809162b55e2fa958739177476af8\System.Web.RegularExpressions.ni.dll + 2010-08-12 09:58 . 2010-08-12 09:58 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\720b28d81e987b889180b291ea19b821\System.Web.Extensions.Design.ni.dll + 2010-08-12 09:58 . 2010-08-12 09:58 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\da36fd678161cd3444ef547c894e3f35\System.Web.Entity.ni.dll + 2010-08-12 09:58 . 2010-08-12 09:58 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\49ae7c73fac8827123d5db1714c22599\System.Web.Entity.Design.ni.dll + 2010-08-12 09:58 . 2010-08-12 09:58 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\ce3aa27d3c4c052845ac5abb1374defa\System.Web.DynamicData.ni.dll + 2010-08-12 09:58 . 2010-08-12 09:58 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\95fab896ef2af14876e3e1524379773b\System.Web.Abstractions.ni.dll + 2010-08-12 09:56 . 2010-08-12 09:56 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\26d5bf1f7e700c2c19aa9b1da5519b24\System.Transactions.ni.dll + 2010-08-12 09:56 . 2010-08-12 09:56 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\8b000cc703c9d95593b516bf2c2ec316\System.ServiceProcess.ni.dll + 2010-08-12 09:55 . 2010-08-12 09:55 679936 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\75e331a5d731d8e207be07adc06dec23\System.Security.ni.dll + 2010-08-12 09:55 . 2010-08-12 09:55 311296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\dd7497aa089340600c8c5af8ab421ff7\System.Runtime.Serialization.Formatters.Soap.ni.dll + 2010-08-12 09:56 . 2010-08-12 09:56 771584 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\3de39eb60b9d32af46f32f6c7a88fc7f\System.Runtime.Remoting.ni.dll + 2010-08-12 09:58 . 2010-08-12 09:58 621056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\2a080994f308f347b0497bb8804861cf\System.Net.ni.dll + 2010-08-12 09:58 . 2010-08-12 09:58 998400 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\bc1cf48ba7dc00f45d0e949c49ab677a\System.Management.ni.dll + 2010-08-12 09:58 . 2010-08-12 09:58 330752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\904fda53006680a67f917ab638be0305\System.Management.Instrumentation.ni.dll + 2010-08-12 09:56 . 2010-08-12 09:56 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\4490976887e2e5a3b594041edbdf5064\System.IO.Log.ni.dll + 2010-08-12 09:56 . 2010-08-12 09:56 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\77b9f6f6671aaaeb84c6907d467e792c\System.IdentityModel.Selectors.ni.dll + 2010-08-12 09:56 . 2010-08-12 09:56 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\15724a7517f939c9b300f341fb5620b8\System.EnterpriseServices.Wrapper.dll + 2010-08-12 09:56 . 2010-08-12 09:56 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\15724a7517f939c9b300f341fb5620b8\System.EnterpriseServices.ni.dll + 2010-08-12 09:44 . 2010-08-12 09:44 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\90199b4aa63b1b9c8ed0c3de16eec824\System.Drawing.Design.ni.dll + 2010-08-12 09:58 . 2010-08-12 09:58 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\849e98c9f428a12cb581320a23f69dbd\System.DirectoryServices.AccountManagement.ni.dll + 2010-08-12 09:56 . 2010-08-12 09:56 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\7a823a4f61cf8c86aad02559f8fed07b\System.DirectoryServices.Protocols.ni.dll + 2010-08-12 09:58 . 2010-08-12 09:58 354816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\ad95820d2e29e8d55c0d8a838214c6e5\System.Data.Services.Design.ni.dll + 2010-08-12 09:58 . 2010-08-12 09:58 939008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\617acb0d900bdde947ec79f7b5ccc183\System.Data.Services.Client.ni.dll + 2010-08-12 09:58 . 2010-08-12 09:58 756736 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\488c4017d45e861644a34fae557aa80f\System.Data.Entity.Design.ni.dll + 2010-08-12 09:57 . 2010-08-12 09:57 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\41345e34f26854fc1878eae3e4d5d4a5\System.Data.DataSetExtensions.ni.dll + 2010-08-12 09:55 . 2010-08-12 09:55 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\ab688d0f9f333ba117832726bfb589c1\System.Configuration.ni.dll + 2010-08-12 09:56 . 2010-08-12 09:56 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\b48677ab9aa7a6830785f67b8478b4da\System.Configuration.Install.ni.dll + 2010-08-12 09:57 . 2010-08-12 09:57 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\93a0958d5557e2b380647af0171ad354\System.AddIn.ni.dll + 2010-08-12 09:57 . 2010-08-12 09:57 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\d0758f84e927e3f0a15a6cde1b96d835\SMSvcHost.ni.exe + 2010-08-12 09:57 . 2010-08-12 09:57 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\8043a108e3bb2d3dcc84b547b8085e99\SMDiagnostics.ni.dll + 2010-08-12 09:57 . 2010-08-12 09:57 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\5aeb40ff7128df2881fb03c01d070b20\ServiceModelReg.ni.exe + 2010-08-11 22:17 . 2010-08-11 22:17 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\e7e7321956e6822b1bf3691c35c842f6\PresentationFramework.Aero.ni.dll + 2010-08-12 09:42 . 2010-08-12 09:42 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\a14488afff027f0f2985e659449097f5\PresentationFramework.Royale.ni.dll + 2010-08-12 09:41 . 2010-08-12 09:41 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\787e60c5dd562cb45887080095d2a3b7\PresentationFramework.Classic.ni.dll + 2010-08-12 09:42 . 2010-08-12 09:42 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\2313ccc125dcb6a9800048ec1c51ec12\PresentationFramework.Luna.ni.dll + 2010-08-12 09:55 . 2010-08-12 09:55 601088 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.SystemL#\5992531957a9798c170762ed64254ee9\PaintDotNet.SystemLayer.ni.dll + 2010-08-12 09:55 . 2010-08-12 09:55 322048 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.Resourc#\7f308bde56a1b7f934c1212c811e92c0\PaintDotNet.Resources.ni.dll + 2010-08-12 09:55 . 2010-08-12 09:55 643072 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.Effects\b1cdfcb72de43fffb129d9e10eeeb5a7\PaintDotNet.Effects.ni.dll + 2010-08-12 09:55 . 2010-08-12 09:55 695808 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.Data\c968f0b611ac0be6d23907a032d22785\PaintDotNet.Data.ni.dll + 2010-08-12 09:55 . 2010-08-12 09:55 227328 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.Base\36d90c944406230354b48cdc43ff5bb4\PaintDotNet.Base.ni.dll + 2010-08-12 09:57 . 2010-08-12 09:57 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\5db9c32d9f352162e6da220ca463db0d\MSBuild.ni.exe + 2010-08-12 09:57 . 2010-08-12 09:57 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\fcf975f74bd134d8e0fa8f37c5bc6a8c\Microsoft.Transactions.Bridge.Dtc.ni.dll + 2010-08-12 09:57 . 2010-08-12 09:57 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\d6b9038136600fbfbbbd7460dc19da19\Microsoft.Build.Utilities.ni.dll + 2010-08-12 09:57 . 2010-08-12 09:57 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\585cc7218599e7806521d0e737ba5ffb\Microsoft.Build.Utilities.v3.5.ni.dll + 2010-08-12 09:57 . 2010-08-12 09:57 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\3057ec53731286e69e389d103c32fa41\Microsoft.Build.Engine.ni.dll + 2010-08-12 09:57 . 2010-08-12 09:57 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\914e338ac6e92714f3e32ae5d89bf03b\Microsoft.Build.Conversion.v3.5.ni.dll + 2010-08-12 09:55 . 2010-08-12 09:55 504320 c:\windows\assembly\NativeImages_v2.0.50727_32\ICSharpCode.SharpZi#\eaaef15d9ee3bdd5f303f999220d7ee8\ICSharpCode.SharpZipLib.ni.dll + 2010-08-12 09:57 . 2010-08-12 09:57 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\12ae6f3635448471fc9f7d8bfe39c67d\CustomMarshalers.ni.dll + 2010-08-12 09:57 . 2010-08-12 09:57 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\daca3c9ad6d867d3fec70d14b4f20cf3\ComSvcConfig.ni.exe + 2010-08-12 09:55 . 2010-08-12 09:55 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\56aec0938ef1bbdeca65b07a5fe8cd39\AspNetMMCExt.ni.dll - 2009-10-15 21:34 . 2009-10-15 21:34 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll + 2010-08-11 22:15 . 2010-08-11 22:15 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll + 2010-08-11 22:14 . 2010-08-11 22:14 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll - 2009-10-15 21:34 . 2009-10-15 21:34 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll - 2009-10-15 21:34 . 2009-10-15 21:34 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll + 2010-08-11 22:15 . 2010-08-11 22:15 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll + 2010-08-11 22:15 . 2010-08-11 22:15 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll - 2009-10-15 21:34 . 2009-10-15 21:34 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll + 2010-06-09 23:05 . 2010-06-09 23:05 970752 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll - 2009-10-15 21:34 . 2009-10-15 21:34 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll + 2010-08-11 22:15 . 2010-08-11 22:15 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll + 2010-08-11 22:15 . 2010-08-11 22:15 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll - 2009-10-15 21:34 . 2009-10-15 21:34 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll + 2010-08-11 22:15 . 2010-08-11 22:15 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll - 2009-10-15 21:34 . 2009-10-15 21:34 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll + 2010-08-11 22:15 . 2010-08-11 22:15 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll - 2009-10-15 21:34 . 2009-10-15 21:34 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll + 2010-06-09 23:05 . 2010-06-09 23:05 438272 c:\windows\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089\System.IdentityModel.dll - 2009-10-15 21:34 . 2009-10-15 21:34 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll + 2010-08-11 22:15 . 2010-08-11 22:15 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll + 2010-08-11 22:15 . 2010-08-11 22:15 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll - 2009-10-15 21:34 . 2009-10-15 21:34 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll + 2010-08-11 22:15 . 2010-08-11 22:15 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll - 2009-10-15 21:34 . 2009-10-15 21:34 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll - 2009-10-15 21:35 . 2009-10-15 21:35 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll + 2010-08-11 22:15 . 2010-08-11 22:15 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll - 2009-10-15 21:35 . 2009-10-15 21:35 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll + 2010-08-11 22:15 . 2010-08-11 22:15 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll - 2009-10-15 21:35 . 2009-10-15 21:35 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll + 2010-08-11 22:15 . 2010-08-11 22:15 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll + 2010-08-11 22:15 . 2010-08-11 22:15 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll - 2009-10-15 21:35 . 2009-10-15 21:35 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll - 2009-02-26 09:21 . 2009-02-26 09:21 110592 c:\windows\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll + 2010-06-09 23:05 . 2010-06-09 23:05 110592 c:\windows\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll + 2010-08-11 22:15 . 2010-08-11 22:15 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll - 2009-10-15 21:34 . 2009-10-15 21:34 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll + 2010-08-11 22:15 . 2010-08-11 22:15 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll - 2009-10-15 21:34 . 2009-10-15 21:34 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll - 2009-10-15 21:34 . 2009-10-15 21:34 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll + 2010-08-11 22:15 . 2010-08-11 22:15 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll - 2009-10-15 21:34 . 2009-10-15 21:34 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll + 2010-08-11 22:15 . 2010-08-11 22:15 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll - 2009-10-15 21:34 . 2009-10-15 21:34 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll + 2010-08-11 22:15 . 2010-08-11 22:15 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll - 2009-10-15 21:34 . 2009-10-15 21:34 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll + 2010-08-11 22:15 . 2010-08-11 22:15 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll + 2010-08-11 22:14 . 2010-08-11 22:14 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll - 2009-10-15 21:34 . 2009-10-15 21:34 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll + 2010-08-11 22:15 . 2010-08-11 22:15 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll - 2009-10-15 21:34 . 2009-10-15 21:34 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll + 2010-08-11 22:15 . 2010-08-11 22:15 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll - 2009-10-15 21:34 . 2009-10-15 21:34 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll - 2009-10-15 21:34 . 2009-10-15 21:34 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll + 2010-08-11 22:15 . 2010-08-11 22:15 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll + 2010-08-11 22:15 . 2010-08-11 22:15 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll - 2009-10-15 21:35 . 2009-10-15 21:35 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll + 2008-05-31 04:57 . 2009-11-21 15:58 471552 c:\windows\AppPatch\aclayers.dll + 2010-06-09 23:09 . 2010-02-22 14:25 392056 c:\windows\$hf_mig$\KB982381-IE8\update\updspapi.dll + 2010-06-09 23:09 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB982381-IE8\update\update.exe + 2010-06-09 23:09 . 2008-07-08 13:03 232824 c:\windows\$hf_mig$\KB982381-IE8\spuninst.exe + 2010-06-09 05:47 . 2010-05-06 10:28 919040 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\wininet.dll + 2010-06-09 05:47 . 2010-05-06 10:28 206848 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\occache.dll + 2010-06-09 05:47 . 2010-05-06 10:28 611840 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\mstime.dll + 2010-06-09 05:47 . 2010-05-06 10:28 599040 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\msfeeds.dll + 2010-06-09 05:47 . 2010-05-06 10:28 247808 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\ieproxy.dll + 2010-06-09 05:47 . 2010-05-06 10:28 184320 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\iepeers.dll + 2010-06-09 05:47 . 2010-05-06 10:28 743424 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\iedvtool.dll + 2010-06-09 05:47 . 2010-05-06 10:28 387584 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\iedkcs32.dll + 2010-06-09 05:47 . 2010-05-05 13:55 173056 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\ie4uinit.exe + 2010-04-14 20:04 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB981332-IE8\update\updspapi.dll + 2010-04-14 20:04 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB981332-IE8\update\update.exe + 2010-04-14 20:04 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB981332-IE8\spuninst.exe + 2010-04-14 12:06 . 2010-03-10 06:18 420352 c:\windows\$hf_mig$\KB981332-IE8\SP3QFE\vbscript.dll + 2010-04-14 20:06 . 2009-05-26 09:01 392056 c:\windows\$hf_mig$\KB980232\update\updspapi.dll + 2010-04-14 20:06 . 2009-05-26 09:01 757112 c:\windows\$hf_mig$\KB980232\update\update.exe + 2010-04-14 20:06 . 2009-05-26 09:01 232824 c:\windows\$hf_mig$\KB980232\spuninst.exe + 2010-04-14 12:05 . 2010-02-24 11:57 457216 c:\windows\$hf_mig$\KB980232\SP3QFE\mrxsmb.sys + 2010-06-09 23:11 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB980218\update\updspapi.dll + 2010-06-09 23:11 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB980218\update\update.exe + 2010-06-09 23:11 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB980218\spuninst.exe + 2010-04-20 05:38 . 2010-04-20 05:38 285824 c:\windows\$hf_mig$\KB980218\SP3QFE\atmfd.dll + 2010-06-09 23:11 . 2008-07-08 13:03 392056 c:\windows\$hf_mig$\KB980195\update\updspapi.dll + 2010-06-09 23:11 . 2008-07-08 13:03 757112 c:\windows\$hf_mig$\KB980195\update\update.exe + 2010-06-09 23:11 . 2008-07-08 13:03 232824 c:\windows\$hf_mig$\KB980195\spuninst.exe + 2010-03-31 21:05 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB980182-IE8\update\updspapi.dll + 2010-03-31 21:05 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB980182-IE8\update\update.exe + 2010-03-31 21:05 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB980182-IE8\spuninst.exe + 2010-03-31 10:23 . 2010-02-25 06:12 919040 c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\wininet.dll + 2010-03-31 10:23 . 2010-02-25 06:12 206848 c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\occache.dll + 2010-03-31 10:23 . 2010-02-25 06:12 611840 c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\mstime.dll + 2010-03-31 10:23 . 2010-02-25 06:12 594432 c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\msfeeds.dll + 2010-03-31 10:23 . 2010-02-25 06:12 247808 c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\ieproxy.dll + 2010-03-31 10:23 . 2010-02-25 06:12 184320 c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\iepeers.dll + 2010-03-31 10:23 . 2010-02-25 06:12 387584 c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\iedkcs32.dll + 2010-03-31 10:23 . 2010-02-24 09:34 173056 c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\ie4uinit.exe + 2010-04-14 20:06 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB979683\update\updspapi.dll + 2010-04-14 20:06 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB979683\update\update.exe + 2010-04-14 20:06 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB979683\spuninst.exe + 2010-06-09 23:10 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB979559\update\updspapi.dll + 2010-06-09 23:10 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB979559\update\update.exe + 2010-06-09 23:10 . 2009-05-26 09:01 232824 c:\windows\$hf_mig$\KB979559\spuninst.exe + 2010-06-09 23:06 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB979482\update\updspapi.dll + 2010-06-09 23:06 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB979482\update\update.exe + 2010-06-09 23:06 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB979482\spuninst.exe + 2010-04-14 20:04 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB979309\update\updspapi.dll + 2010-04-14 20:04 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB979309\update\update.exe + 2010-04-14 20:04 . 2008-07-08 13:03 232824 c:\windows\$hf_mig$\KB979309\spuninst.exe + 2010-02-10 21:40 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB978706\update\updspapi.dll + 2010-02-10 21:40 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB978706\update\update.exe + 2010-02-10 21:40 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB978706\spuninst.exe + 2009-12-17 07:38 . 2009-12-17 07:38 344064 c:\windows\$hf_mig$\KB978706\SP3QFE\mspaint.exe + 2010-04-14 20:04 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB978601\update\updspapi.dll + 2010-04-14 20:04 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB978601\update\update.exe + 2010-04-14 20:04 . 2008-07-08 13:03 232824 c:\windows\$hf_mig$\KB978601\spuninst.exe + 2009-12-24 06:43 . 2009-12-24 06:43 178176 c:\windows\$hf_mig$\KB978601\SP3QFE\wintrust.dll + 2010-05-12 21:07 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB978542\update\updspapi.dll + 2010-05-12 21:07 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB978542\update\update.exe + 2010-05-12 21:07 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB978542\spuninst.exe + 2010-01-29 14:54 . 2010-01-29 14:54 691712 c:\windows\$hf_mig$\KB978542\SP3QFE\inetcomm.dll + 2010-04-14 20:04 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB978338\update\updspapi.dll + 2010-04-14 20:04 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB978338\update\update.exe + 2010-04-14 20:04 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB978338\spuninst.exe + 2010-02-11 11:36 . 2010-02-11 11:36 226880 c:\windows\$hf_mig$\KB978338\SP3QFE\tcpip6.sys + 2010-02-12 04:29 . 2010-02-12 04:29 100864 c:\windows\$hf_mig$\KB978338\SP3QFE\6to4svc.dll + 2010-02-10 21:42 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB978262\update\updspapi.dll + 2010-02-10 21:42 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB978262\update\update.exe + 2010-02-10 21:42 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB978262\spuninst.exe + 2010-02-10 21:40 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB978251\update\updspapi.dll + 2010-02-10 21:40 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB978251\update\update.exe + 2010-02-10 21:40 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB978251\spuninst.exe + 2010-02-10 14:07 . 2009-12-04 17:25 456832 c:\windows\$hf_mig$\KB978251\SP3QFE\mrxsmb.sys + 2010-01-23 01:00 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB978207-IE8\update\updspapi.dll + 2010-01-23 01:00 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB978207-IE8\update\update.exe + 2010-01-23 01:00 . 2008-07-08 13:03 232824 c:\windows\$hf_mig$\KB978207-IE8\spuninst.exe + 2010-01-22 14:24 . 2009-12-21 19:02 916480 c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\wininet.dll + 2010-01-22 14:24 . 2009-12-21 19:02 206848 c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\occache.dll + 2010-01-22 14:25 . 2009-12-21 19:02 594432 c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\msfeeds.dll + 2010-01-22 14:25 . 2009-12-21 19:02 246272 c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\ieproxy.dll + 2010-01-22 14:25 . 2009-12-21 19:02 184320 c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\iepeers.dll + 2010-01-22 14:25 . 2009-12-21 19:02 387584 c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\iedkcs32.dll + 2010-01-22 14:25 . 2009-12-21 13:22 173056 c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\ie4uinit.exe + 2010-02-10 21:40 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB978037\update\updspapi.dll + 2010-02-10 21:40 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB978037\update\update.exe + 2010-02-10 21:40 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB978037\spuninst.exe + 2010-02-10 21:40 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB977914\update\updspapi.dll + 2010-02-10 21:40 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB977914\update\update.exe + 2010-02-10 21:40 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB977914\spuninst.exe + 2010-04-14 20:04 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB977816\update\updspapi.dll + 2010-04-14 20:04 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB977816\update\update.exe + 2010-04-14 20:04 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB977816\spuninst.exe + 2010-02-10 21:40 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB977165\update\updspapi.dll + 2010-02-10 21:40 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB977165\update\update.exe + 2010-02-10 21:40 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB977165\spuninst.exe + 2010-02-24 21:52 . 2008-07-08 13:03 392056 c:\windows\$hf_mig$\KB976662-IE8\update\updspapi.dll + 2010-02-24 21:52 . 2008-07-08 13:03 757112 c:\windows\$hf_mig$\KB976662-IE8\update\update.exe + 2010-02-24 21:52 . 2008-07-08 13:03 232824 c:\windows\$hf_mig$\KB976662-IE8\spuninst.exe + 2010-02-24 13:26 . 2009-12-09 05:52 726528 c:\windows\$hf_mig$\KB976662-IE8\SP3QFE\jscript.dll + 2010-02-10 21:40 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB975713\update\updspapi.dll + 2010-02-10 21:40 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB975713\update\update.exe + 2010-02-10 21:40 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB975713\spuninst.exe + 2009-12-08 09:02 . 2009-12-08 09:02 474112 c:\windows\$hf_mig$\KB975713\SP3QFE\shlwapi.dll + 2010-06-09 23:06 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB975562\update\updspapi.dll + 2010-06-09 23:06 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB975562\update\update.exe + 2010-06-09 23:06 . 2008-07-08 13:03 232824 c:\windows\$hf_mig$\KB975562\spuninst.exe + 2010-03-10 22:18 . 2009-05-26 15:10 392056 c:\windows\$hf_mig$\KB975561\update\updspapi.dll + 2010-03-10 22:18 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB975561\update\update.exe + 2010-03-10 22:18 . 2008-07-08 13:03 232824 c:\windows\$hf_mig$\KB975561\spuninst.exe + 2010-02-10 21:40 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB975560\update\updspapi.dll + 2010-02-10 21:40 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB975560\update\update.exe + 2010-02-10 21:40 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB975560\spuninst.exe + 2010-01-13 22:04 . 2008-07-08 13:03 392056 c:\windows\$hf_mig$\KB972270\update\updspapi.dll + 2010-01-13 22:04 . 2008-07-08 13:03 757112 c:\windows\$hf_mig$\KB972270\update\update.exe + 2010-01-13 22:04 . 2008-07-08 13:03 232824 c:\windows\$hf_mig$\KB972270\spuninst.exe + 2010-01-13 14:02 . 2009-10-15 16:39 119808 c:\windows\$hf_mig$\KB972270\SP3QFE\t2embed.dll + 2010-02-10 21:42 . 2008-07-08 13:03 392056 c:\windows\$hf_mig$\KB971468\update\updspapi.dll + 2010-02-10 21:42 . 2008-07-08 13:03 757112 c:\windows\$hf_mig$\KB971468\update\update.exe + 2010-02-10 21:42 . 2008-07-08 13:03 232824 c:\windows\$hf_mig$\KB971468\spuninst.exe + 2010-02-10 14:08 . 2010-01-01 07:58 353792 c:\windows\$hf_mig$\KB971468\SP3QFE\srv.sys + 2010-01-13 22:04 . 2009-05-26 15:10 392056 c:\windows\$hf_mig$\KB955759\update\updspapi.dll + 2010-01-13 22:04 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB955759\update\update.exe + 2010-01-13 22:04 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB955759\spuninst.exe + 2010-01-13 14:03 . 2009-11-21 15:46 471552 c:\windows\$hf_mig$\KB955759\SP3QFE\aclayers.dll + 2010-08-03 23:15 . 2010-02-22 14:25 392056 c:\windows\$hf_mig$\KB2286198\update\updspapi.dll + 2010-08-03 23:15 . 2010-02-22 14:24 757112 c:\windows\$hf_mig$\KB2286198\update\update.exe + 2010-08-03 23:15 . 2010-02-22 14:24 232824 c:\windows\$hf_mig$\KB2286198\spuninst.exe + 2010-07-14 21:57 . 2010-02-22 16:55 392056 c:\windows\$hf_mig$\KB2229593\update\updspapi.dll + 2010-07-14 21:57 . 2010-02-22 14:24 757112 c:\windows\$hf_mig$\KB2229593\update\update.exe + 2010-07-14 21:57 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB2229593\spuninst.exe + 2010-07-14 20:41 . 2010-06-14 14:38 744448 c:\windows\$hf_mig$\KB2229593\SP3QFE\helpsvc.exe + 2008-05-31 04:57 . 2010-04-06 01:52 2462720 c:\windows\system32\WMVCore.dll + 2008-05-31 04:57 . 2010-06-24 12:26 1210368 c:\windows\system32\urlmon.dll + 2008-05-31 04:57 . 2010-07-27 06:30 8466432 c:\windows\system32\shell32.dll + 2008-05-31 04:57 . 2010-02-05 18:26 1292288 c:\windows\system32\quartz.dll + 2008-05-31 04:57 . 2010-04-28 18:13 2192256 c:\windows\system32\ntoskrnl.exe + 2004-09-14 16:08 . 2010-04-28 05:43 2069120 c:\windows\system32\ntkrnlpa.exe + 2008-05-31 04:57 . 2010-06-24 12:26 5951488 c:\windows\system32\mshtml.dll + 2010-08-07 11:29 . 2010-08-07 11:29 5612496 c:\windows\system32\Macromed\Flash\NPSWF32.dll + 2007-08-13 15:34 . 2010-06-24 12:26 1986560 c:\windows\system32\iertutil.dll + 2010-06-03 02:41 . 2010-06-03 02:41 3600384 c:\windows\system32\GPhotos.scr + 2008-05-31 04:57 . 2010-04-06 01:52 2462720 c:\windows\system32\dllcache\WMVCore.dll + 2008-10-15 07:53 . 2010-06-24 09:02 1852160 c:\windows\system32\dllcache\win32k.sys + 2008-05-31 04:57 . 2010-06-24 12:26 1210368 c:\windows\system32\dllcache\urlmon.dll + 2008-06-17 19:02 . 2010-07-27 06:30 8466432 c:\windows\system32\dllcache\shell32.dll + 2008-05-07 05:12 . 2010-02-05 18:26 1292288 c:\windows\system32\dllcache\quartz.dll + 2008-10-15 07:59 . 2010-04-28 18:13 2192256 c:\windows\system32\dllcache\ntoskrnl.exe + 2008-10-15 07:59 . 2010-04-28 05:43 2027008 c:\windows\system32\dllcache\ntkrpamp.exe + 2008-10-15 07:59 . 2010-04-28 05:43 2069120 c:\windows\system32\dllcache\ntkrnlpa.exe + 2008-10-15 07:59 . 2010-04-28 05:43 2148864 c:\windows\system32\dllcache\ntkrnlmp.exe - 2008-11-12 14:08 . 2009-07-31 04:34 1172480 c:\windows\system32\dllcache\msxml3.dll + 2008-11-12 14:08 . 2010-06-14 07:42 1172480 c:\windows\system32\dllcache\msxml3.dll + 2009-08-12 12:04 . 2010-01-29 15:00 1315328 c:\windows\system32\dllcache\msoe.dll - 2009-08-12 12:04 . 2009-07-10 13:28 1315328 c:\windows\system32\dllcache\msoe.dll + 2008-05-31 04:57 . 2010-06-24 12:26 5951488 c:\windows\system32\dllcache\mshtml.dll + 2010-03-10 11:17 . 2010-06-18 13:36 3558912 c:\windows\system32\dllcache\moviemk.exe + 2008-05-31 10:03 . 2010-06-24 12:26 1986560 c:\windows\system32\dllcache\iertutil.dll + 2008-05-31 04:57 . 2010-09-10 13:36 1034240 c:\windows\system32\dllcache\explorer.exe + 2009-11-06 22:06 . 2009-11-06 22:06 1130824 c:\windows\system32\dfshim.dll + 2010-04-07 20:48 . 2010-04-07 20:48 5967872 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.dll + 2010-03-23 02:32 . 2010-03-23 02:32 5242880 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll - 2008-11-25 01:59 . 2008-11-25 01:59 5242880 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll + 2010-03-23 02:32 . 2010-03-23 02:32 3182592 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll + 2010-05-11 03:40 . 2010-05-11 03:40 5812560 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll - 2009-08-07 20:51 . 2009-08-07 20:51 5812560 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll + 2010-05-11 03:40 . 2010-05-11 03:40 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll - 2008-05-27 22:35 . 2008-05-27 22:35 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll + 2010-04-01 08:42 . 2010-04-01 08:42 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll - 2008-05-27 22:35 . 2008-05-27 22:35 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll + 2010-04-01 08:42 . 2010-04-01 08:42 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll + 2010-03-31 11:50 . 2010-03-31 11:50 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll - 2008-05-27 21:48 . 2008-05-27 21:48 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll + 2010-03-31 11:50 . 2010-03-31 11:50 2527232 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll - 2008-05-27 21:43 . 2008-05-27 21:43 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll + 2010-04-01 08:42 . 2010-04-01 08:42 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll + 2010-04-11 19:17 . 2010-04-11 19:17 2607104 c:\windows\Installer\3bf5b2c.msp + 2010-04-11 19:17 . 2010-04-11 19:17 4210688 c:\windows\Installer\3bf5b2b.msp + 2009-11-08 21:25 . 2009-11-08 21:25 1935360 c:\windows\Installer\321abcf.msp + 2010-06-09 23:09 . 2010-02-25 06:18 1209344 c:\windows\ie8updates\KB982381-IE8\urlmon.dll + 2010-06-09 23:09 . 2010-02-25 06:18 5944832 c:\windows\ie8updates\KB982381-IE8\mshtml.dll + 2010-06-09 23:09 . 2010-02-25 06:18 1985536 c:\windows\ie8updates\KB982381-IE8\iertutil.dll + 2010-03-31 21:05 . 2009-12-21 19:08 1208832 c:\windows\ie8updates\KB980182-IE8\urlmon.dll + 2010-03-31 21:05 . 2009-12-21 19:08 5942784 c:\windows\ie8updates\KB980182-IE8\mshtml.dll + 2010-03-31 21:05 . 2009-12-21 19:08 1985536 c:\windows\ie8updates\KB980182-IE8\iertutil.dll + 2010-01-23 01:00 . 2009-10-29 07:43 1208832 c:\windows\ie8updates\KB978207-IE8\urlmon.dll + 2010-01-23 01:00 . 2009-10-29 07:43 5940736 c:\windows\ie8updates\KB978207-IE8\mshtml.dll + 2010-01-23 01:00 . 2009-10-29 07:43 1985536 c:\windows\ie8updates\KB978207-IE8\iertutil.dll + 2010-08-11 22:13 . 2010-05-06 10:34 1209344 c:\windows\ie8updates\KB2183461-IE8\urlmon.dll + 2010-08-11 22:13 . 2010-05-06 10:34 5950976 c:\windows\ie8updates\KB2183461-IE8\mshtml.dll + 2010-08-11 22:13 . 2010-05-06 10:34 1985536 c:\windows\ie8updates\KB2183461-IE8\iertutil.dll + 2008-10-15 07:59 . 2010-04-28 18:13 2192256 c:\windows\Driver Cache\i386\ntoskrnl.exe + 2008-10-15 07:59 . 2010-04-28 05:43 2027008 c:\windows\Driver Cache\i386\ntkrpamp.exe + 2008-10-15 07:59 . 2010-04-28 05:43 2069120 c:\windows\Driver Cache\i386\ntkrnlpa.exe + 2008-10-15 07:59 . 2010-04-28 05:43 2148864 c:\windows\Driver Cache\i386\ntkrnlmp.exe + 2010-06-08 09:02 . 2010-06-08 09:02 2605008 c:\windows\Downloaded Program Files\FP_AX_CAB_INSTALLER.exe + 2010-06-08 09:02 . 2010-06-08 09:02 2605008 c:\windows\Downloaded Program Files\CONFLICT.2\FP_AX_CAB_INSTALLER.exe + 2010-06-08 09:02 . 2010-06-08 09:02 2605008 c:\windows\Downloaded Program Files\CONFLICT.1\FP_AX_CAB_INSTALLER.exe + 2010-06-09 23:11 . 2010-06-09 23:11 1966080 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_a701b009\System.dll + 2010-06-09 23:11 . 2010-06-09 23:11 4792320 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_53b80661\System.dll + 2010-06-09 23:11 . 2010-06-09 23:11 5513216 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_aaa46daf\System.Xml.dll + 2010-06-09 23:11 . 2010-06-09 23:11 2088960 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_2fd996f4\System.Xml.dll + 2010-06-09 23:11 . 2010-06-09 23:11 3018752 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_e6e19d31\System.Windows.Forms.dll + 2010-06-09 23:11 . 2010-06-09 23:11 7884800 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_b64beeed\System.Windows.Forms.dll + 2010-06-09 23:11 . 2010-06-09 23:11 2244608 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_a4953123\System.Drawing.dll + 2010-06-09 23:11 . 2010-06-09 23:11 3395584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_b2b1492c\System.Design.dll + 2010-06-09 23:11 . 2010-06-09 23:11 1466368 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_211afe69\System.Design.dll + 2010-06-09 23:11 . 2010-06-09 23:11 8908800 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_13d0c09d\mscorlib.dll + 2010-06-09 23:11 . 2010-06-09 23:11 3391488 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_0e44d588\mscorlib.dll + 2010-08-12 09:56 . 2010-08-12 09:56 1105920 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\ba732eb3a84c96e8bf60495395efbfac\WindowsLive.Writer.ApplicationFramework.ni.dll + 2010-08-12 09:56 . 2010-08-12 09:56 2002432 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\aacec1e49b5cc0e8369ff555abd4b922\WindowsLive.Writer.CoreServices.ni.dll + 2010-08-12 09:56 . 2010-08-12 09:56 6392832 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\87825e26c8a5fd4e559b5e8d58faec21\WindowsLive.Writer.PostEditor.ni.dll + 2010-08-11 22:16 . 2010-08-11 22:16 3325440 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\cec7ecb8eac09dd630d180ce87d23b80\WindowsBase.ni.dll + 2010-08-12 09:45 . 2010-08-12 09:45 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\b7f6e7b265f9aae807ddc4284563e550\UIAutomationClientsideProviders.ni.dll + 2010-08-11 22:16 . 2010-08-11 22:16 7949824 c:\windows\assembly\NativeImages_v2.0.50727_32\System\08ffa4d388d5f007869aa7651c458e7c\System.ni.dll + 2010-08-12 09:45 . 2010-08-12 09:45 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\a6dbe24cbfe3ab6b318ed3095cc572d8\System.Xml.ni.dll + 2010-08-12 09:58 . 2010-08-12 09:58 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\60b3c9a63b2065a6952d16256545c25d\System.WorkflowServices.ni.dll + 2010-08-12 09:58 . 2010-08-12 09:58 1908224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\5cc2a23ce8ac371c7a97b5e542ee27ed\System.Workflow.Runtime.ni.dll + 2010-08-12 09:58 . 2010-08-12 09:58 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\c0aabf67e7ef98dc10c3e174c136731b\System.Workflow.ComponentModel.ni.dll + 2010-08-12 09:58 . 2010-08-12 09:58 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\66682c8a064608ba4ffd0463cf09aef9\System.Workflow.Activities.ni.dll + 2010-08-12 09:56 . 2010-08-12 09:56 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\2d662564b8d9c57a34c588cc2970902b\System.Web.Services.ni.dll + 2010-08-12 09:58 . 2010-08-12 09:58 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\9b455702c9b7b02c5708406f87986751\System.Web.Mobile.ni.dll + 2010-08-12 09:58 . 2010-08-12 09:58 2403328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\49c7a1c78ed9502ba97c11e6bd993f63\System.Web.Extensions.ni.dll + 2010-08-12 09:44 . 2010-08-12 09:44 1917952 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\5eb08849d17b272ed2a393420cb0305b\System.Speech.ni.dll + 2010-08-12 09:58 . 2010-08-12 09:58 1706496 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\f5790a1b7b41e7b8d05f01b549c80f39\System.ServiceModel.Web.ni.dll + 2010-08-12 09:56 . 2010-08-12 09:56 2345472 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\8061a0f5c1c2ee0549e19224352f67fa\System.Runtime.Serialization.ni.dll + 2010-08-12 09:44 . 2010-08-12 09:44 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\99767d4df92b83fdfb06012512722ec1\System.Printing.ni.dll + 2010-08-12 09:56 . 2010-08-12 09:56 1070080 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\0885f31c21b796465fde6297dba20981\System.IdentityModel.ni.dll + 2010-08-12 09:44 . 2010-08-12 09:44 1587200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dcc0244092fe52e6885b50be25ef3b31\System.Drawing.ni.dll + 2010-08-12 09:56 . 2010-08-12 09:56 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\d20b7e58607ddb1ded9b687627ae8c21\System.DirectoryServices.ni.dll + 2010-08-12 09:55 . 2010-08-12 09:55 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\daa33674d4250e38a24b70180d209ac8\System.Deployment.ni.dll + 2010-08-12 09:43 . 2010-08-12 09:43 6616576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\f04ef00e652a8655a717639e8aeb7b63\System.Data.ni.dll + 2010-08-12 09:55 . 2010-08-12 09:55 2510336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\f0470c2be4e6bb1dadbeed43e4e8af5c\System.Data.SqlXml.ni.dll + 2010-08-12 09:58 . 2010-08-12 09:58 1328128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\23cf0498f2ebe4c8ffa5cc79efca2dc5\System.Data.Services.ni.dll + 2010-08-12 09:56 . 2010-08-12 09:56 1115136 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\58202ed61096113d08815c0a78313b66\System.Data.OracleClient.ni.dll + 2010-08-12 09:43 . 2010-08-12 09:43 2516480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\c18c236a09e715138daec2e25be205bb\System.Data.Linq.ni.dll + 2010-08-12 09:58 . 2010-08-12 09:58 9924096 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\6ce886492d9b6a34555be3f328682ec2\System.Data.Entity.ni.dll + 2010-08-12 09:43 . 2010-08-12 09:43 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\faeda674832135a080bc73eda51813ff\System.Core.ni.dll + 2010-08-12 09:43 . 2010-08-12 09:43 2128896 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\3e85c3d63ce3c3f37061aa626feb2a52\ReachFramework.ni.dll + 2010-08-12 09:42 . 2010-08-12 09:42 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\bf67db30179ff6e8cb1bdbaa290d122e\PresentationUI.ni.dll + 2010-08-11 22:16 . 2010-08-11 22:16 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\835786d8a0caabae09ad440f6e3abfc6\PresentationBuildTasks.ni.dll + 2010-08-12 09:55 . 2010-08-12 09:55 2019840 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet\5bbdb6d6fbae6e06b8133fb8f610f04c\PaintDotNet.ni.exe + 2010-08-12 09:55 . 2010-08-12 09:55 1812480 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.Core\3777baeedc31f8e096cf2bf5939006e2\PaintDotNet.Core.ni.dll + 2010-08-12 09:57 . 2010-08-12 09:57 1712128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\9732a7c993055f82040642966db07ccf\Microsoft.VisualBasic.ni.dll + 2010-08-12 09:57 . 2010-08-12 09:57 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\773d7bf69a9a0c0556aa41f53e75ab05\Microsoft.Transactions.Bridge.ni.dll + 2010-08-12 09:58 . 2010-08-12 09:58 2332160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\16ff33f07efdb9da2a18e27585c604be\Microsoft.JScript.ni.dll + 2010-08-12 09:57 . 2010-08-12 09:57 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\d0fb91b296616a1a844bf265947018ee\Microsoft.Build.Tasks.ni.dll + 2010-08-12 09:57 . 2010-08-12 09:57 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\892e993c8df1c75081113131dc429c15\Microsoft.Build.Tasks.v3.5.ni.dll + 2010-08-12 09:57 . 2010-08-12 09:57 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\d0beebd2c9045158cdcd4bd5987b717b\Microsoft.Build.Engine.ni.dll + 2010-06-23 22:44 . 2010-06-23 22:44 1249280 c:\windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll + 2010-08-11 22:15 . 2010-08-11 22:15 3182592 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll + 2010-08-11 22:15 . 2010-08-11 22:15 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll - 2009-10-15 21:35 . 2009-10-15 21:35 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll + 2010-08-11 22:14 . 2010-08-11 22:14 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll - 2009-10-15 21:34 . 2009-10-15 21:34 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll + 2010-06-09 23:05 . 2010-06-09 23:05 5967872 c:\windows\assembly\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089\System.ServiceModel.dll - 2009-10-15 21:34 . 2009-10-15 21:34 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll + 2010-08-11 22:14 . 2010-08-11 22:14 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll + 2010-06-23 22:44 . 2010-06-23 22:44 5279744 c:\windows\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll - 2009-10-15 21:34 . 2009-10-15 21:34 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll + 2010-08-11 22:14 . 2010-08-11 22:14 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll + 2010-08-11 22:15 . 2010-08-11 22:15 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll - 2009-10-15 21:35 . 2009-10-15 21:35 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll - 2009-02-26 09:22 . 2009-02-26 09:22 4210688 c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll + 2010-06-23 22:44 . 2010-06-23 22:44 4210688 c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll + 2010-08-11 22:15 . 2010-08-11 22:15 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll + 2010-06-09 23:11 . 2010-06-09 23:11 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll - 2009-10-15 21:28 . 2009-10-15 21:28 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll + 2010-06-09 23:11 . 2010-06-09 23:11 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll - 2009-10-15 21:28 . 2009-10-15 21:28 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll + 2010-06-09 05:47 . 2010-05-06 10:28 1209856 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\urlmon.dll + 2010-06-09 05:47 . 2010-05-06 10:28 5953024 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\mshtml.dll + 2010-06-09 05:47 . 2010-05-06 10:28 1986048 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\iertutil.dll + 2010-03-31 10:23 . 2010-02-25 06:12 1209856 c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\urlmon.dll + 2010-03-31 10:23 . 2010-02-25 06:12 5946880 c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\mshtml.dll + 2010-03-31 10:23 . 2010-02-25 06:12 1986048 c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\iertutil.dll + 2010-04-14 12:06 . 2010-02-16 19:01 2192384 c:\windows\$hf_mig$\KB979683\SP3QFE\ntoskrnl.exe + 2010-04-14 12:06 . 2010-02-16 19:01 2027008 c:\windows\$hf_mig$\KB979683\SP3QFE\ntkrpamp.exe + 2010-04-14 12:06 . 2010-02-16 19:01 2069248 c:\windows\$hf_mig$\KB979683\SP3QFE\ntkrnlpa.exe + 2010-04-14 12:06 . 2010-02-16 19:01 2148864 c:\windows\$hf_mig$\KB979683\SP3QFE\ntkrnlmp.exe + 2010-05-02 08:02 . 2010-05-02 08:02 1860608 c:\windows\$hf_mig$\KB979559\SP3QFE\win32k.sys + 2010-01-29 14:54 . 2010-01-29 14:54 1315328 c:\windows\$hf_mig$\KB978542\SP3QFE\msoe.dll + 2010-01-22 14:24 . 2009-12-21 19:02 1209344 c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\urlmon.dll + 2010-01-22 14:24 . 2009-12-21 19:02 5945856 c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\mshtml.dll + 2010-01-22 14:25 . 2009-12-21 19:02 1986048 c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\iertutil.dll + 2009-12-09 13:33 . 2009-12-09 13:33 2191616 c:\windows\$hf_mig$\KB977165\SP3QFE\ntoskrnl.exe + 2010-02-10 14:06 . 2009-12-09 10:03 2026496 c:\windows\$hf_mig$\KB977165\SP3QFE\ntkrpamp.exe + 2009-12-09 13:33 . 2009-12-09 13:33 2068480 c:\windows\$hf_mig$\KB977165\SP3QFE\ntkrnlpa.exe + 2010-02-10 14:06 . 2009-12-09 10:03 2147840 c:\windows\$hf_mig$\KB977165\SP3QFE\ntkrnlmp.exe + 2010-02-05 18:28 . 2010-02-05 18:28 1292288 c:\windows\$hf_mig$\KB975562\SP3QFE\quartz.dll + 2010-03-10 11:17 . 2009-10-23 14:53 3558912 c:\windows\$hf_mig$\KB975561\SP3QFE\moviemk.exe + 2009-11-27 17:24 . 2009-11-27 17:24 1292288 c:\windows\$hf_mig$\KB975560\SP3QFE\quartz.dll + 2010-07-27 06:29 . 2010-07-27 06:29 8467456 c:\windows\$hf_mig$\KB2286198\SP3QFE\shell32.dll + 2008-05-31 10:05 . 2010-08-03 18:09 35962312 c:\windows\system32\MRT.exe + 2007-08-13 15:54 . 2010-06-24 14:56 11077120 c:\windows\system32\ieframe.dll + 2008-05-31 10:03 . 2010-06-24 14:56 11077120 c:\windows\system32\dllcache\ieframe.dll + 2010-04-02 16:29 . 2010-04-02 16:29 11413504 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\M979906\M979906Uninstall.msp + 2010-04-02 09:30 . 2010-04-02 09:30 17456640 c:\windows\Installer\3bf5b69.msp + 2010-04-11 19:17 . 2010-04-11 19:17 14599680 c:\windows\Installer\3bf5b3a.msp + 2010-03-30 22:23 . 2010-03-30 22:23 15638528 c:\windows\Installer\321abdb.msp + 2010-01-20 22:10 . 2010-01-20 22:10 15710720 c:\windows\Installer\2598bcf.msp + 2010-06-04 22:35 . 2010-06-04 22:35 20242432 c:\windows\Installer\2410781.msp + 2010-05-19 10:08 . 2010-05-19 10:08 11408896 c:\windows\Installer\226986c.msp + 2010-09-07 20:00 . 2010-09-07 20:00 20303872 c:\windows\Installer\1ee2512.msp + 2010-06-09 23:09 . 2010-02-25 08:48 11070976 c:\windows\ie8updates\KB982381-IE8\ieframe.dll + 2010-03-31 21:05 . 2009-12-21 19:08 11070464 c:\windows\ie8updates\KB980182-IE8\ieframe.dll + 2010-01-23 01:00 . 2009-10-29 07:43 11069952 c:\windows\ie8updates\KB978207-IE8\ieframe.dll + 2010-08-11 22:13 . 2010-05-06 10:34 11076096 c:\windows\ie8updates\KB2183461-IE8\ieframe.dll + 2010-08-12 09:45 . 2010-08-12 09:45 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\439c466b60614915587c5273eaf0ca7f\System.Windows.Forms.ni.dll + 2010-08-12 09:56 . 2010-08-12 09:56 11798016 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\411a627d6f5cb83509332253406988e5\System.Web.ni.dll + 2010-08-12 09:56 . 2010-08-12 09:56 17403904 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\f523a69e7c93ee4f245c996eac4b3a57\System.ServiceModel.ni.dll + 2010-08-12 09:44 . 2010-08-12 09:44 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\b307acf63075b997d02a97a7492d0d9c\System.Design.ni.dll + 2010-08-11 22:17 . 2010-08-11 22:17 14328320 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\a632f3ef85ffd35341b383eed577cb93\PresentationFramework.ni.dll + 2010-08-11 22:16 . 2010-08-11 22:16 12215808 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\f00db8db51f5707c7fe52c0683dc6136\PresentationCore.ni.dll + 2010-08-11 22:16 . 2010-08-11 22:16 11490816 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\7bffd7ff2009f421fe5d229927588496\mscorlib.ni.dll + 2010-05-06 12:58 . 2010-05-06 12:58 11078144 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\ieframe.dll + 2010-03-31 10:23 . 2010-02-25 06:12 11073024 c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\ieframe.dll + 2009-12-22 12:02 . 2009-12-22 12:02 11070976 c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\ieframe.dll . -- Snapshot nollattu tähän hetkeen -- . (((((((((((((((((((((((((((((( Rekisterin käynnistyskohteet ))))))))))))))))))))))))))))))))))))))))))))) . . *Huom* Tyhjiä arvoja ja laillisia oletusarvoja ei näytetä REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2009-07-26 3883856] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-09-14 68856] "Skype"="c:\program files\Skype\Phone\Skype.exe" [2009-10-09 25623336] "uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2009-12-25 289584] "PC Suite Tray"="c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe" [2008-12-03 1205760] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2006-02-18 49152] "snp2std"="c:\windows\vsnp2std.exe" [2006-12-04 675840] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-07-20 7581696] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360] "msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856] c:\documents and settings\Omistaja\K„ynnist„-valikko\Ohjelmat\K„ynnistys\ OpenOffice.org 2.4.lnk - c:\program files\OpenOffice.org 2.4\program\quickstart.exe [2008-5-30 393216] c:\documents and settings\All Users\K„ynnist„-valikko\Ohjelmat\K„ynnistys\ Camera Monitor SD.lnk - c:\program files\PIXELA\Everio MediaBrowser\MBCameraMonitor.exe [2010-9-4 541976] HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2006-2-19 288472] HP Photosmart Premier -pikak„ynnistys.lnk - c:\program files\HP\Digital Imaging\bin\hpqthb08.exe [2006-2-10 73728] McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\2.0.181\SSScheduler.exe [2010-1-15 255536] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys] @="Driver" [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Documents and Settings\\Omistaja\\MNK\\LFS.exe"= "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= "c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"= "c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"= "c:\\Program Files\\uTorrent\\uTorrent.exe"= S2 gupdate1ca856f5a08ddb8;Google-päivityspalvelu (gupdate1ca856f5a08ddb8);c:\program files\Google\Update\GoogleUpdate.exe [25.12.2009 17:34 133104] S3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\2.0.181\McCHSvc.exe [15.1.2010 15:49 227232] . 'Ajoitetut tehtävät'-kansion sisältö 2010-09-10 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2009-12-25 14:34] 2010-09-10 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2009-12-25 14:34] . . ------- Täydentävä tarkistus ------- . uSearchMigratedDefaultURL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} uDefault_Search_URL = hxxp://www.google.com/ie uSearchAssistant = hxxp://www.google.com/ie uSearchURL,(Default) = hxxp://www.google.com/search?q=%s IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200 IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} - hxxp://video.uralweb.ru/activex/amc.cab FF - ProfilePath - c:\documents and settings\Omistaja\Application Data\Mozilla\Firefox\Profiles\6lafqndn.default\ FF - prefs.js: browser.search.defaulturl - hxxp://search.live.com/results.aspx?FORM=IEFM1&q= FF - prefs.js: browser.search.selectedEngine - Ask FF - prefs.js: browser.startup.homepage - hxxp://www.ask.com/?o=13166&l=dis FF - prefs.js: keyword.URL - hxxp://toolbar.ask.com/toolbarv/askRedirect?o=13165&gct=&gc=1&q= FF - component: c:\program files\Nokia\Nokia PC Suite 7\bkmrksync\components\BkMrkExt.dll FF - plugin: c:\program files\Google\Picasa3\npPicasa3.dll FF - plugin: c:\program files\Google\Update\1.2.183.29\npGoogleOneClick8.dll FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ . - - - - POISTETUT JÄMÄRIVIT - - - - HKLM-Run-userini - c:\windows\system32\userini.exe HKLM-Explorer_Run-userini - c:\windows\system32\userini.exe ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2010-09-10 17:42 Windows 5.1.2600 Service Pack 3 NTFS tarkistaa piilotettuja prosesseja ... tarkistaa piilotettuja käynnistysarvoja ... tarkistaa piilotettuja tiedostoja ... tarkistus on valmis piilotetut tiedostot: 0 ************************************************************************** "ImagePath"="\??\c:\windows\system32\drivers\rootrepeal [1].sys" [HKEY_LOCAL_MACHINE\System\ControlSet001\Services\rootrepeal[1]] "ImagePath"="\??\c:\windows\system32\drivers\rootrepeal . --------------------- LUKITUT REKISTERIAVAIMET --------------------- [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\�•€|ÿÿÿÿ"•€|ù•Ów*] "b049C053C7D38EE4AB9A00CB3B5D2472"="C?\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\PUBPLACE.HTT" [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\Ø•€|ÿÿÿÿ•€|ù•Ów*] "b049C053C7D38EE4AB9A00CB3B5D2472"="C?\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\PUBPLACE.HTT" . Valmistumisajankohta: 2010-09-10 17:45:14 ComboFix-quarantined-files.txt 2010-09-10 14:45 ComboFix2.txt 2010-01-01 11:01 ComboFix3.txt 2009-12-31 14:49 Ennen ajoa: 218 494 410 752 tavua vapaana Ajon jälkeen: 218 596 933 632 tavua vapaana WindowsXP-KB310994-SP2-Home-BootDisk-FIN.EXE [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS [operating systems] c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons UnsupportedDebug="do not select this" /debug multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect - - End Of File - - A40F0ED948CBA3DFEE888BDB0FB6D78F Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 17:51:36, on 10.9.2010 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\PC Connectivity Solution\ServiceLayer.exe C:\WINDOWS\system32\imapi.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\uTorrent\uTorrent.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe C:\Program Files\OpenOffice.org 2.4\program\soffice.exe C:\Program Files\OpenOffice.org 2.4\program\soffice.BIN C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe C:\WINDOWS\system32\wbem\wmiapsrv.exe C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\WINDOWS\explorer.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Windows Live\Toolbar\wltuser.exe C:\Program Files\Microsoft\Search Enhancement Pack\SCServer\SCServer.exe C:\Program Files\Skype\Toolbars\Shared\SkypeNames.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit O2 - BHO: Adobe PDF Reader -linkkiavustaja - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Windows Liven kirjautumisapuohjelma - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5612.1312\swg.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [snp2std] C:\WINDOWS\vsnp2std.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe" O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray O4 - HKUS\S-1-5-21-776561741-706699826-1417001333-1005\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'abc') O4 - HKUS\S-1-5-21-776561741-706699826-1417001333-1005\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'abc') O4 - HKUS\S-1-5-21-776561741-706699826-1417001333-1005\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" (User 'abc') O4 - HKUS\S-1-5-21-776561741-706699826-1417001333-1005\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background (User 'abc') O4 - HKUS\S-1-5-21-776561741-706699826-1417001333-1005\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray (User 'abc') O4 - HKUS\S-1-5-21-776561741-706699826-1417001333-1005\..\Run: [userini] C:\WINDOWS\system32\userini.exe (User 'abc') O4 - HKUS\S-1-5-21-776561741-706699826-1417001333-1005\..\Policies\Explorer\Run: [userini] C:\WINDOWS\system32\userini.exe (User 'abc') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Startup: OpenOffice.org 2.4.lnk = C:\Program Files\OpenOffice.org 2.4\program\quickstart.exe O4 - Global Startup: Camera Monitor SD.lnk = ? O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: HP Photosmart Premier -pikakäynnistys.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe O4 - Global Startup: McAfee Security Scan Plus.lnk = ? O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200 O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html O9 - Extra button: Lisää tämä blogiin - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &Lisää tämä blogiin tuotteessa Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/win...ls/en/x86/client/wuweb_site.cab?1212177961546 O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/mic...ls/en/x86/client/muweb_site.cab?1212178347750 O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553512000} - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O16 - DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} (AxisMediaControlEmb Class) - http://video.uralweb.ru/activex/amc.cab O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: Google-päivityspalvelu (gupdate1ca856f5a08ddb8) (gupdate1ca856f5a08ddb8) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- End of file - 10065 bytes
. Tuo valokuva näytönsäästäjä syö myös tehoja. Sun virusturva ei päivity (onko lisenssi loppu) PS. Ei se ole edes päällä. Norman Virus Control (Outdated) -------------------------------------------------------- Asenna koneellesi YKSI palomuuriohjelma: => TÄÄLTÄ Otat ruksit asennuksessa Toolbaareista pois. Jos käytät sisäänrakennettua Windowsin palomuuria, se ei ole suositeltua sillä se ei estä koneelta ulosmeneviä yhteyksiä. Tämä tarkoittaa että mikä tahansa haittaohjelma koneellasi on vapaa tekemään mitä tahansa internet -yhteydelläsi. Yksinkertaisesti sanottuna, Windows XP sisältää keskivertoa huonomman palomuurin. Tämä palomuuri EI ole mikään korvike omistautuneelle palomuuriratkaisulle. Muista käyttää vain yhtä palomuuria kerrallaan. ---------------------------------------------------------------- Sinulla ei ole anti-virusta koneellasi. Tietokoneesi on avoin viruksille ja muille lisäsaasteille jos aktiivista suojaa ei ole. Asenna koneellesi YKSI anti-virus ohjelma: 1) Antivir PersonalEdition Classic - Ilmainen anti-virus Windowsille. Ilmainen tuki. 2) avast! 5 Home Edition - Ilmainen anti-virus Windowsin kotikäyttäjille. 3) AVG Anti-Virus Free Edition - Ilmainen anti-virus Windowsin kotikäyttäjille. On vahvasti suositeltua että käytät vain yhtä anti-virusta kerrallaan. Pitämällä enempää kuin yhtä anti-virus softaa aktiivisena muistissa käyttää liikaa koneen resursseja ja voi johtaa vääriin hälytyksiin sekä ohjelmien välisiin konflikteihin. Jos välttämättä haluat asentaa useamman kuin yhden anti-virus ohjelman koneellesi, vain yhden niistä pitää olla aktiivisena suojaamassa. ******************************************************* Mene Käynnistä => Suorita => kopioi sinne Combofix /uninstall ja OK ------------------------------------------------------------- * Lataa OTM by OldTimer. * Tallenna se työpöydällesi. * Tuplaklikkaa OTM.exe käynnistääksesi sen. * Kopioi (CTRL+C) alla olevasta laatikosta kaikki teksti. Code: :Processes explorer.exe :files c:\windows\system32\drivers\rootrepeal[1].sys :reg [-HKEY_LOCAL_MACHINE\System\ControlSet001\Services\rootrepeal[1]] :Commands [purity] [emptytemp] [emptyflash] [start explorer] [Reboot] * Palaa takaisin OtmoveIt3, paina oikeanpuoleista hiiren nappia Paste Instructions for Items to be Move-ikkunassa (Keltaisen palkin alla) ja paina Liitä. * Paina punaista MoveIt! -nappia. * Kopioi (CTRL+C) ja liitä (CTRL+V) Results-ikkunaan (Vihreän palkin alla) tullut teksti seuraavaan viestiisi. * Sulje OTM. Jos jotain tiedostoa/kansiota ei voitu siirtää heti, ohjelma ehdottaa koneen uudelleenkäynnistystä. Vastaa ehdotukseen Yes, jolloin OtMoveIt käynnistää koneesi uudelleen. ********************************************************* * Muutetaan ohjelmia kuvakkeesta käynnistettäväksi. (toimivat silti normaalisti) * Kirjoita windowsin käynnistä-valikon suorita-kenttään msconfig paina OK * Valitse oikealla sijaitseva käynnistys-välilehti. * Jos joukossa on ohjelmia uTorrent * ota ruksi ohjelman kohdalta pois. * Valitse sitten käytä. (poistu ohjelmasta) * Samasta paikkaa ohjelman voi palauttaa StartMenuun. Koneen uudelleen käynnistyksessä se kysyy mitä tehdään. Otat uuden kokoonpanon käyttöön ja ruksi vasempaan alakulmaan ettei kysy samaa jokakerta uudelleen. ------------------------------------------------------------------ Mene Windowsin ControlPaneliin (Ohjauspaneli) ja sieltä Lisää / Poista sovellus Vistassa (7) Ohjelmat ja toiminnot Etsi ja poista ohjelma jonka nimessä on: Google Toolbar Skype add-on -------------------------------------------------------------------------------- Tässä ohjeet kuinka System Restore (Järjestelmän palautuspiste) puhdistetaan. Windows XP:ssä (System Volume Information) 1 Klikkaa hiiren oikealla napilla käynnistävalikon My Computer- tai oma tietokone-kuvaketta 2 Valitse Properties/ominaisuudet (Järjestelmä) 3 Valitse System Restore/järjestelmän palauttaminen välilehti 4 Laita ruxi "Turn off System Restore"/poista järjestelmän palauttaminen kaikissa asemissa 5 Paina Apply/käytä 6 Paina OK 7 Käynnistä Tietokoneesi uudelleen 8 Laita System Restore taas päälle Kohdassa 4 ruxsi pois ruudusta.=> käytä => OK. 9 Mene Käynnistä => Suorita ja kopioi laatikkoon %SystemRoot%\system32\restore\rstrui.exe => OK Laita täppi kohtaan Luo palautuspiste => Seuraava toimi ohjeiden mukaan. ------------------------------------------------------------- Poista ne rivit jotka ovat vielä jäljellä: Sammuta selain ja muut ohjelmat Fixin ajaksi. (ei virustorjuntaa) Käynnistä HijackThis:ja Scan ja ruksaa seuraavat punaisella listatut tiedostot (HJT sammuttaa ohjelman ei poista) O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5612.1312\swg.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKUS\S-1-5-21-776561741-706699826-1417001333-1005\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'abc') O4 - HKUS\S-1-5-21-776561741-706699826-1417001333-1005\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" (User 'abc') O4 - HKUS\S-1-5-21-776561741-706699826-1417001333-1005\..\Run: [userini] C:\WINDOWS\system32\userini.exe (User 'abc') O4 - HKUS\S-1-5-21-776561741-706699826-1417001333-1005\..\Policies\Explorer\Run: [userini] C:\WINDOWS\system32\userini.exe (User 'abc') O4 - Startup: OpenOffice.org 2.4.lnk = C:\Program Files\OpenOffice.org 2.4\program\quickstart.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: HP Photosmart Premier -pikakäynnistys.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.ht ml O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O16 - DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} (AxisMediaControlEmb Class) - http://video.uralweb.ru/activex/amc.cab sekä sammuta ne.(fix Chekked) napista. ---------------------------------------------------- Tyhjennä roskakori ja Käynnistä koneesi uudelleen. Poista kansio/t, jos löytyy: C:\Program Files\Google\Google Toolbar\ C:\Program Files\Skype\Toolbars\ C:\Program Files\Google\GoogleToolbarNotifier\ Postita tänne seuraavat lokit: * Tuore HijackThis loki (Otetaan viimeisenä ennen postitusta) * OTMoveIt logi. raportti * * Mikätilanne ??? *
Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 17:22:39, on 11.9.2010 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\HPZipm12.exe C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe C:\WINDOWS\system32\wbem\wmiapsrv.exe C:\Program Files\Windows Live\Contacts\wlcomm.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Microsoft\Search Enhancement Pack\SCServer\SCServer.exe C:\Program Files\Windows Live\Toolbar\wltuser.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit O2 - BHO: Adobe PDF Reader -linkkiavustaja - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Windows Liven kirjautumisapuohjelma - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\S-1-5-18\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200 O9 - Extra button: Lisää tämä blogiin - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &Lisää tämä blogiin tuotteessa Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/win...ls/en/x86/client/wuweb_site.cab?1212177961546 O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/mic...ls/en/x86/client/muweb_site.cab?1212178347750 O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553512000} - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: Google-päivityspalvelu (gupdate1ca856f5a08ddb8) (gupdate1ca856f5a08ddb8) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\WINDOWS\system32\ZoneLabs\vsmon.exe -- End of file - 6924 bytes All processes killed ========== PROCESSES ========== No active process named explorer.exe was found! ========== FILES ========== File/Folder c:\windows\system32\drivers\rootrepeal[1].sys not found. ========== REGISTRY ========== Registry key HKEY_LOCAL_MACHINE\System\ControlSet001\Services\rootrepeal[1]\ deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: abc ->Temp folder emptied: 2340016 bytes ->Temporary Internet Files folder emptied: 26478960 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 39108432 bytes ->Flash cache emptied: 885 bytes User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 67 bytes User: Esa Matias Kivinen ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 3711 bytes ->Flash cache emptied: 621 bytes User: LocalService ->Temp folder emptied: 65748 bytes ->Temporary Internet Files folder emptied: 49286 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 67 bytes User: Omistaja ->Temp folder emptied: 91119157 bytes ->Temporary Internet Files folder emptied: 176309856 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 40911700 bytes ->Google Chrome cache emptied: 6161520 bytes ->Flash cache emptied: 827 bytes User: Pia Kivinen ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 87711 bytes ->FireFox cache emptied: 66089009 bytes ->Flash cache emptied: 592 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 2502528 bytes %systemroot%\System32 .tmp files removed: 13193686 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 47767496 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 488,00 mb OTM by OldTimer - Version 3.1.15.0 log created on 09112010_160912 Files moved on Reboot... C:\Documents and Settings\Omistaja\Local Settings\Temp\~DF886B.tmp moved successfully. File C:\Documents and Settings\Omistaja\Local Settings\Temp\~DFD3B2.tmp not found! File C:\Documents and Settings\Omistaja\Local Settings\Temp\~DFD3E2.tmp not found! File C:\Documents and Settings\Omistaja\Local Settings\Temp\~DFD4AD.tmp not found! File C:\Documents and Settings\Omistaja\Local Settings\Temp\~DFD4DD.tmp not found! File C:\Documents and Settings\Omistaja\Local Settings\Temp\~DFD617.tmp not found! File C:\Documents and Settings\Omistaja\Local Settings\Temp\~DFD647.tmp not found! C:\Documents and Settings\Omistaja\Local Settings\Temporary Internet Files\Content.IE5\NOJD1835\signin[1].htm moved successfully. C:\Documents and Settings\Omistaja\Local Settings\Temporary Internet Files\Content.IE5\FN7CCZL7\kone_hidastunut_ja_netti_patkii-866806[1].htm moved successfully. C:\Documents and Settings\Omistaja\Local Settings\Temporary Internet Files\Content.IE5\EENNWV9N\afr[2].htm moved successfully. C:\Documents and Settings\Omistaja\Local Settings\Temporary Internet Files\Content.IE5\EENNWV9N\imp-201352493[1].htm moved successfully. C:\Documents and Settings\Omistaja\Local Settings\Temporary Internet Files\Content.IE5\D2W1Y94S\_newsfeed[1].htm moved successfully. File C:\WINDOWS\temp\av1.tmp not found! C:\WINDOWS\temp\iswift.dat moved successfully. C:\WINDOWS\temp\sfdb.dat moved successfully. C:\WINDOWS\temp\ZLT01c3e.TMP moved successfully. Registry entries deleted on Reboot... edelleen vaikuttaisi sama ongelma olevan....
järjestelmän vap.... SYSTEM 99 28kt Suoritinkäyttö % vaihtelee 0 ja 30 välillä kokoajan PF Usage = Muisti Mt 513
. Ei metä Fixareita niinpaljoa ole, että kaikki voi saman login kimpussa hääriä. Törkeä temppu sinulta ruveta kusettamaan monella Foorumilla samalla logilla. ---
ymmärrän kyllä ja pyydän anteeksi, en ole ennen tälläistä apua tarvinnut joten en tiennyt. mutta siis todellakin olen pahoillani ja jos mitenkään olisi vielä mahdollista saada apua niin olisin todella kiitollinen.