Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Trojan DNSChanger - not possible to remove the root cause [Solved]

Started by coolbox , Jan 03 2010 08:49 AM

  • This topic is locked This topic is locked

#1
coolbox
Posted 03 January 2010 - 08:49 AM

coolbox

    Member

  • Member
  • PipPip
  • 72 posts
I have this stubborn DNSChanger problem. Everytime I remove it, it mysteriously comes back. I thought it could be related to a dodgy software. I had a Sony Vegas Pro copy that wanted to run Java script when I tried to launch it, haha. I removed this from my drive but DNSChanger is still around. I have spent some good money on Norton technicians doing remote work on my laptop. After I came back to them 2-3 times within 7 days, I just given up. I keep removing the [bleep] thing and, so far, it is more an annoyance than a serious damage but I would love to get rid of it once and for good. Can you guys help?

Here is the today's MBAM log file:

Malwarebytes' Anti-Malware 1.43
Database version: 3477
Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.18865

03/01/2010 14:08:43
mbam-log-2010-01-03 (14-08-37).txt

Scan type: Quick Scan
Objects scanned: 103143
Time elapsed: 6 minute(s), 59 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 1
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{c1458549-ca0b-4a3b-8f8e-9259653aa0dd}\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.188,85.255.112.167 -> No action taken.

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)
  • 0

Advertisements

#2
Essexboy
Posted 03 January 2010 - 08:59 AM

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Hi do you connect via router ?
  • 0

#3
coolbox
Posted 03 January 2010 - 09:04 AM

coolbox

    Member

  • Topic Starter
  • Member
  • PipPip
  • 72 posts
yes, I am. I have reset it to factory's default but it didn't help - unless I do things in the wrong "sequence"
  • 0

#4
Essexboy
Posted 03 January 2010 - 09:07 AM

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
OK that is a start - But the thing is you must clear the system of the malware before resetting otherwise it will just return. So lets look at your computer first

To ensure that I get all the information this log will need to be attached (instructions at the end) if it is to large to attach then upload to Mediafire and post the sharing link.

Download OTS to your Desktop
  • Close ALL OTHER PROGRAMS.
  • Double-click on OTS.exe to start the program.
  • Check the box that says Scan All Users
  • Under Additional Scans check the following:
    • Reg - Shell Spawning
    • File - Lop Check
    • File - Purity Scan
    • Evnt - EvtViewer (last 10)
  • Under the Custom Scan box paste this in
    netsvcs
    %SYSTEMDRIVE%\*.exe
    /md5start
    eventlog.dll
    scecli.dll
    netlogon.dll
    cngaudit.dll
    sceclt.dll
    ntelogon.dll
    logevent.dll
    iaStor.sys
    nvstor.sys
    atapi.sys
    IdeChnDr.sys
    viasraid.sys
    AGP440.sys
    vaxscsi.sys
    nvatabus.sys
    viamraid.sys
    nvata.sys
    nvgts.sys
    iastorv.sys
    ViPrt.sys
    eNetHook.dll
    ahcix86.sys
    KR10N.sys
    nvstor32.sys
    ahcix86s.sys
    nvrd32.sys
    /md5stop
    %systemroot%\*. /mp /s

  • Now click the Run Scan button on the toolbar.
  • Let it run unhindered until it finishes.
  • When the scan is complete Notepad will open with the report file loaded in it.
  • Click the Format menu and make sure that Wordwrap is not checked. If it is then click on it to uncheck it.
Please attach the log in your next post.

To attach a file, do the following:
  • Click Add Reply
  • Under the reply panel is the Attachments Panel
  • Browse for the attachment file you want to upload, then click the green Upload button
  • Once it has uploaded, click the Manage Current Attachments drop down box
  • Click on Posted Image to insert the attachment into your post

  • 0

#5
coolbox
Posted 03 January 2010 - 09:32 AM

coolbox

    Member

  • Topic Starter
  • Member
  • PipPip
  • 72 posts
hello again. it's done [attachment=37516:OTS.Txt]
  • 0

#6
Essexboy
Posted 03 January 2010 - 09:44 AM

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
You may well have done it in the right order as it is not showing in that log. Could you re-run MBAM please and see if it re-appears
  • 0

#7
coolbox
Posted 03 January 2010 - 09:55 AM

coolbox

    Member

  • Topic Starter
  • Member
  • PipPip
  • 72 posts
It has found nothing, but I have "seen it before" and, certainly, it will manage to re-appear, methinks.

Malwarebytes' Anti-Malware 1.43
Database version: 3477
Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.18865

03/01/2010 15:53:06
mbam-log-2010-01-03 (15-53-06).txt

Scan type: Quick Scan
Objects scanned: 102649
Time elapsed: 4 minute(s), 39 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)
  • 0

#8
coolbox
Posted 03 January 2010 - 09:56 AM

coolbox

    Member

  • Topic Starter
  • Member
  • PipPip
  • 72 posts
P.S. does it matter if I reset the router on-line or manually?
  • 0

#9
Essexboy
Posted 03 January 2010 - 09:57 AM

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Are there any other computers using this router ?
  • 0

#10
coolbox
Posted 03 January 2010 - 09:59 AM

coolbox

    Member

  • Topic Starter
  • Member
  • PipPip
  • 72 posts
none, but I have an external back disk connected.
  • 0

Advertisements

#11
Essexboy
Posted 03 January 2010 - 10:01 AM

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
That should not be a problem. Rather than dive in with the heavy duty tools - I would like to leave as is for the next day or so to see if it returns. If it does then we shall get serious, but I believe you finally cured it when you reset your router :)
  • 0

#12
coolbox
Posted 03 January 2010 - 10:06 AM

coolbox

    Member

  • Topic Starter
  • Member
  • PipPip
  • 72 posts
Oh, I didn't reset the router today. Apologies for sounding a bit confused. I did it "historically" couple of days ago. Last night my laptop was healthy for a while. When I left it in a sleep mode for the night, without switching off the router, I found that the Trojan just re-appeared this morning.
  • 0

#13
Essexboy
Posted 03 January 2010 - 10:08 AM

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Ah OK I must have misread - lets play with the big boy then

Download ComboFix from one of these locations:


Link 1
Link 2


* IMPORTANT !!! Save ComboFix.exe to your Desktop


  • Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools

  • Double click on ComboFix.exe & follow the prompts.

  • As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.

  • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.


Posted Image



Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

Posted Image


Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.
  • 0

#14
coolbox
Posted 03 January 2010 - 10:48 AM

coolbox

    Member

  • Topic Starter
  • Member
  • PipPip
  • 72 posts
[attachment=37520:ComboFix.txt]
Hi,

It took me a while because I run ComboFix twice. The first time, I only noticed when it was about to prepare the report that all other programmes should be closed. I was playing with my Photoshop, to kill the time :)

So, I quitted PS and run the software again. See the attachment for the results.

ComboFix 10-01-02.05 - Andrew 03/01/2010 16:32:49.5.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.44.1033.18.2938.1693 [GMT 0:00]
Running from: c:\users\Andrew\Desktop\ComboFix.exe
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

((((((((((((((((((((((((( Files Created from 2009-12-03 to 2010-01-03 )))))))))))))))))))))))))))))))
.

2010-01-03 16:39 . 2010-01-03 16:39 -------- d-----w- c:\users\Public\AppData\Local\temp
2010-01-03 16:39 . 2010-01-03 16:39 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-01-03 13:41 . 2009-08-29 09:00 84912 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.0.0.136\Definitions\VirusDefs\20100102.020\NAVENG.SYS
2010-01-03 13:41 . 2009-08-29 09:00 177520 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.0.0.136\Definitions\VirusDefs\20100102.020\NAVENG32.DLL
2010-01-03 13:41 . 2009-08-29 09:00 1647984 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.0.0.136\Definitions\VirusDefs\20100102.020\NAVEX32A.DLL
2010-01-03 13:41 . 2009-08-29 09:00 1323568 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.0.0.136\Definitions\VirusDefs\20100102.020\NAVEX15.SYS
2010-01-03 13:41 . 2009-12-14 16:32 2747440 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.0.0.136\Definitions\VirusDefs\20100102.020\CCERASER.DLL
2010-01-03 13:41 . 2009-12-14 16:32 259440 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.0.0.136\Definitions\VirusDefs\20100102.020\ECMSVR32.DLL
2010-01-03 13:41 . 2009-08-29 09:00 371248 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.0.0.136\Definitions\VirusDefs\20100102.020\EECTRL.SYS
2010-01-03 13:41 . 2009-08-29 09:00 102448 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.0.0.136\Definitions\VirusDefs\20100102.020\ERASER.SYS
2010-01-02 14:38 . 2010-01-02 14:38 -------- d-----w- c:\program files\Java
2010-01-02 02:01 . 2010-01-02 02:01 5061520 ----a-w- c:\programdata\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe
2010-01-01 19:13 . 2010-01-01 19:13 -------- d-----w- c:\users\Andrew\AppData\Local\Apple Computer
2009-12-29 16:42 . 2009-12-30 14:55 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-12-29 16:42 . 2010-01-02 02:01 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-12-29 16:42 . 2009-12-30 14:54 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-12-25 18:25 . 2009-12-25 18:26 329224780 ----a-w- C:\regbkp.reg
2009-12-25 17:56 . 2009-12-27 15:30 -------- d-----w- c:\programdata\Norton VRQ
2009-12-25 17:48 . 2009-12-25 17:48 -------- d-----w- c:\users\Andrew\AppData\Local\ICS
2009-12-25 15:31 . 2009-12-25 15:31 -------- d-----w- c:\users\Andrew\DoctorWeb
2009-12-18 22:04 . 2009-10-28 22:37 811896 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.0.0.136\Definitions\IPSDefs\20091217.002\Scxpx86.dll
2009-12-18 22:04 . 2009-10-28 22:37 343088 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.0.0.136\Definitions\IPSDefs\20091217.002\IDSvix86.sys
2009-12-18 22:04 . 2009-10-28 22:37 329592 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.0.0.136\Definitions\IPSDefs\20091217.002\IDSXpx86.sys
2009-12-18 22:04 . 2009-10-28 22:37 488312 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.0.0.136\Definitions\IPSDefs\20091217.002\IDSxpx86.dll
2009-12-18 22:04 . 2009-10-28 22:37 466992 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.0.0.136\Definitions\IPSDefs\20091217.002\IDSviA64.sys
2009-12-18 10:16 . 2009-10-28 22:37 343088 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.0.0.136\Definitions\IPSDefs\20091216.001\IDSvix86.sys
2009-12-18 10:16 . 2009-10-28 22:37 329592 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.0.0.136\Definitions\IPSDefs\20091216.001\IDSXpx86.sys
2009-12-18 10:16 . 2009-10-28 22:37 811896 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.0.0.136\Definitions\IPSDefs\20091216.001\Scxpx86.dll
2009-12-18 10:16 . 2009-10-28 22:37 488312 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.0.0.136\Definitions\IPSDefs\20091216.001\IDSxpx86.dll
2009-12-18 10:16 . 2009-10-28 22:37 466992 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.0.0.136\Definitions\IPSDefs\20091216.001\IDSviA64.sys
2009-12-16 18:15 . 2009-12-16 18:15 -------- d-----w- c:\users\Andrew\AppData\Local\Apple
2009-12-15 10:15 . 2009-10-28 22:37 343088 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.0.0.136\Definitions\IPSDefs\20091211.001\IDSvix86.sys
2009-12-15 10:15 . 2009-10-28 22:37 329592 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.0.0.136\Definitions\IPSDefs\20091211.001\IDSXpx86.sys
2009-12-15 10:15 . 2009-10-28 22:37 811896 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.0.0.136\Definitions\IPSDefs\20091211.001\Scxpx86.dll
2009-12-15 10:15 . 2009-10-28 22:37 488312 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.0.0.136\Definitions\IPSDefs\20091211.001\IDSxpx86.dll
2009-12-15 10:15 . 2009-10-28 22:37 466992 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.0.0.136\Definitions\IPSDefs\20091211.001\IDSviA64.sys
2009-12-14 17:44 . 2009-12-15 21:35 -------- d-----w- c:\users\Andrew\AppData\Local\Adobe
2009-12-14 16:30 . 2009-12-14 16:35 -------- d-----w- c:\program files\Common Files\Symantec Shared
2009-12-14 16:30 . 2009-12-14 16:30 -------- d-----w- c:\program files\Symantec
2009-12-14 16:30 . 2009-12-14 16:30 124976 ----a-w- c:\windows\system32\drivers\SYMEVENT.SYS
2009-12-14 16:29 . 2009-08-30 00:16 164216 ----a-r- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.0.0.136\IPSFFPlgn\components\IPSFFPl.dll
2009-12-14 16:29 . 2009-08-26 22:13 900464 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.0.0.136\OCS\hsplayer.dll
2009-12-14 16:29 . 2009-09-01 08:50 893296 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.0.0.136\CLT\cltLMSx.dll
2009-12-14 16:29 . 2009-12-15 10:05 -------- d-----w- c:\windows\system32\drivers\NAV
2009-12-14 16:29 . 2009-12-14 16:29 -------- d-----w- c:\program files\Norton AntiVirus
2009-12-14 16:29 . 2009-12-14 16:29 -------- d-----w- c:\programdata\Norton
2009-12-14 16:27 . 2009-12-28 12:27 -------- d-----w- c:\program files\NortonInstaller
2009-12-14 16:27 . 2009-12-27 13:45 -------- d-----w- c:\programdata\NortonInstaller
2009-12-14 15:58 . 2009-12-14 16:14 -------- d-----w- c:\programdata\Lavasoft
2009-12-13 03:21 . 2009-12-13 03:21 -------- d-----w- c:\program files\Windows Portable Devices
2009-12-13 03:05 . 2009-09-10 02:00 92672 ----a-w- c:\windows\system32\UIAnimation.dll
2009-12-13 03:05 . 2009-09-10 02:01 3023360 ----a-w- c:\windows\system32\UIRibbon.dll
2009-12-13 03:05 . 2009-09-10 02:00 1164800 ----a-w- c:\windows\system32\UIRibbonRes.dll
2009-12-13 03:02 . 2009-10-08 21:08 555520 ----a-w- c:\windows\system32\UIAutomationCore.dll
2009-12-13 03:02 . 2009-10-08 21:08 234496 ----a-w- c:\windows\system32\oleacc.dll
2009-12-13 03:02 . 2009-10-08 21:07 4096 ----a-w- c:\windows\system32\oleaccrc.dll
2009-12-11 16:58 . 2009-12-11 16:59 -------- d-----w- c:\windows\system32\ca-ES
2009-12-11 16:58 . 2009-12-11 16:58 -------- d-----w- c:\windows\system32\eu-ES
2009-12-11 16:57 . 2009-12-11 16:58 -------- d-----w- c:\windows\system32\vi-VN
2009-12-11 16:34 . 2009-12-11 16:34 -------- d-----w- c:\windows\system32\EventProviders
2009-12-11 10:25 . 2009-04-11 05:03 12240896 ----a-w- c:\windows\system32\NlsLexicons0007.dll
2009-12-11 10:25 . 2009-04-11 06:28 1081344 ----a-w- c:\windows\system32\SLCExt.dll
2009-12-11 10:25 . 2009-04-11 06:27 3408896 ----a-w- c:\windows\system32\SLsvc.exe
2009-12-11 10:25 . 2009-04-11 06:28 2134528 ----a-w- c:\windows\system32\FunctionDiscoveryFolder.dll
2009-12-11 10:25 . 2009-04-11 06:27 65536 ----a-w- c:\windows\system32\DevicePairingWizard.exe
2009-12-11 10:23 . 2009-04-11 06:28 3174400 ----a-w- c:\windows\system32\netshell.dll
2009-12-11 10:22 . 2009-04-11 06:28 306176 ----a-w- c:\windows\system32\scesrv.dll
2009-12-11 10:21 . 2009-04-11 06:28 83968 ----a-w- c:\windows\system32\wbem\wmiutils.dll
2009-12-11 10:21 . 2009-04-11 06:28 30208 ----a-w- c:\windows\system32\wbem\wbemprox.dll
2009-12-11 10:21 . 2009-04-11 06:28 189440 ----a-w- c:\windows\system32\wbem\mofd.dll
2009-12-11 10:21 . 2009-04-11 06:28 265728 ----a-w- c:\windows\system32\wbem\esscli.dll
2009-12-11 10:21 . 2009-04-11 06:28 744448 ----a-w- c:\windows\system32\wbem\wbemcore.dll
2009-12-11 10:21 . 2009-04-11 06:28 265728 ----a-w- c:\windows\system32\wbem\repdrvfs.dll
2009-12-11 10:21 . 2009-04-11 06:28 614912 ----a-w- c:\windows\system32\wbem\fastprox.dll
2009-12-11 10:21 . 2009-04-11 06:28 705536 ----a-w- c:\windows\system32\SmiEngine.dll
2009-12-11 10:21 . 2009-04-11 06:28 218624 ----a-w- c:\windows\system32\wdscore.dll
2009-12-11 10:21 . 2009-04-11 06:27 130560 ----a-w- c:\windows\system32\PkgMgr.exe
2009-12-11 10:21 . 2009-04-11 06:28 247808 ----a-w- c:\windows\system32\drvstore.dll
2009-12-09 14:27 . 2009-11-09 12:31 24064 ----a-w- c:\windows\system32\nshhttp.dll
2009-12-09 14:27 . 2009-11-09 12:30 30720 ----a-w- c:\windows\system32\httpapi.dll
2009-12-09 14:27 . 2009-11-09 10:36 411648 ----a-w- c:\windows\system32\drivers\http.sys
2009-12-09 13:18 . 2009-12-09 13:18 56 ---ha-w- c:\windows\system32\ezsidmv.dat
2009-12-09 00:29 . 2009-12-14 15:18 -------- d-----w- c:\users\Andrew\AppData\Roaming\SUPERAntiSpyware.com
2009-12-08 23:48 . 2009-12-08 23:48 -------- d-----w- c:\users\Andrew\AppData\Roaming\Auslogics
2009-12-08 23:48 . 2009-12-08 23:48 -------- d-----w- c:\program files\Auslogics
2009-12-08 10:05 . 2009-10-29 09:17 2048 ----a-w- c:\windows\system32\tzres.dll
2009-12-07 22:31 . 2009-12-07 22:31 -------- d-----w- c:\users\Andrew\AppData\Roaming\Malwarebytes
2009-12-07 22:31 . 2009-12-07 22:31 -------- d-----w- c:\programdata\Malwarebytes
2009-12-07 22:03 . 2009-07-11 19:01 513536 ----a-w- c:\windows\system32\wlansvc.dll
2009-12-07 22:03 . 2009-07-11 19:01 302592 ----a-w- c:\windows\system32\wlansec.dll
2009-12-07 22:03 . 2009-07-11 19:01 293376 ----a-w- c:\windows\system32\wlanmsm.dll
2009-12-07 22:03 . 2009-07-11 19:01 65024 ----a-w- c:\windows\system32\wlanapi.dll
2009-12-07 22:03 . 2009-07-11 17:03 127488 ----a-w- c:\windows\system32\L2SecHC.dll
2009-12-07 22:03 . 2009-04-11 06:28 68096 ----a-w- c:\windows\system32\wlanhlp.dll
2009-12-07 22:03 . 2009-08-14 16:27 904776 ----a-w- c:\windows\system32\drivers\tcpip.sys
2009-12-07 22:02 . 2009-08-14 13:49 27136 ----a-w- c:\windows\system32\NETSTAT.EXE
2009-12-07 22:02 . 2009-08-14 13:48 30720 ----a-w- c:\windows\system32\drivers\tcpipreg.sys
2009-12-07 22:02 . 2009-08-14 13:48 105984 ----a-w- c:\windows\system32\netiohlp.dll
2009-12-07 22:02 . 2009-08-14 13:49 9728 ----a-w- c:\windows\system32\TCPSVCS.EXE
2009-12-07 22:02 . 2009-08-14 13:49 11264 ----a-w- c:\windows\system32\MRINFO.EXE
2009-12-07 22:02 . 2009-08-14 13:49 8704 ----a-w- c:\windows\system32\HOSTNAME.EXE
2009-12-07 22:02 . 2009-08-14 13:49 19968 ----a-w- c:\windows\system32\ARP.EXE
2009-12-07 22:02 . 2009-08-14 13:49 10240 ----a-w- c:\windows\system32\finger.exe
2009-12-07 22:02 . 2009-08-14 15:53 17920 ----a-w- c:\windows\system32\netevent.dll
2009-12-07 22:02 . 2009-08-14 13:49 17920 ----a-w- c:\windows\system32\ROUTE.EXE
2009-12-07 22:01 . 2009-08-04 12:34 3600456 ----a-w- c:\windows\system32\ntkrnlpa.exe
2009-12-07 22:01 . 2009-08-04 12:34 3548216 ----a-w- c:\windows\system32\ntoskrnl.exe
2009-12-07 21:59 . 2009-04-23 12:14 623616 ----a-w- c:\windows\system32\localspl.dll
2009-12-07 21:59 . 2009-06-10 11:38 91136 ----a-w- c:\windows\system32\avifil32.dll
2009-12-07 21:59 . 2009-08-14 13:27 2036736 ----a-w- c:\windows\system32\win32k.sys
2009-12-07 21:58 . 2009-07-15 12:39 313344 ----a-w- c:\windows\system32\wmpdxm.dll
2009-12-07 21:58 . 2009-04-11 06:28 1696768 ----a-w- c:\windows\system32\gameux.dll
2009-12-07 21:58 . 2009-08-29 00:14 28672 ----a-w- c:\windows\system32\Apphlpdm.dll
2009-12-07 21:58 . 2009-08-29 00:27 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll
2009-12-07 21:58 . 2009-08-10 12:35 355328 ----a-w- c:\windows\system32\WSDApi.dll
2009-12-07 21:58 . 2009-09-04 11:41 60928 ----a-w- c:\windows\system32\msasn1.dll
2009-12-07 21:58 . 2009-04-23 12:15 784896 ----a-w- c:\windows\system32\rpcrt4.dll
2009-12-07 21:58 . 2009-09-14 09:29 144896 ----a-w- c:\windows\system32\drivers\srv2.sys
2009-12-07 21:57 . 2009-09-10 14:58 310784 ----a-w- c:\windows\system32\unregmp2.exe
2009-12-07 21:57 . 2009-09-10 14:59 8147456 ----a-w- c:\windows\system32\wmploc.DLL
2009-12-07 21:57 . 2009-07-15 12:39 4096 ----a-w- c:\windows\system32\dxmasf.dll
2009-12-07 21:57 . 2009-07-15 12:39 7680 ----a-w- c:\windows\system32\spwmp.dll
2009-12-07 21:42 . 2009-05-08 12:53 604672 ----a-w- c:\windows\system32\WMSPDMOD.DLL
2009-12-06 21:42 . 2010-01-03 16:40 -------- d-----w- c:\users\Andrew\AppData\Local\temp
2009-12-05 21:22 . 2009-12-05 21:22 784136 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-02 14:38 . 2009-06-02 12:25 411368 ----a-w- c:\windows\system32\deploytk.dll
2010-01-01 19:25 . 2009-05-14 20:45 -------- d-----w- c:\users\Andrew\AppData\Roaming\Skype
2010-01-01 19:14 . 2009-09-09 18:47 -------- d-----w- c:\program files\iPod
2010-01-01 19:14 . 2009-09-09 18:47 -------- d-----w- c:\program files\iTunes
2010-01-01 19:14 . 2009-09-09 18:45 -------- d-----w- c:\program files\Common Files\Apple
2010-01-01 18:58 . 2009-05-14 20:46 -------- d-----w- c:\users\Andrew\AppData\Roaming\skypePM
2009-12-29 21:14 . 2008-10-22 17:57 -------- d-----w- c:\program files\sony
2009-12-29 21:14 . 2009-05-21 21:08 -------- d-----w- c:\programdata\Sony
2009-12-29 21:13 . 2009-05-21 21:08 -------- d-----w- c:\program files\Vstplugins
2009-12-29 00:15 . 2009-05-15 14:53 -------- d-----w- c:\program files\Sony Setup
2009-12-28 23:54 . 2009-05-16 21:28 -------- d-----w- c:\users\Andrew\AppData\Roaming\Sony
2009-12-25 18:34 . 2009-05-14 21:24 -------- d-----w- c:\users\Andrew\AppData\Roaming\DNA
2009-12-21 11:02 . 2008-10-22 18:43 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-12-14 16:30 . 2009-12-14 16:30 805 ----a-w- c:\windows\system32\drivers\SYMEVENT.INF
2009-12-14 16:30 . 2009-12-14 16:30 7443 ----a-w- c:\windows\system32\drivers\SYMEVENT.CAT
2009-12-13 03:21 . 2006-11-02 10:25 665600 ----a-w- c:\windows\inf\drvindex.dat
2009-12-13 03:21 . 2009-12-13 03:21 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdFs_01_07_00.Wdf
2009-12-11 16:59 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Calendar
2009-12-11 16:59 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2009-12-11 16:59 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Sidebar
2009-12-11 16:59 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Journal
2009-12-11 16:59 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Collaboration
2009-12-11 16:59 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Photo Gallery
2009-12-11 16:59 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Defender
2009-12-09 17:41 . 2009-05-14 21:24 -------- d-----w- c:\program files\DNA
2009-12-09 14:28 . 2008-11-27 21:46 -------- d-----w- c:\programdata\Microsoft Help
2009-12-08 22:34 . 2009-05-14 14:02 138792 ----a-w- c:\users\Andrew\AppData\Local\GDIPFONTCACHEV1.DAT
2009-12-08 10:28 . 2009-06-24 10:56 -------- d-----w- c:\program files\Microsoft Silverlight
2009-11-30 10:42 . 2009-06-15 12:26 -------- d-----w- c:\program files\Common Files\Real
2009-11-25 00:28 . 2009-05-14 21:25 -------- d-----w- c:\users\Andrew\AppData\Roaming\BitTorrent
2009-11-24 18:17 . 2009-11-24 18:17 79368 ----a-w- c:\users\Andrew\AppData\Roaming\Real\Update\setup3.09\RUP\vista.exe
2009-11-24 10:07 . 2009-11-24 10:07 439816 ----a-w- c:\users\Andrew\AppData\Roaming\Real\Update\setup3.09\setup.exe
2009-11-22 01:20 . 2009-11-22 01:19 -------- d-----w- c:\program files\QuickTime
2009-11-22 00:48 . 2009-11-22 00:48 -------- d-----w- c:\programdata\GoldWave
2009-11-21 06:40 . 2009-12-09 09:59 916480 ----a-w- c:\windows\system32\wininet.dll
2009-11-21 06:34 . 2009-12-09 09:59 71680 ----a-w- c:\windows\system32\iesetup.dll
2009-11-21 06:34 . 2009-12-09 09:59 109056 ----a-w- c:\windows\system32\iesysprep.dll
2009-11-21 04:59 . 2009-12-09 09:59 133632 ----a-w- c:\windows\system32\ieUnatt.exe
2009-11-20 18:53 . 2009-11-20 18:50 -------- d-----w- c:\program files\DFX
2009-11-20 18:50 . 2009-11-20 18:50 -------- d-----w- c:\programdata\DFX
2009-11-20 18:50 . 2009-11-20 18:50 -------- d-----w- c:\program files\Common Files\DFX
2009-11-15 19:05 . 2009-09-01 23:05 -------- d-----w- c:\programdata\Roxio
2009-11-15 13:08 . 2009-05-14 14:02 -------- d-----w- c:\users\Andrew\AppData\Roaming\Sony Corporation
2009-11-15 12:50 . 2008-10-22 21:55 -------- d-----w- c:\programdata\Sony Corporation
2009-11-05 16:32 . 2009-11-05 16:32 -------- d-----w- c:\users\Andrew\AppData\Roaming\PeerNetworking
2009-11-02 20:42 . 2009-10-13 09:21 195456 ------w- c:\windows\system32\MpSigStub.exe
2009-10-28 22:37 . 2009-10-28 22:37 343088 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.0.0.136\Definitions\IPSDefs\BinHub\IDSvix86.sys
2009-10-28 22:37 . 2009-10-28 22:37 329592 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.0.0.136\Definitions\IPSDefs\BinHub\IDSXpx86.sys
2009-10-28 22:37 . 2009-10-28 22:37 811896 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.0.0.136\Definitions\IPSDefs\BinHub\Scxpx86.dll
2009-10-28 22:37 . 2009-10-28 22:37 488312 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.0.0.136\Definitions\IPSDefs\BinHub\IDSxpx86.dll
2009-10-28 22:37 . 2009-10-28 22:37 466992 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.0.0.136\Definitions\IPSDefs\BinHub\IDSviA64.sys
2009-10-14 23:35 . 2009-10-14 23:35 8464 ----a-w- c:\windows\system32\SpOrder.dll
2009-10-11 14:10 . 2009-10-11 14:10 36864 ----a-w- c:\users\Andrew\AppData\Roaming\Autodesk\AutoCAD 2010\R18.0\enu\ContextualTabSelectorRules.dll
2009-10-07 11:36 . 2009-12-09 09:59 243712 ----a-w- c:\windows\system32\rastls.dll
2009-11-29 00:27 . 2009-06-03 11:30 119808 ----a-w- c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
2009-07-14 00:16 . 2009-07-14 00:16 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
2009-07-14 00:16 . 2009-07-14 00:16 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
.

((((((((((((((((((((((((((((( SnapShot@2010-01-03_16.25.52 )))))))))))))))))))))))))))))))))))))))))
.
+ 2006-11-02 06:34 . 2006-10-20 01:14 32768 c:\windows\winsxs\x86_regsvcs_b03f5f7f11d50a3a_6.0.6000.16386_none_ea5acd8d67a02ef5\RegSvcs.exe
+ 2006-11-02 06:34 . 2006-10-20 01:14 53248 c:\windows\winsxs\x86_regasm_b03f5f7f11d50a3a_6.0.6000.16386_none_173fa2e7152d3645\RegAsm.exe
+ 2006-11-02 06:34 . 2006-11-02 06:34 28160 c:\windows\winsxs\x86_netfx-wminet_utils_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_735d77df7a16028b\WMINet_Utils.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34 71680 c:\windows\winsxs\x86_netfx-tlbref_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_613d08e55393a756\TLBREF.DLL
+ 2006-11-02 06:34 . 2006-11-02 06:34 85504 c:\windows\winsxs\x86_netfx-shfusion_res_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_a63c20a9cbd96a81\ShFusRes.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34 78336 c:\windows\winsxs\x86_netfx-perfcounter_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_2a02772aff510a96\PerfCounter.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34 15360 c:\windows\winsxs\x86_netfx-normalization_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_dc5bf0ae2d4f6fc2\normalization.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34 89600 c:\windows\winsxs\x86_netfx-ngen_exe_b03f5f7f11d50a3a_6.0.6000.16386_none_77e860c04a4c2385\ngen.exe
+ 2006-11-02 06:34 . 2006-11-02 06:34 10240 c:\windows\winsxs\x86_netfx-mscortim_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_cec954a364832345\mscortim.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34 59392 c:\windows\winsxs\x86_netfx-mscorsvw_exe_b03f5f7f11d50a3a_6.0.6000.16386_none_2021a451e82131db\mscorsvw.exe
+ 2006-11-02 06:34 . 2006-10-20 01:14 22528 c:\windows\winsxs\x86_netfx-mscorsecr_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_a5c0f813ee2ed1f8\mscorsecr.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34 67072 c:\windows\winsxs\x86_netfx-mscorsec_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_11dcd325f46ef956\mscorsec.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34 81408 c:\windows\winsxs\x86_netfx-mscorld_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_c30a9235495732ed\mscorld.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34 36864 c:\windows\winsxs\x86_netfx-mscorie_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_eac2005b6fd42d71\mscorie.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34 73216 c:\windows\winsxs\x86_netfx-mscordbc_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_6d1b5243c560db72\mscordbc.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34 55296 c:\windows\winsxs\x86_netfx-installutillib_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_b6e1e631d82aaeaf\InstallUtilLib.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34 32768 c:\windows\winsxs\x86_netfx-fw_netfxperf_dll_31bf3856ad364e35_6.0.6000.16386_none_925ce6867e4dfdfc\netfxperf.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34 26624 c:\windows\winsxs\x86_netfx-dw_b03f5f7f11d50a3a_6.0.6000.16386_none_cdc7ed1d1ae18477\dw20.exe
+ 2006-11-02 06:34 . 2006-11-02 06:34 52736 c:\windows\winsxs\x86_netfx-dfdll_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_887bbb9454368959\dfdll.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34 25600 c:\windows\winsxs\x86_netfx-cvtres_for_vc_and_vb_b03f5f7f11d50a3a_6.0.6000.16386_none_e5eb996633b707c2\cvtres.exe
+ 2006-11-02 06:34 . 2006-11-02 06:34 17920 c:\windows\winsxs\x86_netfx-culture_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_dad951e64fe4ffb9\Culture.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34 70656 c:\windows\winsxs\x86_netfx-csharp_compiler_csc_b03f5f7f11d50a3a_6.0.6000.16386_none_fea421ba2cc2d199\csc.exe
+ 2006-11-02 06:34 . 2006-11-02 06:34 88576 c:\windows\winsxs\x86_netfx-corperfmonext_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_b31310afc29c6b21\CORPerfMonExt.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34 95232 c:\windows\winsxs\x86_netfx-clrgc_b03f5f7f11d50a3a_6.0.6000.16386_none_20f69241f8b2f71d\clrgc.exe
+ 2006-11-02 06:34 . 2006-11-02 06:34 47616 c:\windows\winsxs\x86_netfx-clr_sys_entservcs_thunk_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_528b86b0b782b897\System.EnterpriseServices.Thunk.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34 23552 c:\windows\winsxs\x86_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.0.6000.16386_none_c51455248bf19310\aspnet_wp.exe
+ 2006-11-02 06:34 . 2006-11-02 06:34 24064 c:\windows\winsxs\x86_netfx-aspnet_state_exe_b03f5f7f11d50a3a_6.0.6000.16386_none_81486aa9c284a376\aspnet_state.exe
+ 2006-11-02 06:34 . 2006-11-02 06:34 23040 c:\windows\winsxs\x86_netfx-aspnet_regiis_exe_b03f5f7f11d50a3a_6.0.6000.16386_none_12533aab21a2c6d8\aspnet_regiis.exe
+ 2006-11-02 06:34 . 2006-10-20 01:13 75264 c:\windows\winsxs\x86_netfx-aspnet_rc_dll_res_b03f5f7f11d50a3a_6.0.6000.16386_none_30455c49fd6dcdbb\aspnet_rc.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34 23552 c:\windows\winsxs\x86_netfx-aspnet_perf_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_ddd5c5f6fc614a9e\Aspnet_perf.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34 87040 c:\windows\winsxs\x86_netfx-aspnet_mmc_asp_ext_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_90ee1bebd2cc5bb9\MmcAspExt.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34 10752 c:\windows\winsxs\x86_netfx-aspnet_filter_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_d57ba977578b0ec9\aspnet_filter.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34 49152 c:\windows\winsxs\x86_netfx-applaunch_exe_b03f5f7f11d50a3a_6.0.6000.16386_none_c5623d346a9c29f7\AppLaunch.exe
+ 2006-11-02 06:34 . 2006-10-20 01:13 19456 c:\windows\winsxs\x86_netfx-_vc_assembly_linker_messages_b03f5f7f11d50a3a_6.0.6000.16386_none_655c53dca4acdafc\alinkui.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34 87552 c:\windows\winsxs\x86_netfx-_vc_assembly_linker_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_39276ed5eb38bec0\alink.dll
+ 2006-11-02 06:34 . 2006-10-20 01:14 69632 c:\windows\winsxs\x86_msbuild_b03f5f7f11d50a3a_6.0.6000.16386_none_815e96e1b0e084be\MSBuild.exe
+ 2006-11-02 06:50 . 2006-09-18 21:49 19216 c:\windows\winsxs\x86_microsoft-windows-tapicore_31bf3856ad364e35_6.0.6000.16386_none_e203168e49ab8983\tapi.dll
+ 2006-11-02 07:03 . 2006-11-02 09:42 17408 c:\windows\winsxs\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6001.18000_none_7185fd57fee6c971\prflbmsg.dll
+ 2006-11-02 06:25 . 2006-09-18 21:43 13312 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\win87em.dll
+ 2006-11-02 06:25 . 2006-09-18 21:43 18896 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\sysedit.exe
+ 2006-11-02 07:09 . 2006-11-02 07:09 11753 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\setver.exe
+ 2006-11-02 06:25 . 2006-09-18 21:43 46592 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\pmspl.dll
+ 2006-11-02 06:25 . 2006-09-18 21:43 82944 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\olecli.dll
+ 2006-11-02 07:09 . 2006-11-02 07:09 34672 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\NTIO804.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 35536 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\NTIO412.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 35776 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\NTIO411.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 34672 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\NTIO404.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 33952 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\NTIO.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 29146 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\NTDOS804.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 29274 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\NTDOS412.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 29370 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\NTDOS411.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 29146 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\NTDOS404.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 27866 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\NTDOS.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 39274 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\mem.exe
+ 2006-11-02 07:09 . 2006-11-02 07:09 42537 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\KEYBOARD.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 42809 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\KEY01.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 14710 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\KB16.COM
+ 2006-11-02 07:09 . 2006-11-02 07:09 19694 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\GRAPHICS.COM
+ 2006-11-02 07:09 . 2006-11-02 07:09 12642 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\edlin.exe
+ 2006-11-02 07:09 . 2006-11-02 07:09 20634 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\debug.exe
+ 2006-11-02 06:25 . 2006-09-18 21:43 27200 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\ctl3dv2.dll
+ 2006-11-02 07:09 . 2006-11-02 07:09 27097 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\country.sys
+ 2006-11-02 07:09 . 2006-11-02 07:09 50648 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\COMMAND.COM
+ 2006-11-02 07:09 . 2006-11-02 07:09 12498 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\append.exe
+ 2006-11-02 06:25 . 2006-09-18 21:43 13312 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\win87em.dll
+ 2006-11-02 06:25 . 2006-09-18 21:43 18896 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\sysedit.exe
+ 2006-11-02 07:09 . 2006-11-02 07:09 11753 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\setver.exe
+ 2006-11-02 06:25 . 2006-09-18 21:43 46592 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\pmspl.dll
+ 2006-11-02 06:25 . 2006-09-18 21:43 82944 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\olecli.dll
+ 2006-11-02 07:09 . 2006-11-02 07:09 34672 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\NTIO804.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 35536 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\NTIO412.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 35776 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\NTIO411.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 34672 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\NTIO404.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 33952 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\NTIO.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 29146 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\NTDOS804.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 29274 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\NTDOS412.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 29370 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\NTDOS411.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 29146 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\NTDOS404.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 27866 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\NTDOS.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 39274 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\mem.exe
+ 2006-11-02 07:09 . 2006-11-02 07:09 42537 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\KEYBOARD.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 42809 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\KEY01.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 14710 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\KB16.COM
+ 2006-11-02 07:09 . 2006-11-02 07:09 19694 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\GRAPHICS.COM
+ 2006-11-02 07:09 . 2006-11-02 07:09 12642 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\edlin.exe
+ 2006-11-02 07:09 . 2006-11-02 07:09 20634 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\debug.exe
+ 2006-11-02 06:25 . 2006-09-18 21:43 27200 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\ctl3dv2.dll
+ 2006-11-02 07:09 . 2006-11-02 07:09 27097 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\country.sys
+ 2006-11-02 07:09 . 2006-11-02 07:09 50648 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\COMMAND.COM
+ 2006-11-02 07:09 . 2006-11-02 07:09 12498 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\append.exe
+ 2006-11-02 06:25 . 2006-09-18 21:43 82944 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system_31bf3856ad364e35_6.0.6000.16386_none_1e1753ed2313c813\olecli.dll
+ 2006-11-02 06:47 . 2006-11-02 09:46 30749 c:\windows\winsxs\x86_microsoft-windows-m..s-components-jetvba_31bf3856ad364e35_6.0.6000.16386_none_735b8f8d953639a8\vbajet32.dll
+ 2006-11-02 06:47 . 2006-11-02 06:47 49179 c:\windows\winsxs\x86_microsoft-windows-m..ponents-mdac-sqlwoa_31bf3856ad364e35_6.0.6000.16386_none_174a466c7089e370\sqlwoa.dll
+ 2006-11-02 06:47 . 2006-11-02 09:46 24603 c:\windows\winsxs\x86_microsoft-windows-m..ponents-mdac-sqlwid_31bf3856ad364e35_6.0.6000.16386_none_17440058708f9849\sqlwid.dll
+ 2006-11-02 06:47 . 2006-11-02 09:46 20535 c:\windows\winsxs\x86_microsoft-windows-m..nents-mdac-odbc-jet_31bf3856ad364e35_6.0.6000.16386_none_c91f67973cf2633d\vfpodbc.dll
+ 2006-11-02 06:47 . 2006-11-02 09:46 77824 c:\windows\winsxs\x86_microsoft-windows-m..mponents-jetintlerr_31bf3856ad364e35_6.0.6000.16386_none_0d3a1215c37f298f\msjter40.dll
+ 2006-11-02 06:58 . 2006-11-02 09:39 31744 c:\windows\winsxs\x86_microsoft-windows-defrag-core_31bf3856ad364e35_6.0.6000.16386_none_1627a689bb218a55\DfrgRes.dll
+ 2006-11-02 06:49 . 2006-11-02 09:46 27136 c:\windows\winsxs\x86_microsoft-windows-ctl3d32_31bf3856ad364e35_6.0.6000.16386_none_c7f2246c57358efd\ctl3d32.dll
+ 2006-11-02 06:37 . 2006-11-02 06:37 20480 c:\windows\winsxs\x86_macrovision-protection-safedisc_31bf3856ad364e35_6.0.6000.16386_none_5b761551c05a7af8\secdrv.sys
+ 2006-11-02 06:34 . 2006-10-20 01:14 72192 c:\windows\winsxs\x86_isymwrapper_b03f5f7f11d50a3a_6.0.6000.16386_none_08871a3912c8c2b9\ISymWrapper.dll
+ 2006-11-02 06:34 . 2006-10-20 01:14 28672 c:\windows\winsxs\x86_installutil_b03f5f7f11d50a3a_6.0.6000.16386_none_7ba3179f20c94ba1\InstallUtil.exe
+ 2006-11-02 06:34 . 2006-10-20 01:13 69120 c:\windows\winsxs\x86_custommarshalers_b03f5f7f11d50a3a_6.0.6000.16386_none_726a99cd91646c97\CustomMarshalers.dll
+ 2006-11-02 06:34 . 2006-10-20 01:13 24576 c:\windows\winsxs\x86_aspnet_regbrowsers_b03f5f7f11d50a3a_6.0.6000.16386_none_099383f718bb04a1\aspnet_regbrowsers.exe
+ 2006-11-02 06:34 . 2006-10-20 01:13 36864 c:\windows\winsxs\x86_aspnet_compiler_b03f5f7f11d50a3a_6.0.6000.16386_none_18f29bee58392ddb\aspnet_compiler.exe
+ 2006-11-02 06:34 . 2006-10-20 01:14 86016 c:\windows\winsxs\msil_system.web.regularexpressions_b03f5f7f11d50a3a_6.0.6000.16386_none_4db64be81e2864f5\System.Web.RegularExpressions.dll
+ 2006-11-02 06:34 . 2006-10-20 01:14 81920 c:\windows\winsxs\msil_system.drawing.design_b03f5f7f11d50a3a_6.0.6000.16386_none_1c33a218b011fbce\System.Drawing.Design.dll
+ 2006-11-02 06:34 . 2006-10-20 01:14 81920 c:\windows\winsxs\msil_system.configuration.install_b03f5f7f11d50a3a_6.0.6000.16386_none_8becd563784ec64d\System.Configuration.Install.dll
+ 2006-11-02 06:34 . 2006-10-20 01:14 32768 c:\windows\winsxs\msil_microsoft.vsa_b03f5f7f11d50a3a_6.0.6000.16386_none_687aa64a39c9ba6b\Microsoft.Vsa.dll
+ 2006-11-02 06:34 . 2006-10-20 01:14 12800 c:\windows\winsxs\msil_microsoft.vsa.vb.codedomprocessor_b03f5f7f11d50a3a_6.0.6000.16386_none_44a77b3af2413480\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2006-11-02 06:34 . 2006-10-20 01:14 28672 c:\windows\winsxs\msil_microsoft.visualbasic.vsa_b03f5f7f11d50a3a_6.0.6000.16386_none_f303e2f94c23102f\Microsoft.VisualBasic.Vsa.dll
+ 2006-11-02 06:34 . 2006-10-20 01:14 73728 c:\windows\winsxs\msil_microsoft.build.utilities_b03f5f7f11d50a3a_6.0.6000.16386_none_e234f396a4ad3545\Microsoft.Build.Utilities.dll
+ 2006-11-02 06:34 . 2006-10-20 01:14 36864 c:\windows\winsxs\msil_microsoft.build.framework_b03f5f7f11d50a3a_6.0.6000.16386_none_c2f3a5df833df077\Microsoft.Build.Framework.dll
+ 2006-11-02 06:34 . 2006-10-20 01:14 40960 c:\windows\winsxs\msil_jsc_b03f5f7f11d50a3a_6.0.6000.16386_none_a7ff7678d71ff88f\jsc.exe
+ 2006-11-02 06:34 . 2006-10-20 01:14 36864 c:\windows\winsxs\msil_iehost_b03f5f7f11d50a3a_6.0.6000.16386_none_7e850f5c07b82741\IEHost.dll
+ 2006-11-02 06:34 . 2006-10-20 01:13 13312 c:\windows\winsxs\msil_cscompmgd_b03f5f7f11d50a3a_6.0.6000.16386_none_18c2e8dca9b10734\cscompmgd.dll
+ 2006-11-02 06:33 . 2006-10-20 01:13 10752 c:\windows\winsxs\msil_accessibility_b03f5f7f11d50a3a_6.0.6000.16386_none_4dd6596d92a52217\Accessibility.dll
+ 2006-11-02 06:25 . 2006-09-18 21:43 13312 c:\windows\System32\win87em.dll
+ 2006-07-24 18:50 . 2006-07-24 18:50 47920 c:\windows\System32\VBAME.DLL
+ 2006-11-02 06:47 . 2006-11-02 09:46 30749 c:\windows\System32\vbajet32.dll
+ 2006-11-02 06:50 . 2006-09-18 21:49 19216 c:\windows\System32\tapi.dll
+ 2006-11-02 06:25 . 2006-09-18 21:43 18896 c:\windows\System32\sysedit.exe
+ 2006-11-02 06:47 . 2006-11-02 06:47 49179 c:\windows\System32\sqlwoa.dll
+ 2006-11-02 06:47 . 2006-11-02 09:46 24603 c:\windows\System32\sqlwid.dll
+ 2006-11-02 07:09 . 2006-11-02 07:09 11753 c:\windows\System32\setver.exe
+ 2006-07-24 18:50 . 2006-07-24 18:50 39728 c:\windows\System32\SCP32.DLL
+ 2006-11-02 07:03 . 2006-11-02 09:42 17408 c:\windows\System32\prflbmsg.dll
+ 2006-11-02 06:25 . 2006-09-18 21:43 46592 c:\windows\System32\pmspl.dll
+ 2006-11-02 06:25 . 2006-09-18 21:43 82944 c:\windows\System32\olecli.dll
+ 2006-11-02 07:09 . 2006-11-02 07:09 34672 c:\windows\System32\NTIO804.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 35536 c:\windows\System32\NTIO412.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 35776 c:\windows\System32\NTIO411.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 34672 c:\windows\System32\NTIO404.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 33952 c:\windows\System32\NTIO.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 29146 c:\windows\System32\NTDOS804.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 29274 c:\windows\System32\NTDOS412.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 29370 c:\windows\System32\NTDOS411.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 29146 c:\windows\System32\NTDOS404.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 27866 c:\windows\System32\NTDOS.SYS
+ 2003-04-19 00:29 . 2003-04-19 00:29 82432 c:\windows\System32\msxml4r.dll
+ 2002-01-05 02:38 . 2002-01-05 02:38 54784 c:\windows\System32\msvci70.dll
+ 1998-08-09 18:07 . 1998-08-09 18:07 94208 c:\windows\System32\MSSTKPRP.DLL
+ 2003-03-19 04:44 . 2003-03-19 04:44 49152 c:\windows\System32\MFC71KOR.DLL
+ 2003-03-19 04:44 . 2003-03-19 04:44 49152 c:\windows\System32\MFC71JPN.DLL
+ 2003-03-19 04:44 . 2003-03-19 04:44 61440 c:\windows\System32\MFC71ITA.DLL
+ 2003-03-19 04:44 . 2003-03-19 04:44 61440 c:\windows\System32\MFC71FRA.DLL
+ 2003-03-19 04:44 . 2003-03-19 04:44 61440 c:\windows\System32\MFC71ESP.DLL
+ 2003-03-19 04:44 . 2003-03-19 04:44 57344 c:\windows\System32\MFC71ENU.DLL
+ 2003-03-19 04:44 . 2003-03-19 04:44 65536 c:\windows\System32\MFC71DEU.DLL
+ 2003-03-19 04:44 . 2003-03-19 04:44 45056 c:\windows\System32\MFC71CHT.DLL
+ 2003-03-19 04:44 . 2003-03-19 04:44 40960 c:\windows\System32\MFC71CHS.DLL
+ 2006-11-02 07:09 . 2006-11-02 07:09 39274 c:\windows\System32\mem.exe
+ 2006-11-02 07:09 . 2006-11-02 07:09 42537 c:\windows\System32\KEYBOARD.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 42809 c:\windows\System32\KEY01.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 14710 c:\windows\System32\KB16.COM
+ 2006-11-02 07:09 . 2006-11-02 07:09 19694 c:\windows\System32\GRAPHICS.COM
+ 2006-10-26 22:10 . 2006-10-26 22:10 33088 c:\windows\System32\FM20ENU.DLL
+ 2006-11-02 07:09 . 2006-11-02 07:09 12642 c:\windows\System32\edlin.exe
+ 2006-11-02 06:37 . 2006-11-02 06:37 20480 c:\windows\System32\drivers\secdrv.sys
+ 2006-11-02 06:58 . 2006-11-02 09:39 31744 c:\windows\System32\DfrgRes.dll
+ 2006-11-02 07:09 . 2006-11-02 07:09 20634 c:\windows\System32\debug.exe
+ 2006-11-02 06:25 . 2006-09-18 21:43 27200 c:\windows\System32\ctl3dv2.dll
+ 2006-11-02 06:49 . 2006-11-02 09:46 27136 c:\windows\System32\ctl3d32.dll
+ 2006-11-02 07:09 . 2006-11-02 07:09 27097 c:\windows\System32\country.sys
+ 2006-11-02 07:09 . 2006-11-02 07:09 50648 c:\windows\System32\COMMAND.COM
+ 2003-03-19 03:05 . 2003-03-19 03:05 89088 c:\windows\System32\atl71.dll
+ 2006-11-02 07:09 . 2006-11-02 07:09 12498 c:\windows\System32\append.exe
+ 2006-11-02 06:25 . 2006-09-18 21:43 82944 c:\windows\system\olecli.dll
+ 2006-10-26 12:44 . 2006-10-26 12:44 68280 c:\windows\Microsoft.NET\Framework\v2.0.50727\al.exe
+ 2006-10-27 05:17 . 2006-10-27 05:17 11072 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\XLCALL32.DLL
+ 2006-10-27 23:11 . 2006-10-27 23:11 21264 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\WRD12EXE.EXE
+ 2006-10-27 05:13 . 2006-10-27 05:13 38168 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\REFEDIT.DLL
+ 2006-10-27 04:12 . 2006-10-27 04:12 65824 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\NAME.DLL
+ 2006-10-27 05:13 . 2006-10-27 05:13 26936 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MSOEURO.DLL
+ 2006-10-27 03:48 . 2006-10-27 03:48 14664 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MSOCFU.DLL
+ 2006-10-27 05:18 . 2006-10-27 05:18 66880 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MSAEXP30.DLL
+ 2006-10-27 04:55 . 2006-10-27 04:55 87344 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\DLGSETP.DLL
+ 2006-10-27 05:30 . 2006-10-27 05:30 65312 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\COLLIMP.DLL
+ 2006-10-27 04:13 . 2006-10-27 04:13 56120 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\ACERCLR.DLL
+ 2006-10-27 04:13 . 2006-10-27 04:13 15160 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\ACEODTXT.DLL
+ 2006-10-27 04:13 . 2006-10-27 04:13 15160 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\ACEODPDX.DLL
+ 2006-10-27 04:13 . 2006-10-27 04:13 15160 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\ACEODEXL.DLL
+ 2006-10-27 04:13 . 2006-10-27 04:13 15160 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\ACEODDBS.DLL
+ 2006-10-27 23:00 . 2006-10-27 23:00 47976 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\ACEERR.DLL
+ 2006-07-24 18:50 . 2006-07-24 18:50 47920 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\VBAME.DLL
+ 2006-07-24 18:50 . 2006-07-24 18:50 92976 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\MSADDNDR.DLL
+ 2006-10-27 05:13 . 2006-10-27 05:13 72472 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\XL12CNVP.DLL
+ 2006-10-27 06:58 . 2006-10-27 06:58 33080 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\VPREVIEW.EXE
+ 2006-10-26 13:04 . 2006-10-26 13:04 76624 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\TWSTRUCT.DLL
+ 2006-10-26 13:04 . 2006-10-26 13:04 19784 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\TWRECS.DLL
+ 2006-10-26 13:04 . 2006-10-26 13:04 51008 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\TWRECE.DLL
+ 2006-10-26 13:04 . 2006-10-26 13:04 27456 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\TWORIENT.DLL
+ 2006-10-26 13:04 . 2006-10-26 13:04 58168 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\TWLAY32.DLL
+ 2006-10-26 13:05 . 2006-10-26 13:05 86840 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\TWCUTLIN.DLL
+ 2006-10-26 13:04 . 2006-10-26 13:04 29976 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\THOCRAPI.DLL
+ 2006-10-27 03:59 . 2006-10-27 03:59 15672 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\SMARTTAGINSTALL.EXE
+ 2006-10-27 03:49 . 2006-10-27 03:49 34104 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\SETLANG.EXE
+ 2006-10-27 04:55 . 2006-10-27 04:55 55056 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\SCANOST.EXE
+ 2006-10-27 04:55 . 2006-10-27 04:55 76576 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\RM.DLL
+ 2006-10-26 13:04 . 2006-10-26 13:04 19784 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\REVERSE.DLL
+ 2006-10-27 04:12 . 2006-10-27 04:12 40424 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\REFIEBAR.DLL
+ 2006-10-27 04:55 . 2006-10-27 04:55 39208 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\RECALL.DLL
+ 2006-10-27 04:09 . 2006-10-27 04:09 48448 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\PUBTRAP.DLL
+ 2006-10-26 13:05 . 2006-10-26 13:05 77144 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\PSOM.DLL
+ 2006-10-27 04:55 . 2006-10-27 04:55 53048 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OUTLVBA.DLL
+ 2006-10-27 23:16 . 2006-10-27 23:16 46864 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OUTLRPC.DLL
+ 2006-10-27 03:59 . 2006-10-27 03:59 46936 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OSETUPPS.DLL
+ 2006-10-26 19:24 . 2006-10-26 19:24 72504 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ONFILTER.DLL
+ 2006-10-26 19:24 . 2006-10-26 19:24 98632 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ONENOTEM.EXE
+ 2006-10-27 03:59 . 2006-10-27 03:59 16728 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OMUOPTINPS.DLL
+ 2006-10-27 04:00 . 2006-10-27 04:00 23392 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OISCTRL.DLL
+ 2006-10-27 23:11 . 2006-10-27 23:11 54680 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OFFRHD.DLL
+ 2006-10-27 03:59 . 2006-10-27 03:59 43832 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSSH.DLL
+ 2006-10-26 18:58 . 2006-10-26 18:58 20776 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSPGIMME.DLL
+ 2006-10-27 23:26 . 2006-10-27 23:26 35152 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSOSTYLE.DLL
+ 2006-10-26 18:56 . 2006-10-26 18:56 67408 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSONPUI.DLL
+ 2006-10-26 18:56 . 2006-10-26 18:56 32592 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSONPMON.DLL
+ 2006-10-27 03:52 . 2006-10-27 03:52 66368 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSOMSE.DLL
+ 2006-10-27 04:12 . 2006-10-27 04:12 67896 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSOHTMED.EXE
+ 2006-10-27 23:01 . 2006-10-27 23:01 76088 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSOHEV.DLL
+ 2006-10-27 03:59 . 2006-10-27 03:59 19768 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSMH.DLL
+ 2006-10-27 03:52 . 2006-10-27 03:52 48424 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSE7.EXE
+ 2006-10-27 04:55 . 2006-10-27 04:55 21312 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MLSHEXT.DLL
+ 2006-10-27 04:12 . 2006-10-27 04:12 89400 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\METCONV.DLL
+ 2006-10-26 20:41 . 2006-10-26 20:41 66368 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\INLAUNCH.DLL
+ 2006-10-27 14:37 . 2006-10-27 14:37 35112 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVESYSTEMMODE.DLL
+ 2006-10-26 23:47 . 2006-10-26 23:47 16688 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVESTDURLLAUNCHER.EXE
+ 2006-10-26 23:47 . 2006-10-26 23:47 22808 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVENEW.DLL
+ 2006-10-26 23:47 . 2006-10-26 23:47 31016 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVEMONITOR.EXE
+ 2006-10-26 23:47 . 2006-10-26 23:47 33568 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVECLEAN.EXE
+ 2006-10-27 14:37 . 2006-10-27 14:37 34088 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVEAUTOPROXY.DLL
+ 2006-10-26 23:47 . 2006-10-26 23:47 65824 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVEAUDITSERVICE.EXE
+ 2006-10-26 13:04 . 2006-10-26 13:04 75576 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\FORM.DLL
+ 2006-10-27 04:55 . 2006-10-27 04:55 35160 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\DUMPSTER.DLL
+ 2006-10-27 04:12 . 2006-10-27 04:12 53576 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\AUTHZAX.DLL
+ 2006-10-27 05:18 . 2006-10-27 05:18 94016 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACCOLK.DLL
+ 2002-07-25 16:13 . 2002-07-25 16:13 24576 c:\windows\Downloaded Program Files\dwusplay.dll
+ 2006-11-02 06:28 . 2006-11-02 09:47 5632 c:\windows\winsxs\x86_policy.1.2.microsof..op.security.azroles_31bf3856ad364e35_6.0.6000.16386_none_ea83414c2e75b887\Policy.1.2.Microsoft.Interop.Security.AzRoles.dll
+ 2006-11-02 06:28 . 2006-11-02 09:47 5632 c:\windows\winsxs\x86_policy.1.0.microsof..op.security.azroles_31bf3856ad364e35_6.0.6000.16386_none_9b4ded6469d9c4a5\Policy.1.0.Microsoft.Interop.Security.AzRoles.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34 7680 c:\windows\winsxs\x86_netfx-shared_netfx_20_mscorlib_b03f5f7f11d50a3a_6.0.6000.16386_none_54fd0482608b11ac\sbscmp20_mscorlib.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34 9216 c:\windows\winsxs\x86_netfx-mscorsn_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_968428f460c20e32\mscorsn.dll
+ 2006-11-02 06:34 . 2006-10-20 01:15 6144 c:\windows\winsxs\x86_netfx-mscorees_dll_31bf3856ad364e35_6.0.6000.16386_none_1722c8458e425edd\mscorees.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34 9728 c:\windows\winsxs\x86_netfx-fusion_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_02fce2270a42aaf3\fusion.dll
+ 2006-11-02 06:34 . 2006-10-20 01:13 4608 c:\windows\winsxs\x86_netfx-cvtresui_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_d1c3353c181b805a\CvtResUI.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34 8192 c:\windows\winsxs\x86_netfx-aspnet_isapi_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_dda8eda168ac7fc7\aspnet_isapi.dll
+ 2006-11-02 07:08 . 2006-11-02 07:08 2048 c:\windows\winsxs\x86_microsoft-windows-oleaccrc_31bf3856ad364e35_6.0.6000.16386_none_76f32d528a780cf2\oleaccrc.dll
+ 2006-11-02 06:25 . 2006-09-18 21:43 9008 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\ver.dll
+ 2006-11-02 07:09 . 2006-11-02 07:09 7052 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\nlsfunc.exe
+ 2006-11-02 06:25 . 2006-09-18 21:43 9936 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\lzexpand.dll
+ 2006-11-02 07:09 . 2006-11-02 07:09 4768 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\HIMEM.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 8424 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\exe2bin.exe
+ 2006-11-02 07:09 . 2006-11-02 07:09 9029 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\ANSI.SYS
+ 2006-11-02 06:25 . 2006-09-18 21:43 9008 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\ver.dll
+ 2006-11-02 07:09 . 2006-11-02 07:09 7052 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\nlsfunc.exe
+ 2006-11-02 06:25 . 2006-09-18 21:43 9936 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\lzexpand.dll
+ 2006-11-02 07:09 . 2006-11-02 07:09 4768 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\HIMEM.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 8424 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\exe2bin.exe
+ 2006-11-02 07:09 . 2006-11-02 07:09 9029 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\ANSI.SYS
+ 2006-11-02 06:25 . 2006-09-18 21:43 9008 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system_31bf3856ad364e35_6.0.6000.16386_none_1e1753ed2313c813\ver.dll
+ 2006-11-02 06:25 . 2006-09-18 21:43 9936 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system_31bf3856ad364e35_6.0.6000.16386_none_1e1753ed2313c813\lzexpand.dll
+ 2006-11-02 06:58 . 2006-11-02 06:58 2048 c:\windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6002.18005_none_1732cf8206b3dc2f\tzres.dll
+ 2006-11-02 06:58 . 2006-11-02 06:58 2048 c:\windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6001.18000_none_15475676099210e3\tzres.dll
+ 2006-11-02 06:34 . 2006-10-20 01:14 7168 c:\windows\winsxs\msil_microsoft_vsavb_b03f5f7f11d50a3a_6.0.6000.16386_none_6728c2d6cd97e7f4\Microsoft_VsaVb.dll
+ 2006-11-02 06:34 . 2006-10-20 01:14 5632 c:\windows\winsxs\msil_microsoft.visualc_b03f5f7f11d50a3a_6.0.6000.16386_none_851d57eab180e8ee\Microsoft.VisualC.Dll
+ 2006-11-02 06:34 . 2006-10-20 01:14 5632 c:\windows\winsxs\msil_iiehost_b03f5f7f11d50a3a_6.0.6000.16386_none_81b43bde8b14dc00\IIEHost.dll
+ 2006-11-02 06:34 . 2006-10-20 01:14 8192 c:\windows\winsxs\msil_ieexecremote_b03f5f7f11d50a3a_6.0.6000.16386_none_ef9a51cfc4df6184\IEExecRemote.dll
+ 2006-11-02 06:34 . 2006-10-20 01:14 9728 c:\windows\winsxs\msil_ieexec_b03f5f7f11d50a3a_6.0.6000.16386_none_7f0bbec807558ac8\IEExec.exe
+ 2006-11-02 06:34 . 2006-10-20 01:13 5120 c:\windows\winsxs\msil_dfsvc_b03f5f7f11d50a3a_6.0.6000.16386_none_65f8c50a88a6d473\dfsvc.exe
+ 2006-11-02 06:25 . 2006-09-18 21:43 9008 c:\windows\System32\ver.dll
+ 2006-11-02 07:09 . 2006-11-02 07:09 7052 c:\windows\System32\nlsfunc.exe
+ 2006-11-02 06:25 . 2006-09-18 21:43 9936 c:\windows\System32\lzexpand.dll
+ 2006-11-02 07:09 . 2006-11-02 07:09 4768 c:\windows\System32\HIMEM.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 8424 c:\windows\System32\exe2bin.exe
+ 2006-11-02 07:09 . 2006-11-02 07:09 9029 c:\windows\System32\ANSI.SYS
+ 2006-11-02 06:25 . 2006-09-18 21:43 9008 c:\windows\system\ver.dll
+ 2006-11-02 06:25 . 2006-09-18 21:43 9936 c:\windows\system\lzexpand.dll
+ 2006-11-02 06:28 . 2006-11-02 09:47 5632 c:\windows\assembly\GAC_32\Policy.1.2.Microsoft.Interop.Security.AzRoles\6.0.6000.16386__31bf3856ad364e35\Policy.1.2.Microsoft.Interop.Security.AzRoles.dll
+ 2006-11-02 06:28 . 2006-11-02 09:47 5632 c:\windows\assembly\GAC_32\Policy.1.0.Microsoft.Interop.Security.AzRoles\6.0.6000.16386__31bf3856ad364e35\Policy.1.0.Microsoft.Interop.Security.AzRoles.dll
+ 2006-11-02 06:34 . 2006-10-20 01:14 260096 c:\windows\winsxs\x86_system.transactions_b77a5c561934e089_6.0.6000.16386_none_13b6321068365ea2\System.Transactions.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34 114176 c:\windows\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6000.16386_none_d5d21d67adbfe774\System.EnterpriseServices.Wrapper.dll
+ 2006-11-02 06:34 . 2006-10-20 01:14 258048 c:\windows\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6000.16386_none_d5d21d67adbfe774\System.EnterpriseServices.dll
+ 2006-11-02 06:34 . 2006-10-20 01:14 482304 c:\windows\winsxs\x86_system.data.oracleclient_b77a5c561934e089_6.0.6000.16386_none_f3615a27dcd08d0c\System.Data.OracleClient.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34 408576 c:\windows\winsxs\x86_netfx-web_engine_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_36cabf9f37941996\webengine.dll
+ 2006-11-02 06:34 . 2006-10-20 01:13 183808 c:\windows\winsxs\x86_netfx-vb_compiler_ui_b03f5f7f11d50a3a_6.0.6000.16386_none_9b6c0f37aa2ec1c5\vbc7ui.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34 382464 c:\windows\winsxs\x86_netfx-sos_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_141b3d3ffa811c0c\SOS.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34 107520 c:\windows\winsxs\x86_netfx-shfusion_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_5b03d0cdcbe72f8a\shfusion.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34 136192 c:\windows\winsxs\x86_netfx-peverify_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_9cc1f6da497f57ef\peverify.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34 227328 c:\windows\winsxs\x86_netfx-mscorsvc__dll_b03f5f7f11d50a3a_6.0.6000.16386_none_5b1ba17003b1e16a\mscorsvc.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34 330752 c:\windows\winsxs\x86_netfx-mscorrc_res_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_f052a9219bf1e7e1\mscorrc.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34 102912 c:\windows\winsxs\x86_netfx-mscorpe_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_f80f45915be045a0\mscorpe.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34 326656 c:\windows\winsxs\x86_netfx-mscorjit_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_bf88281330d7cc2a\mscorjit.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34 288768 c:\windows\winsxs\x86_netfx-mscordbi_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_7051bf825c1645e8\mscordbi.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34 802816 c:\windows\winsxs\x86_netfx-mscordacwks_b03f5f7f11d50a3a_6.0.6000.16386_none_2b4cf57f068c3ff7\mscordacwks.dll
+ 2006-11-02 06:34 . 2006-10-20 01:14 788992 c:\windows\winsxs\x86_netfx-eventlogmessages_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_cf8fdb06f2a1bc83\EventLogMessages.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34 547840 c:\windows\winsxs\x86_netfx-debugging_msdia70_b03f5f7f11d50a3a_6.0.6000.16386_none_d109bc67145dfd10\diasymreader.dll
+ 2006-11-02 06:34 . 2006-10-20 01:13 136192 c:\windows\winsxs\x86_netfx-csharpcompilermsg_b03f5f7f11d50a3a_6.0.6000.16386_none_70ffa8c7ea7fadf1\cscompui.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34 218624 c:\windows\winsxs\x86_netfx-clr_ilasm_exe_b03f5f7f11d50a3a_6.0.6000.16386_none_033ba4398d76c7df\ilasm.exe
+ 2006-11-02 06:33 . 2006-11-02 06:33 138240 c:\windows\winsxs\x86_netfx-ado_net_diag_b03f5f7f11d50a3a_6.0.6000.16386_none_6d869912e7931eda\AdoNetDiag.dll
+ 2006-11-02 06:34 . 2006-10-20 01:13 208896 c:\windows\winsxs\x86_netfx-_vsavb7rtui_b03f5f7f11d50a3a_6.0.6000.16386_none_508ad96a2ae1a616\Vsavb7rtUI.dll
+ 2006-11-02 06:33 . 2006-11-02 06:33 626688 c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.312_none_10b2ee7b9bffc2c7\msvcr80.dll
+ 2006-11-02 06:33 . 2006-11-02 06:33 548864 c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.312_none_10b2ee7b9bffc2c7\msvcp80.dll
+ 2006-11-02 06:33 . 2006-10-20 01:14 479232 c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.312_none_10b2ee7b9bffc2c7\msvcm80.dll
+ 2006-11-02 06:25 . 2006-09-18 21:43 256192 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\winhelp.exe
+ 2006-11-02 06:25 . 2006-09-18 21:43 108464 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\netapi.dll
+ 2006-11-02 06:25 . 2006-09-18 21:43 221600 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\lanman.drv
+ 2006-11-02 06:25 . 2006-09-18 21:43 256192 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\winhelp.exe
+ 2006-11-02 06:25 . 2006-09-18 21:43 108464 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\netapi.dll
+ 2006-11-02 06:25 . 2006-09-18 21:43 221600 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\lanman.drv
+ 2006-11-02 06:49 . 2006-11-02 09:46 253952 c:\windows\winsxs\x86_microsoft-windows-msvcrt20_31bf3856ad364e35_6.0.6000.16386_none_ebed1a7373e6e8e7\msvcrt20.dll
+ 2006-11-02 06:52 . 2006-11-02 09:40 145920 c:\windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.0.6002.18005_none_c92df35a758f4008\msaudite.dll
+ 2006-11-02 06:52 . 2006-11-02 09:40 145920 c:\windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.0.6001.18000_none_c7427a4e786d74bc\msaudite.dll
+ 2006-11-02 06:49 . 2006-11-02 09:46 924944 c:\windows\winsxs\x86_microsoft-windows-mfc40u_31bf3856ad364e35_6.0.6000.16386_none_f0dc500958a528b5\mfc40u.dll
+ 2006-11-02 06:49 . 2006-11-02 09:46 924944 c:\windows\winsxs\x86_microsoft-windows-mfc40_31bf3856ad364e35_6.0.6000.16386_none_57c82c1ae4dbe668\mfc40.dll
+ 2006-11-02 06:47 . 2006-11-02 09:46 380957 c:\windows\winsxs\x86_microsoft-windows-m..s-components-jetvba_31bf3856ad364e35_6.0.6000.16386_none_735b8f8d953639a8\expsrv.dll
+ 2006-11-02 06:47 . 2006-11-02 09:46 413696 c:\windows\winsxs\x86_microsoft-windows-m..onents-jetexchlotus_31bf3856ad364e35_6.0.6001.18000_none_c33bb5404d731490\msexch40.dll
+ 2006-11-02 06:47 . 2006-11-02 09:46 180800 c:\windows\winsxs\x86_microsoft-windows-m..nents-mdac-sqlunirl_31bf3856ad364e35_6.0.6000.16386_none_39dff6607f42ed85\sqlunirl.dll
+ 2006-11-02 06:47 . 2006-11-02 09:46 622592 c:\windows\winsxs\x86_microsoft-windows-m..mponents-jetintlerr_31bf3856ad364e35_6.0.6000.16386_none_0d3a1215c37f298f\mswstr10.dll
+ 2006-11-02 06:47 . 2006-11-02 09:46 856064 c:\windows\winsxs\x86_microsoft-windows-m..mponents-jetintlerr_31bf3856ad364e35_6.0.6000.16386_none_0d3a1215c37f298f\mswdat10.dll
+ 2006-11-02 06:47 . 2006-11-02 09:46 167936 c:\windows\winsxs\x86_microsoft-windows-m..mponents-jetintlerr_31bf3856ad364e35_6.0.6000.16386_none_0d3a1215c37f298f\msjint40.dll
+ 2006-11-02 06:47 . 2006-11-02 09:46 323584 c:\windows\winsxs\x86_microsoft-windows-m..-components-jet2x3x_31bf3856ad364e35_6.0.6001.18000_none_e79f2d93ba6ffee6\msrd2x40.dll
+ 2006-11-02 06:49 . 2006-11-02 09:46 149019 c:\windows\winsxs\x86_microsoft-windows-crtdll_31bf3856ad364e35_6.0.6000.16386_none_df9e2f858dc40ff1\crtdll.dll
+ 2006-11-02 06:34 . 2006-10-20 01:13 106496 c:\windows\winsxs\x86_caspol_b03f5f7f11d50a3a_6.0.6000.16386_none_6c022a44ef879fba\CasPol.exe
+ 2006-11-02 06:34 . 2006-10-20 01:13 106496 c:\windows\winsxs\x86_aspnet_regsql_b03f5f7f11d50a3a_6.0.6000.16386_none_5005957dbbdcbdb2\aspnet_regsql.exe
+ 2006-11-02 06:34 . 2006-10-20 01:14 823296 c:\windows\winsxs\msil_system.web.services_b03f5f7f11d50a3a_6.0.6000.16386_none_f2f11bcbb1c17624\System.Web.Services.dll
+ 2006-11-02 06:34 . 2006-10-20 01:14 835584 c:\windows\winsxs\msil_system.web.mobile_b03f5f7f11d50a3a_6.0.6000.16386_none_d81bea95cfc1bc76\System.Web.Mobile.dll
+ 2006-11-02 06:34 . 2006-10-20 01:14 114688 c:\windows\winsxs\msil_system.serviceprocess_b03f5f7f11d50a3a_6.0.6000.16386_none_552959497c3d3442\System.ServiceProcess.dll
+ 2006-11-02 06:34 . 2006-10-20 01:14 258048 c:\windows\winsxs\msil_system.security_b03f5f7f11d50a3a_6.0.6000.16386_none_9c328ce1cde9891a\System.Security.dll
+ 2006-11-02 06:34 . 2006-10-20 01:14 131072 c:\windows\winsxs\msil_system.runtime.seri..ion.formatters.soap_b03f5f7f11d50a3a_6.0.6000.16386_none_483e6ea12378b3a8\System.Runtime.Serialization.Formatters.Soap.dll
+ 2006-11-02 06:34 . 2006-10-20 01:14 299008 c:\windows\winsxs\msil_system.runtime.remoting_b77a5c561934e089_6.0.6000.16386_none_c5bfebd044daffc9\System.Runtime.Remoting.dll
+ 2006-11-02 06:34 . 2006-10-20 01:14 258048 c:\windows\winsxs\msil_system.messaging_b03f5f7f11d50a3a_6.0.6000.16386_none_2dddc57b234a5e36\System.Messaging.dll
+ 2006-11-02 06:34 . 2006-10-20 01:14 368640 c:\windows\winsxs\msil_system.management_b03f5f7f11d50a3a_6.0.6000.16386_none_1f60efda0c14abbf\System.Management.dll
+ 2006-11-02 06:34 . 2006-10-20 01:14 704512 c:\windows\winsxs\msil_system.drawing_b03f5f7f11d50a3a_6.0.6000.16386_none_8fbeaf05f07cecdc\System.Drawing.dll
+ 2006-11-02 06:34 . 2006-10-20 01:14 397312 c:\windows\winsxs\msil_system.directoryservices_b03f5f7f11d50a3a_6.0.6000.16386_none_56c9c34f311afdf9\System.DirectoryServices.dll
+ 2006-11-02 06:34 . 2006-10-20 01:14 188416 c:\windows\winsxs\msil_system.directoryservices.protocols_b03f5f7f11d50a3a_6.0.6000.16386_none_af45ceab5406d544\System.DirectoryServices.Protocols.dll
+ 2006-11-02 06:34 . 2006-10-20 01:14 888832 c:\windows\winsxs\msil_system.deployment_b03f5f7f11d50a3a_6.0.6000.16386_none_60268aff3099973f\System.Deployment.dll
+ 2006-11-02 06:34 . 2006-10-20 01:14 716800 c:\windows\winsxs\msil_system.data.sqlxml_b77a5c561934e089_6.0.6000.16386_none_31a3b8b5a4a82ba1\System.Data.SqlXml.dll
+ 2006-11-02 06:34 . 2006-10-20 01:14 413696 c:\windows\winsxs\msil_system.configuration_b03f5f7f11d50a3a_6.0.6000.16386_none_2b4fe93e366412f2\System.configuration.dll
+ 2006-11-02 06:34 . 2006-10-20 01:14 110592 c:\windows\winsxs\msil_sysglobl_b03f5f7f11d50a3a_6.0.6000.16386_none_d50b62e389cff202\sysglobl.dll
+ 2006-11-02 06:34 . 2006-10-20 01:14 667648 c:\windows\winsxs\msil_microsoft.visualbasic_b03f5f7f11d50a3a_6.0.6000.16386_none_adb9024600dd8e59\Microsoft.VisualBasic.dll
+ 2006-11-02 06:34 . 2006-10-20 01:14 372736 c:\windows\winsxs\msil_microsoft.visualbasic.compatibility_b03f5f7f11d50a3a_6.0.6000.16386_none_ed9029d494e1a641\Microsoft.VisualBasic.Compatibility.dll
+ 2006-11-02 06:34 . 2006-10-20 01:14 110592 c:\windows\winsxs\msil_microsoft.visualbasic.compatibility.data_b03f5f7f11d50a3a_6.0.6000.16386_none_5f67f5e71c787253\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2006-11-02 06:55 . 2006-11-02 09:47 200704 c:\windows\winsxs\msil_microsoft.tpm_31bf3856ad364e35_6.0.6000.16386_none_85b0abc4a2cf93a5\Microsoft.Tpm.dll
+ 2006-11-02 06:34 . 2006-10-20 01:14 749568 c:\windows\winsxs\msil_microsoft.jscript_b03f5f7f11d50a3a_6.0.6000.16386_none_d2587d1982b78324\Microsoft.JScript.dll
+ 2006-11-02 06:34 . 2006-10-20 01:14 647168 c:\windows\winsxs\msil_microsoft.build.tasks_b03f5f7f11d50a3a_6.0.6000.16386_none_9d8c9b288cd78739\Microsoft.Build.Tasks.dll
+ 2006-11-02 06:34 . 2006-10-20 01:14 413696 c:\windows\winsxs\msil_microsoft.build.engine_b03f5f7f11d50a3a_6.0.6000.16386_none_38cc8a540e293cf3\Microsoft.Build.Engine.dll
+ 2006-11-02 06:34 . 2006-10-20 01:13 503808 c:\windows\winsxs\msil_aspnetmmcext_b03f5f7f11d50a3a_6.0.6000.16386_none_80a40e34963a4146\AspNetMMCExt.dll
+ 2006-11-02 06:25 . 2006-09-18 21:43 256192 c:\windows\winhelp.exe
+ 2006-11-02 06:47 . 2006-11-02 09:46 180800 c:\windows\System32\sqlunirl.dll
+ 2006-11-02 06:25 . 2006-09-18 21:43 108464 c:\windows\System32\netapi.dll
+ 2006-11-02 06:49 . 2006-11-02 09:46 253952 c:\windows\System32\msvcrt20.dll
+ 2003-02-21 12:42 . 2003-02-22 05:42 348160 c:\windows\System32\msvcr71.dll
+ 2002-01-05 02:37 . 2002-01-05 02:37 344064 c:\windows\System32\msvcr70.dll
+ 2003-03-19 04:14 . 2003-03-19 21:14 499712 c:\windows\System32\msvcp71.dll
+ 2002-01-05 02:40 . 2002-01-05 02:40 487424 c:\windows\System32\msvcp70.dll
+ 2000-07-15 22:13 . 2000-07-15 22:13 118784 c:\windows\System32\MSSTDFMT.DLL
+ 2006-11-02 06:52 . 2006-11-02 09:40 145920 c:\windows\System32\msaudite.dll
+ 2002-01-05 03:36 . 2002-01-05 03:36 964608 c:\windows\System32\mfc70u.dll
+ 2002-01-05 03:48 . 2002-01-05 03:48 974848 c:\windows\System32\mfc70.dll
+ 2006-11-02 06:49 . 2006-11-02 09:46 924944 c:\windows\System32\mfc40u.dll
+ 2006-11-02 06:49 . 2006-11-02 09:46 924944 c:\windows\System32\mfc40.dll
+ 2006-11-02 06:25 . 2006-09-18 21:43 221600 c:\windows\System32\lanman.drv
+ 2006-11-02 06:47 . 2006-11-02 09:46 380957 c:\windows\System32\expsrv.dll
+ 2006-11-02 06:49 . 2006-11-02 09:46 149019 c:\windows\System32\crtdll.dll
+ 2003-10-28 10:24 . 2003-10-28 10:24 484496 c:\windows\System32\capicom.dll
+ 2006-10-26 12:45 . 2006-10-26 12:45 106496 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Conversion.dll
+ 2005-05-04 08:06 . 2005-05-04 08:06 199408 c:\windows\Installer\$PatchCache$\Managed\90404A0900063D11C8EF10054038389C\11.0.8173\MSMDUN80.DLL
+ 2005-05-04 08:06 . 2005-05-04 08:06 465640 c:\windows\Installer\$PatchCache$\Managed\90404A0900063D11C8EF10054038389C\11.0.8173\MSDMENG.DLL
+ 2005-04-19 23:42 . 2005-04-19 23:42 142528 c:\windows\Installer\$PatchCache$\Managed\90404A0900063D11C8EF10054038389C\11.0.8003\ATP.DLL
+ 2006-10-27 23:23 . 2006-10-27 23:23 347432 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\WINWORD.EXE
+ 2006-07-28 23:21 . 2006-07-28 23:21 277320 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\SSGEN.DLL
+ 2006-10-27 05:18 . 2006-10-27 05:18 502608 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\SOA.DLL
+ 2006-10-27 04:06 . 2006-10-27 04:06 439600 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\SETUP.EXE
+ 2006-10-27 04:13 . 2006-10-27 04:13 503624 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\SELFCERT.EXE
+ 2006-10-27 04:55 . 2006-10-27 04:55 272744 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\SCNPST64.DLL
+ 2006-10-27 04:55 . 2006-10-27 04:55 263520 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\SCNPST32.DLL
+ 2006-10-27 04:09 . 2006-10-27 04:09 590144 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\PUBCONV.DLL
+ 2006-10-27 23:04 . 2006-10-27 23:04 624456 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\PTXT9.DLL
+ 2006-10-27 04:55 . 2006-10-27 04:55 413472 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\PSTPRX32.DLL
+ 2006-10-27 04:09 . 2006-10-27 04:09 136008 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\PRTF9.DLL
+ 2006-10-27 23:04 . 2006-10-27 23:04 465200 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\POWERPNT.EXE
+ 2006-10-27 05:30 . 2006-10-27 05:30 482088 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\PORTCONN.DLL
+ 2006-10-27 23:16 . 2006-10-27 23:16 176976 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\OUTLPH.DLL
+ 2006-10-27 23:16 . 2006-10-27 23:16 594256 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\OUTLMIME.DLL
+ 2006-07-27 02:53 . 2006-07-27 02:53 459080 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\OUTLFLTR.DLL
+ 2006-10-27 04:34 . 2006-10-27 04:34 192848 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\OMSXP32.DLL
+ 2006-10-27 04:34 . 2006-10-27 04:34 660792 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\OMSMAIN.DLL
+ 2006-10-27 04:00 . 2006-10-27 04:00 285008 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\OISGRAPH.DLL
+ 2006-10-27 04:00 . 2006-10-27 04:00 998208 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\OISAPP.DLL
+ 2006-10-27 04:00 . 2006-10-27 04:00 274744 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\OIS.EXE
+ 2006-10-27 04:06 . 2006-10-27 04:06 232816 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\ODEPLOY.EXE
+ 2006-10-27 03:55 . 2006-10-27 03:55 538904 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MSTORES.DLL
+ 2006-10-27 03:55 . 2006-10-27 03:55 832800 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MSTORDB.EXE
+ 2006-10-26 21:56 . 2006-10-26 21:56 505136 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MSSOAP30.DLL
+ 2006-10-27 03:50 . 2006-10-27 03:50 672024 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MSQRY32.EXE
+ 2006-10-26 21:56 . 2006-10-26 21:56 436520 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MSORUN.DLL
+ 2006-10-27 04:12 . 2006-10-27 04:12 428816 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MSODCW.DLL
+ 2006-10-27 22:59 . 2006-10-27 22:59 161080 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MSOCF.DLL
+ 2006-10-26 21:58 . 2006-10-26 21:58 117552 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MSCONV97.DLL
+ 2006-10-27 23:04 . 2006-10-27 23:04 497504 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MORPH9.DLL
+ 2006-10-27 04:55 . 2006-10-27 04:55 340248 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MIMEDIR.DLL
+ 2006-10-27 03:55 . 2006-10-27 03:55 828704 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MEDCAT.DLL
+ 2006-10-27 04:12 . 2006-10-27 04:12 173328 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\IEAWSDC.DLL
+ 2006-10-27 23:09 . 2006-10-27 23:09 983376 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\FPWEC.DLL
+ 2006-10-27 03:48 . 2006-10-27 03:48 434528 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\DWTRIG20.EXE
+ 2006-10-27 04:12 . 2006-10-27 04:12 189760 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\CONTACTPICKER.DLL
+ 2006-10-27 23:16 . 2006-10-27 23:16 133936 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\CONTAB32.DLL
+ 2006-10-27 03:59 . 2006-10-27 03:59 205616 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\CLVIEW.EXE
+ 2006-10-27 23:41 . 2006-10-27 23:41 399640 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\CDLMSO.DLL
+ 2006-10-27 04:13 . 2006-10-27 04:13 371568 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\ACEXBE.DLL
+ 2006-10-27 23:40 . 2006-10-27 23:40 208760 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\ACEWSS.DLL
+ 2006-10-27 04:13 . 2006-10-27 04:13 224104 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\ACETXT.DLL
+ 2006-10-27 04:13 . 2006-10-27 04:13 551800 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\ACEREP.DLL
+ 2006-10-27 04:13 . 2006-10-27 04:13 289648 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\ACER3X.DLL
+ 2006-10-27 04:13 . 2006-10-27 04:13 260976 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\ACER2X.DLL
+ 2006-10-27 04:13 . 2006-10-27 04:13 392048 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\ACEPDE.DLL
+ 2006-10-27 23:00 . 2006-10-27 23:00 387960 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\ACEOLEDB.DLL
+ 2006-10-27 04:13 . 2006-10-27 04:13 279352 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\ACEODBC.DLL
+ 2006-10-27 04:13 . 2006-10-27 04:13 207736 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\ACELTS.DLL
+ 2006-10-27 04:13 . 2006-10-27 04:13 629616 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\ACEEXCL.DLL
+ 2006-10-27 04:13 . 2006-10-27 04:13 338800 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\ACEEXCH.DLL
+ 2006-10-27 23:00 . 2006-10-27 23:00 191360 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\ACEES.DLL
+ 2006-10-27 23:00 . 2006-10-27 23:00 576376 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\ACEDAO.DLL
+ 2006-10-27 05:18 . 2006-10-27 05:18 162616 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\ACCWIZ.DLL
+ 2006-10-27 23:00 . 2006-10-27 23:00 576376 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\ACACEDAO.DLL
+ 2006-07-24 18:50 . 2006-07-24 18:50 125744 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\MSSTDFMT.DLL
+ 2006-10-26 13:05 . 2006-10-26 13:05 530760 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\XPAGE3C.DLL
+ 2006-10-27 04:49 . 2006-10-27 04:49 509200 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\WRD12CVR.DLL
+ 2006-10-26 13:05 . 2006-10-26 13:05 126784 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\TWCUTCHR.DLL
+ 2006-10-27 23:16 . 2006-10-27 23:16 408880 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\RTFHTML.DLL
+ 2006-10-26 20:42 . 2006-10-26 20:42 744808 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\REGFORM.EXE
+ 2006-10-27 05:07 . 2006-10-27 05:07 368968 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\PPSLAX.DLL
+ 2006-10-27 23:16 . 2006-10-27 23:16 138512 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OUTLCTL.DLL
+ 2006-10-26 12:58 . 2006-10-26 12:58 540008 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ORGCHART.EXE
+ 2006-10-26 19:23 . 2006-10-26 19:23 782720 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ONSYNCPC.DLL
+ 2006-10-27 14:39 . 2006-10-27 14:39 687432 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ONBTTNOL.DLL
+ 2006-10-26 19:32 . 2006-10-26 19:32 604000 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ONBTTNIE.DLL
+ 2006-10-27 04:55 . 2006-10-27 04:55 254776 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OLKFSTUB.DLL
+ 2006-10-20 16:37 . 2006-10-20 16:37 637744 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OGALEGIT.DLL
+ 2006-10-27 03:55 . 2006-10-27 03:55 145688 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSTORE.EXE
+ 2006-10-26 22:47 . 2006-10-26 22:47 727840 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSPROOF6.DLL
+ 2006-10-26 18:56 . 2006-10-26 18:56 864080 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSONPDRV.DLL
+ 2006-10-26 21:58 . 2006-10-26 21:58 290576 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSCDM.DLL
+ 2006-10-27 03:52 . 2006-10-27 03:52 460616 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MODHELP.DLL
+ 2006-10-26 18:58 . 2006-10-26 18:58 525664 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MDIVWCTL.DLL
+ 2006-10-26 18:58 . 2006-10-26 18:58 274776 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MDIINK.DLL
+ 2006-10-26 20:42 . 2006-10-26 20:42 176976 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\IPOLK.DLL
+ 2006-10-27 04:55 . 2006-10-27 04:55 138024 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\IMPMAIL.DLL
+ 2006-10-27 04:00 . 2006-10-27 04:00 178488 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\IETAG.DLL
+ 2006-10-27 14:37 . 2006-10-27 14:37 631080 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVEWEBSERVICES.DLL
+ 2006-10-26 23:48 . 2006-10-26 23:48 572216 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVEWEBPLATFORMSERVICES.DLL
+ 2006-10-27 14:37 . 2006-10-27 14:37 268080 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVEWEBBROWSERTOOL2.DLL
+ 2006-10-26 23:48 . 2006-10-26 23:48 955680 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVEUTIL.DLL
+ 2006-10-26 23:48 . 2006-10-26 23:48 222512 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVESYSTEMSERVICES.DLL
+ 2006-10-26 23:48 . 2006-10-26 23:48 363304 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVESKETCHTOOL.DLL
+ 2006-10-26 23:48 . 2006-10-26 23:48 224048 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVEPROJECTTOOLSET.DLL
+ 2006-10-26 23:48 . 2006-10-26 23:48 317736 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVEMIGRATOR.EXE
+ 2006-10-26 23:48 . 2006-10-26 23:48 197920 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVEGAMES.DLL
+ 2006-10-27 14:37 . 2006-10-27 14:37 284976 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVEFETCHSERVICES.DLL
+ 2006-10-26 23:48 . 2006-10-26 23:48 377136 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVEDATAVIEWERTOOL.DLL
+ 2006-10-27 14:37 . 2006-10-27 14:37 768304 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVECOMPONENTMGR.DLL
+ 2006-10-27 14:37 . 2006-10-27 14:37 117584 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVECOMMUNICATIONSSTATUSANDCONTROL.DLL
+ 2006-10-27 14:37 . 2006-10-27 14:37 300336 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVECALENDARTOOL.DLL
+ 2006-10-27 14:37 . 2006-10-27 14:37 284448 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVEAUDIO.DLL
+ 2006-10-27 14:37 . 2006-10-27 14:37 338216 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVE.EXE
+ 2006-10-27 04:55 . 2006-10-27 04:55 154960 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ENVELOPE.DLL
+ 2006-10-27 04:55 . 2006-10-27 04:55 116544 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\EMABLT32.DLL
+ 2006-10-27 04:12 . 2006-10-27 04:12 106824 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\DSSM.EXE
+ 2006-10-26 23:48 . 2006-10-26 23:48 234784 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\DRAT.EXE
+ 2002-07-25 16:13 . 2002-07-25 16:13 196608 c:\windows\Downloaded Program Files\dwusplay.exe
+ 2006-11-02 06:55 . 2006-11-02 09:47 200704 c:\windows\assembly\GAC_MSIL\Microsoft.Tpm\6.0.0.0__31bf3856ad364e35\Microsoft.Tpm.dll
+ 2006-11-02 06:34 . 2006-10-20 01:14 5136384 c:\windows\winsxs\x86_system.web_b03f5f7f11d50a3a_6.0.6000.16386_none_f7532a57162c2143\System.Web.dll
+ 2006-11-02 06:34 . 2006-10-20 01:14 2894336 c:\windows\winsxs\x86_system.data_b77a5c561934e089_6.0.6000.16386_none_94c1deb7b3d8b7f5\System.Data.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34 1157120 c:\windows\winsxs\x86_netfx-vb_compiler_b03f5f7f11d50a3a_6.0.6000.16386_none_401a8e2fa5e9a8c2\vbc.exe
+ 2006-11-02 06:34 . 2006-11-02 06:34 5632512 c:\windows\winsxs\x86_netfx-mscorwks_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_3288d2982e8b3424\mscorwks.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34 1155584 c:\windows\winsxs\x86_netfx-csharp_compiler_cscomp_b03f5f7f11d50a3a_6.0.6000.16386_none_2998a095d18afc59\cscomp.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34 1330688 c:\windows\winsxs\x86_netfx-_vsavb7rt_b03f5f7f11d50a3a_6.0.6000.16386_none_7f3bb25db87ba6c2\VsaVb7rt.dll
+ 2006-11-02 06:34 . 2006-10-20 01:14 4366336 c:\windows\winsxs\x86_mscorlib_b77a5c561934e089_6.0.6000.16386_none_c7e203aac103cf9f\mscorlib.dll
+ 2006-11-02 07:01 . 2006-11-02 09:43 2928640 c:\windows\winsxs\x86_microsoft-windows-setup-component_31bf3856ad364e35_6.0.6002.18005_none_3417f75aaa6413e3\W32UIImg.dll
+ 2006-11-02 07:01 . 2006-11-02 09:43 2928640 c:\windows\winsxs\x86_microsoft-windows-setup-component_31bf3856ad364e35_6.0.6001.18000_none_322c7e4ead424897\W32UIImg.dll
+ 2006-11-02 06:34 . 2006-10-20 01:14 3035136 c:\windows\winsxs\msil_system_b77a5c561934e089_6.0.6000.16386_none_dabb4a555ba089dc\System.dll
+ 2006-11-02 06:34 . 2006-10-20 01:14 2039808 c:\windows\winsxs\msil_system.xml_b77a5c561934e089_6.0.6000.16386_none_81cba47b48fb4029\System.XML.dll
+ 2006-11-02 06:34 . 2006-10-20 01:14 5414912 c:\windows\winsxs\msil_system.windows.forms_b77a5c561934e089_6.0.6000.16386_none_3117572e4332dbd4\System.Windows.Forms.dll
+ 2006-11-02 06:34 . 2006-10-20 01:14 5050368 c:\windows\winsxs\msil_system.design_b03f5f7f11d50a3a_6.0.6000.16386_none_b5757f4b02c7c5b0\System.Design.dll
+ 2006-11-02 07:01 . 2006-11-02 09:43 2928640 c:\windows\System32\oobe\W32UIImg.dll
+ 2003-03-19 05:12 . 2003-03-19 22:12 1047552 c:\windows\System32\MFC71u.dll
+ 2003-03-19 05:20 . 2003-03-19 05:20 1060864 c:\windows\System32\mfc71.dll
+ 2006-09-27 05:01 . 2006-09-27 05:01 2113536 c:\windows\Installer\$PatchCache$\Managed\90404A0900063D11C8EF10054038389C\11.0.8173\MSOLAP80.DLL
+ 2005-05-04 08:06 . 2005-05-04 08:06 1411816 c:\windows\Installer\$PatchCache$\Managed\90404A0900063D11C8EF10054038389C\11.0.8173\MSDMINE.DLL
+ 2005-11-01 23:03 . 2005-11-01 23:03 8058560 c:\windows\Installer\$PatchCache$\Managed\90404A0900063D11C8EF10054038389C\11.0.8003\OWC11.DLL
+ 2006-10-27 23:11 . 2006-10-27 23:11 4235560 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\WRD12CNV.DLL
+ 2006-10-27 06:58 . 2006-10-27 06:58 3732792 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\VVIEWER.DLL
+ 2006-10-27 07:00 . 2006-10-27 07:00 1841984 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\VVIEWDWG.DLL
+ 2006-09-30 08:42 . 2006-09-30 08:42 2583344 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\VBE6.DLL
+ 2006-10-27 22:57 . 2006-10-27 22:57 2330968 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\STSLIST.DLL
+ 2006-10-27 03:52 . 2006-10-27 03:52 2012480 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\PPTVIEW.EXE
+ 2006-10-27 23:04 . 2006-10-27 23:04 7980848 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\PPCORE.DLL
+ 2006-10-27 04:07 . 2006-10-27 04:07 6536992 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\OSETUP.DLL
+ 2006-10-27 23:16 . 2006-10-27 23:16 2939704 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\OLMAPI32.DLL
+ 2006-10-27 23:18 . 2006-10-27 23:18 1658152 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\OGL.DLL
+ 2006-10-27 04:14 . 2006-10-27 04:14 7033152 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\OFFOWC.DLL
+ 2006-10-27 04:42 . 2006-10-27 04:42 8423224 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\OARTCONV.DLL
+ 2006-10-27 23:04 . 2006-10-27 23:04 9581360 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MSPUB.EXE
+ 2006-10-27 04:00 . 2006-10-27 04:00 6635320 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MSORES.DLL
+ 2006-10-27 23:10 . 2006-10-27 23:10 5281592 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\IPEDITOR.DLL
+ 2006-10-27 04:02 . 2006-10-27 04:02 2526520 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\GRAPH.EXE
+ 2006-10-27 03:21 . 2006-10-27 03:21 1682232 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\FPSRVUTL.DLL
+ 2006-10-26 22:10 . 2006-10-26 22:10 1190688 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\FM20.DLL
+ 2006-10-27 23:00 . 2006-10-27 23:00 1751904 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\ACECORE.DLL
+ 2006-10-26 13:05 . 2006-10-26 13:05 1181520 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\XIMAGE3B.DLL
+ 2006-09-16 00:25 . 2006-09-16 00:25 3611416 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OUTLFLTR.DAT
+ 2006-10-27 14:03 . 2006-10-27 14:03 6579512 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ONMAIN.DLL
+ 2006-10-26 19:24 . 2006-10-26 19:24 1165112 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ONLIBS.DLL
+ 2006-10-27 14:03 . 2006-10-27 14:03 1018664 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ONENOTE.EXE
+ 2006-10-26 22:47 . 2006-10-26 22:47 1512304 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\NLSD0000.DLL
+ 2006-10-26 18:58 . 2006-10-26 18:58 1057632 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSPCORE.DLL
+ 2006-10-27 14:10 . 2006-10-27 14:10 5456704 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\IPDESIGN.DLL
+ 2006-10-27 14:10 . 2006-10-27 14:10 1439032 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\INFOPATH.EXE
+ 2006-10-27 14:37 . 2006-10-27 14:37 1396008 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVEUIFRAMEWORK.DLL
+ 2006-10-27 14:38 . 2006-10-27 14:38 4746536 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVETRANSCEIVER.DLL
+ 2006-10-27 14:37 . 2006-10-27 14:37 1163048 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVETEXTTOOLS.DLL
+ 2006-10-27 14:37 . 2006-10-27 14:37 2738472 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVESTORAGEMGR.DLL
+ 2006-10-26 23:48 . 2006-10-26 23:48 2210608 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVESHELLEXTENSIONS.DLL
+ 2006-10-27 14:38 . 2006-10-27 14:38 7053096 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVERESOURCE.DLL
+ 2006-10-26 23:48 . 2006-10-26 23:48 1555232 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVEMISC.DLL
+ 2006-10-27 14:37 . 2006-10-27 14:37 3071288 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVEDOCUMENTSHARETOOL.DLL
+ 2006-10-27 14:37 . 2006-10-27 14:37 1359648 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVECRYPTO.DLL
+ 2006-10-27 14:38 . 2006-10-27 14:38 3508544 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVECOMMUNICATIONSSERVICES.DLL
+ 2006-10-27 14:37 . 2006-10-27 14:37 2689336 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVECOMMONCOMPONENTS.DLL
+ 2006-10-27 14:38 . 2006-10-27 14:38 6191400 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVEACCOUNTMGR.DLL
+ 2006-10-27 05:13 . 2006-10-27 05:13 14674216 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\XL12CNV.EXE
+ 2006-10-27 23:23 . 2006-10-27 23:23 17483560 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\WWLIB.DLL
+ 2006-10-27 23:16 . 2006-10-27 23:16 12813096 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\OUTLOOK.EXE
+ 2006-10-27 23:14 . 2006-10-27 23:14 14151456 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\OART.DLL
+ 2006-10-27 23:26 . 2006-10-27 23:26 16870712 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MSO.DLL
+ 2006-10-27 23:01 . 2006-10-27 23:01 10371880 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MSACCESS.EXE
+ 2006-10-27 23:07 . 2006-10-27 23:07 17891112 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\EXCEL.EXE
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NSUFloatingUI"="c:\program files\Sony\Network Utility\LANUtil.exe" [2008-11-06 270336]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-12-27 39408]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="RtHDVCpl.exe" [2008-10-17 6295552]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-03-10 835584]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-08-22 150040]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-08-22 170520]
"Persistence"="c:\windows\system32\igfxpers.exe" [2008-08-22 145944]
"ISBMgr.exe"="c:\program files\Sony\ISB Utility\ISBMgr.exe" [2008-04-04 317280]
"MarketingTools"="c:\program files\Sony\Marketing Tools\MarketingTools.exe" [2008-11-27 24576]
"SSBkgdUpdate"="c:\program files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2006-10-25 210472]
"OpwareSE4"="c:\program files\ScanSoft\OmniPageSE4\OpwareSE4.exe" [2007-02-04 79400]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2007-04-03 1603152]
"Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2009-11-29 30192]
"Google Quick Search Box"="c:\program files\Google\Quick Search Box\GoogleQuickSearchBox.exe" [2009-09-11 122368]
"MobileConnect"="c:\program files\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe" [2008-10-09 2086912]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2009-11-30 198160]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-11-10 417792]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2010-01-02 149280]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\VESWinlogon]
2008-12-09 09:27 98304 ----a-w- c:\windows\System32\VESWinlogon.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):86,3c,fa,23,84,7a,ca,01

R0 SymDS;Symantec Data Store;c:\windows\System32\drivers\NAV\1101000.013\SymDS.sys [14/12/2009 19:33 328752]
R0 SymEFA;Symantec Extended File Attributes;c:\windows\System32\drivers\NAV\1101000.013\SymEFA.sys [14/12/2009 19:33 171056]
R1 BHDrvx86;BHDrvx86;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.0.0.136\Definitions\BASHDefs\20091205.001\BHDrvx86.sys [05/12/2009 04:54 529456]
R1 ccHP;Symantec Hash Provider;c:\windows\System32\drivers\NAV\1101000.013\cchpx86.sys [14/12/2009 19:33 501888]
R1 IDSVix86;IDSVix86;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.0.0.136\Definitions\IPSDefs\20091217.002\IDSvix86.sys [18/12/2009 22:04 343088]
R1 SymIRON;Symantec Iron Driver;c:\windows\System32\drivers\NAV\1101000.013\Ironx86.sys [14/12/2009 19:33 114736]
R1 SYMTDIv;Symantec Vista Network Dispatch Driver;c:\windows\System32\drivers\NAV\1101000.013\symtdiv.sys [14/12/2009 19:33 339504]
R2 NAV;Norton AntiVirus;c:\program files\Norton AntiVirus\Engine\17.1.0.19\ccSvcHst.exe [14/12/2009 19:33 126392]
R2 NSUService;NSUService;c:\program files\sony\Network Utility\NSUService.exe [27/11/2008 22:14 303104]
R2 regi;regi;c:\windows\System32\drivers\regi.sys [18/04/2007 04:09 11032]
R2 RtkAudioService;Realtek Audio Service;c:\windows\RTKAUDIOSERVICE.EXE [22/10/2008 18:44 104992]
R2 uCamMonitor;CamMonitor;c:\program files\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [27/11/2008 21:39 104960]
R2 VAIO Power Management;VAIO Power Management;c:\program files\sony\VAIO Power Management\SPMService.exe [22/10/2008 21:55 411488]
R2 VCFw;VAIO Content Folder Watcher;c:\program files\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [05/03/2009 18:41 5189992]
R2 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager;c:\program files\sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [27/11/2008 22:02 337184]
R2 VMCService;Vodafone Mobile Connect Service;c:\program files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe [09/10/2008 15:32 14336]
R3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect;c:\windows\System32\drivers\ArcSoftKsUFilter.sys [27/11/2008 21:39 17920]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [14/12/2009 16:32 102448]
R3 SFEP;Sony Firmware Extension Parser;c:\windows\System32\drivers\SFEP.sys [22/10/2008 18:39 9344]
S2 gupdate1c9d4d4e79bcb00;Google Update Service (gupdate1c9d4d4e79bcb00);c:\program files\Google\Update\GoogleUpdate.exe [14/05/2009 20:45 133104]
S3 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [21/01/2008 02:23 21504]
S3 GoogleDesktopManager-110309-193829;Google Desktop Manager 5.9.911.3589;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [03/06/2009 11:30 30192]
S3 SOHCImp;VAIO Media plus Content Importer;c:\program files\sony\VAIO Media plus\SOHCImp.exe [27/11/2008 22:06 103712]
S3 SOHDms;VAIO Media plus Digital Media Server;c:\program files\sony\VAIO Media plus\SOHDms.exe [27/11/2008 22:06 353568]
S3 SOHDs;VAIO Media plus Device Searcher;c:\program files\sony\VAIO Media plus\SOHDs.exe [27/11/2008 22:06 62752]
S3 VcmXmlIfHelper;VAIO Content Metadata XML Interface;c:\program files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper.exe [27/11/2008 22:02 83232]
S3 VUAgent;VUAgent;c:\program files\sony\VAIO Update 5\VUAgent.exe [18/12/2009 11:05 673136]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{A509B1FF-37FF-4bFF-8CFF-4F3A747040FF}]
2009-03-08 11:32 128512 ----a-w- c:\windows\System32\advpack.dll
.
Contents of the 'Scheduled Tasks' folder

2010-01-03 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-05-14 20:44]

2010-01-03 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-05-14 20:44]

2010-01-02 c:\windows\Tasks\User_Feed_Synchronization-{103B65BD-4798-4CA0-9487-EB211B637804}.job
- c:\windows\system32\msfeedssync.exe [2009-12-09 04:59]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://m.uk.yahoo.com/
uSearchURL,(Default) = hxxp://www.google.com/search/?q=%s
Trusted Zone: internet
Trusted Zone: mcafee.com
FF - ProfilePath - c:\users\Andrew\AppData\Roaming\Mozilla\Firefox\Profiles\20yzwem3.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.co.uk/webhp?hl=en
FF - component: c:\program files\Mozilla Firefox\components\GoogleDesktopMozilla.dll
FF - component: c:\program files\real\realplayer\browserrecord\firefox\ext\components\nprpffbrowserrecordext.dll
FF - component: c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.0.0.136\IPSFFPlgn\components\IPSFFPl.dll
FF - plugin: c:\program files\Google\Update\1.2.183.13\npGoogleOneClick8.dll
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npbittorrent.dll
FF - plugin: c:\users\Andrew\Program Files\DNA\plugins\npbtdna.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-01-03 16:40
Windows 6.0.6002 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\NAV]
"ImagePath"="\"c:\program files\Norton AntiVirus\Engine\17.1.0.19\ccSvcHst.exe\" /s \"NAV\" /m \"c:\program files\Norton AntiVirus\Engine\17.1.0.19\diMaster.dll\" /prefetch:1"
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Completion time: 2010-01-03 16:43:27
ComboFix-quarantined-files.txt 2010-01-03 16:43
ComboFix2.txt 2010-01-03 16:29

Pre-Run: 169,998,512,128 bytes free
Post-Run: 169,961,426,944 bytes free

- - End Of File - - 6DECF3207EC00B22478BEAE5D452BA4F
  • 0

#15
Essexboy
Posted 03 January 2010 - 03:54 PM

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Well that confirmed my last negative report. If this happens again do not try to fix it but post right back here

Did this start when you visited any sppecific website ?
  • 0
Back to Virus, Spyware, Malware Removal · Next Unread Topic →




Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Security
  3. → Virus, Spyware, Malware Removal

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP