komputer chodzi bardzo wolno.

[kristof200]

Mam problem z procesami praktycznie ze wszystkimi.
Np. jak wlaczam firefoxa to w procesach to pobiera 100% pamieci.
I jest tak praktycznie z kazdym programem.
Uzylem Hijack i to sa wyniki.
Prosze o szybka odpowiedz.

Startupprograms

Kod: Zaznacz wszystko

"Silent Runners.vbs", revision R50, http://www.silentrunners.org/
Operating System: Windows XP
Output limited to non-default values, except where indicated by "{++}"


Startup items buried in registry:
---------------------------------

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ {++}
"ctfmon.exe" = "C:\WINDOWS\system32\ctfmon.exe" [MS]
"Gadu-Gadu" = ""I:\Program Files\GG\Gadu-Gadu\gg.exe" /tray" ["Gadu-Gadu S.A."]

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\ {++}
"type32" = ""C:\Program Files\Microsoft IntelliType Pro\type32.exe"" [MS]
"IntelliPoint" = ""C:\Program Files\Microsoft IntelliPoint\point32.exe"" [MS]
"PCSuiteTrayApplication" = "C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup" ["Nokia"]
"NvCplDaemon" = "RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup" [MS]
"HPHUPD05" = "I:\Program Files\Hpp\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe" ["Hewlett-Packard"]
"HP Software Update" = ""I:\Program Files\Hpp\HP Software Update\HPWuSchd.exe"" ["Hewlett-Packard"]
"HPHmon05" = "C:\WINDOWS\system32\hphmon05.exe" ["Hewlett-Packard"]
"WinampAgent" = ""C:\Program Files\Winamp\winampa.exe"" [null data]
"egui" = ""C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice" ["ESET"]

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\(Default) = (no title provided)
  -> {HKLM...CLSID} = "AcroIEHlprObj Class"
                   \InProcServer32\(Default) = "C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll" ["Adobe Systems Incorporated"]
{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20}\(Default) = "Winamp Toolbar BHO"
  -> {HKLM...CLSID} = "Winamp Toolbar BHO"
                   \InProcServer32\(Default) = "C:\Program Files\Winamp Toolbar\winamptb.dll" ["AOL LLC"]
{52D06F97-5511-43FA-8FDA-C481864FD26E}\(Default) = (no title provided)
  -> {HKLM...CLSID} = "Alcohol Toolbar Helper"
                   \InProcServer32\(Default) = "C:\Program Files\Alcohol Toolbar\v3.2.0.0\Alcohol_Toolbar.dll" [null data]
{72853161-30C5-4D22-B7F9-0BBC1D38A37E}\(Default) = (no title provided)
  -> {HKLM...CLSID} = "Groove GFS Browser Helper"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office12\GRA8E1~1.DLL" [MS]

HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\
"{42071714-76d4-11d1-8b24-00a0c9068ff3}" = "Extension Affichage Panorama du Panneau de configuration"
  -> {HKLM...CLSID} = "Extension Affichage Panorama du Panneau de configuration"
                   \InProcServer32\(Default) = "deskpan.dll" [file not found]
"{88895560-9AA2-1069-930E-00AA0030EBC8}" = "Extension icône HyperTerminal"
  -> {HKLM...CLSID} = "HyperTerminal Icon Ext"
                   \InProcServer32\(Default) = "C:\WINDOWS\System32\hticons.dll" ["Hilgraeve, Inc."]
"{A70C977A-BF00-412C-90B7-034C51DA2439}" = "NvCpl DesktopContext Class"
  -> {HKLM...CLSID} = "DesktopContext Class"
                   \InProcServer32\(Default) = "C:\WINDOWS\System32\nvcpl.dll" ["NVIDIA Corporation"]
"{FFB699E0-306A-11d3-8BD1-00104B6F7516}" = "Play on my TV helper"
  -> {HKLM...CLSID} = "NVIDIA CPL Extension"
                   \InProcServer32\(Default) = "C:\WINDOWS\System32\nvcpl.dll" ["NVIDIA Corporation"]
"{1CDB2949-8F65-4355-8456-263E7C208A5D}" = "Desktop Explorer"
  -> {HKLM...CLSID} = "Desktop Explorer"
                   \InProcServer32\(Default) = "C:\WINDOWS\System32\nvshell.dll" ["NVIDIA Corporation"]
"{1E9B04FB-F9E5-4718-997B-B8DA88302A47}" = "Desktop Explorer Menu"
  -> {HKLM...CLSID} = (no title provided)
                   \InProcServer32\(Default) = "C:\WINDOWS\System32\nvshell.dll" ["NVIDIA Corporation"]
"{1E9B04FB-F9E5-4718-997B-B8DA88302A48}" = "nView Desktop Context Menu"
  -> {HKLM...CLSID} = "nView Desktop Context Menu"
                   \InProcServer32\(Default) = "C:\WINDOWS\System32\nvshell.dll" ["NVIDIA Corporation"]
"{97FA8AA2-EE77-4FF2-9449-424D8924EF21}" = "IntelliType Pro Zooming Control Panel Property Page"
  -> {HKLM...CLSID} = "IntelliType Pro Zooming Property Page"
                   \InProcServer32\(Default) = ""C:\Program Files\Microsoft IntelliType Pro\itcplzm.dll"" [MS]
"{111D8120-25EB-4E1C-A4DF-C9EE5FCA35CB}" = "IntelliType Pro Scrolling Control Panel Property Page"
  -> {HKLM...CLSID} = "IntelliType Pro Scrolling Property Page"
                   \InProcServer32\(Default) = ""C:\Program Files\Microsoft IntelliType Pro\itcplwhl.dll"" [MS]
"{ED6E87C6-8A83-43aa-8208-8DBC8247F4D2}" = "IntelliType Pro Key Settings Control Panel Property Page"
  -> {HKLM...CLSID} = "IntelliType Pro Key Settings Property Page"
                   \InProcServer32\(Default) = ""C:\Program Files\Microsoft IntelliType Pro\itcplkey.dll"" [MS]
"{A2569D1F-4E06-43EC-9825-0088B471BE47}" = "IntelliType Pro Wireless Control Panel Property Page"
  -> {HKLM...CLSID} = "IntelliType Pro Wireless Control Panel Property Page"
                   \InProcServer32\(Default) = ""C:\Program Files\Microsoft IntelliType Pro\itcplwir.dll"" [MS]
"{20082881-FC36-4E47-9A7A-644C95FF749F}" = "IntelliPoint Wireless Control Panel Property Page"
  -> {HKLM...CLSID} = "Page de propriétés sans fil"
                   \InProcServer32\(Default) = ""C:\Program Files\Microsoft IntelliPoint\ipcplwir.dll"" [MS]
"{AF90F543-6A3A-4C1B-8B16-ECEC073E69BE}" = "IntelliPoint Wheel Control Panel Property Page"
  -> {HKLM...CLSID} = "Page des propriétés de la roulette"
                   \InProcServer32\(Default) = ""C:\Program Files\Microsoft IntelliPoint\ipcplwhl.dll"" [MS]
"{653DCCC2-13DB-45B2-A389-427885776CFE}" = "IntelliPoint Activities Control Panel Property Page"
  -> {HKLM...CLSID} = "Page des propriétés des activités"
                   \InProcServer32\(Default) = ""C:\Program Files\Microsoft IntelliPoint\ipcplact.dll"" [MS]
"{124597D8-850A-41AE-849C-017A4FA99CA2}" = "IntelliPoint Buttons Control Panel Property Page"
  -> {HKLM...CLSID} = "Page des propriétés des boutons"
                   \InProcServer32\(Default) = ""C:\Program Files\Microsoft IntelliPoint\ipcplbtn.dll"" [MS]
"{B41DB860-8EE4-11D2-9906-E49FADC173CA}" = "WinRAR shell extension"
  -> {HKLM...CLSID} = "WinRAR"
                   \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]
"{416651E4-9C3C-11D9-8BDE-F66BAD1E3F3A}" = "Nokia Phone Browser"
  -> {HKLM...CLSID} = "Nokia Phone Browser"
                   \InProcServer32\(Default) = "C:\Program Files\Nokia\Nokia PC Suite 6\PhoneBrowser.dll" ["Nokia"]
"{72853161-30C5-4D22-B7F9-0BBC1D38A37E}" = "Groove GFS Browser Helper"
  -> {HKLM...CLSID} = "Groove GFS Browser Helper"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office12\GRA8E1~1.DLL" [MS]
"{2A541AE1-5BF6-4665-A8A3-CFA9672E4291}" = "Groove GFS Explorer Bar"
  -> {HKLM...CLSID} = "Groove Folder Synchronization"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office12\GRA8E1~1.DLL" [MS]
"{A449600E-1DC6-4232-B948-9BD794D62056}" = "Groove GFS Stub Icon Handler"
  -> {HKLM...CLSID} = "Groove GFS Stub Icon Handler"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office12\GRA8E1~1.DLL" [MS]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}" = "Groove GFS Stub Execution Hook"
  -> {HKLM...CLSID} = "Groove GFS Stub Execution Hook"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office12\GRA8E1~1.DLL" [MS]
"{6C467336-8281-4E60-8204-430CED96822D}" = "Groove GFS Context Menu Handler"
  -> {HKLM...CLSID} = "Groove GFS Context Menu Handler"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office12\GRA8E1~1.DLL" [MS]
"{387E725D-DC16-4D76-B310-2C93ED4752A0}" = "Groove XML Icon Handler"
  -> {HKLM...CLSID} = "Groove XML Icon Handler"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office12\GRA8E1~1.DLL" [MS]
"{16F3DD56-1AF5-4347-846D-7C10C4192619}" = "Groove Explorer Icon Overlay 3 (GFS Folder)"
  -> {HKLM...CLSID} = "Groove Explorer Icon Overlay 3 (GFS Folder)"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office12\GRA8E1~1.DLL" [MS]
"{AB5C5600-7E6E-4B06-9197-9ECEF74D31CC}" = "Groove Explorer Icon Overlay 2 (GFS Stub)"
  -> {HKLM...CLSID} = "Groove Explorer Icon Overlay 2 (GFS Stub)"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office12\GRA8E1~1.DLL" [MS]
"{2916C86E-86A6-43FE-8112-43ABE6BF8DCC}" = "Groove Explorer Icon Overlay 4 (GFS Unread Mark)"
  -> {HKLM...CLSID} = "Groove Explorer Icon Overlay 4 (GFS Unread Mark)"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office12\GRA8E1~1.DLL" [MS]
"{99FD978C-D287-4F50-827F-B2C658EDA8E7}" = "Groove Explorer Icon Overlay 1 (GFS Unread Stub)"
  -> {HKLM...CLSID} = "Groove Explorer Icon Overlay 1 (GFS Unread Stub)"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office12\GRA8E1~1.DLL" [MS]
"{920E6DB1-9907-4370-B3A0-BAFC03D81399}" = "Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)"
  -> {HKLM...CLSID} = "Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office12\GRA8E1~1.DLL" [MS]
"{0006F045-0000-0000-C000-000000000046}" = "Microsoft Office Outlook Custom Icon Handler"
  -> {HKLM...CLSID} = "Outlook File Icon Extension"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office12\OLKFSTUB.DLL" [MS]
"{00020D75-0000-0000-C000-000000000046}" = "Microsoft Office Outlook Desktop Icon Handler"
  -> {HKLM...CLSID} = "Microsoft Office Outlook"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office12\MLSHEXT.DLL" [MS]
"{5858A72C-C2B4-4dd7-B2BF-B76DB1BD9F6C}" = "Microsoft Office OneNote Namespace Extension for Windows Desktop Search"
  -> {HKLM...CLSID} = "Microsoft Office OneNote Namespace Extension for Windows Desktop Search"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office12\ONFILTER.DLL" [MS]
"{42042206-2D85-11D3-8CFF-005004838597}" = "Microsoft Office HTML Icon Handler"
  -> {HKLM...CLSID} = (no title provided)
                   \InProcServer32\(Default) = "C:\Program Files\Microsoft Office\Office12\msohevi.dll" [MS]
"{993BE281-6695-4BA5-8A2A-7AACBFAAB69E}" = "Microsoft Office Metadata Handler"
  -> {HKLM...CLSID} = "Microsoft Office Metadata Handler"
                   \InProcServer32\(Default) = "C:\PROGRA~1\FICHIE~1\MICROS~1\OFFICE12\msoshext.dll" [MS]
"{C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97}" = "Microsoft Office Thumbnail Handler"
  -> {HKLM...CLSID} = "Microsoft Office Thumbnail Handler"
                   \InProcServer32\(Default) = "C:\PROGRA~1\FICHIE~1\MICROS~1\OFFICE12\msoshext.dll" [MS]
"{A155339D-CCCD-4714-85EB-3754B804C9DF}" = "a-squared Free Shell Extension"
  -> {HKLM...CLSID} = "a-squared Free Shell Extension"
                   \InProcServer32\(Default) = "C:\Program Files\a-squared Free\a2freecontmenu.dll" ["Emsi Software GmbH"]
"{32020A01-506E-484D-A2A8-BE3CF17601C3}" = "AlcoholShellEx"
  -> {HKLM...CLSID} = "AlcoholShellEx"
                   \InProcServer32\(Default) = "C:\PROGRA~1\Alcohol Soft\Alcohol 52\axshlex.dll" ["Alcohol Soft Development Team"]
"{B089FE88-FB52-11D3-BDF1-0050DA34150D}" = "Eset Smart Security - Context Menu Shell Extension"
  -> {HKLM...CLSID} = "Eset Smart Security - Context Menu Shell Extension"
                   \InProcServer32\(Default) = "C:\Program Files\ESET\ESET Smart Security\shellExt.dll" ["ESET"]
"{4811C5F8-79DA-4ECF-BE8A-92BF8843A3F1}" = "Convert Audio Files To..."
  -> {HKLM...CLSID} = "Convert Audio Files To..."
                   \InProcServer32\(Default) = "I:\PROGRA~1\Audio Converter Plus\audioconverter.dll" [null data]

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\
<<!>> "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}" = "Groove GFS Stub Execution Hook"
  -> {HKLM...CLSID} = "Groove GFS Stub Execution Hook"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office12\GRA8E1~1.DLL" [MS]

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\
<<!>> dimsntfy\DLLName = "C:\WINDOWS\System32\dimsntfy.dll" [MS]

HKLM\Software\Classes\PROTOCOLS\Filter\
<<!>> text/xml\CLSID = "{807563E5-5146-11D5-A672-00B0D022E945}"
  -> {HKLM...CLSID} = "Microsoft Office InfoPath XML Mime Filter"
                   \InProcServer32\(Default) = "C:\PROGRA~1\FICHIE~1\MICROS~1\OFFICE12\MSOXMLMF.DLL" [MS]

HKLM\Software\Classes\*\shellex\ContextMenuHandlers\
AudioConverter\(Default) = "{4811C5F8-79DA-4ECF-BE8A-92BF8843A3F1}"
  -> {HKLM...CLSID} = "Convert Audio Files To..."
                   \InProcServer32\(Default) = "I:\PROGRA~1\Audio Converter Plus\audioconverter.dll" [null data]
Eset Smart Security - Context Menu Shell Extension\(Default) = "{B089FE88-FB52-11D3-BDF1-0050DA34150D}"
  -> {HKLM...CLSID} = "Eset Smart Security - Context Menu Shell Extension"
                   \InProcServer32\(Default) = "C:\Program Files\ESET\ESET Smart Security\shellExt.dll" ["ESET"]
MagicISO\(Default) = "{DB85C504-C730-49DD-BEC1-7B39C6103B7A}"
  -> {HKLM...CLSID} = "MShellExtMenu Class"
                   \InProcServer32\(Default) = "C:\Program Files\MagicISO\misosh.dll" ["MagicISO, Inc."]
WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
  -> {HKLM...CLSID} = "WinRAR"
                   \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]
XXX Groove GFS Context Menu Handler XXX\(Default) = "{6C467336-8281-4E60-8204-430CED96822D}"
  -> {HKLM...CLSID} = "Groove GFS Context Menu Handler"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office12\GRA8E1~1.DLL" [MS]

HKLM\Software\Classes\Directory\shellex\ContextMenuHandlers\
MagicISO\(Default) = "{DB85C504-C730-49DD-BEC1-7B39C6103B7A}"
  -> {HKLM...CLSID} = "MShellExtMenu Class"
                   \InProcServer32\(Default) = "C:\Program Files\MagicISO\misosh.dll" ["MagicISO, Inc."]
WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
  -> {HKLM...CLSID} = "WinRAR"
                   \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]
XXX Groove GFS Context Menu Handler XXX\(Default) = "{6C467336-8281-4E60-8204-430CED96822D}"
  -> {HKLM...CLSID} = "Groove GFS Context Menu Handler"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office12\GRA8E1~1.DLL" [MS]

HKLM\Software\Classes\Folder\shellex\ContextMenuHandlers\
a-squared Free Shell Extension\(Default) = "{A155339D-CCCD-4714-85EB-3754B804C9DF}"
  -> {HKLM...CLSID} = "a-squared Free Shell Extension"
                   \InProcServer32\(Default) = "C:\Program Files\a-squared Free\a2freecontmenu.dll" ["Emsi Software GmbH"]
AudioConverter\(Default) = "{4811C5F8-79DA-4ECF-BE8A-92BF8843A3F1}"
  -> {HKLM...CLSID} = "Convert Audio Files To..."
                   \InProcServer32\(Default) = "I:\PROGRA~1\Audio Converter Plus\audioconverter.dll" [null data]
Eset Smart Security - Context Menu Shell Extension\(Default) = "{B089FE88-FB52-11D3-BDF1-0050DA34150D}"
  -> {HKLM...CLSID} = "Eset Smart Security - Context Menu Shell Extension"
                   \InProcServer32\(Default) = "C:\Program Files\ESET\ESET Smart Security\shellExt.dll" ["ESET"]
MagicISO\(Default) = "{DB85C504-C730-49DD-BEC1-7B39C6103B7A}"
  -> {HKLM...CLSID} = "MShellExtMenu Class"
                   \InProcServer32\(Default) = "C:\Program Files\MagicISO\misosh.dll" ["MagicISO, Inc."]
WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
  -> {HKLM...CLSID} = "WinRAR"
                   \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]
XXX Groove GFS Context Menu Handler XXX\(Default) = "{6C467336-8281-4E60-8204-430CED96822D}"
  -> {HKLM...CLSID} = "Groove GFS Context Menu Handler"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office12\GRA8E1~1.DLL" [MS]

HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\
a-squared Free Shell Extension\(Default) = "{A155339D-CCCD-4714-85EB-3754B804C9DF}"
  -> {HKLM...CLSID} = "a-squared Free Shell Extension"
                   \InProcServer32\(Default) = "C:\Program Files\a-squared Free\a2freecontmenu.dll" ["Emsi Software GmbH"]
XXX Groove GFS Context Menu Handler XXX\(Default) = "{6C467336-8281-4E60-8204-430CED96822D}"
  -> {HKLM...CLSID} = "Groove GFS Context Menu Handler"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office12\GRA8E1~1.DLL" [MS]


Group Policies {policy setting}:
--------------------------------

Note: detected settings may not have any effect.

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\

"NoSMBalloonTip" = (REG_DWORD) hex:0x00000000
{unrecognized setting}

"NoSaveSettings" = (REG_DWORD) hex:0x00000000
{Don't save settings at exit}

"NoRecentDocsHistory" = (REG_DWORD) hex:0x00000001
{unrecognized setting}

"NoLowDiskSpaceChecks" = (REG_DWORD) hex:0x00000001
{unrecognized setting}

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\

"NoStrCmpLogical" = (REG_DWORD) hex:0x00000001
{unrecognized setting}

"LinkResolveIgnoreLinkInfo" = (REG_DWORD) hex:0x00000000
{unrecognized setting}

"NoResolveSearch" = (REG_DWORD) hex:0x00000001
{unrecognized setting}

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\

"shutdownwithoutlogon" = (REG_DWORD) hex:0x00000001
{Shutdown: Allow system to be shut down without having to log on}

"undockwithoutlogon" = (REG_DWORD) hex:0x00000001
{Devices: Allow undock without having to log on}

"SynchronousMachineGroupPolicy" = (REG_DWORD) hex:0x00000000
{unrecognized setting}

"SynchronousUserGroupPolicy" = (REG_DWORD) hex:0x00000000
{unrecognized setting}


Active Desktop and Wallpaper:
-----------------------------

Active Desktop may be disabled at this entry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState

Displayed if Active Desktop enabled and wallpaper not set by Group Policy:
HKCU\Software\Microsoft\Internet Explorer\Desktop\General\
"Wallpaper" = "C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Microsoft\Wallpaper1.bmp"

Displayed if Active Desktop disabled and wallpaper not set by Group Policy:
HKCU\Control Panel\Desktop\
"Wallpaper" = "C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Microsoft\Wallpaper1.bmp"


Startup items in "Propriétaire" & "All Users" startup folders:
--------------------------------------------------------------

C:\Documents and Settings\Propriétaire\Menu Démarrer\Programmes\Démarrage
"Adobe Gamma" -> shortcut to: "C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe" ["Adobe Systems, Inc."]


Winsock2 Service Provider DLLs:
-------------------------------

Namespace Service Providers

HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++}
000000000001\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]
000000000002\LibraryPath = "%SystemRoot%\System32\winrnr.dll" [MS]
000000000003\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]
000000000004\LibraryPath = "%SystemRoot%\system32\wshbth.dll" [MS]

Transport Service Providers

HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++}
0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range:
%SystemRoot%\system32\mswsock.dll [MS], 01 - 03, 06 - 16
%SystemRoot%\system32\rsvpsp.dll [MS], 04 - 05


Toolbars, Explorer Bars, Extensions:
------------------------------------

Toolbars

HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\
"{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}"
  -> {HKLM...CLSID} = "Winamp Toolbar"
                   \InProcServer32\(Default) = "C:\Program Files\Winamp Toolbar\winamptb.dll" ["AOL LLC"]
"{4C4E7CDB-5BFC-4D74-83E2-8AE659B7EDA2}"
  -> {HKLM...CLSID} = "Alcohol Toolbar"
                   \InProcServer32\(Default) = "C:\Program Files\Alcohol Toolbar\v3.2.0.0\Alcohol_Toolbar.dll" [null data]

HKLM\Software\Microsoft\Internet Explorer\Toolbar\
"{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}" = "Winamp Toolbar"
  -> {HKLM...CLSID} = "Winamp Toolbar"
                   \InProcServer32\(Default) = "C:\Program Files\Winamp Toolbar\winamptb.dll" ["AOL LLC"]
"{4C4E7CDB-5BFC-4D74-83E2-8AE659B7EDA2}" = "Alcohol Toolbar"
  -> {HKLM...CLSID} = "Alcohol Toolbar"
                   \InProcServer32\(Default) = "C:\Program Files\Alcohol Toolbar\v3.2.0.0\Alcohol_Toolbar.dll" [null data]

Explorer Bars

HKLM\Software\Microsoft\Internet Explorer\Explorer Bars\

HKLM\Software\Classes\CLSID\{2A541AE1-5BF6-4665-A8A3-CFA9672E4291}\(Default) = "Groove Folder Synchronization"
Implemented Categories\{00021493-0000-0000-C000-000000000046}\ [vertical bar]
InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office12\GRA8E1~1.DLL" [MS]

HKLM\Software\Classes\CLSID\{FF059E31-CC5A-4E2E-BF3B-96E929D65503}\(Default) = "&Research"
Implemented Categories\{00021493-0000-0000-C000-000000000046}\ [vertical bar]
InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL" [MS]

Extensions (Tools menu items, main toolbar menu buttons)

HKLM\Software\Microsoft\Internet Explorer\Extensions\
{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\
"MenuText" = "Console Java (Sun)"
"CLSIDExtension" = "{08B0E5C0-4FCB-11CF-AAA5-00401C608501}"

{2670000A-7350-4F3C-8081-5663EE0C6C49}\
"ButtonText" = "Send to OneNote"
"MenuText" = "S&end to OneNote"
"CLSIDExtension" = "{48E73304-E1D6-4330-914C-F5F514E3486C}"
  -> {HKLM...CLSID} = "Send to OneNote from Internet Explorer button"
                   \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll" [MS]

{92780B25-18CC-41C8-B9BE-3C9C571A8263}\
"ButtonText" = "Research"

{E2E2DD38-D088-4134-82B7-F2BA38496583}\
"MenuText" = "@xpsp3res.dll,-20001"
"Exec" = "%windir%\Network Diagnostic\xpnetdiag.exe" [MS]

{FB5F1910-F110-11D2-BB9E-00C04F795683}\
"ButtonText" = "Messenger"
"MenuText" = "Windows Messenger"
"Exec" = "C:\Program Files\Messenger\msmsgs.exe" [MS]


Miscellaneous IE Hijack Points
------------------------------

C:\WINDOWS\INF\IERESET.INF (used to "Reset Web Settings")

Added lines (compared with English-language version):
[Strings]: SAFESITE_VALUE="http://home.microsoft.com/intl/fr/"

Missing lines (compared with English-language version):
[Strings]: 1 line

HKLM\Software\Microsoft\Internet Explorer\AboutURLs\
<<H>> "Tabs" = "res://ieframe.dll/tabswelcome.htm" [file not found]


Running Services (Display Name, Service Name, Path {Service DLL}):
------------------------------------------------------------------

a-squared Free Service, a2free, ""C:\Program Files\a-squared Free\a2service.exe"" ["Emsi Software GmbH"]
Bluetooth Support Service, BthServ, "C:\WINDOWS\system32\svchost.exe -k bthsvcs" {"C:\WINDOWS\System32\bthserv.dll" [MS]}
BOCore, BOCore, "C:\Program Files\Comodo\CBOClean\BOCORE.exe" ["COMODO"]
Eset Service, ekrn, ""C:\Program Files\ESET\ESET Smart Security\ekrn.exe"" ["ESET"]
NVIDIA Display Driver Service, NVSvc, "C:\WINDOWS\System32\nvsvc32.exe" ["NVIDIA Corporation"]
Pml Driver HPZ12, Pml Driver HPZ12, "C:\WINDOWS\system32\HPZipm12.exe" ["HP"]
ServiceLayer, ServiceLayer, ""C:\Program Files\PC Connectivity Solution\ServiceLayer.exe"" ["Nokia."]
StarWind iSCSI Service, StarWindService, "C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindService.exe" ["Rocket Division Software"]
Windows User Mode Driver Framework, UMWdf, "C:\WINDOWS\system32\wdfmgr.exe" [MS]


Print Monitors:
---------------

HKLM\System\CurrentControlSet\Control\Print\Monitors\
hpzlnt09\Driver = "hpzlnt09.dll" ["HP"]
Send To Microsoft OneNote Monitor\Driver = "msonpmon.dll" [MS]


----------
<<!>>: Suspicious data at a malware launch point.
<<H>>: Suspicious data at a browser hijack point.

+ This report excludes default entries except where indicated.
+ To see *everywhere* the script checks and *everything* it finds,
  launch it from a command prompt or a shortcut with the -all parameter.
+ The search for DESKTOP.INI DLL launch points on all local fixed drives
  took 38 seconds.
---------- (total run time: 101 seconds)







Kod: Zaznacz wszystko

Logfile of HijackThis v1.99.1
Scan saved at 23:01:25, on 03/05/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\Comodo\CBOClean\BOCORE.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Microsoft IntelliType Pro\type32.exe
C:\Program Files\Microsoft IntelliPoint\point32.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
I:\Program Files\Hpp\HP Software Update\HPWuSchd.exe
C:\WINDOWS\system32\hphmon05.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
E:\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.lavasoft.de/help/aw/evhelp/0.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Winamp Toolbar BHO - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: Alcohol Toolbar Helper - {52D06F97-5511-43FA-8FDA-C481864FD26E} - C:\Program Files\Alcohol Toolbar\v3.2.0.0\Alcohol_Toolbar.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~4\Office12\GRA8E1~1.DLL
O2 - BHO: ADSTechnology module - {831CBAC0-8283-4653-9D81-FEB9F3F6E47C} - (no file)
O2 - BHO: ActivationManager module - {86A44EF7-78FC-4e18-A564-B18F806F7F56} - (no file)
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
O3 - Toolbar: Alcohol Toolbar - {4C4E7CDB-5BFC-4D74-83E2-8AE659B7EDA2} - C:\Program Files\Alcohol Toolbar\v3.2.0.0\Alcohol_Toolbar.dll
O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe"
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [HPHUPD05] I:\Program Files\Hpp\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
O4 - HKLM\..\Run: [HP Software Update] "I:\Program Files\Hpp\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Gadu-Gadu] "I:\Program Files\GG\Gadu-Gadu\gg.exe" /tray
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: &Winamp Toolbar Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{E3BFAE6E-1FCB-4BE5-855F-3FBC62AD6A6F}: NameServer = 217.17.34.10,217.17.34.68
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~4\Office12\GR99D3~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\Skype4COM.dll
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\FICHIE~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O20 - Winlogon Notify: dimsntfy - %SystemRoot%\System32\dimsntfy.dll (file missing)
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: BOCore - COMODO - C:\Program Files\Comodo\CBOClean\BOCORE.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindService.exe



[Okocza]

skasuj to w hijacku

O20 - Winlogon Notify: dimsntfy - %SystemRoot%\System32\dimsntfy.dll (file missing)

potem daj log z combofixa

http://www.forum.programosy.pl/jak-generujemy-logi-z-combofixa-oraz-dssa-vt95026.html

[kristof200]

Kod: Zaznacz wszystko

ComboFix 08-05-01.3 - Propriétaire 2008-05-04  0:03:32.1 - NTFSx86
Microsoft Windows XP Édition familiale  5.1.2600.3.1252.1.1036.18.243 [GMT 2:00]
Endroit: I:\sciagane\ComboFix.exe
* Création d'un nouveau point de restauration
* Resident AV is active


[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
.

((((((((((((((((((((((((((((((((((((   Autres suppressions   ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\autorun.inf
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\ADSTechnology
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\ADSTechnology\Uninstall.lnk
C:\Program Files\ActivationManager
C:\Program Files\ActivationManager\Uninstall.exe
C:\Program Files\ADSTechnology
C:\Program Files\ADSTechnology\Uninstall.exe

.
(((((((((((((((((((((((((((((   Fichiers créés 2008-04-03 to 2008-05-03  ))))))))))))))))))))))))))))))))))))
.

2008-05-04 00:00 . 2005-11-09 00:26   38,400   --a------   C:\WINDOWS\system32\moveex.exe
2008-05-03 22:54 . 2008-05-03 22:54   6,764   --a------   C:\WINDOWS\system32\spupdsvc.inf
2008-05-03 22:42 . 2008-04-13 19:02   2,985,984   -----c---   C:\WINDOWS\system32\dllcache\wmploc.dll
2008-05-03 22:40 . 2008-04-13 09:36   144,384   ---------   C:\WINDOWS\system32\drivers\hdaudbus.sys
2008-05-03 22:40 . 2008-04-13 11:40   10,240   ---------   C:\WINDOWS\system32\drivers\sffp_mmc.sys
2008-05-03 22:38 . 2006-12-28 12:01   19,569   --a------   C:\WINDOWS\[u]0[/u]05217_.tmp
2008-04-30 12:15 . 2008-04-30 12:15   <REP>   dr-h-----   C:\Documents and Settings\Propriétaire\Application Data\SecuROM
2008-04-30 12:15 . 2008-04-30 12:15   107,888   --a------   C:\WINDOWS\system32\CmdLineExt.dll
2008-04-23 15:36 . 2006-11-29 13:06   3,426,072   --a------   C:\WINDOWS\system32\d3dx9_32.dll
2008-04-23 15:35 . 2008-04-23 15:35   <REP>   d--------   C:\Program Files\Microsoft SQL Server Compact Edition
2008-04-23 15:35 . 2008-04-23 15:35   <REP>   d--------   C:\Documents and Settings\Propriétaire\Contacts
2008-04-23 15:35 . 2008-04-23 15:35   <REP>   d--------   C:\Documents and Settings\Propriétaire\Contacts
2008-04-23 15:27 . 2008-04-23 15:30   <REP>   d--------   C:\Documents and Settings\Propriétaire\Application Data\MSN6
2008-04-23 15:27 . 2008-04-23 15:27   <REP>   d--------   C:\Documents and Settings\All Users\Application Data\MSN6
2008-04-23 15:25 . 2008-04-25 23:46   <REP>   d--------   C:\Program Files\Windows Live
2008-04-23 15:25 . 2008-04-23 15:32   <REP>   d--hsc---   C:\Program Files\Fichiers communs\WindowsLiveInstaller
2008-04-23 15:25 . 2008-04-23 15:31   <REP>   d--------   C:\Documents and Settings\All Users\Application Data\WLInstaller
2008-04-18 20:44 . 2008-04-26 23:06   156   --a------   C:\WINDOWS\Twunk001.MTX
2008-04-18 20:44 . 2008-04-26 23:06   3   --a------   C:\WINDOWS\Twain001.Mtx
2008-04-18 20:44 . 2008-04-18 20:44   0   --a------   C:\WINDOWS\Twunk002.MTX
2008-04-18 20:43 . 2008-04-18 20:43   <REP>   d--------   C:\Documents and Settings\Propriétaire\Application Data\Thinstall
2008-04-14 21:04 . 2008-05-03 22:24   <REP>   d--------   C:\Documents and Settings\Propriétaire\Application Data\foobar2000
2008-04-13 19:10 . 2008-04-13 19:10   2,524   ---------   C:\WINDOWS\system32\pid.inf
2008-04-13 16:45 . 2008-04-13 16:45   <REP>   d--------   C:\Documents and Settings\Filmy\fotki
2008-04-13 16:45 . 2008-04-13 16:45   <REP>   d--------   C:\Documents and Settings\Filmy
2008-04-12 20:40 . 2008-04-25 23:42   747   --a------   C:\WINDOWS\imsins.BAK
2008-04-12 11:10 . 2008-04-12 11:10   <REP>   d--------   C:\Program Files\ESET
2008-04-11 23:45 . 2008-04-11 23:45   <REP>   d--------   C:\Program Files\Ontrack
2008-04-11 21:16 . 2008-04-11 21:16   <REP>   d--------   C:\Program Files\Smart Projects

.
((((((((((((((((((((((((((((((((((   Compte-rendu de Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-05-03 20:57   96,384   ----a-w   C:\WINDOWS\system32\drivers\sptd0413.sys
2008-05-03 20:31   ---------   d---a-w   C:\Documents and Settings\All Users\Application Data\TEMP
2008-05-02 08:54   ---------   d-----w   C:\Program Files\Mozilla Thunderbird
2008-05-01 11:20   ---------   d-----w   C:\Program Files\a-squared Free
2008-04-30 10:13   ---------   d--h--w   C:\Program Files\InstallShield Installation Information
2008-04-25 18:32   ---------   d-----w   C:\Documents and Settings\All Users\Application Data\Microsoft Help
2008-04-18 18:44   ---------   d-----w   C:\Program Files\Fichiers communs\Adobe
2008-04-17 08:31   ---------   d-----w   C:\Program Files\Opera
2008-04-16 17:25   ---------   d-----w   C:\Documents and Settings\Propriétaire\Application Data\AdobeUM
2008-04-13 17:50   1,804   ----a-w   C:\WINDOWS\system32\dcache.bin
2008-04-13 17:37   332,800   ----a-w   C:\WINDOWS\system32\netsetup.exe
2008-04-13 17:33   98,816   ----a-w   C:\WINDOWS\system32\psbase.dll
2008-04-13 17:32   764,416   ----a-w   C:\WINDOWS\system32\winntbbu.dll
2008-04-13 17:32   61,471   ----a-w   C:\WINDOWS\system32\odbcji32.dll
2008-04-13 17:32   5,632   ----a-w   C:\WINDOWS\system32\wmi.dll
2008-04-13 17:10   73,600   ----a-w   C:\WINDOWS\system32\drivers\sr.sys
2008-04-13 17:09   80,384   ----a-w   C:\WINDOWS\system32\drivers\parport.sys
2008-04-13 17:09   68,608   ----a-w   C:\WINDOWS\system32\drivers\pci.sys
2008-04-13 17:09   46,848   ----a-w   C:\WINDOWS\system32\drivers\p3.sys
2008-04-13 17:09   120,576   ----a-w   C:\WINDOWS\system32\drivers\pcmcia.sys
2008-04-13 17:07   2,147,328   ----a-w   C:\WINDOWS\system32\ntoskrnl.exe
2008-04-13 17:07   2,025,984   ----a-w   C:\WINDOWS\system32\ntkrnlpa.exe
2008-04-13 17:06   4,096   ----a-w   C:\WINDOWS\system32\dsprpres.dll
2008-04-13 17:05   800,256   ----a-w   C:\WINDOWS\system32\drivers\dmboot.sys
2008-04-13 17:05   25,216   ----a-w   C:\WINDOWS\system32\drivers\kbdclass.sys
2008-04-13 17:05   154,496   ----a-w   C:\WINDOWS\system32\drivers\dmio.sys
2008-04-13 17:05   14,720   ----a-w   C:\WINDOWS\system32\drivers\kbdhid.sys
2008-04-13 17:04   93,184   ------w   C:\WINDOWS\system32\msxml6r.dll
2008-04-13 17:04   37,632   ----a-w   C:\WINDOWS\system32\drivers\isapnp.sys
2008-04-13 17:03   81,920   ------w   C:\WINDOWS\system32\msshavmsg.dll
2008-04-13 17:03   40,576   ----a-r   C:\WINDOWS\system32\drivers\intelppm.sys
2008-04-13 17:02   50,688   ----a-w   C:\WINDOWS\system32\inetres.dll
2008-04-13 17:02   40,960   ----a-w   C:\WINDOWS\system32\drivers\crusoe.sys
2008-04-13 17:02   2,985,984   ----a-w   C:\WINDOWS\system32\wmploc.dll
2008-04-13 17:01   572,416   ----a-w   C:\WINDOWS\system32\shdoclc.dll
2008-04-13 17:00   66,048   ----a-w   C:\WINDOWS\system32\drivers\serial.sys
2008-04-13 17:00   54,144   ----a-w   C:\WINDOWS\system32\drivers\i8042prt.sys
2008-04-13 16:59   25,856   ------w   C:\WINDOWS\system32\drivers\hidbth.sys
2008-04-13 16:59   200,704   ------w   C:\WINDOWS\system32\wmerror.dll
2008-04-13 16:59   10,240   ----a-w   C:\WINDOWS\system32\gpkrsrc.dll
2008-04-13 16:58   273,664   ------w   C:\WINDOWS\system32\drivers\bthport.sys
2008-04-13 16:58   1,845,760   ----a-w   C:\WINDOWS\system32\win32k.sys
2008-04-13 16:58   1,647,616   ----a-w   C:\WINDOWS\system32\winbrand.dll
2008-04-13 16:57   70,144   ----a-w   C:\WINDOWS\system32\browselc.dll
2008-04-13 16:57   58,752   ----a-w   C:\WINDOWS\system32\drivers\redbook.sys
2008-04-13 16:57   44,672   ----a-w   C:\WINDOWS\system32\drivers\fips.sys
2008-04-13 16:56   57,344   ----a-w   C:\WINDOWS\system32\mshtmler.dll
2008-04-13 16:56   53,376   ----a-w   C:\WINDOWS\system32\drivers\volsnap.sys
2008-04-13 16:55   8,704   ----a-w   C:\WINDOWS\system32\asferror.dll
2008-04-13 16:55   40,064   ----a-w   C:\WINDOWS\system32\drivers\processr.sys
2008-04-13 16:54   41,856   ----a-w   C:\WINDOWS\system32\drivers\amdk7.sys
2008-04-13 16:54   41,472   ----a-w   C:\WINDOWS\system32\drivers\amdk6.sys
2008-04-13 16:54   103,936   ----a-w   C:\WINDOWS\system32\dpcdll.dll
2008-04-13 16:53   30,336   ----a-w   C:\WINDOWS\system32\drivers\modem.sys
2008-04-13 16:53   23,680   ----a-w   C:\WINDOWS\system32\drivers\mouclass.sys
2008-04-13 16:52   188,672   ----a-w   C:\WINDOWS\system32\drivers\acpi.sys
2008-04-13 10:28   175,744   ----a-w   C:\WINDOWS\system32\drivers\rdbss.sys
2008-04-13 10:21   162,816   ----a-w   C:\WINDOWS\system32\drivers\netbt.sys
2008-04-13 10:20   91,520   ----a-w   C:\WINDOWS\system32\drivers\ndiswan.sys
2008-04-13 10:20   361,344   ----a-w   C:\WINDOWS\system32\drivers\tcpip.sys
2008-04-13 10:20   182,656   ----a-w   C:\WINDOWS\system32\drivers\ndis.sys
2008-04-13 10:19   75,264   ----a-w   C:\WINDOWS\system32\drivers\ipsec.sys
2008-04-13 10:19   51,328   ----a-w   C:\WINDOWS\system32\drivers\rasl2tp.sys
2008-04-13 10:19   48,384   ----a-w   C:\WINDOWS\system32\drivers\raspptp.sys
2008-04-13 10:19   146,048   ----a-w   C:\WINDOWS\system32\drivers\portcls.sys
2008-04-13 10:19   138,112   ----a-w   C:\WINDOWS\system32\drivers\afd.sys
2008-04-13 10:17   83,072   ----a-w   C:\WINDOWS\system32\drivers\wdmaud.sys
2008-04-13 10:17   456,576   ----a-w   C:\WINDOWS\system32\drivers\mrxsmb.sys
2008-04-13 10:17   105,344   ----a-w   C:\WINDOWS\system32\drivers\mup.sys
2008-04-13 10:16   49,536   ----a-w   C:\WINDOWS\system32\drivers\classpnp.sys
2008-04-13 10:16   141,056   ----a-w   C:\WINDOWS\system32\drivers\ks.sys
2008-04-13 10:15   60,800   ----a-w   C:\WINDOWS\system32\drivers\sysaudio.sys
2008-04-13 10:15   574,976   ----a-w   C:\WINDOWS\system32\drivers\ntfs.sys
2008-04-13 10:15   334,848   ----a-w   C:\WINDOWS\system32\drivers\srv.sys
2008-04-13 10:14   63,744   ----a-w   C:\WINDOWS\system32\drivers\cdfs.sys
2008-04-13 10:14   143,744   ----a-w   C:\WINDOWS\system32\drivers\fastfat.sys
2008-04-13 10:00   225,664   ----a-w   C:\WINDOWS\system32\drivers\tcpip6.sys
2008-04-13 10:00   19,072   ----a-w   C:\WINDOWS\system32\drivers\tdi.sys
2008-04-13 09:57   41,472   ----a-w   C:\WINDOWS\system32\drivers\raspppoe.sys
2008-04-13 09:57   40,576   ----a-w   C:\WINDOWS\system32\drivers\ndproxy.sys
2008-04-13 09:57   34,560   ----a-w   C:\WINDOWS\system32\drivers\wanarp.sys
2008-04-13 09:57   20,864   ----a-w   C:\WINDOWS\system32\drivers\ipinip.sys
2008-04-13 09:57   152,832   ----a-w   C:\WINDOWS\system32\drivers\ipnat.sys
2008-04-13 09:57   14,336   ----a-w   C:\WINDOWS\system32\drivers\asyncmac.sys
2008-04-13 09:57   10,112   ----a-w   C:\WINDOWS\system32\drivers\ndistapi.sys
2008-04-13 09:56   88,320   ----a-w   C:\WINDOWS\system32\drivers\nwlnkipx.sys
2008-04-13 09:56   69,120   ----a-w   C:\WINDOWS\system32\drivers\psched.sys
2008-04-13 09:56   35,072   ----a-w   C:\WINDOWS\system32\drivers\msgpc.sys
2008-04-13 09:56   34,688   ----a-w   C:\WINDOWS\system32\drivers\netbios.sys
2008-04-13 09:56   30,592   ----a-w   C:\WINDOWS\system32\drivers\rndismp.sys
2008-04-13 09:56   30,592   ------w   C:\WINDOWS\system32\drivers\rndismpx.sys
2008-04-13 09:56   14,592   ----a-w   C:\WINDOWS\system32\drivers\ndisuio.sys
2008-04-13 09:56   12,800   ----a-w   C:\WINDOWS\system32\drivers\usb8023.sys
2008-04-13 09:56   12,800   ------w   C:\WINDOWS\system32\drivers\usb8023x.sys
2008-04-13 09:56   12,288   ----a-w   C:\WINDOWS\system32\drivers\tunmp.sys
2008-04-13 09:55   202,624   ----a-w   C:\WINDOWS\system32\drivers\rmcast.sys
2008-04-13 09:54   11,264   ----a-w   C:\WINDOWS\system32\drivers\irenum.sys
2008-04-13 09:53   71,552   ----a-w   C:\WINDOWS\system32\drivers\bridge.sys
2008-04-13 09:53   40,320   ----a-w   C:\WINDOWS\system32\drivers\nmnt.sys
2008-04-13 09:53   36,608   ------w   C:\WINDOWS\system32\drivers\ip6fw.sys
2007-08-28 11:54   237,568   ----a-w   C:\Program Files\mozilla firefox\plugins\CrazyTalk4Native.dll
2006-05-25 16:43   204,895   ----a-w   C:\Program Files\mozilla firefox\plugins\ctdomemhelper.dll
2005-09-29 12:41   77,824   ----a-w   C:\Program Files\mozilla firefox\plugins\ctframeplayerobject.dll
2006-06-19 11:10   426,081   ----a-w   C:\Program Files\mozilla firefox\plugins\ctplayerobject.dll
2005-02-02 10:19   458,752   ----a-w   C:\Program Files\mozilla firefox\plugins\imagickrt.dll
2006-04-10 16:35   139,264   ----a-w   C:\Program Files\mozilla firefox\plugins\rlcontentclass.dll
2005-11-09 09:10   204,800   ----a-w   C:\Program Files\mozilla firefox\plugins\RLMusicPacker.dll
2005-11-09 09:42   106,496   ----a-w   C:\Program Files\mozilla firefox\plugins\RLMusicUnpacker.dll
2006-01-04 09:22   212,992   ----a-w   C:\Program Files\mozilla firefox\plugins\RLVoicePacker.dll
2006-01-04 09:21   167,936   ----a-w   C:\Program Files\mozilla firefox\plugins\RLVoiceUnpacker.dll
.

(((((((((((((((((((((((((((((((((   Point de chargement Reg   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20}]
2007-10-04 22:06   1135968   --a------   C:\Program Files\Winamp Toolbar\winamptb.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}"= "C:\Program Files\Winamp Toolbar\winamptb.dll" [2007-10-04 22:06 1135968]

[HKEY_CLASSES_ROOT\clsid\{ebf2ba02-9094-4c5a-858b-bb198f3d8de2}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand.1]
[HKEY_CLASSES_ROOT\TypeLib\{538CD77C-BFDD-49b0-9562-77419CAB89D1}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}"= C:\Program Files\Winamp Toolbar\winamptb.dll [2007-10-04 22:06 1135968]

[HKEY_CLASSES_ROOT\clsid\{ebf2ba02-9094-4c5a-858b-bb198f3d8de2}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand.1]
[HKEY_CLASSES_ROOT\TypeLib\{538CD77C-BFDD-49b0-9562-77419CAB89D1}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-13 19:34 15360]
"Gadu-Gadu"="I:\Program Files\GG\Gadu-Gadu\gg.exe" [2007-07-09 09:39 2119104]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"type32"="C:\Program Files\Microsoft IntelliType Pro\type32.exe" [2004-06-03 10:51 172032]
"IntelliPoint"="C:\Program Files\Microsoft IntelliPoint\point32.exe" [2004-06-03 10:50 204800]
"PCSuiteTrayApplication"="C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe" [2007-06-18 15:10 271360]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2004-08-02 21:03 4493312]
"HPHUPD05"="I:\Program Files\Hpp\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe" [2003-08-21 06:23 49152]
"HP Software Update"="I:\Program Files\Hpp\HP Software Update\HPWuSchd.exe" [2003-06-25 12:24 49152]
"HPHmon05"="C:\WINDOWS\system32\hphmon05.exe" [2003-08-21 06:16 483328]
"WinampAgent"="C:\Program Files\Winamp\winampa.exe" [2007-10-10 07:28 36352]
"egui"="C:\Program Files\ESET\ESET Smart Security\egui.exe" [2008-02-20 11:06 1443072]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2008-04-13 19:34 15360]
"Nokia.PCSync"="C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2007-06-19 10:17 1241088]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"SynchronousMachineGroupPolicy"= 0 (0x0)
"SynchronousUserGroupPolicy"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoStrCmpLogical"= 1 (0x1)
"NoResolveSearch"= 1 (0x1)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoSMBalloonTip"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.l3acm"= l3codecp.acm
"vidc.avrn"= AvidAVICodec.dll
"VIDC.YV12"= yv12vfw.dll

[HKLM\~\startupfolder\C:^Documents and Settings^Propriétaire^Menu Démarrer^Programmes^Démarrage^Adobe Gamma.lnk]
path=C:\Documents and Settings\Propriétaire\Menu Démarrer\Programmes\Démarrage\Adobe Gamma.lnk
backup=C:\WINDOWS\pss\Adobe Gamma.lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^Propriétaire^Menu Démarrer^Programmes^Démarrage^OneNote 2007 Screen Clipper and Launcher.lnk]
path=C:\Documents and Settings\Propriétaire\Menu Démarrer\Programmes\Démarrage\OneNote 2007 Screen Clipper and Launcher.lnk
backup=C:\WINDOWS\pss\OneNote 2007 Screen Clipper and Launcher.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AWMON]
I:\PROGRA~1\Ad-Aware\AD-AWA~1\Ad-Watch.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BluetoothAuthenticationAgent]
--------- 2008-04-13 19:34 110592 C:\WINDOWS\system32\bthprops.cpl

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BOC-425]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cctray]
I:\Program Files\Ca\cctray\cctray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
--a------ 2008-04-13 19:34 15360 C:\WINDOWS\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools-1033]
--a------ 2004-08-22 17:05 81920 I:\Program Files\Deamon\daemon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Gadu-Gadu]
--a------ 2007-07-09 09:39 2119104 I:\Program Files\GG\Gadu-Gadu\gg.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
--a------ 2006-10-27 00:47 31016 C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPDJ Taskbar Utility]
--a------ 2003-07-25 23:14 188416 C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Konnekt]
C:\Program Files\Konnekt\konnekt.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
-ra------ 2004-08-02 21:03 4493312 C:\WINDOWS\System32\NvCpl.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
-ra------ 2004-08-02 21:03 86016 C:\WINDOWS\System32\NvMcTray.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
-ra------ 2004-08-02 21:03 917504 C:\WINDOWS\system32\nwiz.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Orb]
--a------ 2007-10-08 02:18 360448 C:\Program Files\Winamp Remote\bin\OrbTray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
-ra------ 2007-10-18 19:47 21147944 C:\Program Files\Skype\Phone\Skype.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
--a------ 2007-10-01 14:45 32881 C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"I:\\Program Files\\GG\\Gadu-Gadu\\gg.exe"=
"I:\\Program Files\\NAPI-PROJEKT\\napisy.exe"=
"C:\\Program Files\\Winamp Remote\\bin\\Orb.exe"=
"C:\\Program Files\\Winamp Remote\\bin\\OrbTray.exe"=
"C:\\Program Files\\Winamp Remote\\bin\\OrbStreamerClient.exe"=
"C:\\WINDOWS\\system32\\dplaysvr.exe"=
"I:\\Bartek\\Stronghold Crusader.exe"=
"C:\\WINDOWS\\system32\\dpvsetup.exe"=
"C:\\Program Files\\Skype\\Phone\\Skype.exe"=
"I:\\Program Files\\sorcer\\PES2008.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

S3 ATE_PROCMON;ATE_PROCMON;I:\Program Files\Anti Trojan Elite\ATEPMon.sys []
S3 CV2K1;CommView Network Monitor;C:\WINDOWS\system32\DRIVERS\cv2k1.sys []
S3 hitmanpro2;Hitman Pro 2 Driver;C:\Program Files\Hitman Pro\hitmanpro2.sys []

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b2544fe8-781a-11dc-b7f5-00300567f70a}]
\Shell\AutoRun\command - O:\LaunchU3.exe -a

*Newly Created Service* - CATCHME
*Newly Created Service* - SPUPDSVC

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{21A9A23D-5D94-45B3-B61A-89824E5F2525}]
C:\WINDOWS\system32\host.exe
.
**************************************************************************

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-05-04 00:05:32
Windows 5.1.2600 Service Pack 3 NTFS

Balayage processus cachés ...

Balayage caché autostart entries ...

Balayage des fichiers cachés ...


folder error: C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\

Scan terminé avec succès
Les fichiers cachés: 0

**************************************************************************
.
Temps d'accomplissement: 2008-05-04  0:06:07
ComboFix-quarantined-files.txt  2008-05-03 22:06:04

Pre-Run: 1,459,355,648 octets libres
Post-Run: 1,496,027,136 octets libres

294   --- E O F ---   2008-04-23 20:57:28


Dziekuje okocza

[Okocza]

otwórz notatnik i wklej w nim:

Kod: Zaznacz wszystko

File::
C:\WINDOWS\system32\moveex.exe

Registry::
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b2544fe8-781a-11dc-b7f5-00300567f70a}]

Plik >>> zapisz jako CFScript.txt .Plik przeciągnij i upuść na ikonę ComboFixa (tak jak tu ) . odczekaj az wygeneruje sie nowy log i go daj na forum

(jeśli pojawi się pytanie "1 or 2" - to wpisz 1 i naciśnij ENTER). Rozpocznie się proces usuwania
Potem nowy log z hijacka oraz combofixa

[kristof200]

Kod: Zaznacz wszystko

ComboFix 08-05-01.3 - Propriétaire 2008-05-04 10:36:07.2 - NTFSx86
Microsoft Windows XP Édition familiale  5.1.2600.3.1252.1.1036.18.197 [GMT 2:00]
Endroit: C:\Documents and Settings\Propriétaire\Bureau\ComboFix.exe
Command switches used :: C:\Documents and Settings\Propriétaire\Bureau\CFScript.txt
* Création d'un nouveau point de restauration
* Resident AV is active


[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]

FILE ::
C:\WINDOWS\system32\moveex.exe
.

((((((((((((((((((((((((((((((((((((   Autres suppressions   ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\WINDOWS\system32\moveex.exe

.
(((((((((((((((((((((((((((((   Fichiers créés 2008-04-04 to 2008-05-04  ))))))))))))))))))))))))))))))))))))
.

2008-05-03 22:54 . 2008-05-03 22:54   6,764   --a------   C:\WINDOWS\system32\spupdsvc.inf
2008-05-03 22:42 . 2008-04-13 19:02   2,985,984   -----c---   C:\WINDOWS\system32\dllcache\wmploc.dll
2008-05-03 22:40 . 2008-04-13 09:36   144,384   ---------   C:\WINDOWS\system32\drivers\hdaudbus.sys
2008-05-03 22:40 . 2008-04-13 11:40   10,240   ---------   C:\WINDOWS\system32\drivers\sffp_mmc.sys
2008-05-03 22:38 . 2006-12-28 12:01   19,569   --a------   C:\WINDOWS\[u]0[/u]05217_.tmp
2008-04-30 12:15 . 2008-04-30 12:15   <REP>   dr-h-----   C:\Documents and Settings\Propriétaire\Application Data\SecuROM
2008-04-30 12:15 . 2008-04-30 12:15   107,888   --a------   C:\WINDOWS\system32\CmdLineExt.dll
2008-04-23 15:36 . 2006-11-29 13:06   3,426,072   --a------   C:\WINDOWS\system32\d3dx9_32.dll
2008-04-23 15:35 . 2008-04-23 15:35   <REP>   d--------   C:\Program Files\Microsoft SQL Server Compact Edition
2008-04-23 15:35 . 2008-04-23 15:35   <REP>   d--------   C:\Documents and Settings\Propriétaire\Contacts
2008-04-23 15:35 . 2008-04-23 15:35   <REP>   d--------   C:\Documents and Settings\Propriétaire\Contacts
2008-04-23 15:27 . 2008-04-23 15:30   <REP>   d--------   C:\Documents and Settings\Propriétaire\Application Data\MSN6
2008-04-23 15:27 . 2008-04-23 15:27   <REP>   d--------   C:\Documents and Settings\All Users\Application Data\MSN6
2008-04-23 15:25 . 2008-04-25 23:46   <REP>   d--------   C:\Program Files\Windows Live
2008-04-23 15:25 . 2008-04-23 15:32   <REP>   d--hsc---   C:\Program Files\Fichiers communs\WindowsLiveInstaller
2008-04-23 15:25 . 2008-04-23 15:31   <REP>   d--------   C:\Documents and Settings\All Users\Application Data\WLInstaller
2008-04-18 20:44 . 2008-04-26 23:06   156   --a------   C:\WINDOWS\Twunk001.MTX
2008-04-18 20:44 . 2008-04-26 23:06   3   --a------   C:\WINDOWS\Twain001.Mtx
2008-04-18 20:44 . 2008-04-18 20:44   0   --a------   C:\WINDOWS\Twunk002.MTX
2008-04-18 20:43 . 2008-04-18 20:43   <REP>   d--------   C:\Documents and Settings\Propriétaire\Application Data\Thinstall
2008-04-14 21:04 . 2008-05-04 00:09   <REP>   d--------   C:\Documents and Settings\Propriétaire\Application Data\foobar2000
2008-04-13 19:10 . 2008-04-13 19:10   2,524   ---------   C:\WINDOWS\system32\pid.inf
2008-04-13 16:45 . 2008-04-13 16:45   <REP>   d--------   C:\Documents and Settings\Filmy\fotki
2008-04-13 16:45 . 2008-04-13 16:45   <REP>   d--------   C:\Documents and Settings\Filmy
2008-04-12 20:40 . 2008-04-25 23:42   747   --a------   C:\WINDOWS\imsins.BAK
2008-04-12 11:10 . 2008-04-12 11:10   <REP>   d--------   C:\Program Files\ESET
2008-04-11 23:45 . 2008-04-11 23:45   <REP>   d--------   C:\Program Files\Ontrack
2008-04-11 21:16 . 2008-04-11 21:16   <REP>   d--------   C:\Program Files\Smart Projects

.
((((((((((((((((((((((((((((((((((   Compte-rendu de Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-05-03 20:57   96,384   ----a-w   C:\WINDOWS\system32\drivers\sptd0413.sys
2008-05-03 20:31   ---------   d---a-w   C:\Documents and Settings\All Users\Application Data\TEMP
2008-05-02 08:54   ---------   d-----w   C:\Program Files\Mozilla Thunderbird
2008-05-01 11:20   ---------   d-----w   C:\Program Files\a-squared Free
2008-04-30 10:13   ---------   d--h--w   C:\Program Files\InstallShield Installation Information
2008-04-25 18:32   ---------   d-----w   C:\Documents and Settings\All Users\Application Data\Microsoft Help
2008-04-18 18:44   ---------   d-----w   C:\Program Files\Fichiers communs\Adobe
2008-04-17 08:31   ---------   d-----w   C:\Program Files\Opera
2008-04-16 17:25   ---------   d-----w   C:\Documents and Settings\Propriétaire\Application Data\AdobeUM
2008-04-13 17:50   1,804   ----a-w   C:\WINDOWS\system32\dcache.bin
2008-04-13 17:37   332,800   ----a-w   C:\WINDOWS\system32\netsetup.exe
2008-04-13 17:33   98,816   ----a-w   C:\WINDOWS\system32\psbase.dll
2008-04-13 17:32   764,416   ----a-w   C:\WINDOWS\system32\winntbbu.dll
2008-04-13 17:32   61,471   ----a-w   C:\WINDOWS\system32\odbcji32.dll
2008-04-13 17:32   5,632   ----a-w   C:\WINDOWS\system32\wmi.dll
2008-04-13 17:10   73,600   ----a-w   C:\WINDOWS\system32\drivers\sr.sys
2008-04-13 17:09   80,384   ----a-w   C:\WINDOWS\system32\drivers\parport.sys
2008-04-13 17:09   68,608   ----a-w   C:\WINDOWS\system32\drivers\pci.sys
2008-04-13 17:09   46,848   ----a-w   C:\WINDOWS\system32\drivers\p3.sys
2008-04-13 17:09   120,576   ----a-w   C:\WINDOWS\system32\drivers\pcmcia.sys
2008-04-13 17:07   2,147,328   ----a-w   C:\WINDOWS\system32\ntoskrnl.exe
2008-04-13 17:07   2,025,984   ----a-w   C:\WINDOWS\system32\ntkrnlpa.exe
2008-04-13 17:06   4,096   ----a-w   C:\WINDOWS\system32\dsprpres.dll
2008-04-13 17:05   800,256   ----a-w   C:\WINDOWS\system32\drivers\dmboot.sys
2008-04-13 17:05   25,216   ----a-w   C:\WINDOWS\system32\drivers\kbdclass.sys
2008-04-13 17:05   154,496   ----a-w   C:\WINDOWS\system32\drivers\dmio.sys
2008-04-13 17:05   14,720   ----a-w   C:\WINDOWS\system32\drivers\kbdhid.sys
2008-04-13 17:04   93,184   ------w   C:\WINDOWS\system32\msxml6r.dll
2008-04-13 17:04   37,632   ----a-w   C:\WINDOWS\system32\drivers\isapnp.sys
2008-04-13 17:03   81,920   ------w   C:\WINDOWS\system32\msshavmsg.dll
2008-04-13 17:03   40,576   ----a-r   C:\WINDOWS\system32\drivers\intelppm.sys
2008-04-13 17:02   50,688   ----a-w   C:\WINDOWS\system32\inetres.dll
2008-04-13 17:02   40,960   ----a-w   C:\WINDOWS\system32\drivers\crusoe.sys
2008-04-13 17:02   2,985,984   ----a-w   C:\WINDOWS\system32\wmploc.dll
2008-04-13 17:01   572,416   ----a-w   C:\WINDOWS\system32\shdoclc.dll
2008-04-13 17:00   66,048   ----a-w   C:\WINDOWS\system32\drivers\serial.sys
2008-04-13 17:00   54,144   ----a-w   C:\WINDOWS\system32\drivers\i8042prt.sys
2008-04-13 16:59   25,856   ------w   C:\WINDOWS\system32\drivers\hidbth.sys
2008-04-13 16:59   200,704   ------w   C:\WINDOWS\system32\wmerror.dll
2008-04-13 16:59   10,240   ----a-w   C:\WINDOWS\system32\gpkrsrc.dll
2008-04-13 16:58   273,664   ------w   C:\WINDOWS\system32\drivers\bthport.sys
2008-04-13 16:58   1,845,760   ----a-w   C:\WINDOWS\system32\win32k.sys
2008-04-13 16:58   1,647,616   ----a-w   C:\WINDOWS\system32\winbrand.dll
2008-04-13 16:57   70,144   ----a-w   C:\WINDOWS\system32\browselc.dll
2008-04-13 16:57   58,752   ----a-w   C:\WINDOWS\system32\drivers\redbook.sys
2008-04-13 16:57   44,672   ----a-w   C:\WINDOWS\system32\drivers\fips.sys
2008-04-13 16:56   57,344   ----a-w   C:\WINDOWS\system32\mshtmler.dll
2008-04-13 16:56   53,376   ----a-w   C:\WINDOWS\system32\drivers\volsnap.sys
2008-04-13 16:55   8,704   ----a-w   C:\WINDOWS\system32\asferror.dll
2008-04-13 16:55   40,064   ----a-w   C:\WINDOWS\system32\drivers\processr.sys
2008-04-13 16:54   41,856   ----a-w   C:\WINDOWS\system32\drivers\amdk7.sys
2008-04-13 16:54   41,472   ----a-w   C:\WINDOWS\system32\drivers\amdk6.sys
2008-04-13 16:54   103,936   ----a-w   C:\WINDOWS\system32\dpcdll.dll
2008-04-13 16:53   30,336   ----a-w   C:\WINDOWS\system32\drivers\modem.sys
2008-04-13 16:53   23,680   ----a-w   C:\WINDOWS\system32\drivers\mouclass.sys
2008-04-13 16:52   188,672   ----a-w   C:\WINDOWS\system32\drivers\acpi.sys
2008-04-13 10:28   175,744   ----a-w   C:\WINDOWS\system32\drivers\rdbss.sys
2008-04-13 10:21   162,816   ----a-w   C:\WINDOWS\system32\drivers\netbt.sys
2008-04-13 10:20   91,520   ----a-w   C:\WINDOWS\system32\drivers\ndiswan.sys
2008-04-13 10:20   361,344   ----a-w   C:\WINDOWS\system32\drivers\tcpip.sys
2008-04-13 10:20   182,656   ----a-w   C:\WINDOWS\system32\drivers\ndis.sys
2008-04-13 10:19   75,264   ----a-w   C:\WINDOWS\system32\drivers\ipsec.sys
2008-04-13 10:19   51,328   ----a-w   C:\WINDOWS\system32\drivers\rasl2tp.sys
2008-04-13 10:19   48,384   ----a-w   C:\WINDOWS\system32\drivers\raspptp.sys
2008-04-13 10:19   146,048   ----a-w   C:\WINDOWS\system32\drivers\portcls.sys
2008-04-13 10:19   138,112   ----a-w   C:\WINDOWS\system32\drivers\afd.sys
2008-04-13 10:17   83,072   ----a-w   C:\WINDOWS\system32\drivers\wdmaud.sys
2008-04-13 10:17   456,576   ----a-w   C:\WINDOWS\system32\drivers\mrxsmb.sys
2008-04-13 10:17   105,344   ----a-w   C:\WINDOWS\system32\drivers\mup.sys
2008-04-13 10:16   49,536   ----a-w   C:\WINDOWS\system32\drivers\classpnp.sys
2008-04-13 10:16   141,056   ----a-w   C:\WINDOWS\system32\drivers\ks.sys
2008-04-13 10:15   60,800   ----a-w   C:\WINDOWS\system32\drivers\sysaudio.sys
2008-04-13 10:15   574,976   ----a-w   C:\WINDOWS\system32\drivers\ntfs.sys
2008-04-13 10:15   334,848   ----a-w   C:\WINDOWS\system32\drivers\srv.sys
2008-04-13 10:14   63,744   ----a-w   C:\WINDOWS\system32\drivers\cdfs.sys
2008-04-13 10:14   143,744   ----a-w   C:\WINDOWS\system32\drivers\fastfat.sys
2008-04-13 10:00   225,664   ----a-w   C:\WINDOWS\system32\drivers\tcpip6.sys
2008-04-13 10:00   19,072   ----a-w   C:\WINDOWS\system32\drivers\tdi.sys
2008-04-13 09:57   41,472   ----a-w   C:\WINDOWS\system32\drivers\raspppoe.sys
2008-04-13 09:57   40,576   ----a-w   C:\WINDOWS\system32\drivers\ndproxy.sys
2008-04-13 09:57   34,560   ----a-w   C:\WINDOWS\system32\drivers\wanarp.sys
2008-04-13 09:57   20,864   ----a-w   C:\WINDOWS\system32\drivers\ipinip.sys
2008-04-13 09:57   152,832   ----a-w   C:\WINDOWS\system32\drivers\ipnat.sys
2008-04-13 09:57   14,336   ----a-w   C:\WINDOWS\system32\drivers\asyncmac.sys
2008-04-13 09:57   10,112   ----a-w   C:\WINDOWS\system32\drivers\ndistapi.sys
2008-04-13 09:56   88,320   ----a-w   C:\WINDOWS\system32\drivers\nwlnkipx.sys
2008-04-13 09:56   69,120   ----a-w   C:\WINDOWS\system32\drivers\psched.sys
2008-04-13 09:56   35,072   ----a-w   C:\WINDOWS\system32\drivers\msgpc.sys
2008-04-13 09:56   34,688   ----a-w   C:\WINDOWS\system32\drivers\netbios.sys
2008-04-13 09:56   30,592   ----a-w   C:\WINDOWS\system32\drivers\rndismp.sys
2008-04-13 09:56   30,592   ------w   C:\WINDOWS\system32\drivers\rndismpx.sys
2008-04-13 09:56   14,592   ----a-w   C:\WINDOWS\system32\drivers\ndisuio.sys
2008-04-13 09:56   12,800   ----a-w   C:\WINDOWS\system32\drivers\usb8023.sys
2008-04-13 09:56   12,800   ------w   C:\WINDOWS\system32\drivers\usb8023x.sys
2008-04-13 09:56   12,288   ----a-w   C:\WINDOWS\system32\drivers\tunmp.sys
2008-04-13 09:55   202,624   ----a-w   C:\WINDOWS\system32\drivers\rmcast.sys
2008-04-13 09:54   11,264   ----a-w   C:\WINDOWS\system32\drivers\irenum.sys
2008-04-13 09:53   71,552   ----a-w   C:\WINDOWS\system32\drivers\bridge.sys
2008-04-13 09:53   40,320   ----a-w   C:\WINDOWS\system32\drivers\nmnt.sys
2008-04-13 09:53   36,608   ------w   C:\WINDOWS\system32\drivers\ip6fw.sys
2007-08-28 11:54   237,568   ----a-w   C:\Program Files\mozilla firefox\plugins\CrazyTalk4Native.dll
2006-05-25 16:43   204,895   ----a-w   C:\Program Files\mozilla firefox\plugins\ctdomemhelper.dll
2005-09-29 12:41   77,824   ----a-w   C:\Program Files\mozilla firefox\plugins\ctframeplayerobject.dll
2006-06-19 11:10   426,081   ----a-w   C:\Program Files\mozilla firefox\plugins\ctplayerobject.dll
2005-02-02 10:19   458,752   ----a-w   C:\Program Files\mozilla firefox\plugins\imagickrt.dll
2006-04-10 16:35   139,264   ----a-w   C:\Program Files\mozilla firefox\plugins\rlcontentclass.dll
2005-11-09 09:10   204,800   ----a-w   C:\Program Files\mozilla firefox\plugins\RLMusicPacker.dll
2005-11-09 09:42   106,496   ----a-w   C:\Program Files\mozilla firefox\plugins\RLMusicUnpacker.dll
2006-01-04 09:22   212,992   ----a-w   C:\Program Files\mozilla firefox\plugins\RLVoicePacker.dll
2006-01-04 09:21   167,936   ----a-w   C:\Program Files\mozilla firefox\plugins\RLVoiceUnpacker.dll
.

(((((((((((((((((((((((((((((   snapshot@2008-05-04_ 0.05.52,29   )))))))))))))))))))))))))))))))))))))))))
.
- 2008-05-03 20:58:36   2,048   --s-a-w   C:\WINDOWS\bootstat.dat
+ 2008-05-04 07:22:28   2,048   --s-a-w   C:\WINDOWS\bootstat.dat
.
(((((((((((((((((((((((((((((((((   Point de chargement Reg   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20}]
2007-10-04 22:06   1135968   --a------   C:\Program Files\Winamp Toolbar\winamptb.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}"= "C:\Program Files\Winamp Toolbar\winamptb.dll" [2007-10-04 22:06 1135968]

[HKEY_CLASSES_ROOT\clsid\{ebf2ba02-9094-4c5a-858b-bb198f3d8de2}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand.1]
[HKEY_CLASSES_ROOT\TypeLib\{538CD77C-BFDD-49b0-9562-77419CAB89D1}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}"= C:\Program Files\Winamp Toolbar\winamptb.dll [2007-10-04 22:06 1135968]

[HKEY_CLASSES_ROOT\clsid\{ebf2ba02-9094-4c5a-858b-bb198f3d8de2}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand.1]
[HKEY_CLASSES_ROOT\TypeLib\{538CD77C-BFDD-49b0-9562-77419CAB89D1}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-13 19:34 15360]
"Gadu-Gadu"="I:\Program Files\GG\Gadu-Gadu\gg.exe" [2007-07-09 09:39 2119104]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"type32"="C:\Program Files\Microsoft IntelliType Pro\type32.exe" [2004-06-03 10:51 172032]
"IntelliPoint"="C:\Program Files\Microsoft IntelliPoint\point32.exe" [2004-06-03 10:50 204800]
"PCSuiteTrayApplication"="C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe" [2007-06-18 15:10 271360]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2004-08-02 21:03 4493312]
"HPHUPD05"="I:\Program Files\Hpp\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe" [2003-08-21 06:23 49152]
"HP Software Update"="I:\Program Files\Hpp\HP Software Update\HPWuSchd.exe" [2003-06-25 12:24 49152]
"HPHmon05"="C:\WINDOWS\system32\hphmon05.exe" [2003-08-21 06:16 483328]
"WinampAgent"="C:\Program Files\Winamp\winampa.exe" [2007-10-10 07:28 36352]
"egui"="C:\Program Files\ESET\ESET Smart Security\egui.exe" [2008-02-20 11:06 1443072]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2008-04-13 19:34 15360]
"Nokia.PCSync"="C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2007-06-19 10:17 1241088]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"SynchronousMachineGroupPolicy"= 0 (0x0)
"SynchronousUserGroupPolicy"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoStrCmpLogical"= 1 (0x1)
"NoResolveSearch"= 1 (0x1)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoSMBalloonTip"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.l3acm"= l3codecp.acm
"vidc.avrn"= AvidAVICodec.dll
"VIDC.YV12"= yv12vfw.dll

[HKLM\~\startupfolder\C:^Documents and Settings^Propriétaire^Menu Démarrer^Programmes^Démarrage^Adobe Gamma.lnk]
path=C:\Documents and Settings\Propriétaire\Menu Démarrer\Programmes\Démarrage\Adobe Gamma.lnk
backup=C:\WINDOWS\pss\Adobe Gamma.lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^Propriétaire^Menu Démarrer^Programmes^Démarrage^OneNote 2007 Screen Clipper and Launcher.lnk]
path=C:\Documents and Settings\Propriétaire\Menu Démarrer\Programmes\Démarrage\OneNote 2007 Screen Clipper and Launcher.lnk
backup=C:\WINDOWS\pss\OneNote 2007 Screen Clipper and Launcher.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AWMON]
I:\PROGRA~1\Ad-Aware\AD-AWA~1\Ad-Watch.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BluetoothAuthenticationAgent]
--------- 2008-04-13 19:34 110592 C:\WINDOWS\system32\bthprops.cpl

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BOC-425]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cctray]
I:\Program Files\Ca\cctray\cctray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
--a------ 2008-04-13 19:34 15360 C:\WINDOWS\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools-1033]
--a------ 2004-08-22 17:05 81920 I:\Program Files\Deamon\daemon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Gadu-Gadu]
--a------ 2007-07-09 09:39 2119104 I:\Program Files\GG\Gadu-Gadu\gg.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
--a------ 2006-10-27 00:47 31016 C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPDJ Taskbar Utility]
--a------ 2003-07-25 23:14 188416 C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Konnekt]
C:\Program Files\Konnekt\konnekt.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
-ra------ 2004-08-02 21:03 4493312 C:\WINDOWS\System32\NvCpl.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
-ra------ 2004-08-02 21:03 86016 C:\WINDOWS\System32\NvMcTray.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
-ra------ 2004-08-02 21:03 917504 C:\WINDOWS\system32\nwiz.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Orb]
--a------ 2007-10-08 02:18 360448 C:\Program Files\Winamp Remote\bin\OrbTray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
-ra------ 2007-10-18 19:47 21147944 C:\Program Files\Skype\Phone\Skype.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
--a------ 2007-10-01 14:45 32881 C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"I:\\Program Files\\GG\\Gadu-Gadu\\gg.exe"=
"I:\\Program Files\\NAPI-PROJEKT\\napisy.exe"=
"C:\\Program Files\\Winamp Remote\\bin\\Orb.exe"=
"C:\\Program Files\\Winamp Remote\\bin\\OrbTray.exe"=
"C:\\Program Files\\Winamp Remote\\bin\\OrbStreamerClient.exe"=
"C:\\WINDOWS\\system32\\dplaysvr.exe"=
"I:\\Bartek\\Stronghold Crusader.exe"=
"C:\\WINDOWS\\system32\\dpvsetup.exe"=
"C:\\Program Files\\Skype\\Phone\\Skype.exe"=
"I:\\Program Files\\sorcer\\PES2008.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

S3 ATE_PROCMON;ATE_PROCMON;I:\Program Files\Anti Trojan Elite\ATEPMon.sys []
S3 CV2K1;CommView Network Monitor;C:\WINDOWS\system32\DRIVERS\cv2k1.sys []
S3 hitmanpro2;Hitman Pro 2 Driver;C:\Program Files\Hitman Pro\hitmanpro2.sys []


[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{21A9A23D-5D94-45B3-B61A-89824E5F2525}]
C:\WINDOWS\system32\host.exe
.
**************************************************************************

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-05-04 10:38:13
Windows 5.1.2600 Service Pack 3 NTFS

Balayage processus cachés ...

Balayage caché autostart entries ...

Balayage des fichiers cachés ...

Scan terminé avec succès
Les fichiers cachés: 0

**************************************************************************
.
Temps d'accomplissement: 2008-05-04 10:38:52
ComboFix-quarantined-files.txt  2008-05-04 08:38:48
ComboFix2.txt  2008-05-03 22:06:08

Pre-Run: 1,470,578,688 octets libres
Post-Run: 1,464,242,176 octets libres

291   --- E O F ---   2008-04-23 20:57:28


Nie pojawilo sie pytanie wiec log z hijacka nie bedzie potrzebny??

Dzieki!!

[wojtas]

wklej do notatnika:

File::
C:\WINDOWS\005217_.tmp

Registry::
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{21A9A23D-5D94-45B3-B61A-89824E5F2525}]

Plik >>> zapisz jako CFScript.txt .Plik przeciągnij i upuść na ikonę ComboFixa (tak jak tu ) . odczekaj az wygeneruje sie nowy log i go daj na forum

[kristof200]

[code]ComboFix 08-05-01.3 - Propriétaire 2008-05-04 21:00:51.3 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.1.1036.18.280 [GMT 2:00]
Endroit: C:\Documents and Settings\Propriétaire\Bureau\ComboFix.exe
Command switches used :: C:\Documents and Settings\Propriétaire\Bureau\CFScript.txt
* Création d'un nouveau point de restauration
* Resident AV is active


[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]

FILE ::
C:\WINDOWS\[u]0[/u]05217_.tmp
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Autorun.inf
C:\WINDOWS\[u]0[/u]05217_.tmp

.
((((((((((((((((((((((((((((( Fichiers créés 2008-04-04 to 2008-05-04 ))))))))))))))))))))))))))))))))))))
.

2008-05-04 18:20 . 2008-05-04 18:36 627 --a------ C:\WINDOWS\tlknw4.ini
2008-05-04 11:19 . 2004-08-19 16:09 219,648 --a------ C:\WINDOWS\system32\uxtheme.backup
2008-05-04 11:19 . 2008-05-04 11:19 219,648 --a--c--- C:\WINDOWS\system32\dllcache\uxtheme.dll
2008-05-04 11:12 . 2008-05-04 11:19 <REP> d-------- C:\WINDOWS\VistaMizer
2008-05-03 22:54 . 2008-05-03 22:54 6,764 --a------ C:\WINDOWS\system32\spupdsvc.inf
2008-05-03 22:42 . 2008-04-13 19:02 4,067,328 --a--c--- C:\WINDOWS\system32\dllcache\wmploc.dll
2008-05-03 22:40 . 2008-04-13 09:36 144,384 --------- C:\WINDOWS\system32\drivers\hdaudbus.sys
2008-05-03 22:40 . 2008-04-13 11:40 10,240 --------- C:\WINDOWS\system32\drivers\sffp_mmc.sys
2008-04-30 12:15 . 2008-04-30 12:15 <REP> dr-h----- C:\Documents and Settings\Propriétaire\Application Data\SecuROM
2008-04-30 12:15 . 2008-04-30 12:15 107,888 --a------ C:\WINDOWS\system32\CmdLineExt.dll
2008-04-23 15:36 . 2006-11-29 13:06 3,426,072 --a------ C:\WINDOWS\system32\d3dx9_32.dll
2008-04-23 15:35 . 2008-04-23 15:35 <REP> d-------- C:\Program Files\Microsoft SQL Server Compact Edition
2008-04-23 15:35 . 2008-04-23 15:35 <REP> d-------- C:\Documents and Settings\Propriétaire\Contacts
2008-04-23 15:35 . 2008-04-23 15:35 <REP> d-------- C:\Documents and Settings\Propriétaire\Contacts
2008-04-23 15:27 . 2008-04-23 15:30 <REP> d-------- C:\Documents and Settings\Propriétaire\Application Data\MSN6
2008-04-23 15:27 . 2008-04-23 15:27 <REP> d-------- C:\Documents and Settings\All Users\Application Data\MSN6
2008-04-23 15:25 . 2008-04-25 23:46 <REP> d-------- C:\Program Files\Windows Live
2008-04-23 15:25 . 2008-04-23 15:32 <REP> d--hsc--- C:\Program Files\Fichiers communs\WindowsLiveInstaller
2008-04-23 15:25 . 2008-04-23 15:31 <REP> d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller
2008-04-18 20:44 . 2008-04-26 23:06 156 --a------ C:\WINDOWS\Twunk001.MTX
2008-04-18 20:44 . 2008-04-26 23:06 3 --a------ C:\WINDOWS\Twain001.Mtx
2008-04-18 20:44 . 2008-04-18 20:44 0 --a------ C:\WINDOWS\Twunk002.MTX
2008-04-18 20:43 . 2008-04-18 20:43 <REP> d-------- C:\Documents and Settings\Propriétaire\Application Data\Thinstall
2008-04-14 21:04 . 2008-05-04 21:00 <REP> d-------- C:\Documents and Settings\Propriétaire\Application Data\foobar2000
2008-04-13 19:10 . 2008-04-13 19:10 2,524 --------- C:\WINDOWS\system32\pid.inf
2008-04-13 16:45 . 2008-04-13 16:45 <REP> d-------- C:\Documents and Settings\Filmy\fotki
2008-04-13 16:45 . 2008-04-13 16:45 <REP> d-------- C:\Documents and Settings\Filmy
2008-04-12 20:40 . 2008-04-25 23:42 747 --a------ C:\WINDOWS\imsins.BAK
2008-04-12 11:10 . 2008-04-12 11:10 <REP> d-------- C:\Program Files\ESET
2008-04-11 23:45 . 2008-04-11 23:45 <REP> d-------- C:\Program Files\Ontrack
2008-04-11 21:16 . 2008-04-11 21:16 <REP> d-------- C:\Program Files\Smart Projects

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-05-04 09:27 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
2008-05-04 09:19 219,648 ----a-w C:\WINDOWS\system32\uxtheme.dll
2008-05-03 20:57 96,384 ----a-w C:\WINDOWS\system32\drivers\sptd0413.sys
2008-05-02 08:54 --------- d-----w C:\Program Files\Mozilla Thunderbird
2008-05-01 11:20 --------- d-----w C:\Program Files\a-squared Free
2008-04-30 10:13 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-04-25 18:32 --------- d-----w C:\Documents and Settings\All Users\Application Data\Microsoft Help
2008-04-18 18:44 --------- d-----w C:\Program Files\Fichiers communs\Adobe
2008-04-17 08:31 --------- d-----w C:\Program Files\Opera
2008-04-16 17:25 --------- d-----w C:\Documents and Settings\Propriétaire\Application Data\AdobeUM
2008-04-13 17:50 1,804 ----a-w C:\WINDOWS\system32\dcache.bin
2008-04-13 17:33 989,696 ----a-w C:\WINDOWS\system32\netplwiz.dll
2008-04-13 17:32 61,471 ----a-w C:\WINDOWS\system32\odbcji32.dll
2008-04-13 17:32 5,632 ----a-w C:\WINDOWS\system32\wmi.dll
2008-04-13 17:32 3,962,880 ----a-w C:\WINDOWS\system32\winntbbu.dll
2008-04-13 17:10 73,600 ----a-w C:\WINDOWS\system32\drivers\sr.sys
2008-04-13 17:09 80,384 ----a-w C:\WINDOWS\system32\drivers\parport.sys
2008-04-13 17:09 68,608 ----a-w C:\WINDOWS\system32\drivers\pci.sys
2008-04-13 17:09 46,848 ----a-w C:\WINDOWS\system32\drivers\p3.sys
2008-04-13 17:09 120,576 ----a-w C:\WINDOWS\system32\drivers\pcmcia.sys
2008-04-13 17:07 2,406,912 ----a-w C:\WINDOWS\system32\ntoskrnl.exe
2008-04-13 17:07 2,285,568 ----a-w C:\WINDOWS\system32\ntkrnlpa.exe
2008-04-13 17:06 4,096 ----a-w C:\WINDOWS\system32\dsprpres.dll
2008-04-13 17:05 800,256 ----a-w C:\WINDOWS\system32\drivers\dmboot.sys
2008-04-13 17:05 25,216 ----a-w C:\WINDOWS\system32\drivers\kbdclass.sys
2008-04-13 17:05 154,496 ----a-w C:\WINDOWS\system32\drivers\dmio.sys
2008-04-13 17:05 14,720 ----a-w C:\WINDOWS\system32\drivers\kbdhid.sys
2008-04-13 17:04 93,184 ------w C:\WINDOWS\system32\msxml6r.dll
2008-04-13 17:04 37,632 ----a-w C:\WINDOWS\system32\drivers\isapnp.sys
2008-04-13 17:03 81,920 ------w C:\WINDOWS\system32\msshavmsg.dll
2008-04-13 17:03 40,576 ----a-r C:\WINDOWS\system32\drivers\intelppm.sys
2008-04-13 17:02 99,840 ----a-w C:\WINDOWS\system32\inetres.dll
2008-04-13 17:02 40,960 ----a-w C:\WINDOWS\system32\drivers\crusoe.sys
2008-04-13 17:02 4,067,328 ----a-w C:\WINDOWS\system32\wmploc.dll
2008-04-13 17:01 650,240 ----a-w C:\WINDOWS\system32\shdoclc.dll
2008-04-13 17:00 66,048 ----a-w C:\WINDOWS\system32\drivers\serial.sys
2008-04-13 17:00 54,144 ----a-w C:\WINDOWS\system32\drivers\i8042prt.sys
2008-04-13 16:59 25,856 ------w C:\WINDOWS\system32\drivers\hidbth.sys
2008-04-13 16:59 200,704 ------w C:\WINDOWS\system32\wmerror.dll
2008-04-13 16:59 10,240 ----a-w C:\WINDOWS\system32\gpkrsrc.dll
2008-04-13 16:58 273,664 ------w C:\WINDOWS\system32\drivers\bthport.sys
2008-04-13 16:58 2,957,312 ----a-w C:\WINDOWS\system32\winbrand.dll
2008-04-13 16:58 1,845,760 ----a-w C:\WINDOWS\system32\win32k.sys
2008-04-13 16:57 70,144 ----a-w C:\WINDOWS\system32\browselc.dll
2008-04-13 16:57 58,752 ----a-w C:\WINDOWS\system32\drivers\redbook.sys
2008-04-13 16:57 44,672 ----a-w C:\WINDOWS\system32\drivers\fips.sys
2008-04-13 16:56 57,344 ----a-w C:\WINDOWS\system32\mshtmler.dll
2008-04-13 16:56 53,376 ----a-w C:\WINDOWS\system32\drivers\volsnap.sys
2008-04-13 16:55 8,704 ----a-w C:\WINDOWS\system32\asferror.dll
2008-04-13 16:55 40,064 ----a-w C:\WINDOWS\system32\drivers\processr.sys
2008-04-13 16:54 41,856 ----a-w C:\WINDOWS\system32\drivers\amdk7.sys
2008-04-13 16:54 41,472 ----a-w C:\WINDOWS\system32\drivers\amdk6.sys
2008-04-13 16:54 103,936 ----a-w C:\WINDOWS\system32\dpcdll.dll
2008-04-13 16:53 30,336 ----a-w C:\WINDOWS\system32\drivers\modem.sys
2008-04-13 16:53 23,680 ----a-w C:\WINDOWS\system32\drivers\mouclass.sys
2008-04-13 16:52 188,672 ----a-w C:\WINDOWS\system32\drivers\acpi.sys
2008-04-13 10:28 175,744 ----a-w C:\WINDOWS\system32\drivers\rdbss.sys
2008-04-13 10:21 162,816 ----a-w C:\WINDOWS\system32\drivers\netbt.sys
2008-04-13 10:20 91,520 ----a-w C:\WINDOWS\system32\drivers\ndiswan.sys
2008-04-13 10:20 361,344 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys
2008-04-13 10:20 182,656 ----a-w C:\WINDOWS\system32\drivers\ndis.sys
2008-04-13 10:19 75,264 ----a-w C:\WINDOWS\system32\drivers\ipsec.sys
2008-04-13 10:19 51,328 ----a-w C:\WINDOWS\system32\drivers\rasl2tp.sys
2008-04-13 10:19 48,384 ----a-w C:\WINDOWS\system32\drivers\raspptp.sys
2008-04-13 10:19 146,048 ----a-w C:\WINDOWS\system32\drivers\portcls.sys
2008-04-13 10:19 138,112 ----a-w C:\WINDOWS\system32\drivers\afd.sys
2008-04-13 10:17 83,072 ----a-w C:\WINDOWS\system32\drivers\wdmaud.sys
2008-04-13 10:17 456,576 ----a-w C:\WINDOWS\system32\drivers\mrxsmb.sys
2008-04-13 10:17 105,344 ----a-w C:\WINDOWS\system32\drivers\mup.sys
2008-04-13 10:16 49,536 ----a-w C:\WINDOWS\system32\drivers\classpnp.sys
2008-04-13 10:16 141,056 ----a-w C:\WINDOWS\system32\drivers\ks.sys
2008-04-13 10:15 60,800 ----a-w C:\WINDOWS\system32\drivers\sysaudio.sys
2008-04-13 10:15 574,976 ----a-w C:\WINDOWS\system32\drivers\ntfs.sys
2008-04-13 10:15 334,848 ----a-w C:\WINDOWS\system32\drivers\srv.sys
2008-04-13 10:14 63,744 ----a-w C:\WINDOWS\system32\drivers\cdfs.sys
2008-04-13 10:14 143,744 ----a-w C:\WINDOWS\system32\drivers\fastfat.sys
2008-04-13 10:00 225,664 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys
2008-04-13 10:00 19,072 ----a-w C:\WINDOWS\system32\drivers\tdi.sys
2008-04-13 09:57 41,472 ----a-w C:\WINDOWS\system32\drivers\raspppoe.sys
2008-04-13 09:57 40,576 ----a-w C:\WINDOWS\system32\drivers\ndproxy.sys
2008-04-13 09:57 34,560 ----a-w C:\WINDOWS\system32\drivers\wanarp.sys
2008-04-13 09:57 20,864 ----a-w C:\WINDOWS\system32\drivers\ipinip.sys
2008-04-13 09:57 152,832 ----a-w C:\WINDOWS\system32\drivers\ipnat.sys
2008-04-13 09:57 14,336 ----a-w C:\WINDOWS\system32\drivers\asyncmac.sys
2008-04-13 09:57 10,112 ----a-w C:\WINDOWS\system32\drivers\ndistapi.sys
2008-04-13 09:56 88,320 ----a-w C:\WINDOWS\system32\drivers\nwlnkipx.sys
2008-04-13 09:56 69,120 ----a-w C:\WINDOWS\system32\drivers\psched.sys
2008-04-13 09:56 35,072 ----a-w C:\WINDOWS\system32\drivers\msgpc.sys
2008-04-13 09:56 34,688 ----a-w C:\WINDOWS\system32\drivers\netbios.sys
2008-04-13 09:56 30,592 ----a-w C:\WINDOWS\system32\drivers\rndismp.sys
2008-04-13 09:56 30,592 ------w C:\WINDOWS\system32\drivers\rndismpx.sys
2008-04-13 09:56 14,592 ----a-w C:\WINDOWS\system32\drivers\ndisuio.sys
2008-04-13 09:56 12,800 ----a-w C:\WINDOWS\system32\drivers\usb8023.sys
2008-04-13 09:56 12,800 ------w C:\WINDOWS\system32\drivers\usb8023x.sys
2008-04-13 09:56 12,288 ----a-w C:\WINDOWS\system32\drivers\tunmp.sys
2008-04-13 09:55 202,624 ----a-w C:\WINDOWS\system32\drivers\rmcast.sys
2008-04-13 09:54 11,264 ----a-w C:\WINDOWS\system32\drivers\irenum.sys
2008-04-13 09:53 71,552 ----a-w C:\WINDOWS\system32\drivers\bridge.sys
2008-04-13 09:53 40,320 ----a-w C:\WINDOWS\system32\drivers\nmnt.sys
2008-04-13 09:53 36,608 ------w C:\WINDOWS\system32\drivers\ip6fw.sys
2007-08-28 11:54 237,568 ----a-w C:\Program Files\mozilla firefox\plugins\CrazyTalk4Native.dll
2006-05-25 16:43 204,895 ----a-w C:\Program Files\mozilla firefox\plugins\ctdomemhelper.dll
2005-09-29 12:41 77,824 ----a-w C:\Program Files\mozilla firefox\plugins\ctframeplayerobject.dll
2006-06-19 11:10 426,081 ----a-w C:\Program Files\mozilla firefox\plugins\ctplayerobject.dll
2005-02-02 10:19 458,752 ----a-w C:\Program Files\mozilla firefox\plugins\imagickrt.dll
2006-04-10 16:35 139,264 ----a-w C:\Program Files\mozilla firefox\plugins\rlcontentclass.dll
2005-11-09 09:10 204,800 ----a-w C:\Program Files\mozilla firefox\plugins\RLMusicPacker.dll
2005-11-09 09:42 106,496 ----a-w C:\Program Files\mozilla firefox\plugins\RLMusicUnpacker.dll
2006-01-04 09:22 212,992 ----a-w C:\Program Files\mozilla firefox\plugins\RLVoicePacker.dll
2006-01-04 09:21 167,936 ----a-w C:\Program Files\mozilla firefox\plugins\RLVoiceUnpacker.dll
.

------- Sigcheck -------

2007-06-26 16:36 669696 19058fbdc72f7bae085369c6d0a7d074 C:\WINDOWS\$hf_mig$\KB937143\SP2QFE\wininet.dll
2007-08-22 14:57 669696 4f6a45b54d26708e2c2bf2c43d83edea C:\WINDOWS\$hf_mig$\KB939653\SP2QFE\wininet.dll
2007-10-11 07:59 670208 0465cde31add22f6233ffb4fe4af01cf C:\WINDOWS\$hf_mig$\KB942615\SP2QFE\wininet.dll
2007-12-07 02:47 670208 c057d734b1951393fd07e2607513d4d9 C:\WINDOWS\$hf_mig$\KB944533\SP2QFE\wininet.dll
2008-02-16 11:32 670208 dcb8a9f102663d962be60cde38a6c1d7 C:\WINDOWS\$hf_mig$\KB947864\SP2QFE\wininet.dll
2008-02-16 11:02 663552 c9218cd3cd93586ffe9ae789282cae63 C:\WINDOWS\$NtServicePackUninstall$\wininet.dll
2008-04-13 19:33 815104 7d74d9952299acb059e63f7894533cc9 C:\WINDOWS\ServicePackFiles\i386\wininet.dll
2008-04-13 19:33 815104 7d74d9952299acb059e63f7894533cc9 C:\WINDOWS\system32\wininet.dll
2008-04-13 19:33 670208 4a6e04ea20f48d750d9bfed8600d516b C:\WINDOWS\VistaMizer\old\wininet.dll

2004-08-19 16:10 546304 43ebd7d863968dcaca9627e7605c4770 C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe
2008-04-13 19:34 551424 917c64008889003e6ea19cf0793cbd72 C:\WINDOWS\ServicePackFiles\i386\winlogon.exe
2008-04-13 19:34 551424 917c64008889003e6ea19cf0793cbd72 C:\WINDOWS\system32\winlogon.exe
2008-04-13 19:34 512000 dd73d6b9f6b4cb630cf35b438b540174 C:\WINDOWS\VistaMizer\old\winlogon.exe

2005-03-02 20:13 2059008 5311776074b6c13f983dc75baeac9c0c C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrnlpa.exe
2007-02-28 18:08 2061440 7a56a64eb50399613587e90292dd2aab C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntkrnlpa.exe
2007-02-28 18:02 2277376 15bd9df7dc2097f6544330044082f3a3 C:\WINDOWS\$NtServicePackUninstall$\ntkrnlpa.exe
2008-04-13 19:07 2285568 0c62a5263d2630b568572e7d0335179f C:\WINDOWS\ServicePackFiles\i386\ntkrnlpa.exe
2008-04-13 19:07 2285568 0c62a5263d2630b568572e7d0335179f C:\WINDOWS\system32\ntkrnlpa.exe
2008-04-13 19:07 2025984 92e82482cdb39929cf7b541a9648afae C:\WINDOWS\VistaMizer\old\ntkrnlpa.exe

2005-03-02 20:13 2181632 3e2a0a4a0c0b19fc113618a9562a3b2a C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe
2007-02-28 18:08 2184192 8e244108562e0e452eb68dff64cb08a9 C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe
2007-02-28 18:02 2397696 21806df4a98ad52fc13cd2c7c407dfdf C:\WINDOWS\$NtServicePackUninstall$\ntoskrnl.exe
2008-04-13 19:07 2406912 c85a9a142bdd8d7a37de6374d2b60211 C:\WINDOWS\ServicePackFiles\i386\ntoskrnl.exe
2008-04-13 19:07 2406912 c85a9a142bdd8d7a37de6374d2b60211 C:\WINDOWS\system32\ntoskrnl.exe
2008-04-13 19:07 2147328 b10c36956eb7a8b1586dbe3b43875280 C:\WINDOWS\VistaMizer\old\ntoskrnl.exe

2008-04-13 19:34 1556480 74a07b313ca2490601c9b756ba0b7a17 C:\WINDOWS\explorer.exe
2007-06-13 15:10 1037312 b795475444d6d57a572c14b9e1a29839 C:\WINDOWS\$hf_mig$\KB938828\SP2QFE\explorer.exe
2007-11-24 19:24 1555968 b9dd2a11ec8414088970c8c46a2e6668 C:\WINDOWS\$NtServicePackUninstall$\explorer.exe
2008-04-13 19:34 1556480 74a07b313ca2490601c9b756ba0b7a17 C:\WINDOWS\ServicePackFiles\i386\explorer.exe
2008-04-13 19:34 1037824 f2317622d29f9ff0f88aeecd5f60f0dd C:\WINDOWS\VistaMizer\old\explorer.exe

2004-08-19 16:09 25088 a1ed191b1274f29c5b7e452624b7f876 C:\WINDOWS\$NtServicePackUninstall$\ctfmon.exe
2008-04-13 19:34 25088 6f88a39fd32bf0be9d0bc0fd4090e9eb C:\WINDOWS\ServicePackFiles\i386\ctfmon.exe
2008-04-13 19:34 25088 6f88a39fd32bf0be9d0bc0fd4090e9eb C:\WINDOWS\system32\ctfmon.exe
2008-04-13 19:34 15360 59dc5bb82e4c8e0b3eadcfdbc44ba6e4 C:\WINDOWS\VistaMizer\old\ctfmon.exe
.
((((((((((((((((((((((((((((( snapshot@2008-05-04_ 0.05.52,29 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-05-03 20:58:36 2,048 --s-a-w C:\WINDOWS\bootstat.dat
+ 2008-05-04 17:20:59 2,048 --s-a-w C:\WINDOWS\bootstat.dat
- 2008-04-13 17:34:08 10,752 ----a-w C:\WINDOWS\hh.exe
+ 2005-05-26 23:22:01 20,992 ----a-w C:\WINDOWS\hh.exe
- 2008-04-13 17:33:20 42,496 ----a-w C:\WINDOWS\msagent\agentdp2.dll
+ 2008-04-13 17:33:20 67,072 ----a-w C:\WINDOWS\msagent\agentdp2.dll
- 2008-04-13 17:33:20 57,344 ----a-w C:\WINDOWS\msagent\agentdpv.dll
+ 2008-04-13 17:33:20 81,408 ----a-w C:\WINDOWS\msagent\agentdpv.dll
- 2008-04-13 17:33:54 256,512 ----a-w C:\WINDOWS\msagent\agentsvr.exe
+ 2008-04-13 17:33:54 297,984 ----a-w C:\WINDOWS\msagent\agentsvr.exe
- 2008-04-13 09:53:34 558,080 ------w C:\WINDOWS\network diagnostic\xpnetdiag.exe
+ 2008-04-13 09:53:34 560,640 ----a-w C:\WINDOWS\network diagnostic\xpnetdiag.exe
- 2008-04-13 17:34:08 769,024 ----a-w C:\WINDOWS\PCHealth\HelpCtr\Binaries\helpctr.exe
+ 2008-04-13 17:34:08 742,400 ----a-w C:\WINDOWS\PCHealth\HelpCtr\Binaries\helpctr.exe
- 2008-04-13 17:34:14 172,544 ----a-w C:\WINDOWS\PCHealth\HelpCtr\Binaries\msconfig.exe
+ 2008-04-13 17:34:14 196,608 ----a-w C:\WINDOWS\PCHealth\HelpCtr\Binaries\msconfig.exe
- 2008-04-13 17:34:20 153,088 ----a-w C:\WINDOWS\regedit.exe
+ 2008-04-13 17:34:20 273,920 ----a-w C:\WINDOWS\regedit.exe
- 2008-04-13 17:33:54 190,464 ----a-w C:\WINDOWS\ServicePackFiles\i386\accwiz.exe
+ 2008-04-13 17:33:54 192,512 ----a-w C:\WINDOWS\ServicePackFiles\i386\accwiz.exe
- 2008-04-13 17:33:20 61,440 ----a-w C:\WINDOWS\ServicePackFiles\i386\admparse.dll
+ 2008-04-13 17:33:20 94,208 ----a-w C:\WINDOWS\ServicePackFiles\i386\admparse.dll
- 2008-04-13 17:33:20 42,496 ----a-w C:\WINDOWS\ServicePackFiles\i386\agentdp2.dll
+ 2008-04-13 17:33:20 67,072 ----a-w C:\WINDOWS\ServicePackFiles\i386\agentdp2.dll
- 2008-04-13 17:33:20 57,344 ----a-w C:\WINDOWS\ServicePackFiles\i386\agentdpv.dll
+ 2008-04-13 17:33:20 81,408 ----a-w C:\WINDOWS\ServicePackFiles\i386\agentdpv.dll
- 2008-04-13 17:33:54 256,512 ----a-w C:\WINDOWS\ServicePackFiles\i386\agentsvr.exe
+ 2008-04-13 17:33:54 297,984 ----a-w C:\WINDOWS\ServicePackFiles\i386\agentsvr.exe
- 2008-04-13 17:33:54 98,304 ----a-w C:\WINDOWS\ServicePackFiles\i386\ahui.exe
+ 2008-04-13 17:33:54 84,480 ----a-w C:\WINDOWS\ServicePackFiles\i386\ahui.exe
- 2008-04-13 17:33:20 29,184 ----a-w C:\WINDOWS\ServicePackFiles\i386\batmeter.dll
+ 2008-04-13 17:33:20 38,400 ----a-w C:\WINDOWS\ServicePackFiles\i386\batmeter.dll
- 2008-04-13 17:33:20 8,704 ----a-w C:\WINDOWS\ServicePackFiles\i386\batt.dll
+ 2008-04-13 17:33:20 33,280 ----a-w C:\WINDOWS\ServicePackFiles\i386\batt.dll
- 2008-04-13 17:33:22 1,025,024 ----a-w C:\WINDOWS\ServicePackFiles\i386\browseui.dll
+ 2008-04-13 17:33:22 1,053,696 ----a-w C:\WINDOWS\ServicePackFiles\i386\browseui.dll
- 2008-04-13 17:33:22 20,992 ----a-w C:\WINDOWS\ServicePackFiles\i386\bthci.dll
+ 2008-04-13 17:33:22 45,056 ----a-w C:\WINDOWS\ServicePackFiles\i386\bthci.dll
- 2008-04-13 17:33:22 85,504 ----a-w C:\WINDOWS\ServicePackFiles\i386\cabview.dll
+ 2008-04-13 17:33:22 90,112 ----a-w C:\WINDOWS\ServicePackFiles\i386\cabview.dll
- 2008-04-13 17:33:22 153,600 ------w C:\WINDOWS\ServicePackFiles\i386\capesnpn.dll
+ 2008-04-13 17:33:22 224,768 ----a-w C:\WINDOWS\ServicePackFiles\i386\capesnpn.dll
- 2008-04-13 17:33:22 152,064 ----a-w C:\WINDOWS\ServicePackFiles\i386\cdfview.dll
+ 2008-04-13 17:33:22 451,072 ----a-w C:\WINDOWS\ServicePackFiles\i386\cdfview.dll
- 2008-04-13 17:33:22 467,968 ----a-w C:\WINDOWS\ServicePackFiles\i386\certmgr.dll
+ 2008-04-13 17:33:22 1,224,192 ----a-w C:\WINDOWS\ServicePackFiles\i386\certmgr.dll
- 2008-04-13 17:33:58 65,536 ----a-w C:\WINDOWS\ServicePackFiles\i386\cleanmgr.exe
+ 2008-04-13 17:33:58 113,152 ----a-w C:\WINDOWS\ServicePackFiles\i386\cleanmgr.exe
- 2008-04-13 17:33:58 20,480 ----a-w C:\WINDOWS\ServicePackFiles\i386\cliconfg.exe
+ 2008-04-13 17:33:58 45,056 ----a-w C:\WINDOWS\ServicePackFiles\i386\cliconfg.exe
- 2008-04-13 17:33:58 104,448 ----a-w C:\WINDOWS\ServicePackFiles\i386\clipbrd.exe
+ 2008-04-13 17:33:58 188,928 ----a-w C:\WINDOWS\ServicePackFiles\i386\clipbrd.exe
- 2008-04-13 17:33:58 33,280 ----a-w C:\WINDOWS\ServicePackFiles\i386\clipsrv.exe
+ 2008-04-13 17:33:58 43,008 ----a-w C:\WINDOWS\ServicePackFiles\i386\clipsrv.exe
- 2008-04-13 17:33:58 401,408 ----a-w C:\WINDOWS\ServicePackFiles\i386\cmd.exe
+ 2008-04-13 17:33:58 402,944 ----a-w C:\WINDOWS\ServicePackFiles\i386\cmd.exe
- 2008-04-13 17:33:22 353,280 ----a-w C:\WINDOWS\ServicePackFiles\i386\cmdial32.dll
+ 2008-04-13 17:33:22 524,800 ----a-w C:\WINDOWS\ServicePackFiles\i386\cmdial32.dll
- 2008-04-13 17:33:58 25,600 ----a-w C:\WINDOWS\ServicePackFiles\i386\cmdl32.exe
+ 2008-04-13 17:33:58 48,640 ----a-w C:\WINDOWS\ServicePackFiles\i386\cmdl32.exe
- 2008-04-13 17:33:58 39,936 ----a-w C:\WINDOWS\ServicePackFiles\i386\cmmon32.exe
+ 2008-04-13 17:33:58 54,784 ----a-w C:\WINDOWS\ServicePackFiles\i386\cmmon32.exe
- 2008-04-13 17:33:22 191,488 ----a-w C:\WINDOWS\ServicePackFiles\i386\cmprops.dll
+ 2008-04-13 17:33:22 296,448 ----a-w C:\WINDOWS\ServicePackFiles\i386\cmprops.dll
- 2008-04-13 17:33:58 65,536 ----a-w C:\WINDOWS\ServicePackFiles\i386\cmstp.exe
+ 2008-04-13 17:33:58 79,872 ----a-w C:\WINDOWS\ServicePackFiles\i386\cmstp.exe
- 2008-04-13 17:33:22 617,472 ----a-w C:\WINDOWS\ServicePackFiles\i386\comctl32.dll
+ 2008-04-13 17:33:22 724,992 ----a-w C:\WINDOWS\ServicePackFiles\i386\comctl32.dll
- 2008-04-13 17:33:22 281,600 ----a-w C:\WINDOWS\ServicePackFiles\i386\comdlg32.dll
+ 2008-04-13 17:33:22 346,112 ----a-w C:\WINDOWS\ServicePackFiles\i386\comdlg32.dll
- 2008-04-13 17:33:22 253,440 ----a-w C:\WINDOWS\ServicePackFiles\i386\compatui.dll
+ 2004-08-19 14:09:22 407,552 ----a-w C:\WINDOWS\ServicePackFiles\i386\compatui.dll
- 2008-04-13 17:33:22 230,912 ----a-w C:\WINDOWS\ServicePackFiles\i386\compstui.dll
+ 2008-04-13 17:33:22 1,735,680 ----a-w C:\WINDOWS\ServicePackFiles\i386\compstui.dll
- 2008-04-13 17:33:22 851,968 ----a-w C:\WINDOWS\ServicePackFiles\i386\comres.dll
+ 2008-04-13 17:33:22 1,450,496 ----a-w C:\WINDOWS\ServicePackFiles\i386\comres.dll
- 2008-04-13 17:34:00 1,044,480 ----a-w C:\WINDOWS\ServicePackFiles\i386\conf.exe
+ 2008-04-13 17:34:00 1,912,832 ----a-w C:\WINDOWS\ServicePackFiles\i386\conf.exe
- 2008-04-13 17:34:00 27,648 ----a-w C:\WINDOWS\ServicePackFiles\i386\conime.exe
+ 2008-04-13 17:34:00 52,224 ----a-w C:\WINDOWS\ServicePackFiles\i386\conime.exe
- 2008-04-13 17:33:22 165,888 ----a-w C:\WINDOWS\ServicePackFiles\i386\credui.dll
+ 2008-04-13 17:33:22 190,976 ----a-w C:\WINDOWS\ServicePackFiles\i386\credui.dll
- 2008-04-13 17:33:22 530,432 ----a-w C:\WINDOWS\ServicePackFiles\i386\cryptui.dll
+ 2008-04-13 17:33:22 1,132,544 ----a-w C:\WINDOWS\ServicePackFiles\i386\cryptui.dll
- 2008-04-13 17:33:22 102,912 ----a-w C:\WINDOWS\ServicePackFiles\i386\cscdll.dll
+ 2008-04-13 17:33:22 302,592 ----a-w C:\WINDOWS\ServicePackFiles\i386\cscdll.dll
- 2008-04-13 17:34:00 139,264 ----a-w C:\WINDOWS\ServicePackFiles\i386\cscript.exe
+ 2008-04-13 17:34:00 163,840 ----a-w C:\WINDOWS\ServicePackFiles\i386\cscript.exe
- 2008-04-13 17:33:22 337,920 ----a-w C:\WINDOWS\ServicePackFiles\i386\cscui.dll
+ 2008-04-13 17:33:22 1,062,400 ----a-w C:\WINDOWS\ServicePackFiles\i386\cscui.dll
- 2008-04-13 17:33:24 55,296 ----a-w C:\WINDOWS\ServicePackFiles\i386\dataclen.dll
+ 2008-04-13 17:33:24 115,712 ----a-w C:\WINDOWS\ServicePackFiles\i386\dataclen.dll
- 2008-04-13 17:34:00 31,744 ----a-w C:\WINDOWS\ServicePackFiles\i386\ddeshare.exe
+ 2008-04-13 17:34:00 105,472 ----a-w C:\WINDOWS\ServicePackFiles\i386\ddeshare.exe
- 2008-04-13 17:33:24 290,816 ----a-w C:\WINDOWS\ServicePackFiles\i386\devmgr.dll
+ 2008-04-13 17:33:24 392,704 ----a-w C:\WINDOWS\ServicePackFiles\i386\devmgr.dll
- 2008-04-13 17:33:24 124,416 ----a-w C:\WINDOWS\ServicePackFiles\i386\dfrgui.dll
+ 2008-04-13 17:33:24 173,056 ----a-w C:\WINDOWS\ServicePackFiles\i386\dfrgui.dll
- 2008-04-13 17:34:00 548,352 ----a-w C:\WINDOWS\ServicePackFiles\i386\dialer.exe
+ 2008-04-13 17:34:00 622,592 ----a-w C:\WINDOWS\ServicePackFiles\i386\dialer.exe
- 2008-04-13 17:33:24 68,608 ----a-w C:\WINDOWS\ServicePackFiles\i386\digest.dll
+ 2008-04-13 17:33:24 93,184 ----a-w C:\WINDOWS\ServicePackFiles\i386\digest.dll
- 2008-04-13 17:33:24 1,504,768 ------w C:\WINDOWS\ServicePackFiles\i386\diskcopy.dll
+ 2008-04-13 17:33:24 1,529,344 ----a-w C:\WINDOWS\ServicePackFiles\i386\diskcopy.dll
- 2008-04-13 17:33:24 285,184 ------w C:\WINDOWS\ServicePackFiles\i386\dmdlgs.dll
+ 2008-04-13 17:33:24 385,024 ----a-w C:\WINDOWS\ServicePackFiles\i386\dmdlgs.dll
- 2008-04-13 17:33:24 24,064 ----a-w C:\WINDOWS\ServicePackFiles\i386\dpmodemx.dll
+ 2008-04-13 17:33:24 48,128 ----a-w C:\WINDOWS\ServicePackFiles\i386\dpmodemx.dll
- 2008-04-13 17:33:24 213,504 ----a-w C:\WINDOWS\ServicePackFiles\i386\dpvoice.dll
+ 2008-04-13 17:33:24 262,656 ----a-w C:\WINDOWS\ServicePackFiles\i386\dpvoice.dll
- 2008-04-13 17:33:24 161,280 ------w C:\WINDOWS\ServicePackFiles\i386\dskquoui.dll
+ 2008-04-13 17:33:24 293,376 ----a-w C:\WINDOWS\ServicePackFiles\i386\dskquoui.dll
- 2008-04-13 17:33:24 145,920 ----a-w C:\WINDOWS\ServicePackFiles\i386\dsprop.dll
+ 2008-04-13 17:33:24 195,584 ----a-w C:\WINDOWS\ServicePackFiles\i386\dsprop.dll
- 2008-04-13 17:33:24 240,640 ----a-w C:\WINDOWS\ServicePackFiles\i386\dsquery.dll
+ 2008-04-13 17:33:24 425,984 ----a-w C:\WINDOWS\ServicePackFiles\i386\dsquery.dll
- 2008-04-13 17:33:24 113,664 ----a-w C:\WINDOWS\ServicePackFiles\i386\dsuiext.dll
+ 2008-04-13 17:33:24 775,680 ----a-w C:\WINDOWS\ServicePackFiles\i386\dsuiext.dll
- 2008-04-13 17:33:24 187,392 ----a-w C:\WINDOWS\ServicePackFiles\i386\els.dll
+ 2008-04-13 17:33:24 261,632 ----a-w C:\WINDOWS\ServicePackFiles\i386\els.dll
- 2008-04-13 17:33:26 348,160 ----a-w C:\WINDOWS\ServicePackFiles\i386\filemgmt.dll
+ 2008-04-13 17:33:26 454,144 ----a-w C:\WINDOWS\ServicePackFiles\i386\filemgmt.dll
- 2008-04-13 17:33:26 88,064 ----a-w C:\WINDOWS\ServicePackFiles\i386\fldrclnr.dll
+ 2008-04-13 17:33:26 74,240 ----a-w C:\WINDOWS\ServicePackFiles\i386\fldrclnr.dll
- 2008-04-13 17:33:26 386,560 ----a-w C:\WINDOWS\ServicePackFiles\i386\fontext.dll
+ 2008-04-13 17:33:26 396,288 ----a-w C:\WINDOWS\ServicePackFiles\i386\fontext.dll
- 2008-04-13 17:34:06 193,024 ----a-w C:\WINDOWS\ServicePackFiles\i386\fsquirt.exe
+ 2008-04-13 17:34:06 409,088 ----a-w C:\WINDOWS\ServicePackFiles\i386\fsquirt.exe
- 2008-04-13 17:34:06 39,424 ----a-w C:\WINDOWS\ServicePackFiles\i386\grpconv.exe
+ 2008-04-13 17:34:06 67,072 ----a-w C:\WINDOWS\ServicePackFiles\i386\grpconv.exe
- 2008-04-13 17:34:08 769,024 ----a-w C:\WINDOWS\ServicePackFiles\i386\helpctr.exe
+ 2008-04-13 17:34:08 742,400 ----a-w C:\WINDOWS\ServicePackFiles\i386\helpctr.exe
- 2008-04-13 17:34:08 10,752 ----a-w C:\WINDOWS\ServicePackFiles\i386\hh.exe
+ 2005-05-26 23:22:01 20,992 ----a-w C:\WINDOWS\ServicePackFiles\i386\hh.exe
- 2008-04-13 17:33:28 38,912 ----a-w C:\WINDOWS\ServicePackFiles\i386\hmmapi.dll
+ 2008-04-13 17:33:28 41,472 ----a-w C:\WINDOWS\ServicePackFiles\i386\hmmapi.dll
- 2008-04-13 17:33:28 347,136 ----a-w C:\WINDOWS\ServicePackFiles\i386\hnetcfg.dll
+ 2008-04-13 17:33:28 371,712 ----a-w C:\WINDOWS\ServicePackFiles\i386\hnetcfg.dll
- 2008-04-13 17:33:28 336,384 ----a-w C:\WINDOWS\ServicePackFiles\i386\hnetwiz.dll
+ 2004-08-19 14:09:28 507,904 ----a-w C:\WINDOWS\ServicePackFiles\i386\hnetwiz.dll
- 2008-04-13 17:33:28 146,944 ----a-w C:\WINDOWS\ServicePackFiles\i386\hotplug.dll
+ 2008-04-13 17:33:28 177,664 ----a-w C:\WINDOWS\ServicePackFiles\i386\hotplug.dll
- 2008-04-13 17:34:08 218,624 ----a-w C:\WINDOWS\ServicePackFiles\i386\icwconn1.exe
+ 2008-04-13 17:34:08 258,048 ----a-w C:\WINDOWS\ServicePackFiles\i386\icwconn1.exe
- 2008-04-13 17:34:08 86,016 ----a-w C:\WINDOWS\ServicePackFiles\i386\icwconn2.exe
+ 2008-04-13 17:34:08 110,592 ----a-w C:\WINDOWS\ServicePackFiles\i386\icwconn2.exe
- 2008-04-13 17:33:28 73,728 ----a-w C:\WINDOWS\ServicePackFiles\i386\icwdial.dll
+ 2008-04-13 17:33:28 122,880 ----a-w C:\WINDOWS\ServicePackFiles\i386\icwdial.dll
- 2008-04-13 17:33:28 176,128 ----a-w C:\WINDOWS\ServicePackFiles\i386\icwhelp.dll
+ 2008-04-13 17:33:28 221,184 ----a-w C:\WINDOWS\ServicePackFiles\i386\icwhelp.dll
- 2008-04-13 17:33:28 221,184 ----a-w C:\WINDOWS\ServicePackFiles\i386\ieaksie.dll
+ 2008-04-13 17:33:28 402,432 ----a-w C:\WINDOWS\ServicePackFiles\i386\ieaksie.dll
- 2008-04-13 17:33:28 251,904 ----a-w C:\WINDOWS\ServicePackFiles\i386\iepeers.dll
+ 2008-04-13 17:33:28 264,704 ----a-w C:\WINDOWS\ServicePackFiles\i386\iepeers.dll
- 2008-04-13 17:33:28 49,152 ----a-w C:\WINDOWS\ServicePackFiles\i386\iernonce.dll
+ 2008-04-13 17:33:28 74,240 ----a-w C:\WINDOWS\ServicePackFiles\i386\iernonce.dll
- 2008-04-13 17:33:28 63,488 ----a-w C:\WINDOWS\ServicePackFiles\i386\iesetup.dll
+ 2008-04-13 17:33:28 78,848 ----a-w C:\WINDOWS\ServicePackFiles\i386\iesetup.dll
- 2008-04-13 17:34:08 93,184 ----a-w C:\WINDOWS\ServicePackFiles\i386\iexplore.exe
+ 2008-04-13 17:34:08 468,480 ----a-w C:\WINDOWS\ServicePackFiles\i386\iexplore.exe
- 2008-04-13 17:34:08 114,688 ----a-w C:\WINDOWS\ServicePackFiles\i386\iexpress.exe
+ 2008-04-13 17:34:08 161,280 ----a-w C:\WINDOWS\ServicePackFiles\i386\iexpress.exe
- 2008-04-13 17:33:28 282,624 ----a-w C:\WINDOWS\ServicePackFiles\i386\inetcfg.dll
+ 2008-04-13 17:33:28 425,984 ----a-w C:\WINDOWS\ServicePackFiles\i386\inetcfg.dll
- 2008-04-13 17:33:28 16,384 ----a-w C:\WINDOWS\ServicePackFiles\i386\inetppui.dll
+ 2008-04-13 17:33:28 47,104 ----a-w C:\WINDOWS\ServicePackFiles\i386\inetppui.dll
- 2008-04-13 17:02:56 50,688 ----a-w C:\WINDOWS\ServicePackFiles\i386\inetres.dll
+ 2008-04-13 17:02:56 99,840 ----a-w C:\WINDOWS\ServicePackFiles\i386\inetres.dll
- 2008-04-13 17:34:08 20,480 ----a-w C:\WINDOWS\ServicePackFiles\i386\inetwiz.exe
+ 2008-04-13 17:34:08 45,056 ----a-w C:\WINDOWS\ServicePackFiles\i386\inetwiz.exe
- 2008-04-13 17:33:28 126,464 ----a-w C:\WINDOWS\ServicePackFiles\i386\input.dll
+ 2008-04-13 17:33:28 234,496 ----a-w C:\WINDOWS\ServicePackFiles\i386\input.dll
- 2008-04-13 17:33:28 361,472 ----a-w C:\WINDOWS\ServicePackFiles\i386\ipsecsnp.dll
+ 2008-04-13 17:33:28 436,224 ----a-w C:\WINDOWS\ServicePackFiles\i386\ipsecsnp.dll
- 2008-04-13 17:33:28 388,096 ----a-w C:\WINDOWS\ServicePackFiles\i386\ipsmsnap.dll
+ 2008-04-13 17:33:28 471,040 ----a-w C:\WINDOWS\ServicePackFiles\i386\ipsmsnap.dll
- 2008-04-13 17:34:10 153,088 ----a-w C:\WINDOWS\ServicePackFiles\i386\irftp.exe
+ 2008-04-13 17:34:10 150,016 ----a-w C:\WINDOWS\ServicePackFiles\i386\irftp.exe
- 2008-04-13 17:33:28 86,016 ----a-w C:\WINDOWS\ServicePackFiles\i386\isign32.dll
+ 2008-04-13 17:33:28 159,744 ----a-w C:\WINDOWS\ServicePackFiles\i386\isign32.dll
- 2008-04-13 17:33:28 138,240 ----a-w C:\WINDOWS\ServicePackFiles\i386\itss.dll
+ 2008-04-13 17:33:28 153,600 ----a-w C:\WINDOWS\ServicePackFiles\i386\itss.dll
- 2008-04-13 17:33:30 157,184 ----a-w C:\WINDOWS\ServicePackFiles\i386\keymgr.dll
+ 2008-04-13 17:33:30 231,936 ----a-w C:\WINDOWS\ServicePackFiles\i386\keymgr.dll
- 2008-04-13 17:33:30 228,352 ----a-w C:\WINDOWS\ServicePackFiles\i386\localsec.dll
+ 2008-04-13 17:33:30 496,640 ----a-w C:\WINDOWS\ServicePackFiles\i386\localsec.dll
- 2008-04-13 17:34:10 515,584 ----a-w C:\WINDOWS\ServicePackFiles\i386\logonui.exe
+ 2008-04-13 17:34:10 6,123,008 ----a-w C:\WINDOWS\ServicePackFiles\i386\logonui.exe
- 2008-04-13 17:34:12 73,216 ----a-w C:\WINDOWS\ServicePackFiles\i386\magnify.exe
+ 2008-04-13 17:34:12 59,904 ----a-w C:\WINDOWS\ServicePackFiles\i386\magnify.exe
- 2008-04-13 17:33:30 120,320 ----a-w C:\WINDOWS\ServicePackFiles\i386\mdminst.dll
+ 2008-04-13 17:33:30 163,328 ----a-w C:\WINDOWS\ServicePackFiles\i386\mdminst.dll
- 2008-04-13 17:33:30 18,944 ----a-w C:\WINDOWS\ServicePackFiles\i386\midimap.dll
+ 2008-04-13 17:33:30 42,496 ----a-w C:\WINDOWS\ServicePackFiles\i386\midimap.dll
- 2008-04-13 17:34:12 104,448 ----a-w C:\WINDOWS\ServicePackFiles\i386\migload.exe
+ 2008-04-13 17:34:12 382,464 ----a-w C:\WINDOWS\ServicePackFiles\i386\migload.exe
- 2008-04-13 17:34:12 251,904 ----a-w C:\WINDOWS\ServicePackFiles\i386\migwiz.exe
+ 2008-04-13 17:34:12 603,648 ----a-w C:\WINDOWS\ServicePackFiles\i386\migwiz.exe
- 2004-08-19 14:09:56 343,040 ----a-w C:\WINDOWS\ServicePackFiles\i386\migwiz_a.exe
+ 2004-08-19 14:09:56 594,432 ----a-w C:\WINDOWS\ServicePackFiles\i386\migwiz_a.exe
- 2008-04-13 17:34:12 1,415,680 ----a-w C:\WINDOWS\ServicePackFiles\i386\mmc.exe
+ 2008-04-13 17:34:12 1,519,616 ----a-w C:\WINDOWS\ServicePackFiles\i386\mmc.exe
- 2008-04-13 17:33:30 174,080 ----a-w C:\WINDOWS\ServicePackFiles\i386\mmcbase.dll
+ 2008-04-13 17:33:30 336,896 ----a-w C:\WINDOWS\ServicePackFiles\i386\mmcbase.dll
- 2008-04-13 17:33:32 1,879,040 ----a-w C:\WINDOWS\ServicePackFiles\i386\mmcndmgr.dll
+ 2008-04-13 17:33:32 3,953,664 ----a-w C:\WINDOWS\ServicePackFiles\i386\mmcndmgr.dll
- 2008-04-13 17:33:32 61,440 ----a-w C:\WINDOWS\ServicePackFiles\i386\mmcshext.dll
+ 2008-04-13 17:33:32 85,504 ----a-w C:\WINDOWS\ServicePackFiles\i386\mmcshext.dll
- 2008-04-13 17:34:12 32,768 ----a-w C:\WINDOWS\ServicePackFiles\i386\mnmsrvc.exe
+ 2008-04-13 17:34:12 53,248 ----a-w C:\WINDOWS\ServicePackFiles\i386\mnmsrvc.exe
- 2008-04-13 17:33:32 210,432 ----a-w C:\WINDOWS\ServicePackFiles\i386\mobsync.dll
+ 2008-04-13 17:33:32 372,224 ----a-w C:\WINDOWS\ServicePackFiles\i386\mobsync.dll
- 2008-04-13 17:34:12 143,872 ----a-w C:\WINDOWS\ServicePackFiles\i386\mobsync.exe
+ 2008-04-13 17:34:12 583,680 ----a-w C:\WINDOWS\ServicePackFiles\i386\mobsync.exe
- 2008-04-13 17:33:32 156,160 ----a-w C:\WINDOWS\ServicePackFiles\i386\modemui.dll
+ 2008-04-13 17:33:32 255,488 ----a-w C:\WINDOWS\ServicePackFiles\i386\modemui.dll
- 2008-04-13 07:45:32 216,064 ----a-w C:\WINDOWS\ServicePackFiles\i386\moricons.dll
+ 2008-04-13 07:45:32 497,152 ----a-w C:\WINDOWS\ServicePackFiles\i386\moricons.dll
- 2008-04-13 17:34:14 124,928 ----a-w C:\WINDOWS\ServicePackFiles\i386\mplay32.exe
+ 2008-04-13 17:34:14 269,312 ----a-w C:\WINDOWS\ServicePackFiles\i386\mplay32.exe
- 2004-08-19 14:10:00 29,215 ----a-w C:\WINDOWS\ServicePackFiles\i386\mplayer2.exe
+ 2008-04-13 17:34:14 29,215 ----a-w C:\WINDOWS\ServicePackFiles\i386\mplayer2.exe
- 2008-04-13 17:33:32 69,632 ----a-w C:\WINDOWS\ServicePackFiles\i386\msconf.dll
+ 2008-04-13 17:33:32 106,496 ----a-w C:\WINDOWS\ServicePackFiles\i386\msconf.dll
- 2008-04-13 17:34:14 172,544 ----a-w C:\WINDOWS\ServicePackFiles\i386\msconfig.exe
+ 2008-04-13 17:34:14 196,608 ----a-w C:\WINDOWS\ServicePackFiles\i386\msconfig.exe
- 2008-04-13 17:34:14 6,144 ----a-w C:\WINDOWS\ServicePackFiles\i386\msdtc.exe
+ 2008-04-13 17:34:14 30,720 ----a-w C:\WINDOWS\ServicePackFiles\i386\msdtc.exe
- 2008-04-13 17:33:32 1,007,104 ----a-w C:\WINDOWS\ServicePackFiles\i386\msgina.dll
+ 2008-04-13 17:33:32 3,174,400 ----a-w C:\WINDOWS\ServicePackFiles\i386\msgina.dll
- 2008-04-13 17:33:32 3,166,208 ----a-w C:\WINDOWS\ServicePackFiles\i386\msgr3en.dll
+ 2004-08-19 14:09:34 3,198,976 ----a-w C:\WINDOWS\ServicePackFiles\i386\msgr3en.dll
- 2008-04-13 17:34:14 29,184 ----a-w C:\WINDOWS\ServicePackFiles\i386\mshta.exe
+ 2008-04-13 17:34:14 78,336 ----a-w C:\WINDOWS\ServicePackFiles\i386\mshta.exe
- 2008-04-13 17:33:32 3,066,880 ----a-w C:\WINDOWS\ServicePackFiles\i386\mshtml.dll
+ 2008-04-13 17:33:32 3,459,584 ----a-w C:\WINDOWS\ServicePackFiles\i386\mshtml.dll
- 2008-04-13 17:33:34 2,843,136 ----a-w C:\WINDOWS\ServicePackFiles\i386\msi.dll
+ 2008-04-13 17:33:34 2,893,824 ----a-w C:\WINDOWS\ServicePackFiles\i386\msi.dll
- 2008-04-13 17:33:34 51,712 ----a-w C:\WINDOWS\ServicePackFiles\i386\msident.dll
+ 2008-04-13 17:33:34 73,728 ----a-w C:\WINDOWS\ServicePackFiles\i386\msident.dll
- 2008-04-13 17:33:34 252,416 ----a-w C:\WINDOWS\ServicePackFiles\i386\msieftp.dll
+ 2008-04-13 17:33:34 1,140,224 ----a-w C:\WINDOWS\ServicePackFiles\i386\msieftp.dll
- 2008-04-13 17:34:14 78,848 ----a-w C:\WINDOWS\ServicePackFiles\i386\msiexec.exe
+ 2008-04-13 17:34:14 99,840 ----a-w C:\WINDOWS\ServicePackFiles\i386\msiexec.exe
- 2008-04-13 17:33:34 271,360 ----a-w C:\WINDOWS\ServicePackFiles\i386\msihnd.dll
+ 2008-04-13 17:33:34 911,360 ----a-w C:\WINDOWS\ServicePackFiles\i386\msihnd.dll
- 2008-04-13 17:34:14 60,416 ----a-w C:\WINDOWS\ServicePackFiles\i386\msimn.exe
+ 2008-04-13 17:34:14 124,928 ----a-w C:\WINDOWS\ServicePackFiles\i386\msimn.exe
- 2008-04-13 17:34:14 1,695,232 ------w C:\WINDOWS\ServicePackFiles\i386\msmsgs.exe
+ 2008-04-13 17:34:14 1,826,816 ----a-w C:\WINDOWS\ServicePackFiles\i386\msmsgs.exe
- 2008-04-13 17:33:34 566,272 ----a-w C:\WINDOWS\ServicePackFiles\i386\msobmain.dll
+ 2008-04-13 17:33:34 564,224 ----a-w C:\WINDOWS\ServicePackFiles\i386\msobmain.dll
- 2008-04-13 17:02:36 2,534,400 ----a-w C:\WINDOWS\ServicePackFiles\i386\msoeres.dll
+ 2008-04-13 17:02:36 4,571,648 ----a-w C:\WINDOWS\ServicePackFiles\i386\msoeres.dll
- 2008-04-13 17:34:14 29,184 ------w C:\WINDOWS\ServicePackFiles\i386\msoobe.exe
+ 2008-04-13 17:34:14 31,232 ----a-w C:\WINDOWS\ServicePackFiles\i386\msoobe.exe
- 2008-04-13 17:34:16 347,648 ----a-w C:\WINDOWS\ServicePackFiles\i386\mspaint.exe
+ 2008-04-13 17:34:16 359,936 ----a-w C:\WINDOWS\ServicePackFiles\i386\mspaint.exe
- 2008-04-13 17:33:34 146,432 ----a-w C:\WINDOWS\ServicePackFiles\i386\msrating.dll
+ 2008-04-13 17:33:34 287,232 ----a-w C:\WINDOWS\ServicePackFiles\i386\msrating.dll
- 2008-04-13 17:33:34 281,600 ----a-w C:\WINDOWS\ServicePackFiles\i386\mstask.dll
+ 2008-04-13 17:33:34 322,048 ----a-w C:\WINDOWS\ServicePackFiles\i386\mstask.dll
- 2004-08-19 13:52:00 763,392 ----a-w C:\WINDOWS\ServicePackFiles\i386\mstsc.exe
+ 2008-04-13 17:34:10 667,136 ----a-w C:\WINDOWS\ServicePackFiles\i386\mstsc.exe
- 2008-04-13 17:33:36 506,368 ----a-w C:\WINDOWS\ServicePackFiles\i386\msxml.dll
+ 2004-08-19 14:09:36 547,840 ----a-w C:\WINDOWS\ServicePackFiles\i386\msxml.dll
- 2008-04-13 17:33:36 701,440 ----a-w C:\WINDOWS\ServicePackFiles\i386\msxml2.dll
+ 2004-08-19 14:09:36 742,912 ----a-w C:\WINDOWS\ServicePackFiles\i386\msxml2.dll
- 2008-04-13 17:33:36 1,104,896 ----a-w C:\WINDOWS\ServicePackFiles\i386\msxml3.dll
+ 2007-06-26 06:09:14 1,146,368 ----a-w C:\WINDOWS\ServicePackFiles\i386\msxml3.dll
- 2008-04-13 17:33:36 91,648 ----a-w C:\WINDOWS\ServicePackFiles\i386\mydocs.dll
+ 2008-04-13 17:33:36 81,920 ----a-w C:\WINDOWS\ServicePackFiles\i386\mydocs.dll
- 2008-04-13 17:34:16 55,296 ----a-w C:\WINDOWS\ServicePackFiles\i386\narrator.exe
+ 2008-04-13 17:34:16 57,344 ----a-w C:\WINDOWS\ServicePackFiles\i386\narrator.exe
- 2008-04-13 17:33:36 144,896 ----a-w C:\WINDOWS\ServicePackFiles\i386\netid.dll
+ 2008-04-13 17:33:36 165,376 ----a-w C:\WINDOWS\ServicePackFiles\i386\netid.dll
- 2008-04-13 17:33:36 885,248 ----a-w C:\WINDOWS\ServicePackFiles\i386\netplwiz.dll
+ 2008-04-13 17:33:36 989,696 ----a-w C:\WINDOWS\ServicePackFiles\i386\netplwiz.dll
- 2008-04-13 17:37:12 332,800 ----a-w C:\WINDOWS\ServicePackFiles\i386\netsetup.exe
+ 2004-08-19 14:12:34 638,464 ----a-w C:\WINDOWS\ServicePackFiles\i386\netsetup.exe
- 2008-04-13 17:33:36 1,719,808 ----a-w C:\WINDOWS\ServicePackFiles\i386\netshell.dll
+ 2008-04-13 17:33:36 2,326,016 ----a-w C:\WINDOWS\ServicePackFiles\i386\netshell.dll
- 2008-04-13 17:33:36 250,880 ----a-w C:\WINDOWS\ServicePackFiles\i386\newdev.dll
+ 2008-04-13 17:33:36 638,976 ----a-w C:\WINDOWS\ServicePackFiles\i386\newdev.dll
- 2008-04-13 17:33:38 229,376 ----a-w C:\WINDOWS\ServicePackFiles\i386\nmas.dll
+ 2008-04-13 17:33:38 303,104 ----a-w C:\WINDOWS\ServicePackFiles\i386\nmas.dll
- 2008-04-13 17:33:38 81,920 ----a-w C:\WINDOWS\ServicePackFiles\i386\nmchat.dll
+ 2008-04-13 17:33:38 163,840 ----a-w C:\WINDOWS\ServicePackFiles\i386\nmchat.dll
- 2008-04-13 17:33:38 155,648 ----a-w C:\WINDOWS\ServicePackFiles\i386\nmft.dll
+ 2008-04-13 17:33:38 774,144 ----a-w C:\WINDOWS\ServicePackFiles\i386\nmft.dll
- 2008-04-13 17:33:38 172,032 ----a-w C:\WINDOWS\ServicePackFiles\i386\nmoldwb.dll
+ 2008-04-13 17:33:38 196,608 ----a-w C:\WINDOWS\ServicePackFiles\i386\nmoldwb.dll
- 2008-04-13 17:33:38 192,512 ----a-w C:\WINDOWS\ServicePackFiles\i386\nmwb.dll
+ 2008-04-13 17:33:38 212,992 ----a-w C:\WINDOWS\ServicePackFiles\i386\nmwb.dll
- 2008-04-13 17:34:16 79,360 ----a-w C:\WINDOWS\ServicePackFiles\i386\nslookup.exe
+ 2008-04-13 17:34:16 103,936 ----a-w C:\WINDOWS\ServicePackFiles\i386\nslookup.exe
- 2008-04-13 17:33:38 63,488 ----a-w C:\WINDOWS\ServicePackFiles\i386\ntoc.dll
+ 2008-04-13 17:33:38 88,064 ----a-w C:\WINDOWS\ServicePackFiles\i386\ntoc.dll
- 2008-04-13 17:33:38 145,920 ----a-w C:\WINDOWS\ServicePackFiles\i386\ntshrui.dll
+ 2008-04-13 17:33:38 155,136 ----a-w C:\WINDOWS\ServicePackFiles\i386\ntshrui.dll
- 2008-04-13 17:33:38 289,280 ----a-w C:\WINDOWS\ServicePackFiles\i386\objsel.dll
+ 2008-04-13 17:33:38 454,144 ----a-w C:\WINDOWS\ServicePackFiles\i386\objsel.dll
- 2008-04-13 17:33:40 97,280 ----a-w C:\WINDOWS\ServicePackFiles\i386\occache.dll
+ 2008-04-13 17:33:40 392,704 ----a-w C:\WINDOWS\ServicePackFiles\i386\occache.dll
- 2008-04-13 17:34:18 32,768 ----a-w C:\WINDOWS\ServicePackFiles\i386\odbcad32.exe
+ 2008-04-13 17:34:18 28,672 ----a-w C:\WINDOWS\ServicePackFiles\i386\odbcad32.exe
- 2007-03-28 03:56:44 98,304 ----a-w C:\WINDOWS\ServicePackFiles\i386\odbcint.dll
+ 2004-08-19 14:08:44 221,184 ----a-w C:\WINDOWS\ServicePackFiles\i386\odbcint.dll
- 2008-04-13 17:34:18 60,928 ----a-w C:\WINDOWS\ServicePackFiles\i386\oemig50.exe
+ 2008-04-13 17:34:18 83,456 ----a-w C:\WINDOWS\ServicePackFiles\i386\oemig50.exe
- 2008-04-13 17:33:40 487,424 ----a-w C:\WINDOWS\ServicePackFiles\i386\oledb32.dll
+ 2008-04-13 17:33:40 512,000 ----a-w C:\WINDOWS\ServicePackFiles\i386\oledb32.dll
- 2008-04-13 17:34:18 51,712 ----a-w C:\WINDOWS\ServicePackFiles\i386\oobebaln.exe
+ 2008-04-13 17:34:18 37,888 ----a-w C:\WINDOWS\ServicePackFiles\i386\oobebaln.exe
- 2008-04-13 17:34:18 216,576 ----a-w C:\WINDOWS\ServicePackFiles\i386\osk.exe
+ 2008-04-13 17:34:18 218,112 ----a-w C:\WINDOWS\ServicePackFiles\i386\osk.exe
- 2008-04-13 17:34:18 59,904 ----a-w C:\WINDOWS\ServicePackFiles\i386\packager.exe
+ 2008-04-13 17:34:18 83,968 ----a-w C:\WINDOWS\ServicePackFiles\i386\packager.exe
- 2008-04-13 17:33:40 69,632 ----a-w C:\WINDOWS\ServicePackFiles\i386\pautoenr.dll
+ 2008-04-13 17:33:40 114,176 ----a-w C:\WINDOWS\ServicePackFiles\i386\pautoenr.dll
- 2008-04-13 17:34:18 15,872 ----a-w C:\WINDOWS\ServicePackFiles\i386\perfmon.exe
+ 2008-04-13 17:34:18 32,768 ----a-w C:\WINDOWS\ServicePackFiles\i386\perfmon.exe
- 2008-04-13 17:33:40 172,032 ----a-w C:\WINDOWS\ServicePackFiles\i386\photowiz.dll
+ 2008-04-13 17:33:40 292,864 ----a-w C:\WINDOWS\ServicePackFiles\i386\photowiz.dll
- 2008-04-13 17:33:40 578,560 ----a-w C:\WINDOWS\ServicePackFiles\i386\printui.dll
+ 2008-04-13 17:33:40 838,656 ----a-w C:\WINDOWS\ServicePackFiles\i386\printui.dll
- 2008-04-13 17:34:20 109,568 ----a-w C:\WINDOWS\ServicePackFiles\i386\progman.exe
+ 2008-04-13 17:34:20 607,232 ----a-w C:\WINDOWS\ServicePackFiles\i386\progman.exe
- 2008-04-13 17:34:20 50,688 ----a-w C:\WINDOWS\ServicePackFiles\i386\proquota.exe
+ 2008-04-13 17:34:20 109,056 ----a-w C:\WINDOWS\ServicePackFiles\i386\proquota.exe
- 2008-04-13 17:33:40 1,294,336 ----a-w C:\WINDOWS\ServicePackFiles\i386\quartz.dll
+ 2008-04-13 17:33:40 1,539,072 ----a-w C:\WINDOWS\ServicePackFiles\i386\quartz.dll
- 2008-04-13 17:33:40 685,568 ----a-w C:\WINDOWS\ServicePackFiles\i386\rasdlg.dll
+ 2008-04-13 17:33:40 954,368 ----a-w C:\WINDOWS\ServicePackFiles\i386\rasdlg.dll
- 2008-04-13 17:34:20 57,344 ----a-w C:\WINDOWS\ServicePackFiles\i386\rasphone.exe
+ 2008-04-13 17:34:20 60,416 ----a-w C:\WINDOWS\ServicePackFiles\i386\rasphone.exe
- 2008-04-13 17:34:20 35,840 ----a-w C:\WINDOWS\ServicePackFiles\i386\rcimlby.exe
+ 2008-04-13 17:34:20 43,520 ----a-w C:\WINDOWS\ServicePackFiles\i386\rcimlby.exe
- 2008-04-13 17:34:20 153,088 ----a-w C:\WINDOWS\ServicePackFiles\i386\regedit.exe
+ 2008-04-13 17:34:20 273,920 ----a-w C:\WINDOWS\ServicePackFiles\i386\regedit.exe
- 2008-04-13 17:33:40 405,504 ----a-w C:\WINDOWS\ServicePackFiles\i386\regwizc.dll
+ 2004-08-19 14:09:40 745,472 ----a-w C:\WINDOWS\ServicePackFiles\i386\regwizc.dll
- 2008-04-13 17:33:40 61,952 ----a-w C:\WINDOWS\ServicePackFiles\i386\remotepg.dll
+ 2008-04-13 17:33:40 153,088 ----a-w C:\WINDOWS\ServicePackFiles\i386\remotepg.dll
- 2008-04-13 17:34:20 384,512 ----a-w C:\WINDOWS\ServicePackFiles\i386\rstrui.exe
+ 2008-04-13 17:34:20 421,376 ----a-w C:\WINDOWS\ServicePackFiles\i386\rstrui.exe
- 2008-04-13 17:34:22 33,792 ----a-w C:\WINDOWS\ServicePackFiles\i386\rundll32.exe
+ 2008-04-13 17:34:22 35,328 ----a-w C:\WINDOWS\ServicePackFiles\i386\rundll32.exe
- 2008-04-13 17:34:22 14,336 ----a-w C:\WINDOWS\ServicePackFiles\i386\runonce.exe
+ 2008-04-13 17:34:22 39,424 ----a-w C:\WINDOWS\ServicePackFiles\i386\runonce.exe
- 2008-04-13 17:33:42 180,224 ----a-w C:\WINDOWS\ServicePackFiles\i386\scrobj.dll
+ 2008-04-13 17:33:42 188,416 ----a-w C:\WINDOWS\ServicePackFiles\i386\scrobj.dll
- 2008-04-13 17:33:42 55,296 ----a-w C:\WINDOWS\ServicePackFiles\i386\sendmail.dll
+ 2008-04-13 17:33:42 58,368 ----a-w C:\WINDOWS\ServicePackFiles\i386\sendmail.dll
- 2008-04-13 17:33:42 56,320 ----a-w C:\WINDOWS\ServicePackFiles\i386\servdeps.dll
+ 2008-04-13 17:33:42 135,168 ----a-w C:\WINDOWS\ServicePackFiles\i386\servdeps.dll
- 2008-04-13 17:34:22 23,040 ----a-w C:\WINDOWS\ServicePackFiles\i386\setup.exe
+ 2008-04-13 17:34:22 47,616 ----a-w C:\WINDOWS\ServicePackFiles\i386\setup.exe
- 2004-08-19 14:10:04 778,240 ----a-w C:\WINDOWS\ServicePackFiles\i386\setup_wm.exe
+ 2008-04-13 17:34:22 778,240 ----a-w C:\WINDOWS\ServicePackFiles\i386\setup_wm.exe
- 2008-04-13 17:33:42 1,005,056 ----a-w C:\WINDOWS\ServicePackFiles\i386\setupapi.dll
+ 2008-04-13 17:33:42 1,892,352 ----a-w C:\WINDOWS\ServicePackFiles\i386\setupapi.dll
- 2008-04-13 17:01:00 572,416 ----a-w C:\WINDOWS\ServicePackFiles\i386\shdoclc.dll
+ 2008-04-13 17:01:00 650,240 ----a-w C:\WINDOWS\ServicePackFiles\i386\shdoclc.dll
- 2008-04-13 17:33:42 1,499,136 ----a-w C:\WINDOWS\ServicePackFiles\i386\shdocvw.dll
+ 2008-04-13 17:33:42 2,016,768 ----a-w C:\WINDOWS\ServicePackFiles\i386\shdocvw.dll
- 2008-04-13 17:33:42 8,517,632 ----a-w C:\WINDOWS\ServicePackFiles\i386\shell32.dll
+ 2008-04-13 17:33:42 12,719,104 ----a-w C:\WINDOWS\ServicePackFiles\i386\shell32.dll
- 2008-04-13 17:33:42 440,320 ----a-w C:\WINDOWS\ServicePackFiles\i386\shimgvw.dll
+ 2008-04-13 17:33:42 1,033,216 ----a-w C:\WINDOWS\ServicePackFiles\i386\shimgvw.dll
- 2008-04-13 17:33:42 474,624 ----a-w C:\WINDOWS\ServicePackFiles\i386\shlwapi.dll
+ 2008-04-13 17:33:42 484,352 ----a-w C:\WINDOWS\ServicePackFiles\i386\shlwapi.dll
- 2008-04-13 17:34:22 78,848 ----a-w C:\WINDOWS\ServicePackFiles\i386\shrpubw.exe
+ 2008-04-13 17:34:22 103,424 ----a-w C:\WINDOWS\ServicePackFiles\i386\shrpubw.exe
- 2008-04-13 17:33:42 28,160 ----a-w C:\WINDOWS\ServicePackFiles\i386\shscrap.dll
+ 2008-04-13 17:33:42 37,376 ----a-w C:\WINDOWS\ServicePackFiles\i386\shscrap.dll
- 2008-04-13 17:34:22 71,168 ----a-w C:\WINDOWS\ServicePackFiles\i386\sigverif.exe
+ 2008-04-13 17:34:22 96,256 ----a-w C:\WINDOWS\ServicePackFiles\i386\sigverif.exe
- 2008-04-13 17:34:24 133,120 ----a-w C:\WINDOWS\ServicePackFiles\i386\sndrec32.exe
+ 2008-04-13 17:34:24 182,272 ----a-w C:\WINDOWS\ServicePackFiles\i386\sndrec32.exe
- 2008-04-13 17:34:24 539,136 ----a-w C:\WINDOWS\ServicePackFiles\i386\spider.exe
+ 2008-04-13 17:34:24 1,565,184 ----a-w C:\WINDOWS\ServicePackFiles\i386\spider.exe
- 2008-04-13 17:33:48 727,102 ----a-w C:\WINDOWS\ServicePackFiles\i386\srchui.dll
+ 2008-04-13 17:33:48 943,166 ----a-w C:\WINDOWS\ServicePackFiles\i386\srchui.dll
- 2008-04-13 17:33:48 67,584 ----a-w C:\WINDOWS\ServicePackFiles\i386\srclient.dll
+ 2008-04-13 17:33:48 78,848 ----a-w C:\WINDOWS\ServicePackFiles\i386\srclient.dll
- 2008-04-13 17:33:48 241,664 ----a-w C:\WINDOWS\ServicePackFiles\i386\srrstr.dll
+ 2008-04-13 17:33:48 267,776 ----a-w C:\WINDOWS\ServicePackFiles\i386\srrstr.dll
- 2008-04-13 17:33:48 138,240 ----a-w C:\WINDOWS\ServicePackFiles\i386\sti_ci.dll
+ 2008-04-13 17:33:48 265,216 ----a-w C:\WINDOWS\ServicePackFiles\i386\sti_ci.dll
- 2008-04-13 17:34:24 14,848 ----a-w C:\WINDOWS\ServicePackFiles\i386\stimon.exe
+ 2008-04-13 17:34:24 30,208 ----a-w C:\WINDOWS\ServicePackFiles\i386\stimon.exe
- 2008-04-13 17:33:48 122,368 ----a-w C:\WINDOWS\ServicePackFiles\i386\stobject.dll
+ 2008-04-13 17:33:48 133,632 ----a-w C:\WINDOWS\ServicePackFiles\i386\stobject.dll
- 2008-04-13 17:33:48 76,800 ----a-w C:\WINDOWS\ServicePackFiles\i386\storprop.dll
+ 2008-04-13 17:33:48 78,336 ----a-w C:\WINDOWS\ServicePackFiles\i386\storprop.dll
- 2008-04-13 17:33:48 716,800 ----a-w C:\WINDOWS\ServicePackFiles\i386\sxs.dll
+ 2008-04-13 17:33:48 747,008 ----a-w C:\WINDOWS\ServicePackFiles\i386\sxs.dll
- 2008-04-13 17:33:48 197,120 ----a-w C:\WINDOWS\ServicePackFiles\i386\syncui.dll
+ 2008-04-13 17:33:48 683,520 ----a-w C:\WINDOWS\ServicePackFiles\i386\syncui.dll
- 2008-04-13 17:34:26 107,520 ----a-w C:\WINDOWS\ServicePackFiles\i386\sysocmgr.exe
+ 2008-04-13 17:34:26 388,608 ----a-w C:\WINDOWS\ServicePackFiles\i386\sysocmgr.exe
- 2008-04-13 17:33:48 1,013,248 ----a-w C:\WINDOWS\ServicePackFiles\i386\syssetup.dll
+ 2008-04-13 17:33:48 1,446,400 ----a-w C:\WINDOWS\ServicePackFiles\i386\syssetup.dll
- 2008-04-13 17:34:26 143,360 ----a-w C:\WINDOWS\ServicePackFiles\i386\taskmgr.exe
+ 2008-04-13 17:34:26 246,784 ----a-w C:\WINDOWS\ServicePackFiles\i386\taskmgr.exe
- 2008-04-13 17:33:48 47,104 ----a-w C:\WINDOWS\ServicePackFiles\i386\tcpmonui.dll
+ 2008-04-13 17:33:48 101,376 ----a-w C:\WINDOWS\ServicePackFiles\i386\tcpmonui.dll
- 2008-04-13 17:34:26 78,336 ----a-w C:\WINDOWS\ServicePackFiles\i386\telnet.exe
+ 2008-04-13 17:34:26 102,912 ----a-w C:\WINDOWS\ServicePackFiles\i386\telnet.exe
- 2008-04-13 17:33:48 391,168 ----a-w C:\WINDOWS\ServicePackFiles\i386\themeui.dll
+ 2008-04-13 17:33:48 453,120 ----a-w C:\WINDOWS\ServicePackFiles\i386\themeui.dll
- 2008-04-13 17:33:48 132,096 ----a-w C:\WINDOWS\ServicePackFiles\i386\tsoc.dll
+ 2008-04-13 17:33:48 158,208 ----a-w C:\WINDOWS\ServicePackFiles\i386\tsoc.dll
- 2008-04-13 17:33:50 240,128 ----a-w C:\WINDOWS\ServicePackFiles\i386\upnpui.dll
+ 2008-04-13 17:33:50 286,720 ----a-w C:\WINDOWS\ServicePackFiles\i386\upnpui.dll
- 2008-04-13 17:33:50 37,888 ----a-w C:\WINDOWS\ServicePackFiles\i386\url.dll
+ 2008-04-13 17:33:50 70,144 ----a-w C:\WINDOWS\ServicePackFiles\i386\url.dll
- 2008-04-13 17:33:50 621,568 ----a-w C:\WINDOWS\ServicePackFiles\i386\urlmon.dll
+ 2008-04-13 17:33:50 641,536 ----a-w C:\WINDOWS\ServicePackFiles\i386\urlmon.dll
- 2008-04-13 17:33:50 77,312 ----a-w C:\WINDOWS\ServicePackFiles\i386\usbui.dll
+ 2008-04-13 17:33:50 86,528 ----a-w C:\WINDOWS\ServicePackFiles\i386\usbui.dll
- 2008-04-13 17:34:28 50,176 ----a-w C:\WINDOWS\ServicePackFiles\i386\utilman.exe
+ 2008-04-13 17:34:28 51,712 ----a-w C:\WINDOWS\ServicePackFiles\i386\utilman.exe
- 2008-04-13 17:34:28 46,080 ----a-w C:\WINDOWS\ServicePackFiles\i386\wab.exe
+ 2008-04-13 17:34:28 72,192 ----a-w C:\WINDOWS\ServicePackFiles\i386\wab.exe
- 2008-04-13 16:56:24 263,168 ----a-w C:\WINDOWS\ServicePackFiles\i386\wab32res.dll
+ 2008-04-13 16:56:24 748,544 ----a-w C:\WINDOWS\ServicePackFiles\i386\wab32res.dll
- 2008-04-13 17:33:50 32,768 ----a-w C:\WINDOWS\ServicePackFiles\i386\wabfind.dll
+ 2008-04-13 17:33:50 35,328 ----a-w C:\WINDOWS\ServicePackFiles\i386\wabfind.dll
- 2008-04-13 17:33:50 85,504 ----a-w C:\WINDOWS\ServicePackFiles\i386\wabimp.dll
+ 2008-04-13 17:33:50 110,080 ----a-w C:\WINDOWS\ServicePackFiles\i386\wabimp.dll
- 2008-04-13 17:34:28 30,208 ----a-w C:\WINDOWS\ServicePackFiles\i386\wabmig.exe
+ 2008-04-13 17:34:28 54,784 ----a-w C:\WINDOWS\ServicePackFiles\i386\wabmig.exe
- 2008-04-13 17:33:50 201,216 ----a-w C:\WINDOWS\ServicePackFiles\i386\wbemcntl.dll
+ 2008-04-13 17:33:50 309,760 ----a-w C:\WINDOWS\ServicePackFiles\i386\wbemcntl.dll
- 2008-04-13 17:33:50 281,600 ----a-w C:\WINDOWS\ServicePackFiles\i386\webcheck.dll
+ 2008-04-13 17:33:50 440,832 ----a-w C:\WINDOWS\ServicePackFiles\i386\webcheck.dll
- 2008-04-13 17:34:28 66,560 ----a-w C:\WINDOWS\ServicePackFiles\i386\wextract.exe
+ 2008-04-13 17:34:28 372,224 ----a-w C:\WINDOWS\ServicePackFiles\i386\wextract.exe
- 2008-04-13 17:34:28 438,784 ----a-w C:\WINDOWS\ServicePackFiles\i386\wiaacmgr.exe
+ 2008-04-13 17:34:28 532,992 ----a-w C:\WINDOWS\ServicePackFiles\i386\wiaacmgr.exe
- 2008-04-13 17:33:50 465,920 ----a-w C:\WINDOWS\ServicePackFiles\i386\wiadefui.dll
+ 2008-04-13 17:33:50 3,701,248 ----a-w C:\WINDOWS\ServicePackFiles\i386\wiadefui.dll
- 2008-04-13 17:33:50 594,432 ----a-w C:\WINDOWS\ServicePackFiles\i386\wiashext.dll
+ 2008-04-13 17:33:50 704,000 ----a-w C:\WINDOWS\ServicePackFiles\i386\wiashext.dll
- 2008-04-13 16:58:14 1,647,616 ----a-w C:\WINDOWS\ServicePackFiles\i386\winbrand.dll
+ 2008-04-13 16:58:14 2,957,312 ----a-w C:\WINDOWS\ServicePackFiles\i386\winbrand.dll
- 2008-04-13 17:34:28 288,256 ----a-w C:\WINDOWS\ServicePackFiles\i386\winhlp32.exe
+ 2008-04-13 17:34:28 355,840 ----a-w C:\WINDOWS\ServicePackFiles\i386\winhlp32.exe
- 2008-04-13 17:32:54 764,416 ----a-w C:\WINDOWS\ServicePackFiles\i386\winntbbu.dll
+ 2008-04-13 17:32:54 3,962,880 ----a-w C:\WINDOWS\ServicePackFiles\i386\winntbbu.dll
- 2008-04-13 17:33:50 293,888 ----a-w C:\WINDOWS\ServicePackFiles\i386\winsrv.dll
+ 2008-04-13 17:33:50 295,424 ----a-w C:\WINDOWS\ServicePackFiles\i386\winsrv.dll
- 2008-04-13 17:33:50 176,640 ----a-w C:\WINDOWS\ServicePackFiles\i386\wintrust.dll
+ 2008-04-13 17:33:50 186,368 ----a-w C:\WINDOWS\ServicePackFiles\i386\wintrust.dll
- 2008-04-13 17:33:50 4,290,048 ----a-w C:\WINDOWS\ServicePackFiles\i386\wmm2res.dll
+ 2004-08-19 14:09:50 4,572,672 ----a-w C:\WINDOWS\ServicePackFiles\i386\wmm2res.dll
- 2007-04-30 00:22:16 4,898,816 ----a-w C:\WINDOWS\ServicePackFiles\i386\wmp.dll
+ 2008-04-13 17:33:50 5,038,080 ----a-w C:\WINDOWS\ServicePackFiles\i386\wmp.dll
- 2004-08-19 14:10:06 73,728 ----a-w C:\WINDOWS\ServicePackFiles\i386\wmplayer.exe
+ 2008-04-13 17:34:30 73,728 ----a-w C:\WINDOWS\ServicePackFiles\i386\wmplayer.exe
- 2004-08-19 14:09:12 3,616,768 ----a-w C:\WINDOWS\ServicePackFiles\i386\wmploc.dll
+ 2008-04-13 17:02:18 4,067,328 ----a-w C:\WINDOWS\ServicePackFiles\i386\wmploc.dll
- 2008-04-13 17:34:30 32,256 ----a-w C:\WINDOWS\ServicePackFiles\i386\wpabaln.exe
+ 2008-04-13 17:34:30 34,304 ----a-w C:\WINDOWS\ServicePackFiles\i386\wpabaln.exe
- 2008-04-13 17:34:30 155,648 ----a-w C:\WINDOWS\ServicePackFiles\i386\wscript.exe
+ 2008-04-13 17:34:30 204,800 ----a-w C:\WINDOWS\ServicePackFiles\i386\wscript.exe
- 2008-04-13 17:34:30 168,960 ----a-w C:\WINDOWS\ServicePackFiles\i386\wuauclt1.exe
+ 2008-04-13 17:34:30 202,240 ----a-w C:\WINDOWS\ServicePackFiles\i386\wuauclt1.exe
- 2008-04-13 17:04:48 197,632 ----a-w C:\WINDOWS\ServicePackFiles\i386\xpsp1res.dll
+ 2008-04-13 09:35:22 229,376 ----a-w C:\WINDOWS\ServicePackFiles\i386\xpsp1res.dll
- 2008-04-13 08:39:26 2,897,920 ----a-w C:\WINDOWS\ServicePackFiles\i386\xpsp2res.dll
+ 2008-04-13 09:36:48 3,579,392 ----a-w C:\WINDOWS\ServicePackFiles\i386\xpsp2res.dll
- 2008-04-13 17:33:54 340,992 ----a-w C:\WINDOWS\ServicePackFiles\i386\zipfldr.dll
+ 2008-04-13 17:33:54 757,760 ----a-w C:\WINDOWS\ServicePackFiles\i386\zipfldr.dll
- 2008-04-13 17:33:32 3,166,208 ----a-w C:\WINDOWS\srchasst\msgr3en.dll
+ 2004-08-19 14:09:34 3,198,976 ----a-w C:\WINDOWS\srchasst\msgr3en.dll
- 2008-04-13 17:33:48 727,102 ----a-w C:\WINDOWS\srchasst\srchui.dll
+ 2008-04-13 17:33:48 943,166 ----a-w C:\WINDOWS\srchasst\srchui.dll
- 2008-04-13 17:33:54 190,464 ----a-w C:\WINDOWS\system32\accwiz.exe
+ 2008-04-13 17:33:54 192,512 ----a-w C:\WINDOWS\system32\accwiz.exe
- 2008-04-13 17:33:20 61,440 ----a-w C:\WINDOWS\system32\admparse.dll
+ 2008-04-13 17:33:20 94,208 ----a-w C:\WINDOWS\system32\admparse.dll
- 2008-04-13 17:33:54 98,304 ----a-w C:\WINDOWS\system32\ahui.exe
+ 2008-04-13 17:33:54 84,480 ----a-w C:\WINDOWS\system32\ahui.exe
- 2008-04-13 17:33:20 29,184 ----a-w C:\WINDOWS\system32\batmeter.dll
+ 2008-04-13 17:33:20 38,400 ----a-w C:\WINDOWS\system32\batmeter.dll
- 2008-04-13 17:33:20 8,704 ----a-w C:\WINDOWS\system32\batt.dll
+ 2008-04-13 17:33:20 33,280 ----a-w C:\WINDOWS\system32\batt.dll
- 2008-04-13 17:33:22 1,025,024 ----a-w C:\WINDOWS\system32\browseui.dll
+ 2008-04-13 17:33:22 1,053,696 ----a-w C:\WINDOWS\system32\browseui.dll
- 2008-04-13 17:33:22 20,992 ----a-w C:\WINDOWS\system32\bthci.dll
+ 2008-04-13 17:33:22 45,056 ----a-w C:\WINDOWS\system32\bthci.dll
- 2008-04-13 17:33:22 85,504 ----a-w C:\WINDOWS\system32\cabview.dll
+ 2008-04-13 17:33:22 90,112 ----a-w C:\WINDOWS\system

[Okocza]

to nie jest cały log

[kristof200]

[code]ComboFix 08-05-01.3 - Propriétaire 2008-05-04 21:00:51.3 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.1.1036.18.280 [GMT 2:00]
Endroit: C:\Documents and Settings\Propriétaire\Bureau\ComboFix.exe
Command switches used :: C:\Documents and Settings\Propriétaire\Bureau\CFScript.txt
* Création d'un nouveau point de restauration
* Resident AV is active


[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]

FILE ::
C:\WINDOWS\[u]0[/u]05217_.tmp
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Autorun.inf
C:\WINDOWS\[u]0[/u]05217_.tmp

.
((((((((((((((((((((((((((((( Fichiers créés 2008-04-04 to 2008-05-04 ))))))))))))))))))))))))))))))))))))
.

2008-05-04 18:20 . 2008-05-04 18:36 627 --a------ C:\WINDOWS\tlknw4.ini
2008-05-04 11:19 . 2004-08-19 16:09 219,648 --a------ C:\WINDOWS\system32\uxtheme.backup
2008-05-04 11:19 . 2008-05-04 11:19 219,648 --a--c--- C:\WINDOWS\system32\dllcache\uxtheme.dll
2008-05-04 11:12 . 2008-05-04 11:19 <REP> d-------- C:\WINDOWS\VistaMizer
2008-05-03 22:54 . 2008-05-03 22:54 6,764 --a------ C:\WINDOWS\system32\spupdsvc.inf
2008-05-03 22:42 . 2008-04-13 19:02 4,067,328 --a--c--- C:\WINDOWS\system32\dllcache\wmploc.dll
2008-05-03 22:40 . 2008-04-13 09:36 144,384 --------- C:\WINDOWS\system32\drivers\hdaudbus.sys
2008-05-03 22:40 . 2008-04-13 11:40 10,240 --------- C:\WINDOWS\system32\drivers\sffp_mmc.sys
2008-04-30 12:15 . 2008-04-30 12:15 <REP> dr-h----- C:\Documents and Settings\Propriétaire\Application Data\SecuROM
2008-04-30 12:15 . 2008-04-30 12:15 107,888 --a------ C:\WINDOWS\system32\CmdLineExt.dll
2008-04-23 15:36 . 2006-11-29 13:06 3,426,072 --a------ C:\WINDOWS\system32\d3dx9_32.dll
2008-04-23 15:35 . 2008-04-23 15:35 <REP> d-------- C:\Program Files\Microsoft SQL Server Compact Edition
2008-04-23 15:35 . 2008-04-23 15:35 <REP> d-------- C:\Documents and Settings\Propriétaire\Contacts
2008-04-23 15:35 . 2008-04-23 15:35 <REP> d-------- C:\Documents and Settings\Propriétaire\Contacts
2008-04-23 15:27 . 2008-04-23 15:30 <REP> d-------- C:\Documents and Settings\Propriétaire\Application Data\MSN6
2008-04-23 15:27 . 2008-04-23 15:27 <REP> d-------- C:\Documents and Settings\All Users\Application Data\MSN6
2008-04-23 15:25 . 2008-04-25 23:46 <REP> d-------- C:\Program Files\Windows Live
2008-04-23 15:25 . 2008-04-23 15:32 <REP> d--hsc--- C:\Program Files\Fichiers communs\WindowsLiveInstaller
2008-04-23 15:25 . 2008-04-23 15:31 <REP> d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller
2008-04-18 20:44 . 2008-04-26 23:06 156 --a------ C:\WINDOWS\Twunk001.MTX
2008-04-18 20:44 . 2008-04-26 23:06 3 --a------ C:\WINDOWS\Twain001.Mtx
2008-04-18 20:44 . 2008-04-18 20:44 0 --a------ C:\WINDOWS\Twunk002.MTX
2008-04-18 20:43 . 2008-04-18 20:43 <REP> d-------- C:\Documents and Settings\Propriétaire\Application Data\Thinstall
2008-04-14 21:04 . 2008-05-04 21:00 <REP> d-------- C:\Documents and Settings\Propriétaire\Application Data\foobar2000
2008-04-13 19:10 . 2008-04-13 19:10 2,524 --------- C:\WINDOWS\system32\pid.inf
2008-04-13 16:45 . 2008-04-13 16:45 <REP> d-------- C:\Documents and Settings\Filmy\fotki
2008-04-13 16:45 . 2008-04-13 16:45 <REP> d-------- C:\Documents and Settings\Filmy
2008-04-12 20:40 . 2008-04-25 23:42 747 --a------ C:\WINDOWS\imsins.BAK
2008-04-12 11:10 . 2008-04-12 11:10 <REP> d-------- C:\Program Files\ESET
2008-04-11 23:45 . 2008-04-11 23:45 <REP> d-------- C:\Program Files\Ontrack
2008-04-11 21:16 . 2008-04-11 21:16 <REP> d-------- C:\Program Files\Smart Projects

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-05-04 09:27 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
2008-05-04 09:19 219,648 ----a-w C:\WINDOWS\system32\uxtheme.dll
2008-05-03 20:57 96,384 ----a-w C:\WINDOWS\system32\drivers\sptd0413.sys
2008-05-02 08:54 --------- d-----w C:\Program Files\Mozilla Thunderbird
2008-05-01 11:20 --------- d-----w C:\Program Files\a-squared Free
2008-04-30 10:13 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-04-25 18:32 --------- d-----w C:\Documents and Settings\All Users\Application Data\Microsoft Help
2008-04-18 18:44 --------- d-----w C:\Program Files\Fichiers communs\Adobe
2008-04-17 08:31 --------- d-----w C:\Program Files\Opera
2008-04-16 17:25 --------- d-----w C:\Documents and Settings\Propriétaire\Application Data\AdobeUM
2008-04-13 17:50 1,804 ----a-w C:\WINDOWS\system32\dcache.bin
2008-04-13 17:33 989,696 ----a-w C:\WINDOWS\system32\netplwiz.dll
2008-04-13 17:32 61,471 ----a-w C:\WINDOWS\system32\odbcji32.dll
2008-04-13 17:32 5,632 ----a-w C:\WINDOWS\system32\wmi.dll
2008-04-13 17:32 3,962,880 ----a-w C:\WINDOWS\system32\winntbbu.dll
2008-04-13 17:10 73,600 ----a-w C:\WINDOWS\system32\drivers\sr.sys
2008-04-13 17:09 80,384 ----a-w C:\WINDOWS\system32\drivers\parport.sys
2008-04-13 17:09 68,608 ----a-w C:\WINDOWS\system32\drivers\pci.sys
2008-04-13 17:09 46,848 ----a-w C:\WINDOWS\system32\drivers\p3.sys
2008-04-13 17:09 120,576 ----a-w C:\WINDOWS\system32\drivers\pcmcia.sys
2008-04-13 17:07 2,406,912 ----a-w C:\WINDOWS\system32\ntoskrnl.exe
2008-04-13 17:07 2,285,568 ----a-w C:\WINDOWS\system32\ntkrnlpa.exe
2008-04-13 17:06 4,096 ----a-w C:\WINDOWS\system32\dsprpres.dll
2008-04-13 17:05 800,256 ----a-w C:\WINDOWS\system32\drivers\dmboot.sys
2008-04-13 17:05 25,216 ----a-w C:\WINDOWS\system32\drivers\kbdclass.sys
2008-04-13 17:05 154,496 ----a-w C:\WINDOWS\system32\drivers\dmio.sys
2008-04-13 17:05 14,720 ----a-w C:\WINDOWS\system32\drivers\kbdhid.sys
2008-04-13 17:04 93,184 ------w C:\WINDOWS\system32\msxml6r.dll
2008-04-13 17:04 37,632 ----a-w C:\WINDOWS\system32\drivers\isapnp.sys
2008-04-13 17:03 81,920 ------w C:\WINDOWS\system32\msshavmsg.dll
2008-04-13 17:03 40,576 ----a-r C:\WINDOWS\system32\drivers\intelppm.sys
2008-04-13 17:02 99,840 ----a-w C:\WINDOWS\system32\inetres.dll
2008-04-13 17:02 40,960 ----a-w C:\WINDOWS\system32\drivers\crusoe.sys
2008-04-13 17:02 4,067,328 ----a-w C:\WINDOWS\system32\wmploc.dll
2008-04-13 17:01 650,240 ----a-w C:\WINDOWS\system32\shdoclc.dll
2008-04-13 17:00 66,048 ----a-w C:\WINDOWS\system32\drivers\serial.sys
2008-04-13 17:00 54,144 ----a-w C:\WINDOWS\system32\drivers\i8042prt.sys
2008-04-13 16:59 25,856 ------w C:\WINDOWS\system32\drivers\hidbth.sys
2008-04-13 16:59 200,704 ------w C:\WINDOWS\system32\wmerror.dll
2008-04-13 16:59 10,240 ----a-w C:\WINDOWS\system32\gpkrsrc.dll
2008-04-13 16:58 273,664 ------w C:\WINDOWS\system32\drivers\bthport.sys
2008-04-13 16:58 2,957,312 ----a-w C:\WINDOWS\system32\winbrand.dll
2008-04-13 16:58 1,845,760 ----a-w C:\WINDOWS\system32\win32k.sys
2008-04-13 16:57 70,144 ----a-w C:\WINDOWS\system32\browselc.dll
2008-04-13 16:57 58,752 ----a-w C:\WINDOWS\system32\drivers\redbook.sys
2008-04-13 16:57 44,672 ----a-w C:\WINDOWS\system32\drivers\fips.sys
2008-04-13 16:56 57,344 ----a-w C:\WINDOWS\system32\mshtmler.dll
2008-04-13 16:56 53,376 ----a-w C:\WINDOWS\system32\drivers\volsnap.sys
2008-04-13 16:55 8,704 ----a-w C:\WINDOWS\system32\asferror.dll
2008-04-13 16:55 40,064 ----a-w C:\WINDOWS\system32\drivers\processr.sys
2008-04-13 16:54 41,856 ----a-w C:\WINDOWS\system32\drivers\amdk7.sys
2008-04-13 16:54 41,472 ----a-w C:\WINDOWS\system32\drivers\amdk6.sys
2008-04-13 16:54 103,936 ----a-w C:\WINDOWS\system32\dpcdll.dll
2008-04-13 16:53 30,336 ----a-w C:\WINDOWS\system32\drivers\modem.sys
2008-04-13 16:53 23,680 ----a-w C:\WINDOWS\system32\drivers\mouclass.sys
2008-04-13 16:52 188,672 ----a-w C:\WINDOWS\system32\drivers\acpi.sys
2008-04-13 10:28 175,744 ----a-w C:\WINDOWS\system32\drivers\rdbss.sys
2008-04-13 10:21 162,816 ----a-w C:\WINDOWS\system32\drivers\netbt.sys
2008-04-13 10:20 91,520 ----a-w C:\WINDOWS\system32\drivers\ndiswan.sys
2008-04-13 10:20 361,344 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys
2008-04-13 10:20 182,656 ----a-w C:\WINDOWS\system32\drivers\ndis.sys
2008-04-13 10:19 75,264 ----a-w C:\WINDOWS\system32\drivers\ipsec.sys
2008-04-13 10:19 51,328 ----a-w C:\WINDOWS\system32\drivers\rasl2tp.sys
2008-04-13 10:19 48,384 ----a-w C:\WINDOWS\system32\drivers\raspptp.sys
2008-04-13 10:19 146,048 ----a-w C:\WINDOWS\system32\drivers\portcls.sys
2008-04-13 10:19 138,112 ----a-w C:\WINDOWS\system32\drivers\afd.sys
2008-04-13 10:17 83,072 ----a-w C:\WINDOWS\system32\drivers\wdmaud.sys
2008-04-13 10:17 456,576 ----a-w C:\WINDOWS\system32\drivers\mrxsmb.sys
2008-04-13 10:17 105,344 ----a-w C:\WINDOWS\system32\drivers\mup.sys
2008-04-13 10:16 49,536 ----a-w C:\WINDOWS\system32\drivers\classpnp.sys
2008-04-13 10:16 141,056 ----a-w C:\WINDOWS\system32\drivers\ks.sys
2008-04-13 10:15 60,800 ----a-w C:\WINDOWS\system32\drivers\sysaudio.sys
2008-04-13 10:15 574,976 ----a-w C:\WINDOWS\system32\drivers\ntfs.sys
2008-04-13 10:15 334,848 ----a-w C:\WINDOWS\system32\drivers\srv.sys
2008-04-13 10:14 63,744 ----a-w C:\WINDOWS\system32\drivers\cdfs.sys
2008-04-13 10:14 143,744 ----a-w C:\WINDOWS\system32\drivers\fastfat.sys
2008-04-13 10:00 225,664 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys
2008-04-13 10:00 19,072 ----a-w C:\WINDOWS\system32\drivers\tdi.sys
2008-04-13 09:57 41,472 ----a-w C:\WINDOWS\system32\drivers\raspppoe.sys
2008-04-13 09:57 40,576 ----a-w C:\WINDOWS\system32\drivers\ndproxy.sys
2008-04-13 09:57 34,560 ----a-w C:\WINDOWS\system32\drivers\wanarp.sys
2008-04-13 09:57 20,864 ----a-w C:\WINDOWS\system32\drivers\ipinip.sys
2008-04-13 09:57 152,832 ----a-w C:\WINDOWS\system32\drivers\ipnat.sys
2008-04-13 09:57 14,336 ----a-w C:\WINDOWS\system32\drivers\asyncmac.sys
2008-04-13 09:57 10,112 ----a-w C:\WINDOWS\system32\drivers\ndistapi.sys
2008-04-13 09:56 88,320 ----a-w C:\WINDOWS\system32\drivers\nwlnkipx.sys
2008-04-13 09:56 69,120 ----a-w C:\WINDOWS\system32\drivers\psched.sys
2008-04-13 09:56 35,072 ----a-w C:\WINDOWS\system32\drivers\msgpc.sys
2008-04-13 09:56 34,688 ----a-w C:\WINDOWS\system32\drivers\netbios.sys
2008-04-13 09:56 30,592 ----a-w C:\WINDOWS\system32\drivers\rndismp.sys
2008-04-13 09:56 30,592 ------w C:\WINDOWS\system32\drivers\rndismpx.sys
2008-04-13 09:56 14,592 ----a-w C:\WINDOWS\system32\drivers\ndisuio.sys
2008-04-13 09:56 12,800 ----a-w C:\WINDOWS\system32\drivers\usb8023.sys
2008-04-13 09:56 12,800 ------w C:\WINDOWS\system32\drivers\usb8023x.sys
2008-04-13 09:56 12,288 ----a-w C:\WINDOWS\system32\drivers\tunmp.sys
2008-04-13 09:55 202,624 ----a-w C:\WINDOWS\system32\drivers\rmcast.sys
2008-04-13 09:54 11,264 ----a-w C:\WINDOWS\system32\drivers\irenum.sys
2008-04-13 09:53 71,552 ----a-w C:\WINDOWS\system32\drivers\bridge.sys
2008-04-13 09:53 40,320 ----a-w C:\WINDOWS\system32\drivers\nmnt.sys
2008-04-13 09:53 36,608 ------w C:\WINDOWS\system32\drivers\ip6fw.sys
2007-08-28 11:54 237,568 ----a-w C:\Program Files\mozilla firefox\plugins\CrazyTalk4Native.dll
2006-05-25 16:43 204,895 ----a-w C:\Program Files\mozilla firefox\plugins\ctdomemhelper.dll
2005-09-29 12:41 77,824 ----a-w C:\Program Files\mozilla firefox\plugins\ctframeplayerobject.dll
2006-06-19 11:10 426,081 ----a-w C:\Program Files\mozilla firefox\plugins\ctplayerobject.dll
2005-02-02 10:19 458,752 ----a-w C:\Program Files\mozilla firefox\plugins\imagickrt.dll
2006-04-10 16:35 139,264 ----a-w C:\Program Files\mozilla firefox\plugins\rlcontentclass.dll
2005-11-09 09:10 204,800 ----a-w C:\Program Files\mozilla firefox\plugins\RLMusicPacker.dll
2005-11-09 09:42 106,496 ----a-w C:\Program Files\mozilla firefox\plugins\RLMusicUnpacker.dll
2006-01-04 09:22 212,992 ----a-w C:\Program Files\mozilla firefox\plugins\RLVoicePacker.dll
2006-01-04 09:21 167,936 ----a-w C:\Program Files\mozilla firefox\plugins\RLVoiceUnpacker.dll
.

------- Sigcheck -------

2007-06-26 16:36 669696 19058fbdc72f7bae085369c6d0a7d074 C:\WINDOWS\$hf_mig$\KB937143\SP2QFE\wininet.dll
2007-08-22 14:57 669696 4f6a45b54d26708e2c2bf2c43d83edea C:\WINDOWS\$hf_mig$\KB939653\SP2QFE\wininet.dll
2007-10-11 07:59 670208 0465cde31add22f6233ffb4fe4af01cf C:\WINDOWS\$hf_mig$\KB942615\SP2QFE\wininet.dll
2007-12-07 02:47 670208 c057d734b1951393fd07e2607513d4d9 C:\WINDOWS\$hf_mig$\KB944533\SP2QFE\wininet.dll
2008-02-16 11:32 670208 dcb8a9f102663d962be60cde38a6c1d7 C:\WINDOWS\$hf_mig$\KB947864\SP2QFE\wininet.dll
2008-02-16 11:02 663552 c9218cd3cd93586ffe9ae789282cae63 C:\WINDOWS\$NtServicePackUninstall$\wininet.dll
2008-04-13 19:33 815104 7d74d9952299acb059e63f7894533cc9 C:\WINDOWS\ServicePackFiles\i386\wininet.dll
2008-04-13 19:33 815104 7d74d9952299acb059e63f7894533cc9 C:\WINDOWS\system32\wininet.dll
2008-04-13 19:33 670208 4a6e04ea20f48d750d9bfed8600d516b C:\WINDOWS\VistaMizer\old\wininet.dll

2004-08-19 16:10 546304 43ebd7d863968dcaca9627e7605c4770 C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe
2008-04-13 19:34 551424 917c64008889003e6ea19cf0793cbd72 C:\WINDOWS\ServicePackFiles\i386\winlogon.exe
2008-04-13 19:34 551424 917c64008889003e6ea19cf0793cbd72 C:\WINDOWS\system32\winlogon.exe
2008-04-13 19:34 512000 dd73d6b9f6b4cb630cf35b438b540174 C:\WINDOWS\VistaMizer\old\winlogon.exe

2005-03-02 20:13 2059008 5311776074b6c13f983dc75baeac9c0c C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrnlpa.exe
2007-02-28 18:08 2061440 7a56a64eb50399613587e90292dd2aab C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntkrnlpa.exe
2007-02-28 18:02 2277376 15bd9df7dc2097f6544330044082f3a3 C:\WINDOWS\$NtServicePackUninstall$\ntkrnlpa.exe
2008-04-13 19:07 2285568 0c62a5263d2630b568572e7d0335179f C:\WINDOWS\ServicePackFiles\i386\ntkrnlpa.exe
2008-04-13 19:07 2285568 0c62a5263d2630b568572e7d0335179f C:\WINDOWS\system32\ntkrnlpa.exe
2008-04-13 19:07 2025984 92e82482cdb39929cf7b541a9648afae C:\WINDOWS\VistaMizer\old\ntkrnlpa.exe

2005-03-02 20:13 2181632 3e2a0a4a0c0b19fc113618a9562a3b2a C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe
2007-02-28 18:08 2184192 8e244108562e0e452eb68dff64cb08a9 C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe
2007-02-28 18:02 2397696 21806df4a98ad52fc13cd2c7c407dfdf C:\WINDOWS\$NtServicePackUninstall$\ntoskrnl.exe
2008-04-13 19:07 2406912 c85a9a142bdd8d7a37de6374d2b60211 C:\WINDOWS\ServicePackFiles\i386\ntoskrnl.exe
2008-04-13 19:07 2406912 c85a9a142bdd8d7a37de6374d2b60211 C:\WINDOWS\system32\ntoskrnl.exe
2008-04-13 19:07 2147328 b10c36956eb7a8b1586dbe3b43875280 C:\WINDOWS\VistaMizer\old\ntoskrnl.exe

2008-04-13 19:34 1556480 74a07b313ca2490601c9b756ba0b7a17 C:\WINDOWS\explorer.exe
2007-06-13 15:10 1037312 b795475444d6d57a572c14b9e1a29839 C:\WINDOWS\$hf_mig$\KB938828\SP2QFE\explorer.exe
2007-11-24 19:24 1555968 b9dd2a11ec8414088970c8c46a2e6668 C:\WINDOWS\$NtServicePackUninstall$\explorer.exe
2008-04-13 19:34 1556480 74a07b313ca2490601c9b756ba0b7a17 C:\WINDOWS\ServicePackFiles\i386\explorer.exe
2008-04-13 19:34 1037824 f2317622d29f9ff0f88aeecd5f60f0dd C:\WINDOWS\VistaMizer\old\explorer.exe

2004-08-19 16:09 25088 a1ed191b1274f29c5b7e452624b7f876 C:\WINDOWS\$NtServicePackUninstall$\ctfmon.exe
2008-04-13 19:34 25088 6f88a39fd32bf0be9d0bc0fd4090e9eb C:\WINDOWS\ServicePackFiles\i386\ctfmon.exe
2008-04-13 19:34 25088 6f88a39fd32bf0be9d0bc0fd4090e9eb C:\WINDOWS\system32\ctfmon.exe
2008-04-13 19:34 15360 59dc5bb82e4c8e0b3eadcfdbc44ba6e4 C:\WINDOWS\VistaMizer\old\ctfmon.exe
.
((((((((((((((((((((((((((((( snapshot@2008-05-04_ 0.05.52,29 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-05-03 20:58:36 2,048 --s-a-w C:\WINDOWS\bootstat.dat
+ 2008-05-04 17:20:59 2,048 --s-a-w C:\WINDOWS\bootstat.dat
- 2008-04-13 17:34:08 10,752 ----a-w C:\WINDOWS\hh.exe
+ 2005-05-26 23:22:01 20,992 ----a-w C:\WINDOWS\hh.exe
- 2008-04-13 17:33:20 42,496 ----a-w C:\WINDOWS\msagent\agentdp2.dll
+ 2008-04-13 17:33:20 67,072 ----a-w C:\WINDOWS\msagent\agentdp2.dll
- 2008-04-13 17:33:20 57,344 ----a-w C:\WINDOWS\msagent\agentdpv.dll
+ 2008-04-13 17:33:20 81,408 ----a-w C:\WINDOWS\msagent\agentdpv.dll
- 2008-04-13 17:33:54 256,512 ----a-w C:\WINDOWS\msagent\agentsvr.exe
+ 2008-04-13 17:33:54 297,984 ----a-w C:\WINDOWS\msagent\agentsvr.exe
- 2008-04-13 09:53:34 558,080 ------w C:\WINDOWS\network diagnostic\xpnetdiag.exe
+ 2008-04-13 09:53:34 560,640 ----a-w C:\WINDOWS\network diagnostic\xpnetdiag.exe
- 2008-04-13 17:34:08 769,024 ----a-w C:\WINDOWS\PCHealth\HelpCtr\Binaries\helpctr.exe
+ 2008-04-13 17:34:08 742,400 ----a-w C:\WINDOWS\PCHealth\HelpCtr\Binaries\helpctr.exe
- 2008-04-13 17:34:14 172,544 ----a-w C:\WINDOWS\PCHealth\HelpCtr\Binaries\msconfig.exe
+ 2008-04-13 17:34:14 196,608 ----a-w C:\WINDOWS\PCHealth\HelpCtr\Binaries\msconfig.exe
- 2008-04-13 17:34:20 153,088 ----a-w C:\WINDOWS\regedit.exe
+ 2008-04-13 17:34:20 273,920 ----a-w C:\WINDOWS\regedit.exe
- 2008-04-13 17:33:54 190,464 ----a-w C:\WINDOWS\ServicePackFiles\i386\accwiz.exe
+ 2008-04-13 17:33:54 192,512 ----a-w C:\WINDOWS\ServicePackFiles\i386\accwiz.exe
- 2008-04-13 17:33:20 61,440 ----a-w C:\WINDOWS\ServicePackFiles\i386\admparse.dll
+ 2008-04-13 17:33:20 94,208 ----a-w C:\WINDOWS\ServicePackFiles\i386\admparse.dll
- 2008-04-13 17:33:20 42,496 ----a-w C:\WINDOWS\ServicePackFiles\i386\agentdp2.dll
+ 2008-04-13 17:33:20 67,072 ----a-w C:\WINDOWS\ServicePackFiles\i386\agentdp2.dll
- 2008-04-13 17:33:20 57,344 ----a-w C:\WINDOWS\ServicePackFiles\i386\agentdpv.dll
+ 2008-04-13 17:33:20 81,408 ----a-w C:\WINDOWS\ServicePackFiles\i386\agentdpv.dll
- 2008-04-13 17:33:54 256,512 ----a-w C:\WINDOWS\ServicePackFiles\i386\agentsvr.exe
+ 2008-04-13 17:33:54 297,984 ----a-w C:\WINDOWS\ServicePackFiles\i386\agentsvr.exe
- 2008-04-13 17:33:54 98,304 ----a-w C:\WINDOWS\ServicePackFiles\i386\ahui.exe
+ 2008-04-13 17:33:54 84,480 ----a-w C:\WINDOWS\ServicePackFiles\i386\ahui.exe
- 2008-04-13 17:33:20 29,184 ----a-w C:\WINDOWS\ServicePackFiles\i386\batmeter.dll
+ 2008-04-13 17:33:20 38,400 ----a-w C:\WINDOWS\ServicePackFiles\i386\batmeter.dll
- 2008-04-13 17:33:20 8,704 ----a-w C:\WINDOWS\ServicePackFiles\i386\batt.dll
+ 2008-04-13 17:33:20 33,280 ----a-w C:\WINDOWS\ServicePackFiles\i386\batt.dll
- 2008-04-13 17:33:22 1,025,024 ----a-w C:\WINDOWS\ServicePackFiles\i386\browseui.dll
+ 2008-04-13 17:33:22 1,053,696 ----a-w C:\WINDOWS\ServicePackFiles\i386\browseui.dll
- 2008-04-13 17:33:22 20,992 ----a-w C:\WINDOWS\ServicePackFiles\i386\bthci.dll
+ 2008-04-13 17:33:22 45,056 ----a-w C:\WINDOWS\ServicePackFiles\i386\bthci.dll
- 2008-04-13 17:33:22 85,504 ----a-w C:\WINDOWS\ServicePackFiles\i386\cabview.dll
+ 2008-04-13 17:33:22 90,112 ----a-w C:\WINDOWS\ServicePackFiles\i386\cabview.dll
- 2008-04-13 17:33:22 153,600 ------w C:\WINDOWS\ServicePackFiles\i386\capesnpn.dll
+ 2008-04-13 17:33:22 224,768 ----a-w C:\WINDOWS\ServicePackFiles\i386\capesnpn.dll
- 2008-04-13 17:33:22 152,064 ----a-w C:\WINDOWS\ServicePackFiles\i386\cdfview.dll
+ 2008-04-13 17:33:22 451,072 ----a-w C:\WINDOWS\ServicePackFiles\i386\cdfview.dll
- 2008-04-13 17:33:22 467,968 ----a-w C:\WINDOWS\ServicePackFiles\i386\certmgr.dll
+ 2008-04-13 17:33:22 1,224,192 ----a-w C:\WINDOWS\ServicePackFiles\i386\certmgr.dll
- 2008-04-13 17:33:58 65,536 ----a-w C:\WINDOWS\ServicePackFiles\i386\cleanmgr.exe
+ 2008-04-13 17:33:58 113,152 ----a-w C:\WINDOWS\ServicePackFiles\i386\cleanmgr.exe
- 2008-04-13 17:33:58 20,480 ----a-w C:\WINDOWS\ServicePackFiles\i386\cliconfg.exe
+ 2008-04-13 17:33:58 45,056 ----a-w C:\WINDOWS\ServicePackFiles\i386\cliconfg.exe
- 2008-04-13 17:33:58 104,448 ----a-w C:\WINDOWS\ServicePackFiles\i386\clipbrd.exe
+ 2008-04-13 17:33:58 188,928 ----a-w C:\WINDOWS\ServicePackFiles\i386\clipbrd.exe
- 2008-04-13 17:33:58 33,280 ----a-w C:\WINDOWS\ServicePackFiles\i386\clipsrv.exe
+ 2008-04-13 17:33:58 43,008 ----a-w C:\WINDOWS\ServicePackFiles\i386\clipsrv.exe
- 2008-04-13 17:33:58 401,408 ----a-w C:\WINDOWS\ServicePackFiles\i386\cmd.exe
+ 2008-04-13 17:33:58 402,944 ----a-w C:\WINDOWS\ServicePackFiles\i386\cmd.exe
- 2008-04-13 17:33:22 353,280 ----a-w C:\WINDOWS\ServicePackFiles\i386\cmdial32.dll
+ 2008-04-13 17:33:22 524,800 ----a-w C:\WINDOWS\ServicePackFiles\i386\cmdial32.dll
- 2008-04-13 17:33:58 25,600 ----a-w C:\WINDOWS\ServicePackFiles\i386\cmdl32.exe
+ 2008-04-13 17:33:58 48,640 ----a-w C:\WINDOWS\ServicePackFiles\i386\cmdl32.exe
- 2008-04-13 17:33:58 39,936 ----a-w C:\WINDOWS\ServicePackFiles\i386\cmmon32.exe
+ 2008-04-13 17:33:58 54,784 ----a-w C:\WINDOWS\ServicePackFiles\i386\cmmon32.exe
- 2008-04-13 17:33:22 191,488 ----a-w C:\WINDOWS\ServicePackFiles\i386\cmprops.dll
+ 2008-04-13 17:33:22 296,448 ----a-w C:\WINDOWS\ServicePackFiles\i386\cmprops.dll
- 2008-04-13 17:33:58 65,536 ----a-w C:\WINDOWS\ServicePackFiles\i386\cmstp.exe
+ 2008-04-13 17:33:58 79,872 ----a-w C:\WINDOWS\ServicePackFiles\i386\cmstp.exe
- 2008-04-13 17:33:22 617,472 ----a-w C:\WINDOWS\ServicePackFiles\i386\comctl32.dll
+ 2008-04-13 17:33:22 724,992 ----a-w C:\WINDOWS\ServicePackFiles\i386\comctl32.dll
- 2008-04-13 17:33:22 281,600 ----a-w C:\WINDOWS\ServicePackFiles\i386\comdlg32.dll
+ 2008-04-13 17:33:22 346,112 ----a-w C:\WINDOWS\ServicePackFiles\i386\comdlg32.dll
- 2008-04-13 17:33:22 253,440 ----a-w C:\WINDOWS\ServicePackFiles\i386\compatui.dll
+ 2004-08-19 14:09:22 407,552 ----a-w C:\WINDOWS\ServicePackFiles\i386\compatui.dll
- 2008-04-13 17:33:22 230,912 ----a-w C:\WINDOWS\ServicePackFiles\i386\compstui.dll
+ 2008-04-13 17:33:22 1,735,680 ----a-w C:\WINDOWS\ServicePackFiles\i386\compstui.dll
- 2008-04-13 17:33:22 851,968 ----a-w C:\WINDOWS\ServicePackFiles\i386\comres.dll
+ 2008-04-13 17:33:22 1,450,496 ----a-w C:\WINDOWS\ServicePackFiles\i386\comres.dll
- 2008-04-13 17:34:00 1,044,480 ----a-w C:\WINDOWS\ServicePackFiles\i386\conf.exe
+ 2008-04-13 17:34:00 1,912,832 ----a-w C:\WINDOWS\ServicePackFiles\i386\conf.exe
- 2008-04-13 17:34:00 27,648 ----a-w C:\WINDOWS\ServicePackFiles\i386\conime.exe
+ 2008-04-13 17:34:00 52,224 ----a-w C:\WINDOWS\ServicePackFiles\i386\conime.exe
- 2008-04-13 17:33:22 165,888 ----a-w C:\WINDOWS\ServicePackFiles\i386\credui.dll
+ 2008-04-13 17:33:22 190,976 ----a-w C:\WINDOWS\ServicePackFiles\i386\credui.dll
- 2008-04-13 17:33:22 530,432 ----a-w C:\WINDOWS\ServicePackFiles\i386\cryptui.dll
+ 2008-04-13 17:33:22 1,132,544 ----a-w C:\WINDOWS\ServicePackFiles\i386\cryptui.dll
- 2008-04-13 17:33:22 102,912 ----a-w C:\WINDOWS\ServicePackFiles\i386\cscdll.dll
+ 2008-04-13 17:33:22 302,592 ----a-w C:\WINDOWS\ServicePackFiles\i386\cscdll.dll
- 2008-04-13 17:34:00 139,264 ----a-w C:\WINDOWS\ServicePackFiles\i386\cscript.exe
+ 2008-04-13 17:34:00 163,840 ----a-w C:\WINDOWS\ServicePackFiles\i386\cscript.exe
- 2008-04-13 17:33:22 337,920 ----a-w C:\WINDOWS\ServicePackFiles\i386\cscui.dll
+ 2008-04-13 17:33:22 1,062,400 ----a-w C:\WINDOWS\ServicePackFiles\i386\cscui.dll
- 2008-04-13 17:33:24 55,296 ----a-w C:\WINDOWS\ServicePackFiles\i386\dataclen.dll
+ 2008-04-13 17:33:24 115,712 ----a-w C:\WINDOWS\ServicePackFiles\i386\dataclen.dll
- 2008-04-13 17:34:00 31,744 ----a-w C:\WINDOWS\ServicePackFiles\i386\ddeshare.exe
+ 2008-04-13 17:34:00 105,472 ----a-w C:\WINDOWS\ServicePackFiles\i386\ddeshare.exe
- 2008-04-13 17:33:24 290,816 ----a-w C:\WINDOWS\ServicePackFiles\i386\devmgr.dll
+ 2008-04-13 17:33:24 392,704 ----a-w C:\WINDOWS\ServicePackFiles\i386\devmgr.dll
- 2008-04-13 17:33:24 124,416 ----a-w C:\WINDOWS\ServicePackFiles\i386\dfrgui.dll
+ 2008-04-13 17:33:24 173,056 ----a-w C:\WINDOWS\ServicePackFiles\i386\dfrgui.dll
- 2008-04-13 17:34:00 548,352 ----a-w C:\WINDOWS\ServicePackFiles\i386\dialer.exe
+ 2008-04-13 17:34:00 622,592 ----a-w C:\WINDOWS\ServicePackFiles\i386\dialer.exe
- 2008-04-13 17:33:24 68,608 ----a-w C:\WINDOWS\ServicePackFiles\i386\digest.dll
+ 2008-04-13 17:33:24 93,184 ----a-w C:\WINDOWS\ServicePackFiles\i386\digest.dll
- 2008-04-13 17:33:24 1,504,768 ------w C:\WINDOWS\ServicePackFiles\i386\diskcopy.dll
+ 2008-04-13 17:33:24 1,529,344 ----a-w C:\WINDOWS\ServicePackFiles\i386\diskcopy.dll
- 2008-04-13 17:33:24 285,184 ------w C:\WINDOWS\ServicePackFiles\i386\dmdlgs.dll
+ 2008-04-13 17:33:24 385,024 ----a-w C:\WINDOWS\ServicePackFiles\i386\dmdlgs.dll
- 2008-04-13 17:33:24 24,064 ----a-w C:\WINDOWS\ServicePackFiles\i386\dpmodemx.dll
+ 2008-04-13 17:33:24 48,128 ----a-w C:\WINDOWS\ServicePackFiles\i386\dpmodemx.dll
- 2008-04-13 17:33:24 213,504 ----a-w C:\WINDOWS\ServicePackFiles\i386\dpvoice.dll
+ 2008-04-13 17:33:24 262,656 ----a-w C:\WINDOWS\ServicePackFiles\i386\dpvoice.dll
- 2008-04-13 17:33:24 161,280 ------w C:\WINDOWS\ServicePackFiles\i386\dskquoui.dll
+ 2008-04-13 17:33:24 293,376 ----a-w C:\WINDOWS\ServicePackFiles\i386\dskquoui.dll
- 2008-04-13 17:33:24 145,920 ----a-w C:\WINDOWS\ServicePackFiles\i386\dsprop.dll
+ 2008-04-13 17:33:24 195,584 ----a-w C:\WINDOWS\ServicePackFiles\i386\dsprop.dll
- 2008-04-13 17:33:24 240,640 ----a-w C:\WINDOWS\ServicePackFiles\i386\dsquery.dll
+ 2008-04-13 17:33:24 425,984 ----a-w C:\WINDOWS\ServicePackFiles\i386\dsquery.dll
- 2008-04-13 17:33:24 113,664 ----a-w C:\WINDOWS\ServicePackFiles\i386\dsuiext.dll
+ 2008-04-13 17:33:24 775,680 ----a-w C:\WINDOWS\ServicePackFiles\i386\dsuiext.dll
- 2008-04-13 17:33:24 187,392 ----a-w C:\WINDOWS\ServicePackFiles\i386\els.dll
+ 2008-04-13 17:33:24 261,632 ----a-w C:\WINDOWS\ServicePackFiles\i386\els.dll
- 2008-04-13 17:33:26 348,160 ----a-w C:\WINDOWS\ServicePackFiles\i386\filemgmt.dll
+ 2008-04-13 17:33:26 454,144 ----a-w C:\WINDOWS\ServicePackFiles\i386\filemgmt.dll
- 2008-04-13 17:33:26 88,064 ----a-w C:\WINDOWS\ServicePackFiles\i386\fldrclnr.dll
+ 2008-04-13 17:33:26 74,240 ----a-w C:\WINDOWS\ServicePackFiles\i386\fldrclnr.dll
- 2008-04-13 17:33:26 386,560 ----a-w C:\WINDOWS\ServicePackFiles\i386\fontext.dll
+ 2008-04-13 17:33:26 396,288 ----a-w C:\WINDOWS\ServicePackFiles\i386\fontext.dll
- 2008-04-13 17:34:06 193,024 ----a-w C:\WINDOWS\ServicePackFiles\i386\fsquirt.exe
+ 2008-04-13 17:34:06 409,088 ----a-w C:\WINDOWS\ServicePackFiles\i386\fsquirt.exe
- 2008-04-13 17:34:06 39,424 ----a-w C:\WINDOWS\ServicePackFiles\i386\grpconv.exe
+ 2008-04-13 17:34:06 67,072 ----a-w C:\WINDOWS\ServicePackFiles\i386\grpconv.exe
- 2008-04-13 17:34:08 769,024 ----a-w C:\WINDOWS\ServicePackFiles\i386\helpctr.exe
+ 2008-04-13 17:34:08 742,400 ----a-w C:\WINDOWS\ServicePackFiles\i386\helpctr.exe
- 2008-04-13 17:34:08 10,752 ----a-w C:\WINDOWS\ServicePackFiles\i386\hh.exe
+ 2005-05-26 23:22:01 20,992 ----a-w C:\WINDOWS\ServicePackFiles\i386\hh.exe
- 2008-04-13 17:33:28 38,912 ----a-w C:\WINDOWS\ServicePackFiles\i386\hmmapi.dll
+ 2008-04-13 17:33:28 41,472 ----a-w C:\WINDOWS\ServicePackFiles\i386\hmmapi.dll
- 2008-04-13 17:33:28 347,136 ----a-w C:\WINDOWS\ServicePackFiles\i386\hnetcfg.dll
+ 2008-04-13 17:33:28 371,712 ----a-w C:\WINDOWS\ServicePackFiles\i386\hnetcfg.dll
- 2008-04-13 17:33:28 336,384 ----a-w C:\WINDOWS\ServicePackFiles\i386\hnetwiz.dll
+ 2004-08-19 14:09:28 507,904 ----a-w C:\WINDOWS\ServicePackFiles\i386\hnetwiz.dll
- 2008-04-13 17:33:28 146,944 ----a-w C:\WINDOWS\ServicePackFiles\i386\hotplug.dll
+ 2008-04-13 17:33:28 177,664 ----a-w C:\WINDOWS\ServicePackFiles\i386\hotplug.dll
- 2008-04-13 17:34:08 218,624 ----a-w C:\WINDOWS\ServicePackFiles\i386\icwconn1.exe
+ 2008-04-13 17:34:08 258,048 ----a-w C:\WINDOWS\ServicePackFiles\i386\icwconn1.exe
- 2008-04-13 17:34:08 86,016 ----a-w C:\WINDOWS\ServicePackFiles\i386\icwconn2.exe
+ 2008-04-13 17:34:08 110,592 ----a-w C:\WINDOWS\ServicePackFiles\i386\icwconn2.exe
- 2008-04-13 17:33:28 73,728 ----a-w C:\WINDOWS\ServicePackFiles\i386\icwdial.dll
+ 2008-04-13 17:33:28 122,880 ----a-w C:\WINDOWS\ServicePackFiles\i386\icwdial.dll
- 2008-04-13 17:33:28 176,128 ----a-w C:\WINDOWS\ServicePackFiles\i386\icwhelp.dll
+ 2008-04-13 17:33:28 221,184 ----a-w C:\WINDOWS\ServicePackFiles\i386\icwhelp.dll
- 2008-04-13 17:33:28 221,184 ----a-w C:\WINDOWS\ServicePackFiles\i386\ieaksie.dll
+ 2008-04-13 17:33:28 402,432 ----a-w C:\WINDOWS\ServicePackFiles\i386\ieaksie.dll
- 2008-04-13 17:33:28 251,904 ----a-w C:\WINDOWS\ServicePackFiles\i386\iepeers.dll
+ 2008-04-13 17:33:28 264,704 ----a-w C:\WINDOWS\ServicePackFiles\i386\iepeers.dll
- 2008-04-13 17:33:28 49,152 ----a-w C:\WINDOWS\ServicePackFiles\i386\iernonce.dll
+ 2008-04-13 17:33:28 74,240 ----a-w C:\WINDOWS\ServicePackFiles\i386\iernonce.dll
- 2008-04-13 17:33:28 63,488 ----a-w C:\WINDOWS\ServicePackFiles\i386\iesetup.dll
+ 2008-04-13 17:33:28 78,848 ----a-w C:\WINDOWS\ServicePackFiles\i386\iesetup.dll
- 2008-04-13 17:34:08 93,184 ----a-w C:\WINDOWS\ServicePackFiles\i386\iexplore.exe
+ 2008-04-13 17:34:08 468,480 ----a-w C:\WINDOWS\ServicePackFiles\i386\iexplore.exe
- 2008-04-13 17:34:08 114,688 ----a-w C:\WINDOWS\ServicePackFiles\i386\iexpress.exe
+ 2008-04-13 17:34:08 161,280 ----a-w C:\WINDOWS\ServicePackFiles\i386\iexpress.exe
- 2008-04-13 17:33:28 282,624 ----a-w C:\WINDOWS\ServicePackFiles\i386\inetcfg.dll
+ 2008-04-13 17:33:28 425,984 ----a-w C:\WINDOWS\ServicePackFiles\i386\inetcfg.dll
- 2008-04-13 17:33:28 16,384 ----a-w C:\WINDOWS\ServicePackFiles\i386\inetppui.dll
+ 2008-04-13 17:33:28 47,104 ----a-w C:\WINDOWS\ServicePackFiles\i386\inetppui.dll
- 2008-04-13 17:02:56 50,688 ----a-w C:\WINDOWS\ServicePackFiles\i386\inetres.dll
+ 2008-04-13 17:02:56 99,840 ----a-w C:\WINDOWS\ServicePackFiles\i386\inetres.dll
- 2008-04-13 17:34:08 20,480 ----a-w C:\WINDOWS\ServicePackFiles\i386\inetwiz.exe
+ 2008-04-13 17:34:08 45,056 ----a-w C:\WINDOWS\ServicePackFiles\i386\inetwiz.exe
- 2008-04-13 17:33:28 126,464 ----a-w C:\WINDOWS\ServicePackFiles\i386\input.dll
+ 2008-04-13 17:33:28 234,496 ----a-w C:\WINDOWS\ServicePackFiles\i386\input.dll
- 2008-04-13 17:33:28 361,472 ----a-w C:\WINDOWS\ServicePackFiles\i386\ipsecsnp.dll
+ 2008-04-13 17:33:28 436,224 ----a-w C:\WINDOWS\ServicePackFiles\i386\ipsecsnp.dll
- 2008-04-13 17:33:28 388,096 ----a-w C:\WINDOWS\ServicePackFiles\i386\ipsmsnap.dll
+ 2008-04-13 17:33:28 471,040 ----a-w C:\WINDOWS\ServicePackFiles\i386\ipsmsnap.dll
- 2008-04-13 17:34:10 153,088 ----a-w C:\WINDOWS\ServicePackFiles\i386\irftp.exe
+ 2008-04-13 17:34:10 150,016 ----a-w C:\WINDOWS\ServicePackFiles\i386\irftp.exe
- 2008-04-13 17:33:28 86,016 ----a-w C:\WINDOWS\ServicePackFiles\i386\isign32.dll
+ 2008-04-13 17:33:28 159,744 ----a-w C:\WINDOWS\ServicePackFiles\i386\isign32.dll
- 2008-04-13 17:33:28 138,240 ----a-w C:\WINDOWS\ServicePackFiles\i386\itss.dll
+ 2008-04-13 17:33:28 153,600 ----a-w C:\WINDOWS\ServicePackFiles\i386\itss.dll
- 2008-04-13 17:33:30 157,184 ----a-w C:\WINDOWS\ServicePackFiles\i386\keymgr.dll
+ 2008-04-13 17:33:30 231,936 ----a-w C:\WINDOWS\ServicePackFiles\i386\keymgr.dll
- 2008-04-13 17:33:30 228,352 ----a-w C:\WINDOWS\ServicePackFiles\i386\localsec.dll
+ 2008-04-13 17:33:30 496,640 ----a-w C:\WINDOWS\ServicePackFiles\i386\localsec.dll
- 2008-04-13 17:34:10 515,584 ----a-w C:\WINDOWS\ServicePackFiles\i386\logonui.exe
+ 2008-04-13 17:34:10 6,123,008 ----a-w C:\WINDOWS\ServicePackFiles\i386\logonui.exe
- 2008-04-13 17:34:12 73,216 ----a-w C:\WINDOWS\ServicePackFiles\i386\magnify.exe
+ 2008-04-13 17:34:12 59,904 ----a-w C:\WINDOWS\ServicePackFiles\i386\magnify.exe
- 2008-04-13 17:33:30 120,320 ----a-w C:\WINDOWS\ServicePackFiles\i386\mdminst.dll
+ 2008-04-13 17:33:30 163,328 ----a-w C:\WINDOWS\ServicePackFiles\i386\mdminst.dll
- 2008-04-13 17:33:30 18,944 ----a-w C:\WINDOWS\ServicePackFiles\i386\midimap.dll
+ 2008-04-13 17:33:30 42,496 ----a-w C:\WINDOWS\ServicePackFiles\i386\midimap.dll
- 2008-04-13 17:34:12 104,448 ----a-w C:\WINDOWS\ServicePackFiles\i386\migload.exe
+ 2008-04-13 17:34:12 382,464 ----a-w C:\WINDOWS\ServicePackFiles\i386\migload.exe
- 2008-04-13 17:34:12 251,904 ----a-w C:\WINDOWS\ServicePackFiles\i386\migwiz.exe
+ 2008-04-13 17:34:12 603,648 ----a-w C:\WINDOWS\ServicePackFiles\i386\migwiz.exe
- 2004-08-19 14:09:56 343,040 ----a-w C:\WINDOWS\ServicePackFiles\i386\migwiz_a.exe
+ 2004-08-19 14:09:56 594,432 ----a-w C:\WINDOWS\ServicePackFiles\i386\migwiz_a.exe
- 2008-04-13 17:34:12 1,415,680 ----a-w C:\WINDOWS\ServicePackFiles\i386\mmc.exe
+ 2008-04-13 17:34:12 1,519,616 ----a-w C:\WINDOWS\ServicePackFiles\i386\mmc.exe
- 2008-04-13 17:33:30 174,080 ----a-w C:\WINDOWS\ServicePackFiles\i386\mmcbase.dll
+ 2008-04-13 17:33:30 336,896 ----a-w C:\WINDOWS\ServicePackFiles\i386\mmcbase.dll
- 2008-04-13 17:33:32 1,879,040 ----a-w C:\WINDOWS\ServicePackFiles\i386\mmcndmgr.dll
+ 2008-04-13 17:33:32 3,953,664 ----a-w C:\WINDOWS\ServicePackFiles\i386\mmcndmgr.dll
- 2008-04-13 17:33:32 61,440 ----a-w C:\WINDOWS\ServicePackFiles\i386\mmcshext.dll
+ 2008-04-13 17:33:32 85,504 ----a-w C:\WINDOWS\ServicePackFiles\i386\mmcshext.dll
- 2008-04-13 17:34:12 32,768 ----a-w C:\WINDOWS\ServicePackFiles\i386\mnmsrvc.exe
+ 2008-04-13 17:34:12 53,248 ----a-w C:\WINDOWS\ServicePackFiles\i386\mnmsrvc.exe
- 2008-04-13 17:33:32 210,432 ----a-w C:\WINDOWS\ServicePackFiles\i386\mobsync.dll
+ 2008-04-13 17:33:32 372,224 ----a-w C:\WINDOWS\ServicePackFiles\i386\mobsync.dll
- 2008-04-13 17:34:12 143,872 ----a-w C:\WINDOWS\ServicePackFiles\i386\mobsync.exe
+ 2008-04-13 17:34:12 583,680 ----a-w C:\WINDOWS\ServicePackFiles\i386\mobsync.exe
- 2008-04-13 17:33:32 156,160 ----a-w C:\WINDOWS\ServicePackFiles\i386\modemui.dll
+ 2008-04-13 17:33:32 255,488 ----a-w C:\WINDOWS\ServicePackFiles\i386\modemui.dll
- 2008-04-13 07:45:32 216,064 ----a-w C:\WINDOWS\ServicePackFiles\i386\moricons.dll
+ 2008-04-13 07:45:32 497,152 ----a-w C:\WINDOWS\ServicePackFiles\i386\moricons.dll
- 2008-04-13 17:34:14 124,928 ----a-w C:\WINDOWS\ServicePackFiles\i386\mplay32.exe
+ 2008-04-13 17:34:14 269,312 ----a-w C:\WINDOWS\ServicePackFiles\i386\mplay32.exe
- 2004-08-19 14:10:00 29,215 ----a-w C:\WINDOWS\ServicePackFiles\i386\mplayer2.exe
+ 2008-04-13 17:34:14 29,215 ----a-w C:\WINDOWS\ServicePackFiles\i386\mplayer2.exe
- 2008-04-13 17:33:32 69,632 ----a-w C:\WINDOWS\ServicePackFiles\i386\msconf.dll
+ 2008-04-13 17:33:32 106,496 ----a-w C:\WINDOWS\ServicePackFiles\i386\msconf.dll
- 2008-04-13 17:34:14 172,544 ----a-w C:\WINDOWS\ServicePackFiles\i386\msconfig.exe
+ 2008-04-13 17:34:14 196,608 ----a-w C:\WINDOWS\ServicePackFiles\i386\msconfig.exe
- 2008-04-13 17:34:14 6,144 ----a-w C:\WINDOWS\ServicePackFiles\i386\msdtc.exe
+ 2008-04-13 17:34:14 30,720 ----a-w C:\WINDOWS\ServicePackFiles\i386\msdtc.exe
- 2008-04-13 17:33:32 1,007,104 ----a-w C:\WINDOWS\ServicePackFiles\i386\msgina.dll
+ 2008-04-13 17:33:32 3,174,400 ----a-w C:\WINDOWS\ServicePackFiles\i386\msgina.dll
- 2008-04-13 17:33:32 3,166,208 ----a-w C:\WINDOWS\ServicePackFiles\i386\msgr3en.dll
+ 2004-08-19 14:09:34 3,198,976 ----a-w C:\WINDOWS\ServicePackFiles\i386\msgr3en.dll
- 2008-04-13 17:34:14 29,184 ----a-w C:\WINDOWS\ServicePackFiles\i386\mshta.exe
+ 2008-04-13 17:34:14 78,336 ----a-w C:\WINDOWS\ServicePackFiles\i386\mshta.exe
- 2008-04-13 17:33:32 3,066,880 ----a-w C:\WINDOWS\ServicePackFiles\i386\mshtml.dll
+ 2008-04-13 17:33:32 3,459,584 ----a-w C:\WINDOWS\ServicePackFiles\i386\mshtml.dll
- 2008-04-13 17:33:34 2,843,136 ----a-w C:\WINDOWS\ServicePackFiles\i386\msi.dll
+ 2008-04-13 17:33:34 2,893,824 ----a-w C:\WINDOWS\ServicePackFiles\i386\msi.dll
- 2008-04-13 17:33:34 51,712 ----a-w C:\WINDOWS\ServicePackFiles\i386\msident.dll
+ 2008-04-13 17:33:34 73,728 ----a-w C:\WINDOWS\ServicePackFiles\i386\msident.dll
- 2008-04-13 17:33:34 252,416 ----a-w C:\WINDOWS\ServicePackFiles\i386\msieftp.dll
+ 2008-04-13 17:33:34 1,140,224 ----a-w C:\WINDOWS\ServicePackFiles\i386\msieftp.dll
- 2008-04-13 17:34:14 78,848 ----a-w C:\WINDOWS\ServicePackFiles\i386\msiexec.exe
+ 2008-04-13 17:34:14 99,840 ----a-w C:\WINDOWS\ServicePackFiles\i386\msiexec.exe
- 2008-04-13 17:33:34 271,360 ----a-w C:\WINDOWS\ServicePackFiles\i386\msihnd.dll
+ 2008-04-13 17:33:34 911,360 ----a-w C:\WINDOWS\ServicePackFiles\i386\msihnd.dll
- 2008-04-13 17:34:14 60,416 ----a-w C:\WINDOWS\ServicePackFiles\i386\msimn.exe
+ 2008-04-13 17:34:14 124,928 ----a-w C:\WINDOWS\ServicePackFiles\i386\msimn.exe
- 2008-04-13 17:34:14 1,695,232 ------w C:\WINDOWS\ServicePackFiles\i386\msmsgs.exe
+ 2008-04-13 17:34:14 1,826,816 ----a-w C:\WINDOWS\ServicePackFiles\i386\msmsgs.exe
- 2008-04-13 17:33:34 566,272 ----a-w C:\WINDOWS\ServicePackFiles\i386\msobmain.dll
+ 2008-04-13 17:33:34 564,224 ----a-w C:\WINDOWS\ServicePackFiles\i386\msobmain.dll
- 2008-04-13 17:02:36 2,534,400 ----a-w C:\WINDOWS\ServicePackFiles\i386\msoeres.dll
+ 2008-04-13 17:02:36 4,571,648 ----a-w C:\WINDOWS\ServicePackFiles\i386\msoeres.dll
- 2008-04-13 17:34:14 29,184 ------w C:\WINDOWS\ServicePackFiles\i386\msoobe.exe
+ 2008-04-13 17:34:14 31,232 ----a-w C:\WINDOWS\ServicePackFiles\i386\msoobe.exe
- 2008-04-13 17:34:16 347,648 ----a-w C:\WINDOWS\ServicePackFiles\i386\mspaint.exe
+ 2008-04-13 17:34:16 359,936 ----a-w C:\WINDOWS\ServicePackFiles\i386\mspaint.exe
- 2008-04-13 17:33:34 146,432 ----a-w C:\WINDOWS\ServicePackFiles\i386\msrating.dll
+ 2008-04-13 17:33:34 287,232 ----a-w C:\WINDOWS\ServicePackFiles\i386\msrating.dll
- 2008-04-13 17:33:34 281,600 ----a-w C:\WINDOWS\ServicePackFiles\i386\mstask.dll
+ 2008-04-13 17:33:34 322,048 ----a-w C:\WINDOWS\ServicePackFiles\i386\mstask.dll
- 2004-08-19 13:52:00 763,392 ----a-w C:\WINDOWS\ServicePackFiles\i386\mstsc.exe
+ 2008-04-13 17:34:10 667,136 ----a-w C:\WINDOWS\ServicePackFiles\i386\mstsc.exe
- 2008-04-13 17:33:36 506,368 ----a-w C:\WINDOWS\ServicePackFiles\i386\msxml.dll
+ 2004-08-19 14:09:36 547,840 ----a-w C:\WINDOWS\ServicePackFiles\i386\msxml.dll
- 2008-04-13 17:33:36 701,440 ----a-w C:\WINDOWS\ServicePackFiles\i386\msxml2.dll
+ 2004-08-19 14:09:36 742,912 ----a-w C:\WINDOWS\ServicePackFiles\i386\msxml2.dll
- 2008-04-13 17:33:36 1,104,896 ----a-w C:\WINDOWS\ServicePackFiles\i386\msxml3.dll
+ 2007-06-26 06:09:14 1,146,368 ----a-w C:\WINDOWS\ServicePackFiles\i386\msxml3.dll
- 2008-04-13 17:33:36 91,648 ----a-w C:\WINDOWS\ServicePackFiles\i386\mydocs.dll
+ 2008-04-13 17:33:36 81,920 ----a-w C:\WINDOWS\ServicePackFiles\i386\mydocs.dll
- 2008-04-13 17:34:16 55,296 ----a-w C:\WINDOWS\ServicePackFiles\i386\narrator.exe
+ 2008-04-13 17:34:16 57,344 ----a-w C:\WINDOWS\ServicePackFiles\i386\narrator.exe
- 2008-04-13 17:33:36 144,896 ----a-w C:\WINDOWS\ServicePackFiles\i386\netid.dll
+ 2008-04-13 17:33:36 165,376 ----a-w C:\WINDOWS\ServicePackFiles\i386\netid.dll
- 2008-04-13 17:33:36 885,248 ----a-w C:\WINDOWS\ServicePackFiles\i386\netplwiz.dll
+ 2008-04-13 17:33:36 989,696 ----a-w C:\WINDOWS\ServicePackFiles\i386\netplwiz.dll
- 2008-04-13 17:37:12 332,800 ----a-w C:\WINDOWS\ServicePackFiles\i386\netsetup.exe
+ 2004-08-19 14:12:34 638,464 ----a-w C:\WINDOWS\ServicePackFiles\i386\netsetup.exe
- 2008-04-13 17:33:36 1,719,808 ----a-w C:\WINDOWS\ServicePackFiles\i386\netshell.dll
+ 2008-04-13 17:33:36 2,326,016 ----a-w C:\WINDOWS\ServicePackFiles\i386\netshell.dll
- 2008-04-13 17:33:36 250,880 ----a-w C:\WINDOWS\ServicePackFiles\i386\newdev.dll
+ 2008-04-13 17:33:36 638,976 ----a-w C:\WINDOWS\ServicePackFiles\i386\newdev.dll
- 2008-04-13 17:33:38 229,376 ----a-w C:\WINDOWS\ServicePackFiles\i386\nmas.dll
+ 2008-04-13 17:33:38 303,104 ----a-w C:\WINDOWS\ServicePackFiles\i386\nmas.dll
- 2008-04-13 17:33:38 81,920 ----a-w C:\WINDOWS\ServicePackFiles\i386\nmchat.dll
+ 2008-04-13 17:33:38 163,840 ----a-w C:\WINDOWS\ServicePackFiles\i386\nmchat.dll
- 2008-04-13 17:33:38 155,648 ----a-w C:\WINDOWS\ServicePackFiles\i386\nmft.dll
+ 2008-04-13 17:33:38 774,144 ----a-w C:\WINDOWS\ServicePackFiles\i386\nmft.dll
- 2008-04-13 17:33:38 172,032 ----a-w C:\WINDOWS\ServicePackFiles\i386\nmoldwb.dll
+ 2008-04-13 17:33:38 196,608 ----a-w C:\WINDOWS\ServicePackFiles\i386\nmoldwb.dll
- 2008-04-13 17:33:38 192,512 ----a-w C:\WINDOWS\ServicePackFiles\i386\nmwb.dll
+ 2008-04-13 17:33:38 212,992 ----a-w C:\WINDOWS\ServicePackFiles\i386\nmwb.dll
- 2008-04-13 17:34:16 79,360 ----a-w C:\WINDOWS\ServicePackFiles\i386\nslookup.exe
+ 2008-04-13 17:34:16 103,936 ----a-w C:\WINDOWS\ServicePackFiles\i386\nslookup.exe
- 2008-04-13 17:33:38 63,488 ----a-w C:\WINDOWS\ServicePackFiles\i386\ntoc.dll
+ 2008-04-13 17:33:38 88,064 ----a-w C:\WINDOWS\ServicePackFiles\i386\ntoc.dll
- 2008-04-13 17:33:38 145,920 ----a-w C:\WINDOWS\ServicePackFiles\i386\ntshrui.dll
+ 2008-04-13 17:33:38 155,136 ----a-w C:\WINDOWS\ServicePackFiles\i386\ntshrui.dll
- 2008-04-13 17:33:38 289,280 ----a-w C:\WINDOWS\ServicePackFiles\i386\objsel.dll
+ 2008-04-13 17:33:38 454,144 ----a-w C:\WINDOWS\ServicePackFiles\i386\objsel.dll
- 2008-04-13 17:33:40 97,280 ----a-w C:\WINDOWS\ServicePackFiles\i386\occache.dll
+ 2008-04-13 17:33:40 392,704 ----a-w C:\WINDOWS\ServicePackFiles\i386\occache.dll
- 2008-04-13 17:34:18 32,768 ----a-w C:\WINDOWS\ServicePackFiles\i386\odbcad32.exe
+ 2008-04-13 17:34:18 28,672 ----a-w C:\WINDOWS\ServicePackFiles\i386\odbcad32.exe
- 2007-03-28 03:56:44 98,304 ----a-w C:\WINDOWS\ServicePackFiles\i386\odbcint.dll
+ 2004-08-19 14:08:44 221,184 ----a-w C:\WINDOWS\ServicePackFiles\i386\odbcint.dll
- 2008-04-13 17:34:18 60,928 ----a-w C:\WINDOWS\ServicePackFiles\i386\oemig50.exe
+ 2008-04-13 17:34:18 83,456 ----a-w C:\WINDOWS\ServicePackFiles\i386\oemig50.exe
- 2008-04-13 17:33:40 487,424 ----a-w C:\WINDOWS\ServicePackFiles\i386\oledb32.dll
+ 2008-04-13 17:33:40 512,000 ----a-w C:\WINDOWS\ServicePackFiles\i386\oledb32.dll
- 2008-04-13 17:34:18 51,712 ----a-w C:\WINDOWS\ServicePackFiles\i386\oobebaln.exe
+ 2008-04-13 17:34:18 37,888 ----a-w C:\WINDOWS\ServicePackFiles\i386\oobebaln.exe
- 2008-04-13 17:34:18 216,576 ----a-w C:\WINDOWS\ServicePackFiles\i386\osk.exe
+ 2008-04-13 17:34:18 218,112 ----a-w C:\WINDOWS\ServicePackFiles\i386\osk.exe
- 2008-04-13 17:34:18 59,904 ----a-w C:\WINDOWS\ServicePackFiles\i386\packager.exe
+ 2008-04-13 17:34:18 83,968 ----a-w C:\WINDOWS\ServicePackFiles\i386\packager.exe
- 2008-04-13 17:33:40 69,632 ----a-w C:\WINDOWS\ServicePackFiles\i386\pautoenr.dll
+ 2008-04-13 17:33:40 114,176 ----a-w C:\WINDOWS\ServicePackFiles\i386\pautoenr.dll
- 2008-04-13 17:34:18 15,872 ----a-w C:\WINDOWS\ServicePackFiles\i386\perfmon.exe
+ 2008-04-13 17:34:18 32,768 ----a-w C:\WINDOWS\ServicePackFiles\i386\perfmon.exe
- 2008-04-13 17:33:40 172,032 ----a-w C:\WINDOWS\ServicePackFiles\i386\photowiz.dll
+ 2008-04-13 17:33:40 292,864 ----a-w C:\WINDOWS\ServicePackFiles\i386\photowiz.dll
- 2008-04-13 17:33:40 578,560 ----a-w C:\WINDOWS\ServicePackFiles\i386\printui.dll
+ 2008-04-13 17:33:40 838,656 ----a-w C:\WINDOWS\ServicePackFiles\i386\printui.dll
- 2008-04-13 17:34:20 109,568 ----a-w C:\WINDOWS\ServicePackFiles\i386\progman.exe
+ 2008-04-13 17:34:20 607,232 ----a-w C:\WINDOWS\ServicePackFiles\i386\progman.exe
- 2008-04-13 17:34:20 50,688 ----a-w C:\WINDOWS\ServicePackFiles\i386\proquota.exe
+ 2008-04-13 17:34:20 109,056 ----a-w C:\WINDOWS\ServicePackFiles\i386\proquota.exe
- 2008-04-13 17:33:40 1,294,336 ----a-w C:\WINDOWS\ServicePackFiles\i386\quartz.dll
+ 2008-04-13 17:33:40 1,539,072 ----a-w C:\WINDOWS\ServicePackFiles\i386\quartz.dll
- 2008-04-13 17:33:40 685,568 ----a-w C:\WINDOWS\ServicePackFiles\i386\rasdlg.dll
+ 2008-04-13 17:33:40 954,368 ----a-w C:\WINDOWS\ServicePackFiles\i386\rasdlg.dll
- 2008-04-13 17:34:20 57,344 ----a-w C:\WINDOWS\ServicePackFiles\i386\rasphone.exe
+ 2008-04-13 17:34:20 60,416 ----a-w C:\WINDOWS\ServicePackFiles\i386\rasphone.exe
- 2008-04-13 17:34:20 35,840 ----a-w C:\WINDOWS\ServicePackFiles\i386\rcimlby.exe
+ 2008-04-13 17:34:20 43,520 ----a-w C:\WINDOWS\ServicePackFiles\i386\rcimlby.exe
- 2008-04-13 17:34:20 153,088 ----a-w C:\WINDOWS\ServicePackFiles\i386\regedit.exe
+ 2008-04-13 17:34:20 273,920 ----a-w C:\WINDOWS\ServicePackFiles\i386\regedit.exe
- 2008-04-13 17:33:40 405,504 ----a-w C:\WINDOWS\ServicePackFiles\i386\regwizc.dll
+ 2004-08-19 14:09:40 745,472 ----a-w C:\WINDOWS\ServicePackFiles\i386\regwizc.dll
- 2008-04-13 17:33:40 61,952 ----a-w C:\WINDOWS\ServicePackFiles\i386\remotepg.dll
+ 2008-04-13 17:33:40 153,088 ----a-w C:\WINDOWS\ServicePackFiles\i386\remotepg.dll
- 2008-04-13 17:34:20 384,512 ----a-w C:\WINDOWS\ServicePackFiles\i386\rstrui.exe
+ 2008-04-13 17:34:20 421,376 ----a-w C:\WINDOWS\ServicePackFiles\i386\rstrui.exe
- 2008-04-13 17:34:22 33,792 ----a-w C:\WINDOWS\ServicePackFiles\i386\rundll32.exe
+ 2008-04-13 17:34:22 35,328 ----a-w C:\WINDOWS\ServicePackFiles\i386\rundll32.exe
- 2008-04-13 17:34:22 14,336 ----a-w C:\WINDOWS\ServicePackFiles\i386\runonce.exe
+ 2008-04-13 17:34:22 39,424 ----a-w C:\WINDOWS\ServicePackFiles\i386\runonce.exe
- 2008-04-13 17:33:42 180,224 ----a-w C:\WINDOWS\ServicePackFiles\i386\scrobj.dll
+ 2008-04-13 17:33:42 188,416 ----a-w C:\WINDOWS\ServicePackFiles\i386\scrobj.dll
- 2008-04-13 17:33:42 55,296 ----a-w C:\WINDOWS\ServicePackFiles\i386\sendmail.dll
+ 2008-04-13 17:33:42 58,368 ----a-w C:\WINDOWS\ServicePackFiles\i386\sendmail.dll
- 2008-04-13 17:33:42 56,320 ----a-w C:\WINDOWS\ServicePackFiles\i386\servdeps.dll
+ 2008-04-13 17:33:42 135,168 ----a-w C:\WINDOWS\ServicePackFiles\i386\servdeps.dll
- 2008-04-13 17:34:22 23,040 ----a-w C:\WINDOWS\ServicePackFiles\i386\setup.exe
+ 2008-04-13 17:34:22 47,616 ----a-w C:\WINDOWS\ServicePackFiles\i386\setup.exe
- 2004-08-19 14:10:04 778,240 ----a-w C:\WINDOWS\ServicePackFiles\i386\setup_wm.exe
+ 2008-04-13 17:34:22 778,240 ----a-w C:\WINDOWS\ServicePackFiles\i386\setup_wm.exe
- 2008-04-13 17:33:42 1,005,056 ----a-w C:\WINDOWS\ServicePackFiles\i386\setupapi.dll
+ 2008-04-13 17:33:42 1,892,352 ----a-w C:\WINDOWS\ServicePackFiles\i386\setupapi.dll
- 2008-04-13 17:01:00 572,416 ----a-w C:\WINDOWS\ServicePackFiles\i386\shdoclc.dll
+ 2008-04-13 17:01:00 650,240 ----a-w C:\WINDOWS\ServicePackFiles\i386\shdoclc.dll
- 2008-04-13 17:33:42 1,499,136 ----a-w C:\WINDOWS\ServicePackFiles\i386\shdocvw.dll
+ 2008-04-13 17:33:42 2,016,768 ----a-w C:\WINDOWS\ServicePackFiles\i386\shdocvw.dll
- 2008-04-13 17:33:42 8,517,632 ----a-w C:\WINDOWS\ServicePackFiles\i386\shell32.dll
+ 2008-04-13 17:33:42 12,719,104 ----a-w C:\WINDOWS\ServicePackFiles\i386\shell32.dll
- 2008-04-13 17:33:42 440,320 ----a-w C:\WINDOWS\ServicePackFiles\i386\shimgvw.dll
+ 2008-04-13 17:33:42 1,033,216 ----a-w C:\WINDOWS\ServicePackFiles\i386\shimgvw.dll
- 2008-04-13 17:33:42 474,624 ----a-w C:\WINDOWS\ServicePackFiles\i386\shlwapi.dll
+ 2008-04-13 17:33:42 484,352 ----a-w C:\WINDOWS\ServicePackFiles\i386\shlwapi.dll
- 2008-04-13 17:34:22 78,848 ----a-w C:\WINDOWS\ServicePackFiles\i386\shrpubw.exe
+ 2008-04-13 17:34:22 103,424 ----a-w C:\WINDOWS\ServicePackFiles\i386\shrpubw.exe
- 2008-04-13 17:33:42 28,160 ----a-w C:\WINDOWS\ServicePackFiles\i386\shscrap.dll
+ 2008-04-13 17:33:42 37,376 ----a-w C:\WINDOWS\ServicePackFiles\i386\shscrap.dll
- 2008-04-13 17:34:22 71,168 ----a-w C:\WINDOWS\ServicePackFiles\i386\sigverif.exe
+ 2008-04-13 17:34:22 96,256 ----a-w C:\WINDOWS\ServicePackFiles\i386\sigverif.exe
- 2008-04-13 17:34:24 133,120 ----a-w C:\WINDOWS\ServicePackFiles\i386\sndrec32.exe
+ 2008-04-13 17:34:24 182,272 ----a-w C:\WINDOWS\ServicePackFiles\i386\sndrec32.exe
- 2008-04-13 17:34:24 539,136 ----a-w C:\WINDOWS\ServicePackFiles\i386\spider.exe
+ 2008-04-13 17:34:24 1,565,184 ----a-w C:\WINDOWS\ServicePackFiles\i386\spider.exe
- 2008-04-13 17:33:48 727,102 ----a-w C:\WINDOWS\ServicePackFiles\i386\srchui.dll
+ 2008-04-13 17:33:48 943,166 ----a-w C:\WINDOWS\ServicePackFiles\i386\srchui.dll
- 2008-04-13 17:33:48 67,584 ----a-w C:\WINDOWS\ServicePackFiles\i386\srclient.dll
+ 2008-04-13 17:33:48 78,848 ----a-w C:\WINDOWS\ServicePackFiles\i386\srclient.dll
- 2008-04-13 17:33:48 241,664 ----a-w C:\WINDOWS\ServicePackFiles\i386\srrstr.dll
+ 2008-04-13 17:33:48 267,776 ----a-w C:\WINDOWS\ServicePackFiles\i386\srrstr.dll
- 2008-04-13 17:33:48 138,240 ----a-w C:\WINDOWS\ServicePackFiles\i386\sti_ci.dll
+ 2008-04-13 17:33:48 265,216 ----a-w C:\WINDOWS\ServicePackFiles\i386\sti_ci.dll
- 2008-04-13 17:34:24 14,848 ----a-w C:\WINDOWS\ServicePackFiles\i386\stimon.exe
+ 2008-04-13 17:34:24 30,208 ----a-w C:\WINDOWS\ServicePackFiles\i386\stimon.exe
- 2008-04-13 17:33:48 122,368 ----a-w C:\WINDOWS\ServicePackFiles\i386\stobject.dll
+ 2008-04-13 17:33:48 133,632 ----a-w C:\WINDOWS\ServicePackFiles\i386\stobject.dll
- 2008-04-13 17:33:48 76,800 ----a-w C:\WINDOWS\ServicePackFiles\i386\storprop.dll
+ 2008-04-13 17:33:48 78,336 ----a-w C:\WINDOWS\ServicePackFiles\i386\storprop.dll
- 2008-04-13 17:33:48 716,800 ----a-w C:\WINDOWS\ServicePackFiles\i386\sxs.dll
+ 2008-04-13 17:33:48 747,008 ----a-w C:\WINDOWS\ServicePackFiles\i386\sxs.dll
- 2008-04-13 17:33:48 197,120 ----a-w C:\WINDOWS\ServicePackFiles\i386\syncui.dll
+ 2008-04-13 17:33:48 683,520 ----a-w C:\WINDOWS\ServicePackFiles\i386\syncui.dll
- 2008-04-13 17:34:26 107,520 ----a-w C:\WINDOWS\ServicePackFiles\i386\sysocmgr.exe
+ 2008-04-13 17:34:26 388,608 ----a-w C:\WINDOWS\ServicePackFiles\i386\sysocmgr.exe
- 2008-04-13 17:33:48 1,013,248 ----a-w C:\WINDOWS\ServicePackFiles\i386\syssetup.dll
+ 2008-04-13 17:33:48 1,446,400 ----a-w C:\WINDOWS\ServicePackFiles\i386\syssetup.dll
- 2008-04-13 17:34:26 143,360 ----a-w C:\WINDOWS\ServicePackFiles\i386\taskmgr.exe
+ 2008-04-13 17:34:26 246,784 ----a-w C:\WINDOWS\ServicePackFiles\i386\taskmgr.exe
- 2008-04-13 17:33:48 47,104 ----a-w C:\WINDOWS\ServicePackFiles\i386\tcpmonui.dll
+ 2008-04-13 17:33:48 101,376 ----a-w C:\WINDOWS\ServicePackFiles\i386\tcpmonui.dll
- 2008-04-13 17:34:26 78,336 ----a-w C:\WINDOWS\ServicePackFiles\i386\telnet.exe
+ 2008-04-13 17:34:26 102,912 ----a-w C:\WINDOWS\ServicePackFiles\i386\telnet.exe
- 2008-04-13 17:33:48 391,168 ----a-w C:\WINDOWS\ServicePackFiles\i386\themeui.dll
+ 2008-04-13 17:33:48 453,120 ----a-w C:\WINDOWS\ServicePackFiles\i386\themeui.dll
- 2008-04-13 17:33:48 132,096 ----a-w C:\WINDOWS\ServicePackFiles\i386\tsoc.dll
+ 2008-04-13 17:33:48 158,208 ----a-w C:\WINDOWS\ServicePackFiles\i386\tsoc.dll
- 2008-04-13 17:33:50 240,128 ----a-w C:\WINDOWS\ServicePackFiles\i386\upnpui.dll
+ 2008-04-13 17:33:50 286,720 ----a-w C:\WINDOWS\ServicePackFiles\i386\upnpui.dll
- 2008-04-13 17:33:50 37,888 ----a-w C:\WINDOWS\ServicePackFiles\i386\url.dll
+ 2008-04-13 17:33:50 70,144 ----a-w C:\WINDOWS\ServicePackFiles\i386\url.dll
- 2008-04-13 17:33:50 621,568 ----a-w C:\WINDOWS\ServicePackFiles\i386\urlmon.dll
+ 2008-04-13 17:33:50 641,536 ----a-w C:\WINDOWS\ServicePackFiles\i386\urlmon.dll
- 2008-04-13 17:33:50 77,312 ----a-w C:\WINDOWS\ServicePackFiles\i386\usbui.dll
+ 2008-04-13 17:33:50 86,528 ----a-w C:\WINDOWS\ServicePackFiles\i386\usbui.dll
- 2008-04-13 17:34:28 50,176 ----a-w C:\WINDOWS\ServicePackFiles\i386\utilman.exe
+ 2008-04-13 17:34:28 51,712 ----a-w C:\WINDOWS\ServicePackFiles\i386\utilman.exe
- 2008-04-13 17:34:28 46,080 ----a-w C:\WINDOWS\ServicePackFiles\i386\wab.exe
+ 2008-04-13 17:34:28 72,192 ----a-w C:\WINDOWS\ServicePackFiles\i386\wab.exe
- 2008-04-13 16:56:24 263,168 ----a-w C:\WINDOWS\ServicePackFiles\i386\wab32res.dll
+ 2008-04-13 16:56:24 748,544 ----a-w C:\WINDOWS\ServicePackFiles\i386\wab32res.dll
- 2008-04-13 17:33:50 32,768 ----a-w C:\WINDOWS\ServicePackFiles\i386\wabfind.dll
+ 2008-04-13 17:33:50 35,328 ----a-w C:\WINDOWS\ServicePackFiles\i386\wabfind.dll
- 2008-04-13 17:33:50 85,504 ----a-w C:\WINDOWS\ServicePackFiles\i386\wabimp.dll
+ 2008-04-13 17:33:50 110,080 ----a-w C:\WINDOWS\ServicePackFiles\i386\wabimp.dll
- 2008-04-13 17:34:28 30,208 ----a-w C:\WINDOWS\ServicePackFiles\i386\wabmig.exe
+ 2008-04-13 17:34:28 54,784 ----a-w C:\WINDOWS\ServicePackFiles\i386\wabmig.exe
- 2008-04-13 17:33:50 201,216 ----a-w C:\WINDOWS\ServicePackFiles\i386\wbemcntl.dll
+ 2008-04-13 17:33:50 309,760 ----a-w C:\WINDOWS\ServicePackFiles\i386\wbemcntl.dll
- 2008-04-13 17:33:50 281,600 ----a-w C:\WINDOWS\ServicePackFiles\i386\webcheck.dll
+ 2008-04-13 17:33:50 440,832 ----a-w C:\WINDOWS\ServicePackFiles\i386\webcheck.dll
- 2008-04-13 17:34:28 66,560 ----a-w C:\WINDOWS\ServicePackFiles\i386\wextract.exe
+ 2008-04-13 17:34:28 372,224 ----a-w C:\WINDOWS\ServicePackFiles\i386\wextract.exe
- 2008-04-13 17:34:28 438,784 ----a-w C:\WINDOWS\ServicePackFiles\i386\wiaacmgr.exe
+ 2008-04-13 17:34:28 532,992 ----a-w C:\WINDOWS\ServicePackFiles\i386\wiaacmgr.exe
- 2008-04-13 17:33:50 465,920 ----a-w C:\WINDOWS\ServicePackFiles\i386\wiadefui.dll
+ 2008-04-13 17:33:50 3,701,248 ----a-w C:\WINDOWS\ServicePackFiles\i386\wiadefui.dll
- 2008-04-13 17:33:50 594,432 ----a-w C:\WINDOWS\ServicePackFiles\i386\wiashext.dll
+ 2008-04-13 17:33:50 704,000 ----a-w C:\WINDOWS\ServicePackFiles\i386\wiashext.dll
- 2008-04-13 16:58:14 1,647,616 ----a-w C:\WINDOWS\ServicePackFiles\i386\winbrand.dll
+ 2008-04-13 16:58:14 2,957,312 ----a-w C:\WINDOWS\ServicePackFiles\i386\winbrand.dll
- 2008-04-13 17:34:28 288,256 ----a-w C:\WINDOWS\ServicePackFiles\i386\winhlp32.exe
+ 2008-04-13 17:34:28 355,840 ----a-w C:\WINDOWS\ServicePackFiles\i386\winhlp32.exe
- 2008-04-13 17:32:54 764,416 ----a-w C:\WINDOWS\ServicePackFiles\i386\winntbbu.dll
+ 2008-04-13 17:32:54 3,962,880 ----a-w C:\WINDOWS\ServicePackFiles\i386\winntbbu.dll
- 2008-04-13 17:33:50 293,888 ----a-w C:\WINDOWS\ServicePackFiles\i386\winsrv.dll
+ 2008-04-13 17:33:50 295,424 ----a-w C:\WINDOWS\ServicePackFiles\i386\winsrv.dll
- 2008-04-13 17:33:50 176,640 ----a-w C:\WINDOWS\ServicePackFiles\i386\wintrust.dll
+ 2008-04-13 17:33:50 186,368 ----a-w C:\WINDOWS\ServicePackFiles\i386\wintrust.dll
- 2008-04-13 17:33:50 4,290,048 ----a-w C:\WINDOWS\ServicePackFiles\i386\wmm2res.dll
+ 2004-08-19 14:09:50 4,572,672 ----a-w C:\WINDOWS\ServicePackFiles\i386\wmm2res.dll
- 2007-04-30 00:22:16 4,898,816 ----a-w C:\WINDOWS\ServicePackFiles\i386\wmp.dll
+ 2008-04-13 17:33:50 5,038,080 ----a-w C:\WINDOWS\ServicePackFiles\i386\wmp.dll
- 2004-08-19 14:10:06 73,728 ----a-w C:\WINDOWS\ServicePackFiles\i386\wmplayer.exe
+ 2008-04-13 17:34:30 73,728 ----a-w C:\WINDOWS\ServicePackFiles\i386\wmplayer.exe
- 2004-08-19 14:09:12 3,616,768 ----a-w C:\WINDOWS\ServicePackFiles\i386\wmploc.dll
+ 2008-04-13 17:02:18 4,067,328 ----a-w C:\WINDOWS\ServicePackFiles\i386\wmploc.dll
- 2008-04-13 17:34:30 32,256 ----a-w C:\WINDOWS\ServicePackFiles\i386\wpabaln.exe
+ 2008-04-13 17:34:30 34,304 ----a-w C:\WINDOWS\ServicePackFiles\i386\wpabaln.exe
- 2008-04-13 17:34:30 155,648 ----a-w C:\WINDOWS\ServicePackFiles\i386\wscript.exe
+ 2008-04-13 17:34:30 204,800 ----a-w C:\WINDOWS\ServicePackFiles\i386\wscript.exe
- 2008-04-13 17:34:30 168,960 ----a-w C:\WINDOWS\ServicePackFiles\i386\wuauclt1.exe
+ 2008-04-13 17:34:30 202,240 ----a-w C:\WINDOWS\ServicePackFiles\i386\wuauclt1.exe
- 2008-04-13 17:04:48 197,632 ----a-w C:\WINDOWS\ServicePackFiles\i386\xpsp1res.dll
+ 2008-04-13 09:35:22 229,376 ----a-w C:\WINDOWS\ServicePackFiles\i386\xpsp1res.dll
- 2008-04-13 08:39:26 2,897,920 ----a-w C:\WINDOWS\ServicePackFiles\i386\xpsp2res.dll
+ 2008-04-13 09:36:48 3,579,392 ----a-w C:\WINDOWS\ServicePackFiles\i386\xpsp2res.dll
- 2008-04-13 17:33:54 340,992 ----a-w C:\WINDOWS\ServicePackFiles\i386\zipfldr.dll
+ 2008-04-13 17:33:54 757,760 ----a-w C:\WINDOWS\ServicePackFiles\i386\zipfldr.dll
- 2008-04-13 17:33:32 3,166,208 ----a-w C:\WINDOWS\srchasst\msgr3en.dll
+ 2004-08-19 14:09:34 3,198,976 ----a-w C:\WINDOWS\srchasst\msgr3en.dll
- 2008-04-13 17:33:48 727,102 ----a-w C:\WINDOWS\srchasst\srchui.dll
+ 2008-04-13 17:33:48 943,166 ----a-w C:\WINDOWS\srchasst\srchui.dll
- 2008-04-13 17:33:54 190,464 ----a-w C:\WINDOWS\system32\accwiz.exe
+ 2008-04-13 17:33:54 192,512 ----a-w C:\WINDOWS\system32\accwiz.exe
- 2008-04-13 17:33:20 61,440 ----a-w C:\WINDOWS\system32\admparse.dll
+ 2008-04-13 17:33:20 94,208 ----a-w C:\WINDOWS\system32\admparse.dll
- 2008-04-13 17:33:54 98,304 ----a-w C:\WINDOWS\system32\ahui.exe
+ 2008-04-13 17:33:54 84,480 ----a-w C:\WINDOWS\system32\ahui.exe
- 2008-04-13 17:33:20 29,184 ----a-w C:\WINDOWS\system32\batmeter.dll
+ 2008-04-13 17:33:20 38,400 ----a-w C:\WINDOWS\system32\batmeter.dll
- 2008-04-13 17:33:20 8,704 ----a-w C:\WINDOWS\system32\batt.dll
+ 2008-04-13 17:33:20 33,280 ----a-w C:\WINDOWS\system32\batt.dll
- 2008-04-13 17:33:22 1,025,024 ----a-w C:\WINDOWS\system32\browseui.dll
+ 2008-04-13 17:33:22 1,053,696 ----a-w C:\WINDOWS\system32\browseui.dll
- 2008-04-13 17:33:22 20,992 ----a-w C:\WINDOWS\system32\bthci.dll
+ 2008-04-13 17:33:22 45,056 ----a-w C:\WINDOWS\system32\bthci.dll
- 2008-04-13 17:33:22 85,504 ----a-w C:\WINDOWS\system32\cabview.dll
+ 2008-04-13 17:33:22 90,112 ----a-w C:\WINDOWS\system

[Okocza]

zapisz go w plik txt i wrzuć go na jakiś serwer. jest za długi żeby go tu wstawic..

[kristof200]

Kod: Zaznacz wszystko

http://rapidshare.com/files/112545513/log.txt.html

[wojtas]

wklej do notatnika

Windows Registry Editor Version 5.00

[-HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{21A9A23D-5D94-45B3-B61A-89824E5F2525}]

w notatniku u góry>>>plik zapisz jako>>>Zmien rozszerzenie z TXT na Wszystkie pliki *.* >>> Zapisz pod nazwą FIX.REG

Klikasz dwa razy na powstały plik fix i dodajesz go do rejestru....

1. Ściągnij OTMoveIt i go włacz i odpal go z opcji CleanUp
2. wykonaj optymalizację windowsa
3.sciagnij ATF_Cleaner
zaznacz
Windows Temp
All users Temp
Temporary internet files
Recycle Bin
i wcisnij EMPTY SELECTED
4.Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach). Po chwili włącz je powrotem

[kristof200]

Dzieki bardzo chłopaki !!To pomogło komputer chodzi szybciej! Jeszcze raz dziekuje!