Proszę o sprawdzenie - strasznie muli.....

[bartel43]

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:54:01, on 2009-02-07
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\VIA\RAID\raid_tool.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\VTtrayp.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\PROGRA~1\NEOSTR~1\CnxMon.exe
C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe
C:\Program Files\Winamp\winampa.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\A4Tech\Mouse\Amoumain.exe
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Analog Devices\SoundMAX\smax4.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Gadu-Gadu\gg.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\WgaTray.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\ALOT\Pulpit\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.onet.pl/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://de.rd.yahoo.com/customize/ie/defaults/su/msgr8/*http://de.search.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\NEOSTR~1\SEARCH~1.DLL
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
R3 - URLSearchHook: free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files\free-downloads.net\tbfree.dll
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: My Global Search Bar BHO - {37B85A21-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL (file missing)
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files\free-downloads.net\tbfree.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: My Global Search Bar - {37B85A29-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL (file missing)
O3 - Toolbar: free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files\free-downloads.net\tbfree.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [RaidTool] C:\Program Files\VIA\RAID\raid_tool.exe
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\NEOSTR~1\CnxMon.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\NEOSTR~1\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [WheelMouse] C:\Program Files\A4Tech\Mouse\Amoumain.exe
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [SoundMax] "C:\Program Files\Analog Devices\SoundMAX\smax4.exe" /tray
O4 - HKLM\..\Run: [Adobe Photo Downloader] "D:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [AGEIA PhysX SysTray] C:\Program Files\AGEIA Technologies\bin\TrayIcon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Pobierz wszystkie VIdeo za pomocą BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: Pobierz wszystko za pomocą BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Pobierz za pomocą BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll/206 (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

--
End of file - 9781 bytes
[quote][/quote]

[sgsman]

Wsadź loga w tagi code jak jest przykazane i daj loga z combofixa, bo nikt nie zamierza takiego czegoś sprawdzać. Do tego opisz szerzej problem w topicu (netykieta).

[bartel43]

Kurcze jestem w tym kompletnie zielony....jakbyś mi to opisał trochę bardziej szczegółowo to może jakoś bym to naprawił.....bo nie idzie pracować na komputerze.....

[Okocza]

bartel43, wejdź w edycję postu, zaznacz cały log i przyciśnij przycisk 'code' potem wygeneruj log z programu Combofix i też go wstaw w tym temacie, inaczej nikt nie pomoże.

[bartel43]

Po zeskanowaniu przez Combofix.... po wciśnięciu ctrl+alt+delete użcie procesora zostało obnizone do podstawowych działań... wg mnie wszystko wróciło do normy....
Czy jeszcze muszę coś z tym zrobić czy to juz jest wszystko ok ??????????
Z góry dzięki !!!

[Okocza]

bartel43, wstawić ten log.

[bartel43]

Chodzi o to ?????

[sgsman]

Nic nie widać w Twym poście. chodzi o to, żebyś wkleił tutaj na forum w tagach code zawartość pliku c:/combofix.txt by można bło ją przeanalizować w poszukiwaniu virów.

[bartel43]

+ 2005-03-18 15:23:10 53,248 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.AudioVideoPlayback.dll
+ 2005-03-18 15:23:10 12,800 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.Diagnostics.dll
+ 2005-03-18 15:23:14 473,600 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.Direct3D.dll9:26:47 21,536 -c--a-w c:\windows\system32\GDIPFONTCACHEV1.DAT

[sgsman]

Czytałbyś tematy to byś wiedział, co robić. Wrzuć na http://wklej.org.

[bartel43]

+ 2008-08-26 08:26:55 63,488 ----a-w c:\windows\system32\icardie.dll
+ 2006-06-29 07:05:44 26,112 ------w c:\windows\system32\idndl.dll
- 2004-08-03 22:44:22 34,304 -c--a-w c:\windows\system32\ie4uinit.exe
+ 2008-08-25 08:42:17 70,656 ------w c:\windows\system32\ie4uinit.exe
- 2004-08-03 22:44:00 139,264 -c--a-w c:\windows\system32\ieakeng.dll
+ 2008-08-26 08:26:55 153,088 ------w c:\windows\system32\ieakeng.dll
- 2004-08-03 22:44:00 219,648 -c--a-w c:\windows\system32\ieaksie.dll
+ 2008-08-26 08:26:56 230,400 ------w c:\windows\system32\ieaksie.dll
- 2002-09-29 00:00:00 237,568 -c--a-w c:\windows\system32\ieakui.dll
+ 2008-08-23 05:54:51 161,792 ------w c:\windows\system32\ieakui.dll
+ 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\system32\ieapfltr.dat
+ 2008-08-26 08:26:56 383,488 ----a-w c:\windows\system32\ieapfltr.dll
- 2004-08-03 22:44:00 323,584 -c--a-w c:\windows\system32\iedkcs32.dll
+ 2008-08-26 08:26:56 384,512 ------w c:\windows\system32\iedkcs32.dll
- 2004-08-03 22:44:00 81,920 -c--a-w c:\windows\system32\ieencode.dll
+ 2007-08-13 17:45:18 78,336 ----a-w c:\windows\system32\ieencode.dll
+ 2008-10-03 17:26:30 6,066,176 ----a-w c:\windows\system32\ieframe.dll
- 2008-06-23 15:41:36 251,392 ----a-w c:\windows\system32\iepeers.dll
+ 2007-08-13 17:54:10 191,488 ----a-w c:\windows\system32\iepeers.dll
- 2004-08-03 22:44:00 48,640 -c--a-w c:\windows\system32\iernonce.dll
+ 2008-08-26 08:26:58 44,544 ------w c:\windows\system32\iernonce.dll
+ 2008-08-26 08:26:58 267,776 ----a-w c:\windows\system32\iertutil.dll
- 2004-08-03 22:44:00 63,488 -c--a-w c:\windows\system32\iesetup.dll
+ 2007-08-13 17:39:12 55,296 ----a-w c:\windows\system32\iesetup.dll
+ 2008-08-25 08:38:00 13,824 ----a-w c:\windows\system32\ieudinit.exe
+ 2007-08-13 17:54:10 180,736 ------w c:\windows\system32\ieui.dll
- 2004-07-26 16:16:10 1,568,768 -c----w c:\windows\system32\ImagX7.dll
+ 2004-07-26 15:16:10 1,568,768 ----a-w c:\windows\system32\imagX7.dll
- 2004-07-26 16:16:10 476,320 -c----w c:\windows\system32\ImagXpr7.dll
+ 2004-07-26 15:16:10 476,320 ----a-w c:\windows\system32\imagXpr7.dll
- 2004-07-26 16:16:10 262,144 -c----w c:\windows\system32\ImagXR7.dll
+ 2004-07-26 15:16:10 262,144 ----a-w c:\windows\system32\imagXR7.dll
- 2004-07-26 16:16:10 471,040 -c----w c:\windows\system32\ImagXRA7.dll
+ 2004-07-26 15:16:10 471,040 ----a-w c:\windows\system32\imagXRA7.dll
- 2004-08-03 22:44:00 35,840 ----a-w c:\windows\system32\imgutil.dll
+ 2007-08-13 17:36:06 36,352 ----a-w c:\windows\system32\imgutil.dll
- 2007-08-21 06:18:06 683,520 -c--a-w c:\windows\system32\inetcomm.dll
+ 2008-04-11 18:51:52 683,520 ----a-w c:\windows\system32\inetcomm.dll
- 2008-06-23 15:41:36 96,768 ----a-w c:\windows\system32\inseng.dll
+ 2007-08-13 17:39:02 92,672 ----a-w c:\windows\system32\inseng.dll
- 2008-06-09 23:21:01 135,168 ----a-w c:\windows\system32\java.exe
+ 2008-12-12 14:57:09 144,792 ----a-w c:\windows\system32\java.exe
- 2008-06-09 23:21:04 135,168 ----a-w c:\windows\system32\javaw.exe
+ 2008-12-12 14:57:09 144,792 ----a-w c:\windows\system32\javaw.exe
- 2008-06-10 00:32:34 139,264 ----a-w c:\windows\system32\javaws.exe
+ 2008-12-12 14:57:09 148,888 ----a-w c:\windows\system32\javaws.exe
- 2007-12-18 14:42:55 450,560 ----a-w c:\windows\system32\jscript.dll
+ 2007-08-13 17:38:04 491,520 ----a-w c:\windows\system32\jscript.dll
- 2008-06-23 15:41:36 16,384 ----a-w c:\windows\system32\jsproxy.dll
+ 2008-08-26 08:26:58 27,648 ------w c:\windows\system32\jsproxy.dll
- 2003-12-11 14:42:34 54,272 -c--a-w c:\windows\system32\KERNELH2.DLL
+ 2003-12-28 19:58:54 54,272 -c--a-w c:\windows\system32\KERNELH2.DLL
+ 2007-04-10 13:02:50 1,476,992 ------w c:\windows\system32\LegitCheckControl.dll
+ 2004-05-27 15:46:00 872,448 ----a-w c:\windows\system32\libgfl211.dll
+ 2004-02-04 05:33:00 307,200 ----a-w c:\windows\system32\libmng.dll
- 2004-08-03 22:44:02 22,016 -c--a-w c:\windows\system32\licmgr10.dll
+ 2007-08-13 17:44:18 40,960 ----a-w c:\windows\system32\licmgr10.dll
+ 2008-10-05 03:16:26 235,936 ----a-r c:\windows\system32\Macromed\Flash\FlashUtil10a.exe
- 2007-11-20 15:52:00 2,884,992 -c--a-w c:\windows\system32\Macromed\Flash\NPSWF32.dll
+ 2008-10-05 03:24:02 3,695,008 ----a-w c:\windows\system32\Macromed\Flash\NPSWF32.dll
- 2007-11-20 15:52:00 218,496 -c--a-w c:\windows\system32\Macromed\Flash\NPSWF32_FlashUtil.exe
+ 2008-10-05 03:24:04 235,936 ----a-w c:\windows\system32\Macromed\Flash\NPSWF32_FlashUtil.exe
- 2007-11-25 18:36:54 48,749 -c--a-w c:\windows\system32\Macromed\Flash\uninstall_activeX.exe
+ 2009-01-01 21:51:56 89,102 ----a-w c:\windows\system32\Macromed\Flash\uninstall_activeX.exe
+ 2009-01-29 17:37:05 84,661 ----a-w c:\windows\system32\Macromed\Flash\uninstall_plugin.exe
+ 2008-11-03 15:10:26 17,318,336 ----a-w c:\windows\system32\MRT.exe
- 2005-06-29 01:52:57 74,240 ----a-w c:\windows\system32\mscms.dll
+ 2008-06-24 16:24:26 74,240 ----a-w c:\windows\system32\mscms.dll
- 2005-09-23 05:28:52 270,848 ----a-w c:\windows\system32\mscoree.dll
+ 2006-12-22 11:28:14 271,360 ----a-w c:\windows\system32\mscoree.dll
- 2005-09-23 05:28:52 150,016 -c--a-w c:\windows\system32\mscorier.dll
+ 2005-09-23 06:28:52 150,016 ----a-w c:\windows\system32\mscorier.dll
- 2005-09-23 05:28:52 74,240 -c--a-w c:\windows\system32\mscories.dll
+ 2005-09-23 06:28:52 74,240 ----a-w c:\windows\system32\mscories.dll
+ 2008-08-26 08:26:59 459,264 ----a-w c:\windows\system32\msfeeds.dll
+ 2008-08-26 08:26:59 52,224 ----a-w c:\windows\system32\msfeedsbs.dll
+ 2007-08-13 17:36:40 12,288 ------w c:\windows\system32\msfeedssync.exe
- 2004-08-03 22:44:24 29,184 ----a-w c:\windows\system32\mshta.exe
+ 2007-08-13 17:32:30 45,568 ----a-w c:\windows\system32\mshta.exe
- 2007-10-30 10:19:06 3,079,680 ------w c:\windows\system32\mshtml.dll
+ 2008-08-27 13:57:02 3,593,216 ----a-w c:\windows\system32\mshtml.dll
- 2008-06-23 15:41:37 449,024 ----a-w c:\windows\system32\mshtmled.dll
+ 2008-08-26 08:27:00 477,696 ------w c:\windows\system32\mshtmled.dll
- 2004-08-03 22:42:58 57,344 ----a-w c:\windows\system32\mshtmler.dll
+ 2007-08-13 17:01:12 48,128 ----a-w c:\windows\system32\mshtmler.dll
- 2002-09-29 00:00:00 146,432 ----a-w c:\windows\system32\msls31.dll
+ 2007-08-13 17:54:10 156,160 ----a-w c:\windows\system32\msls31.dll
- 2008-06-23 15:41:37 146,432 ----a-w c:\windows\system32\msrating.dll
+ 2008-08-26 08:27:00 193,024 ------w c:\windows\system32\msrating.dll
- 2000-05-24 05:45:58 118,784 -c--a-w c:\windows\system32\MSSTDFMT.DLL
+ 2000-03-13 22:00:00 118,784 -c--a-w c:\windows\system32\MSSTDFMT.DLL
- 2008-06-23 15:41:37 532,480 ----a-w c:\windows\system32\mstime.dll
+ 2008-08-26 08:27:00 671,232 ------w c:\windows\system32\mstime.dll
- 2002-01-05 02:37:26 344,064 -c--a-w c:\windows\system32\msvcr70.dll
+ 2002-01-05 03:37:28 344,064 -c--a-w c:\windows\system32\msvcr70.dll
- 2005-09-23 05:29:00 6,144 -c--a-w c:\windows\system32\mui\0409\mscorees.dll
+ 2006-12-22 12:02:36 6,144 ----a-w c:\windows\system32\mui\0409\mscorees.dll
+ 2005-02-16 13:18:04 90,184 ----a-w c:\windows\system32\NeroCo.dll
- 2003-02-20 17:16:34 32,768 -c--a-w c:\windows\system32\netfxperf.dll
+ 2005-09-23 06:28:56 32,768 ----a-w c:\windows\system32\netfxperf.dll
+ 2006-06-28 16:59:26 24,576 ------w c:\windows\system32\nlsdl.dll
+ 2006-06-29 07:05:44 23,552 ------w c:\windows\system32\normaliz.dll
- 2004-08-03 22:44:08 97,280 ----a-w c:\windows\system32\occache.dll
+ 2008-08-26 08:27:00 102,912 ------w c:\windows\system32\occache.dll
+ 2008-10-16 13:12:17 109,080 -c--a-w c:\windows\system32\OpenAL32.dll
- 2008-08-15 19:26:35 62,344 ----a-w c:\windows\system32\perfc009.dat
+ 2009-01-27 14:48:13 62,344 ----a-w c:\windows\system32\perfc009.dat
- 2008-08-15 19:26:35 79,188 ----a-w c:\windows\system32\perfc015.dat
+ 2009-01-27 14:48:14 79,188 ----a-w c:\windows\system32\perfc015.dat
- 2008-08-15 19:26:35 401,064 ----a-w c:\windows\system32\perfh009.dat
+ 2009-01-27 14:48:13 401,064 ----a-w c:\windows\system32\perfh009.dat
- 2008-08-15 19:26:35 457,678 ----a-w c:\windows\system32\perfh015.dat
+ 2009-01-27 14:48:14 457,678 ----a-w c:\windows\system32\perfh015.dat
+ 2006-10-24 11:30:20 412,160 ------w c:\windows\system32\photometadatahandler.dll
- 2008-06-23 15:41:37 39,424 ----a-w c:\windows\system32\pngfilt.dll
+ 2008-08-26 08:27:00 44,544 ------w c:\windows\system32\pngfilt.dll
+ 2006-10-14 15:43:38 124,416 ------w c:\windows\system32\prntvpt.dll
- 2007-10-29 22:44:30 1,291,264 ----a-w c:\windows\system32\quartz.dll
+ 2008-05-07 05:16:26 1,291,264 ----a-w c:\windows\system32\quartz.dll
+ 2006-08-24 15:15:06 150,808 ----a-w c:\windows\system32\rgb9rast_2.dll
- 2007-10-11 06:14:31 1,494,528 ------w c:\windows\system32\shdocvw.dll
+ 2008-06-23 15:41:37 1,494,528 ----a-w c:\windows\system32\shdocvw.dll
- 2007-10-11 06:14:31 474,112 ------w c:\windows\system32\shlwapi.dll
+ 2008-06-23 15:41:37 474,112 ----a-w c:\windows\system32\shlwapi.dll
+ 2008-10-16 13:08:58 34,328 ----a-w c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.2.6001.788\wups.dll
+ 2008-10-16 13:09:44 43,544 ----a-w c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.2.6001.788\wups2.dll
- 2007-11-30 12:40:46 19,320 ------w c:\windows\system32\spmsg.dll
+ 2007-11-30 11:21:28 19,320 ------w c:\windows\system32\spmsg.dll
+ 2004-04-23 06:00:00 68,608 ----a-w c:\windows\system32\spool\drivers\w32x86\3\CNMCP64.DLL
+ 2004-04-23 06:00:00 153,600 ----a-w c:\windows\system32\spool\drivers\w32x86\3\CNMD564.DLL
+ 2004-04-23 06:00:00 397,824 ----a-w c:\windows\system32\spool\drivers\w32x86\3\CNMDR64.DLL
+ 2004-04-23 06:00:00 19,456 ----a-w c:\windows\system32\spool\drivers\w32x86\3\CNMFU64.DLL
+ 2004-04-23 06:10:00 18,944 ----a-w c:\windows\system32\spool\drivers\w32x86\3\CNMOP64.DLL
+ 2004-04-23 06:00:00 23,280 ----a-w c:\windows\system32\spool\drivers\w32x86\3\CNMP064.DAT
+ 2004-04-23 06:00:00 27,140 ----a-w c:\windows\system32\spool\drivers\w32x86\3\CNMP164.DAT
+ 2004-04-23 06:00:00 30,320 ----a-w c:\windows\system32\spool\drivers\w32x86\3\CNMP264.DAT
+ 2004-04-23 06:00:00 6,656 ----a-w c:\windows\system32\spool\drivers\w32x86\3\CNMPI64.DLL
+ 2004-04-23 06:00:00 80,896 ----a-w c:\windows\system32\spool\drivers\w32x86\3\CNMPV64.EXE
+ 2004-04-23 06:00:00 850,944 ----a-w c:\windows\system32\spool\drivers\w32x86\3\CNMSB64.DLL
+ 2004-04-23 06:00:00 8,704 ----a-w c:\windows\system32\spool\drivers\w32x86\3\CNMSD64.EXE
+ 2004-04-23 06:00:00 130,048 ----a-w c:\windows\system32\spool\drivers\w32x86\3\CNMSM64.EXE
+ 2004-04-23 06:00:00 6,656 ----a-w c:\windows\system32\spool\drivers\w32x86\3\CNMSQ64.EXE
+ 2004-04-23 06:00:00 110,592 ----a-w c:\windows\system32\spool\drivers\w32x86\3\CNMSR64.DLL
+ 2004-04-23 06:00:00 322,048 ----a-w c:\windows\system32\spool\drivers\w32x86\3\CNMUB64.DLL
+ 2004-04-23 06:00:00 1,571,840 ----a-w c:\windows\system32\spool\drivers\w32x86\3\CNMUI64.DLL
+ 2004-04-23 06:00:00 219,136 ----a-w c:\windows\system32\spool\drivers\w32x86\3\CNMUR64.DLL
+ 2004-04-23 06:00:00 6,656 ----a-w c:\windows\system32\spool\drivers\w32x86\3\CNMW364.DLL
+ 2006-10-14 15:43:18 751,104 ----a-w c:\windows\system32\spool\drivers\w32x86\3\mxdwdrv.dll
+ 2006-10-14 15:42:40 131,584 ----a-w c:\windows\system32\spool\drivers\w32x86\3\mxdwdui.dll
+ 2006-10-14 15:42:18 376,320 ----a-w c:\windows\system32\spool\drivers\w32x86\3\unidrv.dll
+ 2006-10-14 15:42:28 510,464 ----a-w c:\windows\system32\spool\drivers\w32x86\3\unidrvui.dll
+ 2006-10-14 15:40:36 619,008 ----a-w c:\windows\system32\spool\drivers\w32x86\3\unires.dll
+ 2006-10-14 19:22:00 1,698,048 ----a-w c:\windows\system32\spool\drivers\w32x86\3\XpsSvcs.dll
+ 2004-04-23 06:00:00 68,608 ----a-w c:\windows\system32\spool\drivers\w32x86\canonip4000f4f6\CNMCP64.DLL
+ 2004-04-23 06:00:00 153,600 ----a-w c:\windows\system32\spool\drivers\w32x86\canonip4000f4f6\CNMD564.DLL
+ 2004-04-23 06:00:00 397,824 ----a-w c:\windows\system32\spool\drivers\w32x86\canonip4000f4f6\CNMDR64.DLL
+ 2004-04-23 06:00:00 19,456 ----a-w c:\windows\system32\spool\drivers\w32x86\canonip4000f4f6\CNMFU64.DLL
+ 2004-04-23 06:10:00 18,944 ----a-w c:\windows\system32\spool\drivers\w32x86\canonip4000f4f6\CNMOP64.DLL
+ 2004-04-23 06:00:00 23,280 ----a-w c:\windows\system32\spool\drivers\w32x86\canonip4000f4f6\CNMP064.DAT
+ 2004-04-23 06:00:00 27,140 ----a-w c:\windows\system32\spool\drivers\w32x86\canonip4000f4f6\CNMP164.DAT
+ 2004-04-23 06:00:00 30,320 ----a-w c:\windows\system32\spool\drivers\w32x86\canonip4000f4f6\CNMP264.DAT
+ 2004-04-23 06:00:00 6,656 ----a-w c:\windows\system32\spool\drivers\w32x86\canonip4000f4f6\CNMPI64.DLL
+ 2004-04-23 06:00:00 80,896 ----a-w c:\windows\system32\spool\drivers\w32x86\canonip4000f4f6\CNMPV64.EXE
+ 2004-04-23 06:00:00 850,944 ----a-w c:\windows\system32\spool\drivers\w32x86\canonip4000f4f6\CNMSB64.DLL
+ 2004-04-23 06:00:00 8,704 ----a-w c:\windows\system32\spool\drivers\w32x86\canonip4000f4f6\CNMSD64.EXE
+ 2004-04-23 06:00:00 130,048 ----a-w c:\windows\system32\spool\drivers\w32x86\canonip4000f4f6\CNMSM64.EXE
+ 2004-04-23 06:00:00 6,656 ----a-w c:\windows\system32\spool\drivers\w32x86\canonip4000f4f6\CNMSQ64.EXE
+ 2004-04-23 06:00:00 110,592 ----a-w c:\windows\system32\spool\drivers\w32x86\canonip4000f4f6\CNMSR64.DLL
+ 2004-04-23 06:00:00 322,048 ----a-w c:\windows\system32\spool\drivers\w32x86\canonip4000f4f6\CNMUB64.DLL
+ 2004-04-23 06:00:00 1,571,840 ----a-w c:\windows\system32\spool\drivers\w32x86\canonip4000f4f6\CNMUI64.DLL
+ 2004-04-23 06:00:00 219,136 ----a-w c:\windows\system32\spool\drivers\w32x86\canonip4000f4f6\CNMUR64.DLL
+ 2004-04-23 06:00:00 6,656 ----a-w c:\windows\system32\spool\drivers\w32x86\canonip4000f4f6\CNMW364.DLL
+ 2004-04-23 06:00:00 17,920 ----a-w c:\windows\system32\spool\prtprocs\w32x86\CNMPD64.DLL
+ 2004-04-23 06:00:00 54,272 ----a-w c:\windows\system32\spool\prtprocs\w32x86\CNMPP64.DLL
+ 2006-10-14 15:43:18 27,648 ----a-w c:\windows\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
+ 2006-10-14 15:44:44 671,744 ------w c:\windows\system32\spool\prtprocs\w32x86\PrintFilterPipelineSvc.exe
+ 2006-10-14 16:13:02 34,304 ----a-w c:\windows\system32\spool\prtprocs\x64\filterpipelineprintproc.dll
+ 2006-10-14 16:12:14 737,792 ----a-w c:\windows\system32\spool\XPSEP\amd64\amd64\mxdwdrv.dll
+ 2006-10-14 19:09:04 2,946,304 ----a-w c:\windows\system32\spool\XPSEP\amd64\amd64\xpssvcs.dll
+ 2006-10-14 16:12:14 737,792 ----a-w c:\windows\system32\spool\XPSEP\amd64\mxdwdrv.dll
+ 2006-10-14 19:09:04 2,946,304 ----a-w c:\windows\system32\spool\XPSEP\amd64\xpssvcs.dll
+ 2006-10-14 15:43:18 751,104 ----a-w c:\windows\system32\spool\XPSEP\i386\i386\mxdwdrv.dll
+ 2006-10-14 19:22:00 1,698,048 ----a-w c:\windows\system32\spool\XPSEP\i386\i386\xpssvcs.dll
+ 2006-10-14 15:43:18 751,104 ----a-w c:\windows\system32\spool\XPSEP\i386\mxdwdrv.dll
+ 2006-10-14 19:22:00 1,698,048 ----a-w c:\windows\system32\spool\XPSEP\i386\xpssvcs.dll
- 2005-06-28 09:21:34 22,752 -c--a-w c:\windows\system32\spupdsvc.exe
+ 2006-10-16 15:10:58 23,856 ----a-w c:\windows\system32\spupdsvc.exe
+ 2004-07-09 07:43:56 364,544 ----a-w c:\windows\system32\TwnLib4.dll
- 2007-11-13 11:31:11 60,416 -c----w c:\windows\system32\tzchange.exe
+ 2008-07-14 11:09:18 62,976 ------w c:\windows\system32\tzchange.exe
- 2004-08-03 22:44:14 37,888 ----a-w c:\windows\system32\url.dll
+ 2008-08-26 08:27:01 105,984 ----a-w c:\windows\system32\url.dll
- 2007-10-11 06:14:32 616,448 ------w c:\windows\system32\urlmon.dll
+ 2008-08-26 08:27:01 1,159,680 ----a-w c:\windows\system32\urlmon.dll
+ 1999-03-25 22:00:00 101,888 -c--a-w c:\windows\system32\VB6STKIT.DLL
- 2007-12-18 14:42:55 417,792 ----a-w c:\windows\system32\vbscript.dll
+ 2007-08-13 17:54:10 413,696 ----a-w c:\windows\system32\vbscript.dll
- 2004-08-03 22:44:14 49,152 ----a-w c:\windows\system32\wdigest.dll
+ 2006-03-24 04:39:55 49,152 ----a-w c:\windows\system32\wdigest.dll
- 2004-08-03 22:44:14 279,552 ----a-w c:\windows\system32\webcheck.dll
+ 2008-08-26 08:27:01 233,472 ----a-w c:\windows\system32\webcheck.dll
+ 2007-04-10 13:01:04 236,928 ------w c:\windows\system32\WgaLogon.dll
+ 2007-04-10 13:01:48 337,792 ------w c:\windows\system32\WgaTray.exe
+ 2006-10-24 11:30:06 716,288 ------w c:\windows\system32\WindowsCodecs.dll
+ 2006-10-24 11:29:50 352,256 ------w c:\windows\system32\WindowsCodecsExt.dll
+ 2007-08-13 17:45:16 206,336 ------w c:\windows\system32\WinFXDocObj.exe
- 2007-10-11 06:14:32 662,016 ------w c:\windows\system32\wininet.dll
+ 2008-08-26 08:27:02 826,368 ----a-w c:\windows\system32\wininet.dll
+ 2006-10-24 11:30:00 276,992 ------w c:\windows\system32\WMPhoto.dll
+ 2008-10-16 13:12:17 444,952 -c--a-w c:\windows\system32\wrap_oal.dll
- 2007-07-30 18:19:36 549,720 ----a-w c:\windows\system32\wuapi.dll
+ 2008-10-16 13:12:20 561,688 ----a-w c:\windows\system32\wuapi.dll
- 2007-07-30 18:19:16 53,080 ----a-w c:\windows\system32\wuauclt.exe
+ 2008-10-16 13:09:44 51,224 ----a-w c:\windows\system32\wuauclt.exe
- 2007-07-30 18:19:42 1,712,984 ----a-w c:\windows\system32\wuaueng.dll
+ 2008-10-16 13:13:40 1,809,944 ----a-w c:\windows\system32\wuaueng.dll
- 2007-07-30 18:19:32 325,976 -c--a-w c:\windows\system32\wucltui.dll
+ 2008-10-16 13:12:22 323,608 ----a-w c:\windows\system32\wucltui.dll
- 2007-07-30 18:18:40 33,624 ----a-w c:\windows\system32\wups.dll
+ 2008-10-16 13:08:58 34,328 ----a-w c:\windows\system32\wups.dll
- 2007-07-30 18:19:12 43,352 ----a-w c:\windows\system32\wups2.dll
+ 2008-10-16 13:09:44 43,544 ----a-w c:\windows\system32\wups2.dll
- 2007-07-30 18:19:28 203,096 -c--a-w c:\windows\system32\wuweb.dll
+ 2008-10-16 13:13:40 202,776 ----a-w c:\windows\system32\wuweb.dll
- 2006-09-28 15:03:28 15,128 -c--a-w c:\windows\system32\x3daudio1_1.dll
+ 2007-03-05 11:42:18 15,128 ----a-w c:\windows\system32\x3daudio1_1.dll
+ 2007-10-22 02:37:16 17,928 ----a-w c:\windows\system32\X3DAudio1_2.dll
+ 2008-03-05 15:00:06 25,608 ----a-w c:\windows\system32\X3DAudio1_3.dll
+ 2008-05-30 13:17:00 25,608 ----a-w c:\windows\system32\X3DAudio1_4.dll
+ 2007-10-22 02:39:54 267,272 ----a-w c:\windows\system32\xactengine2_10.dll
+ 2006-12-08 11:02:00 251,672 ----a-w c:\windows\system32\xactengine2_5.dll
+ 2007-01-24 14:27:30 255,848 ----a-w c:\windows\system32\xactengine2_6.dll
+ 2007-04-04 17:55:00 261,480 ----a-w c:\windows\system32\xactengine2_7.dll
+ 2007-06-20 19:46:04 266,088 ----a-w c:\windows\system32\xactengine2_8.dll
+ 2007-07-19 23:57:12 267,112 ----a-w c:\windows\system32\xactengine2_9.dll
+ 2008-03-05 15:03:20 238,088 ----a-w c:\windows\system32\xactengine3_0.dll
+ 2008-05-30 13:18:52 238,088 ----a-w c:\windows\system32\xactengine3_1.dll
+ 2008-07-31 09:41:54 238,088 ----a-w c:\windows\system32\xactengine3_2.dll
+ 2008-05-30 13:17:30 65,032 ----a-w c:\windows\system32\XAPOFX1_0.dll
+ 2008-07-31 09:41:52 68,616 ----a-w c:\windows\system32\XAPOFX1_1.dll
+ 2008-03-05 15:03:54 479,752 ----a-w c:\windows\system32\XAudio2_0.dll
+ 2008-05-30 13:19:18 507,400 ----a-w c:\windows\system32\XAudio2_1.dll
+ 2008-07-31 09:40:32 509,448 ----a-w c:\windows\system32\XAudio2_2.dll
+ 2004-05-19 09:01:00 364,544 ----a-w c:\windows\system32\Xfpx.dll
- 2006-09-28 15:04:02 68,888 -c--a-w c:\windows\system32\xinput1_3.dll
+ 2007-04-04 17:53:42 81,768 ----a-w c:\windows\system32\xinput1_3.dll
+ 2004-05-19 09:01:00 81,920 ----a-w c:\windows\system32\Xjbig.dll
+ 2004-05-19 09:01:00 49,152 ----a-w c:\windows\system32\Xjng.dll
+ 2004-05-19 09:02:00 225,280 ----a-w c:\windows\system32\Xjp2.dll
+ 2004-05-19 09:02:00 114,688 ----a-w c:\windows\system32\Xjpegls.dll
+ 2006-07-14 15:51:51 121,856 ------w c:\windows\system32\xmllite.dll
- 2007-10-29 15:35:22 122,368 ------w c:\windows\system32\xpsp3res.dll
+ 2008-07-03 09:42:47 369,152 ----a-w c:\windows\system32\xpsp3res.dll
+ 2006-10-14 19:21:58 580,352 ------w c:\windows\system32\XPSSHHDR.dll
+ 2006-10-14 19:22:00 1,698,048 ------w c:\windows\system32\XpsSvcs.dll
+ 2004-05-19 09:02:00 49,152 ----a-w c:\windows\system32\Xsusie.dll
+ 2002-06-28 09:43:43 438,272 ----a-w c:\windows\system32\xvid.dll
+ 2009-02-08 12:21:24 16,384 ----atw c:\windows\Temp\Perflib_Perfdata_1f0.dat
+ 2006-07-14 15:29:44 966,656 ----a-w c:\windows\UNNeroBackItUp.exe
+ 2006-07-14 15:29:44 966,656 ----a-w c:\windows\UNNeroMediaHome.exe
+ 2006-07-14 15:29:44 966,656 ----a-w c:\windows\UNNeroShowTime.exe
+ 2006-07-14 15:29:44 966,656 ----a-w c:\windows\UNNeroVision.exe
+ 2006-07-14 15:29:44 966,656 ----a-w c:\windows\UNRecode.exe
- 2000-08-31 06:00:00 49,152 ----a-w c:\windows\VFind.exe
+ 2000-08-31 07:00:00 49,152 ----a-w c:\windows\VFIND.exe
+ 2006-12-01 21:56:00 96,256 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_cbb27474\ATL80.dll
- 2005-09-23 05:29:16 479,232 -c--a-w c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\msvcm80.dll
+ 2005-09-23 06:29:16 479,232 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\msvcm80.dll
- 2005-09-23 05:29:16 548,864 -c--a-w c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\msvcp80.dll
+ 2005-09-23 06:29:16 548,864 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\msvcp80.dll
- 2005-09-23 05:29:16 626,688 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\msvcr80.dll
+ 2005-09-23 06:29:16 626,688 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\msvcr80.dll
+ 2006-12-01 23:25:52 1,101,824 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfc80.dll
+ 2006-12-01 23:25:56 1,093,120 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfc80u.dll
+ 2006-12-01 23:25:58 69,632 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfcm80.dll
+ 2006-12-01 23:26:00 57,856 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfcm80u.dll
+ 2006-12-01 23:08:00 40,960 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80CHS.dll
+ 2006-12-01 23:08:00 45,056 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80CHT.dll
+ 2006-12-01 23:08:00 65,536 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80DEU.dll
+ 2006-12-01 23:08:00 57,344 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ENU.dll
+ 2006-12-01 23:08:00 61,440 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ESP.dll
+ 2006-12-01 23:08:00 61,440 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80FRA.dll
+ 2006-12-01 23:08:00 61,440 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ITA.dll
+ 2006-12-01 23:08:00 49,152 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80JPN.dll
+ 2006-12-01 23:08:00 49,152 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80KOR.dll
+ 2006-12-01 23:46:44 65,536 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6c18549a\vcomp.dll
- 2008-05-23 20:48:18 258,048 -c--a-w c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
+ 2009-01-27 14:11:11 258,048 ----a-w c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
- 2008-05-23 20:48:18 114,176 -c--a-w c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
+ 2009-01-27 14:11:11 114,176 ----a-w c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
- 2000-08-31 06:00:00 68,096 ----a-w c:\windows\zip.exe
+ 2000-08-31 07:00:00 68,096 ----a-w c:\windows\zip.exe

Dodano Dzisiaj, 20:03:
Prosze
http://wklej.org/id/50404/

[wojtas]

log wklej caly na www.wklej.org

[bartel43]

Oto cały log:

http://www.wklej.org/id/50694/

[wojtas]

wklej do notatnika

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{ecdee021-0d17-467f-a1ff-c7a115230949}"=-

[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{ecdee021-0d17-467f-a1ff-c7a115230949}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{ecdee021-0d17-467f-a1ff-c7a115230949}"=-

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{ECDEE021-0D17-467F-A1FF-C7A115230949}"=-

[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1efca916-0177-11dd-bdab-0015f27005e4}]

[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{5eb6b4fe-3bd1-11dd-be81-0015f27005e4}]

[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{5eb6b4ff-3bd1-11dd-be81-0015f27005e4}]

[-HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{CAA1B092-5903-A97A-E2DB-90709F0283AF}]

w notatniku u góry>>>plik zapisz jako>>>Zmien rozszerzenie z TXT na Wszystkie pliki *.* >>> Zapisz pod nazwą FIX.REG

Klikasz dwa razy na powstały plik fix i dodajesz go do rejestru....

[bartel43]

Czy to jest wszystko... ??
Po wykonaniu tego użycie procesora nie zmieniło sie....nadal jest 100%.....

[Okocza]

bartel43, wstaw log z combofixa po wykonaniu tych czynności... i jaki proces zużywa 100 ?

[bartel43]

Doszedłem do tego ze powodem uzycia procesora 100% był niejaki nmindexstoresvr.exe po wciśnieciu ctrl+alt+delete.... natychmiast zakończyłem ten proces no i uzycie procesora spadło do minimalnego użycia ale na wszelki wypadek daje loga:
http://www.wklej.org/id/50879/

[wojtas]

ten plik jest od nero 7.. wiec moze go przeinstaluj i pomoże