proces ktory zuzywa prawie 100% procesora

[Z@K]

witam. od 2 dni pojawiają mi sie takie procesy, czasami 1 a czasami 2 takie same, i nei wiem co to jest...



wrzucam log z HJ

Logfile of HijackThis v1.99.1
Scan saved at 17:50:05, on 2008-06-24
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
F:\WINDOWS\System32\smss.exe
F:\WINDOWS\system32\winlogon.exe
F:\WINDOWS\system32\services.exe
F:\WINDOWS\system32\lsass.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\System32\svchost.exe
F:\WINDOWS\system32\spoolsv.exe
F:\WINDOWS\Explorer.exe
F:\WINDOWS\RTHDCPL.EXE
F:\Program Files\Winamp\winampa.exe
F:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe
F:\Program Files\RocketDock\RocketDock.exe
F:\WINDOWS\system32\ctfmon.exe
F:\Program Files\Bonjour\mDNSResponder.exe
F:\Program Files\Common Files\LightScribe\LSSrvc.exe
F:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
F:\WINDOWS\system32\nvsvc32.exe
F:\Program Files\Common Files\Protexis\License Service\PSIService.exe
F:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\system32\wscntfy.exe
F:\Program Files\Tlen.pl\tlen.exe
F:\Program Files\Opera\Opera.exe
F:\Documents and Settings\User\Moje dokumenty\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.srtest.com/referrer/srtest
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
F2 - REG:system.ini: Shell=Explorer.exe activexdebugger32.exe
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - F:\Program Files\Winamp Toolbar\winamptb.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - F:\Program Files\Winamp Toolbar\winamptb.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE F:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [QuickTime Task] "F:\Program Files\K-Lite Codec Pack\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [CorelDRAW Graphics Suite 11b] F:\Program Files\Corel\Corel Graphics 12\Languages\EN\Programs\Registration.exe /title="CorelDRAW Graphics Suite 12" /date=010508 serial=DR12WEX-1504397-KTY lang=EN
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "F:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [WinampAgent] "F:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] F:\Program Files\Java\jre1.5.0_05\bin\jusched.exe
O4 - HKLM\..\Run: [ISUSPM Startup] F:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "F:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [ISUSPM] "F:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -scheduler
O4 - HKCU\..\Run: [RocketDock] "F:\Program Files\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [AlcoholAutomount] "F:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount
O4 - HKCU\..\Run: [ctfmon.exe] F:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [AdobeUpdater] F:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe
O4 - Startup: Sidebar.lnk = F:\Documents and Settings\User\Moje dokumenty\Clear Sidebar.exe
O8 - Extra context menu item: &Winamp Search - F:\Documents and Settings\All Users\Dane aplikacji\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://F:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - F:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: f:\program files\bonjour\mdnsnsp.dll
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.systemrequirementslab.com/sysreqlab2.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{38BD57F4-72B6-4D7E-81DF-0C65D342AE5B}: NameServer = 208.67.222.222,208.67.220.220
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - F:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - F:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - F:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - F:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - F:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - F:\WINDOWS\system32\nvsvc32.exe
O23 - Service: ProtexisLicensing - Unknown owner - F:\Program Files\Common Files\Protexis\License Service\PSIService.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - F:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

pozdrawiam

[wojtas]

zrob loga z combofixa i potem nowego z hj

[Dzi@dek]

I nie wkładaj pendriva do kompa

[Magik]

proces ktory zuzywa prawie 10% procesora

to jeszcze nie tragedia

Kod: Zaznacz wszystko

F2 - REG:system.ini: Shell=Explorer.exe activexdebugger32.exe

na fix w HJT i j/w combo MUSOWO

[Z@K]

[quote]ComboFix 08-06-20.4 - User 2008-06-24 21:10:14.5 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.1655 [GMT 2:00]
Running from: F:\Documents and Settings\User\Moje dokumenty\ComboFix.exe
* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((( Files Created from 2008-05-24 to 2008-06-24 )))))))))))))))))))))))))))))))
.

2008-06-21 16:37 . 2008-06-21 16:37 <DIR> d-------- F:\Documents and Settings\User\Dane aplikacji\Atari
2008-06-21 16:33 . 2008-06-21 16:33 <DIR> d-------- F:\Program Files\Common Files\PocketSoft
2008-06-21 16:33 . 2002-02-27 18:50 197,120 --a------ F:\WINDOWS\patchw32.dll
2008-06-19 21:24 . 2002-11-20 21:16 180,224 --a------ F:\WINDOWS\system32\Ijl11.dll
2008-06-19 21:24 . 2004-03-09 00:00 124,688 --a------ F:\WINDOWS\system32\MSWINSCK.OCX
2008-06-19 21:24 . 2007-04-15 19:45 53,248 --a------ F:\WINDOWS\system32\KMON.OCX
2008-06-19 21:24 . 2001-11-22 15:00 24,626 --a------ F:\WINDOWS\system32\scrrntr.dll
2008-06-19 21:24 . 2007-03-27 15:25 20,480 --a------ F:\WINDOWS\system32\PAC.EXE
2008-06-19 21:24 . 2007-04-15 19:46 19,456 --a------ F:\WINDOWS\system32\KTKBDHK3.DLL
2008-06-19 21:24 . 2008-06-24 21:04 52 --a------ F:\WINDOWS\system\ACD2.CMD
2008-06-19 21:24 . 2008-06-24 21:04 52 --a------ F:\WINDOWS\system\ACD.CMD
2008-05-31 11:06 . 2008-05-31 11:06 <DIR> d-------- F:\Program Files\Google
2008-05-29 22:17 . 2008-05-29 22:17 <DIR> d-------- F:\Documents and Settings\User\Dane aplikacji\fretsonfire

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-06-21 14:31 --------- d--h--w F:\Program Files\InstallShield Installation Information
2008-06-20 05:37 --------- d-----w F:\Documents and Settings\User\Dane aplikacji\Skype
2008-06-17 11:36 --------- d-----w F:\Documents and Settings\User\Dane aplikacji\foobar2000
2008-06-05 16:00 --------- d-----w F:\Program Files\Last.fm
2008-06-01 09:01 --------- d-----w F:\Documents and Settings\User\Dane aplikacji\uTorrent
2008-05-31 16:17 --------- d-----w F:\Program Files\DkZ Studio
2008-05-05 07:05 --------- d-----w F:\Documents and Settings\User\Dane aplikacji\Hamachi
2008-05-04 19:15 98,304 ----a-w F:\WINDOWS\system32CmdLineExt.dll
2008-05-04 19:08 25,280 ----a-w F:\WINDOWS\system32\drivers\hamachi.sys
2008-05-04 19:08 --------- d-----w F:\Program Files\Hamachi
2008-04-29 07:08 --------- d-----w F:\Program Files\RocketDock
2008-04-06 13:45 2,828 --sha-w F:\WINDOWS\system32\KGyGaAvL.sys
2008-01-13 19:44 22,328 ----a-w F:\Documents and Settings\User\Dane aplikacji\PnkBstrK.sys
2007-05-22 13:53 376,832 --sh--w F:\WINDOWS\system32\activexdebugger32.exe
.

------- Sigcheck -------

2006-03-12 18:48 360448 65c34c093e839505636954ead50fa315 F:\WINDOWS\system32\drivers\tcpip.sys
.
((((((((((((((((((((((((((((( snapshot_2007-12-07_19.17.39,43 )))))))))))))))))))))))))))))))))))))))))
.
- 2007-11-11 18:38:20 53,248 ----a-w F:\WINDOWS\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
+ 2008-04-11 20:18:06 53,248 ----a-w F:\WINDOWS\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
- 2007-11-11 18:38:20 12,800 ----a-w F:\WINDOWS\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
+ 2008-04-11 20:18:07 12,800 ----a-w F:\WINDOWS\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
- 2007-11-11 18:38:20 473,600 ----a-w F:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
+ 2008-04-11 20:18:08 473,600 ----a-w F:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
+ 2008-04-11 20:17:48 2,676,224 ----a-w F:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2008-04-11 20:17:50 2,846,720 ----a-w F:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2008-04-11 20:17:52 563,712 ----a-w F:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2007-11-11 18:38:21 567,296 ----a-w F:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2008-04-11 20:17:53 567,296 ----a-w F:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2008-04-11 20:17:54 576,000 ----a-w F:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2008-04-11 20:17:55 577,024 ----a-w F:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2008-04-11 20:17:57 577,536 ----a-w F:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2008-04-11 20:17:59 577,536 ----a-w F:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2008-04-11 20:18:01 578,560 ----a-w F:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2008-04-11 20:18:10 578,560 ----a-w F:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2007-11-11 18:38:21 145,920 ----a-w F:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
+ 2008-04-11 20:18:11 145,920 ----a-w F:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
- 2007-11-11 18:38:21 159,232 ----a-w F:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
+ 2008-04-11 20:18:12 159,232 ----a-w F:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
- 2007-11-11 18:38:22 364,544 ----a-w F:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
+ 2008-04-11 20:18:13 364,544 ----a-w F:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
- 2007-11-11 18:38:22 178,176 ----a-w F:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
+ 2008-04-11 20:18:15 178,176 ----a-w F:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
- 2007-11-11 18:38:20 223,232 ----a-w F:\WINDOWS\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
+ 2008-04-11 20:18:04 223,232 ----a-w F:\WINDOWS\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
+ 2008-05-30 13:38:40 68,608 ----a-w F:\WINDOWS\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2008-05-30 13:38:42 72,192 ----a-w F:\WINDOWS\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2008-05-30 13:38:43 4,308,992 ----a-w F:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2008-05-30 13:38:43 482,304 ----a-w F:\WINDOWS\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2008-05-30 13:38:42 2,878,976 ----a-w F:\WINDOWS\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
+ 2008-05-30 13:38:38 258,048 ----a-w F:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2008-05-30 13:38:38 114,176 ----a-w F:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2008-05-30 13:38:45 260,096 ----a-w F:\WINDOWS\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2008-05-30 13:38:41 5,025,792 ----a-w F:\WINDOWS\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
+ 2008-05-30 13:38:39 10,752 ----a-w F:\WINDOWS\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2008-05-30 13:38:38 503,808 ----a-w F:\WINDOWS\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2008-05-30 13:38:39 13,312 ----a-w F:\WINDOWS\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
+ 2008-05-30 13:38:42 8,192 ----a-w F:\WINDOWS\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2008-05-30 13:38:42 36,864 ----a-w F:\WINDOWS\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
+ 2008-05-30 13:38:42 5,632 ----a-w F:\WINDOWS\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
+ 2008-05-30 13:38:39 413,696 ----a-w F:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2008-05-30 13:38:39 36,864 ----a-w F:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
+ 2008-05-30 13:38:39 647,168 ----a-w F:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
+ 2008-05-30 13:38:39 73,728 ----a-w F:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
+ 2008-05-30 13:38:39 745,472 ----a-w F:\WINDOWS\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2008-05-30 13:38:45 110,592 ----a-w F:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2008-05-30 13:38:45 372,736 ----a-w F:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
+ 2008-05-30 13:38:37 28,672 ----a-w F:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
+ 2008-05-30 13:38:45 667,648 ----a-w F:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2008-05-30 13:38:45 5,632 ----a-w F:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2008-05-30 13:38:38 12,800 ----a-w F:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2008-05-30 13:38:38 32,768 ----a-w F:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
+ 2008-05-30 13:38:38 7,168 ----a-w F:\WINDOWS\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
+ 2008-05-30 13:38:44 110,592 ----a-w F:\WINDOWS\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2008-05-30 13:38:40 81,920 ----a-w F:\WINDOWS\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
+ 2008-05-30 13:38:44 389,120 ----a-w F:\WINDOWS\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2008-05-30 13:38:43 716,800 ----a-w F:\WINDOWS\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2008-05-30 13:38:38 884,736 ----a-w F:\WINDOWS\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2008-05-30 13:38:42 5,050,368 ----a-w F:\WINDOWS\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2008-05-30 13:38:40 188,416 ----a-w F:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2008-05-30 13:38:40 397,312 ----a-w F:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2008-05-30 13:38:40 81,920 ----a-w F:\WINDOWS\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
+ 2008-05-30 13:38:44 700,416 ----a-w F:\WINDOWS\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2008-05-30 13:38:43 368,640 ----a-w F:\WINDOWS\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2008-05-30 13:38:45 258,048 ----a-w F:\WINDOWS\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2008-05-30 13:38:43 299,008 ----a-w F:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2008-05-30 13:38:43 131,072 ----a-w F:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2008-05-30 13:38:39 258,048 ----a-w F:\WINDOWS\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2008-05-30 13:38:40 114,688 ----a-w F:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2008-05-30 13:38:45 835,584 ----a-w F:\WINDOWS\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2008-05-30 13:38:41 86,016 ----a-w F:\WINDOWS\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2008-05-30 13:38:41 823,296 ----a-w F:\WINDOWS\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2008-05-30 13:38:41 5,316,608 ----a-w F:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2008-05-30 13:38:41 2,035,712 ----a-w F:\WINDOWS\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
+ 2008-05-30 13:38:44 3,018,752 ----a-w F:\WINDOWS\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
+ 2008-05-30 13:48:22 26,624 ----a-w F:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Accessibility\2b9c56e4d12f7048a68eb3e302fac67e\Accessibility.ni.dll
+ 2008-05-30 13:48:23 860,160 ----a-w F:\WINDOWS\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\8a063c8e95f46347b7763efeba2b2964\AspNetMMCExt.ni.dll
+ 2008-05-30 13:48:23 237,568 ----a-w F:\WINDOWS\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\fd906bab9a110b438a5c29dc9a06b41b\CustomMarshalers.ni.dll
+ 2008-05-30 13:48:23 15,360 ----a-w F:\WINDOWS\assembly\NativeImages_v2.0.50727_32\dfsvc\77709079f7112840b135c46342c82686\dfsvc.ni.exe
+ 2008-05-30 13:48:24 880,640 ----a-w F:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\60ec4abf4410a1439f612c962b83d955\Microsoft.Build.Engine.ni.dll
+ 2008-05-30 13:48:25 81,920 ----a-w F:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\450fdb84ab3a8d4fbd91e9905fe28e81\Microsoft.Build.Framework.ni.dll
+ 2008-05-30 13:48:26 1,691,648 ----a-w F:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\d0291bebba729a4683557de33f62bf41\Microsoft.Build.Tasks.ni.dll
+ 2008-05-30 13:48:27 163,840 ----a-w F:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\73d9f0b8e7a03a49af0f4f1edc633e3a\Microsoft.Build.Utilities.ni.dll
+ 2008-05-30 13:48:28 1,724,416 ----a-w F:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\202523c0ade3c14588948801f5c1c366\Microsoft.VisualBasic.ni.dll
+ 2008-05-30 13:39:06 11,415,552 ----a-w F:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\583b7937b23b7447978cf40091b1b934\mscorlib.ni.dll
+ 2008-05-30 13:48:29 962,560 ----a-w F:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\8c02d3cfd5d5d342809428f7d5c8ec72\System.Configuration.ni.dll
+ 2008-05-30 13:39:44 6,688,768 ----a-w F:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data\929d6a5d6788174f8bc116adab2cf869\System.Data.ni.dll
+ 2008-05-30 13:48:30 1,712,128 ----a-w F:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Deployment\2fa2434122018740961816a928673820\System.Deployment.ni.dll
+ 2008-05-30 13:39:57 10,723,328 ----a-w F:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Design\8d6ce26390cdeb42915096822548486c\System.Design.ni.dll
+ 2008-05-30 13:48:33 512,000 ----a-w F:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\090c88cc4969de43bd14539d2f590c3f\System.DirectoryServices.Protocols.ni.dll
+ 2008-05-30 13:48:32 1,220,608 ----a-w F:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\a9ce3dd7466cbc4db13d2d9913e3d9fa\System.DirectoryServices.ni.dll
+ 2008-05-30 13:39:16 229,376 ----a-w F:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\956b0e9092491a4a8a2e62c914793f60\System.Drawing.Design.ni.dll
+ 2008-05-30 13:39:19 1,626,112 ----a-w F:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0799441c21a7af41b8f9d1ca6f2ece13\System.Drawing.ni.dll
+ 2008-05-30 13:48:34 659,456 ----a-w F:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\33527e8ffffec54eb729cd61ec0668f1\System.EnterpriseServices.ni.dll
+ 2008-05-30 13:48:34 294,912 ----a-w F:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\33527e8ffffec54eb729cd61ec0668f1\System.EnterpriseServices.Wrapper.dll
+ 2008-05-30 13:48:34 729,088 ----a-w F:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Security\548983a0611f44469db57c0602865a98\System.Security.ni.dll
+ 2008-05-30 13:48:35 684,032 ----a-w F:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Transactions\831a96550a0fad4593acae06cdd337bf\System.Transactions.ni.dll
+ 2008-05-30 13:48:52 2,310,144 ----a-w F:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\feb228838f24ee4dbc94c1333a78ccce\System.Web.Mobile.ni.dll
+ 2008-05-30 13:48:52 237,568 ----a-w F:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\f837512c9e401a4eac1fd4527f63bd64\System.Web.RegularExpressions.ni.dll
+ 2008-05-30 13:48:54 1,945,600 ----a-w F:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Services\2a5cc9c6669e3b47b0b5fa48020e9fd7\System.Web.Services.ni.dll
+ 2008-05-30 13:48:49 11,808,768 ----a-w F:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\d4fc0a9dbb9fed4f815bf5bce2b1f792\System.Web.ni.dll
+ 2008-05-30 13:39:31 13,107,200 ----a-w F:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\9448c8b12536de4f97a65411b52bf6d7\System.Windows.Forms.ni.dll
+ 2008-05-30 13:39:37 5,640,192 ----a-w F:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\200cef6d2871904e947aae0358d024ec\System.Xml.ni.dll
+ 2008-05-30 13:39:15 8,093,696 ----a-w F:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\8b7148ffb4d0274fa8b6ffe58457b52c\System.ni.dll
+ 2008-06-24 19:04:08 2,048 --s-a-w F:\WINDOWS\bootstat.dat
- 2002-07-25 15:13:16 24,576 ----a-w F:\WINDOWS\Downloaded Program Files\dwusplay.dll
+ 2006-05-16 08:58:18 24,576 ----a-w F:\WINDOWS\Downloaded Program Files\dwusplay.dll
- 2002-07-25 15:13:10 196,608 ----a-w F:\WINDOWS\Downloaded Program Files\dwusplay.exe
+ 2006-05-16 08:58:18 196,608 ----a-w F:\WINDOWS\Downloaded Program Files\dwusplay.exe
- 2003-09-19 12:22:12 299,008 ----a-w F:\WINDOWS\Downloaded Program Files\isusweb.dll
+ 2006-05-16 08:58:18 484,272 ----a-w F:\WINDOWS\Downloaded Program Files\isusweb.dll
+ 2005-10-20 18:02:28 163,328 ----a-w F:\WINDOWS\erdnt\Hiv-backup\ERDNT.EXE
+ 2000-08-31 06:00:00 89,504 ----a-w F:\WINDOWS\fdsv.exe
+ 2000-08-31 06:00:00 80,412 ----a-w F:\WINDOWS\grep.exe
+ 2008-04-11 21:43:49 65,536 ----a-r F:\WINDOWS\Installer\{32A72502-BC2C-4C39-ACEA-BC3D463F0697}\ARPPRODUCTICON.exe
+ 2008-04-11 21:44:05 65,536 ----a-r F:\WINDOWS\Installer\{4E98F23B-1328-4322-A6EC-2EDC8FC3A4FE}\ARPPRODUCTICON.exe
+ 2008-04-11 21:44:05 49,152 ----a-r F:\WINDOWS\Installer\{4E98F23B-1328-4322-A6EC-2EDC8FC3A4FE}\NewShortcut9_1.exe
+ 2008-04-11 21:44:05 49,152 ----a-r F:\WINDOWS\Installer\{4E98F23B-1328-4322-A6EC-2EDC8FC3A4FE}\NewShortcut90.exe
+ 2008-04-11 21:44:05 49,152 ----a-r F:\WINDOWS\Installer\{4E98F23B-1328-4322-A6EC-2EDC8FC3A4FE}\NewShortcut900.exe
+ 2008-04-11 21:44:05 49,152 ----a-r F:\WINDOWS\Installer\{4E98F23B-1328-4322-A6EC-2EDC8FC3A4FE}\NewShortcut9000.exe
+ 2008-04-11 21:44:05 49,152 ----a-r F:\WINDOWS\Installer\{4E98F23B-1328-4322-A6EC-2EDC8FC3A4FE}\NewShortcut9001.exe
+ 2008-04-11 21:44:05 49,152 ----a-r F:\WINDOWS\Installer\{4E98F23B-1328-4322-A6EC-2EDC8FC3A4FE}\NewShortcut901.exe
+ 2008-04-11 21:44:05 49,152 ----a-r F:\WINDOWS\Installer\{4E98F23B-1328-4322-A6EC-2EDC8FC3A4FE}\NewShortcut902.exe
+ 2008-04-11 21:44:05 513,576 ----a-r F:\WINDOWS\Installer\{4E98F23B-1328-4322-A6EC-2EDC8FC3A4FE}\NewShortcut903_CC5820041A9C446BB9018F9ECF582DD1.exe
+ 2008-04-11 21:44:05 49,152 ----a-r F:\WINDOWS\Installer\{4E98F23B-1328-4322-A6EC-2EDC8FC3A4FE}\NewShortcut91.exe
+ 2008-04-11 21:44:05 49,152 ----a-r F:\WINDOWS\Installer\{4E98F23B-1328-4322-A6EC-2EDC8FC3A4FE}\NewShortcut910.exe
+ 2008-04-11 21:44:05 49,152 ----a-r F:\WINDOWS\Installer\{4E98F23B-1328-4322-A6EC-2EDC8FC3A4FE}\NewShortcut9100.exe
+ 2008-04-11 21:44:05 49,152 ----a-r F:\WINDOWS\Installer\{4E98F23B-1328-4322-A6EC-2EDC8FC3A4FE}\NewShortcut9101.exe
+ 2008-04-11 21:44:05 49,152 ----a-r F:\WINDOWS\Installer\{4E98F23B-1328-4322-A6EC-2EDC8FC3A4FE}\NewShortcut911.exe
+ 2008-04-11 21:44:05 49,152 ----a-r F:\WINDOWS\Installer\{4E98F23B-1328-4322-A6EC-2EDC8FC3A4FE}\NewShortcut912.exe
+ 2008-04-11 21:44:05 513,576 ----a-r F:\WINDOWS\Installer\{4E98F23B-1328-4322-A6EC-2EDC8FC3A4FE}\NewShortcut913_CC5820041A9C446BB9018F9ECF582DD1.exe
+ 2008-04-11 21:44:05 49,152 ----a-r F:\WINDOWS\Installer\{4E98F23B-1328-4322-A6EC-2EDC8FC3A4FE}\NewShortcut92_CC5820041A9C446BB9018F9ECF582DD1.exe
+ 2008-04-11 21:44:05 513,576 ----a-r F:\WINDOWS\Installer\{4E98F23B-1328-4322-A6EC-2EDC8FC3A4FE}\NewShortcut93_CC5820041A9C446BB9018F9ECF582DD1.exe
+ 2008-04-11 21:43:24 22,758 ----a-r F:\WINDOWS\Installer\{63218538-4A69-497F-8455-904261B0E9E4}\ARPPRODUCTICON.exe
+ 2008-04-11 21:43:24 65,536 ----a-r F:\WINDOWS\Installer\{63218538-4A69-497F-8455-904261B0E9E4}\NewShortcut1.exe
+ 2008-04-11 21:43:24 65,536 ----a-r F:\WINDOWS\Installer\{63218538-4A69-497F-8455-904261B0E9E4}\NewShortcut2.exe
+ 2008-04-11 21:43:24 65,536 ----a-r F:\WINDOWS\Installer\{63218538-4A69-497F-8455-904261B0E9E4}\NewShortcut4.exe
+ 2008-04-11 21:43:24 65,536 ----a-r F:\WINDOWS\Installer\{63218538-4A69-497F-8455-904261B0E9E4}\NewShortcut5.exe
+ 2008-04-11 21:43:24 65,536 ----a-r F:\WINDOWS\Installer\{63218538-4A69-497F-8455-904261B0E9E4}\NewShortcut8.exe
+ 2008-02-13 15:40:20 32,768 ----a-r F:\WINDOWS\Installer\{716E0306-8318-4364-8B8F-0CC4E9376BAC}\icon.exe
+ 2008-05-31 09:06:32 26,694 ----a-r F:\WINDOWS\Installer\{97C0EA4A-1A0B-4C53-ACEB-49984DA79C90}\ARPPRODUCTICON.exe
+ 2008-05-31 09:06:32 26,694 ----a-r F:\WINDOWS\Installer\{97C0EA4A-1A0B-4C53-ACEB-49984DA79C90}\googleearth.exe_407B9B5CDAC54F44A756B57CAB4E6A8B.exe
+ 2008-05-31 09:06:32 26,694 ----a-r F:\WINDOWS\Installer\{97C0EA4A-1A0B-4C53-ACEB-49984DA79C90}\googleearth.exe1_407B9B5CDAC54F44A756B57CAB4E6A8B.exe
+ 2008-05-31 09:06:32 26,694 ----a-r F:\WINDOWS\Installer\{97C0EA4A-1A0B-4C53-ACEB-49984DA79C90}\ShortcutDX_EB071909B9884F8CBF3D6115D4ADEE5E.exe
+ 2008-05-31 09:06:32 26,694 ----a-r F:\WINDOWS\Installer\{97C0EA4A-1A0B-4C53-ACEB-49984DA79C90}\ShortcutOGL_EB071909B9884F8CBF3D6115D4ADEE5E.exe
+ 2008-05-31 09:06:32 26,694 ----a-r F:\WINDOWS\Installer\{97C0EA4A-1A0B-4C53-ACEB-49984DA79C90}\UNINST_Uninstall_G_408FFBEED62349E08B232864A94D2864.exe
+ 2008-05-24 16:20:44 33,982 ----a-r F:\WINDOWS\Installer\{B0C30E93-D3D9-4F04-A2AC-54749B573275}\ARPPRODUCTICON.exe
+ 2008-05-24 16:20:44 40,960 ----a-r F:\WINDOWS\Installer\{B0C30E93-D3D9-4F04-A2AC-54749B573275}\NewShortcut3_96B87C3D64854A7D96EBB2C8CB752619.exe
+ 2008-05-24 16:20:44 40,960 ----a-r F:\WINDOWS\Installer\{B0C30E93-D3D9-4F04-A2AC-54749B573275}\NewShortcut31_96B87C3D64854A7D96EBB2C8CB752619.exe
+ 2008-04-11 21:44:00 65,536 ----a-r F:\WINDOWS\Installer\{C94E45B0-6AA6-4FB9-9AAE-22085F631880}\ARPPRODUCTICON.exe
+ 2008-04-11 21:43:59 34,304 ----a-r F:\WINDOWS\Installer\{C94E45B0-6AA6-4FB9-9AAE-22085F631880}\misc.exe.D0DF3458_A845_11D3_8D0A_0050046416B9.exe
+ 2008-04-11 21:43:59 34,304 ----a-r F:\WINDOWS\Installer\{C94E45B0-6AA6-4FB9-9AAE-22085F631880}\misc.exe_1028.D0DF3458_A845_11D3_8D0A_0050046416B9.exe
+ 2008-04-11 21:44:00 34,304 ----a-r F:\WINDOWS\Installer\{C94E45B0-6AA6-4FB9-9AAE-22085F631880}\misc.exe_1031.D0DF3458_A845_11D3_8D0A_0050046416B9.exe
+ 2008-04-11 21:44:00 34,304 ----a-r F:\WINDOWS\Installer\{C94E45B0-6AA6-4FB9-9AAE-22085F631880}\misc.exe_1036.D0DF3458_A845_11D3_8D0A_0050046416B9.exe
+ 2008-04-11 21:44:00 34,304 ----a-r F:\WINDOWS\Installer\{C94E45B0-6AA6-4FB9-9AAE-22085F631880}\misc.exe_1040.D0DF3458_A845_11D3_8D0A_0050046416B9.exe
+ 2008-04-11 21:44:00 34,304 ----a-r F:\WINDOWS\Installer\{C94E45B0-6AA6-4FB9-9AAE-22085F631880}\misc.exe_1041.D0DF3458_A845_11D3_8D0A_0050046416B9.exe
+ 2008-04-11 21:44:00 34,304 ----a-r F:\WINDOWS\Installer\{C94E45B0-6AA6-4FB9-9AAE-22085F631880}\misc.exe_1042.D0DF3458_A845_11D3_8D0A_0050046416B9.exe
+ 2008-04-11 21:44:00 34,304 ----a-r F:\WINDOWS\Installer\{C94E45B0-6AA6-4FB9-9AAE-22085F631880}\misc.exe_1043.D0DF3458_A845_11D3_8D0A_0050046416B9.exe
+ 2008-04-11 21:43:59 34,304 ----a-r F:\WINDOWS\Installer\{C94E45B0-6AA6-4FB9-9AAE-22085F631880}\misc.exe_1046.D0DF3458_A845_11D3_8D0A_0050046416B9.exe
+ 2008-04-11 21:44:00 34,304 ----a-r F:\WINDOWS\Installer\{C94E45B0-6AA6-4FB9-9AAE-22085F631880}\misc.exe_1053.D0DF3458_A845_11D3_8D0A_0050046416B9.exe
+ 2008-04-11 21:44:00 34,304 ----a-r F:\WINDOWS\Installer\{C94E45B0-6AA6-4FB9-9AAE-22085F631880}\misc.exe_2052.D0DF3458_A845_11D3_8D0A_0050046416B9.exe
+ 2008-04-11 21:44:00 34,304 ----a-r F:\WINDOWS\Installer\{C94E45B0-6AA6-4FB9-9AAE-22085F631880}\misc.exe_3082.D0DF3458_A845_11D3_8D0A_0050046416B9.exe
+ 2008-03-16 18:36:16 15,086 ----a-r F:\WINDOWS\Installer\{CC4A73BF-938E-4C19-A553-853C035C9BA1}\ARPPRODUCTICON.exe
+ 2008-03-16 18:36:16 323,584 ----a-r F:\WINDOWS\Installer\{CC4A73BF-938E-4C19-A553-853C035C9BA1}\NewShortcut1_C673DF680CDE41FC9DFBF63D31DE4F28.exe
+ 2008-03-16 18:36:16 335,872 ----a-r F:\WINDOWS\Installer\{CC4A73BF-938E-4C19-A553-853C035C9BA1}\NewShortcut1_FE82206EF6124B479F4EDD27A1E056A4.exe
+ 2008-03-16 18:36:16 323,584 ----a-r F:\WINDOWS\Installer\{CC4A73BF-938E-4C19-A553-853C035C9BA1}\NewShortcut2_C673DF680CDE41FC9DFBF63D31DE4F28.exe
+ 2008-01-13 19:43:42 216,358 ----a-r F:\WINDOWS\Installer\{E48469CC-635E-4FD5-A122-1497C286D217}\ARPPRODUCTICON.exe
+ 2004-09-29 11:38:58 2,676,224 ----a-w F:\WINDOWS\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.Direct3DX.dll
+ 2004-12-01 14:53:06 2,846,720 ----a-w F:\WINDOWS\Microsoft.NET\DirectX for Managed Code\1.0.2903.0\Microsoft.DirectX.Direct3DX.dll
+ 2005-02-05 18:32:54 563,712 ----a-w F:\WINDOWS\Microsoft.NET\DirectX for Managed Code\1.0.2904.0\Microsoft.DirectX.Direct3DX.dll
+ 2005-05-26 14:15:56 576,000 ----a-w F:\WINDOWS\Microsoft.NET\DirectX for Managed Code\1.0.2906.0\Microsoft.DirectX.Direct3DX.dll
+ 2005-07-22 16:21:34 577,024 ----a-w F:\WINDOWS\Microsoft.NET\DirectX for Managed Code\1.0.2907.0\Microsoft.DirectX.Direct3DX.dll
+ 2005-09-28 13:11:52 577,536 ----a-w F:\WINDOWS\Microsoft.NET\DirectX for Managed Code\1.0.2908.0\Microsoft.DirectX.Direct3DX.dll
+ 2005-12-05 16:20:50 577,536 ----a-w F:\WINDOWS\Microsoft.NET\DirectX for Managed Code\1.0.2909.0\Microsoft.DirectX.Direct3DX.dll
+ 2006-02-03 06:40:48 578,560 ----a-w F:\WINDOWS\Microsoft.NET\DirectX for Managed Code\1.0.2910.0\Microsoft.DirectX.Direct3DX.dll
+ 2006-03-31 10:27:50 578,560 ----a-w F:\WINDOWS\Microsoft.NET\DirectX for Managed Code\1.0.2911.0\Microsoft.DirectX.Direct3DX.dll
- 2003-02-20 17:09:46 57,344 ----a-w F:\WINDOWS\Microsoft.NET\Framework\NETFXSBS10.exe
+ 2005-09-23 05:28:52 72,704 ----a-w F:\WINDOWS\Microsoft.NET\Framework\NETFXSBS10.exe
- 2003-02-20 17:09:32 5,120 ----a-w F:\WINDOWS\Microsoft.NET\Framework\sbscmp10.dll
+ 2005-09-23 05:28:52 7,680 ----a-w F:\WINDOWS\Microsoft.NET\Framework\sbscmp10.dll
+ 2005-09-23 05:28:56 7,680 ----a-w F:\WINDOWS\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
+ 2005-09-23 05:28:58 7,680 ----a-w F:\WINDOWS\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
+ 2005-09-23 05:28:56 7,680 ----a-w F:\WINDOWS\Microsoft.NET\Framework\SharedReg12.dll
- 2003-02-20 16:43:50 131,072 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll
+ 2005-09-23 05:28:52 86,528 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll
+ 2005-09-23 05:28:36 18,944 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll
+ 2005-09-23 05:28:42 136,192 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll
+ 2005-09-23 05:28:44 4,608 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll
+ 2005-09-23 05:29:04 183,808 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll
+ 2005-09-23 05:28:28 208,896 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll
+ 2005-09-23 05:28:56 10,752 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
+ 2005-09-23 05:28:58 138,240 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll
+ 2005-09-23 05:28:36 87,552 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\alink.dll
+ 2005-09-23 05:28:58 55,488 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
+ 2005-09-23 05:28:32 36,864 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
+ 2005-09-23 05:28:32 10,752 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll
+ 2005-09-23 05:28:32 8,192 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll
+ 2005-09-23 05:28:32 23,552 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll
+ 2005-09-23 05:28:32 70,656 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll
+ 2005-09-23 05:28:32 13,824 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
+ 2005-09-23 05:28:32 26,824 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
+ 2005-09-23 05:28:32 106,496 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
+ 2005-09-23 05:28:32 29,896 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
+ 2005-09-23 05:28:32 29,888 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
+ 2005-09-23 05:28:32 503,808 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll
+ 2005-09-23 05:28:56 106,496 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
+ 2005-09-23 05:28:56 88,576 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll
+ 2005-09-23 05:28:42 76,984 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\csc.exe
+ 2005-09-23 05:28:42 1,144,832 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cscomp.dll
+ 2005-09-23 05:28:42 13,312 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
+ 2005-09-23 05:28:58 17,920 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Culture.dll
+ 2005-09-23 05:28:56 68,608 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll
+ 2005-09-23 05:28:44 31,936 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
+ 2005-09-23 05:28:38 52,736 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfdll.dll
+ 2005-09-23 05:28:38 4,608 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
+ 2005-09-23 05:29:12 547,840 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
+ 2005-09-23 05:28:56 788,992 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll
+ 2005-09-23 05:28:50 9,216 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fusion.dll
+ 2005-09-23 05:28:56 9,728 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
+ 2005-09-23 05:28:56 8,192 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll
+ 2005-09-23 05:28:56 36,864 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEHost.dll
+ 2005-09-23 05:28:56 5,632 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll
+ 2005-09-23 05:28:56 224,952 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ilasm.exe
+ 2005-09-23 05:28:56 28,672 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
+ 2005-09-23 05:28:56 55,296 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll
+ 2005-09-23 05:28:56 72,192 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
+ 2005-09-23 05:28:48 40,960 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\jsc.exe
+ 2005-09-23 05:01:16 609,472 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
+ 2005-09-23 04:29:48 80,896 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1025.dll
+ 2005-09-23 04:32:24 80,896 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1028.dll
+ 2005-09-23 04:34:10 82,944 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1029.dll
+ 2005-09-23 04:34:12 81,920 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1030.dll
+ 2005-09-23 04:34:44 85,504 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1031.dll
+ 2005-09-23 04:36:24 87,552 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1032.dll
+ 2005-09-23 01:46:14 80,896 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1033.dll
+ 2005-09-23 04:38:26 81,408 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1035.dll
+ 2005-09-23 04:38:52 86,016 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1036.dll
+ 2005-09-23 04:40:30 80,896 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1037.dll
+ 2005-09-23 04:40:32 83,968 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1038.dll
+ 2005-09-23 04:40:56 84,480 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1040.dll
+ 2005-09-23 04:42:58 80,896 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1041.dll
+ 2005-09-23 04:44:58 80,896 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1042.dll
+ 2005-09-23 04:46:38 83,456 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1043.dll
+ 2005-09-23 04:46:38 81,920 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1044.dll
+ 2005-09-23 04:46:40 83,456 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1045.dll
+ 2005-09-23 04:47:04 82,432 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1046.dll
+ 2005-09-23 04:47:30 82,432 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1049.dll
+ 2005-09-23 04:47:32 81,920 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1053.dll
+ 2005-09-23 04:47:32 80,896 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1055.dll
+ 2005-09-23 04:30:18 80,896 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.2052.dll
+ 2005-09-23 04:47:06 84,480 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.2070.dll
+ 2005-09-23 04:29:50 80,896 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.3076.dll
+ 2005-09-23 04:36:48 85,504 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.3082.dll
+ 2005-09-23 05:57:06 245,408 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\unicows.dll
+ 2005-09-23 05:28:48 413,696 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll
+ 2005-09-23 05:28:48 36,864 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
+ 2005-09-23 05:28:48 647,168 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll
+ 2005-09-23 05:28:48 73,728 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll
+ 2005-09-23 05:28:48 745,472 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll
+ 2005-09-23 05:29:10 110,592 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2005-09-23 05:29:10 372,736 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll
+ 2005-09-23 05:29:08 667,648 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll
+ 2005-09-23 05:28:30 28,672 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
+ 2005-09-23 05:29:10 5,632 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll
+ 2005-09-23 05:28:30 32,768 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
+ 2005-09-23 05:28:30 12,800 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2005-09-23 05:28:30 7,168 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll
+ 2005-09-23 05:28:32 87,552 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
+ 2005-09-23 05:28:48 69,632 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
+ 2005-09-23 05:28:56 800,768 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
+ 2005-09-23 05:28:56 73,216 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll
+ 2005-09-23 05:28:56 288,768 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll
+ 2005-09-23 05:28:56 36,864 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorie.dll
+ 2005-09-23 05:28:56 326,144 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
+ 2005-09-23 05:28:56 81,408 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorld.dll
+ 2005-09-23 05:28:56 4,308,992 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
+ 2005-09-23 05:28:56 102,400 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll
+ 2005-09-23 05:29:00 330,752 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll
+ 2005-09-23 05:28:56 67,072 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
+ 2005-09-23 05:28:50 9,216 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll
+ 2005-09-23 05:28:56 226,816 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll
+ 2005-09-23 05:28:56 66,240 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
+ 2005-09-23 05:28:56 10,240 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscortim.dll
+ 2005-09-23 05:28:50 5,615,616 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
+ 2005-09-23 05:29:00 22,528 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MUI\0409\mscorsecr.dll
+ 2005-09-23 05:28:56 96,440 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ngen.exe
+ 2005-09-23 05:28:56 14,848 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\normalization.dll
+ 2005-09-23 05:28:56 78,336 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll
+ 2005-09-23 05:28:50 136,192 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\peverify.dll
+ 2005-09-23 05:28:56 53,248 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
+ 2005-09-23 05:28:56 32,768 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
+ 2005-09-23 05:29:02 59,072 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe
+ 2005-09-23 05:28:58 7,680 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
+ 2005-09-23 05:28:56 107,520 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\shfusion.dll
+ 2005-09-23 05:29:00 85,504 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll
+ 2005-09-23 05:28:56 377,344 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\SOS.dll
+ 2005-09-23 05:28:56 110,592 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
+ 2005-09-23 05:28:58 389,120 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll
+ 2005-09-23 05:28:56 81,920 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
+ 2005-09-23 05:28:56 2,878,976 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.dll
+ 2005-09-23 05:28:56 482,304 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll
+ 2005-09-23 05:28:56 716,800 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll
+ 2005-09-23 05:28:38 884,736 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll
+ 2005-09-23 05:28:56 5,050,368 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
+ 2005-09-23 05:28:56 397,312 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll
+ 2005-09-23 05:28:56 188,416 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll
+ 2005-09-23 05:28:56 3,018,752 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.dll
+ 2005-09-23 05:28:56 81,920 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
+ 2005-09-23 05:28:56 700,416 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
+ 2005-09-23 05:28:56 258,048 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll
+ 2005-09-23 05:28:56 47,616 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll
+ 2005-09-23 05:28:56 114,176 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll
+ 2005-09-23 05:28:56 368,640 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Management.dll
+ 2005-09-23 05:28:56 258,048 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll
+ 2005-09-23 05:28:56 299,008 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll
+ 2005-09-23 05:28:56 131,072 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
+ 2005-09-23 05:28:56 258,048 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
+ 2005-09-23 05:28:56 114,688 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll
+ 2005-09-23 05:28:56 260,096 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll
+ 2005-09-23 05:28:56 5,025,792 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
+ 2005-09-23 05:28:56 835,584 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll
+ 2005-09-23 05:28:56 86,016 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll
+ 2005-09-23 05:28:56 823,296 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll
+ 2005-09-23 05:28:56 5,316,608 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
+ 2005-09-23 05:28:56 2,035,712 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.XML.dll
+ 2005-09-23 05:28:56 71,680 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL
+ 2005-09-23 05:29:06 1,140,920 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\vbc.exe
+ 2005-09-23 05:28:30 1,306,624 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll
+ 2005-09-23 05:28:32 298,496 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\webengine.dll
+ 2005-09-23 05:28:56 28,160 ----a-w F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
- 2007-06-16 23:11:58 51,200 ----a-w F:\WINDOWS\NirCmd.exe
+ 2000-08-31 06:00:00 28,672 ----a-w F:\WINDOWS\NirCmd.exe
+ 2007-08-23 10:26:17 2,426 ----a-w F:\WINDOWS\pchealth\helpctr\PackageStore\SkuStore.bin
+ 2000-08-31 06:00:00 98,816 ----a-w F:\WINDOWS\sed.exe
+ 2000-08-31 06:00:00 161,792 ----a-w F:\WINDOWS\swreg.exe
+ 2000-08-31 06:00:00 136,704 ----a-w F:\WINDOWS\swsc.exe
+ 2000-08-31 06:00:00 212,480 ----a-w F:\WINDOWS\swxcacls.exe
+ 2001-08-17 19:36:34 2,000 ----a-w F:\WINDOWS\system\KEYBOARD.DRV
+ 2001-10-26 13:45:18 73,616 ----a-w F:\WINDOWS\system\MCIAVI.DRV
+ 2001-10-26 13:45:18 25,296 ----a-w F:\WINDOWS\system\MCISEQ.DRV
+ 2001-10-26 13:45:18 28,160 ----a-w F:\WINDOWS\system\MCIWAVE.DRV
+ 2001-08-17 19:36:40 2,032 ----a-w F:\WINDOWS\system\MOUSE.DRV
+ 2001-08-17 19:36:36 1,744 ----a-w F:\WINDOWS\system\SOUND.DRV
+ 2001-08-17 19:36:30 3,360 ----a-w F:\WINDOWS\system\SYSTEM.DRV
+ 2001-10-26 14:51:12 4,096 ----a-w F:\WINDOWS\system\TIMER.DRV
+ 2001-08-17 19:36:40 2,176 ----a-w F:\WINDOWS\system\VGA.DRV
+ 2001-08-17 19:36:54 13,600 ----a-w F:\WINDOWS\system\WFWNET.DRV
+ 2004-08-03 22:44:32 146,432 ----a-w F:\WINDOWS\system\WINSPOOL.DRV
+ 2001-08-17 19:36:36 10,544 ----a-w F:\WINDOWS\system32\comm.drv
+ 2007-03-12 15:42:30 1,123,696 ----a-w F:\WINDOWS\system32\D3DCompiler_33.dll
+ 2007-05-16 15:45:16 1,124,720 ----a-w F:\WINDOWS\system32\D3DCompiler_34.dll
+ 2007-07-19 16:14:42 1,358,192 ----a-w F:\WINDOWS\system32\D3DCompiler_35.dll
+ 2007-03-15 15:57:58 443,752 ----a-w F:\WINDOWS\system32\d3dx10_33.dll
+ 2007-05-16 15:45:16 443,752 ----a-w F:\WINDOWS\system32\d3dx10_34.dll
+ 2007-07-19 16:14:42 444,776 ----a-w F:\WINDOWS\system32\d3dx10_35.dll
- 2005-05-26 13:34:52 2,297,552 ----a-w F:\WINDOWS\system32\d3dx9_26.dll
+ 2005-05-26 14:34:52 2,297,552 ----a-w F:\WINDOWS\system32\d3dx9_26.dll
- 2005-07-22 17:59:04 2,319,568 ----a-w F:\WINDOWS\system32\d3dx9_27.dll
+ 2005-07-22 18:59:04 2,319,568 ----a-w F:\WINDOWS\system32\d3dx9_27.dll
- 2005-12-05 16:09:18 2,323,664 ----a-w F:\WINDOWS\system32\d3dx9_28.dll
+ 2005-12-05 17:09:18 2,323,664 ----a-w F:\WINDOWS\system32\d3dx9_28.dll
- 2006-02-03 06:43:16 2,332,368 ----a-w F:\WINDOWS\system32\d3dx9_29.dll
+ 2006-02-03 07:43:16 2,332,368 ----a-w F:\WINDOWS\system32\d3dx9_29.dll
- 2006-03-31 10:40:58 2,388,176 ----a-w F:\WINDOWS\system32\d3dx9_30.dll
+ 2006-03-31 11:40:58 2,388,176 ----a-w F:\WINDOWS\system32\d3dx9_30.dll
+ 2007-03-12 15:42:30 3,495,784 ----a-w F:\WINDOWS\system32\d3dx9_33.dll
+ 2007-05-16 15:45:16 3,497,832 ----a-w F:\WINDOWS\system32\d3dx9_34.dll
+ 2007-07-19 16:14:42 3,727,720 ----a-w F:\WINDOWS\system32\d3dx9_35.dll
+ 2004-08-03 22:56:48 1,788 ----a-w F:\WINDOWS\system32\Dcache.bin
+ 2005-09-23 05:28:38 83,456 ----a-w F:\WINDOWS\system32\dfshim.dll
+ 2004-08-03 19:58:46 15,104 -c--a-w F:\WINDOWS\system32\dllcache\usbscan.sys
+ 2008-04-05 08:25:16 278,984 ----a-w F:\WINDOWS\system32\drivers\atksgt.sys
+ 2004-08-03 20:07:58 2,944 ----a-w F:\WINDOWS\system32\drivers\drmkaud.sys
+ 2008-04-05 08:25:16 25,416 ----a-w F:\WINDOWS\system32\drivers\lirsgt.sys
+ 2001-08-17 19:47:40 2,944 ----a-w F:\WINDOWS\system32\drivers\null.sys
+ 2008-01-15 14:47:08 22,328 ----a-w F:\WINDOWS\system32\drivers\PnkBstrK.sys
- 2007-08-23 11:47:55 685,816 ----a-w F:\WINDOWS\system32\drivers\sptd.sys
+ 2008-01-23 17:24:03 715,248 ----a-w F:\WINDOWS\system32\drivers\sptd.sys
+ 2004-08-03 19:58:46 15,104 ----a-w F:\WINDOWS\system32\drivers\usbscan.sys
- 2007-10-13 11:19:02 1,565,816 ----a-w F:\WINDOWS\system32\FNTCACHE.DAT
+ 2008-06-06 05:21:59 1,574,752 ----a-w F:\WINDOWS\system32\FNTCACHE.DAT
+ 2001-08-17 19:36:34 2,000 ----a-w F:\WINDOWS\system32\keyboard.drv
+ 2001-10-26 13:45:18 223,680 ----a-w F:\WINDOWS\system32\lanman.drv
+ 2001-10-26 15:27:00 2,560 ----a-w F:\WINDOWS\system32\lz32.dll
- 2007-08-07 15:20:44 182,248 ----a-w F:\WINDOWS\system32\Macromed\Director\SwDir.dll
+ 2008-01-07 10:26:46 181,672 ----a-w F:\WINDOWS\system32\Macromed\Director\SwDir.dll
- 2007-08-07 11:35:56 585,728 ----a-w F:\WINDOWS\system32\Macromed\Shockwave 10\Control.dll
+ 2008-01-03 17:19:34 581,632 ----a-w F:\WINDOWS\system32\Macromed\Shockwave 10\Control.dll
- 2007-08-07 11:19:40 1,490,944 ----a-w F:\WINDOWS\system32\Macromed\Shockwave 10\dirapi.dll
+ 2008-01-03 17:01:46 1,490,944 ----a-w F:\WINDOWS\system32\Macromed\Shockwave 10\dirapi.dll
- 2007-08-07 11:36:32 24,576 ----a-w F:\WINDOWS\system32\Macromed\Shockwave 10\DynaPlayer.dll
+ 2008-01-03 17:20:14 24,576 ----a-w F:\WINDOWS\system32\Macromed\Shockwave 10\DynaPlayer.dll
- 2007-08-07 14:52:32 1,113,600 ----a-w F:\WINDOWS\system32\Macromed\Shockwave 10\gi.dll
+ 2008-01-03 17:39:06 1,113,600 ----a-w F:\WINDOWS\system32\Macromed\Shockwave 10\gi.dll
- 2007-08-07 11:08:48 52,288 ----a-w F:\WINDOWS\system32\Macromed\Shockwave 10\gtapi.dll
+ 2008-01-03 16:46:46 52,288 ----a-w F:\WINDOWS\system32\Macromed\Shockwave 10\gtapi.dll
- 2007-08-07 11:17:24 606,208 ----a-w F:\WINDOWS\system32\Macromed\Shockwave 10\iml32.dll
+ 2008-01-03 16:59:14 606,208 ----a-w F:\WINDOWS\system32\Macromed\Shockwave 10\iml32.dll
- 2007-08-07 11:35:22 339,968 ----a-w F:\WINDOWS\system32\Macromed\Shockwave 10\Plugin.dll
+ 2008-01-03 17:18:56 339,968 ----a-w F:\WINDOWS\system32\Macromed\Shockwave 10\Plugin.dll
- 2007-08-07 11:35:32 483,328 ----a-w F:\WINDOWS\system32\Macromed\Shockwave 10\PluginPing.dll
+ 2008-01-03 17:19:06 475,136 ----a-w F:\WINDOWS\system32\Macromed\Shockwave 10\PluginPing.dll
- 2007-08-07 11:28:38 180,224 ----a-w F:\WINDOWS\system32\Macromed\Shockwave 10\Proj.dll
+ 2008-01-03 17:11:48 180,224 ----a-w F:\WINDOWS\system32\Macromed\Shockwave 10\Proj.dll
+ 2008-01-07 10:26:28 390,568 ----a-w F:\WINDOWS\system32\Macromed\Shockwave 10\SwHelper_1030024.exe
- 2007-08-07 11:37:56 77,824 ----a-w F:\WINDOWS\system32\Macromed\Shockwave 10\SwInit.exe
+ 2008-01-03 17:22:06 77,824 ----a-w F:\WINDOWS\system32\Macromed\Shockwave 10\SwInit.exe
- 2007-08-07 11:35:18 86,016 ----a-w F:\WINDOWS\system32\Macromed\Shockwave 10\SwMenu.dll
+ 2008-01-03 17:18:50 86,016 ----a-w F:\WINDOWS\system32\Macromed\Shockwave 10\SwMenu.dll
- 2007-08-07 11:37:58 98,304 ----a-w F:\WINDOWS\system32\Macromed\Shockwave 10\SwOnce.dll
+ 2008-01-03 17:22:08 98,304 ----a-w F:\WINDOWS\system32\Macromed\Shockwave 10\SwOnce.dll
- 2007-08-07 11:08:46 50,808 ----a-w F:\WINDOWS\system32\Macromed\Shockwave 10\SYMCCHECKER.DLL
+ 2008-01-03 16:46:44 50,808 ----a-w F:\WINDOWS\system32\Macromed\Shockwave 10\SYMCCHECKER.DLL
- 1999-06-25 08:55:30 149,504 ----a-w F:\WINDOWS\system32\Macromed\Shockwave 10\UNWISE.EXE
+ 1999-06-25 09:55:30 149,504 ----a-w F:\WINDOWS\system32\Macromed\Shockwave 10\UNWISE.EXE
+ 2001-10-26 13:45:18 73,616 ----a-w F:\WINDOWS\system32\mciavi.drv
+ 2001-10-26 13:45:18 25,296 ----a-w F:\WINDOWS\system32\mciseq.drv
+ 2001-10-26 13:45:18 28,160 ----a-w F:\WINDOWS\system32\mciwave.drv
+ 2001-08-17 19:36:40 2,032 ----a-w F:\WINDOWS\system32\mouse.drv
+ 2001-10-26 15:30:08 20,992 ----a-w F:\WINDOWS\system32\msacm32.drv
- 2003-02-20 17:06:24 155,648 ----a-w F:\WINDOWS\system32\mscoree.dll
+ 2005-09-23 05:28:52 270,848 ----a-w F:\WINDOWS\system32\mscoree.dll
- 2003-02-20 16:43:38 16,896 ----a-w F:\WINDOWS\system32\mscorier.dll
+ 2005-09-23 05:28:52 150,016 ----a-w F:\WINDOWS\system32\mscorier.dll
- 2003-02-20 17:09:14 106,496 ----a-w F:\WINDOWS\system32\mscories.dll
+ 2005-09-23 05:28:52 74,240 ----a-w F:\WINDOWS\system32\mscories.dll
+ 2004-08-03 22:44:32 188,416 ----a-w F:\WINDOWS\system32\msh261.drv
+ 2006-03-12 16:57:27 294,912 ----a-w F:\WINDOWS\system32\msh263.drv
+ 2007-04-30 14:50:50 903,072 ----a-w F:\WINDOWS\system32\msidcrl40.dll
- 2002-02-04 00:52:54 1,230,336 ----a-w F:\WINDOWS\system32\msxml4.dll
+ 2003-04-18 15:46:22 1,233,920 ----a-w F:\WINDOWS\system32\msxml4.dll
- 2002-02-04 00:43:00 82,432 ----a-w F:\WINDOWS\system32\msxml4r.dll
+ 2002-02-04 01:43:00 82,432 ----a-w F:\WINDOWS\system32\msxml4r.dll
+ 2005-09-23 05:29:00 6,144 ----a-w F:\WINDOWS\system32\mui\0409\mscorees.dll
+ 2001-08-17 19:13:24 2,656 ----a-w F:\WINDOWS\system32\netware.drv
- 2007-10-28 08:16:23 53,744 ----a-w F:\WINDOWS\system32\perfc009.dat
+ 2008-05-30 13:39:59 63,324 ----a-w F:\WINDOWS\system32\perfc009.dat
- 2007-10-28 08:16:23 68,554 ----a-w F:\WINDOWS\system32\perfc015.dat
+ 2008-05-30 13:39:59 80,664 ----a-w F:\WINDOWS\system32\perfc015.dat
- 2007-10-28 08:16:23 383,390 ----a-w F:\WINDOWS\system32\perfh009.dat
+ 2008-05-30 13:39:59 404,104 ----a-w F:\WINDOWS\system32\perfh009.dat
- 2007-10-28 08:16:23 439,538 ----a-w F:\WINDOWS\system32\perfh015.dat
+ 2008-05-30 13:39:59 461,238 ----a-w F:\WINDOWS\system32\perfh015.dat
+ 2008-01-15 05:56:05 66,872 ----a-w F:\WINDOWS\system32\PnkBstrA.exe
+ 2008-01-15 14:47:02 103,736 ----a-w F:\WINDOWS\system32\PnkBstrB.exe
+ 2001-10-26 14:29:42 5,632 ----a-w F:\WINDOWS\system32\ptpusb.dll
+ 2004-08-03 21:44:10 159,232 ----a-w F:\WINDOWS\system32\ptpusd.dll
+ 2005-04-12 15:21:06 225,280 ----a-w F:\WINDOWS\system32\rewire.dll
+ 2001-08-17 19:36:36 1,744 ----a-w F:\WINDOWS\system32\sound.drv
+ 2001-08-17 19:36:30 3,360 ----a-w F:\WINDOWS\system32\system.drv
+ 2001-10-26 14:51:12 4,096 ----a-w F:\WINDOWS\system32\timer.drv
+ 2001-08-17 19:36:40 2,176 ----a-w F:\WINDOWS\system32\vga.drv
+ 2004-08-03 21:44:32 23,552 ----a-w F:\WINDOWS\system32\wdmaud.drv
+ 2001-08-17 19:36:54 13,600 ----a-w F:\WINDOWS\system32\wfwnet.drv
+ 2001-08-17 19:36:46 2,864 ----a-w F:\WINDOWS\system32\winsock.dll
+ 2004-08-03 22:44:32 146,432 ----a-w F:\WINDOWS\system32\winspool.drv
+ 2001-08-17 19:36:40 2,112 ----a-w F:\WINDOWS\system32\winspool.exe
+ 2001-08-17 19:36:52 2,736 ----a-w F:\WINDOWS\system32\wowdeb.exe
- 2006-02-03 06:41:26 14,032 ----a-w F:\WINDOWS\system32\x3daudio1_0.dll
+ 2006-02-03 07:41:26 14,032 ----a-w F:\WINDOWS\system32\x3daudio1_0.dll
- 2007-01-08 13:30:42 15,128 ----a-w F:\WINDOWS\system32\x3daudio1_1.dll
+ 2007-03-05 11:42:18 15,128 ----a-w F:\WINDOWS\system32\x3daudio1_1.dll
+ 2007-07-19 22:54:28 18,280 ----a-w F:\WINDOWS\system32\x3daudio1_2.dll
- 2006-02-03 06:42:06 230,096 ----a-w F:\WINDOWS\system32\xactengine2_0.dll
+ 2006-02-03 07:42:06 230,096 ----a-w F:\WINDOWS\system32\xactengine2_0.dll
- 2006-03-31 10:39:48 229,584 ----a-w F:\WINDOWS\system32\xactengine2_1.dll
+ 2006-03-31 11:39:48 229,584 ----a-w F:\WINDOWS\system32\xactengine2_1.dll
- 2007-01-24 13:27:30 255,848 ----a-w F:\WINDOWS\system32\xactengine2_6.dll
+ 2007-01-24 14:27:30 255,848 ----a-w F:\WINDOWS\system32\xactengine2_6.dll
+ 2007-04-04 17:55:00 261,480 ----a-w F:\WINDOWS\system32\xactengine2_7.dll
+ 2007-06-20 19:46:04 266,088 ----a-w F:\WINDOWS\system32\xactengine2_8.dll
+ 2007-07-19 22:57:12 267,112 ----a-w F:\WINDOWS\system32\xactengine2_9.dll
- 2006-03-31 10:39:24 62,672 ----a-w F:\WINDOWS\system32\xinput1_1.dll
+ 2006-03-31 11:39:24 62,672 ----a-w F:\WINDOWS\system32\xinput1_1.dll
- 2006-09-28 14:04:02 68,888 ----a-w F:\WINDOWS\system32\xinput1_3.dll
+ 2007-04-04 17:53:42 81,768 ----a-w F:\WINDOWS\system32\xinput1_3.dll
- 2005-12-05 16:07:30 61,136 ----a-w F:\WINDOWS\system32\xinput9_1_0.dll
+ 2005-12-05 17:07:30 61,136 ----a-w F:\WINDOWS\system32\xinput9_1_0.dll
+ 2007-09-12 21:52:14 8,607,552 ----a-w F:\WINDOWS\system32\xlive.dll
+ 2007-09-12 21:52:18 13,653,824 ----a-w F:\WINDOWS\system32\xlivefnt.dll
+ 2000-08-31 06:00:00 49,152 ----a-w F:\WINDOWS\VFind.exe
- 2007-10-07 11:41:39 1,230,336 ----a-w F:\WINDOWS\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.1.0.0_x-ww_b319d8da\msxml4.dll
+ 2008-04-11 21:43:07 1,230,336 ----a-w F:\WINDOWS\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.1.0.0_x-ww_b319d8da\msxml4.dll
+ 2008-02-13 15:40:20 1,233,920 ----a-w F:\WINDOWS\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9818.0_x-ww_8ff50c5d\msxml4.dll
- 2007-10-07 11:41:40 82,432 ----a-w F:\WINDOWS\WinSxS\x86_Microsoft.MSXML2R_6bd6b9abf345378f_4.1.0.0_x-ww_29c3ad6a\msxml4r.dll
+ 2008-02-13 15:25:36 82,432 ----a-w F:\WINDOWS\WinSxS\x86_Microsoft.MSXML2R_6bd6b9abf345378f_4.1.0.0_x-ww_29c3ad6a\msxml4r.dll
+ 2006-09-12 22:43:06 96,256 ----a-w F:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.363_x-ww_c9ba3671\ATL80.dll
+ 2006-12-01 20:56:00 96,256 ----a-w F:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_cbb27474\ATL80.dll
+ 2006-09-12 22:41:36 479,232 ----a-w F:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.363_x-ww_691a48fd\msvcm80.dll
+ 2006-09-12 22:41:36 548,864 ----a-w F:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.363_x-ww_691a48fd\msvcp80.dll
+ 2006-09-12 22:41:36 626,688 ----a-w F:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.363_x-ww_691a48fd\msvcr80.dll
+ 2005-09-22 22:48:08 479,232 ----a-w F:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\msvcm80.dll
+ 2005-09-22 22:48:08 548,864 ----a-w F:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\msvcp80.dll
+ 2005-09-22 22:48:06 626,688 ----a-w F:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\msvcr80.dll
+ 2006-12-01 20:54:32 479,232 ----a-w F:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcm80.dll
+ 2006-12-01 20:54:34 548,864 ----a-w F:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcp80.dll
+ 2006-12-01 20:54:32 626,688 ----a-w F:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcr80.dll
+ 2006-09-13 00:12:34 1,101,824 ----a-w F:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.363_x-ww_3a00bc02\mfc80.dll
+ 2006-09-13 00:12:40 1,092,608 ----a-w F:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.363_x-ww_3a00bc02\mfc80u.dll
+ 2006-09-13 00:12:44 69,632 ----a-w F:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.363_x-ww_3a00bc02\mfcm80.dll
+ 2006-09-13 00:12:46 57,856 ----a-w F:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.363_x-ww_3a00bc02\mfcm80u.dll
+ 2006-12-01 22:25:52 1,101,824 ----a-w F:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfc80.dll
+ 2006-12-01 22:25:56 1,093,120 ----a-w F:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfc80u.dll
+ 2006-12-01 22:25:58 69,632 ----a-w F:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfcm80.dll
+ 2006-12-01 22:26:00 57,856 ----a-w F:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfcm80u.dll
+ 2006-09-12 23:54:30 40,960 ----a-w F:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.363_x-ww_8f4fd500\mfc80CHS.dll
+ 2006-09-12 23:54:30 45,056 ----a-w F:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.363_x-ww_8f4fd500\mfc80CHT.dll
+ 2006-09-12 23:54:28 65,536 ----a-w F:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.363_x-ww_8f4fd500\mfc80DEU.dll
+ 2006-09-12 23:54:30 57,344 ----a-w F:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.363_x-ww_8f4fd500\mfc80ENU.dll
+ 2006-09-12 23:54:30 61,440 ----a-w F:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.363_x-ww_8f4fd500\mfc80ESP.dll
+ 2006-09-12 23:54:28 61,440 ----a-w F:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.363_x-ww_8f4fd500\mfc80FRA.dll
+ 2006-09-12 23:54:30 61,440 ----a-w F:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.363_x-ww_8f4fd500\mfc80ITA.dll
+ 2006-09-12 23:54:30 49,152 ----a-w F:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.363_x-ww_8f4fd500\mfc80JPN.dll
+ 2006-09-12 23:54:30 49,152 ----a-w F:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.363_x-ww_8f4fd500\mfc80KOR.dll
+ 2006-12-01 22:08:00 40,960 ----a-w F:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80CHS.dll
+ 2006-12-01 22:08:00 45,056 ----a-w F:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80CHT.dll
+ 2006-12-01 22:08:00 65,536 ----a-w F:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80DEU.dll
+ 2006-12-01 22:08:00 57,344 ----a-w F:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ENU.dll
+ 2006-12-01 22:08:00 61,440 ----a-w F:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ESP.dll
+ 2006-12-01 22:08:00 61,440 ----a-w F:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80FRA.dll
+ 2006-12-01 22:08:00 61,440 ----a-w F:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ITA.dll
+ 2006-12-01 22:08:00 49,152 ----a-w F:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80JPN.dll
+ 2006-12-01 22:08:00 49,152 ----a-w F:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80KOR.dll
+ 2006-12-01 22:46:44 65,536 ----a-w F:\WINDOWS\WinSxS\x86_Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6c18549a\vcomp.dll
+ 2008-05-30 13:38:38 258,048 ----a-w F:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
+ 2008-05-30 13:38:38 114,176 ----a-w F:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
+ 2001-03-23 15:29:28 880,912 ----a-w F:\WINDOWS\WM8EUTIL.exe
+ 2000-08-31 06:00:00 68,096 ----a-w F:\WINDOWS\zip.exe
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20}]
2008-03-20 00:36 1267040 --a------ F:\Program Files\Winamp Toolbar\winamptb.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}"= "F:\Program Files\Winamp Toolbar\winamptb.dll" [2008-03-20 00:36 1267040]

[HKEY_CLASSES_ROOT\clsid\{ebf2ba02-9094-4c5a-858b-bb198f3d8de2}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand.1]
[HKEY_CLASSES_ROOT\TypeLib\{538CD77C-BFDD-49b0-9562-77419CAB89D1}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}"= F:\Program Files\Winamp Toolbar\winamptb.dll [2008-03-20 00:36 1267040]

[HKEY_CLASSES_ROOT\clsid\{ebf2ba02-9094-4c5a-858b-bb198f3d8de2}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand.1]
[HKEY_CLASSES_ROOT\TypeLib\{538CD77C-BFDD-49b0-9562-77419CAB89D1}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RocketDock"="F:\Program Files\RocketDock\RocketDock.exe" [2007-09-02 14:58 495616]
"AlcoholAutomount"="F:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" [2007-12-22 09:20 222080]
"ctfmon.exe"="F:\WINDOWS\system32\ctfmon.exe" [2004-08-04 00:44 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2007-05-10 12:08 16342528 F:\WINDOWS\RTHDCPL.exe]
"NvCplDaemon"="F:\WINDOWS\system32\NvCpl.dll" [2007-06-29 00:43 8466432]
"nwiz"="nwiz.exe" [2007-06-29 00:43 1626112 F:\WINDOWS\system32\nwiz.exe]
"QuickTime Task"="F:\Program Files\K-Lite Codec Pack\QuickTime\QTTask.exe" [2007-06-29 06:24 286720]
"CorelDRAW Graphics Suite 11b"="F:\Program Files\Corel\Corel Graphics 12\Languages\EN\Programs\Registration.exe" [ ]
"Adobe Reader Speed Launcher"="F:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-05-11 03:06 40048]
"WinampAgent"="F:\Program Files\Winamp\winampa.exe" [2008-03-27 08:35 36352]
"SunJavaUpdateSched"="F:\Program Files\Java\jre1.5.0_05\bin\jusched.exe" [ ]
"ISUSPM Startup"="F:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe" [2006-05-16 10:58 213936]
"ISUSScheduler"="F:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [2006-05-16 10:58 86960]


[HKEY_LOCAL_MAC

[Magik]

otwieraj notatnik

wklej

Kod: Zaznacz wszystko

FILE::

F:\WINDOWS\system32\activexdebugger32.exe

zapisz jako CFScript.txt Przeciągnij i upuść ikonkę CFScript.txt na ikonkę ComboFix.exe

i standardowo to

1. Ściągnij OTMoveIt i go włacz i odpal go z opcji CleanUp
2. wykonaj optymalizację windowsa
3.sciagnij ATF_Cleaner
zaznacz
Windows Temp
All users Temp
Temporary internet files
Recycle Bin
i wcisnij EMPTY SELECTED
4.Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach). Po chwili włącz je powrotem

edit.
chyba ze Mario ten wpis magiczny w rejestrze jeszcze jest

[Z@K]

wszystko zrobione.
dziekujee

[Okocza]

log z combo jest urwany - nie ma całego rejestru