Computer Hope
Software => Computer viruses and spyware => Virus and spyware removal => Topic started by: nikis360 on December 31, 2011, 12:58:09 PM
-
I really need help. I'm using windows xp sp3. My desktop icons are gone and my startup menu is empty. I have a red circle with an x in it near my clock along with a system check icon. A message box opens about 20 times that say windows- delayed write failed. also a box pops up that saysfiles indexing process failed. I have gone through the malware removal steps as best I could. I am unable to download and open spybot.
An error occured while trying to install avast antivirus.
installed online armor and 2 things needed attention, exploring startup menu and checking autoruns.
My add or remove programs list is empty.
cleared cookie with ccleaner.
I cannot open superantispyware or malwarebytes.
I tried to open javaRa and got runtime error.
here are the dds logs:
please help. Thanks
dds.text
.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 7.0.5730.11 BrowserJavaVersion: 1.6.0_26
Run by HP_Administrator at 14:40:34 on 2011-12-31
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2046.45 [GMT -5:00]
.
AV: AVG Anti-Virus *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
svchost.exe
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\windows\system\hpsysdrv.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Documents and Settings\All Users\Application Data\gfhYdHclcK.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
svchost.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\WINDOWS\system32\nvsvc32.exe
svchost.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\Common Files\Java\Java Update\jucheck.exe
C:\Documents and Settings\All Users\Application Data\kn5KXoCPJI5FDa.exe
C:\PROGRA~1\MICROS~4\Office12\OUTLOOK.EXE
C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe
C:\Program Files\Online Armor\OAcat.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\Program Files\internet explorer\iexplore.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.com/
uInternet Settings,ProxyOverride = localhost;*.local
uSearchAssistant = hxxp://www.google.com
uSearchURL,(Default) = hxxp://www.google.com/keyword/%s
BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File
BHO: Complitly: {0fb6a909-6086-458f-bd92-1f8ee10042a0} - c:\documents and settings\hp_administrator\application data\complitly\Complitly.dll
BHO: IEPlugin Class: {11222041-111b-46e3-bd29-efb2449479b1} - c:\progra~1\arcsoft\mediai~1\ArcURLRecord.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
BHO: UrlHelper Class: {74322bf9-df26-493f-b0da-6d2fc5e6429e} - c:\progra~1\bearsh~1\mediabar\datamngr\IEBHO.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.7.6406.1642\swg.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
BHO: Norton Safe Web Lite BHO: {f0da78e9-6b60-42fb-bc26-ef2cfb8c8ff3} - c:\program files\norton safe web lite\engine\1.2.0.6\coIEPlg.dll
TB: Norton Safe Web Lite: {30ceeea2-3742-40e4-85dd-812bf1cbb83d} - c:\program files\norton safe web lite\engine\1.2.0.6\coIEPlg.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
TB: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No File
TB: {724D43A0-0D85-11D4-9908-00400523E39A} - No File
TB: {4E7BD74F-2B8D-469E-94BE-FD60BB9AAE29} - No File
EB: {32683183-48a0-441b-a342-7c2a440a9478} - No File
uRun: [SUPERAntiSpyware] c:\program files\superantispyware\SUPERAntiSpyware.exe
uRun: [swg] "c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe"
uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
mRun: [IAAnotif] c:\program files\intel\intel matrix storage manager\Iaanotif.exe
mRun: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
mRun: [Recguard] c:\windows\sminst\RECGUARD.EXE
mRun: [NeroFilterCheck] c:\program files\common files\ahead\lib\NeroCheck.exe
mRun: [Google Desktop Search] "c:\program files\google\google desktop search\GoogleDesktop.exe" /startup
mRun: [ISUSPM Startup] c:\progra~1\common~1\instal~1\update~1\ISUSPM.exe -startup
mRun: [ISUSScheduler] "c:\program files\common files\installshield\updateservice\issch.exe" -start
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [RTHDCPL] RTHDCPL.EXE
mRun: [ftutil2] rundll32.exe ftutil2.dll,SetWriteCacheMode
mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe"
mRun: [hpsysdrv] c:\windows\system\hpsysdrv.exe
mRun: [HP Software Update] "c:\program files\hp\hp software update\HPWuSchd2.exe"
mRun: [ArcSoft Connection Service] c:\program files\common files\arcsoft\connection service\bin\ACDaemon.exe
mRun: [AppleSyncNotifier] c:\program files\common files\apple\mobile device support\AppleSyncNotifier.exe
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [Malwarebytes' Anti-Malware] "c:\program files\malwarebytes' anti-malware\mbamgui.exe" /starttray
mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
mRun: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
mRun: [gfhYdHclcK.exe] c:\documents and settings\all users\application data\gfhYdHclcK.exe
mRun: [@OnlineArmor GUI] "c:\program files\online armor\OAui.exe"
StartupFolder: c:\docume~1\hp_adm~1\startm~1\programs\startup\autoru~1\imvu.lnk - c:\program files\imvu\IMVUClient.exe
StartupFolder: c:\docume~1\hp_adm~1\startm~1\programs\startup\autoru~1\pictur~1.lnk - c:\program files\sony\sony picture utility\volumewatcher\SPUVolumeWatcher.exe
uPolicies-explorer: NoDesktop = 1 (0x1)
mPolicies-system: DisableTaskMgr = 1 (0x1)
dPolicies-system: DisableTaskMgr = 1 (0x1)
IE: Add to Video Converter... - c:\program files\media player utilities 5.15\aviconverter\grab.html
IE: E&xport to Microsoft Excel - c:\progra~1\micros~4\office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html
IE: {E2D4D26B-0180-43a4-B05F-462D6D54C789} - c:\windows\pchealth\helpctr\vendors\cn=hewlett-packard,l=cupertino,s=ca,c=us\iebutton\support.htm
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~4\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~4\office12\REFIEBAR.DLL
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll
Trusted Zone: motive.com\patttbc.att
DPF: {01113300-3E00-11D2-8470-0060089874ED} - hxxp://supportcenter.rr.com/sdccommon/download/tgctlcm.cab
DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} - hxxp://office.microsoft.com/templates/ieawsdc.cab
DPF: {068BFA33-99F4-4BA9-887D-182386FA2931} - hxxp://www.playfirst.com/play/game/spongebobdash/SpongeBobDinerDashWeb.1.0.0.17.cab
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {233C1507-6A77-46A4-9443-F871F945D258} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - c:\program files\yahoo!\common\Yinsthelper.dll
DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} - hxxp://gfx1.hotmail.com/mail/w3/resources/MSNPUpld.cab
DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} - hxxp://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase5036.cab
DPF: {6262E38D-C782-4403-A333-8E1AB70E0CAC} - hxxp://download.playfirst.com/play/game/weddingdash2/WeddingDash2Web.1.0.0.10.cab
DPF: {639658F3-B141-4D6B-B936-226F75A5EAC3} - hxxp://www.playfirst.com/play/game/dinerdash2/DinerDash2.1.0.0.67.cab
DPF: {6715D12F-213F-4C6E-ACE1-8A363F550B96} - hxxp://download.playfirst.com/play/game/doggiedash/DoggieDash.1.0.0.9.cab
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1258039847000
DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} - hxxp://atv.disney.go.com/global/download/otoy/OTOYAX29b.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab
DPF: {A9F8D9EC-3D0A-4A60-BD82-FBD64BAD370D} - hxxp://h20264.www2.hp.com/ediags/dd/install/HPDriverDiagnosticsxp2k.cab
DPF: {B516CA4E-A5BA-405C-AFCF-A97F08CC7429} - hxxp://www.shockwave.com/content/burgershop/sis/GoBitGamesPlayer_v4.cab
DPF: {BAE1D8DF-0B35-47E3-A1E7-EEB3FF2ECD19} - hxxp://www.playfirst.com/play/game/dinerdashfloonthego/ddfotg.1.0.0.32.cab
DPF: {BE319D04-18BD-4B34-AECC-EE7CB610FCA9} - hxxp://download.games.yahoo.com/games/web_games/sony/bewitched/main.cab
DPF: {BF985246-09BF-11D2-BE62-006097DF57F6} - hxxp://simcity.ea.com/play/classic/SimCityX.cab
DPF: {C0C0CB9B-BFEB-47C2-90FA-BE9692875ADB} - hxxp://download.playfirst.com/play/game/petshophop/petshophopweb.1.0.0.15.cab
DPF: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {DC75FEF6-165D-4D25-A518-C8C4BDA7BAA6} - hxxp://www.playfirst.com/play/game/dinerdash/DinerDash.1.0.0.93.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
DPF: {EA6246B4-F380-443F-8727-9AEA3371146C} - hxxp://www.playfirst.com/play/game/weddingdash/WeddingDash.1.0.0.44.cab
TCP: DhcpNameServer = 209.18.47.61 209.18.47.62
TCP: Interfaces\{64350433-0B8C-4430-B41F-01651DBC4E13} : NameServer = 205.152.37.23,205.152.132.23
TCP: Interfaces\{76EEE69F-8BFC-4FA6-9A55-D65D43369804} : DhcpNameServer = 209.18.47.61 209.18.47.62
TCP: Interfaces\{892900FC-9814-4488-99C0-81491C1EE93D} : DhcpNameServer = 16.92.3.242 16.92.3.243 16.81.3.243 16.118.3.243
TCP: Interfaces\{F54960EF-F293-4D1C-97F5-CF0959A8511F} : DhcpNameServer = 209.18.47.61 209.18.47.62
Handler: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} -
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll
Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.DLL
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
SEH: OA Shell Helper: {4f07da45-8170-4859-9b5f-037ef2970034} - c:\progra~1\online~1\oaevent.dll
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\documents and settings\hp_administrator\application data\mozilla\firefox\profiles\x3yb1sl8.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp:// www.google.com
FF - prefs.js: keyword.URL - hxxp://search.babylon.com/?babsrc=adbartrp&affID=8346&mntrId=10046a430000000000000018f34bb4f7&q=
FF - prefs.js: network.proxy.type - 0
FF - plugin: c:\documents and settings\all users\application data\zylom\zylomgamesplayer\npzylomgamesplayer.dll
FF - plugin: c:\documents and settings\hp_administrator\application data\mozilla\plugins\np-mswmp.dll
FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npdeployJava1.dll
FF - plugin: c:\program files\mozilla firefox\plugins\nppopcaploader.dll
.
============= SERVICES / DRIVERS ===============
.
R1 OADevice;OADriver;c:\windows\system32\drivers\OADriver.sys [2011-12-31 205864]
R1 oahlpXX;Online Armor helper driver;c:\windows\system32\drivers\oahlp32.sys [2011-12-31 40296]
R1 OAmon;OAmon;c:\windows\system32\drivers\OAmon.sys [2011-12-31 25192]
R1 OAnet;OAnet;c:\windows\system32\drivers\OAnet.sys [2011-12-31 29464]
R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\SASDIFSV.SYS [2008-9-3 12872]
R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2008-9-3 67656]
R2 McrdSvc;Media Center Extender Service;c:\windows\ehome\McrdSvc.exe [2005-10-20 96256]
R2 OAcat;Online Armor Helper Service;c:\program files\online armor\oacat.exe [2011-12-31 207936]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2011-8-19 22712]
R3 WN5301;LIteon Wireless PCI Network Adapter Service;c:\windows\system32\drivers\wn5301.sys [2006-9-9 468768]
S0 Partizan;Partizan;c:\windows\system32\drivers\partizan.sys --> c:\windows\system32\drivers\Partizan.sys [?]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\googleupdate.exe /svc --> c:\program files\google\update\GoogleUpdate.exe [?]
S2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2011-8-19 366640]
S2 NOD32FiXTemDono;Eset Nod32 Boot;c:\windows\system32\regedt32.exe [2004-8-9 3584]
S2 NSL;Norton Safe Web Lite;"c:\program files\norton safe web lite\engine\1.2.0.6\ccsvchst.exe" /s "nsl" /m "c:\program files\norton safe web lite\engine\1.2.0.6\dimaster.dll" /prefetch:1 --> c:\program files\norton safe web lite\engine\1.2.0.6\ccSvcHst.exe [?]
S2 SvcOnlineArmor;Online Armor;c:\program files\online armor\oasrv.exe [2011-12-31 4363040]
S3 CXFALCON;Conexant Falcon II NTSC Video Capture;c:\windows\system32\drivers\cxfalcon.sys [2006-9-9 82048]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\common files\symantec shared\eengine\EraserUtilRebootDrv.sys [2010-5-30 102448]
S3 GoogleDesktopManager-051210-111108;Google Desktop Manager 5.9.1005.12335;c:\program files\google\google desktop search\GoogleDesktop.exe [2007-6-19 30192]
S3 gupdatem;Google Update Service (gupdatem);c:\program files\google\update\googleupdate.exe /medsvc --> c:\program files\google\update\GoogleUpdate.exe [?]
S3 SASENUM;SASENUM;c:\program files\superantispyware\SASENUM.SYS [2008-9-3 12872]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]
.
=============== Created Last 30 ================
.
2011-12-31 19:12:22 -------- d-----w- c:\program files\CCleaner
2011-12-31 17:25:13 -------- dc----w- c:\documents and settings\hp_administrator\application data\OnlineArmor
2011-12-31 17:25:13 -------- dc----w- c:\documents and settings\all users\application data\OnlineArmor
2011-12-31 17:23:58 40296 ----a-w- c:\windows\system32\drivers\oahlp32.sys
2011-12-31 17:23:58 25192 ----a-w- c:\windows\system32\drivers\OAmon.sys
2011-12-31 17:23:57 29464 ----a-w- c:\windows\system32\drivers\OAnet.sys
2011-12-31 17:23:57 205864 ----a-w- c:\windows\system32\drivers\OADriver.sys
2011-12-31 17:23:33 -------- d-----w- c:\program files\Online Armor
2011-12-31 17:13:15 -------- dc----w- c:\documents and settings\all users\application data\AVAST Software
2011-12-31 17:13:15 -------- d-----w- c:\program files\AVAST Software
2011-12-31 16:55:01 357112 -c--a-w- c:\documents and settings\all users\application data\kn5KXoCPJI5FDa.exe
2011-12-31 16:33:08 452856 -c-ha-w- c:\documents and settings\all users\application data\gfhYdHclcK.exe
2011-12-27 16:05:29 -------- dc-h--w- c:\documents and settings\all users\application data\MicrosoftProvisioning
2011-12-13 20:04:29 -------- dc-h--w- c:\documents and settings\all users\application data\Provisioning
.
==================== Find3M ====================
.
2011-12-02 04:09:40 414368 ---ha-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-11-25 01:41:07 7084 ---ha-w- c:\windows\system32\0.02632581296426817.exe
2011-11-21 05:02:49 432896 -c-ha-w- c:\documents and settings\all users\application data\NJKgUKkjfTHNlDI.exe
2011-11-20 18:28:48 7206 ---ha-w- c:\windows\system32\PerfStringBackup.TMP
.
============= FINISH: 14:43:41.66 ===============
dds.attach:
.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-08-26.01)
.
Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 10/15/2006 6:22:18 PM
System Uptime: 12/31/2011 11:36:09 AM (3 hours ago)
.
Motherboard: ASUSTek Computer INC. | | Basswood
Processor: Intel(R) Core(TM)2 CPU 6400 @ 2.13GHz | Socket 775 | 1599/266mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 178 GiB total, 1.067 GiB free.
D: is FIXED (NTFS) - 186 GiB total, 182.77 GiB free.
E: is FIXED (FAT32) - 9 GiB total, 0.435 GiB free.
F: is CDROM ()
G: is Removable
H: is Removable
I: is Removable
J: is Removable
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
RP865: 12/31/2011 12:11:37 PM - avast! Free Antivirus Setup
.
==== Installed Programs ======================
.
1300
1300_Help
1300Tour
1300Trb
32 Bit HP CIO Components Installer
Adobe Flash Player 10 ActiveX
Adobe Flash Player 11 Plugin
Adobe Reader 7.1.0
Adobe Shockwave Player 11.5
AiO_Scan
AiOSoftware
Alien Skin Blow Up
Alien Skin Image Doctor
Alien Skin Image Doctor 2
Alien Skin Snap Art
ALSee
ALTools Update
ALZip
Apple Application Support
Apple Mobile Device Support
Apple Software Update
ArcSoft MediaImpression Downloader
ArcSoft Panorama Maker 3.5
Audacity 1.3.12 (Unicode)
Auslogics Disk Defrag
Azureus
Bonjour
BufferChm
CCleaner
CityVilleBot
Clone2Go Video Converter Professional 1.9.1
Complitly
ConvertXtoDVD 3.3.4.106e
Copy
CP_CalendarTemplates1
cp_LightScribeConfig
cp_OnlineProjectsConfig
CP_Package_Basic1
CP_Package_Variety1
CP_Package_Variety2
CP_Package_Variety3
CP_Panorama1Config
cp_PosterPrintConfig
cp_UpdateProjectsConfig
CreativeProjects
CreativeProjectsTemplates
Critical Update for Windows Media Player 11 (KB959772)
CueTour
Customer Experience Enhancement
Data Fax SoftModem with SmartCP
Destinations
DeviceManagementQFolder
Director
DivxToDVD 0.5.2b
DJ_AIO_06_F2400_SW_Min
DocProc
DocumentViewer
F2400
Fax
ffdshow [rev 610] [2006-12-01]
FrostWire 4.21.8
FullDPAppQFolder
GemMaster Mystic
Google Desktop
Google Toolbar for Internet Explorer
Google Update Helper
High Definition Audio Driver Package - KB888111
HijackThis 2.0.2
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows Internet Explorer 7 (KB947864)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 10 (KB903157)
Hotfix for Windows Media Player 10 (KB910393)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB2158563)
Hotfix for Windows XP (KB2443685)
Hotfix for Windows XP (KB2570791)
Hotfix for Windows XP (KB895961-v4)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB961118)
Hotfix for Windows XP (KB970653-v3)
Hotfix for Windows XP (KB976098-v2)
Hotfix for Windows XP (KB979306)
Hotfix for Windows XP (KB981793)
HP Deskjet F2400 All-in-One Driver Software 14.0 Rel. 6
HP Diagnostic Assistant
HP Image Zone 4.2
HP Photo Creations
HP PSC & OfficeJet 4.2
hp psc 1300 series
HP Software Update
HP Unload DLL Patch
hpmdtab
HpSdpAppCoreApp
HPSystemDiagnostics
ImgBurn
InstantShare
InstantShareDevices
Intel(R) Matrix Storage Manager
Intel(R) PRO Network Connections Drivers
Intel(R) Quick Resume Technology Drivers
Intel® Viiv™ Software
InterActual Player
iTunes
IZArc 3.81
Jasc Paint Shop Pro 9
Jasc Paint Shop Pro 9 GDI+ Patch
Java Auto Updater
Java(TM) 6 Update 26
jZip
LightScribe 1.4.124.1
Malwarebytes' Anti-Malware version 1.51.1.1800
Media Player Utilities 5.15
Memories Disc Creator 2.0
Microsoft .NET Framework 1.0 Hotfix (KB2572066)
Microsoft .NET Framework 1.0 Hotfix (KB953295)
Microsoft .NET Framework 1.0 Hotfix (KB979904)
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Security Update (KB2572067)
Microsoft .NET Framework 1.1 Security Update (KB979906)
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Extended
Microsoft Application Error Reporting
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
Microsoft Kernel-Mode Driver Framework Feature Pack 1.7
Microsoft National Language Support Downlevel APIs
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office Access MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Enterprise 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office Groove MUI (English) 2007
Microsoft Office Groove Setup Metadata MUI (English) 2007
Microsoft Office InfoPath MUI (English) 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Software Update for Web Folders (English) 12
Microsoft SQL Server 2005
Microsoft SQL Server 2005 Express Edition (SQLEXPRESS)
Microsoft SQL Server Native Client
Microsoft SQL Server Setup Support Files (English)
Microsoft SQL Server VSS Writer
Microsoft User-Mode Driver Framework Feature Pack 1.7
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft WinUsb 1.0
Microsoft Works
MobileMe Control Panel
Mozilla Firefox 8.0 (x86 en-US)
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
MSXML 6.0 Parser
muvee autoProducer 5.0
muvee autoProducer unPlugged 2.0
My HP Games
Nero 7 Ultra Edition
Nero PhotoShow Express 4
NVIDIA Drivers
Online Armor 5.1
OptionalContentQFolder
OTOY
Otto
Overland
Paint.NET v3.0
PC-Doctor 5 for Windows
PhotoGallery
PopCap Browser Plugin
Portrait Professional 10.6 Trial
PowerISO
PrintScreen
ProductContext
Python 2.2 pywin32 extensions (build 203)
Python 2.2.3
QuickProjects
QuickTime
RandMap
Readme
Realtek High Definition Audio Driver
Roxio Easy Media Creator 7 Basic VCD Edition
Scan
Security Update for 2007 Microsoft Office System (KB2288621)
Security Update for 2007 Microsoft Office System (KB2288931)
Security Update for 2007 Microsoft Office System (KB2345043)
Security Update for 2007 Microsoft Office System (KB2553074)
Security Update for 2007 Microsoft Office System (KB2553089)
Security Update for 2007 Microsoft Office System (KB2553090)
Security Update for 2007 Microsoft Office System (KB2584063)
Security Update for 2007 Microsoft Office System (KB969559)
Security Update for 2007 Microsoft Office System (KB976321)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
Security Update for Microsoft .NET Framework 4 Extended (KB2416472)
Security Update for Microsoft .NET Framework 4 Extended (KB2487367)
Security Update for Microsoft Office Access 2007 (KB979440)
Security Update for Microsoft Office Excel 2007 (KB2553073)
Security Update for Microsoft Office Groove 2007 (KB2552997)
Security Update for Microsoft Office InfoPath 2007 (KB2510061)
Security Update for Microsoft Office InfoPath 2007 (KB979441)
Security Update for Microsoft Office PowerPoint 2007 (KB2535818)
Security Update for Microsoft Office PowerPoint Viewer 2007 (KB2464623)
Security Update for Microsoft Office Publisher 2007 (KB2284697)
Security Update for Microsoft Office system 2007 (972581)
Security Update for Microsoft Office system 2007 (KB974234)
Security Update for Microsoft Office Visio Viewer 2007 (KB973709)
Security Update for Microsoft Office Word 2007 (KB2344993)
Security Update for Microsoft Windows (KB2564958)
Security Update for Step By Step Interactive Training (KB898458)
Security Update for Step By Step Interactive Training (KB923723)
Security Update for Windows Internet Explorer 7 (KB2183461)
Security Update for Windows Internet Explorer 7 (KB2360131)
Security Update for Windows Internet Explorer 7 (KB2416400)
Security Update for Windows Internet Explorer 7 (KB2482017)
Security Update for Windows Internet Explorer 7 (KB2497640)
Security Update for Windows Internet Explorer 7 (KB2530548)
Security Update for Windows Internet Explorer 7 (KB2544521)
Security Update for Windows Internet Explorer 7 (KB2559049)
Security Update for Windows Internet Explorer 7 (KB2586448)
Security Update for Windows Internet Explorer 7 (KB937143)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB939653)
Security Update for Windows Internet Explorer 7 (KB942615)
Security Update for Windows Internet Explorer 7 (KB944533)
Security Update for Windows Internet Explorer 7 (KB950759)
Security Update for Windows Internet Explorer 7 (KB953838)
Security Update for Windows Internet Explorer 7 (KB956390)
Security Update for Windows Internet Explorer 7 (KB958215)
Security Update for Windows Internet Explorer 7 (KB960714)
Security Update for Windows Internet Explorer 7 (KB961260)
Security Update for Windows Internet Explorer 7 (KB963027)
Security Update for Windows Internet Explorer 7 (KB969897)
Security Update for Windows Internet Explorer 7 (KB972260)
Security Update for Windows Internet Explorer 7 (KB974455)
Security Update for Windows Internet Explorer 7 (KB976325)
Security Update for Windows Internet Explorer 7 (KB978207)
Security Update for Windows Internet Explorer 7 (KB982381)
Security Update for Windows Media Player (KB2378111)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB968816)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player (KB975558)
Security Update for Windows Media Player (KB978695)
Security Update for Windows Media Player 10 (KB911565)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows XP (KB2079403)
Security Update for Windows XP (KB2115168)
Security Update for Windows XP (KB2121546)
Security Update for Windows XP (KB2160329)
Security Update for Windows XP (KB2229593)
Security Update for Windows XP (KB2259922)
Security Update for Windows XP (KB2279986)
Security Update for Windows XP (KB2286198)
Security Update for Windows XP (KB2296011)
Security Update for Windows XP (KB2296199)
Security Update for Windows XP (KB2347290)
Security Update for Windows XP (KB2360937)
Security Update for Windows XP (KB2387149)
Security Update for Windows XP (KB2393802)
Security Update for Windows XP (KB2412687)
Security Update for Windows XP (KB2419632)
Security Update for Windows XP (KB2423089)
Security Update for Windows XP (KB2436673)
Security Update for Windows XP (KB2440591)
Security Update for Windows XP (KB2443105)
Security Update for Windows XP (KB2476490)
Security Update for Windows XP (KB2476687)
Security Update for Windows XP (KB2478960)
Security Update for Windows XP (KB2478971)
Security Update for Windows XP (KB2479628)
Security Update for Windows XP (KB2481109)
Security Update for Windows XP (KB2483185)
Security Update for Windows XP (KB2485376)
Security Update for Windows XP (KB2485663)
Security Update for Windows XP (KB2491683)
Security Update for Windows XP (KB2503658)
Security Update for Windows XP (KB2503665)
Security Update for Windows XP (KB2506212)
Security Update for Windows XP (KB2506223)
Security Update for Windows XP (KB2507618)
Security Update for Windows XP (KB2507938)
Security Update for Windows XP (KB2508272)
Security Update for Windows XP (KB2508429)
Security Update for Windows XP (KB2509553)
Security Update for Windows XP (KB2510581)
Security Update for Windows XP (KB2511455)
Security Update for Windows XP (KB2524375)
Security Update for Windows XP (KB2535512)
Security Update for Windows XP (KB2536276-v2)
Security Update for Windows XP (KB2536276)
Security Update for Windows XP (KB2544893)
Security Update for Windows XP (KB2555917)
Security Update for Windows XP (KB2562937)
Security Update for Windows XP (KB2566454)
Security Update for Windows XP (KB2567053)
Security Update for Windows XP (KB2567680)
Security Update for Windows XP (KB2570222)
Security Update for Windows XP (KB2570947)
Security Update for Windows XP (KB2592799)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB938464-v2)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951376)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB953839)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958690)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961371)
Security Update for Windows XP (KB961373)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB968537)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB969898)
Security Update for Windows XP (KB969947)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971468)
Security Update for Windows XP (KB971486)
Security Update for Windows XP (KB971557)
Security Update for Windows XP (KB971633)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB971961)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973346)
Security Update for Windows XP (KB973354)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973525)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975561)
Security Update for Windows XP (KB975562)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB977165)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978037)
Security Update for Windows XP (KB978251)
Security Update for Windows XP (KB978262)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979482)
Security Update for Windows XP (KB979559)
Security Update for Windows XP (KB979683)
Security Update for Windows XP (KB979687)
Security Update for Windows XP (KB980195)
Security Update for Windows XP (KB980218)
Security Update for Windows XP (KB980232)
Security Update for Windows XP (KB980436)
Security Update for Windows XP (KB981322)
Security Update for Windows XP (KB981349)
Security Update for Windows XP (KB981852)
Security Update for Windows XP (KB981957)
Security Update for Windows XP (KB981997)
Security Update for Windows XP (KB982132)
Security Update for Windows XP (KB982214)
Security Update for Windows XP (KB982665)
Security Update for Windows XP (KB982802)
SkinsHP1
SkinsHP2
SlideShow
SlideShowMusic
Sonic Express Labeler
Sonic MyDVD Plus
Sonic RecordNow Audio
Sonic RecordNow Copy
Sonic RecordNow Data
Sonic Update Manager
Sonic_PrimoSDK
Sony Picture Utility
Sony USB Driver
Spybot - Search & Destroy
SpywareBlaster 4.2
SUPERAntiSpyware Free Edition
Toolbox
TrayApp
Unload
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Microsoft .NET Framework 4 Client Profile (KB2473228)
Update for Microsoft Office 2007 System (KB2539530)
Update for Microsoft Office OneNote 2007 (KB980729)
Update for Microsoft Office Outlook 2007 (KB2583910)
Update for Outlook 2007 Junk Email Filter (KB2596560)
Update for Windows Internet Explorer 7 (KB976749)
Update for Windows Internet Explorer 7 (KB980182)
Update for Windows Media Player 10 (KB913800)
Update for Windows Media Player 10 (KB926251)
Update for Windows XP (KB2141007)
Update for Windows XP (KB2345886)
Update for Windows XP (KB2467659)
Update for Windows XP (KB2541763)
Update for Windows XP (KB2607712)
Update for Windows XP (KB2616676)
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB951978)
Update for Windows XP (KB955759)
Update for Windows XP (KB955839)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB971029)
Update for Windows XP (KB971737)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
Update Rollup 2 for Windows XP Media Center Edition 2005
Vertus Fluid Mask 3 3.0.8
VideoLAN VLC media player 0.8.6c
Vuze
WebFldrs XP
WebReg
Windows Genuine Advantage Notifications (KB905474)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Installer Clean Up
Windows Internet Explorer 7
Windows Live OneCare safety scanner
Windows Media Format 11 runtime
Windows Media Player 11
Windows Resource Kit Tools
Windows XP Media Center Edition 2005 KB2502898
Windows XP Media Center Edition 2005 KB905589
Windows XP Media Center Edition 2005 KB908246
Windows XP Media Center Edition 2005 KB925766
Windows XP Media Center Edition 2005 KB973768
Windows XP Service Pack 3
Yahoo! Detect
.
==== Event Viewer Messages From Past Week ========
.
12/29/2011 3:22:25 PM, error: Service Control Manager [7000] - The Zune Bus Enumerator Driver service failed to start due to the following error: The system cannot find the file specified.
12/29/2011 3:22:24 PM, error: WMPNetworkSvc [14338] - A new media server was not initialized because CoCreateInstance(CLSID_UPnPRegistrar) encountered error '0x80040154'. Verify that the UPnPHost service is running and that the UPnPHost component of Windows is installed properly.
12/29/2011 3:21:57 PM, error: Print [23] - Printer Fax failed to initialize because a suitable Microsoft Shared Fax Driver driver could not be found.
12/27/2011 9:57:56 AM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: Beep ftsata2 Partizan
12/27/2011 9:57:56 AM, error: Service Control Manager [7000] - The iPod Service service failed to start due to the following error: The system cannot find the file specified.
12/27/2011 9:57:56 AM, error: DCOM [10005] - DCOM got error "%2" attempting to start the service iPod Service with arguments "" in order to run the server: {063D34A4-BF84-4B8D-B699-E8CA06504DDE}
12/27/2011 9:57:54 AM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Eset Nod32 Boot service to connect.
12/27/2011 9:57:54 AM, error: Service Control Manager [7000] - The SQL Server VSS Writer service failed to start due to the following error: The system cannot find the file specified.
12/27/2011 9:57:54 AM, error: Service Control Manager [7000] - The Norton Safe Web Lite service failed to start due to the following error: The system cannot find the file specified.
12/27/2011 9:57:54 AM, error: Service Control Manager [7000] - The McciCMService service failed to start due to the following error: The system cannot find the file specified.
12/27/2011 9:57:54 AM, error: Service Control Manager [7000] - The MBAMService service failed to start due to the following error: Access is denied.
12/27/2011 9:57:54 AM, error: Service Control Manager [7000] - The Java Quick Starter service failed to start due to the following error: The system cannot find the file specified.
12/27/2011 9:57:54 AM, error: Service Control Manager [7000] - The Intel(R) Quick Resume technology service failed to start due to the following error: The system cannot find the file specified.
12/27/2011 9:57:54 AM, error: Service Control Manager [7000] - The Intel(R) Matrix Storage Event Monitor service failed to start due to the following error: The system cannot find the file specified.
12/27/2011 9:57:54 AM, error: Service Control Manager [7000] - The Google Update Service (gupdate) service failed to start due to the following error: The system cannot find the file specified.
12/27/2011 9:57:54 AM, error: Service Control Manager [7000] - The Eset Nod32 Boot service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
12/27/2011 9:57:54 AM, error: Service Control Manager [7000] - The Apple Mobile Device service failed to start due to the following error: The system cannot find the file specified.
12/25/2011 10:52:20 AM, error: DCOM [10000] - Unable to start a DCOM Server: {ABC01078-F197-4B0B-ADBC-CFE684B39C82}. The error: "%2" Happened while starting this command: "C:\Program Files\Google\Update\1.3.21.53\GoogleUpdateOnDemand.exe" -Embedding
.
==== End Of File ===========================
-
Hello and welcome to Computer Hope Forum. My name is Dave. I will be helping you out with your particular problem on your computer.
1. I will be working on your Malware issues. This may or may not solve other issues you have with your machine.
2. The fixes are specific to your problem and should only be used for this issue on this machine.
3. If you don't know or understand something, please don't hesitate to ask.
4. Please DO NOT run any other tools or scans while I am helping you.
5. It is important that you reply to this thread. Do not start a new topic.
6. Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.
7. Absence of symptoms does not mean that everything is clear.
If you can't access the internet with your infected computer you will have to download and transfer any programs to the computer you're using now and transfer them to the infected computer with a CD-RW or a USB storage device. I prefer a CD because a storage device can get infected. If you use a storage device hold the shift key down while inserting the USB storage device for about 10 secs. You will also have to transfer the logs you receive back to the good computer using the same method until we can get the computer back on-line.
*************************************************************************
The log shows that you only have 1.06Gb of free space on your C drive. Windows requires at least 15% (27 Gb) in order to function properly. You will need to free up some space on that drive. You can do this by transferring some pictures, videos, music and other important files to your D drive. You can also uninstall any programs you're no longer using. You need to do this before we continue because you have no more space to run these scans.
*********************************************
P2P - I see you have P2P software installed on your machine. (Azureus and FrostWire 4.21.8) We are not here to pass judgment on file-sharing as a concept. However, we will warn you that engaging in this activity and having this kind of software installed on your machine will always make you more susceptible to re-infections. It is certainly contributing to your current situation.
Please note: Even if you are using a "safe" P2P program, it is only the program that is safe. You will be sharing files from uncertified sources, and these are often infected. The bad guys use P2P filesharing as a major conduit to spread their wares.
I would strongly recommend that you uninstall them, however that choice is up to you. If you choose to remove these programs, you can do so via Control Panel >> Add or Remove Programs.
**********************************************
- Please download Unhide by Grinler from here (http://download.bleepingcomputer.com/grinler/unhide.exe) and save it to your desktop.
- Double click unhide.exe to run the tool.
- It will take some time to go through all your files, so please be patient.
- If this tool doesn´t fix the problem, please let me know.
********************************************
Download OTL (http://oldtimer.geekstogo.com/OTL.exe) to your desktop.
* Open OTL
* Copy and Paste the following text in the codebox into the Custom Scans/Fixes window.
:OTL
BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File
BHO: Complitly: {0fb6a909-6086-458f-bd92-1f8ee10042a0} - c:\documents and settings\hp_administrator\application data\complitly\Complitly.dll
TB: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No File
TB: {724D43A0-0D85-11D4-9908-00400523E39A} - No File
TB: {4E7BD74F-2B8D-469E-94BE-FD60BB9AAE29} - No File
EB: {32683183-48a0-441b-a342-7c2a440a9478} - No File
mRun: [gfhYdHclcK.exe] c:\documents and settings\all users\application data\gfhYdHclcK.exe
Trusted Zone: motive.com\patttbc.att
:Files
c:\documents and settings\all users\application data\gfhYdHclcK.exe
:COMMANDS
[resethosts]
[purity]
[start explorer]
* Click Run Fix
* OTLI2 may ask to reboot the machine. Please do so if asked.
* Click OK
* A report will open. Copy and Paste that report in your next reply.
********************************************************
Boot your computer in Safe Mode and try to run MBAM. Reboot in Normal mode and try to run it again and post the log
Here's (http://www.computerhope.com/issues/chsafe.htm) how to get into Safe Mode.
-
ran unhide and got my icons and programs back, but some are showing empty. I have about 45gb of free space now.
ran otl and here's the report:
Error: Unable to interpret <BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File> in the current context!
Error: Unable to interpret <BHO: Complitly: {0fb6a909-6086-458f-bd92-1f8ee10042a0} - c:\documents and settings\hp_administrator\application data\complitly\Complitly.dll> in the current context!
Error: Unable to interpret <TB: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No File> in the current context!
Error: Unable to interpret <TB: {724D43A0-0D85-11D4-9908-00400523E39A} - No File> in the current context!
Error: Unable to interpret <TB: {4E7BD74F-2B8D-469E-94BE-FD60BB9AAE29} - No File> in the current context!
Error: Unable to interpret <EB: {32683183-48a0-441b-a342-7c2a440a9478} - No File> in the current context!
Error: Unable to interpret <mRun: [gfhYdHclcK.exe] c:\documents and settings\all users\application data\gfhYdHclcK.exe> in the current context!
Error: Unable to interpret <Trusted Zone: motive.com\patttbc.att> in the current context!
========== FILES ==========
File\Folder c:\documents and settings\all users\application data\gfhYdHclcK.exe not found.
========== COMMANDS ==========
C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
OTL by OldTimer - Version 3.2.31.0 log created on 12312011_230443
Now I'm about to reboot in safe mode and run mbam
-
tried to run mbam in safe mode and it would not open. I tried to run as... current user and the message said a device attached to the system is not functioning.
rebooted in normal mode and got this message about mbam,
[openEvent] failed to perform desired action. Error code 2.
Forgot to mention that once I restarted, my desktop icons are gone again and me add remove programs list won't come up.
-
Please run Unhide again then try to run this:
Please download and run the below tool named Rkill (courtesy of BleepingComputer.com) which may help allow other programs to run.
Save Rkill to your desktop.
There are 7 different versions. If one of them won't run then download and try to run the other one.
Vista and Win7 users need to right click Rkill and choose Run as Administrator
You only need to get one of these to run, not all of them. You may get warnings from your antivirus about this tool, ignore them or shutdown your antivirus.
* Rkill.exe (http://download.bleepingcomputer.com/grinler/rkill.exe)
* Rkill.com (http://download.bleepingcomputer.com/grinler/rkill.com)
* Rkill.scr (http://download.bleepingcomputer.com/grinler/rkill.scr)
* WiNlOgOn.exe (http://download.bleepingcomputer.com/grinler/WiNlOgOn.exe)
* uSeRiNiT.exe (http://download.bleepingcomputer.com/grinler/uSeRiNiT.exe)
* iExplore.exe (http://download.bleepingcomputer.com/grinler/iExplore.exe)
* eXplorer.exe (http://download.bleepingcomputer.com/grinler/eXplorer.exe)
Once you've gotten one of them to run then try to immediately run MBAM again.
-
ran rkill.exe
computer got stuck, so I had to reboot.
rebooted and desktop icons are back.
ran rkill.exe again,
This log file is located at C:\rkill.log.
Please post this only if requested to by the person helping you.
Otherwise you can close this log when you wish.
Rkill was run on 01/01/2012 at 19:52:03.
Operating System: Microsoft Windows XP
Processes terminated by Rkill or while it was running:
Rkill completed on 01/01/2012 at 19:52:22.
tried to run mbam immediately and nothing happened. I double clicked it and right clicked to get it to run, but nothing happened.
-
Please download ComboFix (http://img7.imageshack.us/img7/4930/combofix.gif) from BleepingComputer.com (http://download.bleepingcomputer.com/sUBs/ComboFix.exe)
Alternate link: GeeksToGo.com (http://subs.geekstogo.com/ComboFix.exe)
and save it to your Desktop.
It would be easiest to download using Internet Explorer.
If you want to use Firefox, make sure that your download settings are as follows:
* Tools->Options->Main tab
* Set to "Always ask me where to Save the files".
Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools A guide to do this can be found here (http://www.bleepingcomputer.com/forums/topic114351.html)
Double click ComboFix.exe & follow the prompts.
As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console
(http://i424.photobucket.com/albums/pp322/digistar/Query_RC.gif)
Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.
Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:
(http://i424.photobucket.com/albums/pp322/digistar/RC_successful.gif)
Click on Yes, to continue scanning for malware.
When finished, it shall produce a log for you. Please include the contents of C:\ComboFix.txt in your next reply.
If you have problems with ComboFix usage, see How to use ComboFix (http://www.bleepingcomputer.com/combofix/how-to-use-combofix)
-
I ran comboFix and was asked to disable avg antivirus before continuing. I did a search and could not find the avg antivirus anywhere. I even did a google search on how to disable it, but the program is not showing on my computer at all. I continued on with comboFix and here is the log.
ComboFix 12-01-02.02 - HP_Administrator 01/03/2012 0:02.7.2 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2046.666 [GMT -5:00]
Running from: c:\documents and settings\HP_Administrator\Desktop\ComboFix.exe
AV: AVG Anti-Virus *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
FW: Online Armor Firewall *Disabled* {B797DAA0-7E2E-4711-8BB3-D12744F1922A}
* Created a new restore point
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\All Users\Application Data\~kn5KXoCPJI5FDa
c:\documents and settings\All Users\Application Data\~kn5KXoCPJI5FDar
c:\documents and settings\All Users\Application Data\kn5KXoCPJI5FDa
c:\documents and settings\All Users\Application Data\kn5KXoCPJI5FDa.exe
c:\documents and settings\All Users\Application Data\NJKgUKkjfTHNlDI.exe
c:\documents and settings\All Users\Application Data\TEMP
c:\documents and settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\x3yb1sl8.
default\searchplugins\bing-zugo.xml
c:\documents and settings\HP_Administrator\Local Settings\Application Data\1cf6efbe
c:\documents and settings\HP_Administrator\Local Settings\Application Data\1cf6efbe\@
c:\documents and settings\HP_Administrator\Local Settings\Application Data\1cf6efbe\U\80000000.@
c:\documents and settings\HP_Administrator\Local Settings\Application Data\1cf6efbe\X
c:\windows\system32\0.02632581296426817.exe
.
.
((((((((((((((((((((((((( Files Created from 2011-12-03 to 2012-01-03 )))))))))))))))))))))))))))))))
.
.
2012-01-01 04:03 . 2012-01-01 04:03 -------- dc----w- C:\_OTL
2011-12-31 19:56 . 2011-11-10 08:27 73728 ----a-w- c:\windows\system32\javacpl.cpl
2011-12-31 19:12 . 2011-12-31 19:13 -------- d-----w- c:\program files\CCleaner
2011-12-31 17:25 . 2012-01-01 04:25 -------- dc----w- c:\documents and settings\All Users\Application Data\OnlineArmor
2011-12-31 17:25 . 2011-12-31 17:25 -------- dc----w- c:\documents and settings\HP_Administrator\Application Data\OnlineArmor
2011-12-31 17:23 . 2011-11-01 16:34 40296 ----a-w- c:\windows\system32\drivers\oahlp32.sys
2011-12-31 17:23 . 2011-11-01 16:34 25192 ----a-w- c:\windows\system32\drivers\OAmon.sys
2011-12-31 17:23 . 2011-11-01 16:34 29464 ----a-w- c:\windows\system32\drivers\OAnet.sys
2011-12-31 17:23 . 2011-11-01 16:34 205864 ----a-w- c:\windows\system32\drivers\OADriver.sys
2011-12-31 17:23 . 2012-01-03 04:24 -------- d-----w- c:\program files\Online Armor
2011-12-31 17:13 . 2011-12-31 17:19 -------- dc----w- c:\documents and settings\All Users\Application Data\AVAST Software
2011-12-31 17:13 . 2011-12-31 17:19 -------- d-----w- c:\program files\AVAST Software
2011-12-27 16:05 . 2011-12-27 16:05 -------- dc----w- c:\documents and settings\All Users\Application Data\MicrosoftProvisioning
2011-12-13 20:04 . 2011-12-13 20:04 -------- dc----w- c:\documents and settings\All Users\Application Data\Provisioning
2011-12-10 00:28 . 2011-12-10 00:28 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Application Data\Apple
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-12-02 04:09 . 2011-05-19 06:53 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-11-20 18:28 . 2011-11-20 18:28 7206 ----a-w- c:\windows\system32\PerfStringBackup.TMP
2011-11-10 10:54 . 2011-05-28 06:36 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-11-11 23:00 . 2011-05-01 14:40 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
2010-06-23 20:08 . 2009-12-12 06:34 119808 -c--a-w- c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
.
.
------- Sigcheck -------
Note: Unsigned files aren't necessarily malware.
.
[-] 2008-04-13 . 23C74D75E36E7158768DD63D92789A91 . 75264 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ipsec.sys
[-] 2008-04-13 . 23C74D75E36E7158768DD63D92789A91 . 75264 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\ipsec.sys
[-] 2008-04-13 . 23C74D75E36E7158768DD63D92789A91 . 75264 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ipsec.sys
[-] 2004-08-09 . 64537AA5C003A6AFEEE1DF819062D0D1 . 74752 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ipsec.sys
.
[-] 2008-04-13 . 23C74D75E36E7158768DD63D92789A91 . 75264 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ipsec.sys
[-] 2008-04-13 . 23C74D75E36E7158768DD63D92789A91 . 75264 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\ipsec.sys
[-] 2008-04-13 . 23C74D75E36E7158768DD63D92789A91 . 75264 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ipsec.sys
[-] 2004-08-09 . 64537AA5C003A6AFEEE1DF819062D0D1 . 74752 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ipsec.sys
.
((((((((((((((((((((((((((((( SnapShot@2011-10-14_00.52.06 )))))))))))))))))))))))))))))))))))))))))
.
- 2011-04-12 19:11 . 2011-04-12 19:11 56656 c:\windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll
+ 2011-07-09 13:30 . 2011-07-09 13:30 56656 c:\windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll
- 2011-08-11 07:03 . 2011-08-11 07:03 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
- 2011-08-11 07:03 . 2011-08-11 07:03 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
- 2011-10-13 07:14 . 2011-10-13 07:14 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll
- 2011-08-11 07:03 . 2011-08-11 07:03 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll
- 2011-08-11 07:03 . 2011-08-11 07:03 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__
b77a5c561934e089\System.Windows.Input.Manipulations.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__
31bf3856ad364e35\System.Web.ApplicationServices.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__
31bf3856ad364e35\System.Web.ApplicationServices.dll
- 2011-10-13 07:14 . 2011-10-13 07:14 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__
31bf3856ad364e35\System.ServiceModel.Channels.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__
31bf3856ad364e35\System.ServiceModel.Channels.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__
b77a5c561934e089\System.Data.DataSetExtensions.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__
b77a5c561934e089\System.Data.DataSetExtensions.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__
b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__
b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__
31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__
31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2011-10-13 07:15 . 2011-10-13 07:15 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__
b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__
b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2011-10-15 07:10 . 2011-10-15 07:10 96768 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationProvider\6f4a1ba24dffa86dd2a2ab8127e0b16d\UIAutomationProvider.ni.dll
+ 2011-10-15 07:13 . 2011-10-15 07:13 54784 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xaml.Hosting\bceea12ce16311f31b0f1cd8cadd4d75\System.Xaml.Hosting.ni.dll
+ 2011-10-15 07:14 . 2011-10-15 07:14 35328 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Pres#\f45abd2caa9f93bb60ce92de6a885d6e\System.Windows.Presentation.ni.dll
+ 2011-10-15 07:14 . 2011-10-15 07:14 24064 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Routing\3447b1ea4537dd7a1b7796efb935f4b0\System.Web.Routing.ni.dll
+ 2011-10-15 07:13 . 2011-10-15 07:13 46592 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DynamicD#\56b89939136999a2d8de62d8ac3334a7\System.Web.DynamicData.Design.ni.dll
+ 2011-10-15 07:10 . 2011-10-15 07:10 71680 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Applicat#\c15f4190f96acf9b328fa3645c2063ea\System.Web.ApplicationServices.ni.dll
+ 2011-10-15 07:13 . 2011-10-15 07:13 24576 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Abstract#\5dd4316500d6e940dfed628463fe4595\System.Web.Abstractions.ni.dll
+ 2011-10-15 07:13 . 2011-10-15 07:13 82432 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\e97547ed8d34e96b9d5836ea04b28c26\System.ServiceModel.Channels.ni.dll
+ 2011-10-15 07:13 . 2011-10-15 07:13 12288 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\6ab752f8ab98f09615768a90d50593c1\System.ServiceModel.ServiceMoniker40.ni.dll
+ 2011-10-15 07:11 . 2011-10-15 07:11 78848 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn.Contra#\b811cdf42feaf9a32408b03ab1c4e2d5\System.AddIn.Contract.ni.dll
+ 2011-10-15 07:10 . 2011-10-15 07:10 11776 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualC\cfba497fc860b32b8d895f57bf148aa7\Microsoft.VisualC.ni.dll
+ 2011-10-15 07:09 . 2011-10-15 07:09 44544 c:\windows\assembly\NativeImages_v4.0.30319_32\Accessibility\1f368300314889ee35325be9f80ef1c3\Accessibility.ni.dll
+ 2011-10-15 07:09 . 2011-10-15 07:09 9728 c:\windows\assembly\NativeImages_v4.0.30319_32\dfsvc\fed35fa53f20bd75214f2eca0cde1ece\dfsvc.ni.exe
+ 2011-10-15 07:03 . 2011-10-15 07:03 109568 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_4.0.0.0_x-ww_29b51492\System.EnterpriseServices.Wrapper.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 109568 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_4.0.0.0_x-ww_29b51492\System.EnterpriseServices.Wrapper.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 246128 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_4.0.0.0_x-ww_29b51492\System.EnterpriseServices.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 246128 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_4.0.0.0_x-ww_29b51492\System.EnterpriseServices.dll
+ 2005-08-30 21:07 . 2011-11-20 18:28 556980 c:\windows\system32\perfh009.dat
+ 2005-08-30 21:07 . 2011-11-20 18:28 109504 c:\windows\system32\perfc009.dat
+ 2011-12-02 04:09 . 2011-12-02 04:09 247968 c:\windows\system32\Macromed\Flash\FlashUtil11e_Plugin.exe
- 2011-06-12 14:47 . 2011-05-04 08:52 157472 c:\windows\system32\javaws.exe
+ 2011-12-31 19:56 . 2011-11-10 10:54 157472 c:\windows\system32\javaws.exe
+ 2011-12-31 19:56 . 2011-11-10 10:54 149280 c:\windows\system32\javaw.exe
+ 2011-12-31 19:56 . 2011-11-10 10:54 149280 c:\windows\system32\java.exe
- 2011-04-12 19:11 . 2011-04-12 19:11 517448 c:\windows\Microsoft.NET\Framework\v4.0.30319\SOS.dll
+ 2011-07-09 13:30 . 2011-07-09 13:30 517448 c:\windows\Microsoft.NET\Framework\v4.0.30319\SOS.dll
+ 2011-07-09 13:30 . 2011-07-09 13:30 956240 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscordbi.dll
- 2011-10-13 07:14 . 2011-10-13 07:14 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__
31bf3856ad364e35\UIAutomationClientsideProviders.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__
31bf3856ad364e35\UIAutomationClientsideProviders.dll
- 2011-10-13 07:14 . 2011-10-13 07:14 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__
31bf3856ad364e35\UIAutomationClient.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__
31bf3856ad364e35\UIAutomationClient.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__
b77a5c561934e089\System.Xml.Linq.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__
b77a5c561934e089\System.Xml.Linq.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__
b77a5c561934e089\System.Xaml.dll
- 2011-10-13 07:14 . 2011-10-13 07:14 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__
b77a5c561934e089\System.Xaml.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__
b03f5f7f11d50a3a\System.Web.Services.dll
- 2011-10-13 07:14 . 2011-10-13 07:14 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__
b03f5f7f11d50a3a\System.Web.Services.dll
- 2011-10-13 07:14 . 2011-10-13 07:14 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__
31bf3856ad364e35\System.Speech.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__
31bf3856ad364e35\System.Speech.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__
b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__
b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__
31bf3856ad364e35\System.ServiceModel.Routing.dll
- 2011-10-13 07:14 . 2011-10-13 07:14 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__
31bf3856ad364e35\System.ServiceModel.Routing.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__
31bf3856ad364e35\System.ServiceModel.Discovery.dll
- 2011-10-13 07:14 . 2011-10-13 07:14 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__
31bf3856ad364e35\System.ServiceModel.Discovery.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__
31bf3856ad364e35\System.ServiceModel.Activities.dll
- 2011-10-13 07:14 . 2011-10-13 07:14 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__
31bf3856ad364e35\System.ServiceModel.Activities.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__
b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
- 2011-10-13 07:14 . 2011-10-13 07:14 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__
b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__
b77a5c561934e089\System.Runtime.Remoting.dll
- 2011-10-13 07:14 . 2011-10-13 07:14 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__
b77a5c561934e089\System.Runtime.Remoting.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__
31bf3856ad364e35\System.Runtime.DurableInstancing.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__
31bf3856ad364e35\System.Runtime.DurableInstancing.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 231760 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 231760 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll
- 2011-10-13 07:14 . 2011-10-13 07:14 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__
b77a5c561934e089\System.Management.Instrumentation.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__
b77a5c561934e089\System.Management.Instrumentation.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 607064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 607064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__
b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__
b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__
b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__
b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__
b77a5c561934e089\System.ComponentModel.Composition.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__
b77a5c561934e089\System.ComponentModel.Composition.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 149848 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 149848 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__
31bf3856ad364e35\System.Activities.DurableInstancing.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__
31bf3856ad364e35\System.Activities.DurableInstancing.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__
31bf3856ad364e35\System.Activities.Core.Presentation.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__
31bf3856ad364e35\System.Activities.Core.Presentation.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll
- 2011-08-11 07:03 . 2011-08-11 07:03 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll
- 2011-10-13 07:14 . 2011-10-13 07:14 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__
31bf3856ad364e35\PresentationFramework.Royale.dll
- 2011-10-13 07:14 . 2011-10-13 07:14 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__
31bf3856ad364e35\PresentationFramework.Royale.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__
31bf3856ad364e35\PresentationFramework.Luna.dll
- 2011-10-13 07:14 . 2011-10-13 07:14 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__
31bf3856ad364e35\PresentationFramework.Luna.dll
- 2011-10-13 07:14 . 2011-10-13 07:14 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__
31bf3856ad364e35\PresentationFramework.Classic.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__
31bf3856ad364e35\PresentationFramework.Classic.dll
- 2011-10-13 07:14 . 2011-10-13 07:14 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__
31bf3856ad364e35\PresentationFramework.Aero.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__
31bf3856ad364e35\PresentationFramework.Aero.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__
b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__
b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__
b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__
b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__
b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__
b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__
b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__
b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__
b03f5f7f11d50a3a\Microsoft.CSharp.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__
b03f5f7f11d50a3a\Microsoft.CSharp.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__
b77a5c561934e089\System.Transactions.dll
- 2011-10-13 07:14 . 2011-10-13 07:14 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__
b77a5c561934e089\System.Transactions.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__
31bf3856ad364e35\System.Printing.dll
- 2011-10-13 07:14 . 2011-10-13 07:14 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__
31bf3856ad364e35\System.Printing.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__
b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__
b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__
b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__
b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
+ 2011-10-15 07:14 . 2011-10-15 07:14 404480 c:\windows\assembly\NativeImages_v4.0.30319_32\XamlBuildTask\ecb0328b918c4a5adfbd83c946e0e196\XamlBuildTask.ni.dll
+ 2011-10-15 07:09 . 2011-10-15 07:09 356864 c:\windows\assembly\NativeImages_v4.0.30319_32\WsatConfig\040df73a6631957668b3d538e70ff7a0\WsatConfig.ni.exe
+ 2011-10-15 07:14 . 2011-10-15 07:14 252416 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#\b18816abd9dd59ca3f1d682a756e5745\WindowsFormsIntegration.ni.dll
+ 2011-10-15 07:10 . 2011-10-15 07:10 196096 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationTypes\c170b431f43ab80000d31bcc58acd1a5\UIAutomationTypes.ni.dll
+ 2011-10-15 07:14 . 2011-10-15 07:14 482816 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClient\ee096062554a6344a49083910c0af16e\UIAutomationClient.ni.dll
+ 2011-10-15 07:10 . 2011-10-15 07:10 391680 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\1faca3f09472860e010689b67c68a327\System.Xml.Linq.ni.dll
+ 2011-10-15 07:10 . 2011-10-15 07:10 188928 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Inpu#\eeb9b49d8598c6f5926f494074af2d69\System.Windows.Input.Manipulations.ni.dll
+ 2011-10-15 07:14 . 2011-10-15 07:14 194048 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\a863e081c9bcbaec568abe127fb1dbe3\System.Windows.Forms.DataVisualization.Design.ni.dll
+ 2011-10-15 07:10 . 2011-10-15 07:10 224256 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.RegularE#\386e276cb95b2116d2662d4684126895\System.Web.RegularExpressions.ni.dll
+ 2011-10-15 07:14 . 2011-10-15 07:14 861696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Extensio#\e327cf8e04773318e4b8b0059a6fbd6b\System.Web.Extensions.Design.ni.dll
+ 2011-10-15 07:13 . 2011-10-15 07:13 332800 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Entity\1f27b86bb9c2a32f7571b0c86341d73f\System.Web.Entity.ni.dll
+ 2011-10-15 07:13 . 2011-10-15 07:13 297472 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Entity.D#\67fc91b4eac9e54781bc50dcb36945d4\System.Web.Entity.Design.ni.dll
+ 2011-10-15 07:13 . 2011-10-15 07:13 705536 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DynamicD#\965eb0ae99683ff79685abe9323a6cfa\System.Web.DynamicData.ni.dll
+ 2011-10-15 07:13 . 2011-10-15 07:13 259072 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DataVisu#\da89b1d421f29db531ee997029e03b72\System.Web.DataVisualization.Design.ni.dll
+ 2011-10-15 07:10 . 2011-10-15 07:10 646656 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Transactions\344c1e000e4158cc37a5e9068e095d40\System.Transactions.ni.dll
+ 2011-10-15 07:10 . 2011-10-15 07:10 221696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\a0e090647c856fe52e1f1e5d2a25b1ac\System.ServiceProcess.ni.dll
+ 2011-10-15 07:13 . 2011-10-15 07:13 422912 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\8f7ddde9561a2cc64c9a9377ef645f71\System.ServiceModel.Activation.ni.dll
+ 2011-10-15 07:13 . 2011-10-15 07:13 365056 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\1cce5f9cad92a8ba3deb833291637b95\System.ServiceModel.Routing.ni.dll
+ 2011-10-15 07:05 . 2011-10-15 07:05 729088 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Security\c12a8284683ba6b400a4562da310ce59\System.Security.ni.dll
+ 2011-10-15 07:09 . 2011-10-15 07:09 311296 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\137a2ae391d89577ad63db08303a5158\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2011-10-15 07:10 . 2011-10-15 07:10 770560 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\4188dcf65867be8c772c2e44082e51ca\System.Runtime.Remoting.ni.dll
+ 2011-10-15 07:10 . 2011-10-15 07:10 241664 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Cach#\69686330b905615bdbc5a43d159ed335\System.Runtime.Caching.ni.dll
+ 2011-10-15 07:05 . 2011-10-15 07:05 145408 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Numerics\d038332bf07a163f855200919ee678cc\System.Numerics.ni.dll
+ 2011-10-15 07:13 . 2011-10-15 07:13 653312 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Net\8410db646e037bab93d66ef9d17a3ce5\System.Net.ni.dll
+ 2011-10-15 07:13 . 2011-10-15 07:13 626176 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Messaging\7cdd3b54c476345732c735ea253d95d5\System.Messaging.ni.dll
+ 2011-10-15 07:13 . 2011-10-15 07:13 395264 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Management.I#\fe11b4a9c8067184aff54b627b0e046b\System.Management.Instrumentation.ni.dll
+ 2011-10-15 07:13 . 2011-10-15 07:13 413696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IO.Log\7970b94c1582f58c8f79f531f104c754\System.IO.Log.ni.dll
+ 2011-10-15 07:13 . 2011-10-15 07:13 229376 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IdentityMode#\26bdff3178be53810cb7bac268f7af08\System.IdentityModel.Selectors.ni.dll
+ 2011-10-15 07:10 . 2011-10-15 07:10 236032 c:\windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\a2baf116d3055aadb99b77e327a74907\System.EnterpriseServices.Wrapper.dll
+ 2011-10-15 07:10 . 2011-10-15 07:10 786944 c:\windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\a2baf116d3055aadb99b77e327a74907\System.EnterpriseServices.ni.dll
+ 2011-10-15 07:05 . 2011-10-15 07:05 377344 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Dynamic\d8131e4810c207d23b977603fdad6e33\System.Dynamic.ni.dll
+ 2011-10-15 07:06 . 2011-10-15 07:06 224768 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Drawing.Desi#\fcc666923b1ee799fa03c87082249868\System.Drawing.Design.ni.dll
+ 2011-10-15 07:13 . 2011-10-15 07:13 913920 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\86db06eb0e133c3c2042cd6abcfff399\System.DirectoryServices.AccountManagement.ni.dll
+ 2011-10-15 07:10 . 2011-10-15 07:10 468992 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\2f7f2d7c549c23373541e052c8364755\System.DirectoryServices.Protocols.ni.dll
+ 2011-10-15 07:13 . 2011-10-15 07:13 112640 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Device\ecae7de1b9e1cf0d6d3bc7f01b891a1a\System.Device.ni.dll
+ 2011-10-15 07:13 . 2011-10-15 07:13 507904 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Service#\923c3591d29f5671472728bf1a55f308\System.Data.Services.Design.ni.dll
+ 2011-10-15 07:11 . 2011-10-15 07:11 134656 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.DataSet#\e6c62a3b06ae5f2f9de5164117dd6ba6\System.Data.DataSetExtensions.ni.dll
+ 2011-10-15 07:05 . 2011-10-15 07:05 980480 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\cb7cfe8f0e8532f6381c22bf719a95dc\System.Configuration.ni.dll
+ 2011-10-15 07:10 . 2011-10-15 07:10 148480 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuratio#\96907044ee8b845f05d72805d100fb7e\System.Configuration.Install.ni.dll
+ 2011-10-15 07:06 . 2011-10-15 07:06 690176 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\d5f97e0367e37f9aead033b54f40a895\System.ComponentModel.Composition.ni.dll
+ 2011-10-15 07:11 . 2011-10-15 07:11 194048 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\c11789fd2d4aeb3a41b8a925975ebd96\System.ComponentModel.DataAnnotations.ni.dll
+ 2011-10-15 07:11 . 2011-10-15 07:11 617984 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn\53e0aa766368680b3785a0867d632f0c\System.AddIn.ni.dll
+ 2011-10-15 07:11 . 2011-10-15 07:11 404992 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.D#\aef6e32f096486514002cee2bd716b0b\System.Activities.DurableInstancing.ni.dll
+ 2011-10-15 07:09 . 2011-10-15 07:09 317952 c:\windows\assembly\NativeImages_v4.0.30319_32\SMSvcHost\eee8be5d9f06c6d32cb1eeca8cfbfe38\SMSvcHost.ni.exe
+ 2011-10-15 07:10 . 2011-10-15 07:10 142848 c:\windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\c60bbf982563abd181e673c1d5e92006\SMDiagnostics.ni.dll
+ 2011-10-15 07:06 . 2011-10-15 07:06 450560 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\d2ad394c477fc1c71c900c892d7fce0b\PresentationFramework.Aero.ni.dll
+ 2011-10-15 07:05 . 2011-10-15 07:05 284160 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\63f98ea6df6a734c122348fa32296df0\PresentationFramework.Classic.ni.dll
+ 2011-10-15 07:06 . 2011-10-15 07:06 656896 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\61aa640996b77695572adefea8fd36b7\PresentationFramework.Luna.ni.dll
+ 2011-10-15 07:06 . 2011-10-15 07:06 327680 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\30d7b48c6018eb8d7db378908568130f\PresentationFramework.Royale.ni.dll
+ 2011-10-15 07:09 . 2011-10-15 07:09 274432 c:\windows\assembly\NativeImages_v4.0.30319_32\MSBuild\50ef00afe8174ef7b9ca3577a301b02b\MSBuild.ni.exe
+ 2011-10-15 07:10 . 2011-10-15 07:10 303104 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\9f9e5b077347f8f318b1959555be1031\Microsoft.VisualBasic.Compatibility.Data.ni.dll
+ 2011-10-15 07:09 . 2011-10-15 07:09 418816 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\54c59931e1860675710f19c7c3ba4cc8\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2011-10-15 07:09 . 2011-10-15 07:09 631808 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Uti#\503994046462b53944ed2915dfb43cb0\Microsoft.Build.Utilities.v4.0.ni.dll
+ 2011-10-15 07:09 . 2011-10-15 07:09 258048 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Fra#\1bf86eecca78429158f8e8b8910f3e6e\Microsoft.Build.Framework.ni.dll
+ 2011-10-15 07:09 . 2011-10-15 07:09 135680 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Con#\1b119eca340bea3a2489017f8f4e9aac\Microsoft.Build.Conversion.v4.0.ni.dll
+ 2011-10-15 07:09 . 2011-10-15 07:09 194048 c:\windows\assembly\NativeImages_v4.0.30319_32\CustomMarshalers\04226f317855c555a957f4c2d0dc240d\CustomMarshalers.ni.dll
+ 2011-10-15 07:09 . 2011-10-15 07:09 474624 c:\windows\assembly\NativeImages_v4.0.30319_32\ComSvcConfig\4da03695fc54c2e2b57b034ae772d189\ComSvcConfig.ni.exe
+ 2011-10-15 07:09 . 2011-10-15 07:09 846336 c:\windows\assembly\NativeImages_v4.0.30319_32\AspNetMMCExt\98447bb42f564716029c1751c88ae134\AspNetMMCExt.ni.dll
+ 2011-09-29 23:55 . 2011-12-02 04:09 8527008 c:\windows\system32\Macromed\Flash\NPSWF32.dll
+ 2011-07-09 13:30 . 2011-07-09 13:30 5197648 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorlib.dll
- 2011-04-12 19:11 . 2011-04-12 19:11 5197648 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorlib.dll
+ 2011-07-09 13:30 . 2011-07-09 13:30 1142616 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscordacwks.dll
+ 2011-07-09 13:30 . 2011-07-09 13:30 6724424 c:\windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
- 2011-10-13 07:14 . 2011-10-13 07:14 1303896 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 1303896 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 3510600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 3510600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 5028200 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 5028200 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__
31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__
31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 6067048 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll
- 2011-10-13 07:14 . 2011-10-13 07:14 6067048 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 1339736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 1339736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__
31bf3856ad364e35\System.Activities.Presentation.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__
31bf3856ad364e35\System.Activities.Presentation.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 6346600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__
31bf3856ad364e35\PresentationFramework.dll
- 2011-10-13 07:14 . 2011-10-13 07:14 6346600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__
31bf3856ad364e35\PresentationFramework.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 2970968 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 2970968 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
- 2011-10-13 07:14 . 2011-10-13 07:14 3545952 c:\windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 3545952 c:\windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 5197648 c:\windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 5197648 c:\windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__
b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__
b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
+ 2011-10-15 07:05 . 2011-10-15 07:05 3798016 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\6e1c62ce679c8157560c7593c066cd85\WindowsBase.ni.dll
+ 2011-10-15 07:14 . 2011-10-15 07:14 1057792 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClients#\
0d8b512be71d0a491131dac4bada85cf\UIAutomationClientsideProviders.ni.dll
+ 2011-10-15 07:05 . 2011-10-15 07:05 9085952 c:\windows\assembly\NativeImages_v4.0.30319_32\System\af709611f9ffff0544b1d750303c4afa\System.ni.dll
+ 2011-10-15 07:05 . 2011-10-15 07:05 5618176 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml\a401952384c24581989cdc85270f3d9d\System.Xml.ni.dll
+ 2011-10-15 07:09 . 2011-10-15 07:09 1781760 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\4185130eda1d7a5e0e0474e72343570b\System.Xaml.ni.dll
+ 2011-10-15 07:14 . 2011-10-15 07:14 1208320 c:\windows\assembly\NativeImages_v4.0.30319_32\System.WorkflowServ#
\5c480c2ae81637815590203c76bb990b\System.WorkflowServices.ni.dll
+ 2011-10-15 07:14 . 2011-10-15 07:14 1968640 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Workflow.Run#\
d2b498cc263a76465654318cbc8a8aa4\System.Workflow.Runtime.ni.dll
+ 2011-10-15 07:14 . 2011-10-15 07:14 4461568 c:\windows\assembly\NativeImages_v4.
-
This is not the entire ComboFix log. Please look in C:/ComboFix for the log. If you cannot find it, please run it again and post the full log.
-
ComboFix 12-01-02.02 - HP_Administrator 01/03/2012 0:02.7.2 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2046.666 [GMT -5:00]
Running from: c:\documents and settings\HP_Administrator\Desktop\ComboFix.exe
AV: AVG Anti-Virus *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
FW: Online Armor Firewall *Disabled* {B797DAA0-7E2E-4711-8BB3-D12744F1922A}
* Created a new restore point
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\All Users\Application Data\~kn5KXoCPJI5FDa
c:\documents and settings\All Users\Application Data\~kn5KXoCPJI5FDar
c:\documents and settings\All Users\Application Data\kn5KXoCPJI5FDa
c:\documents and settings\All Users\Application Data\kn5KXoCPJI5FDa.exe
c:\documents and settings\All Users\Application Data\NJKgUKkjfTHNlDI.exe
c:\documents and settings\All Users\Application Data\TEMP
c:\documents and settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\x3yb1sl8.default\searchplugins\bing-zugo.xml
c:\documents and settings\HP_Administrator\Local Settings\Application Data\1cf6efbe
c:\documents and settings\HP_Administrator\Local Settings\Application Data\1cf6efbe\@
c:\documents and settings\HP_Administrator\Local Settings\Application Data\1cf6efbe\U\80000000.@
c:\documents and settings\HP_Administrator\Local Settings\Application Data\1cf6efbe\X
c:\windows\system32\0.02632581296426817.exe
.
.
((((((((((((((((((((((((( Files Created from 2011-12-03 to 2012-01-03 )))))))))))))))))))))))))))))))
.
.
2012-01-01 04:03 . 2012-01-01 04:03 -------- dc----w- C:\_OTL
2011-12-31 19:56 . 2011-11-10 08:27 73728 ----a-w- c:\windows\system32\javacpl.cpl
2011-12-31 19:12 . 2011-12-31 19:13 -------- d-----w- c:\program files\CCleaner
2011-12-31 17:25 . 2012-01-01 04:25 -------- dc----w- c:\documents and settings\All Users\Application Data\OnlineArmor
2011-12-31 17:25 . 2011-12-31 17:25 -------- dc----w- c:\documents and settings\HP_Administrator\Application Data\OnlineArmor
2011-12-31 17:23 . 2011-11-01 16:34 40296 ----a-w- c:\windows\system32\drivers\oahlp32.sys
2011-12-31 17:23 . 2011-11-01 16:34 25192 ----a-w- c:\windows\system32\drivers\OAmon.sys
2011-12-31 17:23 . 2011-11-01 16:34 29464 ----a-w- c:\windows\system32\drivers\OAnet.sys
2011-12-31 17:23 . 2011-11-01 16:34 205864 ----a-w- c:\windows\system32\drivers\OADriver.sys
2011-12-31 17:23 . 2012-01-03 04:24 -------- d-----w- c:\program files\Online Armor
2011-12-31 17:13 . 2011-12-31 17:19 -------- dc----w- c:\documents and settings\All Users\Application Data\AVAST Software
2011-12-31 17:13 . 2011-12-31 17:19 -------- d-----w- c:\program files\AVAST Software
2011-12-27 16:05 . 2011-12-27 16:05 -------- dc----w- c:\documents and settings\All Users\Application Data\MicrosoftProvisioning
2011-12-13 20:04 . 2011-12-13 20:04 -------- dc----w- c:\documents and settings\All Users\Application Data\Provisioning
2011-12-10 00:28 . 2011-12-10 00:28 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Application Data\Apple
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-12-02 04:09 . 2011-05-19 06:53 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-11-20 18:28 . 2011-11-20 18:28 7206 ----a-w- c:\windows\system32\PerfStringBackup.TMP
2011-11-10 10:54 . 2011-05-28 06:36 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-11-11 23:00 . 2011-05-01 14:40 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
2010-06-23 20:08 . 2009-12-12 06:34 119808 -c--a-w- c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
.
.
------- Sigcheck -------
Note: Unsigned files aren't necessarily malware.
.
[-] 2008-04-13 . 23C74D75E36E7158768DD63D92789A91 . 75264 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ipsec.sys
[-] 2008-04-13 . 23C74D75E36E7158768DD63D92789A91 . 75264 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\ipsec.sys
[-] 2008-04-13 . 23C74D75E36E7158768DD63D92789A91 . 75264 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ipsec.sys
[-] 2004-08-09 . 64537AA5C003A6AFEEE1DF819062D0D1 . 74752 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ipsec.sys
.
[-] 2008-04-13 . 23C74D75E36E7158768DD63D92789A91 . 75264 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ipsec.sys
[-] 2008-04-13 . 23C74D75E36E7158768DD63D92789A91 . 75264 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\ipsec.sys
[-] 2008-04-13 . 23C74D75E36E7158768DD63D92789A91 . 75264 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ipsec.sys
[-] 2004-08-09 . 64537AA5C003A6AFEEE1DF819062D0D1 . 74752 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ipsec.sys
.
((((((((((((((((((((((((((((( SnapShot@2011-10-14_00.52.06 )))))))))))))))))))))))))))))))))))))))))
.
- 2011-04-12 19:11 . 2011-04-12 19:11 56656 c:\windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll
+ 2011-07-09 13:30 . 2011-07-09 13:30 56656 c:\windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll
- 2011-08-11 07:03 . 2011-08-11 07:03 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__
31bf3856ad364e35\WindowsFormsIntegration.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__
31bf3856ad364e35\WindowsFormsIntegration.dll
- 2011-08-11 07:03 . 2011-08-11 07:03 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__
31bf3856ad364e35\UIAutomationTypes.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__
31bf3856ad364e35\UIAutomationTypes.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__
31bf3856ad364e35\UIAutomationProvider.dll
- 2011-10-13 07:14 . 2011-10-13 07:14 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__
31bf3856ad364e35\UIAutomationProvider.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__
b77a5c561934e089\System.Windows.Presentation.dll
- 2011-08-11 07:03 . 2011-08-11 07:03 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__
b77a5c561934e089\System.Windows.Presentation.dll
- 2011-08-11 07:03 . 2011-08-11 07:03 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__
b77a5c561934e089\System.Windows.Input.Manipulations.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__
b77a5c561934e089\System.Windows.Input.Manipulations.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__
31bf3856ad364e35\System.Web.ApplicationServices.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__
31bf3856ad364e35\System.Web.ApplicationServices.dll
- 2011-10-13 07:14 . 2011-10-13 07:14 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__
31bf3856ad364e35\System.ServiceModel.Channels.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__
31bf3856ad364e35\System.ServiceModel.Channels.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__
b77a5c561934e089\System.Numerics.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__
b77a5c561934e089\System.Numerics.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__
b77a5c561934e089\System.Device.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__
b77a5c561934e089\System.Device.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__
b77a5c561934e089\System.Data.DataSetExtensions.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__
b77a5c561934e089\System.Data.DataSetExtensions.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__
b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__
b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__
31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__
31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__
b03f5f7f11d50a3a\System.AddIn.Contract.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__
b03f5f7f11d50a3a\System.AddIn.Contract.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__
b77a5c561934e089\SMDiagnostics.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__
b77a5c561934e089\SMDiagnostics.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__
b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__
b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2011-10-13 07:15 . 2011-10-13 07:15 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__
b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__
b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__
b03f5f7f11d50a3a\Accessibility.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__
b03f5f7f11d50a3a\Accessibility.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__
b03f5f7f11d50a3a\ISymWrapper.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__
b03f5f7f11d50a3a\ISymWrapper.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__
b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__
b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2011-10-15 07:10 . 2011-10-15 07:10 96768 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationProvider\
6f4a1ba24dffa86dd2a2ab8127e0b16d\UIAutomationProvider.ni.dll
+ 2011-10-15 07:13 . 2011-10-15 07:13 54784 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xaml.Hosting\
bceea12ce16311f31b0f1cd8cadd4d75\System.Xaml.Hosting.ni.dll
+ 2011-10-15 07:14 . 2011-10-15 07:14 35328 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Pres#\
f45abd2caa9f93bb60ce92de6a885d6e\System.Windows.Presentation.ni.dll
+ 2011-10-15 07:14 . 2011-10-15 07:14 24064 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Routing\
3447b1ea4537dd7a1b7796efb935f4b0\System.Web.Routing.ni.dll
+ 2011-10-15 07:13 . 2011-10-15 07:13 46592 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DynamicD#\
56b89939136999a2d8de62d8ac3334a7\System.Web.DynamicData.Design.ni.dll
+ 2011-10-15 07:10 . 2011-10-15 07:10 71680 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Applicat#\
c15f4190f96acf9b328fa3645c2063ea\System.Web.ApplicationServices.ni.dll
+ 2011-10-15 07:13 . 2011-10-15 07:13 24576 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Abstract#\
5dd4316500d6e940dfed628463fe4595\System.Web.Abstractions.ni.dll
+ 2011-10-15 07:13 . 2011-10-15 07:13 82432 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\
e97547ed8d34e96b9d5836ea04b28c26\System.ServiceModel.Channels.ni.dll
+ 2011-10-15 07:13 . 2011-10-15 07:13 12288 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\
6ab752f8ab98f09615768a90d50593c1\System.ServiceModel.ServiceMoniker40.ni.dll
+ 2011-10-15 07:11 . 2011-10-15 07:11 78848 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn.Contra#\
b811cdf42feaf9a32408b03ab1c4e2d5\System.AddIn.Contract.ni.dll
+ 2011-10-15 07:10 . 2011-10-15 07:10 11776 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualC\
cfba497fc860b32b8d895f57bf148aa7\Microsoft.VisualC.ni.dll
+ 2011-10-15 07:09 . 2011-10-15 07:09 44544 c:\windows\assembly\NativeImages_v4.0.30319_32\Accessibility\
1f368300314889ee35325be9f80ef1c3\Accessibility.ni.dll
+ 2011-10-15 07:09 . 2011-10-15 07:09 9728 c:\windows\assembly\NativeImages_v4.0.30319_32\
dfsvc\fed35fa53f20bd75214f2eca0cde1ece\dfsvc.ni.exe
+ 2011-10-15 07:03 . 2011-10-15 07:03 109568 c:\windows\WinSxS\x86_System.EnterpriseServices_
b03f5f7f11d50a3a_4.0.0.0_x-ww_29b51492\System.EnterpriseServices.Wrapper.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 109568 c:\windows\WinSxS\x86_System.EnterpriseServices_
b03f5f7f11d50a3a_4.0.0.0_x-ww_29b51492\System.EnterpriseServices.Wrapper.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 246128 c:\windows\WinSxS\x86_System.EnterpriseServices_
b03f5f7f11d50a3a_4.0.0.0_x-ww_29b51492\System.EnterpriseServices.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 246128 c:\windows\WinSxS\x86_System.EnterpriseServices_
b03f5f7f11d50a3a_4.0.0.0_x-ww_29b51492\System.EnterpriseServices.dll
+ 2005-08-30 21:07 . 2011-11-20 18:28 556980 c:\windows\system32\perfh009.dat
+ 2005-08-30 21:07 . 2011-11-20 18:28 109504 c:\windows\system32\perfc009.dat
+ 2011-12-02 04:09 . 2011-12-02 04:09 247968 c:\windows\system32\Macromed\Flash\FlashUtil11e_Plugin.exe
- 2011-06-12 14:47 . 2011-05-04 08:52 157472 c:\windows\system32\javaws.exe
+ 2011-12-31 19:56 . 2011-11-10 10:54 157472 c:\windows\system32\javaws.exe
+ 2011-12-31 19:56 . 2011-11-10 10:54 149280 c:\windows\system32\javaw.exe
+ 2011-12-31 19:56 . 2011-11-10 10:54 149280 c:\windows\system32\java.exe
- 2011-04-12 19:11 . 2011-04-12 19:11 517448 c:\windows\Microsoft.NET\Framework\v4.0.30319\SOS.dll
+ 2011-07-09 13:30 . 2011-07-09 13:30 517448 c:\windows\Microsoft.NET\Framework\v4.0.30319\SOS.dll
+ 2011-07-09 13:30 . 2011-07-09 13:30 956240 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscordbi.dll
- 2011-10-13 07:14 . 2011-10-13 07:14 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__
31bf3856ad364e35\UIAutomationClientsideProviders.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
- 2011-10-13 07:14 . 2011-10-13 07:14 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__
31bf3856ad364e35\UIAutomationClient.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__
31bf3856ad364e35\UIAutomationClient.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__
b77a5c561934e089\System.Xml.Linq.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__
b77a5c561934e089\System.Xml.Linq.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__
b77a5c561934e089\System.Xaml.dll
- 2011-10-13 07:14 . 2011-10-13 07:14 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__
b77a5c561934e089\System.Xaml.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4
.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
- 2011-10-13 07:14 . 2011-10-13 07:14 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__
b03f5f7f11d50a3a\System.Web.Services.dll
- 2011-10-13 07:14 . 2011-10-13 07:14 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__
31bf3856ad364e35\System.Speech.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__
31bf3856ad364e35\System.Speech.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__
b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__
b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__
31bf3856ad364e35\System.ServiceModel.Routing.dll
- 2011-10-13 07:14 . 2011-10-13 07:14 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__
31bf3856ad364e35\System.ServiceModel.Routing.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__
31bf3856ad364e35\System.ServiceModel.Discovery.dll
- 2011-10-13 07:14 . 2011-10-13 07:14 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__
31bf3856ad364e35\System.ServiceModel.Discovery.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__
31bf3856ad364e35\System.ServiceModel.Activities.dll
- 2011-10-13 07:14 . 2011-10-13 07:14 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__
31bf3856ad364e35\System.ServiceModel.Activities.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__
b03f5f7f11d50a3a\System.Security.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__
b03f5f7f11d50a3a\System.Security.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__
b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
- 2011-10-13 07:14 . 2011-10-13 07:14 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__
b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__
b77a5c561934e089\System.Runtime.Remoting.dll
- 2011-10-13 07:14 . 2011-10-13 07:14 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__
b77a5c561934e089\System.Runtime.Remoting.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__
31bf3856ad364e35\System.Runtime.DurableInstancing.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__
31bf3856ad364e35\System.Runtime.DurableInstancing.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 231760 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 231760 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll
- 2011-10-13 07:14 . 2011-10-13 07:14 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__
b77a5c561934e089\System.Management.Instrumentation.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__
b77a5c561934e089\System.Management.Instrumentation.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__
b03f5f7f11d50a3a\System.IO.Log.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__
b03f5f7f11d50a3a\System.IO.Log.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__
b77a5c561934e089\System.IdentityModel.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__
b77a5c561934e089\System.IdentityModel.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__
b77a5c561934e089\System.IdentityModel.Selectors.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__
b77a5c561934e089\System.IdentityModel.Selectors.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__
b03f5f7f11d50a3a\System.Dynamic.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__
b03f5f7f11d50a3a\System.Dynamic.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 607064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__
b03f5f7f11d50a3a\System.Drawing.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 607064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__
b03f5f7f11d50a3a\System.Drawing.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__
b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__
b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__
b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__
b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_
4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__
b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__
b03f5f7f11d50a3a\System.Deployment.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__
b03f5f7f11d50a3a\System.Deployment.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__
b77a5c561934e089\System.Data.SqlXml.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__
b77a5c561934e089\System.Data.SqlXml.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__
b77a5c561934e089\System.Data.Services.Client.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__
b77a5c561934e089\System.Data.Services.Client.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__
b77a5c561934e089\System.Data.Linq.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__
b77a5c561934e089\System.Data.Linq.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__
b03f5f7f11d50a3a\System.configuration.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__
b03f5f7f11d50a3a\System.configuration.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__
b77a5c561934e089\System.ComponentModel.Composition.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__
b77a5c561934e089\System.ComponentModel.Composition.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 149848 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 149848 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__
31bf3856ad364e35\System.Activities.DurableInstancing.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__
31bf3856ad364e35\System.Activities.DurableInstancing.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__
31bf3856ad364e35\System.Activities.Core.Presentation.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__
31bf3856ad364e35\System.Activities.Core.Presentation.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__
31bf3856ad364e35\ReachFramework.dll
- 2011-08-11 07:03 . 2011-08-11 07:03 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__
31bf3856ad364e35\ReachFramework.dll
- 2011-10-13 07:14 . 2011-10-13 07:14 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__
31bf3856ad364e35\PresentationUI.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__
31bf3856ad364e35\PresentationUI.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__
31bf3856ad364e35\PresentationFramework.Royale.dll
- 2011-10-13 07:14 . 2011-10-13 07:14 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__
31bf3856ad364e35\PresentationFramework.Royale.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__
31bf3856ad364e35\PresentationFramework.Luna.dll
- 2011-10-13 07:14 . 2011-10-13 07:14 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__
31bf3856ad364e35\PresentationFramework.Luna.dll
- 2011-10-13 07:14 . 2011-10-13 07:14 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__
31bf3856ad364e35\PresentationFramework.Classic.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__
31bf3856ad364e35\PresentationFramework.Classic.dll
- 2011-10-13 07:14 . 2011-10-13 07:14 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__
31bf3856ad364e35\PresentationFramework.Aero.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__
31bf3856ad364e35\PresentationFramework.Aero.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__
b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__
b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__
b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__
b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__
b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__
b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__
b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__
b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__
b03f5f7f11d50a3a\Microsoft.CSharp.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__
b03f5f7f11d50a3a\Microsoft.CSharp.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__
b77a5c561934e089\System.Transactions.dll
- 2011-10-13 07:14 . 2011-10-13 07:14 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__
b77a5c561934e089\System.Transactions.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__
31bf3856ad364e35\System.Printing.dll
- 2011-10-13 07:14 . 2011-10-13 07:14 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__
31bf3856ad364e35\System.Printing.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__
b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__
b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__
b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__
b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
+ 2011-10-15 07:14 . 2011-10-15 07:14 404480 c:\windows\assembly\NativeImages_v4.0.30319_32\XamlBuildTask\ecb0328b918c4a5adfbd83c946e0e196\XamlBuildTask.ni.dll
+ 2011-10-15 07:09 . 2011-10-15 07:09 356864 c:\windows\assembly\NativeImages_v4.0.30319_32\WsatConfig\040df73a6631957668b3d538e70ff7a0\WsatConfig.ni.exe
+ 2011-10-15 07:14 . 2011-10-15 07:14 252416 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#\b18816abd9dd59ca3f1d682a756e5745\WindowsFormsIntegration.ni.dll
+ 2011-10-15 07:10 . 2011-10-15 07:10 196096 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationTypes\c170b431f43ab80000d31bcc58acd1a5\UIAutomationTypes.ni.dll
+ 2011-10-15 07:14 . 2011-10-15 07:14 482816 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClient\ee096062554a6344a49083910c0af16e\UIAutomationClient.ni.dll
+ 2011-10-15 07:10 . 2011-10-15 07:10 391680 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\1faca3f09472860e010689b67c68a327\System.Xml.Linq.ni.dll
+ 2011-10-15 07:10 . 2011-10-15 07:10 188928 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Inpu#\eeb9b49d8598c6f5926f494074af2d69\
System.Windows.Input.Manipulations.ni.d ll
+ 2011-10-15 07:14 . 2011-10-15 07:14 194048 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\a863e081c9bcbaec568abe127fb1dbe3\
System.Windows.Forms.DataVisualization. Design.ni.dll
+ 2011-10-15 07:10 . 2011-10-15 07:10 224256 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.RegularE#\386e276cb95b2116d2662d4684126895
\System.Web.RegularExpressions.ni.dll
+ 2011-10-15 07:14 . 2011-10-15 07:14 861696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Extensio#\e327cf8e04773318e4b8b0059a6fbd6b\
System.Web.Extensions.Design.ni.dll
+ 2011-10-15 07:13 . 2011-10-15 07:13 332800 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Entity\
1f27b86bb9c2a32f7571b0c86341d73f\System.Web.Entity.ni.dll
+ 2011-10-15 07:13 . 2011-10-15 07:13 297472 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Entity.D#\
67fc91b4eac9e54781bc50dcb36945d4\System.Web.Entity.Design.ni.dll
+ 2011-10-15 07:13 . 2011-10-15 07:13 705536 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DynamicD#\
965eb0ae99683ff79685abe9323a6cfa\System.Web.DynamicData.ni.dll
+ 2011-10-15 07:13 . 2011-10-15 07:13 259072 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DataVisu#\
da89b1d421f29db531ee997029e03b72\System.Web.DataVisualization.Design.ni.dll
+ 2011-10-15 07:10 . 2011-10-15 07:10 646656 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Transactions\
344c1e000e4158cc37a5e9068e095d40\System.Transactions.ni.dll
+ 2011-10-15 07:10 . 2011-10-15 07:10 221696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\
a0e090647c856fe52e1f1e5d2a25b1ac\System.ServiceProcess.ni.dll
+ 2011-10-15 07:13 . 2011-10-15 07:13 422912 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\
8f7ddde9561a2cc64c9a9377ef645f71\System.ServiceModel.Activation.ni.dll
+ 2011-10-15 07:13 . 2011-10-15 07:13 365056 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\
1cce5f9cad92a8ba3deb833291637b95\System.ServiceModel.Routing.ni.dll
+ 2011-10-15 07:05 . 2011-10-15 07:05 729088 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Security\
c12a8284683ba6b400a4562da310ce59\System.Security.ni.dll
+ 2011-10-15 07:09 . 2011-10-15 07:09 311296 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\
137a2ae391d89577ad63db08303a5158\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2011-10-15 07:10 . 2011-10-15 07:10 770560 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\
4188dcf65867be8c772c2e44082e51ca\System.Runtime.Remoting.ni.dll
+ 2011-10-15 07:10 . 2011-10-15 07:10 241664 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Cach#\
69686330b905615bdbc5a43d159ed335\System.Runtime.Caching.ni.dll
+ 2011-10-15 07:05 . 2011-10-15 07:05 145408 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Numerics\
d038332bf07a163f855200919ee678cc\System.Numerics.ni.dll
+ 2011-10-15 07:13 . 2011-10-15 07:13 653312 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Net\
8410db646e037bab93d66ef9d17a3ce5\System.Net.ni.dll
+ 2011-10-15 07:13 . 2011-10-15 07:13 626176 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Messaging\
7cdd3b54c476345732c735ea253d95d5\System.Messaging.ni.dll
+ 2011-10-15 07:13 . 2011-10-15 07:13 395264 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Management.I#\
fe11b4a9c8067184aff54b627b0e046b\System.Management.Instrumentation.ni.dll
+ 2011-10-15 07:13 . 2011-10-15 07:13 413696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IO.Log\
7970b94c1582f58c8f79f531f104c754\System.IO.Log.ni.dll
+ 2011-10-15 07:13 . 2011-10-15 07:13 229376 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IdentityMode#\
26bdff3178be53810cb7bac268f7af08\System.IdentityModel.Selectors.ni.dll
+ 2011-10-15 07:10 . 2011-10-15 07:10 236032 c:\windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\
a2baf116d3055aadb99b77e327a74907\System.EnterpriseServices.Wrapper.dll
+ 2011-10-15 07:10 . 2011-10-15 07:10 786944 c:\windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\
a2baf116d3055aadb99b77e327a74907\System.EnterpriseServices.ni.dll
+ 2011-10-15 07:05 . 2011-10-15 07:05 377344 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Dynamic\
d8131e4810c207d23b977603fdad6e33\System.Dynamic.ni.dll
+ 2011-10-15 07:06 . 2011-10-15 07:06 224768 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Drawing.Desi#\
fcc666923b1ee799fa03c87082249868\System.Drawing.Design.ni.dll
+ 2011-10-15 07:13 . 2011-10-15 07:13 913920 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\
86db06eb0e133c3c2042cd6abcfff399\System.DirectoryServices.AccountManagement.ni.dll
+ 2011-10-15 07:10 . 2011-10-15 07:10 468992 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\
2f7f2d7c549c23373541e052c8364755\System.DirectoryServices.Protocols.ni.dll
+ 2011-10-15 07:13 . 2011-10-15 07:13 112640 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Device\
ecae7de1b9e1cf0d6d3bc7f01b891a1a\System.Device.ni.dll
+ 2011-10-15 07:13 . 2011-10-15 07:13 507904 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Service#\
923c3591d29f5671472728bf1a55f308\System.Data.Services.Design.ni.dll
+ 2011-10-15 07:11 . 2011-10-15 07:11 134656 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.DataSet#\
e6c62a3b06ae5f2f9de5164117dd6ba6\System.Data.DataSetExtensions.ni.dll
+ 2011-10-15 07:05 . 2011-10-15 07:05 980480 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\
cb7cfe8f0e8532f6381c22bf719a95dc\System.Configuration.ni.dll
+ 2011-10-15 07:10 . 2011-10-15 07:10 148480 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuratio#\
96907044ee8b845f05d72805d100fb7e\System.Configuration.Install.ni.dll
+ 2011-10-15 07:06 . 2011-10-15 07:06 690176 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\
d5f97e0367e37f9aead033b54f40a895\System.ComponentModel.Composition.ni.dll
+ 2011-10-15 07:11 . 2011-10-15 07:11 194048 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\
c11789fd2d4aeb3a41b8a925975ebd96\System.ComponentModel.DataAnnotations.ni.dll
+ 2011-10-15 07:11 . 2011-10-15 07:11 617984 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn\
53e0aa766368680b3785a0867d632f0c\System.AddIn.ni.dll
+ 2011-10-15 07:11 . 2011-10-15 07:11 404992 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.D#\
aef6e32f096486514002cee2bd716b0b\System.Activities.DurableInstancing.ni.dll
+ 2011-10-15 07:09 . 2011-10-15 07:09 317952 c:\windows\assembly\NativeImages_v4.0.30319_32\SMSvcHost\
eee8be5d9f06c6d32cb1eeca8cfbfe38\SMSvcHost.ni.exe
+ 2011-10-15 07:10 . 2011-10-15 07:10 142848 c:\windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\
c60bbf982563abd181e673c1d5e92006\SMDiagnostics.ni.dll
+ 2011-10-15 07:06 . 2011-10-15 07:06 450560 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\
d2ad394c477fc1c71c900c892d7fce0b\PresentationFramework.Aero.ni.dll
+ 2011-10-15 07:05 . 2011-10-15 07:05 284160 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\
63f98ea6df6a734c122348fa32296df0\PresentationFramework.Classic.ni.dll
+ 2011-10-15 07:06 . 2011-10-15 07:06 656896 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\
61aa640996b77695572adefea8fd36b7\PresentationFramework.Luna.ni.dll
+ 2011-10-15 07:06 . 2011-10-15 07:06 327680 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\
30d7b48c6018eb8d7db378908568130f\PresentationFramework.Royale.ni.dll
+ 2011-10-15 07:09 . 2011-10-15 07:09 274432 c:\windows\assembly\NativeImages_v4.0.30319_32\MSBuild\
50ef00afe8174ef7b9ca3577a301b02b\MSBuild.ni.exe
+ 2011-10-15 07:10 . 2011-10-15 07:10 303104 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\
9f9e5b077347f8f318b1959555be1031\Microsoft.VisualBasic.Compatibility.Data.ni.dll
+ 2011-10-15 07:09 . 2011-10-15 07:09 418816 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\
54c59931e1860675710f19c7c3ba4cc8\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2011-10-15 07:09 . 2011-10-15 07:09 631808 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Uti#\
503994046462b53944ed2915dfb43cb0\Microsoft.Build.Utilities.v4.0.ni.dll
+ 2011-10-15 07:09 . 2011-10-15 07:09 258048 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Fra#\
1bf86eecca78429158f8e8b8910f3e6e\Microsoft.Build.Framework.ni.dll
+ 2011-10-15 07:09 . 2011-10-15 07:09 135680 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Con#\
1b119eca340bea3a2489017f8f4e9aac\Microsoft.Build.Conversion.v4.0.ni.dll
+ 2011-10-15 07:09 . 2011-10-15 07:09 194048 c:\windows\assembly\NativeImages_v4.0.30319_32\CustomMarshalers\
04226f317855c555a957f4c2d0dc240d\CustomMarshalers.ni.dll
+ 2011-10-15 07:09 . 2011-10-15 07:09 474624 c:\windows\assembly\NativeImages_v4.0.30319_32\ComSvcConfig\
4da03695fc54c2e2b57b034ae772d189\ComSvcConfig.ni.exe
+ 2011-10-15 07:09 . 2011-10-15 07:09 846336 c:\windows\assembly\NativeImages_v4.0.30319_32\AspNetMMCExt\
98447bb42f564716029c1751c88ae134\AspNetMMCExt.ni.dll
+ 2011-09-29 23:55 . 2011-12-02 04:09 8527008 c:\windows\system32\Macromed\Flash\NPSWF32.dll
+ 2011-07-09 13:30 . 2011-07-09 13:30 5197648 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorlib.dll
- 2011-04-12 19:11 . 2011-04-12 19:11 5197648 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorlib.dll
+ 2011-07-09 13:30 . 2011-07-09 13:30 1142616 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscordacwks.dll
+ 2011-07-09 13:30 . 2011-07-09 13:30 6724424 c:\windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
- 2011-10-13 07:14 . 2011-10-13 07:14 1303896 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__
31bf3856ad364e35\WindowsBase.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 1303896 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__
31bf3856ad364e35\WindowsBase.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 3510600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__
b77a5c561934e089\System.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 3510600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 5028200 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__
b77a5c561934e089\System.Windows.Forms.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 5028200 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__
b77a5c561934e089\System.Windows.Forms.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__
31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__3
1bf3856ad364e35\System.Windows.Forms.DataVisualization.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 6067048 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__
b77a5c561934e089\System.ServiceModel.dll
- 2011-10-13 07:14 . 2011-10-13 07:14 6067048 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__
b77a5c561934e089\System.ServiceModel.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__
b77a5c561934e089\System.Runtime.Serialization.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__
b77a5c561934e089\System.Runtime.Serialization.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__
b77a5c561934e089\System.Data.Entity.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__
b77a5c561934e089\System.Data.Entity.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 1339736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__
b77a5c561934e089\System.Core.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 1339736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__
b77a5c561934e089\System.Core.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__
31bf3856ad364e35\System.Activities.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__
31bf3856ad364e35\System.Activities.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__
31bf3856ad364e35\System.Activities.Presentation.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__
31bf3856ad364e35\System.Activities.Presentation.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 6346600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__
31bf3856ad364e35\PresentationFramework.dll
- 2011-10-13 07:14 . 2011-10-13 07:14 6346600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__
31bf3856ad364e35\PresentationFramework.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 2970968 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__
b77a5c561934e089\System.Data.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 2970968 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__
b77a5c561934e089\System.Data.dll
- 2011-10-13 07:14 . 2011-10-13 07:14 3545952 c:\windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__
31bf3856ad364e35\PresentationCore.dll
+ 2011-10-15 07:04 . 2011-10-15 07:04 3545952 c:\windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__
31bf3856ad364e35\PresentationCore.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 5197648 c:\windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__
b77a5c561934e089\mscorlib.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 5197648 c:\windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__
b77a5c561934e089\mscorlib.dll
- 2011-10-13 07:15 . 2011-10-13 07:15 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__
b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
+ 2011-10-15 07:03 . 2011-10-15 07:03 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__
b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
+ 2011-10-15 07:05 . 2011-10-15 07:05 3798016 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\
6e1c62ce679c8157560c7593c066cd85\WindowsBase.ni.dll
+ 2011-10-15 07:14 . 2011-10-15 07:14 1057792 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClients#\0
d8b512be71d0a491131dac4bada85cf\UIAutomationClientsideProviders.ni.dll
+ 2011-10-15 07:05 . 2011-10-15 07:05 9085952 c:\windows\assembly\NativeImages_v4.0.30319_32\System\
af709611f9ffff0544b1d750303c4afa\System.ni.dll
+ 2011-10-15 07:05 . 2011-10-15 07:05 5618176 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml\
a401952384c24581989cdc85270f3d9d\System.Xml.ni.dll
+ 2011-10-15 07:09 . 2011-10-15 07:09 1781760 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\
4185130eda1d7a5e0e0474e72343570b\System.Xaml.ni.dll
+ 2011-10-15 07:14 . 2011-10-15 07:14 1
-
sorry, didn't realize it was cut off. I have attached it.
[year+ old attachment deleted by admin]
-
SysProt Antirootkit
Download
SysProt Antirootkit from the link below (you will find it at the bottom
of the page under attachments, or you can get it from one of the
mirrors).
http://sites.google.com/site/sysprotantirootkit/ (http://sites.google.com/site/sysprotantirootkit/)
Unzip it into a folder on your desktop.
- Double click Sysprot.exe to start the program.
- Click on the Log tab.
- In the Write to log box select the following items.
- Process << Selected
- Kernel Modules << Selected
- SSDT << Selected
- Kernel Hooks << Selected
- IRP Hooks << NOT Selected
- Ports << NOT Selected
- Hidden Files << Selected
- At the bottom of the page
- Hidden Objects Only << Selected
- Click on the Create Log button on the bottom right.
- After a few seconds a new window should appear.
- Select Scan Root Drive. Click on the Start button.
- When it is complete a new window will appear to indicate that the scan is finished.
- The log will be saved automatically in the same folder Sysprot.exe was extracted to. Open the text file and copy/paste the log here.
-
I cannot get this to work.
"Click on the Create Log button on the bottom right.
After a few seconds a new window should appear."
The window never appears, it just freezes.
-
finally got it to run and then it said error writing to log file.
this is what was in the sysprotlog-notepad
SysProt AntiRootkit v1.0.1.0
by swatkat
******************************************************************************************
******************************************************************************************
No Hidden Processes found
******************************************************************************************
******************************************************************************************
Kernel Modules:
Module Name: sphf.sys
Service Name: ---
Module Base: B9EA7000
Module End: B9FA7000
Hidden: Yes
Module Name: \SystemRoot\System32\Drivers\dump_iaStor.sys
Service Name: ---
Module Base: A896A000
Module End: A8A21000
Hidden: Yes
Module Name: C:\WINDOWS\system32\drivers\kmixer.sys
Service Name: kmixer
Module Base: 9965D000
Module End: 99688000
Hidden: Yes
******************************************************************************************
******************************************************************************************
SSDT:
Function Name: ZwAllocateVirtualMemory
Address: B039242C
Driver Base: B038E000
Driver End: B03BF000
Driver Name: \??\C:\WINDOWS\system32\drivers\OADriver.sys
Function Name: ZwAssignProcessToJobObject
Address: B0391928
Driver Base: B038E000
Driver End: B03BF000
Driver Name: \??\C:\WINDOWS\system32\drivers\OADriver.sys
Function Name: ZwConnectPort
Address: B039064C
Driver Base: B038E000
Driver End: B03BF000
Driver Name: \??\C:\WINDOWS\system32\drivers\OADriver.sys
Function Name: ZwCreateFile
Address: B0397316
Driver Base: B038E000
Driver End: B03BF000
Driver Name: \??\C:\WINDOWS\system32\drivers\OADriver.sys
Function Name: ZwCreateKey
Address: B0399242
Driver Base: B038E000
Driver End: B03BF000
Driver Name: \??\C:\WINDOWS\system32\drivers\OADriver.sys
Function Name: ZwCreatePort
Address: B039046A
Driver Base: B038E000
Driver End: B03BF000
Driver Name: \??\C:\WINDOWS\system32\drivers\OADriver.sys
Function Name: ZwCreateProcess
Address: B0391EE8
Driver Base: B038E000
Driver End: B03BF000
Driver Name: \??\C:\WINDOWS\system32\drivers\OADriver.sys
Function Name: ZwCreateProcessEx
Address: B038E978
Driver Base: B038E000
Driver End: B03BF000
Driver Name: \??\C:\WINDOWS\system32\drivers\OADriver.sys
Function Name: ZwCreateSection
Address: B038E4F2
Driver Base: B038E000
Driver End: B03BF000
Driver Name: \??\C:\WINDOWS\system32\drivers\OADriver.sys
Function Name: ZwCreateThread
Address: B038F634
Driver Base: B038E000
Driver End: B03BF000
Driver Name: \??\C:\WINDOWS\system32\drivers\OADriver.sys
Function Name: ZwDebugActiveProcess
Address: B038FD22
Driver Base: B038E000
Driver End: B03BF000
Driver Name: \??\C:\WINDOWS\system32\drivers\OADriver.sys
Function Name: ZwDuplicateObject
Address: B039032C
Driver Base: B038E000
Driver End: B03BF000
Driver Name: \??\C:\WINDOWS\system32\drivers\OADriver.sys
Function Name: ZwEnumerateKey
Address: B9EC6CA2
Driver Base: B9EA7000
Driver End: B9FA7000
Driver Name: sphf.sys
Function Name: ZwEnumerateValueKey
Address: B9EC7030
Driver Base: B9EA7000
Driver End: B9FA7000
Driver Name: sphf.sys
Function Name: ZwLoadDriver
Address: B0391350
Driver Base: B038E000
Driver End: B03BF000
Driver Name: \??\C:\WINDOWS\system32\drivers\OADriver.sys
Function Name: ZwOpenFile
Address: B0397694
Driver Base: B038E000
Driver End: B03BF000
Driver Name: \??\C:\WINDOWS\system32\drivers\OADriver.sys
Function Name: ZwOpenKey
Address: B9EA80C0
Driver Base: B9EA7000
Driver End: B9FA7000
Driver Name: sphf.sys
Function Name: ZwOpenProcess
Address: B038F308
Driver Base: B038E000
Driver End: B03BF000
Driver Name: \??\C:\WINDOWS\system32\drivers\OADriver.sys
Function Name: ZwOpenSection
Address: B038E7B4
Driver Base: B038E000
Driver End: B03BF000
Driver Name: \??\C:\WINDOWS\system32\drivers\OADriver.sys
Function Name: ZwOpenThread
Address: B038F8B0
Driver Base: B038E000
Driver End: B03BF000
Driver Name: \??\C:\WINDOWS\system32\drivers\OADriver.sys
Function Name: ZwProtectVirtualMemory
Address: B03916DA
Driver Base: B038E000
Driver End: B03BF000
Driver Name: \??\C:\WINDOWS\system32\drivers\OADriver.sys
Function Name: ZwQueryKey
Address: B9EC7108
Driver Base: B9EA7000
Driver End: B9FA7000
Driver Name: sphf.sys
Function Name: ZwQueryValueKey
Address: B9EC6F88
Driver Base: B9EA7000
Driver End: B9FA7000
Driver Name: sphf.sys
Function Name: ZwQueueApcThread
Address: B0391A44
Driver Base: B038E000
Driver End: B03BF000
Driver Name: \??\C:\WINDOWS\system32\drivers\OADriver.sys
Function Name: ZwRequestPort
Address: B0390CB0
Driver Base: B038E000
Driver End: B03BF000
Driver Name: \??\C:\WINDOWS\system32\drivers\OADriver.sys
Function Name: ZwRequestWaitReplyPort
Address: B0391018
Driver Base: B038E000
Driver End: B03BF000
Driver Name: \??\C:\WINDOWS\system32\drivers\OADriver.sys
Function Name: ZwRestoreKey
Address: B039710E
Driver Base: B038E000
Driver End: B03BF000
Driver Name: \??\C:\WINDOWS\system32\drivers\OADriver.sys
Function Name: ZwResumeThread
Address: B03900CE
Driver Base: B038E000
Driver End: B03BF000
Driver Name: \??\C:\WINDOWS\system32\drivers\OADriver.sys
Function Name: ZwSecureConnectPort
Address: B039086E
Driver Base: B038E000
Driver End: B03BF000
Driver Name: \??\C:\WINDOWS\system32\drivers\OADriver.sys
Function Name: ZwSetContextThread
Address: B038FBCC
Driver Base: B038E000
Driver End: B03BF000
Driver Name: \??\C:\WINDOWS\system32\drivers\OADriver.sys
Function Name: ZwSetSystemInformation
Address: B03920E0
Driver Base: B038E000
Driver End: B03BF000
Driver Name: \??\C:\WINDOWS\system32\drivers\OADriver.sys
Function Name: ZwSetValueKey
Address: B9EC719A
Driver Base: B9EA7000
Driver End: B9FA7000
Driver Name: sphf.sys
Function Name: ZwShutdownSystem
Address: B039128A
Driver Base: B038E000
Driver End: B03BF000
Driver Name: \??\C:\WINDOWS\system32\drivers\OADriver.sys
Function Name: ZwSuspendProcess
Address: B03901FE
Driver Base: B038E000
Driver End: B03BF000
Driver Name: \??\C:\WINDOWS\system32\drivers\OADriver.sys
Function Name: ZwSuspendThread
Address: B038FF7A
Driver Base: B038E000
Driver End: B03BF000
Driver Name: \??\C:\WINDOWS\system32\drivers\OADriver.sys
Function Name: ZwSystemDebugControl
Address: B038FE40
Driver Base: B038E000
Driver End: B03BF000
Driver Name: \??\C:\WINDOWS\system32\drivers\OADriver.sys
Function Name: ZwTerminateProcess
Address: B038F472
Driver Base: B038E000
Driver End: B03BF000
Driver Name: \??\C:\WINDOWS\system32\drivers\OADriver.sys
Function Name: ZwTerminateThread
Address: B038FA66
Driver Base: B038E000
Driver End: B03BF000
Driver Name: \??\C:\WINDOWS\system32\drivers\OADriver.sys
Function Name: ZwUnloadDriver
Address: B0391518
Driver Base: B038E000
Driver End: B03BF000
Driver Name: \??\C:\WINDOWS\system32\drivers\OADriver.sys
Function Name: ZwWriteVirtualMemory
Address: B0391804
Driver Base: B038E000
Driver End: B03BF000
Driver Name: \??\C:\WINDOWS\system32\drivers\OADriver.sys
******************************************************************************************
******************************************************************************************
-
How's the computer working now?
I'd like to scan your machine with ESET OnlineScan
•Hold down Control and click on the following link to open ESET OnlineScan in a new window.
ESET OnlineScan (http://eset.com/onlinescan)
•Click the (http://i424.photobucket.com/albums/pp322/digistar/esetOnline.png) button.
•For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
- Click on (http://i424.photobucket.com/albums/pp322/digistar/esetSmartInstall.png) to download the ESET Smart Installer. Save it to your desktop.
- Double click on the (http://i424.photobucket.com/albums/pp322/digistar/esetSmartInstallDesktopIcon-1.png) icon on your desktop.
•Check (http://i424.photobucket.com/albums/pp322/digistar/esetAcceptTerms.png)
•Click the (http://i424.photobucket.com/albums/pp322/digistar/esetStart.png) button.
•Accept any security warnings from your browser.
•Check (http://i424.photobucket.com/albums/pp322/digistar/esetScanArchives.png)
•Push the Start button.
•ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
•When the scan completes, push (http://i424.photobucket.com/albums/pp322/digistar/esetListThreats.png)
•Push (http://i424.photobucket.com/albums/pp322/digistar/esetExport.png), and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
•Push the (http://i424.photobucket.com/albums/pp322/digistar/esetBack.png) button.
•Push (http://i424.photobucket.com/albums/pp322/digistar/esetFinish.png)
A log file will be saved here: C:\Program Files\ESET\ESET Online Scanner\log.txt
-
it's doing better, but not at 100%. Sorry for the delay, but I had some medical issues.
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ToolbarFacemood77.zip Win32/Bagle.gen.zip worm cleaned by deleting - quarantined
C:\Documents and Settings\HP_Administrator\Application Data\Sun\Java\Deployment\cache\6.0\18\691e3112-6c97148a Java/Agent.DW trojan deleted - quarantined
C:\Documents and Settings\HP_Administrator\Application Data\Sun\Java\Deployment\cache\6.0\61\69928a3d-5f46b25e a variant of Java/TrojanDownloader.Agent.NDJ trojan deleted - quarantined
C:\Documents and Settings\HP_Administrator\My Documents\Downloads\cnet_ringmake_v529_exe.exe a variant of Win32/InstallCore.D application cleaned by deleting - quarantined
C:\Documents and Settings\HP_Administrator\My Documents\Downloads\GingerBreak-v1.10(1).apk Linux/Exploit.Lotoor.AJ trojan deleted - quarantined
C:\Documents and Settings\HP_Administrator\My Documents\Downloads\GingerBreak-v1.10.apk Linux/Exploit.Lotoor.AJ trojan deleted - quarantined
C:\Documents and Settings\HP_Administrator\My Documents\Downloads\SetupArcadeWeb.exe a variant of Win32/Adware.Gamevance.BE application cleaned by deleting - quarantined
C:\Documents and Settings\HP_Administrator\My Documents\Downloads\XvidSetup.exe Win32/Toolbar.Zugo application deleted - quarantined
C:\Documents and Settings\NetworkService\Application Data\Sun\Java\Deployment\cache\6.0\17\6e684651-213a5662 multiple threats deleted - quarantined
C:\Documents and Settings\NetworkService\Application Data\Sun\Java\Deployment\cache\6.0\19\6b527313-52162753 a variant of Java/TrojanDownloader.Agent.NDJ trojan deleted - quarantined
C:\Documents and Settings\NetworkService\Application Data\Sun\Java\Deployment\cache\6.0\2\3aa4da42-1dabd47d multiple threats deleted - quarantined
C:\Documents and Settings\NetworkService\Application Data\Sun\Java\Deployment\cache\6.0\22\1dccba96-2f0d1591 a variant of Java/TrojanDownloader.Agent.NDJ trojan deleted - quarantined
C:\Documents and Settings\NetworkService\Application Data\Sun\Java\Deployment\cache\6.0\23\390a5597-203759f6 a variant of Java/TrojanDownloader.OpenConnection.AQ trojan deleted - quarantined
C:\Documents and Settings\NetworkService\Application Data\Sun\Java\Deployment\cache\6.0\55\5db226b7-3f9e3b6b multiple threats deleted - quarantined
C:\Documents and Settings\NetworkService\Application Data\Sun\Java\Deployment\cache\6.0\56\408dfaf8-1a3f4650 a variant of Java/TrojanDownloader.Agent.NDJ trojan deleted - quarantined
C:\Documents and Settings\NetworkService\Application Data\Sun\Java\Deployment\cache\6.0\57\7cea6c39-52161e0c a variant of Java/TrojanDownloader.Agent.NDJ trojan deleted - quarantined
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\0ATC9NEA\czkzimczfpdmg[1].pdf JS/Exploit.Pdfka.PGF.Gen trojan cleaned by deleting - quarantined
C:\Qoobox\Quarantine\C\Documents and Settings\All Users\Application Data\kn5KXoCPJI5FDa.exe.vir a variant of Win32/Injector.MAS trojan cleaned by deleting - quarantined
C:\Qoobox\Quarantine\C\Documents and Settings\All Users\Application Data\NJKgUKkjfTHNlDI.exe.vir Win32/TrojanDownloader.Prodatect.BK trojan cleaned by deleting - quarantined
C:\Qoobox\Quarantine\C\Documents and Settings\HP_Administrator\Local Settings\Application Data\1cf6efbe\X.vir Win32/Sirefef.DD trojan cleaned by deleting - quarantined
C:\Qoobox\Quarantine\C\Documents and Settings\HP_Administrator\Local Settings\Application Data\1cf6efbe\U\[email protected] a variant of Win32/Sirefef.DV trojan cleaned by deleting - quarantined
C:\Qoobox\Quarantine\C\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe.vir Win32/Patched.HN trojan cleaned - quarantined
C:\Qoobox\Quarantine\C\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe.vir Win32/Patched.HN trojan cleaned - quarantined
C:\Qoobox\Quarantine\C\Program Files\Common Files\LightScribe\LSSrvc.exe.vir Win32/Patched.HN trojan cleaned - quarantined
C:\Qoobox\Quarantine\C\Program Files\Common Files\Motive\McciCMService.exe.vir Win32/Patched.HN trojan cleaned - quarantined
C:\Qoobox\Quarantine\C\Program Files\Google\Update\GoogleUpdate.exe.vir Win32/Patched.HN trojan cleaned - quarantined
C:\Qoobox\Quarantine\C\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe.vir Win32/Patched.HN trojan cleaned - quarantined
C:\Qoobox\Quarantine\C\Program Files\Intel\IntelDH\Intel(R) Quick Resume Technology Drivers\Elservice.exe.vir Win32/Patched.HN trojan cleaned - quarantined
C:\Qoobox\Quarantine\C\Program Files\iPod\bin\iPodService.exe.vir Win32/Patched.HN trojan cleaned - quarantined
C:\Qoobox\Quarantine\C\Program Files\Java\jre6\bin\jqs.exe.vir Win32/Patched.HN trojan cleaned - quarantined
C:\Qoobox\Quarantine\C\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe.vir Win32/Patched.HN trojan cleaned - quarantined
C:\Qoobox\Quarantine\C\Program Files\Norton Safe Web Lite\Engine\1.2.0.6\ccSvcHst.exe.vir Win32/Patched.HN trojan cleaned - quarantined
C:\Qoobox\Quarantine\C\WINDOWS\system32\nvsvc32.exe.vir Win32/Patched.HN trojan cleaned - quarantined
C:\WINDOWS\$hf_mig$\KB950762\update\eula.txt Win32/Adware.Virtumonde.NEO application cleaned by deleting - quarantined
C:\WINDOWS\system32\drivers\Udfreadr.sys Win32/Rootkit.Agent.NUT trojan cleaned by deleting - quarantined
C:\WINDOWS\temp\jar_cache1173086613976580267.tmp Java/TrojanDownloader.Agent.NDJ trojan deleted - quarantined
C:\WINDOWS\temp\jar_cache4319357173442203831.tmp Java/TrojanDownloader.Agent.NDJ trojan deleted - quarantined
C:\WINDOWS\temp\jar_cache5290585592826776061.tmp Java/TrojanDownloader.Agent.NDJ trojan deleted (after the next restart) - quarantined
C:\_OTL\MovedFiles\12312011_230339\c_documents and settings\all users\application data\gfhYdHclcK.exe a variant of Win32/Injector.MAS trojan cleaned by deleting - quarantined
Operating memory a variant of Win32/Olmarik.AWO trojan
-
it's doing better, but not at 100%
Please describe "not at 100%".
-
I am no longer getting the pop-up boxes.
I have my desktop icons and my startup menu. the red circle with an x in it near my clock along with a system check icon is gone.
but when I click on start, and all programs. the folders still show empty. to access them I have to click start, right click all programs and click explore.
-
Please try running UnHide again. You'll find it in Reply # 1
-
ran unhide again and the folders still show empty
-
Please do this even if you don't have the OS disk.
Do you have an XP CD?
If so, place it in your CD ROM drive and follow the instructions below:
•Click on Start > Run and type sfc /scannow then press Enter (note the space between scf and /scannow)
*Let this run undisturbed until the window with the blue progress bar goes away
SFC - Which stands for System File Checker, retrieves the correct version of the file from %Systemroot%\System32\Dllcache or the Windows installation source files, and then replaces the incorrect file.
-
I don't have a xp cd
-
I don't have a xp cd
Please run it anyway. If it finds a missing or corrupt file it will ask for the disk. That will give us a clue.