Созданные ответы форума
-
Сообщения
-
+ 2010-10-03 15:12 . 2010-10-03 15:12 626688 c:windowsassemblyGAC_MSILSystem.Drawing2.0.0.0__b03f5f7f11d50a3aSystem.Drawing.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 626688 c:windowsassemblyGAC_MSILSystem.Drawing2.0.0.0__b03f5f7f11d50a3aSystem.Drawing.dll
+ 2010-10-03 15:12 . 2010-10-03 15:12 401408 c:windowsassemblyGAC_MSILSystem.DirectoryServices2.0.0.0__b03f5f7f11d50a3aSystem.DirectoryServices.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 401408 c:windowsassemblyGAC_MSILSystem.DirectoryServices2.0.0.0__b03f5f7f11d50a3aSystem.DirectoryServices.dll
+ 2010-10-03 15:12 . 2010-10-03 15:12 188416 c:windowsassemblyGAC_MSILSystem.DirectoryServices.Protocols2.0.0.0__b03f5f7f11d50a3aSystem.DirectoryServices.Protocols.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 188416 c:windowsassemblyGAC_MSILSystem.DirectoryServices.Protocols2.0.0.0__b03f5f7f11d50a3aSystem.DirectoryServices.Protocols.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 970752 c:windowsassemblyGAC_MSILSystem.Deployment2.0.0.0__b03f5f7f11d50a3aSystem.Deployment.dll
+ 2010-10-03 15:12 . 2010-10-03 15:12 970752 c:windowsassemblyGAC_MSILSystem.Deployment2.0.0.0__b03f5f7f11d50a3aSystem.Deployment.dll
+ 2010-10-03 15:12 . 2010-10-03 15:12 745472 c:windowsassemblyGAC_MSILSystem.Data.SqlXml2.0.0.0__b77a5c561934e089System.Data.SqlXml.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 745472 c:windowsassemblyGAC_MSILSystem.Data.SqlXml2.0.0.0__b77a5c561934e089System.Data.SqlXml.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 425984 c:windowsassemblyGAC_MSILSystem.Configuration2.0.0.0__b03f5f7f11d50a3aSystem.configuration.dll
+ 2010-10-03 15:12 . 2010-10-03 15:12 425984 c:windowsassemblyGAC_MSILSystem.Configuration2.0.0.0__b03f5f7f11d50a3aSystem.configuration.dll
+ 2010-10-03 15:12 . 2010-10-03 15:12 110592 c:windowsassemblyGAC_MSILsysglobl2.0.0.0__b03f5f7f11d50a3asysglobl.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 110592 c:windowsassemblyGAC_MSILsysglobl2.0.0.0__b03f5f7f11d50a3asysglobl.dll
+ 2010-10-03 14:53 . 2010-10-03 14:53 110592 c:windowsassemblyGAC_MSILSMDiagnostics3.0.0.0__b77a5c561934e089SMdiagnostics.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 110592 c:windowsassemblyGAC_MSILSMDiagnostics3.0.0.0__b77a5c561934e089SMdiagnostics.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 659456 c:windowsassemblyGAC_MSILMicrosoft.VisualBasic8.0.0.0__b03f5f7f11d50a3aMicrosoft.VisualBasic.dll
+ 2010-10-03 15:13 . 2010-10-03 15:13 659456 c:windowsassemblyGAC_MSILMicrosoft.VisualBasic8.0.0.0__b03f5f7f11d50a3aMicrosoft.VisualBasic.dll
+ 2010-10-03 15:13 . 2010-10-03 15:13 372736 c:windowsassemblyGAC_MSILMicrosoft.VisualBasic.Compatibility8.0.0.0__b03f5f7f11d50a3aMicrosoft.VisualBasic.Compatibility.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 372736 c:windowsassemblyGAC_MSILMicrosoft.VisualBasic.Compatibility8.0.0.0__b03f5f7f11d50a3aMicrosoft.VisualBasic.Compatibility.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 110592 c:windowsassemblyGAC_MSILMicrosoft.VisualBasic.Compatibility.Data8.0.0.0__b03f5f7f11d50a3aMicrosoft.VisualBasic.Compatibility.Data.dll
+ 2010-10-03 15:13 . 2010-10-03 15:13 110592 c:windowsassemblyGAC_MSILMicrosoft.VisualBasic.Compatibility.Data8.0.0.0__b03f5f7f11d50a3aMicrosoft.VisualBasic.Compatibility.Data.dll
+ 2010-10-03 15:04 . 2010-10-03 15:04 339968 c:windowsassemblyGAC_MSILMicrosoft.ReportViewer.WinForms9.0.0.0__b03f5f7f11d50a3aMicrosoft.ReportViewer.WinForms.dll
— 2010-09-03 02:38 . 2010-09-03 02:38 339968 c:windowsassemblyGAC_MSILMicrosoft.ReportViewer.WinForms9.0.0.0__b03f5f7f11d50a3aMicrosoft.ReportViewer.WinForms.dll
+ 2010-10-03 15:04 . 2010-10-03 15:04 864256 c:windowsassemblyGAC_MSILMicrosoft.ReportViewer.WebForms9.0.0.0__b03f5f7f11d50a3aMicrosoft.ReportViewer.WebForms.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 749568 c:windowsassemblyGAC_MSILMicrosoft.JScript8.0.0.0__b03f5f7f11d50a3aMicrosoft.JScript.dll
+ 2010-10-03 15:13 . 2010-10-03 15:13 749568 c:windowsassemblyGAC_MSILMicrosoft.JScript8.0.0.0__b03f5f7f11d50a3aMicrosoft.JScript.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 655360 c:windowsassemblyGAC_MSILMicrosoft.Build.Tasks2.0.0.0__b03f5f7f11d50a3aMicrosoft.Build.Tasks.dll
+ 2010-10-03 15:12 . 2010-10-03 15:12 655360 c:windowsassemblyGAC_MSILMicrosoft.Build.Tasks2.0.0.0__b03f5f7f11d50a3aMicrosoft.Build.Tasks.dll
+ 2010-10-03 15:12 . 2010-10-03 15:12 348160 c:windowsassemblyGAC_MSILMicrosoft.Build.Engine2.0.0.0__b03f5f7f11d50a3aMicrosoft.Build.Engine.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 348160 c:windowsassemblyGAC_MSILMicrosoft.Build.Engine2.0.0.0__b03f5f7f11d50a3aMicrosoft.Build.Engine.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 507904 c:windowsassemblyGAC_MSILAspNetMMCExt2.0.0.0__b03f5f7f11d50a3aAspNetMMCExt.dll
+ 2010-10-03 15:12 . 2010-10-03 15:12 507904 c:windowsassemblyGAC_MSILAspNetMMCExt2.0.0.0__b03f5f7f11d50a3aAspNetMMCExt.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 261632 c:windowsassemblyGAC_32System.Transactions2.0.0.0__b77a5c561934e089System.Transactions.dll
+ 2010-10-03 15:13 . 2010-10-03 15:13 261632 c:windowsassemblyGAC_32System.Transactions2.0.0.0__b77a5c561934e089System.Transactions.dll
+ 2010-10-03 15:12 . 2010-10-03 15:12 113664 c:windowsassemblyGAC_32System.EnterpriseServices2.0.0.0__b03f5f7f11d50a3aSystem.EnterpriseServices.Wrapper.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 113664 c:windowsassemblyGAC_32System.EnterpriseServices2.0.0.0__b03f5f7f11d50a3aSystem.EnterpriseServices.Wrapper.dll
+ 2010-10-03 15:12 . 2010-10-03 15:12 258048 c:windowsassemblyGAC_32System.EnterpriseServices2.0.0.0__b03f5f7f11d50a3aSystem.EnterpriseServices.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 258048 c:windowsassemblyGAC_32System.EnterpriseServices2.0.0.0__b03f5f7f11d50a3aSystem.EnterpriseServices.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 486400 c:windowsassemblyGAC_32System.Data.OracleClient2.0.0.0__b77a5c561934e089System.Data.OracleClient.dll
+ 2010-10-03 15:12 . 2010-10-03 15:12 486400 c:windowsassemblyGAC_32System.Data.OracleClient2.0.0.0__b77a5c561934e089System.Data.OracleClient.dll
+ 2009-12-12 15:50 . 2010-04-06 00:52 2462720 c:windowssystem32WMVCore.dll
+ 2009-12-12 15:37 . 2010-06-24 21:30 1861248 c:windowssystem32win32k.sys
+ 2009-12-12 15:53 . 2010-06-24 12:26 1210368 c:windowssystem32urlmon.dll
+ 2009-12-12 15:52 . 2010-07-27 06:30 8479744 c:windowssystem32shell32.dll
+ 2009-12-12 15:52 . 2010-02-05 18:27 1293312 c:windowssystem32quartz.dll
+ 2009-12-12 15:37 . 2010-04-28 05:19 2148352 c:windowssystem32ntoskrnl.exe
+ 2009-08-04 20:23 . 2010-04-28 05:19 2026496 c:windowssystem32ntkrnlpa.exe
+ 2009-12-12 15:52 . 2010-06-14 07:43 1172480 c:windowssystem32msxml3.dll
+ 2009-12-12 15:51 . 2010-06-24 12:26 5951488 c:windowssystem32mshtml.dll
+ 2009-03-08 01:32 . 2010-06-24 12:26 1986560 c:windowssystem32iertutil.dll
— 2010-02-05 02:35 . 2010-09-03 11:10 1653496 c:windowssystem32FNTCACHE.DAT
+ 2010-02-05 02:35 . 2010-10-03 15:39 1653496 c:windowssystem32FNTCACHE.DAT
+ 2009-12-12 15:50 . 2010-04-06 00:52 2462720 c:windowssystem32dllcacheWMVCore.dll
+ 2009-12-12 15:37 . 2010-06-24 21:30 1861248 c:windowssystem32dllcachewin32k.sys
+ 2009-03-08 01:34 . 2010-06-24 12:26 1210368 c:windowssystem32dllcacheurlmon.dll
+ 2010-04-28 19:19 . 2010-04-28 19:19 2068736 c:windowssystem32dllcachentkrnlpa.exe
+ 2010-02-04 23:51 . 2010-01-29 14:54 1315328 c:windowssystem32dllcachemsoe.dll
— 2010-02-04 23:51 . 2009-12-12 15:37 1315328 c:windowssystem32dllcachemsoe.dll
+ 2009-03-08 01:41 . 2010-06-24 12:26 5951488 c:windowssystem32dllcachemshtml.dll
— 2010-02-04 23:51 . 2008-04-15 13:00 3558912 c:windowssystem32dllcachemoviemk.exe
+ 2010-02-04 23:51 . 2010-06-18 13:36 3558912 c:windowssystem32dllcachemoviemk.exe
+ 2010-02-07 21:34 . 2010-06-24 12:26 1986560 c:windowssystem32dllcacheiertutil.dll
+ 2009-11-06 21:06 . 2009-11-06 21:06 1130824 c:windowssystem32dfshim.dll
+ 2010-04-07 19:48 . 2010-04-07 19:48 5967872 c:windowsMicrosoft.NETFrameworkv3.0Windows Communication FoundationSystem.ServiceModel.dll
— 2008-11-25 01:59 . 2008-11-25 01:59 5242880 c:windowsMicrosoft.NETFrameworkv2.0.50727System.Web.dll
+ 2010-03-23 01:32 . 2010-03-23 01:32 5242880 c:windowsMicrosoft.NETFrameworkv2.0.50727System.Web.dll
+ 2010-03-23 01:32 . 2010-03-23 01:32 3182592 c:windowsMicrosoft.NETFrameworkv2.0.50727System.dll
+ 2010-05-11 02:40 . 2010-05-11 02:40 5812560 c:windowsMicrosoft.NETFrameworkv2.0.50727mscorwks.dll
— 2009-08-07 20:51 . 2009-08-07 20:51 5812560 c:windowsMicrosoft.NETFrameworkv2.0.50727mscorwks.dll
+ 2010-05-11 02:40 . 2010-05-11 02:40 4550656 c:windowsMicrosoft.NETFrameworkv2.0.50727mscorlib.dll
— 2008-05-27 22:35 . 2008-05-27 22:35 1265664 c:windowsMicrosoft.NETFrameworkv1.1.4322System.Web.dll
+ 2010-04-01 07:42 . 2010-04-01 07:42 1265664 c:windowsMicrosoft.NETFrameworkv1.1.4322System.Web.dll
— 2008-05-27 22:35 . 2008-05-27 22:35 1232896 c:windowsMicrosoft.NETFrameworkv1.1.4322System.dll
+ 2010-04-01 07:42 . 2010-04-01 07:42 1232896 c:windowsMicrosoft.NETFrameworkv1.1.4322System.dll
+ 2010-03-31 10:50 . 2010-03-31 10:50 2514944 c:windowsMicrosoft.NETFrameworkv1.1.4322mscorwks.dll
— 2008-05-27 21:48 . 2008-05-27 21:48 2514944 c:windowsMicrosoft.NETFrameworkv1.1.4322mscorwks.dll
+ 2010-03-31 10:50 . 2010-03-31 10:50 2527232 c:windowsMicrosoft.NETFrameworkv1.1.4322mscorsvr.dll
+ 2010-04-01 07:42 . 2010-04-01 07:42 2142208 c:windowsMicrosoft.NETFrameworkv1.1.4322mscorlib.dll
— 2008-05-27 21:43 . 2008-05-27 21:43 2142208 c:windowsMicrosoft.NETFrameworkv1.1.4322mscorlib.dll
+ 2010-08-05 09:33 . 2010-08-05 09:33 4034560 c:windowsInstaller1594f3.msp
+ 2009-10-16 14:07 . 2009-10-16 14:07 6115328 c:windowsInstaller1594d4.msp
+ 2010-06-28 12:01 . 2010-06-28 12:01 7677952 c:windowsInstaller1594bf.msp
+ 2010-05-25 07:45 . 2010-05-25 07:45 8445440 c:windowsInstaller159497.msp
+ 2010-06-11 13:55 . 2010-06-11 13:55 1827328 c:windowsInstaller159462.msp
+ 2010-05-03 12:11 . 2010-05-03 12:11 4149760 c:windowsInstaller15944a.msp
+ 2010-06-28 18:53 . 2010-06-28 18:53 6819840 c:windowsInstaller159436.msp
+ 2009-11-08 20:25 . 2009-11-08 20:25 1935360 c:windowsInstaller159415.msp
+ 2010-08-20 09:50 . 2010-08-20 09:50 5518848 c:windowsInstaller1593e7.msp
+ 2010-08-04 11:12 . 2010-08-04 11:12 1004544 c:windowsInstaller1593af.msp
+ 2010-08-25 13:06 . 2010-08-25 13:06 6479360 c:windowsInstaller1593a8.msp
+ 2010-04-11 18:17 . 2010-04-11 18:17 4210688 c:windowsInstaller159386.msp
+ 2010-04-11 18:17 . 2010-04-11 18:17 2607104 c:windowsInstaller159385.msp
+ 2010-04-24 13:10 . 2010-04-24 13:10 8486400 c:windowsInstaller159373.msp
+ 2010-07-10 16:14 . 2010-07-10 16:14 2850816 c:windowsInstaller15936b.msp
+ 2010-05-03 12:06 . 2010-05-03 12:06 5053952 c:windowsInstaller159363.msp
+ 2007-04-19 10:49 . 2007-04-19 10:49 1661280 c:windowsInstaller$PatchCache$Managed9140111900063D11C8EF10054038389C11.0.8173PPTVIEW.EXE
+ 2007-05-10 10:43 . 2007-05-10 10:43 6688096 c:windowsInstaller$PatchCache$Managed9140111900063D11C8EF10054038389C11.0.8173MSACCESS.EXE
+ 2008-07-29 16:59 . 2008-07-29 16:59 1245184 c:windowsInstaller$PatchCache$ManagedDC1503A46F231838AD88BCDDC8E8F7C3.2.30729WindowsBase_x86.dll
+ 2010-02-05 00:19 . 2010-02-05 00:19 1245184 c:windowsInstaller$PatchCache$ManagedDC1503A46F231838AD88BCDDC8E8F7C3.2.30729WindowsBase_GAC_x86.dll
+ 2008-12-05 16:30 . 2008-12-05 16:30 5283840 c:windowsInstaller$PatchCache$ManagedDC1503A46F231838AD88BCDDC8E8F7C3.2.30729PresentationFramework_x86.dll
+ 2010-02-05 00:19 . 2010-02-05 00:19 5283840 c:windowsInstaller$PatchCache$ManagedDC1503A46F231838AD88BCDDC8E8F7C3.2.30729PresentationFramework_GAC_x86.dll
+ 2008-07-29 16:59 . 2008-07-29 16:59 4210688 c:windowsInstaller$PatchCache$ManagedDC1503A46F231838AD88BCDDC8E8F7C3.2.30729PresentationCore_x86.dll
+ 2010-02-05 00:19 . 2010-02-05 00:19 4210688 c:windowsInstaller$PatchCache$ManagedDC1503A46F231838AD88BCDDC8E8F7C3.2.30729PresentationCore_GAC_x86.dll
+ 2009-08-20 14:23 . 2009-08-20 14:23 4672872 c:windowsInstaller$PatchCache$Managed0002109020091400000000000F01FEC12.0.6514WRD12CNV.DLL
+ 2010-10-03 15:06 . 2009-12-21 19:08 1208832 c:windowsie8updatesKB2183461-IE8urlmon.dll
+ 2010-10-03 15:06 . 2009-12-21 19:08 5942784 c:windowsie8updatesKB2183461-IE8mshtml.dll
+ 2010-10-03 15:06 . 2009-12-21 19:08 1985536 c:windowsie8updatesKB2183461-IE8iertutil.dll
+ 2010-10-03 14:40 . 2010-04-28 05:19 2191872 c:windowsDriver Cachei386ntoskrnl.exe
+ 2010-10-03 14:40 . 2010-04-28 05:19 2026496 c:windowsDriver Cachei386ntkrpamp.exe
+ 2010-04-28 19:19 . 2010-04-28 19:19 2068736 c:windowsDriver Cachei386ntkrnlpa.exe
+ 2010-10-03 14:40 . 2010-04-28 05:19 2148352 c:windowsDriver Cachei386ntkrnlmp.exe
+ 2010-10-03 15:21 . 2010-10-03 15:21 4792320 c:windowsassemblyNativeImages1_v1.1.4322System1.0.5000.0__b77a5c561934e089_3e833f2fSystem.dll
+ 2010-10-03 15:21 . 2010-10-03 15:21 1966080 c:windowsassemblyNativeImages1_v1.1.4322System1.0.5000.0__b77a5c561934e089_29628c33System.dll
+ 2010-10-03 15:21 . 2010-10-03 15:21 2088960 c:windowsassemblyNativeImages1_v1.1.4322System.Xml1.0.5000.0__b77a5c561934e089_fa785ce9System.Xml.dll
+ 2010-10-03 15:21 . 2010-10-03 15:21 5513216 c:windowsassemblyNativeImages1_v1.1.4322System.Xml1.0.5000.0__b77a5c561934e089_77d3777bSystem.Xml.dll
+ 2010-10-03 15:21 . 2010-10-03 15:21 3018752 c:windowsassemblyNativeImages1_v1.1.4322System.Windows.Forms1.0.5000.0__b77a5c561934e089_b9e8b87cSystem.Windows.Forms.dll
+ 2010-10-03 15:21 . 2010-10-03 15:21 7884800 c:windowsassemblyNativeImages1_v1.1.4322System.Windows.Forms1.0.5000.0__b77a5c561934e089_136a46aeSystem.Windows.Forms.dll
+ 2010-10-03 15:21 . 2010-10-03 15:21 2244608 c:windowsassemblyNativeImages1_v1.1.4322System.Drawing1.0.5000.0__b03f5f7f11d50a3a_85528ff8System.Drawing.dll
+ 2010-10-03 15:21 . 2010-10-03 15:21 3395584 c:windowsassemblyNativeImages1_v1.1.4322System.Design1.0.5000.0__b03f5f7f11d50a3a_440eaf12System.Design.dll
+ 2010-10-03 15:21 . 2010-10-03 15:21 1470464 c:windowsassemblyNativeImages1_v1.1.4322System.Design1.0.5000.0__b03f5f7f11d50a3a_2b24ddddSystem.Design.dll
+ 2010-10-03 15:22 . 2010-10-03 15:22 8908800 c:windowsassemblyNativeImages1_v1.1.4322mscorlib1.0.5000.0__b77a5c561934e089_f84db116mscorlib.dll
+ 2010-10-03 15:21 . 2010-10-03 15:21 3391488 c:windowsassemblyNativeImages1_v1.1.4322mscorlib1.0.5000.0__b77a5c561934e089_e1723357mscorlib.dll
+ 2010-10-03 15:14 . 2010-10-03 15:14 3325440 c:windowsassemblyNativeImages_v2.0.50727_32WindowsBasecec7ecb8eac09dd630d180ce87d23b80WindowsBase.ni.dll
+ 2010-10-03 15:10 . 2010-10-03 15:10 3313664 c:windowsassemblyNativeImages_v2.0.50727_32WindowsBase3b743d968b43ce8025fccd58c251e4c4WindowsBase.ni.dll
+ 2010-10-03 15:15 . 2010-10-03 15:15 1049600 c:windowsassemblyNativeImages_v2.0.50727_32UIAutomationClients#b7f6e7b265f9aae807ddc4284563e550UIAutomationClientsideProviders.ni.dll
+ 2010-10-03 15:10 . 2010-10-03 15:10 7949824 c:windowsassemblyNativeImages_v2.0.50727_32System8ffa4d388d5f007869aa7651c458e7cSystem.ni.dll
+ 2010-10-03 15:15 . 2010-10-03 15:15 5450752 c:windowsassemblyNativeImages_v2.0.50727_32System.Xmla6dbe24cbfe3ab6b318ed3095cc572d8System.Xml.ni.dll
+ 2010-10-03 15:22 . 2010-10-03 15:22 1356288 c:windowsassemblyNativeImages_v2.0.50727_32System.WorkflowServ#60b3c9a63b2065a6952d16256545c25dSystem.WorkflowServices.ni.dll
+ 2010-10-03 15:22 . 2010-10-03 15:22 1908224 c:windowsassemblyNativeImages_v2.0.50727_32System.Workflow.Run#5cc2a23ce8ac371c7a97b5e542ee27edSystem.Workflow.Runtime.ni.dll
+ 2010-10-03 15:22 . 2010-10-03 15:22 4514304 c:windowsassemblyNativeImages_v2.0.50727_32System.Workflow.Com#c0aabf67e7ef98dc10c3e174c136731bSystem.Workflow.ComponentModel.ni.dll
+ 2010-10-03 15:22 . 2010-10-03 15:22 2992640 c:windowsassemblyNativeImages_v2.0.50727_32System.Workflow.Act#66682c8a064608ba4ffd0463cf09aef9System.Workflow.Activities.ni.dll
+ 2010-10-03 15:18 . 2010-10-03 15:18 1840640 c:windowsassemblyNativeImages_v2.0.50727_32System.Web.Services2d662564b8d9c57a34c588cc2970902bSystem.Web.Services.ni.dll
+ 2010-10-03 15:22 . 2010-10-03 15:22 2209280 c:windowsassemblyNativeImages_v2.0.50727_32System.Web.Mobile9b455702c9b7b02c5708406f87986751System.Web.Mobile.ni.dll
+ 2010-10-03 15:21 . 2010-10-03 15:21 2403328 c:windowsassemblyNativeImages_v2.0.50727_32System.Web.Extensio#49c7a1c78ed9502ba97c11e6bd993f63System.Web.Extensions.ni.dll
+ 2010-10-03 15:15 . 2010-10-03 15:15 1917952 c:windowsassemblyNativeImages_v2.0.50727_32System.Speech5eb08849d17b272ed2a393420cb0305bSystem.Speech.ni.dll
+ 2010-10-03 15:21 . 2010-10-03 15:21 1706496 c:windowsassemblyNativeImages_v2.0.50727_32System.ServiceModel#f5790a1b7b41e7b8d05f01b549c80f39System.ServiceModel.Web.ni.dll
+ 2010-10-03 15:19 . 2010-10-03 15:19 2345472 c:windowsassemblyNativeImages_v2.0.50727_32System.Runtime.Seri#8061a0f5c1c2ee0549e19224352f67faSystem.Runtime.Serialization.ni.dll
+ 2010-10-03 15:15 . 2010-10-03 15:15 1035776 c:windowsassemblyNativeImages_v2.0.50727_32System.Printing99767d4df92b83fdfb06012512722ec1System.Printing.ni.dll
+ 2010-10-03 15:19 . 2010-10-03 15:19 1070080 c:windowsassemblyNativeImages_v2.0.50727_32System.IdentityModel885f31c21b796465fde6297dba20981System.IdentityModel.ni.dll
+ 2010-10-03 15:15 . 2010-10-03 15:15 1587200 c:windowsassemblyNativeImages_v2.0.50727_32System.Drawingdcc0244092fe52e6885b50be25ef3b31System.Drawing.ni.dll
+ 2010-10-03 15:18 . 2010-10-03 15:18 1116672 c:windowsassemblyNativeImages_v2.0.50727_32System.DirectorySer#d20b7e58607ddb1ded9b687627ae8c21System.DirectoryServices.ni.dll
+ 2010-10-03 15:18 . 2010-10-03 15:18 1801216 c:windowsassemblyNativeImages_v2.0.50727_32System.Deploymentdaa33674d4250e38a24b70180d209ac8System.Deployment.ni.dll
+ 2010-10-03 15:13 . 2010-10-03 15:13 6616576 c:windowsassemblyNativeImages_v2.0.50727_32System.Dataf04ef00e652a8655a717639e8aeb7b63System.Data.ni.dll
+ 2010-10-03 15:18 . 2010-10-03 15:18 2510336 c:windowsassemblyNativeImages_v2.0.50727_32System.Data.SqlXmlf0470c2be4e6bb1dadbeed43e4e8af5cSystem.Data.SqlXml.ni.dll
+ 2010-10-03 15:21 . 2010-10-03 15:21 1328128 c:windowsassemblyNativeImages_v2.0.50727_32System.Data.Services23cf0498f2ebe4c8ffa5cc79efca2dc5System.Data.Services.ni.dll
+ 2010-10-03 15:18 . 2010-10-03 15:18 1115136 c:windowsassemblyNativeImages_v2.0.50727_32System.Data.OracleC#58202ed61096113d08815c0a78313b66System.Data.OracleClient.ni.dll
+ 2010-10-03 15:13 . 2010-10-03 15:13 2516480 c:windowsassemblyNativeImages_v2.0.50727_32System.Data.Linqc18c236a09e715138daec2e25be205bbSystem.Data.Linq.ni.dll
+ 2010-10-03 15:20 . 2010-10-03 15:20 9924096 c:windowsassemblyNativeImages_v2.0.50727_32System.Data.Entity6ce886492d9b6a34555be3f328682ec2System.Data.Entity.ni.dll
+ 2010-10-03 15:12 . 2010-10-03 15:12 2295296 c:windowsassemblyNativeImages_v2.0.50727_32System.Corefaeda674832135a080bc73eda51813ffSystem.Core.ni.dll
+ 2010-10-03 15:11 . 2010-10-03 15:11 2128896 c:windowsassemblyNativeImages_v2.0.50727_32ReachFrameworkf2a2f7ea27dc14ff582d6e501e4e4253ReachFramework.ni.dll
+ 2010-10-03 15:14 . 2010-10-03 15:14 2128896 c:windowsassemblyNativeImages_v2.0.50727_32ReachFramework3e85c3d63ce3c3f37061aa626feb2a52ReachFramework.ni.dll
+ 2010-10-03 15:11 . 2010-10-03 15:11 1657856 c:windowsassemblyNativeImages_v2.0.50727_32PresentationUIe0b5bdf9438a0c2e8fc6b4b6b66c8d86PresentationUI.ni.dll
+ 2010-10-03 15:14 . 2010-10-03 15:14 1657856 c:windowsassemblyNativeImages_v2.0.50727_32PresentationUIbf67db30179ff6e8cb1bdbaa290d122ePresentationUI.ni.dll
+ 2010-10-03 15:10 . 2010-10-03 15:10 1451008 c:windowsassemblyNativeImages_v2.0.50727_32PresentationBuildTa#835786d8a0caabae09ad440f6e3abfc6PresentationBuildTasks.ni.dll
+ 2010-10-03 15:20 . 2010-10-03 15:20 1712128 c:windowsassemblyNativeImages_v2.0.50727_32Microsoft.VisualBas#9732a7c993055f82040642966db07ccfMicrosoft.VisualBasic.ni.dll
+ 2010-10-03 15:19 . 2010-10-03 15:19 1093120 c:windowsassemblyNativeImages_v2.0.50727_32Microsoft.Transacti#773d7bf69a9a0c0556aa41f53e75ab05Microsoft.Transactions.Bridge.ni.dll
+ 2010-10-03 15:21 . 2010-10-03 15:21 2332160 c:windowsassemblyNativeImages_v2.0.50727_32Microsoft.JScript16ff33f07efdb9da2a18e27585c604beMicrosoft.JScript.ni.dll
+ 2010-10-03 15:20 . 2010-10-03 15:20 1620992 c:windowsassemblyNativeImages_v2.0.50727_32Microsoft.Build.Tas#d0fb91b296616a1a844bf265947018eeMicrosoft.Build.Tasks.ni.dll
+ 2010-10-03 15:20 . 2010-10-03 15:20 1966080 c:windowsassemblyNativeImages_v2.0.50727_32Microsoft.Build.Tas#892e993c8df1c75081113131dc429c15Microsoft.Build.Tasks.v3.5.ni.dll
+ 2010-10-03 15:20 . 2010-10-03 15:20 1888768 c:windowsassemblyNativeImages_v2.0.50727_32Microsoft.Build.Eng#d0beebd2c9045158cdcd4bd5987b717bMicrosoft.Build.Engine.ni.dll
+ 2010-10-03 15:19 . 2010-10-03 15:19 1165824 c:windowsassemblyNativeImages_v2.0.50727_32InvAIRLookContentb9f761ca1c2273ccd9906fd63423667InvAIRLookContent.ni.dll
+ 2010-10-03 15:18 . 2010-10-03 15:18 4389376 c:windowsassemblyNativeImages_v2.0.50727_32AdWindows637ef40d40f61863a2ea81a9b6a8e2bbAdWindows.ni.dll
+ 2010-10-03 15:17 . 2010-10-03 15:17 4387328 c:windowsassemblyNativeImages_v2.0.50727_32AdWindows1f1ac2f8bafbe3979602a3d8c2702f62AdWindows.ni.dll
+ 2010-10-03 15:17 . 2010-10-03 15:17 2206720 c:windowsassemblyNativeImages_v2.0.50727_32AcWindowse0d282d65ef40adf36a5943e0aa6e5f7AcWindows.ni.dll
+ 2010-10-03 15:17 . 2010-10-03 15:17 2205696 c:windowsassemblyNativeImages_v2.0.50727_32AcWindows53a5145fda88f26b9186f4760865b4bcAcWindows.ni.dll
+ 2010-10-03 15:17 . 2010-10-03 15:17 5229056 c:windowsassemblyNativeImages_v2.0.50727_32acmgd6d58469ca2b8ae2d184a2c850fff6510acmgd.ni.dll
+ 2010-10-03 15:17 . 2010-10-03 15:17 5277184 c:windowsassemblyNativeImages_v2.0.50727_32acmgd36e7d37b213611abe75f935c6a620524acmgd.ni.dll
+ 2010-10-03 15:17 . 2010-10-03 15:17 1468928 c:windowsassemblyNativeImages_v2.0.50727_32AcLayer809cf2f5005e6cb32a7db3cb77805d84AcLayer.ni.dll
+ 2010-10-03 15:17 . 2010-10-03 15:17 1469440 c:windowsassemblyNativeImages_v2.0.50727_32AcLayer3dce01a79023cdf8a4e7a4ceb92c0888AcLayer.ni.dll
+ 2010-10-03 15:17 . 2010-10-03 15:17 1598464 c:windowsassemblyNativeImages_v2.0.50727_32AcCui3b274caef61d58e6accb5d67b0bbe3b7AcCui.ni.dll
+ 2010-10-03 15:16 . 2010-10-03 15:16 1609216 c:windowsassemblyNativeImages_v2.0.50727_32AcCui8035d7aa7a7cb297927a46db1d72ab9AcCui.ni.dll
+ 2010-10-03 15:13 . 2010-10-03 15:13 1249280 c:windowsassemblyGAC_MSILWindowsBase3.0.0.0__31bf3856ad364e35WindowsBase.dll
+ 2010-10-03 15:12 . 2010-10-03 15:12 3182592 c:windowsassemblyGAC_MSILSystem2.0.0.0__b77a5c561934e089System.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 2048000 c:windowsassemblyGAC_MSILSystem.Xml2.0.0.0__b77a5c561934e089System.XML.dll
+ 2010-10-03 15:12 . 2010-10-03 15:12 2048000 c:windowsassemblyGAC_MSILSystem.Xml2.0.0.0__b77a5c561934e089System.XML.dll
+ 2010-10-03 15:13 . 2010-10-03 15:13 5025792 c:windowsassemblyGAC_MSILSystem.Windows.Forms2.0.0.0__b77a5c561934e089System.Windows.Forms.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 5025792 c:windowsassemblyGAC_MSILSystem.Windows.Forms2.0.0.0__b77a5c561934e089System.Windows.Forms.dll
+ 2010-10-03 14:53 . 2010-10-03 14:53 5967872 c:windowsassemblyGAC_MSILSystem.ServiceModel3.0.0.0__b77a5c561934e089System.ServiceModel.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 5062656 c:windowsassemblyGAC_MSILSystem.Design2.0.0.0__b03f5f7f11d50a3aSystem.Design.dll
+ 2010-10-03 15:13 . 2010-10-03 15:13 5062656 c:windowsassemblyGAC_MSILSystem.Design2.0.0.0__b03f5f7f11d50a3aSystem.Design.dll
+ 2010-10-03 15:13 . 2010-10-03 15:13 5279744 c:windowsassemblyGAC_MSILPresentationFramework3.0.0.0__31bf3856ad364e35PresentationFramework.dll
— 2010-09-03 02:38 . 2010-09-03 02:38 3649536 c:windowsassemblyGAC_MSILMicrosoft.ReportViewer.Common9.0.0.0__b03f5f7f11d50a3aMicrosoft.ReportViewer.Common.dll
+ 2010-10-03 15:04 . 2010-10-03 15:04 3649536 c:windowsassemblyGAC_MSILMicrosoft.ReportViewer.Common9.0.0.0__b03f5f7f11d50a3aMicrosoft.ReportViewer.Common.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 5242880 c:windowsassemblyGAC_32System.Web2.0.0.0__b03f5f7f11d50a3aSystem.Web.dll
+ 2010-10-03 15:12 . 2010-10-03 15:12 5242880 c:windowsassemblyGAC_32System.Web2.0.0.0__b03f5f7f11d50a3aSystem.Web.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 2933248 c:windowsassemblyGAC_32System.Data2.0.0.0__b77a5c561934e089System.Data.dll
+ 2010-10-03 15:12 . 2010-10-03 15:12 2933248 c:windowsassemblyGAC_32System.Data2.0.0.0__b77a5c561934e089System.Data.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 4210688 c:windowsassemblyGAC_32PresentationCore3.0.0.0__31bf3856ad364e35PresentationCore.dll
+ 2010-10-03 15:13 . 2010-10-03 15:13 4210688 c:windowsassemblyGAC_32PresentationCore3.0.0.0__31bf3856ad364e35PresentationCore.dll
+ 2010-10-03 15:12 . 2010-10-03 15:12 4550656 c:windowsassemblyGAC_32mscorlib2.0.0.0__b77a5c561934e089mscorlib.dll
+ 2010-10-03 15:21 . 2010-10-03 15:21 1232896 c:windowsassemblyGACSystem1.0.5000.0__b77a5c561934e089System.dll
— 2010-02-05 00:17 . 2010-02-05 00:17 1232896 c:windowsassemblyGACSystem1.0.5000.0__b77a5c561934e089System.dll
— 2010-02-05 00:17 . 2010-02-05 00:17 1265664 c:windowsassemblyGACSystem.Web1.0.5000.0__b03f5f7f11d50a3aSystem.Web.dll
+ 2010-10-03 15:21 . 2010-10-03 15:21 1265664 c:windowsassemblyGACSystem.Web1.0.5000.0__b03f5f7f11d50a3aSystem.Web.dll
+ 2010-02-07 21:30 . 2010-09-10 10:34 35552200 c:windowssystem32MRT.exe
+ 2009-03-08 01:39 . 2010-06-24 13:56 11077120 c:windowssystem32ieframe.dll
+ 2010-02-07 21:34 . 2010-06-24 13:56 11077120 c:windowssystem32dllcacheieframe.dll
+ 2010-04-02 15:29 . 2010-04-02 15:29 11413504 c:windowsMicrosoft.NETFrameworkv1.1.4322UpdatesM979906M979906Uninstall.msp
+ 2010-05-11 07:30 . 2010-05-11 07:30 11194880 c:windowsInstaller1594ab.msp
+ 2010-10-03 15:20 . 2010-10-03 15:20 17456640 c:windowsInstaller159483.msp
+ 2010-04-24 13:09 . 2010-04-24 13:09 11750912 c:windowsInstaller15946b.msp
+ 2010-06-11 13:52 . 2010-06-11 13:52 45542912 c:windowsInstaller159463.msp
+ 2010-03-30 21:23 . 2010-03-30 21:23 15638528 c:windowsInstaller159421.msp
+ 2010-05-19 09:08 . 2010-05-19 09:08 11408896 c:windowsInstaller1593fb.msp
+ 2010-10-03 15:05 . 2010-10-03 15:05 20303872 c:windowsInstaller1593f2.msp
+ 2010-04-11 18:17 . 2010-04-11 18:17 14599680 c:windowsInstaller159394.msp
+ 2009-08-17 14:39 . 2009-08-17 14:39 15119720 c:windowsInstaller$PatchCache$Managed0002109020091400000000000F01FEC12.0.6514XL12CNV.EXE
+ 2009-08-17 13:40 . 2009-08-17 13:40 17309040 c:windowsInstaller$PatchCache$Managed0002109020091400000000000F01FEC12.0.6514MSO.DLL
+ 2010-10-03 15:06 . 2009-12-21 19:08 11070464 c:windowsie8updatesKB2183461-IE8ieframe.dll
+ 2010-10-03 15:15 . 2010-10-03 15:15 12430848 c:windowsassemblyNativeImages_v2.0.50727_32System.Windows.Forms439c466b60614915587c5273eaf0ca7fSystem.Windows.Forms.ni.dll
+ 2010-10-03 15:18 . 2010-10-03 15:18 11798016 c:windowsassemblyNativeImages_v2.0.50727_32System.Web411a627d6f5cb83509332253406988e5System.Web.ni.dll
+ 2010-10-03 15:19 . 2010-10-03 15:19 17403904 c:windowsassemblyNativeImages_v2.0.50727_32System.ServiceModelf523a69e7c93ee4f245c996eac4b3a57System.ServiceModel.ni.dll
+ 2010-10-03 15:14 . 2010-10-03 15:15 10683392 c:windowsassemblyNativeImages_v2.0.50727_32System.Designb307acf63075b997d02a97a7492d0d9cSystem.Design.ni.dll
+ 2010-10-03 15:14 . 2010-10-03 15:14 14328320 c:windowsassemblyNativeImages_v2.0.50727_32PresentationFramewo#a632f3ef85ffd35341b383eed577cb93PresentationFramework.ni.dll
+ 2010-10-03 15:11 . 2010-10-03 15:11 14327808 c:windowsassemblyNativeImages_v2.0.50727_32PresentationFramewo#29dddf52a204b46edf577bbd548d1bddPresentationFramework.ni.dll
+ 2010-10-03 15:14 . 2010-10-03 15:14 12215808 c:windowsassemblyNativeImages_v2.0.50727_32PresentationCoref00db8db51f5707c7fe52c0683dc6136PresentationCore.ni.dll
+ 2010-10-03 15:10 . 2010-10-03 15:10 12216320 c:windowsassemblyNativeImages_v2.0.50727_32PresentationCorea6d35f1f179b6bc42bf2b3c4506fbb03PresentationCore.ni.dll
+ 2010-10-03 15:10 . 2010-10-03 15:10 11490816 c:windowsassemblyNativeImages_v2.0.50727_32mscorlib7bffd7ff2009f421fe5d229927588496mscorlib.ni.dll
+ 2010-10-03 15:17 . 2010-10-03 15:17 10113024 c:windowsassemblyNativeImages_v2.0.50727_32acdbmgd65422fc9df0e9304883a1978664095f0acdbmgd.ni.dll
.
— Snapshot reset to current date —
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4[HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionRun]
«VistaIcon»=»c:program filesVistaDriveIconVistaDrv.exe» [2008-01-02 132096]
«AlSrvN»=»c:program filesAlcohol SoftAlcohol 120PluginsHelperAlSrvN.exe» [2009-04-17 53248]
«uTorrent»=»c:program filesuTorrentuTorrent.exe» [2010-02-05 319280][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun]
«NvMediaCenter»=»c:windowssystem32NvMcTray.dll» [2009-11-20 110184]
«NvCplDaemon»=»c:windowssystem32NvCpl.dll» [2009-11-20 12669544]
«USB Antivirus»=»c:program filesUSBDiskSecurityUSBGuard.exe» [2009-10-13 815104]
«Gainward»=»c:program filesVDOToolTBPanel.exe» [2006-09-13 2154496]
«SpIDerAgent»=»c:program filesDrWebSpIDerAgent.exe» [2010-02-15 447728]
«SpIDerMail»=»c:program filesDrWebspiderml.exe» [2009-06-30 644336]
«EEventManager»=»c:program filesEPSONCreativity SuiteEvent ManagerEEventManager.exe» [2006-03-17 102400]
«Adobe Reader Speed Launcher»=»c:program filesAdobeReader 9.0ReaderReader_sl.exe» [2010-06-20 35760]
«Adobe ARM»=»c:program filesCommon FilesAdobeARM1.0AdobeARM.exe» [2010-06-09 976832]
«NeroFilterCheck»=»c:windowssystem32NeroCheck.exe» [2006-01-12 155648]
«InCD»=»c:program filesNeroNero 7InCDInCD.exe» [2005-12-30 878080][HKEY_USERS.DEFAULTSoftwareMicrosoftWindowsCurrentVersionRun]
«VistaIcon»=»c:program filesVistaDriveIconVistaDrv.exe» [2008-01-02 132096][HKEY_USERS.DEFAULTSoftwareMicrosoftWindowsCurrentVersionRunOnce]
«ZZZZ2_FirstLogonSetting»=»advpack.dll» [2009-03-08 128512]c:documents and settingsAdminѓ« ў®Ґ ¬ҐоЏа®Ја ¬¬лЂўв®§ Јаг§Є
Punto Switcher.lnk — c:program filesYandexPunto Switcherpunto.exe [2010-2-5 830248]c:documents and settingsAll Usersѓ« ў®Ґ ¬ҐоЏа®Ја ¬¬лЂўв®§ Јаг§Є
EPSON Status Monitor 3 Environment Check(3).lnk — c:windowssystem32spooldriversw32x863E_SRCV03.EXE [2001-6-24 128000][HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionpoliciesexplorer]
«NoSMConfigurePrograms»= 1 (0x1)[HKEY_USERS.defaultsoftwaremicrosoftwindowscurrentversionpoliciesexplorer]
«NoSMConfigurePrograms»= 1 (0x1)[HKEY_LOCAL_MACHINEsoftwaremicrosoftwindows ntcurrentversionwinlogon]
«Userinit»=»c:windowssystem32userinit.exe,c:windowssystem32a1f77903.exe,c:windowssystem32lvotoo.exe,»[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicestcpipparameterspersistentroutes]
«128.130.56.0,255.255.255.0,192.168.1.0,1»=»»
«128.111.48.0,255.255.255.0,192.168.1.0,1»=»»
«128.130.60.0,255.255.255.0,192.168.1.0,1»=»»
«139.91.222.0,255.255.255.0,192.168.1.0,1»=»»
«141.202.248.0,255.255.255.0,192.168.1.0,1»=»»
«149.101.225.0,255.255.255.0,192.168.1.0,1»=»»
«150.70.93.0,255.255.255.0,192.168.1.0,1»=»»
«155.35.248.0,255.255.255.0,192.168.1.0,1»=»»
«162.40.10.0,255.255.255.0,192.168.1.0,1»=»»
«165.160.15.0,255.255.255.0,192.168.1.0,1»=»»
«166.70.98.0,255.255.255.0,192.168.1.0,1»=»»
«18.85.2.0,255.255.255.0,192.168.1.0,1»=»»
«188.93.8.0,255.255.255.0,192.168.1.0,1»=»»
«192.150.94.0,255.255.255.0,192.168.1.0,1»=»»
«193.0.6.0,255.255.255.0,192.168.1.0,1»=»»
«193.1.193.0,255.255.255.0,192.168.1.0,1»=»»
«193.110.109.0,255.255.255.0,192.168.1.0,1»=»»
«193.17.85.0,255.255.255.0,192.168.1.0,1»=»»
«193.193.194.0,255.255.255.0,192.168.1.0,1»=»»
«193.24.237.0,255.255.255.0,192.168.1.0,1»=»»
«193.66.251.0,255.255.255.0,192.168.1.0,1»=»»
«193.69.114.0,255.255.255.0,192.168.1.0,1»=»»
«193.71.68.0,255.255.255.0,192.168.1.0,1»=»»
«194.0.200.0,255.255.255.0,192.168.1.0,1»=»»
«194.109.142.0,255.255.255.0,192.168.1.0,1»=»»
«194.112.106.0,255.255.255.0,192.168.1.0,1»=»»
«194.206.126.0,255.255.255.0,192.168.1.0,1»=»»
«194.33.180.0,255.255.255.0,192.168.1.0,1»=»»
«195.137.160.0,255.255.255.0,192.168.1.0,1»=»»
«195.146.235.0,255.255.255.0,192.168.1.0,1»=»»
«195.2.240.0,255.255.255.0,192.168.1.0,1»=»»
«195.210.42.0,255.255.255.0,192.168.1.0,1»=»»
«195.55.72.0,255.255.255.0,192.168.1.0,1»=»»
«195.64.225.0,255.255.255.0,192.168.1.0,1»=»»
«195.70.37.0,255.255.255.0,192.168.1.0,1»=»»
«198.6.49.0,255.255.255.0,192.168.1.0,1»=»»
«199.203.243.0,255.255.255.0,192.168.1.0,1»=»»
«203.160.188.0,255.255.255.0,192.168.1.0,1»=»»
«204.14.90.0,255.255.255.0,192.168.1.0,1»=»»
«205.178.145.0,255.255.255.0,192.168.1.0,1»=»»
«205.227.136.0,255.255.255.0,192.168.1.0,1»=»»
«206.204.52.0,255.255.255.0,192.168.1.0,1»=»»
«207.44.154.0,255.255.255.0,192.168.1.0,1»=»»
«207.46.18.0,255.255.255.0,192.168.1.0,1»=»»
«207.46.20.0,255.255.255.0,192.168.1.0,1»=»»
«207.46.232.0,255.255.255.0,192.168.1.0,1»=»»
«207.66.0.0,255.255.255.0,192.168.1.0,1»=»»
«208.79.250.0,255.255.255.0,192.168.1.0,1»=»»
«209.124.55.0,255.255.255.0,192.168.1.0,1»=»»
«209.157.69.0,255.255.255.0,192.168.1.0,1»=»»
«209.160.22.0,255.255.255.0,192.168.1.0,1»=»»
«209.216.46.0,255.255.255.0,192.168.1.0,1»=»»
«209.51.167.0,255.255.255.0,192.168.1.0,1»=»»
«209.62.112.0,255.255.255.0,192.168.1.0,1»=»»
«209.62.68.0,255.255.255.0,192.168.1.0,1»=»»
«209.87.209.0,255.255.255.0,192.168.1.0,1»=»»
«212.47.219.0,255.255.255.0,192.168.1.0,1»=»»
«212.67.88.0,255.255.255.0,192.168.1.0,1»=»»
«212.72.62.0,255.255.255.0,192.168.1.0,1»=»»
«212.8.79.0,255.255.255.0,192.168.1.0,1»=»»
«213.133.34.0,255.255.255.0,192.168.1.0,1»=»»
«213.171.218.0,255.255.255.0,192.168.1.0,1»=»»
«213.198.89.0,255.255.255.0,192.168.1.0,1»=»»
«213.220.100.0,255.255.255.0,192.168.1.0,1»=»»
«213.31.172.0,255.255.255.0,192.168.1.0,1»=»»
«216.10.192.0,255.255.255.0,192.168.1.0,1»=»»
«216.12.145.0,255.255.255.0,192.168.1.0,1»=»»
«216.239.122.0,255.255.255.0,192.168.1.0,1»=»»
«216.246.90.0,255.255.255.0,192.168.1.0,1»=»»
«216.49.88.0,255.255.255.0,192.168.1.0,1»=»»
«216.49.94.0,255.255.255.0,192.168.1.0,1»=»»
«216.55.183.0,255.255.255.0,192.168.1.0,1»=»»
«216.99.133.0,255.255.255.0,192.168.1.0,1»=»»
«217.16.16.0,255.255.255.0,192.168.1.0,1»=»»
«217.106.234.0,255.255.255.0,192.168.1.0,1»=»»
«217.170.21.0,255.255.255.0,192.168.1.0,1»=»»
«217.174.103.0,255.255.255.0,192.168.1.0,1»=»»
«38.113.1.0,255.255.255.0,192.168.1.0,1»=»»
«62.14.249.0,255.255.255.0,192.168.1.0,1»=»»
«62.146.210.0,255.255.255.0,192.168.1.0,1»=»»
«62.146.66.0,255.255.255.0,192.168.1.0,1»=»»
«62.189.194.0,255.255.255.0,192.168.1.0,1»=»»
«62.213.110.0,255.255.255.0,192.168.1.0,1»=»»
«62.75.163.0,255.255.255.0,192.168.1.0,1»=»»
«62.75.216.0,255.255.255.0,192.168.1.0,1»=»»
«63.85.36.0,255.255.255.0,192.168.1.0,1»=»»
«64.128.133.0,255.255.255.0,192.168.1.0,1»=»»
«64.13.134.0,255.255.255.0,192.168.1.0,1»=»»
«64.202.189.0,255.255.255.0,192.168.1.0,1»=»»
«64.246.4.0,255.255.255.0,192.168.1.0,1»=»»
«64.41.142.0,255.255.255.0,192.168.1.0,1»=»»
«64.41.151.0,255.255.255.0,192.168.1.0,1»=»»
«64.66.190.0,255.255.255.0,192.168.1.0,1»=»»
«64.78.182.0,255.255.255.0,192.168.1.0,1»=»»
«65.175.38.0,255.255.255.0,192.168.1.0,1»=»»
«66.223.50.0,255.255.255.0,192.168.1.0,1»=»»
«65.55.184.0,255.255.255.0,192.168.1.0,1»=»»
«65.55.240.0,255.255.255.0,192.168.1.0,1»=»»
«66.249.17.0,255.255.255.0,192.168.1.0,1»=»»
«66.77.70.0,255.255.255.0,192.168.1.0,1»=»»
«67.134.208.0,255.255.255.0,192.168.1.0,1»=»»
«67.15.103.0,255.255.255.0,192.168.1.0,1»=»»
«67.15.231.0,255.255.255.0,192.168.1.0,1»=»»
«67.19.34.0,255.255.255.0,192.168.1.0,1»=»»
«67.192.135.0,255.255.255.0,192.168.1.0,1»=»»
«67.225.206.0,255.255.255.0,192.168.1.0,1»=»»
«67.227.172.0,255.255.255.0,192.168.1.0,1»=»»
«68.177.102.0,255.255.255.0,192.168.1.0,1»=»»
«69.162.79.0,255.255.255.0,192.168.1.0,1»=»»
«69.18.148.0,255.255.255.0,192.168.1.0,1»=»»
«69.20.104.0,255.255.255.0,192.168.1.0,1»=»»
«69.57.142.0,255.255.255.0,192.168.1.0,1»=»»
«69.93.226.0,255.255.255.0,192.168.1.0,1»=»»
«70.84.211.0,255.255.255.0,192.168.1.0,1»=»»
«72.232.246.0,255.255.255.0,192.168.1.0,1»=»»
«72.3.254.0,255.255.255.0,192.168.1.0,1»=»»
«72.32.125.0,255.255.255.0,192.168.1.0,1»=»»
«72.32.149.0,255.255.255.0,192.168.1.0,1»=»»
«72.32.70.0,255.255.255.0,192.168.1.0,1»=»»
«74.208.158.0,255.255.255.0,192.168.1.0,1»=»»
«74.208.20.0,255.255.255.0,192.168.1.0,1»=»»
«74.50.0.0,255.255.255.0,192.168.1.0,1»=»»
«74.52.233.0,255.255.255.0,192.168.1.0,1»=»»
«74.53.201.0,255.255.255.0,192.168.1.0,1»=»»
«74.55.40.0,255.255.255.0,192.168.1.0,1»=»»
«75.125.29.0,255.255.255.0,192.168.1.0,1»=»»
«75.125.82.0,255.255.255.0,192.168.1.0,1»=»»
«78.108.86.0,255.255.255.0,192.168.1.0,1»=»»
«78.137.164.0,255.255.255.0,192.168.1.0,1»=»»
«78.47.87.0,255.255.255.0,192.168.1.0,1»=»»
«79.125.5.0,255.255.255.0,192.168.1.0,1»=»»
«80.153.193.0,255.255.255.0,192.168.1.0,1»=»»
«80.190.130.0,255.255.255.0,192.168.1.0,1»=»»
«80.190.154.0,255.255.255.0,192.168.1.0,1»=»»
«80.237.132.0,255.255.255.0,192.168.1.0,1»=»»
«80.86.107.0,255.255.255.0,192.168.1.0,1»=»»
«81.176.66.0,255.255.255.0,192.168.1.0,1»=»»
«81.177.31.0,255.255.255.0,192.168.1.0,1»=»»
«81.24.35.0,255.255.255.0,192.168.1.0,1»=»»
«82.117.238.0,255.255.255.0,192.168.1.0,1»=»»
«82.151.107.0,255.255.255.0,192.168.1.0,1»=»»
«82.165.103.0,255.255.255.0,192.168.1.0,1»=»»
«82.98.86.0,255.255.255.0,192.168.1.0,1»=»»
«83.202.175.0,255.255.255.0,192.168.1.0,1»=»»
«83.222.23.0,255.255.255.0,192.168.1.0,1»=»»
«83.222.31.0,255.255.255.0,192.168.1.0,1»=»»
«83.223.117.0,255.255.255.0,192.168.1.0,1»=»»
«84.40.30.0,255.255.255.0,192.168.1.0,1»=»»
«85.12.57.0,255.255.255.0,192.168.1.0,1»=»»
«85.17.210.0,255.255.255.0,192.168.1.0,1»=»»
«85.214.106.0,255.255.255.0,192.168.1.0,1»=»»
«85.255.19.0,255.255.255.0,192.168.1.0,1»=»»
«85.31.222.0,255.255.255.0,192.168.1.0,1»=»»
«87.106.242.0,255.255.255.0,192.168.1.0,1»=»»
«87.106.254.0,255.255.255.0,192.168.1.0,1»=»»
«87.230.79.0,255.255.255.0,192.168.1.0,1»=»»
«87.238.48.0,255.255.255.0,192.168.1.0,1»=»»
«87.242.72.0,255.255.255.0,192.168.1.0,1»=»»
«87.242.74.0,255.255.255.0,192.168.1.0,1»=»»
«87.242.79.0,255.255.255.0,192.168.1.0,1»=»»
«88.221.119.0,255.255.255.0,192.168.1.0,1»=»»
«89.108.66.0,255.255.255.0,192.168.1.0,1»=»»
«89.111.176.0,255.255.255.0,192.168.1.0,1»=»»
«89.202.149.0,255.255.255.0,192.168.1.0,1»=»»
«89.202.157.0,255.255.255.0,192.168.1.0,1»=»»
«90.156.159.0,255.255.255.0,192.168.1.0,1»=»»
«90.183.101.0,255.255.255.0,192.168.1.0,1»=»»
«91.121.97.0,255.255.255.0,192.168.1.0,1»=»»
«91.199.212.0,255.255.255.0,192.168.1.0,1»=»»
«91.209.196.0,255.255.255.0,192.168.1.0,1»=»»
«92.123.155.0,255.255.255.0,192.168.1.0,1»=»»
«92.53.106.0,255.255.255.0,192.168.1.0,1»=»»
«93.184.71.0,255.255.255.0,192.168.1.0,1»=»»
«93.191.13.0,255.255.255.0,192.168.1.0,1»=»»
«94.23.206.0,255.255.255.0,192.168.1.0,1»=»»
«94.236.0.0,255.255.255.0,192.168.1.0,1»=»»
«95.140.225.0,255.255.255.0,192.168.1.0,1»=»»
«74.55.74.0,255.255.255.0,192.168.1.0,1»=»»
«75.125.185.0,255.255.255.0,192.168.1.0,1»=»»
«174.120.186.0,255.255.255.0,192.168.1.0,1»=»»
«208.43.71.0,255.255.255.0,192.168.1.0,1»=»»
«74.53.70.0,255.255.255.0,192.168.1.0,1»=»»
«74.86.232.0,255.255.255.0,192.168.1.0,1»=»»
«74.54.139.0,255.255.255.0,192.168.1.0,1»=»»
«174.133.38.0,255.255.255.0,192.168.1.0,1»=»»
«174.120.185.0,255.255.255.0,192.168.1.0,1»=»»
«174.120.184.0,255.255.255.0,192.168.1.0,1»=»»
«74.54.130.0,255.255.255.0,192.168.1.0,1»=»»
«74.54.46.0,255.255.255.0,192.168.1.0,1»=»»
«75.125.189.0,255.255.255.0,192.168.1.0,1»=»»
«75.125.43.0,255.255.255.0,192.168.1.0,1»=»»
«74.86.125.0,255.255.255.0,192.168.1.0,1»=»»
«75.125.212.0,255.255.255.0,192.168.1.0,1»=»»
«207.44.254.0,255.255.255.0,192.168.1.0,1»=»»
«83.102.130.0,255.255.255.0,192.168.1.0,1»=»»
«87.242.75.0,255.255.255.0,192.168.1.0,1»=»»
«81.176.67.0,255.255.255.0,192.168.1.0,1»=»»
«212.59.118.0,255.255.255.0,192.168.1.0,1»=»»
«188.40.74.0,255.255.255.0,192.168.1.0,1»=»»
«208.43.44.0,255.255.255.0,192.168.1.0,1»=»»
«62.67.184.0,255.255.255.0,192.168.1.0,1»=»»
«74.55.143.0,255.255.255.0,192.168.1.0,1»=»»
«195.222.17.0,255.255.255.0,192.168.1.0,1»=»»
«81.176.230.0,255.255.255.0,192.168.1.0,1»=»»
«194.67.52.0,255.255.255.0,192.168.1.0,1»=»»[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWdf01000.sys]
@=»Driver»[HKEY_LOCAL_MACHINEsoftwaremicrosoftsecurity center]
«UpdatesOverride»=dword:00000001[HKLM~servicessharedaccessparametersfirewallpolicystandardprofileAuthorizedApplicationsList]
«%windir%\Network Diagnostic\xpnetdiag.exe»=
«%windir%\system32\sessmgr.exe»=
«c:\Program Files\Activision\Call of Duty 4 — Modern Warfare\iw3sp.exe»=
«c:\Program Files\Activision\Call of Duty 4 — Modern Warfare\iw3mp.exe»=
«c:\Program Files\QIP\qip.exe»=
«c:\Program Files\uTorrent\uTorrent.exe»=
«c:\WINDOWS\system32\dpvsetup.exe»=
«c:\WINDOWS\system32\dpnsvr.exe»=
«c:\Program Files\Microsoft Games\Flight Simulator 9\FS9.EXE»=
«c:\Program Files\Ubisoft\SilentHunterIII\SH3.EXE»=
«c:\Program Files\Skype\Plugin Manager\skypePM.exe»=
«c:\Program Files\Skype\Phone\Skype.exe»=[HKLM~servicessharedaccessparametersfirewallpolicystandardprofileGloballyOpenPortsList]
«1033:TCP»= 1033:TCP:Akamai NetSession Interface
«5000:UDP»= 5000:UDP:Akamai NetSession Interface
«17473:TCP»= 17473:TCPR0 DwProt;DrWeb Protection;c:windowssystem32driversdwprot.sys [05.02.2010 13:08 107384]
R0 sfdrv02;FrontLine Environment Driver (v2);c:windowssystem32driverssfdrv02.sys [11.09.2006 15:57 67960]
R0 sfsync05;FrontLine Synchronization Driver (v5);c:windowssystem32driverssfsync05.sys [11.08.2006 20:09 59776]
R2 Akamai;Akamai NetSession Interface;c:windowsSystem32svchost.exe -k Akamai [15.04.2008 17:00 14336]
R2 DrWebEngine;Dr.Web Scanning Engine (DrWebEngine);c:program filesCommon FilesDoctor WebScanning Enginedwengine.exe [22.09.2009 18:09 869688]
R2 SPIDER;SpIDer Guard File System Monitor;c:progra~1DrWebspider.sys [17.08.2009 17:47 314552]
R2 SPIDERNT;SpIDer Guard for Windows;c:progra~1DrWebspidernt.exe [17.08.2009 17:47 231816]
R3 SAA713x;Behold TV WDM Capture (SAA713x);c:windowssystem32driverssaa713x.sys [05.02.2010 5:13 153472]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:windowssystem32driversviahduaa.sys [05.02.2010 6:47 1381632]
S2 gupdate;Служба Google Update (gupdate);c:program filesGoogleUpdateGoogleUpdate.exe [09.02.2010 14:31 135664]
S2 mitsijm2011;Диспетчер задач Autodesk Moldflow Inventor Tool Suite Integration 2011;c:program filesAutodeskInventor 2011Moldflowbinmitsijm.exe [23.01.2010 8:12 462336]
S2 sfrem02;FrontLine Drivers Auto Removal (v2);c:windowssystem32sfrem02.exe svc —> c:windowssystem32sfrem02.exe svc [?]
S3 Revoflt;Revoflt;c:windowssystem32driversrevoflt.sys [02.10.2010 17:50 27064]
S3 utqwmtg2;AVZ Kernel Driver;c:windowssystem32driversutqwmtg2.sys [03.10.2010 14:51 7168]
S4 sptd;sptd;c:windowssystem32driverssptd.sys [08.02.2010 10:33 721904][HKEY_LOCAL_MACHINEsoftwaremicrosoftwindows ntcurrentversionsvchost]
Akamai REG_MULTI_SZ Akamai
.
Contents of the ‘Scheduled Tasks’ folder2010-02-05 c:windowsTasksDr.Web Daily scan.job
— c:program filesDrWebDrWeb32w.exe [2009-11-26 11:53]2010-10-03 c:windowsTasksDr.Web Update.job
— c:program filesDrWebDrWebUpW.exe [2009-11-18 11:41]2010-10-03 c:windowsTasksGoogleUpdateTaskMachineCore.job
— c:program filesGoogleUpdateGoogleUpdate.exe [2010-02-09 10:31]2010-10-03 c:windowsTasksGoogleUpdateTaskMachineUA.job
— c:program filesGoogleUpdateGoogleUpdate.exe [2010-02-09 10:31]
.
.
Supplementary Scan
.
uStart Page = hxxp://www.rambler.ru/
IE: &Экспорт в Microsoft Excel — c:progra~1MICROS~1OFFICE11EXCEL.EXE/3000
LSP: c:program filesDrWebdrwebsp.dll
.**************************************************************************
catchme 0.3.1398 W2K/XP/Vista — rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-10-03 19:52
Windows 5.1.2600 Service Pack 3 NTFSscanning hidden processes …
scanning hidden autostart entries …
scanning hidden files …
scan completed successfully
hidden files: 0**************************************************************************
Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net
device: opened successfully
user: MBR read successfully
called modules: ntoskrnl.exe catchme.sys CLASSPNP.SYS disk.sys ACPI.sys hal.dll >>UNKNOWN [0x8679FBB8]<<
kernel: MBR read successfully
detected MBR rootkit hooks:
DriverDisk -> CLASSPNP.SYS @ 0xf7873f28
DriverACPI -> ACPI.sys @ 0xf77e6cb8
Driveratapi -> 0x8679fbb8
IoDeviceObjectType -> DeleteProcedure -> ntoskrnl.exe @ 0x805e7122
ParseProcedure -> ntoskrnl.exe @ 0x80578f7a
DeviceHarddisk0DR0 -> DeleteProcedure -> ntoskrnl.exe @ 0x805e7122
ParseProcedure -> ntoskrnl.exe @ 0x80578f7a
NDIS: Realtek PCIe GBE Family Controller -> SendCompleteHandler -> NDIS.SYS @ 0xf76fcbb0
PacketIndicateHandler -> NDIS.SYS @ 0xf7709a21
SendHandler -> NDIS.SYS @ 0xf76e787b
Warning: possible MBR rootkit infection !
user & kernel MBR OK**************************************************************************
.
DLLs Loaded Under Running Processes
— — — — — — — > ‘winlogon.exe'(692)
c:windowssystem32cscui.dll— — — — — — — > ‘lsass.exe'(748)
c:program filesDrWebdrwebsp.dll
.
Completion time: 2010-10-03 19:54:55
ComboFix-quarantined-files.txt 2010-10-03 15:54
ComboFix2.txt 2010-10-03 14:18Pre-Run: 53 992 833 024 байт свободно
Post-Run: 53 971 554 304 байт свободно— — End Of File — — 45880EB3FD21A14732CBC8FF4E588385
Благодарю вас за оперативность!
Вот что у меня записалось в логе (разбит на 2, т.к. слишком длинный):ComboFix 10-10-02.02 — Алексей 03.10.2010 19:51:32.2.2 — x86
Microsoft Windows XP Professional 5.1.2600.3.1251.7.1049.18.1023.522 [GMT 4:00]
Running from: c:documents and settingsАлексейРабочий столComboFix.exe
Command switches used :: c:documents and settingsАлексейРабочий столCFscript.txt
AV: Doctor Web Anti-Virus *On-access scanning enabled* (Updated) {3454C8F1-ECBC-4180-A6F4-04632FBA762B}
* Resident AV is activeFILE ::
«c:windowssystem32a1f77903.exe»
«c:windowssystem32lvotoo.exe»
.
/wow section not completed((((((((((((((((((((((((( Files Created from 2010-09-03 to 2010-10-03 )))))))))))))))))))))))))))))))
.2010-10-03 15:50 . 2010-10-03 15:50
d
w- c:program filesCommon Files4412c460
2010-10-03 15:40 . 2010-10-03 15:40
d-sh—w- c:documents and settingsLocalServiceIETldCache
2010-10-03 14:40 . 2010-04-28 05:19 2148352 -c—-w- c:windowssystem32dllcachentkrnlmp.exe
2010-10-03 14:40 . 2010-04-28 05:19 2191872 -c—-w- c:windowssystem32dllcachentoskrnl.exe
2010-10-03 14:40 . 2010-04-28 05:19 2026496 -c—-w- c:windowssystem32dllcachentkrpamp.exe
2010-10-03 14:39 . 2010-06-14 07:43 1172480 -c—-w- c:windowssystem32dllcachemsxml3.dll
2010-10-03 14:38 . 2010-07-27 06:30 8479744 -c—-w- c:windowssystem32dllcacheshell32.dll
2010-10-03 14:38 . 2009-12-17 07:42 345088 -c—-w- c:windowssystem32dllcachemspaint.exe
2010-10-03 14:38 . 2010-02-05 18:27 1293312 -c—-w- c:windowssystem32dllcachequartz.dll
2010-10-03 14:36 . 2010-02-24 11:57 457216 -c—-w- c:windowssystem32dllcachemrxsmb.sys
2010-10-03 14:33 . 2010-06-24 12:26 743424 -c—-w- c:windowssystem32dllcacheiedvtool.dll
2010-10-03 14:30 . 2010-01-13 14:01 86528 -c—-w- c:windowssystem32dllcachecabview.dll
2010-10-03 10:51 . 2010-10-03 11:02 7168 —-a-w- c:windowssystem32driversutqwmtg2.sys
2010-10-02 18:59 . 2010-10-03 02:32 188152 —-a-w- c:documents and settingsАлексейApplication DataMozillaFirefoxProfilesp3915o7d.defaultFlashGot.exe
2010-10-02 13:50 . 2009-12-30 08:20 27064 —-a-w- c:windowssystem32driversrevoflt.sys
2010-10-02 13:50 . 2010-10-02 13:50
d
w- c:program filesVS Revo Group
2010-10-02 12:55 . 2010-10-02 12:55
d
w- c:program filesCommon Files4412c489
2010-09-25 08:25 . 2010-10-03 15:05
d
w- c:program filesMicrosoft Silverlight.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-10-03 15:53 . 2010-07-13 13:28
d
w- c:program filesCommon FilesAkamai
2010-10-03 15:48 . 2010-02-05 00:31
d
w- c:program filesuTorrent
2010-10-03 15:46 . 2010-02-05 08:38
d
w- c:program filesDrWeb
2010-10-03 15:44 . 2010-10-02 17:34 4904 —-a-w- c:windowssystem32PerfStringBackup.TMP
2010-10-03 15:44 . 2010-10-02 12:55 36725 —-a-w- c:program filesCommon Filesjqyrg4inedzz13m
2010-10-03 14:16 . 2010-02-05 00:31
d
r- c:program filesSkype
2010-10-02 13:44 . 2010-02-05 00:57
d
w- c:program filesBeholdTV
2010-09-29 18:57 . 2010-02-09 10:31
d
w- c:program filesGoogle
2010-09-18 10:29 . 2010-07-13 17:08
d
w- c:program filesAutodesk
2010-09-05 12:39 . 2010-09-03 00:17
d
w- c:documents and settingsAll UsersApplication DataAutodesk
2010-09-03 12:14 . 2010-09-03 12:14 36864 —-a-w- c:documents and settingsАлексейApplication DataAutodeskAutoCAD Mechanical 2011R18.1rusContextualTabSelectorRules.dll
2010-09-03 03:07 . 2010-02-04 22:12
d
w- c:documents and settingsAll UsersApplication DataFLEXnet
2010-09-03 02:35 . 2010-09-03 01:59
d
w- c:program filesCommon FilesAutodesk Shared
2010-09-03 02:09 . 2010-09-03 02:09
d
w- c:program filesMicrosoft Chart Controls
2010-09-03 02:08 . 2010-09-03 02:08 10134 —-a-r- c:documents and settingsАлексейApplication DataMicrosoftInstaller{E3E71D07-CD27-46CB-8448-16D4FB29AA13}ARPPRODUCTICON.exe
2010-09-03 02:08 . 2010-09-03 02:08
d
w- c:program filesMicrosoft WSE
2010-08-17 13:17 . 2008-04-15 13:00 58880 —-a-w- c:windowssystem32spoolsv.exe
2010-08-10 01:40 . 2010-08-10 01:40 56 —ha-w- c:windowssystem32ezsidmv.dat
2010-08-10 01:39 . 2010-08-10 01:39
d
w- c:program filesCommon FilesSkype
2010-08-10 01:39 . 2010-08-10 01:39
d
w- c:documents and settingsAll UsersApplication DataSkype
2010-07-23 06:17 . 2009-12-12 15:37 590848 —-a-w- c:windowssystem32rpcrt4.dll
2010-07-22 09:39 . 2010-07-22 09:39 271360 —-a-w- c:windowssystem32driversatksgt.sys
2010-07-22 09:39 . 2010-07-22 09:39 18048 —-a-w- c:windowssystem32driverslirsgt.sys
2010-07-21 19:19 . 2009-04-15 04:32 5120 —-a-w- c:windowssystem32xpsp4res.dll
.
Sigcheck
[-] 2009-12-12 . B8F35C9F3938FCF8131E64918D2D447E . 361600 . . [5.1.2600.5625] . . c:windowssystem32driverstcpip.sys[-] 2009-12-12 . F07C7C81A0E45F563EA8B55BDCB37A71 . 80608 . . [7.4.7600.226] . . c:windowssystem32wuauclt.exe
[-] 2009-12-12 . 23B7D3F3F5EC8FEEA75EC381C71CBD5E . 579072 . . [5.1.2600.5512] . . c:windowssystem32user32.dll
[-] 2009-12-12 . 72B49EDE1302A86BE910E5848E3BC16D . 1721344 . . [6.00.2900.5512] . . c:windowsexplorer.exe
[-] 2009-12-12 . AB778E794E8F39D0D387A440AD356944 . 1571840 . . [5.1.2600.5512] . . c:windowssystem32sfcfiles.dll
[-] 2009-12-12 . A5C92543C9E0E75E2E84F9173B13F51B . 30208 . . [5.1.2600.5512] . . c:windowssystem32ctfmon.exe
.
((((((((((((((((((((((((((((( SnapShot@2010-10-03_14.17.05 )))))))))))))))))))))))))))))))))))))))))
.
— 2009-12-12 15:37 . 2009-12-12 15:37 46080 c:windowssystem32tzchange.exe
+ 2009-12-12 15:37 . 2010-06-21 14:46 46080 c:windowssystem32tzchange.exe
+ 2010-03-30 20:16 . 2010-03-30 20:16 99176 c:windowssystem32PresentationHostProxy.dll
+ 2009-11-06 21:07 . 2009-11-06 21:07 49488 c:windowssystem32netfxperf.dll
+ 2009-11-06 21:07 . 2009-11-06 21:07 11600 c:windowssystem32mui409mscorees.dll
+ 2008-04-14 21:40 . 2009-11-27 17:13 17920 c:windowssystem32msyuv.dll
+ 2008-04-15 13:00 . 2009-11-27 16:29 28672 c:windowssystem32msvidc32.dll
— 2008-04-15 13:00 . 2008-04-15 13:00 11264 c:windowssystem32msrle32.dll
+ 2008-04-15 13:00 . 2009-11-27 16:29 11264 c:windowssystem32msrle32.dll
— 2009-03-08 01:31 . 2009-12-21 19:08 55296 c:windowssystem32msfeedsbs.dll
+ 2009-03-08 01:31 . 2010-06-24 12:26 55296 c:windowssystem32msfeedsbs.dll
— 2008-04-15 13:00 . 2009-12-21 19:08 25600 c:windowssystem32jsproxy.dll
+ 2008-04-15 13:00 . 2010-06-24 12:26 25600 c:windowssystem32jsproxy.dll
+ 2008-04-14 21:40 . 2009-11-27 16:29 48128 c:windowssystem32iyuv_32.dll
— 2008-04-15 13:00 . 2008-04-15 13:00 80384 c:windowssystem32iccvid.dll
+ 2008-04-15 13:00 . 2010-06-17 14:03 80384 c:windowssystem32iccvid.dll
+ 2010-02-07 21:34 . 2010-06-24 12:26 12800 c:windowssystem32dllcachexpshims.dll
— 2010-02-07 21:34 . 2009-12-21 19:08 12800 c:windowssystem32dllcachexpshims.dll
+ 2008-04-15 13:00 . 2010-08-17 13:17 58880 c:windowssystem32dllcachespoolsv.exe
+ 2008-04-14 21:40 . 2009-11-27 17:13 17920 c:windowssystem32dllcachemsyuv.dll
+ 2008-04-15 13:00 . 2009-11-27 16:29 28672 c:windowssystem32dllcachemsvidc32.dll
+ 2008-04-15 13:00 . 2009-11-27 16:29 11264 c:windowssystem32dllcachemsrle32.dll
— 2008-04-15 13:00 . 2008-04-15 13:00 11264 c:windowssystem32dllcachemsrle32.dll
+ 2010-02-07 21:34 . 2010-06-24 12:26 55296 c:windowssystem32dllcachemsfeedsbs.dll
— 2010-02-07 21:34 . 2009-12-21 19:08 55296 c:windowssystem32dllcachemsfeedsbs.dll
— 2008-04-15 13:00 . 2009-12-21 19:08 25600 c:windowssystem32dllcachejsproxy.dll
+ 2008-04-15 13:00 . 2010-06-24 12:26 25600 c:windowssystem32dllcachejsproxy.dll
+ 2008-04-14 21:40 . 2009-11-27 16:29 48128 c:windowssystem32dllcacheiyuv_32.dll
+ 2008-04-15 13:00 . 2009-12-14 07:10 33280 c:windowssystem32dllcachecsrsrv.dll
— 2009-12-12 15:37 . 2009-12-12 15:37 85504 c:windowssystem32dllcacheavifil32.dll
+ 2009-12-12 15:37 . 2009-11-27 16:29 85504 c:windowssystem32dllcacheavifil32.dll
+ 2008-04-15 13:00 . 2010-03-05 14:39 65536 c:windowssystem32dllcacheasycfilt.dll
+ 2008-04-15 13:00 . 2009-12-14 07:10 33280 c:windowssystem32csrsrv.dll
+ 2009-12-12 15:51 . 2010-01-13 14:01 86528 c:windowssystem32cabview.dll
+ 2009-12-12 15:37 . 2009-11-27 16:29 85504 c:windowssystem32avifil32.dll
— 2009-12-12 15:37 . 2009-12-12 15:37 85504 c:windowssystem32avifil32.dll
+ 2008-04-15 13:00 . 2010-03-05 14:39 65536 c:windowssystem32asycfilt.dll
— 2008-07-29 16:16 . 2008-07-29 16:16 32768 c:windowsMicrosoft.NETFrameworkv3.0Windows Communication FoundationSystem.ServiceModel.WasHosting.dll
+ 2010-04-07 19:48 . 2010-04-07 19:48 32768 c:windowsMicrosoft.NETFrameworkv3.0Windows Communication FoundationSystem.ServiceModel.WasHosting.dll
+ 2009-11-06 21:07 . 2009-11-06 21:07 13648 c:windowsMicrosoft.NETFrameworkv2.0.50727sbscmp20_mscorlib.dll
+ 2009-09-14 11:30 . 2009-09-14 11:30 93024 c:windowsMicrosoft.NETFrameworkv2.0.50727Microsoft Report Viewer Redistributable 2008 (KB971118)install.res.3082.dll
+ 2009-09-14 11:30 . 2009-09-14 11:30 72528 c:windowsMicrosoft.NETFrameworkv2.0.50727Microsoft Report Viewer Redistributable 2008 (KB971118)install.res.2052.dll
+ 2009-09-14 11:29 . 2009-09-14 11:29 89936 c:windowsMicrosoft.NETFrameworkv2.0.50727Microsoft Report Viewer Redistributable 2008 (KB971118)install.res.1049.dll
+ 2009-09-14 12:28 . 2009-09-14 12:28 89936 c:windowsMicrosoft.NETFrameworkv2.0.50727Microsoft Report Viewer Redistributable 2008 (KB971118)install.res.1046.dll
+ 2009-09-14 11:29 . 2009-09-14 11:29 76640 c:windowsMicrosoft.NETFrameworkv2.0.50727Microsoft Report Viewer Redistributable 2008 (KB971118)install.res.1042.dll
+ 2009-09-14 11:29 . 2009-09-14 11:29 78176 c:windowsMicrosoft.NETFrameworkv2.0.50727Microsoft Report Viewer Redistributable 2008 (KB971118)install.res.1041.dll
+ 2009-09-14 11:30 . 2009-09-14 11:30 92000 c:windowsMicrosoft.NETFrameworkv2.0.50727Microsoft Report Viewer Redistributable 2008 (KB971118)install.res.1040.dll
+ 2009-09-14 11:30 . 2009-09-14 11:30 94032 c:windowsMicrosoft.NETFrameworkv2.0.50727Microsoft Report Viewer Redistributable 2008 (KB971118)install.res.1036.dll
+ 2009-09-14 11:29 . 2009-09-14 11:29 87904 c:windowsMicrosoft.NETFrameworkv2.0.50727Microsoft Report Viewer Redistributable 2008 (KB971118)install.res.1033.dll
+ 2009-09-14 11:30 . 2009-09-14 11:30 93008 c:windowsMicrosoft.NETFrameworkv2.0.50727Microsoft Report Viewer Redistributable 2008 (KB971118)install.res.1031.dll
+ 2009-09-14 11:30 . 2009-09-14 11:30 73056 c:windowsMicrosoft.NETFrameworkv2.0.50727Microsoft Report Viewer Redistributable 2008 (KB971118)install.res.1028.dll
+ 2010-03-23 01:31 . 2010-03-23 01:31 30544 c:windowsMicrosoft.NETFrameworkv2.0.50727aspnet_wp.exe
+ 2010-04-01 07:42 . 2010-04-01 07:42 81920 c:windowsMicrosoft.NETFrameworkv1.1.4322System.Security.dll
— 2008-05-27 21:49 . 2008-05-27 21:49 77824 c:windowsMicrosoft.NETFrameworkv1.1.4322mscorsn.dll
+ 2010-03-31 10:51 . 2010-03-31 10:51 77824 c:windowsMicrosoft.NETFrameworkv1.1.4322mscorsn.dll
— 2008-05-27 21:49 . 2008-05-27 21:49 86016 c:windowsMicrosoft.NETFrameworkv1.1.4322mscorie.dll
+ 2010-03-31 10:51 . 2010-03-31 10:51 86016 c:windowsMicrosoft.NETFrameworkv1.1.4322mscorie.dll
— 2008-05-27 21:49 . 2008-05-27 21:49 81920 c:windowsMicrosoft.NETFrameworkv1.1.4322CORPerfMonExt.dll
+ 2010-03-31 10:51 . 2010-03-31 10:51 81920 c:windowsMicrosoft.NETFrameworkv1.1.4322CORPerfMonExt.dll
— 2008-05-27 22:30 . 2008-05-27 22:30 32768 c:windowsMicrosoft.NETFrameworkv1.1.4322aspnet_wp.exe
+ 2010-03-31 11:32 . 2010-03-31 11:32 32768 c:windowsMicrosoft.NETFrameworkv1.1.4322aspnet_wp.exe
+ 2010-03-31 11:32 . 2010-03-31 11:32 24576 c:windowsMicrosoft.NETFrameworkv1.1.4322aspnet_filter.dll
— 2003-02-20 17:19 . 2003-02-20 17:19 24576 c:windowsMicrosoft.NETFrameworkv1.1.4322aspnet_filter.dll
+ 2009-11-06 21:07 . 2009-11-06 21:07 13648 c:windowsMicrosoft.NETFrameworkSharedReg12.dll
+ 2009-11-06 21:07 . 2009-11-06 21:07 13648 c:windowsMicrosoft.NETFrameworksbscmp20_perfcounter.dll
+ 2009-11-06 21:07 . 2009-11-06 21:07 13648 c:windowsMicrosoft.NETFrameworksbscmp20_mscorwks.dll
+ 2009-11-06 21:07 . 2009-11-06 21:07 13648 c:windowsMicrosoft.NETFrameworksbscmp10.dll
+ 2009-11-06 21:07 . 2009-11-06 21:07 13664 c:windowsMicrosoft.NETFrameworksbs_wminet_utils.dll
+ 2009-11-06 21:07 . 2009-11-06 21:07 13688 c:windowsMicrosoft.NETFrameworksbs_system.enterpriseservices.dll
+ 2009-11-06 21:07 . 2009-11-06 21:07 13664 c:windowsMicrosoft.NETFrameworksbs_system.data.dll
+ 2009-11-06 21:07 . 2009-11-06 21:07 13696 c:windowsMicrosoft.NETFrameworksbs_system.configuration.install.dll
+ 2009-11-06 21:07 . 2009-11-06 21:07 13656 c:windowsMicrosoft.NETFrameworksbs_mscorsec.dll
+ 2009-11-06 21:07 . 2009-11-06 21:07 13656 c:windowsMicrosoft.NETFrameworksbs_mscorrc.dll
+ 2009-11-06 21:07 . 2009-11-06 21:07 13656 c:windowsMicrosoft.NETFrameworksbs_mscordbi.dll
+ 2009-11-06 21:07 . 2009-11-06 21:07 13672 c:windowsMicrosoft.NETFrameworksbs_microsoft.jscript.dll
+ 2009-11-06 21:07 . 2009-11-06 21:07 13664 c:windowsMicrosoft.NETFrameworksbs_diasymreader.dll
+ 2009-11-06 21:07 . 2009-11-06 21:07 86864 c:windowsMicrosoft.NETFrameworkNETFXSBS10.exe
+ 2010-02-06 10:54 . 2010-10-03 15:25 23040 c:windowsInstaller{91110419-6000-11D3-8CFE-0150048383C9}unbndico.exe
— 2010-02-06 10:54 . 2010-02-07 21:37 23040 c:windowsInstaller{91110419-6000-11D3-8CFE-0150048383C9}unbndico.exe
+ 2010-02-06 10:54 . 2010-10-03 15:25 61440 c:windowsInstaller{91110419-6000-11D3-8CFE-0150048383C9}pubs.exe
— 2010-02-06 10:54 . 2010-02-07 21:37 61440 c:windowsInstaller{91110419-6000-11D3-8CFE-0150048383C9}pubs.exe
+ 2010-02-06 10:54 . 2010-10-03 15:25 27136 c:windowsInstaller{91110419-6000-11D3-8CFE-0150048383C9}oisicon.exe
— 2010-02-06 10:54 . 2010-02-07 21:37 27136 c:windowsInstaller{91110419-6000-11D3-8CFE-0150048383C9}oisicon.exe
— 2010-02-06 10:54 . 2010-02-07 21:37 11264 c:windowsInstaller{91110419-6000-11D3-8CFE-0150048383C9}mspicons.exe
+ 2010-02-06 10:54 . 2010-10-03 15:25 11264 c:windowsInstaller{91110419-6000-11D3-8CFE-0150048383C9}mspicons.exe
— 2010-02-06 10:54 . 2010-02-07 21:37 12288 c:windowsInstaller{91110419-6000-11D3-8CFE-0150048383C9}cagicon.exe
+ 2010-02-06 10:54 . 2010-10-03 15:25 12288 c:windowsInstaller{91110419-6000-11D3-8CFE-0150048383C9}cagicon.exe
+ 2010-10-03 15:19 . 2010-10-03 15:19 34632 c:windowsInstaller{90120000-0020-0419-0000-0000000FF1CE}O12ConvIcon.exe
— 2010-02-06 11:11 . 2010-02-06 11:11 34632 c:windowsInstaller{90120000-0020-0419-0000-0000000FF1CE}O12ConvIcon.exe
— 2010-09-25 08:25 . 2010-09-25 08:25 49152 c:windowsInstaller{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}ConfigIcon.dll
+ 2010-09-25 08:25 . 2010-10-03 15:06 49152 c:windowsInstaller{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}ConfigIcon.dll
+ 2008-07-29 16:59 . 2008-07-29 16:59 43544 c:windowsInstaller$PatchCache$ManagedDC1503A46F231838AD88BCDDC8E8F7C3.2.30729PresentationHostProxy_X86.dll
+ 2010-10-03 15:06 . 2009-12-21 19:08 12800 c:windowsie8updatesKB2183461-IE8xpshims.dll
+ 2010-10-03 15:06 . 2009-12-21 19:08 55296 c:windowsie8updatesKB2183461-IE8msfeedsbs.dll
+ 2010-10-03 15:06 . 2009-12-21 19:08 25600 c:windowsie8updatesKB2183461-IE8jsproxy.dll
+ 2010-10-03 14:39 . 2009-11-27 17:13 17920 c:windowsDriver Cachei386msyuv.dll
+ 2010-10-03 14:39 . 2009-11-27 16:29 48128 c:windowsDriver Cachei386iyuv_32.dll
+ 2010-10-03 15:21 . 2010-10-03 15:21 90112 c:windowsassemblyNativeImages1_v1.1.4322System.Drawing.Design1.0.5000.0__b03f5f7f11d50a3a_88232525System.Drawing.Design.dll
+ 2010-10-03 15:21 . 2010-10-03 15:21 61440 c:windowsassemblyNativeImages1_v1.1.4322CustomMarshalers1.0.5000.0__b03f5f7f11d50a3a_1b0e0a09CustomMarshalers.dll
+ 2010-10-03 15:19 . 2010-10-03 15:19 30208 c:windowsassemblyNativeImages_v2.0.50727_32WpfAppPage94b291b94e0b4d6cd82571b3eec4e5edWpfAppPage.ni.dll
+ 2010-10-03 15:15 . 2010-10-03 15:15 60928 c:windowsassemblyNativeImages_v2.0.50727_32UIAutomationProvider5ec9dec678303ebff0ef018edb5ec595UIAutomationProvider.ni.dll
+ 2010-10-03 15:22 . 2010-10-03 15:22 37888 c:windowsassemblyNativeImages_v2.0.50727_32System.Windows.Pres#46ef15b88ef577de4882c519329fc5d2System.Windows.Presentation.ni.dll
+ 2010-10-03 15:21 . 2010-10-03 15:21 36864 c:windowsassemblyNativeImages_v2.0.50727_32System.Web.DynamicD#aada360296a42e0413579a19c771ec2dSystem.Web.DynamicData.Design.ni.dll
+ 2010-10-03 15:20 . 2010-10-03 15:20 94208 c:windowsassemblyNativeImages_v2.0.50727_32System.ComponentMod#2b5ff2c6358c483eb1439b99badb54fdSystem.ComponentModel.DataAnnotations.ni.dll
+ 2010-10-03 15:20 . 2010-10-03 15:20 82944 c:windowsassemblyNativeImages_v2.0.50727_32System.AddIn.Contra#6125ff5a4fcd93d70a246cbff3005d42System.AddIn.Contract.ni.dll
+ 2010-10-03 15:10 . 2010-10-03 15:10 47104 c:windowsassemblyNativeImages_v2.0.50727_32PresentationFontCac#f857fa084a139cc3d510e72ca1218a5fPresentationFontCache.ni.exe
+ 2010-10-03 15:14 . 2010-10-03 15:14 47104 c:windowsassemblyNativeImages_v2.0.50727_32PresentationFontCac#de26af01222270c121788161496fcfe7PresentationFontCache.ni.exe
+ 2010-10-03 15:10 . 2010-10-03 15:10 39424 c:windowsassemblyNativeImages_v2.0.50727_32PresentationCFFRast#bfb89ce9799bcfb90bde99702d542e3fPresentationCFFRasterizer.ni.dll
+ 2010-10-03 15:14 . 2010-10-03 15:14 39424 c:windowsassemblyNativeImages_v2.0.50727_32PresentationCFFRast#3c5adeedb70e6e052a6556c6ab9b6918PresentationCFFRasterizer.ni.dll
+ 2010-10-03 15:21 . 2010-10-03 15:21 55296 c:windowsassemblyNativeImages_v2.0.50727_32Microsoft.Vsa5e5176efbfeb803b7f217525beec6844Microsoft.Vsa.ni.dll
+ 2010-10-03 15:18 . 2010-10-03 15:18 15872 c:windowsassemblyNativeImages_v2.0.50727_32Microsoft.VisualC272d51526813ea113970b8e890c92ee2Microsoft.VisualC.ni.dll
+ 2010-10-03 15:19 . 2010-10-03 15:19 74752 c:windowsassemblyNativeImages_v2.0.50727_32Microsoft.Build.Fra#e1d4e0b1f112000ab33bbaf88bd9ed99Microsoft.Build.Framework.ni.dll
+ 2010-10-03 15:20 . 2010-10-03 15:20 65024 c:windowsassemblyNativeImages_v2.0.50727_32Microsoft.Build.Fra#4200cf5b7f247ec1b997808c6d1ba7d1Microsoft.Build.Framework.ni.dll
+ 2010-10-03 15:18 . 2010-10-03 15:18 75776 c:windowsassemblyNativeImages_v2.0.50727_32ManagedMC36806d55e967ea129c32b4f72170e90d3ManagedMC3.ni.dll
+ 2010-10-03 15:19 . 2010-10-03 15:19 14336 c:windowsassemblyNativeImages_v2.0.50727_32dfsvc50b7fc7f36c76313cbb434b10923e4e9dfsvc.ni.exe
+ 2010-10-03 15:16 . 2010-10-03 15:16 25600 c:windowsassemblyNativeImages_v2.0.50727_32Accessibility5ffa548547613dbc5a92f2c5b7cad196Accessibility.ni.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 77824 c:windowsassemblyGAC_MSILSystem.Web.RegularExpressions2.0.0.0__b03f5f7f11d50a3aSystem.Web.RegularExpressions.dll
+ 2010-10-03 15:12 . 2010-10-03 15:12 77824 c:windowsassemblyGAC_MSILSystem.Web.RegularExpressions2.0.0.0__b03f5f7f11d50a3aSystem.Web.RegularExpressions.dll
+ 2010-10-03 14:53 . 2010-10-03 14:53 32768 c:windowsassemblyGAC_MSILSystem.ServiceModel.WasHosting3.0.0.0__b77a5c561934e089System.ServiceModel.WasHosting.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 32768 c:windowsassemblyGAC_MSILSystem.ServiceModel.WasHosting3.0.0.0__b77a5c561934e089System.ServiceModel.WasHosting.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 81920 c:windowsassemblyGAC_MSILSystem.Drawing.Design2.0.0.0__b03f5f7f11d50a3aSystem.Drawing.Design.dll
+ 2010-10-03 15:13 . 2010-10-03 15:13 81920 c:windowsassemblyGAC_MSILSystem.Drawing.Design2.0.0.0__b03f5f7f11d50a3aSystem.Drawing.Design.dll
+ 2010-10-03 15:12 . 2010-10-03 15:12 81920 c:windowsassemblyGAC_MSILSystem.Configuration.Install2.0.0.0__b03f5f7f11d50a3aSystem.Configuration.Install.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 81920 c:windowsassemblyGAC_MSILSystem.Configuration.Install2.0.0.0__b03f5f7f11d50a3aSystem.Configuration.Install.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 32768 c:windowsassemblyGAC_MSILMicrosoft.Vsa8.0.0.0__b03f5f7f11d50a3aMicrosoft.Vsa.dll
+ 2010-10-03 15:13 . 2010-10-03 15:13 32768 c:windowsassemblyGAC_MSILMicrosoft.Vsa8.0.0.0__b03f5f7f11d50a3aMicrosoft.Vsa.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 12800 c:windowsassemblyGAC_MSILMicrosoft.Vsa.Vb.CodeDOMProcessor8.0.0.0__b03f5f7f11d50a3aMicrosoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2010-10-03 15:12 . 2010-10-03 15:12 12800 c:windowsassemblyGAC_MSILMicrosoft.Vsa.Vb.CodeDOMProcessor8.0.0.0__b03f5f7f11d50a3aMicrosoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2010-10-03 15:12 . 2010-10-03 15:12 28672 c:windowsassemblyGAC_MSILMicrosoft.VisualBasic.Vsa8.0.0.0__b03f5f7f11d50a3aMicrosoft.VisualBasic.Vsa.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 28672 c:windowsassemblyGAC_MSILMicrosoft.VisualBasic.Vsa8.0.0.0__b03f5f7f11d50a3aMicrosoft.VisualBasic.Vsa.dll
+ 2010-10-03 15:04 . 2010-10-03 15:04 53248 c:windowsassemblyGAC_MSILMicrosoft.ReportViewer.ProcessingObjectModel9.0.0.0__b03f5f7f11d50a3aMicrosoft.ReportViewer.ProcessingObjectModel.dll
— 2010-09-03 02:38 . 2010-09-03 02:38 53248 c:windowsassemblyGAC_MSILMicrosoft.ReportViewer.ProcessingObjectModel9.0.0.0__b03f5f7f11d50a3aMicrosoft.ReportViewer.ProcessingObjectModel.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 77824 c:windowsassemblyGAC_MSILMicrosoft.Build.Utilities2.0.0.0__b03f5f7f11d50a3aMicrosoft.Build.Utilities.dll
+ 2010-10-03 15:12 . 2010-10-03 15:12 77824 c:windowsassemblyGAC_MSILMicrosoft.Build.Utilities2.0.0.0__b03f5f7f11d50a3aMicrosoft.Build.Utilities.dll
+ 2010-10-03 15:12 . 2010-10-03 15:12 36864 c:windowsassemblyGAC_MSILMicrosoft.Build.Framework2.0.0.0__b03f5f7f11d50a3aMicrosoft.Build.Framework.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 36864 c:windowsassemblyGAC_MSILMicrosoft.Build.Framework2.0.0.0__b03f5f7f11d50a3aMicrosoft.Build.Framework.dll
+ 2010-10-03 15:12 . 2010-10-03 15:12 77824 c:windowsassemblyGAC_MSILIEHost2.0.0.0__b03f5f7f11d50a3aIEHost.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 77824 c:windowsassemblyGAC_MSILIEHost2.0.0.0__b03f5f7f11d50a3aIEHost.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 13312 c:windowsassemblyGAC_MSILcscompmgd8.0.0.0__b03f5f7f11d50a3acscompmgd.dll
+ 2010-10-03 15:12 . 2010-10-03 15:12 13312 c:windowsassemblyGAC_MSILcscompmgd8.0.0.0__b03f5f7f11d50a3acscompmgd.dll
+ 2010-10-03 15:12 . 2010-10-03 15:12 10752 c:windowsassemblyGAC_MSILAccessibility2.0.0.0__b03f5f7f11d50a3aAccessibility.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 10752 c:windowsassemblyGAC_MSILAccessibility2.0.0.0__b03f5f7f11d50a3aAccessibility.dll
+ 2010-10-03 15:12 . 2010-10-03 15:12 72192 c:windowsassemblyGAC_32ISymWrapper2.0.0.0__b03f5f7f11d50a3aISymWrapper.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 72192 c:windowsassemblyGAC_32ISymWrapper2.0.0.0__b03f5f7f11d50a3aISymWrapper.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 69120 c:windowsassemblyGAC_32CustomMarshalers2.0.0.0__b03f5f7f11d50a3aCustomMarshalers.dll
+ 2010-10-03 15:12 . 2010-10-03 15:12 69120 c:windowsassemblyGAC_32CustomMarshalers2.0.0.0__b03f5f7f11d50a3aCustomMarshalers.dll
+ 2010-10-03 15:21 . 2010-10-03 15:21 81920 c:windowsassemblyGACSystem.Security1.0.5000.0__b03f5f7f11d50a3aSystem.Security.dll
+ 2010-10-03 15:12 . 2010-10-03 15:12 8192 c:windowsWinSxSMSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34eIEExecRemote.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 8192 c:windowsWinSxSMSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34eIEExecRemote.dll
+ 2001-10-19 21:06 . 2009-11-27 16:29 8704 c:windowssystem32tsbyuv.dll
+ 2001-10-19 21:06 . 2009-11-27 16:29 8704 c:windowssystem32dllcachetsbyuv.dll
+ 2010-02-06 10:54 . 2010-10-03 15:25 4096 c:windowsInstaller{91110419-6000-11D3-8CFE-0150048383C9}opwicon.exe
— 2010-02-06 10:54 . 2010-02-07 21:37 4096 c:windowsInstaller{91110419-6000-11D3-8CFE-0150048383C9}opwicon.exe
+ 2010-10-03 14:39 . 2009-11-27 16:29 8704 c:windowsDriver Cachei386tsbyuv.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 7168 c:windowsassemblyGAC_MSILMicrosoft_VsaVb8.0.0.0__b03f5f7f11d50a3aMicrosoft_VsaVb.dll
+ 2010-10-03 15:13 . 2010-10-03 15:13 7168 c:windowsassemblyGAC_MSILMicrosoft_VsaVb8.0.0.0__b03f5f7f11d50a3aMicrosoft_VsaVb.dll
+ 2010-10-03 15:12 . 2010-10-03 15:12 5632 c:windowsassemblyGAC_MSILMicrosoft.VisualC8.0.0.0__b03f5f7f11d50a3aMicrosoft.VisualC.Dll
— 2010-02-05 00:19 . 2010-02-05 00:19 5632 c:windowsassemblyGAC_MSILMicrosoft.VisualC8.0.0.0__b03f5f7f11d50a3aMicrosoft.VisualC.Dll
+ 2010-10-03 15:12 . 2010-10-03 15:12 6656 c:windowsassemblyGAC_MSILIIEHost2.0.0.0__b03f5f7f11d50a3aIIEHost.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 6656 c:windowsassemblyGAC_MSILIIEHost2.0.0.0__b03f5f7f11d50a3aIIEHost.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 8192 c:windowsassemblyGAC_MSILIEExecRemote2.0.0.0__b03f5f7f11d50a3aIEExecRemote.dll
+ 2010-10-03 15:12 . 2010-10-03 15:12 8192 c:windowsassemblyGAC_MSILIEExecRemote2.0.0.0__b03f5f7f11d50a3aIEExecRemote.dll
+ 2010-10-03 15:12 . 2010-10-03 15:12 113664 c:windowsWinSxSx86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790System.EnterpriseServices.Wrapper.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 113664 c:windowsWinSxSx86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790System.EnterpriseServices.Wrapper.dll
+ 2010-10-03 15:12 . 2010-10-03 15:12 258048 c:windowsWinSxSx86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790System.EnterpriseServices.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 258048 c:windowsWinSxSx86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790System.EnterpriseServices.dll
+ 2009-12-12 15:38 . 2009-12-24 06:43 178176 c:windowssystem32wintrust.dll
+ 2008-04-15 13:00 . 2010-06-18 17:47 293376 c:windowssystem32winsrv.dll
— 2008-04-15 13:00 . 2008-04-15 13:00 293376 c:windowssystem32winsrv.dll
+ 2009-12-12 15:53 . 2010-06-24 12:26 916480 c:windowssystem32wininet.dll
— 2009-12-12 15:53 . 2009-12-21 19:08 916480 c:windowssystem32wininet.dll
— 2009-12-12 15:37 . 2009-03-08 01:33 420352 c:windowssystem32vbscript.dll
+ 2009-12-12 15:37 . 2010-03-10 06:17 420352 c:windowssystem32vbscript.dll
— 2008-04-15 13:00 . 2008-04-15 13:00 406016 c:windowssystem32usp10.dll
+ 2008-04-15 13:00 . 2010-04-16 15:38 406016 c:windowssystem32usp10.dll
+ 2009-12-12 15:52 . 2009-12-08 09:25 474112 c:windowssystem32shlwapi.dll
+ 2009-12-12 15:37 . 2010-06-30 12:24 149504 c:windowssystem32schannel.dll
+ 2010-03-30 20:10 . 2010-03-30 20:10 295264 c:windowssystem32PresentationHost.exe
— 2009-12-12 15:52 . 2009-12-21 19:08 206848 c:windowssystem32occache.dll
+ 2009-12-12 15:52 . 2010-06-24 12:26 206848 c:windowssystem32occache.dll
— 2008-04-15 13:00 . 2009-03-08 01:32 611840 c:windowssystem32mstime.dll
+ 2008-04-15 13:00 . 2010-06-24 12:26 611840 c:windowssystem32mstime.dll
+ 2010-02-04 23:49 . 2009-12-17 07:42 345088 c:windowssystem32mspaint.exe
+ 2009-03-08 01:32 . 2010-06-24 12:26 599040 c:windowssystem32msfeeds.dll
+ 2009-11-06 21:07 . 2009-11-06 21:07 297808 c:windowssystem32mscoree.dll
— 2008-05-18 09:23 . 2008-05-18 09:23 317440 c:windowssystem32mp4sdecd.dll
+ 2008-05-18 09:23 . 2010-03-30 08:24 317440 c:windowssystem32mp4sdecd.dll
+ 2009-12-12 15:37 . 2009-12-09 05:55 726528 c:windowssystem32jscript.dll
— 2009-12-12 15:37 . 2009-06-22 06:48 726528 c:windowssystem32jscript.dll
+ 2010-02-04 23:51 . 2010-06-09 07:42 692736 c:windowssystem32inetcomm.dll
— 2008-04-15 13:00 . 2009-12-21 19:08 184320 c:windowssystem32iepeers.dll
+ 2008-04-15 13:00 . 2010-06-24 12:26 184320 c:windowssystem32iepeers.dll
— 2008-04-15 13:00 . 2009-12-21 19:08 387584 c:windowssystem32iedkcs32.dll
+ 2008-04-15 13:00 . 2010-06-24 12:26 387584 c:windowssystem32iedkcs32.dll
+ 2008-04-15 13:00 . 2010-06-23 12:08 173056 c:windowssystem32ie4uinit.exe
— 2008-04-15 13:00 . 2009-12-21 13:22 173056 c:windowssystem32ie4uinit.exe
+ 2009-12-12 15:37 . 2010-02-11 11:36 226880 c:windowssystem32driverstcpip6.sys
+ 2009-12-12 15:37 . 2010-06-21 14:18 354304 c:windowssystem32driverssrv.sys
+ 2009-12-12 15:37 . 2010-02-24 11:57 457216 c:windowssystem32driversmrxsmb.sys
+ 2009-12-12 15:38 . 2009-12-24 06:43 178176 c:windowssystem32dllcachewintrust.dll
+ 2008-04-15 13:00 . 2010-06-18 17:47 293376 c:windowssystem32dllcachewinsrv.dll
— 2008-04-15 13:00 . 2008-04-15 13:00 293376 c:windowssystem32dllcachewinsrv.dll
+ 2009-03-08 01:34 . 2010-06-24 12:26 916480 c:windowssystem32dllcachewininet.dll
— 2009-03-08 01:34 . 2009-12-21 19:08 916480 c:windowssystem32dllcachewininet.dll
+ 2009-12-12 15:37 . 2010-03-10 06:17 420352 c:windowssystem32dllcachevbscript.dll
— 2009-12-12 15:37 . 2009-03-08 01:33 420352 c:windowssystem32dllcachevbscript.dll
+ 2008-04-15 13:00 . 2010-04-16 15:38 406016 c:windowssystem32dllcacheusp10.dll
— 2008-04-15 13:00 . 2008-04-15 13:00 406016 c:windowssystem32dllcacheusp10.dll
+ 2009-12-12 15:37 . 2010-02-11 11:36 226880 c:windowssystem32dllcachetcpip6.sys
+ 2009-12-12 15:37 . 2010-06-21 14:18 354304 c:windowssystem32dllcachesrv.sys
— 2009-01-07 15:21 . 2009-01-07 15:21 474112 c:windowssystem32dllcacheshlwapi.dll
+ 2009-01-07 15:21 . 2009-12-08 09:25 474112 c:windowssystem32dllcacheshlwapi.dll
+ 2009-12-12 15:37 . 2010-06-30 12:24 149504 c:windowssystem32dllcacheschannel.dll
+ 2009-12-12 15:37 . 2010-07-23 06:17 590848 c:windowssystem32dllcacherpcrt4.dll
— 2009-03-08 01:34 . 2009-12-21 19:08 206848 c:windowssystem32dllcacheoccache.dll
+ 2009-03-08 01:34 . 2010-06-24 12:26 206848 c:windowssystem32dllcacheoccache.dll
— 2008-04-15 13:00 . 2009-03-08 01:32 611840 c:windowssystem32dllcachemstime.dll
+ 2008-04-15 13:00 . 2010-06-24 12:26 611840 c:windowssystem32dllcachemstime.dll
+ 2010-02-07 21:34 . 2010-06-24 12:26 599040 c:windowssystem32dllcachemsfeeds.dll
+ 2010-03-30 08:24 . 2010-03-30 08:24 317440 c:windowssystem32dllcachemp4sdecd.dll
+ 2009-12-12 15:37 . 2009-12-09 05:55 726528 c:windowssystem32dllcachejscript.dll
— 2009-12-12 15:37 . 2009-06-22 06:48 726528 c:windowssystem32dllcachejscript.dll
+ 2010-02-04 23:51 . 2010-06-09 07:42 692736 c:windowssystem32dllcacheinetcomm.dll
+ 2010-02-07 21:34 . 2010-06-24 12:26 247808 c:windowssystem32dllcacheieproxy.dll
— 2008-04-15 13:00 . 2009-12-21 19:08 184320 c:windowssystem32dllcacheiepeers.dll
+ 2008-04-15 13:00 . 2010-06-24 12:26 184320 c:windowssystem32dllcacheiepeers.dll
+ 2008-04-15 13:00 . 2010-06-24 12:26 387584 c:windowssystem32dllcacheiedkcs32.dll
— 2008-04-15 13:00 . 2009-12-21 19:08 387584 c:windowssystem32dllcacheiedkcs32.dll
+ 2008-04-15 13:00 . 2010-06-23 12:08 173056 c:windowssystem32dllcacheie4uinit.exe
— 2008-04-15 13:00 . 2009-12-21 13:22 173056 c:windowssystem32dllcacheie4uinit.exe
— 2010-02-04 23:51 . 2008-04-15 13:00 744448 c:windowssystem32dllcachehelpsvc.exe
+ 2010-02-04 23:51 . 2010-06-14 14:31 744448 c:windowssystem32dllcachehelpsvc.exe
+ 2008-04-15 13:00 . 2010-04-20 05:32 285696 c:windowssystem32dllcacheatmfd.dll
— 2008-04-15 13:00 . 2008-04-15 13:00 285696 c:windowssystem32dllcacheatmfd.dll
+ 2008-04-15 13:00 . 2010-02-12 04:29 100864 c:windowssystem32dllcache6to4svc.dll
— 2008-04-15 13:00 . 2008-04-15 13:00 285696 c:windowssystem32atmfd.dll
+ 2008-04-15 13:00 . 2010-04-20 05:32 285696 c:windowssystem32atmfd.dll
+ 2008-04-15 13:00 . 2010-02-12 04:29 100864 c:windowssystem326to4svc.dll
+ 2010-02-04 23:51 . 2010-06-14 14:31 744448 c:windowspchealthhelpctrbinarieshelpsvc.exe
— 2010-02-04 23:51 . 2008-04-15 13:00 744448 c:windowspchealthhelpctrbinariesHelpSvc.exe
+ 2010-03-30 20:16 . 2010-03-30 20:16 130408 c:windowsMicrosoft.NETFrameworkv3.0WPFPresentationHostDLL.dll
+ 2010-04-07 19:48 . 2010-04-07 19:48 970752 c:windowsMicrosoft.NETFrameworkv3.0Windows Communication FoundationSystem.Runtime.Serialization.dll
— 2008-07-29 16:16 . 2008-07-29 16:16 110592 c:windowsMicrosoft.NETFrameworkv3.0Windows Communication FoundationSMdiagnostics.dll
+ 2010-04-07 19:48 . 2010-04-07 19:48 110592 c:windowsMicrosoft.NETFrameworkv3.0Windows Communication FoundationSMdiagnostics.dll
+ 2010-03-23 01:31 . 2010-03-23 01:31 435024 c:windowsMicrosoft.NETFrameworkv2.0.50727webengine.dll
— 2008-07-25 08:17 . 2008-07-25 08:17 258048 c:windowsMicrosoft.NETFrameworkv2.0.50727System.Security.dll
+ 2010-02-09 08:22 . 2010-02-09 08:22 258048 c:windowsMicrosoft.NETFrameworkv2.0.50727System.Security.dll
+ 2010-05-11 02:40 . 2010-05-11 02:40 388936 c:windowsMicrosoft.NETFrameworkv2.0.50727SOS.dll
+ 2010-05-11 02:40 . 2010-05-11 02:40 989016 c:windowsMicrosoft.NETFrameworkv2.0.50727mscordacwks.dll
— 2009-08-07 20:51 . 2009-08-07 20:51 989016 c:windowsMicrosoft.NETFrameworkv2.0.50727mscordacwks.dll
+ 2009-09-14 12:33 . 2009-09-14 12:33 147968 c:windowsMicrosoft.NETFrameworkv2.0.50727Microsoft Report Viewer Redistributable 2008 (KB971118)VB_ROS.MSI
+ 2009-09-14 12:28 . 2009-09-14 12:28 244560 c:windowsMicrosoft.NETFrameworkv2.0.50727Microsoft Report Viewer Redistributable 2008 (KB971118)unicows.dll
+ 2009-09-14 11:29 . 2009-09-14 11:29 559424 c:windowsMicrosoft.NETFrameworkv2.0.50727Microsoft Report Viewer Redistributable 2008 (KB971118)install.exe
+ 2010-03-31 10:51 . 2010-03-31 10:51 102400 c:windowsMicrosoft.NETFrameworkv1.1.4322mscorld.dll
— 2008-05-27 21:49 . 2008-05-27 21:49 102400 c:windowsMicrosoft.NETFrameworkv1.1.4322mscorld.dll
— 2008-05-27 21:48 . 2008-05-27 21:48 315392 c:windowsMicrosoft.NETFrameworkv1.1.4322mscorjit.dll
+ 2010-03-31 10:49 . 2010-03-31 10:49 315392 c:windowsMicrosoft.NETFrameworkv1.1.4322mscorjit.dll
— 2008-05-27 22:30 . 2008-05-27 22:30 258048 c:windowsMicrosoft.NETFrameworkv1.1.4322aspnet_isapi.dll
+ 2010-03-31 11:32 . 2010-03-31 11:32 258048 c:windowsMicrosoft.NETFrameworkv1.1.4322aspnet_isapi.dll
+ 2010-10-03 15:04 . 2010-10-03 15:04 144384 c:windowsInstaller1593d4.msi
+ 2010-02-24 20:14 . 2010-02-24 20:14 543232 c:windowsInstaller15937a.msp
— 2010-02-06 10:54 . 2010-02-07 21:37 409600 c:windowsInstaller{91110419-6000-11D3-8CFE-0150048383C9}xlicons.exe
+ 2010-02-06 10:54 . 2010-10-03 15:25 409600 c:windowsInstaller{91110419-6000-11D3-8CFE-0150048383C9}xlicons.exe
+ 2010-02-06 10:54 . 2010-10-03 15:25 286720 c:windowsInstaller{91110419-6000-11D3-8CFE-0150048383C9}wordicon.exe
— 2010-02-06 10:54 . 2010-02-07 21:37 286720 c:windowsInstaller{91110419-6000-11D3-8CFE-0150048383C9}wordicon.exe
+ 2010-02-06 10:54 . 2010-10-03 15:25 249856 c:windowsInstaller{91110419-6000-11D3-8CFE-0150048383C9}pptico.exe
— 2010-02-06 10:54 . 2010-02-07 21:37 249856 c:windowsInstaller{91110419-6000-11D3-8CFE-0150048383C9}pptico.exe
+ 2010-02-06 10:54 . 2010-10-03 15:25 794624 c:windowsInstaller{91110419-6000-11D3-8CFE-0150048383C9}outicon.exe
— 2010-02-06 10:54 . 2010-02-07 21:37 794624 c:windowsInstaller{91110419-6000-11D3-8CFE-0150048383C9}outicon.exe
+ 2010-02-06 10:54 . 2010-10-03 15:25 135168 c:windowsInstaller{91110419-6000-11D3-8CFE-0150048383C9}misc.exe
— 2010-02-06 10:54 . 2010-02-07 21:37 135168 c:windowsInstaller{91110419-6000-11D3-8CFE-0150048383C9}misc.exe
+ 2010-02-06 10:54 . 2010-10-03 15:25 593920 c:windowsInstaller{91110419-6000-11D3-8CFE-0150048383C9}accicons.exe
— 2010-02-06 10:54 . 2010-02-07 21:37 593920 c:windowsInstaller{91110419-6000-11D3-8CFE-0150048383C9}accicons.exe
+ 2007-04-19 11:01 . 2007-04-19 11:01 238424 c:windowsInstaller$PatchCache$Managed9140111900063D11C8EF10054038389C11.0.8173MSCDM.DLL
+ 2007-01-16 17:32 . 2007-01-16 17:32 136032 c:windowsInstaller$PatchCache$Managed9140111900063D11C8EF10054038389C11.0.8173MSAEXP30.DLL
+ 2007-04-19 10:54 . 2007-04-19 10:54 169312 c:windowsInstaller$PatchCache$Managed9140111900063D11C8EF10054038389C11.0.8173ACCWIZ.DLL
+ 2008-07-29 16:59 . 2008-07-29 16:59 132120 c:windowsInstaller$PatchCache$ManagedDC1503A46F231838AD88BCDDC8E8F7C3.2.30729PresentationHostDLL_X86.dll
+ 2008-07-29 17:35 . 2008-07-29 17:35 326160 c:windowsInstaller$PatchCache$ManagedDC1503A46F231838AD88BCDDC8E8F7C3.2.30729PresentationHost_X86.exe
+ 2010-10-03 15:01 . 2009-03-08 01:33 420352 c:windowsie8updatesKB981332-IE8vbscript.dll
+ 2010-10-03 15:01 . 2009-05-26 11:43 391032 c:windowsie8updatesKB981332-IE8spuninstupdspapi.dll
+ 2010-10-03 15:01 . 2009-05-26 11:43 232824 c:windowsie8updatesKB981332-IE8spuninstspuninst.exe
+ 2010-10-03 15:23 . 2008-07-08 13:21 391032 c:windowsie8updatesKB976662-IE8spuninstupdspapi.dll
+ 2010-10-03 15:23 . 2008-07-08 13:21 232824 c:windowsie8updatesKB976662-IE8spuninstspuninst.exe
+ 2010-10-03 15:23 . 2009-06-22 06:48 726528 c:windowsie8updatesKB976662-IE8jscript.dll
+ 2010-10-03 15:06 . 2009-12-21 19:08 916480 c:windowsie8updatesKB2183461-IE8wininet.dll
+ 2010-10-03 15:06 . 2010-02-22 14:43 391032 c:windowsie8updatesKB2183461-IE8spuninstupdspapi.dll
+ 2010-10-03 15:06 . 2009-05-26 09:02 232824 c:windowsie8updatesKB2183461-IE8spuninstspuninst.exe
+ 2010-10-03 15:06 . 2009-12-21 19:08 206848 c:windowsie8updatesKB2183461-IE8occache.dll
+ 2010-10-03 15:06 . 2009-03-08 01:32 611840 c:windowsie8updatesKB2183461-IE8mstime.dll
+ 2010-10-03 15:06 . 2009-12-21 19:08 594432 c:windowsie8updatesKB2183461-IE8msfeeds.dll
+ 2010-10-03 15:06 . 2009-12-21 19:08 246272 c:windowsie8updatesKB2183461-IE8ieproxy.dll
+ 2010-10-03 15:06 . 2009-12-21 19:08 184320 c:windowsie8updatesKB2183461-IE8iepeers.dll
+ 2010-10-03 15:06 . 2009-03-08 01:35 742912 c:windowsie8updatesKB2183461-IE8iedvtool.dll
+ 2010-10-03 15:06 . 2009-12-21 19:08 387584 c:windowsie8updatesKB2183461-IE8iedkcs32.dll
+ 2010-10-03 15:06 . 2009-12-21 13:22 173056 c:windowsie8updatesKB2183461-IE8ie4uinit.exe
+ 2010-10-03 14:36 . 2010-02-24 11:57 457216 c:windowsDriver Cachei386mrxsmb.sys
+ 2010-10-03 15:21 . 2010-10-03 15:21 835584 c:windowsassemblyNativeImages1_v1.1.4322System.Drawing1.0.5000.0__b03f5f7f11d50a3a_316f6e60System.Drawing.dll
+ 2010-10-03 15:21 . 2010-10-03 15:21 192512 c:windowsassemblyNativeImages1_v1.1.4322System.Drawing.Design1.0.5000.0__b03f5f7f11d50a3a_05eb4e0dSystem.Drawing.Design.dll
+ 2010-10-03 15:21 . 2010-10-03 15:21 118784 c:windowsassemblyNativeImages1_v1.1.4322CustomMarshalers1.0.5000.0__b03f5f7f11d50a3a_d8819366CustomMarshalers.dll
+ 2010-10-03 15:19 . 2010-10-03 15:19 321536 c:windowsassemblyNativeImages_v2.0.50727_32WsatConfiga16b8bcca59515281688ec856c034698WsatConfig.ni.exe
+ 2010-10-03 15:19 . 2010-10-03 15:19 607232 c:windowsassemblyNativeImages_v2.0.50727_32WpfHost2d9f4f3354eb61747c59802259004d23WpfHost.ni.dll
+ 2010-10-03 15:15 . 2010-10-03 15:15 240128 c:windowsassemblyNativeImages_v2.0.50727_32WindowsFormsIntegra#672c4d8e3c33e309c1ed90fa4cb85abaWindowsFormsIntegration.ni.dll
+ 2010-10-03 15:15 . 2010-10-03 15:15 187904 c:windowsassemblyNativeImages_v2.0.50727_32UIAutomationTypescd91a32f4e36ccb2981c72c0d333e928UIAutomationTypes.ni.dll
+ 2010-10-03 15:15 . 2010-10-03 15:15 447488 c:windowsassemblyNativeImages_v2.0.50727_32UIAutomationClient9df760fdf8071c7b0de78f39de365e6aUIAutomationClient.ni.dll
+ 2010-10-03 15:22 . 2010-10-03 15:22 400896 c:windowsassemblyNativeImages_v2.0.50727_32System.Xml.Linqff53d5b5249a2841ee196294429f51cfSystem.Xml.Linq.ni.dll
+ 2010-10-03 15:21 . 2010-10-03 15:21 129536 c:windowsassemblyNativeImages_v2.0.50727_32System.Web.Routing5e16c279496a553c988c6199f0cee8aaSystem.Web.Routing.ni.dll
+ 2010-10-03 15:18 . 2010-10-03 15:18 202240 c:windowsassemblyNativeImages_v2.0.50727_32System.Web.RegularE#d0ae809162b55e2fa958739177476af8System.Web.RegularExpressions.ni.dll
+ 2010-10-03 15:22 . 2010-10-03 15:22 859648 c:windowsassemblyNativeImages_v2.0.50727_32System.Web.Extensio#720b28d81e987b889180b291ea19b821System.Web.Extensions.Design.ni.dll
+ 2010-10-03 15:21 . 2010-10-03 15:21 328704 c:windowsassemblyNativeImages_v2.0.50727_32System.Web.Entityda36fd678161cd3444ef547c894e3f35System.Web.Entity.ni.dll
+ 2010-10-03 15:22 . 2010-10-03 15:22 301056 c:windowsassemblyNativeImages_v2.0.50727_32System.Web.Entity.D#49ae7c73fac8827123d5db1714c22599System.Web.Entity.Design.ni.dll
+ 2010-10-03 15:21 . 2010-10-03 15:21 547328 c:windowsassemblyNativeImages_v2.0.50727_32System.Web.DynamicD#ce3aa27d3c4c052845ac5abb1374defaSystem.Web.DynamicData.ni.dll
+ 2010-10-03 15:21 . 2010-10-03 15:21 141312 c:windowsassemblyNativeImages_v2.0.50727_32System.Web.Abstract#95fab896ef2af14876e3e1524379773bSystem.Web.Abstractions.ni.dll
+ 2010-10-03 15:18 . 2010-10-03 15:18 627200 c:windowsassemblyNativeImages_v2.0.50727_32System.Transactions26d5bf1f7e700c2c19aa9b1da5519b24System.Transactions.ni.dll
+ 2010-10-03 15:18 . 2010-10-03 15:18 212992 c:windowsassemblyNativeImages_v2.0.50727_32System.ServiceProce#8b000cc703c9d95593b516bf2c2ec316System.ServiceProcess.ni.dll
+ 2010-10-03 15:18 . 2010-10-03 15:18 679936 c:windowsassemblyNativeImages_v2.0.50727_32System.Security75e331a5d731d8e207be07adc06dec23System.Security.ni.dll
+ 2010-10-03 15:18 . 2010-10-03 15:18 311296 c:windowsassemblyNativeImages_v2.0.50727_32System.Runtime.Seri#dd7497aa089340600c8c5af8ab421ff7System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2010-10-03 15:18 . 2010-10-03 15:18 771584 c:windowsassemblyNativeImages_v2.0.50727_32System.Runtime.Remo#3de39eb60b9d32af46f32f6c7a88fc7fSystem.Runtime.Remoting.ni.dll
+ 2010-10-03 15:21 . 2010-10-03 15:21 621056 c:windowsassemblyNativeImages_v2.0.50727_32System.Net2a080994f308f347b0497bb8804861cfSystem.Net.ni.dll
+ 2010-10-03 15:21 . 2010-10-03 15:21 998400 c:windowsassemblyNativeImages_v2.0.50727_32System.Managementbc1cf48ba7dc00f45d0e949c49ab677aSystem.Management.ni.dll
+ 2010-10-03 15:21 . 2010-10-03 15:21 330752 c:windowsassemblyNativeImages_v2.0.50727_32System.Management.I#904fda53006680a67f917ab638be0305System.Management.Instrumentation.ni.dll
+ 2010-10-03 15:19 . 2010-10-03 15:19 381440 c:windowsassemblyNativeImages_v2.0.50727_32System.IO.Log4490976887e2e5a3b594041edbdf5064System.IO.Log.ni.dll
+ 2010-10-03 15:19 . 2010-10-03 15:19 212992 c:windowsassemblyNativeImages_v2.0.50727_32System.IdentityMode#77b9f6f6671aaaeb84c6907d467e792cSystem.IdentityModel.Selectors.ni.dll
+ 2010-10-03 15:18 . 2010-10-03 15:18 280064 c:windowsassemblyNativeImages_v2.0.50727_32System.EnterpriseSe#15724a7517f939c9b300f341fb5620b8System.EnterpriseServices.Wrapper.dll
+ 2010-10-03 15:18 . 2010-10-03 15:18 627712 c:windowsassemblyNativeImages_v2.0.50727_32System.EnterpriseSe#15724a7517f939c9b300f341fb5620b8System.EnterpriseServices.ni.dll
+ 2010-10-03 15:15 . 2010-10-03 15:15 208384 c:windowsassemblyNativeImages_v2.0.50727_32System.Drawing.Desi#90199b4aa63b1b9c8ed0c3de16eec824System.Drawing.Design.ni.dll
+ 2010-10-03 15:21 . 2010-10-03 15:21 881152 c:windowsassemblyNativeImages_v2.0.50727_32System.DirectorySer#849e98c9f428a12cb581320a23f69dbdSystem.DirectoryServices.AccountManagement.ni.dll
+ 2010-10-03 15:18 . 2010-10-03 15:18 455680 c:windowsassemblyNativeImages_v2.0.50727_32System.DirectorySer#7a823a4f61cf8c86aad02559f8fed07bSystem.DirectoryServices.Protocols.ni.dll
+ 2010-10-03 15:21 . 2010-10-03 15:21 354816 c:windowsassemblyNativeImages_v2.0.50727_32System.Data.Service#ad95820d2e29e8d55c0d8a838214c6e5System.Data.Services.Design.ni.dll
+ 2010-10-03 15:21 . 2010-10-03 15:21 939008 c:windowsassemblyNativeImages_v2.0.50727_32System.Data.Service#617acb0d900bdde947ec79f7b5ccc183System.Data.Services.Client.ni.dll
+ 2010-10-03 15:20 . 2010-10-03 15:20 756736 c:windowsassemblyNativeImages_v2.0.50727_32System.Data.Entity.#488c4017d45e861644a34fae557aa80fSystem.Data.Entity.Design.ni.dll
+ 2010-10-03 15:20 . 2010-10-03 15:20 135680 c:windowsassemblyNativeImages_v2.0.50727_32System.Data.DataSet#41345e34f26854fc1878eae3e4d5d4a5System.Data.DataSetExtensions.ni.dll
+ 2010-10-03 15:18 . 2010-10-03 15:18 971264 c:windowsassemblyNativeImages_v2.0.50727_32System.Configurationab688d0f9f333ba117832726bfb589c1System.Configuration.ni.dll
+ 2010-10-03 15:18 . 2010-10-03 15:18 141312 c:windowsassemblyNativeImages_v2.0.50727_32System.Configuratio#b48677ab9aa7a6830785f67b8478b4daSystem.Configuration.Install.ni.dll
+ 2010-10-03 15:20 . 2010-10-03 15:20 633856 c:windowsassemblyNativeImages_v2.0.50727_32System.AddIn93a0958d5557e2b380647af0171ad354System.AddIn.ni.dll
+ 2010-10-03 15:19 . 2010-10-03 15:19 366080 c:windowsassemblyNativeImages_v2.0.50727_32SMSvcHostd0758f84e927e3f0a15a6cde1b96d835SMSvcHost.ni.exe
+ 2010-10-03 15:19 . 2010-10-03 15:19 256000 c:windowsassemblyNativeImages_v2.0.50727_32SMDiagnostics8043a108e3bb2d3dcc84b547b8085e99SMDiagnostics.ni.dll
+ 2010-10-03 15:19 . 2010-10-03 15:19 320512 c:windowsassemblyNativeImages_v2.0.50727_32ServiceModelReg5aeb40ff7128df2881fb03c01d070b20ServiceModelReg.ni.exe
+ 2010-10-03 15:14 . 2010-10-03 15:14 368128 c:windowsassemblyNativeImages_v2.0.50727_32PresentationFramewo#e7e7321956e6822b1bf3691c35c842f6PresentationFramework.Aero.ni.dll
+ 2010-10-03 15:11 . 2010-10-03 15:11 368128 c:windowsassemblyNativeImages_v2.0.50727_32PresentationFramewo#ae2ee01f306277a97d0745f2b8117affPresentationFramework.Aero.ni.dll
+ 2010-10-03 15:14 . 2010-10-03 15:14 258048 c:windowsassemblyNativeImages_v2.0.50727_32PresentationFramewo#a14488afff027f0f2985e659449097f5PresentationFramework.Royale.ni.dll
+ 2010-10-03 15:11 . 2010-10-03 15:11 539648 c:windowsassemblyNativeImages_v2.0.50727_32PresentationFramewo#952bcf429e209a3c703d583d2c122a70PresentationFramework.Luna.ni.dll
+ 2010-10-03 15:11 . 2010-10-03 15:11 258048 c:windowsassemblyNativeImages_v2.0.50727_32PresentationFramewo#858170e1835d4289d4c963b2e8d6f884PresentationFramework.Royale.ni.dll
+ 2010-10-03 15:14 . 2010-10-03 15:14 224768 c:windowsassemblyNativeImages_v2.0.50727_32PresentationFramewo#787e60c5dd562cb45887080095d2a3b7PresentationFramework.Classic.ni.dll
+ 2010-10-03 15:14 . 2010-10-03 15:14 539648 c:windowsassemblyNativeImages_v2.0.50727_32PresentationFramewo#2313ccc125dcb6a9800048ec1c51ec12PresentationFramework.Luna.ni.dll
+ 2010-10-03 15:11 . 2010-10-03 15:11 224768 c:windowsassemblyNativeImages_v2.0.50727_32PresentationFramewo#a3b28392f3911bada90f84f8f3de356PresentationFramework.Classic.ni.dll
+ 2010-10-03 15:19 . 2010-10-03 15:19 133632 c:windowsassemblyNativeImages_v2.0.50727_32MSBuild5db9c32d9f352162e6da220ca463db0dMSBuild.ni.exe
+ 2010-10-03 15:19 . 2010-10-03 15:19 386560 c:windowsassemblyNativeImages_v2.0.50727_32Microsoft.Transacti#fcf975f74bd134d8e0fa8f37c5bc6a8cMicrosoft.Transactions.Bridge.Dtc.ni.dll
+ 2010-10-03 15:20 . 2010-10-03 15:20 144384 c:windowsassemblyNativeImages_v2.0.50727_32Microsoft.Build.Uti#d6b9038136600fbfbbbd7460dc19da19Microsoft.Build.Utilities.ni.dll
+ 2010-10-03 15:20 . 2010-10-03 15:20 175104 c:windowsassemblyNativeImages_v2.0.50727_32Microsoft.Build.Uti#585cc7218599e7806521d0e737ba5ffbMicrosoft.Build.Utilities.v3.5.ni.dll
+ 2010-10-03 15:20 . 2010-10-03 15:20 839680 c:windowsassemblyNativeImages_v2.0.50727_32Microsoft.Build.Eng#3057ec53731286e69e389d103c32fa41Microsoft.Build.Engine.ni.dll
+ 2010-10-03 15:20 . 2010-10-03 15:20 222720 c:windowsassemblyNativeImages_v2.0.50727_32Microsoft.Build.Con#914e338ac6e92714f3e32ae5d89bf03bMicrosoft.Build.Conversion.v3.5.ni.dll
+ 2010-10-03 15:19 . 2010-10-03 15:19 768000 c:windowsassemblyNativeImages_v2.0.50727_32InvRibbonUIResourcese9f182ce9b103e84935367010a104bf4InvRibbonUIResources.ni.dll
+ 2010-10-03 15:19 . 2010-10-03 15:19 543232 c:windowsassemblyNativeImages_v2.0.50727_32InvAIRLookResourcesa17ec6442cf75b7d78121656d59f60a8InvAIRLookResources.ni.dll
+ 2010-10-03 15:18 . 2010-10-03 15:18 248832 c:windowsassemblyNativeImages_v2.0.50727_32FlowRibbon9257406ec6169c6e2545dee7ccdb0c90FlowRibbon.ni.dll
+ 2010-10-03 15:20 . 2010-10-03 15:20 220672 c:windowsassemblyNativeImages_v2.0.50727_32CustomMarshalers12ae6f3635448471fc9f7d8bfe39c67dCustomMarshalers.ni.dll
+ 2010-10-03 15:19 . 2010-10-03 15:19 410112 c:windowsassemblyNativeImages_v2.0.50727_32ComSvcConfigdaca3c9ad6d867d3fec70d14b4f20cf3ComSvcConfig.ni.exe
+ 2010-10-03 15:16 . 2010-10-03 15:16 842240 c:windowsassemblyNativeImages_v2.0.50727_32AspNetMMCExt56aec0938ef1bbdeca65b07a5fe8cd39AspNetMMCExt.ni.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 839680 c:windowsassemblyGAC_MSILSystem.Web.Services2.0.0.0__b03f5f7f11d50a3aSystem.Web.Services.dll
+ 2010-10-03 15:12 . 2010-10-03 15:12 839680 c:windowsassemblyGAC_MSILSystem.Web.Services2.0.0.0__b03f5f7f11d50a3aSystem.Web.Services.dll
+ 2010-10-03 15:12 . 2010-10-03 15:12 835584 c:windowsassemblyGAC_MSILSystem.Web.Mobile2.0.0.0__b03f5f7f11d50a3aSystem.Web.Mobile.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 835584 c:windowsassemblyGAC_MSILSystem.Web.Mobile2.0.0.0__b03f5f7f11d50a3aSystem.Web.Mobile.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 114688 c:windowsassemblyGAC_MSILSystem.ServiceProcess2.0.0.0__b03f5f7f11d50a3aSystem.ServiceProcess.dll
+ 2010-10-03 15:12 . 2010-10-03 15:12 114688 c:windowsassemblyGAC_MSILSystem.ServiceProcess2.0.0.0__b03f5f7f11d50a3aSystem.ServiceProcess.dll
+ 2010-10-03 15:12 . 2010-10-03 15:12 258048 c:windowsassemblyGAC_MSILSystem.Security2.0.0.0__b03f5f7f11d50a3aSystem.Security.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 258048 c:windowsassemblyGAC_MSILSystem.Security2.0.0.0__b03f5f7f11d50a3aSystem.Security.dll
+ 2010-10-03 14:53 . 2010-10-03 14:53 970752 c:windowsassemblyGAC_MSILSystem.Runtime.Serialization3.0.0.0__b77a5c561934e089System.Runtime.Serialization.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 131072 c:windowsassemblyGAC_MSILSystem.Runtime.Serialization.Formatters.Soap2.0.0.0__b03f5f7f11d50a3aSystem.Runtime.Serialization.Formatters.Soap.dll
+ 2010-10-03 15:13 . 2010-10-03 15:13 131072 c:windowsassemblyGAC_MSILSystem.Runtime.Serialization.Formatters.Soap2.0.0.0__b03f5f7f11d50a3aSystem.Runtime.Serialization.Formatters.Soap.dll
+ 2010-10-03 15:12 . 2010-10-03 15:12 303104 c:windowsassemblyGAC_MSILSystem.Runtime.Remoting2.0.0.0__b77a5c561934e089System.Runtime.Remoting.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 303104 c:windowsassemblyGAC_MSILSystem.Runtime.Remoting2.0.0.0__b77a5c561934e089System.Runtime.Remoting.dll
+ 2010-10-03 15:12 . 2010-10-03 15:12 258048 c:windowsassemblyGAC_MSILSystem.Messaging2.0.0.0__b03f5f7f11d50a3aSystem.Messaging.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 258048 c:windowsassemblyGAC_MSILSystem.Messaging2.0.0.0__b03f5f7f11d50a3aSystem.Messaging.dll
— 2010-02-05 00:19 . 2010-02-05 00:19 372736 c:windowsassemblyGAC_MSILSystem.Management2.0.0.0__b03f5f7f11d50a3aSystem.Management.dll
+ 2010-10-03 15:12 . 2010-10-03 15:12 372736 c:windowsassemblyGAC_MSILSystem.Management2.0.0.0__b03f5f7f11d50a3aSystem.Management.dll
+ 2010-10-03 14:53 . 2010-10-03 14:53 438272 c:windowsassemblyGAC_MSILSystem.IdentityModel3.0.0.0__b77a5c561934e089System.IdentityModel.dllСпасибо за ответ, скачать OTL не получается, на ссылку не могу зайти. Вирь не пущает, видимо.
Переименование RSIT ничего не дало, запустил комбофикс, после чего у меня пропала языковая панель и больше не восстанавливается
Как ее вернуть?А вот лог Комбофикса:
ComboFix 10-10-02.02 — Алексей 03.10.2010 18:10:28.1.2 — x86
Microsoft Windows XP Professional 5.1.2600.3.1251.7.1049.18.1023.525 [GMT 4:00]
Running from: c:documents and settingsАлексейРабочий столComboFix.exe
AV: Doctor Web Anti-Virus *On-access scanning enabled* (Updated) {3454C8F1-ECBC-4180-A6F4-04632FBA762B}
* Resident AV is active.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.c:program filesskypeskype.exe
c:windowsDownloaded Program FilesIDropPTB.dll
c:windowssystem32Пузыри.scr
c:windowssystem32uninstall.exe.
((((((((((((((((((((((((( Files Created from 2010-09-03 to 2010-10-03 )))))))))))))))))))))))))))))))
.2010-10-03 10:51 . 2010-10-03 11:02 7168 —-a-w- c:windowssystem32driversutqwmtg2.sys
2010-10-02 18:59 . 2010-10-03 02:32 188152 —-a-w- c:documents and settingsАлексейApplication DataMozillaFirefoxProfilesp3915o7d.defaultFlashGot.exe
2010-10-02 13:50 . 2009-12-30 08:20 27064 —-a-w- c:windowssystem32driversrevoflt.sys
2010-10-02 13:50 . 2010-10-02 13:50
d
w- c:program filesVS Revo Group
2010-10-02 12:55 . 2010-10-02 12:55
d
w- c:program filesCommon Files4412c489
2010-09-25 08:25 . 2010-09-25 08:25
d
w- c:program filesMicrosoft Silverlight.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-10-03 14:17 . 2010-07-13 13:28
d
w- c:program filesCommon FilesAkamai
2010-10-03 14:16 . 2010-02-05 00:31
d
r- c:program filesSkype
2010-10-03 14:13 . 2010-10-02 17:34 4904 —-a-w- c:windowssystem32PerfStringBackup.TMP
2010-10-03 13:59 . 2010-02-05 00:31
d
w- c:program filesuTorrent
2010-10-03 13:55 . 2010-02-05 08:38
d
w- c:program filesDrWeb
2010-10-03 13:49 . 2010-10-02 12:55 33622 —-a-w- c:program filesCommon Filesjqyrg4inedzz13m
2010-10-02 13:44 . 2010-02-05 00:57
d
w- c:program filesBeholdTV
2010-09-30 04:19 . 2010-02-05 00:20 817424 —-a-w- c:documents and settingsLocalServiceLocal SettingsApplication DataFontCache3.0.0.0.dat
2010-09-29 18:57 . 2010-02-09 10:31
d
w- c:program filesGoogle
2010-09-18 10:29 . 2010-07-13 17:08
d
w- c:program filesAutodesk
2010-09-05 12:39 . 2010-09-03 00:17
d
w- c:documents and settingsAll UsersApplication DataAutodesk
2010-09-03 12:14 . 2010-09-03 12:14 36864 —-a-w- c:documents and settingsАлексейApplication DataAutodeskAutoCAD Mechanical 2011R18.1rusContextualTabSelectorRules.dll
2010-09-03 03:07 . 2010-02-04 22:12
d
w- c:documents and settingsAll UsersApplication DataFLEXnet
2010-09-03 02:35 . 2010-09-03 01:59
d
w- c:program filesCommon FilesAutodesk Shared
2010-09-03 02:09 . 2010-09-03 02:09
d
w- c:program filesMicrosoft Chart Controls
2010-09-03 02:08 . 2010-09-03 02:08 10134 —-a-r- c:documents and settingsАлексейApplication DataMicrosoftInstaller{E3E71D07-CD27-46CB-8448-16D4FB29AA13}ARPPRODUCTICON.exe
2010-09-03 02:08 . 2010-09-03 02:08
d
w- c:program filesMicrosoft WSE
2010-08-10 01:40 . 2010-08-10 01:40 56 —ha-w- c:windowssystem32ezsidmv.dat
2010-08-10 01:39 . 2010-08-10 01:39
d
w- c:program filesCommon FilesSkype
2010-08-10 01:39 . 2010-08-10 01:39
d
w- c:documents and settingsAll UsersApplication DataSkype
2010-07-22 09:39 . 2010-07-22 09:39 271360 —-a-w- c:windowssystem32driversatksgt.sys
2010-07-22 09:39 . 2010-07-22 09:39 18048 —-a-w- c:windowssystem32driverslirsgt.sys
.
Sigcheck
[-] 2009-12-12 . B8F35C9F3938FCF8131E64918D2D447E . 361600 . . [5.1.2600.5625] . . c:windowssystem32driverstcpip.sys[-] 2009-12-12 . F07C7C81A0E45F563EA8B55BDCB37A71 . 80608 . . [7.4.7600.226] . . c:windowssystem32wuauclt.exe
[-] 2009-12-12 . 23B7D3F3F5EC8FEEA75EC381C71CBD5E . 579072 . . [5.1.2600.5512] . . c:windowssystem32user32.dll
[-] 2009-12-12 . 72B49EDE1302A86BE910E5848E3BC16D . 1721344 . . [6.00.2900.5512] . . c:windowsexplorer.exe
[-] 2009-12-12 . AB778E794E8F39D0D387A440AD356944 . 1571840 . . [5.1.2600.5512] . . c:windowssystem32sfcfiles.dll
[-] 2009-12-12 . A5C92543C9E0E75E2E84F9173B13F51B . 30208 . . [5.1.2600.5512] . . c:windowssystem32ctfmon.exe
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4[HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionRun]
«VistaIcon»=»c:program filesVistaDriveIconVistaDrv.exe» [2008-01-02 132096]
«AlSrvN»=»c:program filesAlcohol SoftAlcohol 120PluginsHelperAlSrvN.exe» [2009-04-17 53248]
«uTorrent»=»c:program filesuTorrentuTorrent.exe» [2010-02-05 319280][HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun]
«NvMediaCenter»=»c:windowssystem32NvMcTray.dll» [2009-11-20 110184]
«NvCplDaemon»=»c:windowssystem32NvCpl.dll» [2009-11-20 12669544]
«USB Antivirus»=»c:program filesUSBDiskSecurityUSBGuard.exe» [2009-10-13 815104]
«Gainward»=»c:program filesVDOToolTBPanel.exe» [2006-09-13 2154496]
«SpIDerAgent»=»c:program filesDrWebSpIDerAgent.exe» [2010-02-15 447728]
«SpIDerMail»=»c:program filesDrWebspiderml.exe» [2009-06-30 644336]
«EEventManager»=»c:program filesEPSONCreativity SuiteEvent ManagerEEventManager.exe» [2006-03-17 102400]
«Adobe Reader Speed Launcher»=»c:program filesAdobeReader 9.0ReaderReader_sl.exe» [2010-06-20 35760]
«Adobe ARM»=»c:program filesCommon FilesAdobeARM1.0AdobeARM.exe» [2010-06-09 976832]
«NeroFilterCheck»=»c:windowssystem32NeroCheck.exe» [2006-01-12 155648]
«InCD»=»c:program filesNeroNero 7InCDInCD.exe» [2005-12-30 878080][HKEY_USERS.DEFAULTSoftwareMicrosoftWindowsCurrentVersionRun]
«VistaIcon»=»c:program filesVistaDriveIconVistaDrv.exe» [2008-01-02 132096][HKEY_USERS.DEFAULTSoftwareMicrosoftWindowsCurrentVersionRunOnce]
«ZZZZ2_FirstLogonSetting»=»advpack.dll» [2009-03-08 128512]c:documents and settingsAdminѓ« ў®Ґ ¬ҐоЏа®Ја ¬¬лЂўв®§ Јаг§Є
Punto Switcher.lnk — c:program filesYandexPunto Switcherpunto.exe [2010-2-5 830248]c:documents and settingsAll Usersѓ« ў®Ґ ¬ҐоЏа®Ја ¬¬лЂўв®§ Јаг§Є
EPSON Status Monitor 3 Environment Check(3).lnk — c:windowssystem32spooldriversw32x863E_SRCV03.EXE [2001-6-24 128000][HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionpoliciesexplorer]
«NoSMConfigurePrograms»= 1 (0x1)[HKEY_USERS.defaultsoftwaremicrosoftwindowscurrentversionpoliciesexplorer]
«NoSMConfigurePrograms»= 1 (0x1)[HKEY_LOCAL_MACHINEsoftwaremicrosoftwindows ntcurrentversionwinlogon]
«Userinit»=»c:windowssystem32userinit.exe,c:windowssystem32a1f77903.exe,c:windowssystem32lvotoo.exe,»[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWdf01000.sys]
@=»Driver»[HKEY_LOCAL_MACHINEsoftwaremicrosoftsecurity center]
«UpdatesOverride»=dword:00000001[HKLM~servicessharedaccessparametersfirewallpolicystandardprofileAuthorizedApplicationsList]
«%windir%\Network Diagnostic\xpnetdiag.exe»=
«%windir%\system32\sessmgr.exe»=
«c:\Program Files\Activision\Call of Duty 4 — Modern Warfare\iw3sp.exe»=
«c:\Program Files\Activision\Call of Duty 4 — Modern Warfare\iw3mp.exe»=
«c:\Program Files\QIP\qip.exe»=
«c:\Program Files\uTorrent\uTorrent.exe»=
«c:\WINDOWS\system32\dpvsetup.exe»=
«c:\WINDOWS\system32\dpnsvr.exe»=
«c:\Program Files\Microsoft Games\Flight Simulator 9\FS9.EXE»=
«c:\Program Files\Ubisoft\SilentHunterIII\SH3.EXE»=
«c:\Program Files\Skype\Plugin Manager\skypePM.exe»=
«c:\Program Files\Skype\Phone\Skype.exe»=[HKLM~servicessharedaccessparametersfirewallpolicystandardprofileGloballyOpenPortsList]
«1033:TCP»= 1033:TCP:Akamai NetSession Interface
«5000:UDP»= 5000:UDP:Akamai NetSession Interface
«17473:TCP»= 17473:TCPR0 DwProt;DrWeb Protection;c:windowssystem32driversdwprot.sys [05.02.2010 13:08 107384]
R0 sfdrv02;FrontLine Environment Driver (v2);c:windowssystem32driverssfdrv02.sys [11.09.2006 15:57 67960]
R0 sfsync05;FrontLine Synchronization Driver (v5);c:windowssystem32driverssfsync05.sys [11.08.2006 20:09 59776]
R2 Akamai;Akamai NetSession Interface;c:windowsSystem32svchost.exe -k Akamai [15.04.2008 17:00 14336]
R2 DrWebEngine;Dr.Web Scanning Engine (DrWebEngine);c:program filesCommon FilesDoctor WebScanning Enginedwengine.exe [22.09.2009 18:09 869688]
R2 SPIDER;SpIDer Guard File System Monitor;c:progra~1DrWebspider.sys [17.08.2009 17:47 314552]
R2 SPIDERNT;SpIDer Guard for Windows;c:progra~1DrWebspidernt.exe [17.08.2009 17:47 231816]
R3 SAA713x;Behold TV WDM Capture (SAA713x);c:windowssystem32driverssaa713x.sys [05.02.2010 5:13 153472]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:windowssystem32driversviahduaa.sys [05.02.2010 6:47 1381632]
S2 gupdate;Служба Google Update (gupdate);c:program filesGoogleUpdateGoogleUpdate.exe [09.02.2010 14:31 135664]
S2 mitsijm2011;Диспетчер задач Autodesk Moldflow Inventor Tool Suite Integration 2011;c:program filesAutodeskInventor 2011Moldflowbinmitsijm.exe [23.01.2010 8:12 462336]
S2 sfrem02;FrontLine Drivers Auto Removal (v2);c:windowssystem32sfrem02.exe svc —> c:windowssystem32sfrem02.exe svc [?]
S3 Revoflt;Revoflt;c:windowssystem32driversrevoflt.sys [02.10.2010 17:50 27064]
S3 utqwmtg2;AVZ Kernel Driver;c:windowssystem32driversutqwmtg2.sys [03.10.2010 14:51 7168]
S4 sptd;sptd;c:windowssystem32driverssptd.sys [08.02.2010 10:33 721904][HKEY_LOCAL_MACHINEsoftwaremicrosoftwindows ntcurrentversionsvchost]
Akamai REG_MULTI_SZ Akamai
.
Contents of the ‘Scheduled Tasks’ folder2010-02-05 c:windowsTasksDr.Web Daily scan.job
— c:program filesDrWebDrWeb32w.exe [2009-11-26 11:53]2010-10-03 c:windowsTasksDr.Web Update.job
— c:program filesDrWebDrWebUpW.exe [2009-11-18 11:41]2010-10-03 c:windowsTasksGoogleUpdateTaskMachineCore.job
— c:program filesGoogleUpdateGoogleUpdate.exe [2010-02-09 10:31]2010-10-03 c:windowsTasksGoogleUpdateTaskMachineUA.job
— c:program filesGoogleUpdateGoogleUpdate.exe [2010-02-09 10:31]
.
.
Supplementary Scan
.
uStart Page = hxxp://www.rambler.ru/
IE: &Экспорт в Microsoft Excel — c:progra~1MICROS~1OFFICE11EXCEL.EXE/3000
LSP: c:program filesDrWebdrwebsp.dll
.
.
File Associations
.
.scr=AutoCADScriptFile
.
— — — — ORPHANS REMOVED — — — —Toolbar-Locked — (no file)
HKLM-Run-nwiz — nwiz.exe
Notify-WgaLogon — (no file)
AddRemove-HashTab 3.0.0 — c:windowssystem32Uninstall.exe**************************************************************************
catchme 0.3.1398 W2K/XP/Vista — rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-10-03 18:17
Windows 5.1.2600 Service Pack 3 NTFSscanning hidden processes …
scanning hidden autostart entries …
scanning hidden files …
scan completed successfully
hidden files: 0**************************************************************************
Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net
device: opened successfully
user: MBR read successfully
called modules: ntoskrnl.exe catchme.sys CLASSPNP.SYS disk.sys ACPI.sys hal.dll >>UNKNOWN [0x867C6600]<<
kernel: MBR read successfully
detected MBR rootkit hooks:
DriverDisk -> CLASSPNP.SYS @ 0xf7873f28
DriverACPI -> ACPI.sys @ 0xf77e6cb8
Driveratapi -> 0x867c6600
IoDeviceObjectType -> DeleteProcedure -> ntoskrnl.exe @ 0x805e66b2
ParseProcedure -> ntoskrnl.exe @ 0x8057b6b1
DeviceHarddisk0DR0 -> DeleteProcedure -> ntoskrnl.exe @ 0x805e66b2
ParseProcedure -> ntoskrnl.exe @ 0x8057b6b1
NDIS: Realtek PCIe GBE Family Controller -> SendCompleteHandler -> NDIS.SYS @ 0xf76fcbb0
PacketIndicateHandler -> NDIS.SYS @ 0xf7709a21
SendHandler -> NDIS.SYS @ 0xf76e787b
Warning: possible MBR rootkit infection !
user & kernel MBR OK**************************************************************************
.
DLLs Loaded Under Running Processes
— — — — — — — > ‘winlogon.exe'(692)
c:windowssystem32cscui.dll— — — — — — — > ‘lsass.exe'(748)
c:program filesDrWebdrwebsp.dll
.
Completion time: 2010-10-03 18:18:26
ComboFix-quarantined-files.txt 2010-10-03 14:18Pre-Run: 55 898 140 672 байт свободно
Post-Run: 56 157 851 648 байт свободноWindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)WINDOWS
[operating systems]
c:cmdconsBOOTSECT.DAT=»Microsoft Windows Recovery Console» /cmdcons
UnsupportedDebug=»do not select this» /debug
multi(0)disk(0)rdisk(0)partition(1)WINDOWS=»Microsoft Windows XP Professional RU» /execute /fastdetect— — End Of File — — 05DB3ADAFAE104C3037929F82C3F4B99
