Windows, Operating System, Security, Networking, Malware, Support, Forum, Help Site Check Our Facebook Page!


Notices

Register your FREE account to unlock additional features at WindowsBBS.com
 
 
LinkBack Thread Tools
Old 3rd August 2009   #1
Inactive
THREAD STARTER
 
Profile:
Join Date: Aug 2009
Posts: 22
Computer Experience:
Experienced
zm02113 Reputation Level

My System

[Active] IE automatically pops up new browser windows


My name is John [zm02113]. My friend, Virginia, owns this laptop. She is leaving for China on Wednesday for 2+ years. Today she called me in a panic. When she opened IE it just started automatically popping up new IE browser windows until she shut it down. She is afraid it won't get fixed before she has to leave.
I did put HijackThis on it and Firefox so I could get this to you.
I'll be watching for your reply. Thanks for your help.

I ran the DDS download. Here are the contents of both logs:


DDS (Ver_09-07-30.01) - NTFSx86
Run by Owner at 19:37:38.61 on Mon 08/03/2009
Internet Explorer: 7.0.6001.18000
Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.1.1033.18.1917.951 [GMT -4:00]

SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
FW: Norton AntiVirus *enabled* {990F9400-4CEE-43EA-A83A-D013ADD8EA6E}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\system32\Ati2evxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\Ati2evxx.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\agrsmsvc.exe
C:\WINDOWS\sttray.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Norton AntiVirus\Engine\16.5.0.134\ccSvcHst.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files\IDT\WDM\STacSV.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Norton AntiVirus\Engine\16.5.0.134\ccSvcHst.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Camera Assistant Software for Gateway\traybar.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Camera Assistant Software for Gateway\CEC_MAIN.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\sdclt.exe
C:\Windows\system32\svchost.exe -k SDRSVC
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\AVG\AVG8\avgtray.exe
C:\Program Files\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\Windows\system32\WUDFHost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Users\Owner\Downloads\dds.scr
C:\Windows\system32\wbem\wmiprvse.exe

============== Pseudo HJT Report ===============

uStart Page = hxxp://my.yahoo.com/
uDefault_Page_URL = hxxp://www.gateway.com/g/startpage.html?Ch=Retail&SubCH=nofound&Br=GTW&Loc=ENG_US&Sys=PTB&M=M-1624
mStart Page = hxxp://www.gateway.com/g/startpage.html?Ch=Retail&SubCH=nofound&Br=GTW&Loc=ENG_US&Sys=PTB&M=M-1624
mDefault_Page_URL = hxxp://www.gateway.com/g/startpage.html?Ch=Retail&SubCH=nofound&Br=GTW&Loc=ENG_US&Sys=PTB&M=M-1624
uInternet Settings,ProxyOverride = *.local
mSearchAssistant = hxxp://www.gateway.com/g/sidepanel.html?Ch=Retail&SubCH=nofound&Br=GTW&Loc=ENG_US&Sys=PTB&M=M-1624
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: AskBar BHO: {201f27d4-3704-41d6-89c1-aa35e39143ed} - c:\program files\askbardis\bar\bin\askBar.dll
BHO: Skype add-on (mastermind): {22bf413b-c6d2-4d91-82a9-a0f997ba588c} - c:\program files\skype\toolbars\internet explorer\SkypeIEPlugin.dll
BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg8\avgssie.dll
BHO: {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - No File
BHO: Symantec Intrusion Prevention: {6d53ec84-6aae-4787-aeee-f4628f01010c} - c:\program files\norton antivirus\engine\16.5.0.134\IPSBHO.DLL
BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre1.6.0_04\bin\ssv.dll
BHO: {7E853D72-626A-48EC-A868-BA8D5E23E045} - No File
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.1.1309.3572\swg.dll
BHO: Google Dictionary Compression sdch: {c84d72fe-e17d-4195-bb24-76c02e2e7c4e} - c:\program files\google\google toolbar\component\fastsearch_A8904FB862BD9564.dll
BHO: CBrowserHelperObject Object: {ca6319c0-31b7-401e-a518-a07c3db8f777} - c:\windows\system32\BAE.dll
TB: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar.dll
TB: Ask Toolbar: {3041d03e-fd4b-44e0-b742-2d9b88305f98} - c:\program files\askbardis\bar\bin\askBar.dll
uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe
mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
mRun: [SigmatelSysTrayApp] sttray.exe
mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe
mRun: [Camera Assistant Software] "c:\program files\camera assistant software for gateway\traybar.exe"
mRun: [StartCCC] "c:\program files\ati technologies\ati.ace\core-static\CLIStart.exe"
mRun: [openvpn-gui] c:\program files\witopia.net\bin\openvpn-gui.exe
mRun: [AVG8_TRAY] c:\progra~1\avg\avg8\avgtray.exe
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office12\EXCEL.EXE/3000
IE: {77BF5300-1474-4EC7-9980-D32B190E9B07} - {77BF5300-1474-4EC7-9980-D32B190E9B07} - c:\program files\skype\toolbars\internet explorer\SkypeIEPlugin.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office12\REFIEBAR.DLL
DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} - hxxp://download.microsoft.com/download/e/4/9/e494c802-dd90-4c6b-a074-469358f075a6/OGAControl.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_04-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_04-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_04-windows-i586.cab
Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - c:\program files\google\google toolbar\component\fastsearch_A8904FB862BD9564.dll
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg8\avgpp.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
AppInit_DLLs: c:\progra~1\google\google~1\GOEC62~1.DLL,avgrsstx.dll

================= FIREFOX ===================

FF - ProfilePath - c:\users\owner\appdata\roaming\mozilla\firefox\profiles\narhf41m.default\

---- FIREFOX POLICIES ----
c:\program files\mozilla firefox\greprefs\all.js - pref("media.enforce_same_site_origin", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("media.cache_size", 51200);
c:\program files\mozilla firefox\greprefs\all.js - pref("media.ogg.enabled", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("media.wave.enabled", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("media.autoplay.enabled", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.urlbar.autocomplete.enabled", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("capability.policy.mailnews.*.wholeText", "noAccess");
c:\program files\mozilla firefox\greprefs\all.js - pref("dom.storage.default_quota", 5120);
c:\program files\mozilla firefox\greprefs\all.js - pref("content.sink.event_probe_rate", 3);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.http.prompt-temp-redirect", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("layout.css.dpi", -1);
c:\program files\mozilla firefox\greprefs\all.js - pref("layout.css.devPixelsPerPx", -1);
c:\program files\mozilla firefox\greprefs\all.js - pref("gestures.enable_single_finger_input", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("dom.max_chrome_script_run_time", 0);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.tcp.sendbuffer", 131072);
c:\program files\mozilla firefox\greprefs\all.js - pref("geo.enabled", true);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.remember_cert_checkbox_default_setting", true);
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr", "moz35");
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-cjkt", "moz35");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.blocklist.level", 2);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.urlbar.restrict.typed", "~");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.urlbar.default.behavior", 0);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.history", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.formdata", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.passwords", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.downloads", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cookies", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cache", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.sessions", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.offlineApps", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.siteSettings", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.history", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.formdata", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.passwords", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.downloads", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.cookies", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.cache", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.sessions", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.offlineApps", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.siteSettings", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.sanitize.migrateFx3Prefs", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.ssl_override_behavior", 2);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("security.alternate_certificate_error_page", "certerror");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.autostart", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.dont_prompt_on_enter", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("geo.wifi.uri", "https://www.google.com/loc/json");

============= SERVICES / DRIVERS ===============

R0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\nav\1005000.086\SymEFA.sys [2009-3-21 310320]
R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2009-8-3 325640]
R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2009-8-3 107912]
R1 BHDrvx86;Symantec Heuristics Driver;c:\windows\system32\drivers\nav\1005000.086\BHDrvx86.sys [2009-3-21 258608]
R1 ccHP;Symantec Hash Provider;c:\windows\system32\drivers\nav\1005000.086\cchpx86.sys [2009-3-21 482352]
R1 IDSVix86;IDSVix86;c:\programdata\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\norton\definitions\ipsdefs\20090730.003\IDSvix86.sys [2009-8-1 293424]
R2 avg8wd;AVG Free8 WatchDog;c:\progra~1\avg\avg8\avgwdsvc.exe [2009-8-3 298264]
R2 Norton AntiVirus;Norton AntiVirus;c:\program files\norton antivirus\engine\16.5.0.134\ccSvcHst.exe [2009-3-21 115560]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\common files\symantec shared\eengine\EraserUtilRebootDrv.sys [2009-2-25 101936]
R3 RTL8187B;Realtek RTL8187B Wireless 802.11g 54Mbps USB 2.0 Network Adapter;c:\windows\system32\drivers\rtl8187B.sys [2008-8-11 281088]
R3 SYMNDISV;Symantec Network Filter Driver;c:\windows\system32\drivers\nav\1005000.086\symndisv.sys [2009-3-21 39984]
R3 tap0901;TAP-Win32 Adapter V9;c:\windows\system32\drivers\tap0901.sys [2008-10-8 25216]
S3 NETw2v32;Intel(R) PRO/Wireless 2200BG Network Connection Driver for Windows Vista;c:\windows\system32\drivers\NETw2v32.sys [2006-11-2 2589184]

=============== Created Last 30 ================

2009-08-03 18:44 10,520 a------- c:\windows\system32\avgrsstx.dll
2009-08-03 18:43 107,912 a------- c:\windows\system32\drivers\avgtdix.sys
2009-08-03 18:43 325,640 a------- c:\windows\system32\drivers\avgldx86.sys
2009-08-03 18:43 <DIR> --d----- c:\windows\system32\drivers\Avg
2009-08-03 18:42 <DIR> --d----- c:\program files\AVG
2009-08-03 18:42 <DIR> --d----- c:\programdata\avg8
2009-08-03 18:42 <DIR> --d----- c:\progra~2\avg8
2009-07-16 12:14 <DIR> --d----- c:\program files\WiTopia.Net
2009-07-15 13:21 156,672 a------- c:\windows\system32\t2embed.dll
2009-07-15 13:21 72,704 a------- c:\windows\system32\fontsub.dll
2009-07-15 13:21 289,792 a------- c:\windows\system32\atmfd.dll
2009-07-15 13:21 10,240 a------- c:\windows\system32\dciman32.dll

==================== Find3M ====================

2009-07-18 12:06 827,904 a------- c:\windows\system32\wininet.dll
2009-07-18 12:01 78,336 a------- c:\windows\system32\ieencode.dll
2009-07-18 05:46 26,624 a------- c:\windows\system32\ieUnatt.exe
2009-07-16 12:15 86,016 a------- c:\windows\inf\infstrng.dat
2009-07-16 12:15 51,200 a------- c:\windows\inf\infpub.dat
2009-07-16 12:15 86,016 a------- c:\windows\inf\infstor.dat
2009-06-22 21:19 217,664 a------- c:\windows\system32\drivers\truecrypt.sys
2008-09-30 21:54 56 a---h--- c:\programdata\ezsidmv.dat
2008-09-30 21:54 56 a---h--- c:\progra~2\ezsidmv.dat
2008-08-12 13:05 665,600 a------- c:\windows\inf\drvindex.dat
2008-01-20 22:43 174 a--sh--- c:\program files\desktop.ini
2006-11-02 08:42 287,440 a------- c:\windows\inf\perflib\0409\perfi.dat
2006-11-02 08:42 287,440 a------- c:\windows\inf\perflib\0409\perfh.dat
2006-11-02 08:42 30,674 a------- c:\windows\inf\perflib\0409\perfd.dat
2006-11-02 08:42 30,674 a------- c:\windows\inf\perflib\0409\perfc.dat
2006-11-02 05:20 287,440 a------- c:\windows\inf\perflib\0000\perfi.dat
2006-11-02 05:20 287,440 a------- c:\windows\inf\perflib\0000\perfh.dat
2006-11-02 05:20 30,674 a------- c:\windows\inf\perflib\0000\perfd.dat
2006-11-02 05:20 30,674 a------- c:\windows\inf\perflib\0000\perfc.dat

============= FINISH: 19:38:18.47 ===============




UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_09-07-30.01)

Microsoft® Windows Vista™ Home Premium
Boot Device: \Device\HarddiskVolume2
Install Date: 8/11/2008 2:08:43 PM
System Uptime: 8/3/2009 6:09:43 PM (1 hours ago)

Motherboard: Gateway | |
Processor: AMD Turion(tm) 64 X2 Mobile Technology TL-60 | Socket M2/S1G1 | 2000/200mhz

==== Disk Partitions =========================

C: is FIXED (NTFS) - 222 GiB total, 163.219 GiB free.
D: is FIXED (NTFS) - 11 GiB total, 4.593 GiB free.
E: is CDROM ()
F: is Removable

==== Disabled Device Manager Items =============

==== System Restore Points ===================

RP70: 3/11/2009 6:24:26 AM - Windows Update
RP71: 3/16/2009 9:25:03 AM - Windows Update
RP72: 3/29/2009 9:17:39 PM - Device Driver Package Install: Apple, Inc. Universal Serial Bus controllers
RP73: 4/17/2009 7:31:00 AM - Windows Update
RP74: 5/4/2009 7:41:24 AM - Windows Update
RP75: 5/13/2009 7:09:38 AM - Windows Update
RP76: 5/15/2009 10:21:12 PM - Scheduled Checkpoint
RP77: 6/6/2009 2:46:09 PM - Scheduled Checkpoint
RP78: 6/10/2009 7:01:59 AM - Windows Update
RP79: 6/14/2009 7:02:30 PM - Scheduled Checkpoint
RP80: 6/15/2009 7:06:40 AM - Windows Update
RP82: 6/22/2009 9:19:27 PM - TrueCrypt installation
RP83: 6/25/2009 10:54:52 AM - Scheduled Checkpoint
RP84: 7/12/2009 1:30:33 PM - Scheduled Checkpoint
RP85: 7/14/2009 10:11:13 AM - Scheduled Checkpoint
RP86: 7/15/2009 3:20:28 PM - Scheduled Checkpoint
RP87: 7/16/2009 12:15:01 PM - Device Driver Package Install: TAP-Win32 Provider V9 Network adapters
RP88: 7/17/2009 10:25:27 PM - Windows Update
RP89: 7/18/2009 4:06:54 PM - Scheduled Checkpoint
RP90: 8/2/2009 11:43:13 AM - Windows Update
RP91: 8/3/2009 6:41:55 PM - Installed AVG Free 8.5

==== Installed Programs ======================

7-Zip 4.57
Activation Assistant for the 2007 Microsoft Office suites
Adobe Acrobat and Reader 8.1.2 Security Update 1 (KB403742)
Adobe Flash Player 10 ActiveX
Adobe Reader 8.1.2
Adobe Reader 8.1.2 Security Update 1 (KB403742)
Agere Systems HDA Modem
Apple Mobile Device Support
Apple Software Update
Ask Toolbar
AVG 8.5
BigFix
Bonjour
Browser Address Error Redirector
Camera Assistant Software for Gateway
Catalyst Control Center Core Implementation
Catalyst Control Center Graphics Full Existing
Catalyst Control Center Graphics Full New
Catalyst Control Center Graphics Light
Catalyst Control Center Graphics Previews Vista
Catalyst Control Center Localization Chinese Standard
Catalyst Control Center Localization Chinese Traditional
Catalyst Control Center Localization Czech
Catalyst Control Center Localization Danish
Catalyst Control Center Localization Dutch
Catalyst Control Center Localization Finnish
Catalyst Control Center Localization French
Catalyst Control Center Localization German
Catalyst Control Center Localization Greek
Catalyst Control Center Localization Hungarian
Catalyst Control Center Localization Italian
Catalyst Control Center Localization Japanese
Catalyst Control Center Localization Korean
Catalyst Control Center Localization Norwegian
Catalyst Control Center Localization Polish
Catalyst Control Center Localization Portuguese
Catalyst Control Center Localization Russian
Catalyst Control Center Localization Spanish
Catalyst Control Center Localization Swedish
Catalyst Control Center Localization Thai
Catalyst Control Center Localization Turkish
ccc-core-static
ccc-utility
CCC Help Chinese Standard
CCC Help Chinese Traditional
CCC Help Czech
CCC Help Danish
CCC Help Dutch
CCC Help English
CCC Help Finnish
CCC Help French
CCC Help German
CCC Help Greek
CCC Help Hungarian
CCC Help Italian
CCC Help Japanese
CCC Help Korean
CCC Help Norwegian
CCC Help Polish
CCC Help Portuguese
CCC Help Russian
CCC Help Spanish
CCC Help Swedish
CCC Help Thai
CCC Help Turkish
Chinese Simplified Fonts Support For Adobe Reader 8
Compatibility Pack for the 2007 Office system
Gateway Connect
Gateway Games
Gateway Recovery Center Installer
Glary Utilities 2.13.0.689
Google Desktop
Google Toolbar for Internet Explorer
IDT Audio
iTunes
Japanese Fonts Support For Adobe Reader 8
Java(TM) 6 Update 4
LabelPrint
Microsoft Money Essentials
Microsoft Money Shared Libraries
Microsoft Office Excel MUI (English) 2007
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office PowerPoint Viewer 2007 (English)
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Standard 2007
Microsoft Office Word MUI (English) 2007
Microsoft Save as PDF or XPS Add-in for 2007 Microsoft Office programs
Microsoft Visual C++ 2005 Redistributable
MobileMe Control Panel
Mozilla Firefox (3.5.2)
Napster
Napster Burn Engine
Norton AntiVirus
Power2Go 5.0
QuickTime
Realtek 8169 PCI, 8168 and 8101E PCIe Ethernet Network Card Driver for Windows Vista
Realtek USB 2.0 Card Reader
REALTEK USB Wireless LAN Driver
Safari
Skins
Skype™ 3.8
Synaptics Pointing Device Driver
TntMPD
Windows Live Messenger
WiTopia.Net personalVPN-v1.7

==== Event Viewer Messages From Past Week ========

8/3/2009 6:25:20 PM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Netman service.
8/3/2009 6:02:43 PM, Error: EventLog [6008] - The previous system shutdown at 8:21:23 AM on 8/3/2009 was unexpected.
8/2/2009 9:56:09 PM, Error: EventLog [6008] - The previous system shutdown at 9:53:07 PM on 8/2/2009 was unexpected.
8/2/2009 8:49:45 PM, Error: EventLog [6008] - The previous system shutdown at 8:48:10 PM on 8/2/2009 was unexpected.
8/2/2009 3:37:45 PM, Error: Microsoft-Windows-Dhcp-Client [1002] - The IP address lease 10.162.4.50 for the Network Card with network address 00FFDE640AC2 has been denied by the DHCP server 10.123.6.93 (The DHCP Server sent a DHCPNACK message).
8/2/2009 11:44:05 AM, Error: Microsoft-Windows-Dhcp-Client [1002] - The IP address lease 10.123.2.106 for the Network Card with network address 00FFDE640AC2 has been denied by the DHCP server 10.162.4.49 (The DHCP Server sent a DHCPNACK message).
8/1/2009 2:10:46 PM, Error: EventLog [6008] - The previous system shutdown at 2:09:47 PM on 8/1/2009 was unexpected.
7/31/2009 5:01:30 PM, Error: ACPI [13] - : The embedded controller (EC) did not respond within the specified timeout period. This may indicate that there is an error in the EC hardware or firmware or that the BIOS is accessing the EC incorrectly. You should check with your computer manufacturer for an upgraded BIOS. In some situations, this error may cause the computer to function incorrectly.
7/28/2009 11:27:12 AM, Error: Service Control Manager [7000] - The Parallel port driver service failed to start due to the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

==== End Of File ===========================

zm02113 is offline  
Old 4th August 2009   #2
Malware Analyst
 
broni's Avatar
 
Profile:
Join Date: Aug 2002
Location: Daly City, CA
Posts: 20,556
Computer Experience:
intermediate
broni Reputation Levelbroni Reputation Levelbroni Reputation Levelbroni Reputation Levelbroni Reputation Levelbroni Reputation Levelbroni Reputation Levelbroni Reputation Levelbroni Reputation Levelbroni Reputation Levelbroni Reputation Level

My System
I can see two AV programs running, Norton, and AVG.
One of them has to go. I need to know, which one.

broni is offline  
Old 4th August 2009   #3
Inactive
THREAD STARTER
 
Profile:
Join Date: Aug 2009
Posts: 22
Computer Experience:
Experienced
zm02113 Reputation Level

My System

IE automatically pops up new browser windows


Norton should go b/c AVG includes anti-spyware and is free

zm02113 is offline  
Old 4th August 2009   #4
Malware Analyst
 
broni's Avatar
 
Profile:
Join Date: Aug 2002
Location: Daly City, CA
Posts: 20,556
Computer Experience:
intermediate
broni Reputation Levelbroni Reputation Levelbroni Reputation Levelbroni Reputation Levelbroni Reputation Levelbroni Reputation Levelbroni Reputation Levelbroni Reputation Levelbroni Reputation Levelbroni Reputation Levelbroni Reputation Level

My System
Run Norton Removal Tool: http://service1.symantec.com/Support...05033108162039

When done...

Please download ComboFix from Here or Here to your Desktop.

**Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved directly to your desktop**
  1. Please, never rename Combofix unless instructed.
  2. Close any open browsers.
  3. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
    • Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
    • Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
    • Close any open browsers.
    • WARNING: Combofix will disconnect your machine from the Internet as soon as it starts
    • Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
    • If there is no internet connection after running Combofix, then restart your computer to restore back your connection.
  4. Double click on combofix.exe & follow the prompts.
  5. When finished, it will produce a report for you.
  6. Please post the "C:\ComboFix.txt" along with a new HijackThis log for further review.
**Note: Do not mouseclick combofix's window while it's running. That may cause it to stall**

Make sure, you re-enable your security programs, when you're done with Combofix.

broni is offline  
Old 4th August 2009   #5
Inactive
THREAD STARTER
 
Profile:
Join Date: Aug 2009
Posts: 22
Computer Experience:
Experienced
zm02113 Reputation Level

My System
Thanks, Broni. I really appreciate the quick response time and so does Virginia.
~ John
Here are the logs.

ComboFix.txt
ComboFix 09-08-03.A0 - Owner 08/04/2009 7:45.1.2 - NTFSx86
Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.1.1033.18.1917.1219 [GMT -4:00]
Running from: c:\users\Owner\Desktop\ComboFix.exe
SP: Lavasoft Ad-Watch Live! *disabled* (Updated) {67844DAE-4F77-4D69-9457-98E8CFFDAA22}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\$recycle.bin\S-1-5-21-3194230544-3224124865-140613033-500
D:\Autorun.inf

.
((((((((((((((((((((((((( Files Created from 2009-07-04 to 2009-08-04 )))))))))))))))))))))))))))))))
.

2009-08-04 11:51 . 2009-08-04 11:51 -------- d-----w- c:\users\Owner\AppData\Local\temp
2009-08-04 03:13 . 2009-08-04 03:13 -------- d-----w- C:\VundoFix Backups
2009-08-04 03:02 . 2009-07-03 14:49 15688 ----a-w- c:\windows\system32\lsdelete.exe
2009-08-04 02:21 . 2009-07-03 14:49 64160 ----a-w- c:\windows\system32\drivers\Lbd.sys
2009-08-04 02:10 . 2009-08-04 02:10 -------- dc-h--w- c:\programdata\{EF63305C-BAD7-4144-9208-D65528260864}
2009-08-04 02:10 . 2009-07-08 17:28 2920112 -c--a-w- c:\programdata\{EF63305C-BAD7-4144-9208-D65528260864}\Ad-AwareAE.exe
2009-08-04 02:09 . 2009-08-04 02:09 -------- d-----w- c:\program files\Lavasoft
2009-08-04 00:48 . 2009-08-04 01:29 -------- d-----w- c:\programdata\Lavasoft
2009-08-03 22:43 . 2009-08-03 23:01 -------- d-----w- c:\windows\system32\drivers\Avg
2009-08-03 22:42 . 2009-08-03 22:42 -------- d-----w- c:\program files\AVG
2009-08-03 22:42 . 2009-08-03 22:42 -------- d-----w- c:\programdata\avg8
2009-07-26 20:08 . 2009-07-26 20:08 746760 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\Spotlight Resources.dll
2009-07-16 16:14 . 2009-07-16 16:16 -------- d-----w- c:\program files\WiTopia.Net
2009-07-15 17:21 . 2009-06-15 15:24 156672 ----a-w- c:\windows\system32\t2embed.dll
2009-07-15 17:21 . 2009-06-15 15:20 72704 ----a-w- c:\windows\system32\fontsub.dll
2009-07-15 17:21 . 2009-06-15 15:20 10240 ----a-w- c:\windows\system32\dciman32.dll
2009-07-15 17:21 . 2009-06-15 12:52 289792 ----a-w- c:\windows\system32\atmfd.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-08-04 11:24 . 2008-08-11 18:13 -------- d-----w- c:\programdata\Symantec
2009-08-04 11:19 . 2009-02-06 02:29 -------- d-----w- c:\programdata\Norton
2009-08-04 11:19 . 2008-08-11 18:13 -------- d-----w- c:\program files\Common Files\Symantec Shared
2009-08-04 11:18 . 2009-02-06 02:29 -------- d-----w- c:\programdata\NortonInstaller
2009-08-04 00:29 . 2009-08-03 22:44 11952 ----a-w- c:\windows\system32\avgrsstx.dll
2009-08-04 00:29 . 2009-08-03 22:43 335752 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2009-08-04 00:29 . 2009-08-03 22:43 27784 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2009-08-04 00:29 . 2009-08-03 22:43 108552 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2009-08-03 22:44 . 2009-08-04 00:29 10520 ----a-w- c:\programdata\avg8\update\backup\avgrsstx.dll
2009-08-03 22:43 . 2009-08-04 00:29 107912 ----a-w- c:\programdata\avg8\update\backup\avgtdix.sys
2009-08-03 22:43 . 2009-08-04 00:29 325640 ----a-w- c:\programdata\avg8\update\backup\avgldx86.sys
2009-08-03 22:43 . 2009-08-04 00:29 27656 ----a-w- c:\programdata\avg8\update\backup\avgmfx86.sys
2009-08-03 22:42 . 2009-08-04 00:29 485144 ----a-w- c:\programdata\avg8\update\backup\avgrsx.exe
2009-08-03 22:42 . 2009-08-04 00:26 1057048 ----a-w- c:\programdata\avg8\update\backup\avgupd.exe
2009-08-03 22:42 . 2009-08-04 00:26 1424152 ----a-w- c:\programdata\avg8\update\backup\avgupd.dll
2009-08-03 22:42 . 2009-08-04 00:26 745240 ----a-w- c:\programdata\avg8\update\backup\avginet.dll
2009-08-03 22:42 . 2009-08-04 00:26 578840 ----a-w- c:\programdata\avg8\update\backup\avgiproxy.exe
2009-08-03 10:13 . 2008-09-10 22:33 -------- d-----w- c:\users\Owner\AppData\Roaming\Skype
2009-08-02 20:04 . 2008-10-01 01:54 -------- d-----w- c:\users\Owner\AppData\Roaming\skypePM
2009-07-31 16:59 . 2008-10-13 18:47 -------- d-----w- c:\users\Owner\AppData\Roaming\U3
2009-07-18 16:06 . 2009-08-02 01:34 827904 ----a-w- c:\windows\system32\wininet.dll
2009-07-18 16:01 . 2009-08-02 01:34 78336 ----a-w- c:\windows\system32\ieencode.dll
2009-07-18 09:46 . 2009-08-02 01:34 26624 ----a-w- c:\windows\system32\ieUnatt.exe
2009-07-18 02:28 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2009-06-25 00:00 . 2009-06-25 00:00 -------- d-----w- c:\users\Owner\AppData\Roaming\GlarySoft
2009-06-24 23:56 . 2009-06-24 23:56 -------- d-----w- c:\program files\AskBarDis
2009-06-24 23:56 . 2009-06-24 23:56 -------- d-----w- c:\program files\Glary Utilities
2009-06-24 23:31 . 2009-06-23 01:53 -------- d-----w- c:\users\Owner\AppData\Roaming\TrueCrypt
2009-06-23 01:19 . 2009-06-23 01:19 217664 ----a-w- c:\windows\system32\drivers\truecrypt.sys
2009-06-22 11:02 . 2009-06-22 11:02 -------- d-----w- c:\program files\7-Zip
2009-06-07 11:13 . 2009-06-07 11:13 456304 ----a-w- c:\programdata\Google\Google Toolbar\Update\gtbEF11.tmp.exe
2009-05-31 03:04 . 2009-05-31 03:04 652296 ----a-w- c:\programdata\Microsoft\eHome\Packages\SportsTemplate\SportsTemplateCore\M icrosoft.MediaCenter.Sports.UI.dll
2009-05-31 03:04 . 2009-05-31 03:04 416128 ----a-w- c:\programdata\Microsoft\eHome\Packages\NetTV\Browse\NetTVResources.dll
2009-05-07 21:31 . 2009-05-07 21:31 1915520 ----a-w- c:\users\Owner\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\fpupdateax\fpupdateax.exe
2009-07-30 11:26 . 2009-08-03 23:03 137208 ----a-w- c:\program files\mozilla firefox\components\brwsrcmp.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}]
2008-07-17 21:20 279944 ----a-w- c:\program files\AskBarDis\bar\bin\askBar.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{3041d03e-fd4b-44e0-b742-2d9b88305f98}"= "c:\program files\AskBarDis\bar\bin\askBar.dll" [2008-07-17 279944]

[HKEY_CLASSES_ROOT\clsid\{3041d03e-fd4b-44e0-b742-2d9b88305f98}]
[HKEY_CLASSES_ROOT\TypeLib\{4b1c1e16-6b34-430e-b074-5928eca4c150}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{3041D03E-FD4B-44E0-B742-2D9B88305F98}"= "c:\program files\AskBarDis\bar\bin\askBar.dll" [2008-07-17 279944]

[HKEY_CLASSES_ROOT\clsid\{3041d03e-fd4b-44e0-b742-2d9b88305f98}]
[HKEY_CLASSES_ROOT\TypeLib\{4b1c1e16-6b34-430e-b074-5928eca4c150}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-21 1008184]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-04-26 865840]
"Camera Assistant Software"="c:\program files\Camera Assistant Software for Gateway\traybar.exe" [2007-09-13 638976]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 90112]
"AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2009-08-04 1948440]
"SigmatelSysTrayApp"="sttray.exe" - c:\windows\sttray.exe [2007-09-07 405504]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\syste m]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~1\Google\GOOGLE~1\GoogleDesktopNetwork3.dll c:\windows\System32\avgrsstx.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"mixer"=wdmaud.drv

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavaso ft Ad-Aware Service]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SymEFA .sys]
@="FSFilter Activity Monitor"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDef end]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-disabled]
"AppleSyncNotifier"=c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" -atboottime
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{206CEEC2-6FA3-4050-94F0-1EB8ED799776}"= c:\program files\MSN Messenger\livecall.exe:Windows Live Messenger 8.1 (Phone)
"{2F779FFD-A3C2-4565-92B7-DF5A976235DE}"= TCP:6004|c:\program files\Microsoft Office\Office12\outlook.exe:Microsoft Office Outlook
"{ACAB4E4B-6D40-41C5-8646-D77FEBC7E8DA}"= c:\program files\Skype\Phone\Skype.exe:Skype
"{4A6DEA0C-17B3-48FF-8C4B-F60C48B442C4}"= UDP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"{DB5A3FAF-1C77-4F22-83C5-D4CB452FF958}"= TCP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"{7AB82EA6-9A2B-4C97-8FCA-7CB1FA902213}"= UDP:c:\program files\iTunes\iTunes.exe:iTunes
"{8FAB8848-348A-41F9-BBCC-8F731F1A2368}"= TCP:c:\program files\iTunes\iTunes.exe:iTunes
"{36E7CF7D-BC09-4B15-AD62-B434D8E2B0B9}"= c:\program files\AVG\AVG8\avgupd.exe:avgupd.exe
"{14C81807-57F6-4B88-825E-CD28220E12FF}"= c:\program files\AVG\AVG8\avgnsx.exe:avgnsx.exe
"TCP Query User{E7B83223-7703-4EAF-8FEF-F20294AA5B32}c:\\program files\\mozilla firefox\\firefox.exe"= UDP:c:\program files\mozilla firefox\firefox.exe:Firefox
"UDP Query User{B5D60ED5-9A7C-46D3-80EA-98DB1F77D67D}c:\\program files\\mozilla firefox\\firefox.exe"= TCP:c:\program files\mozilla firefox\firefox.exe:Firefox
"{773C5303-7EF7-4CB9-AF40-C2B1EF475B25}"= UDP:c:\users\Owner\AppData\Local\Temp\7zS471.tmp\SymNRT.exe:Norton Removal Tool
"{5E51953A-8992-4C6F-BF89-C5693E09BE4B}"= TCP:c:\users\Owner\AppData\Local\Temp\7zS471.tmp\SymNRT.exe:Norton Removal Tool
"{20EC0C1F-BD16-4B52-A62A-79DF38107AB5}"= UDP:c:\users\Owner\AppData\Local\Temp\7zS5762.tmp\SymNRT.exe:Norton Removal Tool
"{038670E9-7AF8-453F-8B8A-F1F04A0AF99C}"= TCP:c:\users\Owner\AppData\Local\Temp\7zS5762.tmp\SymNRT.exe:Norton Removal Tool

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]
"EnableFirewall"= 0 (0x0)

R0 Lbd;Lbd;c:\windows\System32\drivers\Lbd.sys [8/3/2009 10:21 PM 64160]
R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\System32\drivers\avgldx86.sys [8/3/2009 6:43 PM 335752]
R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\System32\drivers\avgtdix.sys [8/3/2009 6:43 PM 108552]
R2 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [8/3/2009 8:29 PM 298776]
R3 RTL8187B;Realtek RTL8187B Wireless 802.11g 54Mbps USB 2.0 Network Adapter;c:\windows\System32\drivers\rtl8187B.sys [8/11/2008 2:20 PM 281088]
R3 tap0901;TAP-Win32 Adapter V9;c:\windows\System32\drivers\tap0901.sys [10/8/2008 1:15 AM 25216]
S3 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [7/3/2009 10:49 AM 1029456]
S3 NETw2v32;Intel(R) PRO/Wireless 2200BG Network Connection Driver for Windows Vista;c:\windows\System32\drivers\NETw2v32.sys [11/2/2006 6:25 AM 2589184]
.
Contents of the 'Scheduled Tasks' folder

2009-08-04 c:\windows\Tasks\GlaryInitialize.job
- c:\program files\Glary Utilities\initialize.exe [2009-06-24 15:39]
.
- - - - ORPHANS REMOVED - - - -

HKLM-Run-openvpn-gui - c:\program files\WiTopia.Net\bin\openvpn-gui.exe


.
------- Supplementary Scan -------
.
uStart Page = hxxp://my.yahoo.com/
mStart Page = hxxp://www.gateway.com/g/startpage.html?Ch=Retail&SubCH=nofound&Br=GTW&Loc=ENG_US&Sys=PTB&M=M-1624
uInternet Settings,ProxyOverride = *.local
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\narhf41m.default\

---- FIREFOX POLICIES ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.enforce_same_site_origin", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.cache_size", 51200);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.ogg.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.wave.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.autoplay.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.urlbar.autocomplete.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("capability.policy.mailnews.*.wholeText", "noAccess");
c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.storage.default_quota", 5120);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("content.sink.event_probe_rate", 3);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.http.prompt-temp-redirect", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("layout.css.dpi", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("layout.css.devPixelsPerPx", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("gestures.enable_single_finger_input", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.max_chrome_script_run_time", 0);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.tcp.sendbuffer", 131072);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("geo.enabled", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.remember_cert_checkbox_default_setting", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr", "moz35");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-cjkt", "moz35");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.blocklist.level", 2);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.urlbar.restrict.typed", "~");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.urlbar.default.behavior", 0);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.history", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.formdata", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.passwords", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.downloads", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cookies", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cache", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.sessions", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.offlineApps", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.siteSettings", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.history", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.formdata", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.passwords", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.downloads", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.cookies", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.cache", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.sessions", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.offlineApps", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.siteSettings", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.sanitize.migrateFx3Prefs", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.ssl_override_behavior", 2);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("security.alternate_certificate_error_page", "certerror");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.autostart", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.dont_prompt_on_enter", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("geo.wifi.uri", "https://www.google.com/loc/json");
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-08-04 07:51
Windows 6.0.6001 Service Pack 1 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
.
Completion time: 2009-08-04 7:53
ComboFix-quarantined-files.txt 2009-08-04 11:53

Pre-Run: 174,090,264,576 bytes free
Post-Run: 174,103,539,712 bytes free

227 --- E O F --- 2009-08-02 15:45



HijackThis log
Logfile of HijackThis v1.99.1
Scan saved at 8:03:10 AM, on 8/4/2009
Platform: Unknown Windows (WinNT 6.00.1905 SP1)
MSIE: Internet Explorer v7.00 (7.00.6001.18294)

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\WINDOWS\sttray.exe
C:\Program Files\Camera Assistant Software for Gateway\traybar.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Camera Assistant Software for Gateway\CEC_MAIN.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\Explorer.exe
C:\Program Files\Lavasoft\Ad-Aware\Ad-Aware.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Users\Owner\Desktop\HJT\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.gateway.com/g/startpage.h...s=PTB&M=M-1624
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gateway.com/g/startpage.h...s=PTB&M=M-1624
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - c:\windows\system32\BAE.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SigmatelSysTrayApp] sttray.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Camera Assistant Software] "C:\Program Files\Camera Assistant Software for Gateway\traybar.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\windows\system32\nlaapi.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\napinsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll
O11 - Options group: [INTERNATIONAL] International*
O13 - Gopher Prefix:
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GoogleDesktopNetwork3.dll C:\WINDOWS\System32\avgrsstx.dll
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @%SystemRoot%\ehome\ehstart.dll,-101 (ehstart) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\Gateway Games\Gateway Game Console\GameConsoleService.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: OpenVPN Service (OpenVPNService) - Unknown owner - C:\Program Files\WiTopia.Net\bin\openvpnserv.exe
O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: SigmaTel Audio Service (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV.exe
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - %ProgramFiles%\Windows Media Player\wmpnetwk.exe (file missing)

zm02113 is offline  
Old 5th August 2009   #6
Malware Analyst
 
broni's Avatar
 
Profile:
Join Date: Aug 2002
Location: Daly City, CA
Posts: 20,556
Computer Experience:
intermediate
broni Reputation Levelbroni Reputation Levelbroni Reputation Levelbroni Reputation Levelbroni Reputation Levelbroni Reputation Levelbroni Reputation Levelbroni Reputation Levelbroni Reputation Levelbroni Reputation Levelbroni Reputation Level

My System
This is outdated HJT version, so please use the link listed below.

1. Please open Notepad
  • Click Start , then Run
  • Type notepad .exe in the Run Box.

2. Now copy/paste the entire content of the codebox below into the Notepad window:

Code:
File::

Folder::
c:\programdata\Symantec
c:\programdata\Norton
c:\program files\Common Files\Symantec Shared
c:\programdata\NortonInstaller


Driver::

Registry::
[-HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
[-HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]


RegLockDel::

3. Save the above as CFScript.txt

4. Then drag the CFScript.txt into ComboFix.exe as depicted in the animation below. This will start ComboFix again.




5. After reboot, (in case it asks to reboot), please post the following reports/logs into your next reply:
  • Combofix.txt
  • A new HijackThis log.


Download HijackThis:
http://www.trendsecure.com/portal/en...kthis/download
by clicking on Download HijackThis Installer
Install, and run it.
Post HijackTHis log.
Do NOT attempt to fix anything!

NOTE. If you're using Vista, right click on HijackThis, and click Run as Administrator

broni is offline  
Old 5th August 2009   #7
Inactive
THREAD STARTER
 
Profile:
Join Date: Aug 2009
Posts: 22
Computer Experience:
Experienced
zm02113 Reputation Level

My System

IE automatically pops up new browser windows


Thanks, Broni.
ComboFix asks to update to a new version, but I thought it might not use your script file so I clicked no and ran the version I downloaded last night. BTW, it did not ask to reboot.

Virginia will be here in half an hour.
Thanks for all your help. ~ John

Here are the files.

Combofix.txt is too long and will be in next post.



new HijackThis log
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:28:33 PM, on 8/4/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18294)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\WINDOWS\sttray.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Camera Assistant Software for Gateway\traybar.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Camera Assistant Software for Gateway\CEC_MAIN.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\notepad.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\Explorer.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gateway.com/g/startpage.h...s=PTB&M=M-1624
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - c:\windows\system32\BAE.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SigmatelSysTrayApp] sttray.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Camera Assistant Software] "C:\Program Files\Camera Assistant Software for Gateway\traybar.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GoogleDesktopNetwork3.dll C:\WINDOWS\System32\avgrsstx.dll
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\Gateway Games\Gateway Game Console\GameConsoleService.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: OpenVPN Service (OpenVPNService) - Unknown owner - C:\Program Files\WiTopia.Net\bin\openvpnserv.exe
O23 - Service: SigmaTel Audio Service (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV.exe

--
End of file - 5947 bytes

zm02113 is offline  
Old 5th August 2009   #8
Inactive
THREAD STARTER
 
Profile:
Join Date: Aug 2009
Posts: 22
Computer Experience:
Experienced
zm02113 Reputation Level

My System

IE automatically pops up new browser windows


ComboFix1.txt 1 of 4

ComboFix 09-08-03.A0 - Owner 08/04/2009 20:20.2.2 - NTFSx86
Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.1.1033.18.1917.931 [GMT -4:00]
Running from: c:\users\Owner\Desktop\ComboFix.exe
Command switches used :: c:\users\Owner\Desktop\CFScript.txt
SP: Lavasoft Ad-Watch Live! *disabled* (Updated) {67844DAE-4F77-4D69-9457-98E8CFFDAA22}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\Common Files\Symantec Shared
c:\program files\Common Files\Symantec Shared\CCPD-LC\symlcrst.dll
c:\programdata\Norton
c:\programdata\Norton\00000082\000000fc\000002d3\cltLMS1.dat
c:\programdata\Norton\00000082\000000fc\000002d3\cltLMS2.dat
c:\programdata\Norton\00000082\000000fc\key.txt
c:\programdata\Norton\symdata.xml
c:\programdata\NortonInstaller
c:\programdata\NortonInstaller\Logs\02-05-2009-21h29m16s\Install.1.mft.7z
c:\programdata\NortonInstaller\Logs\02-05-2009-21h29m16s\NortonInstall-02-05-2009-21h29m16s.log
c:\programdata\NortonInstaller\Logs\02-05-2009-21h35m09s\BHCA-0x0F2C.log
c:\programdata\NortonInstaller\Logs\02-05-2009-21h35m09s\Install.1.mft.7z
c:\programdata\NortonInstaller\Logs\02-05-2009-21h35m09s\NortonInstall-02-05-2009-21h35m09s.log
c:\programdata\NortonInstaller\Logs\02-05-2009-21h35m09s\SymIMexe-0x0F98.log
c:\programdata\NortonInstaller\Logs\03-20-2009-22h23m29s\Patch-03-20-2009-22h23m29s.log
c:\programdata\NortonInstaller\Logs\03-20-2009-22h23m29s\Patch.1.mft.7z
c:\programdata\NortonInstaller\Logs\03-20-2009-22h23m32s\Patch-03-20-2009-22h23m32s.log
c:\programdata\NortonInstaller\Logs\03-20-2009-22h23m32s\Patch.1.mft.7z
c:\programdata\NortonInstaller\Logs\03-21-2009-09h36m19s\Patch-03-21-2009-09h36m19s.log
c:\programdata\NortonInstaller\Logs\03-21-2009-09h36m19s\Patch.1.mft.7z
c:\programdata\NortonInstaller\Logs\03-21-2009-16h42m44s\Patch-03-21-2009-16h42m44s.log
c:\programdata\NortonInstaller\Logs\03-21-2009-16h42m44s\Patch.1.mft.7z
c:\programdata\NortonInstaller\Logs\03-21-2009-16h42m44s\SymIMexe-0x0A2C.log
c:\programdata\NortonInstaller\Logs\08-04-2009-07h18m02s\OCSCtl-0x14A4.log
c:\programdata\NortonInstaller\Logs\08-04-2009-07h18m02s\SymIMexe-0x092C.log
c:\programdata\NortonInstaller\Logs\08-04-2009-07h18m02s\SymNRT-08-04-2009-07h18m02s.log
c:\programdata\NortonInstaller\Logs\08-04-2009-07h18m02s\SymNRT.1.mft.7z
c:\programdata\NortonInstaller\Logs\08-04-2009-07h18m02s\WFPUninstexe-0x1548.log
c:\programdata\NortonInstaller\Logs\08-04-2009-07h24m02s\SymNRT-08-04-2009-07h24m02s.log
c:\programdata\NortonInstaller\Logs\08-04-2009-07h24m02s\SymNRT.1.mft.7z
c:\programdata\NortonInstaller\Logs\Url.txt
c:\programdata\NortonInstaller\Settings\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}.7z
c:\programdata\Symantec
c:\programdata\Symantec\SubEng\platformid.dat

.
((((((((((((((((((((((((( Files Created from 2009-07-05 to 2009-08-05 )))))))))))))))))))))))))))))))
.

2009-08-05 00:25 . 2009-08-05 00:25 -------- d-----w- c:\users\Owner\AppData\Local\temp
2009-08-04 03:13 . 2009-08-04 03:13 -------- d-----w- C:\VundoFix Backups
2009-08-04 03:02 . 2009-07-03 14:49 15688 ----a-w- c:\windows\system32\lsdelete.exe
2009-08-04 02:21 . 2009-07-03 14:49 64160 ----a-w- c:\windows\system32\drivers\Lbd.sys
2009-08-04 02:10 . 2009-08-04 02:10 -------- dc-h--w- c:\programdata\{EF63305C-BAD7-4144-9208-D65528260864}
2009-08-04 02:10 . 2009-07-08 17:28 2920112 -c--a-w- c:\programdata\{EF63305C-BAD7-4144-9208-D65528260864}\Ad-AwareAE.exe
2009-08-04 02:09 . 2009-08-04 02:09 -------- d-----w- c:\program files\Lavasoft
2009-08-04 00:48 . 2009-08-04 01:29 -------- d-----w- c:\programdata\Lavasoft
2009-08-03 22:43 . 2009-08-04 22:10 -------- d-----w- c:\windows\system32\drivers\Avg
2009-08-03 22:42 . 2009-08-03 22:42 -------- d-----w- c:\program files\AVG
2009-08-03 22:42 . 2009-08-03 22:42 -------- d-----w- c:\programdata\avg8
2009-07-26 20:08 . 2009-07-26 20:08 746760 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\Spotlight Resources.dll
2009-07-16 16:14 . 2009-07-16 16:16 -------- d-----w- c:\program files\WiTopia.Net
2009-07-15 17:21 . 2009-06-15 15:24 156672 ----a-w- c:\windows\system32\t2embed.dll
2009-07-15 17:21 . 2009-06-15 15:20 72704 ----a-w- c:\windows\system32\fontsub.dll
2009-07-15 17:21 . 2009-06-15 15:20 10240 ----a-w- c:\windows\system32\dciman32.dll
2009-07-15 17:21 . 2009-06-15 12:52 289792 ----a-w- c:\windows\system32\atmfd.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-08-04 00:29 . 2009-08-03 22:44 11952 ----a-w- c:\windows\system32\avgrsstx.dll
2009-08-04 00:29 . 2009-08-03 22:43 335752 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2009-08-04 00:29 . 2009-08-03 22:43 27784 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2009-08-04 00:29 . 2009-08-03 22:43 108552 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2009-08-03 22:44 . 2009-08-04 00:29 10520 ----a-w- c:\programdata\avg8\update\backup\avgrsstx.dll
2009-08-03 22:43 . 2009-08-04 00:29 107912 ----a-w- c:\programdata\avg8\update\backup\avgtdix.sys
2009-08-03 22:43 . 2009-08-04 00:29 325640 ----a-w- c:\programdata\avg8\update\backup\avgldx86.sys
2009-08-03 22:43 . 2009-08-04 00:29 27656 ----a-w- c:\programdata\avg8\update\backup\avgmfx86.sys
2009-08-03 22:42 . 2009-08-04 00:29 485144 ----a-w- c:\programdata\avg8\update\backup\avgrsx.exe
2009-08-03 22:42 . 2009-08-04 00:26 1057048 ----a-w- c:\programdata\avg8\update\backup\avgupd.exe
2009-08-03 22:42 . 2009-08-04 00:26 1424152 ----a-w- c:\programdata\avg8\update\backup\avgupd.dll
2009-08-03 22:42 . 2009-08-04 00:26 745240 ----a-w- c:\programdata\avg8\update\backup\avginet.dll
2009-08-03 22:42 . 2009-08-04 00:26 578840 ----a-w- c:\programdata\avg8\update\backup\avgiproxy.exe
2009-08-03 10:13 . 2008-09-10 22:33 -------- d-----w- c:\users\Owner\AppData\Roaming\Skype
2009-08-02 20:04 . 2008-10-01 01:54 -------- d-----w- c:\users\Owner\AppData\Roaming\skypePM
2009-07-31 16:59 . 2008-10-13 18:47 -------- d-----w- c:\users\Owner\AppData\Roaming\U3
2009-07-18 16:06 . 2009-08-02 01:34 827904 ----a-w- c:\windows\system32\wininet.dll
2009-07-18 16:01 . 2009-08-02 01:34 78336 ----a-w- c:\windows\system32\ieencode.dll
2009-07-18 09:46 . 2009-08-02 01:34 26624 ----a-w- c:\windows\system32\ieUnatt.exe
2009-07-18 02:28 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2009-06-25 00:00 . 2009-06-25 00:00 -------- d-----w- c:\users\Owner\AppData\Roaming\GlarySoft
2009-06-24 23:56 . 2009-06-24 23:56 -------- d-----w- c:\program files\AskBarDis
2009-06-24 23:56 . 2009-06-24 23:56 -------- d-----w- c:\program files\Glary Utilities
2009-06-24 23:31 . 2009-06-23 01:53 -------- d-----w- c:\users\Owner\AppData\Roaming\TrueCrypt
2009-06-23 01:19 . 2009-06-23 01:19 217664 ----a-w- c:\windows\system32\drivers\truecrypt.sys
2009-06-22 11:02 . 2009-06-22 11:02 -------- d-----w- c:\program files\7-Zip
2009-06-07 11:13 . 2009-06-07 11:13 456304 ----a-w- c:\programdata\Google\Google Toolbar\Update\gtbEF11.tmp.exe
2009-05-31 03:04 . 2009-05-31 03:04 652296 ----a-w- c:\programdata\Microsoft\eHome\Packages\SportsTemplate\SportsTemplateCore\M icrosoft.MediaCenter.Sports.UI.dll
2009-05-31 03:04 . 2009-05-31 03:04 416128 ----a-w- c:\programdata\Microsoft\eHome\Packages\NetTV\Browse\NetTVResources.dll
2009-05-07 21:31 . 2009-05-07 21:31 1915520 ----a-w- c:\users\Owner\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\fpupdateax\fpupdateax.exe
2009-07-30 11:26 . 2009-08-03 23:03 137208 ----a-w- c:\program files\mozilla firefox\components\brwsrcmp.dll
.

((((((((((((((((((((((((((((( SnapShot@2009-08-04_11.51.24 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-08-04 23:58 . 2008-06-20 01:13 25616 c:\windows\winsxs\x86_wpf-xamlviewer_31bf3856ad364e35_6.0.6001.22208_none_569fed8296034a38\XamlViewer _v0300.exe
+ 2009-08-04 23:58 . 2008-06-20 01:14 25616 c:\windows\winsxs\x86_wpf-xamlviewer_31bf3856ad364e35_6.0.6001.18096_none_55b2fef17d307612\XamlViewer _v0300.exe
+ 2009-08-04 23:58 . 2008-06-20 01:12 25616 c:\windows\winsxs\x86_wpf-xamlviewer_31bf3856ad364e35_6.0.6000.20864_none_5474ce2c9910fb91\XamlViewer _v0300.exe
+ 2009-08-04 23:58 . 2008-06-20 01:18 25616 c:\windows\winsxs\x86_wpf-xamlviewer_31bf3856ad364e35_6.0.6000.16708_none_543012117fbf197d\XamlViewer _v0300.exe
+ 2009-08-04 23:58 . 2008-06-20 01:13 94208 c:\windows\winsxs\x86_wpf-windowsformsintegration_31bf3856ad364e35_6.0.6001.22208_none_faadb06494e679 34\WindowsFormsIntegration.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 94208 c:\windows\winsxs\x86_wpf-windowsformsintegration_31bf3856ad364e35_6.0.6001.18096_none_f9c0c1d37c13a5 0e\WindowsFormsIntegration.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 94208 c:\windows\winsxs\x86_wpf-windowsformsintegration_31bf3856ad364e35_6.0.6000.20864_none_f882910e97f42a 8d\WindowsFormsIntegration.dll
+ 2009-08-04 23:58 . 2008-06-20 01:18 94208 c:\windows\winsxs\x86_wpf-windowsformsintegration_31bf3856ad364e35_6.0.6000.16708_none_f83dd4f37ea248 79\WindowsFormsIntegration.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 98304 c:\windows\winsxs\x86_wpf-uiautomationtypes_31bf3856ad364e35_6.0.6001.22208_none_5da3c26eb406f41a\UIA utomationTypes.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 98304 c:\windows\winsxs\x86_wpf-uiautomationtypes_31bf3856ad364e35_6.0.6001.18096_none_5cb6d3dd9b341ff4\UIA utomationTypes.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 98304 c:\windows\winsxs\x86_wpf-uiautomationtypes_31bf3856ad364e35_6.0.6000.20864_none_5b78a318b714a573\UIA utomationTypes.dll
+ 2009-08-04 23:58 . 2008-06-20 01:18 98304 c:\windows\winsxs\x86_wpf-uiautomationtypes_31bf3856ad364e35_6.0.6000.16708_none_5b33e6fd9dc2c35f\UIA utomationTypes.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 40960 c:\windows\winsxs\x86_wpf-uiautomationprovider_31bf3856ad364e35_6.0.6001.22208_none_052e7256a4084ac0\ UIAutomationProvider.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 40960 c:\windows\winsxs\x86_wpf-uiautomationprovider_31bf3856ad364e35_6.0.6001.18096_none_044183c58b35769a\ UIAutomationProvider.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 40960 c:\windows\winsxs\x86_wpf-uiautomationprovider_31bf3856ad364e35_6.0.6000.20864_none_03035300a715fc19\ UIAutomationProvider.dll
+ 2009-08-04 23:58 . 2008-06-20 01:18 40960 c:\windows\winsxs\x86_wpf-uiautomationprovider_31bf3856ad364e35_6.0.6000.16708_none_02be96e58dc41a05\ UIAutomationProvider.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 43544 c:\windows\winsxs\x86_wpf-presentationhostproxy_31bf3856ad364e35_6.0.6001.22208_none_2b1cb7ad92e58514 \PresentationHostProxy.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 43544 c:\windows\winsxs\x86_wpf-presentationhostproxy_31bf3856ad364e35_6.0.6001.18096_none_2a2fc91c7a12b0ee \PresentationHostProxy.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 43544 c:\windows\winsxs\x86_wpf-presentationhostproxy_31bf3856ad364e35_6.0.6000.20864_none_28f1985795f3366d \PresentationHostProxy.dll
+ 2009-08-04 23:58 . 2008-06-20 01:18 43544 c:\windows\winsxs\x86_wpf-presentationhostproxy_31bf3856ad364e35_6.0.6000.16708_none_28acdc3c7ca15459 \PresentationHostProxy.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 46104 c:\windows\winsxs\x86_wpf-presentationfontcache_31bf3856ad364e35_6.0.6001.22208_none_062b37d02b447963 \PresentationFontCache.exe
+ 2009-08-04 23:58 . 2008-06-20 01:14 46104 c:\windows\winsxs\x86_wpf-presentationfontcache_31bf3856ad364e35_6.0.6001.18096_none_053e493f1271a53d \PresentationFontCache.exe
+ 2009-08-04 23:58 . 2008-06-20 01:12 46104 c:\windows\winsxs\x86_wpf-presentationfontcache_31bf3856ad364e35_6.0.6000.20864_none_0400187a2e522abc \PresentationFontCache.exe
+ 2009-08-04 23:58 . 2008-06-20 01:18 46104 c:\windows\winsxs\x86_wpf-presentationfontcache_31bf3856ad364e35_6.0.6000.16708_none_03bb5c5f150048a8 \PresentationFontCache.exe
+ 2009-08-04 23:58 . 2008-06-20 01:13 71160 c:\windows\winsxs\x86_wpf-penimc_31bf3856ad364e35_6.0.6001.22208_none_ac42b3e91dc43b92\PenIMC.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 71160 c:\windows\winsxs\x86_wpf-penimc_31bf3856ad364e35_6.0.6001.18096_none_ab55c55804f1676c\PenIMC.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 71160 c:\windows\winsxs\x86_wpf-penimc_31bf3856ad364e35_6.0.6000.20864_none_aa17949320d1eceb\PenIMC.dll
+ 2009-08-04 23:58 . 2008-06-20 01:18 71160 c:\windows\winsxs\x86_wpf-penimc_31bf3856ad364e35_6.0.6000.16708_none_a9d2d87807800ad7\PenIMC.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 20504 c:\windows\winsxs\x86_wcf-m_svc_mon_sup_dll_31bf3856ad364e35_6.0.6001.22208_none_a66fa64e64b4d286\Ser viceMonikerSupport.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 20504 c:\windows\winsxs\x86_wcf-m_svc_mon_sup_dll_31bf3856ad364e35_6.0.6001.18096_none_a582b7bd4be1fe60\Ser viceMonikerSupport.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 20504 c:\windows\winsxs\x86_wcf-m_svc_mon_sup_dll_31bf3856ad364e35_6.0.6000.20864_none_a44486f867c283df\Ser viceMonikerSupport.dll
+ 2009-08-04 23:58 . 2008-06-20 01:17 20504 c:\windows\winsxs\x86_wcf-m_svc_mon_sup_dll_31bf3856ad364e35_6.0.6000.16708_none_a3ffcadd4e70a1cb\Ser viceMonikerSupport.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 11288 c:\windows\winsxs\x86_wcf-m_sm_ins_rc_dll_31bf3856ad364e35_6.0.6001.22208_none_c98de65862db0acf\Servi ceModelInstallRC.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 11288 c:\windows\winsxs\x86_wcf-m_sm_ins_rc_dll_31bf3856ad364e35_6.0.6001.18096_none_c8a0f7c74a0836a9\Servi ceModelInstallRC.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 11288 c:\windows\winsxs\x86_wcf-m_sm_ins_rc_dll_31bf3856ad364e35_6.0.6000.20864_none_c762c70265e8bc28\Servi ceModelInstallRC.dll
+ 2009-08-04 23:58 . 2008-06-20 01:17 11288 c:\windows\winsxs\x86_wcf-m_sm_ins_rc_dll_31bf3856ad364e35_6.0.6000.16708_none_c71e0ae74c96da14\Servi ceModelInstallRC.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 11280 c:\windows\winsxs\x86_wcf-m_sm_evt_dll_vista_31bf3856ad364e35_6.0.6001.22208_none_78fbd1e5b178083c\Se rviceModelEvents.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 11280 c:\windows\winsxs\x86_wcf-m_sm_evt_dll_vista_31bf3856ad364e35_6.0.6001.18096_none_780ee35498a53416\Se rviceModelEvents.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 11280 c:\windows\winsxs\x86_wcf-m_sm_evt_dll_vista_31bf3856ad364e35_6.0.6000.20864_none_76d0b28fb485b995\Se rviceModelEvents.dll
+ 2009-08-04 23:58 . 2008-06-20 01:17 11280 c:\windows\winsxs\x86_wcf-m_sm_evt_dll_vista_31bf3856ad364e35_6.0.6000.16708_none_768bf6749b33d781\Se rviceModelEvents.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 97800 c:\windows\winsxs\x86_wcf-infocard_api_dll_31bf3856ad364e35_6.0.6001.22208_none_a4789bc9c8b69e2b\info cardapi.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 97800 c:\windows\winsxs\x86_wcf-infocard_api_dll_31bf3856ad364e35_6.0.6001.18096_none_a38bad38afe3ca05\info cardapi.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 97800 c:\windows\winsxs\x86_wcf-infocard_api_dll_31bf3856ad364e35_6.0.6000.20864_none_a24d7c73cbc44f84\info cardapi.dll
+ 2009-08-04 23:58 . 2008-06-20 01:17 97800 c:\windows\winsxs\x86_wcf-infocard_api_dll_31bf3856ad364e35_6.0.6000.16708_none_a208c058b2726d70\info cardapi.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 11264 c:\windows\winsxs\x86_wcf-icardres_dll_vista_31bf3856ad364e35_6.0.6001.22208_none_119eed0383ee8cd5\ic ardres.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 11264 c:\windows\winsxs\x86_wcf-icardres_dll_vista_31bf3856ad364e35_6.0.6001.18096_none_10b1fe726b1bb8af\ic ardres.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 11264 c:\windows\winsxs\x86_wcf-icardres_dll_vista_31bf3856ad364e35_6.0.6000.20864_none_0f73cdad86fc3e2e\ic ardres.dll
+ 2009-08-04 23:58 . 2008-06-20 01:17 11264 c:\windows\winsxs\x86_wcf-icardres_dll_vista_31bf3856ad364e35_6.0.6000.16708_none_0f2f11926daa5c1a\ic ardres.dll
+ 2009-08-04 23:51 . 2008-07-27 17:58 32768 c:\windows\winsxs\x86_regsvcs_b03f5f7f11d50a3a_6.0.6001.22230_none_d364a943 819c841d\RegSvcs.exe
+ 2009-08-04 23:51 . 2008-07-27 18:03 32768 c:\windows\winsxs\x86_regsvcs_b03f5f7f11d50a3a_6.0.6001.18111_none_ea3038a7 67f70b0a\RegSvcs.exe
+ 2009-08-04 23:51 . 2008-07-27 17:55 32768 c:\windows\winsxs\x86_regsvcs_b03f5f7f11d50a3a_6.0.6000.20883_none_d38d6a95 8147435c\RegSvcs.exe
+ 2009-08-04 23:51 . 2008-07-27 18:00 32768 c:\windows\winsxs\x86_regsvcs_b03f5f7f11d50a3a_6.0.6000.16720_none_ea5553f1 67a4fe69\RegSvcs.exe
+ 2009-08-04 23:50 . 2008-07-27 17:58 53248 c:\windows\winsxs\x86_regasm_b03f5f7f11d50a3a_6.0.6001.22230_none_00497e9d2 f298b6d\RegAsm.exe
+ 2009-08-04 23:50 . 2008-07-27 18:03 53248 c:\windows\winsxs\x86_regasm_b03f5f7f11d50a3a_6.0.6001.18111_none_17150e011 584125a\RegAsm.exe
+ 2009-08-04 23:50 . 2008-07-27 17:55 53248 c:\windows\winsxs\x86_regasm_b03f5f7f11d50a3a_6.0.6000.20883_none_00723fef2 ed44aac\RegAsm.exe
+ 2009-08-04 23:50 . 2008-07-27 18:00 53248 c:\windows\winsxs\x86_regasm_b03f5f7f11d50a3a_6.0.6000.16720_none_173a294b1 53205b9\RegAsm.exe
+ 2009-08-04 23:50 . 2008-07-27 17:58 37896 c:\windows\winsxs\x86_netfx-wminet_utils_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_5c675395941257b3\WMIN et_Utils.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 37896 c:\windows\winsxs\x86_netfx-wminet_utils_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_7332e2f97a6cdea0\WMIN et_Utils.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 37896 c:\windows\winsxs\x86_netfx-wminet_utils_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_5c9014e793bd16f2\WMIN et_Utils.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 37896 c:\windows\winsxs\x86_netfx-wminet_utils_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_7357fe437a1ad1ff\WMIN et_Utils.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 81400 c:\windows\winsxs\x86_netfx-tlbref_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_4a46e49b6d8ffc7e\TLBREF.DLL
+ 2009-08-04 23:50 . 2008-07-27 18:03 81400 c:\windows\winsxs\x86_netfx-tlbref_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_611273ff53ea836b\TLBREF.DLL
+ 2009-08-04 23:50 . 2008-07-27 17:55 81400 c:\windows\winsxs\x86_netfx-tlbref_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_4a6fa5ed6d3abbbd\TLBREF.DLL
+ 2009-08-04 23:50 . 2008-07-27 18:00 81400 c:\windows\winsxs\x86_netfx-tlbref_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_61378f49539876ca\TLBREF.DLL
+ 2009-08-04 23:50 . 2008-07-27 17:58 95232 c:\windows\winsxs\x86_netfx-shfusion_res_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_8f45fc5fe5d5bfa9\ShFu sRes.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 95232 c:\windows\winsxs\x86_netfx-shfusion_res_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_a6118bc3cc304696\ShFu sRes.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 95232 c:\windows\winsxs\x86_netfx-shfusion_res_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_8f6ebdb1e5807ee8\ShFu sRes.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 95232 c:\windows\winsxs\x86_netfx-shfusion_res_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_a636a70dcbde39f5\ShFu sRes.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 16896 c:\windows\winsxs\x86_netfx-shared_registry_whidbey_31bf3856ad364e35_6.0.6001.22230_none_66e098c8804b99 51\SharedReg12.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 16896 c:\windows\winsxs\x86_netfx-shared_registry_whidbey_31bf3856ad364e35_6.0.6001.18111_none_666d9c1f671cda fc\SharedReg12.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 16896 c:\windows\winsxs\x86_netfx-shared_registry_whidbey_31bf3856ad364e35_6.0.6000.20883_none_64c74b64834ae0 1a\SharedReg12.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 16896 c:\windows\winsxs\x86_netfx-shared_registry_whidbey_31bf3856ad364e35_6.0.6000.16720_none_647b8d4369ff4c a5\SharedReg12.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 16896 c:\windows\winsxs\x86_netfx-shared_netfx_20_perfcounter_31bf3856ad364e35_6.0.6001.22230_none_4dba200b00 4deb5f\sbscmp20_perfcounter.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 16896 c:\windows\winsxs\x86_netfx-shared_netfx_20_perfcounter_31bf3856ad364e35_6.0.6001.18111_none_4d472361e7 1f2d0a\sbscmp20_perfcounter.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 16896 c:\windows\winsxs\x86_netfx-shared_netfx_20_perfcounter_31bf3856ad364e35_6.0.6000.20883_none_4ba0d2a703 4d3228\sbscmp20_perfcounter.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 16896 c:\windows\winsxs\x86_netfx-shared_netfx_20_perfcounter_31bf3856ad364e35_6.0.6000.16720_none_4b551485ea 019eb3\sbscmp20_perfcounter.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 16896 c:\windows\winsxs\x86_netfx-shared_netfx_20_mscorwks_31bf3856ad364e35_6.0.6001.22230_none_8017a6625f87c b2b\sbscmp20_mscorwks.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 16896 c:\windows\winsxs\x86_netfx-shared_netfx_20_mscorwks_31bf3856ad364e35_6.0.6001.18111_none_7fa4a9b946590 cd6\sbscmp20_mscorwks.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 16896 c:\windows\winsxs\x86_netfx-shared_netfx_20_mscorwks_31bf3856ad364e35_6.0.6000.20883_none_7dfe58fe62871 1f4\sbscmp20_mscorwks.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 16896 c:\windows\winsxs\x86_netfx-shared_netfx_20_mscorwks_31bf3856ad364e35_6.0.6000.16720_none_7db29add493b7 e7f\sbscmp20_mscorwks.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 16896 c:\windows\winsxs\x86_netfx-shared_netfx_20_mscorlib_b03f5f7f11d50a3a_6.0.6001.22230_none_3e06e0387a876 6d4\sbscmp20_mscorlib.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 16896 c:\windows\winsxs\x86_netfx-shared_netfx_20_mscorlib_b03f5f7f11d50a3a_6.0.6001.18111_none_54d26f9c60e1e dc1\sbscmp20_mscorlib.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 16896 c:\windows\winsxs\x86_netfx-shared_netfx_20_mscorlib_b03f5f7f11d50a3a_6.0.6000.20883_none_3e2fa18a7a322 613\sbscmp20_mscorlib.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 16896 c:\windows\winsxs\x86_netfx-shared_netfx_20_mscorlib_b03f5f7f11d50a3a_6.0.6000.16720_none_54f78ae6608fe 120\sbscmp20_mscorlib.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 16896 c:\windows\winsxs\x86_netfx-sbscmp10_dll_31bf3856ad364e35_6.0.6001.22230_none_756f2f8f1e31ddf9\sbscmp10 .dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 16896 c:\windows\winsxs\x86_netfx-sbscmp10_dll_31bf3856ad364e35_6.0.6001.18111_none_74fc32e605031fa4\sbscmp10 .dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 16896 c:\windows\winsxs\x86_netfx-sbscmp10_dll_31bf3856ad364e35_6.0.6000.20883_none_7355e22b213124c2\sbscmp10 .dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 16896 c:\windows\winsxs\x86_netfx-sbscmp10_dll_31bf3856ad364e35_6.0.6000.16720_none_730a240a07e5914d\sbscmp10 .dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 14352 c:\windows\winsxs\x86_netfx-sbs_wminet_utils_dll_31bf3856ad364e35_6.0.6001.22230_none_010420a69ef36b65\ sbs_wminet_utils.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 14352 c:\windows\winsxs\x86_netfx-sbs_wminet_utils_dll_31bf3856ad364e35_6.0.6001.18111_none_009123fd85c4ad10\ sbs_wminet_utils.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 14352 c:\windows\winsxs\x86_netfx-sbs_wminet_utils_dll_31bf3856ad364e35_6.0.6000.20883_none_feead342a1f2b22e\ sbs_wminet_utils.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 14352 c:\windows\winsxs\x86_netfx-sbs_wminet_utils_dll_31bf3856ad364e35_6.0.6000.16720_none_fe9f152188a71eb9\ sbs_wminet_utils.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 14344 c:\windows\winsxs\x86_netfx-sbs_vsavb7rt_dll_31bf3856ad364e35_6.0.6001.22230_none_9418950086c65f54\sbs_ VsaVb7rt.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 14344 c:\windows\winsxs\x86_netfx-sbs_vsavb7rt_dll_31bf3856ad364e35_6.0.6001.18111_none_93a598576d97a0ff\sbs_ VsaVb7rt.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 14344 c:\windows\winsxs\x86_netfx-sbs_vsavb7rt_dll_31bf3856ad364e35_6.0.6000.20883_none_91ff479c89c5a61d\sbs_ VsaVb7rt.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 14344 c:\windows\winsxs\x86_netfx-sbs_vsavb7rt_dll_31bf3856ad364e35_6.0.6000.16720_none_91b3897b707a12a8\sbs_ VsaVb7rt.dll
+ 2009-08-04 23:51 . 2008-07-27 17:58 14376 c:\windows\winsxs\x86_netfx-sbs_sys_enterprisesvc_dll_31bf3856ad364e35_6.0.6001.22230_none_619288783f07 9556\sbs_system.enterpriseservices.dll
+ 2009-08-04 23:51 . 2008-07-27 18:03 14376 c:\windows\winsxs\x86_netfx-sbs_sys_enterprisesvc_dll_31bf3856ad364e35_6.0.6001.18111_none_611f8bcf25d8 d701\sbs_system.enterpriseservices.dll
+ 2009-08-04 23:51 . 2008-07-27 17:55 14376 c:\windows\winsxs\x86_netfx-sbs_sys_enterprisesvc_dll_31bf3856ad364e35_6.0.6000.20883_none_5f793b144206 dc1f\sbs_system.enterpriseservices.dll
+ 2009-08-04 23:51 . 2008-07-27 18:00 14376 c:\windows\winsxs\x86_netfx-sbs_sys_enterprisesvc_dll_31bf3856ad364e35_6.0.6000.16720_none_5f2d7cf328bb 48aa\sbs_system.enterpriseservices.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 14352 c:\windows\winsxs\x86_netfx-sbs_sys_data_dll_31bf3856ad364e35_6.0.6001.22230_none_fef2effa05fca369\sbs_ system.data.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 14352 c:\windows\winsxs\x86_netfx-sbs_sys_data_dll_31bf3856ad364e35_6.0.6001.18111_none_fe7ff350eccde514\sbs_ system.data.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 14352 c:\windows\winsxs\x86_netfx-sbs_sys_data_dll_31bf3856ad364e35_6.0.6000.20883_none_fcd9a29608fbea32\sbs_ system.data.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 14352 c:\windows\winsxs\x86_netfx-sbs_sys_data_dll_31bf3856ad364e35_6.0.6000.16720_none_fc8de474efb056bd\sbs_ system.data.dll
+ 2009-08-04 23:51 . 2008-07-27 17:58 14384 c:\windows\winsxs\x86_netfx-sbs_sys_config_install_dll_31bf3856ad364e35_6.0.6001.22230_none_bfb382834e9 d9761\sbs_system.configuration.install.dll
+ 2009-08-04 23:51 . 2008-07-27 18:03 14384 c:\windows\winsxs\x86_netfx-sbs_sys_config_install_dll_31bf3856ad364e35_6.0.6001.18111_none_bf4085da356 ed90c\sbs_system.configuration.install.dll
+ 2009-08-04 23:51 . 2008-07-27 17:55 14384 c:\windows\winsxs\x86_netfx-sbs_sys_config_install_dll_31bf3856ad364e35_6.0.6000.20883_none_bd9a351f519 cde2a\sbs_system.configuration.install.dll
+ 2009-08-04 23:51 . 2008-07-27 18:00 14384 c:\windows\winsxs\x86_netfx-sbs_sys_config_install_dll_31bf3856ad364e35_6.0.6000.16720_none_bd4e76fe385 14ab5\sbs_system.configuration.install.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 14344 c:\windows\winsxs\x86_netfx-sbs_mscorsec_dll_31bf3856ad364e35_6.0.6001.22230_none_e666deedf5675f6c\sbs_ mscorsec.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 14344 c:\windows\winsxs\x86_netfx-sbs_mscorsec_dll_31bf3856ad364e35_6.0.6001.18111_none_e5f3e244dc38a117\sbs_ mscorsec.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 14344 c:\windows\winsxs\x86_netfx-sbs_mscorsec_dll_31bf3856ad364e35_6.0.6000.20883_none_e44d9189f866a635\sbs_ mscorsec.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 14344 c:\windows\winsxs\x86_netfx-sbs_mscorsec_dll_31bf3856ad364e35_6.0.6000.16720_none_e401d368df1b12c0\sbs_ mscorsec.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 14344 c:\windows\winsxs\x86_netfx-sbs_mscorrc_dll_31bf3856ad364e35_6.0.6001.22230_none_a1c30b4c8684fb9c\sbs_m scorrc.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 14344 c:\windows\winsxs\x86_netfx-sbs_mscorrc_dll_31bf3856ad364e35_6.0.6001.18111_none_a1500ea36d563d47\sbs_m scorrc.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 14344 c:\windows\winsxs\x86_netfx-sbs_mscorrc_dll_31bf3856ad364e35_6.0.6000.20883_none_9fa9bde889844265\sbs_m scorrc.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 14344 c:\windows\winsxs\x86_netfx-sbs_mscorrc_dll_31bf3856ad364e35_6.0.6000.16720_none_9f5dffc77038aef0\sbs_m scorrc.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 14344 c:\windows\winsxs\x86_netfx-sbs_mscordbi_dll_31bf3856ad364e35_6.0.6001.22230_none_639928d25085ae4a\sbs_ mscordbi.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 14344 c:\windows\winsxs\x86_netfx-sbs_mscordbi_dll_31bf3856ad364e35_6.0.6001.18111_none_63262c293756eff5\sbs_ mscordbi.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 14344 c:\windows\winsxs\x86_netfx-sbs_mscordbi_dll_31bf3856ad364e35_6.0.6000.20883_none_617fdb6e5384f513\sbs_ mscordbi.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 14344 c:\windows\winsxs\x86_netfx-sbs_mscordbi_dll_31bf3856ad364e35_6.0.6000.16720_none_61341d4d3a39619e\sbs_ mscordbi.dll
+ 2009-08-04 23:51 . 2008-07-27 17:58 14904 c:\windows\winsxs\x86_netfx-sbs_ms_vsa_vb_codedomproc_31bf3856ad364e35_6.0.6001.22230_none_f8126c3faf31 5f4a\sbs_microsoft.vsa.vb.codedomprocessor.dll
+ 2009-08-04 23:51 . 2008-07-27 18:03 14904 c:\windows\winsxs\x86_netfx-sbs_ms_vsa_vb_codedomproc_31bf3856ad364e35_6.0.6001.18111_none_f79f6f969602 a0f5\sbs_microsoft.vsa.vb.codedomprocessor.dll
+ 2009-08-04 23:51 . 2008-07-27 17:55 14904 c:\windows\winsxs\x86_netfx-sbs_ms_vsa_vb_codedomproc_31bf3856ad364e35_6.0.6000.20883_none_f5f91edbb230 a613\sbs_microsoft.vsa.vb.codedomprocessor.dll
+ 2009-08-04 23:51 . 2008-07-27 18:00 14904 c:\windows\winsxs\x86_netfx-sbs_ms_vsa_vb_codedomproc_31bf3856ad364e35_6.0.6000.16720_none_f5ad60ba98e5 129e\sbs_microsoft.vsa.vb.codedomprocessor.dll
+ 2009-08-04 23:51 . 2008-07-27 17:58 14360 c:\windows\winsxs\x86_netfx-sbs_microsoft_jscript_dll_31bf3856ad364e35_6.0.6001.22230_none_fd402afdaaae a2d1\sbs_microsoft.jscript.dll
+ 2009-08-04 23:51 . 2008-07-27 18:03 14360 c:\windows\winsxs\x86_netfx-sbs_microsoft_jscript_dll_31bf3856ad364e35_6.0.6001.18111_none_fccd2e54917f e47c\sbs_microsoft.jscript.dll
+ 2009-08-04 23:51 . 2008-07-27 17:55 14360 c:\windows\winsxs\x86_netfx-sbs_microsoft_jscript_dll_31bf3856ad364e35_6.0.6000.20883_none_fb26dd99adad e99a\sbs_microsoft.jscript.dll
+ 2009-08-04 23:51 . 2008-07-27 18:00 14360 c:\windows\winsxs\x86_netfx-sbs_microsoft_jscript_dll_31bf3856ad364e35_6.0.6000.16720_none_fadb1f789462 5625\sbs_microsoft.jscript.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 14336 c:\windows\winsxs\x86_netfx-sbs_iehost_dll_31bf3856ad364e35_6.0.6001.22230_none_1821598f5ba01811\sbs_ie host.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 14336 c:\windows\winsxs\x86_netfx-sbs_iehost_dll_31bf3856ad364e35_6.0.6001.18111_none_17ae5ce6427159bc\sbs_ie host.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 14336 c:\windows\winsxs\x86_netfx-sbs_iehost_dll_31bf3856ad364e35_6.0.6000.20883_none_16080c2b5e9f5eda\sbs_ie host.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 14336 c:\windows\winsxs\x86_netfx-sbs_iehost_dll_31bf3856ad364e35_6.0.6000.16720_none_15bc4e0a4553cb65\sbs_ie host.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 14352 c:\windows\winsxs\x86_netfx-sbs_diasymreader_dll_31bf3856ad364e35_6.0.6001.22230_none_a7185cc2f855ce77\ sbs_diasymreader.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 14352 c:\windows\winsxs\x86_netfx-sbs_diasymreader_dll_31bf3856ad364e35_6.0.6001.18111_none_a6a56019df271022\ sbs_diasymreader.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 14352 c:\windows\winsxs\x86_netfx-sbs_diasymreader_dll_31bf3856ad364e35_6.0.6000.20883_none_a4ff0f5efb551540\ sbs_diasymreader.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 14352 c:\windows\winsxs\x86_netfx-sbs_diasymreader_dll_31bf3856ad364e35_6.0.6000.16720_none_a4b3513de20981cb\ sbs_diasymreader.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 88584 c:\windows\winsxs\x86_netfx-perfcounter_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_130c52e1194d5fbe\PerfC ounter.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 88584 c:\windows\winsxs\x86_netfx-perfcounter_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_29d7e244ffa7e6ab\PerfC ounter.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 88584 c:\windows\winsxs\x86_netfx-perfcounter_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_1335143318f81efd\PerfC ounter.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 88584 c:\windows\winsxs\x86_netfx-perfcounter_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_29fcfd8eff55da0a\PerfC ounter.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 24584 c:\windows\winsxs\x86_netfx-normalization_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_c565cc64474bc4ea\nor malization.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 24584 c:\windows\winsxs\x86_netfx-normalization_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_dc315bc82da64bd7\nor malization.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 24584 c:\windows\winsxs\x86_netfx-normalization_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_c58e8db646f68429\nor malization.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 24584 c:\windows\winsxs\x86_netfx-normalization_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_dc5677122d543f36\nor malization.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 82944 c:\windows\winsxs\x86_netfx-netfxsbs10_exe_31bf3856ad364e35_6.0.6001.22230_none_3bf81e61c72a5b9c\NETFXS BS10.exe
+ 2009-08-04 23:50 . 2008-07-27 18:03 82944 c:\windows\winsxs\x86_netfx-netfxsbs10_exe_31bf3856ad364e35_6.0.6001.18111_none_3b8521b8adfb9d47\NETFXS BS10.exe
+ 2009-08-04 23:50 . 2008-07-27 17:55 82944 c:\windows\winsxs\x86_netfx-netfxsbs10_exe_31bf3856ad364e35_6.0.6000.20883_none_39ded0fdca29a265\NETFXS BS10.exe
+ 2009-08-04 23:50 . 2008-07-27 18:00 82944 c:\windows\winsxs\x86_netfx-netfxsbs10_exe_31bf3856ad364e35_6.0.6000.16720_none_399312dcb0de0ef0\NETFXS BS10.exe
+ 2009-08-04 23:50 . 2008-07-27 17:58 19456 c:\windows\winsxs\x86_netfx-mscortim_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_b7d330597e7f786d\mscortim .dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 19456 c:\windows\winsxs\x86_netfx-mscortim_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_ce9ebfbd64d9ff5a\mscortim .dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 19456 c:\windows\winsxs\x86_netfx-mscortim_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_b7fbf1ab7e2a37ac\mscortim .dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 19456 c:\windows\winsxs\x86_netfx-mscortim_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_cec3db076487f2b9\mscortim .dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 69632 c:\windows\winsxs\x86_netfx-mscorsvw_exe_b03f5f7f11d50a3a_6.0.6001.22230_none_092b8008021d8703\mscorsvw .exe
+ 2009-08-04 23:50 . 2008-07-27 18:03 69632 c:\windows\winsxs\x86_netfx-mscorsvw_exe_b03f5f7f11d50a3a_6.0.6001.18111_none_1ff70f6be8780df0\mscorsvw .exe
+ 2009-08-04 23:50 . 2008-07-27 17:55 69632 c:\windows\winsxs\x86_netfx-mscorsvw_exe_b03f5f7f11d50a3a_6.0.6000.20883_none_0954415a01c84642\mscorsvw .exe
+ 2009-08-04 23:50 . 2008-07-27 18:00 69632 c:\windows\winsxs\x86_netfx-mscorsvw_exe_b03f5f7f11d50a3a_6.0.6000.16720_none_201c2ab5e826014f\mscorsvw .exe
+ 2009-08-04 23:50 . 2008-07-27 17:58 18944 c:\windows\winsxs\x86_netfx-mscorsn_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_7f8e04aa7abe635a\mscorsn.d ll
+ 2009-08-04 23:50 . 2008-07-27 18:03 18944 c:\windows\winsxs\x86_netfx-mscorsn_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_9659940e6118ea47\mscorsn.d ll
+ 2009-08-04 23:50 . 2008-07-27 17:55 18944 c:\windows\winsxs\x86_netfx-mscorsn_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_7fb6c5fc7a692299\mscorsn.d ll
+ 2009-08-04 23:50 . 2008-07-27 18:00 18944 c:\windows\winsxs\x86_netfx-mscorsn_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_967eaf5860c6dda6\mscorsn.d ll
+ 2009-08-04 23:50 . 2008-07-27 17:58 31744 c:\windows\winsxs\x86_netfx-mscorsecr_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_8ecad3ca082b2720\mscorse cr.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 31744 c:\windows\winsxs\x86_netfx-mscorsecr_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_a596632dee85ae0d\mscorse cr.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 31744 c:\windows\winsxs\x86_netfx-mscorsecr_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_8ef3951c07d5e65f\mscorse cr.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 31744 c:\windows\winsxs\x86_netfx-mscorsecr_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_a5bb7e77ee33a16c\mscorse cr.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 77312 c:\windows\winsxs\x86_netfx-mscorsec_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_fae6aedc0e6b4e7e\mscorsec .dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 77312 c:\windows\winsxs\x86_netfx-mscorsec_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_11b23e3ff4c5d56b\mscorsec .dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 77312 c:\windows\winsxs\x86_netfx-mscorsec_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_fb0f702e0e160dbd\mscorsec .dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 77312 c:\windows\winsxs\x86_netfx-mscorsec_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_11d75989f473c8ca\mscorsec .dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 96768 c:\windows\winsxs\x86_netfx-mscormmc_dll_rtm_31bf3856ad364e35_6.0.6001.22230_none_a7ebd3ffe29b30fd\msco rmmc.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 96768 c:\windows\winsxs\x86_netfx-mscormmc_dll_rtm_31bf3856ad364e35_6.0.6001.18111_none_a778d756c96c72a8\msco rmmc.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 96768 c:\windows\winsxs\x86_netfx-mscormmc_dll_rtm_31bf3856ad364e35_6.0.6000.20883_none_a5d2869be59a77c6\msco rmmc.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 96768 c:\windows\winsxs\x86_netfx-mscormmc_dll_rtm_31bf3856ad364e35_6.0.6000.16720_none_a586c87acc4ee451\msco rmmc.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 94208 c:\windows\winsxs\x86_netfx-mscorld_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_ac146deb63538815\mscorld.d ll
+ 2009-08-04 23:50 . 2008-07-27 18:03 94208 c:\windows\winsxs\x86_netfx-mscorld_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_c2dffd4f49ae0f02\mscorld.d ll
+ 2009-08-04 23:50 . 2008-07-27 17:55 94208 c:\windows\winsxs\x86_netfx-mscorld_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_ac3d2f3d62fe4754\mscorld.d ll
+ 2009-08-04 23:50 . 2008-07-27 18:00 94208 c:\windows\winsxs\x86_netfx-mscorld_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_c3051899495c0261\mscorld.d ll
+ 2009-08-04 23:50 . 2008-07-27 17:58 83968 c:\windows\winsxs\x86_netfx-mscories_dll_31bf3856ad364e35_6.0.6001.22230_none_be8c4c4f0b009af1\mscories .dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 83968 c:\windows\winsxs\x86_netfx-mscories_dll_31bf3856ad364e35_6.0.6001.18111_none_be194fa5f1d1dc9c\mscories .dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 83968 c:\windows\winsxs\x86_netfx-mscories_dll_31bf3856ad364e35_6.0.6000.20883_none_bc72feeb0dffe1ba\mscories .dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 83968 c:\windows\winsxs\x86_netfx-mscories_dll_31bf3856ad364e35_6.0.6000.16720_none_bc2740c9f4b44e45\mscories .dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 46592 c:\windows\winsxs\x86_netfx-mscorie_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_d3cbdc1189d08299\mscorie.d ll
+ 2009-08-04 23:50 . 2008-07-27 18:03 46592 c:\windows\winsxs\x86_netfx-mscorie_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_ea976b75702b0986\mscorie.d ll
+ 2009-08-04 23:50 . 2008-07-27 17:55 46592 c:\windows\winsxs\x86_netfx-mscorie_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_d3f49d63897b41d8\mscorie.d ll
+ 2009-08-04 23:50 . 2008-07-27 18:00 46592 c:\windows\winsxs\x86_netfx-mscorie_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_eabc86bf6fd8fce5\mscorie.d ll
+ 2009-08-04 23:50 . 2008-07-27 17:58 15360 c:\windows\winsxs\x86_netfx-mscorees_dll_31bf3856ad364e35_6.0.6001.22230_none_19c2b92ea4636075\mscorees .dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 15360 c:\windows\winsxs\x86_netfx-mscorees_dll_31bf3856ad364e35_6.0.6001.18111_none_194fbc858b34a220\mscorees .dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 15360 c:\windows\winsxs\x86_netfx-mscorees_dll_31bf3856ad364e35_6.0.6000.20883_none_17a96bcaa762a73e\mscorees .dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 15360 c:\windows\winsxs\x86_netfx-mscorees_dll_31bf3856ad364e35_6.0.6000.16720_none_175dada98e1713c9\mscorees .dll
+ 2009-08-04 23:51 . 2008-07-27 17:58 83456 c:\windows\winsxs\x86_netfx-mscordbc_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_56252df9df5d309a\mscordbc .dll
+ 2009-08-04 23:51 . 2008-07-27 18:03 83456 c:\windows\winsxs\x86_netfx-mscordbc_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_6cf0bd5dc5b7b787\mscordbc .dll
+ 2009-08-04 23:51 . 2008-07-27 17:55 83456 c:\windows\winsxs\x86_netfx-mscordbc_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_564def4bdf07efd9\mscordbc .dll
+ 2009-08-04 23:51 . 2008-07-27 18:00 83456 c:\windows\winsxs\x86_netfx-mscordbc_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_6d15d8a7c565aae6\mscordbc .dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 65032 c:\windows\winsxs\x86_netfx-installutillib_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_9febc1e7f22703d7\In stallUtilLib.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 65032 c:\windows\winsxs\x86_netfx-installutillib_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_b6b7514bd8818ac4\In stallUtilLib.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 65032 c:\windows\winsxs\x86_netfx-installutillib_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_a0148339f1d1c316\In stallUtilLib.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 65032 c:\windows\winsxs\x86_netfx-installutillib_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_b6dc6c95d82f7e23\In stallUtilLib.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 41984 c:\windows\winsxs\x86_netfx-fw_netfxperf_dll_31bf3856ad364e35_6.0.6001.22230_none_94fcd76f946eff94\netf xperf.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 41984 c:\windows\winsxs\x86_netfx-fw_netfxperf_dll_31bf3856ad364e35_6.0.6001.18111_none_9489dac67b40413f\netf xperf.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 41984 c:\windows\winsxs\x86_netfx-fw_netfxperf_dll_31bf3856ad364e35_6.0.6000.20883_none_92e38a0b976e465d\netf xperf.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 41984 c:\windows\winsxs\x86_netfx-fw_netfxperf_dll_31bf3856ad364e35_6.0.6000.16720_none_9297cbea7e22b2e8\netf xperf.dll
+ 2009-08-04 23:51 . 2008-07-27 17:58 18936 c:\windows\winsxs\x86_netfx-fusion_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_ec06bddd243f001b\fusion.dll
+ 2009-08-04 23:51 . 2008-07-27 18:03 18936 c:\windows\winsxs\x86_netfx-fusion_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_02d24d410a998708\fusion.dll
+ 2009-08-04 23:51 . 2008-07-27 17:55 18936 c:\windows\winsxs\x86_netfx-fusion_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_ec2f7f2f23e9bf5a\fusion.dll
+ 2009-08-04 23:51 . 2008-07-27 18:00 18936 c:\windows\winsxs\x86_netfx-fusion_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_02f7688b0a477a67\fusion.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 36344 c:\windows\winsxs\x86_netfx-dw_b03f5f7f11d50a3a_6.0.6001.22230_none_b6d1c8d334ddd99f\dw20.exe
+ 2009-08-04 23:50 . 2008-07-27 18:03 36344 c:\windows\winsxs\x86_netfx-dw_b03f5f7f11d50a3a_6.0.6001.18111_none_cd9d58371b38608c\dw20.exe
+ 2009-08-04 23:50 . 2008-07-27 17:55 36344 c:\windows\winsxs\x86_netfx-dw_b03f5f7f11d50a3a_6.0.6000.20883_none_b6fa8a25348898de\dw20.exe
+ 2009-08-04 23:50 . 2008-07-27 18:00 36344 c:\windows\winsxs\x86_netfx-dw_b03f5f7f11d50a3a_6.0.6000.16720_none_cdc273811ae653eb\dw20.exe
+ 2009-08-04 23:51 . 2008-07-27 17:58 96760 c:\windows\winsxs\x86_netfx-dfshim_dll_31bf3856ad364e35_6.0.6001.22230_none_78e9255d762fdbb1\dfshim.dll
+ 2009-08-04 23:51 . 2008-07-27 18:03 96760 c:\windows\winsxs\x86_netfx-dfshim_dll_31bf3856ad364e35_6.0.6001.18111_none_787628b45d011d5c\dfshim.dll
+ 2009-08-04 23:51 . 2008-07-27 17:55 96760 c:\windows\winsxs\x86_netfx-dfshim_dll_31bf3856ad364e35_6.0.6000.20883_none_76cfd7f9792f227a\dfshim.dll
+ 2009-08-04 23:51 . 2008-07-27 18:00 96760 c:\windows\winsxs\x86_netfx-dfshim_dll_31bf3856ad364e35_6.0.6000.16720_none_768419d85fe38f05\dfshim.dll
+ 2009-08-04 23:51 . 2008-07-27 17:58 62968 c:\windows\winsxs\x86_netfx-dfdll_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_7185974a6e32de81\dfdll.dll
+ 2009-08-04 23:51 . 2008-07-27 18:03 62968 c:\windows\winsxs\x86_netfx-dfdll_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_885126ae548d656e\dfdll.dll
+ 2009-08-04 23:51 . 2008-07-27 17:55 62968 c:\windows\winsxs\x86_netfx-dfdll_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_71ae589c6ddd9dc0\dfdll.dll
+ 2009-08-04 23:51 . 2008-07-27 18:00 62968 c:\windows\winsxs\x86_netfx-dfdll_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_887641f8543b58cd\dfdll.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 13824 c:\windows\winsxs\x86_netfx-cvtresui_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_bacd10f23217d582\CvtResUI .dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 13824 c:\windows\winsxs\x86_netfx-cvtresui_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_d198a05618725c6f\CvtResUI .dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 13824 c:\windows\winsxs\x86_netfx-cvtresui_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_baf5d24431c294c1\CvtResUI .dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 13824 c:\windows\winsxs\x86_netfx-cvtresui_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_d1bdbba018204fce\CvtResUI .dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 35320 c:\windows\winsxs\x86_netfx-cvtres_for_vc_and_vb_b03f5f7f11d50a3a_6.0.6001.22230_none_cef5751c4db35cea\ cvtres.exe
+ 2009-08-04 23:50 . 2008-07-27 18:03 35320 c:\windows\winsxs\x86_netfx-cvtres_for_vc_and_vb_b03f5f7f11d50a3a_6.0.6001.18111_none_e5c10480340de3d7\ cvtres.exe
+ 2009-08-04 23:50 . 2008-07-27 17:55 35320 c:\windows\winsxs\x86_netfx-cvtres_for_vc_and_vb_b03f5f7f11d50a3a_6.0.6000.20883_none_cf1e366e4d5e1c29\ cvtres.exe
+ 2009-08-04 23:50 . 2008-07-27 18:00 35320 c:\windows\winsxs\x86_netfx-cvtres_for_vc_and_vb_b03f5f7f11d50a3a_6.0.6000.16720_none_e5e61fca33bbd736\ cvtres.exe
+ 2009-08-04 23:50 . 2008-07-27 17:58 27136 c:\windows\winsxs\x86_netfx-culture_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_c3e32d9c69e154e1\Culture.d ll
+ 2009-08-04 23:50 . 2008-07-27 18:03 27136 c:\windows\winsxs\x86_netfx-culture_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_daaebd00503bdbce\Culture.d ll
+ 2009-08-04 23:50 . 2008-07-27 17:55 27136 c:\windows\winsxs\x86_netfx-culture_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_c40beeee698c1420\Culture.d ll
+ 2009-08-04 23:50 . 2008-07-27 18:00 27136 c:\windows\winsxs\x86_netfx-culture_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_dad3d84a4fe9cf2d\Culture.d ll
+ 2009-08-04 23:50 . 2008-07-27 17:58 80376 c:\windows\winsxs\x86_netfx-csharp_compiler_csc_b03f5f7f11d50a3a_6.0.6001.22230_none_e7adfd7046bf26c1\c sc.exe
+ 2009-08-04 23:50 . 2008-07-27 18:03 80376 c:\windows\winsxs\x86_netfx-csharp_compiler_csc_b03f5f7f11d50a3a_6.0.6001.18111_none_fe798cd42d19adae\c sc.exe
+ 2009-08-04 23:50 . 2008-07-27 17:55 80376 c:\windows\winsxs\x86_netfx-csharp_compiler_csc_b03f5f7f11d50a3a_6.0.6000.20883_none_e7d6bec24669e600\c sc.exe
+ 2009-08-04 23:50 . 2008-07-27 18:00 80376 c:\windows\winsxs\x86_netfx-csharp_compiler_csc_b03f5f7f11d50a3a_6.0.6000.16720_none_fe9ea81e2cc7a10d\c sc.exe
+ 2009-08-04 23:50 . 2008-07-27 17:58 89608 c:\windows\winsxs\x86_netfx-corperfmonext_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_9c1cec65dc98c049\COR PerfMonExt.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 89608 c:\windows\winsxs\x86_netfx-corperfmonext_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_b2e87bc9c2f34736\COR PerfMonExt.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 89608 c:\windows\winsxs\x86_netfx-corperfmonext_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_9c45adb7dc437f88\COR PerfMonExt.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 89608 c:\windows\winsxs\x86_netfx-corperfmonext_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_b30d9713c2a13a95\COR PerfMonExt.dll
+ 2009-08-04 23:51 . 2008-07-27 17:58 57392 c:\windows\winsxs\x86_netfx-clr_sys_entservcs_thunk_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_3b956266d1 7f0dbf\System.EnterpriseServices.Thunk.dll
+ 2009-08-04 23:51 . 2008-07-27 18:03 57392 c:\windows\winsxs\x86_netfx-clr_sys_entservcs_thunk_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_5260f1cab7 d994ac\System.EnterpriseServices.Thunk.dll
+ 2009-08-04 23:51 . 2008-07-27 17:55 57392 c:\windows\winsxs\x86_netfx-clr_sys_entservcs_thunk_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_3bbe23b8d1 29ccfe\System.EnterpriseServices.Thunk.dll
+ 2009-08-04 23:51 . 2008-07-27 18:00 57392 c:\windows\winsxs\x86_netfx-clr_sys_entservcs_thunk_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_52860d14b7 87880b\System.EnterpriseServices.Thunk.dll
+ 2009-08-04 23:45 . 2008-10-13 22:23 31560 c:\windows\winsxs\x86_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.0.6001.22286_none_ae22a99ca5ea00b1\aspnet_ wp.exe

zm02113 is offline  
Old 5th August 2009   #9
Inactive
THREAD STARTER
 
Profile:
Join Date: Aug 2009
Posts: 22
Computer Experience:
Experienced
zm02113 Reputation Level

My System
Combofix2.txt 2 of 4

+ 2009-08-04 23:50 . 2008-07-27 17:58 33792 c:\windows\winsxs\x86_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.0.6001.22230_none_ae1e30daa5ede838\aspnet_ wp.exe
+ 2009-08-04 23:45 . 2008-10-13 22:26 31560 c:\windows\winsxs\x86_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.0.6001.18155_none_c4ed66468c453b05\aspnet_ wp.exe
+ 2009-08-04 23:50 . 2008-07-27 18:03 33792 c:\windows\winsxs\x86_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.0.6001.18111_none_c4e9c03e8c486f25\aspnet_ wp.exe
+ 2009-08-04 23:45 . 2008-10-13 22:25 31560 c:\windows\winsxs\x86_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.0.6000.20935_none_ae41c306a59d5c57\aspnet_ wp.exe
+ 2009-08-04 23:50 . 2008-07-27 17:55 33792 c:\windows\winsxs\x86_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.0.6000.20883_none_ae46f22ca598a777\aspnet_ wp.exe
+ 2009-08-04 23:45 . 2008-10-13 22:23 31560 c:\windows\winsxs\x86_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.0.6000.16762_none_c512af208bf2fb22\aspnet_ wp.exe
+ 2009-08-04 23:50 . 2008-07-27 18:00 33792 c:\windows\winsxs\x86_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.0.6000.16720_none_c50edb888bf66284\aspnet_ wp.exe
+ 2009-08-04 23:50 . 2008-07-27 17:58 34312 c:\windows\winsxs\x86_netfx-aspnet_state_exe_b03f5f7f11d50a3a_6.0.6001.22230_none_6a52465fdc80f89e\aspn et_state.exe
+ 2009-08-04 23:50 . 2008-07-27 18:03 34312 c:\windows\winsxs\x86_netfx-aspnet_state_exe_b03f5f7f11d50a3a_6.0.6001.18111_none_811dd5c3c2db7f8b\aspn et_state.exe
+ 2009-08-04 23:50 . 2008-07-27 17:55 34312 c:\windows\winsxs\x86_netfx-aspnet_state_exe_b03f5f7f11d50a3a_6.0.6000.20883_none_6a7b07b1dc2bb7dd\aspn et_state.exe
+ 2009-08-04 23:50 . 2008-07-27 18:00 34312 c:\windows\winsxs\x86_netfx-aspnet_state_exe_b03f5f7f11d50a3a_6.0.6000.16720_none_8142f10dc28972ea\aspn et_state.exe
+ 2009-08-04 23:50 . 2008-07-27 17:58 33288 c:\windows\winsxs\x86_netfx-aspnet_regiis_exe_b03f5f7f11d50a3a_6.0.6001.22230_none_fb5d16613b9f1c00\asp net_regiis.exe
+ 2009-08-04 23:50 . 2008-07-27 18:03 33288 c:\windows\winsxs\x86_netfx-aspnet_regiis_exe_b03f5f7f11d50a3a_6.0.6001.18111_none_1228a5c521f9a2ed\asp net_regiis.exe
+ 2009-08-04 23:50 . 2008-07-27 17:55 33288 c:\windows\winsxs\x86_netfx-aspnet_regiis_exe_b03f5f7f11d50a3a_6.0.6000.20883_none_fb85d7b33b49db3f\asp net_regiis.exe
+ 2009-08-04 23:50 . 2008-07-27 18:00 33288 c:\windows\winsxs\x86_netfx-aspnet_regiis_exe_b03f5f7f11d50a3a_6.0.6000.16720_none_124dc10f21a7964c\asp net_regiis.exe
+ 2009-08-04 23:50 . 2008-07-27 17:58 84480 c:\windows\winsxs\x86_netfx-aspnet_rc_dll_res_b03f5f7f11d50a3a_6.0.6001.22230_none_194f3800176a22e3\asp net_rc.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 84480 c:\windows\winsxs\x86_netfx-aspnet_rc_dll_res_b03f5f7f11d50a3a_6.0.6001.18111_none_301ac763fdc4a9d0\asp net_rc.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 84480 c:\windows\winsxs\x86_netfx-aspnet_rc_dll_res_b03f5f7f11d50a3a_6.0.6000.20883_none_1977f9521714e222\asp net_rc.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 84480 c:\windows\winsxs\x86_netfx-aspnet_rc_dll_res_b03f5f7f11d50a3a_6.0.6000.16720_none_303fe2adfd729d2f\asp net_rc.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 33800 c:\windows\winsxs\x86_netfx-aspnet_perf_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_c6dfa1ad165d9fc6\Aspne t_perf.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 33800 c:\windows\winsxs\x86_netfx-aspnet_perf_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_ddab3110fcb826b3\Aspne t_perf.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 33800 c:\windows\winsxs\x86_netfx-aspnet_perf_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_c70862ff16085f05\Aspne t_perf.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 33800 c:\windows\winsxs\x86_netfx-aspnet_perf_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_ddd04c5afc661a12\Aspne t_perf.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 97792 c:\windows\winsxs\x86_netfx-aspnet_mmc_asp_ext_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_79f7f7a1ecc8b0e 1\MmcAspExt.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 97792 c:\windows\winsxs\x86_netfx-aspnet_mmc_asp_ext_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_90c38705d32337c e\MmcAspExt.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 97792 c:\windows\winsxs\x86_netfx-aspnet_mmc_asp_ext_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_7a20b8f3ec73702 0\MmcAspExt.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 97792 c:\windows\winsxs\x86_netfx-aspnet_mmc_asp_ext_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_90e8a24fd2d12b2 d\MmcAspExt.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 17416 c:\windows\winsxs\x86_netfx-aspnet_isapi_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_c6b2c95782a8d4ef\aspn et_isapi.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 17416 c:\windows\winsxs\x86_netfx-aspnet_isapi_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_dd7e58bb69035bdc\aspn et_isapi.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 17416 c:\windows\winsxs\x86_netfx-aspnet_isapi_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_c6db8aa98253942e\aspn et_isapi.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 17416 c:\windows\winsxs\x86_netfx-aspnet_isapi_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_dda3740568b14f3b\aspn et_isapi.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 22024 c:\windows\winsxs\x86_netfx-aspnet_filter_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_be85852d718763f1\asp net_filter.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 22024 c:\windows\winsxs\x86_netfx-aspnet_filter_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_d551149157e1eade\asp net_filter.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 22024 c:\windows\winsxs\x86_netfx-aspnet_filter_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_beae467f71322330\asp net_filter.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 22024 c:\windows\winsxs\x86_netfx-aspnet_filter_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_d5762fdb578fde3d\asp net_filter.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 58880 c:\windows\winsxs\x86_netfx-applaunch_exe_b03f5f7f11d50a3a_6.0.6001.22230_none_ae6c18ea84987f1f\AppLaun ch.exe
+ 2009-08-04 23:50 . 2008-07-27 18:03 58880 c:\windows\winsxs\x86_netfx-applaunch_exe_b03f5f7f11d50a3a_6.0.6001.18111_none_c537a84e6af3060c\AppLaun ch.exe
+ 2009-08-04 23:50 . 2008-07-27 17:55 58880 c:\windows\winsxs\x86_netfx-applaunch_exe_b03f5f7f11d50a3a_6.0.6000.20883_none_ae94da3c84433e5e\AppLaun ch.exe
+ 2009-08-04 23:50 . 2008-07-27 18:00 58880 c:\windows\winsxs\x86_netfx-applaunch_exe_b03f5f7f11d50a3a_6.0.6000.16720_none_c55cc3986aa0f96b\AppLaun ch.exe
+ 2009-08-04 23:50 . 2008-07-27 17:58 28672 c:\windows\winsxs\x86_netfx-_vc_assembly_linker_messages_b03f5f7f11d50a3a_6.0.6001.22230_none_4e662f92b ea93024\alinkui.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 28672 c:\windows\winsxs\x86_netfx-_vc_assembly_linker_messages_b03f5f7f11d50a3a_6.0.6001.18111_none_6531bef6a 503b711\alinkui.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 28672 c:\windows\winsxs\x86_netfx-_vc_assembly_linker_messages_b03f5f7f11d50a3a_6.0.6000.20883_none_4e8ef0e4b e53ef63\alinkui.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 28672 c:\windows\winsxs\x86_netfx-_vc_assembly_linker_messages_b03f5f7f11d50a3a_6.0.6000.16720_none_6556da40a 4b1aa70\alinkui.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 98808 c:\windows\winsxs\x86_netfx-_vc_assembly_linker_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_22314a8c053513 e8\alink.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 98808 c:\windows\winsxs\x86_netfx-_vc_assembly_linker_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_38fcd9efeb8f9a d5\alink.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 98808 c:\windows\winsxs\x86_netfx-_vc_assembly_linker_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_225a0bde04dfd3 27\alink.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 98808 c:\windows\winsxs\x86_netfx-_vc_assembly_linker_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_3921f539eb3d8e 34\alink.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 69632 c:\windows\winsxs\x86_msbuild_b03f5f7f11d50a3a_6.0.6001.22230_none_6a687297 cadcd9e6\MSBuild.exe
+ 2009-08-04 23:50 . 2008-07-27 18:03 69632 c:\windows\winsxs\x86_msbuild_b03f5f7f11d50a3a_6.0.6001.18111_none_813401fb b13760d3\MSBuild.exe
+ 2009-08-04 23:50 . 2008-07-27 17:55 69632 c:\windows\winsxs\x86_msbuild_b03f5f7f11d50a3a_6.0.6000.20883_none_6a9133e9 ca879925\MSBuild.exe
+ 2009-08-04 23:50 . 2008-07-27 18:00 69632 c:\windows\winsxs\x86_msbuild_b03f5f7f11d50a3a_6.0.6000.16720_none_81591d45 b0e55432\MSBuild.exe
+ 2009-08-04 23:50 . 2008-07-27 17:58 72192 c:\windows\winsxs\x86_isymwrapper_b03f5f7f11d50a3a_6.0.6001.22230_none_f190 f5ef2cc517e1\ISymWrapper.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 72192 c:\windows\winsxs\x86_isymwrapper_b03f5f7f11d50a3a_6.0.6001.18111_none_085c 8553131f9ece\ISymWrapper.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 72192 c:\windows\winsxs\x86_isymwrapper_b03f5f7f11d50a3a_6.0.6000.20883_none_f1b9 b7412c6fd720\ISymWrapper.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 72192 c:\windows\winsxs\x86_isymwrapper_b03f5f7f11d50a3a_6.0.6000.16720_none_0881 a09d12cd922d\ISymWrapper.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 28672 c:\windows\winsxs\x86_installutil_b03f5f7f11d50a3a_6.0.6001.22230_none_64ac f3553ac5a0c9\InstallUtil.exe
+ 2009-08-04 23:50 . 2008-07-27 18:03 28672 c:\windows\winsxs\x86_installutil_b03f5f7f11d50a3a_6.0.6001.18111_none_7b78 82b9212027b6\InstallUtil.exe
+ 2009-08-04 23:50 . 2008-07-27 17:55 28672 c:\windows\winsxs\x86_installutil_b03f5f7f11d50a3a_6.0.6000.20883_none_64d5 b4a73a706008\InstallUtil.exe
+ 2009-08-04 23:50 . 2008-07-27 18:00 28672 c:\windows\winsxs\x86_installutil_b03f5f7f11d50a3a_6.0.6000.16720_none_7b9d 9e0320ce1b15\InstallUtil.exe
+ 2009-08-04 23:50 . 2008-07-27 17:58 69120 c:\windows\winsxs\x86_custommarshalers_b03f5f7f11d50a3a_6.0.6001.22230_none _5b747583ab60c1bf\CustomMarshalers.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 69120 c:\windows\winsxs\x86_custommarshalers_b03f5f7f11d50a3a_6.0.6001.18111_none _724004e791bb48ac\CustomMarshalers.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 69120 c:\windows\winsxs\x86_custommarshalers_b03f5f7f11d50a3a_6.0.6000.20883_none _5b9d36d5ab0b80fe\CustomMarshalers.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 69120 c:\windows\winsxs\x86_custommarshalers_b03f5f7f11d50a3a_6.0.6000.16720_none _7265203191693c0b\CustomMarshalers.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 24576 c:\windows\winsxs\x86_aspnet_regbrowsers_b03f5f7f11d50a3a_6.0.6001.22230_no ne_f29d5fad32b759c9\aspnet_regbrowsers.exe
+ 2009-08-04 23:50 . 2008-07-27 18:03 24576 c:\windows\winsxs\x86_aspnet_regbrowsers_b03f5f7f11d50a3a_6.0.6001.18111_no ne_0968ef111911e0b6\aspnet_regbrowsers.exe
+ 2009-08-04 23:50 . 2008-07-27 17:55 24576 c:\windows\winsxs\x86_aspnet_regbrowsers_b03f5f7f11d50a3a_6.0.6000.20883_no ne_f2c620ff32621908\aspnet_regbrowsers.exe
+ 2009-08-04 23:50 . 2008-07-27 18:00 24576 c:\windows\winsxs\x86_aspnet_regbrowsers_b03f5f7f11d50a3a_6.0.6000.16720_no ne_098e0a5b18bfd415\aspnet_regbrowsers.exe
+ 2009-08-04 23:50 . 2008-07-27 17:58 36864 c:\windows\winsxs\x86_aspnet_compiler_b03f5f7f11d50a3a_6.0.6001.22230_none_ 01fc77a472358303\aspnet_compiler.exe
+ 2009-08-04 23:50 . 2008-07-27 18:03 36864 c:\windows\winsxs\x86_aspnet_compiler_b03f5f7f11d50a3a_6.0.6001.18111_none_ 18c80708589009f0\aspnet_compiler.exe
+ 2009-08-04 23:50 . 2008-07-27 17:55 36864 c:\windows\winsxs\x86_aspnet_compiler_b03f5f7f11d50a3a_6.0.6000.20883_none_ 022538f671e04242\aspnet_compiler.exe
+ 2009-08-04 23:50 . 2008-07-27 18:00 36864 c:\windows\winsxs\x86_aspnet_compiler_b03f5f7f11d50a3a_6.0.6000.16720_none_ 18ed2252583dfd4f\aspnet_compiler.exe
+ 2009-08-04 23:58 . 2008-06-20 01:13 94208 c:\windows\winsxs\msil_windowsformsintegration_31bf3856ad364e35_6.0.6001.22 208_none_29708fade773504f\WindowsFormsIntegration.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 94208 c:\windows\winsxs\msil_windowsformsintegration_31bf3856ad364e35_6.0.6001.18 096_none_2883a11ccea07c29\WindowsFormsIntegration.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 94208 c:\windows\winsxs\msil_windowsformsintegration_31bf3856ad364e35_6.0.6000.20 864_none_27457057ea8101a8\WindowsFormsIntegration.dll
+ 2009-08-04 23:58 . 2008-06-20 01:18 94208 c:\windows\winsxs\msil_windowsformsintegration_31bf3856ad364e35_6.0.6000.16 708_none_2700b43cd12f1f94\WindowsFormsIntegration.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 98304 c:\windows\winsxs\msil_uiautomationtypes_31bf3856ad364e35_6.0.6001.22208_no ne_b92178d62b667b9d\UIAutomationTypes.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 98304 c:\windows\winsxs\msil_uiautomationtypes_31bf3856ad364e35_6.0.6001.18096_no ne_b8348a451293a777\UIAutomationTypes.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 98304 c:\windows\winsxs\msil_uiautomationtypes_31bf3856ad364e35_6.0.6000.20864_no ne_b6f659802e742cf6\UIAutomationTypes.dll
+ 2009-08-04 23:58 . 2008-06-20 01:18 98304 c:\windows\winsxs\msil_uiautomationtypes_31bf3856ad364e35_6.0.6000.16708_no ne_b6b19d6515224ae2\UIAutomationTypes.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 40960 c:\windows\winsxs\msil_uiautomationprovider_31bf3856ad364e35_6.0.6001.22208 _none_72ded6bb9335d151\UIAutomationProvider.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 40960 c:\windows\winsxs\msil_uiautomationprovider_31bf3856ad364e35_6.0.6001.18096 _none_71f1e82a7a62fd2b\UIAutomationProvider.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 40960 c:\windows\winsxs\msil_uiautomationprovider_31bf3856ad364e35_6.0.6000.20864 _none_70b3b765964382aa\UIAutomationProvider.dll
+ 2009-08-04 23:58 . 2008-06-20 01:18 40960 c:\windows\winsxs\msil_uiautomationprovider_31bf3856ad364e35_6.0.6000.16708 _none_706efb4a7cf1a096\UIAutomationProvider.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 77824 c:\windows\winsxs\msil_system.web.regularexpressions_b03f5f7f11d50a3a_6.0.6 001.22230_none_36c0279e3824ba1d\System.Web.RegularExpressions.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 77824 c:\windows\winsxs\msil_system.web.regularexpressions_b03f5f7f11d50a3a_6.0.6 001.18111_none_4d8bb7021e7f410a\System.Web.RegularExpressions.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 77824 c:\windows\winsxs\msil_system.web.regularexpressions_b03f5f7f11d50a3a_6.0.6 000.20883_none_36e8e8f037cf795c\System.Web.RegularExpressions.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 77824 c:\windows\winsxs\msil_system.web.regularexpressions_b03f5f7f11d50a3a_6.0.6 000.16720_none_4db0d24c1e2d3469\System.Web.RegularExpressions.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 32768 c:\windows\winsxs\msil_system.servicemodel.washosting_b77a5c561934e089_6.0. 6001.22208_none_a740b5acfb06d4be\System.ServiceModel.WasHosting.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 32768 c:\windows\winsxs\msil_system.servicemodel.washosting_b77a5c561934e089_6.0. 6001.18096_none_be178cbae1572534\System.ServiceModel.WasHosting.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 32768 c:\windows\winsxs\msil_system.servicemodel.washosting_b77a5c561934e089_6.0. 6000.20864_none_a76b16c0faaff9ed\System.ServiceModel.WasHosting.dll
+ 2009-08-04 23:58 . 2008-06-20 01:17 32768 c:\windows\winsxs\msil_system.servicemodel.washosting_b77a5c561934e089_6.0. 6000.16708_none_be3260a4e10e6861\System.ServiceModel.WasHosting.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 73728 c:\windows\winsxs\msil_system.servicemodel.install_b77a5c561934e089_6.0.600 1.22208_none_54d3d7ac5086521a\System.ServiceModel.Install.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 73728 c:\windows\winsxs\msil_system.servicemodel.install_b77a5c561934e089_6.0.600 1.18096_none_6baaaeba36d6a290\System.ServiceModel.Install.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 73728 c:\windows\winsxs\msil_system.servicemodel.install_b77a5c561934e089_6.0.600 0.20864_none_54fe38c0502f7749\System.ServiceModel.Install.dll
+ 2009-08-04 23:58 . 2008-06-20 01:17 73728 c:\windows\winsxs\msil_system.servicemodel.install_b77a5c561934e089_6.0.600 0.16708_none_6bc582a4368de5bd\System.ServiceModel.Install.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 81920 c:\windows\winsxs\msil_system.drawing.design_b03f5f7f11d50a3a_6.0.6001.2223 0_none_053d7dceca0e50f6\System.Drawing.Design.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 81920 c:\windows\winsxs\msil_system.drawing.design_b03f5f7f11d50a3a_6.0.6001.1811 1_none_1c090d32b068d7e3\System.Drawing.Design.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 81920 c:\windows\winsxs\msil_system.drawing.design_b03f5f7f11d50a3a_6.0.6000.2088 3_none_05663f20c9b91035\System.Drawing.Design.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 81920 c:\windows\winsxs\msil_system.drawing.design_b03f5f7f11d50a3a_6.0.6000.1672 0_none_1c2e287cb016cb42\System.Drawing.Design.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 81920 c:\windows\winsxs\msil_system.configuration.install_b03f5f7f11d50a3a_6.0.60 01.22230_none_74f6b119924b1b75\System.Configuration.Install.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 81920 c:\windows\winsxs\msil_system.configuration.install_b03f5f7f11d50a3a_6.0.60 01.18111_none_8bc2407d78a5a262\System.Configuration.Install.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 81920 c:\windows\winsxs\msil_system.configuration.install_b03f5f7f11d50a3a_6.0.60 00.20883_none_751f726b91f5dab4\System.Configuration.Install.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 81920 c:\windows\winsxs\msil_system.configuration.install_b03f5f7f11d50a3a_6.0.60 00.16720_none_8be75bc7785395c1\System.Configuration.Install.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 46104 c:\windows\winsxs\msil_presentationfontcache_31bf3856ad364e35_6.0.6001.2220 8_none_0e5c71cec94acd32\PresentationFontCache.exe
+ 2009-08-04 23:58 . 2008-06-20 01:14 46104 c:\windows\winsxs\msil_presentationfontcache_31bf3856ad364e35_6.0.6001.1809 6_none_0d6f833db077f90c\PresentationFontCache.exe
+ 2009-08-04 23:58 . 2008-06-20 01:12 46104 c:\windows\winsxs\msil_presentationfontcache_31bf3856ad364e35_6.0.6000.2086 4_none_0c315278cc587e8b\PresentationFontCache.exe
+ 2009-08-04 23:58 . 2008-06-20 01:18 46104 c:\windows\winsxs\msil_presentationfontcache_31bf3856ad364e35_6.0.6000.1670 8_none_0bec965db3069c77\PresentationFontCache.exe
+ 2009-08-04 23:58 . 2008-06-20 01:13 32768 c:\windows\winsxs\msil_presentationcffrasterizer_31bf3856ad364e35_6.0.6001. 22208_none_41ad3623304942fd\PresentationCFFRasterizer.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 32768 c:\windows\winsxs\msil_presentationcffrasterizer_31bf3856ad364e35_6.0.6001. 18096_none_40c0479217766ed7\PresentationCFFRasterizer.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 32768 c:\windows\winsxs\msil_presentationcffrasterizer_31bf3856ad364e35_6.0.6000. 20864_none_3f8216cd3356f456\PresentationCFFRasterizer.dll
+ 2009-08-04 23:58 . 2008-06-20 01:18 32768 c:\windows\winsxs\msil_presentationcffrasterizer_31bf3856ad364e35_6.0.6000. 16708_none_3f3d5ab21a051242\PresentationCFFRasterizer.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 32768 c:\windows\winsxs\msil_microsoft.vsa_b03f5f7f11d50a3a_6.0.6001.22230_none_5 184820053c60f93\Microsoft.Vsa.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 32768 c:\windows\winsxs\msil_microsoft.vsa_b03f5f7f11d50a3a_6.0.6001.18111_none_6 85011643a209680\Microsoft.Vsa.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 32768 c:\windows\winsxs\msil_microsoft.vsa_b03f5f7f11d50a3a_6.0.6000.20883_none_5 1ad43525370ced2\Microsoft.Vsa.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 32768 c:\windows\winsxs\msil_microsoft.vsa_b03f5f7f11d50a3a_6.0.6000.16720_none_6 8752cae39ce89df\Microsoft.Vsa.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 12800 c:\windows\winsxs\msil_microsoft.vsa.vb.codedomprocessor_b03f5f7f11d50a3a_6 .0.6001.22230_none_2db156f10c3d89a8\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 12800 c:\windows\winsxs\msil_microsoft.vsa.vb.codedomprocessor_b03f5f7f11d50a3a_6 .0.6001.18111_none_447ce654f2981095\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 12800 c:\windows\winsxs\msil_microsoft.vsa.vb.codedomprocessor_b03f5f7f11d50a3a_6 .0.6000.20883_none_2dda18430be848e7\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 12800 c:\windows\winsxs\msil_microsoft.vsa.vb.codedomprocessor_b03f5f7f11d50a3a_6 .0.6000.16720_none_44a2019ef24603f4\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 28672 c:\windows\winsxs\msil_microsoft.visualbasic.vsa_b03f5f7f11d50a3a_6.0.6001. 22230_none_dc0dbeaf661f6557\Microsoft.VisualBasic.Vsa.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 28672 c:\windows\winsxs\msil_microsoft.visualbasic.vsa_b03f5f7f11d50a3a_6.0.6001. 18111_none_f2d94e134c79ec44\Microsoft.VisualBasic.Vsa.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 28672 c:\windows\winsxs\msil_microsoft.visualbasic.vsa_b03f5f7f11d50a3a_6.0.6000. 20883_none_dc36800165ca2496\Microsoft.VisualBasic.Vsa.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 28672 c:\windows\winsxs\msil_microsoft.visualbasic.vsa_b03f5f7f11d50a3a_6.0.6000. 16720_none_f2fe695d4c27dfa3\Microsoft.VisualBasic.Vsa.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 77824 c:\windows\winsxs\msil_microsoft.build.utilities_b03f5f7f11d50a3a_6.0.6001. 22230_none_cb3ecf4cbea98a6d\Microsoft.Build.Utilities.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 77824 c:\windows\winsxs\msil_microsoft.build.utilities_b03f5f7f11d50a3a_6.0.6001. 18111_none_e20a5eb0a504115a\Microsoft.Build.Utilities.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 77824 c:\windows\winsxs\msil_microsoft.build.utilities_b03f5f7f11d50a3a_6.0.6000. 20883_none_cb67909ebe5449ac\Microsoft.Build.Utilities.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 77824 c:\windows\winsxs\msil_microsoft.build.utilities_b03f5f7f11d50a3a_6.0.6000. 16720_none_e22f79faa4b204b9\Microsoft.Build.Utilities.dll
+ 2009-08-04 23:51 . 2008-07-27 17:58 36864 c:\windows\winsxs\msil_microsoft.build.framework_b03f5f7f11d50a3a_6.0.6001. 22230_none_abfd81959d3a459f\Microsoft.Build.Framework.dll
+ 2009-08-04 23:51 . 2008-07-27 18:03 36864 c:\windows\winsxs\msil_microsoft.build.framework_b03f5f7f11d50a3a_6.0.6001. 18111_none_c2c910f98394cc8c\Microsoft.Build.Framework.dll
+ 2009-08-04 23:51 . 2008-07-27 17:55 36864 c:\windows\winsxs\msil_microsoft.build.framework_b03f5f7f11d50a3a_6.0.6000. 20883_none_ac2642e79ce504de\Microsoft.Build.Framework.dll
+ 2009-08-04 23:51 . 2008-07-27 18:00 36864 c:\windows\winsxs\msil_microsoft.build.framework_b03f5f7f11d50a3a_6.0.6000. 16720_none_c2ee2c438342bfeb\Microsoft.Build.Framework.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 40960 c:\windows\winsxs\msil_jsc_b03f5f7f11d50a3a_6.0.6001.22230_none_9109522ef11 c4db7\jsc.exe
+ 2009-08-04 23:50 . 2008-07-27 18:03 40960 c:\windows\winsxs\msil_jsc_b03f5f7f11d50a3a_6.0.6001.18111_none_a7d4e192d77 6d4a4\jsc.exe
+ 2009-08-04 23:50 . 2008-07-27 17:55 40960 c:\windows\winsxs\msil_jsc_b03f5f7f11d50a3a_6.0.6000.20883_none_91321380f0c 70cf6\jsc.exe
+ 2009-08-04 23:50 . 2008-07-27 18:00 40960 c:\windows\winsxs\msil_jsc_b03f5f7f11d50a3a_6.0.6000.16720_none_a7f9fcdcd72 4c803\jsc.exe
+ 2009-08-04 23:50 . 2008-07-27 17:58 77824 c:\windows\winsxs\msil_iehost_b03f5f7f11d50a3a_6.0.6001.22230_none_678eeb12 21b47c69\IEHost.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 77824 c:\windows\winsxs\msil_iehost_b03f5f7f11d50a3a_6.0.6001.18111_none_7e5a7a76 080f0356\IEHost.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 77824 c:\windows\winsxs\msil_iehost_b03f5f7f11d50a3a_6.0.6000.20883_none_67b7ac64 215f3ba8\IEHost.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 77824 c:\windows\winsxs\msil_iehost_b03f5f7f11d50a3a_6.0.6000.16720_none_7e7f95c0 07bcf6b5\IEHost.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 13312 c:\windows\winsxs\msil_cscompmgd_b03f5f7f11d50a3a_6.0.6001.22230_none_01ccc 492c3ad5c5c\cscompmgd.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 13312 c:\windows\winsxs\msil_cscompmgd_b03f5f7f11d50a3a_6.0.6001.18111_none_18985 3f6aa07e349\cscompmgd.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 13312 c:\windows\winsxs\msil_cscompmgd_b03f5f7f11d50a3a_6.0.6000.20883_none_01f58 5e4c3581b9b\cscompmgd.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 13312 c:\windows\winsxs\msil_cscompmgd_b03f5f7f11d50a3a_6.0.6000.16720_none_18bd6 f40a9b5d6a8\cscompmgd.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 10752 c:\windows\winsxs\msil_accessibility_b03f5f7f11d50a3a_6.0.6001.22230_none_3 6e03523aca1773f\Accessibility.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 10752 c:\windows\winsxs\msil_accessibility_b03f5f7f11d50a3a_6.0.6001.18111_none_4 dabc48792fbfe2c\Accessibility.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 10752 c:\windows\winsxs\msil_accessibility_b03f5f7f11d50a3a_6.0.6000.20883_none_3 708f675ac4c367e\Accessibility.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 10752 c:\windows\winsxs\msil_accessibility_b03f5f7f11d50a3a_6.0.6000.16720_none_4 dd0dfd192a9f18b\Accessibility.dll
+ 2008-01-21 01:58 . 2009-08-04 23:34 44792 c:\windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2006-11-02 13:05 . 2009-08-04 23:34 80220 c:\windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
+ 2008-08-12 17:10 . 2009-08-04 23:34 10796 c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-3194230544-3224124865-140613033-1000_UserData.bin
- 2008-08-11 18:05 . 2009-08-04 02:21 16384 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\ Cookies\index.dat
+ 2008-08-11 18:05 . 2009-08-05 00:12 16384 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\ Cookies\index.dat
+ 2008-08-11 18:05 . 2009-08-05 00:12 49152 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Te mporary Internet Files\Content.IE5\index.dat
- 2008-08-11 18:05 . 2009-08-04 02:21 49152 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Te mporary Internet Files\Content.IE5\index.dat
- 2008-08-11 18:05 . 2009-08-04 02:21 16384 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Hi story\History.IE5\index.dat
+ 2008-08-11 18:05 . 2009-08-05 00:12 16384 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Hi story\History.IE5\index.dat
+ 2008-07-30 03:40 . 2008-07-30 03:40 70648 c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
+ 2008-07-30 03:40 . 2008-07-30 03:40 91136 c:\windows\Microsoft.NET\Framework\v3.5\MSBuild.exe
+ 2008-07-30 03:40 . 2008-07-30 03:40 41984 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft.VisualC.STLCLR.dll
+ 2008-07-30 03:40 . 2008-07-30 03:40 40960 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft.Data.Entity.Build.Tasks.d ll
+ 2008-07-29 22:47 . 2008-07-29 22:47 89080 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.2052.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 92664 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1042.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 95224 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1041.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 89592 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1028.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 84480 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.2052.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 94720 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1042.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 97792 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1041.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 84992 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1028.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 97280 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\DeleteTemp.exe
+ 2008-07-30 03:40 . 2008-07-30 03:40 95224 c:\windows\Microsoft.NET\Framework\v3.5\EdmGen.exe
+ 2008-07-30 03:40 . 2008-07-30 03:40 78856 c:\windows\Microsoft.NET\Framework\v3.5\DataSvcUtil.exe
+ 2008-07-30 03:40 . 2008-07-30 03:40 41984 c:\windows\Microsoft.NET\Framework\v3.5\AddInUtil.exe
+ 2008-07-30 03:40 . 2008-07-30 03:40 41992 c:\windows\Microsoft.NET\Framework\v3.5\AddInProcess32.exe
+ 2008-07-30 03:40 . 2008-07-30 03:40 41992 c:\windows\Microsoft.NET\Framework\v3.5\AddInProcess.exe
+ 2009-08-05 00:25 . 2009-08-05 00:25 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\a398906 172fdf40d370291b01b45104e\Microsoft.Build.Framework.ni.dll
+ 2009-08-05 00:25 . 2009-08-05 00:25 86016 c:\windows\assembly\NativeImages_v2.0.50727_32\loadmxf\9694f5f714e9559dbc08 d726b01c8cd1\loadmxf.ni.exe
+ 2009-08-05 00:25 . 2009-08-05 00:25 44544 c:\windows\assembly\NativeImages_v2.0.50727_32\ehExtCOM\d48c3d66463a5cb2ed7 9b310c6e2108f\ehExtCOM.ni.dll
+ 2009-08-05 00:02 . 2009-08-05 00:02 12288 c:\windows\assembly\GAC_MSIL\System.Windows.Presentation\3.5.0.0__b77a5c561 934e089\System.Windows.Presentation.dll
+ 2009-08-05 00:02 . 2009-08-05 00:02 61440 c:\windows\assembly\GAC_MSIL\System.Web.Routing\3.5.0.0__31bf3856ad364e35\S ystem.Web.Routing.dll
+ 2009-08-05 00:02 . 2009-08-05 00:02 32768 c:\windows\assembly\GAC_MSIL\System.Web.DynamicData.Design\3.5.0.0__31bf385 6ad364e35\System.Web.DynamicData.Design.dll
+ 2009-08-05 00:02 . 2009-08-05 00:02 77824 c:\windows\assembly\GAC_MSIL\System.Web.Abstractions\3.5.0.0__31bf3856ad364 e35\System.Web.Abstractions.dll
+ 2009-08-05 00:02 . 2009-08-05 00:02 53248 c:\windows\assembly\GAC_MSIL\System.Data.DataSetExtensions\3.5.0.0__b77a5c5 61934e089\System.Data.DataSetExtensions.dll
+ 2009-08-05 00:02 . 2009-08-05 00:02 57344 c:\windows\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\3.5.0.0_ _31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
+ 2009-08-05 00:02 . 2009-08-05 00:02 45056 c:\windows\assembly\GAC_MSIL\System.AddIn.Contract\2.0.0.0__b03f5f7f11d50a3 a\System.AddIn.Contract.dll
+ 2009-08-05 00:02 . 2009-08-05 00:02 41984 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\1.0.0.0__b03f5f7f11d5 0a3a\Microsoft.VisualC.STLCLR.dll
+ 2009-08-05 00:02 . 2009-08-05 00:02 94208 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities.v3.5\3.5.0.0__b03f5f 7f11d50a3a\Microsoft.Build.Utilities.v3.5.dll
+ 2009-08-05 00:02 . 2009-08-05 00:02 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\3.5.0.0__b03f5f7f11d 50a3a\Microsoft.Build.Framework.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 7168 c:\windows\winsxs\msil_microsoft_vsavb_b03f5f7f11d50a3a_6.0.6001.22230_none _50329e8ce7943d1c\Microsoft_VsaVb.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 7168 c:\windows\winsxs\msil_microsoft_vsavb_b03f5f7f11d50a3a_6.0.6001.18111_none _66fe2df0cdeec409\Microsoft_VsaVb.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 7168 c:\windows\winsxs\msil_microsoft_vsavb_b03f5f7f11d50a3a_6.0.6000.20883_none _505b5fdee73efc5b\Microsoft_VsaVb.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 7168 c:\windows\winsxs\msil_microsoft_vsavb_b03f5f7f11d50a3a_6.0.6000.16720_none _6723493acd9cb768\Microsoft_VsaVb.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 5632 c:\windows\winsxs\msil_microsoft.visualc_b03f5f7f11d50a3a_6.0.6001.22230_no ne_6e2733a0cb7d3e16\Microsoft.VisualC.Dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 5632 c:\windows\winsxs\msil_microsoft.visualc_b03f5f7f11d50a3a_6.0.6001.18111_no ne_84f2c304b1d7c503\Microsoft.VisualC.Dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 5632 c:\windows\winsxs\msil_microsoft.visualc_b03f5f7f11d50a3a_6.0.6000.20883_no ne_6e4ff4f2cb27fd55\Microsoft.VisualC.Dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 5632 c:\windows\winsxs\msil_microsoft.visualc_b03f5f7f11d50a3a_6.0.6000.16720_no ne_8517de4eb185b862\Microsoft.VisualC.Dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 6656 c:\windows\winsxs\msil_iiehost_b03f5f7f11d50a3a_6.0.6001.22230_none_6abe179 4a5113128\IIEHost.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 6656 c:\windows\winsxs\msil_iiehost_b03f5f7f11d50a3a_6.0.6001.18111_none_8189a6f 88b6bb815\IIEHost.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 6656 c:\windows\winsxs\msil_iiehost_b03f5f7f11d50a3a_6.0.6000.20883_none_6ae6d8e 6a4bbf067\IIEHost.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 6656 c:\windows\winsxs\msil_iiehost_b03f5f7f11d50a3a_6.0.6000.16720_none_81aec24 28b19ab74\IIEHost.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 8192 c:\windows\winsxs\msil_ieexecremote_b03f5f7f11d50a3a_6.0.6001.22230_none_d8 a42d85dedbb6ac\IEExecRemote.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 8192 c:\windows\winsxs\msil_ieexecremote_b03f5f7f11d50a3a_6.0.6001.18111_none_ef 6fbce9c5363d99\IEExecRemote.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 8192 c:\windows\winsxs\msil_ieexecremote_b03f5f7f11d50a3a_6.0.6000.20883_none_d8 cceed7de8675eb\IEExecRemote.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 8192 c:\windows\winsxs\msil_ieexecremote_b03f5f7f11d50a3a_6.0.6000.16720_none_ef 94d833c4e430f8\IEExecRemote.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 9728 c:\windows\winsxs\msil_ieexec_b03f5f7f11d50a3a_6.0.6001.22230_none_68159a7e 2151dff0\IEExec.exe
+ 2009-08-04 23:50 . 2008-07-27 18:03 9728 c:\windows\winsxs\msil_ieexec_b03f5f7f11d50a3a_6.0.6001.18111_none_7ee129e2 07ac66dd\IEExec.exe
+ 2009-08-04 23:50 . 2008-07-27 17:55 9728 c:\windows\winsxs\msil_ieexec_b03f5f7f11d50a3a_6.0.6000.20883_none_683e5bd0 20fc9f2f\IEExec.exe
+ 2009-08-04 23:50 . 2008-07-27 18:00 9728 c:\windows\winsxs\msil_ieexec_b03f5f7f11d50a3a_6.0.6000.16720_none_7f06452c 075a5a3c\IEExec.exe
+ 2009-08-04 23:50 . 2008-07-27 17:58 5120 c:\windows\winsxs\msil_dfsvc_b03f5f7f11d50a3a_6.0.6001.22230_none_4f02a0c0a 2a3299b\dfsvc.exe
+ 2009-08-04 23:50 . 2008-07-27 18:03 5120 c:\windows\winsxs\msil_dfsvc_b03f5f7f11d50a3a_6.0.6001.18111_none_65ce30248 8fdb088\dfsvc.exe
+ 2009-08-04 23:50 . 2008-07-27 17:55 5120 c:\windows\winsxs\msil_dfsvc_b03f5f7f11d50a3a_6.0.6000.20883_none_4f2b6212a 24de8da\dfsvc.exe
+ 2009-08-04 23:50 . 2008-07-27 18:00 5120 c:\windows\winsxs\msil_dfsvc_b03f5f7f11d50a3a_6.0.6000.16720_none_65f34b6e8 8aba3e7\dfsvc.exe
+ 2009-08-05 00:03 . 2009-08-05 00:03 1616 c:\windows\SoftwareDistribution\PostRebootEventCache\{831D97EB-22BC-4055-BA6C-D6304206C9B6}.bin
- 2009-08-04 11:21 . 2009-08-04 11:21 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2009-08-04 23:32 . 2009-08-04 23:32 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2009-08-04 23:32 . 2009-08-04 23:32 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2009-08-04 11:21 . 2009-08-04 11:21 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2008-07-30 03:40 . 2008-07-30 03:40 5632 c:\windows\Microsoft.NET\Framework\v3.5\Sentinel.v3.5Client.dll
+ 2009-08-05 00:02 . 2009-08-05 00:02 5632 c:\windows\assembly\GAC_MSIL\Sentinel.v3.5Client\3.5.0.0__b03f5f7f11d50a3a\ Sentinel.v3.5Client.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 540672 c:\windows\winsxs\x86_wwf-system.workflow.runtime_31bf3856ad364e35_6.0.6001.22208_none_65ac7e9ab91d61 87\System.Workflow.Runtime.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 540672 c:\windows\winsxs\x86_wwf-system.workflow.runtime_31bf3856ad364e35_6.0.6001.18096_none_64bf9009a04a8d 61\System.Workflow.Runtime.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 540672 c:\windows\winsxs\x86_wwf-system.workflow.runtime_31bf3856ad364e35_6.0.6000.20864_none_63815f44bc2b12 e0\System.Workflow.Runtime.dll
+ 2009-08-04 23:58 . 2008-06-20 01:18 540672 c:\windows\winsxs\x86_wwf-system.workflow.runtime_31bf3856ad364e35_6.0.6000.16708_none_633ca329a2d930 cc\System.Workflow.Runtime.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 301568 c:\windows\winsxs\x86_wpf-xpsviewerexe_31bf3856ad364e35_6.0.6001.22208_none_c9c50d8221a5a7d5\XPSViewe r.exe
+ 2009-08-04 23:58 . 2008-06-20 01:14 301568 c:\windows\winsxs\x86_wpf-xpsviewerexe_31bf3856ad364e35_6.0.6001.18096_none_c8d81ef108d2d3af\XPSViewe r.exe
+ 2009-08-04 23:58 . 2008-06-20 01:12 301568 c:\windows\winsxs\x86_wpf-xpsviewerexe_31bf3856ad364e35_6.0.6000.20864_none_c799ee2c24b3592e\XPSViewe r.exe
+ 2009-08-04 23:58 . 2008-06-20 01:18 301568 c:\windows\winsxs\x86_wpf-xpsviewerexe_31bf3856ad364e35_6.0.6000.16708_none_c75532110b61771a\XPSViewe r.exe
+ 2009-08-04 23:58 . 2008-06-20 01:13 385024 c:\windows\winsxs\x86_wpf-uiautomationclientsideproviders_31bf3856ad364e35_6.0.6001.22208_none_554db1 66677cc421\UIAutomationClientsideProviders.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 385024 c:\windows\winsxs\x86_wpf-uiautomationclientsideproviders_31bf3856ad364e35_6.0.6001.18096_none_5460c2 d54ea9effb\UIAutomationClientsideProviders.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 385024 c:\windows\winsxs\x86_wpf-uiautomationclientsideproviders_31bf3856ad364e35_6.0.6000.20864_none_532292 106a8a757a\UIAutomationClientsideProviders.dll
+ 2009-08-04 23:58 . 2008-06-20 01:18 385024 c:\windows\winsxs\x86_wpf-uiautomationclientsideproviders_31bf3856ad364e35_6.0.6000.16708_none_52ddd5 f551389366\UIAutomationClientsideProviders.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 167936 c:\windows\winsxs\x86_wpf-uiautomationclient_31bf3856ad364e35_6.0.6001.22208_none_db0a99315a5ed6b2\UI AutomationClient.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 167936 c:\windows\winsxs\x86_wpf-uiautomationclient_31bf3856ad364e35_6.0.6001.18096_none_da1daaa0418c028c\UI AutomationClient.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 167936 c:\windows\winsxs\x86_wpf-uiautomationclient_31bf3856ad364e35_6.0.6000.20864_none_d8df79db5d6c880b\UI AutomationClient.dll
+ 2009-08-04 23:58 . 2008-06-20 01:18 167936 c:\windows\winsxs\x86_wpf-uiautomationclient_31bf3856ad364e35_6.0.6000.16708_none_d89abdc0441aa5f7\UI AutomationClient.dll
+ 2008-01-21 02:25 . 2008-01-21 02:25 688128 c:\windows\winsxs\x86_wpf-system.speech_31bf3856ad364e35_6.0.6001.22208_none_824e913c35a437af\System. Speech.dll
+ 2008-01-21 02:25 . 2008-01-21 02:25 688128 c:\windows\winsxs\x86_wpf-system.speech_31bf3856ad364e35_6.0.6001.18096_none_8161a2ab1cd16389\System. Speech.dll
+ 2008-01-21 02:25 . 2008-01-21 02:25 688128 c:\windows\winsxs\x86_wpf-system.speech_31bf3856ad364e35_6.0.6000.20864_none_802371e638b1e908\System. Speech.dll
+ 2008-01-21 02:25 . 2008-01-21 02:25 688128 c:\windows\winsxs\x86_wpf-system.speech_31bf3856ad364e35_6.0.6000.16708_none_7fdeb5cb1f6006f4\System. Speech.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 528384 c:\windows\winsxs\x86_wpf-reachframework_31bf3856ad364e35_6.0.6001.22208_none_00bbcc3141cfe80d\ReachF ramework.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 528384 c:\windows\winsxs\x86_wpf-reachframework_31bf3856ad364e35_6.0.6001.18096_none_ffcedda028fd13e7\ReachF ramework.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 528384 c:\windows\winsxs\x86_wpf-reachframework_31bf3856ad364e35_6.0.6000.20864_none_fe90acdb44dd9966\ReachF ramework.dll
+ 2009-08-04 23:58 . 2008-06-20 01:18 528384 c:\windows\winsxs\x86_wpf-reachframework_31bf3856ad364e35_6.0.6000.16708_none_fe4bf0c02b8bb752\ReachF ramework.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 781344 c:\windows\winsxs\x86_wpf-presentationnative_31bf3856ad364e35_6.0.6001.22208_none_5757acdb5f96b091\Pr esentationNative_v0300.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 781344 c:\windows\winsxs\x86_wpf-presentationnative_31bf3856ad364e35_6.0.6001.18096_none_566abe4a46c3dc6b\Pr esentationNative_v0300.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 781344 c:\windows\winsxs\x86_wpf-presentationnative_31bf3856ad364e35_6.0.6000.20864_none_552c8d8562a461ea\Pr esentationNative_v0300.dll
+ 2009-08-04 23:58 . 2008-06-20 01:18 781344 c:\windows\winsxs\x86_wpf-presentationnative_31bf3856ad364e35_6.0.6000.16708_none_54e7d16a49527fd6\Pr esentationNative_v0300.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 326160 c:\windows\winsxs\x86_wpf-presentationhostexe_31bf3856ad364e35_6.0.6001.22208_none_7085d452393445e2\P resentationHost.exe
+ 2009-08-04 23:58 . 2008-06-20 01:14 326160 c:\windows\winsxs\x86_wpf-presentationhostexe_31bf3856ad364e35_6.0.6001.18096_none_6f98e5c1206171bc\P resentationHost.exe
+ 2009-08-04 23:58 . 2008-06-20 01:12 326160 c:\windows\winsxs\x86_wpf-presentationhostexe_31bf3856ad364e35_6.0.6000.20864_none_6e5ab4fc3c41f73b\P resentationHost.exe

zm02113 is offline  
Old 5th August 2009   #10
Inactive
THREAD STARTER
 
Profile:
Join Date: Aug 2009
Posts: 22
Computer Experience:
Experienced
zm02113 Reputation Level

My System

IE automatically pops up new browser windows


Combofix.txt 3 of 5 (it will have to be 5, not 4)
I wish I could see where to attach a log file!

+ 2009-08-04 23:58 . 2008-06-20 01:18 326160 c:\windows\winsxs\x86_wpf-presentationhostexe_31bf3856ad364e35_6.0.6000.16708_none_6e15f8e122f01527\P resentationHost.exe
+ 2009-08-04 23:58 . 2008-06-20 01:13 132120 c:\windows\winsxs\x86_wpf-presentationhostdll_31bf3856ad364e35_6.0.6001.22208_none_709d0e3a3915a370\P resentationHostDLL.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 132120 c:\windows\winsxs\x86_wpf-presentationhostdll_31bf3856ad364e35_6.0.6001.18096_none_6fb01fa92042cf4a\P resentationHostDLL.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 132120 c:\windows\winsxs\x86_wpf-presentationhostdll_31bf3856ad364e35_6.0.6000.20864_none_6e71eee43c2354c9\P resentationHostDLL.dll
+ 2009-08-04 23:58 . 2008-06-20 01:18 132120 c:\windows\winsxs\x86_wpf-presentationhostdll_31bf3856ad364e35_6.0.6000.16708_none_6e2d32c922d172b5\P resentationHostDLL.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 163840 c:\windows\winsxs\x86_wpf-presentationframework.royale_31bf3856ad364e35_6.0.6001.22208_none_eb46d1fac 358e698\PresentationFramework.Royale.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 163840 c:\windows\winsxs\x86_wpf-presentationframework.royale_31bf3856ad364e35_6.0.6001.18096_none_ea59e369a a861272\PresentationFramework.Royale.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 163840 c:\windows\winsxs\x86_wpf-presentationframework.royale_31bf3856ad364e35_6.0.6000.20864_none_e91bb2a4c 66697f1\PresentationFramework.Royale.dll
+ 2009-08-04 23:58 . 2008-06-20 01:18 163840 c:\windows\winsxs\x86_wpf-presentationframework.royale_31bf3856ad364e35_6.0.6000.16708_none_e8d6f689a d14b5dd\PresentationFramework.Royale.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 397312 c:\windows\winsxs\x86_wpf-presentationframework.luna_31bf3856ad364e35_6.0.6001.22208_none_31f03976225 1cd08\PresentationFramework.Luna.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 397312 c:\windows\winsxs\x86_wpf-presentationframework.luna_31bf3856ad364e35_6.0.6001.18096_none_31034ae5097 ef8e2\PresentationFramework.Luna.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 397312 c:\windows\winsxs\x86_wpf-presentationframework.luna_31bf3856ad364e35_6.0.6000.20864_none_2fc51a20255 f7e61\PresentationFramework.Luna.dll
+ 2009-08-04 23:58 . 2008-06-20 01:18 397312 c:\windows\winsxs\x86_wpf-presentationframework.luna_31bf3856ad364e35_6.0.6000.16708_none_2f805e050c0 d9c4d\PresentationFramework.Luna.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 139264 c:\windows\winsxs\x86_wpf-presentationframework.classic_31bf3856ad364e35_6.0.6001.22208_none_f4fae63b 42dc1362\PresentationFramework.Classic.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 139264 c:\windows\winsxs\x86_wpf-presentationframework.classic_31bf3856ad364e35_6.0.6001.18096_none_f40df7aa 2a093f3c\PresentationFramework.Classic.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 139264 c:\windows\winsxs\x86_wpf-presentationframework.classic_31bf3856ad364e35_6.0.6000.20864_none_f2cfc6e5 45e9c4bb\PresentationFramework.Classic.dll
+ 2009-08-04 23:58 . 2008-06-20 01:18 139264 c:\windows\winsxs\x86_wpf-presentationframework.classic_31bf3856ad364e35_6.0.6000.16708_none_f28b0aca 2c97e2a7\PresentationFramework.Classic.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 196608 c:\windows\winsxs\x86_wpf-presentationframework.aero_31bf3856ad364e35_6.0.6001.22208_none_3315609821a 7b585\PresentationFramework.Aero.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 196608 c:\windows\winsxs\x86_wpf-presentationframework.aero_31bf3856ad364e35_6.0.6001.18096_none_3228720708d 4e15f\PresentationFramework.Aero.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 196608 c:\windows\winsxs\x86_wpf-presentationframework.aero_31bf3856ad364e35_6.0.6000.20864_none_30ea414224b 566de\PresentationFramework.Aero.dll
+ 2009-08-04 23:58 . 2008-06-20 01:18 196608 c:\windows\winsxs\x86_wpf-presentationframework.aero_31bf3856ad364e35_6.0.6000.16708_none_30a585270b6 384ca\PresentationFramework.Aero.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 105016 c:\windows\winsxs\x86_wpf-presentationcffrasterizernative_31bf3856ad364e35_6.0.6001.22208_none_ca2700 1ca768d8df\PresentationCFFRasterizerNative_v0300.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 105016 c:\windows\winsxs\x86_wpf-presentationcffrasterizernative_31bf3856ad364e35_6.0.6001.18096_none_c93a11 8b8e9604b9\PresentationCFFRasterizerNative_v0300.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 105016 c:\windows\winsxs\x86_wpf-presentationcffrasterizernative_31bf3856ad364e35_6.0.6000.20864_none_c7fbe0 c6aa768a38\PresentationCFFRasterizerNative_v0300.dll
+ 2009-08-04 23:58 . 2008-06-20 01:18 105016 c:\windows\winsxs\x86_wpf-presentationcffrasterizernative_31bf3856ad364e35_6.0.6000.16708_none_c7b724 ab9124a824\PresentationCFFRasterizerNative_v0300.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 598016 c:\windows\winsxs\x86_wpf-presentationbuildtasks_31bf3856ad364e35_6.0.6001.22208_none_509edfdf6691efe a\PresentationBuildTasks.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 598016 c:\windows\winsxs\x86_wpf-presentationbuildtasks_31bf3856ad364e35_6.0.6001.18096_none_4fb1f14e4dbf1bc 4\PresentationBuildTasks.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 598016 c:\windows\winsxs\x86_wpf-presentationbuildtasks_31bf3856ad364e35_6.0.6000.20864_none_4e73c089699fa14 3\PresentationBuildTasks.dll
+ 2009-08-04 23:58 . 2008-06-20 01:18 598016 c:\windows\winsxs\x86_wpf-presentationbuildtasks_31bf3856ad364e35_6.0.6000.16708_none_4e2f046e504dbf2 f\PresentationBuildTasks.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 966656 c:\windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.0.6001.22208_none_f0724a733 a5cf593\System.Runtime.Serialization.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 966656 c:\windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.0.6001.18096_none_074921812 0ad4609\System.Runtime.Serialization.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 966656 c:\windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.0.6000.20864_none_f09cab873 a061ac2\System.Runtime.Serialization.dll
+ 2009-08-04 23:58 . 2008-06-20 01:17 966656 c:\windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.0.6000.16708_none_0763f56b2 0648936\System.Runtime.Serialization.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 131072 c:\windows\winsxs\x86_wcf-system.io.log_b03f5f7f11d50a3a_6.0.6001.22208_none_c39f387ed4c63b41\System. IO.Log.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 131072 c:\windows\winsxs\x86_wcf-system.io.log_b03f5f7f11d50a3a_6.0.6001.18096_none_da760f8cbb168bb7\System. IO.Log.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 131072 c:\windows\winsxs\x86_wcf-system.io.log_b03f5f7f11d50a3a_6.0.6000.20864_none_c3c99992d46f6070\System. IO.Log.dll
+ 2009-08-04 23:58 . 2008-06-20 01:17 131072 c:\windows\winsxs\x86_wcf-system.io.log_b03f5f7f11d50a3a_6.0.6000.16708_none_da90e376bacdcee4\System. IO.Log.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 430080 c:\windows\winsxs\x86_wcf-system.identitymodel_b03f5f7f11d50a3a_6.0.6001.22208_none_0eda032a5a266f2c\ System.IdentityModel.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 430080 c:\windows\winsxs\x86_wcf-system.identitymodel_b03f5f7f11d50a3a_6.0.6001.18096_none_25b0da384076bfa2\ System.IdentityModel.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 430080 c:\windows\winsxs\x86_wcf-system.identitymodel_b03f5f7f11d50a3a_6.0.6000.20864_none_0f04643e59cf945b\ System.IdentityModel.dll
+ 2009-08-04 23:58 . 2008-06-20 01:17 430080 c:\windows\winsxs\x86_wcf-system.identitymodel_b03f5f7f11d50a3a_6.0.6000.16708_none_25cbae22402e02cf\ System.IdentityModel.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 126976 c:\windows\winsxs\x86_wcf-system.identitymodel.selectors_b03f5f7f11d50a3a_6.0.6001.22208_none_4ca2f28 d4aba1c9a\System.IdentityModel.Selectors.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 126976 c:\windows\winsxs\x86_wcf-system.identitymodel.selectors_b03f5f7f11d50a3a_6.0.6001.18096_none_6379c99 b310a6d10\System.IdentityModel.Selectors.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 126976 c:\windows\winsxs\x86_wcf-system.identitymodel.selectors_b03f5f7f11d50a3a_6.0.6000.20864_none_4ccd53a 14a6341c9\System.IdentityModel.Selectors.dll
+ 2009-08-04 23:58 . 2008-06-20 01:17 126976 c:\windows\winsxs\x86_wcf-system.identitymodel.selectors_b03f5f7f11d50a3a_6.0.6000.16708_none_63949d8 530c1b03d\System.IdentityModel.Selectors.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 181264 c:\windows\winsxs\x86_wcf-m_sm_cfg_ins_exe_31bf3856ad364e35_6.0.6001.22208_none_00b2fd11363c5214\SMCo nfigInstaller.exe
+ 2009-08-04 23:58 . 2008-06-20 01:14 181264 c:\windows\winsxs\x86_wcf-m_sm_cfg_ins_exe_31bf3856ad364e35_6.0.6001.18096_none_ffc60e801d697dee\SMCo nfigInstaller.exe
+ 2009-08-04 23:58 . 2008-06-20 01:12 181264 c:\windows\winsxs\x86_wcf-m_sm_cfg_ins_exe_31bf3856ad364e35_6.0.6000.20864_none_fe87ddbb394a036d\SMCo nfigInstaller.exe
+ 2009-08-04 23:58 . 2008-06-20 01:17 181264 c:\windows\winsxs\x86_wcf-m_sm_cfg_ins_exe_31bf3856ad364e35_6.0.6000.16708_none_fe4321a01ff82159\SMCo nfigInstaller.exe
+ 2009-08-04 23:58 . 2008-06-20 01:13 622080 c:\windows\winsxs\x86_wcf-icardagt_exe_31bf3856ad364e35_6.0.6001.22208_none_32694bc98abe06ed\icardagt .exe
+ 2009-08-04 23:58 . 2008-06-20 01:14 622080 c:\windows\winsxs\x86_wcf-icardagt_exe_31bf3856ad364e35_6.0.6001.18096_none_317c5d3871eb32c7\icardagt .exe
+ 2009-08-04 23:58 . 2008-06-20 01:12 622080 c:\windows\winsxs\x86_wcf-icardagt_exe_31bf3856ad364e35_6.0.6000.20864_none_303e2c738dcbb846\icardagt .exe
+ 2009-08-04 23:58 . 2008-06-20 01:17 622080 c:\windows\winsxs\x86_wcf-icardagt_exe_31bf3856ad364e35_6.0.6000.16708_none_2ff970587479d632\icardagt .exe
+ 2009-08-04 23:50 . 2008-07-27 17:58 261632 c:\windows\winsxs\x86_system.transactions_b77a5c561934e089_6.0.6001.22230_n one_fcc00dc68232b3ca\System.Transactions.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 261632 c:\windows\winsxs\x86_system.transactions_b77a5c561934e089_6.0.6001.18111_n one_138b9d2a688d3ab7\System.Transactions.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 261632 c:\windows\winsxs\x86_system.transactions_b77a5c561934e089_6.0.6000.20883_n one_fce8cf1881dd7309\System.Transactions.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 261632 c:\windows\winsxs\x86_system.transactions_b77a5c561934e089_6.0.6000.16720_n one_13b0b874683b2e16\System.Transactions.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 368640 c:\windows\winsxs\x86_system.printing_31bf3856ad364e35_6.0.6001.22208_none_ 73d203be8f32b550\System.Printing.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 368640 c:\windows\winsxs\x86_system.printing_31bf3856ad364e35_6.0.6001.18096_none_ 72e5152d765fe12a\System.Printing.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 368640 c:\windows\winsxs\x86_system.printing_31bf3856ad364e35_6.0.6000.20864_none_ 71a6e468924066a9\System.Printing.dll
+ 2009-08-04 23:58 . 2008-06-20 01:18 368640 c:\windows\winsxs\x86_system.printing_31bf3856ad364e35_6.0.6000.16708_none_ 7162284d78ee8495\System.Printing.dll
+ 2009-08-04 23:50 . 2008-07-27 18:19 113664 c:\windows\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6001.2 2230_none_bedbf91dc7bc3c9c\System.EnterpriseServices.Wrapper.dll
+ 2009-08-04 23:51 . 2008-07-27 17:58 258048 c:\windows\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6001.2 2230_none_bedbf91dc7bc3c9c\System.EnterpriseServices.dll
+ 2009-08-04 23:50 . 2008-07-27 18:22 113664 c:\windows\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6001.1 8111_none_d5a78881ae16c389\System.EnterpriseServices.Wrapper.dll
+ 2009-08-04 23:51 . 2008-07-27 18:03 258048 c:\windows\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6001.1 8111_none_d5a78881ae16c389\System.EnterpriseServices.dll
+ 2009-08-04 23:50 . 2008-07-27 18:15 113664 c:\windows\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6000.2 0883_none_bf04ba6fc766fbdb\System.EnterpriseServices.Wrapper.dll
+ 2009-08-04 23:51 . 2008-07-27 17:55 258048 c:\windows\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6000.2 0883_none_bf04ba6fc766fbdb\System.EnterpriseServices.dll
+ 2009-08-04 23:50 . 2008-07-27 18:19 113664 c:\windows\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6000.1 6720_none_d5cca3cbadc4b6e8\System.EnterpriseServices.Wrapper.dll
+ 2009-08-04 23:51 . 2008-07-27 18:00 258048 c:\windows\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6000.1 6720_none_d5cca3cbadc4b6e8\System.EnterpriseServices.dll
+ 2009-08-04 23:45 . 2008-10-13 22:23 486400 c:\windows\winsxs\x86_system.data.oracleclient_b77a5c561934e089_6.0.6001.22 286_none_dc6fae9ff6c8faad\System.Data.OracleClient.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 486400 c:\windows\winsxs\x86_system.data.oracleclient_b77a5c561934e089_6.0.6001.22 230_none_dc6b35ddf6cce234\System.Data.OracleClient.dll
+ 2009-08-04 23:45 . 2008-10-13 22:26 486400 c:\windows\winsxs\x86_system.data.oracleclient_b77a5c561934e089_6.0.6001.18 155_none_f33a6b49dd243501\System.Data.OracleClient.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 486400 c:\windows\winsxs\x86_system.data.oracleclient_b77a5c561934e089_6.0.6001.18 111_none_f336c541dd276921\System.Data.OracleClient.dll
+ 2009-08-04 23:45 . 2008-10-13 22:25 486400 c:\windows\winsxs\x86_system.data.oracleclient_b77a5c561934e089_6.0.6000.20 935_none_dc8ec809f67c5653\System.Data.OracleClient.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 486400 c:\windows\winsxs\x86_system.data.oracleclient_b77a5c561934e089_6.0.6000.20 883_none_dc93f72ff677a173\System.Data.OracleClient.dll
+ 2009-08-04 23:45 . 2008-10-13 22:23 486400 c:\windows\winsxs\x86_system.data.oracleclient_b77a5c561934e089_6.0.6000.16 762_none_f35fb423dcd1f51e\System.Data.OracleClient.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 486400 c:\windows\winsxs\x86_system.data.oracleclient_b77a5c561934e089_6.0.6000.16 720_none_f35be08bdcd55c80\System.Data.OracleClient.dll
+ 2009-08-04 23:45 . 2008-10-13 22:23 436040 c:\windows\winsxs\x86_netfx-web_engine_dll_b03f5f7f11d50a3a_6.0.6001.22286_none_1fd91417518c8737\webeng ine.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 438272 c:\windows\winsxs\x86_netfx-web_engine_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_1fd49b5551906ebe\webeng ine.dll
+ 2009-08-04 23:45 . 2008-10-13 22:26 436040 c:\windows\winsxs\x86_netfx-web_engine_dll_b03f5f7f11d50a3a_6.0.6001.18155_none_36a3d0c137e7c18b\webeng ine.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 438272 c:\windows\winsxs\x86_netfx-web_engine_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_36a02ab937eaf5ab\webeng ine.dll
+ 2009-08-04 23:45 . 2008-10-13 22:25 436040 c:\windows\winsxs\x86_netfx-web_engine_dll_b03f5f7f11d50a3a_6.0.6000.20935_none_1ff82d81513fe2dd\webeng ine.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 438272 c:\windows\winsxs\x86_netfx-web_engine_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_1ffd5ca7513b2dfd\webeng ine.dll
+ 2009-08-04 23:45 . 2008-10-13 22:23 436040 c:\windows\winsxs\x86_netfx-web_engine_dll_b03f5f7f11d50a3a_6.0.6000.16762_none_36c9199b379581a8\webeng ine.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 438272 c:\windows\winsxs\x86_netfx-web_engine_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_36c546033798e90a\webeng ine.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 193016 c:\windows\winsxs\x86_netfx-vb_compiler_ui_b03f5f7f11d50a3a_6.0.6001.22230_none_8475eaedc42b16ed\vbc7ui .dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 193016 c:\windows\winsxs\x86_netfx-vb_compiler_ui_b03f5f7f11d50a3a_6.0.6001.18111_none_9b417a51aa859dda\vbc7ui .dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 193016 c:\windows\winsxs\x86_netfx-vb_compiler_ui_b03f5f7f11d50a3a_6.0.6000.20883_none_849eac3fc3d5d62c\vbc7ui .dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 193016 c:\windows\winsxs\x86_netfx-vb_compiler_ui_b03f5f7f11d50a3a_6.0.6000.16720_none_9b66959baa339139\vbc7ui .dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 392184 c:\windows\winsxs\x86_netfx-sos_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_fd2518f6147d7134\SOS.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 392184 c:\windows\winsxs\x86_netfx-sos_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_13f0a859fad7f821\SOS.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 392184 c:\windows\winsxs\x86_netfx-sos_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_fd4dda4814283073\SOS.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 392184 c:\windows\winsxs\x86_netfx-sos_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_1415c3a3fa85eb80\SOS.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 118784 c:\windows\winsxs\x86_netfx-shfusion_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_440dac83e5e384b2\shfusion .dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 118784 c:\windows\winsxs\x86_netfx-shfusion_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_5ad93be7cc3e0b9f\shfusion .dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 118784 c:\windows\winsxs\x86_netfx-shfusion_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_44366dd5e58e43f1\shfusion .dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 118784 c:\windows\winsxs\x86_netfx-shfusion_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_5afe5731cbebfefe\shfusion .dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 143360 c:\windows\winsxs\x86_netfx-peverify_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_85cbd290637bad17\peverify .dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 143360 c:\windows\winsxs\x86_netfx-peverify_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_9c9761f449d63404\peverify .dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 143360 c:\windows\winsxs\x86_netfx-peverify_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_85f493e263266c56\peverify .dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 143360 c:\windows\winsxs\x86_netfx-peverify_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_9cbc7d3e49842763\peverify .dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 100856 c:\windows\winsxs\x86_netfx-ngen_exe_b03f5f7f11d50a3a_6.0.6001.22230_none_60f23c76644878ad\ngen.exe
+ 2009-08-04 23:50 . 2008-07-27 18:03 100856 c:\windows\winsxs\x86_netfx-ngen_exe_b03f5f7f11d50a3a_6.0.6001.18111_none_77bdcbda4aa2ff9a\ngen.exe
+ 2009-08-04 23:50 . 2008-07-27 17:55 100856 c:\windows\winsxs\x86_netfx-ngen_exe_b03f5f7f11d50a3a_6.0.6000.20883_none_611afdc863f337ec\ngen.exe
+ 2009-08-04 23:50 . 2008-07-27 18:00 100856 c:\windows\winsxs\x86_netfx-ngen_exe_b03f5f7f11d50a3a_6.0.6000.16720_none_77e2e7244a50f2f9\ngen.exe
+ 2009-08-04 23:50 . 2008-07-27 17:58 230912 c:\windows\winsxs\x86_netfx-mscorsvc__dll_b03f5f7f11d50a3a_6.0.6001.22230_none_44257d261dae3692\mscorsv c.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 230912 c:\windows\winsxs\x86_netfx-mscorsvc__dll_b03f5f7f11d50a3a_6.0.6001.18111_none_5af10c8a0408bd7f\mscorsv c.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 230912 c:\windows\winsxs\x86_netfx-mscorsvc__dll_b03f5f7f11d50a3a_6.0.6000.20883_none_444e3e781d58f5d1\mscorsv c.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 230912 c:\windows\winsxs\x86_netfx-mscorsvc__dll_b03f5f7f11d50a3a_6.0.6000.16720_none_5b1627d403b6b0de\mscorsv c.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 345600 c:\windows\winsxs\x86_netfx-mscorrc_res_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_d95c84d7b5ee3d09\mscor rc.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 345600 c:\windows\winsxs\x86_netfx-mscorrc_res_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_f028143b9c48c3f6\mscor rc.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 345600 c:\windows\winsxs\x86_netfx-mscorrc_res_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_d9854629b598fc48\mscor rc.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 345600 c:\windows\winsxs\x86_netfx-mscorrc_res_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_f04d2f859bf6b755\mscor rc.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 114176 c:\windows\winsxs\x86_netfx-mscorpe_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_e119214775dc9ac8\mscorpe.d ll
+ 2009-08-04 23:50 . 2008-07-27 18:03 114176 c:\windows\winsxs\x86_netfx-mscorpe_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_f7e4b0ab5c3721b5\mscorpe.d ll
+ 2009-08-04 23:50 . 2008-07-27 17:55 114176 c:\windows\winsxs\x86_netfx-mscorpe_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_e141e29975875a07\mscorpe.d ll
+ 2009-08-04 23:50 . 2008-07-27 18:00 114176 c:\windows\winsxs\x86_netfx-mscorpe_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_f809cbf55be51514\mscorpe.d ll
+ 2009-08-04 23:45 . 2008-10-13 22:23 364872 c:\windows\winsxs\x86_netfx-mscorjit_dll_b03f5f7f11d50a3a_6.0.6001.22286_none_a8967c8b4ad039cb\mscorjit .dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 367104 c:\windows\winsxs\x86_netfx-mscorjit_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_a89203c94ad42152\mscorjit .dll
+ 2009-08-04 23:45 . 2008-10-13 22:26 364872 c:\windows\winsxs\x86_netfx-mscorjit_dll_b03f5f7f11d50a3a_6.0.6001.18155_none_bf613935312b741f\mscorjit .dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 367104 c:\windows\winsxs\x86_netfx-mscorjit_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_bf5d932d312ea83f\mscorjit .dll
+ 2009-08-04 23:45 . 2008-10-13 22:25 364872 c:\windows\winsxs\x86_netfx-mscorjit_dll_b03f5f7f11d50a3a_6.0.6000.20935_none_a8b595f54a839571\mscorjit .dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 367104 c:\windows\winsxs\x86_netfx-mscorjit_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_a8bac51b4a7ee091\mscorjit .dll
+ 2009-08-04 23:45 . 2008-10-13 22:23 364872 c:\windows\winsxs\x86_netfx-mscorjit_dll_b03f5f7f11d50a3a_6.0.6000.16762_none_bf86820f30d9343c\mscorjit .dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 367104 c:\windows\winsxs\x86_netfx-mscorjit_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_bf82ae7730dc9b9e\mscorjit .dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 158720 c:\windows\winsxs\x86_netfx-mscorier_dll_non_mui_31bf3856ad364e35_6.0.6001.22230_none_7cfb3a7ef4453276\ mscorier.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 158720 c:\windows\winsxs\x86_netfx-mscorier_dll_non_mui_31bf3856ad364e35_6.0.6001.18111_none_7c883dd5db167421\ mscorier.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 158720 c:\windows\winsxs\x86_netfx-mscorier_dll_non_mui_31bf3856ad364e35_6.0.6000.20883_none_7ae1ed1af744793f\ mscorier.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 158720 c:\windows\winsxs\x86_netfx-mscorier_dll_non_mui_31bf3856ad364e35_6.0.6000.16720_none_7a962ef9ddf8e5ca\ mscorier.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 282112 c:\windows\winsxs\x86_netfx-mscoree_dll_31bf3856ad364e35_6.0.6001.22230_none_b5c92b126f5f98c8\mscoree.d ll
+ 2009-08-04 23:50 . 2008-07-27 18:03 282112 c:\windows\winsxs\x86_netfx-mscoree_dll_31bf3856ad364e35_6.0.6001.18111_none_b5562e695630da73\mscoree.d ll
+ 2009-08-04 23:50 . 2008-07-27 17:55 282112 c:\windows\winsxs\x86_netfx-mscoree_dll_31bf3856ad364e35_6.0.6000.20883_none_b3afddae725edf91\mscoree.d ll
+ 2009-08-04 23:50 . 2008-07-27 18:00 282112 c:\windows\winsxs\x86_netfx-mscoree_dll_31bf3856ad364e35_6.0.6000.16720_none_b3641f8d59134c1c\mscoree.d ll
+ 2009-08-04 23:50 . 2008-07-27 17:58 308224 c:\windows\winsxs\x86_netfx-mscordbi_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_595b9b3876129b10\mscordbi .dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 308224 c:\windows\winsxs\x86_netfx-mscordbi_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_70272a9c5c6d21fd\mscordbi .dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 308224 c:\windows\winsxs\x86_netfx-mscordbi_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_59845c8a75bd5a4f\mscordbi .dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 308224 c:\windows\winsxs\x86_netfx-mscordbi_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_704c45e65c1b155c\mscordbi .dll
+ 2009-08-04 23:45 . 2008-10-13 22:23 990032 c:\windows\winsxs\x86_netfx-mscordacwks_b03f5f7f11d50a3a_6.0.6001.22286_none_145b49f72084ad98\mscordacw ks.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 998408 c:\windows\winsxs\x86_netfx-mscordacwks_b03f5f7f11d50a3a_6.0.6001.22230_none_1456d1352088951f\mscordacw ks.dll
+ 2009-08-04 23:45 . 2008-10-13 22:26 990032 c:\windows\winsxs\x86_netfx-mscordacwks_b03f5f7f11d50a3a_6.0.6001.18155_none_2b2606a106dfe7ec\mscordacw ks.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 998408 c:\windows\winsxs\x86_netfx-mscordacwks_b03f5f7f11d50a3a_6.0.6001.18111_none_2b22609906e31c0c\mscordacw ks.dll
+ 2009-08-04 23:45 . 2008-10-13 22:25 990032 c:\windows\winsxs\x86_netfx-mscordacwks_b03f5f7f11d50a3a_6.0.6000.20935_none_147a63612038093e\mscordacw ks.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 998408 c:\windows\winsxs\x86_netfx-mscordacwks_b03f5f7f11d50a3a_6.0.6000.20883_none_147f92872033545e\mscordacw ks.dll
+ 2009-08-04 23:45 . 2008-10-13 22:23 990032 c:\windows\winsxs\x86_netfx-mscordacwks_b03f5f7f11d50a3a_6.0.6000.16762_none_2b4b4f7b068da809\mscordacw ks.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 998408 c:\windows\winsxs\x86_netfx-mscordacwks_b03f5f7f11d50a3a_6.0.6000.16720_none_2b477be306910f6b\mscordacw ks.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 798224 c:\windows\winsxs\x86_netfx-eventlogmessages_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_b899b6bd0c9e11ab\ EventLogMessages.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 798224 c:\windows\winsxs\x86_netfx-eventlogmessages_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_cf654620f2f89898\ EventLogMessages.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 798224 c:\windows\winsxs\x86_netfx-eventlogmessages_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_b8c2780f0c48d0ea\ EventLogMessages.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 798224 c:\windows\winsxs\x86_netfx-eventlogmessages_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_cf8a616af2a68bf7\ EventLogMessages.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 575496 c:\windows\winsxs\x86_netfx-debugging_msdia70_b03f5f7f11d50a3a_6.0.6001.22230_none_ba13981d2e5a5238\dia symreader.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 575496 c:\windows\winsxs\x86_netfx-debugging_msdia70_b03f5f7f11d50a3a_6.0.6001.18111_none_d0df278114b4d925\dia symreader.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 575496 c:\windows\winsxs\x86_netfx-debugging_msdia70_b03f5f7f11d50a3a_6.0.6000.20883_none_ba3c596f2e051177\dia symreader.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 575496 c:\windows\winsxs\x86_netfx-debugging_msdia70_b03f5f7f11d50a3a_6.0.6000.16720_none_d10442cb1462cc84\dia symreader.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 145408 c:\windows\winsxs\x86_netfx-csharpcompilermsg_b03f5f7f11d50a3a_6.0.6001.22230_none_5a09847e047c0319\csc ompui.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 145408 c:\windows\winsxs\x86_netfx-csharpcompilermsg_b03f5f7f11d50a3a_6.0.6001.18111_none_70d513e1ead68a06\csc ompui.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 145408 c:\windows\winsxs\x86_netfx-csharpcompilermsg_b03f5f7f11d50a3a_6.0.6000.20883_none_5a3245d00426c258\csc ompui.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 145408 c:\windows\winsxs\x86_netfx-csharpcompilermsg_b03f5f7f11d50a3a_6.0.6000.16720_none_70fa2f2bea847d65\csc ompui.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 105464 c:\windows\winsxs\x86_netfx-clrgc_b03f5f7f11d50a3a_6.0.6001.22230_none_0a006df812af4c45\clrgc.exe
+ 2009-08-04 23:50 . 2008-07-27 18:03 105464 c:\windows\winsxs\x86_netfx-clrgc_b03f5f7f11d50a3a_6.0.6001.18111_none_20cbfd5bf909d332\clrgc.exe
+ 2009-08-04 23:50 . 2008-07-27 17:55 105464 c:\windows\winsxs\x86_netfx-clrgc_b03f5f7f11d50a3a_6.0.6000.20883_none_0a292f4a125a0b84\clrgc.exe
+ 2009-08-04 23:50 . 2008-07-27 18:00 105464 c:\windows\winsxs\x86_netfx-clrgc_b03f5f7f11d50a3a_6.0.6000.16720_none_20f118a5f8b7c691\clrgc.exe
+ 2009-08-04 23:50 . 2008-07-27 17:58 230904 c:\windows\winsxs\x86_netfx-clr_ilasm_exe_b03f5f7f11d50a3a_6.0.6001.22230_none_ec457fefa7731d07\ilasm.e xe
+ 2009-08-04 23:50 . 2008-07-27 18:03 230904 c:\windows\winsxs\x86_netfx-clr_ilasm_exe_b03f5f7f11d50a3a_6.0.6001.18111_none_03110f538dcda3f4\ilasm.e xe
+ 2009-08-04 23:50 . 2008-07-27 17:55 230904 c:\windows\winsxs\x86_netfx-clr_ilasm_exe_b03f5f7f11d50a3a_6.0.6000.20883_none_ec6e4141a71ddc46\ilasm.e xe
+ 2009-08-04 23:50 . 2008-07-27 18:00 230904 c:\windows\winsxs\x86_netfx-clr_ilasm_exe_b03f5f7f11d50a3a_6.0.6000.16720_none_03362a9d8d7b9753\ilasm.e xe
+ 2009-08-04 23:50 . 2008-07-27 17:58 147968 c:\windows\winsxs\x86_netfx-ado_net_diag_b03f5f7f11d50a3a_6.0.6001.22230_none_569074c9018f7402\AdoNetDi ag.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 147968 c:\windows\winsxs\x86_netfx-ado_net_diag_b03f5f7f11d50a3a_6.0.6001.18111_none_6d5c042ce7e9faef\AdoNetDi ag.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 147968 c:\windows\winsxs\x86_netfx-ado_net_diag_b03f5f7f11d50a3a_6.0.6000.20883_none_56b9361b013a3341\AdoNetDi ag.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 147968 c:\windows\winsxs\x86_netfx-ado_net_diag_b03f5f7f11d50a3a_6.0.6000.16720_none_6d811f76e797ee4e\AdoNetDi ag.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 218112 c:\windows\winsxs\x86_netfx-_vsavb7rtui_b03f5f7f11d50a3a_6.0.6001.22230_none_3994b52044ddfb3e\Vsavb7rtU I.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 218112 c:\windows\winsxs\x86_netfx-_vsavb7rtui_b03f5f7f11d50a3a_6.0.6001.18111_none_506044842b38822b\Vsavb7rtU I.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 218112 c:\windows\winsxs\x86_netfx-_vsavb7rtui_b03f5f7f11d50a3a_6.0.6000.20883_none_39bd76724488ba7d\Vsavb7rtU I.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 218112 c:\windows\winsxs\x86_netfx-_vsavb7rtui_b03f5f7f11d50a3a_6.0.6000.16720_none_50855fce2ae6758a\Vsavb7rtU I.dll
+ 2009-08-05 00:03 . 2009-08-05 00:03 655872 c:\windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.21022.8_none_ bcb86ed6ac711f91\msvcr90.dll
+ 2009-08-05 00:03 . 2009-08-05 00:03 568832 c:\windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.21022.8_none_ bcb86ed6ac711f91\msvcp90.dll
+ 2009-08-05 00:03 . 2009-08-05 00:03 224768 c:\windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.21022.8_none_ bcb86ed6ac711f91\msvcm90.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 635904 c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.3053_no ne_d08d7bba442a9b36\msvcr80.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 558080 c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.3053_no ne_d08d7bba442a9b36\msvcp80.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 479232 c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.3053_no ne_d08d7bba442a9b36\msvcm80.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 163840 c:\windows\winsxs\x86_microsoft.transactions.bridge.dtc_b03f5f7f11d50a3a_6. 0.6001.22208_none_d8566749ac903376\Microsoft.Transactions.Bridge.Dtc.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 163840 c:\windows\winsxs\x86_microsoft.transactions.bridge.dtc_b03f5f7f11d50a3a_6. 0.6001.18096_none_ef2d3e5792e083ec\Microsoft.Transactions.Bridge.Dtc.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 163840 c:\windows\winsxs\x86_microsoft.transactions.bridge.dtc_b03f5f7f11d50a3a_6. 0.6000.20864_none_d880c85dac3958a5\Microsoft.Transactions.Bridge.Dtc.dll
+ 2009-08-04 23:58 . 2008-06-20 01:17 163840 c:\windows\winsxs\x86_microsoft.transactions.bridge.dtc_b03f5f7f11d50a3a_6. 0.6000.16708_none_ef4812419297c719\Microsoft.Transactions.Bridge.Dtc.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 881664 c:\windows\winsxs\x86_infocard_b77a5c561934e089_6.0.6001.22208_none_b4bd0a2 b32340979\infocard.exe
+ 2009-08-04 23:58 . 2008-06-20 01:14 881664 c:\windows\winsxs\x86_infocard_b77a5c561934e089_6.0.6001.18096_none_cb93e13 9188459ef\infocard.exe
+ 2009-08-04 23:58 . 2008-06-20 01:12 881664 c:\windows\winsxs\x86_infocard_b77a5c561934e089_6.0.6000.20864_none_b4e76b3 f31dd2ea8\infocard.exe
+ 2009-08-04 23:58 . 2008-06-20 01:17 881664 c:\windows\winsxs\x86_infocard_b77a5c561934e089_6.0.6000.16708_none_cbaeb52 3183b9d1c\infocard.exe
+ 2009-08-04 23:50 . 2008-07-27 17:58 106496 c:\windows\winsxs\x86_caspol_b03f5f7f11d50a3a_6.0.6001.22230_none_550c05fb0 983f4e2\CasPol.exe
+ 2009-08-04 23:50 . 2008-07-27 18:03 106496 c:\windows\winsxs\x86_caspol_b03f5f7f11d50a3a_6.0.6001.18111_none_6bd7955ee fde7bcf\CasPol.exe
+ 2009-08-04 23:50 . 2008-07-27 17:55 106496 c:\windows\winsxs\x86_caspol_b03f5f7f11d50a3a_6.0.6000.20883_none_5534c74d0 92eb421\CasPol.exe
+ 2009-08-04 23:50 . 2008-07-27 18:00 106496 c:\windows\winsxs\x86_caspol_b03f5f7f11d50a3a_6.0.6000.16720_none_6bfcb0a8e f8c6f2e\CasPol.exe
+ 2009-08-04 23:50 . 2008-07-27 17:58 106496 c:\windows\winsxs\x86_aspnet_regsql_b03f5f7f11d50a3a_6.0.6001.22230_none_39 0f7133d5d912da\aspnet_regsql.exe
+ 2009-08-04 23:50 . 2008-07-27 18:03 106496 c:\windows\winsxs\x86_aspnet_regsql_b03f5f7f11d50a3a_6.0.6001.18111_none_4f db0097bc3399c7\aspnet_regsql.exe
+ 2009-08-04 23:50 . 2008-07-27 17:55 106496 c:\windows\winsxs\x86_aspnet_regsql_b03f5f7f11d50a3a_6.0.6000.20883_none_39 383285d583d219\aspnet_regsql.exe
+ 2009-08-04 23:50 . 2008-07-27 18:00 106496 c:\windows\winsxs\x86_aspnet_regsql_b03f5f7f11d50a3a_6.0.6000.16720_none_50 001be1bbe18d26\aspnet_regsql.exe
+ 2009-08-04 23:58 . 2008-06-20 01:13 152576 c:\windows\winsxs\msil_wsatconfig_b03f5f7f11d50a3a_6.0.6001.22208_none_f20f 4d49d1297aed\WsatConfig.exe
+ 2009-08-04 23:58 . 2008-06-20 01:14 152576 c:\windows\winsxs\msil_wsatconfig_b03f5f7f11d50a3a_6.0.6001.18096_none_08e6 2457b779cb63\WsatConfig.exe
+ 2009-08-04 23:58 . 2008-06-20 01:12 152576 c:\windows\winsxs\msil_wsatconfig_b03f5f7f11d50a3a_6.0.6000.20864_none_f239 ae5dd0d2a01c\WsatConfig.exe
+ 2009-08-04 23:58 . 2008-06-20 01:17 152576 c:\windows\winsxs\msil_wsatconfig_b03f5f7f11d50a3a_6.0.6000.16708_none_0900 f841b7310e90\WsatConfig.exe
+ 2009-08-04 23:58 . 2008-06-20 01:13 385024 c:\windows\winsxs\msil_uiautomationclientsideproviders_31bf3856ad364e35_6.0 .6001.22208_none_b77300279b2a623c\UIAutomationClientsideProviders.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 385024 c:\windows\winsxs\msil_uiautomationclientsideproviders_31bf3856ad364e35_6.0 .6001.18096_none_b686119682578e16\UIAutomationClientsideProviders.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 385024 c:\windows\winsxs\msil_uiautomationclientsideproviders_31bf3856ad364e35_6.0 .6000.20864_none_b547e0d19e381395\UIAutomationClientsideProviders.dll
+ 2009-08-04 23:58 . 2008-06-20 01:18 385024 c:\windows\winsxs\msil_uiautomationclientsideproviders_31bf3856ad364e35_6.0 .6000.16708_none_b50324b684e63181\UIAutomationClientsideProviders.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 167936 c:\windows\winsxs\msil_uiautomationclient_31bf3856ad364e35_6.0.6001.22208_n one_21b6b58fa1559515\UIAutomationClient.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 167936 c:\windows\winsxs\msil_uiautomationclient_31bf3856ad364e35_6.0.6001.18096_n one_20c9c6fe8882c0ef\UIAutomationClient.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 167936 c:\windows\winsxs\msil_uiautomationclient_31bf3856ad364e35_6.0.6000.20864_n one_1f8b9639a463466e\UIAutomationClient.dll
+ 2009-08-04 23:58 . 2008-06-20 01:18 167936 c:\windows\winsxs\msil_uiautomationclient_31bf3856ad364e35_6.0.6000.16708_n one_1f46da1e8b11645a\UIAutomationClient.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 540672 c:\windows\winsxs\msil_system.workflow.runtime_31bf3856ad364e35_6.0.6001.22 208_none_d8b0c75ed873478b\System.Workflow.Runtime.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 540672 c:\windows\winsxs\msil_system.workflow.runtime_31bf3856ad364e35_6.0.6001.18 096_none_d7c3d8cdbfa07365\System.Workflow.Runtime.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 540672 c:\windows\winsxs\msil_system.workflow.runtime_31bf3856ad364e35_6.0.6000.20 864_none_d685a808db80f8e4\System.Workflow.Runtime.dll
+ 2009-08-04 23:58 . 2008-06-20 01:18 540672 c:\windows\winsxs\msil_system.workflow.runtime_31bf3856ad364e35_6.0.6000.16 708_none_d640ebedc22f16d0\System.Workflow.Runtime.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 839680 c:\windows\winsxs\msil_system.web.services_b03f5f7f11d50a3a_6.0.6001.22230_ none_dbfaf781cbbdcb4c\System.Web.Services.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 839680 c:\windows\winsxs\msil_system.web.services_b03f5f7f11d50a3a_6.0.6001.18111_ none_f2c686e5b2185239\System.Web.Services.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 839680 c:\windows\winsxs\msil_system.web.services_b03f5f7f11d50a3a_6.0.6000.20883_ none_dc23b8d3cb688a8b\System.Web.Services.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 839680 c:\windows\winsxs\msil_system.web.services_b03f5f7f11d50a3a_6.0.6000.16720_ none_f2eba22fb1c64598\System.Web.Services.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 835584 c:\windows\winsxs\msil_system.web.mobile_b03f5f7f11d50a3a_6.0.6001.22230_no ne_c125c64be9be119e\System.Web.Mobile.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 835584 c:\windows\winsxs\msil_system.web.mobile_b03f5f7f11d50a3a_6.0.6001.18111_no ne_d7f155afd018988b\System.Web.Mobile.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 835584 c:\windows\winsxs\msil_system.web.mobile_b03f5f7f11d50a3a_6.0.6000.20883_no ne_c14e879de968d0dd\System.Web.Mobile.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 835584 c:\windows\winsxs\msil_system.web.mobile_b03f5f7f11d50a3a_6.0.6000.16720_no ne_d81670f9cfc68bea\System.Web.Mobile.dll
+ 2008-01-21 02:25 . 2008-01-21 02:25 688128 c:\windows\winsxs\msil_system.speech_31bf3856ad364e35_6.0.6001.22208_none_0 a7e4c40999e5e7e\System.Speech.dll
+ 2008-01-21 02:25 . 2008-01-21 02:25 688128 c:\windows\winsxs\msil_system.speech_31bf3856ad364e35_6.0.6001.18096_none_0 9915daf80cb8a58\System.Speech.dll
+ 2008-01-21 02:25 . 2008-01-21 02:25 688128 c:\windows\winsxs\msil_system.speech_31bf3856ad364e35_6.0.6000.20864_none_0 8532cea9cac0fd7\System.Speech.dll
+ 2008-01-21 02:25 . 2008-01-21 02:25 688128 c:\windows\winsxs\msil_system.speech_31bf3856ad364e35_6.0.6000.16708_none_0 80e70cf835a2dc3\System.Speech.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 114688 c:\windows\winsxs\msil_system.serviceprocess_b03f5f7f11d50a3a_6.0.6001.2223 0_none_3e3334ff9639896a\System.ServiceProcess.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 114688 c:\windows\winsxs\msil_system.serviceprocess_b03f5f7f11d50a3a_6.0.6001.1811 1_none_54fec4637c941057\System.ServiceProcess.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 114688 c:\windows\winsxs\msil_system.serviceprocess_b03f5f7f11d50a3a_6.0.6000.2088 3_none_3e5bf65195e448a9\System.ServiceProcess.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 114688 c:\windows\winsxs\msil_system.serviceprocess_b03f5f7f11d50a3a_6.0.6000.1672 0_none_5523dfad7c4203b6\System.ServiceProcess.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 258048 c:\windows\winsxs\msil_system.security_b03f5f7f11d50a3a_6.0.6001.22230_none _853c6897e7e5de42\System.Security.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 258048 c:\windows\winsxs\msil_system.security_b03f5f7f11d50a3a_6.0.6001.18111_none _9c07f7fbce40652f\System.Security.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 258048 c:\windows\winsxs\msil_system.security_b03f5f7f11d50a3a_6.0.6000.20883_none _856529e9e7909d81\System.Security.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 258048 c:\windows\winsxs\msil_system.security_b03f5f7f11d50a3a_6.0.6000.16720_none _9c2d1345cdee588e\System.Security.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 966656 c:\windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.0.60 01.22208_none_eb979ea5f9865b51\System.Runtime.Serialization.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 966656 c:\windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.0.60 01.18096_none_026e75b3dfd6abc7\System.Runtime.Serialization.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 966656 c:\windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.0.60 00.20864_none_ebc1ffb9f92f8080\System.Runtime.Serialization.dll
+ 2009-08-04 23:58 . 2008-06-20 01:17 966656 c:\windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.0.60 00.16708_none_0289499ddf8deef4\System.Runtime.Serialization.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 966656 c:\windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6. 0.6001.22208_none_bb54690bd1df5a1e\System.Runtime.Serialization.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 966656 c:\windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6. 0.6001.18096_none_d22b4019b82faa94\System.Runtime.Serialization.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 966656 c:\windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6. 0.6000.20864_none_bb7eca1fd1887f4d\System.Runtime.Serialization.dll
+ 2009-08-04 23:58 . 2008-06-20 01:17 966656 c:\windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6. 0.6000.16708_none_d2461403b7e6edc1\System.Runtime.Serialization.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 131072 c:\windows\winsxs\msil_system.runtime.seri..ion.formatters.soap_b03f5f7f11d 50a3a_6.0.6001.22230_none_31484a573d7508d0\System.Runtime.Serialization.For matters.Soap.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 131072 c:\windows\winsxs\msil_system.runtime.seri..ion.formatters.soap_b03f5f7f11d 50a3a_6.0.6001.18111_none_4813d9bb23cf8fbd\System.Runtime.Serialization.For matters.Soap.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 131072 c:\windows\winsxs\msil_system.runtime.seri..ion.formatters.soap_b03f5f7f11d 50a3a_6.0.6000.20883_none_31710ba93d1fc80f\System.Runtime.Serialization.For matters.Soap.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 131072 c:\windows\winsxs\msil_system.runtime.seri..ion.formatters.soap_b03f5f7f11d 50a3a_6.0.6000.16720_none_4838f505237d831c\System.Runtime.Serialization.For matters.Soap.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 303104 c:\windows\winsxs\msil_system.runtime.remoting_b77a5c561934e089_6.0.6001.22 230_none_aec9c7865ed754f1\System.Runtime.Remoting.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 303104 c:\windows\winsxs\msil_system.runtime.remoting_b77a5c561934e089_6.0.6001.18 111_none_c59556ea4531dbde\System.Runtime.Remoting.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 303104 c:\windows\winsxs\msil_system.runtime.remoting_b77a5c561934e089_6.0.6000.20 883_none_aef288d85e821430\System.Runtime.Remoting.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 303104 c:\windows\winsxs\msil_system.runtime.remoting_b77a5c561934e089_6.0.6000.16 720_none_c5ba723444dfcf3d\System.Runtime.Remoting.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 258048 c:\windows\winsxs\msil_system.messaging_b03f5f7f11d50a3a_6.0.6001.22230_non e_16e7a1313d46b35e\System.Messaging.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 258048 c:\windows\winsxs\msil_system.messaging_b03f5f7f11d50a3a_6.0.6001.18111_non e_2db3309523a13a4b\System.Messaging.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 258048 c:\windows\winsxs\msil_system.messaging_b03f5f7f11d50a3a_6.0.6000.20883_non e_171062833cf1729d\System.Messaging.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 258048 c:\windows\winsxs\msil_system.messaging_b03f5f7f11d50a3a_6.0.6000.16720_non e_2dd84bdf234f2daa\System.Messaging.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 372736 c:\windows\winsxs\msil_system.management_b03f5f7f11d50a3a_6.0.6001.22230_no ne_086acb90261100e7\System.Management.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 372736 c:\windows\winsxs\msil_system.management_b03f5f7f11d50a3a_6.0.6001.18111_no ne_1f365af40c6b87d4\System.Management.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 372736 c:\windows\winsxs\msil_system.management_b03f5f7f11d50a3a_6.0.6000.20883_no ne_08938ce225bbc026\System.Management.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 372736 c:\windows\winsxs\msil_system.management_b03f5f7f11d50a3a_6.0.6000.16720_no ne_1f5b763e0c197b33\System.Management.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 131072 c:\windows\winsxs\msil_system.io.log_b03f5f7f11d50a3a_6.0.6001.22208_none_6 e2eb1c839eb7bff\System.IO.Log.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 131072 c:\windows\winsxs\msil_system.io.log_b03f5f7f11d50a3a_6.0.6001.18096_none_8 50588d6203bcc75\System.IO.Log.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 131072 c:\windows\winsxs\msil_system.io.log_b03f5f7f11d50a3a_6.0.6000.20864_none_6 e5912dc3994a12e\System.IO.Log.dll
+ 2009-08-04 23:58 . 2008-06-20 01:17 131072 c:\windows\winsxs\msil_system.io.log_b03f5f7f11d50a3a_6.0.6000.16708_none_8 5205cc01ff30fa2\System.IO.Log.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 430080 c:\windows\winsxs\msil_system.identitymodel_b77a5c561934e089_6.0.6001.22208 _none_068c11b05db6bb6a\System.IdentityModel.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 430080 c:\windows\winsxs\msil_system.identitymodel_b77a5c561934e089_6.0.6001.18096 _none_1d62e8be44070be0\System.IdentityModel.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 430080 c:\windows\winsxs\msil_system.identitymodel_b77a5c561934e089_6.0.6000.20864 _none_06b672c45d5fe099\System.IdentityModel.dll
+ 2009-08-04 23:58 . 2008-06-20 01:17 430080 c:\windows\winsxs\msil_system.identitymodel_b77a5c561934e089_6.0.6000.16708 _none_1d7dbca843be4f0d\System.IdentityModel.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 126976 c:\windows\winsxs\msil_system.identitymodel.selectors_b77a5c561934e089_6.0. 6001.22208_none_9520e1d88d457400\System.IdentityModel.Selectors.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 126976 c:\windows\winsxs\msil_system.identitymodel.selectors_b77a5c561934e089_6.0. 6001.18096_none_abf7b8e67395c476\System.IdentityModel.Selectors.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 126976 c:\windows\winsxs\msil_system.identitymodel.selectors_b77a5c561934e089_6.0. 6000.20864_none_954b42ec8cee992f\System.IdentityModel.Selectors.dll
+ 2009-08-04 23:58 . 2008-06-20 01:17 126976 c:\windows\winsxs\msil_system.identitymodel.selectors_b77a5c561934e089_6.0. 6000.16708_none_ac128cd0734d07a3\System.IdentityModel.Selectors.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 626688 c:\windows\winsxs\msil_system.drawing_b03f5f7f11d50a3a_6.0.6001.22230_none_ 78c88abc0a794204\System.Drawing.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 626688 c:\windows\winsxs\msil_system.drawing_b03f5f7f11d50a3a_6.0.6001.18111_none_ 8f941a1ff0d3c8f1\System.Drawing.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 626688 c:\windows\winsxs\msil_system.drawing_b03f5f7f11d50a3a_6.0.6000.20883_none_ 78f14c0e0a240143\System.Drawing.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 626688 c:\windows\winsxs\msil_system.drawing_b03f5f7f11d50a3a_6.0.6000.16720_none_ 8fb93569f081bc50\System.Drawing.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 401408 c:\windows\winsxs\msil_system.directoryservices_b03f5f7f11d50a3a_6.0.6001.2 2230_none_3fd39f054b175321\System.DirectoryServices.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 401408 c:\windows\winsxs\msil_system.directoryservices_b03f5f7f11d50a3a_6.0.6001.1 8111_none_569f2e693171da0e\System.DirectoryServices.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 401408 c:\windows\winsxs\msil_system.directoryservices_b03f5f7f11d50a3a_6.0.6000.2 0883_none_3ffc60574ac21260\System.DirectoryServices.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 401408 c:\windows\winsxs\msil_system.directoryservices_b03f5f7f11d50a3a_6.0.6000.1 6720_none_56c449b3311fcd6d\System.DirectoryServices.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 188416 c:\windows\winsxs\msil_system.directoryservices.protocols_b03f5f7f11d50a3a_ 6.0.6001.22230_none_984faa616e032a6c\System.DirectoryServices.Protocols.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 188416 c:\windows\winsxs\msil_system.directoryservices.protocols_b03f5f7f11d50a3a_ 6.0.6001.18111_none_af1b39c5545db159\System.DirectoryServices.Protocols.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 188416 c:\windows\winsxs\msil_system.directoryservices.protocols_b03f5f7f11d50a3a_ 6.0.6000.20883_none_98786bb36dade9ab\System.DirectoryServices.Protocols.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 188416 c:\windows\winsxs\msil_system.directoryservices.protocols_b03f5f7f11d50a3a_ 6.0.6000.16720_none_af40550f540ba4b8\System.DirectoryServices.Protocols.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 970752 c:\windows\winsxs\msil_system.deployment_b03f5f7f11d50a3a_6.0.6001.22230_no ne_493066b54a95ec67\System.Deployment.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 970752 c:\windows\winsxs\msil_system.deployment_b03f5f7f11d50a3a_6.0.6001.18111_no ne_5ffbf61930f07354\System.Deployment.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 970752 c:\windows\winsxs\msil_system.deployment_b03f5f7f11d50a3a_6.0.6000.20883_no ne_495928074a40aba6\System.Deployment.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 970752 c:\windows\winsxs\msil_system.deployment_b03f5f7f11d50a3a_6.0.6000.16720_no ne_60211163309e66b3\System.Deployment.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 745472 c:\windows\winsxs\msil_system.data.sqlxml_b77a5c561934e089_6.0.6001.22230_n one_1aad946bbea480c9\System.Data.SqlXml.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 745472 c:\windows\winsxs\msil_system.data.sqlxml_b77a5c561934e089_6.0.6001.18111_n one_317923cfa4ff07b6\System.Data.SqlXml.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 745472 c:\windows\winsxs\msil_system.data.sqlxml_b77a5c561934e089_6.0.6000.20883_n one_1ad655bdbe4f4008\System.Data.SqlXml.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 745472 c:\windows\winsxs\msil_system.data.sqlxml_b77a5c561934e089_6.0.6000.16720_n one_319e3f19a4acfb15\System.Data.SqlXml.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 425984 c:\windows\winsxs\msil_system.configuration_b03f5f7f11d50a3a_6.0.6001.22230 _none_1459c4f45060681a\System.configuration.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 425984 c:\windows\winsxs\msil_system.configuration_b03f5f7f11d50a3a_6.0.6001.18111 _none_2b25545836baef07\System.configuration.dll

zm02113 is offline  
Old 5th August 2009   #11
Malware Analyst
 
broni's Avatar
 
Profile:
Join Date: Aug 2002
Location: Daly City, CA
Posts: 20,556
Computer Experience:
intermediate
broni Reputation Levelbroni Reputation Levelbroni Reputation Levelbroni Reputation Levelbroni Reputation Levelbroni Reputation Levelbroni Reputation Levelbroni Reputation Levelbroni Reputation Levelbroni Reputation Levelbroni Reputation Level

My System
You can't attach files on this board...

broni is offline  
Old 5th August 2009   #12
Inactive
THREAD STARTER
 
Profile:
Join Date: Aug 2009
Posts: 22
Computer Experience:
Experienced
zm02113 Reputation Level

My System

IE automatically pops up new browser windows


Combofix.txt 4 of 5

+ 2009-08-04 23:50 . 2008-07-27 17:55 425984 c:\windows\winsxs\msil_system.configuration_b03f5f7f11d50a3a_6.0.6000.20883 _none_14828646500b2759\System.configuration.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 425984 c:\windows\winsxs\msil_system.configuration_b03f5f7f11d50a3a_6.0.6000.16720 _none_2b4a6fa23668e266\System.configuration.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 110592 c:\windows\winsxs\msil_sysglobl_b03f5f7f11d50a3a_6.0.6001.22230_none_be153e 99a3cc472a\sysglobl.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 110592 c:\windows\winsxs\msil_sysglobl_b03f5f7f11d50a3a_6.0.6001.18111_none_d4e0cd fd8a26ce17\sysglobl.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 110592 c:\windows\winsxs\msil_sysglobl_b03f5f7f11d50a3a_6.0.6000.20883_none_be3dff eba3770669\sysglobl.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 110592 c:\windows\winsxs\msil_sysglobl_b03f5f7f11d50a3a_6.0.6000.16720_none_d505e9 4789d4c176\sysglobl.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 132096 c:\windows\winsxs\msil_smsvchost_b03f5f7f11d50a3a_6.0.6001.22208_none_fb8b6 9b06e19ee70\SMSvcHost.exe
+ 2009-08-04 23:58 . 2008-06-20 01:14 132096 c:\windows\winsxs\msil_smsvchost_b03f5f7f11d50a3a_6.0.6001.18096_none_12624 0be546a3ee6\SMSvcHost.exe
+ 2009-08-04 23:58 . 2008-06-20 01:12 132096 c:\windows\winsxs\msil_smsvchost_b03f5f7f11d50a3a_6.0.6000.20864_none_fbb5c ac46dc3139f\SMSvcHost.exe
+ 2009-08-04 23:58 . 2008-06-20 01:17 132096 c:\windows\winsxs\msil_smsvchost_b03f5f7f11d50a3a_6.0.6000.16708_none_127d1 4a854218213\SMSvcHost.exe
+ 2009-08-04 23:58 . 2008-06-20 01:13 110592 c:\windows\winsxs\msil_smdiagnostics_b77a5c561934e089_6.0.6001.22208_none_8 7c3f6f4c9aa65b8\SMdiagnostics.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 110592 c:\windows\winsxs\msil_smdiagnostics_b77a5c561934e089_6.0.6001.18096_none_9 e9ace02affab62e\SMdiagnostics.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 110592 c:\windows\winsxs\msil_smdiagnostics_b77a5c561934e089_6.0.6000.20864_none_8 7ee5808c9538ae7\SMdiagnostics.dll
+ 2009-08-04 23:58 . 2008-06-20 01:17 110592 c:\windows\winsxs\msil_smdiagnostics_b77a5c561934e089_6.0.6000.16708_none_9 eb5a1ecafb1f95b\SMdiagnostics.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 156688 c:\windows\winsxs\msil_servicemodelreg_b03f5f7f11d50a3a_6.0.6001.22208_none _33fe5fa115ae9bd2\ServiceModelReg.exe
+ 2009-08-04 23:58 . 2008-06-20 01:14 156688 c:\windows\winsxs\msil_servicemodelreg_b03f5f7f11d50a3a_6.0.6001.18096_none _4ad536aefbfeec48\ServiceModelReg.exe
+ 2009-08-04 23:58 . 2008-06-20 01:12 156688 c:\windows\winsxs\msil_servicemodelreg_b03f5f7f11d50a3a_6.0.6000.20864_none _3428c0b51557c101\ServiceModelReg.exe
+ 2009-08-04 23:58 . 2008-06-20 01:17 156688 c:\windows\winsxs\msil_servicemodelreg_b03f5f7f11d50a3a_6.0.6000.16708_none _4af00a98fbb62f75\ServiceModelReg.exe
+ 2009-08-04 23:58 . 2008-06-20 01:13 528384 c:\windows\winsxs\msil_reachframework_31bf3856ad364e35_6.0.6001.22208_none_ 4240f8a51a971ffc\ReachFramework.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 528384 c:\windows\winsxs\msil_reachframework_31bf3856ad364e35_6.0.6001.18096_none_ 41540a1401c44bd6\ReachFramework.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 528384 c:\windows\winsxs\msil_reachframework_31bf3856ad364e35_6.0.6000.20864_none_ 4015d94f1da4d155\ReachFramework.dll
+ 2009-08-04 23:58 . 2008-06-20 01:18 528384 c:\windows\winsxs\msil_reachframework_31bf3856ad364e35_6.0.6000.16708_none_ 3fd11d340452ef41\ReachFramework.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 864256 c:\windows\winsxs\msil_presentationui_31bf3856ad364e35_6.0.6001.22208_none_ ac3c35f9559e5ae3\PresentationUI.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 864256 c:\windows\winsxs\msil_presentationui_31bf3856ad364e35_6.0.6001.18096_none_ ab4f47683ccb86bd\PresentationUI.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 864256 c:\windows\winsxs\msil_presentationui_31bf3856ad364e35_6.0.6000.20864_none_ aa1116a358ac0c3c\PresentationUI.dll
+ 2009-08-04 23:58 . 2008-06-20 01:18 864256 c:\windows\winsxs\msil_presentationui_31bf3856ad364e35_6.0.6000.16708_none_ a9cc5a883f5a2a28\PresentationUI.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 163840 c:\windows\winsxs\msil_presentationframework.royale_31bf3856ad364e35_6.0.60 01.22208_none_9b3ce050aa5ad929\PresentationFramework.Royale.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 163840 c:\windows\winsxs\msil_presentationframework.royale_31bf3856ad364e35_6.0.60 01.18096_none_9a4ff1bf91880503\PresentationFramework.Royale.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 163840 c:\windows\winsxs\msil_presentationframework.royale_31bf3856ad364e35_6.0.60 00.20864_none_9911c0faad688a82\PresentationFramework.Royale.dll
+ 2009-08-04 23:58 . 2008-06-20 01:18 163840 c:\windows\winsxs\msil_presentationframework.royale_31bf3856ad364e35_6.0.60 00.16708_none_98cd04df9416a86e\PresentationFramework.Royale.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 397312 c:\windows\winsxs\msil_presentationframework.luna_31bf3856ad364e35_6.0.6001 .22208_none_18b48ce1895a2e6b\PresentationFramework.Luna.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 397312 c:\windows\winsxs\msil_presentationframework.luna_31bf3856ad364e35_6.0.6001 .18096_none_17c79e5070875a45\PresentationFramework.Luna.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 397312 c:\windows\winsxs\msil_presentationframework.luna_31bf3856ad364e35_6.0.6000 .20864_none_16896d8b8c67dfc4\PresentationFramework.Luna.dll
+ 2009-08-04 23:58 . 2008-06-20 01:18 397312 c:\windows\winsxs\msil_presentationframework.luna_31bf3856ad364e35_6.0.6000 .16708_none_1644b1707315fdb0\PresentationFramework.Luna.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 139264 c:\windows\winsxs\msil_presentationframework.classic_31bf3856ad364e35_6.0.6 001.22208_none_b0eaf6e9fda81431\PresentationFramework.Classic.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 139264 c:\windows\winsxs\msil_presentationframework.classic_31bf3856ad364e35_6.0.6 001.18096_none_affe0858e4d5400b\PresentationFramework.Classic.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 139264 c:\windows\winsxs\msil_presentationframework.classic_31bf3856ad364e35_6.0.6 000.20864_none_aebfd79400b5c58a\PresentationFramework.Classic.dll
+ 2009-08-04 23:58 . 2008-06-20 01:18 139264 c:\windows\winsxs\msil_presentationframework.classic_31bf3856ad364e35_6.0.6 000.16708_none_ae7b1b78e763e376\PresentationFramework.Classic.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 196608 c:\windows\winsxs\msil_presentationframework.aero_31bf3856ad364e35_6.0.6001 .22208_none_19d9b40388b016e8\PresentationFramework.Aero.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 196608 c:\windows\winsxs\msil_presentationframework.aero_31bf3856ad364e35_6.0.6001 .18096_none_18ecc5726fdd42c2\PresentationFramework.Aero.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 196608 c:\windows\winsxs\msil_presentationframework.aero_31bf3856ad364e35_6.0.6000 .20864_none_17ae94ad8bbdc841\PresentationFramework.Aero.dll
+ 2009-08-04 23:58 . 2008-06-20 01:18 196608 c:\windows\winsxs\msil_presentationframework.aero_31bf3856ad364e35_6.0.6000 .16708_none_1769d892726be62d\PresentationFramework.Aero.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 598016 c:\windows\winsxs\msil_presentationbuildtasks_31bf3856ad364e35_6.0.6001.222 08_none_9cb21d8151aec4d9\PresentationBuildTasks.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 598016 c:\windows\winsxs\msil_presentationbuildtasks_31bf3856ad364e35_6.0.6001.180 96_none_9bc52ef038dbf0b3\PresentationBuildTasks.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 598016 c:\windows\winsxs\msil_presentationbuildtasks_31bf3856ad364e35_6.0.6000.208 64_none_9a86fe2b54bc7632\PresentationBuildTasks.dll
+ 2009-08-04 23:58 . 2008-06-20 01:18 598016 c:\windows\winsxs\msil_presentationbuildtasks_31bf3856ad364e35_6.0.6000.167 08_none_9a4242103b6a941e\PresentationBuildTasks.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 659456 c:\windows\winsxs\msil_microsoft.visualbasic_b03f5f7f11d50a3a_6.0.6001.2223 0_none_96c2ddfc1ad9e381\Microsoft.VisualBasic.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 659456 c:\windows\winsxs\msil_microsoft.visualbasic_b03f5f7f11d50a3a_6.0.6001.1811 1_none_ad8e6d6001346a6e\Microsoft.VisualBasic.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 659456 c:\windows\winsxs\msil_microsoft.visualbasic_b03f5f7f11d50a3a_6.0.6000.2088 3_none_96eb9f4e1a84a2c0\Microsoft.VisualBasic.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 659456 c:\windows\winsxs\msil_microsoft.visualbasic_b03f5f7f11d50a3a_6.0.6000.1672 0_none_adb388aa00e25dcd\Microsoft.VisualBasic.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 372736 c:\windows\winsxs\msil_microsoft.visualbasic.compatibility_b03f5f7f11d50a3a _6.0.6001.22230_none_d69a058aaeddfb69\Microsoft.VisualBasic.Compatibility.d ll
+ 2009-08-04 23:50 . 2008-07-27 18:03 372736 c:\windows\winsxs\msil_microsoft.visualbasic.compatibility_b03f5f7f11d50a3a _6.0.6001.18111_none_ed6594ee95388256\Microsoft.VisualBasic.Compatibility.d ll
+ 2009-08-04 23:50 . 2008-07-27 17:55 372736 c:\windows\winsxs\msil_microsoft.visualbasic.compatibility_b03f5f7f11d50a3a _6.0.6000.20883_none_d6c2c6dcae88baa8\Microsoft.VisualBasic.Compatibility.d ll
+ 2009-08-04 23:50 . 2008-07-27 18:00 372736 c:\windows\winsxs\msil_microsoft.visualbasic.compatibility_b03f5f7f11d50a3a _6.0.6000.16720_none_ed8ab03894e675b5\Microsoft.VisualBasic.Compatibility.d ll
+ 2009-08-04 23:50 . 2008-07-27 17:58 110592 c:\windows\winsxs\msil_microsoft.visualbasic.compatibility.data_b03f5f7f11d 50a3a_6.0.6001.22230_none_4871d19d3674c77b\Microsoft.VisualBasic.Compatibil ity.Data.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 110592 c:\windows\winsxs\msil_microsoft.visualbasic.compatibility.data_b03f5f7f11d 50a3a_6.0.6001.18111_none_5f3d61011ccf4e68\Microsoft.VisualBasic.Compatibil ity.Data.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 110592 c:\windows\winsxs\msil_microsoft.visualbasic.compatibility.data_b03f5f7f11d 50a3a_6.0.6000.20883_none_489a92ef361f86ba\Microsoft.VisualBasic.Compatibil ity.Data.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 110592 c:\windows\winsxs\msil_microsoft.visualbasic.compatibility.data_b03f5f7f11d 50a3a_6.0.6000.16720_none_5f627c4b1c7d41c7\Microsoft.VisualBasic.Compatibil ity.Data.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 397312 c:\windows\winsxs\msil_microsoft.transactions.bridge_b03f5f7f11d50a3a_6.0.6 001.22208_none_b114e4c017448d80\Microsoft.Transactions.Bridge.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 397312 c:\windows\winsxs\msil_microsoft.transactions.bridge_b03f5f7f11d50a3a_6.0.6 001.18096_none_c7ebbbcdfd94ddf6\Microsoft.Transactions.Bridge.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 397312 c:\windows\winsxs\msil_microsoft.transactions.bridge_b03f5f7f11d50a3a_6.0.6 000.20864_none_b13f45d416edb2af\Microsoft.Transactions.Bridge.dll
+ 2009-08-04 23:58 . 2008-06-20 01:17 397312 c:\windows\winsxs\msil_microsoft.transactions.bridge_b03f5f7f11d50a3a_6.0.6 000.16708_none_c8068fb7fd4c2123\Microsoft.Transactions.Bridge.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 749568 c:\windows\winsxs\msil_microsoft.jscript_b03f5f7f11d50a3a_6.0.6001.22230_no ne_bb6258cf9cb3d84c\Microsoft.JScript.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 749568 c:\windows\winsxs\msil_microsoft.jscript_b03f5f7f11d50a3a_6.0.6001.18111_no ne_d22de833830e5f39\Microsoft.JScript.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 749568 c:\windows\winsxs\msil_microsoft.jscript_b03f5f7f11d50a3a_6.0.6000.20883_no ne_bb8b1a219c5e978b\Microsoft.JScript.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 749568 c:\windows\winsxs\msil_microsoft.jscript_b03f5f7f11d50a3a_6.0.6000.16720_no ne_d253037d82bc5298\Microsoft.JScript.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 655360 c:\windows\winsxs\msil_microsoft.build.tasks_b03f5f7f11d50a3a_6.0.6001.2223 0_none_869676dea6d3dc61\Microsoft.Build.Tasks.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 655360 c:\windows\winsxs\msil_microsoft.build.tasks_b03f5f7f11d50a3a_6.0.6001.1811 1_none_9d6206428d2e634e\Microsoft.Build.Tasks.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 655360 c:\windows\winsxs\msil_microsoft.build.tasks_b03f5f7f11d50a3a_6.0.6000.2088 3_none_86bf3830a67e9ba0\Microsoft.Build.Tasks.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 655360 c:\windows\winsxs\msil_microsoft.build.tasks_b03f5f7f11d50a3a_6.0.6000.1672 0_none_9d87218c8cdc56ad\Microsoft.Build.Tasks.dll
+ 2009-08-04 23:51 . 2008-07-27 17:58 348160 c:\windows\winsxs\msil_microsoft.build.engine_b03f5f7f11d50a3a_6.0.6001.222 30_none_21d6660a2825921b\Microsoft.Build.Engine.dll
+ 2009-08-04 23:51 . 2008-07-27 18:03 348160 c:\windows\winsxs\msil_microsoft.build.engine_b03f5f7f11d50a3a_6.0.6001.181 11_none_38a1f56e0e801908\Microsoft.Build.Engine.dll
+ 2009-08-04 23:51 . 2008-07-27 17:55 348160 c:\windows\winsxs\msil_microsoft.build.engine_b03f5f7f11d50a3a_6.0.6000.208 83_none_21ff275c27d0515a\Microsoft.Build.Engine.dll
+ 2009-08-04 23:51 . 2008-07-27 18:00 348160 c:\windows\winsxs\msil_microsoft.build.engine_b03f5f7f11d50a3a_6.0.6000.167 20_none_38c710b80e2e0c67\Microsoft.Build.Engine.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 168968 c:\windows\winsxs\msil_comsvcconfig_b03f5f7f11d50a3a_6.0.6001.22208_none_d4 ba1a7aee429661\ComSvcConfig.exe
+ 2009-08-04 23:58 . 2008-06-20 01:14 168968 c:\windows\winsxs\msil_comsvcconfig_b03f5f7f11d50a3a_6.0.6001.18096_none_eb 90f188d492e6d7\ComSvcConfig.exe
+ 2009-08-04 23:58 . 2008-06-20 01:12 168968 c:\windows\winsxs\msil_comsvcconfig_b03f5f7f11d50a3a_6.0.6000.20864_none_d4 e47b8eedebbb90\ComSvcConfig.exe
+ 2009-08-04 23:58 . 2008-06-20 01:17 168968 c:\windows\winsxs\msil_comsvcconfig_b03f5f7f11d50a3a_6.0.6000.16708_none_eb abc572d44a2a04\ComSvcConfig.exe
+ 2009-08-04 23:50 . 2008-07-27 17:58 507904 c:\windows\winsxs\msil_aspnetmmcext_b03f5f7f11d50a3a_6.0.6001.22230_none_69 ade9eab036966e\AspNetMMCExt.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 507904 c:\windows\winsxs\msil_aspnetmmcext_b03f5f7f11d50a3a_6.0.6001.18111_none_80 79794e96911d5b\AspNetMMCExt.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 507904 c:\windows\winsxs\msil_aspnetmmcext_b03f5f7f11d50a3a_6.0.6000.20883_none_69 d6ab3cafe155ad\AspNetMMCExt.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 507904 c:\windows\winsxs\msil_aspnetmmcext_b03f5f7f11d50a3a_6.0.6000.16720_none_80 9e9498963f10ba\AspNetMMCExt.dll
+ 2008-08-11 18:31 . 2009-08-04 23:09 280266 c:\windows\System32\WDI\SuspendPerformanceDiagnostics_SystemData_S3.bin
+ 2006-11-02 10:33 . 2009-08-04 23:37 595684 c:\windows\System32\perfh009.dat
- 2006-11-02 10:33 . 2009-08-04 11:26 595684 c:\windows\System32\perfh009.dat
- 2006-11-02 10:33 . 2009-08-04 11:26 101350 c:\windows\System32\perfc009.dat
+ 2006-11-02 10:33 . 2009-08-04 23:37 101350 c:\windows\System32\perfc009.dat
+ 2008-07-30 03:40 . 2008-07-30 03:40 196104 c:\windows\Microsoft.NET\Framework\v3.5\WFServicesReg.exe
+ 2008-07-30 03:40 . 2008-07-30 03:40 802816 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft.Build.Tasks.v3.5.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 984056 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapUI.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 107512 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 111096 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.3082.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 110072 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.2070.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 106488 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1055.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 105976 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1053.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 107000 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1049.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 107512 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1046.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 109048 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1045.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 106488 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1044.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 108536 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1043.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 110072 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1040.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 111096 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1038.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 101368 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1037.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 112120 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1036.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 106488 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1035.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 113656 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1032.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 111608 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1031.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 108536 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1030.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 108536 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1029.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 102904 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1025.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 689152 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vsscenario.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 413184 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vsbasereqs.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 632320 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vs70uimgr.dll
+ 2008-07-30 03:44 . 2008-07-30 03:44 652800 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vs_setup.msi
+ 2008-07-29 22:47 . 2008-07-29 22:47 110080 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 131584 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.3082.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 131072 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.2070.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 121344 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1055.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 121344 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1053.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 123904 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1049.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 122880 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1046.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 128512 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1045.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 121856 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1044.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 129024 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1043.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 128512 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1040.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 132096 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1038.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 111104 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1037.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 133120 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1036.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 122368 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1035.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 137728 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1032.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 130048 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1031.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 126464 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1030.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 125440 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1029.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 113152 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1025.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 269304 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
+ 2008-07-29 22:47 . 2008-07-29 22:47 177152 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\HtmlLite.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 276984 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\dlmgr.dll
+ 2008-07-30 03:15 . 2008-07-30 03:15 225490 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\baseline.dat
+ 2008-07-30 03:40 . 2008-07-30 03:40 233976 c:\windows\Microsoft.NET\Framework\v3.5\1033\vbc7ui.dll
+ 2008-07-30 03:40 . 2008-07-30 03:40 168448 c:\windows\Microsoft.NET\Framework\v3.5\1033\cscompui.dll
+ 2008-12-13 13:58 . 2008-12-13 13:58 754688 c:\windows\Installer\1bcf8e.msp
+ 2009-08-05 00:02 . 2009-08-05 00:02 648192 c:\windows\Installer\1bcf83.msi
+ 2009-08-05 00:25 . 2009-08-05 00:25 155648 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\9caf9fa4e6eee2d6839a d7e6d4c67515\MSBuild.ni.exe
+ 2009-08-05 00:24 . 2009-08-05 00:24 704512 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\cc5a7e1 670da7c8e235d9d2d4fd355be\Microsoft.MediaCenter.Sports.ni.dll
+ 2009-08-05 00:24 . 2009-08-05 00:24 626688 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\c343496 aa24e263e49cab884c37af143\Microsoft.MediaCenter.ni.dll
+ 2009-08-05 00:24 . 2009-08-05 00:24 262144 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\3495f7d 8b00bd3044da575f587183528\Microsoft.MediaCenter.Shell.ni.dll
+ 2009-08-05 00:25 . 2009-08-05 00:25 184320 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\e71af05 5305b5a3c88452b474ec43711\Microsoft.Build.Utilities.v3.5.ni.dll
+ 2009-08-05 00:25 . 2009-08-05 00:25 237568 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\792b58f 140d0f243811a3ed01c55608d\Microsoft.Build.Conversion.v3.5.ni.dll
+ 2009-08-05 00:25 . 2009-08-05 00:25 274432 c:\windows\assembly\NativeImages_v2.0.50727_32\mcupdate\3513d5306cd7920fa8c 9399f4fc58c92\mcupdate.ni.exe
+ 2009-08-05 00:24 . 2009-08-05 00:24 315392 c:\windows\assembly\NativeImages_v2.0.50727_32\mcstoredb\c2c225c0d48ec126d9 e0cc6af15d2217\mcstoredb.ni.dll
+ 2009-08-05 00:24 . 2009-08-05 00:24 749568 c:\windows\assembly\NativeImages_v2.0.50727_32\mcstore\1ebee2b3053be72a7733 bf4944c9c80e\mcstore.ni.dll
+ 2009-08-05 00:25 . 2009-08-05 00:25 270336 c:\windows\assembly\NativeImages_v2.0.50727_32\ehExtHost\a19366487b0a48915a 6c61efd6c01671\ehExtHost.ni.exe
+ 2009-08-05 00:24 . 2009-08-05 00:24 360448 c:\windows\assembly\NativeImages_v2.0.50727_32\ehepgdat\45e557a88e0e84efb26 0c3043f828202\ehepgdat.ni.dll
+ 2009-08-05 00:02 . 2009-08-05 00:02 139264 c:\windows\assembly\GAC_MSIL\System.Xml.Linq\3.5.0.0__b77a5c561934e089\Syst em.Xml.Linq.dll
+ 2009-08-05 00:02 . 2009-08-05 00:02 507904 c:\windows\assembly\GAC_MSIL\System.WorkflowServices\3.5.0.0__31bf3856ad364 e35\System.WorkflowServices.dll
+ 2009-08-05 00:02 . 2009-08-05 00:02 335872 c:\windows\assembly\GAC_MSIL\System.Web.Extensions.Design\3.5.0.0__31bf3856 ad364e35\System.Web.Extensions.Design.dll
+ 2009-08-05 00:03 . 2009-08-05 00:03 139264 c:\windows\assembly\GAC_MSIL\System.Web.Entity\3.5.0.0__b77a5c561934e089\Sy stem.Web.Entity.dll
+ 2009-08-05 00:02 . 2009-08-05 00:02 131072 c:\windows\assembly\GAC_MSIL\System.Web.Entity.Design\3.5.0.0__b77a5c561934 e089\System.Web.Entity.Design.dll
+ 2009-08-05 00:03 . 2009-08-05 00:03 229376 c:\windows\assembly\GAC_MSIL\System.Web.DynamicData\3.5.0.0__31bf3856ad364e 35\System.Web.DynamicData.dll
+ 2009-08-05 00:02 . 2009-08-05 00:02 569344 c:\windows\assembly\GAC_MSIL\System.ServiceModel.Web\3.5.0.0__31bf3856ad364 e35\System.ServiceModel.Web.dll
+ 2009-08-05 00:02 . 2009-08-05 00:02 233472 c:\windows\assembly\GAC_MSIL\System.Net\3.5.0.0__b03f5f7f11d50a3a\System.Ne t.dll
+ 2009-08-05 00:02 . 2009-08-05 00:02 143360 c:\windows\assembly\GAC_MSIL\System.Management.Instrumentation\3.5.0.0__b77 a5c561934e089\System.Management.Instrumentation.dll
+ 2009-08-05 00:02 . 2009-08-05 00:02 286720 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\3.5 .0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
+ 2009-08-05 00:03 . 2009-08-05 00:03 442368 c:\windows\assembly\GAC_MSIL\System.Data.Services\3.5.0.0__b77a5c561934e089 \System.Data.Services.dll
+ 2009-08-05 00:02 . 2009-08-05 00:02 114688 c:\windows\assembly\GAC_MSIL\System.Data.Services.Design\3.5.0.0__b77a5c561 934e089\System.Data.Services.Design.dll
+ 2009-08-05 00:03 . 2009-08-05 00:03 294912 c:\windows\assembly\GAC_MSIL\System.Data.Services.Client\3.5.0.0__b77a5c561 934e089\System.Data.Services.Client.dll
+ 2009-08-05 00:02 . 2009-08-05 00:02 684032 c:\windows\assembly\GAC_MSIL\System.Data.Linq\3.5.0.0__b77a5c561934e089\Sys tem.Data.Linq.dll
+ 2009-08-05 00:02 . 2009-08-05 00:02 229376 c:\windows\assembly\GAC_MSIL\System.Data.Entity.Design\3.5.0.0__b77a5c56193 4e089\System.Data.Entity.Design.dll
+ 2009-08-05 00:02 . 2009-08-05 00:02 667648 c:\windows\assembly\GAC_MSIL\System.Core\3.5.0.0__b77a5c561934e089\System.C ore.dll
+ 2009-08-05 00:02 . 2009-08-05 00:02 163840 c:\windows\assembly\GAC_MSIL\System.AddIn\3.5.0.0__b77a5c561934e089\System. AddIn.dll
+ 2009-08-05 00:02 . 2009-08-05 00:02 802816 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks.v3.5\3.5.0.0__b03f5f7f11 d50a3a\Microsoft.Build.Tasks.v3.5.dll
+ 2009-08-05 00:02 . 2009-08-05 00:02 733184 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\3.5.0.0__b03f5f7f11d50a 3a\Microsoft.Build.Engine.dll
+ 2009-08-05 00:02 . 2009-08-05 00:02 106496 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Conversion.v3.5\3.5.0.0__b03f5 f7f11d50a3a\Microsoft.Build.Conversion.v3.5.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 1630208 c:\windows\winsxs\x86_wwf-system.workflow.componentmodel_31bf3856ad364e35_6.0.6001.22208_none_8c75ba7 a272c1073\System.Workflow.ComponentModel.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 1630208 c:\windows\winsxs\x86_wwf-system.workflow.componentmodel_31bf3856ad364e35_6.0.6001.18096_none_8b88cbe 90e593c4d\System.Workflow.ComponentModel.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 1630208 c:\windows\winsxs\x86_wwf-system.workflow.componentmodel_31bf3856ad364e35_6.0.6000.20864_none_8a4a9b2 42a39c1cc\System.Workflow.ComponentModel.dll
+ 2009-08-04 23:58 . 2008-06-20 01:18 1630208 c:\windows\winsxs\x86_wwf-system.workflow.componentmodel_31bf3856ad364e35_6.0.6000.16708_none_8a05df0 910e7dfb8\System.Workflow.ComponentModel.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 1138688 c:\windows\winsxs\x86_wwf-system.workflow.activities_31bf3856ad364e35_6.0.6001.22208_none_32f793e3911 51502\System.Workflow.Activities.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 1138688 c:\windows\winsxs\x86_wwf-system.workflow.activities_31bf3856ad364e35_6.0.6001.18096_none_320aa552784 240dc\System.Workflow.Activities.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 1138688 c:\windows\winsxs\x86_wwf-system.workflow.activities_31bf3856ad364e35_6.0.6000.20864_none_30cc748d942 2c65b\System.Workflow.Activities.dll
+ 2009-08-04 23:58 . 2008-06-20 01:18 1138688 c:\windows\winsxs\x86_wwf-system.workflow.activities_31bf3856ad364e35_6.0.6000.16708_none_3087b8727ad 0e447\System.Workflow.Activities.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 1245184 c:\windows\winsxs\x86_wpf-windowsbase_31bf3856ad364e35_6.0.6001.22208_none_57feade560dc8728\WindowsBa se.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 1245184 c:\windows\winsxs\x86_wpf-windowsbase_31bf3856ad364e35_6.0.6001.18096_none_5711bf544809b302\WindowsBa se.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 1245184 c:\windows\winsxs\x86_wpf-windowsbase_31bf3856ad364e35_6.0.6000.20864_none_55d38e8f63ea3881\WindowsBa se.dll
+ 2009-08-04 23:58 . 2008-06-20 01:18 1245184 c:\windows\winsxs\x86_wpf-windowsbase_31bf3856ad364e35_6.0.6000.16708_none_558ed2744a98566d\WindowsBa se.dll
+ 2009-08-04 23:46 . 2008-11-24 23:57 5283840 c:\windows\winsxs\x86_wpf-presentationframework_31bf3856ad364e35_6.0.6001.22317_none_6f0c2eb76f15cf13 \PresentationFramework.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 5283840 c:\windows\winsxs\x86_wpf-presentationframework_31bf3856ad364e35_6.0.6001.22208_none_6f17fd076f0ccf52 \PresentationFramework.dll
+ 2009-08-04 23:46 . 2008-11-24 23:34 5283840 c:\windows\winsxs\x86_wpf-presentationframework_31bf3856ad364e35_6.0.6001.18173_none_6e3daf56562c746c \PresentationFramework.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 5283840 c:\windows\winsxs\x86_wpf-presentationframework_31bf3856ad364e35_6.0.6001.18096_none_6e2b0e765639fb2c \PresentationFramework.dll
+ 2009-08-04 23:46 . 2008-11-24 23:43 5283840 c:\windows\winsxs\x86_wpf-presentationframework_31bf3856ad364e35_6.0.6000.20964_none_6cecdf97721a7dd2 \PresentationFramework.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 5283840 c:\windows\winsxs\x86_wpf-presentationframework_31bf3856ad364e35_6.0.6000.20864_none_6cecddb1721a80ab \PresentationFramework.dll
+ 2009-08-04 23:46 . 2008-11-24 23:44 5283840 c:\windows\winsxs\x86_wpf-presentationframework_31bf3856ad364e35_6.0.6000.16780_none_6c499fe65910b367 \PresentationFramework.dll
+ 2009-08-04 23:58 . 2008-06-20 01:18 5283840 c:\windows\winsxs\x86_wpf-presentationframework_31bf3856ad364e35_6.0.6000.16708_none_6ca8219658c89e97 \PresentationFramework.dll
+ 2009-08-04 23:46 . 2008-11-24 23:57 5931008 c:\windows\winsxs\x86_wcf-system.servicemodel_b03f5f7f11d50a3a_6.0.6001.22317_none_fe2b714d051bb34c\S ystem.ServiceModel.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 5931008 c:\windows\winsxs\x86_wcf-system.servicemodel_b03f5f7f11d50a3a_6.0.6001.22208_none_fe2a5a5f051cb345\S ystem.ServiceModel.dll
+ 2009-08-04 23:46 . 2008-11-24 23:34 5931008 c:\windows\winsxs\x86_wcf-system.servicemodel_b03f5f7f11d50a3a_6.0.6001.18173_none_14ff750ceb6e847b\S ystem.ServiceModel.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 5931008 c:\windows\winsxs\x86_wcf-system.servicemodel_b03f5f7f11d50a3a_6.0.6001.18096_none_1501316ceb6d03bb\S ystem.ServiceModel.dll
+ 2009-08-04 23:46 . 2008-11-24 23:43 5931008 c:\windows\winsxs\x86_wcf-system.servicemodel_b03f5f7f11d50a3a_6.0.6000.20964_none_fe54bb4f04c5d8c5\S ystem.ServiceModel.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 5931008 c:\windows\winsxs\x86_wcf-system.servicemodel_b03f5f7f11d50a3a_6.0.6000.20864_none_fe54bb7304c5d874\S ystem.ServiceModel.dll
+ 2009-08-04 23:46 . 2008-11-24 23:44 5931008 c:\windows\winsxs\x86_wcf-system.servicemodel_b03f5f7f11d50a3a_6.0.6000.16780_none_1524bde6eb1c4498\S ystem.ServiceModel.dll
+ 2009-08-04 23:58 . 2008-06-20 01:17 5931008 c:\windows\winsxs\x86_wcf-system.servicemodel_b03f5f7f11d50a3a_6.0.6000.16708_none_151c0556eb2446e8\S ystem.ServiceModel.dll
+ 2009-08-04 23:45 . 2008-10-13 22:23 5242880 c:\windows\winsxs\x86_system.web_b03f5f7f11d50a3a_6.0.6001.22286_none_e0617 ecf30248ee4\System.Web.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 5238784 c:\windows\winsxs\x86_system.web_b03f5f7f11d50a3a_6.0.6001.22230_none_e05d0 60d3028766b\System.Web.dll
+ 2009-08-04 23:45 . 2008-10-13 22:26 5242880 c:\windows\winsxs\x86_system.web_b03f5f7f11d50a3a_6.0.6001.18155_none_f72c3 b79167fc938\System.Web.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 5238784 c:\windows\winsxs\x86_system.web_b03f5f7f11d50a3a_6.0.6001.18111_none_f7289 5711682fd58\System.Web.dll
+ 2009-08-04 23:45 . 2008-10-13 22:25 5242880 c:\windows\winsxs\x86_system.web_b03f5f7f11d50a3a_6.0.6000.20935_none_e0809 8392fd7ea8a\System.Web.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 5238784 c:\windows\winsxs\x86_system.web_b03f5f7f11d50a3a_6.0.6000.20883_none_e085c 75f2fd335aa\System.Web.dll
+ 2009-08-04 23:45 . 2008-10-13 22:23 5242880 c:\windows\winsxs\x86_system.web_b03f5f7f11d50a3a_6.0.6000.16762_none_f7518 453162d8955\System.Web.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 5238784 c:\windows\winsxs\x86_system.web_b03f5f7f11d50a3a_6.0.6000.16720_none_f74db 0bb1630f0b7\System.Web.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 2933248 c:\windows\winsxs\x86_system.data_b77a5c561934e089_6.0.6001.22230_none_7dcb ba6dcdd50d1d\System.Data.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 2933248 c:\windows\winsxs\x86_system.data_b77a5c561934e089_6.0.6001.18111_none_9497 49d1b42f940a\System.Data.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 2933248 c:\windows\winsxs\x86_system.data_b77a5c561934e089_6.0.6000.20883_none_7df4 7bbfcd7fcc5c\System.Data.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 2933248 c:\windows\winsxs\x86_system.data_b77a5c561934e089_6.0.6000.16720_none_94bc 651bb3dd8769\System.Data.dll
+ 2009-08-04 23:46 . 2008-11-24 23:57 1736528 c:\windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.0.6001.22317_none _acb6e4f0a913b0e6\wpfgfx_v0300.dll
+ 2009-08-04 23:46 . 2008-11-24 23:57 4210688 c:\windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.0.6001.22317_none _acb6e4f0a913b0e6\PresentationCore.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 1738760 c:\windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.0.6001.22208_none _acc2b340a90ab125\wpfgfx_v0300.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 4210688 c:\windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.0.6001.22208_none _acc2b340a90ab125\PresentationCore.dll
+ 2009-08-04 23:46 . 2008-11-24 23:34 1736528 c:\windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.0.6001.18173_none _abe8658f902a563f\wpfgfx_v0300.dll
+ 2009-08-04 23:46 . 2008-11-24 23:34 4210688 c:\windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.0.6001.18173_none _abe8658f902a563f\PresentationCore.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 1738760 c:\windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.0.6001.18096_none _abd5c4af9037dcff\wpfgfx_v0300.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 4210688 c:\windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.0.6001.18096_none _abd5c4af9037dcff\PresentationCore.dll
+ 2009-08-04 23:46 . 2008-11-24 23:43 1736528 c:\windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.0.6000.20964_none _aa9795d0ac185fa5\wpfgfx_v0300.dll
+ 2009-08-04 23:46 . 2008-11-24 23:43 4210688 c:\windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.0.6000.20964_none _aa9795d0ac185fa5\PresentationCore.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 1738760 c:\windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.0.6000.20864_none _aa9793eaac18627e\wpfgfx_v0300.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 4210688 c:\windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.0.6000.20864_none _aa9793eaac18627e\PresentationCore.dll
+ 2009-08-04 23:46 . 2008-11-24 23:44 1736528 c:\windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.0.6000.16780_none _a9f4561f930e953a\wpfgfx_v0300.dll
+ 2009-08-04 23:46 . 2008-11-24 23:44 4210688 c:\windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.0.6000.16780_none _a9f4561f930e953a\PresentationCore.dll
+ 2009-08-04 23:58 . 2008-06-20 01:18 1738760 c:\windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.0.6000.16708_none _aa52d7cf92c6806a\wpfgfx_v0300.dll
+ 2009-08-04 23:58 . 2008-06-20 01:18 4210688 c:\windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.0.6000.16708_none _aa52d7cf92c6806a\PresentationCore.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 1172472 c:\windows\winsxs\x86_netfx-vb_compiler_b03f5f7f11d50a3a_6.0.6001.22230_none_292469e5bfe5fdea\vbc.exe
+ 2009-08-04 23:50 . 2008-07-27 18:03 1172472 c:\windows\winsxs\x86_netfx-vb_compiler_b03f5f7f11d50a3a_6.0.6001.18111_none_3feff949a64084d7\vbc.exe
+ 2009-08-04 23:50 . 2008-07-27 17:55 1172472 c:\windows\winsxs\x86_netfx-vb_compiler_b03f5f7f11d50a3a_6.0.6000.20883_none_294d2b37bf90bd29\vbc.exe
+ 2009-08-04 23:50 . 2008-07-27 18:00 1172472 c:\windows\winsxs\x86_netfx-vb_compiler_b03f5f7f11d50a3a_6.0.6000.16720_none_40151493a5ee7836\vbc.exe
+ 2009-08-04 23:45 . 2008-10-13 22:23 5813576 c:\windows\winsxs\x86_netfx-mscorwks_dll_b03f5f7f11d50a3a_6.0.6001.22286_none_1b9727104883a1c5\mscorwks .dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 5815296 c:\windows\winsxs\x86_netfx-mscorwks_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_1b92ae4e4887894c\mscorwks .dll
+ 2009-08-04 23:45 . 2008-10-13 22:26 5813576 c:\windows\winsxs\x86_netfx-mscorwks_dll_b03f5f7f11d50a3a_6.0.6001.18155_none_3261e3ba2ededc19\mscorwks .dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 5815296 c:\windows\winsxs\x86_netfx-mscorwks_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_325e3db22ee21039\mscorwks .dll
+ 2009-08-04 23:45 . 2008-10-13 22:25 5813576 c:\windows\winsxs\x86_netfx-mscorwks_dll_b03f5f7f11d50a3a_6.0.6000.20935_none_1bb6407a4836fd6b\mscorwks .dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 5815296 c:\windows\winsxs\x86_netfx-mscorwks_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_1bbb6fa04832488b\mscorwks .dll
+ 2009-08-04 23:45 . 2008-10-13 22:23 5813576 c:\windows\winsxs\x86_netfx-mscorwks_dll_b03f5f7f11d50a3a_6.0.6000.16762_none_32872c942e8c9c36\mscorwks .dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 5815296 c:\windows\winsxs\x86_netfx-mscorwks_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_328358fc2e900398\mscorwks .dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 1163768 c:\windows\winsxs\x86_netfx-csharp_compiler_cscomp_b03f5f7f11d50a3a_6.0.6001.22230_none_12a27c4beb87518 1\cscomp.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 1163768 c:\windows\winsxs\x86_netfx-csharp_compiler_cscomp_b03f5f7f11d50a3a_6.0.6001.18111_none_296e0bafd1e1d86 e\cscomp.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 1163768 c:\windows\winsxs\x86_netfx-csharp_compiler_cscomp_b03f5f7f11d50a3a_6.0.6000.20883_none_12cb3d9deb3210c 0\cscomp.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 1163768 c:\windows\winsxs\x86_netfx-csharp_compiler_cscomp_b03f5f7f11d50a3a_6.0.6000.16720_none_299326f9d18fcbc d\cscomp.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 1344000 c:\windows\winsxs\x86_netfx-_vsavb7rt_b03f5f7f11d50a3a_6.0.6001.22230_none_68458e13d277fbea\VsaVb7rt.dl l
+ 2009-08-04 23:50 . 2008-07-27 18:03 1344000 c:\windows\winsxs\x86_netfx-_vsavb7rt_b03f5f7f11d50a3a_6.0.6001.18111_none_7f111d77b8d282d7\VsaVb7rt.dl l
+ 2009-08-04 23:50 . 2008-07-27 17:55 1344000 c:\windows\winsxs\x86_netfx-_vsavb7rt_b03f5f7f11d50a3a_6.0.6000.20883_none_686e4f65d222bb29\VsaVb7rt.dl l
+ 2009-08-04 23:50 . 2008-07-27 18:00 1344000 c:\windows\winsxs\x86_netfx-_vsavb7rt_b03f5f7f11d50a3a_6.0.6000.16720_none_7f3638c1b8807636\VsaVb7rt.dl l
+ 2009-08-04 23:45 . 2008-10-13 22:23 4546560 c:\windows\winsxs\x86_mscorlib_b77a5c561934e089_6.0.6001.22286_none_b0f0582 2dafc3d40\mscorlib.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 4546560 c:\windows\winsxs\x86_mscorlib_b77a5c561934e089_6.0.6001.22230_none_b0ebdf6 0db0024c7\mscorlib.dll
+ 2009-08-04 23:45 . 2008-10-13 22:26 4546560 c:\windows\winsxs\x86_mscorlib_b77a5c561934e089_6.0.6001.18155_none_c7bb14c cc1577794\mscorlib.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 4546560 c:\windows\winsxs\x86_mscorlib_b77a5c561934e089_6.0.6001.18111_none_c7b76ec 4c15aabb4\mscorlib.dll
+ 2009-08-04 23:45 . 2008-10-13 22:25 4546560 c:\windows\winsxs\x86_mscorlib_b77a5c561934e089_6.0.6000.20935_none_b10f718 cdaaf98e6\mscorlib.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 4546560 c:\windows\winsxs\x86_mscorlib_b77a5c561934e089_6.0.6000.20883_none_b114a0b 2daaae406\mscorlib.dll
+ 2009-08-04 23:45 . 2008-10-13 22:23 4546560 c:\windows\winsxs\x86_mscorlib_b77a5c561934e089_6.0.6000.16762_none_c7e05da 6c10537b1\mscorlib.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 4546560 c:\windows\winsxs\x86_mscorlib_b77a5c561934e089_6.0.6000.16720_none_c7dc8a0 ec1089f13\mscorlib.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 1245184 c:\windows\winsxs\msil_windowsbase_31bf3856ad364e35_6.0.6001.22208_none_97b 08b7448b9ff5f\WindowsBase.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 1245184 c:\windows\winsxs\msil_windowsbase_31bf3856ad364e35_6.0.6001.18096_none_96c 39ce32fe72b39\WindowsBase.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 1245184 c:\windows\winsxs\msil_windowsbase_31bf3856ad364e35_6.0.6000.20864_none_958 56c1e4bc7b0b8\WindowsBase.dll
+ 2009-08-04 23:58 . 2008-06-20 01:18 1245184 c:\windows\winsxs\msil_windowsbase_31bf3856ad364e35_6.0.6000.16708_none_954 0b0033275cea4\WindowsBase.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 3149824 c:\windows\winsxs\msil_system_b77a5c561934e089_6.0.6001.22230_none_c3c5260b 759cdf04\System.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 3149824 c:\windows\winsxs\msil_system_b77a5c561934e089_6.0.6001.18111_none_da90b56f 5bf765f1\System.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 3149824 c:\windows\winsxs\msil_system_b77a5c561934e089_6.0.6000.20883_none_c3ede75d 75479e43\System.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 3149824 c:\windows\winsxs\msil_system_b77a5c561934e089_6.0.6000.16720_none_dab5d0b9 5ba55950\System.dll
+ 2009-08-04 23:45 . 2008-10-13 22:23 2048000 c:\windows\winsxs\msil_system.xml_b77a5c561934e089_6.0.6001.22286_none_6ad9 f8f362f3adca\System.XML.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 2048000 c:\windows\winsxs\msil_system.xml_b77a5c561934e089_6.0.6001.22230_none_6ad5 803162f79551\System.XML.dll
+ 2009-08-04 23:45 . 2008-10-13 22:26 2048000 c:\windows\winsxs\msil_system.xml_b77a5c561934e089_6.0.6001.18155_none_81a4 b59d494ee81e\System.XML.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 2048000 c:\windows\winsxs\msil_system.xml_b77a5c561934e089_6.0.6001.18111_none_81a1 0f9549521c3e\System.XML.dll
+ 2009-08-04 23:45 . 2008-10-13 22:25 2048000 c:\windows\winsxs\msil_system.xml_b77a5c561934e089_6.0.6000.20935_none_6af9 125d62a70970\System.XML.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 2048000 c:\windows\winsxs\msil_system.xml_b77a5c561934e089_6.0.6000.20883_none_6afe 418362a25490\System.XML.dll
+ 2009-08-04 23:45 . 2008-10-13 22:23 2048000 c:\windows\winsxs\msil_system.xml_b77a5c561934e089_6.0.6000.16762_none_81c9 fe7748fca83b\System.XML.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 2048000 c:\windows\winsxs\msil_system.xml_b77a5c561934e089_6.0.6000.16720_none_81c6 2adf49000f9d\System.XML.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 1630208 c:\windows\winsxs\msil_system.workflow.componentmodel_31bf3856ad364e35_6.0. 6001.22208_none_e90a0d4ae97e2ccb\System.Workflow.ComponentModel.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 1630208 c:\windows\winsxs\msil_system.workflow.componentmodel_31bf3856ad364e35_6.0. 6001.18096_none_e81d1eb9d0ab58a5\System.Workflow.ComponentModel.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 1630208 c:\windows\winsxs\msil_system.workflow.componentmodel_31bf3856ad364e35_6.0. 6000.20864_none_e6deedf4ec8bde24\System.Workflow.ComponentModel.dll
+ 2009-08-04 23:58 . 2008-06-20 01:18 1630208 c:\windows\winsxs\msil_system.workflow.componentmodel_31bf3856ad364e35_6.0. 6000.16708_none_e69a31d9d339fc10\System.Workflow.ComponentModel.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 1138688 c:\windows\winsxs\msil_system.workflow.activities_31bf3856ad364e35_6.0.6001 .22208_none_293330886c8121bc\System.Workflow.Activities.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 1138688 c:\windows\winsxs\msil_system.workflow.activities_31bf3856ad364e35_6.0.6001 .18096_none_284641f753ae4d96\System.Workflow.Activities.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 1138688 c:\windows\winsxs\msil_system.workflow.activities_31bf3856ad364e35_6.0.6000 .20864_none_270811326f8ed315\System.Workflow.Activities.dll
+ 2009-08-04 23:58 . 2008-06-20 01:18 1138688 c:\windows\winsxs\msil_system.workflow.activities_31bf3856ad364e35_6.0.6000 .16708_none_26c35517563cf101\System.Workflow.Activities.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 5025792 c:\windows\winsxs\msil_system.windows.forms_b77a5c561934e089_6.0.6001.22230 _none_1a2132e45d2f30fc\System.Windows.Forms.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 5025792 c:\windows\winsxs\msil_system.windows.forms_b77a5c561934e089_6.0.6001.18111 _none_30ecc2484389b7e9\System.Windows.Forms.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 5025792 c:\windows\winsxs\msil_system.windows.forms_b77a5c561934e089_6.0.6000.20883 _none_1a49f4365cd9f03b\System.Windows.Forms.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 5025792 c:\windows\winsxs\msil_system.windows.forms_b77a5c561934e089_6.0.6000.16720 _none_3111dd924337ab48\System.Windows.Forms.dll
+ 2009-08-04 23:46 . 2008-11-24 23:57 5931008 c:\windows\winsxs\msil_system.servicemodel_b77a5c561934e089_6.0.6001.22317_ none_8e1d09bca44cac94\System.ServiceModel.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 5931008 c:\windows\winsxs\msil_system.servicemodel_b77a5c561934e089_6.0.6001.22208_ none_8e1bf2cea44dac8d\System.ServiceModel.dll
+ 2009-08-04 23:46 . 2008-11-24 23:34 5931008 c:\windows\winsxs\msil_system.servicemodel_b77a5c561934e089_6.0.6001.18173_ none_a4f10d7c8a9f7dc3\System.ServiceModel.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 5931008 c:\windows\winsxs\msil_system.servicemodel_b77a5c561934e089_6.0.6001.18096_ none_a4f2c9dc8a9dfd03\System.ServiceModel.dll
+ 2009-08-04 23:46 . 2008-11-24 23:43 5931008 c:\windows\winsxs\msil_system.servicemodel_b77a5c561934e089_6.0.6000.20964_ none_8e4653bea3f6d20d\System.ServiceModel.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 5931008 c:\windows\winsxs\msil_system.servicemodel_b77a5c561934e089_6.0.6000.20864_ none_8e4653e2a3f6d1bc\System.ServiceModel.dll
+ 2009-08-04 23:46 . 2008-11-24 23:44 5931008 c:\windows\winsxs\msil_system.servicemodel_b77a5c561934e089_6.0.6000.16780_ none_a51656568a4d3de0\System.ServiceModel.dll
+ 2009-08-04 23:58 . 2008-06-20 01:17 5931008 c:\windows\winsxs\msil_system.servicemodel_b77a5c561934e089_6.0.6000.16708_ none_a50d9dc68a554030\System.ServiceModel.dll
+ 2009-08-04 23:46 . 2008-11-24 23:57 5931008 c:\windows\winsxs\msil_system.servicemodel.ref_b77a5c561934e089_6.0.6001.22 317_none_55988bf02c5b339b\System.ServiceModel.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 5931008 c:\windows\winsxs\msil_system.servicemodel.ref_b77a5c561934e089_6.0.6001.22 208_none_559775022c5c3394\System.ServiceModel.dll
+ 2009-08-04 23:46 . 2008-11-24 23:34 5931008 c:\windows\winsxs\msil_system.servicemodel.ref_b77a5c561934e089_6.0.6001.18 173_none_6c6c8fb012ae04ca\System.ServiceModel.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 5931008 c:\windows\winsxs\msil_system.servicemodel.ref_b77a5c561934e089_6.0.6001.18 096_none_6c6e4c1012ac840a\System.ServiceModel.dll
+ 2009-08-04 23:46 . 2008-11-24 23:43 5931008 c:\windows\winsxs\msil_system.servicemodel.ref_b77a5c561934e089_6.0.6000.20 964_none_55c1d5f22c055914\System.ServiceModel.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 5931008 c:\windows\winsxs\msil_system.servicemodel.ref_b77a5c561934e089_6.0.6000.20 864_none_55c1d6162c0558c3\System.ServiceModel.dll
+ 2009-08-04 23:46 . 2008-11-24 23:44 5931008 c:\windows\winsxs\msil_system.servicemodel.ref_b77a5c561934e089_6.0.6000.16 780_none_6c91d88a125bc4e7\System.ServiceModel.dll
+ 2009-08-04 23:58 . 2008-06-20 01:17 5931008 c:\windows\winsxs\msil_system.servicemodel.ref_b77a5c561934e089_6.0.6000.16 708_none_6c891ffa1263c737\System.ServiceModel.dll
+ 2009-08-04 23:50 . 2008-07-27 17:58 5062656 c:\windows\winsxs\msil_system.design_b03f5f7f11d50a3a_6.0.6001.22230_none_9 e7f5b011cc41ad8\System.Design.dll
+ 2009-08-04 23:50 . 2008-07-27 18:03 5062656 c:\windows\winsxs\msil_system.design_b03f5f7f11d50a3a_6.0.6001.18111_none_b 54aea65031ea1c5\System.Design.dll
+ 2009-08-04 23:50 . 2008-07-27 17:55 5062656 c:\windows\winsxs\msil_system.design_b03f5f7f11d50a3a_6.0.6000.20883_none_9 ea81c531c6eda17\System.Design.dll
+ 2009-08-04 23:50 . 2008-07-27 18:00 5062656 c:\windows\winsxs\msil_system.design_b03f5f7f11d50a3a_6.0.6000.16720_none_b 57005af02cc9524\System.Design.dll
+ 2009-08-04 23:46 . 2008-11-24 23:57 5283840 c:\windows\winsxs\msil_presentationframework_31bf3856ad364e35_6.0.6001.2231 7_none_773d68b60d1c22e2\PresentationFramework.dll
+ 2009-08-04 23:58 . 2008-06-20 01:13 5283840 c:\windows\winsxs\msil_presentationframework_31bf3856ad364e35_6.0.6001.2220 8_none_774937060d132321\PresentationFramework.dll
+ 2009-08-04 23:46 . 2008-11-24 23:34 5283840 c:\windows\winsxs\msil_presentationframework_31bf3856ad364e35_6.0.6001.1817 3_none_766ee954f432c83b\PresentationFramework.dll
+ 2009-08-04 23:58 . 2008-06-20 01:14 5283840 c:\windows\winsxs\msil_presentationframework_31bf3856ad364e35_6.0.6001.1809 6_none_765c4874f4404efb\PresentationFramework.dll
+ 2009-08-04 23:46 . 2008-11-24 23:43 5283840 c:\windows\winsxs\msil_presentationframework_31bf3856ad364e35_6.0.6000.2096 4_none_751e19961020d1a1\PresentationFramework.dll
+ 2009-08-04 23:58 . 2008-06-20 01:12 5283840 c:\windows\winsxs\msil_presentationframework_31bf3856ad364e35_6.0.6000.2086 4_none_751e17b01020d47a\PresentationFramework.dll
+ 2009-08-04 23:46 . 2008-11-24 23:44 5283840 c:\windows\winsxs\msil_presentationframework_31bf3856ad364e35_6.0.6000.1678 0_none_747ad9e4f7170736\PresentationFramework.dll
+ 2009-08-04 23:58 . 2008-06-20 01:18 5283840 c:\windows\winsxs\msil_presentationframework_31bf3856ad364e35_6.0.6000.1670 8_none_74d95b94f6cef266\PresentationFramework.dll
+ 2006-11-02 10:22 . 2009-08-04 23:41 6553600 c:\windows\System32\SMI\Store\Machine\SCHEMA.DAT
- 2006-11-02 10:22 . 2009-08-04 11:20 6553600 c:\windows\System32\SMI\Store\Machine\SCHEMA.DAT
+ 2008-07-30 03:40 . 2008-07-30 03:40 1720824 c:\windows\Microsoft.NET\Framework\v3.5\vbc.exe
+ 2008-07-29 22:47 . 2008-07-29 22:47 1054208 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vs_setup.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 1364992 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\SITSetup.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 1064448 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\gencomp.dll
+ 2008-07-30 03:40 . 2008-07-30 03:40 1548280 c:\windows\Microsoft.NET\Framework\v3.5\csc.exe

zm02113 is offline  
Old 5th August 2009   #13
Inactive
THREAD STARTER
 
Profile:
Join Date: Aug 2009
Posts: 22
Computer Experience:
Experienced
zm02113 Reputation Level

My System

IE automatically pops up new browser windows


Combofix.txt 5 of 5 Did you get the first one? (1 of 4)

+ 2009-08-05 00:19 . 2009-08-05 00:19 6328320 c:\windows\ERDNT\Hiv-backup\SCHEMA.DAT
+ 2009-08-05 00:04 . 2009-08-05 00:04 2658304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\a611674830d 138f5108583623f412ab4\System.Data.Linq.ni.dll
+ 2009-08-05 00:04 . 2009-08-05 00:04 2461696 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\5600b8d6eb67044d ea243b56e3a1006b\System.Core.ni.dll
+ 2009-08-05 00:24 . 2009-08-05 00:24 5869568 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\e924ded 7748ca73c0101e5e6abbeca96\Microsoft.MediaCenter.UI.ni.dll
+ 2009-08-05 00:25 . 2009-08-05 00:25 1961984 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\084ea5d f8ab6197700c9aab1f60bfb6f\Microsoft.Build.Tasks.v3.5.ni.dll
+ 2009-08-05 00:25 . 2009-08-05 00:25 1839104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\f6deefd 97250d22ed563db710d82c4da\Microsoft.Build.Engine.ni.dll
+ 2009-08-05 00:24 . 2009-08-05 00:24 1961984 c:\windows\assembly\NativeImages_v2.0.50727_32\ehRecObj\fa97063b2ae691e86dc 3fd167dbd1b37\ehRecObj.ni.dll
+ 2009-08-05 00:24 . 2009-08-05 00:24 2437120 c:\windows\assembly\NativeImages_v2.0.50727_32\ehepg\6f55b6a9e37edbf6644a56 ce0903abd5\ehepg.ni.dll
+ 2009-08-05 00:03 . 2009-08-05 00:03 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e3 5\System.Web.Extensions.dll
+ 2009-08-05 00:02 . 2009-08-05 00:02 2879488 c:\windows\assembly\GAC_MSIL\System.Data.Entity\3.5.0.0__b77a5c561934e089\S ystem.Data.Entity.dll
+ 2009-08-05 00:25 . 2009-08-05 00:25 12750848 c:\windows\assembly\NativeImages_v2.0.50727_32\ehshell\098310a4c3ef013f2abe 16647da44e64\ehshell.ni.dll
+ 2009-05-04 11:42 . 2009-08-05 00:03 106687275 c:\windows\winsxs\ManifestCache\6.0.6002.18005_001c11ba_blobs.bin
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}]
2008-07-17 21:20 279944 ----a-w- c:\program files\AskBarDis\bar\bin\askBar.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{3041d03e-fd4b-44e0-b742-2d9b88305f98}"= "c:\program files\AskBarDis\bar\bin\askBar.dll" [2008-07-17 279944]

[HKEY_CLASSES_ROOT\clsid\{3041d03e-fd4b-44e0-b742-2d9b88305f98}]
[HKEY_CLASSES_ROOT\TypeLib\{4b1c1e16-6b34-430e-b074-5928eca4c150}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{3041D03E-FD4B-44E0-B742-2D9B88305F98}"= "c:\program files\AskBarDis\bar\bin\askBar.dll" [2008-07-17 279944]

[HKEY_CLASSES_ROOT\clsid\{3041d03e-fd4b-44e0-b742-2d9b88305f98}]
[HKEY_CLASSES_ROOT\TypeLib\{4b1c1e16-6b34-430e-b074-5928eca4c150}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-21 1008184]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-04-26 865840]
"Camera Assistant Software"="c:\program files\Camera Assistant Software for Gateway\traybar.exe" [2007-09-13 638976]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 90112]
"AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2009-08-04 1948440]
"SigmatelSysTrayApp"="sttray.exe" - c:\windows\sttray.exe [2007-09-07 405504]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\syste m]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~1\Google\GOOGLE~1\GoogleDesktopNetwork3.dll c:\windows\System32\avgrsstx.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"mixer"=wdmaud.drv

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavaso ft Ad-Aware Service]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SymEFA .sys]
@="FSFilter Activity Monitor"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDef end]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-disabled]
"AppleSyncNotifier"=c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" -atboottime
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{206CEEC2-6FA3-4050-94F0-1EB8ED799776}"= c:\program files\MSN Messenger\livecall.exe:Windows Live Messenger 8.1 (Phone)
"{2F779FFD-A3C2-4565-92B7-DF5A976235DE}"= TCP:6004|c:\program files\Microsoft Office\Office12\outlook.exe:Microsoft Office Outlook
"{ACAB4E4B-6D40-41C5-8646-D77FEBC7E8DA}"= c:\program files\Skype\Phone\Skype.exe:Skype
"{4A6DEA0C-17B3-48FF-8C4B-F60C48B442C4}"= UDP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"{DB5A3FAF-1C77-4F22-83C5-D4CB452FF958}"= TCP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"{7AB82EA6-9A2B-4C97-8FCA-7CB1FA902213}"= UDP:c:\program files\iTunes\iTunes.exe:iTunes
"{8FAB8848-348A-41F9-BBCC-8F731F1A2368}"= TCP:c:\program files\iTunes\iTunes.exe:iTunes
"{36E7CF7D-BC09-4B15-AD62-B434D8E2B0B9}"= c:\program files\AVG\AVG8\avgupd.exe:avgupd.exe
"{14C81807-57F6-4B88-825E-CD28220E12FF}"= c:\program files\AVG\AVG8\avgnsx.exe:avgnsx.exe
"TCP Query User{E7B83223-7703-4EAF-8FEF-F20294AA5B32}c:\\program files\\mozilla firefox\\firefox.exe"= UDP:c:\program files\mozilla firefox\firefox.exe:Firefox
"UDP Query User{B5D60ED5-9A7C-46D3-80EA-98DB1F77D67D}c:\\program files\\mozilla firefox\\firefox.exe"= TCP:c:\program files\mozilla firefox\firefox.exe:Firefox
"{773C5303-7EF7-4CB9-AF40-C2B1EF475B25}"= UDP:c:\users\Owner\AppData\Local\Temp\7zS471.tmp\SymNRT.exe:Norton Removal Tool
"{5E51953A-8992-4C6F-BF89-C5693E09BE4B}"= TCP:c:\users\Owner\AppData\Local\Temp\7zS471.tmp\SymNRT.exe:Norton Removal Tool
"{20EC0C1F-BD16-4B52-A62A-79DF38107AB5}"= UDP:c:\users\Owner\AppData\Local\Temp\7zS5762.tmp\SymNRT.exe:Norton Removal Tool
"{038670E9-7AF8-453F-8B8A-F1F04A0AF99C}"= TCP:c:\users\Owner\AppData\Local\Temp\7zS5762.tmp\SymNRT.exe:Norton Removal Tool

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]
"EnableFirewall"= 0 (0x0)

R0 Lbd;Lbd;c:\windows\System32\drivers\Lbd.sys [8/3/2009 10:21 PM 64160]
R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\System32\drivers\avgldx86.sys [8/3/2009 6:43 PM 335752]
R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\System32\drivers\avgtdix.sys [8/3/2009 6:43 PM 108552]
R2 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [8/3/2009 8:29 PM 298776]
R3 RTL8187B;Realtek RTL8187B Wireless 802.11g 54Mbps USB 2.0 Network Adapter;c:\windows\System32\drivers\rtl8187B.sys [8/11/2008 2:20 PM 281088]
R3 tap0901;TAP-Win32 Adapter V9;c:\windows\System32\drivers\tap0901.sys [10/8/2008 1:15 AM 25216]
S2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [7/3/2009 10:49 AM 1029456]
S3 NETw2v32;Intel(R) PRO/Wireless 2200BG Network Connection Driver for Windows Vista;c:\windows\System32\drivers\NETw2v32.sys [11/2/2006 6:25 AM 2589184]
.
Contents of the 'Scheduled Tasks' folder

2009-08-04 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-07-03 14:49]

2009-08-04 c:\windows\Tasks\GlaryInitialize.job
- c:\program files\Glary Utilities\initialize.exe [2009-06-24 15:39]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://my.yahoo.com/
mStart Page = hxxp://www.gateway.com/g/startpage.html?Ch=Retail&SubCH=nofound&Br=GTW&Loc=ENG_US&Sys=PTB&M=M-1624
uInternet Settings,ProxyOverride = *.local
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\narhf41m.default\

---- FIREFOX POLICIES ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.enforce_same_site_origin", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.cache_size", 51200);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.ogg.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.wave.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.autoplay.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.urlbar.autocomplete.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("capability.policy.mailnews.*.wholeText", "noAccess");
c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.storage.default_quota", 5120);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("content.sink.event_probe_rate", 3);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.http.prompt-temp-redirect", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("layout.css.dpi", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("layout.css.devPixelsPerPx", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("gestures.enable_single_finger_input", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.max_chrome_script_run_time", 0);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.tcp.sendbuffer", 131072);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("geo.enabled", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.remember_cert_checkbox_default_setting", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr", "moz35");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-cjkt", "moz35");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.blocklist.level", 2);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.urlbar.restrict.typed", "~");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.urlbar.default.behavior", 0);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.history", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.formdata", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.passwords", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.downloads", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cookies", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cache", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.sessions", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.offlineApps", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.siteSettings", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.history", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.formdata", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.passwords", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.downloads", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.cookies", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.cache", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.sessions", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.offlineApps", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.siteSettings", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.sanitize.migrateFx3Prefs", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.ssl_override_behavior", 2);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("security.alternate_certificate_error_page", "certerror");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.autostart", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.dont_prompt_on_enter", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("geo.wifi.uri", "https://www.google.com/loc/json");
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-08-04 20:25
Windows 6.0.6001 Service Pack 1 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
.
Completion time: 2009-08-05 20:27
ComboFix-quarantined-files.txt 2009-08-05 00:27
ComboFix2.txt 2009-08-04 11:53

Pre-Run: 173,474,308,096 bytes free
Post-Run: 173,383,663,616 bytes free

1369 --- E O F --- 2009-08-05 00:03

zm02113 is offline  
Old 5th August 2009   #14
Malware Analyst
 
broni's Avatar
 
Profile:
Join Date: Aug 2002
Location: Daly City, CA
Posts: 20,556
Computer Experience:
intermediate
broni Reputation Levelbroni Reputation Levelbroni Reputation Levelbroni Reputation Levelbroni Reputation Levelbroni Reputation Levelbroni Reputation Levelbroni Reputation Levelbroni Reputation Levelbroni Reputation Levelbroni Reputation Level

My System
You did fine
Quote:
so I clicked no and ran the version I downloaded last night
In your particular case, it was fine. It fixed, what I needed.

Uninstall Combofix:
Go Start > Run
Type in:
combofix /u
Note the space between the "combofix" and the "/u"
Restart computer.


How are pop-ups?

Download Dr.Web CureIt to the desktop:
ftp://ftp.drweb.com/pub/drweb/cureit/drweb-cureit.exe
  • Doubleclick the drweb-cureit.exe file and click Scan to run express scan. Click OK in pop-up window to allow scan.
  • This will scan the files currently running in memory and when something is found, click the Yes button when it asks you if you want to cure it. This is only a short scan.
  • Once the short scan has finished, select Complete scan.
  • Click the green arrow at the right, and the scan will start.
  • Click Yes to all if it asks if you want to cure/move the file.
  • When the scan has finished, in the menu, click File and choose Save report list
  • Save the report to your desktop. The report will be called DrWeb.csv
  • Close Dr.Web Cureit.
  • Important! Reboot your computer because it could be possible that files in use will be moved/deleted during reboot.
  • Copy and paste that log in the next reply. You can use Notepad to open the DrWeb.cvs report.

NOTE. During the scan, pop-up window will open asking for full version purchase. Simply close the window by clicking on X in upper right corner.


Post fresh HijackThis log as well.

broni is offline  
Old 5th August 2009   #15
Inactive
THREAD STARTER
 
Profile:
Join Date: Aug 2009
Posts: 22
Computer Experience:
Experienced
zm02113 Reputation Level

My System

IE automatically pops up new browser windows


Thanks, Broni.
ComboFix asks to update to a new version, but I thought it might not use your script file so I clicked no and ran the version I downloaded last night. BTW, it did not ask to reboot.
Thanks for all your help. ~ John

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:28:33 PM, on 8/4/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18294)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\WINDOWS\sttray.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Camera Assistant Software for Gateway\traybar.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Camera Assistant Software for Gateway\CEC_MAIN.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\notepad.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\Explorer.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gateway.com/g/startpage.h...s=PTB&M=M-1624
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - c:\windows\system32\BAE.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SigmatelSysTrayApp] sttray.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Camera Assistant Software] "C:\Program Files\Camera Assistant Software for Gateway\traybar.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GoogleDesktopNetwork3.dll C:\WINDOWS\System32\avgrsstx.dll
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\Gateway Games\Gateway Game Console\GameConsoleService.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: OpenVPN Service (OpenVPNService) - Unknown owner - C:\Program Files\WiTopia.Net\bin\openvpnserv.exe
O23 - Service: SigmaTel Audio Service (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV.exe

--
End of file - 5947 bytes

zm02113 is offline  


 

THIS THREAD HAS EXPIRED.

Are you having the same problem? Please post a new thread, but first you'll have to join us by Registering (FREE).



Discussion Forums
Operating Systems
Windows 10 Windows 10
Windows 8 Windows 8
Windows 7 Windows 7
Windows Vista Windows Vista
Windows XP Windows XP
Windows Server System Windows Server System
Legacy Windows OS Legacy Windows OS
Internet & Networking
Networking (Hardware & Software) Networking
Internet Explorer Internet Explorer
Microsoft Mail Microsoft Mail
Firefox, Thunderbird & SeaMonkey Firefox, Thunderbird
      & SeaMonkey

Web Applications & Cloud Web Applications & Cloud
General Internet
Security
Malware and Virus Removal Malware and Virus
     Removal

Security and Privacy Security and Privacy

Other
Other PC Software Other PC Software
Test Posts Test Posts
Hardware
PC Hardware PC Hardware
Mobile Devices Mobile Devices
Community
Introductions Introductions
General Discussions General Discussions
Site Comments & Suggestions Site Comments
      & Suggestions

News News @ WindowsBBS

Thread Tools


Find us on Facebook   Web Of Trust Rating

All times are GMT. The time now is 04:54.



Recent Discussions
Can't access my Hotmail a.. (0)
Computer freezes at rando.. (8)
System Restore Comments (11)
Don't mess with 12 year o.. (35)
Setting up Netgear router (4)
Windows 10 build 10162 IS.. (0)
Why Is The Administrator .. (6)
W10 Preview #10162 (2)
Microsoft Reveals Seven E.. (31)
No images in LiveMail (11)
Image 8.1 before 10 insta.. (5)
Need Windows 7 64 bit dri.. (14)
New Malwarebytes Anti-Mal.. (15)
I need help with windows .. (29)
SSD or Windows problem? (8)

Donate!
Support Windows BBS!



Powered by vBulletin® Copyright ©2000 - 2015, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO
Copyright © 2002 - 2015 WindowsBBS.com. All rights reserved.
FDMA Media LLC
Terms of Use, Legal Information & Privacy Policy
Page generated in 1.85230 seconds with 7 queries