Prosim o kontrolu logu

dragon741 · Příspěvekod **dragon741** » 08 zář 2007 01:18

Pc je docela dost pomaly, hry se trhaji a podobne, takže tam bude asi dost potvor(nedivil bych se nemam aktualizace k win formatoval sem), jinak projeto AdAwarem a Avastem

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:15:31, on 8.9.2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\Config\lsass.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\System32\svdhost.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\WINDOWS\WINDOWS\Winhost.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\ICQ6\ICQ.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\WINDOWS\WINDOWS\Winhost.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\WINDOWS\system32\rundl32.exe
C:\Program Files\Opera\Opera.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://google.icq.com/search/search_frame.php
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O2 - BHO: XTTBPos00 - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WebAssist - {85589B5D-D53D-4237-A677-46B82EA275F3} - C:\WINDOWS\WebAssist.dll
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O3 - Toolbar: &Rádio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
O4 - HKLM\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKLM\..\Run: [Microsoft Updates] svdhost.exe
O4 - HKLM\..\Run: [Winhost] C:\WINDOWS\WINDOWS\Winhost.exe
O4 - HKLM\..\RunServices: [Microsoft Updates] svdhost.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ6\ICQ.exe" silent
O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [Winhost] C:\WINDOWS\WINDOWS\Winhost.exe
O4 - HKCU\..\Run: [Windows Update] C:\WINDOWS\system32\rundl32.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O8 - Extra context menu item: Download Using &BitSpirit - C:\Program Files\BitSpirit\bsurl.htm
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

--
End of file - 5172 bytes

Reklama

dragon741 · Příspěvekod **dragon741** » 08 zář 2007 01:43

File C:\WINDOWS\Config\lsass.exe infected by "Trojan.Win32.VB.bdo" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\WINDOWS\Winhost.exe infected by "Backdoor.Win32.Nuclear.as" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\WINDOWS\Win32.sys infected by "Backdoor.Win32.Nuclear.as" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\WebAssist.dll//PE_Patch.UPX//UPX tagged as "not-a-virus:AdWare.Win32.BHO.cz". Action Taken: No Action Taken.
File C:\WINDOWS\WINDOWS\Winhost.exe infected by "Backdoor.Win32.Nuclear.as" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\WINDOWS\Winhost.exe infected by "Backdoor.Win32.Nuclear.as" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\petr\Plocha\total_player_free.exe//file33 tagged as "not-a-virus:AdWare.Win32.NewDotNet". Action Taken: No Action Taken.
Object "smitfraud Browser Hijacker" found in File System! Action Taken: No Action Taken.

a awast to ne a ne najit :-(

,jak to dostanu z pc?

Příspěvekod **fredik** » 08 zář 2007 09:53

Stáhni si SDFix
- Spusť ho a rozbalí se ti na disk kde je nainstalovaný Windows (typicky to je C:\SDfix)
- Pak restartuj PC do nouzového režimu (zvol možnost: Stav nouze, ne Stav nouze s práci v síti)
- Otevři adresář kde je vybalený SDFix a spusť soubor RunThis.bat tím spustíš program.
* Pak stiskni klávesu Y a pak Enter pro zahájení čistícího procesu.
* Pro dokončení kontroly budeš vyzván ke stisknoutí libovolné klávesy a počítač se restartuje.
* Při nabíhání operačního systému se program spustí znovu a dokončí čistící proces. Až se objeví Finish, budeš muset po vyzvání stisknout libovolnou klávesu, tim se ukončí program a zobrazí se ti ikony na ploše
- Když se skončí načítání ikon na ploše, otevře se ti na obrazovce log z SDFix a zároveň ho uloží do adresáře kde je rozbalený SDFix jako soubor Report.txt
Pak sem zkopíruj jeho obsah.

* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *

Stáhni si ComboFix (by sUBs) a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem klávesy 1
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah

Poznámka:
Pokud ti po spuštění Combofix Avast zahlásí virus, jedná se o planý poplach. Jak se dostaneš do menu s volbou tak zvol možnost 2 a tím ukončíš Combofix. Pak klikni pravým tlačítkem myši na ikonu Avastu pravo dole a dej: Pozastavit poskytovatele -> Standadní štít a až ho pozastavíš tak teprve spusť Combofix. Po ukončení běhu Combofixu si obnov zpět Standardní štít.

dragon741 · Příspěvekod **dragon741** » 09 zář 2007 16:34

SDFix: Version 1.103

Run by Administrator on ne 09.09.2007 at 16:16

Microsoft Windows XP [Verze 5.1.2600]

Running From: C:\SDFix

Safe Mode:
Checking Services:

Restoring Windows Registry Values
Restoring Windows Default Hosts File

Rebooting...

Normal Mode:
Checking Files:

Trojan Files Found:

C:\WINDOWS\regedit.com - Deleted
C:\WINDOWS\system32\rundl32.exe - Deleted
C:\WINDOWS\system32\svdhost.exe - Deleted

Removing Temp Files...

ADS Check:

C:\WINDOWS
No streams found.

C:\WINDOWS\system32
No streams found.

C:\WINDOWS\system32\svchost.exe
No streams found.

C:\WINDOWS\system32\ntoskrnl.exe
No streams found.

Final Check:

Remaining Services:
------------------

Authorized Application Key Export:

Remaining Files:
---------------

File Backups: - C:\SDFix\backups\backups.zip

Files with Hidden Attributes:

C:\WINDOWS\WINDOWS\Winhost.exe

Finished!

ComboFix 07-09-09.4 - "petr" 2007-09-09 16:27:15.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.1.1250.1.1029.18.881 [GMT 2:00]
* Created a new restore point
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\DOCUME~1\petr\Plocha\internet.lnk
C:\WINDOWS\system32\drivers\npf.sys
C:\WINDOWS\system32\packet.dll
C:\WINDOWS\system32\taskmgr.com
C:\WINDOWS\system32\wpcap.dll
C:\WINDOWS\WebAssist.dll

((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

-------\LEGACY_NPF
-------\NPF

((((((((((((((((((((((((( Files Created from 2007-08-09 to 2007-09-09 )))))))))))))))))))))))))))))))
.

2007-09-09 16:26 51,200 --a------ C:\WINDOWS\NirCmd.exe
2007-09-09 16:15 <DIR> dr-h----- C:\DOCUME~1\ADMINI~1\Data aplikacˇ
2007-09-09 16:15 <DIR> dr------- C:\DOCUME~1\ADMINI~1\Nabˇdka Start
2007-09-09 16:15 <DIR> d--h----- C:\DOCUME~1\ADMINI~1\ćablony
2007-09-09 16:15 <DIR> d--h----- C:\DOCUME~1\ADMINI~1\Okolnˇ tisk rny
2007-09-09 16:15 <DIR> d--h----- C:\DOCUME~1\ADMINI~1\Okolnˇ sˇś
2007-09-09 16:15 <DIR> d-------- C:\WINDOWS\ERUNT
2007-09-09 16:15 <DIR> d-------- C:\DOCUME~1\ADMINI~1\Plocha
2007-09-09 16:15 <DIR> d-------- C:\DOCUME~1\ADMINI~1\Oblˇben‚ polo§ky
2007-09-09 16:15 <DIR> d-------- C:\DOCUME~1\ADMINI~1\Dokumenty
2007-09-09 16:06 1,484,625 --a------ C:\ComboFix.exe
2007-09-09 16:05 1,073,147 --a------ C:\SDFix.exe
2007-09-09 15:40 <DIR> d-------- C:\WINDOWS\LogFiles
2007-09-08 01:24 <DIR> d-a------ C:\WINDOWS\zts2.exe
2007-09-08 01:24 <DIR> d-a------ C:\WINDOWS\system32\vcmgcd32.dll
2007-09-08 01:24 <DIR> d-a------ C:\WINDOWS\system32\iifgfgf.dll
2007-09-08 01:24 <DIR> d-a------ C:\WINDOWS\rundll16.exe
2007-09-08 01:24 <DIR> d-a------ C:\WINDOWS\rundl132.dll
2007-09-08 01:24 <DIR> d-a------ C:\WINDOWS\logo1_.exe
2007-09-08 01:23 135,680 --a------ C:\WINDOWS\R.COM
2007-09-08 01:23 130,048 --a------ C:\WINDOWS\system32\T.COM
2007-09-08 01:11 <DIR> d-------- C:\Program Files\Trend Micro
2007-09-08 00:50 <DIR> d-------- C:\!KillBox
2007-09-08 00:39 24,576 --a------ C:\WINDOWS\system32\xpsp1hfm.exe
2007-09-07 15:42 <DIR> d-------- C:\Program Files\QIP
2007-08-30 14:37 <DIR> d-------- C:\Program Files\Wanadoo Edition
2007-08-30 13:56 306,688 --a------ C:\WINDOWS\IsUninst.exe
2007-08-30 13:56 <DIR> d-------- C:\Program Files\Xplosiv
2007-08-29 22:49 <DIR> d-------- C:\Program Files\RADVideo
2007-08-28 19:22 <DIR> d-------- C:\Games
2007-08-28 15:46 <DIR> d-------- C:\Program Files\THQ
2007-08-26 18:56 <DIR> d-------- C:\Program Files\Lavasoft
2007-08-26 18:56 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard
2007-08-26 18:56 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\Lavasoft
2007-08-26 13:35 33 --a------ C:\WINDOWS\Bioshock Patcher.bat
2007-08-26 13:35 2,403,096 --a------ C:\WINDOWS\infinst_autol.exe
2007-08-26 13:29 <DIR> d-------- C:\WINDOWS\WINDOWS
2007-08-26 12:18 <DIR> d-------- C:\Program Files\DAEMON Tools
2007-08-25 21:58 17,480 --a------ C:\WINDOWS\system32\drivers\hamachi.sys
2007-08-25 21:58 <DIR> d-------- C:\Program Files\Hamachi
2007-08-21 12:07 107,888 --a------ C:\WINDOWS\system32\CmdLineExt.dll
2007-08-21 11:54 15,128 --a------ C:\WINDOWS\system32\x3daudio1_1.dll
2007-08-21 11:50 <DIR> d-------- C:\Program Files\2K Games
2007-08-20 23:54 161,792 --a------ C:\WINDOWS\system32\CNMLM7X.DLL
2007-08-20 23:54 <DIR> d--h----- C:\WINDOWS\system32\CanonIJ Uninstaller Information
2007-08-20 23:54 <DIR> d--h----- C:\Program Files\CanonBJ
2007-08-20 23:54 <DIR> d--h----- C:\DOCUME~1\ALLUSE~1\DATAAP~1\CanonBJ
2007-08-20 23:43 24,960 --a--c--- C:\WINDOWS\system32\dllcache\usbprint.sys
2007-08-20 23:43 24,960 --a------ C:\WINDOWS\system32\drivers\usbprint.sys
2007-08-20 23:43 <DIR> d-------- C:\WUTemp
2007-08-18 11:35 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\ATI
2007-08-16 23:19 <DIR> d-------- C:\Program Files\Swf2Avi
2007-08-16 11:48 42,496 --a------ C:\WINDOWS\system32\drivers\AmdK8.sys
2007-08-16 11:48 <DIR> d-------- C:\Program Files\AMD
2007-08-16 10:47 <DIR> d-------- C:\Program Files\Common Files\ATI Technologies
2007-08-16 10:42 182,880 --a--c--- C:\WINDOWS\system32\dllcache\iuengine.dll
2007-08-16 10:42 182,880 --a------ C:\WINDOWS\system32\iuengine.dll
2007-08-15 18:52 <DIR> d-------- C:\Program Files\Lavalys
2007-08-15 18:31 47,360 --a------ C:\WINDOWS\system32\drivers\Pcouffin.sys
2007-08-15 18:30 <DIR> d-------- C:\Program Files\vso
2007-08-15 13:44 5,632 --a------ C:\WINDOWS\system32\drivers\Entech64.sys
2007-08-15 13:44 3,972 --a------ C:\WINDOWS\system32\drivers\PciBus.sys
2007-08-15 13:44 21,664 --a------ C:\WINDOWS\system32\drivers\Entech.sys
2007-08-15 13:44 <DIR> d-------- C:\WINDOWS\system32\Futuremark
2007-08-15 13:43 <DIR> d-------- C:\Program Files\Futuremark
2007-08-15 11:33 <DIR> d-------- C:\WINDOWS\LastGood
2007-08-15 10:53 <DIR> d-------- C:\WINDOWS\LastGood.Tmp
2007-08-14 12:51 24,064 --a------ C:\WINDOWS\system32\drivers\ATITool.sys
2007-08-14 12:51 <DIR> d-------- C:\Program Files\ATITool
2007-08-13 21:02 5,248 --a------ C:\WINDOWS\system32\drivers\giveio.sys
2007-08-13 21:00 <DIR> d-------- C:\Program Files\SpeedFan
2007-08-13 15:59 86,016 --a--c--- C:\WINDOWS\system32\dllcache\wmpshell.dll
2007-08-13 15:58 224,768 --a--c--- C:\WINDOWS\system32\dllcache\wmasf.dll
2007-08-13 15:58 2,370,296 --a--c--- C:\WINDOWS\system32\dllcache\wmvcore.dll
2007-08-13 15:37 <DIR> d-------- C:\WINDOWS\msdownld.tmp
2007-08-13 15:30 <DIR> d-------- C:\Program Files\CAPCOM
2007-08-12 17:46 <DIR> d-------- C:\Program Files\Glory of the Roman Empire

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-09-09 16:10 --------- d-a------ C:\DOCUME~1\ALLUSE~1\DATAAP~1\TEMP
2007-09-08 01:05 --------- d-------- C:\Program Files\ICQ6
2007-09-07 23:47 --------- d--h----- C:\Program Files\InstallShield Installation Information
2007-09-05 18:57 --------- d-------- C:\Program Files\ICQToolbar
2007-09-02 18:52 --------- d-------- C:\Program Files\Alwil Software
2007-08-26 12:15 685816 --a------ C:\WINDOWS\system32\drivers\sptd.sys
2007-08-22 17:20 163644 --a------ C:\WINDOWS\system32\drivers\secdrv.sys
2007-08-17 18:07 --------- d-------- C:\Program Files\ATI Technologies
2007-07-30 22:01 --------- d-------- C:\Program Files\Opera
2007-07-29 21:57 --------- d-------- C:\Program Files\Webteh
2007-07-29 17:59 --------- d-------- C:\Program Files\BitSpirit
2007-07-29 17:57 --------- d-------- C:\Program Files\uTorrent
2007-07-29 16:58 --------- d-------- C:\Program Files\QuickTime
2007-07-29 16:58 --------- d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\QuickTime
2007-07-29 16:55 --------- d-------- C:\Program Files\Total Player
2007-07-27 18:37 --------- d-------- C:\Program Files\SEGA
2007-07-27 17:32 --------- d-------- C:\Program Files\Common Files\InstallShield
2007-07-27 17:30 --------- d-------- C:\Program Files\Analog Devices
2007-07-27 17:28 --------- d-------- C:\Program Files\VIA
2007-07-27 17:22 --------- d-------- C:\Program Files\microsoft frontpage
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.

*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"High Definition Audio Property Page Shortcut"="HDAShCut.exe" [2004-10-27 15:21 C:\WINDOWS\system32\HdAShCut.exe]
"SoundMAXPnP"="C:\Program Files\Analog Devices\Core\smax4pnp.exe" [2005-05-20 03:11]
"SoundMAX"="C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" [2005-09-07 15:35]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-04-30 17:42]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-07-29 16:58]
"ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe" []
"StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 12:35]
"Winhost"="C:\WINDOWS\WINDOWS\Winhost.exe" [2003-04-16 14:00]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\ctfmon.exe" [2003-04-16 14:00]
"ICQ"="C:\Program Files\ICQ6\ICQ.exe" [2007-08-08 17:03]
"DAEMON Tools"="C:\Program Files\DAEMON Tools\daemon.exe" [2007-08-22 14:06]
"Winhost"="C:\WINDOWS\WINDOWS\Winhost.exe" [2003-04-16 14:00]

C:\DOCUME~1\ALLUSE~1\NABDKA~1\Programy\POSPUT~1\
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe [2006-10-23 02:48:00]
Adobe Reader Synchronizer.lnk - C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe [2006-10-23 01:01:00]

R1 ATITool;ATITool Overclocking Utility;C:\WINDOWS\System32\DRIVERS\ATITool.sys
R3 AEAudioService;AEAudio Service;C:\WINDOWS\System32\drivers\AEAudio.sys
R3 PSched;Plánovač paketů technologie QoS;C:\WINDOWS\System32\DRIVERS\psched.sys
R3 SenFiltService;SenFilt Service;C:\WINDOWS\System32\drivers\Senfilt.sys

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
Schedule

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{E80E0706-D0C0-DF53-B7E4-CC62C00195D0}]
C:\WINDOWS\system32\rundl32.exe
.
**************************************************************************

catchme 0.3.1061 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-09-09 16:30:24
Windows 5.1.2600 Service Pack 1 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2007-09-09 16:31:50 - machine was rebooted
C:\ComboFix-quarantined-files.txt ... 2007-09-09 16:31
.
--- E O F ---

dragon741 · Příspěvekod **dragon741** » 09 zář 2007 16:43

jinak dik za radu

Příspěvekod **fredik** » 11 zář 2007 09:03

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok)
Zkopíruj do něj následující text označený zeleně:

Kód: Vybrat vše

File::
C:\WINDOWS\Config\lsass.exe

Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Winhost"=-
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Winhost"=-

DirLook::
C:\WINDOWS\WINDOWS
C:\WINDOWS\LastGood 
C:\WINDOWS\LastGood.Tmp

Zvol možnost Uložit soubor jako, pojmenuj soubor CFScript.txt a zvol Uložit jako typ: Všechny soubory.
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť
Obrázek

- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu

Nech zkontrolovat tyto soubory na VirusTotall a vlož sem výsledky.
C:\WINDOWS\system32\xpsp1hfm.exe
C:\WINDOWS\infinst_autol.exe

PS: pokud by se ti nedostalo delší dobu odpovědi zkus se připomenout.

dragon741 · Příspěvekod **dragon741** » 12 zář 2007 21:25

ComboFix 07-09-09.4 - "petr" 2007-09-12 21:17:23.2 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.1.1250.1.1029.18.821 [GMT 2:00]
* Created a new restore point

FILE::
C:\WINDOWS\Config\lsass.exe
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\WINDOWS\Config\lsass.exe

((((((((((((((((((((((((( Files Created from 2007-08-12 to 2007-09-12 )))))))))))))))))))))))))))))))
.

2007-09-12 19:31 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\Ahead
2007-09-12 19:29 <DIR> d-------- C:\Program Files\Nero
2007-09-12 19:29 <DIR> d-------- C:\Program Files\Common Files\Ahead
2007-09-12 19:29 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\Nero
2007-09-12 19:00 <DIR> d-------- C:\Program Files\CDBurnerXP Pro 3
2007-09-12 17:20 <DIR> d-------- C:\coh
2007-09-12 16:42 <DIR> d---s---- C:\DOCUME~1\petr\UserData
2007-09-10 18:27 21,811,216 --a------ C:\7-7_xp32-64_ccc_asian_49710.exe
2007-09-10 18:27 15,149,280 --a------ C:\7-7_xp32_dd_49709.exe
2007-09-10 18:26 4,155,184 --a------ C:\7-7_xp32-64_wdm_49709.exe
2007-09-10 18:21 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\ATI
2007-09-10 18:18 <DIR> d-------- C:\Program Files\Steam
2007-09-10 17:33 2,720,456 --a------ C:\ccsetup141.exe
2007-09-10 17:33 <DIR> d-------- C:\Program Files\CCleaner
2007-09-09 16:26 51,200 --a------ C:\WINDOWS\NirCmd.exe
2007-09-09 16:15 <DIR> dr-h----- C:\DOCUME~1\ADMINI~1\Data aplikacˇ
2007-09-09 16:15 <DIR> dr------- C:\DOCUME~1\ADMINI~1\Nabˇdka Start
2007-09-09 16:15 <DIR> d--h----- C:\DOCUME~1\ADMINI~1\ćablony
2007-09-09 16:15 <DIR> d--h----- C:\DOCUME~1\ADMINI~1\Okolnˇ tisk rny
2007-09-09 16:15 <DIR> d--h----- C:\DOCUME~1\ADMINI~1\Okolnˇ sˇś
2007-09-09 16:15 <DIR> d-------- C:\WINDOWS\ERUNT
2007-09-09 16:15 <DIR> d-------- C:\DOCUME~1\ADMINI~1\Plocha
2007-09-09 16:15 <DIR> d-------- C:\DOCUME~1\ADMINI~1\Oblˇben‚ polo§ky
2007-09-09 16:15 <DIR> d-------- C:\DOCUME~1\ADMINI~1\Dokumenty
2007-09-09 16:06 1,484,625 --a------ C:\ComboFix.exe
2007-09-09 16:05 1,073,147 --a------ C:\SDFix.exe
2007-09-09 15:40 <DIR> d-------- C:\WINDOWS\LogFiles
2007-09-08 01:24 <DIR> d-a------ C:\WINDOWS\zts2.exe
2007-09-08 01:24 <DIR> d-a------ C:\WINDOWS\system32\vcmgcd32.dll
2007-09-08 01:24 <DIR> d-a------ C:\WINDOWS\system32\iifgfgf.dll
2007-09-08 01:24 <DIR> d-a------ C:\WINDOWS\rundll16.exe
2007-09-08 01:24 <DIR> d-a------ C:\WINDOWS\rundl132.dll
2007-09-08 01:24 <DIR> d-a------ C:\WINDOWS\logo1_.exe
2007-09-08 01:23 135,680 --a------ C:\WINDOWS\R.COM
2007-09-08 01:23 130,048 --a------ C:\WINDOWS\system32\T.COM
2007-09-08 01:11 <DIR> d-------- C:\Program Files\Trend Micro
2007-09-08 00:50 <DIR> d-------- C:\!KillBox
2007-09-08 00:39 24,576 --a------ C:\WINDOWS\system32\xpsp1hfm.exe
2007-09-07 15:42 <DIR> d-------- C:\Program Files\QIP
2007-08-30 14:37 <DIR> d-------- C:\Program Files\Wanadoo Edition
2007-08-30 13:56 306,688 --a------ C:\WINDOWS\IsUninst.exe
2007-08-30 13:56 <DIR> d-------- C:\Program Files\Xplosiv
2007-08-29 22:49 <DIR> d-------- C:\Program Files\RADVideo
2007-08-28 19:22 <DIR> d-------- C:\Games
2007-08-28 15:46 <DIR> d-------- C:\Program Files\THQ
2007-08-26 18:56 <DIR> d-------- C:\Program Files\Lavasoft
2007-08-26 18:56 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard
2007-08-26 18:56 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\Lavasoft
2007-08-26 13:35 33 --a------ C:\WINDOWS\Bioshock Patcher.bat
2007-08-26 13:35 2,403,096 --a------ C:\WINDOWS\infinst_autol.exe
2007-08-26 13:29 <DIR> d-------- C:\WINDOWS\WINDOWS
2007-08-26 12:18 <DIR> d-------- C:\Program Files\DAEMON Tools
2007-08-25 21:58 17,480 --a------ C:\WINDOWS\system32\drivers\hamachi.sys
2007-08-25 21:58 <DIR> d-------- C:\Program Files\Hamachi
2007-08-21 12:07 107,888 --a------ C:\WINDOWS\system32\CmdLineExt.dll
2007-08-21 11:54 15,128 --a------ C:\WINDOWS\system32\x3daudio1_1.dll
2007-08-21 11:50 <DIR> d-------- C:\Program Files\2K Games
2007-08-20 23:54 161,792 --a------ C:\WINDOWS\system32\CNMLM7X.DLL
2007-08-20 23:54 <DIR> d--h----- C:\WINDOWS\system32\CanonIJ Uninstaller Information
2007-08-20 23:54 <DIR> d--h----- C:\Program Files\CanonBJ
2007-08-20 23:54 <DIR> d--h----- C:\DOCUME~1\ALLUSE~1\DATAAP~1\CanonBJ
2007-08-20 23:43 24,960 --a--c--- C:\WINDOWS\system32\dllcache\usbprint.sys
2007-08-20 23:43 24,960 --a------ C:\WINDOWS\system32\drivers\usbprint.sys
2007-08-20 23:43 <DIR> d-------- C:\WUTemp
2007-08-16 23:19 <DIR> d-------- C:\Program Files\Swf2Avi
2007-08-16 11:48 42,496 --a------ C:\WINDOWS\system32\drivers\AmdK8.sys
2007-08-16 11:48 <DIR> d-------- C:\Program Files\AMD
2007-08-16 10:47 <DIR> d-------- C:\Program Files\Common Files\ATI Technologies
2007-08-16 10:42 182,880 --a--c--- C:\WINDOWS\system32\dllcache\iuengine.dll
2007-08-16 10:42 182,880 --a------ C:\WINDOWS\system32\iuengine.dll
2007-08-15 18:52 <DIR> d-------- C:\Program Files\Lavalys
2007-08-15 18:31 47,360 --a------ C:\WINDOWS\system32\drivers\Pcouffin.sys
2007-08-15 18:30 <DIR> d-------- C:\Program Files\vso
2007-08-15 13:44 5,632 --a------ C:\WINDOWS\system32\drivers\Entech64.sys
2007-08-15 13:44 3,972 --a------ C:\WINDOWS\system32\drivers\PciBus.sys
2007-08-15 13:44 21,664 --a------ C:\WINDOWS\system32\drivers\Entech.sys
2007-08-15 13:44 <DIR> d-------- C:\WINDOWS\system32\Futuremark
2007-08-15 13:43 <DIR> d-------- C:\Program Files\Futuremark
2007-08-15 11:33 <DIR> d-------- C:\WINDOWS\LastGood
2007-08-15 10:53 <DIR> d-------- C:\WINDOWS\LastGood.Tmp
2007-08-14 12:51 24,064 --a------ C:\WINDOWS\system32\drivers\ATITool.sys
2007-08-14 12:51 <DIR> d-------- C:\Program Files\ATITool
2007-08-13 21:02 5,248 --a------ C:\WINDOWS\system32\drivers\giveio.sys
2007-08-13 21:00 <DIR> d-------- C:\Program Files\SpeedFan
2007-08-13 15:59 86,016 --a--c--- C:\WINDOWS\system32\dllcache\wmpshell.dll
2007-08-13 15:58 224,768 --a--c--- C:\WINDOWS\system32\dllcache\wmasf.dll
2007-08-13 15:58 2,370,296 --a--c--- C:\WINDOWS\system32\dllcache\wmvcore.dll
2007-08-13 15:37 <DIR> d-------- C:\WINDOWS\msdownld.tmp
2007-08-13 15:30 <DIR> d-------- C:\Program Files\CAPCOM
2007-08-12 17:46 <DIR> d-------- C:\Program Files\Glory of the Roman Empire

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-09-10 21:22 --------- d-------- C:\Program Files\ICQToolbar
2007-09-10 18:27 --------- d--h----- C:\Program Files\InstallShield Installation Information
2007-09-10 18:17 --------- d-------- C:\Program Files\ATI Technologies
2007-09-09 16:10 --------- d-a------ C:\DOCUME~1\ALLUSE~1\DATAAP~1\TEMP
2007-09-08 01:05 --------- d-------- C:\Program Files\ICQ6
2007-09-02 18:52 --------- d-------- C:\Program Files\Alwil Software
2007-08-26 12:15 685816 --a------ C:\WINDOWS\system32\drivers\sptd.sys
2007-08-22 17:20 163644 --a------ C:\WINDOWS\system32\drivers\secdrv.sys
2007-07-30 22:01 --------- d-------- C:\Program Files\Opera
2007-07-29 21:57 --------- d-------- C:\Program Files\Webteh
2007-07-29 17:59 --------- d-------- C:\Program Files\BitSpirit
2007-07-29 17:57 --------- d-------- C:\Program Files\uTorrent
2007-07-29 16:58 --------- d-------- C:\Program Files\QuickTime
2007-07-29 16:58 --------- d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\QuickTime
2007-07-29 16:55 --------- d-------- C:\Program Files\Total Player
2007-07-27 18:37 --------- d-------- C:\Program Files\SEGA
2007-07-27 17:32 --------- d-------- C:\Program Files\Common Files\InstallShield
2007-07-27 17:30 --------- d-------- C:\Program Files\Analog Devices
2007-07-27 17:28 --------- d-------- C:\Program Files\VIA
2007-07-27 17:22 --------- d-------- C:\Program Files\microsoft frontpage
2007-07-20 00:57 267112 --a------ C:\WINDOWS\system32\xactengine2_9.dll
2007-07-19 18:14 444776 --a------ C:\WINDOWS\system32\d3dx10_35.dll
2007-07-19 18:14 3727720 --a------ C:\WINDOWS\system32\d3dx9_35.dll
2007-07-19 18:14 1358192 --a------ C:\WINDOWS\system32\D3DCompiler_35.dll
2007-07-12 09:12 81920 --a------ C:\WINDOWS\system32\frapsvid.dll
2007-06-29 21:05 520192 --------- C:\WINDOWS\system32\ati2sgag.exe
2007-06-27 19:05 972072 --a------ C:\WINDOWS\UNNeroMediaHome.exe
2007-06-27 03:59 344064 --a------ C:\WINDOWS\system32\ATIDEMGX.dll
2007-06-27 03:58 269312 --a------ C:\WINDOWS\system32\ati2dvag.dll
2007-06-27 03:56 307200 --a------ C:\WINDOWS\system32\atiiiexx.dll
2007-06-27 03:51 26112 --a------ C:\WINDOWS\system32\Ati2mdxx.exe
2007-06-27 03:51 143360 --a------ C:\WINDOWS\system32\atipdlxx.dll
2007-06-27 03:51 122880 --a------ C:\WINDOWS\system32\Oemdspif.dll
2007-06-27 03:50 43520 --a------ C:\WINDOWS\system32\ati2edxx.dll
2007-06-27 03:50 118784 --a------ C:\WINDOWS\system32\ati2evxx.dll
2007-06-27 03:49 483328 --a------ C:\WINDOWS\system32\ati2evxx.exe
2007-06-27 03:48 53248 --a------ C:\WINDOWS\system32\ATIDDC.DLL
2007-06-27 03:44 8232960 --a------ C:\WINDOWS\system32\atioglx2.dll
2007-06-27 03:41 2940992 --a------ C:\WINDOWS\system32\ati3duag.dll
2007-06-27 03:31 1519744 --a------ C:\WINDOWS\system32\ativvaxx.dll
2007-06-27 03:19 5435392 --a------ C:\WINDOWS\system32\atioglxx.dll
2007-06-27 03:17 266240 --a------ C:\WINDOWS\system32\atikvmag.dll
2007-06-27 03:16 17408 --a------ C:\WINDOWS\system32\atitvo32.dll
2007-06-27 03:14 176128 --a------ C:\WINDOWS\system32\atiok3x2.dll
2007-06-27 03:10 376832 --a------ C:\WINDOWS\system32\ati2cqag.dll
2007-06-26 14:12 972072 --a------ C:\WINDOWS\UNNeroVision.exe
2007-06-20 20:46 266088 --a------ C:\WINDOWS\system32\xactengine2_8.dll
2007-06-20 20:45 18280 --a------ C:\WINDOWS\system32\x3daudio1_2.dll
.

(((((((((((((((((((((((((((((((((((((((((((( Look )))))))))))))))))))))))))))))))))))))))))))))))))))))))))

---- Directory of C:\WINDOWS\WINDOWS ----

2007-09-12 20:53 218624 --a------ C:\WINDOWS\WINDOWS\Win32.sys
2003-04-16 14:00 306688 ---h----- C:\WINDOWS\WINDOWS\Winhost.exe

---- Directory of C:\WINDOWS\LastGood ----

2007-08-28 15:59 0 --ah----- C:\WINDOWS\LastGood\INF\xinput1_3_x86.PNF
2007-08-28 15:59 0 --ah----- C:\WINDOWS\LastGood\INF\xinput1_3_x86.inf
2007-08-28 15:58 0 --ah----- C:\WINDOWS\LastGood\INF\oem12.PNF
2007-08-28 15:58 0 --ah----- C:\WINDOWS\LastGood\INF\oem12.inf
2007-08-21 11:54 0 --ah----- C:\WINDOWS\LastGood\INF\xinput9_1_0_x86.PNF
2007-08-21 11:54 0 --ah----- C:\WINDOWS\LastGood\INF\xinput9_1_0_x86.inf
2007-08-21 11:54 0 --ah----- C:\WINDOWS\LastGood\INF\xinput1_2_x86.PNF
2007-08-21 11:54 0 --ah----- C:\WINDOWS\LastGood\INF\xinput1_2_x86.inf
2007-08-21 11:54 0 --ah----- C:\WINDOWS\LastGood\INF\xinput1_1_x86.PNF
2007-08-21 11:54 0 --ah----- C:\WINDOWS\LastGood\INF\xinput1_1_x86.inf
2007-08-21 11:54 0 --ah----- C:\WINDOWS\LastGood\INF\xact2_6_x86.PNF
2007-08-21 11:54 0 --ah----- C:\WINDOWS\LastGood\INF\xact2_6_x86.inf
2007-08-21 11:54 0 --ah----- C:\WINDOWS\LastGood\INF\xact2_5_x86.PNF
2007-08-21 11:54 0 --ah----- C:\WINDOWS\LastGood\INF\xact2_5_x86.inf
2007-08-21 11:54 0 --ah----- C:\WINDOWS\LastGood\INF\xact2_4_x86.PNF
2007-08-21 11:54 0 --ah----- C:\WINDOWS\LastGood\INF\xact2_4_x86.inf
2007-08-21 11:54 0 --ah----- C:\WINDOWS\LastGood\INF\xact2_3_x86.PNF
2007-08-21 11:54 0 --ah----- C:\WINDOWS\LastGood\INF\xact2_3_x86.inf
2007-08-21 11:54 0 --ah----- C:\WINDOWS\LastGood\INF\xact2_2_x86.PNF
2007-08-21 11:54 0 --ah----- C:\WINDOWS\LastGood\INF\xact2_2_x86.inf
2007-08-21 11:54 0 --ah----- C:\WINDOWS\LastGood\INF\xact2_1_x86.PNF
2007-08-21 11:54 0 --ah----- C:\WINDOWS\LastGood\INF\xact2_1_x86.inf
2007-08-21 11:54 0 --ah----- C:\WINDOWS\LastGood\INF\xact_x86.PNF
2007-08-21 11:54 0 --ah----- C:\WINDOWS\LastGood\INF\xact_x86.inf
2007-08-21 11:54 0 --ah----- C:\WINDOWS\LastGood\INF\d3dx9_32_x86.PNF
2007-08-21 11:54 0 --ah----- C:\WINDOWS\LastGood\INF\d3dx9_32_x86.inf
2007-08-21 11:54 0 --ah----- C:\WINDOWS\LastGood\INF\d3dx9_31_x86.PNF
2007-08-21 11:54 0 --ah----- C:\WINDOWS\LastGood\INF\d3dx9_31_x86.inf
2007-08-21 11:54 0 --ah----- C:\WINDOWS\LastGood\INF\d3dx9_30_x86.PNF
2007-08-21 11:54 0 --ah----- C:\WINDOWS\LastGood\INF\d3dx9_30_x86.inf
2007-08-21 11:54 0 --ah----- C:\WINDOWS\LastGood\INF\d3dx9_29_x86.PNF
2007-08-21 11:54 0 --ah----- C:\WINDOWS\LastGood\INF\d3dx9_29_x86.inf
2007-08-21 11:54 0 --ah----- C:\WINDOWS\LastGood\INF\d3dx9_28_x86.PNF
2007-08-21 11:54 0 --ah----- C:\WINDOWS\LastGood\INF\d3dx9_28_x86.inf
2007-08-21 11:54 0 --ah----- C:\WINDOWS\LastGood\INF\d3dx9_27_x86.PNF
2007-08-21 11:54 0 --ah----- C:\WINDOWS\LastGood\INF\d3dx9_27_x86.inf
2007-08-21 11:54 0 --ah----- C:\WINDOWS\LastGood\INF\d3dx9_26_x86.PNF
2007-08-21 11:54 0 --ah----- C:\WINDOWS\LastGood\INF\d3dx9_26_x86.inf
2007-08-21 11:54 0 --ah----- C:\WINDOWS\LastGood\INF\d3dx9_25_x86.PNF
2007-08-21 11:54 0 --ah----- C:\WINDOWS\LastGood\INF\d3dx9_25_x86.inf
2007-08-21 11:54 0 --ah----- C:\WINDOWS\LastGood\INF\d3dx9_24_x86.PNF
2007-08-21 11:54 0 --ah----- C:\WINDOWS\LastGood\INF\d3dx9_24_x86.inf
2007-08-21 11:53 0 --ah----- C:\WINDOWS\LastGood\INF\oem11.PNF
2007-08-21 11:53 0 --ah----- C:\WINDOWS\LastGood\INF\oem11.inf
2007-08-20 23:54 0 --ah----- C:\WINDOWS\LastGood\INF\oem10.PNF
2007-08-20 23:54 0 --ah----- C:\WINDOWS\LastGood\INF\oem10.inf
2007-08-18 17:26 0 --ah----- C:\WINDOWS\LastGood\INF\oem9.PNF
2007-08-18 17:26 0 --ah----- C:\WINDOWS\LastGood\INF\oem9.inf
2007-08-17 18:04 0 --ah----- C:\WINDOWS\LastGood\INF\oem8.PNF
2007-08-17 18:04 0 --ah----- C:\WINDOWS\LastGood\INF\oem8.inf
2007-08-16 10:43 0 --ah----- C:\WINDOWS\LastGood\INF\oem7.PNF
2007-08-16 10:43 0 --ah----- C:\WINDOWS\LastGood\INF\oem7.inf
2007-08-16 10:43 0 --ah----- C:\WINDOWS\LastGood\INF\oem6.PNF
2007-08-16 10:43 0 --ah----- C:\WINDOWS\LastGood\INF\oem6.inf
2007-08-15 18:31 0 --ah----- C:\WINDOWS\LastGood\INF\oem5.PNF
2007-08-15 18:31 0 --ah----- C:\WINDOWS\LastGood\INF\oem5.inf
2007-08-15 11:34 0 --ah----- C:\WINDOWS\LastGood\INF\WMP10.PNF
2007-08-15 11:34 0 --ah----- C:\WINDOWS\LastGood\INF\WMP10.inf
2007-08-15 11:34 0 --ah----- C:\WINDOWS\LastGood\INF\WMFSDK10.PNF
2007-08-15 11:34 0 --ah----- C:\WINDOWS\LastGood\INF\WMFSDK10.inf
2007-08-15 11:34 0 --ah----- C:\WINDOWS\LastGood\INF\WMDM10.PNF
2007-08-15 11:34 0 --ah----- C:\WINDOWS\LastGood\INF\WMDM10.inf
2007-08-15 11:34 0 --ah----- C:\WINDOWS\LastGood\INF\MPSTUB10.PNF
2007-08-15 11:34 0 --ah----- C:\WINDOWS\LastGood\INF\MPSTUB10.inf
2007-08-15 11:34 0 --ah----- C:\WINDOWS\LastGood\INF\MPCD10.PNF
2007-08-15 11:34 0 --ah----- C:\WINDOWS\LastGood\INF\MPCD10.inf
2007-08-15 11:34 0 --ah----- C:\WINDOWS\LastGood\INF\DRM10.PNF
2007-08-15 11:34 0 --ah----- C:\WINDOWS\LastGood\INF\DRM10.inf
2007-08-15 11:34 0 --ah----- C:\WINDOWS\LastGood\INF\codecs10.PNF
2007-08-15 11:34 0 --ah----- C:\WINDOWS\LastGood\INF\codecs10.inf
2007-08-15 11:33 0 --ah----- C:\WINDOWS\LastGood\INF\MPPRE10.PNF
2007-08-15 11:33 0 --ah----- C:\WINDOWS\LastGood\INF\MPPRE10.inf
2007-07-27 17:41 9516 --a------ C:\WINDOWS\LastGood\INF\ccdecode.PNF
2007-07-27 17:41 9500 --a------ C:\WINDOWS\LastGood\INF\nabtsfec.PNF
2007-07-27 17:41 91616 --a------ C:\WINDOWS\LastGood\INF\ks.PNF
2007-07-27 17:41 9072 --a------ C:\WINDOWS\LastGood\INF\wstcodec.PNF
2007-07-27 17:41 9068 --a------ C:\WINDOWS\LastGood\INF\slip.PNF
2007-07-27 17:41 8988 --a------ C:\WINDOWS\LastGood\INF\ndisip.PNF
2007-07-27 17:41 8164 --a------ C:\WINDOWS\LastGood\INF\mpe.PNF
2007-07-27 17:41 38900 --a------ C:\WINDOWS\LastGood\INF\kscaptur.PNF
2007-07-27 17:41 24668 --a------ C:\WINDOWS\LastGood\INF\ksfilter.PNF
2007-07-27 17:41 20100 --a------ C:\WINDOWS\LastGood\INF\bda.PNF
2007-07-27 17:41 13432 --a------ C:\WINDOWS\LastGood\INF\dxdllreg.PNF
2007-07-27 17:41 11796 --a------ C:\WINDOWS\LastGood\INF\streamip.PNF
2007-07-27 17:40 18064 --a------ C:\WINDOWS\LastGood\INF\dxbda.PNF
2007-06-20 20:46 266088 --a------ C:\WINDOWS\LastGood\System32\xactengine2_8.dll
2007-06-20 20:45 18280 --a------ C:\WINDOWS\LastGood\System32\x3daudio1_2.dll
2007-06-13 21:50 43152 --a------ C:\WINDOWS\LastGood\System32\DRIVERS\ativvpxx.vp
2007-06-13 21:25 339968 --a------ C:\WINDOWS\LastGood\System32\ATIDEMGX.dll
2007-06-13 21:24 268288 --a------ C:\WINDOWS\LastGood\System32\ati2dvag.dll
2007-06-13 21:24 2155520 --a------ C:\WINDOWS\LastGood\System32\DRIVERS\ati2mtag.sys
2007-06-13 21:23 307200 --a------ C:\WINDOWS\LastGood\System32\atiiiexx.dll
2007-06-13 21:17 42496 --a------ C:\WINDOWS\LastGood\System32\ati2edxx.dll
2007-06-13 21:17 26112 --a------ C:\WINDOWS\LastGood\System32\Ati2mdxx.exe
2007-06-13 21:17 139264 --a------ C:\WINDOWS\LastGood\System32\atipdlxx.dll
2007-06-13 21:17 118784 --a------ C:\WINDOWS\LastGood\System32\Oemdspif.dll
2007-06-13 21:16 118784 --a------ C:\WINDOWS\LastGood\System32\ati2evxx.dll
2007-06-13 21:15 483328 --a------ C:\WINDOWS\LastGood\System32\ati2evxx.exe
2007-06-13 21:14 53248 --a------ C:\WINDOWS\LastGood\System32\ATIDDC.DLL
2007-06-13 21:10 8097792 --a------ C:\WINDOWS\LastGood\System32\atioglx2.dll
2007-06-13 21:07 2922208 --a------ C:\WINDOWS\LastGood\System32\ati3duag.dll
2007-06-13 20:57 1512960 --a------ C:\WINDOWS\LastGood\System32\ativvaxx.dll
2007-06-13 20:46 5431296 --a------ C:\WINDOWS\LastGood\System32\atioglxx.dll
2007-06-13 20:43 262144 --a------ C:\WINDOWS\LastGood\System32\atikvmag.dll
2007-06-13 20:42 17408 --a------ C:\WINDOWS\LastGood\System32\atitvo32.dll
2007-06-13 20:41 50176 --a------ C:\WINDOWS\LastGood\System32\atiok3x2.dll
2007-06-13 20:41 49152 --a------ C:\WINDOWS\LastGood\System32\DRIVERS\ati2erec.dll
2007-06-13 20:36 368640 --a------ C:\WINDOWS\LastGood\System32\ati2cqag.dll
2007-05-16 16:45 443752 --a------ C:\WINDOWS\LastGood\System32\d3dx10_34.dll
2007-05-16 16:45 3497832 --a------ C:\WINDOWS\LastGood\System32\d3dx9_34.dll
2007-05-16 16:45 1124720 --a------ C:\WINDOWS\LastGood\System32\D3DCompiler_34.dll
2007-04-18 14:19 929 --a------ C:\WINDOWS\LastGood\System32\DRIVERS\ativcaxx.vp
2007-04-18 14:19 2096 --a------ C:\WINDOWS\LastGood\System32\DRIVERS\ativdkxx.vp
2007-04-18 14:19 1311202 --a------ C:\WINDOWS\LastGood\System32\DRIVERS\ativcaxx.cpa
2007-04-05 20:15 144357 --a------ C:\WINDOWS\LastGood\System32\atiicdxx.dat
2007-04-04 18:55 261480 --a------ C:\WINDOWS\LastGood\System32\xactengine2_7.dll
2007-04-04 18:53 81768 --a------ C:\WINDOWS\LastGood\System32\xinput1_3.dll
2007-04-04 01:05 7069 --a------ C:\WINDOWS\LastGood\System32\atifglpf.xml
2007-03-15 16:57 443752 --a------ C:\WINDOWS\LastGood\System32\d3dx10_33.dll
2007-03-12 16:42 3495784 --a------ C:\WINDOWS\LastGood\System32\d3dx9_33.dll
2007-03-12 16:42 1123696 --a------ C:\WINDOWS\LastGood\System32\D3DCompiler_33.dll
2007-01-24 15:27 255848 --a------ C:\WINDOWS\LastGood\System32\xactengine2_6.dll
2006-12-08 12:02 251672 --a------ C:\WINDOWS\LastGood\System32\xactengine2_5.dll
2006-11-29 13:06 3426072 --a------ C:\WINDOWS\LastGood\System32\d3dx9_32.dll
2006-09-28 16:05 2414360 --a------ C:\WINDOWS\LastGood\System32\d3dx9_31.dll
2006-09-28 16:05 237848 --a------ C:\WINDOWS\LastGood\System32\xactengine2_4.dll
2006-09-28 16:03 15128 --a------ C:\WINDOWS\LastGood\System32\x3daudio1_1.dll
2006-08-23 23:26 2096 --a------ C:\WINDOWS\LastGood\System32\DRIVERS\ativckxx.vp
2006-07-28 09:30 62744 --a------ C:\WINDOWS\LastGood\System32\xinput1_2.dll
2006-07-28 09:30 236824 --a------ C:\WINDOWS\LastGood\System32\xactengine2_3.dll
2006-05-31 07:24 230168 --a------ C:\WINDOWS\LastGood\System32\xactengine2_2.dll
2006-03-31 12:40 2388176 --a------ C:\WINDOWS\LastGood\System32\d3dx9_30.dll
2006-03-31 12:39 62672 --a------ C:\WINDOWS\LastGood\System32\xinput1_1.dll
2006-03-31 12:39 229584 --a------ C:\WINDOWS\LastGood\System32\xactengine2_1.dll
2006-02-03 08:43 2332368 --a------ C:\WINDOWS\LastGood\System32\d3dx9_29.dll
2006-02-03 08:42 230096 --a------ C:\WINDOWS\LastGood\System32\xactengine2_0.dll
2006-02-03 08:41 14032 --a------ C:\WINDOWS\LastGood\System32\x3daudio1_0.dll
2006-01-25 05:30 6684672 --a------ C:\WINDOWS\LastGood\System32\atioglx1.dll
2006-01-25 04:29 282624 --a------ C:\WINDOWS\LastGood\System32\ATIDEMGR.dll
2005-12-05 18:09 2323664 --a------ C:\WINDOWS\LastGood\System32\d3dx9_28.dll
2005-12-05 18:07 61136 --a------ C:\WINDOWS\LastGood\System32\xinput9_1_0.dll
2005-07-22 19:59 2319568 --a------ C:\WINDOWS\LastGood\System32\d3dx9_27.dll
2005-05-26 15:34 2297552 --a------ C:\WINDOWS\LastGood\System32\d3dx9_26.dll
2005-03-18 17:19 2337488 --a------ C:\WINDOWS\LastGood\System32\d3dx9_25.dll
2005-02-05 19:45 2222800 --a------ C:\WINDOWS\LastGood\System32\d3dx9_24.dll
2005-01-28 16:15 69932 --a------ C:\WINDOWS\LastGood\INF\wmplayer.adm
2005-01-28 16:15 484864 --a------ C:\WINDOWS\LastGood\System32\Audiodev.dll
2005-01-28 16:15 197120 --a------ C:\WINDOWS\LastGood\System32\wmerror.dll
2005-01-28 13:32 413944 --a------ C:\WINDOWS\LastGood\System32\wmspdmod.dll
2005-01-28 13:32 1218808 --a------ C:\WINDOWS\LastGood\System32\wmvadvd.dll
2005-01-28 08:53 940544 --a------ C:\WINDOWS\LastGood\System32\wmspdmoe.dll
2005-01-28 08:53 5525504 --a------ C:\WINDOWS\LastGood\System32\wmp.dll
2005-01-28 08:53 335872 --a------ C:\WINDOWS\LastGood\System32\WMDRMdev.dll
2005-01-28 08:53 290816 --a------ C:\WINDOWS\LastGood\System32\WMDRMNet.dll
2005-01-28 08:53 282624 --a------ C:\WINDOWS\LastGood\System32\wmpdxm.dll
2005-01-28 08:53 25088 --a------ C:\WINDOWS\LastGood\System32\MsPMSNSv.dll
2005-01-28 08:53 221184 --a------ C:\WINDOWS\LastGood\System32\DLLCache\qasf.dll
2005-01-28 08:53 175104 --a------ C:\WINDOWS\LastGood\System32\wmpsrcwp.dll
2005-01-28 08:53 1594880 --a------ C:\WINDOWS\LastGood\System32\wmpencen.dll
2005-01-28 08:53 1512448 --a------ C:\WINDOWS\LastGood\System32\WMVADVE.DLL
2005-01-28 08:53 150016 --a------ C:\WINDOWS\LastGood\System32\wmidx.dll
2005-01-28 08:53 135168 --a------ C:\WINDOWS\LastGood\System32\wmpasf.dll
2005-01-28 08:53 1119744 --a------ C:\WINDOWS\LastGood\System32\wmsdmoe2.dll
2005-01-28 08:53 1003008 --a------ C:\WINDOWS\LastGood\System32\wmvdmoe2.dll
2005-01-28 01:26 360448 --a------ C:\WINDOWS\LastGood\System32\l3codecp.acm
2005-01-12 16:55 98951 --a------ C:\WINDOWS\LastGood\help\wmperr10.chm
2005-01-12 16:55 657341 --a------ C:\WINDOWS\LastGood\help\wmp10.chm
2004-08-11 02:22 828152 --a------ C:\WINDOWS\LastGood\System32\wmv9dmod.dll
2004-07-19 22:44 15843 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\dx9bda.cat
2004-07-19 16:19 285696 --a------ C:\WINDOWS\LastGood\System32\kstvtune.ax
2004-07-19 16:19 285696 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\kstvtune.ax
2004-07-19 16:19 285696 --a------ C:\WINDOWS\LastGood\Driver Cache\i386\kstvtune.ax
2004-07-09 04:27 974848 --a------ C:\WINDOWS\LastGood\System32\dxdiag.exe
2004-07-09 04:27 974848 --a------ C:\WINDOWS\LastGood\System32\DLLCache\dxdiag.exe
2004-07-09 04:27 974848 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dxdiag.exe
2004-07-09 04:27 79360 --a------ C:\WINDOWS\LastGood\System32\dpwsockx.dll
2004-07-09 04:27 79360 --a------ C:\WINDOWS\LastGood\System32\DLLCache\dpwsockx.dll
2004-07-09 04:27 79360 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dpwsockx.dll
2004-07-09 04:27 48512 --a------ C:\WINDOWS\LastGood\System32\DRIVERS\stream.sys
2004-07-09 04:27 48512 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\stream.sys
2004-07-09 04:27 48512 --a------ C:\WINDOWS\LastGood\Driver Cache\i386\stream.sys
2004-07-09 04:27 470528 --a------ C:\WINDOWS\LastGood\System32\qdvd.dll
2004-07-09 04:27 470528 --a------ C:\WINDOWS\LastGood\System32\DLLCache\qdvd.dll
2004-07-09 04:27 470528 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\qdvd.dll
2004-07-09 04:27 381952 --a------ C:\WINDOWS\LastGood\System32\dsound.dll
2004-07-09 04:27 381952 --a------ C:\WINDOWS\LastGood\System32\DLLCache\dsound.dll
2004-07-09 04:27 381952 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dsound.dll
2004-07-09 04:27 316928 --a------ C:\WINDOWS\LastGood\System32\qdv.dll
2004-07-09 04:27 316928 --a------ C:\WINDOWS\LastGood\System32\DLLCache\qdv.dll
2004-07-09 04:27 316928 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\qdv.dll
2004-07-09 04:27 292864 --a------ C:\WINDOWS\LastGood\System32\DLLCache\ddraw.dll
2004-07-09 04:27 292864 --a------ C:\WINDOWS\LastGood\System32\ddraw.dll
2004-07-09 04:27 292864 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\ddraw.dll
2004-07-09 04:27 230400 --a------ C:\WINDOWS\LastGood\System32\dplayx.dll
2004-07-09 04:27 230400 --a------ C:\WINDOWS\LastGood\System32\DLLCache\dplayx.dll
2004-07-09 04:27 230400 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dplayx.dll
2004-07-09 04:27 181248 --a------ C:\WINDOWS\LastGood\System32\dmime.dll
2004-07-09 04:27 181248 --a------ C:\WINDOWS\LastGood\System32\DLLCache\dmime.dll
2004-07-09 04:27 181248 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dmime.dll
2004-07-09 04:27 1769472 --a------ C:\WINDOWS\LastGood\System32\dxdiagn.dll
2004-07-09 04:27 1703936 --a------ C:\WINDOWS\LastGood\System32\d3d9.dll
2004-07-09 04:27 122880 --a------ C:\WINDOWS\LastGood\System32\dmusic.dll
2004-07-09 04:27 122880 --a------ C:\WINDOWS\LastGood\System32\DLLCache\dmusic.dll
2004-07-09 04:27 122880 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dmusic.dll
2004-07-09 04:27 1201152 --a------ C:\WINDOWS\LastGood\System32\DLLCache\d3d8.dll
2004-07-09 04:27 1201152 --a------ C:\WINDOWS\LastGood\System32\d3d8.dll
2004-07-09 04:27 1201152 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\d3d8.dll
2004-07-09 04:26 83968 --a------ C:\WINDOWS\LastGood\System32\DRIVERS\nabtsfec.sys
2004-07-09 04:26 83968 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\nabtsfec.sys
2004-07-09 04:26 83968 --a------ C:\WINDOWS\LastGood\Driver Cache\i386\nabtsfec.sys
2004-07-09 04:26 57856 --a------ C:\WINDOWS\LastGood\System32\mpeg2data.ax
2004-07-09 04:26 57856 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\mpeg2data.ax
2004-07-09 04:26 52224 --a------ C:\WINDOWS\LastGood\System32\msdvbnp.ax
2004-07-09 04:26 52224 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\msdvbnp.ax
2004-07-09 04:26 52224 --a------ C:\WINDOWS\LastGood\Driver Cache\i386\msdvbnp.ax
2004-07-09 04:26 52096 --a------ C:\WINDOWS\LastGood\System32\DRIVERS\msdv.sys
2004-07-09 04:26 52096 --a------ C:\WINDOWS\LastGood\Driver Cache\i386\msdv.sys
2004-07-09 04:26 47104 --a------ C:\WINDOWS\LastGood\System32\wstdecod.dll
2004-07-09 04:26 47104 --a------ C:\WINDOWS\LastGood\System32\DLLCache\wstdecod.dll
2004-07-09 04:26 47104 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\wstdecod.dll
2004-07-09 04:26 39424 --a------ C:\WINDOWS\LastGood\System32\ksxbar.ax
2004-07-09 04:26 39424 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\ksxbar.ax
2004-07-09 04:26 39424 --a------ C:\WINDOWS\LastGood\Driver Cache\i386\ksxbar.ax
2004-07-09 04:26 354816 --a------ C:\WINDOWS\LastGood\System32\psisdecd.dll
2004-07-09 04:26 354816 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\psisdecd.dll
2004-07-09 04:26 354816 --a------ C:\WINDOWS\LastGood\Driver Cache\i386\psisdecd.dll
2004-07-09 04:26 30208 --a------ C:\WINDOWS\LastGood\System32\psisrndr.ax
2004-07-09 04:26 30208 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\psisrndr.ax
2004-07-09 04:26 30208 --a------ C:\WINDOWS\LastGood\Driver Cache\i386\psisrndr.ax
2004-07-09 04:26 27648 --a------ C:\WINDOWS\LastGood\System32\vbisurf.ax
2004-07-09 04:26 27648 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\vbisurf.ax
2004-07-09 04:26 226304 --a------ C:\WINDOWS\LastGood\System32\kswdmcap.ax
2004-07-09 04:26 226304 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\kswdmcap.ax
2004-07-09 04:26 226304 --a------ C:\WINDOWS\LastGood\Driver Cache\i386\kswdmcap.ax
2004-07-09 04:26 18688 --a------ C:\WINDOWS\LastGood\System32\DRIVERS\wstcodec.sys
2004-07-09 04:26 18688 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\wstcodec.sys
2004-07-09 04:26 18688 --a------ C:\WINDOWS\LastGood\Driver Cache\i386\wstcodec.sys
2004-07-09 04:26 16896 --a------ C:\WINDOWS\LastGood\System32\msyuv.dll
2004-07-09 04:26 16896 --a------ C:\WINDOWS\LastGood\System32\bdaplgin.ax
2004-07-09 04:26 16896 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\msyuv.dll
2004-07-09 04:26 16896 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\bdaplgin.ax
2004-07-09 04:26 16896 --a------ C:\WINDOWS\LastGood\Driver Cache\i386\msyuv.dll
2004-07-09 04:26 16896 --a------ C:\WINDOWS\LastGood\Driver Cache\i386\bdaplgin.ax
2004-07-09 04:26 16384 --a------ C:\WINDOWS\LastGood\System32\DRIVERS\ccdecode.sys
2004-07-09 04:26 16384 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\ccdecode.sys
2004-07-09 04:26 16384 --a------ C:\WINDOWS\LastGood\Driver Cache\i386\ccdecode.sys
2004-07-09 04:26 15104 --a------ C:\WINDOWS\LastGood\System32\DRIVERS\mpe.sys
2004-07-09 04:26 15104 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\mpe.sys
2004-07-09 04:26 15104 --a------ C:\WINDOWS\LastGood\Driver Cache\i386\mpe.sys
2004-07-09 04:26 14976 --a------ C:\WINDOWS\LastGood\System32\DRIVERS\streamip.sys
2004-07-09 04:26 14976 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\streamip.sys
2004-07-09 04:26 14976 --a------ C:\WINDOWS\LastGood\Driver Cache\i386\streamip.sys
2004-07-09 04:26 14848 --a------ C:\WINDOWS\LastGood\System32\ipsink.ax
2004-07-09 04:26 14848 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\ipsink.ax
2004-07-09 04:26 14848 --a------ C:\WINDOWS\LastGood\Driver Cache\i386\ipsink.ax
2004-07-09 04:26 1230336 --a------ C:\WINDOWS\LastGood\System32\msvidctl.dll
2004-07-09 04:26 1230336 --a------ C:\WINDOWS\LastGood\System32\DLLCache\msvidctl.dll
2004-07-09 04:26 1230336 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\msvidctl.dll
2004-07-09 04:26 11392 --a------ C:\WINDOWS\LastGood\System32\DRIVERS\bdasup.sys
2004-07-09 04:26 11392 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\bdasup.sys
2004-07-09 04:26 11392 --a------ C:\WINDOWS\LastGood\Driver Cache\i386\bdasup.sys
2004-07-09 04:26 10880 --a------ C:\WINDOWS\LastGood\System32\DRIVERS\slip.sys
2004-07-09 04:26 10880 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\slip.sys
2004-07-09 04:26 10880 --a------ C:\WINDOWS\LastGood\Driver Cache\i386\slip.sys
2004-07-09 04:26 10112 --a------ C:\WINDOWS\LastGood\System32\DRIVERS\ndisip.sys
2004-07-09 04:26 10112 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\ndisip.sys
2004-07-09 04:26 10112 --a------ C:\WINDOWS\LastGood\Driver Cache\i386\ndisip.sys
2004-07-09 03:54 6693 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\dxbda.inf
2004-07-09 03:54 6693 --a------ C:\WINDOWS\LastGood\INF\dxbda.inf
2004-06-28 09:02 37271 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\ks.inf
2004-06-28 09:02 37271 --a------ C:\WINDOWS\LastGood\INF\ks.inf
2004-06-28 09:02 26010 --a------ C:\WINDOWS\LastGood\help\dxdiag.chm
2004-06-28 09:02 21294 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\kscaptur.inf
2004-06-28 09:02 21294 --a------ C:\WINDOWS\LastGood\INF\kscaptur.inf
2004-06-28 09:02 10183 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\ksfilter.inf
2004-06-28 09:02 10183 --a------ C:\WINDOWS\LastGood\INF\ksfilter.inf
2004-05-28 11:09 9971 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\bda.inf
2004-05-28 11:09 9971 --a------ C:\WINDOWS\LastGood\INF\bda.inf
2004-05-28 11:09 6753 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\ndisip.inf
2004-05-28 11:09 6753 --a------ C:\WINDOWS\LastGood\INF\ndisip.inf
2004-05-28 11:09 5891 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\streamip.inf
2004-05-28 11:09 5891 --a------ C:\WINDOWS\LastGood\INF\streamip.inf
2004-05-28 11:09 4104 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\nabtsfec.inf
2004-05-28 11:09 4104 --a------ C:\WINDOWS\LastGood\INF\nabtsfec.inf
2004-05-28 11:09 3784 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\ccdecode.inf
2004-05-28 11:09 3784 --a------ C:\WINDOWS\LastGood\INF\ccdecode.inf
2004-05-28 11:09 3607 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\wstcodec.inf
2004-05-28 11:09 3607 --a------ C:\WINDOWS\LastGood\INF\wstcodec.inf
2004-05-28 11:09 3606 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\slip.inf
2004-05-28 11:09 3606 --a------ C:\WINDOWS\LastGood\INF\slip.inf
2004-05-28 11:09 3360 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\mpe.inf
2004-05-28 11:09 3360 --a------ C:\WINDOWS\LastGood\INF\mpe.inf
2003-05-30 09:00 797184 --a------ C:\WINDOWS\LastGood\System32\DLLCache\d3dim700.dll
2003-05-30 09:00 797184 --a------ C:\WINDOWS\LastGood\System32\d3dim700.dll
2003-05-30 09:00 797184 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\d3dim700.dll
2003-05-30 09:00 4631 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dxxp.inf
2003-05-30 09:00 33181 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dxxp.cat
2003-05-30 09:00 1962496 --a------ C:\WINDOWS\LastGood\System32\quartz.dll
2003-05-30 09:00 1962496 --a------ C:\WINDOWS\LastGood\System32\DLLCache\quartz.dll
2003-05-30 09:00 1962496 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\quartz.dll
2003-05-30 09:00 132608 --a------ C:\WINDOWS\LastGood\System32\DLLCache\devenum.dll
2003-05-30 09:00 132608 --a------ C:\WINDOWS\LastGood\System32\devenum.dll
2003-05-30 09:00 132608 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\devenum.dll
2003-05-30 09:00 1189888 --a------ C:\WINDOWS\LastGood\System32\dx8vb.dll
2003-05-30 09:00 1189888 --a------ C:\WINDOWS\LastGood\System32\DLLCache\dx8vb.dll
2003-05-30 09:00 1189888 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dx8vb.dll
2003-04-16 14:00 83456 --a------ C:\WINDOWS\LastGood\System32\l3codecx.ax
2003-04-16 14:00 77824 --a------ C:\WINDOWS\LastGood\System32\wmpshell.dll
2003-04-16 14:00 77312 --a------ C:\WINDOWS\LastGood\System32\gcdef.dll
2003-04-16 14:00 77312 --a------ C:\WINDOWS\LastGood\System32\DLLCache\gcdef.dll
2003-04-16 14:00 76830 --a------ C:\WINDOWS\LastGood\System32\drmstor.dll
2003-04-16 14:00 6656 --a------ C:\WINDOWS\LastGood\System32\laprxy.dll
2003-04-16 14:00 66048 --a------ C:\WINDOWS\LastGood\System32\joy.cpl
2003-04-16 14:00 66048 --a------ C:\WINDOWS\LastGood\System32\DLLCache\joy.cpl
2003-04-16 14:00 602112 --a------ C:\WINDOWS\LastGood\System32\drmv2clt.dll
2003-04-16 14:00 590336 --a------ C:\WINDOWS\LastGood\System32\DLLCache\d3dramp.dll
2003-04-16 14:00 590336 --a------ C:\WINDOWS\LastGood\System32\d3dramp.dll
2003-04-16 14:00 530432 --a------ C:\WINDOWS\LastGood\System32\rpcrt4.dll
2003-04-16 14:00 530432 --a------ C:\WINDOWS\LastGood\System32\DLLCache\rpcrt4.dll
2003-04-16 14:00 5120 --a------ C:\WINDOWS\LastGood\System32\asferror.dll
2003-04-16 14:00 47616 --a------ C:\WINDOWS\LastGood\System32\DLLCache\d3dxof.dll
2003-04-16 14:00 47616 --a------ C:\WINDOWS\LastGood\System32\d3dxof.dll
2003-04-16 14:00 442398 --a------ C:\WINDOWS\LastGood\System32\wmadmoe.dll
2003-04-16 14:00 44032 --a------ C:\WINDOWS\LastGood\System32\DLLCache\dimap.dll
2003-04-16 14:00 44032 --a------ C:\WINDOWS\LastGood\System32\dimap.dll
2003-04-16 14:00 436224 --a------ C:\WINDOWS\LastGood\System32\DLLCache\d3dim.dll
2003-04-16 14:00 436224 --a------ C:\WINDOWS\LastGood\System32\d3dim.dll
2003-04-16 14:00 394752 --a------ C:\WINDOWS\LastGood\System32\DLLCache\diactfrm.dll
2003-04-16 14:00 394752 --a------ C:\WINDOWS\LastGood\System32\diactfrm.dll
2003-04-16 14:00 350208 --a------ C:\WINDOWS\LastGood\System32\DLLCache\d3drm.dll
2003-04-16 14:00 350208 --a------ C:\WINDOWS\LastGood\System32\d3drm.dll
2003-04-16 14:00 34816 --a------ C:\WINDOWS\LastGood\System32\DLLCache\d3dpmesh.dll
2003-04-16 14:00 34816 --a------ C:\WINDOWS\LastGood\System32\d3dpmesh.dll
2003-04-16 14:00 31744 --a------ C:\WINDOWS\LastGood\System32\pid.dll
2003-04-16 14:00 294912 --a------ C:\WINDOWS\LastGood\System32\wmvdmod.dll
2003-04-16 14:00 274432 --a------ C:\WINDOWS\LastGood\System32\wmasf.dll
2003-04-16 14:00 266240 --a------ C:\WINDOWS\LastGood\System32\drmclien.dll
2003-04-16 14:00 260608 --a------ C:\WINDOWS\LastGood\System32\rpcss.dll
2003-04-16 14:00 260608 --a------ C:\WINDOWS\LastGood\System32\DLLCache\rpcss.dll
2003-04-16 14:00 253952 --a------ C:\WINDOWS\LastGood\System32\wmpcd.dll
2003-04-16 14:00 253952 --a------ C:\WINDOWS\LastGood\System32\wmnetmgr.dll
2003-04-16 14:00 249856 --a------ C:\WINDOWS\LastGood\INF\unregmp2.exe
2003-04-16 14:00 245760 --a------ C:\WINDOWS\LastGood\System32\MSSCP.dll
2003-04-16 14:00 24576 --a------ C:\WINDOWS\LastGood\System32\logagent.exe
2003-04-16 14:00 22528 --a------ C:\WINDOWS\LastGood\System32\WMDMLOG.dll
2003-04-16 14:00 204800 --a------ C:\WINDOWS\LastGood\System32\blackbox.dll
2003-04-16 14:00 20480 --a------ C:\WINDOWS\LastGood\System32\WMDMPS.dll
2003-04-16 14:00 2007040 --a------ C:\WINDOWS\LastGood\System32\wmploc.dll
2003-04-16 14:00 188416 --a------ C:\WINDOWS\LastGood\System32\wmp.ocx
2003-04-16 14:00 184320 --a------ C:\WINDOWS\LastGood\System32\wmadmod.dll
2003-04-16 14:00 179712 --a------ C:\WINDOWS\LastGood\System32\cewmdm.dll
2003-04-16 14:00 175104 --a------ C:\WINDOWS\LastGood\System32\MsPMSP.dll
2003-04-16 14:00 174592 --a------ C:\WINDOWS\LastGood\System32\msnetobj.dll
2003-04-16 14:00 174080 --a------ C:\WINDOWS\LastGood\System32\DLLCache\dinput8.dll
2003-04-16 14:00 174080 --a------ C:\WINDOWS\LastGood\System32\dinput8.dll
2003-04-16 14:00 156672 --a------ C:\WINDOWS\LastGood\System32\DLLCache\dinput.dll
2003-04-16 14:00 156672 --a------ C:\WINDOWS\LastGood\System32\dinput.dll
2003-04-16 14:00 155648 --a------ C:\WINDOWS\LastGood\System32\MSWMDM.dll
2003-04-16 14:00 1404928 --a------ C:\WINDOWS\LastGood\System32\wmpui.dll
2003-04-16 14:00 1298432 --a------ C:\WINDOWS\LastGood\System32\wmpcore.dll
2003-04-16 14:00 1220608 --a------ C:\WINDOWS\LastGood\System32\wmvcore.dll
2003-04-16 14:00 1169920 --a------ C:\WINDOWS\LastGood\System32\ole32.dll
2003-04-16 14:00 1169920 --a------ C:\WINDOWS\LastGood\System32\DLLCache\ole32.dll
2003-04-16 14:00 110592 --a------ C:\WINDOWS\LastGood\System32\wmsdmod.dll
2003-04-16 14:00 10496 --a------ C:\WINDOWS\LastGood\System32\DRIVERS\dxapi.sys
2003-04-16 14:00 10496 --a------ C:\WINDOWS\LastGood\System32\DLLCache\dxapi.sys
2003-03-24 09:00 68096 --a------ C:\WINDOWS\LastGood\System32\dpnhupnp.dll
2003-03-24 09:00 68096 --a------ C:\WINDOWS\LastGood\System32\DLLCache\dpnhupnp.dll
2003-03-24 09:00 68096 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dpnhupnp.dll
2003-03-24 09:00 32768 --a------ C:\WINDOWS\LastGood\System32\dpnhpast.dll
2003-03-24 09:00 32768 --a------ C:\WINDOWS\LastGood\System32\DLLCache\dpnhpast.dll
2003-03-24 09:00 32768 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dpnhpast.dll
2002-12-12 00:14 98816 --a------ C:\WINDOWS\LastGood\System32\dmstyle.dll
2002-12-12 00:14 98816 --a------ C:\WINDOWS\LastGood\System32\DLLCache\dmstyle.dll
2002-12-12 00:14 98816 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dmstyle.dll
2002-12-12 00:14 8192 --a------ C:\WINDOWS\LastGood\System32\DLLCache\d3d8thk.dll
2002-12-12 00:14 8192 --a------ C:\WINDOWS\LastGood\System32\d3d8thk.dll
2002-12-12 00:14 8192 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\d3d8thk.dll
2002-12-12 00:14 80896 --a------ C:\WINDOWS\LastGood\System32\dpvsetup.exe
2002-12-12 00:14 80896 --a------ C:\WINDOWS\LastGood\System32\DLLCache\dpvsetup.exe
2002-12-12 00:14 80896 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dpvsetup.exe
2002-12-12 00:14 77824 --a------ C:\WINDOWS\LastGood\System32\dpmodemx.dll
2002-12-12 00:14 77824 --a------ C:\WINDOWS\LastGood\System32\DLLCache\dpmodemx.dll
2002-12-12 00:14 77824 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dpmodemx.dll
2002-12-12 00:14 76800 --a------ C:\WINDOWS\LastGood\System32\dmscript.dll
2002-12-12 00:14 76800 --a------ C:\WINDOWS\LastGood\System32\DLLCache\dmscript.dll
2002-12-12 00:14 76800 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dmscript.dll
2002-12-12 00:14 7424 --a------ C:\WINDOWS\LastGood\System32\DRIVERS\mskssrv.sys
2002-12-12 00:14 7424 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\mskssrv.sys
2002-12-12 00:14 7424 --a------ C:\WINDOWS\LastGood\Driver Cache\i386\mskssrv.sys
2002-12-12 00:14 733184 --a------ C:\WINDOWS\LastGood\System32\qedwipes.dll
2002-12-12 00:14 733184 --a------ C:\WINDOWS\LastGood\System32\DLLCache\qedwipes.dll
2002-12-12 00:14 733184 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\qedwipes.dll
2002-12-12 00:14 723968 --a------ C:\WINDOWS\LastGood\System32\dpnet.dll
2002-12-12 00:14 723968 --a------ C:\WINDOWS\LastGood\System32\DLLCache\dpnet.dll
2002-12-12 00:14 723968 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dpnet.dll
2002-12-12 00:14 64512 --a------ C:\WINDOWS\LastGood\System32\DLLCache\amstream.dll
2002-12-12 00:14 64512 --a------ C:\WINDOWS\LastGood\System32\amstream.dll
2002-12-12 00:14 64512 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\amstream.dll
2002-12-12 00:14 602624 --a------ C:\WINDOWS\LastGood\System32\dx7vb.dll
2002-12-12 00:14 602624 --a------ C:\WINDOWS\LastGood\System32\DLLCache\dx7vb.dll
2002-12-12 00:14 602624 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dx7vb.dll
2002-12-12 00:14 58368 --a------ C:\WINDOWS\LastGood\System32\dmcompos.dll
2002-12-12 00:14 58368 --a------ C:\WINDOWS\LastGood\System32\DLLCache\dmcompos.dll
2002-12-12 00:14 58368 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dmcompos.dll
2002-12-12 00:14 5504 --a------ C:\WINDOWS\LastGood\System32\DRIVERS\mstee.sys
2002-12-12 00:14 5504 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\mstee.sys
2002-12-12 00:14 5504 --a------ C:\WINDOWS\LastGood\Driver Cache\i386\mstee.sys
2002-12-12 00:14 5248 --a------ C:\WINDOWS\LastGood\System32\DRIVERS\mspclock.sys
2002-12-12 00:14 5248 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\mspclock.sys
2002-12-12 00:14 5248 --a------ C:\WINDOWS\LastGood\Driver Cache\i386\mspclock.sys
2002-12-12 00:14 491520 --a------ C:\WINDOWS\LastGood\System32\dsdmoprp.dll
2002-12-12 00:14 491520 --a------ C:\WINDOWS\LastGood\System32\DLLCache\dsdmoprp.dll
2002-12-12 00:14 491520 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dsdmoprp.dll
2002-12-12 00:14 46592 --a------ C:\WINDOWS\LastGood\System32\dxdllreg.exe
2002-12-12 00:14 46592 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dxdllreg.exe
2002-12-12 00:14 4096 --a------ C:\WINDOWS\LastGood\System32\ksuser.dll
2002-12-12 00:14 4096 --a------ C:\WINDOWS\LastGood\System32\DRIVERS\swenum.sys
2002-12-12 00:14 4096 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\swenum.sys
2002-12-12 00:14 4096 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\ksuser.dll
2002-12-12 00:14 4096 --a------ C:\WINDOWS\LastGood\Driver Cache\i386\swenum.sys
2002-12-12 00:14 4096 --a------ C:\WINDOWS\LastGood\Driver Cache\i386\ksuser.dll
2002-12-12 00:14 381952 --a------ C:\WINDOWS\LastGood\System32\dpvoice.dll
2002-12-12 00:14 381952 --a------ C:\WINDOWS\LastGood\System32\DLLCache\dpvoice.dll
2002-12-12 00:14 381952 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dpvoice.dll
2002-12-12 00:14 34304 --a------ C:\WINDOWS\LastGood\System32\mciqtz32.dll
2002-12-12 00:14 34304 --a------ C:\WINDOWS\LastGood\System32\DLLCache\mciqtz32.dll
2002-12-12 00:14 34304 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\mciqtz32.dll
2002-12-12 00:14 33280 --a------ C:\WINDOWS\LastGood\System32\dmloader.dll
2002-12-12 00:14 33280 --a------ C:\WINDOWS\LastGood\System32\DLLCache\dmloader.dll
2002-12-12 00:14 33280 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dmloader.dll
2002-12-12 00:14 324096 --a------ C:\WINDOWS\LastGood\System32\mswebdvd.dll
2002-12-12 00:14 324096 --a------ C:\WINDOWS\LastGood\System32\DLLCache\mswebdvd.dll
2002-12-12 00:14 324096 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\mswebdvd.dll
2002-12-12 00:14 3072 --a------ C:\WINDOWS\LastGood\System32\dpnlobby.dll
2002-12-12 00:14 3072 --a------ C:\WINDOWS\LastGood\System32\dpnaddr.dll
2002-12-12 00:14 3072 --a------ C:\WINDOWS\LastGood\System32\DLLCache\dpnlobby.dll
2002-12-12 00:14 3072 --a------ C:\WINDOWS\LastGood\System32\DLLCache\dpnaddr.dll
2002-12-12 00:14 3072 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dpnlobby.dll
2002-12-12 00:14 3072 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dpnaddr.dll
2002-12-12 00:14 28160 --a------ C:\WINDOWS\LastGood\System32\dplaysvr.exe
2002-12-12 00:14 28160 --a------ C:\WINDOWS\LastGood\System32\DLLCache\dplaysvr.exe
2002-12-12 00:14 28160 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dplaysvr.exe
2002-12-12 00:14 27136 --a------ C:\WINDOWS\LastGood\System32\dmband.dll
2002-12-12 00:14 27136 --a------ C:\WINDOWS\LastGood\System32\DLLCache\dmband.dll
2002-12-12 00:14 27136 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dmband.dll
2002-12-12 00:14 257024 --a------ C:\WINDOWS\LastGood\System32\qcap.dll
2002-12-12 00:14 257024 --a------ C:\WINDOWS\LastGood\System32\DLLCache\qcap.dll
2002-12-12 00:14 257024 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\qcap.dll
2002-12-12 00:14 2475 --a------ C:\WINDOWS\LastGood\INF\dxdllreg.inf
2002-12-12 00:14 24064 --a------ C:\WINDOWS\LastGood\System32\DLLCache\ddrawex.dll
2002-12-12 00:14 24064 --a------ C:\WINDOWS\LastGood\System32\ddrawex.dll
2002-12-12 00:14 24064 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\ddrawex.dll
2002-12-12 00:14 19968 --a------ C:\WINDOWS\LastGood\System32\dpvacm.dll
2002-12-12 00:14 19968 --a------ C:\WINDOWS\LastGood\System32\DLLCache\dpvacm.dll
2002-12-12 00:14 19968 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dpvacm.dll
2002-12-12 00:14 18944 --a------ C:\WINDOWS\LastGood\System32\encapi.dll
2002-12-12 00:14 18944 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\encapi.dll
2002-12-12 00:14 186880 --a------ C:\WINDOWS\LastGood\System32\dsdmo.dll
2002-12-12 00:14 186880 --a------ C:\WINDOWS\LastGood\System32\DLLCache\dsdmo.dll
2002-12-12 00:14 186880 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dsdmo.dll
2002-12-12 00:14 18432 --a------ C:\WINDOWS\LastGood\System32\dswave.dll
2002-12-12 00:14 18432 --a------ C:\WINDOWS\LastGood\System32\DLLCache\dswave.dll
2002-12-12 00:14 18432 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dswave.dll
2002-12-12 00:14 1798144 --a------ C:\WINDOWS\LastGood\System32\qedit.dll
2002-12-12 00:14 1798144 --a------ C:\WINDOWS\LastGood\System32\DLLCache\qedit.dll
2002-12-12 00:14 1798144 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\qedit.dll
2002-12-12 00:14 173056 --a------ C:\WINDOWS\LastGood\System32\qasf.dll
2002-12-12 00:14 173056 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\qasf.dll
2002-12-12 00:14 16896 --a------ C:\WINDOWS\LastGood\System32\dpnsvr.exe
2002-12-12 00:14 16896 --a------ C:\WINDOWS\LastGood\System32\DLLCache\dpnsvr.exe
2002-12-12 00:14 16896 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dpnsvr.exe
2002-12-12 00:14 136192 --a------ C:\WINDOWS\LastGood\System32\mpg2splt.ax
2002-12-12 00:14 136192 --a------ C:\WINDOWS\LastGood\System32\DLLCache\mpg2splt.ax
2002-12-12 00:14 136192 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\mpg2splt.ax
2002-12-12 00:14 13312 --a------ C:\WINDOWS\LastGood\System32\msdmo.dll
2002-12-12 00:14 13312 --a------ C:\WINDOWS\LastGood\System32\DLLCache\msdmo.dll
2002-12-12 00:14 13312 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\msdmo.dll
2002-12-12 00:14 130304 --a------ C:\WINDOWS\LastGood\System32\DRIVERS\ks.sys
2002-12-12 00:14 130304 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\ks.sys
2002-12-12 00:14 130304 --a------ C:\WINDOWS\LastGood\Driver Cache\i386\ks.sys
2002-12-12 00:14 1294336 --a------ C:\WINDOWS\LastGood\System32\dsound3d.dll
2002-12-12 00:14 1294336 --a------ C:\WINDOWS\LastGood\System32\DLLCache\dsound3d.dll
2002-12-12 00:14 1294336 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dsound3d.dll
2002-12-12 00:14 12288 --a------ C:\WINDOWS\LastGood\System32\ksolay.ax
2002-12-12 00:14 12288 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\ksolay.ax
2002-12-12 00:14 12288 --a------ C:\WINDOWS\LastGood\Driver Cache\i386\ksolay.ax
2002-12-12 00:14 117248 --a------ C:\WINDOWS\LastGood\System32\ksproxy.ax
2002-12-12 00:14 117248 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\ksproxy.ax
2002-12-12 00:14 117248 --a------ C:\WINDOWS\LastGood\Driver Cache\i386\ksproxy.ax
2002-12-12 00:14 112128 --a------ C:\WINDOWS\LastGood\System32\dpvvox.dll
2002-12-12 00:14 112128 --a------ C:\WINDOWS\LastGood\System32\DLLCache\dpvvox.dll
2002-12-12 00:14 112128 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dpvvox.dll
2002-12-12 00:14 100864 --a------ C:\WINDOWS\LastGood\System32\dmsynth.dll
2002-12-12 00:14 100864 --a------ C:\WINDOWS\LastGood\System32\DLLCache\dmsynth.dll
2002-12-12 00:14 100864 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dmsynth.dll
2002-08-29 03:41 31744 --a------ C:\WINDOWS\LastGood\System32\DLLCache\pid.dll
2002-08-29 03:41 31744 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\pid.xpg
2002-08-29 03:41 31744 --a------ C:\WINDOWS\LastGood\Driver Cache\i386\pid.dll
2002-08-29 03:41 208896 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\joy.xpg
2002-08-29 03:40 667648 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dinput8.xpg
2002-08-29 03:40 648704 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dinput.xpg
2001-08-23 05:00 590336 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\d3dramp.xpg
2001-08-23 05:00 47616 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\d3dxof.xpg
2001-08-23 05:00 467968 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\diactfrm.xpg
2001-08-23 05:00 4608 --a------ C:\WINDOWS\LastGood\System32\DRIVERS\mspqm.sys
2001-08-23 05:00 4608 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\mspqm.sys
2001-08-23 05:00 4608 --a------ C:\WINDOWS\LastGood\Driver Cache\i386\mspqm.sys
2001-08-23 05:00 44032 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dimap.xpg
2001-08-23 05:00 436224 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\d3dim.xpg
2001-08-23 05:00 350208 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\d3drm.xpg
2001-08-23 05:00 34816 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\d3dpmesh.xpg
2001-08-23 05:00 223232 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\gcdef.xpg
2001-08-23 05:00 10496 --a------ C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dxapi.xpg

---- Directory of C:\WINDOWS\LastGood.Tmp ----

2006-01-25 06:01 26928 -ra------ C:\WINDOWS\LastGood.Tmp\System32\DRIVERS\ativvpxx.vp
2006-01-25 05:52 255488 --a------ C:\WINDOWS\LastGood.Tmp\System32\ati2dvag.dll
2006-01-25 05:47 77824 --a------ C:\WINDOWS\LastGood.Tmp\System32\Oemdspif.dll
2006-01-25 05:47 114688 --a------ C:\WINDOWS\LastGood.Tmp\System32\atipdlxx.dll
2006-01-25 05:46 61440 --a------ C:\WINDOWS\LastGood.Tmp\System32\ati2evxx.dll
2006-01-25 05:46 41472 --a------ C:\WINDOWS\LastGood.Tmp\System32\ati2edxx.dll
2006-01-25 05:46 26112 --a------ C:\WINDOWS\LastGood.Tmp\System32\Ati2mdxx.exe
2006-01-25 05:45 405504 --a------ C:\WINDOWS\LastGood.Tmp\System32\ati2evxx.exe
2006-01-25 05:44 53248 --a------ C:\WINDOWS\LastGood.Tmp\System32\ATIDDC.DLL
2006-01-25 05:36 2604128 --a------ C:\WINDOWS\LastGood.Tmp\System32\ati3duag.dll
2006-01-25 05:30 860192 --a------ C:\WINDOWS\LastGood.Tmp\System32\ativvaxx.dll
2006-01-25 05:28 307200 -ra------ C:\WINDOWS\LastGood.Tmp\System32\atiiiexx.dll
2006-01-25 05:16 17408 --a------ C:\WINDOWS\LastGood.Tmp\System32\atitvo32.dll
2006-01-25 05:16 151552 --a------ C:\WINDOWS\LastGood.Tmp\System32\atikvmag.dll
2006-01-25 05:13 5115904 --a------ C:\WINDOWS\LastGood.Tmp\System32\atioglxx.dll
2006-01-25 05:10 258048 --a------ C:\WINDOWS\LastGood.Tmp\System32\ati2cqag.dll
2005-12-09 00:01 112421 -ra------ C:\WINDOWS\LastGood.Tmp\System32\atiicdxx.dat
2005-12-02 20:20 6005 -ra------ C:\WINDOWS\LastGood.Tmp\System32\atifglpf.xml
2005-10-14 17:10 929 -ra------ C:\WINDOWS\LastGood.Tmp\System32\DRIVERS\ativcaxx.vp
2005-10-14 17:10 58560 -ra------ C:\WINDOWS\LastGood.Tmp\System32\DRIVERS\ativckxx.vp
2005-10-14 17:10 1114674 -ra------ C:\WINDOWS\LastGood.Tmp\System32\DRIVERS\ativcaxx.cpa

((((((((((((((((((((((((((((( snapshot_2007-09-09_163057.78 )))))))))))))))))))))))))))))))))))))))))
.
----a-w 972,336 2007-03-20 19:22:04 C:\WINDOWS\UNNeroBackItUp.exe
----a-w 972,336 2007-02-28 14:41:02 C:\WINDOWS\UNNeroShowTime.exe
----a-w 972,336 2007-04-23 14:42:50 C:\WINDOWS\UNRecode.exe
----a-w 135,168 2007-09-10 16:18:04 C:\WINDOWS\assembly\GAC\AxInterop.MSComctlLib\2.0.0.0__90ba9c70f846762e\AxInterop.MSComctlLib.DLL
----a-w 212,992 2007-09-10 16:18:04 C:\WINDOWS\assembly\GAC\AxInterop.MSForms\2.0.0.0__90ba9c70f846762e\AxInterop.MSForms.DLL
----a-w 15,360 2007-09-10 16:18:00 C:\WINDOWS\assembly\GAC\AxInterop.WBOCXLib\1.0.0.0__90ba9c70f846762e\AxInterop.WBOCXLib.DLL
----a-w 143,360 2007-09-10 16:18:00 C:\WINDOWS\assembly\GAC\ICSharpCode.SharpZipLib\0.84.0.0__1b03e6acf1164f73\ICSharpCode.SharpZipLib.DLL
----a-w 225,280 2007-09-10 16:18:05 C:\WINDOWS\assembly\GAC\Interop.MSComctlLib\2.0.0.0__90ba9c70f846762e\Interop.MSComctlLib.DLL
----a-w 360,448 2007-09-10 16:18:05 C:\WINDOWS\assembly\GAC\Interop.MSForms\2.0.0.0__90ba9c70f846762e\Interop.MSForms.DLL
----a-w 49,152 2007-09-10 16:18:05 C:\WINDOWS\assembly\GAC\Interop.NewIWshRuntimeLibrary\1.0.0.0__90ba9c70f846762e\Interop.NewIWshRuntimeLibrary.DLL
----a-w 13,312 2007-09-10 16:18:00 C:\WINDOWS\assembly\GAC\Interop.WBOCXLib\1.0.0.0__90ba9c70f846762e\Interop.WBOCXLib.DLL
----a-w 24,576 2007-09-10 16:18:00 C:\WINDOWS\assembly\GAC_MSIL\ACE.Graphics.DisplaysManager.Shared\2.0.2573.17685__90ba9c70f846762e\ACE.Graphics.DisplaysManager.Shared.DLL
----a-w 20,480 2007-09-10 16:18:06 C:\WINDOWS\assembly\GAC_MSIL\AEM.Actions.CCAA.Shared\2.0.2729.30197__90ba9c70f846762e\AEM.Actions.CCAA.Shared.DLL
----a-w 24,576 2007-09-10 16:18:00 C:\WINDOWS\assembly\GAC_MSIL\AEM.Foundation\2.0.2729.30176__90ba9c70f846762e\AEM.Foundation.DLL
----a-w 16,384 2007-09-10 16:18:05 C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.DPPE.Shared\2.0.2729.30222__90ba9c70f846762e\AEM.Plugin.DPPE.Shared.DLL
----a-w 16,384 2007-09-10 16:18:06 C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.EEU.Shared\2.0.2729.30212__90ba9c70f846762e\AEM.Plugin.EEU.Shared.DLL
----a-w 16,384 2007-09-10 16:18:06 C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.GD.Shared\2.0.2729.30224__90ba9c70f846762e\AEM.Plugin.GD.Shared.DLL
----a-w 20,480 2007-09-10 16:18:06 C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.Hotkeys.Shared\2.0.2729.30202__90ba9c70f846762e\AEM.Plugin.Hotkeys.Shared.DLL
----a-w 16,384 2007-09-10 16:18:05 C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.Source.EEU.Shared\2.0.2729.30220__90ba9c70f846762e\AEM.Plugin.Source.EEU.Shared.DLL
----a-w 16,384 2007-09-10 16:18:05 C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.Source.GD.Shared\2.0.2729.30218__90ba9c70f846762e\AEM.Plugin.Source.GD.Shared.DLL
----a-w 36,864 2007-09-10 16:18:00 C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.Source.Kit.Server\2.0.2783.40357__90ba9c70f846762e\AEM.Plugin.Source.Kit.Server.DLL
----a-w 45,056 2007-09-10 16:17:56 C:\WINDOWS\assembly\GAC_MSIL\AEM.Server\2.0.2783.40020__90ba9c70f846762e\AEM.Server.DLL
----a-w 16,384 2007-09-10 16:18:01 C:\WINDOWS\assembly\GAC_MSIL\AEM.Server.Shared\2.0.2729.30201__90ba9c70f846762e\AEM.Server.Shared.DLL
----a-w 94,208 2007-09-10 16:17:56 C:\WINDOWS\assembly\GAC_MSIL\AEM.UI\2.0.2783.40313__90ba9c70f846762e\AEM.UI.DLL
----a-w 20,480 2007-09-10 16:18:01 C:\WINDOWS\assembly\GAC_MSIL\AEM.UI.Shared\2.0.2729.30255__90ba9c70f846762e\AEM.UI.Shared.DLL
----a-w 20,480 2007-09-10 16:18:01 C:\WINDOWS\assembly\GAC_MSIL\APM.Foundation\2.0.2729.30208__90ba9c70f846762e\APM.Foundation.DLL
----a-w 45,056 2007-09-10 16:17:56 C:\WINDOWS\assembly\GAC_MSIL\APM.Server\2.0.2783.40021__90ba9c70f846762e\APM.Server.DLL
----a-w 32,768 2007-09-10 16:17:57 C:\WINDOWS\assembly\GAC_MSIL\ATICCCom\2.0.0.0__90ba9c70f846762e\ATICCCom.DLL
----a-w 65,536 2007-09-10 16:17:57 C:\WINDOWS\assembly\GAC_MSIL\ATIDEMOS\2.0.2783.40022__90ba9c70f846762e\ATIDEMOS.DLL
----a-w 6,656 2007-09-10 16:18:05 C:\WINDOWS\assembly\GAC_MSIL\atixclib\1.0.0.0__90ba9c70f846762e\atixclib.DLL
----a-w 45,056 2007-09-10 16:18:05 C:\WINDOWS\assembly\GAC_MSIL\AxInterop.SHDocVw\1.1.0.0__90ba9c70f846762e\AxInterop.SHDocVw.DLL
----a-w 49,152 2007-09-10 16:18:04 C:\WINDOWS\assembly\GAC_MSIL\CCC\2.0.0.0__90ba9c70f846762e\CCC.EXE
----a-w 32,768 2007-09-10 16:17:57 C:\WINDOWS\assembly\GAC_MSIL\CCC.Implementation\2.0.2783.40313__90ba9c70f846762e\CCC.Implementation.DLL
----a-w 45,056 2007-09-10 16:18:04 C:\WINDOWS\assembly\GAC_MSIL\CLI\2.0.0.0__90ba9c70f846762e\CLI.EXE
----a-w 131,072 2007-09-10 16:18:06 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.AForce.Graphics.Dashboard\2.0.2783.40351__90ba9c70f846762e\CLI.Aspect.AForce.Graphics.Dashboard.DLL
----a-w 12,288 2007-09-10 16:18:06 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.AForce.Graphics.Runtime\2.0.2783.40350__90ba9c70f846762e\CLI.Aspect.AForce.Graphics.Runtime.DLL
----a-w 20,480 2007-09-10 16:18:01 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.AForce.Graphics.Shared\2.0.2729.30217__90ba9c70f846762e\CLI.Aspect.AForce.Graphics.Shared.DLL
----a-w 24,576 2007-09-10 16:18:01 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.CustomFormats.Graphics.Shared\2.0.2729.30212__90ba9c70f846762e\CLI.Aspect.CustomFormats.Graphics.Shared.DLL
----a-w 98,304 2007-09-10 16:18:06 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.CustomFormatSelection.Graphics.Dashboard\2.0.2783.40166__90ba9c70f846762e\CLI.Aspect.CustomFormatSelection.Graphics.Dashboard.DLL
----a-w 20,480 2007-09-10 16:17:57 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.CustomFormatSelection.Graphics.Dashboard.Shared.Private\2.0.2729.30263__90ba9c70f846762e\CLI.Aspect.CustomFormatSelection.Graphics.Dashboard.Shared.Private.DLL
----a-w 475,136 2007-09-10 16:18:06 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Dashboard\2.0.2783.40187__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Dashboard.DLL
----a-w 40,960 2007-09-10 16:18:06 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Runtime\2.0.2783.40194__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Runtime.DLL
----a-w 53,248 2007-09-10 16:18:01 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Shared\2.0.2729.30226__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Shared.DLL
----a-w 659,456 2007-09-10 16:18:06 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Dashboard\2.0.2783.40252__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Dashboard.DLL
----a-w 65,536 2007-09-10 16:18:13 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Runtime\2.0.2783.40250__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Runtime.DLL
----a-w 40,960 2007-09-10 16:18:01 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Shared\2.0.2729.30230__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Shared.DLL
----a-w 684,032 2007-09-10 16:18:14 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Wizard\2.0.2783.40272__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Wizard.DLL
----a-w 327,680 2007-09-10 16:18:07 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Dashboard\2.0.2783.40180__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Dashboard.DLL
----a-w 57,344 2007-09-10 16:18:07 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Runtime\2.0.2783.40186__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Runtime.DLL
----a-w 40,960 2007-09-10 16:18:01 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Shared\2.0.2729.30225__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Shared.DLL
----a-w 401,408 2007-09-10 16:18:07 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Dashboard\2.0.2783.40237__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Dashboard.DLL
----a-w 32,768 2007-09-10 16:18:07 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Runtime\2.0.2783.40237__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Runtime.DLL
----a-w 28,672 2007-09-10 16:18:01 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Shared\2.0.2729.3

dragon741 · Příspěvekod **dragon741** » 12 zář 2007 21:43

Soubor xpsp1hfm.exe přijatý 2007.09.12 21:32:18 (CET)
Současný stav: Dokončeno
Výsledek: 0/32 (0%)
Formátované
Vytisknout výsledky Antivirus Verze Poslední aktualizace Výsledek
AhnLab-V3 2007.9.13.0 2007.09.12 -
AntiVir 7.6.0.10 2007.09.12 -
Authentium 4.93.8 2007.09.12 -
Avast 4.7.1043.0 2007.09.12 -
AVG 7.5.0.485 2007.09.12 -
BitDefender 7.2 2007.09.12 -
CAT-QuickHeal 9.00 2007.09.12 -
ClamAV 0.91.2 2007.09.12 -
DrWeb 4.33 2007.09.12 -
eSafe 7.0.15.0 2007.09.12 -
eTrust-Vet 31.1.5128 2007.09.12 -
Ewido 4.0 2007.09.12 -
FileAdvisor 1 2007.09.12 -
Fortinet 3.11.0.0 2007.09.12 -
F-Prot 4.3.2.48 2007.09.12 -
F-Secure 6.70.13030.0 2007.09.12 -
Ikarus T3.1.1.12 2007.09.12 -
Kaspersky 4.0.2.24 2007.09.12 -
McAfee 5118 2007.09.12 -
Microsoft 1.2803 2007.09.12 -
NOD32v2 2525 2007.09.12 -
Norman 5.80.02 2007.09.12 -
Panda 9.0.0.4 2007.09.12 -
Prevx1 V2 2007.09.12 -
Rising 19.40.22.00 2007.09.12 -
Sophos 4.21.0 2007.09.12 -
Sunbelt 2.2.907.0 2007.09.12 -
Symantec 10 2007.09.12 -
TheHacker 6.1.10.184 2007.09.11 -
VBA32 3.12.2.4 2007.09.12 -
VirusBuster 4.3.26:9 2007.09.12 -
Webwasher-Gateway 6.0.1 2007.09.12 -

Příspěvekod **fredik** » 13 zář 2007 16:51

Vytvoř si nový CFScript a tentokrát vlož do něho toto:

Kód: Vybrat vše

Folder::
C:\WINDOWS\WINDOWS

a vlož sem pak log z Combofixu který se ti zobrazí a přesvědč se že se vložil celý.

dragon741 · Příspěvekod **dragon741** » 13 zář 2007 20:58

ComboFix 07-09-09.4 - "petr" 2007-09-13 20:53:59.3 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.1.1250.1.1029.18.807 [GMT 2:00]
* Created a new restore point
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\WINDOWS\WINDOWS
C:\WINDOWS\WINDOWS\Win32.sys
C:\WINDOWS\WINDOWS\Winhost.exe

((((((((((((((((((((((((( Files Created from 2007-08-13 to 2007-09-13 )))))))))))))))))))))))))))))))
.

2007-09-12 22:12 <DIR> d-------- C:\Intel
2007-09-12 19:31 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\Ahead
2007-09-12 19:29 <DIR> d-------- C:\Program Files\Nero
2007-09-12 19:29 <DIR> d-------- C:\Program Files\Common Files\Ahead
2007-09-12 19:29 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\Nero
2007-09-12 19:00 <DIR> d-------- C:\Program Files\CDBurnerXP Pro 3
2007-09-12 17:20 <DIR> d-------- C:\coh
2007-09-12 16:42 <DIR> d---s---- C:\DOCUME~1\petr\UserData
2007-09-10 18:27 21,811,216 --a------ C:\7-7_xp32-64_ccc_asian_49710.exe
2007-09-10 18:27 15,149,280 --a------ C:\7-7_xp32_dd_49709.exe
2007-09-10 18:26 4,155,184 --a------ C:\7-7_xp32-64_wdm_49709.exe
2007-09-10 18:21 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\ATI
2007-09-10 18:18 <DIR> d-------- C:\Program Files\Steam
2007-09-10 17:33 2,720,456 --a------ C:\ccsetup141.exe
2007-09-10 17:33 <DIR> d-------- C:\Program Files\CCleaner
2007-09-09 16:26 51,200 --a------ C:\WINDOWS\NirCmd.exe
2007-09-09 16:15 <DIR> dr-h----- C:\DOCUME~1\ADMINI~1\Data aplikacˇ
2007-09-09 16:15 <DIR> dr------- C:\DOCUME~1\ADMINI~1\Nabˇdka Start
2007-09-09 16:15 <DIR> d--h----- C:\DOCUME~1\ADMINI~1\ćablony
2007-09-09 16:15 <DIR> d--h----- C:\DOCUME~1\ADMINI~1\Okolnˇ tisk rny
2007-09-09 16:15 <DIR> d--h----- C:\DOCUME~1\ADMINI~1\Okolnˇ sˇś
2007-09-09 16:15 <DIR> d-------- C:\WINDOWS\ERUNT
2007-09-09 16:15 <DIR> d-------- C:\DOCUME~1\ADMINI~1\Plocha
2007-09-09 16:15 <DIR> d-------- C:\DOCUME~1\ADMINI~1\Oblˇben‚ polo§ky
2007-09-09 16:15 <DIR> d-------- C:\DOCUME~1\ADMINI~1\Dokumenty
2007-09-09 16:06 1,484,625 --a------ C:\ComboFix.exe
2007-09-09 16:05 1,073,147 --a------ C:\SDFix.exe
2007-09-09 15:40 <DIR> d-------- C:\WINDOWS\LogFiles
2007-09-08 01:24 <DIR> d-a------ C:\WINDOWS\zts2.exe
2007-09-08 01:24 <DIR> d-a------ C:\WINDOWS\system32\vcmgcd32.dll
2007-09-08 01:24 <DIR> d-a------ C:\WINDOWS\system32\iifgfgf.dll
2007-09-08 01:24 <DIR> d-a------ C:\WINDOWS\rundll16.exe
2007-09-08 01:24 <DIR> d-a------ C:\WINDOWS\rundl132.dll
2007-09-08 01:24 <DIR> d-a------ C:\WINDOWS\logo1_.exe
2007-09-08 01:23 135,680 --a------ C:\WINDOWS\R.COM
2007-09-08 01:23 130,048 --a------ C:\WINDOWS\system32\T.COM
2007-09-08 01:11 <DIR> d-------- C:\Program Files\Trend Micro
2007-09-08 00:50 <DIR> d-------- C:\!KillBox
2007-09-08 00:39 24,576 --a------ C:\WINDOWS\system32\xpsp1hfm.exe
2007-09-07 15:42 <DIR> d-------- C:\Program Files\QIP
2007-08-30 14:37 <DIR> d-------- C:\Program Files\Wanadoo Edition
2007-08-30 13:56 306,688 --a------ C:\WINDOWS\IsUninst.exe
2007-08-30 13:56 <DIR> d-------- C:\Program Files\Xplosiv
2007-08-29 22:49 <DIR> d-------- C:\Program Files\RADVideo
2007-08-28 19:22 <DIR> d-------- C:\Games
2007-08-28 15:46 <DIR> d-------- C:\Program Files\THQ
2007-08-26 18:56 <DIR> d-------- C:\Program Files\Lavasoft
2007-08-26 18:56 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard
2007-08-26 18:56 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\Lavasoft
2007-08-26 13:35 33 --a------ C:\WINDOWS\Bioshock Patcher.bat
2007-08-26 13:35 2,403,096 --a------ C:\WINDOWS\infinst_autol.exe
2007-08-26 12:18 <DIR> d-------- C:\Program Files\DAEMON Tools
2007-08-25 21:58 17,480 --a------ C:\WINDOWS\system32\drivers\hamachi.sys
2007-08-25 21:58 <DIR> d-------- C:\Program Files\Hamachi
2007-08-21 12:07 107,888 --a------ C:\WINDOWS\system32\CmdLineExt.dll
2007-08-21 11:54 15,128 --a------ C:\WINDOWS\system32\x3daudio1_1.dll
2007-08-21 11:50 <DIR> d-------- C:\Program Files\2K Games
2007-08-20 23:54 161,792 --a------ C:\WINDOWS\system32\CNMLM7X.DLL
2007-08-20 23:54 <DIR> d--h----- C:\WINDOWS\system32\CanonIJ Uninstaller Information
2007-08-20 23:54 <DIR> d--h----- C:\Program Files\CanonBJ
2007-08-20 23:54 <DIR> d--h----- C:\DOCUME~1\ALLUSE~1\DATAAP~1\CanonBJ
2007-08-20 23:43 24,960 --a--c--- C:\WINDOWS\system32\dllcache\usbprint.sys
2007-08-20 23:43 24,960 --a------ C:\WINDOWS\system32\drivers\usbprint.sys
2007-08-20 23:43 <DIR> d-------- C:\WUTemp
2007-08-16 23:19 <DIR> d-------- C:\Program Files\Swf2Avi
2007-08-16 11:48 42,496 --a------ C:\WINDOWS\system32\drivers\AmdK8.sys
2007-08-16 11:48 <DIR> d-------- C:\Program Files\AMD
2007-08-16 10:47 <DIR> d-------- C:\Program Files\Common Files\ATI Technologies
2007-08-16 10:42 182,880 --a--c--- C:\WINDOWS\system32\dllcache\iuengine.dll
2007-08-16 10:42 182,880 --a------ C:\WINDOWS\system32\iuengine.dll
2007-08-15 18:52 <DIR> d-------- C:\Program Files\Lavalys
2007-08-15 18:31 47,360 --a------ C:\WINDOWS\system32\drivers\Pcouffin.sys
2007-08-15 18:30 <DIR> d-------- C:\Program Files\vso
2007-08-15 13:44 5,632 --a------ C:\WINDOWS\system32\drivers\Entech64.sys
2007-08-15 13:44 3,972 --a------ C:\WINDOWS\system32\drivers\PciBus.sys
2007-08-15 13:44 21,664 --a------ C:\WINDOWS\system32\drivers\Entech.sys
2007-08-15 13:44 <DIR> d-------- C:\WINDOWS\system32\Futuremark
2007-08-15 13:43 <DIR> d-------- C:\Program Files\Futuremark
2007-08-15 11:33 <DIR> d-------- C:\WINDOWS\LastGood
2007-08-15 10:53 <DIR> d-------- C:\WINDOWS\LastGood.Tmp
2007-08-14 12:51 24,064 --a------ C:\WINDOWS\system32\drivers\ATITool.sys
2007-08-14 12:51 <DIR> d-------- C:\Program Files\ATITool
2007-08-13 21:02 5,248 --a------ C:\WINDOWS\system32\drivers\giveio.sys
2007-08-13 21:00 <DIR> d-------- C:\Program Files\SpeedFan
2007-08-13 15:59 86,016 --a--c--- C:\WINDOWS\system32\dllcache\wmpshell.dll
2007-08-13 15:58 224,768 --a--c--- C:\WINDOWS\system32\dllcache\wmasf.dll
2007-08-13 15:58 2,370,296 --a--c--- C:\WINDOWS\system32\dllcache\wmvcore.dll
2007-08-13 15:37 <DIR> d-------- C:\WINDOWS\msdownld.tmp
2007-08-13 15:30 <DIR> d-------- C:\Program Files\CAPCOM

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-09-10 21:22 --------- d-------- C:\Program Files\ICQToolbar
2007-09-10 18:27 --------- d--h----- C:\Program Files\InstallShield Installation Information
2007-09-10 18:17 --------- d-------- C:\Program Files\ATI Technologies
2007-09-09 16:10 --------- d-a------ C:\DOCUME~1\ALLUSE~1\DATAAP~1\TEMP
2007-09-08 01:05 --------- d-------- C:\Program Files\ICQ6
2007-09-02 18:52 --------- d-------- C:\Program Files\Alwil Software
2007-08-26 12:15 685816 --a------ C:\WINDOWS\system32\drivers\sptd.sys
2007-08-22 17:20 163644 --a------ C:\WINDOWS\system32\drivers\secdrv.sys
2007-08-12 17:48 --------- d-------- C:\Program Files\Glory of the Roman Empire
2007-07-30 22:01 --------- d-------- C:\Program Files\Opera
2007-07-29 21:57 --------- d-------- C:\Program Files\Webteh
2007-07-29 17:59 --------- d-------- C:\Program Files\BitSpirit
2007-07-29 17:57 --------- d-------- C:\Program Files\uTorrent
2007-07-29 16:58 --------- d-------- C:\Program Files\QuickTime
2007-07-29 16:58 --------- d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\QuickTime
2007-07-29 16:55 --------- d-------- C:\Program Files\Total Player
2007-07-27 18:37 --------- d-------- C:\Program Files\SEGA
2007-07-27 17:32 --------- d-------- C:\Program Files\Common Files\InstallShield
2007-07-27 17:30 --------- d-------- C:\Program Files\Analog Devices
2007-07-27 17:28 --------- d-------- C:\Program Files\VIA
2007-07-27 17:22 --------- d-------- C:\Program Files\microsoft frontpage
2007-07-20 00:57 267112 --a------ C:\WINDOWS\system32\xactengine2_9.dll
2007-07-19 18:14 444776 --a------ C:\WINDOWS\system32\d3dx10_35.dll
2007-07-19 18:14 3727720 --a------ C:\WINDOWS\system32\d3dx9_35.dll
2007-07-19 18:14 1358192 --a------ C:\WINDOWS\system32\D3DCompiler_35.dll
2007-07-12 09:12 81920 --a------ C:\WINDOWS\system32\frapsvid.dll
2007-06-29 21:05 520192 --------- C:\WINDOWS\system32\ati2sgag.exe
2007-06-27 19:05 972072 --a------ C:\WINDOWS\UNNeroMediaHome.exe
2007-06-27 03:59 344064 --a------ C:\WINDOWS\system32\ATIDEMGX.dll
2007-06-27 03:58 269312 --a------ C:\WINDOWS\system32\ati2dvag.dll
2007-06-27 03:56 307200 --a------ C:\WINDOWS\system32\atiiiexx.dll
2007-06-27 03:51 26112 --a------ C:\WINDOWS\system32\Ati2mdxx.exe
2007-06-27 03:51 143360 --a------ C:\WINDOWS\system32\atipdlxx.dll
2007-06-27 03:51 122880 --a------ C:\WINDOWS\system32\Oemdspif.dll
2007-06-27 03:50 43520 --a------ C:\WINDOWS\system32\ati2edxx.dll
2007-06-27 03:50 118784 --a------ C:\WINDOWS\system32\ati2evxx.dll
2007-06-27 03:49 483328 --a------ C:\WINDOWS\system32\ati2evxx.exe
2007-06-27 03:48 53248 --a------ C:\WINDOWS\system32\ATIDDC.DLL
2007-06-27 03:44 8232960 --a------ C:\WINDOWS\system32\atioglx2.dll
2007-06-27 03:41 2940992 --a------ C:\WINDOWS\system32\ati3duag.dll
2007-06-27 03:31 1519744 --a------ C:\WINDOWS\system32\ativvaxx.dll
2007-06-27 03:19 5435392 --a------ C:\WINDOWS\system32\atioglxx.dll
2007-06-27 03:17 266240 --a------ C:\WINDOWS\system32\atikvmag.dll
2007-06-27 03:16 17408 --a------ C:\WINDOWS\system32\atitvo32.dll
2007-06-27 03:14 176128 --a------ C:\WINDOWS\system32\atiok3x2.dll
2007-06-27 03:10 376832 --a------ C:\WINDOWS\system32\ati2cqag.dll
2007-06-26 14:12 972072 --a------ C:\WINDOWS\UNNeroVision.exe
2007-06-20 20:46 266088 --a------ C:\WINDOWS\system32\xactengine2_8.dll
2007-06-20 20:45 18280 --a------ C:\WINDOWS\system32\x3daudio1_2.dll
.

((((((((((((((((((((((((((((( snapshot_2007-09-09_163057.78 )))))))))))))))))))))))))))))))))))))))))
.
----a-w 972,336 2007-03-20 19:22:04 C:\WINDOWS\UNNeroBackItUp.exe
----a-w 972,336 2007-02-28 14:41:02 C:\WINDOWS\UNNeroShowTime.exe
----a-w 972,336 2007-04-23 14:42:50 C:\WINDOWS\UNRecode.exe
----a-w 135,168 2007-09-10 16:18:04 C:\WINDOWS\assembly\GAC\AxInterop.MSComctlLib\2.0.0.0__90ba9c70f846762e\AxInterop.MSComctlLib.DLL
----a-w 212,992 2007-09-10 16:18:04 C:\WINDOWS\assembly\GAC\AxInterop.MSForms\2.0.0.0__90ba9c70f846762e\AxInterop.MSForms.DLL
----a-w 15,360 2007-09-10 16:18:00 C:\WINDOWS\assembly\GAC\AxInterop.WBOCXLib\1.0.0.0__90ba9c70f846762e\AxInterop.WBOCXLib.DLL
----a-w 143,360 2007-09-10 16:18:00 C:\WINDOWS\assembly\GAC\ICSharpCode.SharpZipLib\0.84.0.0__1b03e6acf1164f73\ICSharpCode.SharpZipLib.DLL
----a-w 225,280 2007-09-10 16:18:05 C:\WINDOWS\assembly\GAC\Interop.MSComctlLib\2.0.0.0__90ba9c70f846762e\Interop.MSComctlLib.DLL
----a-w 360,448 2007-09-10 16:18:05 C:\WINDOWS\assembly\GAC\Interop.MSForms\2.0.0.0__90ba9c70f846762e\Interop.MSForms.DLL
----a-w 49,152 2007-09-10 16:18:05 C:\WINDOWS\assembly\GAC\Interop.NewIWshRuntimeLibrary\1.0.0.0__90ba9c70f846762e\Interop.NewIWshRuntimeLibrary.DLL
----a-w 13,312 2007-09-10 16:18:00 C:\WINDOWS\assembly\GAC\Interop.WBOCXLib\1.0.0.0__90ba9c70f846762e\Interop.WBOCXLib.DLL
----a-w 24,576 2007-09-10 16:18:00 C:\WINDOWS\assembly\GAC_MSIL\ACE.Graphics.DisplaysManager.Shared\2.0.2573.17685__90ba9c70f846762e\ACE.Graphics.DisplaysManager.Shared.DLL
----a-w 20,480 2007-09-10 16:18:06 C:\WINDOWS\assembly\GAC_MSIL\AEM.Actions.CCAA.Shared\2.0.2729.30197__90ba9c70f846762e\AEM.Actions.CCAA.Shared.DLL
----a-w 24,576 2007-09-10 16:18:00 C:\WINDOWS\assembly\GAC_MSIL\AEM.Foundation\2.0.2729.30176__90ba9c70f846762e\AEM.Foundation.DLL
----a-w 16,384 2007-09-10 16:18:05 C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.DPPE.Shared\2.0.2729.30222__90ba9c70f846762e\AEM.Plugin.DPPE.Shared.DLL
----a-w 16,384 2007-09-10 16:18:06 C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.EEU.Shared\2.0.2729.30212__90ba9c70f846762e\AEM.Plugin.EEU.Shared.DLL
----a-w 16,384 2007-09-10 16:18:06 C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.GD.Shared\2.0.2729.30224__90ba9c70f846762e\AEM.Plugin.GD.Shared.DLL
----a-w 20,480 2007-09-10 16:18:06 C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.Hotkeys.Shared\2.0.2729.30202__90ba9c70f846762e\AEM.Plugin.Hotkeys.Shared.DLL
----a-w 16,384 2007-09-10 16:18:05 C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.Source.EEU.Shared\2.0.2729.30220__90ba9c70f846762e\AEM.Plugin.Source.EEU.Shared.DLL
----a-w 16,384 2007-09-10 16:18:05 C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.Source.GD.Shared\2.0.2729.30218__90ba9c70f846762e\AEM.Plugin.Source.GD.Shared.DLL
----a-w 36,864 2007-09-10 16:18:00 C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.Source.Kit.Server\2.0.2783.40357__90ba9c70f846762e\AEM.Plugin.Source.Kit.Server.DLL
----a-w 45,056 2007-09-10 16:17:56 C:\WINDOWS\assembly\GAC_MSIL\AEM.Server\2.0.2783.40020__90ba9c70f846762e\AEM.Server.DLL
----a-w 16,384 2007-09-10 16:18:01 C:\WINDOWS\assembly\GAC_MSIL\AEM.Server.Shared\2.0.2729.30201__90ba9c70f846762e\AEM.Server.Shared.DLL
----a-w 94,208 2007-09-10 16:17:56 C:\WINDOWS\assembly\GAC_MSIL\AEM.UI\2.0.2783.40313__90ba9c70f846762e\AEM.UI.DLL
----a-w 20,480 2007-09-10 16:18:01 C:\WINDOWS\assembly\GAC_MSIL\AEM.UI.Shared\2.0.2729.30255__90ba9c70f846762e\AEM.UI.Shared.DLL
----a-w 20,480 2007-09-10 16:18:01 C:\WINDOWS\assembly\GAC_MSIL\APM.Foundation\2.0.2729.30208__90ba9c70f846762e\APM.Foundation.DLL
----a-w 45,056 2007-09-10 16:17:56 C:\WINDOWS\assembly\GAC_MSIL\APM.Server\2.0.2783.40021__90ba9c70f846762e\APM.Server.DLL
----a-w 32,768 2007-09-10 16:17:57 C:\WINDOWS\assembly\GAC_MSIL\ATICCCom\2.0.0.0__90ba9c70f846762e\ATICCCom.DLL
----a-w 65,536 2007-09-10 16:17:57 C:\WINDOWS\assembly\GAC_MSIL\ATIDEMOS\2.0.2783.40022__90ba9c70f846762e\ATIDEMOS.DLL
----a-w 6,656 2007-09-10 16:18:05 C:\WINDOWS\assembly\GAC_MSIL\atixclib\1.0.0.0__90ba9c70f846762e\atixclib.DLL
----a-w 45,056 2007-09-10 16:18:05 C:\WINDOWS\assembly\GAC_MSIL\AxInterop.SHDocVw\1.1.0.0__90ba9c70f846762e\AxInterop.SHDocVw.DLL
----a-w 49,152 2007-09-10 16:18:04 C:\WINDOWS\assembly\GAC_MSIL\CCC\2.0.0.0__90ba9c70f846762e\CCC.EXE
----a-w 32,768 2007-09-10 16:17:57 C:\WINDOWS\assembly\GAC_MSIL\CCC.Implementation\2.0.2783.40313__90ba9c70f846762e\CCC.Implementation.DLL
----a-w 45,056 2007-09-10 16:18:04 C:\WINDOWS\assembly\GAC_MSIL\CLI\2.0.0.0__90ba9c70f846762e\CLI.EXE
----a-w 131,072 2007-09-10 16:18:06 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.AForce.Graphics.Dashboard\2.0.2783.40351__90ba9c70f846762e\CLI.Aspect.AForce.Graphics.Dashboard.DLL
----a-w 12,288 2007-09-10 16:18:06 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.AForce.Graphics.Runtime\2.0.2783.40350__90ba9c70f846762e\CLI.Aspect.AForce.Graphics.Runtime.DLL
----a-w 20,480 2007-09-10 16:18:01 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.AForce.Graphics.Shared\2.0.2729.30217__90ba9c70f846762e\CLI.Aspect.AForce.Graphics.Shared.DLL
----a-w 24,576 2007-09-10 16:18:01 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.CustomFormats.Graphics.Shared\2.0.2729.30212__90ba9c70f846762e\CLI.Aspect.CustomFormats.Graphics.Shared.DLL
----a-w 98,304 2007-09-10 16:18:06 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.CustomFormatSelection.Graphics.Dashboard\2.0.2783.40166__90ba9c70f846762e\CLI.Aspect.CustomFormatSelection.Graphics.Dashboard.DLL
----a-w 20,480 2007-09-10 16:17:57 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.CustomFormatSelection.Graphics.Dashboard.Shared.Private\2.0.2729.30263__90ba9c70f846762e\CLI.Aspect.CustomFormatSelection.Graphics.Dashboard.Shared.Private.DLL
----a-w 475,136 2007-09-10 16:18:06 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Dashboard\2.0.2783.40187__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Dashboard.DLL
----a-w 40,960 2007-09-10 16:18:06 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Runtime\2.0.2783.40194__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Runtime.DLL
----a-w 53,248 2007-09-10 16:18:01 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Shared\2.0.2729.30226__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Shared.DLL
----a-w 659,456 2007-09-10 16:18:06 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Dashboard\2.0.2783.40252__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Dashboard.DLL
----a-w 65,536 2007-09-10 16:18:13 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Runtime\2.0.2783.40250__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Runtime.DLL
----a-w 40,960 2007-09-10 16:18:01 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Shared\2.0.2729.30230__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Shared.DLL
----a-w 684,032 2007-09-10 16:18:14 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Wizard\2.0.2783.40272__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Wizard.DLL
----a-w 327,680 2007-09-10 16:18:07 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Dashboard\2.0.2783.40180__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Dashboard.DLL
----a-w 57,344 2007-09-10 16:18:07 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Runtime\2.0.2783.40186__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Runtime.DLL
----a-w 40,960 2007-09-10 16:18:01 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Shared\2.0.2729.30225__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Shared.DLL
----a-w 401,408 2007-09-10 16:18:07 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Dashboard\2.0.2783.40237__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Dashboard.DLL
----a-w 32,768 2007-09-10 16:18:07 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Runtime\2.0.2783.40237__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Runtime.DLL
----a-w 28,672 2007-09-10 16:18:01 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Shared\2.0.2729.30259__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Shared.DLL
----a-w 303,104 2007-09-10 16:18:07 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Wizard\2.0.2783.40105__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Wizard.DLL
----a-w 282,624 2007-09-10 16:18:07 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Dashboard.Shared\2.0.2783.40173__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Dashboard.Shared.DLL
----a-w 32,768 2007-09-10 16:18:14 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Runtime\2.0.2783.40186__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Runtime.DLL
----a-w 32,768 2007-09-10 16:18:01 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Shared\2.0.2729.30213__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Shared.DLL
----a-w 897,024 2007-09-10 16:18:08 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Dashboard\2.0.2783.40294__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Dashboard.DLL
----a-w 77,824 2007-09-10 16:18:14 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Runtime\2.0.2783.40293__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Runtime.DLL
----a-w 65,536 2007-09-10 16:18:01 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Shared\2.0.2729.30231__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Shared.DLL
----a-w 364,544 2007-09-10 16:18:14 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Wizard\2.0.2783.40300__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Wizard.DLL
----a-w 589,824 2007-09-10 16:18:08 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Dashboard\2.0.2783.40098__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Dashboard.DLL
----a-w 40,960 2007-09-10 16:18:08 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Runtime\2.0.2783.40104__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Runtime.DLL
----a-w 28,672 2007-09-10 16:18:01 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Shared\2.0.2729.30219__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Shared.DLL
----a-w 438,272 2007-09-10 16:18:08 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Dashboard\2.0.2783.40050__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Dashboard.DLL
----a-w 1,675,264 2007-09-10 16:18:14 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Wizard\2.0.2783.40072__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Wizard.DLL
----a-w 118,784 2007-09-10 16:18:08 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Dashboard\2.0.2783.40217__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.DLL
----a-w 32,768 2007-09-10 16:18:08 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Runtime\2.0.2783.40216__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Runtime.DLL
----a-w 24,576 2007-09-10 16:18:01 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Shared\2.0.2729.30228__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Shared.DLL
----a-w 20,480 2007-09-10 16:18:14 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Runtime\2.0.2783.40049__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Runtime.DLL
----a-w 20,480 2007-09-10 16:18:01 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Shared\2.0.2729.30216__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Shared.DLL
----a-w 208,896 2007-09-10 16:18:08 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Dashboard\2.0.2783.40092__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Dashboard.DLL
----a-w 32,768 2007-09-10 16:18:15 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Runtime\2.0.2783.40085__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Runtime.DLL
----a-w 53,248 2007-09-10 16:18:02 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Shared\2.0.2729.30219__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Shared.DLL
----a-w 184,320 2007-09-10 16:18:15 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Wizard\2.0.2783.40085__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Wizard.DLL
----a-w 262,144 2007-09-10 16:18:09 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.IntegratedUMAFrameBuffer.Graphics.Dashboard\2.0.2783.40118__90ba9c70f846762e\CLI.Aspect.IntegratedUMAFrameBuffer.Graphics.Dashboard.DLL
----a-w 20,480 2007-09-10 16:18:09 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.IntegratedUMAFrameBuffer.Graphics.Runtime\2.0.2783.40124__90ba9c70f846762e\CLI.Aspect.IntegratedUMAFrameBuffer.Graphics.Runtime.DLL
----a-w 20,480 2007-09-10 16:18:02 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.IntegratedUMAFrameBuffer.Graphics.Shared\2.0.2729.30221__90ba9c70f846762e\CLI.Aspect.IntegratedUMAFrameBuffer.Graphics.Shared.DLL
----a-w 790,528 2007-09-10 16:18:09 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Dashboard\2.0.2783.40195__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Dashboard.DLL
----a-w 65,536 2007-09-10 16:18:09 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Runtime\2.0.2783.40194__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Runtime.DLL
----a-w 45,056 2007-09-10 16:18:02 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Shared\2.0.2729.30227__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Shared.DLL
----a-w 401,408 2007-09-10 16:18:09 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Wizard\2.0.2783.40278__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Wizard.DLL
----a-w 204,800 2007-09-10 16:18:10 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MultiVPU.Graphics.Dashboard\2.0.2783.40203__90ba9c70f846762e\CLI.Aspect.MultiVPU.Graphics.Dashboard.DLL
----a-w 36,864 2007-09-10 16:18:09 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MultiVPU.Graphics.Runtime\2.0.2783.40202__90ba9c70f846762e\CLI.Aspect.MultiVPU.Graphics.Runtime.DLL
----a-w 24,576 2007-09-10 16:18:02 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MultiVPU.Graphics.Shared\2.0.2729.30224__90ba9c70f846762e\CLI.Aspect.MultiVPU.Graphics.Shared.DLL
----a-w 204,800 2007-09-10 16:18:10 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MultiVPU2.Graphics.Dashboard\2.0.2783.40211__90ba9c70f846762e\CLI.Aspect.MultiVPU2.Graphics.Dashboard.DLL
----a-w 36,864 2007-09-10 16:18:10 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MultiVPU2.Graphics.Runtime\2.0.2783.40209__90ba9c70f846762e\CLI.Aspect.MultiVPU2.Graphics.Runtime.DLL
----a-w 24,576 2007-09-10 16:18:02 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MultiVPU2.Graphics.Shared\2.0.2729.30227__90ba9c70f846762e\CLI.Aspect.MultiVPU2.Graphics.Shared.DLL
----a-w 208,896 2007-09-10 16:18:10 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MultiVPU3.Graphics.Dashboard\2.0.2783.40315__90ba9c70f846762e\CLI.Aspect.MultiVPU3.Graphics.Dashboard.DLL
----a-w 36,864 2007-09-10 16:18:10 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MultiVPU3.Graphics.Runtime\2.0.2783.40314__90ba9c70f846762e\CLI.Aspect.MultiVPU3.Graphics.Runtime.DLL
----a-w 24,576 2007-09-10 16:18:02 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MultiVPU3.Graphics.Shared\2.0.2729.30262__90ba9c70f846762e\CLI.Aspect.MultiVPU3.Graphics.Shared.DLL
----a-w 479,232 2007-09-10 16:18:10 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.OverDrive2.Graphics.Dashboard\2.0.2783.40125__90ba9c70f846762e\CLI.Aspect.OverDrive2.Graphics.Dashboard.DLL
----a-w 28,672 2007-09-10 16:18:10 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.OverDrive2.Graphics.Runtime\2.0.2783.40124__90ba9c70f846762e\CLI.Aspect.OverDrive2.Graphics.Runtime.DLL
----a-w 24,576 2007-09-10 16:18:02 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.OverDrive2.Graphics.Shared\2.0.2729.30261__90ba9c70f846762e\CLI.Aspect.OverDrive2.Graphics.Shared.DLL
----a-w 1,032,192 2007-09-10 16:18:11 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.OverDrive3.Graphics.Dashboard\2.0.2783.40145__90ba9c70f846762e\CLI.Aspect.OverDrive3.Graphics.Dashboard.DLL
----a-w 61,440 2007-09-10 16:18:10 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.OverDrive3.Graphics.Runtime\2.0.2783.40138__90ba9c70f846762e\CLI.Aspect.OverDrive3.Graphics.Runtime.DLL
----a-w 24,576 2007-09-10 16:18:02 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.OverDrive3.Graphics.Shared\2.0.2729.30223__90ba9c70f846762e\CLI.Aspect.OverDrive3.Graphics.Shared.DLL
----a-w 425,984 2007-09-10 16:18:11 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.OverDrive5.Graphics.Dashboard\2.0.2783.40371__90ba9c70f846762e\CLI.Aspect.OverDrive5.Graphics.Dashboard.DLL
----a-w 65,536 2007-09-10 16:18:11 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.OverDrive5.Graphics.Runtime\2.0.2783.40371__90ba9c70f846762e\CLI.Aspect.OverDrive5.Graphics.Runtime.DLL
----a-w 57,344 2007-09-10 16:18:02 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.OverDrive5.Graphics.Shared\2.0.2729.30255__90ba9c70f846762e\CLI.Aspect.OverDrive5.Graphics.Shared.DLL
----a-w 167,936 2007-09-10 16:18:11 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.PowerPlay3.Graphics.Dashboard\2.0.2783.40244__90ba9c70f846762e\CLI.Aspect.PowerPlay3.Graphics.Dashboard.DLL
----a-w 49,152 2007-09-10 16:18:11 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.PowerPlay3.Graphics.Runtime\2.0.2783.40250__90ba9c70f846762e\CLI.Aspect.PowerPlay3.Graphics.Runtime.DLL
----a-w 28,672 2007-09-10 16:18:02 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.PowerPlay3.Graphics.Shared\2.0.2729.30229__90ba9c70f846762e\CLI.Aspect.PowerPlay3.Graphics.Shared.DLL
----a-w 139,264 2007-09-10 16:18:11 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.PowerPlay4.Graphics.Dashboard\2.0.2783.40341__90ba9c70f846762e\CLI.Aspect.PowerPlay4.Graphics.Dashboard.DLL
----a-w 45,056 2007-09-10 16:18:11 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.PowerPlay4.Graphics.Runtime\2.0.2783.40340__90ba9c70f846762e\CLI.Aspect.PowerPlay4.Graphics.Runtime.DLL
----a-w 28,672 2007-09-10 16:18:02 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.PowerPlay4.Graphics.Shared\2.0.2729.30264__90ba9c70f846762e\CLI.Aspect.PowerPlay4.Graphics.Shared.DLL
----a-w 139,264 2007-09-10 16:18:11 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Dashboard\2.0.2783.40321__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Dashboard.DLL
----a-w 40,960 2007-09-10 16:18:11 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Runtime\2.0.2783.40320__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Runtime.DLL
----a-w 24,576 2007-09-10 16:18:02 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Shared\2.0.2729.30262__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Shared.DLL
----a-w 102,400 2007-09-10 16:18:12 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.PowerXpress.Graphics.Dashboard\2.0.2783.40363__90ba9c70f846762e\CLI.Aspect.PowerXpress.Graphics.Dashboard.DLL
----a-w 16,384 2007-09-10 16:18:12 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.PowerXpress.Graphics.Runtime\2.0.2783.40370__90ba9c70f846762e\CLI.Aspect.PowerXpress.Graphics.Runtime.DLL
----a-w 24,576 2007-09-10 16:18:02 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.PowerXpress.Graphics.Shared\2.0.2729.30222__90ba9c70f846762e\CLI.Aspect.PowerXpress.Graphics.Shared.DLL
----a-w 331,776 2007-09-10 16:18:12 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Dashboard\2.0.2783.40258__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Dashboard.DLL
----a-w 61,440 2007-09-10 16:18:12 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Runtime\2.0.2783.40257__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Runtime.DLL
----a-w 49,152 2007-09-10 16:18:03 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Shared\2.0.2729.30231__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Shared.DLL
----a-w 90,112 2007-09-10 16:18:12 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Wizard\2.0.2783.40265__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Wizard.DLL
----a-w 282,624 2007-09-10 16:18:12 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.SmartGart.Graphics.Dashboard\2.0.2783.40111__90ba9c70f846762e\CLI.Aspect.SmartGart.Graphics.Dashboard.DLL
----a-w 28,672 2007-09-10 16:18:12 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.SmartGart.Graphics.Runtime\2.0.2783.40117__90ba9c70f846762e\CLI.Aspect.SmartGart.Graphics.Runtime.DLL
----a-w 24,576 2007-09-10 16:18:03 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.SmartGart.Graphics.Shared\2.0.2729.30221__90ba9c70f846762e\CLI.Aspect.SmartGart.Graphics.Shared.DLL
----a-w 40,960 2007-09-10 16:18:03 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Shared\2.0.2729.30264__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Shared.DLL
----a-w 483,328 2007-09-10 16:18:13 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Wizard\2.0.2783.40327__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Wizard.DLL
----a-w 167,936 2007-09-10 16:18:12 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.VeryLargeDesktop.Graphics.Dashboard\2.0.2783.40224__90ba9c70f846762e\CLI.Aspect.VeryLargeDesktop.Graphics.Dashboard.DLL
----a-w 32,768 2007-09-10 16:18:12 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.VeryLargeDesktop.Graphics.Runtime\2.0.2783.40223__90ba9c70f846762e\CLI.Aspect.VeryLargeDesktop.Graphics.Runtime.DLL
----a-w 24,576 2007-09-10 16:18:03 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.VeryLargeDesktop.Graphics.Shared\2.0.2729.30228__90ba9c70f846762e\CLI.Aspect.VeryLargeDesktop.Graphics.Shared.DLL
----a-w 102,400 2007-09-10 16:18:13 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.VPURecover.Graphics.Dashboard\2.0.2783.40078__90ba9c70f846762e\CLI.Aspect.VPURecover.Graphics.Dashboard.DLL
----a-w 28,672 2007-09-10 16:18:13 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.VPURecover.Graphics.Runtime\2.0.2783.40077__90ba9c70f846762e\CLI.Aspect.VPURecover.Graphics.Runtime.DLL
----a-w 20,480 2007-09-10 16:18:03 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.VPURecover.Graphics.Shared\2.0.2729.30217__90ba9c70f846762e\CLI.Aspect.VPURecover.Graphics.Shared.DLL
----a-w 135,168 2007-09-10 16:18:13 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Welcome.Graphics.Dashboard\2.0.2783.40334__90ba9c70f846762e\CLI.Aspect.Welcome.Graphics.Dashboard.DLL
----a-w 102,400 2007-09-10 16:18:13 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.WorkstationConfig.Graphics.Dashboard\2.0.2783.40231__90ba9c70f846762e\CLI.Aspect.WorkstationConfig.Graphics.Dashboard.DLL
----a-w 36,864 2007-09-10 16:18:13 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.WorkstationConfig.Graphics.Runtime\2.0.2783.40230__90ba9c70f846762e\CLI.Aspect.WorkstationConfig.Graphics.Runtime.DLL
----a-w 28,672 2007-09-10 16:18:03 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.WorkstationConfig.Graphics.Shared\2.0.2729.30229__90ba9c70f846762e\CLI.Aspect.WorkstationConfig.Graphics.Shared.DLL
----a-w 73,728 2007-09-10 16:18:13 C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard\2.0.2783.40043__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.DLL
----a-w 16,384 2007-09-10 16:18:03 C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard.Shared\2.0.2729.30241__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.Shared.DLL
----a-w 237,568 2007-09-10 16:18:15 C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime\2.0.2783.40029__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.DLL
----a-w 20,480 2007-09-10 16:17:57 C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime.Shared.Private\2.0.2729.30243__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.Shared.Private.DLL
----a-w 49,152 2007-09-10 16:18:03 C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Shared\2.0.2729.30199__90ba9c70f846762e\CLI.Caste.Graphics.Shared.DLL
----a-w 40,960 2007-09-10 16:18:15 C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard\2.0.2783.40064__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.DLL
----a-w 16,384 2007-09-10 16:18:03 C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard.Shared\2.0.2729.30216__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.Shared.DLL
----a-w 24,576 2007-09-10 16:17:57 C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.AutoRemoval\2.0.2783.40292__90ba9c70f846762e\CLI.Component.Autoremoval.DLL
----a-w 20,480 2007-09-10 16:18:03 C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Client.Shared\2.0.2729.30185__90ba9c70f846762e\CLI.Component.Client.Shared.DLL
----a-w 40,960 2007-09-10 16:17:57 C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Client.Shared.Private\2.0.2729.30205__90ba9c70f846762e\CLI.Component.Client.Shared.Private.DLL
----a-w 1,507,328 2007-09-10 16:17:57 C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard\2.0.2783.40037__90ba9c70f846762e\CLI.Component.Dashboard.DLL
----a-w 204,800 2007-09-10 16:17:58 C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard.HotKeyManager\2.0.2783.40152__90ba9c70f846762e\CLI.Component.Dashboard.HotKeyManager.DLL
----a-w 65,536 2007-09-10 16:17:58 C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard.HotKeyManager.Resources\2.0.2783.40159__90ba9c70f846762e\CLI.Component.Dashboard.HotKeyManager.Resources.DLL
----a-w 208,896 2007-09-10 16:17:58 C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard.ProfileManager\2.0.2783.40160__90ba9c70f846762e\CLI.Component.Dashboard.ProfileManager.DLL
----a-w 65,536 2007-09-10 16:17:58 C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard.ProfileManager.Resources\2.0.2783.40166__90ba9c70f846762e\CLI.Component.Dashboard.ProfileManager.Resources.DLL
----a-w 20,480 2007-09-10 16:18:03 C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared\2.0.2729.30199__90ba9c70f846762e\CLI.Component.Dashboard.Shared.DLL
----a-w 20,480 2007-09-10 16:17:58 C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared.Private\2.0.2729.30214__90ba9c70f846762e\CLI.Component.Dashboard.Shared.Private.DLL
----a-w 557,056 2007-09-10 16:17:58 C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Eeu\2.0.2783.40286__90ba9c70f846762e\CLI.Component.Eeu.DLL
----a-w 57,344 2007-09-10 16:17:58 C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Erecord\2.0.2783.40131__90ba9c70f846762e\CLI.Component.Erecord.DLL
----a-w 20,480 2007-09-10 16:17:58 C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Help\2.0.2783.40312__90ba9c70f846762e\CLI.Component.Help.DLL
----a-w 20,480 2007-09-10 16:17:59 C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Icomponent\2.0.2783.40084__90ba9c70f846762e\CLI.Component.Icomponent.DLL
----a-w 491,520 2007-09-10 16:17:59 C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Launchpad\2.0.2783.40370__90ba9c70f846762e\CLI.Component.Launchpad.DLL
----a-w 20,480 2007-09-10 16:17:59 C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Load\2.0.2783.40312__90ba9c70f846762e\CLI.Component.Load.DLL
----a-w 69,632 2007-09-10 16:17:59 C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Runtime\2.0.2783.40021__90ba9c70f846762e\CLI.Component.Runtime.DLL
----a-w 6,656 2007-09-10 16:18:00 C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Runtime.Extension.EEU\2.0.2783.40019__90ba9c70f846762e\CLI.Component.Runtime.Extension.EEU.DLL
----a-w 16,384 2007-09-10 16:18:03 C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Runtime.Shared\2.0.2729.30203__90ba9c70f846762e\CLI.Component.Runtime.Shared.DLL
----a-w 40,960 2007-09-10 16:17:59 C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Runtime.Shared.Private\2.0.2729.30209__90ba9c70f846762e\CLI.Component.Runtime.Shared.Private.DLL
----a-w 49,152 2007-09-10 16:17:59 C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.SkinFactory\2.0.2783.40022__90ba9c70f846762e\CLI.Component.SkinFactory.DLL
----a-w 446,464 2007-09-10 16:17:59 C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Systemtray\2.0.2783.40305__90ba9c70f846762e\CLI.Component.Systemtray.DLL
----a-w 471,040 2007-09-10 16:17:59 C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Wizard\2.0.2783.40058__90ba9c70f846762e\CLI.Component.Wizard.DLL
----a-w 20,480 2007-09-10 16:18:03 C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Wizard.Shared\2.0.2729.30211__90ba9c70f846762e\CLI.Component.Wizard.Shared.DLL
----a-w 24,576 2007-09-10 16:18:00 C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Wizard.Shared.Private\2.0.2729.30258__90ba9c70f846762e\CLI.Component.Wizard.Shared.Private.DLL
----a-w 49,152 2007-09-10 16:18:03 C:\WINDOWS\assembly\GAC_MSIL\CLI.Foundation\2.0.2729.30178__90ba9c70f846762e\CLI.Foundation.DLL
----a-w 40,960 2007-09-10 16:18:00 C:\WINDOWS\assembly\GAC_MSIL\CLI.Foundation.Private\2.0.2729.30193__90ba9c70f846762e\CLI.Foundation.Private.DLL
----a-w 28,672 2007-09-10 16:18:04 C:\WINDOWS\assembly\GAC_MSIL\CLI.Foundation.XManifest\2.0.2729.30313__90ba9c70f846762e\CLI.Foundation.XManifest.DLL
----a-w 20,480 2007-09-10 16:18:00 C:\WINDOWS\assembly\GAC_MSIL\CLI.Implementation\2.0.2783.40018__90ba9c70f846762e\CLI.Implementation.DLL
----a-w 16,384 2007-09-10 16:18:04 C:\WINDOWS\assembly\GAC_MSIL\DEM.Foundation\2.0.2573.17684__90ba9c70f846762e\DEM.Foundation.DLL
----a-w 16,384 2007-09-10 16:18:04 C:\WINDOWS\assembly\GAC_MSIL\DEM.Graphics\2.0.2729.30256__90ba9c70f846762e\DEM.Graphics.DLL
----a-w 45,056 2007-09-10 16:18:04 C:\WINDOWS\assembly\GAC_MSIL\DEM.Graphics.I0601\2.0.2573.17685__90ba9c70f846762e\DEM.Graphics.I0601.DLL
----a-w 16,384 2007-09-10 16:18:04 C:\WINDOWS\assembly\GAC_MSIL\DEM.OS\2.0.2729.30242__90ba9c70f846762e\DEM.OS.DLL
----a-w 20,480 2007-09-10 16:18:04 C:\WINDOWS\assembly\GAC_MSIL\DEM.OS.I0602\2.0.2729.30259__90ba9c70f846762e\DEM.OS.I0602.DLL
----a-w 131,072 2007-09-10 16:18:05 C:\WINDOWS\assembly\GAC_MSIL\Interop.SHDocVw\1.1.0.0__90ba9c70f846762e\Interop.SHDocVw.DLL
----a-w 86,016 2007-09-10 16:18:00 C:\WINDOWS\assembly\GAC_MSIL\LOG\2.0.2783.40313__90ba9c70f846762e\LOG.EXE
----a-w 32,768 2007-09-10 16:18:04 C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation\2.0.2729.30174__90ba9c70f846762e\LOG.Foundation.DLL
----a-w 61,440 2007-09-10 16:18:00 C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation.Implementation\2.0.2783.40312__90ba9c70f846762e\LOG.Foundation.Implementation.DLL
----a-w 20,480 2007-09-10 16:18:00 C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation.Implementation.Private\2.0.2729.30211__90ba9c70f846762e\LOG.Foundation.Implementation.Private.DLL
----a-w 32,768 2007-09-10 16:18:00 C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation.Private\2.0.2729.30188__90ba9c70f846762e\LOG.Foundation.Private.DLL
----a-w 49,152 2007-09-10 16:18:04 C:\WINDOWS\assembly\GAC_MSIL\MOM\2.0.0.0__90ba9c70f846762e\MOM.EXE
----a-w 16,384 2007-09-10 16:18:04 C:\WINDOWS\assembly\GAC_MSIL\MOM.Foundation\2.0.2729.30207__90ba9c70f846762e\MOM.Foundation.DLL
----a-w 102,400 2007-09-10 16:18:00 C:\WINDOWS\assembly\GAC_MSIL\MOM.Implementation\2.0.2783.40314__90ba9c70f846762e\MOM.Implementation.DLL
----a-w 24,576 2007-09-10 16:18:04 C:\WINDOWS\assembly\GAC_MSIL\NEWAEM.Foundation\2.0.2729.30184__90ba9c70f846762e\NEWAEM.Foundation.DLL
----a-w 28,672 2007-09-10 16:18:00 C:\WINDOWS\assembly\GAC_MSIL\PCKGHLP.Foundation.Implementation\2.0.2783.40357__90ba9c70f846762e\PCKGHLP.Foundation.Implementation.DLL
----a-w 16,384 2007-09-10 16:18:00 C:\WINDOWS\assembly\GAC_MSIL\PCKGHLP.Foundation.Private\2.0.2729.30261__90ba9c70f846762e\PCKGHLP.Foundation.Private.DLL
----a-r 10,134 2007-09-10 16:17:45 C:\WINDOWS\Installer\{0E2DAB2F-5A2F-8F65-1006-30E94506B15D}\ARPPRODUCTICON.exe
----a-r 10,134 2007-09-10 16:17:30 C:\WINDOWS\Installer\{269D9176-CEF5-81BE-D204-B90ACA0ECD79}\ARPPRODUCTICON.exe
----a-r 10,134 2007-09-10 16:17:37 C:\WINDOWS\Installer\{393C1150-6EBF-D1DA-BDC2-3E1D1D772B44}\ARPPRODUCTICON.exe
----a-r 10,134 2007-09-10 16:17:43 C:\WINDOWS\Installer\{57F7C02B-D36E-3F81-239B-FD031984ADFE}\ARPPRODUCTICON.exe
----a-r 10,134 2007-09-10 16:17:26 C:\WINDOWS\Installer\{69580770-C77E-67FE-014F-BE02DF5D8A4F}\ARPPRODUCTICON.exe
----a-r 10,134 2007-09-10 16:17:47 C:\WINDOWS\Installer\{6EACA7EA-CA28-1333-206C-C985F7F22C2F}\ARPPRODUCTICON.exe
----a-r 135,168 2007-09-12 17:00:25 C:\WINDOWS\Installer\{896D642C-7125-44F0-AC49-A23ABF82209C}\ARPPRODUCTICON.exe
----a-r 135,168 2007-09-12 17:00:25 C:\WINDOWS\Installer\{896D642C-7125-44F0-AC49-A23ABF82209C}\cdbxp.exe1_A2B8C891E8B94C26975E193A62033974.exe
----a-r 135,168 2007-09-12 17:00:25 C:\WINDOWS\Installer\{896D642C-7125-44F0-AC49-A23ABF82209C}\cdbxp.exe_A2B8C891E8B94C26975E193A62033974.exe
----a-r 69,632 2007-09-12 17:00:25 C:\WINDOWS\Installer\{896D642C-7125-44F0-AC49-A23ABF82209C}\Uninstall_CDBurnerXP_A2B8C891E8B94C26975E193A62033974.exe
----a-r 10,134 2007-09-10 16:17:55 C:\WINDOWS\Installer\{8D0049D9-265D-145D-96D7-CD5814DA7092}\ARPPRODUCTICON.exe
----a-r 9,158 2007-09-10 16:17:55 C:\WINDOWS\Installer\{8D0049D9-265D-145D-96D7-CD5814DA7092}\NewShortcut11_EAB9635D261D49BE88DDE71A7C809B2D.exe
----a-r 25,214 2007-09-12 17:31:23 C:\WINDOWS\Installer\{91C0B95B-B83A-4828-A775-BBE2DD421029}\ARPPRODUCTICON.exe
----a-r 10,134 2007-09-10 16:17:41 C:\WINDOWS\Installer\{BA9A7A5D-5976-3682-826C-CDE03A0DE33D}\ARPPRODUCTICON.exe
----a-r 10,134 2007-09-10 16:17:49 C:\WINDOWS\Installer\{D721F201-E316-0825-7D23-48C16939914F}\ARPPRODUCTICON.exe
----a-r 10,134 2007-09-10 16:17:32 C:\WINDOWS\Installer\{E07FEDF6-3E9E-2F4C-3734-15B839CC3CD3}\ARPPRODUCTICON.exe
----a-w 622,592 2004-06-02 00:24:40 C:\WINDOWS\system32\DVDProX2.dll
----a-w 1,568,768 2004-07-26 15:16:10 C:\WINDOWS\system32\imagX7.dll
----a-w 476,320 2004-07-26 15:16:10 C:\WINDOWS\system32\imagXpr7.dll
----a-w 262,144 2004-07-26 15:16:10 C:\WINDOWS\system32\imagXR7.dll
----a-w 471,040 2004-07-26 15:16:10 C:\WINDOWS\system32\imagXRA7.dll
----a-w 118,784 2000-04-03 18:05:58 C:\WINDOWS\system32\msstdfmt.dll
----a-w 94,208 2000-04-03 15:52:52 C:\WINDOWS\system32\msstkprp.dll
----a-w 95,864 2007-05-16 07:18:44 C:\WINDOWS\system32\NeroCo.dll
----a-w 364,544 2004-07-09 07:43:56 C:\WINDOWS\system32\TwnLib4.dll
----a-w 299,008 2003-10-19 13:51:16 C:\WINDOWS\system32\vbwFunctionsVB6.dll
----a-w 11,304 2007-07-03 16:43:56 C:\WINDOWS\system32\drivers\imagedrv.sys
----a-w 132,904 2007-07-03 16:43:56 C:\WINDOWS\system32\drivers\imagesrv.sys
----atw 16,384 2007-09-13 14:23:39 C:\WINDOWS\Temp\Perflib_Perfdata_5cc.dat
----a-w 82,432 2007-09-12 17:33:04 C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2R_6bd6b9abf345378f_4.1.0.0_x-ww_29c3ad6a\msxml4r.dll
----a-w 1,233,920 2007-09-12 17:33:04 C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9818.0_x-ww_8ff50c5d\msxml4.dll
.
----a-w 135,168 2007-08-17 16:07:23 C:\WINDOWS\assembly\GAC\AxInterop.MSComctlLib\2.0.0.0__90ba9c70f846762e\AxInterop.MSComctlLib.DLL
----a-w 212,992 2007-08-17 16:07:23 C:\WINDOWS\assembly\GAC\AxInterop.MSForms\2.0.0.0__90ba9c70f846762e\AxInterop.MSForms.DLL
----a-w 15,360 2007-08-17 16:07:19 C:\WINDOWS\assembly\GAC\AxInterop.WBOCXLib\1.0.0.0__90ba9c70f846762e\AxInterop.WBOCXLib.DLL
----a-w 143,360 2007-08-17 16:07:19 C:\WINDOWS\assembly\GAC\ICSharpCode.SharpZipLib\0.84.0.0__1b03e6acf1164f73\ICSharpCode.SharpZipLib.DLL
----a-w 225,280 2007-08-17 16:07:23 C:\WINDOWS\assembly\GAC\Interop.MSComctlLib\2.0.0.0__90ba9c70f846762e\Interop.MSComctlLib.DLL
----a-w 360,448 2007-08-17 16:07:23 C:\WINDOWS\assembly\GAC\Interop.MSForms\2.0.0.0__90ba9c70f846762e\Interop.MSForms.DLL
----a-w 49,152 2007-08-17 16:07:23 C:\WINDOWS\assembly\GAC\Interop.NewIWshRuntimeLibrary\1.0.0.0__90ba9c70f846762e\Interop.NewIWshRuntimeLibrary.DLL
----a-w 13,312 2007-08-17 16:07:19 C:\WINDOWS\assembly\GAC\Interop.WBOCXLib\1.0.0.0__90ba9c70f846762e\Interop.WBOCXLib.DLL
----a-w 24,576 2007-08-17 16:07:20 C:\WINDOWS\assembly\GAC_MSIL\ACE.Graphics.DisplaysManager.Shared\2.0.2573.17685__90ba9c70f846762e\ACE.Graphics.DisplaysManager.Shared.DLL
----a-w 20,480 2007-08-17 16:07:24 C:\WINDOWS\assembly\GAC_MSIL\AEM.Actions.CCAA.Shared\2.0.2729.30197__90ba9c70f846762e\AEM.Actions.CCAA.Shared.DLL
----a-w 24,576 2007-08-17 16:07:20 C:\WINDOWS\assembly\GAC_MSIL\AEM.Foundation\2.0.2729.30176__90ba9c70f846762e\AEM.Foundation.DLL
----a-w 16,384 2007-08-17 16:07:24 C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.DPPE.Shared\2.0.2729.30222__90ba9c70f846762e\AEM.Plugin.DPPE.Shared.DLL
----a-w 16,384 2007-08-17 16:07:24 C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.EEU.Shared\2.0.2729.30212__90ba9c70f846762e\AEM.Plugin.EEU.Shared.DLL
----a-w 16,384 2007-08-17 16:07:24 C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.GD.Shared\2.0.2729.30224__90ba9c70f846762e\AEM.Plugin.GD.Shared.DLL
----a-w 20,480 2007-08-17 16:07:24 C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.Hotkeys.Shared\2.0.2729.30202__90ba9c70f846762e\AEM.Plugin.Hotkeys.Shared.DLL
----a-w 16,384 2007-08-17 16:07:24 C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.Source.EEU.Shared\2.0.2729.30220__90ba9c70f846762e\AEM.Plugin.Source.EEU.Shared.DLL
----a-w 16,384 2007-08-17 16:07:24 C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.Source.GD.Shared\2.0.2729.30218__90ba9c70f846762e\AEM.Plugin.Source.GD.Shared.DLL
----a-w 16,384 2007-08-17 16:07:20 C:\WINDOWS\assembly\GAC_MSIL\AEM.Server.Shared\2.0.2729.30201__90ba9c70f846762e\AEM.Server.Shared.DLL
----a-w 20,480 2007-08-17 16:07:20 C:\WINDOWS\assembly\GAC_MSIL\AEM.UI.Shared\2.0.2729.30255__90ba9c70f846762e\AEM.UI.Shared.DLL
----a-w 20,480 2007-08-17 16:07:20 C:\WINDOWS\assembly\GAC_MSIL\APM.Foundation\2.0.2729.30208__90ba9c70f846762e\APM.Foundation.DLL
----a-w 32,768 2007-08-17 16:07:15 C:\WINDOWS\assembly\GAC_MSIL\ATICCCom\2.0.0.0__90ba9c70f846762e\ATICCCom.DLL
----a-w 6,656 2007-08-17 16:07:24 C:\WINDOWS\assembly\GAC_MSIL\atixclib\1.0.0.0__90ba9c70f846762e\atixclib.DLL
----a-w 45,056 2007-08-17 16:07:23 C:\WINDOWS\assembly\GAC_MSIL\AxInterop.SHDocVw\1.1.0.0__90ba9c70f846762e\AxInterop.SHDocVw.DLL
----a-w 49,152 2007-08-17 16:07:23 C:\WINDOWS\assembly\GAC_MSIL\CCC\2.0.0.0__90ba9c70f846762e\CCC.EXE
----a-w 45,056 2007-08-17 16:07:23 C:\WINDOWS\assembly\GAC_MSIL\CLI\2.0.0.0__90ba9c70f846762e\CLI.EXE
----a-w 20,480 2007-08-17 16:07:20 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.AForce.Graphics.Shared\2.0.2729.30217__90ba9c70f846762e\CLI.Aspect.AForce.Graphics.Shared.DLL
----a-w 24,576 2007-08-17 16:07:20 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.CustomFormats.Graphics.Shared\2.0.2729.30212__90ba9c70f846762e\CLI.Aspect.CustomFormats.Graphics.Shared.DLL
----a-w 20,480 2007-08-17 16:07:15 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.CustomFormatSelection.Graphics.Dashboard.Shared.Private\2.0.2729.30263__90ba9c70f846762e\CLI.Aspect.CustomFormatSelection.Graphics.Dashboard.Shared.Private.DLL
----a-w 53,248 2007-08-17 16:07:20 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Shared\2.0.2729.30226__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Shared.DLL
----a-w 40,960 2007-08-17 16:07:20 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Shared\2.0.2729.30230__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Shared.DLL
----a-w 40,960 2007-08-17 16:07:20 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Shared\2.0.2729.30225__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Shared.DLL
----a-w 28,672 2007-08-17 16:07:20 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Shared\2.0.2729.30259__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Shared.DLL
----a-w 32,768 2007-08-17 16:07:20 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Shared\2.0.2729.30213__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Shared.DLL
----a-w 65,536 2007-08-17 16:07:20 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Shared\2.0.2729.30231__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Shared.DLL
----a-w 28,672 2007-08-17 16:07:20 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Shared\2.0.2729.30219__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Shared.DLL
----a-w 24,576 2007-08-17 16:07:20 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Shared\2.0.2729.30228__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Shared.DLL
----a-w 20,480 2007-08-17 16:07:20 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Shared\2.0.2729.30216__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Shared.DLL
----a-w 53,248 2007-08-17 16:07:20 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Shared\2.0.2729.30219__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Shared.DLL
----a-w 20,480 2007-08-17 16:07:21 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.IntegratedUMAFrameBuffer.Graphics.Shared\2.0.2729.30221__90ba9c70f846762e\CLI.Aspect.IntegratedUMAFrameBuffer.Graphics.Shared.DLL
----a-w 45,056 2007-08-17 16:07:21 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Shared\2.0.2729.30227__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Shared.DLL
----a-w 24,576 2007-08-17 16:07:21 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MultiVPU.Graphics.Shared\2.0.2729.30224__90ba9c70f846762e\CLI.Aspect.MultiVPU.Graphics.Shared.DLL
----a-w 24,576 2007-08-17 16:07:21 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MultiVPU2.Graphics.Shared\2.0.2729.30227__90ba9c70f846762e\CLI.Aspect.MultiVPU2.Graphics.Shared.DLL
----a-w 24,576 2007-08-17 16:07:21 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MultiVPU3.Graphics.Shared\2.0.2729.30262__90ba9c70f846762e\CLI.Aspect.MultiVPU3.Graphics.Shared.DLL
----a-w 24,576 2007-08-17 16:07:21 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.OverDrive2.Graphics.Shared\2.0.2729.30261__90ba9c70f846762e\CLI.Aspect.OverDrive2.Graphics.Shared.DLL
----a-w 24,576 2007-08-17 16:07:21 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.OverDrive3.Graphics.Shared\2.0.2729.30223__90ba9c70f846762e\CLI.Aspect.OverDrive3.Graphics.Shared.DLL
----a-w 57,344 2007-08-17 16:07:21 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.OverDrive5.Graphics.Shared\2.0.2729.30255__90ba9c70f846762e\CLI.Aspect.OverDrive5.Graphics.Shared.DLL
----a-w 28,672 2007-08-17 16:07:21 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.PowerPlay3.Graphics.Shared\2.0.2729.30229__90ba9c70f846762e\CLI.Aspect.PowerPlay3.Graphics.Shared.DLL
----a-w 28,672 2007-08-17 16:07:21 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.PowerPlay4.Graphics.Shared\2.0.2729.30264__90ba9c70f846762e\CLI.Aspect.PowerPlay4.Graphics.Shared.DLL
----a-w 24,576 2007-08-17 16:07:21 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Shared\2.0.2729.30262__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Shared.DLL
----a-w 24,576 2007-08-17 16:07:21 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.PowerXpress.Graphics.Shared\2.0.2729.30222__90ba9c70f846762e\CLI.Aspect.PowerXpress.Graphics.Shared.DLL
----a-w 49,152 2007-08-17 16:07:21 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Shared\2.0.2729.30231__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Shared.DLL
----a-w 24,576 2007-08-17 16:07:21 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.SmartGart.Graphics.Shared\2.0.2729.30221__90ba9c70f846762e\CLI.Aspect.SmartGart.Graphics.Shared.DLL
----a-w 40,960 2007-08-17 16:07:21 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Shared\2.0.2729.30264__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Shared.DLL
----a-w 24,576 2007-08-17 16:07:21 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.VeryLargeDesktop.Graphics.Shared\2.0.2729.30228__90ba9c70f846762e\CLI.Aspect.VeryLargeDesktop.Graphics.Shared.DLL
----a-w 20,480 2007-08-17 16:07:22 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.VPURecover.Graphics.Shared\2.0.2729.30217__90ba9c70f846762e\CLI.Aspect.VPURecover.Graphics.Shared.DLL
----a-w 28,672 2007-08-17 16:07:22 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.WorkstationConfig.Graphics.Shared\2.0.2729.30229__90ba9c70f846762e\CLI.Aspect.WorkstationConfig.Graphics.Shared.DLL
----a-w 16,384 2007-08-17 16:07:22 C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard.Shared\2.0.2729.30241__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.Shared.DLL
----a-w 20,480 2007-08-17 16:07:15 C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime.Shared.Private\2.0.2729.30243__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.Shared.Private.DLL
----a-w 49,152 2007-08-17 16:07:22 C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Shared\2.0.2729.30199__90ba9c70f846762e\CLI.Caste.Graphics.Shared.DLL
----a-w 16,384 2007-08-17 16:07:22 C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard.Shared\2.0.2729.30216__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.Shared.DLL
----a-w 20,480 2007-08-17 16:07:22 C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Client.Shared\2.0.2729.30185__90ba9c70f846762e\CLI.Component.Client.Shared.DLL
----a-w 40,960 2007-08-17 16:07:16 C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Client.Shared.Private\2.0.2729.30205__90ba9c70f846762e\CLI.Component.Client.Shared.Private.DLL
----a-w 20,480 2007-08-17 16:07:22 C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared\2.0.2729.30199__90ba9c70f846762e\CLI.Component.Dashboard.Shared.DLL
----a-w 20,480 2007-08-17 16:07:17 C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared.Private\2.0.2729.30214__90ba9c70f846762e\CLI.Component.Dashboard.Shared.Private.DLL
----a-w 16,384 2007-08-17 16:07:22 C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Runtime.Shared\2.0.2729.30203__90ba9c70f846762e\CLI.Component.Runtime.Shared.DLL
----a-w 40,960 2007-08-17 16:07:18 C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Runtime.Shared.Private\2.0.2729.30209__90ba9c70f846762e\CLI.Component.Runtime.Shared.Private.DLL
----a-w 20,480 2007-08-17 16:07:22 C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Wizard.Shared\2.0.2729.30211__90ba9c70f846762e\CLI.Component.Wizard.Shared.DLL
----a-w 24,576 2007-08-17 16:07:18 C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Wizard.Shared.Private\2.0.2729.30258__90ba9c70f846762e\CLI.Component.Wizard.Shared.Private.DLL
----a-w 49,152 2007-08-17 16:07:22 C:\WINDOWS\assembly\GAC_MSIL\CLI.Foundation\2.0.2729.30178__90ba9c70f846762e\CLI.Foundation.DLL
----a-w 40,960 2007-08-17 16:07:18 C:\WINDOWS\assembly\GAC_MSIL\CLI.Foundation.Private\2.0.2729.30193__90ba9c70f846762e\CLI.Foundation.Private.DLL
----a-w 28,672 2007-08-17 16:07:22 C:\WINDOWS\assembly\GAC_MSIL\CLI.Foundation.XManifest\2.0.2729.30313__90ba9c70f846762e\CLI.Foundation.XManifest.DLL
----a-w 16,384 2007-08-17 16:07:22 C:\WINDOWS\assembly\GAC_MSIL\DEM.Foundation\2.0.2573.17684__90ba9c70f846762e\DEM.Foundation.DLL
----a-w 16,384 2007-08-17 16:07:22 C:\WINDOWS\assembly\GAC_MSIL\DEM.Graphics\2.0.2729.30256__90ba9c70f846762e\DEM.Graphics.DLL
----a-w 45,056 2007-08-17 16:07:22 C:\WINDOWS\assembly\GAC_MSIL\DEM.Graphics.I0601\2.0.2573.17685__90ba9c70f846762e\DEM.Graphics.I0601.DLL
----a-w 16,384 2007-08-17 16:07:22 C:\WINDOWS\assembly\GAC_MSIL\DEM.OS\2.0.2729.30242__90ba9c70f846762e\DEM.OS.DLL
----a-w 20,480 2007-08-17 16:07:22 C:\WINDOWS\assembly\GAC_MSIL\DEM.OS.I0602\2.0.2729.30259__90ba9c70f846762e\DEM.OS.I0602.DLL
----a-w 131,072 2007-08-17 16:07:24 C:\WINDOWS\assembly\GAC_MSIL\Interop.SHDocVw\1.1.0.0__90ba9c70f846762e\Interop.SHDocVw.DLL
----a-w 32,768 2007-08-17 16:07:22 C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation\2.0.2729.30174__90ba9c70f846762e\LOG.Foundation.DLL
----a-w 20,480 2007-08-17 16:07:19 C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation.Implementation.Private\2.0.2729.30211__90ba9c70f846762e\LOG.Foundation.Implementation.Private.DLL
----a-w 32,768 2007-08-17 16:07:19 C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation.Private\2.0.2729.30188__90ba9c70f846762e\LOG.Foundation.Private.DLL
----a-w 49,152 2007-08-17 16:07:23 C:\WINDOWS\assembly\GAC_MSIL\MOM\2.0.0.0__90ba9c70f846762e\MOM.EXE
----a-w 16,384 2007-08-17 16:07:23 C:\WINDOWS\assembly\GAC_MSIL\MOM.Foundation\2.0.2729.30207__90ba9c70f846762e\MOM.Foundation.DLL
----a-w 24,576 2007-08-17 16:07:23 C:\WINDOWS\assembly\GAC_MSIL\NEWAEM.Foundation\2.0.2729.30184__90ba9c70f846762e\NEWAEM.Foundation.DLL
----a-w 16,384 2007-08-17 16:07:19 C:\WINDOWS\assembly\GAC_MSIL\PCKGHLP.Foundation.Private\2.0.2729.30261__90ba9c70f846762e\PCKGHLP.Foundation.Private.DLL
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.

*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"High Definition Audio Property Page Shortcut"="HDAShCut.exe" [2004-10-27 15:21 C:\WINDOWS\system32\HdAShCut.exe]
"SoundMAXPnP"="C:\Program Files\Analog Devices\Core\smax4pnp.exe" [2005-05-20 03:11]
"SoundMAX"="C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" [2005-09-07 15:35]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-04-30 17:42]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-07-29 16:58]
"StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 12:35]
"NeroFilterCheck"="C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-01 15:57]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\ctfmon.exe" [2003-04-16 14:00]
"ICQ"="C:\Program Files\ICQ6\ICQ.exe" [2007-08-08 17:03]
"DAEMON Tools"="C:\Program Files\DAEMON Tools\daemon.exe" [2007-08-22 14:06]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-06-27 19:03]

C:\DOCUME~1\ALLUSE~1\NABDKA~1\Programy\POSPUT~1\
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe [2006-10-23 02:48:00]
Adobe Reader Synchronizer.lnk - C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe [2006-10-23 01:01:00]

R1 ATITool;ATITool Overclocking Utility;C:\WINDOWS\System32\DRIVERS\ATITool.sys
R3 AEAudioService;AEAudio Service;C:\WINDOWS\System32\drivers\AEAudio.sys
R3 PSched;Plánovač paketů technologie QoS;C:\WINDOWS\System32\DRIVERS\psched.sys
R3 SenFiltService;SenFilt Service;C:\WINDOWS\System32\drivers\Senfilt.sys

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
Schedule

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{E80E0706-D0C0-DF53-B7E4-CC62C00195D0}]
C:\WINDOWS\system32\rundl32.exe
.
**************************************************************************

catchme 0.3.1061 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-09-13 20:54:56
Windows 5.1.2600 Service Pack 1 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2007-09-13 20:55:25
C:\ComboFix-quarantined-files.txt ... 2007-09-13 20:55
C:\ComboFix2.txt ... 2007-09-12 21:18
C:\ComboFix3.txt ... 2007-09-09 16:31
.
--- E O F ---

Příspěvekod **fredik** » 14 zář 2007 20:08

Vytvoř si nový CFScript a tentokrát vlož do něho toto:

Kód: Vybrat vše

Registry::
[-HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{E80E0706-D0C0-DF53-B7E4-CC62C00195D0}]

a vlož sem pak log z Combofixu.

dragon741 · Příspěvekod **dragon741** » 21 zář 2007 15:14

ComboFix 07-09-21.2 - "petr" 2007-09-21 15:08:19.4 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.1.1250.1.1029.18.1087 [GMT 2:00]
Command switches used :: C:\Documents and Settings\petr\Dokumenty\CFScript.txt
* Created a new restore point
.
Rootkit driver pe386 is present. ... attempting disinfection
Rootkit driver msguard is present. ... attempting disinfection
Rootkit driver lzx32 is present. ... attempting disinfection
Rootkit driver huy32 is present. ... attempting disinfection
Rootkit driver xpdt is present. ... attempting disinfection
Rootkit driver pe386 is still present. A rootkit scan is required
Rootkit driver msguard is still present. A rootkit scan is required
Rootkit driver lzx32 is still present. A rootkit scan is required
Rootkit driver huy32 is still present. A rootkit scan is required
Rootkit driver xpdt is still present. A rootkit scan is required

((((((((((((((((((((((((( Files Created from 2007-08-21 to 2007-09-21 )))))))))))))))))))))))))))))))
.

2007-09-17 19:55 25,544 --a------ C:\WINDOWS\system32\drivers\hamachi.sys
2007-09-17 19:30 <DIR> d-------- C:\Program Files\Electronic Arts
2007-09-17 18:29 <DIR> d-------- C:\Nov slo§ka
2007-09-14 15:15 <DIR> d-------- C:\coh
2007-09-12 22:12 <DIR> d-------- C:\Intel
2007-09-12 19:31 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\Ahead
2007-09-12 19:29 <DIR> d-------- C:\Program Files\Nero
2007-09-12 19:29 <DIR> d-------- C:\Program Files\Common Files\Ahead
2007-09-12 19:29 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\Nero
2007-09-12 19:00 <DIR> d-------- C:\Program Files\CDBurnerXP Pro 3
2007-09-12 16:42 <DIR> d---s---- C:\DOCUME~1\petr\UserData
2007-09-10 18:27 21,811,216 --a------ C:\7-7_xp32-64_ccc_asian_49710.exe
2007-09-10 18:27 15,149,280 --a------ C:\7-7_xp32_dd_49709.exe
2007-09-10 18:26 4,155,184 --a------ C:\7-7_xp32-64_wdm_49709.exe
2007-09-10 18:21 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\ATI
2007-09-10 18:18 <DIR> d-------- C:\Program Files\Steam
2007-09-10 17:33 2,720,456 --a------ C:\ccsetup141.exe
2007-09-10 17:33 <DIR> d-------- C:\Program Files\CCleaner
2007-09-09 16:26 51,200 --a------ C:\WINDOWS\NirCmd.exe
2007-09-09 16:15 <DIR> dr-h----- C:\DOCUME~1\ADMINI~1\Data aplikacˇ
2007-09-09 16:15 <DIR> dr------- C:\DOCUME~1\ADMINI~1\Nabˇdka Start
2007-09-09 16:15 <DIR> d--h----- C:\DOCUME~1\ADMINI~1\ćablony
2007-09-09 16:15 <DIR> d--h----- C:\DOCUME~1\ADMINI~1\Okolnˇ tisk rny
2007-09-09 16:15 <DIR> d--h----- C:\DOCUME~1\ADMINI~1\Okolnˇ sˇś
2007-09-09 16:15 <DIR> d-------- C:\WINDOWS\ERUNT
2007-09-09 16:15 <DIR> d-------- C:\DOCUME~1\ADMINI~1\Plocha
2007-09-09 16:15 <DIR> d-------- C:\DOCUME~1\ADMINI~1\Oblˇben‚ polo§ky
2007-09-09 16:15 <DIR> d-------- C:\DOCUME~1\ADMINI~1\Dokumenty
2007-09-09 16:06 1,484,625 --a------ C:\ComboFix.exe
2007-09-09 16:05 1,073,147 --a------ C:\SDFix.exe
2007-09-09 15:40 <DIR> d-------- C:\WINDOWS\LogFiles
2007-09-08 01:24 <DIR> d-a------ C:\WINDOWS\zts2.exe
2007-09-08 01:24 <DIR> d-a------ C:\WINDOWS\system32\vcmgcd32.dll
2007-09-08 01:24 <DIR> d-a------ C:\WINDOWS\system32\iifgfgf.dll
2007-09-08 01:24 <DIR> d-a------ C:\WINDOWS\rundll16.exe
2007-09-08 01:24 <DIR> d-a------ C:\WINDOWS\rundl132.dll
2007-09-08 01:24 <DIR> d-a------ C:\WINDOWS\logo1_.exe
2007-09-08 01:23 135,680 --a------ C:\WINDOWS\R.COM
2007-09-08 01:23 130,048 --a------ C:\WINDOWS\system32\T.COM
2007-09-08 01:11 <DIR> d-------- C:\Program Files\Trend Micro
2007-09-08 00:50 <DIR> d-------- C:\!KillBox
2007-09-08 00:39 24,576 --a------ C:\WINDOWS\system32\xpsp1hfm.exe
2007-09-07 15:42 <DIR> d-------- C:\Program Files\QIP
2007-08-30 14:37 <DIR> d-------- C:\Program Files\Wanadoo Edition
2007-08-30 13:56 306,688 --a------ C:\WINDOWS\IsUninst.exe
2007-08-30 13:56 <DIR> d-------- C:\Program Files\Xplosiv
2007-08-29 22:49 <DIR> d-------- C:\Program Files\RADVideo
2007-08-28 19:22 <DIR> d-------- C:\Games
2007-08-28 15:46 <DIR> d-------- C:\Program Files\THQ
2007-08-26 18:56 <DIR> d-------- C:\Program Files\Lavasoft
2007-08-26 18:56 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard
2007-08-26 18:56 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\Lavasoft
2007-08-26 13:35 33 --a------ C:\WINDOWS\Bioshock Patcher.bat
2007-08-26 13:35 2,403,096 --a------ C:\WINDOWS\infinst_autol.exe
2007-08-26 12:18 <DIR> d-------- C:\Program Files\DAEMON Tools
2007-08-25 21:58 <DIR> d-------- C:\Program Files\Hamachi
2007-08-21 12:07 107,888 --a------ C:\WINDOWS\system32\CmdLineExt.dll
2007-08-21 11:54 15,128 --a------ C:\WINDOWS\system32\x3daudio1_1.dll
2007-08-21 11:50 <DIR> d-------- C:\Program Files\2K Games

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-09-19 18:38 --------- d-------- C:\Program Files\ICQToolbar
2007-09-10 18:27 --------- d--h----- C:\Program Files\InstallShield Installation Information
2007-09-10 18:17 --------- d-------- C:\Program Files\ATI Technologies
2007-09-09 16:10 --------- d-a------ C:\DOCUME~1\ALLUSE~1\DATAAP~1\TEMP
2007-09-08 01:05 --------- d-------- C:\Program Files\SpeedFan
2007-09-08 01:05 --------- d-------- C:\Program Files\ICQ6
2007-09-02 18:52 --------- d-------- C:\Program Files\Alwil Software
2007-08-26 12:15 685816 --a------ C:\WINDOWS\system32\drivers\sptd.sys
2007-08-22 17:20 163644 --a------ C:\WINDOWS\system32\drivers\secdrv.sys
2007-08-20 23:54 --------- d--h----- C:\Program Files\CanonBJ
2007-08-20 23:54 --------- d--h----- C:\DOCUME~1\ALLUSE~1\DATAAP~1\CanonBJ
2007-08-16 23:19 --------- d-------- C:\Program Files\Swf2Avi
2007-08-16 11:48 --------- d-------- C:\Program Files\AMD
2007-08-16 10:47 --------- d-------- C:\Program Files\Common Files\ATI Technologies
2007-08-15 18:52 --------- d-------- C:\Program Files\Lavalys
2007-08-15 18:31 47360 --a------ C:\WINDOWS\system32\drivers\Pcouffin.sys
2007-08-15 18:31 --------- d-------- C:\Program Files\vso
2007-08-15 13:43 --------- d-------- C:\Program Files\Futuremark
2007-08-14 12:51 --------- d-------- C:\Program Files\ATITool
2007-08-13 15:30 --------- d-------- C:\Program Files\CAPCOM
2007-07-30 22:01 --------- d-------- C:\Program Files\Opera
2007-07-29 21:57 --------- d-------- C:\Program Files\Webteh
2007-07-29 17:59 --------- d-------- C:\Program Files\BitSpirit
2007-07-29 17:57 --------- d-------- C:\Program Files\uTorrent
2007-07-29 16:58 --------- d-------- C:\Program Files\QuickTime
2007-07-29 16:58 --------- d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\QuickTime
2007-07-29 16:55 --------- d-------- C:\Program Files\Total Player
2007-07-27 18:37 --------- d-------- C:\Program Files\SEGA
2007-07-27 17:32 --------- d-------- C:\Program Files\Common Files\InstallShield
2007-07-27 17:30 --------- d-------- C:\Program Files\Analog Devices
2007-07-27 17:28 --------- d-------- C:\Program Files\VIA
2007-07-27 17:22 --------- d-------- C:\Program Files\microsoft frontpage
2007-07-20 00:57 267112 --a------ C:\WINDOWS\system32\xactengine2_9.dll
2007-07-19 18:14 444776 --a------ C:\WINDOWS\system32\d3dx10_35.dll
2007-07-19 18:14 3727720 --a------ C:\WINDOWS\system32\d3dx9_35.dll
2007-07-19 18:14 1358192 --a------ C:\WINDOWS\system32\D3DCompiler_35.dll
2007-07-12 09:12 81920 --a------ C:\WINDOWS\system32\frapsvid.dll
2007-06-29 21:05 520192 --------- C:\WINDOWS\system32\ati2sgag.exe
2007-06-27 19:05 972072 --a------ C:\WINDOWS\UNNeroMediaHome.exe
2007-06-27 03:59 344064 --a------ C:\WINDOWS\system32\ATIDEMGX.dll
2007-06-27 03:58 269312 --a------ C:\WINDOWS\system32\ati2dvag.dll
2007-06-27 03:56 307200 --a------ C:\WINDOWS\system32\atiiiexx.dll
2007-06-27 03:51 26112 --a------ C:\WINDOWS\system32\Ati2mdxx.exe
2007-06-27 03:51 143360 --a------ C:\WINDOWS\system32\atipdlxx.dll
2007-06-27 03:51 122880 --a------ C:\WINDOWS\system32\Oemdspif.dll
2007-06-27 03:50 43520 --a------ C:\WINDOWS\system32\ati2edxx.dll
2007-06-27 03:50 118784 --a------ C:\WINDOWS\system32\ati2evxx.dll
2007-06-27 03:49 483328 --a------ C:\WINDOWS\system32\ati2evxx.exe
2007-06-27 03:48 53248 --a------ C:\WINDOWS\system32\ATIDDC.DLL
2007-06-27 03:44 8232960 --a------ C:\WINDOWS\system32\atioglx2.dll
2007-06-27 03:41 2940992 --a------ C:\WINDOWS\system32\ati3duag.dll
2007-06-27 03:31 1519744 --a------ C:\WINDOWS\system32\ativvaxx.dll
2007-06-27 03:19 5435392 --a------ C:\WINDOWS\system32\atioglxx.dll
2007-06-27 03:17 266240 --a------ C:\WINDOWS\system32\atikvmag.dll
2007-06-27 03:16 17408 --a------ C:\WINDOWS\system32\atitvo32.dll
2007-06-27 03:14 176128 --a------ C:\WINDOWS\system32\atiok3x2.dll
2007-06-27 03:10 376832 --a------ C:\WINDOWS\system32\ati2cqag.dll
2007-06-26 14:12 972072 --a------ C:\WINDOWS\UNNeroVision.exe
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.

*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"@"="" []
"High Definition Audio Property Page Shortcut"="HDAShCut.exe" [2004-10-27 15:21 C:\WINDOWS\system32\HdAShCut.exe]
"SoundMAXPnP"="C:\Program Files\Analog Devices\Core\smax4pnp.exe" [2005-05-20 03:11]
"SoundMAX"="C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" [2005-09-07 15:35]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-04-30 17:42]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-07-29 16:58]
"StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 12:35]
"NeroFilterCheck"="C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-01 15:57]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\ctfmon.exe" [2003-04-16 14:00]
"ICQ"="C:\Program Files\ICQ6\ICQ.exe" [2007-08-08 17:03]
"DAEMON Tools"="C:\Program Files\DAEMON Tools\daemon.exe" [2007-08-22 14:06]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-06-27 19:03]

C:\DOCUME~1\ALLUSE~1\NABDKA~1\Programy\POSPUT~1\
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe [2006-10-23 02:48:00]
Adobe Reader Synchronizer.lnk - C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe [2006-10-23 01:01:00]

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
Schedule

.
**************************************************************************

catchme 0.3.1061 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-09-21 15:13:10
Windows 5.1.2600 Service Pack 1 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2007-09-21 15:14:16 - machine was rebooted
C:\ComboFix-quarantined-files.txt ... 2007-09-21 15:13
C:\ComboFix2.txt ... 2007-09-13 20:55
C:\ComboFix3.txt ... 2007-09-12 21:18
.
--- E O F ---

Prosim o kontrolu logu

Prosim o kontrolu logu

Kdo je online