دويتو غريب
زيزوومى مميز
- إنضم
- 25 أغسطس 2008
- المشاركات
- 528
- مستوى التفاعل
- 0
- النقاط
- 520
- الإقامة
- يبي
- الموقع الالكتروني
- www,algrabiya.net
غير متصل
هذا تقرير كومبوفيكس
ComboFix 09-04-01.01 - user 03/08/2009 13:43:08.4 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1256.1.1025.18.991.778 [GMT 3:00]
Running from: c:\documents and settings\user\سطح المكتب\ComboFix.exe
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.
((((((((((((((((((((((((( Files Created from 2009-03-01 to 2009-04-01 )))))))))))))))))))))))))))))))
.
No new files created in this timespan
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-03-07 22:47 90,112 ----a-w c:\windows\DUMP4cf7.tmp
2009-03-07 22:46 90,112 ----a-w c:\windows\DUMP5227.tmp
2009-03-07 21:28 --------- d-----w c:\documents and settings\user\Application Data\CyberScrub
2009-03-07 21:27 --------- d-----w c:\documents and settings\user\Application Data\cleaner
2009-03-07 20:45 --------- d-----w c:\program files\Common Files\Wise Installation Wizard
2009-03-07 16:18 --------- d-----w c:\program files\LeapFTP
2009-03-06 22:30 --------- d-----w c:\documents and settings\user\Application Data\vlc
2009-03-06 22:30 --------- d-----w c:\documents and settings\user\Application Data\Media Player Classic
2009-03-02 21:15 --------- d-----w c:\documents and settings\user\Application Data\Thinstall
2009-03-02 17:20 --------- d-----w c:\program files\Common Files\Adobe
2009-03-02 17:17 --------- d--h--w c:\program files\InstallShield Installation Information
2009-03-02 17:17 --------- d-----w c:\program files\Common Files\InstallShield
2009-03-02 17:13 --------- d-----w c:\program files\Google
2009-03-02 15:31 --------- d-----w c:\program files\SMPlayer
2009-03-02 15:30 --------- d-----w c:\program files\VideoLAN
2009-03-02 15:28 --------- d-----w c:\program files\Alwil Software
2009-03-02 15:24 --------- d-----w c:\program files\Golden Al-Wafi Translator
2009-03-02 15:23 73,216 ----a-w c:\windows\ST6UNST.EXE
2009-03-02 15:23 172,032 ------w c:\windows\Setup1.exe
2009-03-02 15:22 --------- d-----w c:\documents and settings\All Users\Application Data\Messenger Plus!
2009-03-02 15:11 155,995 ----a-w c:\windows\java\Packages\ETR7ZDFH.ZIP
2009-03-02 15:11 --------- d-----w c:\program files\Java
2009-03-02 15:10 --------- d-----w c:\program files\Common Files\Java
2009-03-02 15:09 --------- d-----w c:\program files\Messenger Plus! Live
2009-03-02 15:09 --------- d-----w c:\program files\Circle Developement
2009-03-02 15:08 --------- d-----w c:\program files\Windows Live
2009-03-02 15:06 499,712 ----a-w c:\windows\system32\msvcp71.dll
2009-03-02 15:06 348,160 ----a-w c:\windows\system32\msvcr71.dll
2009-03-02 15:06 --------- d-----w c:\program files\Real
2009-03-02 15:06 --------- d-----w c:\program files\K-Lite Codec Pack
2009-03-02 15:06 --------- d-----w c:\program files\Common Files\xing shared
2009-03-02 15:06 --------- d-----w c:\program files\Common Files\Real
2009-03-02 15:05 47,104 ------w c:\windows\AKDeInstall.exe
2009-03-02 15:05 --------- d-----w c:\program files\mpegable
2009-03-02 15:05 --------- d-----w c:\program files\GRETECH
2009-03-02 15:00 --------- d-----w c:\program files\VIA Technologies, Inc
2009-03-02 14:59 --------- d-----w c:\program files\S3
2009-03-02 14:58 --------- d-----w c:\program files\VIA
2009-03-02 14:55 --------- d-----w c:\program files\Microsoft.NET
2009-03-02 14:55 --------- d-----w c:\program files\Microsoft Works
2009-03-02 14:46 --------- d-----w c:\program files\microsoft frontpage
2009-02-09 14:15 1,846,144 ----a-w c:\windows\system32\win32k.sys
.
((((((((((((((((((((((((((((( SnapShot@Sun 03-08-2009_ 2.02.42.51 )))))))))))))))))))))))))))))))))))))))))
.
+ 2006-03-24 04:48:07 49,152 ----a-w c:\windows\$hf_mig$\KB904942\SP2QFE\wdigest.dll
+ 2005-10-12 23:08:42 14,560 ----a-w c:\windows\$hf_mig$\KB904942\spmsg.dll
+ 2005-10-12 23:08:42 213,216 ----a-w c:\windows\$hf_mig$\KB904942\spuninst.exe
+ 2005-10-12 23:08:42 22,752 ----a-w c:\windows\$hf_mig$\KB904942\update\spcustom.dll
+ 2005-10-12 23:08:43 712,928 ----a-w c:\windows\$hf_mig$\KB904942\update\update.exe
+ 2005-10-12 23:08:46 369,376 ----a-w c:\windows\$hf_mig$\KB904942\update\updspapi.dll
+ 2006-07-14 15:52:22 121,856 ----a-w c:\windows\$hf_mig$\KB915865\SP2QFE\xmllite.dll
+ 2005-10-12 23:12:25 14,048 ----a-w c:\windows\$hf_mig$\KB915865\spmsg.dll
+ 2005-10-12 23:12:26 213,216 ----a-w c:\windows\$hf_mig$\KB915865\spuninst.exe
+ 2005-10-12 23:12:25 22,752 ----a-w c:\windows\$hf_mig$\KB915865\update\spcustom.dll
+ 2005-10-12 23:12:28 716,000 ----a-w c:\windows\$hf_mig$\KB915865\update\update.exe
+ 2005-10-12 23:12:33 371,424 ----a-w c:\windows\$hf_mig$\KB915865\update\updspapi.dll
+ 2008-08-26 09:08:35 124,928 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\advpack.dll
+ 2008-08-26 09:08:35 347,136 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\dxtmsft.dll
+ 2008-08-26 09:08:35 214,528 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\dxtrans.dll
+ 2008-08-26 09:08:35 132,608 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\extmgr.dll
+ 2008-08-26 09:08:35 63,488 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\icardie.dll
+ 2008-08-25 08:43:21 70,656 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ie4uinit.exe
+ 2008-08-26 09:08:35 153,088 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieakeng.dll
+ 2008-08-26 09:08:35 230,400 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieaksie.dll
+ 2008-08-23 05:54:50 161,792 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieakui.dll
+ 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieapfltr.dat
+ 2008-08-26 09:08:35 380,928 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieapfltr.dll
+ 2008-08-26 09:08:35 388,608 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iedkcs32.dll
+ 2008-10-03 16:21:28 6,068,224 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieframe.dll
+ 2008-08-26 09:08:38 44,544 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iernonce.dll
+ 2008-08-26 09:08:38 267,776 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iertutil.dll
+ 2008-08-25 08:43:21 13,824 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieudinit.exe
+ 2008-08-23 05:56:16 635,848 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iexplore.exe
+ 2008-08-26 09:08:39 27,648 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\jsproxy.dll
+ 2008-08-26 09:08:39 459,264 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msfeeds.dll
+ 2008-08-26 09:08:39 52,224 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msfeedsbs.dll
+ 2008-08-26 09:08:41 3,594,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mshtml.dll
+ 2008-08-26 09:08:41 477,696 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mshtmled.dll
+ 2008-08-26 09:08:41 193,024 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msrating.dll
+ 2008-08-26 09:08:42 671,232 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mstime.dll
+ 2008-08-26 09:08:42 102,912 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\occache.dll
+ 2008-08-26 09:08:42 44,544 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\pngfilt.dll
+ 2008-08-26 09:08:42 105,984 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\url.dll
+ 2008-08-26 09:08:43 1,162,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\urlmon.dll
+ 2008-08-26 09:08:43 233,472 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\webcheck.dll
+ 2008-08-26 09:08:43 827,904 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\wininet.dll
+ 2007-03-06 00:57:33 14,560 ----a-w c:\windows\$hf_mig$\KB956390-IE7\spmsg.dll
+ 2007-03-06 00:57:38 213,216 ----a-w c:\windows\$hf_mig$\KB956390-IE7\spuninst.exe
+ 2007-03-06 00:57:32 22,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\spcustom.dll
+ 2007-03-06 00:57:56 712,928 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\update.exe
+ 2007-03-06 00:58:46 369,376 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\updspapi.dll
+ 2008-12-20 23:45:53 124,928 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\advpack.dll
+ 2008-12-20 23:45:54 347,136 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\dxtmsft.dll
+ 2008-12-20 23:45:54 214,528 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\dxtrans.dll
+ 2008-12-20 23:45:54 132,608 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\extmgr.dll
+ 2008-12-20 23:45:54 63,488 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\icardie.dll
+ 2008-12-19 09:41:51 70,656 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\ie4uinit.exe
+ 2008-12-20 23:45:54 153,088 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\ieakeng.dll
+ 2008-12-20 23:45:54 230,400 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\ieaksie.dll
+ 2008-12-19 05:24:02 161,792 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\ieakui.dll
+ 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\ieapfltr.dat
+ 2008-12-20 23:45:55 380,928 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\ieapfltr.dll
+ 2008-12-20 23:45:55 388,608 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\iedkcs32.dll
+ 2008-12-20 23:45:58 6,068,736 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\ieframe.dll
+ 2008-12-20 23:45:58 44,544 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\iernonce.dll
+ 2008-12-20 23:45:58 267,776 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\iertutil.dll
+ 2008-12-19 09:41:52 13,824 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\ieudinit.exe
+ 2008-12-19 05:25:30 634,024 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\iexplore.exe
+ 2008-12-20 23:45:59 27,648 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\jsproxy.dll
+ 2008-12-20 23:45:59 459,264 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\msfeeds.dll
+ 2008-12-20 23:45:59 52,224 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\msfeedsbs.dll
+ 2009-01-16 16:14:08 3,596,288 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\mshtml.dll
+ 2008-12-20 23:46:03 477,696 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\mshtmled.dll
+ 2008-12-20 23:46:03 193,024 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\msrating.dll
+ 2008-12-20 23:46:04 671,232 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\mstime.dll
+ 2008-12-20 23:46:04 102,912 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\occache.dll
+ 2008-12-20 23:46:04 44,544 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\pngfilt.dll
+ 2008-12-20 23:46:04 105,984 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\url.dll
+ 2008-12-20 23:46:05 1,163,264 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\urlmon.dll
+ 2008-12-20 23:46:05 233,472 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\webcheck.dll
+ 2008-12-20 23:46:06 827,904 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\wininet.dll
+ 2007-03-06 00:57:34 14,560 ----a-w c:\windows\$hf_mig$\KB961260-IE7\spmsg.dll
+ 2007-03-06 00:57:39 213,216 ----a-w c:\windows\$hf_mig$\KB961260-IE7\spuninst.exe
+ 2007-03-06 00:57:32 22,752 ----a-w c:\windows\$hf_mig$\KB961260-IE7\update\spcustom.dll
+ 2007-03-06 00:57:56 712,928 ----a-w c:\windows\$hf_mig$\KB961260-IE7\update\update.exe
+ 2007-03-06 00:58:46 369,376 ----a-w c:\windows\$hf_mig$\KB961260-IE7\update\updspapi.dll
+ 2006-05-25 07:29:04 213,216 -c----w c:\windows\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe
+ 2006-05-25 07:29:04 371,424 -c----w c:\windows\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\updspapi.dll
+ 2006-05-24 09:32:48 213,216 -c----w c:\windows\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe
+ 2006-05-24 09:32:48 371,424 -c----w c:\windows\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\updspapi.dll
+ 2005-10-12 23:08:42 213,216 -c----w c:\windows\$NtUninstallKB904942$\spuninst\spuninst.exe
+ 2005-10-12 23:08:46 369,376 -c----w c:\windows\$NtUninstallKB904942$\spuninst\updspapi.dll
+ 2004-08-04 00:55:58 49,152 -c----w c:\windows\$NtUninstallKB904942$\wdigest.dll
+ 2004-08-04 00:55:34 28,672 -c----w c:\windows\$NtUninstallKB914440$\custsat.dll
+ 2005-10-12 23:08:33 213,216 -c----w c:\windows\$NtUninstallKB914440$\spuninst\spuninst.exe
+ 2005-10-12 23:08:36 369,376 -c----w c:\windows\$NtUninstallKB914440$\spuninst\updspapi.dll
+ 2005-10-12 23:12:26 213,216 -c----w c:\windows\$NtUninstallKB915865$\spuninst\spuninst.exe
+ 2005-10-12 23:12:33 371,424 -c----w c:\windows\$NtUninstallKB915865$\spuninst\updspapi.dll
+ 2004-08-04 00:55:32 61,440 -c--a-w c:\windows\ie7\admparse.dll
+ 2004-08-04 00:55:32 99,840 -c--a-w c:\windows\ie7\advpack.dll
+ 2004-08-04 00:55:34 35,328 -c--a-w c:\windows\ie7\corpol.dll
+ 2006-06-02 19:32:25 33,792 -c--a-w c:\windows\ie7\custsat.dll
+ 2008-10-16 10:37:23 357,888 -c--a-w c:\windows\ie7\dxtmsft.dll
+ 2008-10-16 10:37:23 205,312 -c--a-w c:\windows\ie7\dxtrans.dll
+ 2008-10-16 10:37:23 55,808 -c--a-w c:\windows\ie7\extmgr.dll
+ 2004-08-04 00:55:38 38,912 -c--a-w c:\windows\ie7\hmmapi.dll
+ 2004-08-04 00:56:16 34,304 -c--a-w c:\windows\ie7\ie4uinit.exe
+ 2004-08-04 00:55:38 139,264 -c--a-w c:\windows\ie7\ieakeng.dll
+ 2004-08-04 00:55:38 216,064 -c--a-w c:\windows\ie7\ieaksie.dll
+ 2001-09-19 15:00:00 221,184 -c--a-w c:\windows\ie7\ieakui.dll
+ 2004-08-04 00:55:38 323,584 -c--a-w c:\windows\ie7\iedkcs32.dll
+ 2008-10-15 09:45:01 18,432 -c--a-w c:\windows\ie7\iedw.exe
+ 2004-08-04 00:55:38 81,920 -c--a-w c:\windows\ie7\ieencode.dll
+ 2008-10-16 10:37:24 250,880 -c--a-w c:\windows\ie7\iepeers.dll
+ 2004-08-04 00:55:38 48,128 -c--a-w c:\windows\ie7\iernonce.dll
+ 2004-08-04 00:55:38 62,976 -c--a-w c:\windows\ie7\iesetup.dll
+ 2004-08-04 00:56:16 93,184 -c--a-w c:\windows\ie7\iexplore.exe
+ 2004-08-04 00:55:38 35,840 -c--a-w c:\windows\ie7\imgutil.dll
+ 2008-10-16 10:37:24 96,256 -c--a-w c:\windows\ie7\inseng.dll
+ 2007-12-18 14:41:00 450,560 -c--a-w c:\windows\ie7\jscript.dll
+ 2008-10-16 10:37:26 16,384 -c--a-w c:\windows\ie7\jsproxy.dll
+ 2004-08-04 00:55:40 22,016 -c--a-w c:\windows\ie7\licmgr10.dll
+ 2004-08-04 00:56:22 29,184 -c--a-w c:\windows\ie7\mshta.exe
+ 2008-12-12 17:33:22 3,081,216 -c--a-w c:\windows\ie7\mshtml.dll
+ 2008-10-16 10:37:26 449,024 -c--a-w c:\windows\ie7\mshtmled.dll
+ 2004-08-04 00:53:52 56,832 -c--a-w c:\windows\ie7\mshtmler.dll
+ 2001-09-19 15:00:00 146,432 -c--a-w c:\windows\ie7\msls31.dll
+ 2008-10-16 10:37:24 146,432 -c--a-w c:\windows\ie7\msrating.dll
+ 2008-10-16 10:37:24 532,480 -c--a-w c:\windows\ie7\mstime.dll
+ 2004-08-04 00:55:46 96,256 -c--a-w c:\windows\ie7\occache.dll
+ 2008-10-16 10:37:24 39,424 -c--a-w c:\windows\ie7\pngfilt.dll
+ 2007-09-27 14:23:42 32,960 -c--a-w c:\windows\ie7\spuninst\iecustom.dll
+ 2007-09-27 14:21:34 66,048 -c--a-w c:\windows\ie7\spuninst\ieResetIcons.exe
+ 2006-09-06 14:42:02 213,216 -c--a-w c:\windows\ie7\spuninst\spuninst.exe
+ 2006-09-06 14:42:02 369,376 -c--a-w c:\windows\ie7\spuninst\updspapi.dll
+ 2004-08-04 00:55:54 48,640 -c--a-w c:\windows\ie7\url.dll
+ 2008-10-16 10:37:27 614,912 -c--a-w c:\windows\ie7\urlmon.dll
+ 2007-12-18 14:41:00 417,792 -c--a-w c:\windows\ie7\vbscript.dll
+ 2004-08-04 00:55:54 848,384 -c--a-w c:\windows\ie7\vgx.dll
+ 2004-08-04 00:55:58 276,480 -c--a-w c:\windows\ie7\webcheck.dll
+ 2008-10-16 10:37:25 657,920 -c--a-w c:\windows\ie7\wininet.dll
+ 2007-08-13 15:39:00 123,904 -c----w c:\windows\ie7updates\KB956390-IE7\advpack.dll
+ 2007-08-13 15:35:46 346,624 -c----w c:\windows\ie7updates\KB956390-IE7\dxtmsft.dll
+ 2007-08-13 15:35:38 214,528 -c----w c:\windows\ie7updates\KB956390-IE7\dxtrans.dll
+ 2007-08-13 15:54:10 131,584 -c----w c:\windows\ie7updates\KB956390-IE7\extmgr.dll
+ 2007-08-13 15:36:26 61,952 -c----w c:\windows\ie7updates\KB956390-IE7\icardie.dll
+ 2007-08-13 15:39:06 54,784 -c----w c:\windows\ie7updates\KB956390-IE7\ie4uinit.exe
+ 2007-08-13 15:39:26 152,064 -c----w c:\windows\ie7updates\KB956390-IE7\ieakeng.dll
+ 2007-08-13 15:39:54 229,376 -c----w c:\windows\ie7updates\KB956390-IE7\ieaksie.dll
+ 2007-08-13 14:56:54 161,792 -c----w c:\windows\ie7updates\KB956390-IE7\ieakui.dll
+ 2007-02-12 13:10:12 2,451,312 -c----w c:\windows\ie7updates\KB956390-IE7\ieapfltr.dat
+ 2007-07-11 09:27:48 383,488 -c----w c:\windows\ie7updates\KB956390-IE7\ieapfltr.dll
+ 2007-08-13 15:39:50 382,976 -c----w c:\windows\ie7updates\KB956390-IE7\iedkcs32.dll
+ 2007-08-13 15:54:10 6,049,280 -c----w c:\windows\ie7updates\KB956390-IE7\ieframe.dll
+ 2007-08-13 15:39:10 43,008 -c----w c:\windows\ie7updates\KB956390-IE7\iernonce.dll
+ 2007-08-13 15:34:04 266,752 -c----w c:\windows\ie7updates\KB956390-IE7\iertutil.dll
+ 2007-08-13 15:39:10 13,312 -c----w c:\windows\ie7updates\KB956390-IE7\ieudinit.exe
+ 2007-08-13 15:43:56 622,080 -c----w c:\windows\ie7updates\KB956390-IE7\iexplore.exe
+ 2007-08-13 15:54:10 27,136 -c----w c:\windows\ie7updates\KB956390-IE7\jsproxy.dll
+ 2007-08-13 15:54:10 458,752 -c----w c:\windows\ie7updates\KB956390-IE7\msfeeds.dll
+ 2007-08-13 15:54:10 50,688 -c----w c:\windows\ie7updates\KB956390-IE7\msfeedsbs.dll
+ 2007-08-13 15:54:12 3,578,368 -c----w c:\windows\ie7updates\KB956390-IE7\mshtml.dll
+ 2007-08-13 15:54:10 475,648 -c----w c:\windows\ie7updates\KB956390-IE7\mshtmled.dll
+ 2007-08-13 15:44:26 192,000 -c----w c:\windows\ie7updates\KB956390-IE7\msrating.dll
+ 2007-08-13 15:54:10 670,720 -c----w c:\windows\ie7updates\KB956390-IE7\mstime.dll
+ 2007-08-13 15:44:06 101,376 -c----w c:\windows\ie7updates\KB956390-IE7\occache.dll
+ 2007-08-13 15:36:12 44,544 -c----w c:\windows\ie7updates\KB956390-IE7\pngfilt.dll
+ 2007-03-06 00:57:38 213,216 -c----w c:\windows\ie7updates\KB956390-IE7\spuninst\spuninst.exe
+ 2007-03-06 00:58:46 369,376 -c----w c:\windows\ie7updates\KB956390-IE7\spuninst\updspapi.dll
+ 2007-08-13 15:44:30 105,984 -c----w c:\windows\ie7updates\KB956390-IE7\url.dll
+ 2007-08-13 15:54:10 1,162,240 -c----w c:\windows\ie7updates\KB956390-IE7\urlmon.dll
+ 2007-08-13 15:54:10 231,424 -c----w c:\windows\ie7updates\KB956390-IE7\webcheck.dll
+ 2007-08-13 15:54:10 818,688 -c----w c:\windows\ie7updates\KB956390-IE7\wininet.dll
+ 2008-08-26 07:57:14 124,928 -c----w c:\windows\ie7updates\KB961260-IE7\advpack.dll
+ 2008-08-26 07:57:14 124,928 -c----w c:\windows\ie7updates\KB961260-IE7\advpack.dll.000
+ 2008-08-26 07:57:14 347,136 -c----w c:\windows\ie7updates\KB961260-IE7\dxtmsft.dll
+ 2008-08-26 07:57:14 347,136 -c----w c:\windows\ie7updates\KB961260-IE7\dxtmsft.dll.000
+ 2008-08-26 07:57:14 214,528 -c----w c:\windows\ie7updates\KB961260-IE7\dxtrans.dll
+ 2008-08-26 07:57:14 214,528 -c----w c:\windows\ie7updates\KB961260-IE7\dxtrans.dll.000
+ 2008-08-26 07:57:14 133,120 -c----w c:\windows\ie7updates\KB961260-IE7\extmgr.dll
+ 2008-08-26 07:57:14 63,488 -c----w c:\windows\ie7updates\KB961260-IE7\icardie.dll
+ 2008-08-26 07:57:14 63,488 -c----w c:\windows\ie7updates\KB961260-IE7\icardie.dll.000
+ 2008-08-25 08:35:50 70,656 -c----w c:\windows\ie7updates\KB961260-IE7\ie4uinit.exe
+ 2008-08-26 07:57:14 153,088 -c----w c:\windows\ie7updates\KB961260-IE7\ieakeng.dll
+ 2008-08-26 07:57:14 230,400 -c----w c:\windows\ie7updates\KB961260-IE7\ieaksie.dll
+ 2008-08-23 05:54:51 161,792 -c----w c:\windows\ie7updates\KB961260-IE7\ieakui.dll
+ 2007-04-17 09:32:38 2,455,488 -c----w c:\windows\ie7updates\KB961260-IE7\ieapfltr.dat
+ 2008-08-26 07:57:15 383,488 -c----w c:\windows\ie7updates\KB961260-IE7\ieapfltr.dll
+ 2008-08-26 07:57:15 383,488 -c----w c:\windows\ie7updates\KB961260-IE7\ieapfltr.dll.000
+ 2008-08-26 07:57:15 384,512 -c----w c:\windows\ie7updates\KB961260-IE7\iedkcs32.dll
+ 2008-10-03 16:58:14 6,066,176 -c----w c:\windows\ie7updates\KB961260-IE7\ieframe.dll
+ 2008-10-03 16:58:14 6,066,176 -c----w c:\windows\ie7updates\KB961260-IE7\ieframe.dll.000
+ 2008-08-26 07:57:16 44,544 -c----w c:\windows\ie7updates\KB961260-IE7\iernonce.dll
+ 2008-08-26 07:57:17 267,776 -c----w c:\windows\ie7updates\KB961260-IE7\iertutil.dll
+ 2008-08-26 07:57:17 267,776 -c----w c:\windows\ie7updates\KB961260-IE7\iertutil.dll.000
+ 2008-08-25 08:38:00 13,824 -c----w c:\windows\ie7updates\KB961260-IE7\ieudinit.exe
+ 2008-08-23 05:56:15 635,848 -c----w c:\windows\ie7updates\KB961260-IE7\iexplore.exe
+ 2008-08-23 05:56:15 635,848 -c----w c:\windows\ie7updates\KB961260-IE7\iexplore.exe.000
+ 2008-08-26 07:57:17 27,648 -c----w c:\windows\ie7updates\KB961260-IE7\jsproxy.dll
+ 2008-08-26 07:57:18 459,264 -c----w c:\windows\ie7updates\KB961260-IE7\msfeeds.dll
+ 2008-08-26 07:57:18 459,264 -c----w c:\windows\ie7updates\KB961260-IE7\msfeeds.dll.000
+ 2008-08-26 07:57:18 52,224 -c----w c:\windows\ie7updates\KB961260-IE7\msfeedsbs.dll
+ 2008-08-26 07:57:18 52,224 -c----w c:\windows\ie7updates\KB961260-IE7\msfeedsbs.dll.000
+ 2008-08-27 11:27:20 3,593,216 -c----w c:\windows\ie7updates\KB961260-IE7\mshtml.dll
+ 2008-08-27 11:27:20 3,593,216 -c----w c:\windows\ie7updates\KB961260-IE7\mshtml.dll.000
+ 2008-08-26 07:57:19 477,696 -c----w c:\windows\ie7updates\KB961260-IE7\mshtmled.dll
+ 2008-08-26 07:57:19 477,696 -c----w c:\windows\ie7updates\KB961260-IE7\mshtmled.dll.000
+ 2008-08-26 07:57:19 193,024 -c----w c:\windows\ie7updates\KB961260-IE7\msrating.dll
+ 2008-08-26 07:57:20 671,232 -c----w c:\windows\ie7updates\KB961260-IE7\mstime.dll
+ 2008-08-26 07:57:20 102,912 -c----w c:\windows\ie7updates\KB961260-IE7\occache.dll
+ 2008-08-26 07:57:20 44,544 -c----w c:\windows\ie7updates\KB961260-IE7\pngfilt.dll
+ 2008-08-26 07:57:20 44,544 -c----w c:\windows\ie7updates\KB961260-IE7\pngfilt.dll.000
+ 2007-03-06 00:57:39 213,216 -c----w c:\windows\ie7updates\KB961260-IE7\spuninst\spuninst.exe
+ 2007-03-06 00:58:46 369,376 -c----w c:\windows\ie7updates\KB961260-IE7\spuninst\updspapi.dll
+ 2008-08-26 07:57:20 105,984 -c----w c:\windows\ie7updates\KB961260-IE7\url.dll
+ 2008-08-26 07:57:20 105,984 -c----w c:\windows\ie7updates\KB961260-IE7\url.dll.000
+ 2008-08-26 07:57:21 1,159,680 -c----w c:\windows\ie7updates\KB961260-IE7\urlmon.dll
+ 2008-08-26 07:57:21 1,159,680 -c----w c:\windows\ie7updates\KB961260-IE7\urlmon.dll.000
+ 2008-08-26 07:57:21 233,472 -c----w c:\windows\ie7updates\KB961260-IE7\webcheck.dll
+ 2008-08-26 07:57:21 233,472 -c----w c:\windows\ie7updates\KB961260-IE7\webcheck.dll.000
+ 2008-08-26 07:57:21 826,368 -c----w c:\windows\ie7updates\KB961260-IE7\wininet.dll
+ 2008-08-26 07:57:21 826,368 -c----w c:\windows\ie7updates\KB961260-IE7\wininet.dll.000
+ 2006-06-02 19:32:25 33,792 ------w c:\windows\network diagnostic\custsat.dll
+ 2006-10-10 12:44:50 557,568 ------w c:\windows\network diagnostic\xpnetdiag.exe
- 2004-08-04 00:55:32 61,440 ----a-w c:\windows\system32\admparse.dll
+ 2007-08-13 15:39:20 71,680 ----a-w c:\windows\system32\admparse.dll
- 2004-08-04 00:55:32 99,840 ----a-w c:\windows\system32\advpack.dll
+ 2008-12-20 22:30:52 124,928 ----a-w c:\windows\system32\advpack.dll
- 2004-08-04 00:55:32 61,440 -c--a-w c:\windows\system32\dllcache\admparse.dll
+ 2007-08-13 15:39:20 71,680 -c--a-w c:\windows\system32\dllcache\admparse.dll
- 2004-08-04 00:55:32 99,840 -c--a-w c:\windows\system32\dllcache\advpack.dll
+ 2008-12-20 22:30:52 124,928 -c----w c:\windows\system32\dllcache\advpack.dll
- 2004-08-04 00:55:34 28,672 -c--a-w c:\windows\system32\dllcache\custsat.dll
+ 2007-08-13 15:54:10 33,792 -c--a-w c:\windows\system32\dllcache\custsat.dll
- 2008-10-16 10:37:23 357,888 -c--a-w c:\windows\system32\dllcache\dxtmsft.dll
+ 2008-12-20 22:30:52 347,136 -c----w c:\windows\system32\dllcache\dxtmsft.dll
- 2008-10-16 10:37:23 205,312 -c--a-w c:\windows\system32\dllcache\dxtrans.dll
+ 2008-12-20 22:30:53 214,528 -c----w c:\windows\system32\dllcache\dxtrans.dll
- 2008-10-16 10:37:23 55,808 -c--a-w c:\windows\system32\dllcache\extmgr.dll
+ 2008-12-20 22:30:53 133,120 -c----w c:\windows\system32\dllcache\extmgr.dll
- 2004-08-04 00:55:38 38,912 -c--a-w c:\windows\system32\dllcache\hmmapi.dll
+ 2007-08-13 15:18:02 60,416 -c--a-w c:\windows\system32\dllcache\hmmapi.dll
+ 2008-12-20 22:30:53 63,488 -c----w c:\windows\system32\dllcache\icardie.dll
- 2004-08-04 00:56:16 34,304 -c--a-w c:\windows\system32\dllcache\ie4uinit.exe
+ 2008-12-19 09:08:41 70,656 -c----w c:\windows\system32\dllcache\ie4uinit.exe
- 2004-08-04 00:55:38 139,264 -c--a-w c:\windows\system32\dllcache\ieakeng.dll
+ 2008-12-20 22:30:53 153,088 -c----w c:\windows\system32\dllcache\ieakeng.dll
- 2004-08-04 00:55:38 216,064 -c--a-w c:\windows\system32\dllcache\ieaksie.dll
+ 2008-12-20 22:30:53 230,400 -c----w c:\windows\system32\dllcache\ieaksie.dll
- 2001-09-19 15:00:00 221,184 -c--a-w c:\windows\system32\dllcache\ieakui.dll
+ 2008-12-19 05:23:56 161,792 -c----w c:\windows\system32\dllcache\ieakui.dll
+ 2007-04-17 09:32:38 2,455,488 -c----w c:\windows\system32\dllcache\ieapfltr.dat
+ 2008-12-20 22:30:54 383,488 -c----w c:\windows\system32\dllcache\ieapfltr.dll
- 2004-08-04 00:55:38 323,584 -c--a-w c:\windows\system32\dllcache\iedkcs32.dll
+ 2008-12-20 22:30:54 384,512 -c----w c:\windows\system32\dllcache\iedkcs32.dll
- 2008-10-15 09:45:01 18,432 -c--a-w c:\windows\system32\dllcache\iedw.exe
+ 2007-08-13 15:44:02 69,120 -c--a-w c:\windows\system32\dllcache\iedw.exe
- 2004-08-04 00:55:38 81,920 -c--a-w c:\windows\system32\dllcache\ieencode.dll
+ 2007-08-13 15:45:18 78,336 -c--a-w c:\windows\system32\dllcache\ieencode.dll
+ 2008-12-20 22:30:58 6,066,688 -c----w c:\windows\system32\dllcache\ieframe.dll
- 2008-10-16 10:37:24 250,880 -c--a-w c:\windows\system32\dllcache\iepeers.dll
+ 2007-08-13 15:54:10 191,488 -c--a-w c:\windows\system32\dllcache\iepeers.dll
- 2004-08-04 00:55:38 48,128 -c--a-w c:\windows\system32\dllcache\iernonce.dll
+ 2008-12-20 22:30:59 44,544 -c----w c:\windows\system32\dllcache\iernonce.dll
+ 2008-12-20 22:30:59 267,776 -c----w c:\windows\system32\dllcache\iertutil.dll
- 2004-08-04 00:55:38 62,976 -c--a-w c:\windows\system32\dllcache\iesetup.dll
+ 2007-08-13 15:39:12 55,296 -c--a-w c:\windows\system32\dllcache\iesetup.dll
+ 2008-12-19 09:10:15 13,824 -c----w c:\windows\system32\dllcache\ieudinit.exe
- 2004-08-04 00:56:16 93,184 -c--a-w c:\windows\system32\dllcache\iexplore.exe
+ 2008-12-19 05:25:25 634,024 -c----w c:\windows\system32\dllcache\iexplore.exe
- 2004-08-04 00:55:38 35,840 -c--a-w c:\windows\system32\dllcache\imgutil.dll
+ 2007-08-13 15:36:06 36,352 -c--a-w c:\windows\system32\dllcache\imgutil.dll
- 2008-10-16 10:37:24 96,256 -c--a-w c:\windows\system32\dllcache\inseng.dll
+ 2007-08-13 15:39:02 92,672 -c--a-w c:\windows\system32\dllcache\inseng.dll
- 2007-12-18 14:41:00 450,560 -c--a-w c:\windows\system32\dllcache\jscript.dll
+ 2007-08-13 15:38:04 491,520 -c--a-w c:\windows\system32\dllcache\jscript.dll
- 2008-10-16 10:37:26 16,384 -c--a-w c:\windows\system32\dllcache\jsproxy.dll
+ 2008-12-20 22:31:01 27,648 -c----w c:\windows\system32\dllcache\jsproxy.dll
- 2004-08-04 00:55:40 22,016 -c--a-w c:\windows\system32\dllcache\licmgr10.dll
+ 2007-08-13 15:44:18 40,960 -c--a-w c:\windows\system32\dllcache\licmgr10.dll
+ 2008-12-20 22:31:01 459,264 -c----w c:\windows\system32\dllcache\msfeeds.dll
+ 2008-12-20 22:31:01 52,224 -c----w c:\windows\system32\dllcache\msfeedsbs.dll
- 2004-08-04 00:56:22 29,184 -c--a-w c:\windows\system32\dllcache\mshta.exe
+ 2007-08-13 15:32:30 45,568 -c--a-w c:\windows\system32\dllcache\mshta.exe
- 2008-12-12 17:33:22 3,081,216 -c--a-w c:\windows\system32\dllcache\mshtml.dll
+ 2009-01-16 18:01:16 3,594,752 -c----w c:\windows\system32\dllcache\mshtml.dll
- 2008-10-16 10:37:26 449,024 -c--a-w c:\windows\system32\dllcache\mshtmled.dll
+ 2008-12-20 22:31:06 477,696 -c----w c:\windows\system32\dllcache\mshtmled.dll
- 2004-08-04 00:53:52 56,832 -c--a-w c:\windows\system32\dllcache\mshtmler.dll
+ 2007-08-13 15:01:12 48,128 -c--a-w c:\windows\system32\dllcache\mshtmler.dll
- 2001-09-19 15:00:00 146,432 -c--a-w c:\windows\system32\dllcache\msls31.dll
+ 2007-08-13 15:54:10 156,160 -c--a-w c:\windows\system32\dllcache\msls31.dll
- 2008-10-16 10:37:24 146,432 -c--a-w c:\windows\system32\dllcache\msrating.dll
+ 2008-12-20 22:31:06 193,024 -c----w c:\windows\system32\dllcache\msrating.dll
- 2008-10-16 10:37:24 532,480 -c--a-w c:\windows\system32\dllcache\mstime.dll
+ 2008-12-20 22:31:07 671,232 -c----w c:\windows\system32\dllcache\mstime.dll
- 2004-08-04 00:55:46 96,256 -c--a-w c:\windows\system32\dllcache\occache.dll
+ 2008-12-20 22:31:08 102,912 -c----w c:\windows\system32\dllcache\occache.dll
- 2008-10-16 10:37:24 39,424 -c--a-w c:\windows\system32\dllcache\pngfilt.dll
+ 2008-12-20 22:31:08 44,544 -c----w c:\windows\system32\dllcache\pngfilt.dll
- 2004-08-04 00:55:54 48,640 -c--a-w c:\windows\system32\dllcache\url.dll
+ 2008-12-20 22:31:08 105,984 -c----w c:\windows\system32\dllcache\url.dll
- 2008-10-16 10:37:27 614,912 -c--a-w c:\windows\system32\dllcache\urlmon.dll
+ 2008-12-20 22:31:09 1,160,192 -c----w c:\windows\system32\dllcache\urlmon.dll
- 2007-12-18 14:41:00 417,792 -c--a-w c:\windows\system32\dllcache\vbscript.dll
+ 2007-08-13 15:54:10 413,696 -c--a-w c:\windows\system32\dllcache\vbscript.dll
- 2004-08-04 00:55:54 848,384 -c--a-w c:\windows\system32\dllcache\vgx.dll
+ 2007-08-13 15:54:10 765,952 -c--a-w c:\windows\system32\dllcache\VGX.dll
- 2004-08-04 00:55:58 49,152 -c--a-w c:\windows\system32\dllcache\wdigest.dll
+ 2006-03-24 04:37:50 49,152 -c--a-w c:\windows\system32\dllcache\wdigest.dll
- 2004-08-04 00:55:58 276,480 -c--a-w c:\windows\system32\dllcache\webcheck.dll
+ 2008-12-20 22:31:09 233,472 -c----w c:\windows\system32\dllcache\webcheck.dll
+ 2009-03-10 19:18:00 264,576 -c----w c:\windows\system32\dllcache\wgaLogon.dll
+ 2009-03-10 19:18:14 960,392 -c----w c:\windows\system32\dllcache\WgaTray.exe
- 2008-10-16 10:37:25 657,920 -c--a-w c:\windows\system32\dllcache\wininet.dll
+ 2008-12-20 22:31:10 826,368 -c----w c:\windows\system32\dllcache\wininet.dll
- 2008-10-16 10:37:23 357,888 ----a-w c:\windows\system32\dxtmsft.dll
+ 2008-12-20 22:30:52 347,136 ----a-w c:\windows\system32\dxtmsft.dll
- 2008-10-16 10:37:23 205,312 ----a-w c:\windows\system32\dxtrans.dll
+ 2008-12-20 22:30:53 214,528 ----a-w c:\windows\system32\dxtrans.dll
- 2008-10-16 10:37:23 55,808 ----a-w c:\windows\system32\extmgr.dll
+ 2008-12-20 22:30:53 133,120 ------w c:\windows\system32\extmgr.dll
+ 2008-12-20 22:30:53 63,488 ----a-w c:\windows\system32\icardie.dll
+ 2006-06-29 05:05:44 26,112 ------w c:\windows\system32\idndl.dll
- 2004-08-04 00:56:16 34,304 ----a-w c:\windows\system32\ie4uinit.exe
+ 2008-12-19 09:08:41 70,656 ------w c:\windows\system32\ie4uinit.exe
- 2004-08-04 00:55:38 139,264 ----a-w c:\windows\system32\ieakeng.dll
+ 2008-12-20 22:30:53 153,088 ------w c:\windows\system32\ieakeng.dll
- 2004-08-04 00:55:38 216,064 ----a-w c:\windows\system32\ieaksie.dll
+ 2008-12-20 22:30:53 230,400 ------w c:\windows\system32\ieaksie.dll
- 2001-09-19 15:00:00 221,184 ----a-w c:\windows\system32\ieakui.dll
+ 2008-12-19 05:23:56 161,792 ------w c:\windows\system32\ieakui.dll
+ 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\system32\ieapfltr.dat
+ 2008-12-20 22:30:54 383,488 ----a-w c:\windows\system32\ieapfltr.dll
- 2004-08-04 00:55:38 323,584 ----a-w c:\windows\system32\iedkcs32.dll
+ 2008-12-20 22:30:54 384,512 ------w c:\windows\system32\iedkcs32.dll
- 2004-08-04 00:55:38 81,920 ----a-w c:\windows\system32\ieencode.dll
+ 2007-08-13 15:45:18 78,336 ----a-w c:\windows\system32\ieencode.dll
+ 2008-12-20 22:30:58 6,066,688 ----a-w c:\windows\system32\ieframe.dll
- 2008-10-16 10:37:24 250,880 ----a-w c:\windows\system32\iepeers.dll
+ 2007-08-13 15:54:10 191,488 ----a-w c:\windows\system32\iepeers.dll
- 2004-08-04 00:55:38 48,128 ----a-w c:\windows\system32\iernonce.dll
+ 2008-12-20 22:30:59 44,544 ------w c:\windows\system32\iernonce.dll
+ 2008-12-20 22:30:59 267,776 ----a-w c:\windows\system32\iertutil.dll
- 2004-08-04 00:55:38 62,976 ----a-w c:\windows\system32\iesetup.dll
+ 2007-08-13 15:39:12 55,296 ----a-w c:\windows\system32\iesetup.dll
+ 2008-12-19 09:10:15 13,824 ----a-w c:\windows\system32\ieudinit.exe
+ 2007-08-13 15:54:10 180,736 ------w c:\windows\system32\ieui.dll
- 2004-08-04 00:55:38 35,840 ----a-w c:\windows\system32\imgutil.dll
+ 2007-08-13 15:36:06 36,352 ----a-w c:\windows\system32\imgutil.dll
- 2008-10-16 10:37:24 96,256 ----a-w c:\windows\system32\inseng.dll
+ 2007-08-13 15:39:02 92,672 ----a-w c:\windows\system32\inseng.dll
- 2007-12-18 14:41:00 450,560 ----a-w c:\windows\system32\jscript.dll
+ 2007-08-13 15:38:04 491,520 ----a-w c:\windows\system32\jscript.dll
- 2008-10-16 10:37:26 16,384 ----a-w c:\windows\system32\jsproxy.dll
+ 2008-12-20 22:31:01 27,648 ------w c:\windows\system32\jsproxy.dll
+ 2009-03-10 19:26:30 1,430,400 ----a-w c:\windows\system32\KB905474\wganotifypackageinner.exe
+ 2009-03-10 19:18:08 453,000 ----a-w c:\windows\system32\KB905474\wgasetup.exe
+ 2009-03-10 19:18:20 1,482,112 ------w c:\windows\system32\LegitCheckControl.dll
- 2004-08-04 00:55:40 22,016 ----a-w c:\windows\system32\licmgr10.dll
+ 2007-08-13 15:44:18 40,960 ----a-w c:\windows\system32\licmgr10.dll
+ 2008-12-20 22:31:01 459,264 ----a-w c:\windows\system32\msfeeds.dll
+ 2008-12-20 22:31:01 52,224 ----a-w c:\windows\system32\msfeedsbs.dll
+ 2007-08-13 15:36:40 12,288 ------w c:\windows\system32\msfeedssync.exe
- 2004-08-04 00:56:22 29,184 ----a-w c:\windows\system32\mshta.exe
+ 2007-08-13 15:32:30 45,568 ----a-w c:\windows\system32\mshta.exe
- 2008-12-12 17:33:22 3,081,216 ----a-w c:\windows\system32\mshtml.dll
+ 2009-01-16 18:01:16 3,594,752 ----a-w c:\windows\system32\mshtml.dll
- 2008-10-16 10:37:26 449,024 ----a-w c:\windows\system32\mshtmled.dll
+ 2008-12-20 22:31:06 477,696 ----a-w c:\windows\system32\mshtmled.dll
- 2004-08-04 00:53:52 56,832 ----a-w c:\windows\system32\mshtmler.dll
+ 2007-08-13 15:01:12 48,128 ----a-w c:\windows\system32\mshtmler.dll
- 2001-09-19 15:00:00 146,432 ----a-w c:\windows\system32\msls31.dll
+ 2007-08-13 15:54:10 156,160 ----a-w c:\windows\system32\msls31.dll
- 2008-10-16 10:37:24 146,432 ----a-w c:\windows\system32\msrating.dll
+ 2008-12-20 22:31:06 193,024 ------w c:\windows\system32\msrating.dll
- 2008-10-16 10:37:24 532,480 ----a-w c:\windows\system32\mstime.dll
+ 2008-12-20 22:31:07 671,232 ------w c:\windows\system32\mstime.dll
+ 2006-06-28 14:59:26 24,576 ------w c:\windows\system32\nlsdl.dll
+ 2006-06-29 05:05:44 23,552 ------w c:\windows\system32\normaliz.dll
- 2004-08-04 00:55:46 96,256 ----a-w c:\windows\system32\occache.dll
+ 2008-12-20 22:31:08 102,912 ------w c:\windows\system32\occache.dll
- 2008-10-16 10:37:24 39,424 ----a-w c:\windows\system32\pngfilt.dll
+ 2008-12-20 22:31:08 44,544 ----a-w c:\windows\system32\pngfilt.dll
- 2007-11-30 11:18:09 17,784 ------w c:\windows\system32\spmsg.dll
+ 2008-07-09 07:34:18 17,784 ------w c:\windows\system32\spmsg.dll
- 2005-02-25 03:34:29 22,752 ----a-w c:\windows\system32\spupdsvc.exe
+ 2006-09-06 14:42:02 22,752 ----a-w c:\windows\system32\spupdsvc.exe
- 2004-08-04 00:55:54 48,640 ----a-w c:\windows\system32\url.dll
+ 2008-12-20 22:31:08 105,984 ----a-w c:\windows\system32\url.dll
- 2008-10-16 10:37:27 614,912 ----a-w c:\windows\system32\urlmon.dll
+ 2008-12-20 22:31:09 1,160,192 ----a-w c:\windows\system32\urlmon.dll
- 2007-12-18 14:41:00 417,792 ----a-w c:\windows\system32\vbscript.dll
+ 2007-08-13 15:54:10 413,696 ----a-w c:\windows\system32\vbscript.dll
- 2004-08-04 00:55:58 49,152 ----a-w c:\windows\system32\wdigest.dll
+ 2006-03-24 04:37:50 49,152 ----a-w c:\windows\system32\wdigest.dll
- 2004-08-04 00:55:58 276,480 ----a-w c:\windows\system32\webcheck.dll
+ 2008-12-20 22:31:09 233,472 ----a-w c:\windows\system32\webcheck.dll
+ 2009-03-10 19:18:00 264,576 ------w c:\windows\system32\WgaLogon.dll
+ 2009-03-10 19:18:14 960,392 ------w c:\windows\system32\WgaTray.exe
+ 2007-08-13 15:45:16 206,336 ------w c:\windows\system32\WinFXDocObj.exe
- 2008-10-16 10:37:25 657,920 ----a-w c:\windows\system32\wininet.dll
+ 2008-12-20 22:31:10 826,368 ----a-w c:\windows\system32\wininet.dll
+ 2006-07-14 15:51:51 121,856 ------w c:\windows\system32\xmllite.dll
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [08/16/2007 04:19 PM 5728112]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [03/06/2009 10:24 PM 68856]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [08/04/2004 03:56 AM 15360]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [08/04/2004 03:56 AM 15360]
c:\documents and settings\All Users\çںê، ں §ڑ\ںé ©ںê¤\ §ک ں颬نïé\
Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2009-03-02 113664]
AudioDeck.lnk - c:\program files\VIA Technologies, Inc\VIA Audio Driver Setup Program\AudioDeck\AudioDeck.exe [2009-03-02 581632]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.divxa32"= msaud32_divx.acm
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^قائمة ابدأ^البرامج^بدء التشغيل^Adobe Gamma Loader.lnk]
path=c:\documents and settings\All Users\قائمة ابدأ\البرامج\بدء التشغيل\Adobe Gamma Loader.lnk
backup=c:\windows\pss\Adobe Gamma Loader.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^قائمة ابدأ^البرامج^بدء التشغيل^AudioDeck.lnk]
path=c:\documents and settings\All Users\قائمة ابدأ\البرامج\بدء التشغيل\AudioDeck.lnk
backup=c:\windows\pss\AudioDeck.lnkCommon Startup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
--a------ 01/11/2008 10:16 PM 39792 c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
--a------ 08/16/2007 04:19 PM 5728112 c:\program files\Windows Live\Messenger\msnmsgr.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
--a------ 06/10/2008 04:27 AM 144784 c:\program files\Java\jre1.6.0_07\bin\jusched.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
--a------ 03/02/2009 06:05 PM 185896 c:\program files\Common Files\Real\Update_OB\realsched.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"avast! Web Scanner"=3 (0x3)
"avast! Mail Scanner"=3 (0x3)
"avast! Antivirus"=2 (0x2)
"aswUpdSv"=2 (0x2)
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"c:\\Program Files\\LeapFTP\\LeapFTP.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
S3 SetupNTGLM7X;SetupNTGLM7X;\??\e:\ntglm7x.sys --> e:\NTGLM7X.sys [?]
S3 Vsp;Vsp;c:\windows\system32\drivers\vsp.sys [2009-03-02 3351]
.
Contents of the 'Scheduled Tasks' folder
2009-03-08 c:\windows\Tasks\WGASetup.job
- c:\windows\system32\KB905474\wgasetup.exe [03/10/2009 10:18 PM]
.
.
------- Supplementary Scan -------
.
uStart Page = about:blank
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: &تصدير إلى Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
DPF: Microsoft XML Parser for Java -
.
**************************************************************************
catchme 0.3.1375 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
Rootkit scan 2009-03-08 13:44:30
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
Completion time: 03/08/2009 13:45:43
ComboFix-quarantined-files.txt 2009-03-08 10:45:30
ComboFix2.txt 2009-03-07 23:03:33
Pre-Run: 35,083,202,560 bytes free
Post-Run: 35,107,790,848 bytes free
535
وهذا تقرير الهاي جاك بعد ComboFix
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 01:48:53 م, on 08/03/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\VIA Technologies, Inc\VIA Audio Driver Setup Program\AudioDeck\AudioDeck.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\explorer.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\internet explorer\iexplore.exe
D:\خاص\برامج تنظيف\Zyzoom_HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: AudioDeck.lnk = C:\Program Files\VIA Technologies, Inc\VIA Audio Driver Setup Program\AudioDeck\AudioDeck.exe
O8 - Extra context menu item: &تصدير إلى Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: بحث - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
--
End of file - 3910 bytes
ComboFix 09-04-01.01 - user 03/08/2009 13:43:08.4 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1256.1.1025.18.991.778 [GMT 3:00]
Running from: c:\documents and settings\user\سطح المكتب\ComboFix.exe
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.
((((((((((((((((((((((((( Files Created from 2009-03-01 to 2009-04-01 )))))))))))))))))))))))))))))))
.
No new files created in this timespan
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-03-07 22:47 90,112 ----a-w c:\windows\DUMP4cf7.tmp
2009-03-07 22:46 90,112 ----a-w c:\windows\DUMP5227.tmp
2009-03-07 21:28 --------- d-----w c:\documents and settings\user\Application Data\CyberScrub
2009-03-07 21:27 --------- d-----w c:\documents and settings\user\Application Data\cleaner
2009-03-07 20:45 --------- d-----w c:\program files\Common Files\Wise Installation Wizard
2009-03-07 16:18 --------- d-----w c:\program files\LeapFTP
2009-03-06 22:30 --------- d-----w c:\documents and settings\user\Application Data\vlc
2009-03-06 22:30 --------- d-----w c:\documents and settings\user\Application Data\Media Player Classic
2009-03-02 21:15 --------- d-----w c:\documents and settings\user\Application Data\Thinstall
2009-03-02 17:20 --------- d-----w c:\program files\Common Files\Adobe
2009-03-02 17:17 --------- d--h--w c:\program files\InstallShield Installation Information
2009-03-02 17:17 --------- d-----w c:\program files\Common Files\InstallShield
2009-03-02 17:13 --------- d-----w c:\program files\Google
2009-03-02 15:31 --------- d-----w c:\program files\SMPlayer
2009-03-02 15:30 --------- d-----w c:\program files\VideoLAN
2009-03-02 15:28 --------- d-----w c:\program files\Alwil Software
2009-03-02 15:24 --------- d-----w c:\program files\Golden Al-Wafi Translator
2009-03-02 15:23 73,216 ----a-w c:\windows\ST6UNST.EXE
2009-03-02 15:23 172,032 ------w c:\windows\Setup1.exe
2009-03-02 15:22 --------- d-----w c:\documents and settings\All Users\Application Data\Messenger Plus!
2009-03-02 15:11 155,995 ----a-w c:\windows\java\Packages\ETR7ZDFH.ZIP
2009-03-02 15:11 --------- d-----w c:\program files\Java
2009-03-02 15:10 --------- d-----w c:\program files\Common Files\Java
2009-03-02 15:09 --------- d-----w c:\program files\Messenger Plus! Live
2009-03-02 15:09 --------- d-----w c:\program files\Circle Developement
2009-03-02 15:08 --------- d-----w c:\program files\Windows Live
2009-03-02 15:06 499,712 ----a-w c:\windows\system32\msvcp71.dll
2009-03-02 15:06 348,160 ----a-w c:\windows\system32\msvcr71.dll
2009-03-02 15:06 --------- d-----w c:\program files\Real
2009-03-02 15:06 --------- d-----w c:\program files\K-Lite Codec Pack
2009-03-02 15:06 --------- d-----w c:\program files\Common Files\xing shared
2009-03-02 15:06 --------- d-----w c:\program files\Common Files\Real
2009-03-02 15:05 47,104 ------w c:\windows\AKDeInstall.exe
2009-03-02 15:05 --------- d-----w c:\program files\mpegable
2009-03-02 15:05 --------- d-----w c:\program files\GRETECH
2009-03-02 15:00 --------- d-----w c:\program files\VIA Technologies, Inc
2009-03-02 14:59 --------- d-----w c:\program files\S3
2009-03-02 14:58 --------- d-----w c:\program files\VIA
2009-03-02 14:55 --------- d-----w c:\program files\Microsoft.NET
2009-03-02 14:55 --------- d-----w c:\program files\Microsoft Works
2009-03-02 14:46 --------- d-----w c:\program files\microsoft frontpage
2009-02-09 14:15 1,846,144 ----a-w c:\windows\system32\win32k.sys
.
((((((((((((((((((((((((((((( SnapShot@Sun 03-08-2009_ 2.02.42.51 )))))))))))))))))))))))))))))))))))))))))
.
+ 2006-03-24 04:48:07 49,152 ----a-w c:\windows\$hf_mig$\KB904942\SP2QFE\wdigest.dll
+ 2005-10-12 23:08:42 14,560 ----a-w c:\windows\$hf_mig$\KB904942\spmsg.dll
+ 2005-10-12 23:08:42 213,216 ----a-w c:\windows\$hf_mig$\KB904942\spuninst.exe
+ 2005-10-12 23:08:42 22,752 ----a-w c:\windows\$hf_mig$\KB904942\update\spcustom.dll
+ 2005-10-12 23:08:43 712,928 ----a-w c:\windows\$hf_mig$\KB904942\update\update.exe
+ 2005-10-12 23:08:46 369,376 ----a-w c:\windows\$hf_mig$\KB904942\update\updspapi.dll
+ 2006-07-14 15:52:22 121,856 ----a-w c:\windows\$hf_mig$\KB915865\SP2QFE\xmllite.dll
+ 2005-10-12 23:12:25 14,048 ----a-w c:\windows\$hf_mig$\KB915865\spmsg.dll
+ 2005-10-12 23:12:26 213,216 ----a-w c:\windows\$hf_mig$\KB915865\spuninst.exe
+ 2005-10-12 23:12:25 22,752 ----a-w c:\windows\$hf_mig$\KB915865\update\spcustom.dll
+ 2005-10-12 23:12:28 716,000 ----a-w c:\windows\$hf_mig$\KB915865\update\update.exe
+ 2005-10-12 23:12:33 371,424 ----a-w c:\windows\$hf_mig$\KB915865\update\updspapi.dll
+ 2008-08-26 09:08:35 124,928 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\advpack.dll
+ 2008-08-26 09:08:35 347,136 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\dxtmsft.dll
+ 2008-08-26 09:08:35 214,528 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\dxtrans.dll
+ 2008-08-26 09:08:35 132,608 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\extmgr.dll
+ 2008-08-26 09:08:35 63,488 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\icardie.dll
+ 2008-08-25 08:43:21 70,656 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ie4uinit.exe
+ 2008-08-26 09:08:35 153,088 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieakeng.dll
+ 2008-08-26 09:08:35 230,400 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieaksie.dll
+ 2008-08-23 05:54:50 161,792 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieakui.dll
+ 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieapfltr.dat
+ 2008-08-26 09:08:35 380,928 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieapfltr.dll
+ 2008-08-26 09:08:35 388,608 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iedkcs32.dll
+ 2008-10-03 16:21:28 6,068,224 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieframe.dll
+ 2008-08-26 09:08:38 44,544 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iernonce.dll
+ 2008-08-26 09:08:38 267,776 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iertutil.dll
+ 2008-08-25 08:43:21 13,824 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieudinit.exe
+ 2008-08-23 05:56:16 635,848 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iexplore.exe
+ 2008-08-26 09:08:39 27,648 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\jsproxy.dll
+ 2008-08-26 09:08:39 459,264 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msfeeds.dll
+ 2008-08-26 09:08:39 52,224 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msfeedsbs.dll
+ 2008-08-26 09:08:41 3,594,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mshtml.dll
+ 2008-08-26 09:08:41 477,696 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mshtmled.dll
+ 2008-08-26 09:08:41 193,024 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msrating.dll
+ 2008-08-26 09:08:42 671,232 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mstime.dll
+ 2008-08-26 09:08:42 102,912 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\occache.dll
+ 2008-08-26 09:08:42 44,544 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\pngfilt.dll
+ 2008-08-26 09:08:42 105,984 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\url.dll
+ 2008-08-26 09:08:43 1,162,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\urlmon.dll
+ 2008-08-26 09:08:43 233,472 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\webcheck.dll
+ 2008-08-26 09:08:43 827,904 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\wininet.dll
+ 2007-03-06 00:57:33 14,560 ----a-w c:\windows\$hf_mig$\KB956390-IE7\spmsg.dll
+ 2007-03-06 00:57:38 213,216 ----a-w c:\windows\$hf_mig$\KB956390-IE7\spuninst.exe
+ 2007-03-06 00:57:32 22,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\spcustom.dll
+ 2007-03-06 00:57:56 712,928 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\update.exe
+ 2007-03-06 00:58:46 369,376 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\updspapi.dll
+ 2008-12-20 23:45:53 124,928 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\advpack.dll
+ 2008-12-20 23:45:54 347,136 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\dxtmsft.dll
+ 2008-12-20 23:45:54 214,528 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\dxtrans.dll
+ 2008-12-20 23:45:54 132,608 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\extmgr.dll
+ 2008-12-20 23:45:54 63,488 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\icardie.dll
+ 2008-12-19 09:41:51 70,656 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\ie4uinit.exe
+ 2008-12-20 23:45:54 153,088 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\ieakeng.dll
+ 2008-12-20 23:45:54 230,400 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\ieaksie.dll
+ 2008-12-19 05:24:02 161,792 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\ieakui.dll
+ 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\ieapfltr.dat
+ 2008-12-20 23:45:55 380,928 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\ieapfltr.dll
+ 2008-12-20 23:45:55 388,608 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\iedkcs32.dll
+ 2008-12-20 23:45:58 6,068,736 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\ieframe.dll
+ 2008-12-20 23:45:58 44,544 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\iernonce.dll
+ 2008-12-20 23:45:58 267,776 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\iertutil.dll
+ 2008-12-19 09:41:52 13,824 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\ieudinit.exe
+ 2008-12-19 05:25:30 634,024 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\iexplore.exe
+ 2008-12-20 23:45:59 27,648 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\jsproxy.dll
+ 2008-12-20 23:45:59 459,264 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\msfeeds.dll
+ 2008-12-20 23:45:59 52,224 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\msfeedsbs.dll
+ 2009-01-16 16:14:08 3,596,288 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\mshtml.dll
+ 2008-12-20 23:46:03 477,696 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\mshtmled.dll
+ 2008-12-20 23:46:03 193,024 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\msrating.dll
+ 2008-12-20 23:46:04 671,232 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\mstime.dll
+ 2008-12-20 23:46:04 102,912 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\occache.dll
+ 2008-12-20 23:46:04 44,544 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\pngfilt.dll
+ 2008-12-20 23:46:04 105,984 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\url.dll
+ 2008-12-20 23:46:05 1,163,264 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\urlmon.dll
+ 2008-12-20 23:46:05 233,472 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\webcheck.dll
+ 2008-12-20 23:46:06 827,904 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\wininet.dll
+ 2007-03-06 00:57:34 14,560 ----a-w c:\windows\$hf_mig$\KB961260-IE7\spmsg.dll
+ 2007-03-06 00:57:39 213,216 ----a-w c:\windows\$hf_mig$\KB961260-IE7\spuninst.exe
+ 2007-03-06 00:57:32 22,752 ----a-w c:\windows\$hf_mig$\KB961260-IE7\update\spcustom.dll
+ 2007-03-06 00:57:56 712,928 ----a-w c:\windows\$hf_mig$\KB961260-IE7\update\update.exe
+ 2007-03-06 00:58:46 369,376 ----a-w c:\windows\$hf_mig$\KB961260-IE7\update\updspapi.dll
+ 2006-05-25 07:29:04 213,216 -c----w c:\windows\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe
+ 2006-05-25 07:29:04 371,424 -c----w c:\windows\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\updspapi.dll
+ 2006-05-24 09:32:48 213,216 -c----w c:\windows\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe
+ 2006-05-24 09:32:48 371,424 -c----w c:\windows\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\updspapi.dll
+ 2005-10-12 23:08:42 213,216 -c----w c:\windows\$NtUninstallKB904942$\spuninst\spuninst.exe
+ 2005-10-12 23:08:46 369,376 -c----w c:\windows\$NtUninstallKB904942$\spuninst\updspapi.dll
+ 2004-08-04 00:55:58 49,152 -c----w c:\windows\$NtUninstallKB904942$\wdigest.dll
+ 2004-08-04 00:55:34 28,672 -c----w c:\windows\$NtUninstallKB914440$\custsat.dll
+ 2005-10-12 23:08:33 213,216 -c----w c:\windows\$NtUninstallKB914440$\spuninst\spuninst.exe
+ 2005-10-12 23:08:36 369,376 -c----w c:\windows\$NtUninstallKB914440$\spuninst\updspapi.dll
+ 2005-10-12 23:12:26 213,216 -c----w c:\windows\$NtUninstallKB915865$\spuninst\spuninst.exe
+ 2005-10-12 23:12:33 371,424 -c----w c:\windows\$NtUninstallKB915865$\spuninst\updspapi.dll
+ 2004-08-04 00:55:32 61,440 -c--a-w c:\windows\ie7\admparse.dll
+ 2004-08-04 00:55:32 99,840 -c--a-w c:\windows\ie7\advpack.dll
+ 2004-08-04 00:55:34 35,328 -c--a-w c:\windows\ie7\corpol.dll
+ 2006-06-02 19:32:25 33,792 -c--a-w c:\windows\ie7\custsat.dll
+ 2008-10-16 10:37:23 357,888 -c--a-w c:\windows\ie7\dxtmsft.dll
+ 2008-10-16 10:37:23 205,312 -c--a-w c:\windows\ie7\dxtrans.dll
+ 2008-10-16 10:37:23 55,808 -c--a-w c:\windows\ie7\extmgr.dll
+ 2004-08-04 00:55:38 38,912 -c--a-w c:\windows\ie7\hmmapi.dll
+ 2004-08-04 00:56:16 34,304 -c--a-w c:\windows\ie7\ie4uinit.exe
+ 2004-08-04 00:55:38 139,264 -c--a-w c:\windows\ie7\ieakeng.dll
+ 2004-08-04 00:55:38 216,064 -c--a-w c:\windows\ie7\ieaksie.dll
+ 2001-09-19 15:00:00 221,184 -c--a-w c:\windows\ie7\ieakui.dll
+ 2004-08-04 00:55:38 323,584 -c--a-w c:\windows\ie7\iedkcs32.dll
+ 2008-10-15 09:45:01 18,432 -c--a-w c:\windows\ie7\iedw.exe
+ 2004-08-04 00:55:38 81,920 -c--a-w c:\windows\ie7\ieencode.dll
+ 2008-10-16 10:37:24 250,880 -c--a-w c:\windows\ie7\iepeers.dll
+ 2004-08-04 00:55:38 48,128 -c--a-w c:\windows\ie7\iernonce.dll
+ 2004-08-04 00:55:38 62,976 -c--a-w c:\windows\ie7\iesetup.dll
+ 2004-08-04 00:56:16 93,184 -c--a-w c:\windows\ie7\iexplore.exe
+ 2004-08-04 00:55:38 35,840 -c--a-w c:\windows\ie7\imgutil.dll
+ 2008-10-16 10:37:24 96,256 -c--a-w c:\windows\ie7\inseng.dll
+ 2007-12-18 14:41:00 450,560 -c--a-w c:\windows\ie7\jscript.dll
+ 2008-10-16 10:37:26 16,384 -c--a-w c:\windows\ie7\jsproxy.dll
+ 2004-08-04 00:55:40 22,016 -c--a-w c:\windows\ie7\licmgr10.dll
+ 2004-08-04 00:56:22 29,184 -c--a-w c:\windows\ie7\mshta.exe
+ 2008-12-12 17:33:22 3,081,216 -c--a-w c:\windows\ie7\mshtml.dll
+ 2008-10-16 10:37:26 449,024 -c--a-w c:\windows\ie7\mshtmled.dll
+ 2004-08-04 00:53:52 56,832 -c--a-w c:\windows\ie7\mshtmler.dll
+ 2001-09-19 15:00:00 146,432 -c--a-w c:\windows\ie7\msls31.dll
+ 2008-10-16 10:37:24 146,432 -c--a-w c:\windows\ie7\msrating.dll
+ 2008-10-16 10:37:24 532,480 -c--a-w c:\windows\ie7\mstime.dll
+ 2004-08-04 00:55:46 96,256 -c--a-w c:\windows\ie7\occache.dll
+ 2008-10-16 10:37:24 39,424 -c--a-w c:\windows\ie7\pngfilt.dll
+ 2007-09-27 14:23:42 32,960 -c--a-w c:\windows\ie7\spuninst\iecustom.dll
+ 2007-09-27 14:21:34 66,048 -c--a-w c:\windows\ie7\spuninst\ieResetIcons.exe
+ 2006-09-06 14:42:02 213,216 -c--a-w c:\windows\ie7\spuninst\spuninst.exe
+ 2006-09-06 14:42:02 369,376 -c--a-w c:\windows\ie7\spuninst\updspapi.dll
+ 2004-08-04 00:55:54 48,640 -c--a-w c:\windows\ie7\url.dll
+ 2008-10-16 10:37:27 614,912 -c--a-w c:\windows\ie7\urlmon.dll
+ 2007-12-18 14:41:00 417,792 -c--a-w c:\windows\ie7\vbscript.dll
+ 2004-08-04 00:55:54 848,384 -c--a-w c:\windows\ie7\vgx.dll
+ 2004-08-04 00:55:58 276,480 -c--a-w c:\windows\ie7\webcheck.dll
+ 2008-10-16 10:37:25 657,920 -c--a-w c:\windows\ie7\wininet.dll
+ 2007-08-13 15:39:00 123,904 -c----w c:\windows\ie7updates\KB956390-IE7\advpack.dll
+ 2007-08-13 15:35:46 346,624 -c----w c:\windows\ie7updates\KB956390-IE7\dxtmsft.dll
+ 2007-08-13 15:35:38 214,528 -c----w c:\windows\ie7updates\KB956390-IE7\dxtrans.dll
+ 2007-08-13 15:54:10 131,584 -c----w c:\windows\ie7updates\KB956390-IE7\extmgr.dll
+ 2007-08-13 15:36:26 61,952 -c----w c:\windows\ie7updates\KB956390-IE7\icardie.dll
+ 2007-08-13 15:39:06 54,784 -c----w c:\windows\ie7updates\KB956390-IE7\ie4uinit.exe
+ 2007-08-13 15:39:26 152,064 -c----w c:\windows\ie7updates\KB956390-IE7\ieakeng.dll
+ 2007-08-13 15:39:54 229,376 -c----w c:\windows\ie7updates\KB956390-IE7\ieaksie.dll
+ 2007-08-13 14:56:54 161,792 -c----w c:\windows\ie7updates\KB956390-IE7\ieakui.dll
+ 2007-02-12 13:10:12 2,451,312 -c----w c:\windows\ie7updates\KB956390-IE7\ieapfltr.dat
+ 2007-07-11 09:27:48 383,488 -c----w c:\windows\ie7updates\KB956390-IE7\ieapfltr.dll
+ 2007-08-13 15:39:50 382,976 -c----w c:\windows\ie7updates\KB956390-IE7\iedkcs32.dll
+ 2007-08-13 15:54:10 6,049,280 -c----w c:\windows\ie7updates\KB956390-IE7\ieframe.dll
+ 2007-08-13 15:39:10 43,008 -c----w c:\windows\ie7updates\KB956390-IE7\iernonce.dll
+ 2007-08-13 15:34:04 266,752 -c----w c:\windows\ie7updates\KB956390-IE7\iertutil.dll
+ 2007-08-13 15:39:10 13,312 -c----w c:\windows\ie7updates\KB956390-IE7\ieudinit.exe
+ 2007-08-13 15:43:56 622,080 -c----w c:\windows\ie7updates\KB956390-IE7\iexplore.exe
+ 2007-08-13 15:54:10 27,136 -c----w c:\windows\ie7updates\KB956390-IE7\jsproxy.dll
+ 2007-08-13 15:54:10 458,752 -c----w c:\windows\ie7updates\KB956390-IE7\msfeeds.dll
+ 2007-08-13 15:54:10 50,688 -c----w c:\windows\ie7updates\KB956390-IE7\msfeedsbs.dll
+ 2007-08-13 15:54:12 3,578,368 -c----w c:\windows\ie7updates\KB956390-IE7\mshtml.dll
+ 2007-08-13 15:54:10 475,648 -c----w c:\windows\ie7updates\KB956390-IE7\mshtmled.dll
+ 2007-08-13 15:44:26 192,000 -c----w c:\windows\ie7updates\KB956390-IE7\msrating.dll
+ 2007-08-13 15:54:10 670,720 -c----w c:\windows\ie7updates\KB956390-IE7\mstime.dll
+ 2007-08-13 15:44:06 101,376 -c----w c:\windows\ie7updates\KB956390-IE7\occache.dll
+ 2007-08-13 15:36:12 44,544 -c----w c:\windows\ie7updates\KB956390-IE7\pngfilt.dll
+ 2007-03-06 00:57:38 213,216 -c----w c:\windows\ie7updates\KB956390-IE7\spuninst\spuninst.exe
+ 2007-03-06 00:58:46 369,376 -c----w c:\windows\ie7updates\KB956390-IE7\spuninst\updspapi.dll
+ 2007-08-13 15:44:30 105,984 -c----w c:\windows\ie7updates\KB956390-IE7\url.dll
+ 2007-08-13 15:54:10 1,162,240 -c----w c:\windows\ie7updates\KB956390-IE7\urlmon.dll
+ 2007-08-13 15:54:10 231,424 -c----w c:\windows\ie7updates\KB956390-IE7\webcheck.dll
+ 2007-08-13 15:54:10 818,688 -c----w c:\windows\ie7updates\KB956390-IE7\wininet.dll
+ 2008-08-26 07:57:14 124,928 -c----w c:\windows\ie7updates\KB961260-IE7\advpack.dll
+ 2008-08-26 07:57:14 124,928 -c----w c:\windows\ie7updates\KB961260-IE7\advpack.dll.000
+ 2008-08-26 07:57:14 347,136 -c----w c:\windows\ie7updates\KB961260-IE7\dxtmsft.dll
+ 2008-08-26 07:57:14 347,136 -c----w c:\windows\ie7updates\KB961260-IE7\dxtmsft.dll.000
+ 2008-08-26 07:57:14 214,528 -c----w c:\windows\ie7updates\KB961260-IE7\dxtrans.dll
+ 2008-08-26 07:57:14 214,528 -c----w c:\windows\ie7updates\KB961260-IE7\dxtrans.dll.000
+ 2008-08-26 07:57:14 133,120 -c----w c:\windows\ie7updates\KB961260-IE7\extmgr.dll
+ 2008-08-26 07:57:14 63,488 -c----w c:\windows\ie7updates\KB961260-IE7\icardie.dll
+ 2008-08-26 07:57:14 63,488 -c----w c:\windows\ie7updates\KB961260-IE7\icardie.dll.000
+ 2008-08-25 08:35:50 70,656 -c----w c:\windows\ie7updates\KB961260-IE7\ie4uinit.exe
+ 2008-08-26 07:57:14 153,088 -c----w c:\windows\ie7updates\KB961260-IE7\ieakeng.dll
+ 2008-08-26 07:57:14 230,400 -c----w c:\windows\ie7updates\KB961260-IE7\ieaksie.dll
+ 2008-08-23 05:54:51 161,792 -c----w c:\windows\ie7updates\KB961260-IE7\ieakui.dll
+ 2007-04-17 09:32:38 2,455,488 -c----w c:\windows\ie7updates\KB961260-IE7\ieapfltr.dat
+ 2008-08-26 07:57:15 383,488 -c----w c:\windows\ie7updates\KB961260-IE7\ieapfltr.dll
+ 2008-08-26 07:57:15 383,488 -c----w c:\windows\ie7updates\KB961260-IE7\ieapfltr.dll.000
+ 2008-08-26 07:57:15 384,512 -c----w c:\windows\ie7updates\KB961260-IE7\iedkcs32.dll
+ 2008-10-03 16:58:14 6,066,176 -c----w c:\windows\ie7updates\KB961260-IE7\ieframe.dll
+ 2008-10-03 16:58:14 6,066,176 -c----w c:\windows\ie7updates\KB961260-IE7\ieframe.dll.000
+ 2008-08-26 07:57:16 44,544 -c----w c:\windows\ie7updates\KB961260-IE7\iernonce.dll
+ 2008-08-26 07:57:17 267,776 -c----w c:\windows\ie7updates\KB961260-IE7\iertutil.dll
+ 2008-08-26 07:57:17 267,776 -c----w c:\windows\ie7updates\KB961260-IE7\iertutil.dll.000
+ 2008-08-25 08:38:00 13,824 -c----w c:\windows\ie7updates\KB961260-IE7\ieudinit.exe
+ 2008-08-23 05:56:15 635,848 -c----w c:\windows\ie7updates\KB961260-IE7\iexplore.exe
+ 2008-08-23 05:56:15 635,848 -c----w c:\windows\ie7updates\KB961260-IE7\iexplore.exe.000
+ 2008-08-26 07:57:17 27,648 -c----w c:\windows\ie7updates\KB961260-IE7\jsproxy.dll
+ 2008-08-26 07:57:18 459,264 -c----w c:\windows\ie7updates\KB961260-IE7\msfeeds.dll
+ 2008-08-26 07:57:18 459,264 -c----w c:\windows\ie7updates\KB961260-IE7\msfeeds.dll.000
+ 2008-08-26 07:57:18 52,224 -c----w c:\windows\ie7updates\KB961260-IE7\msfeedsbs.dll
+ 2008-08-26 07:57:18 52,224 -c----w c:\windows\ie7updates\KB961260-IE7\msfeedsbs.dll.000
+ 2008-08-27 11:27:20 3,593,216 -c----w c:\windows\ie7updates\KB961260-IE7\mshtml.dll
+ 2008-08-27 11:27:20 3,593,216 -c----w c:\windows\ie7updates\KB961260-IE7\mshtml.dll.000
+ 2008-08-26 07:57:19 477,696 -c----w c:\windows\ie7updates\KB961260-IE7\mshtmled.dll
+ 2008-08-26 07:57:19 477,696 -c----w c:\windows\ie7updates\KB961260-IE7\mshtmled.dll.000
+ 2008-08-26 07:57:19 193,024 -c----w c:\windows\ie7updates\KB961260-IE7\msrating.dll
+ 2008-08-26 07:57:20 671,232 -c----w c:\windows\ie7updates\KB961260-IE7\mstime.dll
+ 2008-08-26 07:57:20 102,912 -c----w c:\windows\ie7updates\KB961260-IE7\occache.dll
+ 2008-08-26 07:57:20 44,544 -c----w c:\windows\ie7updates\KB961260-IE7\pngfilt.dll
+ 2008-08-26 07:57:20 44,544 -c----w c:\windows\ie7updates\KB961260-IE7\pngfilt.dll.000
+ 2007-03-06 00:57:39 213,216 -c----w c:\windows\ie7updates\KB961260-IE7\spuninst\spuninst.exe
+ 2007-03-06 00:58:46 369,376 -c----w c:\windows\ie7updates\KB961260-IE7\spuninst\updspapi.dll
+ 2008-08-26 07:57:20 105,984 -c----w c:\windows\ie7updates\KB961260-IE7\url.dll
+ 2008-08-26 07:57:20 105,984 -c----w c:\windows\ie7updates\KB961260-IE7\url.dll.000
+ 2008-08-26 07:57:21 1,159,680 -c----w c:\windows\ie7updates\KB961260-IE7\urlmon.dll
+ 2008-08-26 07:57:21 1,159,680 -c----w c:\windows\ie7updates\KB961260-IE7\urlmon.dll.000
+ 2008-08-26 07:57:21 233,472 -c----w c:\windows\ie7updates\KB961260-IE7\webcheck.dll
+ 2008-08-26 07:57:21 233,472 -c----w c:\windows\ie7updates\KB961260-IE7\webcheck.dll.000
+ 2008-08-26 07:57:21 826,368 -c----w c:\windows\ie7updates\KB961260-IE7\wininet.dll
+ 2008-08-26 07:57:21 826,368 -c----w c:\windows\ie7updates\KB961260-IE7\wininet.dll.000
+ 2006-06-02 19:32:25 33,792 ------w c:\windows\network diagnostic\custsat.dll
+ 2006-10-10 12:44:50 557,568 ------w c:\windows\network diagnostic\xpnetdiag.exe
- 2004-08-04 00:55:32 61,440 ----a-w c:\windows\system32\admparse.dll
+ 2007-08-13 15:39:20 71,680 ----a-w c:\windows\system32\admparse.dll
- 2004-08-04 00:55:32 99,840 ----a-w c:\windows\system32\advpack.dll
+ 2008-12-20 22:30:52 124,928 ----a-w c:\windows\system32\advpack.dll
- 2004-08-04 00:55:32 61,440 -c--a-w c:\windows\system32\dllcache\admparse.dll
+ 2007-08-13 15:39:20 71,680 -c--a-w c:\windows\system32\dllcache\admparse.dll
- 2004-08-04 00:55:32 99,840 -c--a-w c:\windows\system32\dllcache\advpack.dll
+ 2008-12-20 22:30:52 124,928 -c----w c:\windows\system32\dllcache\advpack.dll
- 2004-08-04 00:55:34 28,672 -c--a-w c:\windows\system32\dllcache\custsat.dll
+ 2007-08-13 15:54:10 33,792 -c--a-w c:\windows\system32\dllcache\custsat.dll
- 2008-10-16 10:37:23 357,888 -c--a-w c:\windows\system32\dllcache\dxtmsft.dll
+ 2008-12-20 22:30:52 347,136 -c----w c:\windows\system32\dllcache\dxtmsft.dll
- 2008-10-16 10:37:23 205,312 -c--a-w c:\windows\system32\dllcache\dxtrans.dll
+ 2008-12-20 22:30:53 214,528 -c----w c:\windows\system32\dllcache\dxtrans.dll
- 2008-10-16 10:37:23 55,808 -c--a-w c:\windows\system32\dllcache\extmgr.dll
+ 2008-12-20 22:30:53 133,120 -c----w c:\windows\system32\dllcache\extmgr.dll
- 2004-08-04 00:55:38 38,912 -c--a-w c:\windows\system32\dllcache\hmmapi.dll
+ 2007-08-13 15:18:02 60,416 -c--a-w c:\windows\system32\dllcache\hmmapi.dll
+ 2008-12-20 22:30:53 63,488 -c----w c:\windows\system32\dllcache\icardie.dll
- 2004-08-04 00:56:16 34,304 -c--a-w c:\windows\system32\dllcache\ie4uinit.exe
+ 2008-12-19 09:08:41 70,656 -c----w c:\windows\system32\dllcache\ie4uinit.exe
- 2004-08-04 00:55:38 139,264 -c--a-w c:\windows\system32\dllcache\ieakeng.dll
+ 2008-12-20 22:30:53 153,088 -c----w c:\windows\system32\dllcache\ieakeng.dll
- 2004-08-04 00:55:38 216,064 -c--a-w c:\windows\system32\dllcache\ieaksie.dll
+ 2008-12-20 22:30:53 230,400 -c----w c:\windows\system32\dllcache\ieaksie.dll
- 2001-09-19 15:00:00 221,184 -c--a-w c:\windows\system32\dllcache\ieakui.dll
+ 2008-12-19 05:23:56 161,792 -c----w c:\windows\system32\dllcache\ieakui.dll
+ 2007-04-17 09:32:38 2,455,488 -c----w c:\windows\system32\dllcache\ieapfltr.dat
+ 2008-12-20 22:30:54 383,488 -c----w c:\windows\system32\dllcache\ieapfltr.dll
- 2004-08-04 00:55:38 323,584 -c--a-w c:\windows\system32\dllcache\iedkcs32.dll
+ 2008-12-20 22:30:54 384,512 -c----w c:\windows\system32\dllcache\iedkcs32.dll
- 2008-10-15 09:45:01 18,432 -c--a-w c:\windows\system32\dllcache\iedw.exe
+ 2007-08-13 15:44:02 69,120 -c--a-w c:\windows\system32\dllcache\iedw.exe
- 2004-08-04 00:55:38 81,920 -c--a-w c:\windows\system32\dllcache\ieencode.dll
+ 2007-08-13 15:45:18 78,336 -c--a-w c:\windows\system32\dllcache\ieencode.dll
+ 2008-12-20 22:30:58 6,066,688 -c----w c:\windows\system32\dllcache\ieframe.dll
- 2008-10-16 10:37:24 250,880 -c--a-w c:\windows\system32\dllcache\iepeers.dll
+ 2007-08-13 15:54:10 191,488 -c--a-w c:\windows\system32\dllcache\iepeers.dll
- 2004-08-04 00:55:38 48,128 -c--a-w c:\windows\system32\dllcache\iernonce.dll
+ 2008-12-20 22:30:59 44,544 -c----w c:\windows\system32\dllcache\iernonce.dll
+ 2008-12-20 22:30:59 267,776 -c----w c:\windows\system32\dllcache\iertutil.dll
- 2004-08-04 00:55:38 62,976 -c--a-w c:\windows\system32\dllcache\iesetup.dll
+ 2007-08-13 15:39:12 55,296 -c--a-w c:\windows\system32\dllcache\iesetup.dll
+ 2008-12-19 09:10:15 13,824 -c----w c:\windows\system32\dllcache\ieudinit.exe
- 2004-08-04 00:56:16 93,184 -c--a-w c:\windows\system32\dllcache\iexplore.exe
+ 2008-12-19 05:25:25 634,024 -c----w c:\windows\system32\dllcache\iexplore.exe
- 2004-08-04 00:55:38 35,840 -c--a-w c:\windows\system32\dllcache\imgutil.dll
+ 2007-08-13 15:36:06 36,352 -c--a-w c:\windows\system32\dllcache\imgutil.dll
- 2008-10-16 10:37:24 96,256 -c--a-w c:\windows\system32\dllcache\inseng.dll
+ 2007-08-13 15:39:02 92,672 -c--a-w c:\windows\system32\dllcache\inseng.dll
- 2007-12-18 14:41:00 450,560 -c--a-w c:\windows\system32\dllcache\jscript.dll
+ 2007-08-13 15:38:04 491,520 -c--a-w c:\windows\system32\dllcache\jscript.dll
- 2008-10-16 10:37:26 16,384 -c--a-w c:\windows\system32\dllcache\jsproxy.dll
+ 2008-12-20 22:31:01 27,648 -c----w c:\windows\system32\dllcache\jsproxy.dll
- 2004-08-04 00:55:40 22,016 -c--a-w c:\windows\system32\dllcache\licmgr10.dll
+ 2007-08-13 15:44:18 40,960 -c--a-w c:\windows\system32\dllcache\licmgr10.dll
+ 2008-12-20 22:31:01 459,264 -c----w c:\windows\system32\dllcache\msfeeds.dll
+ 2008-12-20 22:31:01 52,224 -c----w c:\windows\system32\dllcache\msfeedsbs.dll
- 2004-08-04 00:56:22 29,184 -c--a-w c:\windows\system32\dllcache\mshta.exe
+ 2007-08-13 15:32:30 45,568 -c--a-w c:\windows\system32\dllcache\mshta.exe
- 2008-12-12 17:33:22 3,081,216 -c--a-w c:\windows\system32\dllcache\mshtml.dll
+ 2009-01-16 18:01:16 3,594,752 -c----w c:\windows\system32\dllcache\mshtml.dll
- 2008-10-16 10:37:26 449,024 -c--a-w c:\windows\system32\dllcache\mshtmled.dll
+ 2008-12-20 22:31:06 477,696 -c----w c:\windows\system32\dllcache\mshtmled.dll
- 2004-08-04 00:53:52 56,832 -c--a-w c:\windows\system32\dllcache\mshtmler.dll
+ 2007-08-13 15:01:12 48,128 -c--a-w c:\windows\system32\dllcache\mshtmler.dll
- 2001-09-19 15:00:00 146,432 -c--a-w c:\windows\system32\dllcache\msls31.dll
+ 2007-08-13 15:54:10 156,160 -c--a-w c:\windows\system32\dllcache\msls31.dll
- 2008-10-16 10:37:24 146,432 -c--a-w c:\windows\system32\dllcache\msrating.dll
+ 2008-12-20 22:31:06 193,024 -c----w c:\windows\system32\dllcache\msrating.dll
- 2008-10-16 10:37:24 532,480 -c--a-w c:\windows\system32\dllcache\mstime.dll
+ 2008-12-20 22:31:07 671,232 -c----w c:\windows\system32\dllcache\mstime.dll
- 2004-08-04 00:55:46 96,256 -c--a-w c:\windows\system32\dllcache\occache.dll
+ 2008-12-20 22:31:08 102,912 -c----w c:\windows\system32\dllcache\occache.dll
- 2008-10-16 10:37:24 39,424 -c--a-w c:\windows\system32\dllcache\pngfilt.dll
+ 2008-12-20 22:31:08 44,544 -c----w c:\windows\system32\dllcache\pngfilt.dll
- 2004-08-04 00:55:54 48,640 -c--a-w c:\windows\system32\dllcache\url.dll
+ 2008-12-20 22:31:08 105,984 -c----w c:\windows\system32\dllcache\url.dll
- 2008-10-16 10:37:27 614,912 -c--a-w c:\windows\system32\dllcache\urlmon.dll
+ 2008-12-20 22:31:09 1,160,192 -c----w c:\windows\system32\dllcache\urlmon.dll
- 2007-12-18 14:41:00 417,792 -c--a-w c:\windows\system32\dllcache\vbscript.dll
+ 2007-08-13 15:54:10 413,696 -c--a-w c:\windows\system32\dllcache\vbscript.dll
- 2004-08-04 00:55:54 848,384 -c--a-w c:\windows\system32\dllcache\vgx.dll
+ 2007-08-13 15:54:10 765,952 -c--a-w c:\windows\system32\dllcache\VGX.dll
- 2004-08-04 00:55:58 49,152 -c--a-w c:\windows\system32\dllcache\wdigest.dll
+ 2006-03-24 04:37:50 49,152 -c--a-w c:\windows\system32\dllcache\wdigest.dll
- 2004-08-04 00:55:58 276,480 -c--a-w c:\windows\system32\dllcache\webcheck.dll
+ 2008-12-20 22:31:09 233,472 -c----w c:\windows\system32\dllcache\webcheck.dll
+ 2009-03-10 19:18:00 264,576 -c----w c:\windows\system32\dllcache\wgaLogon.dll
+ 2009-03-10 19:18:14 960,392 -c----w c:\windows\system32\dllcache\WgaTray.exe
- 2008-10-16 10:37:25 657,920 -c--a-w c:\windows\system32\dllcache\wininet.dll
+ 2008-12-20 22:31:10 826,368 -c----w c:\windows\system32\dllcache\wininet.dll
- 2008-10-16 10:37:23 357,888 ----a-w c:\windows\system32\dxtmsft.dll
+ 2008-12-20 22:30:52 347,136 ----a-w c:\windows\system32\dxtmsft.dll
- 2008-10-16 10:37:23 205,312 ----a-w c:\windows\system32\dxtrans.dll
+ 2008-12-20 22:30:53 214,528 ----a-w c:\windows\system32\dxtrans.dll
- 2008-10-16 10:37:23 55,808 ----a-w c:\windows\system32\extmgr.dll
+ 2008-12-20 22:30:53 133,120 ------w c:\windows\system32\extmgr.dll
+ 2008-12-20 22:30:53 63,488 ----a-w c:\windows\system32\icardie.dll
+ 2006-06-29 05:05:44 26,112 ------w c:\windows\system32\idndl.dll
- 2004-08-04 00:56:16 34,304 ----a-w c:\windows\system32\ie4uinit.exe
+ 2008-12-19 09:08:41 70,656 ------w c:\windows\system32\ie4uinit.exe
- 2004-08-04 00:55:38 139,264 ----a-w c:\windows\system32\ieakeng.dll
+ 2008-12-20 22:30:53 153,088 ------w c:\windows\system32\ieakeng.dll
- 2004-08-04 00:55:38 216,064 ----a-w c:\windows\system32\ieaksie.dll
+ 2008-12-20 22:30:53 230,400 ------w c:\windows\system32\ieaksie.dll
- 2001-09-19 15:00:00 221,184 ----a-w c:\windows\system32\ieakui.dll
+ 2008-12-19 05:23:56 161,792 ------w c:\windows\system32\ieakui.dll
+ 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\system32\ieapfltr.dat
+ 2008-12-20 22:30:54 383,488 ----a-w c:\windows\system32\ieapfltr.dll
- 2004-08-04 00:55:38 323,584 ----a-w c:\windows\system32\iedkcs32.dll
+ 2008-12-20 22:30:54 384,512 ------w c:\windows\system32\iedkcs32.dll
- 2004-08-04 00:55:38 81,920 ----a-w c:\windows\system32\ieencode.dll
+ 2007-08-13 15:45:18 78,336 ----a-w c:\windows\system32\ieencode.dll
+ 2008-12-20 22:30:58 6,066,688 ----a-w c:\windows\system32\ieframe.dll
- 2008-10-16 10:37:24 250,880 ----a-w c:\windows\system32\iepeers.dll
+ 2007-08-13 15:54:10 191,488 ----a-w c:\windows\system32\iepeers.dll
- 2004-08-04 00:55:38 48,128 ----a-w c:\windows\system32\iernonce.dll
+ 2008-12-20 22:30:59 44,544 ------w c:\windows\system32\iernonce.dll
+ 2008-12-20 22:30:59 267,776 ----a-w c:\windows\system32\iertutil.dll
- 2004-08-04 00:55:38 62,976 ----a-w c:\windows\system32\iesetup.dll
+ 2007-08-13 15:39:12 55,296 ----a-w c:\windows\system32\iesetup.dll
+ 2008-12-19 09:10:15 13,824 ----a-w c:\windows\system32\ieudinit.exe
+ 2007-08-13 15:54:10 180,736 ------w c:\windows\system32\ieui.dll
- 2004-08-04 00:55:38 35,840 ----a-w c:\windows\system32\imgutil.dll
+ 2007-08-13 15:36:06 36,352 ----a-w c:\windows\system32\imgutil.dll
- 2008-10-16 10:37:24 96,256 ----a-w c:\windows\system32\inseng.dll
+ 2007-08-13 15:39:02 92,672 ----a-w c:\windows\system32\inseng.dll
- 2007-12-18 14:41:00 450,560 ----a-w c:\windows\system32\jscript.dll
+ 2007-08-13 15:38:04 491,520 ----a-w c:\windows\system32\jscript.dll
- 2008-10-16 10:37:26 16,384 ----a-w c:\windows\system32\jsproxy.dll
+ 2008-12-20 22:31:01 27,648 ------w c:\windows\system32\jsproxy.dll
+ 2009-03-10 19:26:30 1,430,400 ----a-w c:\windows\system32\KB905474\wganotifypackageinner.exe
+ 2009-03-10 19:18:08 453,000 ----a-w c:\windows\system32\KB905474\wgasetup.exe
+ 2009-03-10 19:18:20 1,482,112 ------w c:\windows\system32\LegitCheckControl.dll
- 2004-08-04 00:55:40 22,016 ----a-w c:\windows\system32\licmgr10.dll
+ 2007-08-13 15:44:18 40,960 ----a-w c:\windows\system32\licmgr10.dll
+ 2008-12-20 22:31:01 459,264 ----a-w c:\windows\system32\msfeeds.dll
+ 2008-12-20 22:31:01 52,224 ----a-w c:\windows\system32\msfeedsbs.dll
+ 2007-08-13 15:36:40 12,288 ------w c:\windows\system32\msfeedssync.exe
- 2004-08-04 00:56:22 29,184 ----a-w c:\windows\system32\mshta.exe
+ 2007-08-13 15:32:30 45,568 ----a-w c:\windows\system32\mshta.exe
- 2008-12-12 17:33:22 3,081,216 ----a-w c:\windows\system32\mshtml.dll
+ 2009-01-16 18:01:16 3,594,752 ----a-w c:\windows\system32\mshtml.dll
- 2008-10-16 10:37:26 449,024 ----a-w c:\windows\system32\mshtmled.dll
+ 2008-12-20 22:31:06 477,696 ----a-w c:\windows\system32\mshtmled.dll
- 2004-08-04 00:53:52 56,832 ----a-w c:\windows\system32\mshtmler.dll
+ 2007-08-13 15:01:12 48,128 ----a-w c:\windows\system32\mshtmler.dll
- 2001-09-19 15:00:00 146,432 ----a-w c:\windows\system32\msls31.dll
+ 2007-08-13 15:54:10 156,160 ----a-w c:\windows\system32\msls31.dll
- 2008-10-16 10:37:24 146,432 ----a-w c:\windows\system32\msrating.dll
+ 2008-12-20 22:31:06 193,024 ------w c:\windows\system32\msrating.dll
- 2008-10-16 10:37:24 532,480 ----a-w c:\windows\system32\mstime.dll
+ 2008-12-20 22:31:07 671,232 ------w c:\windows\system32\mstime.dll
+ 2006-06-28 14:59:26 24,576 ------w c:\windows\system32\nlsdl.dll
+ 2006-06-29 05:05:44 23,552 ------w c:\windows\system32\normaliz.dll
- 2004-08-04 00:55:46 96,256 ----a-w c:\windows\system32\occache.dll
+ 2008-12-20 22:31:08 102,912 ------w c:\windows\system32\occache.dll
- 2008-10-16 10:37:24 39,424 ----a-w c:\windows\system32\pngfilt.dll
+ 2008-12-20 22:31:08 44,544 ----a-w c:\windows\system32\pngfilt.dll
- 2007-11-30 11:18:09 17,784 ------w c:\windows\system32\spmsg.dll
+ 2008-07-09 07:34:18 17,784 ------w c:\windows\system32\spmsg.dll
- 2005-02-25 03:34:29 22,752 ----a-w c:\windows\system32\spupdsvc.exe
+ 2006-09-06 14:42:02 22,752 ----a-w c:\windows\system32\spupdsvc.exe
- 2004-08-04 00:55:54 48,640 ----a-w c:\windows\system32\url.dll
+ 2008-12-20 22:31:08 105,984 ----a-w c:\windows\system32\url.dll
- 2008-10-16 10:37:27 614,912 ----a-w c:\windows\system32\urlmon.dll
+ 2008-12-20 22:31:09 1,160,192 ----a-w c:\windows\system32\urlmon.dll
- 2007-12-18 14:41:00 417,792 ----a-w c:\windows\system32\vbscript.dll
+ 2007-08-13 15:54:10 413,696 ----a-w c:\windows\system32\vbscript.dll
- 2004-08-04 00:55:58 49,152 ----a-w c:\windows\system32\wdigest.dll
+ 2006-03-24 04:37:50 49,152 ----a-w c:\windows\system32\wdigest.dll
- 2004-08-04 00:55:58 276,480 ----a-w c:\windows\system32\webcheck.dll
+ 2008-12-20 22:31:09 233,472 ----a-w c:\windows\system32\webcheck.dll
+ 2009-03-10 19:18:00 264,576 ------w c:\windows\system32\WgaLogon.dll
+ 2009-03-10 19:18:14 960,392 ------w c:\windows\system32\WgaTray.exe
+ 2007-08-13 15:45:16 206,336 ------w c:\windows\system32\WinFXDocObj.exe
- 2008-10-16 10:37:25 657,920 ----a-w c:\windows\system32\wininet.dll
+ 2008-12-20 22:31:10 826,368 ----a-w c:\windows\system32\wininet.dll
+ 2006-07-14 15:51:51 121,856 ------w c:\windows\system32\xmllite.dll
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [08/16/2007 04:19 PM 5728112]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [03/06/2009 10:24 PM 68856]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [08/04/2004 03:56 AM 15360]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [08/04/2004 03:56 AM 15360]
c:\documents and settings\All Users\çںê، ں §ڑ\ںé ©ںê¤\ §ک ں颬نïé\
Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2009-03-02 113664]
AudioDeck.lnk - c:\program files\VIA Technologies, Inc\VIA Audio Driver Setup Program\AudioDeck\AudioDeck.exe [2009-03-02 581632]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.divxa32"= msaud32_divx.acm
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^قائمة ابدأ^البرامج^بدء التشغيل^Adobe Gamma Loader.lnk]
path=c:\documents and settings\All Users\قائمة ابدأ\البرامج\بدء التشغيل\Adobe Gamma Loader.lnk
backup=c:\windows\pss\Adobe Gamma Loader.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^قائمة ابدأ^البرامج^بدء التشغيل^AudioDeck.lnk]
path=c:\documents and settings\All Users\قائمة ابدأ\البرامج\بدء التشغيل\AudioDeck.lnk
backup=c:\windows\pss\AudioDeck.lnkCommon Startup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
--a------ 01/11/2008 10:16 PM 39792 c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
--a------ 08/16/2007 04:19 PM 5728112 c:\program files\Windows Live\Messenger\msnmsgr.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
--a------ 06/10/2008 04:27 AM 144784 c:\program files\Java\jre1.6.0_07\bin\jusched.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
--a------ 03/02/2009 06:05 PM 185896 c:\program files\Common Files\Real\Update_OB\realsched.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"avast! Web Scanner"=3 (0x3)
"avast! Mail Scanner"=3 (0x3)
"avast! Antivirus"=2 (0x2)
"aswUpdSv"=2 (0x2)
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"c:\\Program Files\\LeapFTP\\LeapFTP.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
S3 SetupNTGLM7X;SetupNTGLM7X;\??\e:\ntglm7x.sys --> e:\NTGLM7X.sys [?]
S3 Vsp;Vsp;c:\windows\system32\drivers\vsp.sys [2009-03-02 3351]
.
Contents of the 'Scheduled Tasks' folder
2009-03-08 c:\windows\Tasks\WGASetup.job
- c:\windows\system32\KB905474\wgasetup.exe [03/10/2009 10:18 PM]
.
.
------- Supplementary Scan -------
.
uStart Page = about:blank
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: &تصدير إلى Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
DPF: Microsoft XML Parser for Java -
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
.
**************************************************************************
catchme 0.3.1375 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
Rootkit scan 2009-03-08 13:44:30
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
Completion time: 03/08/2009 13:45:43
ComboFix-quarantined-files.txt 2009-03-08 10:45:30
ComboFix2.txt 2009-03-07 23:03:33
Pre-Run: 35,083,202,560 bytes free
Post-Run: 35,107,790,848 bytes free
535
وهذا تقرير الهاي جاك بعد ComboFix
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 01:48:53 م, on 08/03/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\VIA Technologies, Inc\VIA Audio Driver Setup Program\AudioDeck\AudioDeck.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\explorer.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\internet explorer\iexplore.exe
D:\خاص\برامج تنظيف\Zyzoom_HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: AudioDeck.lnk = C:\Program Files\VIA Technologies, Inc\VIA Audio Driver Setup Program\AudioDeck\AudioDeck.exe
O8 - Extra context menu item: &تصدير إلى Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: بحث - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
--
End of file - 3910 bytes
k: