Trojaner-Board
Seite 3 von 4 12 3 4
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Browser öffnet automatisch neue Tabs (https://www.trojaner-board.de/88604-browser-oeffnet-automatisch-neue-tabs.html)

cosinus 05.08.2010 14:43
Beende alle Programme, starte OTL und kopiere folgenden Text in die "Custom Scan/Fixes" Box (unten in OTL): (das ":OTL" muss mitkopiert werden!!!)


Code:
:OTL
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:5577
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
[2010.07.12 10:28:10 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Steffi\Lokale Einstellungen\Anwendungsdaten\rkshqsbtj
[2010.08.01 15:21:17 | 000,000,020 | -H-- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PKP_DLdw.DAT
[2010.08.01 14:54:04 | 000,000,020 | -H-- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PKP_DLdu.DAT
[2010.07.20 15:58:27 | 000,002,528 | ---- | M] () -- C:\Dokumente und Einstellungen\Steffi\Anwendungsdaten\$_hpcst$.hpc
:Commands
[purity]
[resethosts]
[emptytemp]
Klick dann auf den Button Run Fixes!
Das Logfile müsste geöffnet werden, wenn Du nach dem Fixen auf ok klickst, poste das bitte. Evtl. wird der Rechner neu gestartet.

123click 05.08.2010 14:59
Hallo Arne,

erledigt:
Code:
All processes killed
========== OTL ==========
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveAutoRun deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\HonorAutoRunSetting deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDrives deleted successfully.
Registry key HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel\ deleted successfully.
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun deleted successfully.
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveAutoRun deleted successfully.
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDrives deleted successfully.
C:\Dokumente und Einstellungen\Steffi\Lokale Einstellungen\Anwendungsdaten\rkshqsbtj folder moved successfully.
C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PKP_DLdw.DAT moved successfully.
C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PKP_DLdu.DAT moved successfully.
C:\Dokumente und Einstellungen\Steffi\Anwendungsdaten\$_hpcst$.hpc moved successfully.
========== COMMANDS ==========
C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
 
[EMPTYTEMP]
 
User: Administrator
->Temp folder emptied: 49152 bytes
->Temporary Internet Files folder emptied: 219139 bytes
->FireFox cache emptied: 3056949 bytes
 
User: All Users
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33728 bytes
->Flash cache emptied: 41 bytes
 
User: Gast
->Temp folder emptied: 554078 bytes
->Temporary Internet Files folder emptied: 33728 bytes
 
User: Holla
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 40993421 bytes
->Flash cache emptied: 2673 bytes
 
User: LocalService
->Temp folder emptied: 65748 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 841 bytes
 
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 2146438 bytes
->Flash cache emptied: 2730 bytes
 
User: Party
->Temp folder emptied: 3942769 bytes
->Temporary Internet Files folder emptied: 147589 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 98526147 bytes
->Flash cache emptied: 12338 bytes
 
User: Steffi
->Temp folder emptied: 43667408 bytes
->Temporary Internet Files folder emptied: 17286074 bytes
->Java cache emptied: 269711 bytes
->FireFox cache emptied: 43555482 bytes
->Flash cache emptied: 9629 bytes
 
User: Titel-Datenbank
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 2239257 bytes
%systemroot%\System32 .tmp files removed: 2951 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 855281 bytes
RecycleBin emptied: 1408621456 bytes
 
Total Files Cleaned = 1.589,00 mb
 
 
OTL by OldTimer - Version 3.2.9.1 log created on 08052010_155518

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...
Grüße Stefan

cosinus 05.08.2010 16:15
Mach bitte einen weiteren Durchgang mit CF. Die alte cofi.exe bitte vorher löschen!!



ComboFix

Ein Leitfaden und Tutorium zur Nutzung von ComboFix
  • Lade dir ComboFix hier herunter auf deinen Desktop. Benenne es beim Runterladen um in cofi.exe.
http://saved.im/mtm0nzyzmzd5/cofi.jpg
  • Schliesse alle Programme, vor allem dein Antivirenprogramm und andere Hintergrundwächter sowie deinen Internetbrowser.
  • Starte cofi.exe von deinem Desktop aus, bestätige die Warnmeldungen, führe die Updates durch (falls vorgeschlagen), installiere die Wiederherstellungskonsole (falls vorgeschlagen) und lass dein System durchsuchen.
    Vermeide es auch während Combofix läuft die Maus und Tastatur zu benutzen.
  • Im Anschluss öffnet sich automatisch eine combofix.txt, diesen Inhalt bitte kopieren ([Strg]a, [Strg]c) und in deinen Beitrag einfügen ([Strg]v). Die Datei findest du außerdem unter: C:\ComboFix.txt.
Wichtiger Hinweis:
Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat!
Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich ziehen und eine Bereinigung der Infektion noch erschweren.

123click 05.08.2010 18:04
Hallo Arne,

schon geschehen:
Code:
ComboFix 10-08-04.05 - Steffi 05.08.2010  18:54:55.3.1 - x86
Microsoft Windows XP Professional  5.1.2600.3.1252.49.1031.18.1022.616 [GMT 2:00]
ausgeführt von:: c:\dokumente und einstellungen\Steffi\Desktop\cofi.exe
AV: avast! Antivirus *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
.

((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\Thumbs.db

.
(((((((((((((((((((((((  Dateien erstellt von 2010-07-05 bis 2010-08-05  ))))))))))))))))))))))))))))))
.

2010-08-21 10:18 . 2010-06-28 20:37        165456        ----a-w-        c:\windows\system32\drivers\aswSP.sys
2010-08-21 10:18 . 2010-06-28 20:32        17744        ----a-w-        c:\windows\system32\drivers\aswFsBlk.sys
2010-08-21 10:18 . 2010-06-28 20:33        23376        ----a-w-        c:\windows\system32\drivers\aswRdr.sys
2010-08-21 10:18 . 2010-06-28 20:37        46672        ----a-w-        c:\windows\system32\drivers\aswTdi.sys
2010-08-21 10:18 . 2010-06-28 20:32        100176        ----a-w-        c:\windows\system32\drivers\aswmon2.sys
2010-08-21 10:18 . 2010-06-28 20:32        94544        ----a-w-        c:\windows\system32\drivers\aswmon.sys
2010-08-21 10:18 . 2010-06-28 20:32        28880        ----a-w-        c:\windows\system32\drivers\aavmker4.sys
2010-08-21 10:17 . 2010-06-28 20:57        165032        ----a-w-        c:\windows\system32\aswBoot.exe
2010-08-05 13:55 . 2010-08-05 13:55        --------        d-----w-        C:\_OTL
2010-08-02 15:42 . 2010-08-02 15:42        --------        d-sh--w-        c:\dokumente und einstellungen\Party\IETldCache
2010-08-01 13:24 . 2010-08-01 13:24        --------        d-----w-        c:\programme\Gemeinsame Dateien\Skype
2010-07-29 20:05 . 2010-08-05 09:40        63488        ----a-w-        c:\dokumente und einstellungen\Steffi\Anwendungsdaten\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10006.dll
2010-07-29 20:05 . 2010-07-29 20:05        52224        ----a-w-        c:\dokumente und einstellungen\Steffi\Anwendungsdaten\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll
2010-07-29 20:05 . 2010-08-05 09:40        117760        ----a-w-        c:\dokumente und einstellungen\Steffi\Anwendungsdaten\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL
2010-07-29 20:05 . 2010-07-29 20:05        --------        d-----w-        c:\dokumente und einstellungen\Steffi\Anwendungsdaten\SUPERAntiSpyware.com
2010-07-29 20:05 . 2010-07-29 20:05        --------        d-----w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\SUPERAntiSpyware.com
2010-07-29 18:30 . 2010-07-21 17:50        81920        ----a-w-        c:\windows\system32\remover.exe
2010-07-26 22:29 . 2010-07-26 22:29        --------        d-sh--w-        c:\dokumente und einstellungen\Steffi\PrivacIE
2010-07-26 20:45 . 2010-07-26 20:45        --------        d-sh--w-        c:\dokumente und einstellungen\NetworkService\IETldCache
2010-07-26 20:45 . 2010-07-26 20:45        --------        d-sh--w-        c:\dokumente und einstellungen\Steffi\IETldCache
2010-07-26 19:59 . 2010-08-05 10:19        --------        d-----w-        c:\windows\system32\KB905474
2010-07-26 19:38 . 2009-11-21 15:54        471552        -c----w-        c:\windows\system32\dllcache\aclayers.dll
2010-07-26 19:38 . 2009-10-15 16:28        81920        -c----w-        c:\windows\system32\dllcache\fontsub.dll
2010-07-26 19:38 . 2009-10-15 16:28        119808        -c----w-        c:\windows\system32\dllcache\t2embed.dll
2010-07-26 19:38 . 2009-10-23 15:28        3558912        -c----w-        c:\windows\system32\dllcache\moviemk.exe
2010-07-26 19:38 . 2010-02-12 10:03        293376        ------w-        c:\windows\system32\browserchoice.exe
2010-07-26 19:38 . 2010-06-14 14:31        744448        -c----w-        c:\windows\system32\dllcache\helpsvc.exe
2010-07-26 19:38 . 2009-06-21 21:45        153088        -c----w-        c:\windows\system32\dllcache\triedit.dll
2010-07-26 19:36 . 2009-02-06 10:10        227840        -c----w-        c:\windows\system32\dllcache\wmiprvse.exe
2010-07-26 19:36 . 2009-03-06 14:19        286720        -c----w-        c:\windows\system32\dllcache\pdh.dll
2010-07-26 19:36 . 2009-02-09 11:21        111104        -c----w-        c:\windows\system32\dllcache\services.exe
2010-07-26 19:36 . 2009-02-09 10:51        401408        -c----w-        c:\windows\system32\dllcache\rpcss.dll
2010-07-26 19:36 . 2009-02-09 10:51        678400        -c----w-        c:\windows\system32\dllcache\advapi32.dll
2010-07-26 19:36 . 2009-02-09 10:51        473600        -c----w-        c:\windows\system32\dllcache\fastprox.dll
2010-07-26 19:36 . 2009-02-09 10:51        740352        -c----w-        c:\windows\system32\dllcache\ntdll.dll
2010-07-26 19:36 . 2009-02-09 10:51        453120        -c----w-        c:\windows\system32\dllcache\wmiprvsd.dll
2010-07-26 19:34 . 2008-04-21 21:13        217600        -c----w-        c:\windows\system32\dllcache\wordpad.exe
2010-07-26 17:16 . 2010-07-26 17:56        --------        d-----w-        C:\cofi.exe
2010-07-24 14:55 . 2010-07-24 14:55        --------        d-----w-        c:\dokumente und einstellungen\Party\Lokale Einstellungen\Anwendungsdaten\Nikon
2010-07-24 14:55 . 2010-07-24 14:55        --------        d-----w-        c:\dokumente und einstellungen\Party\Anwendungsdaten\NIKON
2010-07-23 11:12 . 2010-07-23 11:12        --------        d-----w-        C:\rsit
2010-07-23 11:12 . 2010-07-23 11:12        --------        d-----w-        c:\programme\trend micro
2010-07-20 09:50 . 2010-07-20 09:50        --------        d-----w-        c:\dokumente und einstellungen\Steffi\Anwendungsdaten\MSN6
2010-07-20 09:50 . 2010-07-20 09:50        --------        d-----w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\MSN6
2010-07-20 09:15 . 2010-07-20 09:15        335        ----a-w-        c:\windows\mozregistry.dat
2010-07-16 17:00 . 2010-07-16 17:00        --------        d-----w-        c:\dokumente und einstellungen\Holla\Lokale Einstellungen\Anwendungsdaten\Google
2010-07-16 10:18 . 2010-07-16 10:18        1        ----a-w-        c:\dokumente und einstellungen\Holla\Anwendungsdaten\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
2010-07-16 10:18 . 2010-07-16 10:18        --------        d-----w-        c:\dokumente und einstellungen\Holla\Anwendungsdaten\OpenOffice.org
2010-07-15 18:02 . 2010-07-15 18:02        664        ----a-w-        c:\dokumente und einstellungen\Party\Lokale Einstellungen\Anwendungsdaten\d3d9caps.dat
2010-07-15 16:37 . 2010-07-15 16:37        --------        d-----w-        c:\dokumente und einstellungen\Party\Lokale Einstellungen\Anwendungsdaten\Identities
2010-07-14 15:48 . 2010-07-14 15:48        --------        d-s---w-        c:\dokumente und einstellungen\Holla\UserData
2010-07-14 11:34 . 2010-07-14 11:34        61440        ----a-w-        c:\dokumente und einstellungen\Holla\Anwendungsdaten\Sun\Java\Deployment\SystemCache\6.0\50\5535ab32-4b4ea3d5-n\decora-sse.dll
2010-07-14 11:34 . 2010-07-14 11:34        503808        ----a-w-        c:\dokumente und einstellungen\Holla\Anwendungsdaten\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-7e76e116-n\msvcp71.dll
2010-07-14 11:34 . 2010-07-14 11:34        499712        ----a-w-        c:\dokumente und einstellungen\Holla\Anwendungsdaten\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-7e76e116-n\jmc.dll
2010-07-14 11:34 . 2010-07-14 11:34        348160        ----a-w-        c:\dokumente und einstellungen\Holla\Anwendungsdaten\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-7e76e116-n\msvcr71.dll
2010-07-14 11:34 . 2010-07-14 11:34        12800        ----a-w-        c:\dokumente und einstellungen\Holla\Anwendungsdaten\Sun\Java\Deployment\SystemCache\6.0\50\5535ab32-4b4ea3d5-n\decora-d3d.dll
2010-07-14 08:11 . 2010-07-14 08:11        --------        d-----w-        c:\dokumente und einstellungen\Holla\Anwendungsdaten\Malwarebytes
2010-07-13 11:09 . 2010-07-13 11:09        --------        d-s---w-        c:\dokumente und einstellungen\LocalService\UserData
2010-07-13 10:44 . 2010-07-13 10:44        --------        d-----w-        c:\dokumente und einstellungen\NetworkService\Anwendungsdaten\AdobeUM
2010-07-13 10:44 . 2010-07-13 10:44        --------        d-----w-        c:\dokumente und einstellungen\NetworkService\Lokale Einstellungen\Anwendungsdaten\Adobe
2010-07-12 09:05 . 2010-07-12 09:05        --------        d-----w-        c:\dokumente und einstellungen\Steffi\Anwendungsdaten\Malwarebytes
2010-07-12 09:04 . 2010-04-29 13:39        38224        ----a-w-        c:\windows\system32\drivers\mbamswissarmy.sys
2010-07-12 09:04 . 2010-07-12 09:04        --------        d-----w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\Malwarebytes
2010-07-12 09:04 . 2010-04-29 13:39        20952        ----a-w-        c:\windows\system32\drivers\mbam.sys
2010-07-12 08:48 . 2010-07-12 08:48        --------        d-s---w-        c:\dokumente und einstellungen\NetworkService\UserData

.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-08-21 10:17 . 2010-05-31 09:08        --------        d-----w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\Alwil Software
2010-08-04 23:31 . 2010-03-10 19:56        --------        d-----w-        c:\dokumente und einstellungen\Steffi\Anwendungsdaten\Skype
2010-08-04 22:05 . 2010-03-10 19:56        --------        d-----w-        c:\dokumente und einstellungen\Steffi\Anwendungsdaten\skypePM
2010-08-04 15:53 . 2008-08-26 01:22        --------        d-----w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\Google Updater
2010-08-04 12:43 . 2010-05-07 21:05        20        ---h--w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\PKP_DLbx.DAT
2010-08-03 11:57 . 2009-09-14 09:53        1        ----a-w-        c:\dokumente und einstellungen\Steffi\Anwendungsdaten\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
2010-08-02 19:46 . 2009-10-22 11:16        --------        d-----w-        c:\dokumente und einstellungen\Party\Anwendungsdaten\Skype
2010-08-02 15:50 . 2009-10-22 11:17        --------        d-----w-        c:\dokumente und einstellungen\Party\Anwendungsdaten\skypePM
2010-08-02 11:53 . 2010-01-11 11:30        7680        --sha-w-        c:\programme\Thumbs.db
2010-07-28 06:22 . 2001-08-18 19:00        79910        ----a-w-        c:\windows\system32\perfc007.dat
2010-07-28 06:22 . 2001-08-18 19:00        448470        ----a-w-        c:\windows\system32\perfh007.dat
2010-07-26 22:35 . 2008-07-30 17:03        30576        ----a-w-        c:\dokumente und einstellungen\Steffi\Lokale Einstellungen\Anwendungsdaten\GDIPFONTCACHEV1.DAT
2010-07-26 20:52 . 2010-07-26 20:52        --------        d-----w-        c:\programme\MSBuild
2010-07-26 20:52 . 2010-07-26 20:52        --------        d-----w-        c:\programme\Reference Assemblies
2010-07-21 08:35 . 2008-07-29 19:55        --------        d--h--w-        c:\programme\InstallShield Installation Information
2010-07-20 10:30 . 2008-07-29 20:28        --------        d-----w-        c:\dokumente und einstellungen\Steffi\Anwendungsdaten\Thunderbird
2010-07-20 09:49 . 2008-07-29 19:40        --------        d-----w-        c:\programme\Gemeinsame Dateien\Dienste
2010-07-15 07:06 . 2009-02-25 21:45        --------        d-----w-        c:\programme\Microsoft ActiveSync
2010-07-10 15:23 . 2010-06-10 22:49        30576        ----a-w-        c:\dokumente und einstellungen\Party\Lokale Einstellungen\Anwendungsdaten\GDIPFONTCACHEV1.DAT
2010-07-05 16:32 . 2009-11-03 16:52        --------        d-----w-        c:\dokumente und einstellungen\Party\Anwendungsdaten\vlc
2010-06-28 20:57 . 2010-06-29 16:08        38848        ----a-w-        c:\windows\avastSS.scr
2010-06-22 15:04 . 2010-06-22 15:04        1        ----a-w-        c:\dokumente und einstellungen\Party\Anwendungsdaten\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
2010-06-22 15:04 . 2010-06-22 15:04        --------        d-----w-        c:\dokumente und einstellungen\Party\Anwendungsdaten\OpenOffice.org
2010-06-19 06:39 . 2010-05-08 08:26        --------        d-----w-        c:\dokumente und einstellungen\Steffi\Anwendungsdaten\gtk-2.0
2010-06-16 15:08 . 2010-03-10 19:58        --------        d-----w-        c:\dokumente und einstellungen\Steffi\Anwendungsdaten\FileZilla
2010-06-14 14:31 . 2008-07-29 19:40        744448        ----a-w-        c:\windows\PCHealth\HelpCtr\Binaries\helpsvc.exe
2010-06-12 18:33 . 2010-06-12 18:33        --------        d-----w-        c:\programme\Gemeinsame Dateien\snp2std
2010-06-12 12:28 . 2010-06-12 12:28        335872        ----a-r-        c:\dokumente und einstellungen\Steffi\Anwendungsdaten\Microsoft\Installer\{237CD223-1B9D-47E8-A76C-E478B83CCEA2}\ARPPRODUCTICON.exe
2010-06-12 12:28 . 2010-05-07 20:22        --------        d-----w-        c:\programme\Gemeinsame Dateien\Nikon
2010-06-12 12:19 . 2010-05-07 20:56        57344        ----a-r-        c:\dokumente und einstellungen\Steffi\Anwendungsdaten\Microsoft\Installer\{87441A59-5E64-4096-A170-14EFE67200C3}\ARPPRODUCTICON.exe
2010-06-12 12:09 . 2010-05-07 20:56        49152        ----a-r-        c:\dokumente und einstellungen\Steffi\Anwendungsdaten\Microsoft\Installer\{D2FCC1AE-6311-47C5-8130-C6C66D77DD71}\ARPPRODUCTICON.exe
2010-06-10 22:50 . 2010-06-10 22:49        --------        d-----w-        c:\dokumente und einstellungen\Party\Anwendungsdaten\Apple Computer
2010-06-10 22:20 . 2009-11-01 23:16        --------        d-----w-        c:\dokumente und einstellungen\Party\Anwendungsdaten\DivX
2010-06-10 18:02 . 2010-06-10 18:02        503808        ----a-w-        c:\dokumente und einstellungen\Party\Anwendungsdaten\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-7461b9e3-n\msvcp71.dll
2010-06-10 18:02 . 2010-06-10 18:02        499712        ----a-w-        c:\dokumente und einstellungen\Party\Anwendungsdaten\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-7461b9e3-n\jmc.dll
2010-06-10 18:02 . 2010-06-10 18:02        348160        ----a-w-        c:\dokumente und einstellungen\Party\Anwendungsdaten\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-7461b9e3-n\msvcr71.dll
2010-06-10 18:02 . 2010-06-10 18:02        61440        ----a-w-        c:\dokumente und einstellungen\Party\Anwendungsdaten\Sun\Java\Deployment\SystemCache\6.0\50\5535ab32-3442da57-n\decora-sse.dll
2010-06-10 18:02 . 2010-06-10 18:02        12800        ----a-w-        c:\dokumente und einstellungen\Party\Anwendungsdaten\Sun\Java\Deployment\SystemCache\6.0\50\5535ab32-3442da57-n\decora-d3d.dll
2010-06-05 11:53 . 2010-05-30 21:01        57344        ----a-w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\DivX\RunAsUser\RUNASUSERPROCESS.dll
2010-06-05 11:53 . 2010-06-05 11:53        56765        ----a-w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\DivX\DivXPlusShortcuts\Uninstaller.exe
2010-06-05 11:53 . 2010-06-05 11:53        56997        ----a-w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\DivX\WebPlayer\Uninstaller.exe
2010-06-05 11:53 . 2010-06-05 11:53        53600        ----a-w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\DivX\Update\Uninstaller.exe
2010-06-05 11:53 . 2010-06-05 11:53        57715        ----a-w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\DivX\Player\Uninstaller.exe
2010-06-05 11:53 . 2010-06-05 11:53        54153        ----a-w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\DivX\DFXPlugin\Uninstaller.exe
2010-06-05 11:53 . 2010-06-05 11:53        54128        ----a-w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\DivX\Converter\Uninstaller.exe
2010-06-05 11:53 . 2010-06-05 11:53        54644        ----a-w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\DivX\TranscodeEngine\Uninstaller.exe
2010-06-05 11:53 . 2010-06-05 11:53        54101        ----a-w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\DivX\MPEG2Plugin\Uninstaller.exe
2010-06-05 11:51 . 2010-05-30 21:01        1062184        ----a-w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\DivX\Setup\Resource.dll
2010-06-05 11:51 . 2010-05-30 21:01        895256        ----a-w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\DivX\Setup\DivXSetup.exe
2010-05-30 21:00 . 2010-05-30 21:00        84040        ----a-w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\DivX\TransferWizard\Uninstaller.exe
2010-05-30 21:00 . 2010-05-30 21:00        57054        ----a-w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\DivX\DSDesktopComponents\Uninstaller.exe
2010-05-30 21:00 . 2010-05-30 21:00        54166        ----a-w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\DivX\DSAVCDecoder\Uninstaller.exe
2010-05-30 21:00 . 2010-05-30 21:00        57532        ----a-w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\DivX\DSASPDecoder\Uninstaller.exe
2010-05-30 21:00 . 2010-05-30 21:00        56458        ----a-w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\DivX\DivXDecoderShortcut\Uninstaller.exe
2010-05-30 21:00 . 2010-05-30 21:00        54174        ----a-w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\DivX\DSAACDecoder\Uninstaller.exe
2010-05-30 21:00 . 2010-05-30 21:00        57409        ----a-w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\DivX\ControlPanel\Uninstaller.exe
2010-05-30 21:00 . 2010-05-30 21:00        52963        ----a-w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\DivX\MSVC80CRTRedist\Uninstaller.exe
2010-05-30 21:00 . 2010-05-30 21:00        54073        ----a-w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\DivX\Qt4.5\Uninstaller.exe
2010-05-30 20:59 . 2010-05-30 20:59        56969        ----a-w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\DivX\ASPEncoder\Uninstaller.exe
2010-05-22 09:50 . 2010-05-22 09:50        503808        ----a-w-        c:\dokumente und einstellungen\Steffi\Anwendungsdaten\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-2c0520b1-n\msvcp71.dll
2010-05-22 09:50 . 2010-05-22 09:50        499712        ----a-w-        c:\dokumente und einstellungen\Steffi\Anwendungsdaten\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-2c0520b1-n\jmc.dll
2010-05-22 09:50 . 2010-05-22 09:50        348160        ----a-w-        c:\dokumente und einstellungen\Steffi\Anwendungsdaten\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-2c0520b1-n\msvcr71.dll
2010-05-22 09:50 . 2010-05-22 09:50        61440        ----a-w-        c:\dokumente und einstellungen\Steffi\Anwendungsdaten\Sun\Java\Deployment\SystemCache\6.0\50\5535ab32-34f5ff89-n\decora-sse.dll
2010-05-22 09:50 . 2010-05-22 09:50        12800        ----a-w-        c:\dokumente und einstellungen\Steffi\Anwendungsdaten\Sun\Java\Deployment\SystemCache\6.0\50\5535ab32-34f5ff89-n\decora-d3d.dll
2010-05-07 21:14 . 2010-05-07 21:14        20        ---h--w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\PKP_DLck.DAT
2008-04-21 12:02 . 2008-07-30 13:41        14852        ----a-w-        c:\programme\settings.dat
.

------- Sigcheck -------

[7] 2008-04-14 . 1704D8C4C8807B889E43C649B478A452 . 25216 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\kbdclass.sys
[-] 2004-08-03 . B128FC0A5CD83F669D5DE4B58F77C7D6 . 25216 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\kbdclass.sys
[-] 2002-08-29 . E50190D53C88A67C125618FAE1A9DE10 . 24064 . . [5.1.2600.1106] . . c:\windows\system32\drivers\kbdclass.sys
.
(((((((((((((((((((((((((((((  SnapShot@2010-07-26_22.42.39  )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-08-05 16:37 . 2010-08-05 16:37        16384              c:\windows\Temp\Perflib_Perfdata_79c.dat
- 2008-07-30 16:58 . 2008-04-14 05:52        75776              c:\windows\system32\strmfilt.dll
+ 2008-07-30 16:58 . 2009-10-21 05:38        75776              c:\windows\system32\strmfilt.dll
+ 2010-03-30 22:16 . 2010-03-30 22:16        99176              c:\windows\system32\PresentationHostProxy.dll
- 2001-08-18 19:00 . 2010-07-26 20:55        67312              c:\windows\system32\perfc009.dat
+ 2001-08-18 19:00 . 2010-07-28 06:22        67312              c:\windows\system32\perfc009.dat
+ 2009-11-06 23:07 . 2009-11-06 23:07        49488              c:\windows\system32\netfxperf.dll
+ 2009-11-06 23:07 . 2009-11-06 23:07        11600              c:\windows\system32\mui\0409\mscorees.dll
+ 2008-07-30 16:58 . 2009-10-21 05:38        25088              c:\windows\system32\httpapi.dll
+ 2009-10-21 05:38 . 2009-10-21 05:38        75776              c:\windows\system32\dllcache\strmfilt.dll
+ 2009-10-21 05:38 . 2009-10-21 05:38        25088              c:\windows\system32\dllcache\httpapi.dll
+ 2010-04-07 21:48 . 2010-04-07 21:48        32768              c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
- 2008-07-29 17:16 . 2008-07-29 17:16        32768              c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
+ 2009-11-06 23:07 . 2009-11-06 23:07        13648              c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
+ 2010-03-23 03:31 . 2010-03-23 03:31        30544              c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
+ 2009-11-06 23:07 . 2009-11-06 23:07        13648              c:\windows\Microsoft.NET\Framework\SharedReg12.dll
+ 2009-11-06 23:07 . 2009-11-06 23:07        13648              c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
+ 2009-11-06 23:07 . 2009-11-06 23:07        13648              c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
+ 2009-11-06 23:07 . 2009-11-06 23:07        13648              c:\windows\Microsoft.NET\Framework\sbscmp10.dll
+ 2009-11-06 23:07 . 2009-11-06 23:07        13664              c:\windows\Microsoft.NET\Framework\sbs_wminet_utils.dll
+ 2009-11-06 23:07 . 2009-11-06 23:07        13688              c:\windows\Microsoft.NET\Framework\sbs_system.enterpriseservices.dll
+ 2009-11-06 23:07 . 2009-11-06 23:07        13664              c:\windows\Microsoft.NET\Framework\sbs_system.data.dll
+ 2009-11-06 23:07 . 2009-11-06 23:07        13696              c:\windows\Microsoft.NET\Framework\sbs_system.configuration.install.dll
+ 2009-11-06 23:07 . 2009-11-06 23:07        13656              c:\windows\Microsoft.NET\Framework\sbs_mscorsec.dll
+ 2009-11-06 23:07 . 2009-11-06 23:07        13656              c:\windows\Microsoft.NET\Framework\sbs_mscorrc.dll
+ 2009-11-06 23:07 . 2009-11-06 23:07        13656              c:\windows\Microsoft.NET\Framework\sbs_mscordbi.dll
+ 2009-11-06 23:07 . 2009-11-06 23:07        13672              c:\windows\Microsoft.NET\Framework\sbs_microsoft.jscript.dll
+ 2009-11-06 23:07 . 2009-11-06 23:07        13664              c:\windows\Microsoft.NET\Framework\sbs_diasymreader.dll
+ 2009-11-06 23:07 . 2009-11-06 23:07        86864              c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe
+ 2010-07-28 06:24 . 2010-07-28 06:24        60928              c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\ea1b4fbde0e772748c6ac42d627cf684\UIAutomationProvider.ni.dll
+ 2010-07-28 09:08 . 2010-07-28 09:08        37888              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\f46915dfc57bc7e49c5402e9b8f7ec18\System.Windows.Presentation.ni.dll
+ 2010-07-28 09:07 . 2010-07-28 09:07        36864              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\1464c662c302ea6372a885161b983732\System.Web.DynamicData.Design.ni.dll
+ 2010-07-28 09:06 . 2010-07-28 09:06        94208              c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\5d535ecadf77ac2d9278a1661beb2855\System.ComponentModel.DataAnnotations.ni.dll
+ 2010-07-28 09:06 . 2010-07-28 09:06        82944              c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\f9a75bbdc2ce7db578b5977766a09b99\System.AddIn.Contract.ni.dll
+ 2010-07-28 06:22 . 2010-07-28 06:22        47104              c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\18729514178d458aa1225dd068718d4e\PresentationFontCache.ni.exe
+ 2010-07-28 06:22 . 2010-07-28 06:22        39424              c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\0375dfa28e2f6ef7e89df9edede4b83d\PresentationCFFRasterizer.ni.dll
+ 2010-07-28 09:05 . 2010-07-28 09:05        37888              c:\windows\assembly\NativeImages_v2.0.50727_32\NxCursors\ab4e2f7bf0041e88c94f81f58f23a916\NxCursors.ni.dll
+ 2010-07-28 09:07 . 2010-07-28 09:07        55296              c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\4a52287444c36c89310856b38ff52fe0\Microsoft.Vsa.ni.dll
+ 2010-07-28 09:05 . 2010-07-28 09:05        65024              c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\d513fe1a81c441e7656a9b062cff4e9f\Microsoft.Build.Framework.ni.dll
+ 2010-07-28 09:05 . 2010-07-28 09:05        74752              c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\c5d504724d7f351b1d034615dbb72a2a\Microsoft.Build.Framework.ni.dll
+ 2010-07-28 09:05 . 2010-07-28 09:05        14336              c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\a664ccab020f93f1d533919f57131190\dfsvc.ni.exe
+ 2010-07-28 09:05 . 2010-07-28 09:05        25600              c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\e63d6d26b8a664cfdfbd4ad75e03c14d\Accessibility.ni.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        77824              c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        77824              c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2010-07-27 22:56 . 2010-07-27 22:56        32768              c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
- 2010-07-26 20:52 . 2010-07-26 20:52        32768              c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        81920              c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        81920              c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        81920              c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        81920              c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        32768              c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        32768              c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        12800              c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        12800              c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        28672              c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        28672              c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        77824              c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        77824              c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        36864              c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        36864              c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        77824              c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        77824              c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        13312              c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        13312              c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        10752              c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        10752              c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        72192              c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        72192              c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        69120              c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        69120              c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        8192              c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        8192              c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        7168              c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        7168              c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        5632              c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2010-07-26 20:55 . 2010-07-26 20:55        5632              c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2010-07-26 20:55 . 2010-07-26 20:55        6656              c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        6656              c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        8192              c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        8192              c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        113664              c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        113664              c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        258048              c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        258048              c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
+ 2008-07-30 15:56 . 2009-08-25 09:17        354816              c:\windows\system32\winhttp.dll
- 2002-08-29 01:43 . 2009-03-08 02:33        420352              c:\windows\system32\vbscript.dll
+ 2002-08-29 01:43 . 2010-03-10 06:15        420352              c:\windows\system32\vbscript.dll
+ 2010-03-30 22:10 . 2010-03-30 22:10        295264              c:\windows\system32\PresentationHost.exe
+ 2001-08-18 19:00 . 2010-07-28 06:22        432356              c:\windows\system32\perfh009.dat
- 2001-08-18 19:00 . 2010-07-26 20:55        432356              c:\windows\system32\perfh009.dat
+ 2009-11-06 23:07 . 2009-11-06 23:07        297808              c:\windows\system32\mscoree.dll
+ 2010-06-22 16:29 . 2010-08-02 00:00        231888              c:\windows\system32\Macromed\Flash\FlashUtil10h_Plugin.exe
- 2010-06-22 16:29 . 2010-06-22 16:29        231888              c:\windows\system32\Macromed\Flash\FlashUtil10h_Plugin.exe
- 2001-08-18 19:00 . 2009-03-08 02:33        726528              c:\windows\system32\jscript.dll
+ 2001-08-18 19:00 . 2009-12-09 05:53        726528              c:\windows\system32\jscript.dll
+ 2008-07-30 16:55 . 2009-10-20 16:20        265728              c:\windows\system32\drivers\http.sys
+ 2008-12-16 12:30 . 2009-08-25 09:17        354816              c:\windows\system32\dllcache\winhttp.dll
- 2008-05-09 10:54 . 2009-03-08 02:33        420352              c:\windows\system32\dllcache\vbscript.dll
+ 2008-05-09 10:54 . 2010-03-10 06:15        420352              c:\windows\system32\dllcache\vbscript.dll
- 2008-05-09 10:54 . 2009-03-08 02:33        726528              c:\windows\system32\dllcache\jscript.dll
+ 2008-05-09 10:54 . 2009-12-09 05:53        726528              c:\windows\system32\dllcache\jscript.dll
+ 2009-10-20 16:20 . 2009-10-20 16:20        265728              c:\windows\system32\dllcache\http.sys
+ 2010-03-30 22:16 . 2010-03-30 22:16        130408              c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationHostDLL.dll
+ 2010-04-07 21:48 . 2010-04-07 21:48        970752              c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
- 2008-07-29 17:16 . 2008-07-29 17:16        110592              c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMdiagnostics.dll
+ 2010-04-07 21:48 . 2010-04-07 21:48        110592              c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMdiagnostics.dll
+ 2010-03-23 03:31 . 2010-03-23 03:31        435024              c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
- 2008-07-25 09:17 . 2008-07-25 09:17        258048              c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
+ 2010-02-09 10:22 . 2010-02-09 10:22        258048              c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
+ 2009-08-07 21:51 . 2009-08-07 21:51        989016              c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
+ 2010-08-01 13:24 . 2010-08-01 13:24        700416              c:\windows\Installer\1fa840.msi
+ 2009-03-20 09:48 . 2009-03-20 09:48        183808              c:\windows\Installer\14b6876.msp
+ 2010-02-24 22:14 . 2010-02-24 22:14        543232              c:\windows\Installer\14b684c.msp
- 2009-10-22 11:16 . 2009-10-22 11:16        371272              c:\windows\Installer\{D103C4BA-F905-437A-8049-DB24763BBE36}\SkypeIcon.exe
+ 2010-08-01 13:24 . 2010-08-01 13:24        371272              c:\windows\Installer\{D103C4BA-F905-437A-8049-DB24763BBE36}\SkypeIcon.exe
+ 2010-07-27 22:56 . 2009-03-08 02:33        420352              c:\windows\ie8updates\KB981332-IE8\vbscript.dll
+ 2010-07-27 22:56 . 2009-05-26 11:40        388984              c:\windows\ie8updates\KB981332-IE8\spuninst\updspapi.dll
+ 2010-07-27 22:56 . 2009-05-26 11:40        234872              c:\windows\ie8updates\KB981332-IE8\spuninst\spuninst.exe
+ 2010-07-27 22:59 . 2008-07-08 13:00        388984              c:\windows\ie8updates\KB976662-IE8\spuninst\updspapi.dll
+ 2010-07-27 22:59 . 2008-07-08 13:00        234872              c:\windows\ie8updates\KB976662-IE8\spuninst\spuninst.exe
+ 2010-07-27 22:59 . 2009-06-22 06:45        726528              c:\windows\ie8updates\KB976662-IE8\jscript.dll
+ 2010-07-27 22:54 . 2008-07-08 13:00        388984              c:\windows\ie8updates\KB971961-IE8\spuninst\updspapi.dll
+ 2010-07-27 22:54 . 2008-07-08 13:00        234872              c:\windows\ie8updates\KB971961-IE8\spuninst\spuninst.exe
+ 2010-07-27 22:54 . 2009-03-08 02:33        726528              c:\windows\ie8updates\KB971961-IE8\jscript.dll
+ 2009-10-20 16:20 . 2009-10-20 16:20        265728              c:\windows\Driver Cache\i386\http.sys
+ 2010-07-28 09:05 . 2010-07-28 09:05        321536              c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\4d07b1ccecca66f320c1a0971dd614d1\WsatConfig.ni.exe
+ 2010-07-28 06:24 . 2010-07-28 06:24        240128              c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\b3a9fac9aea3ad913781fafbdcbb0cae\WindowsFormsIntegration.ni.dll
+ 2010-07-28 06:24 . 2010-07-28 06:24        187904              c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\6f488b7644dc50a083868e91a4014466\UIAutomationTypes.ni.dll
+ 2010-07-28 06:24 . 2010-07-28 06:24        447488              c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\4131a3627fec69291dbaed236f30dc65\UIAutomationClient.ni.dll
+ 2010-07-28 09:08 . 2010-07-28 09:08        400896              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\747e84d81d1de2041661f0f71b04734a\System.Xml.Linq.ni.dll
+ 2010-07-28 09:07 . 2010-07-28 09:07        129536              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\d51dfbd8d5431eb89181baaa24863e15\System.Web.Routing.ni.dll
+ 2010-07-28 09:08 . 2010-07-28 09:08        202240              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\436dde9611932489da3dc8a1be170843\System.Web.RegularExpressions.ni.dll
+ 2010-07-28 09:08 . 2010-07-28 09:08        859648              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\e8ef769b3e899e62b26daadee50b97ed\System.Web.Extensions.Design.ni.dll
+ 2010-07-28 09:07 . 2010-07-28 09:07        328704              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\ce3b446b7bee5c47949c994ec89b1649\System.Web.Entity.ni.dll
+ 2010-07-28 09:07 . 2010-07-28 09:07        301056              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\ad04fe1182e55e7c01066b62a4bee6b5\System.Web.Entity.Design.ni.dll
+ 2010-07-28 09:07 . 2010-07-28 09:07        547328              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\20ba0d4d182a1a9c1f54c00d3bc29a68\System.Web.DynamicData.ni.dll
+ 2010-07-28 09:07 . 2010-07-28 09:07        141312              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\c97ecf9250c2f0794262534f27f98b72\System.Web.Abstractions.ni.dll
+ 2010-07-28 09:07 . 2010-07-28 09:07        627200              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\9c56656c88979cf18de6cbcb6587ba8f\System.Transactions.ni.dll
+ 2010-07-28 09:07 . 2010-07-28 09:07        212992              c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\5adb0f89d469632511aed9d88cfe05c4\System.ServiceProcess.ni.dll
+ 2010-07-28 09:05 . 2010-07-28 09:05        679936              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\42b2ffb594dbd5652a576a0dce28722c\System.Security.ni.dll
+ 2010-07-28 09:07 . 2010-07-28 09:07        311296              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\3231473e2ec4451c8f218930fda80d19\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2010-07-28 09:07 . 2010-07-28 09:07        621056              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\f90965b9d9a6a6604c9a66f57c37c026\System.Net.ni.dll
+ 2010-07-28 09:07 . 2010-07-28 09:07        998400              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\16670b6870746e5a8dc4a73a76a90bed\System.Management.ni.dll
+ 2010-07-28 09:07 . 2010-07-28 09:07        330752              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\e6bd59fec415e273c173170c6508180a\System.Management.Instrumentation.ni.dll
+ 2010-07-28 09:04 . 2010-07-28 09:04        381440              c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\e3eb86170cba4c80e6e22ca33c63c218\System.IO.Log.ni.dll
+ 2010-07-28 09:05 . 2010-07-28 09:05        212992              c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\cfa48936affc9a5fb89f0bf66cc52a47\System.IdentityModel.Selectors.ni.dll
+ 2010-07-28 09:07 . 2010-07-28 09:07        280064              c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\e9edc5cd12ebb513b4a3c53cb4640771\System.EnterpriseServices.Wrapper.dll
+ 2010-07-28 09:07 . 2010-07-28 09:07        627712              c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\e9edc5cd12ebb513b4a3c53cb4640771\System.EnterpriseServices.ni.dll
+ 2010-07-28 06:24 . 2010-07-28 06:24        208384              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\aeba6820f20655dec7fe0fe05aaeb818\System.Drawing.Design.ni.dll
+ 2010-07-28 09:07 . 2010-07-28 09:07        455680              c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\9ef70079beca3a9982a3aa76ebc0ddd8\System.DirectoryServices.Protocols.ni.dll
+ 2010-07-28 09:07 . 2010-07-28 09:07        881152              c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\277619716d9136216065bea970365c65\System.DirectoryServices.AccountManagement.ni.dll
+ 2010-07-28 09:07 . 2010-07-28 09:07        939008              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\90b67e13866b176ae6cbdb23144f724d\System.Data.Services.Client.ni.dll
+ 2010-07-28 09:07 . 2010-07-28 09:07        354816              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\131a477d41a8669b15696128b94c2636\System.Data.Services.Design.ni.dll
+ 2010-07-28 09:07 . 2010-07-28 09:07        756736              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\d4990681ce373d81a52b231ee4c4afea\System.Data.Entity.Design.ni.dll
+ 2010-07-28 09:06 . 2010-07-28 09:06        135680              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\9e9d66a3a0e16fceead505c25af569eb\System.Data.DataSetExtensions.ni.dll
+ 2010-07-28 09:05 . 2010-07-28 09:05        971264              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\631b3eba1ba5bd3c3f027f34011cadeb\System.Configuration.ni.dll
+ 2010-07-28 09:07 . 2010-07-28 09:07        141312              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\39e4f9a276fb12125d8a1444d8b65a84\System.Configuration.Install.ni.dll
+ 2010-07-28 09:06 . 2010-07-28 09:06        633856              c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\849916c5cb3ff7763d15a3976766c2f6\System.AddIn.ni.dll
+ 2010-07-28 09:05 . 2010-07-28 09:05        366080              c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\f38a426b90e6c526dcb2c435c7380450\SMSvcHost.ni.exe
+ 2010-07-28 09:05 . 2010-07-28 09:05        256000              c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\6cabc7d1700c224e8b41ff2f96a3087c\SMDiagnostics.ni.dll
+ 2010-07-28 09:05 . 2010-07-28 09:05        320512              c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\5c8f5ca36498f43980d64820d8186c8a\ServiceModelReg.ni.exe
+ 2010-07-28 06:23 . 2010-07-28 06:23        368128              c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\a10c2c7e38291c3ada631ad13e762818\PresentationFramework.Aero.ni.dll
+ 2010-07-28 06:23 . 2010-07-28 06:23        539648              c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\7579c76fa81eb309d3170b62467be58d\PresentationFramework.Luna.ni.dll
+ 2010-07-28 06:23 . 2010-07-28 06:23        224768              c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\3bef0992fb684e71dbfab5c0a99316af\PresentationFramework.Classic.ni.dll
+ 2010-07-28 06:23 . 2010-07-28 06:23        258048              c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\2f6687d394813d760496f60acf046384\PresentationFramework.Royale.ni.dll
+ 2010-07-28 09:05 . 2010-07-28 09:05        295424              c:\windows\assembly\NativeImages_v2.0.50727_32\nik.Base\db38ef4c28c372a1109b3f4d2362cf3d\nik.Base.ni.dll
+ 2010-07-28 09:05 . 2010-07-28 09:05        133632              c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\7700963610c1af364aa934c3c824b7b4\MSBuild.ni.exe
+ 2010-07-28 09:05 . 2010-07-28 09:05        386560              c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\c74d4c69c49992dfb23ba512081dc3de\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2010-07-28 09:06 . 2010-07-28 09:06        144384              c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\a6a9f24b1a8984eaafbabb1ee968e359\Microsoft.Build.Utilities.ni.dll
+ 2010-07-28 09:06 . 2010-07-28 09:06        175104              c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\2fa81d363cb1496be2427d848a867409\Microsoft.Build.Utilities.v3.5.ni.dll
+ 2010-07-28 09:05 . 2010-07-28 09:05        839680              c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\c4c360df9c1024ebc3f0de77f5cf8b1c\Microsoft.Build.Engine.ni.dll
+ 2010-07-28 09:05 . 2010-07-28 09:05        222720              c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\c9386dcd89c2518a74115f3bfd861830\Microsoft.Build.Conversion.v3.5.ni.dll
+ 2010-07-28 09:05 . 2010-07-28 09:05        220672              c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\77688ce14f221ed94a9f442ae4736123\CustomMarshalers.ni.dll
+ 2010-07-28 09:05 . 2010-07-28 09:05        410112              c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\abb62e3ed74c974f0282bc7ea5d3f1c1\ComSvcConfig.ni.exe
+ 2010-07-28 09:05 . 2010-07-28 09:05        842240              c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\6d34f00b6a782d15bec70d6cdb00b5e8\AspNetMMCExt.ni.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        839680              c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        839680              c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        835584              c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        835584              c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        114688              c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        114688              c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        258048              c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        258048              c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2010-07-27 22:56 . 2010-07-27 22:56        970752              c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        131072              c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        131072              c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        303104              c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        303104              c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        258048              c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        258048              c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        372736              c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        372736              c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2010-07-27 22:56 . 2010-07-27 22:56        438272              c:\windows\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089\System.IdentityModel.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        626688              c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        626688              c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        401408              c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        401408              c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        188416              c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        188416              c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        970752              c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        970752              c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        745472              c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        745472              c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        425984              c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        425984              c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        110592              c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        110592              c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
- 2010-07-26 20:52 . 2010-07-26 20:52        110592              c:\windows\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll
+ 2010-07-27 22:56 . 2010-07-27 22:56        110592              c:\windows\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        659456              c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        659456              c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        372736              c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        372736              c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        110592              c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        110592              c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        749568              c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        749568              c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        655360              c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        655360              c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        348160              c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        348160              c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        507904              c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        507904              c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        261632              c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        261632              c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        113664              c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        113664              c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        258048              c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        258048              c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        486400              c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        486400              c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2002-08-29 01:43 . 2010-07-27 06:29        8503296              c:\windows\system32\shell32.dll
- 2010-01-27 01:07 . 2010-06-22 16:29        5612496              c:\windows\system32\Macromed\Flash\NPSWF32.dll
+ 2010-01-27 01:07 . 2010-08-02 00:00        5612496              c:\windows\system32\Macromed\Flash\NPSWF32.dll
+ 2008-06-17 19:00 . 2010-07-27 06:29        8503296              c:\windows\system32\dllcache\shell32.dll
+ 2009-11-06 23:06 . 2009-11-06 23:06        1130824              c:\windows\system32\dfshim.dll
+ 2010-04-07 21:48 . 2010-04-07 21:48        5967872              c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.dll
+ 2010-03-23 03:32 . 2010-03-23 03:32        5242880              c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
- 2008-11-25 02:59 . 2008-11-25 02:59        5242880              c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
+ 2010-03-23 03:32 . 2010-03-23 03:32        3182592              c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
+ 2009-08-07 21:51 . 2009-08-07 21:51        5812560              c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
- 2008-11-25 02:59 . 2008-11-25 02:59        4546560              c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
+ 2009-08-07 21:51 . 2009-08-07 21:51        4546560              c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
+ 2010-08-01 13:24 . 2010-08-01 13:24        1575936              c:\windows\Installer\1fa836.msi
+ 2009-11-08 22:25 . 2009-11-08 22:25        1935360              c:\windows\Installer\14b6892.msp
+ 2010-04-11 20:17 . 2010-04-11 20:17        2607104              c:\windows\Installer\14b685a.msp
+ 2010-04-11 20:17 . 2010-04-11 20:17        4210688              c:\windows\Installer\14b6859.msp
+ 2010-07-28 06:22 . 2010-07-28 06:22        3325440              c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\d63164ac4ed5adabc6a1b0fdf07eee05\WindowsBase.ni.dll
+ 2010-07-28 06:24 . 2010-07-28 06:24        1049600              c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\d8549ce90b26cdc3071224ab6f020189\UIAutomationClientsideProviders.ni.dll
+ 2010-07-28 06:22 . 2010-07-28 06:22        7949824              c:\windows\assembly\NativeImages_v2.0.50727_32\System\37217abe2c5164e59aba251860f4c79e\System.ni.dll
+ 2010-07-28 06:24 . 2010-07-28 06:24        5450752              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\563a54b98adb70fae862974042298348\System.Xml.ni.dll
+ 2010-07-28 09:08 . 2010-07-28 09:08        1356288              c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\016b75f60a18535c8d6b3e5d861ab559\System.WorkflowServices.ni.dll
+ 2010-07-28 09:08 . 2010-07-28 09:08        1908224              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\6dacae37d337004345518976fb57099e\System.Workflow.Runtime.ni.dll
+ 2010-07-28 09:08 . 2010-07-28 09:08        4514304              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\c7b832bbc5bb11c6c7f128c801ce90d7\System.Workflow.ComponentModel.ni.dll
+ 2010-07-28 09:08 . 2010-07-28 09:08        2992640              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\b9ea6ea910293cd6f13f765775867ebd\System.Workflow.Activities.ni.dll
+ 2010-07-28 09:08 . 2010-07-28 09:08        1840640              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\8ef8d556899a4a10b7f288a80925489f\System.Web.Services.ni.dll
+ 2010-07-28 09:08 . 2010-07-28 09:08        2209280              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\5dfda43f1991ee6ba345d62b2be4801c\System.Web.Mobile.ni.dll
+ 2010-07-28 09:07 . 2010-07-28 09:07        2403328              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\f08b3b8cdf548e3dfe61f342536175eb\System.Web.Extensions.ni.dll
+ 2010-07-28 06:24 . 2010-07-28 06:24        1917952              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\2d6a5dbee4506bf643b853e41668afa3\System.Speech.ni.dll
+ 2010-07-28 09:07 . 2010-07-28 09:07        1706496              c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\169fe0ad9d59982a2a6b89779c09885b\System.ServiceModel.Web.ni.dll
+ 2010-07-28 09:04 . 2010-07-28 09:04        2345472              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\8b2710a63ecd363315ef16b257588b95\System.Runtime.Serialization.ni.dll
+ 2010-07-28 06:24 . 2010-07-28 06:24        1035264              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\af217ef58e5558991f331d482c2bdba6\System.Printing.ni.dll
+ 2010-07-28 09:04 . 2010-07-28 09:04        1070080              c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\ad4fb86064d7a1ebcb9ee997e7208ac1\System.IdentityModel.ni.dll
+ 2010-07-28 06:24 . 2010-07-28 06:24        1587200              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\f3440ea00eb3c40dc073b2fe03843638\System.Drawing.ni.dll
+ 2010-07-28 09:07 . 2010-07-28 09:07        1116672              c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\7deab2494d53763cd83c567e71e0d8e0\System.DirectoryServices.ni.dll
+ 2010-07-28 09:07 . 2010-07-28 09:07        1801216              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\b81efadfee7702624b713c6d86f7e369\System.Deployment.ni.dll
+ 2010-07-28 06:23 . 2010-07-28 06:23        6616576              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\50130ef751b98a4a11bd4ab73af7cab5\System.Data.ni.dll
+ 2010-07-28 09:05 . 2010-07-28 09:05        2510336              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\f71abf392c5ca05a4e46a5d1c4c72856\System.Data.SqlXml.ni.dll
+ 2010-07-28 09:07 . 2010-07-28 09:07        1328128              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\5e6311aff5ada83d0f854922fa62faf6\System.Data.Services.ni.dll
+ 2010-07-28 06:23 . 2010-07-28 06:23        2516480              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\c3ba3367d03779ad6e76c5d4cdfe572a\System.Data.Linq.ni.dll
+ 2010-07-28 09:07 . 2010-07-28 09:07        9924096              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\6abf820d8ec57a0561c3367727d274df\System.Data.Entity.ni.dll
+ 2010-07-28 06:23 . 2010-07-28 06:23        2295296              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\e98726349766935ec0e9b980f19a046a\System.Core.ni.dll
+ 2010-07-28 06:23 . 2010-07-28 06:23        2128896              c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\57abb757c1f38586390dcc63bf056322\ReachFramework.ni.dll
+ 2010-07-28 06:23 . 2010-07-28 06:23        1657856              c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\0095ba60255d4addaf5b8ebee697a027\PresentationUI.ni.dll
+ 2010-07-28 06:22 . 2010-07-28 06:22        1451008              c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\20ef773b20f6ce721ae60e5c2c2e8f80\PresentationBuildTasks.ni.dll
+ 2010-07-28 09:05 . 2010-07-28 09:05        5500416              c:\windows\assembly\NativeImages_v2.0.50727_32\NxController\1d62c427568a3e1afcd9b370a70e1c43\NxController.ni.dll
+ 2010-07-28 09:05 . 2010-07-28 09:05        1038848              c:\windows\assembly\NativeImages_v2.0.50727_32\nik.GUIBase\a69d647602e8ce742b137b375e64c6cd\nik.GUIBase.ni.dll
+ 2010-07-28 09:05 . 2010-07-28 09:05        4357632              c:\windows\assembly\NativeImages_v2.0.50727_32\nik.GUIBase.Resourc#\7ce611fd9c4215c61d81f5405c65182d\nik.GUIBase.Resources.ni.dll
+ 2010-07-28 09:06 . 2010-07-28 09:06        1712128              c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\935b855860088a86bb65d37a19f059cc\Microsoft.VisualBasic.ni.dll
+ 2010-07-28 09:05 . 2010-07-28 09:05        1093120              c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\7a266de493d30eed21cb60ebe300be53\Microsoft.Transactions.Bridge.ni.dll
+ 2010-07-28 09:07 . 2010-07-28 09:07        2332160              c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\9db8f9f7fe63ca4451bb5316a3ebb009\Microsoft.JScript.ni.dll
+ 2010-07-28 09:06 . 2010-07-28 09:06        1966080              c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\c96be82d6cb00367db4e3553272165ef\Microsoft.Build.Tasks.v3.5.ni.dll
+ 2010-07-28 09:06 . 2010-07-28 09:06        1620992              c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\3815de5b052187b5d9375681a6784255\Microsoft.Build.Tasks.ni.dll
+ 2010-07-28 09:05 . 2010-07-28 09:05        1888768              c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\43fc6723d08e9ce88701c29653efd224\Microsoft.Build.Engine.ni.dll
+ 2010-07-28 09:05 . 2010-07-28 09:05        2476544              c:\windows\assembly\NativeImages_v2.0.50727_32\GUI_Common_Managed\f1afa44cd94194ff295e9abb092e915c\GUI_Common_Managed.ni.dll
+ 2010-07-27 22:59 . 2010-07-27 22:59        1249280              c:\windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        3182592              c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        2048000              c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        2048000              c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        5025792              c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        5025792              c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2010-07-27 22:56 . 2010-07-27 22:56        5967872              c:\windows\assembly\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089\System.ServiceModel.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        5062656              c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        5062656              c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2010-07-27 22:58 . 2010-07-27 22:58        5279744              c:\windows\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        5242880              c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        5242880              c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        2933248              c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        2933248              c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
+ 2010-07-27 22:58 . 2010-07-27 22:58        4210688              c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
- 2010-07-26 20:52 . 2010-07-26 20:52        4210688              c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
+ 2010-07-27 23:01 . 2010-07-27 23:01        4546560              c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
- 2010-07-26 20:55 . 2010-07-26 20:55        4546560              c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2009-08-14 18:32 . 2009-08-14 18:32        11110912              c:\windows\Installer\14b68ab.msp
+ 2010-03-30 23:23 . 2010-03-30 23:23        15638528              c:\windows\Installer\14b68a0.msp
+ 2010-04-11 20:17 . 2010-04-11 20:17        14599680              c:\windows\Installer\14b686a.msp
+ 2010-07-27 23:00 . 2010-07-27 23:00        12214272              c:\windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP33C.tmp\PresentationCore.dll
+ 2010-07-28 06:24 . 2010-07-28 06:24        12430848              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\2dfe045e4b1577fdea9a2f456db0afc2\System.Windows.Forms.ni.dll
+ 2010-07-28 09:07 . 2010-07-28 09:07        11797504              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\d987cf1de4ba688da92e212a374232c2\System.Web.ni.dll
+ 2010-07-28 09:05 . 2010-07-28 09:05        17403904              c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\8b74f2fe3f3632f95ff4ddb8c4839a1e\System.ServiceModel.ni.dll
+ 2010-07-28 06:23 . 2010-07-28 06:23        10683392              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\f352c5cb50bee105e4c873ca050f9f46\System.Design.ni.dll
+ 2010-07-28 06:23 . 2010-07-28 06:23        14328320              c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\560662ada034afb6ec78a152bd9a47b5\PresentationFramework.ni.dll
+ 2010-07-28 06:22 . 2010-07-28 06:22        12215808              c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\9f5dff344ac6ac923b5ade8ba1ab9382\PresentationCore.ni.dll
+ 2010-07-28 06:22 . 2010-07-28 06:22        11486720              c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\7124a40b9998f7b63c86bd1a2125ce26\mscorlib.ni.dll
.
-- Snapshot auf jetziges Datum zurückgesetzt --
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\programme\Gemeinsame Dateien\Nero\Lib\NMIndexStoreSvr.exe" [2008-06-24 1840424]
"SUPERAntiSpyware"="d:\programme\Superantispyware\SUPERAntiSpyware.exe" [2010-07-19 2403568]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2005-12-10 7311360]
"nwiz"="nwiz.exe" [2005-12-10 1519616]
"RTHDCPL"="RTHDCPL.EXE" [2006-02-10 15969280]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2005-12-10 86016]
"NeroFilterCheck"="c:\programme\Gemeinsame Dateien\Nero\Lib\NeroCheck.exe" [2008-06-19 570664]
"NBKeyScan"="d:\programme\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2008-06-08 2221352]
"Adobe Reader Speed Launcher"="d:\programme\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-15 39792]
"Adobe Version Cue CS2"="d:\programme\Adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe" [2005-04-04 856064]
"Acrobat Assistant 7.0"="d:\programme\Adobe\Adobe Acrobat 7.0\Distillr\Acrotray.exe" [2008-04-23 483328]
"SunJavaUpdateSched"="c:\programme\Gemeinsame Dateien\Java\Java Update\jusched.exe" [2010-02-18 248040]
"QuickTime Task"="d:\programme\QuickTime\qttask.exe" [2010-03-17 421888]
"DivXUpdate"="c:\programme\DivX\DivX Update\DivXUpdate.exe" [2010-06-03 1144104]
"Nikon Transfer Monitor"="c:\programme\Gemeinsame Dateien\Nikon\Monitor\NkMonitor.exe" [2009-09-15 479232]
"FixCamera"="c:\windows\FixCamera.exe" [2006-10-09 20480]
"tsnp2std"="c:\windows\tsnp2std.exe" [2006-06-19 262144]
"snp2std"="c:\windows\vsnp2std.exe" [2006-05-15 675840]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-06-28 2837864]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360]

c:\dokumente und einstellungen\All Users\Startmen\Programme\Autostart\
Adobe Acrobat Speed Launcher.lnk - c:\windows\Installer\{AC76BA86-1033-0000-7760-000000000002}\SC_Acrobat.exe [2009-8-12 25214]
Adobe Gamma.lnk - c:\programme\Gemeinsame Dateien\Adobe\Calibration\Adobe Gamma Loader.exe [2005-3-16 113664]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "d:\programme\Superantispyware\SASSEH.DLL" [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2009-09-03 22:21        548352        ----a-w-        d:\programme\Superantispyware\SASWINLO.DLL

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Programme\\Gemeinsame Dateien\\Ahead\\Nero Web\\SetupX.exe"=
"d:\\Programme\\VideoLAN\\VLC\\vlc.exe"=
"d:\\Programme\\Adobe\\Adobe Version Cue CS2\\bin\\VersionCueCS2.exe"=
"c:\\Programme\\Messenger\\msmsgs.exe"=
"c:\\Programme\\Alwil Software\\Avast5\\AvastUI.exe"=
"d:\\Programme\\Skype\\Plugin Manager\\skypePM.exe"=
"d:\\Programme\\Skype\\Phone\\Skype.exe"=

R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [21.08.2010 12:18 165456]
R1 SASDIFSV;SASDIFSV;d:\programme\Superantispyware\sasdifsv.sys [17.02.2010 20:25 12872]
R1 SASKUTIL;SASKUTIL;d:\programme\Superantispyware\SASKUTIL.SYS [10.05.2010 20:41 67656]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [21.08.2010 12:18 17744]
S2 gupdate1c9de2743e1bda3;Google Update Service (gupdate1c9de2743e1bda3);c:\programme\Google\Update\GoogleUpdate.exe [26.05.2009 19:27 133104]
.
Inhalt des "geplante Tasks" Ordners

2010-08-03 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\programme\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34]

2010-08-05 c:\windows\Tasks\Google Software Updater.job
- c:\programme\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-08-26 21:38]

2010-08-05 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\programme\Google\Update\GoogleUpdate.exe [2009-05-26 17:27]

2010-08-05 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\programme\Google\Update\GoogleUpdate.exe [2009-05-26 17:27]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = about:blank
uInternet Settings,ProxyOverride = <local>
IE: Convert link target to Adobe PDF - d:\programme\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert link target to existing PDF - d:\programme\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert selected links to Adobe PDF - d:\programme\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert selected links to existing PDF - d:\programme\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Convert selection to Adobe PDF - d:\programme\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert selection to existing PDF - d:\programme\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert to Adobe PDF - d:\programme\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert to existing PDF - d:\programme\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
FF - ProfilePath - c:\dokumente und einstellungen\Steffi\Anwendungsdaten\Mozilla\Firefox\Profiles\e5zmxj5s.default\
FF - prefs.js: browser.startup.homepage - about:blank
FF - component: d:\programme\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}\components\SkypeFfComponent.dll
FF - plugin: c:\programme\DivX\DivX Plus Web Player\npdivx32.dll
FF - plugin: c:\programme\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: c:\programme\Google\Google Updater\2.4.1536.6592\npCIDetect13.dll
FF - plugin: c:\programme\Google\Update\1.2.183.29\npGoogleOneClick8.dll
FF - plugin: d:\programme\Adobe\Reader 8.0\Reader\browser\nppdf32.dll
FF - plugin: d:\programme\DivX\DivX Player\npDivxPlayerPlugin.dll
FF - plugin: d:\programme\QuickTime\Plugins\npqtplugin.dll
FF - plugin: d:\programme\Real\RealPlayer\Netscape6\nppl3260.dll
FF - plugin: d:\programme\Real\RealPlayer\Netscape6\nprjplug.dll
FF - plugin: d:\programme\Real\RealPlayer\Netscape6\nprpjplug.dll
FF - plugin: d:\programme\VideoLAN\VLC\npvlc.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- FIREFOX Richtlinien ----
FF - user.js: dom.disable_open_during_load - true // Popupblocker control handled by McAfee Privacy Service
d:\programme\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
d:\programme\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.lu", true);
d:\programme\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nu", true);
d:\programme\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nz", true);
d:\programme\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
d:\programme\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
d:\programme\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--p1ai", true);
d:\programme\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbayh7gpa", true);
d:\programme\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.tel", true);
d:\programme\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
d:\programme\Mozilla Firefox\greprefs\all.js - pref("network.proxy.type",                  5);
d:\programme\Mozilla Firefox\greprefs\all.js - pref("network.buffer.cache.count", 24);
d:\programme\Mozilla Firefox\greprefs\all.js - pref("network.buffer.cache.size",  4096);
d:\programme\Mozilla Firefox\greprefs\all.js - pref("dom.ipc.plugins.timeoutSecs", 45);
d:\programme\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
d:\programme\Mozilla Firefox\greprefs\all.js - pref("accelerometer.enabled", true);
d:\programme\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
d:\programme\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
d:\programme\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
d:\programme\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation",  false);
d:\programme\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
d:\programme\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
d:\programme\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
d:\programme\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.nptest.dll", true);
d:\programme\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npswf32.dll", true);
d:\programme\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npctrl.dll", true);
d:\programme\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npqtplugin.dll", true);
d:\programme\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, hxxp://www.gmer.net
Rootkit scan 2010-08-05 18:58
Windows 5.1.2600 Service Pack 3 NTFS

Scanne versteckte Prozesse...

Scanne versteckte Autostarteinträge...

Scanne versteckte Dateien...

Scan erfolgreich abgeschlossen
versteckte Dateien: 0

**************************************************************************
.
--------------------- Durch laufende Prozesse gestartete DLLs ---------------------

- - - - - - - > 'winlogon.exe'(672)
d:\programme\Superantispyware\SASWINLO.DLL
.
Zeit der Fertigstellung: 2010-08-05  18:59:42
ComboFix-quarantined-files.txt  2010-08-05 16:59
ComboFix2.txt  2010-07-27 17:22
ComboFix3.txt  2010-07-26 22:44

Vor Suchlauf: 4.025.917.440 Bytes frei
Nach Suchlauf: 4.062.580.736 Bytes frei

- - End Of File - - FCC88A76DC44DB6155E9CA77339720AD
Gruß Stefan

cosinus 05.08.2010 18:21
Das ist ziemlich unauffällig.
Bitte mal beide Browser, FF und IE,, glattziehen.

1.) Den IE beenden, dann über Systemsteuerung, Internetoptionen, Erweitert, Button Zurücksetzen
2.) Im geöffneten FF die gesamte Chronik löschen, geht über Extras, neues Chronik löschen. "Alles" auswählen sowie über Details alle Haken setzen und auf jetzt löschen klicken

123click 05.08.2010 18:47
Hallo Arne,

erledigt.

cosinus 05.08.2010 18:52
Ja und jetzt??
Öffnen sich noch ungewollte Tab von allein?

123click 05.08.2010 19:33
Hallo Arne,

nun ja, seit meiner Antwort vom 02.08.2010, 02:28 wurde kein Tab mehr geöffnet. Aber deine Anweisungen von damals kann ich immer noch nicht ausführen, wie beschrieben. Der IE hängt sich einfach nur auf.

Grüße Stefan

cosinus 05.08.2010 19:50
Nachdem zurückgesetzt wurde hängt der IE sich auf??

123click 05.08.2010 19:59
Liste der Anhänge anzeigen (Anzahl: 1)
Ja, und zwar wenn ich auf die MS Update Seite gehe und updaten will. In deiner Antwort vom 30.07.2010, 19:44 hast du doch geschrieben, dass ich dies tun soll. Ich komme bis dahin, wo der Lizenzvertrag angezeigt werden soll. Wenn ich dann auf "weiter" klicke, geht es eben nicht mehr "weiter". Gerade hab ich es nochmal probiert und hatte "Glück", denn es wurde angezeigt, dass ich das für diese Seite erforderliche ActiveX-Steuerelement installieren soll (???), danach kommt das Fenster1 im Anhang. Wenn ich dann zurück zur MS Seite gehe, kommt die Meldung, dass IE die Registerkarte geschlossen und wieder geöffnet hat, aber es geht definitiv nicht vorwärts.

cosinus 05.08.2010 21:04
Probier mal das => Internet Explorer-Add-Ons: Häufig gestellte Fragen

Unter Kann ich Add-Ons und ActiveX-Steuerelemente löschen?

123click 05.08.2010 21:21
Hallo Arne,

jetzt stehe ich auf der Leitung. Soll ich dort irgendetwas löschen, deaktivieren oder aktivieren? Wenn ja, was? Unter "Heruntergeladene Steuerelemente" ist nur ein Java Plug-in 1.6.0_20 Herausgeber Sun Microsystems, Inc. Status Aktiviert
Dateidatum Montag, 12. April 2010, 17:29
Version 1.6.0.20

zu finden.

cosinus 05.08.2010 21:39
Mehr ist da nicht?
Erstell Dir bitte mal ein neues Benutzerprofil in der Systemsteuerung. Meld Dich danach ab und log Dich mit dem neuen Benutzer ein. Teste den IE da mal bitte und berichte.

123click 05.08.2010 22:07
Tja, es ist haargenau dasselbe. Keine Unterschiede festzustellen...

cosinus 05.08.2010 22:10
Kannst Du noch den IE8 über Systemsteuerung, Software deinstallieren? Wenn ja probier das mal bitte.


Alle Zeitangaben in WEZ +1. Es ist jetzt 00:37 Uhr.
Seite 3 von 4 12 3 4
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131