Op deze website gebruiken we cookies om content en advertenties te personaliseren, om functies voor social media te bieden en om ons websiteverkeer te analyseren. Ook delen we informatie over uw gebruik van onze site met onze partners voor social media, adverteren en analyse. Deze partners kunnen deze gegevens combineren met andere informatie die u aan ze heeft verstrekt of die ze hebben verzameld op basis van uw gebruik van hun services. Meer informatie.

Akkoord

Vraag & Antwoord

Beveiliging & privacy

comuter erg sloom

None
5 antwoorden
  • hey ik wil graag mijn computer vrij van malware maken.
    hij is nu erg sloom veel slomer dan eerst, dus ik denk dat er virussen op zitten.

    [code:1:d8b0591669]hier is mijn MBAM scanlog[/code:1:d8b0591669]

    Malwarebytes' Anti-Malware 1.41
    Database versie: 2979
    Windows 5.1.2600 Service Pack 3

    18-10-2009 15:21:06
    mbam-log-2009-10-18 (15-21-06).txt

    Scan type: Snelle Scan
    Objecten gescand: 133745
    Verstreken tijd: 10 minute(s), 50 second(s)

    Geheugenprocessen geïnfecteerd: 0
    Geheugenmodulen geïnfecteerd: 0
    Registersleutels geïnfecteerd: 2
    Registerwaarden geïnfecteerd: 0
    Registerdata bestanden geïnfecteerd: 0
    Mappen geïnfecteerd: 0
    Bestanden geïnfecteerd: 2

    Geheugenprocessen geïnfecteerd:
    (Geen kwaadaardige items gevonden)

    Geheugenmodulen geïnfecteerd:
    (Geen kwaadaardige items gevonden)

    Registersleutels geïnfecteerd:
    HKEY_CURRENT_USER\SOFTWARE\Antivirus (Rogue.AntiVirus) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\VAV (Rogue.VistaAntiVirus2008) -> Quarantined and deleted successfully.

    Registerwaarden geïnfecteerd:
    (Geen kwaadaardige items gevonden)

    Registerdata bestanden geïnfecteerd:
    (Geen kwaadaardige items gevonden)

    Mappen geïnfecteerd:
    (Geen kwaadaardige items gevonden)

    Bestanden geïnfecteerd:
    C:\WINDOWS\system32\clkcnt.txt (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\d3dx10d.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.


    [code:1:d8b0591669]en hier een hijackthis logje[/code:1:d8b0591669]

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 15:24:51, on 18-10-2009
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16915)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\Program Files\Webroot\Spy Sweeper\WRConsumerService.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\Program Files\SuperAdBlocker.com\Super Ad Blocker\SABSVC.EXE
    C:\WINDOWS\system32\LEXBCES.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\LEXPPS.EXE
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
    C:\WINDOWS\system32\CTsvcCDA.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Trust\Trust R-Series Mouse\KMWDSrv.exe
    C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
    C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
    C:\Program Files\Dell AIO Printer A920\dlbkbmgr.exe
    C:\Program Files\Microsoft IntelliPoint\point32.exe
    C:\Program Files\Dell AIO Printer A920\dlbkbmon.exe
    c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
    C:\Program Files\McAfee.com\Agent\mcagent.exe
    c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
    C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
    C:\Program Files\McAfee\MPF\MPFSrv.exe
    C:\Program Files\McAfee\MSK\MskSrver.exe
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
    C:\Program Files\Trust\Trust R-Series Mouse\StartAutorun.exe
    C:\Program Files\Microsoft IntelliType Pro\itype.exe
    C:\Program Files\Trust\Trust R-Series Mouse\KMConfig.exe
    C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
    C:\Program Files\Creative\SBLive\Diagnostics\diagent.exe
    C:\WINDOWS\system32\IoctlSvc.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\WINDOWS\system32\PnkBstrA.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
    C:\Program Files\Trust\Trust R-Series Mouse\KMProcess.exe
    C:\Program Files\Microsoft IntelliType Pro\dpupdchk.exe
    C:\WINDOWS\system32\MsPMSPSv.exe
    C:\Program Files\Canon\CAL\CALMAIN.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Java\jre6\bin\jucheck.exe
    C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
    C:\WINDOWS\system32\NOTEPAD.EXE
    c:\PROGRA~1\mcafee.com\agent\mcupdate.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
    O2 - BHO: SuperAdBlockerBHO Class - {00000000-6C30-11D8-9363-000AE6309654} - C:\Program Files\SuperAdBlocker.com\Super Ad Blocker\SABBHO.DLL
    O2 - BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\PROGRA~1\mcafee\msk\mskapbho.dll
    O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
    O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
    O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
    O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O3 - Toolbar: Super Ad Blocker Toolbar - {B4B3001E-0F56-4E51-8250-BDE11547EC55} - C:\Program Files\SuperAdBlocker.com\Super Ad Blocker\sabtb.dll
    O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
    O4 - HKLM\..\Run: [Dell AIO Printer A920] "C:\Program Files\Dell AIO Printer A920\dlbkbmgr.exe"
    O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
    O4 - HKLM\..\Run: [diagent] "C:\Program Files\Creative\SBLive\Diagnostics\diagent.exe" startup
    O4 - HKLM\..\Run: [UpdReg] "C:\WINDOWS\UpdReg.EXE"
    O4 - HKLM\..\Run: [mcagent_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe"
    unkey
    O4 - HKLM\..\Run: [McENUI] "C:\PROGRA~1\McAfee\MHN\McENUI.exe" /hide
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [nwiz] "nwiz.exe" /install
    O4 - HKLM\..\Run: [NvMediaCenter] "RUNDLL32.EXE" C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
    O4 - HKLM\..\Run: [KMCONFIG] "C:\Program Files\Trust\Trust R-Series Mouse\StartAutorun.exe" KMConfig.exe
    O4 - HKLM\..\Run: [itype] "C:\Program Files\Microsoft IntelliType Pro\itype.exe"
    O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
    O4 - HKCU\..\Run: [SUPERAntiSpyware] "C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe"
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\WINDOWS\system32\Macromed\Flash\NPSWF32_FlashUtil.exe -p
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O8 - Extra context menu item: Download alles met Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
    O8 - Extra context menu item: Download met Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
    O8 - Extra context menu item: Download selectie met Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
    O8 - Extra context menu item: Download video met Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
    O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
    O20 - Winlogon Notify: !SABWinLogon - C:\Program Files\SuperAdBlocker.com\Super Ad Blocker\SABWINLO.DLL
    O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
    O23 - Service: Mobiel Apple apparaat (Apple Mobile Device) - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
    O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
    O23 - Service: Google Updateservice (gupdate1c9b20b353fda32) (gupdate1c9b20b353fda32) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
    O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: Keyboard And Mouse Communication Service (KMWDSERVICE) - UASSOFT.COM - C:\Program Files\Trust\Trust R-Series Mouse\KMWDSrv.exe
    O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
    O23 - Service: McAfee SiteAdvisor Service - Unknown owner - C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
    O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
    O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
    O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
    O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
    O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
    O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
    O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
    O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
    O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
    O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
    vsvc32.exe
    O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
    O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
    O23 - Service: Super Ad Blocker Service (SABSVC) - SuperAdBlocker.com - C:\Program Files\SuperAdBlocker.com\Super Ad Blocker\SABSVC.EXE
    O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. (www.webroot.com) - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
    O23 - Service: Webroot Client Service (WRConsumerService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRConsumerService.exe


    End of file - 11160 bytes

    alvast bedankt Hans
  • Hallo Hans, op je HJT-log heb ik geen enkele aanmerking, ziet er perfekt uit.

    Ik vermoed, dat er in jouw Windows mogelijk een conflictsituatie bestaat tussen McAfee antivirus en Webroot Spy Sweeper.
  • ik vertrouw het toch nog niet helemaal, kan je misschien toch nog even kijken naar dit combofix logje?



    ComboFix 09-10-17.01 - Reiff 18-10-2009 16:35.2.2 - NTFSx86
    Microsoft Windows XP Home Edition 5.1.2600.3.1252.31.1043.18.1023.530 [GMT 2:00]
    Gestart vanuit: c:\documents and settings\Reiff\Bureaublad\ComboFix.exe
    AV: McAfee VirusScan *On-access scanning disabled* (Updated) {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
    FW: McAfee Personal Firewall *disabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}
    .

    (((((((((((((((((((( Bestanden Gemaakt van 2009-09-18 to 2009-10-18 ))))))))))))))))))))))))))))))
    .

    2009-10-18 13:53 . 2009-10-18 13:53 ——– d-sh–w- c:\documents and settings\Reiff\IETldCache
    2009-10-18 13:52 . 2009-10-18 13:52 ——– d-sh–w- c:\windows\system32\config\systemprofile\IETldCache
    2009-10-18 13:42 . 2009-08-29 08:00 12800 -c—-w- c:\windows\system32\dllcache\xpshims.dll
    2009-10-18 13:42 . 2009-08-29 08:00 246272 -c—-w- c:\windows\system32\dllcache\ieproxy.dll
    2009-10-18 13:42 . 2009-10-18 13:42 ——– d—–w- c:\windows\ie8updates
    2009-10-18 13:41 . 2009-08-07 08:48 100352 -c—-w- c:\windows\system32\dllcache\iecompat.dll
    2009-10-18 13:37 . 2009-10-18 13:41 ——– dc-h–w- c:\windows\ie8
    2009-10-18 13:08 . 2009-10-18 13:08 ——– d—–w- c:\documents and settings\Reiff\Application Data\Malwarebytes
    2009-10-18 13:08 . 2009-09-10 12:54 38224 —-a-w- c:\windows\system32\drivers\mbamswissarmy.sys
    2009-10-18 13:08 . 2009-10-18 13:08 ——– d—–w- c:\documents and settings\All Users\Application Data\Malwarebytes
    2009-10-18 13:08 . 2009-10-18 13:08 ——– d—–w- c:\program files\Malwarebytes' Anti-Malware
    2009-10-18 13:08 . 2009-09-10 12:53 19160 —-a-w- c:\windows\system32\drivers\mbam.sys
    2009-10-17 16:14 . 2009-10-17 16:15 ——– d—–w- c:\documents and settings\saskia\Local Settings\Application Data\Adobe
    2009-10-07 13:04 . 2009-10-14 09:04 ——– d—–w- c:\documents and settings\hans\Local Settings\Application Data\Temp
    2009-09-26 11:04 . 2009-09-26 11:04 ——– d—–w- c:\documents and settings\Reiff\Local Settings\Application Data\Temp

    .
    ((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2009-10-18 14:10 . 2009-03-23 19:54 ——– d—–w- c:\program files\Free Download Manager
    2009-10-18 14:02 . 2008-06-18 18:40 ——– d—–w- c:\program files\Common Files\Wise Installation Wizard
    2009-10-18 14:00 . 2008-05-21 16:30 ——– d—–w- c:\program files\SKGamingPoker
    2009-10-18 13:15 . 2009-03-23 19:54 ——– d—–w- c:\documents and settings\Reiff\Application Data\Free Download Manager
    2009-10-16 15:02 . 2006-03-02 11:00 87068 —-a-w- c:\windows\system32\perfc013.dat
    2009-10-16 15:02 . 2006-03-02 11:00 501868 —-a-w- c:\windows\system32\perfh013.dat
    2009-10-16 14:57 . 2008-05-20 17:40 ——– d—–w- c:\documents and settings\All Users\Application Data\Microsoft Help
    2009-10-13 21:16 . 2008-11-16 19:06 ——– d—–w- c:\documents and settings\LocalService\Application Data\SACore
    2009-10-10 18:07 . 2008-05-21 14:57 139904 —-a-w- c:\windows\system32\drivers\PnkBstrK.sys
    2009-10-10 18:07 . 2008-08-20 14:25 189744 —-a-w- c:\windows\system32\PnkBstrB.exe
    2009-09-26 17:19 . 2009-05-23 18:52 ——– d—–w- c:\documents and settings\eline\Application Data\Free Download Manager
    2009-09-26 12:30 . 2008-05-31 18:53 73560 —-a-w- c:\documents and settings\Reiff\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
    2009-09-18 18:56 . 2008-06-16 07:59 73560 —-a-w- c:\documents and settings\eline\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
    2009-09-13 13:57 . 2008-05-21 14:56 75064 —-a-w- c:\windows\system32\PnkBstrA.exe
    2009-09-12 10:21 . 2008-05-21 09:26 ——– d—–w- c:\program files\Xfire
    2009-09-11 19:00 . 2008-05-21 09:26 ——– d—–w- c:\documents and settings\Reiff\Application Data\Xfire
    2009-09-11 14:20 . 2006-03-02 11:00 136192 —-a-w- c:\windows\system32\msv1_0.dll
    2009-09-11 00:00 . 2009-09-11 00:00 41872 —-a-w- c:\windows\system32\xfcodec.dll
    2009-09-05 17:57 . 2009-09-05 17:57 ——– d—–w- c:\program files\ESET
    2009-09-05 15:59 . 2008-05-21 08:32 ——– d—–w- c:\program files\Wolfenstein - Enemy Territory
    2009-09-05 15:58 . 2008-09-02 13:27 ——– d—–w- c:\program files\DivX
    2009-09-05 15:58 . 2008-05-20 16:15 ——– d—–w- c:\program files\FaxTools
    2009-09-04 21:05 . 2006-03-02 11:00 58880 —-a-w- c:\windows\system32\msasn1.dll
    2009-09-04 16:43 . 2009-04-09 06:26 73560 —-a-w- c:\documents and settings\saskia\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
    2009-08-29 08:00 . 2006-03-02 11:00 916480 —-a-w- c:\windows\system32\wininet.dll
    2009-08-26 08:02 . 2006-03-02 11:00 247326 —-a-w- c:\windows\system32\strmdll.dll
    2009-08-22 22:03 . 2008-05-20 18:56 ——– d—–w- c:\program files\MSBuild
    2009-08-22 22:03 . 2009-08-22 22:03 ——– d—–w- c:\program files\Reference Assemblies
    2009-08-22 17:59 . 2008-05-20 19:14 ——– d—–w- c:\program files\Flash Website Design
    2009-08-22 17:58 . 2008-05-20 16:15 ——– d–h–w- c:\program files\InstallShield Installation Information
    2009-08-17 21:33 . 2009-08-17 21:33 1193832 —-a-w- c:\windows\system32\FM20.DLL
    2009-08-05 09:01 . 2006-03-02 11:00 205312 —-a-w- c:\windows\system32\mswebdvd.dll
    2009-08-04 17:29 . 2006-03-02 11:00 2149888 ——w- c:\windows\system32
    toskrnl.exe
    2009-08-04 17:29 . 2004-08-04 00:58 2028544 ——w- c:\windows\system32
    tkrnlpa.exe
    2008-06-18 14:27 . 2008-06-18 14:27 7920 —-a-w- c:\program files\hijackthis.log
    2009-05-01 21:02 . 2009-05-01 21:02 1044480 —-a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
    2009-05-01 21:02 . 2009-05-01 21:02 200704 —-a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
    .

    ((((((((((((((((((((((((((((( SnapShot@2009-09-06_15.48.58 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2006-03-02 11:00 . 2009-06-25 08:27 54272 c:\windows\system32\wdigest.dll
    + 2008-05-20 09:44 . 2009-01-07 16:21 26144 c:\windows\system32\spupdsvc.exe
    + 2008-05-20 09:20 . 2009-01-07 16:21 18464 c:\windows\system32\spmsg.dll
    - 2006-03-02 11:00 . 2009-02-03 19:59 56832 c:\windows\system32\secur32.dll
    + 2006-03-02 11:00 . 2009-06-25 08:27 56832 c:\windows\system32\secur32.dll
    + 2006-03-02 11:00 . 2009-03-08 02:31 46592 c:\windows\system32\pngfilt.dll
    - 2006-03-02 11:00 . 2009-08-22 22:09 68156 c:\windows\system32\perfc009.dat
    + 2006-03-02 11:00 . 2009-10-16 15:02 68156 c:\windows\system32\perfc009.dat
    + 2006-06-29 06:05 . 2009-01-07 16:20 23552 c:\windows\system32
    ormaliz.dll
    - 2006-06-29 06:05 . 2006-06-29 06:05 23552 c:\windows\system32
    ormaliz.dll
    - 2006-06-28 15:59 . 2006-06-28 15:59 24576 c:\windows\system32
    lsdl.dll
    + 2006-06-28 15:59 . 2009-01-07 16:20 24576 c:\windows\system32
    lsdl.dll
    + 2006-03-02 11:00 . 2009-03-08 02:31 48128 c:\windows\system32\mshtmler.dll
    - 2006-03-02 11:00 . 2007-08-13 16:01 48128 c:\windows\system32\mshtmler.dll
    + 2006-03-02 11:00 . 2009-03-08 02:31 66560 c:\windows\system32\mshtmled.dll
    + 2006-03-02 11:00 . 2009-03-08 02:31 45568 c:\windows\system32\mshta.exe
    - 2006-03-02 11:00 . 2007-08-13 16:32 45568 c:\windows\system32\mshta.exe
    + 2007-08-13 16:36 . 2009-03-08 02:31 13312 c:\windows\system32\msfeedssync.exe
    + 2007-08-13 16:54 . 2009-08-29 08:00 55296 c:\windows\system32\msfeedsbs.dll
    + 2008-05-20 19:34 . 2009-10-18 13:32 84661 c:\windows\system32\Macromed\Flash\uninstall_plugin.exe
    + 2006-03-02 11:00 . 2009-03-08 02:34 43008 c:\windows\system32\licmgr10.dll
    + 2006-03-02 11:00 . 2009-08-29 08:00 25600 c:\windows\system32\jsproxy.dll
    + 2006-03-02 11:00 . 2009-03-08 02:32 94720 c:\windows\system32\inseng.dll
    + 2006-03-02 11:00 . 2009-03-08 02:31 34816 c:\windows\system32\imgutil.dll
    + 2007-08-13 16:39 . 2009-03-08 02:32 36864 c:\windows\system32\ieudinit.exe
    + 2006-03-02 11:00 . 2009-03-08 02:32 71680 c:\windows\system32\iesetup.dll
    + 2006-03-02 11:00 . 2009-03-08 02:32 55808 c:\windows\system32\iernonce.dll
    + 2006-06-29 06:05 . 2009-01-07 16:20 26112 c:\windows\system32\idndl.dll
    - 2006-06-29 06:05 . 2006-06-29 06:05 26112 c:\windows\system32\idndl.dll
    + 2007-08-13 16:36 . 2009-03-08 02:31 59904 c:\windows\system32\icardie.dll
    + 2006-03-02 11:00 . 2009-06-24 11:18 92928 c:\windows\system32\drivers\ksecdd.sys
    + 2009-06-25 08:27 . 2009-06-25 08:27 54272 c:\windows\system32\dllcache\wdigest.dll
    + 2009-02-03 19:59 . 2009-06-25 08:27 56832 c:\windows\system32\dllcache\secur32.dll
    - 2009-02-03 19:59 . 2009-02-03 19:59 56832 c:\windows\system32\dllcache\secur32.dll
    + 2007-08-13 16:36 . 2009-03-08 02:31 46592 c:\windows\system32\dllcache\pngfilt.dll
    - 2007-08-13 16:01 . 2007-08-13 16:01 48128 c:\windows\system32\dllcache\mshtmler.dll
    + 2007-08-13 16:01 . 2009-03-08 02:31 48128 c:\windows\system32\dllcache\mshtmler.dll
    + 2007-08-13 16:54 . 2009-03-08 02:31 66560 c:\windows\system32\dllcache\mshtmled.dll
    - 2007-08-13 16:32 . 2007-08-13 16:32 45568 c:\windows\system32\dllcache\mshta.exe
    + 2007-08-13 16:32 . 2009-03-08 02:31 45568 c:\windows\system32\dllcache\mshta.exe
    + 2008-05-20 10:32 . 2009-08-29 08:00 55296 c:\windows\system32\dllcache\msfeedsbs.dll
    + 2009-09-04 21:05 . 2009-09-04 21:05 58880 c:\windows\system32\dllcache\msasn1.dll
    + 2007-08-13 16:44 . 2009-03-08 02:34 43008 c:\windows\system32\dllcache\licmgr10.dll
    + 2009-06-24 11:18 . 2009-06-24 11:18 92928 c:\windows\system32\dllcache\ksecdd.sys
    + 2007-08-13 16:54 . 2009-08-29 08:00 25600 c:\windows\system32\dllcache\jsproxy.dll
    + 2007-08-13 16:39 . 2009-03-08 02:32 94720 c:\windows\system32\dllcache\inseng.dll
    + 2007-08-13 16:36 . 2009-03-08 02:31 34816 c:\windows\system32\dllcache\imgutil.dll
    + 2008-05-20 10:32 . 2009-08-28 10:32 13824 c:\windows\system32\dllcache\ieudinit.exe
    - 2008-05-20 10:32 . 2009-06-29 11:07 13824 c:\windows\system32\dllcache\ieudinit.exe
    + 2007-08-13 16:39 . 2009-03-08 02:32 71680 c:\windows\system32\dllcache\iesetup.dll
    + 2007-08-13 16:39 . 2009-03-08 02:32 55808 c:\windows\system32\dllcache\iernonce.dll
    + 2008-05-20 10:32 . 2009-03-08 02:31 59904 c:\windows\system32\dllcache\icardie.dll
    + 2007-08-13 16:18 . 2009-03-08 02:24 68608 c:\windows\system32\dllcache\hmmapi.dll
    + 2007-08-13 16:42 . 2009-03-08 02:33 18944 c:\windows\system32\dllcache\corpol.dll
    + 2007-08-13 16:39 . 2009-03-08 02:32 72704 c:\windows\system32\dllcache\admparse.dll
    + 2006-03-02 11:00 . 2009-03-08 02:33 18944 c:\windows\system32\corpol.dll
    - 2008-05-20 09:22 . 2009-09-06 13:51 32768 c:\windows\system32\config\systemprofile\Local Settings\Geschiedenis\History.IE5\index.dat
    + 2008-05-20 09:22 . 2009-10-18 13:52 32768 c:\windows\system32\config\systemprofile\Local Settings\Geschiedenis\History.IE5\index.dat
    + 2008-05-20 09:22 . 2009-10-18 13:52 32768 c:\windows\system32\config\systemprofile\Cookies\index.dat
    - 2008-05-20 09:22 . 2009-09-06 13:51 32768 c:\windows\system32\config\systemprofile\Cookies\index.dat
    + 2006-03-02 11:00 . 2009-03-08 02:32 72704 c:\windows\system32\admparse.dll
    - 2008-05-20 17:44 . 2009-08-14 10:27 35088 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\oisicon.exe
    + 2008-05-20 17:44 . 2009-10-16 14:57 35088 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\oisicon.exe
    - 2008-05-20 17:44 . 2009-08-14 10:27 18704 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\mspicons.exe
    + 2008-05-20 17:44 . 2009-10-16 14:57 18704 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\mspicons.exe
    - 2008-05-20 17:44 . 2009-08-14 10:27 20240 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\cagicon.exe
    + 2008-05-20 17:44 . 2009-10-16 14:57 20240 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\cagicon.exe
    + 2008-05-20 18:56 . 2009-10-16 14:56 35088 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\oisicon.exe
    - 2008-05-20 18:56 . 2009-08-14 10:26 35088 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\oisicon.exe
    + 2008-05-20 18:56 . 2009-10-16 14:56 18704 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\mspicons.exe
    - 2008-05-20 18:56 . 2009-08-14 10:26 18704 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\mspicons.exe
    - 2008-05-20 18:56 . 2009-08-14 10:26 20240 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\cagicon.exe
    + 2008-05-20 18:56 . 2009-10-16 14:56 20240 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\cagicon.exe
    + 2006-10-26 20:58 . 2006-10-26 20:58 33080 c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\VPREVIEW.EXE
    + 2009-10-18 13:43 . 2009-03-08 02:33 12288 c:\windows\ie8updates\KB974455-IE8\xpshims.dll
    + 2009-10-18 13:43 . 2009-03-08 02:31 55296 c:\windows\ie8updates\KB974455-IE8\msfeedsbs.dll
    + 2009-10-18 13:43 . 2009-03-08 02:33 25600 c:\windows\ie8updates\KB974455-IE8\jsproxy.dll
    + 2009-10-18 13:39 . 2009-03-08 14:32 58448 c:\windows\ie8\spuninst\iecustom.dll
    + 2009-10-18 13:37 . 2009-08-29 07:32 44544 c:\windows\ie8\pngfilt.dll
    + 2009-10-18 13:37 . 2007-08-13 16:01 48128 c:\windows\ie8\mshtmler.dll
    + 2009-10-18 13:37 . 2007-08-13 16:32 45568 c:\windows\ie8\mshta.exe
    + 2009-10-18 13:37 . 2007-08-13 16:36 12288 c:\windows\ie8\msfeedssync.exe
    + 2009-10-18 13:37 . 2009-08-29 07:32 52224 c:\windows\ie8\msfeedsbs.dll
    + 2009-10-18 13:37 . 2007-08-13 16:44 40960 c:\windows\ie8\licmgr10.dll
    + 2009-10-18 13:37 . 2009-08-29 07:32 27648 c:\windows\ie8\jsproxy.dll
    + 2009-10-18 13:37 . 2007-08-13 16:39 92672 c:\windows\ie8\inseng.dll
    + 2009-10-18 13:37 . 2007-08-13 16:36 36352 c:\windows\ie8\imgutil.dll
    + 2009-10-18 13:37 . 2007-08-13 16:39 55296 c:\windows\ie8\iesetup.dll
    + 2009-10-18 13:37 . 2009-08-29 07:32 44544 c:\windows\ie8\iernonce.dll
    + 2009-10-18 13:37 . 2009-08-29 07:32 78336 c:\windows\ie8\ieencode.dll
    + 2009-10-18 13:37 . 2009-08-28 10:32 70656 c:\windows\ie8\ie4uinit.exe
    + 2009-10-18 13:37 . 2009-08-29 07:32 63488 c:\windows\ie8\icardie.dll
    + 2009-10-18 13:37 . 2007-08-13 16:18 60416 c:\windows\ie8\hmmapi.dll
    + 2009-10-18 13:37 . 2009-08-29 07:32 17408 c:\windows\ie8\corpol.dll
    + 2009-10-18 13:37 . 2007-08-13 16:39 71680 c:\windows\ie8\admparse.dll
    + 2009-10-16 14:57 . 2009-06-29 16:01 44544 c:\windows\ie7updates\KB974455-IE7\pngfilt.dll
    + 2009-10-16 14:57 . 2009-06-29 16:01 52224 c:\windows\ie7updates\KB974455-IE7\msfeedsbs.dll
    + 2009-10-16 14:57 . 2009-06-29 16:01 27648 c:\windows\ie7updates\KB974455-IE7\jsproxy.dll
    + 2009-10-16 14:57 . 2009-06-29 11:07 13824 c:\windows\ie7updates\KB974455-IE7\ieudinit.exe
    + 2009-10-16 14:57 . 2009-06-29 16:01 44544 c:\windows\ie7updates\KB974455-IE7\iernonce.dll
    + 2009-10-16 14:57 . 2009-06-29 16:01 78336 c:\windows\ie7updates\KB974455-IE7\ieencode.dll
    + 2009-10-16 14:57 . 2009-06-29 11:07 70656 c:\windows\ie7updates\KB974455-IE7\ie4uinit.exe
    + 2009-10-16 14:57 . 2009-06-29 16:01 63488 c:\windows\ie7updates\KB974455-IE7\icardie.dll
    + 2009-10-16 14:57 . 2009-06-29 16:01 17408 c:\windows\ie7updates\KB974455-IE7\corpol.dll
    + 2009-10-17 15:28 . 2009-10-17 15:28 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\b4a9e413d5cd6d6ec2d50aa05381e293\UIAutomationProvider.ni.dll
    + 2009-10-18 13:40 . 2009-10-18 13:40 44032 c:\windows\assembly\NativeImages_v2.0.50727_32\stdole\d5508d1d8577e42bcff02286c9a182b4\stdole.ni.dll
    + 2009-10-18 13:40 . 2009-10-18 13:40 29184 c:\windows\assembly\NativeImages_v2.0.50727_32\SFMARKETLib\da66c00caec07ffbed20bfbb790b702a\SFMARKETLib.ni.dll
    + 2009-10-17 15:23 . 2009-10-17 15:23 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\3dd0f86c966c75755d62eab8ddf0634c\PresentationFontCache.ni.exe
    + 2009-10-17 15:22 . 2009-10-17 15:22 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\034d081fe294bab1ee1ecc98c1181424\PresentationCFFRasterizer.ni.dll
    + 2009-10-18 13:39 . 2009-10-18 13:39 15872 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\1ded203bd27031c3a5e3441f94b528c0\Microsoft.VisualC.ni.dll
    + 2009-10-18 13:40 . 2009-10-18 13:40 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\Interop.QTOControlL#\786536f5da1d54b03920c888ca8ec9ab\Interop.QTOControlLib.ni.dll
    + 2009-10-18 13:40 . 2009-10-18 13:40 35328 c:\windows\assembly\NativeImages_v2.0.50727_32\Interop.CDDBUICONTR#\1fcc52c5ac885e26123b6b7baa965dcb\Interop.CDDBUICONTROLLibSMS.ni.dll
    + 2009-10-18 13:40 . 2009-10-18 13:40 42496 c:\windows\assembly\NativeImages_v2.0.50727_32\Interop.CDDBLINKLib#\7adf92abed853866bd9da9ee79bf6072\Interop.CDDBLINKLibSMS.ni.dll
    + 2009-10-18 13:40 . 2009-10-18 13:40 20480 c:\windows\assembly\NativeImages_v2.0.50727_32\Interfaces\2d570108b6b2d6de26447aefad6ce425\Interfaces.ni.dll
    + 2009-10-18 13:40 . 2009-10-18 13:40 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\a664ccab020f93f1d533919f57131190\dfsvc.ni.exe
    + 2009-10-18 13:40 . 2009-10-18 13:40 59904 c:\windows\assembly\NativeImages_v2.0.50727_32\AxInterop.QTOContro#\f0974aa5e74f0f25485201dfeb5561e6\AxInterop.QTOControlLib.ni.dll
    + 2009-10-17 15:42 . 2009-10-17 15:42 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\e63d6d26b8a664cfdfbd4ad75e03c14d\Accessibility.ni.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    + 2009-09-11 22:17 . 2009-05-26 11:41 26488 c:\windows\$hf_mig$\KB971961\update\spcustom.dll
    + 2009-09-11 22:17 . 2009-05-26 11:41 18808 c:\windows\$hf_mig$\KB971961\spmsg.dll
    + 2009-09-11 22:19 . 2008-07-08 13:07 26488 c:\windows\$hf_mig$\KB956844\update\spcustom.dll
    + 2009-09-11 22:19 . 2008-07-08 13:07 18808 c:\windows\$hf_mig$\KB956844\spmsg.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
    + 2009-10-18 13:42 . 2009-03-08 02:35 2048 c:\windows\ie8updates\KB973874-IE8\iecompat.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
    - 2008-05-20 09:51 . 2008-04-14 20:32 121856 c:\windows\system32\xmllite.dll
    + 2008-05-20 09:51 . 2009-01-07 16:21 121856 c:\windows\system32\xmllite.dll
    + 2006-03-02 11:00 . 2009-04-09 23:01 530280 c:\windows\system32\wmspdmod.dll
    + 2007-08-13 16:45 . 2009-03-08 02:34 208384 c:\windows\system32\WinFXDocObj.exe
    + 2006-03-02 11:00 . 2009-03-08 02:34 236544 c:\windows\system32\webcheck.dll
    + 2006-03-02 11:00 . 2009-03-08 02:33 420352 c:\windows\system32\vbscript.dll
    - 2006-03-02 11:00 . 2009-06-29 16:01 105984 c:\windows\system32\url.dll
    + 2006-03-02 11:00 . 2009-03-08 02:34 105984 c:\windows\system32\url.dll
    + 2006-03-02 11:00 . 2009-06-25 08:27 147456 c:\windows\system32\schannel.dll
    - 2006-03-02 11:00 . 2009-08-22 22:09 435260 c:\windows\system32\perfh009.dat
    + 2006-03-02 11:00 . 2009-10-16 15:02 435260 c:\windows\system32\perfh009.dat
    + 2006-03-02 11:00 . 2009-08-29 08:00 206848 c:\windows\system32\occache.dll
    + 2006-03-02 11:00 . 2009-03-08 02:32 611840 c:\windows\system32\mstime.dll
    + 2006-03-02 11:00 . 2009-03-08 02:34 193536 c:\windows\system32\msrating.dll
    - 2006-03-02 11:00 . 2007-08-13 16:54 156160 c:\windows\system32\msls31.dll
    + 2006-03-02 11:00 . 2009-03-08 02:22 156160 c:\windows\system32\msls31.dll
    + 2007-08-13 16:54 . 2009-08-29 08:00 594432 c:\windows\system32\msfeeds.dll
    + 2009-01-07 16:20 . 2009-01-07 16:20 265720 c:\windows\system32\msdbg2.dll
    + 2009-07-18 03:21 . 2009-07-18 03:21 257440 c:\windows\system32\Macromed\Flash\NPSWF32_FlashUtil.exe
    + 2006-03-02 11:00 . 2009-06-25 08:27 735232 c:\windows\system32\lsasrv.dll
    + 2006-03-02 11:00 . 2009-06-25 08:27 301568 c:\windows\system32\kerberos.dll
    + 2006-03-02 11:00 . 2009-03-08 02:33 726528 c:\windows\system32\jscript.dll
    + 2007-08-13 16:54 . 2009-03-08 02:22 164352 c:\windows\system32\ieui.dll
    + 2006-03-02 11:00 . 2009-08-29 08:00 184320 c:\windows\system32\iepeers.dll
    + 2006-03-02 11:00 . 2009-08-29 08:00 387584 c:\windows\system32\iedkcs32.dll
    + 2007-07-11 10:27 . 2009-03-08 02:11 445952 c:\windows\system32\ieapfltr.dll
    + 2006-03-02 11:00 . 2009-03-08 02:32 163840 c:\windows\system32\ieakui.dll
    + 2006-03-02 11:00 . 2009-03-08 02:33 229376 c:\windows\system32\ieaksie.dll
    + 2006-03-02 11:00 . 2009-03-08 02:33 125952 c:\windows\system32\ieakeng.dll
    + 2006-03-02 11:00 . 2009-08-28 10:37 173056 c:\windows\system32\ie4uinit.exe
    - 2006-03-02 11:00 . 2009-06-29 16:01 133120 c:\windows\system32\extmgr.dll
    + 2006-03-02 11:00 . 2009-08-29 07:32 133120 c:\windows\system32\extmgr.dll
    + 2006-03-02 11:00 . 2009-03-08 02:31 216064 c:\windows\system32\dxtrans.dll
    + 2006-03-02 11:00 . 2009-03-08 02:31 348160 c:\windows\system32\dxtmsft.dll
    + 2006-03-02 11:00 . 2009-04-09 23:01 530280 c:\windows\system32\dllcache\wmspdmod.dll
    + 2007-08-13 16:54 . 2009-08-29 08:00 916480 c:\windows\system32\dllcache\wininet.dll
    + 2007-08-13 16:54 . 2009-03-08 02:34 236544 c:\windows\system32\dllcache\webcheck.dll
    + 2007-08-13 16:54 . 2009-03-08 02:33 759296 c:\windows\system32\dllcache\VGX.dll
    + 2007-08-13 16:54 . 2009-03-08 02:33 420352 c:\windows\system32\dllcache\vbscript.dll
    - 2007-08-13 16:44 . 2009-06-29 16:01 105984 c:\windows\system32\dllcache\url.dll
    + 2007-08-13 16:44 . 2009-03-08 02:34 105984 c:\windows\system32\dllcache\url.dll
    + 2009-09-11 18:51 . 2009-06-21 21:49 153088 c:\windows\system32\dllcache\triedit.dll
    - 2006-03-02 11:00 . 2008-10-03 10:05 247326 c:\windows\system32\dllcache\strmdll.dll
    + 2006-03-02 11:00 . 2009-08-26 08:02 247326 c:\windows\system32\dllcache\strmdll.dll
    + 2009-01-07 16:20 . 2009-01-07 16:20 134144 c:\windows\system32\dllcache\sqmapi.dll
    + 2008-12-05 06:58 . 2009-06-25 08:27 147456 c:\windows\system32\dllcache\schannel.dll
    + 2007-08-13 16:44 . 2009-08-29 08:00 206848 c:\windows\system32\dllcache\occache.dll
    + 2009-06-25 08:27 . 2009-09-11 14:20 136192 c:\windows\system32\dllcache\msv1_0.dll
    + 2007-08-13 16:54 . 2009-03-08 02:32 611840 c:\windows\system32\dllcache\mstime.dll
    + 2007-08-13 16:44 . 2009-03-08 02:34 193536 c:\windows\system32\dllcache\msrating.dll
    - 2006-03-02 11:00 . 2007-08-13 16:54 156160 c:\windows\system32\dllcache\msls31.dll
    + 2006-03-02 11:00 . 2009-03-08 02:22 156160 c:\windows\system32\dllcache\msls31.dll
    + 2008-05-20 10:32 . 2009-08-29 08:00 594432 c:\windows\system32\dllcache\msfeeds.dll
    + 2009-04-15 14:25 . 2009-06-25 08:27 735232 c:\windows\system32\dllcache\lsasrv.dll
    + 2009-06-25 08:27 . 2009-06-25 08:27 301568 c:\windows\system32\dllcache\kerberos.dll
    + 2007-08-13 16:38 . 2009-03-08 02:33 726528 c:\windows\system32\dllcache\jscript.dll
    + 2007-08-13 16:43 . 2009-03-08 12:09 638816 c:\windows\system32\dllcache\iexplore.exe
    + 2007-08-13 16:54 . 2009-08-29 08:00 184320 c:\windows\system32\dllcache\iepeers.dll
    + 2007-08-13 16:39 . 2009-08-29 08:00 387584 c:\windows\system32\dllcache\iedkcs32.dll
    + 2008-05-20 10:32 . 2009-03-08 02:11 445952 c:\windows\system32\dllcache\ieapfltr.dll
    + 2006-03-02 11:00 . 2009-03-08 02:32 163840 c:\windows\system32\dllcache\ieakui.dll
    + 2007-08-13 16:39 . 2009-03-08 02:33 229376 c:\windows\system32\dllcache\ieaksie.dll
    + 2007-08-13 16:39 . 2009-03-08 02:33 125952 c:\windows\system32\dllcache\ieakeng.dll
    + 2007-08-13 16:39 . 2009-08-28 10:37 173056 c:\windows\system32\dllcache\ie4uinit.exe
    + 2007-08-13 16:54 . 2009-08-29 07:32 133120 c:\windows\system32\dllcache\extmgr.dll
    - 2007-08-13 16:54 . 2009-06-29 16:01 133120 c:\windows\system32\dllcache\extmgr.dll
    + 2007-08-13 16:35 . 2009-03-08 02:31 216064 c:\windows\system32\dllcache\dxtrans.dll
    + 2007-08-13 16:35 . 2009-03-08 02:31 348160 c:\windows\system32\dllcache\dxtmsft.dll
    + 2007-08-13 16:39 . 2009-03-08 02:32 128512 c:\windows\system32\dllcache\advpack.dll
    + 2009-10-18 13:52 . 2009-10-18 13:52 245760 c:\windows\system32\config\systemprofile\IETldCache\index.dat
    + 2006-03-02 11:00 . 2009-03-08 02:32 128512 c:\windows\system32\advpack.dll
    + 2009-08-07 21:51 . 2009-08-07 21:51 989016 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
    - 2008-05-20 17:44 . 2009-08-14 10:27 888080 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\wordicon.exe
    + 2008-05-20 17:44 . 2009-10-16 14:57 888080 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\wordicon.exe
    + 2008-05-20 17:44 . 2009-10-16 14:57 272648 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\pubs.exe
    - 2008-05-20 17:44 . 2009-08-14 10:27 272648 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\pubs.exe
    + 2008-05-20 17:44 . 2009-10-16 14:57 922384 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\pptico.exe
    - 2008-05-20 17:44 . 2009-08-14 10:27 922384 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\pptico.exe
    - 2008-05-20 17:44 . 2009-08-14 10:27 845584 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\outicon.exe
    + 2008-05-20 17:44 . 2009-10-16 14:57 845584 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\outicon.exe
    + 2008-05-20 17:44 . 2009-10-16 14:57 217864 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\misc.exe
    - 2008-05-20 17:44 . 2009-08-14 10:27 217864 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\misc.exe
    - 2008-05-20 18:56 . 2009-08-14 10:26 888080 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\wordicon.exe
    + 2008-05-20 18:56 . 2009-10-16 14:56 888080 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\wordicon.exe
    + 2008-05-20 18:56 . 2009-10-16 14:56 272648 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\pubs.exe
    - 2008-05-20 18:56 . 2009-08-14 10:26 272648 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\pubs.exe
    - 2008-05-20 18:56 . 2009-08-14 10:26 922384 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\pptico.exe
    + 2008-05-20 18:56 . 2009-10-16 14:56 922384 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\pptico.exe
    + 2008-05-20 18:56 . 2009-10-16 14:56 845584 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\outicon.exe
    - 2008-05-20 18:56 . 2009-08-14 10:26 845584 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\outicon.exe
    + 2008-05-20 18:56 . 2009-10-16 14:56 217864 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\misc.exe
    - 2008-05-20 18:56 . 2009-08-14 10:26 217864 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\misc.exe
    - 2008-05-20 18:56 . 2009-08-14 10:26 159504 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\inficon.exe
    + 2008-05-20 18:56 . 2009-10-16 14:56 159504 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\inficon.exe
    + 2009-10-18 13:43 . 2009-03-08 02:34 914944 c:\windows\ie8updates\KB974455-IE8\wininet.dll
    + 2009-10-18 13:43 . 2009-05-26 11:41 401272 c:\windows\ie8updates\KB974455-IE8\spuninst\updspapi.dll
    + 2009-10-18 13:43 . 2008-07-08 13:07 234872 c:\windows\ie8updates\KB974455-IE8\spuninst\spuninst.exe
    + 2009-10-18 13:43 . 2009-03-08 02:34 109568 c:\windows\ie8updates\KB974455-IE8\occache.dll
    + 2009-10-18 13:43 . 2009-03-08 02:32 594432 c:\windows\ie8updates\KB974455-IE8\msfeeds.dll
    + 2009-10-18 13:43 . 2009-03-08 02:33 246784 c:\windows\ie8updates\KB974455-IE8\ieproxy.dll
    + 2009-10-18 13:43 . 2009-03-08 02:31 183808 c:\windows\ie8updates\KB974455-IE8\iepeers.dll
    + 2009-10-18 13:43 . 2009-03-08 12:09 391536 c:\windows\ie8updates\KB974455-IE8\iedkcs32.dll
    + 2009-10-18 13:43 . 2009-03-08 02:32 173056 c:\windows\ie8updates\KB974455-IE8\ie4uinit.exe
    + 2009-10-18 13:42 . 2008-07-08 13:07 401272 c:\windows\ie8updates\KB973874-IE8\spuninst\updspapi.dll
    + 2009-10-18 13:42 . 2008-07-08 13:07 234872 c:\windows\ie8updates\KB973874-IE8\spuninst\spuninst.exe
    + 2009-10-18 13:37 . 2009-08-29 07:32 832512 c:\windows\ie8\wininet.dll
    + 2009-10-18 13:37 . 2007-08-13 16:45 206336 c:\windows\ie8\winfxdocobj.exe
    + 2009-10-18 13:37 . 2009-08-29 07:32 233472 c:\windows\ie8\webcheck.dll
    + 2009-10-18 13:37 . 2008-05-27 17:30 765952 c:\windows\ie8\vgx.dll
    + 2009-10-18 13:37 . 2008-05-09 10:56 430080 c:\windows\ie8\vbscript.dll
    + 2009-10-18 13:37 . 2009-08-29 07:32 105984 c:\windows\ie8\url.dll
    + 2009-10-18 13:39 . 2009-01-07 16:21 400928 c:\windows\ie8\spuninst\updspapi.dll
    + 2009-10-18 13:39 . 2009-01-07 16:21 235040 c:\windows\ie8\spuninst\spuninst.exe
    + 2009-10-18 13:37 . 2006-09-06 15:43 216800 c:\windows\ie8\spuninst.exe
    + 2009-10-18 13:37 . 2009-08-29 07:32 102912 c:\windows\ie8\occache.dll
    + 2009-10-18 13:37 . 2009-08-29 07:32 671232 c:\windows\ie8\mstime.dll
    + 2009-10-18 13:37 . 2009-08-29 07:32 193024 c:\windows\ie8\msrating.dll
    + 2009-10-18 13:37 . 2007-08-13 16:54 156160 c:\windows\ie8\msls31.dll
    + 2009-10-18 13:37 . 2009-08-29 07:32 477696 c:\windows\ie8\mshtmled.dll
    + 2009-10-18 13:37 . 2009-08-29 07:32 459264 c:\windows\ie8\msfeeds.dll
    + 2009-10-18 13:37 . 2009-08-13 15:24 512000 c:\windows\ie8\jscript.dll
    + 2009-10-18 13:37 . 2009-08-27 05:18 634648 c:\windows\ie8\iexplore.exe
    + 2009-10-18 13:37 . 2007-08-13 16:54 180736 c:\windows\ie8\ieui.dll
    + 2009-10-18 13:37 . 2009-08-29 07:32 268288 c:\windows\ie8\iertutil.dll
    + 2009-10-18 13:37 . 2007-08-13 16:54 287744 c:\windows\ie8\ieproxy.dll
    + 2009-10-18 13:37 . 2007-08-13 16:54 191488 c:\windows\ie8\iepeers.dll
    + 2009-10-18 13:37 . 2009-08-29 07:32 385024 c:\windows\ie8\iedkcs32.dll
    + 2009-10-18 13:37 . 2009-08-29 07:32 380928 c:\windows\ie8\ieapfltr.dll
    + 2009-10-18 13:37 . 2009-08-27 05:18 161792 c:\windows\ie8\ieakui.dll
    + 2009-10-18 13:37 . 2009-08-29 07:32 230400 c:\windows\ie8\ieaksie.dll
    + 2009-10-18 13:37 . 2009-08-29 07:32 153088 c:\windows\ie8\ieakeng.dll
    + 2009-10-18 13:37 . 2009-08-29 07:32 214528 c:\windows\ie8\dxtrans.dll
    + 2009-10-18 13:37 . 2009-08-29 07:32 347136 c:\windows\ie8\dxtmsft.dll
    + 2009-10-18 13:37 . 2009-08-29 07:32 124928 c:\windows\ie8\advpack.dll
    + 2009-10-16 14:57 . 2009-06-29 16:01 827392 c:\windows\ie7updates\KB974455-IE7\wininet.dll
    + 2009-10-16 14:57 . 2009-06-29 16:01 233472 c:\windows\ie7updates\KB974455-IE7\webcheck.dll
    + 2009-10-16 14:57 . 2009-06-29 16:01 105984 c:\windows\ie7updates\KB974455-IE7\url.dll
    + 2009-10-16 14:57 . 2009-05-26 11:41 401272 c:\windows\ie7updates\KB974455-IE7\spuninst\updspapi.dll
    + 2009-10-16 14:57 . 2009-05-26 11:41 234872 c:\windows\ie7updates\KB974455-IE7\spuninst\spuninst.exe
    + 2009-10-16 14:57 . 2009-06-29 16:01 102912 c:\windows\ie7updates\KB974455-IE7\occache.dll
    + 2009-10-16 14:57 . 2009-06-29 16:01 671232 c:\windows\ie7updates\KB974455-IE7\mstime.dll
    + 2009-10-16 14:57 . 2009-06-29 16:01 193024 c:\windows\ie7updates\KB974455-IE7\msrating.dll
    + 2009-10-16 14:57 . 2009-06-29 16:01 477696 c:\windows\ie7updates\KB974455-IE7\mshtmled.dll
    + 2009-10-16 14:57 . 2009-06-29 16:01 459264 c:\windows\ie7updates\KB974455-IE7\msfeeds.dll
    + 2009-10-16 14:57 . 2009-06-29 08:35 634632 c:\windows\ie7updates\KB974455-IE7\iexplore.exe
    + 2009-10-16 14:57 . 2009-06-29 16:01 268288 c:\windows\ie7updates\KB974455-IE7\iertutil.dll
    + 2009-10-16 14:57 . 2009-06-29 16:01 385024 c:\windows\ie7updates\KB974455-IE7\iedkcs32.dll
    + 2009-10-16 14:57 . 2009-06-29 16:01 380928 c:\windows\ie7updates\KB974455-IE7\ieapfltr.dll
    + 2009-10-16 14:57 . 2009-06-29 08:33 161792 c:\windows\ie7updates\KB974455-IE7\ieakui.dll
    + 2009-10-16 14:57 . 2009-06-29 16:01 230400 c:\windows\ie7updates\KB974455-IE7\ieaksie.dll
    + 2009-10-16 14:57 . 2009-06-29 16:01 153088 c:\windows\ie7updates\KB974455-IE7\ieakeng.dll
    + 2009-10-16 14:57 . 2009-06-29 16:01 133120 c:\windows\ie7updates\KB974455-IE7\extmgr.dll
    + 2009-10-16 14:57 . 2009-06-29 16:01 214528 c:\windows\ie7updates\KB974455-IE7\dxtrans.dll
    + 2009-10-16 14:57 . 2009-06-29 16:01 347136 c:\windows\ie7updates\KB974455-IE7\dxtmsft.dll
    + 2009-10-16 14:57 . 2009-06-29 16:01 124928 c:\windows\ie7updates\KB974455-IE7\advpack.dll
    + 2009-10-17 15:29 . 2009-10-17 15:29 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\bf92bc207f927cbbd6dfc9dc0c3eae68\WindowsFormsIntegration.ni.dll
    + 2009-10-17 15:28 . 2009-10-17 15:28 187904 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\6f488b7644dc50a083868e91a4014466\UIAutomationTypes.ni.dll
    + 2009-10-17 15:28 . 2009-10-17 15:28 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\c2fbf25609b704061a93500efa6f241d\UIAutomationClient.ni.dll
    + 2009-10-18 13:40 . 2009-10-18 13:40 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\b5f1b8791e6c47e5bd5e7018c346c586\System.Web.RegularExpressions.ni.dll
    + 2009-10-18 13:39 . 2009-10-18 13:39 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\408e637346ef628a3f54fb1b9b83ac9f\System.Transactions.ni.dll
    + 2009-10-18 13:40 . 2009-10-18 13:40 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\1f61bccb700d687775cf778dd77752e9\System.ServiceProcess.ni.dll
    + 2009-10-18 13:39 . 2009-10-18 13:39 676352 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\a9e9b885a6601469c4058375cc74d856\System.Security.ni.dll
    + 2009-10-18 13:39 . 2009-10-18 13:39 311296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\9bc34a79af9c3ed2cf17a0226c769b4c\System.Runtime.Serialization.Formatters.Soap.ni.dll
    + 2009-10-18 13:39 . 2009-10-18 13:39 771584 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\af21e3011fb4e107b13ea5c40c351ec4\System.Runtime.Remoting.ni.dll
    + 2009-10-17 15:42 . 2009-10-17 15:42 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\6c273eb9d1ee8b66b5ecb073de4b785d\System.IO.Log.ni.dll
    + 2009-10-17 15:42 . 2009-10-17 15:42 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\7222db518afb4eaaa138824278249bc7\System.IdentityModel.Selectors.ni.dll
    + 2009-10-18 13:39 . 2009-10-18 13:39 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\8a7d0bd0057a8ed38291d5662248f7a1\System.EnterpriseServices.Wrapper.dll
    + 2009-10-18 13:39 . 2009-10-18 13:39 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\8a7d0bd0057a8ed38291d5662248f7a1\System.EnterpriseServices.ni.dll
    + 2009-10-17 15:26 . 2009-10-17 15:26 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\ca6d7208c0fb72ff97429f2636ced321\System.Drawing.Design.ni.dll
    + 2009-10-18 13:40 . 2009-10-18 13:40 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\a601f47a98ee67df424685c9a66ea449\System.DirectoryServices.Protocols.ni.dll
    + 2009-10-18 13:38 . 2009-10-18 13:38 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\7c743462baccf29b3567b0e3ec9ac134\System.Configuration.ni.dll
    + 2009-10-18 13:40 . 2009-10-18 13:40 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\443e3a85c491b2de4a2ac654cb957484\System.Configuration.Install.ni.dll
    + 2009-10-18 13:40 . 2009-10-18 13:40 999936 c:\windows\assembly\NativeImages_v2.0.50727_32\Sony.MediaSoftware.#\ac058247074ccb49c33aa30f6dad4459\Sony.MediaSoftware.clrshared.ni.dll
    + 2009-10-18 13:41 . 2009-10-18 13:41 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\7602d7687fb9bd21cd9ae60d2b187c99\SMDiagnostics.ni.dll
    + 2009-10-18 13:41 . 2009-10-18 13:41 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\a23dc25782df04533a13e348203e4dc5\ServiceModelReg.ni.exe
    + 2009-10-17 15:24 . 2009-10-17 15:24 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\96f74da5fc40b92f09069230bc0df4f0\PresentationFramework.Royale.ni.dll
    + 2009-10-17 15:24 . 2009-10-17 15:24 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\3bb4d16b042b72c2c85a0f8ac9d48f28\PresentationFramework.Luna.ni.dll
    + 2009-10-17 15:23 . 2009-10-17 15:23 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\30c5c2682d3c5bdaa83bb9a36ee48afa\PresentationFramework.Aero.ni.dll
    + 2009-10-17 15:24 . 2009-10-17 15:24 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\07e952efd70f5608e221a008e6231ace\PresentationFramework.Classic.ni.dll
    + 2009-10-18 13:38 . 2009-10-18 13:38 601088 c:\windows\assembly\NativeImages_v2.0.50727_32\PerstNET\b41cf8b7127bb9d0fcfa301fefa78692\PerstNET.ni.dll
    + 2009-10-18 13:41 . 2009-10-18 13:41 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\fc4d66e0a92b3767006a84f2519d2457\Microsoft.Transactions.Bridge.Dtc.ni.dll
    + 2009-10-18 13:40 . 2009-10-18 13:40 119808 c:\windows\assembly\NativeImages_v2.0.50727_32\MediaManager.Utils\d11a455aa858cf4da86d2d503deae758\MediaManager.Utils.ni.dll
    + 2009-10-18 13:40 . 2009-10-18 13:40 261120 c:\windows\assembly\NativeImages_v2.0.50727_32\MediaManager.Splash#\7d6a667ed49f1bfabbc12d95d8b220f0\MediaManager.SplashScreen.ni.dll
    + 2009-10-18 13:40 . 2009-10-18 13:40 880640 c:\windows\assembly\NativeImages_v2.0.50727_32\Lucene.Net\ef8840fb43349bb14486392ca30be494\Lucene.Net.ni.dll
    + 2009-10-18 13:40 . 2009-10-18 13:40 657920 c:\windows\assembly\NativeImages_v2.0.50727_32\log4net\8e951d64654fb3163881df928410c03e\log4net.ni.dll
    + 2009-10-18 13:40 . 2009-10-18 13:40 812032 c:\windows\assembly\NativeImages_v2.0.50727_32\Interop.WMPLib\bf0daa78029e9a21ddecb4e24e11adfd\Interop.WMPLib.ni.dll
    + 2009-10-18 13:40 . 2009-10-18 13:40 311808 c:\windows\assembly\NativeImages_v2.0.50727_32\Interop.SHDocVw\b3bad775934ae3acadeed9864916a014\Interop.SHDocVw.ni.dll
    + 2009-10-18 13:40 . 2009-10-18 13:40 204288 c:\windows\assembly\NativeImages_v2.0.50727_32\Interop.QTOLibrary\c392503409d05e6942bce37d7b52f3a4\Interop.QTOLibrary.ni.dll
    + 2009-10-18 13:40 . 2009-10-18 13:40 100864 c:\windows\assembly\NativeImages_v2.0.50727_32\Interop.IWshRuntime#\0ee86daef4a2e7ee4ffffbc67a1733e5\Interop.IWshRuntimeLibrary.ni.dll
    + 2009-10-18 13:40 . 2009-10-18 13:40 374784 c:\windows\assembly\NativeImages_v2.0.50727_32\Interop.CDDBCONTROL#\7e528c5a5c9ef2121536a24a750f1d4f\Interop.CDDBCONTROLLibSMS.ni.dll
    + 2009-10-18 13:40 . 2009-10-18 13:40 210432 c:\windows\assembly\NativeImages_v2.0.50727_32\GCPlayer\e2a9a3fb830eae7325440b79d6af5df0\GCPlayer.ni.dll
    + 2009-10-18 13:40 . 2009-10-18 13:40 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\a17c65f0cffaa4f792dd38d50df9d526\ComSvcConfig.ni.exe
    + 2009-10-18 13:40 . 2009-10-18 13:40 151552 c:\windows\assembly\NativeImages_v2.0.50727_32\AxInterop.WMPLib\8c6b926845830957f05de9381dd50008\AxInterop.WMPLib.ni.dll
    + 2009-10-18 13:40 . 2009-10-18 13:40 114176 c:\windows\assembly\NativeImages_v2.0.50727_32\AxInterop.SHDocVw\33c8b7bf6f35224aab5a5e9d7d51c64b\AxInterop.SHDocVw.ni.dll
    + 2009-10-17 15:42 . 2009-10-17 15:42 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\85d7c111956b478766d90625b35d963f\AspNetMMCExt.ni.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
    + 2009-09-11 22:17 . 2009-05-26 11:41 401272 c:\windows\$NtUninstallKB971961$\spuninst\updspapi.dll
    + 2009-09-11 22:17 . 2009-05-26 11:41 234872 c:\windows\$NtUninstallKB971961$\spuninst\spuninst.exe
    + 2009-09-11 22:17 . 2008-05-09 10:56 512000 c:\windows\$NtUninstallKB971961$\jscript.dll
    + 2009-09-11 22:19 . 2007-07-27 08:41 382840 c:\windows\$NtUninstallKB968816_WM9$\spuninst\updspapi.dll
    + 2009-09-11 22:19 . 2007-07-27 08:41 231288 c:\windows\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe
    + 2009-09-11 22:19 . 2008-04-14 20:32 153088 c:\windows\$NtUninstallKB956844$\triedit.dll
    + 2009-09-11 22:19 . 2008-07-08 13:07 401272 c:\windows\$NtUninstallKB956844$\spuninst\updspapi.dll
    + 2009-09-11 22:19 . 2008-07-08 13:07 234872 c:\windows\$NtUninstallKB956844$\spuninst\spuninst.exe
    + 2009-09-11 22:17 . 2009-05-26 11:41 401272 c:\windows\$hf_mig$\KB971961\update\updspapi.dll
    + 2009-09-11 22:17 . 2009-05-26 11:41 765304 c:\windows\$hf_mig$\KB971961\update\update.exe
    + 2009-09-11 22:17 . 2009-05-26 11:41 234872 c:\windows\$hf_mig$\KB971961\spuninst.exe
    + 2009-09-11 18:51 . 2009-08-13 15:04 512000 c:\windows\$hf_mig$\KB971961\SP3QFE\jscript.dll
    + 2009-09-11 22:19 . 2008-07-08 13:07 401272 c:\windows\$hf_mig$\KB956844\update\updspapi.dll
    + 2009-09-11 22:19 . 2008-07-08 13:07 765304 c:\windows\$hf_mig$\KB956844\update\update.exe
    + 2009-09-11 22:19 . 2008-07-08 13:07 234872 c:\windows\$hf_mig$\KB956844\spuninst.exe
    + 2009-09-11 18:51 . 2009-06-21 21:50 153088 c:\windows\$hf_mig$\KB956844\SP3QFE\triedit.dll
    + 2009-10-16 07:06 . 2009-08-13 13:56 1748992 c:\windows\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6001.22319_x-ww_f0b4c2df\GdiPlus.dll
    + 2006-03-02 11:00 . 2009-05-20 10:44 2355200 c:\windows\system32\WMVCore.dll
    + 2006-03-02 11:00 . 2009-08-29 08:00 1208832 c:\windows\system32\urlmon.dll
    - 2006-03-02 11:00 . 2008-04-14 20:32 1440768 c:\windows\system32\query.dll
    + 2006-03-02 11:00 . 2009-07-17 16:22 1440768 c:\windows\system32\query.dll
    + 2006-03-02 11:00 . 2009-08-29 08:00 5940224 c:\windows\system32\mshtml.dll
    + 2009-07-18 03:21 . 2009-07-18 03:21 3883424 c:\windows\system32\Macromed\Flash\NPSWF32.dll
    + 2007-08-13 16:34 . 2009-08-29 08:00 1985536 c:\windows\system32\iertutil.dll
    + 2007-02-12 14:10 . 2009-02-06 19:07 3698584 c:\windows\system32\ieapfltr.dat
    + 2006-03-02 11:00 . 2009-05-20 10:44 2355200 c:\windows\system32\dllcache\WMVCore.dll
    + 2007-08-13 16:54 . 2009-08-29 08:00 1208832 c:\windows\system32\dllcache\urlmon.dll
    + 2009-07-17 16:22 . 2009-07-17 16:22 1440768 c:\windows\system32\dllcache\query.dll
    + 2008-10-15 18:39 . 2009-08-04 20:59 2193536 c:\windows\system32\dllcache
    toskrnl.exe
    - 2008-10-15 18:39 . 2009-02-09 11:27 2028544 c:\windows\system32\dllcache
    tkrpamp.exe
    + 2008-10-15 18:39 . 2009-08-04 17:29 2028544 c:\windows\system32\dllcache
    tkrpamp.exe
    + 2008-10-15 18:39 . 2009-08-04 17:29 2070400 c:\windows\system32\dllcache
    tkrnlpa.exe
    - 2008-10-15 18:39 . 2009-02-10 17:10 2070400 c:\windows\system32\dllcache
    tkrnlpa.exe
    - 2008-10-15 18:39 . 2009-02-09 11:27 2149888 c:\windows\system32\dllcache
    tkrnlmp.exe
    + 2008-10-15 18:39 . 2009-08-04 17:29 2149888 c:\windows\system32\dllcache
    tkrnlmp.exe
    + 2007-08-13 16:54 . 2009-08-29 08:00 5940224 c:\windows\system32\dllcache\mshtml.dll
    + 2008-05-20 10:32 . 2009-08-29 08:00 1985536 c:\windows\system32\dllcache\iertutil.dll
    + 2008-05-20 10:32 . 2009-02-06 19:07 3698584 c:\windows\system32\dllcache\ieapfltr.dat
    + 2009-08-07 21:51 . 2009-08-07 21:51 5812560 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
    + 2009-08-07 21:51 . 2009-08-07 21:51 4546560 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
    - 2008-11-25 02:59 . 2008-11-25 02:59 4546560 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
    + 2009-08-18 10:56 . 2009-08-18 10:56 5020672 c:\windows\Installer\bff29e.msp
    + 2009-08-05 05:49 . 2009-08-05 05:49 3457024 c:\windows\Installer\1ae3fff.msp
    + 2009-07-27 02:31 . 2009-07-27 02:31 3738624 c:\windows\Installer\1ae3fd9.msp
    + 2009-09-18 07:30 . 2009-09-18 07:30 5016576 c:\windows\Installer\1ae3fb5.msp
    + 2009-08-18 11:08 . 2009-08-18 11:08 1373696 c:\windows\Installer\1ae3f91.msp
    - 2008-05-20 17:44 . 2009-08-14 10:27 1172240 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\xlicons.exe
    + 2008-05-20 17:44 . 2009-10-16 14:57 1172240 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\xlicons.exe
    + 2008-05-20 17:44 . 2009-10-16 14:57 1165584 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\accicons.exe
    - 2008-05-20 17:44 . 2009-08-14 10:27 1165584 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\accicons.exe
    - 2008-05-20 18:56 . 2009-08-14 10:26 1172240 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\xlicons.exe
    + 2008-05-20 18:56 . 2009-10-16 14:56 1172240 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\xlicons.exe
    - 2008-05-20 18:56 . 2009-08-14 10:26 1165584 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\accicons.exe
    + 2008-05-20 18:56 . 2009-10-16 14:56 1165584 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\accicons.exe
    + 2007-08-24 05:10 . 2007-08-24 05:10 3735424 c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.6215\VVIEWER.DLL
    + 2007-08-24 05:10 . 2007-08-24 05:10 1846160 c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.6215\VVIEWDWG.DLL
    + 2007-08-22 23:03 . 2007-08-22 23:03 1195888 c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.6215\FM20.DLL
    + 2009-10-18 13:43 . 2009-03-08 02:34 1206784 c:\windows\ie8updates\KB974455-IE8\urlmon.dll
    + 2009-10-18 13:43 . 2009-03-08 02:41 5937152 c:\windows\ie8updates\KB974455-IE8\mshtml.dll
    + 2009-10-18 13:43 . 2009-03-08 02:32 1985024 c:\windows\ie8updates\KB974455-IE8\iertutil.dll
    + 2009-10-18 13:37 . 2009-08-29 07:32 1168384 c:\windows\ie8\urlmon.dll
    + 2009-10-18 13:37 . 2009-08-29 07:32 3598336 c:\windows\ie8\mshtml.dll
    + 2009-10-18 13:37 . 2009-08-29 07:32 6067200 c:\windows\ie8\ieframe.dll
    + 2009-10-18 13:37 . 2009-06-29 08:33 2452872 c:\windows\ie8\ieapfltr.dat
    + 2009-10-16 14:57 . 2009-06-29 16:01 1159680 c:\windows\ie7updates\KB974455-IE7\urlmon.dll
    + 2009-10-16 14:57 . 2009-07-19 13:33 3597824 c:\windows\ie7updates\KB974455-IE7\mshtml.dll
    + 2009-10-16 14:57 . 2009-07-19 13:33 6067200 c:\windows\ie7updates\KB974455-IE7\ieframe.dll
    + 2008-10-15 18:39 . 2009-08-04 20:59 2193536 c:\windows\Driver Cache\i386
    toskrnl.exe
    - 2008-10-15 18:39 . 2009-02-09 11:27 2028544 c:\windows\Driver Cache\i386
    tkrpamp.exe
    + 2008-10-15 18:39 . 2009-08-04 17:29 2028544 c:\windows\Driver Cache\i386
    tkrpamp.exe
    - 2008-10-15 18:39 . 2009-02-10 17:10 2070400 c:\windows\Driver Cache\i386
    tkrnlpa.exe
    + 2008-10-15 18:39 . 2009-08-04 17:29 2070400 c:\windows\Driver Cache\i386
    tkrnlpa.exe
    + 2008-10-15 18:39 . 2009-08-04 17:29 2149888 c:\windows\Driver Cache\i386
    tkrnlmp.exe
    - 2008-10-15 18:39 . 2009-02-09 11:27 2149888 c:\windows\Driver Cache\i386
    tkrnlmp.exe
    + 2009-10-17 15:22 . 2009-10-17 15:22 3313664 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\204d6e5b335134f23ca37638b9227ecf\WindowsBase.ni.dll
    + 2009-10-17 15:28 . 2009-10-17 15:28 1049600 c:\windows\assembly\Nati
  • vervolg….


    + 2009-10-17 15:28 . 2009-10-17 15:28 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\0f2ed6a204eb13841e99b77025464afc\UIAutomationClientsideProviders.ni.dll
    + 2009-10-17 15:43 . 2009-10-17 15:43 1645568 c:\windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPA3.tmp\MediaManager.exe
    + 2009-10-17 15:21 . 2009-10-17 15:21 7868416 c:\windows\assembly\NativeImages_v2.0.50727_32\System\3de5bd01124463d7862bd173af90bc83\System.ni.dll
    + 2009-10-17 15:28 . 2009-10-17 15:28 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\5913d3f81e77194ec833991b1047a532\System.Xml.ni.dll
    + 2009-10-18 13:40 . 2009-10-18 13:40 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\ea07ac791bb5cb9f83679e3dd1a0c0cc\System.Web.Services.ni.dll
    + 2009-10-17 15:27 . 2009-10-17 15:27 1917440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\99594bae1d022502925f5b9dfcdaae9a\System.Speech.ni.dll
    + 2009-10-17 15:42 . 2009-10-17 15:42 2338304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\67ad55827f2542552b576170f0a7dc56\System.Runtime.Serialization.ni.dll
    + 2009-10-17 15:26 . 2009-10-17 15:26 1035264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\e5313735a40c0800f116e27fba4754db\System.Printing.ni.dll
    + 2009-10-17 15:42 . 2009-10-17 15:42 1056768 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\c3b18fef5c6dc3bcdbe5df699fd21a55\System.IdentityModel.ni.dll
    + 2009-10-17 15:26 . 2009-10-17 15:26 1587200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\abb2ac7e08bee026f857d8fa36f9fe6f\System.Drawing.ni.dll
    + 2009-10-18 13:39 . 2009-10-18 13:39 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\f47ebb9db460874b1bcbfc391dc970b1\System.DirectoryServices.ni.dll
    + 2009-10-18 13:39 . 2009-10-18 13:39 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\c94a427baa7683f4221b91f90c18461b\System.Deployment.ni.dll
    + 2009-10-17 15:25 . 2009-10-17 15:25 6616576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\694c07365e0fd6bba0bc304d4d2404a7\System.Data.ni.dll
    + 2009-10-18 13:39 . 2009-10-18 13:39 2510336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\272152f0cc139490729e215611a4b244\System.Data.SqlXml.ni.dll
    + 2009-10-18 13:40 . 2009-10-18 13:40 1115136 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\ffa1018e8022964eb51025c2c6d8727a\System.Data.OracleClient.ni.dll
    + 2009-10-17 15:25 . 2009-10-17 15:25 2516480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\32788c58ff9f8324460604cf1fe7681b\System.Data.Linq.ni.dll
    + 2009-10-17 15:24 . 2009-10-17 15:24 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\c0a42d2ad8a4078040b334f6770ea11f\System.Core.ni.dll
    + 2009-10-17 15:24 . 2009-10-17 15:24 2128896 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\954685c29689d2a6126ceca1fd55e904\ReachFramework.ni.dll
    + 2009-10-17 15:24 . 2009-10-17 15:24 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\a3a6f52ce1d09a7bdccc8e7fc664792d\PresentationUI.ni.dll
    + 2009-10-17 15:21 . 2009-10-17 15:21 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\f906701365083c1473db31519147e263\PresentationBuildTasks.ni.dll
    + 2009-10-18 13:41 . 2009-10-18 13:41 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\f19e9b439636d0744597fff1331cad04\Microsoft.Transactions.Bridge.ni.dll
    + 2009-10-18 13:38 . 2009-10-18 13:38 1670656 c:\windows\assembly\NativeImages_v2.0.50727_32\MediaManager\ff0431078f388a36abe4e6a8b46c08e5\MediaManager.ni.exe
    + 2009-10-18 13:39 . 2009-10-18 13:39 1003520 c:\windows\assembly\NativeImages_v2.0.50727_32\MediaManager.GUI\335dc43336d5a16821cb076cff391e8a\MediaManager.GUI.ni.dll
    + 2009-10-18 13:38 . 2009-10-18 13:38 5381120 c:\windows\assembly\NativeImages_v2.0.50727_32\AppCommon\b3ce890d723f864ed8f2554d3b52919d\AppCommon.ni.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 3149824 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
    - 2009-08-22 22:09 . 2009-08-22 22:09 3149824 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
    - 2009-08-22 22:09 . 2009-08-22 22:09 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
    - 2009-08-22 22:08 . 2009-08-22 22:08 4546560 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
    + 2009-10-16 15:01 . 2009-10-16 15:01 4546560 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
    + 2009-09-11 22:19 . 2008-06-10 10:57 2364472 c:\windows\$NtUninstallKB968816_WM9$\wmvcore.dll
    + 2008-05-20 10:30 . 2009-10-02 09:01 25198016 c:\windows\system32\MRT.exe
    + 2007-08-13 16:54 . 2009-08-29 08:00 11069440 c:\windows\system32\ieframe.dll
    + 2008-05-20 10:32 . 2009-08-29 08:00 11069440 c:\windows\system32\dllcache\ieframe.dll
    + 2009-08-14 18:32 . 2009-08-14 18:32 11110912 c:\windows\Installer\1ae4018.msp
    + 2009-08-18 10:50 . 2009-08-18 10:50 12022272 c:\windows\Installer\1ae3f6d.msp
    + 2009-10-18 13:43 . 2009-03-08 02:39 11063808 c:\windows\ie8updates\KB974455-IE8\ieframe.dll
    + 2009-10-17 15:27 . 2009-10-17 15:27 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\d2ea8d76f015817db1607075812b555f\System.Windows.Forms.ni.dll
    + 2009-10-18 13:40 . 2009-10-18 13:40 11796992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\5cea03cfb008f2eac1439a9905467f37\System.Web.ni.dll
    + 2009-10-17 15:43 . 2009-10-17 15:43 17317888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\06d6eab93282d2b136a377bd50b7c5a9\System.ServiceModel.ni.dll
    + 2009-10-17 15:26 . 2009-10-17 15:26 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\8b82e08c008924d51833cb0884bcbfc5\System.Design.ni.dll
    + 2009-10-17 15:23 . 2009-10-17 15:23 14327808 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\58c7ac6b6054038dc9346d7ec8e32b4c\PresentationFramework.ni.dll
    + 2009-10-17 15:23 . 2009-10-17 15:23 12216320 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\94badbd64df59de7da249f71da38b1c2\PresentationCore.ni.dll
    + 2009-10-17 15:20 . 2009-10-17 15:20 11486720 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\7124a40b9998f7b63c86bd1a2125ce26\mscorlib.ni.dll
    .
    – Snapshot teruggezet naar huidige datum –
    .
    ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond
    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2008-05-28 1506544]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Dell AIO Printer A920"="c:\program files\Dell AIO Printer A920\dlbkbmgr.exe" [2003-06-02 270336]
    "IntelliPoint"="c:\program files\Microsoft IntelliPoint\point32.exe" [2004-06-03 204800]
    "diagent"="c:\program files\Creative\SBLive\Diagnostics\diagent.exe" [2002-04-02 135264]
    "UpdReg"="c:\windows\UpdReg.EXE" [2000-05-10 90112]
    "mcagent_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2009-07-09 645328]
    "McENUI"="c:\progra~1\McAfee\MHN\McENUI.exe" [2009-07-07 1176808]
    "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
    "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-12-04 81920]
    "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-05-04 148888]
    "KMCONFIG"="c:\program files\Trust\Trust R-Series Mouse\StartAutorun.exe" [2007-03-06 212992]
    "itype"="c:\program files\Microsoft IntelliType Pro\itype.exe" [2009-01-07 1496968]
    "Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2009-09-10 1312080]
    "nwiz"="nwiz.exe" - c:\windows\system32
    wiz.exe [2007-12-04 1626112]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

    [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
    "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
    otify\!SASWinLogon]
    2007-04-19 11:41 294912 —-a-w- c:\program files\SUPERAntiSpyware\SASWINLO.dll

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]
    @=""

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
    @=""

    [HKLM\~\startupfolder\C:^Documents and Settings^Reiff^Menu Start^Programma's^Opstarten^Xfire.lnk]
    path=c:\documents and settings\Reiff\Menu Start\Programma's\Opstarten\Xfire.lnk
    backup=c:\windows\pss\Xfire.lnkStartup

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus]
    "DisableMonitoring"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeFirewall]
    "DisableMonitoring"=dword:00000001

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
    "EnableFirewall"= 0 (0x0)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"=
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
    "c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
    "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
    "c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
    "c:\\Program Files\\Sony Ericsson\\Sony Ericsson Media Manager 1.0\\MediaManager.exe"=
    "c:\\Program Files\\LimeWire\\LimeWire.exe"=
    "c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
    "c:\\Program Files\\Wolfenstein - Enemy Territory\\ET.exe"=
    "c:\\Program Files\\Xfire\\xfire.exe"=
    "c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
    "c:\\Program Files\\Skype\\Phone\\Skype.exe"=
    "c:\\Program Files\\iTunes\\iTunes.exe"=
    "c:\\Program Files\\Common Files\\McAfee\\MNA\\McNASvc.exe"=

    R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [28-5-2008 10:33 8944]
    R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [28-5-2008 10:33 55024]
    R2 KMWDSERVICE;Keyboard And Mouse Communication Service;c:\program files\Trust\Trust R-Series Mouse\KMWDSrv.exe [9-6-2007 0:23 208896]
    R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\McAfee\SiteAdvisor\McSACore.exe [16-11-2008 20:22 203280]
    R3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [28-5-2008 10:33 7408]
    S1 SABKUTIL;SABKUTIL;\??\c:\program files\SuperAdBlocker.com\Super Ad Blocker\SABKUTIL.sys –> c:\program files\SuperAdBlocker.com\Super Ad Blocker\SABKUTIL.sys [?]
    S2 gupdate1c9b20b353fda32;Google Updateservice (gupdate1c9b20b353fda32);c:\program files\Google\Update\GoogleUpdate.exe [31-3-2009 16:15 133104]
    .
    Inhoud van de 'Gedeelde Taken' map

    2009-07-03 c:\windows\Tasks\AppleSoftwareUpdate.job
    - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-04-11 11:34]

    2009-10-18 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
    - c:\program files\Google\Update\GoogleUpdate.exe [2009-03-31 14:14]

    2009-10-18 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
    - c:\program files\Google\Update\GoogleUpdate.exe [2009-03-31 14:14]

    2008-06-14 c:\windows\Tasks\McDefragTask.job
    - c:\progra~1\mcafee\mqc\QcConsol.exe [2008-05-20 19:26]

    2008-05-20 c:\windows\Tasks\McQcTask.job
    - c:\progra~1\mcafee\mqc\QcConsol.exe [2008-05-20 19:26]
    .
    .
    ——- Bijkomende Scan ——-
    .
    uInternet Settings,ProxyOverride = *.local
    IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~4\Office12\EXCEL.EXE/3000
    IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~4\Office12\EXCEL.EXE/3000
    FF - ProfilePath - c:\documents and settings\Reiff\Application Data\Mozilla\Firefox\Profiles\wdw6jsbf.default\
    FF - component: c:\documents and settings\Reiff\Application Data\Mozilla\Firefox\Profiles\wdw6jsbf.default\extensions\fotofox@mozilla.com\platform\WINNT_x86-msvc\components\mozFotofox.dll
    FF - component: c:\documents and settings\Reiff\Application Data\Mozilla\Firefox\Profiles\wdw6jsbf.default\extensions\piclens@cooliris.com\components\coolirisstub.dll
    FF - component: c:\program files\McAfee\SiteAdvisor\components\McFFPlg.dll
    FF - plugin: c:\documents and settings\Reiff\Application Data\Mozilla\Firefox\Profiles\wdw6jsbf.default\extensions\piclens@cooliris.com\plugins
    pcoolirisplugin.dll
    FF - plugin: c:\documents and settings\Reiff\Application Data\Mozilla\plugins
    pcoolirisplugin.dll
    FF - plugin: c:\program files\Google\Update\1.2.183.7
    pGoogleOneClick8.dll
    FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
    .

    **************************************************************************

    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2009-10-18 16:41
    Windows 5.1.2600 Service Pack 3 NTFS

    scannen van verborgen processen …

    scannen van verborgen autostart items …

    scannen van verborgen bestanden …

    Scan succesvol afgerond
    verborgen bestanden: 0

    **************************************************************************
    .
    ——————— DLLs Geladen Onder Lopende Processen ———————

    - - - - - - - > 'winlogon.exe'(648)
    c:\program files\SUPERAntiSpyware\SASWINLO.dll
    c:\windows\system32\Ati2evxx.dll

    - - - - - - - > 'explorer.exe'(2144)
    c:\program files\McAfee\SiteAdvisor\saHook.dll
    c:\windows\system32\webcheck.dll
    .
    Voltooingstijd: 2009-10-18 16:43
    ComboFix-quarantined-files.txt 2009-10-18 14:43
    ComboFix2.txt 2009-09-06 15:53

    Pre-Run: 49.792.815.104 bytes beschikbaar
    Post-Run: 49.802.620.928 bytes beschikbaar

    719 — E O F — 2009-10-18 13:47


    thanx Hans
  • Het zelfstandig uitvoeren van Combofix raad ik ten allen tijde af.

    Het is een te specialistisch tool, dat alleen na instruktie ingezet dient te worden.

    [b:56c7e5cb2b]N.B.: heb je McAfee en de aktieve spywarescanners eerst gedaktiveerd?[/b:56c7e5cb2b]

    [b:56c7e5cb2b]N.B. 2: zoals het HJT-log al aangeeft - er is niks met jouw Windows mis.[/b:56c7e5cb2b][/color:56c7e5cb2b]

    [b:56c7e5cb2b]Nogmaals: ik denk dat er een conflikt is tussen MAfee en Webroot!
    En dat conflikt zorgt dan weer voor andere problemen in jouw Windows![/b:56c7e5cb2b][/color:56c7e5cb2b]

Beantwoord deze vraag

Dit is een gearchiveerde pagina. Antwoorden is niet meer mogelijk.