1.

Solve : Cannot Install HijackThis?

Answer»

Please download SystemLook from one of the links below and save it to your Desktop.
Download Mirror #1
Download Mirror #2

  • Double-click SystemLook.exe to run it.
  • Copy the CONTENT of the following codebox into the main textfield:
Code: [Select]:filefind
smb.sys
atapi.sys
  • Click the Look button to start the scan.
  • When finished, a notepad window will open with the RESULTS of the scan. Please POST this log in your next reply.
Note: The log can also be found on your Desktop entitled SystemLook.txtSystemLook v1.0 by jpshortstuff (11.01.10)
Log created at 18:59 on 22/06/2010 by Dawn (ADMINISTRATOR - Elevation successful)

========== filefind ==========

SEARCHING for "smb.sys"
C:\Windows\System32\drivers\smb.sys--a--- 66560 bytes[18:02 17/09/2009][04:45 11/04/2009] 031E6BCD53C9B2B9ACE111EAFEC347B6
C:\Windows\winsxs\x86_microsoft-windows-nbsmb_31bf3856ad364e35_6.0.6001.18000_none_5f6a9133f7f64138\smb.sys--a--- 66560 bytes[02:25 21/01/2008][02:25 21/01/2008] 40E0C1EA4D5CEB087E04F34560980418

Searching for "atapi.sys"
C:\Windows\ERDNT\cache\atapi.sys--a--- 21560 bytes[22:55 14/06/2010][21:50 25/11/2008] 0D83C87A801A3DFCD1BF73893FE7518C
C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_4c9c5a00\atapi.sys--a--- 21560 bytes[21:50 25/11/2008][21:50 25/11/2008] 0D83C87A801A3DFCD1BF73893FE7518C
C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_b12d8e84\atapi.sys--a--- 19944 bytes[18:03 17/09/2009][06:32 11/04/2009] 1F05B78AB91C9075565A9D8A4B880BC4
C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_c6c2e699\atapi.sys--a--- 19048 bytes[10:25 02/11/2006][09:49 02/11/2006] 4F4FCB8B6EA06784FB6D475B7EC7300F
C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_cc18792d\atapi.sys--a--- 21560 bytes[02:23 21/01/2008][02:23 21/01/2008] 2D9C903DC76A66813D350A562DE40ED9
C:\Windows\System32\drivers\atapi.sys------ 21560 bytes[02:23 21/01/2008][21:50 25/11/2008] 0D83C87A801A3DFCD1BF73893FE7518C
C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_dd38281a2189ce9c\atapi.sys--a--- 21560 bytes[02:23 21/01/2008][02:23 21/01/2008] 2D9C903DC76A66813D350A562DE40ED9
C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18034_none_dd1bb97e219e87cb\atapi.sys--a--- 21560 bytes[21:50 25/11/2008][21:50 25/11/2008] 0D83C87A801A3DFCD1BF73893FE7518C
C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.22134_none_dda556493abc2795\atapi.sys--a--- 21560 bytes[21:50 25/11/2008][21:50 25/11/2008] 96DC4E1A9F90CCD489950A8935425C59
C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\atapi.sys--a--- 19944 bytes[18:03 17/09/2009][06:32 11/04/2009] 1F05B78AB91C9075565A9D8A4B880BC4

-=End Of File=-Re-running ComboFix to remove infections:

  • Close any open browsers.
  • Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
  • Open notepad and copy/paste the text in the codebox below into it:
Code: [Select]killall::

FCopy::
C:\Windows\System32\drivers\smb.sys | C:\Windows\winsxs\x86_microsoft-windows-nbsmb_31bf3856ad364e35_6.0.6001.18000_none_5f6a9133f7f64138\smb.sys

Reboot::
  • Save this as CFScript.txt, in the same location as ComboFix.exe



  • Referring to the picture above, drag CFScript into ComboFix.exe
  • When finished, it shall produce a log for you at C:\ComboFix.txt
  • Please post the contents of the log in your next reply.
ComboFix 10-06-23.02 - Dawn 06/23/2010 20:16:28.2.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.1.1033.18.2037.836 [GMT -4:00]
Running from: c:\users\Dawn\Downloads\ComboFix.exe
Command switches used :: c:\users\Dawn\Desktop\CFScript.txt.lnk
SP: SUPERAntiSpyware *disabled* (Updated) {222A897C-5018-402e-943F-7E7AC8560DA7}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
* Resident AV is active

.

((((((((((((((((((((((((( Files Created from 2010-05-24 to 2010-06-24 )))))))))))))))))))))))))))))))
.

2010-06-24 00:27 . 2010-06-24 00:27--------d-----w-c:\users\Public\AppData\Local\temp
2010-06-24 00:27 . 2010-06-24 00:27--------d-----w-c:\users\Default\AppData\Local\temp
2010-06-24 00:27 . 2010-06-24 00:27--------d-----w-c:\users\Bewn\AppData\Local\temp
2010-06-24 00:10 . 2010-06-24 00:11--------d-----w-C:\32788R22FWJFW
2010-06-23 20:41 . 2009-11-08 14:5599176----a-w-c:\windows\system32\PresentationHostProxy.dll
2010-06-23 20:41 . 2009-11-08 14:5549472----a-w-c:\windows\system32\netfxperf.dll
2010-06-23 20:41 . 2009-11-08 14:55297808----a-w-c:\windows\system32\mscoree.dll
2010-06-23 20:41 . 2009-11-08 14:55295264----a-w-c:\windows\system32\PresentationHost.exe
2010-06-23 20:41 . 2009-11-08 14:551130824----a-w-c:\windows\system32\dfshim.dll
2010-06-21 01:44 . 2010-06-21 01:44--------d-----w-c:\program files\ESET
2010-06-15 23:05 . 2010-06-15 23:05--------d-----w-c:\program files\Windows Portable Devices
2010-06-15 20:19 . 2009-09-10 02:0092672----a-w-c:\windows\system32\UIAnimation.dll
2010-06-15 20:19 . 2009-09-10 02:013023360----a-w-c:\windows\system32\UIRibbon.dll
2010-06-15 20:19 . 2009-09-10 02:001164800----a-w-c:\windows\system32\UIRibbonRes.dll
2010-06-15 20:18 . 2009-09-25 01:33369664----a-w-c:\windows\system32\WMPhoto.dll
2010-06-15 20:18 . 2009-09-24 22:54258048----a-w-c:\windows\system32\winspool.drv
2010-06-15 20:18 . 2009-09-25 01:27634880----a-w-c:\windows\system32\drivers\dxgkrnl.sys
2010-06-15 20:18 . 2009-09-25 01:2737888----a-w-c:\windows\system32\cdd.dll
2010-06-15 20:16 . 2009-10-01 01:0230208----a-w-c:\windows\system32\WPDShextAutoplay.exe
2010-06-15 20:16 . 2009-10-01 01:0231232----a-w-c:\windows\system32\BthMtpContextHandler.dll
2010-06-15 20:16 . 2009-10-01 01:0181920----a-w-c:\windows\system32\wpdbusenum.dll
2010-06-15 20:16 . 2009-10-01 01:0160928----a-w-c:\windows\system32\PortableDeviceConnectApi.dll
2010-06-15 20:16 . 2009-10-01 01:022537472----a-w-c:\windows\system32\wpdshext.dll
2010-06-15 20:16 . 2009-10-01 01:02334848----a-w-c:\windows\system32\PortableDeviceApi.dll
2010-06-15 20:16 . 2009-10-01 01:0287552----a-w-c:\windows\system32\WPDShServiceObj.dll
2010-06-15 20:16 . 2009-10-01 01:01546816----a-w-c:\windows\system32\wpd_ci.dll
2010-06-15 20:16 . 2009-10-01 01:01160256----a-w-c:\windows\system32\PortableDeviceTypes.dll
2010-06-15 20:16 . 2009-10-01 01:01350208----a-w-c:\windows\system32\WPDSp.dll
2010-06-15 20:16 . 2009-10-01 01:01196608----a-w-c:\windows\system32\PortableDeviceWMDRM.dll
2010-06-15 20:16 . 2009-10-01 01:01100864----a-w-c:\windows\system32\PortableDeviceClassExtension.dll
2010-06-15 20:14 . 2009-10-08 21:074096----a-w-c:\windows\system32\oleaccrc.dll
2010-06-15 20:14 . 2009-10-08 21:08555520----a-w-c:\windows\system32\UIAutomationCore.dll
2010-06-15 20:14 . 2009-10-08 21:08234496----a-w-c:\windows\system32\oleacc.dll
2010-06-15 01:40 . 2010-05-04 05:5571680----a-w-c:\windows\system32\iesetup.dll
2010-06-15 01:40 . 2010-05-04 05:55109056----a-w-c:\windows\system32\iesysprep.dll
2010-06-15 01:40 . 2010-05-04 04:31133632----a-w-c:\windows\system32\ieUnatt.exe
2010-06-15 01:40 . 2010-01-06 15:391696256----a-w-c:\windows\system32\gameux.dll
2010-06-15 01:40 . 2010-01-06 15:3828672----a-w-c:\windows\system32\Apphlpdm.dll
2010-06-15 01:40 . 2010-01-06 13:304240384----a-w-c:\windows\system32\GameUXLegacyGDFs.dll
2010-06-15 01:40 . 2010-05-01 14:132037248----a-w-c:\windows\system32\win32k.sys
2010-06-15 01:10 . 2010-06-15 01:46--------d-----w-c:\users\Dawn\AppData\Local\Microsoft Games
2010-06-14 22:57 . 2010-06-24 00:28--------d-----w-c:\users\Dawn\AppData\Local\temp
2010-06-14 22:57 . 2010-06-24 00:27--------d-----w-c:\users\Ben\AppData\Local\temp
2010-06-13 18:49 . 2010-06-13 18:49388096----a-r-c:\users\Dawn\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2010-06-13 18:13 . 2010-06-13 18:37--------d-----w-c:\program files\Trend Micro
2010-06-13 04:01 . 2010-06-13 04:01--------d-----w-c:\users\Dawn\AppData\Roaming\Malwarebytes
2010-06-13 04:01 . 2010-04-29 19:3938224----a-w-c:\windows\system32\drivers\mbamswissarmy.sys
2010-06-13 04:01 . 2010-06-13 04:01--------d-----w-c:\programdata\Malwarebytes
2010-06-13 04:01 . 2010-06-13 04:01--------d-----w-c:\program files\Malwarebytes' Anti-Malware
2010-06-13 04:01 . 2010-04-29 19:3920952----a-w-c:\windows\system32\drivers\mbam.sys
2010-06-12 23:55 . 2010-06-12 23:5563488----a-w-c:\users\Dawn\AppData\Roaming\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10006.dll
2010-06-12 23:55 . 2010-06-12 23:5552224----a-w-c:\users\Dawn\AppData\Roaming\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll
2010-06-12 23:55 . 2010-06-12 23:55117760----a-w-c:\users\Dawn\AppData\Roaming\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL
2010-06-12 23:54 . 2010-06-12 23:54--------d-----w-c:\users\Dawn\AppData\Roaming\SUPERAntiSpyware.com
2010-06-12 23:54 . 2010-06-12 23:54--------d-----w-c:\programdata\SUPERAntiSpyware.com
2010-06-12 23:54 . 2010-06-12 23:54--------d-----w-c:\program files\SUPERAntiSpyware
2010-06-12 23:32 . 2010-06-12 23:32--------d-----w-c:\program files\CCleaner
2010-06-07 02:47 . 2010-06-07 02:47411368----a-w-c:\windows\system32\deployJava1.dll
2010-05-31 02:21 . 2010-05-31 02:23--------d-----w-c:\windows\system32\ca-ES
2010-05-31 02:21 . 2010-05-31 02:23--------d-----w-c:\windows\system32\eu-ES
2010-05-31 02:21 . 2010-05-31 02:23--------d-----w-c:\windows\system32\vi-VN
2010-05-31 01:49 . 2010-05-31 01:49--------d-----w-c:\windows\system32\EventProviders
2010-05-28 18:18 . 2010-05-28 18:18--------d-----w-c:\windows\Sun
2010-05-28 03:39 . 2010-05-28 03:39--------d-----w-c:\users\Dawn\AppData\Roaming\vlc
2010-05-28 03:35 . 2010-05-28 03:35--------d-----w-c:\users\Dawn\AppData\Local\Graboid_Inc
2010-05-28 03:35 . 2010-05-28 03:40--------d-----w-c:\users\Dawn\AppData\Local\Graboid
2010-05-28 03:35 . 2010-05-28 03:35--------d-----w-c:\users\Dawn\AppData\Roaming\MozillaControl
2010-05-28 03:35 . 2010-05-28 03:35--------d-----w-c:\program files\Mozilla ActiveX Control v1.7.12
2010-05-28 03:34 . 2010-05-28 03:34--------d-----w-c:\program files\VideoLAN
2010-05-28 03:33 . 2010-05-28 03:44--------d-----w-c:\program files\Graboid
2010-05-25 20:06 . 2010-04-23 14:132048----a-w-c:\windows\system32\tzres.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-06-15 23:04 . 2006-11-02 11:18--------d-----w-c:\program files\Windows Mail
2010-06-15 23:04 . 2006-11-02 10:25665600----a-w-c:\windows\inf\drvindex.dat
2010-06-15 23:03 . 2010-06-15 23:030---ha-w-c:\windows\system32\drivers\Msft_User_WpdFs_01_07_00.Wdf
2010-06-15 23:02 . 2008-12-27 05:07--------d-----w-c:\program files\Microsoft Silverlight
2010-06-07 02:48 . 2008-11-25 20:22--------d-----w-c:\program files\Common Files\Java
2010-06-07 02:47 . 2008-11-25 20:22--------d-----w-c:\program files\Java
2010-05-31 02:23 . 2006-11-02 12:37--------d-----w-c:\program files\Windows Calendar
2010-05-31 02:23 . 2006-11-02 12:37--------d-----w-c:\program files\Windows Sidebar
2010-05-31 02:23 . 2006-11-02 12:37--------d-----w-c:\program files\Windows Journal
2010-05-31 02:23 . 2006-11-02 12:37--------d-----w-c:\program files\Windows Collaboration
2010-05-31 02:23 . 2006-11-02 12:37--------d-----w-c:\program files\Windows Photo Gallery
2010-05-31 02:23 . 2006-11-02 12:37--------d-----w-c:\program files\Windows Defender
2010-05-31 01:46 . 2008-12-08 01:44--------d-----w-c:\programdata\Viewpoint
2010-05-29 03:12 . 2009-03-17 02:445972----a-w-c:\users\Ben\AppData\Local\d3d9caps.dat
2010-05-28 03:46 . 2009-03-03 02:13--------d-----w-c:\users\Dawn\AppData\Roaming\Apple Computer
2010-05-26 17:06 . 2010-06-15 01:4134304----a-w-c:\windows\system32\atmlib.dll
2010-05-26 14:47 . 2010-06-15 01:41289792----a-w-c:\windows\system32\atmfd.dll
2010-05-21 18:14 . 2009-10-03 14:42221568------w-c:\windows\system32\MpSigStub.exe
2010-05-20 20:32 . 2010-05-20 20:32666112----a-w-c:\users\Ben\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\octoshape\pmv306hw-1004220-0-main.dll
2010-05-04 23:46 . 2010-05-04 23:44--------d-----w-c:\programdata\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
2010-05-04 23:46 . 2010-05-04 23:44--------d-----w-c:\program files\iTunes
2010-05-04 23:44 . 2010-05-04 23:44--------d-----w-c:\program files\iPod
2010-05-04 23:44 . 2009-03-03 02:08--------d-----w-c:\program files\Common Files\Apple
2010-05-04 23:42 . 2010-05-04 23:42--------d-----w-c:\program files\Apple Software Update
2010-05-04 22:58 . 2010-05-04 22:58--------d-----w-c:\users\Dawn\AppData\Roaming\Roxio
2010-05-04 22:45 . 2010-05-04 22:44--------d-----w-c:\program files\QuickTime
2010-05-04 05:59 . 2010-06-15 01:41916480----a-w-c:\windows\system32\wininet.dll
2010-04-28 19:45 . 2010-04-28 19:4573000----a-w-c:\programdata\Apple Computer\Installer Cache\iTunes 9.1.1.12\SetupAdmin.exe
2010-04-15 00:30 . 2009-05-19 01:05143976----a-w-c:\users\Dawn\AppData\Roaming\Move Networks\uninstall.exe
2010-04-15 00:30 . 2009-10-15 00:505642688----a-w-c:\users\Dawn\AppData\Roaming\Move Networks\plugins\npqmp071701000002.dll
2010-04-05 17:01 . 2010-06-15 01:4167072----a-w-c:\windows\system32\asycfilt.dll
2009-11-02 20:15 . 2009-11-02 20:15119808----a-w-c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
2008-11-25 20:42 . 2008-11-25 20:4276--sh--r-c:\windows\CT4CET.bin
2008-11-25 21:51 . 2008-11-25 21:508192--sha-w-c:\windows\Users\Default\NTUSER.DAT
.

((((((((((((((((((((((((((((( [emailprotected]_22.53.16 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-06-23 20:41 . 2009-11-08 14:5599176 c:\windows\winsxs\x86_wpf-presentationhostproxy_31bf3856ad364e35_6.1.6001.18242_none_f290a8a118b9134c\PresentationHostProxy.dll
+ 2010-06-22 20:02 . 2010-03-30 11:5999176 c:\windows\winsxs\x86_wpf-presentationhostproxy_31bf3856ad364e35_6.0.6002.22377_none_2cb6816f90457914\PresentationHostProxy.dll
+ 2010-06-22 20:02 . 2010-04-05 12:1999176 c:\windows\winsxs\x86_wpf-presentationhostproxy_31bf3856ad364e35_6.0.6002.18236_none_2c57240a7708502f\PresentationHostProxy.dll
+ 2010-06-15 20:16 . 2009-10-01 01:0140448 c:\windows\winsxs\x86_wpdmtp.inf_31bf3856ad364e35_6.0.6002.18112_none_2177efcb83dd35a0\wpdusb.sys
+ 2010-06-15 20:16 . 2009-10-01 01:0161952 c:\windows\winsxs\x86_wpdmtp.inf_31bf3856ad364e35_6.0.6002.18112_none_2177efcb83dd35a0\wpdmtpus.dll
+ 2010-06-15 20:16 . 2009-10-01 01:0168608 c:\windows\winsxs\x86_wpdmtp.inf_31bf3856ad364e35_6.0.6002.18112_none_2177efcb83dd35a0\wpdmtpip.dll
+ 2010-06-15 20:16 . 2009-10-01 01:0178336 c:\windows\winsxs\x86_wpdmtp.inf_31bf3856ad364e35_6.0.6002.18112_none_2177efcb83dd35a0\wpdmtpbt.dll
+ 2010-06-15 20:16 . 2009-10-01 01:0133280 c:\windows\winsxs\x86_wpdmtp.inf_31bf3856ad364e35_6.0.6002.18112_none_2177efcb83dd35a0\wpdconns.dll
+ 2010-06-15 01:40 . 2010-04-12 12:2217256 c:\windows\winsxs\x86_wcf-m_svc_mon_sup_dll_31bf3856ad364e35_6.0.6002.22380_none_a7f79e1e62233116\ServiceMonikerSupport.dll
+ 2010-06-15 01:40 . 2010-04-12 12:2117256 c:\windows\winsxs\x86_wcf-m_svc_mon_sup_dll_31bf3856ad364e35_6.0.6002.18239_none_a7ad138948d4e9a6\ServiceMonikerSupport.dll
+ 2010-06-23 20:41 . 2009-11-08 14:5511600 c:\windows\winsxs\x86_netfx-mscorees_dll_31bf3856ad364e35_6.1.6001.18242_none_e15f1c362a176592\mscorees.dll
+ 2010-06-23 20:41 . 2009-11-08 14:5549472 c:\windows\winsxs\x86_netfx-fw_netfxperf_dll_31bf3856ad364e35_6.1.6001.18242_none_5c993a771a2304b1\netfxperf.dll
+ 2010-06-15 01:39 . 2010-03-25 11:5430544 c:\windows\winsxs\x86_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.0.6002.22372_none_adfdfb72a63b9516\aspnet_wp.exe
+ 2010-06-15 01:39 . 2010-03-25 11:5330544 c:\windows\winsxs\x86_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.0.6002.18232_none_c4c7a10a8c97cfb4\aspnet_wp.exe
+ 2010-06-15 20:16 . 2009-10-01 01:0287552 c:\windows\winsxs\x86_microsoft-windows-wpd-shellextension_31bf3856ad364e35_6.0.6002.18112_none_130696d2c3f64ac4\WPDShServiceObj.dll
+ 2010-06-15 20:16 . 2009-10-01 01:0230208 c:\windows\winsxs\x86_microsoft-windows-wpd-shellextension_31bf3856ad364e35_6.0.6002.18112_none_130696d2c3f64ac4\WPDShextAutoplay.exe
+ 2010-06-15 20:16 . 2009-10-01 01:0160928 c:\windows\winsxs\x86_microsoft-windows-wpd-portabledeviceapi_31bf3856ad364e35_6.0.6002.18112_none_4cde706de936888c\PortableDeviceConnectApi.dll
+ 2010-06-15 20:16 . 2009-10-01 01:0181920 c:\windows\winsxs\x86_microsoft-windows-wpd-busenumservice_31bf3856ad364e35_6.0.6002.18112_none_79dbda7dc92efc79\wpdbusenum.dll
+ 2010-06-15 20:19 . 2009-09-10 02:0092672 c:\windows\winsxs\x86_microsoft-windows-uianimation_31bf3856ad364e35_7.0.6002.18108_none_7edc01bff7a1cb45\UIAnimation.dll
+ 2010-06-15 20:17 . 2009-09-24 22:5426112 c:\windows\winsxs\x86_microsoft-windows-p..oler-filterpipeline_31bf3856ad364e35_6.0.6002.22164_none_2de0cf8ef1d7d6cc\printfilterpipelineprxy.dll
+ 2010-06-15 20:17 . 2009-09-24 22:5426112 c:\windows\winsxs\x86_microsoft-windows-p..oler-filterpipeline_31bf3856ad364e35_6.0.6002.18060_none_2d53319bd8bdd1a6\printfilterpipelineprxy.dll
+ 2010-06-15 01:41 . 2010-04-05 17:1467072 c:\windows\winsxs\x86_microsoft-windows-o..mation-asyncfilters_31bf3856ad364e35_6.0.6002.22377_none_78f4d4e8cf978645\asycfilt.dll
+ 2010-06-15 01:41 . 2010-04-05 17:0167072 c:\windows\winsxs\x86_microsoft-windows-o..mation-asyncfilters_31bf3856ad364e35_6.0.6002.18236_none_78957783b65a5d60\asycfilt.dll
+ 2010-06-15 01:41 . 2010-04-05 16:2867072 c:\windows\winsxs\x86_microsoft-windows-o..mation-asyncfilters_31bf3856ad364e35_6.0.6001.22665_none_77173258d26ae282\asycfilt.dll
+ 2010-06-15 01:41 . 2010-04-05 16:0767072 c:\windows\winsxs\x86_microsoft-windows-o..mation-asyncfilters_31bf3856ad364e35_6.0.6001.18454_none_76976349b9461049\asycfilt.dll
+ 2010-06-15 20:18 . 2009-09-25 01:2737888 c:\windows\winsxs\x86_microsoft-windows-lddmcore_31bf3856ad364e35_7.0.6002.18107_none_9f26906a6b93696c\cdd.dll
+ 2010-06-15 01:40 . 2010-05-04 06:3071680 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.23019_none_a941806b8d645750\iesetup.dll
+ 2010-06-15 01:40 . 2010-05-04 06:3055808 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.23019_none_a941806b8d645750\iernonce.dll
+ 2010-06-15 01:40 . 2010-05-04 05:5571680 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.18928_none_a8ac3d2e744f8405\iesetup.dll
+ 2010-06-15 01:40 . 2010-05-04 05:5555808 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.18928_none_a8ac3d2e744f8405\iernonce.dll
+ 2010-06-15 01:40 . 2010-05-04 04:5813312 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.23019_none_dfbeba5109ad11a7\msfeedssync.exe
+ 2010-06-15 01:40 . 2010-05-04 06:3055296 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.23019_none_dfbeba5109ad11a7\msfeedsbs.dll
+ 2010-06-15 01:40 . 2010-05-04 04:3013312 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.18928_none_df297713f0983e5c\msfeedssync.exe
+ 2010-06-15 01:40 . 2010-05-04 05:5655296 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.18928_none_df297713f0983e5c\msfeedsbs.dll
+ 2010-06-15 01:40 . 2010-05-04 06:3164512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.23019_none_e559bec4d0be1fc8\WininetPlugin.dll
+ 2010-06-15 01:40 . 2010-05-04 06:3025600 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.23019_none_e559bec4d0be1fc8\jsproxy.dll
+ 2010-06-15 01:40 . 2010-05-04 05:5964512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.18928_none_e4c47b87b7a94c7d\WininetPlugin.dll
+ 2010-06-15 01:40 . 2010-05-04 05:5525600 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.18928_none_e4c47b87b7a94c7d\jsproxy.dll
+ 2010-06-15 01:41 . 2010-05-26 17:1023552 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.22412_none_ac3a633770d08fc3\lpk.dll
+ 2010-06-15 01:41 . 2010-05-26 17:0972704 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.22412_none_ac3a633770d08fc3\fontsub.dll
+ 2010-06-15 01:41 . 2010-05-26 17:0810240 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.22412_none_ac3a633770d08fc3\dciman32.dll
+ 2010-06-15 01:41 . 2010-05-26 17:0834304 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.22412_none_ac3a633770d08fc3\atmlib.dll
+ 2009-07-15 14:05 . 2009-06-15 14:5223552 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.18262_none_ab7ab4ea57db7e87\lpk.dll
+ 2010-01-13 12:56 . 2009-10-19 13:3572704 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.18262_none_ab7ab4ea57db7e87\fontsub.dll
+ 2009-07-15 14:05 . 2009-06-15 14:5110240 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.18262_none_ab7ab4ea57db7e87\dciman32.dll
+ 2010-06-15 01:41 . 2010-05-26 17:0634304 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.18262_none_ab7ab4ea57db7e87\atmlib.dll
+ 2010-06-15 01:41 . 2010-05-26 16:2023552 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.22700_none_aa5cc0a773a3ec00\lpk.dll
+ 2010-06-15 01:41 . 2010-05-26 16:1972704 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.22700_none_aa5cc0a773a3ec00\fontsub.dll
+ 2010-06-15 01:41 . 2010-05-26 16:1810240 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.22700_none_aa5cc0a773a3ec00\dciman32.dll
+ 2010-06-15 01:41 . 2010-05-26 16:1734304 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.22700_none_aa5cc0a773a3ec00\atmlib.dll
+ 2010-01-13 12:56 . 2009-10-19 14:2472704 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.18482_none_a97ea1445ac5641e\fontsub.dll
+ 2009-07-15 14:05 . 2009-06-15 15:2010240 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.18482_none_a97ea1445ac5641e\dciman32.dll
+ 2010-06-15 01:41 . 2010-05-26 16:1634304 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.18482_none_a97ea1445ac5641e\atmlib.dll
+ 2010-06-15 20:16 . 2009-10-01 01:0231232 c:\windows\winsxs\x86_microsoft-windows-d..thmtpcontexthandler_31bf3856ad364e35_7.0.6002.18112_none_302fc434dcfbe04c\BthMtpContextHandler.dll
+ 2010-06-15 01:40 . 2010-01-06 16:0128672 c:\windows\winsxs\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6002.22303_none_8474f2d5770488ce\Apphlpdm.dll
+ 2010-06-15 01:40 . 2010-01-06 15:3828672 c:\windows\winsxs\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6002.18179_none_83a5a66c5e1a477e\Apphlpdm.dll
+ 2010-06-22 20:03 . 2010-04-16 16:0828672 c:\windows\winsxs\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6001.22672_none_8241d12f7a17ddea\Apphlpdm.dll
+ 2010-06-22 20:03 . 2010-04-16 16:0528672 c:\windows\winsxs\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6001.18461_none_81c2022060f30bb1\Apphlpdm.dll
+ 2010-06-15 20:16 . 2009-10-01 01:0150688 c:\windows\winsxs\x86_bthmtpenum.inf_31bf3856ad364e35_6.0.6002.18112_none_01d56cf0911e704e\bthmtpenum.sys
+ 2010-06-15 01:40 . 2010-04-12 12:2332768 c:\windows\winsxs\msil_system.servicemodel.washosting_b77a5c561934e089_6.0.6002.22380_none_a725653cfb4fe6ae\System.ServiceModel.WasHosting.dll
+ 2010-06-15 01:40 . 2010-04-12 12:2132768 c:\windows\winsxs\msil_system.servicemodel.washosting_b77a5c561934e089_6.0.6002.18239_none_bded3d82e1adee9e\System.ServiceModel.WasHosting.dll
+ 2010-06-15 20:17 . 2009-09-24 22:5426112 c:\windows\System32\printfilterpipelineprxy.dll
- 2009-09-17 18:02 . 2009-04-11 06:2826112 c:\windows\System32\printfilterpipelineprxy.dll
+ 2010-06-23 20:41 . 2009-11-08 14:5511600 c:\windows\System32\MUI\0409\mscorees.dll
- 2010-04-02 18:38 . 2010-02-23 04:5413312 c:\windows\System32\msfeedssync.exe
+ 2010-06-15 01:40 . 2010-05-04 04:3013312 c:\windows\System32\msfeedssync.exe
- 2010-04-02 18:38 . 2010-02-23 06:3455296 c:\windows\System32\msfeedsbs.dll
+ 2010-06-15 01:40 . 2010-05-04 05:5655296 c:\windows\System32\msfeedsbs.dll
+ 2010-06-15 01:40 . 2010-05-04 05:5964512 c:\windows\System32\migration\WininetPlugin.dll
- 2010-04-02 18:38 . 2010-02-23 06:3964512 c:\windows\System32\migration\WininetPlugin.dll
+ 2010-06-15 01:40 . 2010-05-04 05:5525600 c:\windows\System32\jsproxy.dll
- 2010-04-02 18:38 . 2010-02-23 06:3425600 c:\windows\System32\jsproxy.dll
- 2010-04-02 18:38 . 2010-02-23 06:3355808 c:\windows\System32\iernonce.dll
+ 2010-06-15 01:40 . 2010-05-04 05:5555808 c:\windows\System32\iernonce.dll
+ 2010-06-15 20:16 . 2009-10-01 01:0140448 c:\windows\System32\DriverStore\FileRepository\wpdmtp.inf_2a7adb02\WpdUsb.sys
+ 2010-06-15 20:16 . 2009-10-01 01:0161952 c:\windows\System32\DriverStore\FileRepository\wpdmtp.inf_2a7adb02\WpdMtpUS.dll
+ 2010-06-15 20:16 . 2009-10-01 01:0168608 c:\windows\System32\DriverStore\FileRepository\wpdmtp.inf_2a7adb02\WpdMtpIP.dll
+ 2010-06-15 20:16 . 2009-10-01 01:0178336 c:\windows\System32\DriverStore\FileRepository\wpdmtp.inf_2a7adb02\WpdMtpbt.dll
+ 2010-06-15 20:16 . 2009-10-01 01:0133280 c:\windows\System32\DriverStore\FileRepository\wpdmtp.inf_2a7adb02\WpdConns.dll
+ 2010-06-15 20:16 . 2009-10-01 01:0150688 c:\windows\System32\DriverStore\FileRepository\bthmtpenum.inf_201caa7f\BthMtpEnum.sys
+ 2009-11-28 02:58 . 2010-06-17 23:5316384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-11-28 02:58 . 2010-06-01 22:4816384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-11-28 02:58 . 2010-06-17 23:5332768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-11-28 02:58 . 2010-06-01 22:4832768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-11-28 02:58 . 2010-06-01 22:4816384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-11-28 02:58 . 2010-06-17 23:5316384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2010-06-15 01:40 . 2010-04-12 12:2132768 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
- 2009-09-17 18:02 . 2009-02-18 18:3832768 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
+ 2010-06-15 01:40 . 2010-04-12 12:2117256 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceMonikerSupport.dll
+ 2010-06-15 01:39 . 2010-03-25 11:5330544 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
+ 2010-06-15 20:14 . 2010-06-15 20:1449936 c:\windows\Installer\{95120000-00AF-0409-0000-0000000FF1CE}\ppvwicon.exe
- 2010-04-16 13:04 . 2010-04-16 13:0449936 c:\windows\Installer\{95120000-00AF-0409-0000-0000000FF1CE}\ppvwicon.exe
- 2010-04-16 13:04 . 2010-04-16 13:0435600 c:\windows\Installer\{90120000-0020-0409-0000-0000000FF1CE}\O12ConvIcon.exe
+ 2010-06-15 20:14 . 2010-06-15 20:1435600 c:\windows\Installer\{90120000-0020-0409-0000-0000000FF1CE}\O12ConvIcon.exe
+ 2010-06-15 20:11 . 2010-06-15 20:1149152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
+ 2010-06-23 23:44 . 2010-06-23 23:4460928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\81ab082be2597d562533493d955b20fa\UIAutomationProvider.ni.dll
+ 2010-06-16 00:54 . 2010-06-16 00:5460928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\71446066f8f87652fa7303395df566cc\UIAutomationProvider.ni.dll
+ 2010-06-23 23:46 . 2010-06-23 23:4637888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\8f17237b1a97a723837bede4c5b10085\System.Windows.Presentation.ni.dll
+ 2010-06-23 23:46 . 2010-06-23 23:4636864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\6b60acb027ae9b015ffc61dcba421bd3\System.Web.DynamicData.Design.ni.dll
+ 2010-06-16 00:58 . 2010-06-16 00:5894208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\e3da89cc15807bd5c9747b4ba394cd41\System.ComponentModel.DataAnnotations.ni.dll
+ 2010-06-16 00:58 . 2010-06-16 00:5882944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\ef965cf9c5c75294aef56d47f4b0eb26\System.AddIn.Contract.ni.dll
+ 2010-06-16 00:56 . 2010-06-16 00:5644032 c:\windows\assembly\NativeImages_v2.0.50727_32\stdole\6fb97ad4786df4e2a5c0edaa3a284de8\stdole.ni.dll
+ 2010-06-16 00:58 . 2010-06-16 00:5847104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\f56c075fa1f45464ede198e36e79d617\PresentationFontCache.ni.exe
+ 2010-06-23 23:45 . 2010-06-23 23:4547104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\c57f58acdfc796bc888fcb6603715537\PresentationFontCache.ni.exe
+ 2010-06-16 00:54 . 2010-06-16 00:5439424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\76a79903753244ecd4bedb4b607da4b8\PresentationCFFRasterizer.ni.dll
+ 2010-06-23 23:44 . 2010-06-23 23:4439424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\44ecfa244cf6aa4212e23ba22349a240\PresentationCFFRasterizer.ni.dll
+ 2010-06-16 00:58 . 2010-06-16 00:5879872 c:\windows\assembly\NativeImages_v2.0.50727_32\napcrypt\ec37fe0ddb66e6ed277cc9c83c39e134\napcrypt.ni.dll
+ 2010-06-16 00:54 . 2010-06-16 00:5455296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\3aa49e133664e428e319de2e6a008335\Microsoft.Vsa.ni.dll
+ 2010-06-16 00:53 . 2010-06-16 00:5315872 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\84dda64a3e7cec7239ede8d5e48b5847\Microsoft.VisualC.ni.dll
+ 2010-06-16 00:55 . 2010-06-16 00:5574752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\f156806d82a796faf4968b2cb872141d\Microsoft.Build.Framework.ni.dll
+ 2010-06-16 00:57 . 2010-06-16 00:5765024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\2990c6a100dc31f3a36bd8c2afafa92b\Microsoft.Build.Framework.ni.dll
+ 2010-06-16 00:57 . 2010-06-16 00:5768608 c:\windows\assembly\NativeImages_v2.0.50727_32\loadmxf\f4e3668f28222716aef5866686aec3cc\loadmxf.ni.exe
+ 2010-06-23 23:44 . 2010-06-23 23:4468608 c:\windows\assembly\NativeImages_v2.0.50727_32\loadmxf\6d929408f21f2b81b51dff132a83c60e\loadmxf.ni.exe
+ 2010-06-16 00:56 . 2010-06-16 00:5657856 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiUserXp\9e40e4d9ddeac7b337afb0ab2a45b7c7\ehiUserXp.ni.dll
+ 2010-06-16 00:56 . 2010-06-16 00:5655296 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiReplay\53c8ef024a64e5e6c4a1a4e23db7c753\ehiReplay.ni.dll
+ 2010-06-16 00:56 . 2010-06-16 00:5623552 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiExtCOM\3c3b9f210946ad30b80aef7c2c61bec1\ehiExtCOM.ni.dll
+ 2010-06-23 23:45 . 2010-06-23 23:4539424 c:\windows\assembly\NativeImages_v2.0.50727_32\ehExtCOM\8289c53c4bb2b134feb8e6da972fd492\ehExtCOM.ni.dll
+ 2010-06-16 00:56 . 2010-06-16 00:5639424 c:\windows\assembly\NativeImages_v2.0.50727_32\ehExtCOM\49b927a353d3c2aa8cc6e5e27836adf7\ehExtCOM.ni.dll
+ 2010-06-16 00:56 . 2010-06-16 00:5614336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\8b295851a21fc513dcb5dbcd9b5385e6\dfsvc.ni.exe
+ 2010-06-16 00:53 . 2010-06-16 00:5325600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\1bcbcac5237f54c73628936552c55b69\Accessibility.ni.dll
- 2009-09-17 18:02 . 2009-02-18 18:3832768 c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
+ 2010-06-15 01:40 . 2010-04-12 12:2132768 c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
+ 2010-06-15 20:14 . 2009-10-08 21:074096 c:\windows\winsxs\x86_microsoft-windows-oleaccrc_31bf3856ad364e35_6.0.6002.18156_none_7ae05aee84ac8b45\oleaccrc.dll
+ 2010-06-23 20:43 . 2010-04-14 17:536656 c:\windows\winsxs\x86_microsoft-windows-ehome-devices-mcrmgr_31bf3856ad364e35_6.0.6001.22670_none_3467df3ef350874f\McrMgr.dll
+ 2010-06-15 01:40 . 2010-01-06 13:312560 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6002.22303_none_0e955139088d9e83\AcRes.dll
+ 2010-06-22 20:03 . 2010-04-16 14:162560 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6001.22672_none_0c622f930ba0f39f\AcRes.dll
+ 2009-03-06 01:30 . 2010-06-21 12:212632 c:\windows\System32\WDI\ERCQueuedResolutions.dat
+ 2010-06-23 02:26 . 2010-06-23 20:512048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2010-06-14 22:32 . 2010-06-14 22:322048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2010-06-14 22:32 . 2010-06-14 22:322048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2010-06-23 02:26 . 2010-06-23 20:512048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2010-06-23 20:41 . 2009-11-08 14:55295264 c:\windows\winsxs\x86_wpf-presentationhostexe_31bf3856ad364e35_6.1.6001.18242_none_37f9c545bf07d41a\PresentationHost.exe
+ 2010-06-22 20:02 . 2010-03-30 11:59295264 c:\windows\winsxs\x86_wpf-presentationhostexe_31bf3856ad364e35_6.0.6002.22377_none_721f9e14369439e2\PresentationHost.exe
+ 2010-06-22 20:02 . 2010-04-05 12:19295264 c:\windows\winsxs\x86_wpf-presentationhostexe_31bf3856ad364e35_6.0.6002.18236_none_71c040af1d5710fd\PresentationHost.exe
+ 2010-06-22 20:02 . 2010-03-30 11:59130408 c:\windows\winsxs\x86_wpf-presentationhostdll_31bf3856ad364e35_6.0.6002.22377_none_7236d7fc36759770\PresentationHostDLL.dll
+ 2010-06-22 20:02 . 2010-04-05 12:19129896 c:\windows\winsxs\x86_wpf-presentationhostdll_31bf3856ad364e35_6.0.6002.18236_none_71d77a971d386e8b\PresentationHostDLL.dll
+ 2010-06-15 20:16 . 2009-10-01 01:01839168 c:\windows\winsxs\x86_wpdmtp.inf_31bf3856ad364e35_6.0.6002.18112_none_2177efcb83dd35a0\wpdmtpdr.dll
+ 2010-06-15 20:16 . 2009-10-01 01:01226816 c:\windows\winsxs\x86_wpdmtp.inf_31bf3856ad364e35_6.0.6002.18112_none_2177efcb83dd35a0\wpdmtp.dll
+ 2010-06-15 20:16 . 2009-10-01 01:01227840 c:\windows\winsxs\x86_wpdfs.inf_31bf3856ad364e35_6.0.6002.18112_none_27ca7fa9cfc85a60\wpdfs.dll
+ 2010-06-15 01:40 . 2010-04-12 12:22970752 c:\windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.0.6002.22380_none_f056fa033aa60783\System.Runtime.Serialization.dll
+ 2010-06-15 01:40 . 2010-04-12 12:21970752 c:\windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.0.6002.18239_none_071ed24921040f73\System.Runtime.Serialization.dll
+ 2010-06-15 01:40 . 2010-04-12 12:22442368 c:\windows\winsxs\x86_wcf-system.identitymodel_b03f5f7f11d50a3a_6.0.6002.22380_none_0ebeb2ba5a6f811c\System.IdentityModel.dll
+ 2010-06-15 01:40 . 2010-04-12 12:20438272 c:\windows\winsxs\x86_wcf-system.identitymodel_b03f5f7f11d50a3a_6.0.6002.18239_none_25868b0040cd890c\System.IdentityModel.dll
+ 2010-06-15 01:39 . 2010-03-25 11:54436048 c:\windows\winsxs\x86_netfx-web_engine_dll_b03f5f7f11d50a3a_6.0.6002.22372_none_1fb465ed51de1b9c\webengine.dll
+ 2010-06-15 01:39 . 2010-03-25 11:53435024 c:\windows\winsxs\x86_netfx-web_engine_dll_b03f5f7f11d50a3a_6.0.6002.18232_none_367e0b85383a563a\webengine.dll
+ 2010-06-15 20:11 . 2009-09-04 06:59388920 c:\windows\winsxs\x86_netfx-sos_dll_b03f5f7f11d50a3a_6.0.6002.22219_none_fcfe427e14d1391e\SOS.dll
+ 2010-06-15 20:11 . 2009-09-04 06:59388936 c:\windows\winsxs\x86_netfx-sos_dll_b03f5f7f11d50a3a_6.0.6002.18107_none_13cb1683fb2a8c7f\SOS.dll
+ 2010-06-23 20:41 . 2009-11-08 14:55297808 c:\windows\winsxs\x86_netfx-mscoree_dll_31bf3856ad364e35_6.1.6001.18242_none_7d658e19f5139de5\mscoree.dll
+ 2010-06-15 20:11 . 2009-09-04 06:58989528 c:\windows\winsxs\x86_netfx-mscordacwks_b03f5f7f11d50a3a_6.0.6002.22219_none_142ffabd20dc5d09\mscordacwks.dll
+ 2010-06-15 20:11 . 2009-09-04 06:58989000 c:\windows\winsxs\x86_netfx-mscordacwks_b03f5f7f11d50a3a_6.0.6002.18107_none_2afccec30735b06a\mscordacwks.dll
+ 2010-06-15 20:16 . 2009-10-01 01:01546816 c:\windows\winsxs\x86_microsoft.windows.h..ler.wpd-driverclass_31bf3856ad364e35_6.0.6002.18112_none_6a8bd86c653628e0\wpd_ci.dll
+ 2010-06-15 20:16 . 2009-10-01 01:01134144 c:\windows\winsxs\x86_microsoft-windows-wpd-portabledevicesqm_31bf3856ad364e35_7.0.6002.18112_none_46439f2b6f000426\sqmapi.dll
+ 2010-06-15 20:16 . 2009-10-01 01:01160256 c:\windows\winsxs\x86_microsoft-windows-wpd-portabledeviceapi_31bf3856ad364e35_6.0.6002.18112_none_4cde706de936888c\PortableDeviceTypes.dll
+ 2010-06-15 20:16 . 2009-10-01 01:01100864 c:\windows\winsxs\x86_microsoft-windows-wpd-portabledeviceapi_31bf3856ad364e35_6.0.6002.18112_none_4cde706de936888c\PortableDeviceClassExtension.dll
+ 2010-06-15 20:16 . 2009-10-01 01:02334848 c:\windows\winsxs\x86_microsoft-windows-wpd-portabledeviceapi_31bf3856ad364e35_6.0.6002.18112_none_4cde706de936888c\PortableDeviceApi.dll
+ 2010-06-15 20:17 . 2009-09-25 02:07189440 c:\windows\winsxs\x86_microsoft-windows-windowscodecext_31bf3856ad364e35_7.0.6002.18107_none_86efc43840ac1e52\WindowsCodecsExt.dll
+ 2010-06-15 20:17 . 2009-09-25 02:10974848 c:\windows\winsxs\x86_microsoft-windows-windowscodec_31bf3856ad364e35_7.0.6002.18107_none_89dfaf462924c1eb\WindowsCodecs.dll
+ 2010-06-15 20:16 . 2009-10-01 01:01196608 c:\windows\winsxs\x86_microsoft-windows-w..ewmdrmcompatibility_31bf3856ad364e35_6.0.6002.18112_none_aeefe03423bfee4f\PortableDeviceWMDRM.dll
+ 2010-06-15 20:16 . 2009-10-01 01:01350208 c:\windows\winsxs\x86_microsoft-windows-w..cationcompatibility_31bf3856ad364e35_6.0.6002.18112_none_7007d7d4dbaec336\WPDSp.dll
+ 2010-06-23 20:43 . 2010-04-14 17:54293376 c:\windows\winsxs\x86_microsoft-windows-v..e-filters-tvdigital_31bf3856ad364e35_6.0.6001.22670_none_dc3b2eff7065f9a1\psisdecd.dll
+ 2010-06-23 20:43 . 2010-04-14 17:47293376 c:\windows\winsxs\x86_microsoft-windows-v..e-filters-tvdigital_31bf3856ad364e35_6.0.6001.18459_none_dbd032c0573008dd\psisdecd.dll
+ 2010-06-15 20:14 . 2009-10-08 21:08555520 c:\windows\winsxs\x86_microsoft-windows-uiautomationcore_31bf3856ad364e35_6.0.6002.18156_none_b1ceff3f3f65520f\UIAutomationCore.dll
+ 2010-06-23 20:43 . 2010-04-14 17:54428544 c:\windows\winsxs\x86_microsoft-windows-tvencdec_31bf3856ad364e35_6.0.6001.22670_none_e0b60d45a7bcf5f6\EncDec.dll
+ 2010-06-23 20:43 . 2010-04-14 17:46428544 c:\windows\winsxs\x86_microsoft-windows-tvencdec_31bf3856ad364e35_6.0.6001.18459_none_e04b11068e870532\EncDec.dll
+ 2010-06-15 20:17 . 2009-09-25 01:48351232 c:\windows\winsxs\x86_microsoft-windows-printing-xpsprint_31bf3856ad364e35_7.0.6002.18107_none_9f011af59951f340\XpsPrint.dll
+ 2010-06-15 20:17 . 2009-09-25 02:04321024 c:\windows\winsxs\x86_microsoft-windows-photometadatahandler_31bf3856ad364e35_7.0.6002.18107_none_bdcd592c6d8ad7f7\PhotoMetadataHandler.dll
+ 2010-06-15 20:18 . 2009-09-25 01:33369664 c:\windows\winsxs\x86_microsoft-windows-photo-image-codec_31bf3856ad364e35_7.0.6002.18107_none_9297a600cdc57a69\WMPhoto.dll
+ 2010-06-15 20:18 . 2009-09-24 22:55258048 c:\windows\winsxs\x86_microsoft-windows-p..ting-spooler-client_31bf3856ad364e35_6.0.6002.22197_none_9543bd3e2f3469c3\winspool.drv
+ 2010-06-15 20:18 . 2009-09-24 22:54258048 c:\windows\winsxs\x86_microsoft-windows-p..ting-spooler-client_31bf3856ad364e35_6.0.6002.18088_none_94c5f0a9160dc75f\winspool.drv
+ 2010-06-15 20:17 . 2009-09-24 22:55667648 c:\windows\winsxs\x86_microsoft-windows-p..oler-filterpipeline_31bf3856ad364e35_6.0.6002.22164_none_2de0cf8ef1d7d6cc\printfilterpipelinesvc.exe
+ 2010-06-15 20:17 . 2009-09-24 22:54667648 c:\windows\winsxs\x86_microsoft-windows-p..oler-filterpipeline_31bf3856ad364e35_6.0.6002.18060_none_2d53319bd8bdd1a6\printfilterpipelinesvc.exe
+ 2010-06-15 20:14 . 2009-10-08 21:08234496 c:\windows\winsxs\x86_microsoft-windows-oleacc_31bf3856ad364e35_6.0.6002.18156_none_6c3b296e1fad2902\oleacc.dll
+ 2010-06-15 20:18 . 2009-09-25 01:27634880 c:\windows\winsxs\x86_microsoft-windows-lddmcore_31bf3856ad364e35_7.0.6002.18107_none_9f26906a6b93696c\dxgkrnl.sys
+ 2010-06-15 01:41 . 2010-05-04 06:30164352 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_8.0.6001.23019_none_481337e6dd0a172b\ieui.dll
+ 2010-06-15 01:41 . 2010-05-04 05:55164352 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_8.0.6001.18928_none_477df4a9c3f543e0\ieui.dll
+ 2010-06-15 01:40 . 2010-05-04 06:30109056 c:\windows\winsxs\x86_microsoft-windows-ie-sysprep_31bf3856ad364e35_8.0.6001.23019_none_ff02e517e8e79415\iesysprep.dll
+ 2010-06-15 01:40 . 2010-05-04 05:55109056 c:\windows\winsxs\x86_microsoft-windows-ie-sysprep_31bf3856ad364e35_8.0.6001.18928_none_fe6da1dacfd2c0ca\iesysprep.dll
+ 2010-06-15 01:40 . 2010-05-04 04:59173056 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.23019_none_a941806b8d645750\ie4uinit.exe
+ 2010-06-15 01:40 . 2010-05-04 04:30173056 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.18928_none_a8ac3d2e744f8405\ie4uinit.exe
+ 2010-06-15 01:41 . 2010-05-04 06:31129536 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.6001.23019_none_2b1475a0bb6f3e25\sqmapi.dll
+ 2010-06-15 01:41 . 2010-05-04 05:58129536 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.6001.18928_none_2a7f3263a25a6ada\sqmapi.dll
+ 2010-06-15 01:41 . 2010-05-04 06:31206848 c:\windows\winsxs\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_8.0.6001.23019_none_1a973373430e2393\occache.dll
+ 2010-06-15 01:41 . 2010-05-04 05:58206848 c:\windows\winsxs\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_8.0.6001.18928_none_1a01f03629f95048\occache.dll
+ 2010-06-15 01:41 . 2010-05-04 06:32638232 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.23019_none_12d2cb5048e98eab\iexplore.exe
+ 2010-06-15 01:40 . 2010-05-04 04:59133632 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.23019_none_12d2cb5048e98eab\ieUnatt.exe
+ 2010-06-15 01:41 . 2010-05-04 06:00638232 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18928_none_123d88132fd4bb60\iexplore.exe
+ 2010-06-15 01:40 . 2010-05-04 04:31133632 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18928_none_123d88132fd4bb60\ieUnatt.exe
+ 2010-06-15 01:41 . 2010-05-04 06:30197632 c:\windows\winsxs\x86_microsoft-windows-ie-ieshims_31bf3856ad364e35_8.0.6001.23019_none_2afdfb3cc92410b5\IEShims.dll
+ 2010-06-15 01:41 . 2010-05-04 05:55197632 c:\windows\winsxs\x86_microsoft-windows-ie-ieshims_31bf3856ad364e35_8.0.6001.18928_none_2a68b7ffb00f3d6a\IEShims.dll
+ 2010-06-15 01:41 . 2010-05-04 06:30247808 c:\windows\winsxs\x86_microsoft-windows-ie-ieproxy_31bf3856ad364e35_8.0.6001.23019_none_739fafa6797baa47\ieproxy.dll
+ 2010-06-15 01:41 . 2010-05-04 05:55247808 c:\windows\winsxs\x86_microsoft-windows-ie-ieproxy_31bf3856ad364e35_8.0.6001.18928_none_730a6c696066d6fc\ieproxy.dll
+ 2010-06-15 01:41 . 2010-05-04 06:30599040 c:\windows\winsxs\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_8.0.6001.23019_none_4357559369617280\msfeeds.dll
+ 2010-06-15 01:41 . 2010-05-04 05:56599040 c:\windows\winsxs\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_8.0.6001.18928_none_42c21256504c9f35\msfeeds.dll
+ 2010-06-15 01:41 . 2010-05-04 06:30743424 c:\windows\winsxs\x86_microsoft-windows-ie-devtools_31bf3856ad364e35_8.0.6001.23019_none_1f15d8176ec16c09\iedvtool.dll
+ 2010-06-15 01:41 . 2010-05-04 05:55743424 c:\windows\winsxs\x86_microsoft-windows-ie-devtools_31bf3856ad364e35_8.0.6001.18928_none_1e8094da55ac98be\iedvtool.dll
+ 2010-06-15 01:40 . 2010-05-04 06:30184320 c:\windows\winsxs\x86_microsoft-windows-ie-behaviors_31bf3856ad364e35_8.0.6001.23019_none_20344ff620f8e82a\iepeers.dll
+ 2010-06-15 01:40 . 2010-05-04 05:55184320 c:\windows\winsxs\x86_microsoft-windows-ie-behaviors_31bf3856ad364e35_8.0.6001.18928_none_1f9f0cb907e414df\iepeers.dll
+ 2010-06-15 01:41 . 2010-05-04 06:30387584 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_8.0.6001.23019_none_57c137c08668408f\iedkcs32.dll
+ 2010-06-15 01:41 . 2010-05-04 05:55387584 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_8.0.6001.18928_none_572bf4836d536d44\iedkcs32.dll
+ 2010-06-15 01:41 . 2010-05-04 06:31919040 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.23019_none_e559bec4d0be1fc8\wininet.dll
+ 2010-06-15 01:41 . 2010-05-04 05:59916480 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.18928_none_e4c47b87b7a94c7d\wininet.dll
+ 2010-06-15 01:41 . 2010-05-04 06:30611840 c:\windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_8.0.6001.23019_none_c43671ebab5db8a4\mstime.dll
+ 2010-06-15 01:41 . 2010-05-04 05:56611840 c:\windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_8.0.6001.18928_none_c3a12eae9248e559\mstime.dll
+ 2010-06-15 01:41 . 2010-05-26 14:54289792 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.22412_none_ac3a633770d08fc3\atmfd.dll
+ 2010-06-15 01:41 . 2010-05-26 14:47289792 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.18262_none_ab7ab4ea57db7e87\atmfd.dll
+ 2010-06-15 01:41 . 2010-05-26 14:35289792 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.22700_none_aa5cc0a773a3ec00\atmfd.dll
+ 2010-06-15 01:41 . 2010-05-26 14:25289792 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.18482_none_a97ea1445ac5641e\atmfd.dll
+ 2010-06-23 20:43 . 2010-04-14 16:27253952 c:\windows\winsxs\x86_microsoft-windows-ehome-ehvid_31bf3856ad364e35_6.0.6001.22670_none_4ba6b5206e120937\ehvid.exe
+ 2010-06-23 20:43 . 2010-04-14 16:15253952 c:\windows\winsxs\x86_microsoft-windows-ehome-ehvid_31bf3856ad364e35_6.0.6001.18459_none_4b3bb8e154dc1873\ehvid.exe
+ 2010-06-23 20:43 . 2010-04-14 17:52522240 c:\windows\winsxs\x86_microsoft-windows-ehome-ehui_31bf3856ad364e35_6.0.6001.22670_none_cf021320e2be175a\ehui.dll
+ 2010-06-23 20:43 . 2010-04-14 17:45522240 c:\windows\winsxs\x86_microsoft-windows-ehome-ehui_31bf3856ad364e35_6.0.6001.18459_none_ce9716e1c9882696\ehui.dll
+ 2010-06-23 20:43 . 2010-04-14 17:52105472 c:\windows\winsxs\x86_microsoft-windows-ehome-ehpresenter_31bf3856ad364e35_6.0.6001.22670_none_27068e6d7b50798e\ehPresenter.dll
+ 2010-06-23 20:43 . 2010-04-14 17:45105472 c:\windows\winsxs\x86_microsoft-windows-ehome-ehpresenter_31bf3856ad364e35_6.0.6001.18459_none_269b922e621a88ca\ehPresenter.dll
+ 2010-06-23 20:43 . 2010-04-14 19:00278528 c:\windows\winsxs\x86_microsoft-windows-ehome-ehplayer_31bf3856ad364e35_6.0.6002.22382_none_2fd4fb80cf8bbccc\ehPlayer.dll
+ 2010-06-23 20:43 . 2010-04-14 18:23278528 c:\windows\winsxs\x86_microsoft-windows-ehome-ehplayer_31bf3856ad364e35_6.0.6002.18242_none_2f769e65b64dad3e\ehPlayer.dll
+ 2010-06-23 20:43 . 2010-04-14 17:52278528 c:\windows\winsxs\x86_microsoft-windows-ehome-ehplayer_31bf3856ad364e35_6.0.6001.22670_none_2df758f0d25f1909\ehPlayer.dll
+ 2010-06-23 20:43 . 2010-04-14 17:45278528 c:\windows\winsxs\x86_microsoft-windows-ehome-ehplayer_31bf3856ad364e35_6.0.6001.18459_none_2d8c5cb1b9292845\ehPlayer.dll
+ 2010-06-23 20:43 . 2010-04-14 17:52373248 c:\windows\winsxs\x86_microsoft-windows-ehome-ehglid_31bf3856ad364e35_6.0.6001.22670_none_2f79d14e8378639a\ehglid.dll
+ 2010-06-23 20:43 . 2010-04-14 17:45373248 c:\windows\winsxs\x86_microsoft-windows-ehome-ehglid_31bf3856ad364e35_6.0.6001.18459_none_2f0ed50f6a4272d6\ehglid.dll
+ 2010-06-23 20:43 . 2010-04-14 17:20173056 c:\windows\winsxs\x86_microsoft-windows-ehome-devices-mcrmgr_31bf3856ad364e35_6.0.6001.22670_none_3467df3ef350874f\McrMgr.exe
+ 2010-06-23 20:43 . 2010-04-14 17:11173056 c:\windows\winsxs\x86_microsoft-windows-ehome-devices-mcrmgr_31bf3856ad364e35_6.0.6001.18459_none_33fce2ffda1a968b\McrMgr.exe
+ 2010-06-23 20:43 . 2010-04-14 17:52254464 c:\windows\winsxs\x86_microsoft-windows-ehome-devices-ehreplay_31bf3856ad364e35_6.0.6001.22670_none_14f56ee8b90922f1\ehReplay.dll
+ 2010-06-23 20:43 . 2010-04-14 17:45254464 c:\windows\winsxs\x86_microsoft-windows-ehome-devices-ehreplay_31bf3856ad364e35_6.0.6001.18459_none_148a72a99fd3322d\ehReplay.dll
+ 2010-06-23 20:43 . 2010-04-14 19:03180224 c:\windows\winsxs\x86_microsoft-windows-ehome-cbva_31bf3856ad364e35_6.0.6002.22382_none_d03f3d66e04a56b8\cbva.dll
+ 2010-06-23 20:43 . 2010-04-14 18:25180224 c:\windows\winsxs\x86_microsoft-windows-ehome-cbva_31bf3856ad364e35_6.0.6002.18242_none_cfe0e04bc70c472a\cbva.dll
+ 2010-06-23 20:43 . 2010-04-14 17:54180224 c:\windows\winsxs\x86_microsoft-windows-ehome-cbva_31bf3856ad364e35_6.0.6001.22670_none_ce619ad6e31db2f5\cbva.dll
+ 2010-06-23 20:43 . 2010-04-14 17:46180224 c:\windows\winsxs\x86_microsoft-windows-ehome-cbva_31bf3856ad364e35_6.0.6001.18459_none_cdf69e97c9e7c231\cbva.dll
+ 2010-06-15 20:17 . 2009-09-25 01:33829440 c:\windows\winsxs\x86_microsoft-windows-directx-warp10_31bf3856ad364e35_7.0.6002.18107_none_ddc19bafdeb30271\d3d10warp.dll
+ 2010-06-15 20:17 . 2009-09-25 01:30481792 c:\windows\winsxs\x86_microsoft-windows-directx-dxgi_31bf3856ad364e35_7.0.6002.18107_none_2ddc701ea6935db8\dxgi.dll
+ 2010-06-15 20:17 . 2009-09-25 01:31519680 c:\windows\winsxs\x86_microsoft-windows-directx-direct3d11_31bf3856ad364e35_7.0.6002.18107_none_e31646a255b2bb52\d3d11.dll
+ 2010-06-15 20:17 . 2009-09-25 01:30190464 c:\windows\winsxs\x86_microsoft-windows-directx-direct3d10_31bf3856ad364e35_7.0.6002.18107_none_e3165d6a55b2a1b1\d3d10core.dll
+ 2010-06-15 20:17 . 2009-09-25 01:31218112 c:\windows\winsxs\x86_microsoft-windows-directx-direct3d10.1_31bf3856ad364e35_7.0.6002.18107_none_438775313198baea\d3d10_1core.dll
+ 2010-06-15 20:17 . 2009-09-25 01:31161280 c:\windows\winsxs\x86_microsoft-windows-directx-direct3d10.1_31bf3856ad364e35_7.0.6002.18107_none_438775313198baea\d3d10_1.dll
+ 2010-06-15 20:17 . 2009-09-25 01:31486912 c:\windows\winsxs\x86_microsoft-windows-directx-d3d10level9_31bf3856ad364e35_7.0.6002.18107_none_d6bc647e27993a91\d3d10level9.dll
+ 2010-06-15 20:17 . 2009-09-25 01:27793088 c:\windows\winsxs\x86_microsoft-windows-directwrite-fontcache_31bf3856ad364e35_7.0.6002.18107_none_f80806179955d90c\FntCache.dll
+ 2010-06-15 20:17 . 2009-09-25 01:31828928 c:\windows\winsxs\x86_microsoft-windows-d2d_31bf3856ad364e35_7.0.6002.18107_none_9afade8fe3f79d22\d2d1.dll
+ 2010-06-15 20:17 . 2009-09-25 01:33195584 c:\windows\winsxs\x86_microsoft-windows-d..x-directxdiagnostic_31bf3856ad364e35_7.0.6002.18107_none_17218ffde5ca9cc0\dxdiagn.dll
+ 2010-06-15 20:17 . 2009-09-25 01:32252928 c:\windows\winsxs\x86_microsoft-windows-d..x-directxdiagnostic_31bf3856ad364e35_7.0.6002.18107_none_17218ffde5ca9cc0\dxdiag.exe
+ 2010-06-15 20:17 . 2009-09-25 01:38847360 c:\windows\winsxs\x86_microsoft-windows-component-opcom_31bf3856ad364e35_7.0.6002.18107_none_9694f99f3a97a698\OpcServices.dll
+ 2010-06-15 20:17 . 2009-09-25 01:35135680 c:\windows\winsxs\x86_microsoft-windows-c..nt-xpsrasterservice_31bf3856ad364e35_7.0.6002.18107_none_0dfb54ccb407a2d9\XpsRasterService.dll
+ 2010-06-15 20:17 . 2009-09-25 01:36280064 c:\windows\winsxs\x86_microsoft-windows-c..ent-xpsgdiconverter_31bf3856ad364e35_7.0.6002.18107_none_064a6d5573576b79\XpsGdiConverter.dll
+ 2010-06-15 01:40 . 2010-01-06 16:01173056 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.22303_none_0e995261088a03df\AcXtrnal.dll
+ 2010-06-15 01:40 . 2010-01-06 16:01542720 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.22303_none_0e995261088a03df\AcLayers.dll
+ 2010-06-15 01:40 . 2010-01-06 15:38173056 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.18179_none_0dca05f7ef9fc28f\AcXtrnal.dll
+ 2010-06-15 01:40 . 2010-01-06 15:38542720 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.18179_none_0dca05f7ef9fc28f\AcLayers.dll
+ 2010-06-22 20:03 . 2010-04-16 16:08173056 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6001.22672_none_0c6630bb0b9d58fb\AcXtrnal.dll
+ 2010-06-22 20:03 . 2010-04-16 16:08541696 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6001.22672_none_0c6630bb0b9d58fb\AcLayers.dll
+ 2010-06-22 20:03 . 2010-04-16 16:05173056 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6001.18461_none_0be661abf27886c2\AcXtrnal.dll
+ 2010-06-22 20:03 . 2010-04-16 16:05541696 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6001.18461_none_0be661abf27886c2\AcLayers.dll
+ 2010-06-15 01:40 . 2010-01-06 16:01458752 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6002.22303_none_0e985217088aea88\AcSpecfc.dll
+ 2010-06-15 01:40 . 2010-01-06 15:38458752 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6002.18179_none_0dc905adefa0a938\AcSpecfc.dll
+ 2010-06-22 20:03 . 2010-04-16 16:08459776 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6001.22672_none_0c6530710b9e3fa4\AcSpecfc.dll
+ 2010-06-22 20:03 . 2010-04-16 16:05459776 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6001.18461_none_0be56161f2796d6b\AcSpecfc.dll
+ 2010-06-15 01:41 . 2010-03-04 12:53258048 c:\windows\winsxs\msil_system.security_b03f5f7f11d50a3a_6.0.6002.22354_none_851a050be8358bb4\System.Security.dll
+ 2010-06-15 01:41 . 2010-03-04 12:53258048 c:\windows\winsxs\msil_system.security_b03f5f7f11d50a3a_6.0.6002.18222_none_9be4d87dce90ac67\System.Security.dll
+ 2010-06-15 01:40 . 2010-04-12 12:22970752 c:\windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.0.6002.22380_none_eb7c4e35f9cf6d41\System.Runtime.Serialization.dll
+ 2010-06-15 01:40 . 2010-04-12 12:21970752 c:\windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.0.6002.18239_none_0244267be02d7531\System.Runtime.Serialization.dll
+ 2010-06-15 01:40 . 2010-04-12 12:22970752 &nbsPlease try again.

The CFScript was spelled like this: c:\users\Dawn\Desktop\CFScript.txt.lnk\

Go to My Documents folder, click Tools > Folder Options.

Click the View tab.

Find "Hide extensions for known file types" and uncheck that.

Click Apply, then OK.

Then, for CFScript.txt

rename it to only say CFScript.txt


Then drag it in to ComboFix like I instructed earlier.


Discussion

No Comment Found

Related InterviewSolutions