Home » Viren, Trojaner & Malware Forum » Imageshack und Würmer, leider eingefangen neuer MSN virus » Themenansicht

Imageshack und Würmer, leider eingefangen neuer MSN virus
#0
10.06.2008, 23:29
juventiner
Member

Beiträge: 47
#1 Huhu, ich habe gerade von einem Kontakt in meinem MSN messenger einen Link zu Imagehack bekommen, als ich auf den Link geklickt habe, wurde eine Datei gedownloadet und es kam eine Virenmeldung ich habe mir einen Wurm eingefangen.

Die Datei:
DC17GJ14.jpg-imageshaack.com

Hjackthis:

Zitat


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:28:23, on 10.06.2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.17184)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programme\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Programme\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\xampp\apache\bin\apache.exe
C:\xampp\mysql\bin\mysqld-nt.exe
C:\WINDOWS\system32\PnkBstrA.exe
c:\Programme\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\xampp\apache\bin\apache.exe
C:\Programme\Java\jre1.6.0_05\bin\jusched.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\VTtrayp.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Programme\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programme\KeePass Password Safe\KeePass.exe
C:\Programme\Messenger\msmsgs.exe
C:\Programme\Windows Live\Messenger\usnsvc.exe
C:\WINDOWS\explorer.exe
C:\Programme\IEPro\MiniDM.exe
C:\WINDOWS\system32\svchost.exe
C:\Programme\Internet Explorer\iexplore.exe
C:\Programme\Windows Live\Messenger\msnmsgr.exe
C:\Programme\Internet Explorer\iexplore.exe
C:\Programme\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.de/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 142.103.002.002:3128
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: IE7Pro - {00011268-E188-40DF-A514-835FCD78B1BF} - C:\Programme\IEPro\iepro.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Programme\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre1.6.0_05\bin\ssv.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programme\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [avgnt] "C:\Programme\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Programme\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [KeePass Password Safe] "C:\Programme\KeePass Password Safe\KeePass.exe"
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Programme\Alcohol Soft\Alcohol 120\axcmd.exe" /automount
O4 - HKCU\..\Run: [MSMSGS] "C:\Programme\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Programme\IEPro\iepro.dll
O9 - Extra 'Tools' menuitem: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Programme\IEPro\iepro.dll
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Programme\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://gamenextde.oberon-media.com/gameshell/games/channel--110222893/lc--de/room--77c1efc2-9e57-49d5-ae8f-e9f6c534da02/online/luxor_amun_rising/de/mjolauncher.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game13.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://gamenextde.oberon-media.com/Gameshell/GameHost/1.0/OberonGameHost.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL
O23 - Service: Avira AntiVir Personal – Free Antivirus Planer (AntiVirScheduler) - Avira GmbH - C:\Programme\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Programme\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apache2.2 - Apache Software Foundation - C:\xampp\apache\bin\apache.exe
O23 - Service: FileZilla Server FTP server (FileZilla Server) - FileZilla Project - c:\xampp\FileZillaFTP\FileZillaServer.exe
O23 - Service: mysql - Unknown owner - C:\xampp\mysql\bin\mysqld-nt.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

--
End of file - 6263 bytes
Seitenanfang Seitenende
11.06.2008, 00:07
Swisstreasure
Moderator

Beiträge: 5694
#2 Hallo juventîner

1.
lösche mit cleaner die temp-Dateien
http://www.ccleaner.de/?protecus.de

2.
scannre mit rvaxo + poste den report
http://virus-protect.org/artikel/tools/rvaxo.html

3.
wende combofix an + warnmeldung wegklicken + poste den report
http://virus-protect.org/artikel/tools/combofix.html

Gruss Swiss
Dieser Beitrag wurde am 11.06.2008 um 00:11 Uhr von Tonstudio editiert.
Seitenanfang Seitenende
11.06.2008, 23:36
juventiner
Member

Themenstarter

Beiträge: 47
#3 rvaxo:

Zitat

---RVAXO.exe Updated: 2008-05-29---first run---
Uninstallers:

Files found:
C:\WINDOWS\SwSys1.bmp
C:\WINDOWS\SwSys2.bmp

Folders Found:

Hosts-file was reset, If you use a custom hosts file please replace it...

--------------RVAXO.exe last run---------------
Not deleted items:

--------------RVAXO.exe finished----------------

Combofix:

Zitat


ComboFix 08-06-10.5 - Drilon 2008-06-11 23:28:20.2 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1031.18.150 [GMT 2:00]
ausgeführt von:: C:\Dokumente und Einstellungen\Drilon\Eigene Dateien\My Downloads\ComboFix.exe
* Neuer Wiederherstellungspunkt wurde erstellt

[color=red]WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !![/color]
.

((((((((((((((((((((((( Dateien erstellt von 2008-05-11 bis 2008-06-11 ))))))))))))))))))))))))))))))
.

2008-06-11 23:21 . 2008-06-11 23:22 <DIR> d-------- C:\RVAXO
2008-06-11 23:20 . 2008-05-29 21:30 828,824 --a------ C:\WINDOWS\system32\RVAXO.bat
2008-06-11 23:20 . 2001-10-01 14:51 69,632 --a------ C:\WINDOWS\system32\remove.exe
2008-06-11 16:21 . 2008-06-11 16:25 <DIR> d-------- C:\Programme\Counter-Strike 1.6
2008-06-11 16:04 . 2008-06-11 16:04 <DIR> d-------- C:\Programme\CCleaner
2008-06-10 23:28 . 2008-06-10 23:28 <DIR> d-------- C:\Programme\Trend Micro
2008-06-08 12:15 . 2008-06-09 07:14 <DIR> d-------- C:\Programme\Silkroad
2008-06-07 19:19 . 2008-06-07 19:21 <DIR> d--h-c--- C:\WINDOWS\ie8
2008-06-07 15:46 . 2008-06-07 15:52 <DIR> d-------- C:\xampp
2008-06-06 22:45 . 2008-06-10 18:16 1,056 --ahs---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\KGyGaAvL.sys
2008-06-06 22:45 . 2008-06-10 18:16 88 -r-hs---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\997364CCE4.sys
2008-06-05 14:42 . 2008-04-14 00:15 60,032 --a------ C:\WINDOWS\system32\drivers\USBAUDIO.sys
2008-06-05 14:42 . 2008-04-14 00:15 60,032 --a--c--- C:\WINDOWS\system32\dllcache\usbaudio.sys
2008-06-05 14:41 . 2008-04-14 00:15 32,128 --a------ C:\WINDOWS\system32\drivers\usbccgp.sys
2008-06-05 14:41 . 2008-04-14 00:15 32,128 --a--c--- C:\WINDOWS\system32\dllcache\usbccgp.sys
2008-06-01 18:56 . 2008-06-01 18:56 <DIR> d-------- C:\Programme\AmitySource
2008-06-01 17:10 . 2008-03-19 11:15 221,184 --a------ C:\WINDOWS\system32\DartSock.dll
2008-06-01 17:10 . 2008-03-19 11:16 176,128 --a------ C:\WINDOWS\system32\DartRas.dll
2008-06-01 17:10 . 2008-03-19 11:16 147,456 --a------ C:\WINDOWS\system32\DartUtil.dll
2008-06-01 17:10 . 2008-01-28 15:50 2,586 --a------ C:\WINDOWS\system32\DartRas.dep
2008-06-01 17:10 . 2008-01-28 15:50 2,197 --a------ C:\WINDOWS\system32\DartUtil.dep
2008-06-01 17:10 . 2008-01-28 15:48 162 --a------ C:\WINDOWS\system32\DartSock.dep
2008-06-01 14:53 . 2008-06-01 14:53 <DIR> d-------- C:\Programme\windesk
2008-05-31 12:59 . 2008-05-31 12:59 0 --------- C:\WINDOWS\WB.ini
2008-05-31 12:54 . 2008-05-31 12:54 <DIR> d-------- C:\Programme\Stardock
2008-05-31 12:54 . 2008-04-26 16:14 42,672 --------- C:\WINDOWS\system32\wbsys.dll
2008-05-31 12:50 . 2004-08-04 14:00 180,770 --a--c--- C:\WINDOWS\system32\dllcache\c_20932.nls
2008-05-31 12:48 . 2001-08-18 04:53 8,704 --a------ C:\WINDOWS\system32\kbdjpn.dll
2008-05-31 12:28 . 2007-05-07 06:26 1,112,920 --a------ C:\WINDOWS\Vienna.wba
2008-05-30 21:33 . 2008-05-30 21:33 <DIR> d-------- C:\Programme\MSXML 4.0
2008-05-30 21:33 . 2008-05-30 21:33 <DIR> d-------- C:\Programme\GameSpy Arcade
2008-05-30 21:32 . 2008-05-30 21:32 <DIR> d-------- C:\Programme\Microsoft Games
2008-05-29 21:54 . 2008-05-29 21:54 <DIR> d-------- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Trymedia
2008-05-29 21:53 . 2008-05-29 21:53 <DIR> d-------- C:\Programme\Strategy First
2008-05-29 21:13 . 2008-05-29 21:14 <DIR> d-------- C:\Programme\phase5
2008-05-24 20:51 . 2008-05-24 20:51 1,162 --a------ C:\a.amx
2008-05-24 20:21 . 2008-05-24 20:21 <DIR> d-------- C:\Programme\Pawn
2008-05-23 18:45 . 2008-05-23 18:45 <DIR> d-------- C:\Programme\Eziriz
2008-05-23 15:57 . 2008-05-23 15:57 <DIR> d-------- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\mgusoft
2008-05-23 15:56 . 2008-05-23 15:56 <DIR> d-------- C:\Programme\Setupbuilder Std
2008-05-22 23:48 . 2008-05-25 13:07 <DIR> d-------- C:\Programme\K-Script-Chat
2008-05-22 23:35 . 2008-05-22 23:35 <DIR> d-------- C:\Programme\ColorPic 4.1
2008-05-22 23:35 . 2008-05-22 23:35 134,122 --a------ C:\WINDOWS\ColorPic Uninstaller.exe
2008-05-21 23:31 . 2008-05-22 00:34 12 --a------ C:\Dokumente und Einstellungen\Drilon\USERDATA.DAT
2008-05-18 22:08 . 2008-05-18 22:14 <DIR> d-------- C:\Dokumente und Einstellungen\Drilon\Anwendungsdaten\Juce VST Host
2008-05-18 21:49 . 2008-05-22 12:21 <DIR> d-------- C:\Dokumente und Einstellungen\Drilon\Anwendungsdaten\Deckadance
2008-05-18 19:39 . 2008-05-18 19:50 <DIR> d-------- C:\Programme\VstPlugins
2008-05-18 19:39 . 2008-05-18 19:39 <DIR> d-------- C:\Programme\ASIO4ALL v2
2008-05-18 19:39 . 2002-07-08 00:14 1,294,336 --a------ C:\WINDOWS\system32\vorbis.acm
2008-05-18 19:39 . 2006-06-20 10:56 225,280 --a------ C:\WINDOWS\system32\rewire.dll
2008-05-18 19:37 . 2008-05-18 19:37 <DIR> d-------- C:\Programme\Outsim
2008-05-18 19:33 . 2008-05-18 19:50 <DIR> d-------- C:\Programme\Image-Line
2008-05-17 13:44 . 2008-05-17 13:44 <DIR> d-------- C:\Programme\Rockstar Games
2008-05-16 23:43 . 2007-05-21 15:34 0 --a------ C:\WINDOWS\cs3marked32
2008-05-16 21:45 . 2008-05-16 21:45 <DIR> d-------- C:\Programme\KnuddelsTextPool
2008-05-16 21:28 . 2008-05-16 21:28 <DIR> d-------- C:\Programme\Avira
2008-05-16 21:28 . 2008-05-16 21:28 <DIR> d-------- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira
2008-05-15 19:55 . 2008-05-15 20:05 <DIR> d-------- C:\WINDOWS\system32\Adobe
2008-05-14 22:56 . 2008-05-14 22:56 1,144 --a------ C:\WINDOWS\mozver.dat
2008-05-14 21:28 . 2008-05-14 21:28 <DIR> d-------- C:\Dokumente und Einstellungen\Drilon\Anwendungsdaten\MozillaControl
2008-05-13 14:02 . 2008-05-25 20:00 <DIR> d-------- C:\Programme\Microsoft Silverlight
2008-05-13 13:58 . 2008-05-13 13:58 <DIR> d-------- C:\Programme\MSXML 6.0
2008-05-13 13:57 . 2008-05-13 14:01 <DIR> d-------- C:\Programme\Microsoft SQL Server
2008-05-13 13:50 . 2008-05-13 13:50 <DIR> d-------- C:\Programme\Microsoft Synchronization Services
2008-05-13 13:50 . 2008-05-13 13:50 <DIR> d-------- C:\Programme\Microsoft SQL Server Compact Edition
2008-05-13 13:45 . 2008-05-13 13:59 <DIR> d-------- C:\Programme\Microsoft.NET
2008-05-13 13:45 . 2008-05-13 19:49 <DIR> d-------- C:\Programme\Microsoft Visual Studio 9.0
2008-05-13 13:45 . 2008-05-13 13:45 <DIR> d-------- C:\Programme\Microsoft SDKs
2008-05-13 13:45 . 2008-05-13 19:52 <DIR> d-------- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft Help
2008-05-13 13:38 . 2008-05-13 13:38 <DIR> d-------- C:\Programme\Alcohol Soft
2008-05-13 13:35 . 2008-05-13 13:35 716,272 --a------ C:\WINDOWS\system32\drivers\sptd.sys
2008-05-13 12:55 . 2008-05-13 12:55 <DIR> d-------- C:\Programme\Smart Projects
2008-05-13 12:48 . 2008-02-22 02:33 69,632 --a------ C:\WINDOWS\system32\javacpl.cpl
2008-05-13 00:26 . 2008-05-13 00:26 <DIR> d-------- C:\Programme\KnuddelsKit
2008-05-12 21:23 . 2008-06-10 17:15 56 -r-hs---- C:\WINDOWS\system32\E4CC647399.sys
2008-05-12 21:22 . 2008-06-06 22:40 <DIR> d-------- C:\Programme\Gemeinsame Dateien\Enterbrain
2008-05-12 21:22 . 2008-06-06 22:40 <DIR> d-------- C:\Programme\Enterbrain
2008-05-12 21:22 . 2008-06-10 17:15 1,056 --ahs---- C:\WINDOWS\system32\KGyGaAvL.sys
2008-05-12 01:05 . 2008-05-12 01:05 <DIR> d-------- C:\Dokumente und Einstellungen\Drilon\Anwendungsdaten\Lionhead Studios
2008-05-12 00:55 . 2008-05-12 00:55 <DIR> d-------- C:\Programme\Lionhead Studios Ltd
2008-05-12 00:55 . 2008-05-12 00:55 <DIR> d-------- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Lionhead Studios
2008-05-12 00:52 . 2008-05-12 00:52 <DIR> d--hs---- C:\WINDOWS\ftpcache
2008-05-11 22:14 . 2008-05-11 22:14 0 --a------ C:\WINDOWS\system32\drivers\wnmsav.dat
2008-05-11 17:24 . 2008-05-11 17:24 <DIR> d-------- C:\Deckard
2008-05-11 17:00 . 2008-05-11 17:00 4,041 --a------ C:\index.php
2008-05-11 16:21 . 2008-06-10 19:02 <DIR> d-------- C:\Dokumente und Einstellungen\Drilon\Anwendungsdaten\FileZilla
2008-05-11 16:20 . 2008-06-09 06:06 <DIR> d-------- C:\Programme\FileZilla FTP Client
2008-05-11 13:59 . 2008-05-11 13:59 <DIR> d-------- C:\Dokumente und Einstellungen\Drilon\Anwendungsdaten\Malwarebytes
2008-05-11 13:58 . 2008-05-11 13:59 <DIR> d-------- C:\Programme\Malwarebytes' Anti-Malware
2008-05-11 13:58 . 2008-05-11 13:58 <DIR> d-------- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes
2008-05-11 13:58 . 2008-05-05 20:46 27,048 --a------ C:\WINDOWS\system32\drivers\mbamcatchme.sys
2008-05-11 13:58 . 2008-05-05 20:46 15,864 --a------ C:\WINDOWS\system32\drivers\mbam.sys

.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-05-30 22:25 --------- d-----w C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\BVRP Software
2008-05-25 12:09 --------- d-----w C:\Dokumente und Einstellungen\Drilon\Anwendungsdaten\TeamViewer
2008-05-23 13:30 --------- d-----w C:\Programme\IEPro
2008-05-20 17:28 --------- d-----w C:\Dokumente und Einstellungen\Drilon\Anwendungsdaten\Skype
2008-05-20 16:50 --------- d-----w C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Messenger Plus!
2008-05-20 14:16 --------- d-----w C:\Dokumente und Einstellungen\Drilon\Anwendungsdaten\skypePM
2008-05-17 11:44 --------- d--h--w C:\Programme\InstallShield Installation Information
2008-05-17 11:25 22,328 ----a-w C:\WINDOWS\system32\drivers\PnkBstrK.sys
2008-05-17 11:24 107,832 ----a-w C:\WINDOWS\system32\PnkBstrB.exe
2008-05-17 11:23 --------- d-----w C:\Programme\WarRock
2008-05-17 11:03 --------- d-----w C:\Dokumente und Einstellungen\Drilon\Anwendungsdaten\Hamachi
2008-05-13 17:42 --------- d-----w C:\Dokumente und Einstellungen\Drilon\Anwendungsdaten\gtk-2.0
2008-05-13 10:47 --------- d-----w C:\Programme\Java
2008-05-11 22:53 --------- d-----w C:\Programme\Gemeinsame Dateien\InstallShield
2008-05-11 20:29 --------- d-----w C:\Programme\Panda Security
2008-05-11 20:25 --------- d-----w C:\Programme\Gemeinsame Dateien\Panda Software
2008-05-10 20:55 --------- d-----w C:\Programme\Gemeinsame Dateien\Adobe
2008-05-10 20:36 --------- d-----w C:\Programme\GIMP-2.0
2008-05-10 20:13 --------- d-----w C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\FLEXnet
2008-05-10 10:26 --------- d-----w C:\Dokumente und Einstellungen\Drilon\Anwendungsdaten\OpenOffice.org2
2008-05-09 21:46 --------- d-----w C:\Programme\ASCII
2008-05-09 20:42 --------- d-----w C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\MumboJumbo
2008-05-08 21:39 --------- d-----w C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Zylom
2008-05-08 17:26 --------- d-----w C:\Programme\Hamachi
2008-05-08 17:25 25,280 ----a-w C:\WINDOWS\system32\drivers\hamachi.sys
2008-05-08 17:19 0 ----a-r C:\logwmemory.bin
2008-05-08 17:16 --------- d-----w C:\Programme\OpenOffice.org 2.2
2008-05-08 17:15 --------- d-----w C:\Dokumente und Einstellungen\Drilon\Anwendungsdaten\Soldat
2008-05-08 15:22 --------- d-----w C:\Programme\LiveUpdate
2008-05-08 15:21 --------- d-----w C:\Programme\mobile PhoneTools
2008-05-07 22:01 --------- d-----w C:\Dokumente und Einstellungen\Afrim\Anwendungsdaten\MiniDm
2008-05-07 15:15 66,872 ----a-w C:\WINDOWS\system32\PnkBstrA.exe
2008-05-07 14:46 --------- d-----w C:\Dokumente und Einstellungen\Drilon\Anwendungsdaten\InstallShield
2008-05-06 20:53 --------- d--h--w C:\Dokumente und Einstellungen\Drilon\Anwendungsdaten\ijjigame
2008-05-06 20:28 --------- d-----w C:\Programme\MAIET
2008-05-06 19:31 --------- d-----w C:\Programme\TeamViewer3
2008-05-06 19:11 --------- d-----w C:\Programme\Skype
2008-05-06 19:11 --------- d-----w C:\Programme\Gemeinsame Dateien\Skype
2008-05-06 19:11 --------- d-----w C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Skype
2008-05-06 18:16 --------- d-----w C:\Programme\Reference Assemblies
2008-05-06 18:16 --------- d-----w C:\Programme\MSBuild
2008-05-06 17:59 --------- d-----w C:\Dokumente und Einstellungen\Drilon\Anwendungsdaten\MiniDm
2008-05-06 12:13 --------- d-----w C:\Dokumente und Einstellungen\Afrim\Anwendungsdaten\IEPro
2008-05-05 19:48 --------- d-----w C:\Programme\Messenger Plus! Live
2008-05-05 15:16 --------- d-----w C:\Dokumente und Einstellungen\Drilon\Anwendungsdaten\IEPro
2008-05-05 04:46 --------- d-----w C:\Programme\KeePass Password Safe
2008-05-05 04:37 --------- d-----w C:\Programme\Windows Live
2008-05-04 22:30 --------- d-----w C:\Programme\Windows Media Connect 2
2008-05-04 21:51 --------- d-----w C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\sentinel
2008-05-04 21:49 5,884 ----a-w C:\WINDOWS\system32\drivers\net_m32.PNF
2008-05-04 21:49 20,376 ----a-w C:\WINDOWS\system32\drivers\INFCACHE.1
2008-05-04 21:49 --------- d-----w C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Backup
2008-05-04 21:38 9,388 ----a-w C:\WINDOWS\system32\drivers\iaStor.PNF
2008-05-04 21:38 7,280 ----a-w C:\WINDOWS\system32\drivers\viamraid.PNF
2008-05-04 21:38 63,240 ----a-w C:\WINDOWS\system32\drivers\Si3112r.PNF
2008-05-04 21:38 6,984 ----a-w C:\WINDOWS\system32\drivers\SiSRaid.PNF
2008-05-04 21:38 12,432 ----a-w C:\WINDOWS\system32\drivers\adpu320.PNF
2008-05-04 21:38 12,204 ----a-w C:\WINDOWS\system32\drivers\nvraid.PNF
2008-05-04 21:38 10,828 ----a-w C:\WINDOWS\system32\drivers\iaAHCI.PNF
2008-05-04 21:19 --------- d-----w C:\Programme\Wireless LAN
2008-05-04 21:19 --------- d-----w C:\Programme\Realtek Sound Manager
2008-05-04 21:19 --------- d-----w C:\Programme\AvRack
2008-05-04 21:18 --------- d-----w C:\Programme\Realtek AC97
2008-05-04 21:17 --------- d-----w C:\Programme\S3
2008-05-04 20:56 --------- d-----w C:\Programme\microsoft frontpage
2008-05-04 20:54 --------- d-----w C:\Programme\Gemeinsame Dateien\Java
2008-05-04 20:48 --------- d-----w C:\Programme\Online-Dienste
2008-05-04 20:47 --------- d-----w C:\Programme\Gemeinsame Dateien\Dienste
2008-04-14 06:06 1,804 ----a-w C:\WINDOWS\system32\dcache.bin
2008-04-14 05:55 333,312 ----a-w C:\WINDOWS\system32\netsetup.exe
2008-04-14 05:52 99,840 ----a-w C:\WINDOWS\system32\loadperf.dll
2008-04-14 05:51 762,368 ----a-w C:\WINDOWS\system32\winntbbu.dll
2008-04-14 05:51 76,288 ----a-w C:\WINDOWS\system32\uniime.dll
2008-04-14 05:51 731,648 ----a-w C:\WINDOWS\system32\ntdll.dll
2008-04-14 05:51 57,375 ----a-w C:\WINDOWS\system32\odbcji32.dll
2008-04-14 05:51 5,632 ----a-w C:\WINDOWS\system32\wmi.dll
2008-04-14 05:51 4,126 ----a-w C:\WINDOWS\system32\msdxmlc.dll
2008-04-14 05:32 80,384 ----a-w C:\WINDOWS\system32\drivers\parport.sys
2008-04-14 05:32 73,472 ----a-w C:\WINDOWS\system32\drivers\sr.sys
2008-04-14 05:32 68,224 ----a-w C:\WINDOWS\system32\drivers\pci.sys
2008-04-14 05:32 46,848 ----a-w C:\WINDOWS\system32\drivers\p3.sys
2008-04-14 05:32 120,576 ----a-w C:\WINDOWS\system32\drivers\pcmcia.sys
2008-04-14 05:30 2,191,360 ----a-w C:\WINDOWS\system32\ntoskrnl.exe
2008-04-14 05:30 2,068,224 ----a-w C:\WINDOWS\system32\ntkrnlpa.exe
2008-04-14 05:29 4,096 ----a-w C:\WINDOWS\system32\dsprpres.dll
2008-04-14 05:28 800,384 ----a-w C:\WINDOWS\system32\drivers\dmboot.sys
2008-04-14 05:28 37,632 ----a-w C:\WINDOWS\system32\drivers\isapnp.sys
2008-04-14 05:28 25,216 ----a-w C:\WINDOWS\system32\drivers\kbdclass.sys
2008-04-14 05:28 154,112 ----a-w C:\WINDOWS\system32\drivers\dmio.sys
2008-04-14 05:27 93,184 ------w C:\WINDOWS\system32\msxml6r.dll
2008-04-14 05:27 40,448 ----a-w C:\WINDOWS\system32\drivers\intelppm.sys
2008-04-14 05:26 81,408 ------w C:\WINDOWS\system32\msshavmsg.dll
2008-04-14 05:26 51,712 ----a-w C:\WINDOWS\system32\inetres.dll
2008-04-14 05:26 40,832 ----a-w C:\WINDOWS\system32\drivers\crusoe.sys
2008-04-14 05:25 65,536 ----a-w C:\WINDOWS\system32\drivers\serial.sys
2008-04-14 05:25 572,928 ----a-w C:\WINDOWS\system32\shdoclc.dll
2008-04-14 05:25 52,992 ----a-w C:\WINDOWS\system32\drivers\i8042prt.sys
2008-04-14 05:24 25,856 ------w C:\WINDOWS\system32\drivers\hidbth.sys
2008-04-14 05:24 10,752 ----a-w C:\WINDOWS\system32\gpkrsrc.dll
2008-04-14 05:23 1,845,760 ----a-w C:\WINDOWS\system32\win32k.sys
.

((((((((((((((((((((((((((((( snapshot@2008-05-11_13.40.56,84 )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-05-13 11:45:42 110,592 ----a-w C:\WINDOWS\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\adodb.dll
+ 2008-05-13 11:45:45 245,760 ----a-w C:\WINDOWS\assembly\GAC\EnvDTE\8.0.0.0__b03f5f7f11d50a3a\envdte.dll
+ 2008-05-13 11:45:56 135,168 ----a-w C:\WINDOWS\assembly\GAC\EnvDTE80\8.0.0.0__b03f5f7f11d50a3a\envdte80.dll
+ 2008-05-13 11:45:56 18,944 ----a-w C:\WINDOWS\assembly\GAC\EnvDTE90\9.0.0.0__b03f5f7f11d50a3a\envdte90.dll
+ 2008-05-13 11:46:14 6,656 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.Internal.VisualStudio.Shell.Interop.9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.Internal.VisualStudio.Shell.Interop.9.0.dll
+ 2008-05-13 11:47:12 22,552 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.stdformat.dll
+ 2008-05-13 11:46:02 69,632 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.VisualStudio.CommandBars\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.CommandBars.dll
+ 2008-05-13 11:46:04 176,128 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.VisualStudio.Debugger.Interop\8.0.1.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Debugger.Interop.dll
+ 2008-05-13 11:46:04 126,976 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.VisualStudio.Debugger.InteropA\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Debugger.InteropA.dll
+ 2008-05-13 11:47:12 8,704 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.VisualStudio.Designer.Interfaces\1.0.5000.0__b03f5f7f11d50a3a\microsoft.visualstudio.designer.interfaces.dll
+ 2008-05-13 11:46:08 118,784 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.VisualStudio.OLE.Interop\7.1.40304.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.OLE.Interop.dll
+ 2008-05-13 11:46:10 172,032 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.VisualStudio.Shell.Interop.8.0\8.0.0.0__b03f5f7f11d50a3a\microsoft.visualstudio.shell.interop.8.0.dll
+ 2008-05-13 11:46:10 40,960 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.VisualStudio.Shell.Interop.9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Shell.Interop.9.0.dll
+ 2008-05-13 11:46:10 249,856 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.VisualStudio.Shell.Interop\7.1.40304.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Shell.Interop.dll
+ 2008-05-13 11:46:10 57,344 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.VisualStudio.TextManager.Interop.8.0\8.0.0.0__b03f5f7f11d50a3a\microsoft.visualstudio.textmanager.interop.8.0.dll
+ 2008-05-13 11:47:17 7,680 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.VisualStudio.TextManager.Interop.9.0\9.0.0.0__b03f5f7f11d50a3a\microsoft.visualstudio.textmanager.interop.9.0.dll
+ 2008-05-13 11:46:10 114,688 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.VisualStudio.TextManager.Interop\7.1.40304.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.TextManager.Interop.dll
+ 2008-05-13 11:46:11 11,264 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.VisualStudio.VSHelp\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.VSHelp.dll
+ 2008-05-13 11:46:11 8,704 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.VisualStudio.VSHelp80\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.VSHelp80.dll
+ 2008-05-13 11:47:13 13,312 ----a-w C:\WINDOWS\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\msdatasrc.dll
+ 2008-05-13 11:47:21 16,384 ----a-w C:\WINDOWS\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll
+ 2008-05-13 11:46:45 53,248 ----a-w C:\WINDOWS\assembly\GAC\VSLangProj\7.0.3300.0__b03f5f7f11d50a3a\VSLangProj.dll
+ 2008-05-13 11:46:48 19,968 ----a-w C:\WINDOWS\assembly\GAC\VSLangProj2\7.0.5000.0__b03f5f7f11d50a3a\VSLangProj2.dll
+ 2008-05-13 11:46:52 73,728 ----a-w C:\WINDOWS\assembly\GAC\VSLangProj80\8.0.0.0__b03f5f7f11d50a3a\VSLangProj80.dll
+ 2008-05-13 11:46:52 5,120 ----a-w C:\WINDOWS\assembly\GAC\VslangProj90\9.0.0.0__b03f5f7f11d50a3a\VSLangProj90.dll
+ 2008-05-13 11:47:01 49,152 ----a-w C:\WINDOWS\assembly\GAC\VsWebSite.Interop\8.0.0.0__b03f5f7f11d50a3a\VsWebSite.Interop.dll
+ 2008-05-13 11:47:08 12,288 ----a-w C:\WINDOWS\assembly\GAC\VsWebSite.Interop90\9.0.0.0__b03f5f7f11d50a3a\VsWebSite.Interop90.dll
+ 2008-05-13 11:59:11 363,376 ----a-w C:\WINDOWS\assembly\GAC_32\Microsoft.SqlServer.BatchParser\9.0.242.0__89845dcd8080cc91\microsoft.sqlserver.batchparser.dll
+ 2008-05-13 11:59:12 78,192 ----a-w C:\WINDOWS\assembly\GAC_32\Microsoft.SqlServer.MgdSqlDumper\9.0.242.0__89845dcd8080cc91\microsoft.sqlserver.mgdsqldumper.dll
+ 2008-05-13 11:59:37 1,626,480 ----a-w C:\WINDOWS\assembly\GAC_32\Microsoft.SqlServer.Replication\9.0.242.0__89845dcd8080cc91\Microsoft.SqlServer.Replication.dll
+ 2008-05-13 11:45:43 573,440 ----a-w C:\WINDOWS\assembly\GAC_32\Microsoft.VisualStudio.Modeling.Sdk.Diagrams.GraphObject\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Modeling.Sdk.Diagrams.GraphObject.dll
+ 2008-05-13 11:46:14 1,712,128 ----a-w C:\WINDOWS\assembly\GAC_32\mscorcfg\3.5.0.0__b03f5f7f11d50a3a\mscorcfg.dll
+ 2008-05-13 11:59:18 50,544 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.AnalysisServices.AdomdClient.resources\9.0.242.0_de_89845dcd8080cc91\Microsoft.AnalysisServices.AdomdClient.resources.dll
+ 2008-05-13 11:59:17 546,160 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.AnalysisServices.AdomdClient\9.0.242.0__89845dcd8080cc91\Microsoft.AnalysisServices.AdomdClient.dll
+ 2008-05-13 11:59:12 22,896 ----a-w C:\WINDOWS\assembly\GAC_MSIL\microsoft.analysisservices.deploymentengine.resources\9.0.242.0_de_89845dcd8080cc91\microsoft.analysisservices.deploymentengine.resources.dll
+ 2008-05-13 11:59:11 140,656 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.AnalysisServices.DeploymentEngine\9.0.242.0__89845dcd8080cc91\Microsoft.AnalysisServices.DeploymentEngine.dll
+ 2008-05-13 11:59:12 161,136 ----a-w C:\WINDOWS\assembly\GAC_MSIL\microsoft.analysisservices.resources\9.0.242.0_de_89845dcd8080cc91\microsoft.analysisservices.resources.dll
+ 2008-05-13 11:59:11 1,217,904 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.AnalysisServices\9.0.242.0__89845dcd8080cc91\Microsoft.AnalysisServices.DLL
+ 2008-05-13 11:59:12 13,168 ----a-w C:\WINDOWS\assembly\GAC_MSIL\microsoft.datawarehouse.interfaces.resources\9.0.242.0_de_89845dcd8080cc91\Microsoft.DataWarehouse.Interfaces.resources.dll
+ 2008-05-13 11:59:11 38,256 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.DataWarehouse.Interfaces\9.0.242.0__89845dcd8080cc91\Microsoft.DataWarehouse.Interfaces.DLL
+ 2008-05-13 12:02:14 80,600 ----a-w C:\WINDOWS\assembly\GAC_MSIL\microsoft.exceptionmessagebox.resources\9.0.242.0_de_89845dcd8080cc91\Microsoft.ExceptionMessageBox.resources.dll
+ 2008-05-13 12:02:13 133,848 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.ExceptionMessageBox\9.0.242.0__89845dcd8080cc91\Microsoft.ExceptionMessageBox.dll
+ 2008-05-13 11:46:01 69,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.MSXML\8.0.0.0__b03f5f7f11d50a3a\microsoft.msxml.dll
+ 2008-05-13 11:58:00 83,312 ----a-w C:\WINDOWS\assembly\GAC_MSIL\microsoft.netenterpriseservers.exceptionmessagebox.resources\9.0.242.0_de_89845dcd8080cc91\Microsoft.NetEnterpriseServers.ExceptionMessageBox.Resources.dll
+ 2008-05-13 11:57:55 136,560 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.NetEnterpriseServers.ExceptionMessageBox\9.0.242.0__89845dcd8080cc91\Microsoft.NetEnterpriseServers.ExceptionMessageBox.dll
+ 2008-05-13 11:59:12 18,288 ----a-w C:\WINDOWS\assembly\GAC_MSIL\microsoft.sqlserver.connectioninfo.resources\9.0.242.0_de_89845dcd8080cc91\Microsoft.SqlServer.ConnectionInfo.Resources.dll
+ 2008-05-13 11:59:10 157,040 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.SqlServer.ConnectionInfo\9.0.242.0__89845dcd8080cc91\Microsoft.SqlServer.ConnectionInfo.dll
+ 2008-05-13 11:57:56 46,448 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.SqlServer.CustomControls\9.0.242.0__89845dcd8080cc91\Microsoft.SqlServer.CustomControls.dll
+ 2008-05-13 11:58:00 20,848 ----a-w C:\WINDOWS\assembly\GAC_MSIL\microsoft.sqlserver.gridcontrol.resources\9.0.242.0_de_89845dcd8080cc91\Microsoft.SqlServer.GridControl.Resources.dll
+ 2008-05-13 11:57:55 202,096 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.SqlServer.GridControl\9.0.242.0__89845dcd8080cc91\Microsoft.SqlServer.GridControl.dll
+ 2008-05-13 11:59:14 16,600 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.SqlServer.Instapi\9.0.242.0__89845dcd8080cc91\Microsoft.SqlServer.InstApi.dll
+ 2008-05-13 11:59:12 15,728 ----a-w C:\WINDOWS\assembly\GAC_MSIL\microsoft.sqlserver.regsvrenum.resources\9.0.242.0_de_89845dcd8080cc91\Microsoft.SqlServer.RegSvrEnum.resources.dll
+ 2008-05-13 11:59:11 71,024 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.SqlServer.RegSvrEnum\9.0.242.0__89845dcd8080cc91\Microsoft.SqlServer.RegSvrEnum.dll
+ 2008-05-13 11:59:35 47,832 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.SqlServer.Replication.BusinessLogicSupport\9.0.242.0__89845dcd8080cc91\Microsoft.SqlServer.Replication.BusinessLogicSupport.dll
+ 2008-05-13 11:59:37 79,216 ----a-w C:\WINDOWS\assembly\GAC_MSIL\microsoft.sqlserver.replication.resources\9.0.242.0_de_89845dcd8080cc91\Microsoft.SqlServer.Replication.Resources.dll
+ 2008-05-13 11:59:12 46,448 ----a-w C:\WINDOWS\assembly\GAC_MSIL\microsoft.sqlserver.rmo.resources\9.0.242.0_de_89845dcd8080cc91\Microsoft.SqlServer.Rmo.Resources.dll
+ 2008-05-13 11:59:11 558,448 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.SqlServer.Rmo\9.0.242.0__89845dcd8080cc91\Microsoft.SqlServer.Rmo.dll
+ 2008-05-13 11:59:12 38,256 ----a-w C:\WINDOWS\assembly\GAC_MSIL\microsoft.sqlserver.servicebrokerenum.resources\9.0.242.0_de_89845dcd8080cc91\Microsoft.SqlServer.ServiceBrokerEnum.Resources.dll
+ 2008-05-13 11:59:10 42,352 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.SqlServer.ServiceBrokerEnum\9.0.242.0__89845dcd8080cc91\Microsoft.SqlServer.ServiceBrokerEnum.dll
+ 2008-05-13 11:58:00 64,216 ----a-w C:\WINDOWS\assembly\GAC_MSIL\microsoft.sqlserver.setup.resources\9.0.242.0_de_89845dcd8080cc91\Microsoft.SqlServer.Setup.Resources.dll
+ 2008-05-13 11:57:56 289,496 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.SqlServer.Setup\9.0.242.0__89845dcd8080cc91\Microsoft.SqlServer.Setup.dll
+ 2008-05-13 11:59:11 75,120 ----a-w C:\WINDOWS\assembly\GAC_MSIL\microsoft.sqlserver.smo.resources\9.0.242.0_de_89845dcd8080cc91\Microsoft.SqlServer.Smo.Resources.dll
+ 2008-05-13 11:59:10 1,598,832 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.SqlServer.Smo\9.0.242.0__89845dcd8080cc91\Microsoft.SqlServer.Smo.dll
+ 2008-05-13 11:59:11 99,696 ----a-w C:\WINDOWS\assembly\GAC_MSIL\microsoft.sqlserver.smoenum.resources\9.0.242.0_de_89845dcd8080cc91\Microsoft.SqlServer.SmoEnum.Resources.dll
+ 2008-05-13 11:59:10 222,576 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.SqlServer.SmoEnum\9.0.242.0__89845dcd8080cc91\Microsoft.SqlServer.SmoEnum.dll
+ 2008-05-13 11:59:12 632,176 ----a-w C:\WINDOWS\assembly\GAC_MSIL\microsoft.sqlserver.sqlenum.resources\9.0.242.0_de_89845dcd8080cc91\Microsoft.SqlServer.SqlEnum.Resources.dll
+ 2008-05-13 11:59:10 906,608 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.SqlServer.SqlEnum\9.0.242.0__89845dcd8080cc91\Microsoft.SqlServer.SqlEnum.dll
+ 2008-05-13 11:59:12 43,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.SqlServer.SqlTDiagM\9.0.242.0__89845dcd8080cc91\Microsoft.SqlServer.SqlTDiagM.dll
+ 2008-05-13 11:59:10 20,184 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.SqlServer.SString\9.0.242.0__89845dcd8080cc91\Microsoft.SqlServer.SString.dll
+ 2008-05-13 11:58:00 349,552 ----a-w C:\WINDOWS\assembly\GAC_MSIL\microsoft.sqlserver.wizardframeworklite.resources\9.0.242.0_de_89845dcd8080cc91\Microsoft.SqlServer.WizardFrameworkLite.resources.dll
+ 2008-05-13 11:57:55 595,312 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.SqlServer.WizardFrameworkLite\9.0.242.0__89845dcd8080cc91\Microsoft.SqlServer.WizardFrameworkLite.dll
+ 2008-05-13 11:59:12 13,680 ----a-w C:\WINDOWS\assembly\GAC_MSIL\microsoft.sqlserver.wmienum.resources\9.0.242.0_de_89845dcd8080cc91\Microsoft.SqlServer.WmiEnum.Resources.dll
+ 2008-05-13 11:59:10 46,448 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.SqlServer.WmiEnum\9.0.242.0__89845dcd8080cc91\Microsoft.SqlServer.WmiEnum.dll
+ 2008-05-13 11:50:17 38,256 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Synchronization.Data.resources\1.0.0.0_de_89845dcd8080cc91\Microsoft.Synchronization.Data.resources.dll
+ 2008-05-13 11:50:17 99,696 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Synchronization.Data.Server\1.0.0.0__89845dcd8080cc91\Microsoft.Synchronization.Data.Server.dll
+ 2008-05-13 11:50:18 91,216 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Synchronization.Data.SqlServerCe\3.5.0.0__89845dcd8080cc91\Microsoft.Synchronization.Data.SqlServerCe.dll
+ 2008-05-13 11:50:17 111,984 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Synchronization.Data\1.0.0.0__89845dcd8080cc91\Microsoft.Synchronization.Data.dll
+ 2008-05-13 11:46:27 6,144 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.PowerPacks.Vs.resources\9.0.0.0_de_b03f5f7f11d50a3a\Microsoft.VisualBasic.PowerPacks.Vs.resources.dll
+ 2008-05-13 11:46:27 73,728 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.PowerPacks.Vs\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.PowerPacks.Vs.dll
+ 2008-05-13 11:46:30 4,096 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.PowerPacks.VsPackage.resources\9.0.0.0_de_b03f5f7f11d50a3a\Microsoft.VisualBasic.PowerPacks.VsPackage.resources.dll
+ 2008-05-13 11:46:29 8,704 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.PowerPacks.VsPackage\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.PowerPacks.VsPackage.dll
+ 2008-05-13 11:46:03 61,440 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.CommonIDE.resources\9.0.0.0_de_b03f5f7f11d50a3a\Microsoft.VisualStudio.CommonIDE.resources.dll
+ 2008-05-13 11:46:03 671,744 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.CommonIDE\9.0.0.0__b03f5f7f11d50a3a\microsoft.visualstudio.commonide.dll
+ 2008-05-13 11:46:03 8,192 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Configuration.resources\9.0.0.0_de_b03f5f7f11d50a3a\Microsoft.VisualStudio.Configuration.Resources.dll
+ 2008-05-13 11:46:03 106,496 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Configuration\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Configuration.dll
+ 2008-05-13 11:47:21 4,096 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Data.Core.resources\9.0.0.0_de_b03f5f7f11d50a3a\Microsoft.VisualStudio.Data.Core.Resources.dll
+ 2008-05-13 11:47:21 13,824 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Data.Core\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Data.Core.dll
+ 2008-05-13 11:47:21 11,776 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Data.Framework.resources\9.0.0.0_de_b03f5f7f11d50a3a\Microsoft.VisualStudio.Data.Framework.Resources.dll
+ 2008-05-13 11:47:21 172,032 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Data.Framework\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Data.Framework.dll
+ 2008-05-13 11:47:22 94,208 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Data.Services.resources\9.0.0.0_de_b03f5f7f11d50a3a\Microsoft.VisualStudio.Data.Services.Resources.dll
+ 2008-05-13 11:47:22 200,704 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Data.Services\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Data.Services.dll
+ 2008-05-13 11:45:53 7,680 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Debugger.Runtime\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Debugger.Runtime.dll
+ 2008-05-13 11:46:05 49,152 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.DebuggerVisualizers\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.DebuggerVisualizers.dll
+ 2008-05-13 11:46:05 15,360 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Design.resources\9.0.0.0_de_b03f5f7f11d50a3a\Microsoft.VisualStudio.Design.Resources.dll
+ 2008-05-13 11:46:05 557,056 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Design\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Design.dll
+ 2008-05-13 11:46:06 1,028,096 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Editors.resources\9.0.0.0_de_b03f5f7f11d50a3a\Microsoft.VisualStudio.Editors.Resources.dll
+ 2008-05-13 11:46:06 2,711,552 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Editors\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Editors.dll
+ 2008-05-13 11:46:07 17,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.HostingProcess.Utilities.Sync\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.HostingProcess.Utilities.Sync.dll
+ 2008-05-13 11:46:08 57,344 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.HostingProcess.Utilities\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.HostingProcess.Utilities.dll
+ 2008-05-13 11:46:08 19,456 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.ManagedInterfaces.9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.ManagedInterfaces.9.0.dll
+ 2008-05-13 11:46:08 15,872 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.ManagedInterfaces.WCF\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.ManagedInterfaces.WCF.dll
+ 2008-05-13 11:46:08 32,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.ManagedInterfaces\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.ManagedInterfaces.dll
+ 2008-05-13 11:45:43 69,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Modeling.Sdk.Diagrams.resources\9.0.0.0_de_b03f5f7f11d50a3a\Microsoft.VisualStudio.Modeling.Sdk.Diagrams.Resources.dll
+ 2008-05-13 11:45:43 827,392 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Modeling.Sdk.Diagrams\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Modeling.Sdk.Diagrams.dll
+ 2008-05-13 11:45:44 77,824 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Modeling.Sdk.resources\9.0.0.0_de_b03f5f7f11d50a3a\Microsoft.VisualStudio.Modeling.Sdk.Resources.dll
+ 2008-05-13 11:45:44 73,728 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Modeling.Sdk.Shell.resources\9.0.0.0_de_b03f5f7f11d50a3a\Microsoft.VisualStudio.Modeling.Sdk.Shell.Resources.dll
+ 2008-05-13 11:45:44 307,200 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Modeling.Sdk.Shell\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Modeling.Sdk.Shell.dll
+ 2008-05-13 11:45:43 430,080 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Modeling.Sdk\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Modeling.Sdk.dll
+ 2008-05-13 11:46:09 5,120 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Package.LanguageService.9.0.resources\3.5.0.0_de_b03f5f7f11d50a3a\Microsoft.VisualStudio.Package.LanguageService.9.0.resources.dll
+ 2008-05-13 11:46:09 348,160 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Package.LanguageService.9.0\3.5.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Package.LanguageService.9.0.dll
+ 2008-05-13 11:46:09 5,120 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Package.LanguageService.resources\2.0.0.0_de_b03f5f7f11d50a3a\Microsoft.VisualStudio.Package.LanguageService.resources.dll
+ 2008-05-13 11:46:09 344,064 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Package.LanguageService\2.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Package.LanguageService.dll
+ 2008-05-13 11:46:09 4,096 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.ProjectAggregator\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.ProjectAggregator.dll
+ 2008-05-13 11:46:09 405,504 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Publish.resources\9.0.0.0_de_b03f5f7f11d50a3a\Microsoft.VisualStudio.Publish.Resources.dll
+ 2008-05-13 11:46:09 790,528 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Publish\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Publish.dll
+ 2008-05-13 11:46:09 8,192 ----a-w C:\WINDOWS\assembly\GAC_MSIL\microsoft.visualstudio.resources\9.0.0.0_de_b03f5f7f11d50a3a\microsoft.visualstudio.resources.dll
+ 2008-05-13 11:46:09 10,752 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Shell.9.0.resources\2.0.0.0_de_b03f5f7f11d50a3a\Microsoft.VisualStudio.Shell.9.0.resources.dll
+ 2008-05-13 11:46:09 356,352 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Shell.9.0\2.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Shell.9.0.dll
+ 2008-05-13 11:46:09 24,576 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Shell.Design.resources\9.0.0.0_de_b03f5f7f11d50a3a\Microsoft.VisualStudio.Shell.Design.Resources.dll
+ 2008-05-13 11:46:09 184,320 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Shell.Design\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Shell.Design.dll
+ 2008-05-13 11:46:10 10,752 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Shell.resources\2.0.0.0_de_b03f5f7f11d50a3a\Microsoft.VisualStudio.Shell.Resources.dll
+ 2008-05-13 11:46:09 368,640 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Shell\2.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Shell.dll
+ 2008-05-13 11:46:10 15,872 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.TemplateWizardInterface\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.TemplateWizardInterface.dll
+ 2008-05-13 11:45:44 12,800 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.TextTemplating.resources\9.0.0.0_de_b03f5f7f11d50a3a\Microsoft.VisualStudio.TextTemplating.Resources.dll
+ 2008-05-13 11:45:45 32,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.TextTemplating.VSHost.resources\9.0.0.0_de_b03f5f7f11d50a3a\Microsoft.VisualStudio.TextTemplating.VSHost.Resources.dll
+ 2008-05-13 11:45:44 98,304 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.TextTemplating.VSHost\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.TextTemplating.VSHost.dll
+ 2008-05-13 11:45:44 86,016 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.TextTemplating\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.TextTemplating.dll
+ 2008-05-13 11:46:10 16,384 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.VSContentInstaller\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.VSContentInstaller.dll
+ 2008-05-13 11:46:11 16,384 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.WCFReference.Interop\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.WCFReference.Interop.dll
+ 2008-05-13 11:46:12 86,016 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Windows.Forms.resources\9.0.0.0_de_b03f5f7f11d50a3a\Microsoft.VisualStudio.Windows.Forms.Resources.dll
+ 2008-05-13 11:46:11 552,960 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Windows.Forms\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Windows.Forms.dll
+ 2008-05-13 11:47:08 19,456 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.WizardFramework.resources\9.0.0.0_de_b03f5f7f11d50a3a\Microsoft.VisualStudio.WizardFramework.Resources.Dll
+ 2008-05-13 11:47:25 73,728 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.WizardFramework\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.WizardFramework.Dll
+ 2008-05-13 11:47:26 69,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Xaml.LanguageService.resources\9.0.0.0_de_b03f5f7f11d50a3a\Microsoft.VisualStudio.Xaml.LanguageService.resources.dll
+ 2008-05-13 11:47:26 188,416 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Xaml.LanguageService\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Xaml.LanguageService.dll
+ 2008-05-13 11:47:25 131,072 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Xaml.resources\9.0.0.0_de_b03f5f7f11d50a3a\Microsoft.VisualStudio.Xaml.resources.dll
+ 2008-05-13 11:47:25 1,191,936 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Xaml\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Xaml.dll
+ 2008-05-13 11:46:14 12,288 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.XmlEditor\3.5.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.XmlEditor.dll
+ 2008-05-13 11:46:12 15,360 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Zip.9.0.resources\9.0.0.0_de_b03f5f7f11d50a3a\Microsoft.VisualStudio.Zip.9.0.resources.dll
+ 2008-05-13 11:46:12 65,536 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Zip.9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Zip.9.0.dll
+ 2008-05-13 11:46:13 15,360 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Zip.resources\8.0.0.0_de_b03f5f7f11d50a3a\Microsoft.VisualStudio.Zip.resources.dll
+ 2008-05-13 11:46:13 61,440 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Zip\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Zip.dll
+ 2008-05-13 11:46:05 274,432 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio\9.0.0.0__b03f5f7f11d50a3a\microsoft.visualstudio.dll
+ 2008-05-13 11:47:12 1,052,672 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VSDesigner.resources\9.0.0.0_de_b03f5f7f11d50a3a\Microsoft.VSDesigner.Resources.DLL
+ 2008-05-13 11:46:13 4,386,816 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VSDesigner\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VSDesigner.dll
+ 2008-05-13 11:47:26 184,320 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Windows.Design.Developer.resources\3.5.0.0_de_b03f5f7f11d50a3a\Microsoft.Windows.Design.Developer.resources.dll
+ 2008-05-13 11:47:26 962,560 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Windows.Design.Developer\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Windows.Design.Developer.dll
+ 2008-05-13 11:47:26 6,144 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Windows.Design.Extensibility.resources\3.5.0.0_de_b03f5f7f11d50a3a\Microsoft.Windows.Design.Extensibility.resources.dll
+ 2008-05-13 11:47:26 110,592 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Windows.Design.Extensibility\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Windows.Design.Extensibility.dll
+ 2008-05-13 11:47:30 3,584 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Windows.Design.Host.resources\3.5.0.0_de_b03f5f7f11d50a3a\Microsoft.Windows.Design.Host.resources.dll
+ 2008-05-13 11:47:30 28,672 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Windows.Design.Host\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Windows.Design.Host.dll
+ 2008-05-13 11:47:30 11,776 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Windows.Design.Interaction.resources\3.5.0.0_de_b03f5f7f11d50a3a\Microsoft.Windows.Design.Interaction.resources.dll
+ 2008-05-13 11:47:30 159,744 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Windows.Design.Interaction\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Windows.Design.Interaction.dll
+ 2008-05-13 11:47:33 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Windows.Design.Markup.resources\3.5.0.0_de_b03f5f7f11d50a3a\Microsoft.Windows.Design.Markup.resources.dll
+ 2008-05-13 11:47:34 737,280 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Windows.Design.Markup\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Windows.Design.Markup.dll
+ 2008-05-13 11:47:26 7,168 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Windows.Design.resources\3.5.0.0_de_b03f5f7f11d50a3a\Microsoft.Windows.Design.resources.dll
+ 2008-05-13 11:47:26 106,496 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Windows.Design\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Windows.Design.dll
+ 2008-05-13 11:59:12 84,696 ----a-w C:\WINDOWS\assembly\GAC_MSIL\MSClusterLib\1.0.0.0__89845dcd8080cc91\MSClusterLib.dll
+ 2008-05-13 11:46:15 839,680 ----a-w C:\WINDOWS\assembly\GAC_MSIL\mscorcfg.resources\3.5.0.0_de_b03f5f7f11d50a3a\mscorcfg.resources.dll
+ 2008-05-13 11:46:16 40,960 ----a-w C:\WINDOWS\assembly\GAC_MSIL\msddslmp\8.0.0.0__b03f5f7f11d50a3a\msddslmp.dll
+ 2008-05-13 11:46:15 139,264 ----a-w C:\WINDOWS\assembly\GAC_MSIL\msddsp\9.0.0.0__b03f5f7f11d50a3a\msddsp.dll
+ 2008-05-13 11:50:18 42,064 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Data.SqlServerCe.resources\3.5.0.0_de_89845dcd8080cc91\System.Data.SqlServerCe.resources.dll
+ 2008-05-13 11:50:18 263,248 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Data.SqlServerCe\3.5.0.0__89845dcd8080cc91\System.Data.SqlServerCe.dll
+ 2008-05-13 15:46:56 589,824 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\EnvDTE\8650892be322380fef81e7671b3863c7\EnvDTE.ni.dll
+ 2008-05-13 15:47:11 294,912 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\EnvDTE80\f6a0413820cfe5b04051b079dc13acd3\EnvDTE80.ni.dll
+ 2008-05-13 15:47:12 45,056 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\EnvDTE90\4ef61b4662062db98febc5026bcb27db\EnvDTE90.ni.dll
+ 2008-05-13 15:47:15 19,968 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Internal.#\d46c1a7621e75f35ca8e52f1d99b4885\Microsoft.Internal.VisualStudio.Shell.Interop.9.0.ni.dll
+ 2008-05-13 12:07:18 94,208 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.NetEnterp#\518dafa284b0584775a163931fc63497\microsoft.netenterpriseservers.exceptionmessagebox.resources.ni.dll
+ 2008-05-13 12:07:17 249,856 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.NetEnterp#\d62b526d1272eeaecfd853c43e71aa4f\Microsoft.NetEnterpriseServers.ExceptionMessageBox.ni.dll
+ 2008-05-13 12:07:19 90,112 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\12e799894c1489f12ca14adcbbb211a1\Microsoft.SqlServer.CustomControls.ni.dll
+ 2008-05-13 12:07:28 360,448 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\681a5cee1bbf58e66a8049939835eee2\microsoft.sqlserver.wizardframeworklite.resources.ni.dll
+ 2008-05-13 12:07:21 561,152 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\84d53b2db1d75c1e776fcf7b77493836\Microsoft.SqlServer.GridControl.ni.dll
+ 2008-05-13 12:07:27 1,028,096 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\bef302ed13baa690c3333ffe54a14f1d\Microsoft.SqlServer.WizardFrameworkLite.ni.dll
+ 2008-05-13 12:07:22 20,992 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\cc11692294a5af2ff84880c48e787718\microsoft.sqlserver.gridcontrol.resources.ni.dll
+ 2008-05-13 12:07:25 376,832 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\d7b4b5139c4f2ba122b5c92493806fae\Microsoft.SqlServer.Setup.ni.dll
+ 2008-05-13 12:07:26 77,824 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\f18eb2de8518f2bac489b5d9e7bce375\microsoft.sqlserver.setup.resources.ni.dll
+ 2008-05-13 15:47:30 1,601,536 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\0925ca5d309d9bf931a0797c4dcf4119\Microsoft.VisualStudio.Modeling.Sdk.ni.dll
+ 2008-05-13 15:47:47 901,120 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\09fff63fc30e6f0777d755700193c229\Microsoft.VisualStudio.Shell.ni.dll
+ 2008-05-13 15:47:23 1,982,464 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\1e813f823db2682c27f52c57dd36ee10\Microsoft.VisualStudio.CommonIDE.ni.dll
+ 2008-05-13 15:47:53 184,320 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\217108b36750d84f0d1608ef0a7a5e09\Microsoft.VisualStudio.WizardFramework.ni.dll
+ 2008-05-13 15:47:39 2,527,232 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\24764e3c82e050d6da0e8dde625e3683\Microsoft.VisualStudio.Modeling.Sdk.Diagrams.ni.dll
+ 2008-05-13 15:47:55 626,688 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\2b92acaaad0adcaec5cd5edac950c16e\Microsoft.VisualStudio.Xaml.LanguageService.ni.dll
+ 2008-05-13 15:47:25 245,760 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\3712627e5b7d9400e3734fc816cb9b60\Microsoft.VisualStudio.Configuration.ni.dll
+ 2008-05-13 15:47:45 315,392 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\46dc1ade48ce95e87fdd6f7697fa4af1\Microsoft.VisualStudio.OLE.Interop.ni.dll
+ 2008-05-13 15:47:51 192,512 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\484d6bbbd9bda9bae2ee9576f85ec576\Microsoft.VisualStudio.TextTemplating.ni.dll
+ 2008-05-13 15:47:50 380,928 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\4f9a6decb1ddfe8fce793dca691f9728\Microsoft.VisualStudio.Shell.Interop.8.0.ni.dll
+ 2008-05-13 15:47:33 1,339,392 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\612393584817adbc372d6739b11205fe\Microsoft.VisualStudio.Modeling.Sdk.Diagrams.GraphObject.ni.dll
+ 2008-05-13 15:47:49 569,344 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\6166e3fc3f2c2c05e46db41cd3276cd6\Microsoft.VisualStudio.Shell.Design.ni.dll
+ 2008-05-13 15:47:26 23,040 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\8acff37d1532e69ddd3d18c091f52541\Microsoft.VisualStudio.Designer.Interfaces.ni.dll
+ 2008-05-13 15:47:42 942,080 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\8b1110e7e4135c16c80b28c20c936c21\Microsoft.VisualStudio.Shell.9.0.ni.dll
+ 2008-05-13 15:47:52 229,376 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\b92fd07d3a9d63a26d08f5ac9914dd9d\Microsoft.VisualStudio.TextTemplating.VSHost.ni.dll
+ 2008-05-13 15:47:56 90,112 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\bf6b5b075e5fa4f3280d93f0cb38ff09\Microsoft.VisualStudio.Xaml.LanguageService.resources.ni.dll
+ 2008-05-13 15:47:50 90,112 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\f0ec6afa0c80c2626409b1c0a2f77cb4\Microsoft.VisualStudio.Shell.Interop.9.0.ni.dll
+ 2008-05-13 15:47:44 839,680 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\fb017003a5d31f7d47b0f8c60937ce91\Microsoft.VisualStudio.Modeling.Sdk.Shell.ni.dll
+ 2008-05-13 15:48:09 15,872 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\0801b3b9e8a26c274d7d545218853156\Microsoft.Windows.Design.Extensibility.resources.ni.dll
+ 2008-05-13 15:48:20 3,452,928 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\0e681bd2964ebd39a048c8a20446b0db\Microsoft.Windows.Design.Markup.ni.dll
+ 2008-05-13 15:48:21 35,328 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\143e7d6fe37d01480bcd5d53b4ff4079\Microsoft.Windows.Design.Markup.resources.ni.dll
+ 2008-05-13 15:48:09 49,664 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\18d33bbdce554c88606fa7d9afbce43f\Microsoft.Windows.Design.Host.ni.dll
+ 2008-05-13 15:47:59 622,592 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\320940de65dad320e2da95f9fe9331d6\Microsoft.Windows.Design.ni.dll
+ 2008-05-13 15:48:12 782,336 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\64c0cb583e717d42d95a2a6ffab6d414\Microsoft.Windows.Design.Interaction.ni.dll
+ 2008-05-13 15:48:07 204,800 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\832b94349dce497f288d03c31433b6d1\Microsoft.Windows.Design.Developer.resources.ni.dll
+ 2008-05-13 15:48:21 17,408 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\905f0041af2ea81211544c23c82969a6\Microsoft.Windows.Design.resources.ni.dll
+ 2008-05-13 15:48:13 21,504 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\9a66d25312952732c25830bbf4304650\Microsoft.Windows.Design.Interaction.resources.ni.dll
+ 2008-05-13 15:48:10 13,312 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\a5dd89f93a45cdb15c1bf52d509a6f04\Microsoft.Windows.Design.Host.resources.ni.dll
+ 2008-05-13 15:48:06 3,244,032 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\b7e7874a8c180abd29b3e8b5db44d9f9\Microsoft.Windows.Design.Developer.ni.dll
+ 2008-05-13 15:48:08 487,424 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\dfb2e866073e605749a709096f094e87\Microsoft.Windows.Design.Extensibility.ni.dll
+ 2008-05-13 15:47:03 94,208 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\6cf76ae9aa4d3145e9e50e4da23e9352\WindowsFormsIntegration.Package.ni.dll
+ 2008-05-13 15:47:01 212,992 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\af6dd48885e9e8de5f8770afb51e191c\WindowsFormsIntegration.Design.ni.dll
- 2008-05-11 10:39:47 2,048 --s-a-w C:\WINDOWS\bootstat.dat
+ 2008-06-11 21:21:15 2,048 --s-a-w C:\WINDOWS\bootstat.dat
- 2000-08-31 06:00:00 73,728 ----a-w C:\WINDOWS\fdsv.exe
+ 2000-08-31 06:00:00 89,504 ----a-w C:\WINDOWS\fdsv.exe
+ 2007-08-13 16:39:20 71,680 -c----w C:\WINDOWS\ie8\admparse.dll
+ 2008-03-01 12:53:51 124,928 -c----w C:\WINDOWS\ie8\advpack.dll
+ 2007-08-13 16:42:54 17,408 -c----w C:\WINDOWS\ie8\corpol.dll
+ 2008-03-01 12:53:51 347,136 -c----w C:\WINDOWS\ie8\dxtmsft.dll
+ 2008-03-01 12:53:52 214,528 -c----w C:\WINDOWS\ie8\dxtrans.dll
+ 2007-08-13 16:18:02 60,416 -c----w C:\WINDOWS\ie8\hmmapi.dll
+ 2008-03-01 12:53:52 63,488 -c----w C:\WINDOWS\ie8\icardie.dll
+ 2008-02-29 08:54:43 70,656 -c----w C:\WINDOWS\ie8\ie4uinit.exe
+ 2008-03-01 12:53:52 153,088 -c----w C:\WINDOWS\ie8\ieakeng.dll
+ 2008-03-01 12:53:52 230,400 -c----w C:\WINDOWS\ie8\ieaksie.dll
+ 2008-02-15 05:44:25 161,792 -c----w C:\WINDOWS\ie8\ieakui.dll
+ 2007-04-17 09:32:38 2,455,488 -c----w C:\WINDOWS\ie8\ieapfltr.dat
+ 2008-03-01 12:53:52 383,488 -c----w C:\WINDOWS\ie8\ieapfltr.dll
+ 2008-03-01 12:53:53 384,512 -c----w C:\WINDOWS\ie8\iedkcs32.dll
+ 2007-08-13 16:44:02 69,120 -c----w C:\WINDOWS\ie8\iedw.exe
+ 2007-08-13 16:45:18 78,336 -c----w C:\WINDOWS\ie8\ieencode.dll
+ 2008-03-01 12:53:56 6,066,176 -c----w C:\WINDOWS\ie8\ieframe.dll
+ 2007-08-13 16:54:10 191,488 -c----w C:\WINDOWS\ie8\iepeers.dll
+ 2007-08-13 16:54:10 287,744 -c----w C:\WINDOWS\ie8\ieproxy.dll
+ 2008-03-01 12:53:57 44,544 -c----w C:\WINDOWS\ie8\iernonce.dll
+ 2008-03-01 12:53:57 267,776 -c----w C:\WINDOWS\ie8\iertutil.dll
+ 2007-08-13 16:39:12 55,296 -c----w C:\WINDOWS\ie8\iesetup.dll
+ 2007-08-13 16:54:10 180,736 -c----w C:\WINDOWS\ie8\ieui.dll
+ 2008-02-29 08:55:08 625,664 -c----w C:\WINDOWS\ie8\iexplore.exe
+ 2007-08-13 16:36:06 36,352 -c----w C:\WINDOWS\ie8\imgutil.dll
+ 2007-08-13 16:39:02 92,672 -c----w C:\WINDOWS\ie8\inseng.dll
+ 2007-08-13 16:38:04 491,520 -c----w C:\WINDOWS\ie8\jscript.dll
+ 2008-03-01 12:53:58 27,648 -c----w C:\WINDOWS\ie8\jsproxy.dll
+ 2007-08-13 16:44:18 40,960 -c----w C:\WINDOWS\ie8\licmgr10.dll
+ 2008-03-01 12:53:59 459,264 -c----w C:\WINDOWS\ie8\msfeeds.dll
+ 2008-03-01 12:53:59 52,224 -c----w C:\WINDOWS\ie8\msfeedsbs.dll
+ 2007-08-13 16:36:40 12,288 -c----w C:\WINDOWS\ie8\msfeedssync.exe
+ 2007-08-13 16:32:30 45,568 -c----w C:\WINDOWS\ie8\mshta.exe
+ 2008-03-01 16:24:04 3,591,680 -c----w C:\WINDOWS\ie8\mshtml.dll
+ 2008-03-01 12:54:02 478,208 -c----w C:\WINDOWS\ie8\mshtmled.dll
+ 2007-08-13 16:01:12 48,128 -c----w C:\WINDOWS\ie8\mshtmler.dll
+ 2007-08-13 16:54:10 156,160 -c----w C:\WINDOWS\ie8\msls31.dll
+ 2008-03-01 12:54:03 193,024 -c----w C:\WINDOWS\ie8\msrating.dll
+ 2008-03-01 12:54:03 671,232 -c----w C:\WINDOWS\ie8\mstime.dll
+ 2008-03-01 12:54:03 102,912 -c----w C:\WINDOWS\ie8\occache.dll
+ 2008-03-01 12:54:04 44,544 -c----w C:\WINDOWS\ie8\pngfilt.dll
+ 2006-09-06 15:42:32 217,312 -c----w C:\WINDOWS\ie8\spuninst.exe
+ 2008-03-20 22:11:06 51,784 -c----w C:\WINDOWS\ie8\spuninst\iecustom.dll
+ 2008-01-11 10:35:12 217,312 -c----w C:\WINDOWS\ie8\spuninst\spuninst.exe
+ 2008-01-11 10:35:14 377,568 -c----w C:\WINDOWS\ie8\spuninst\updspapi.dll
+ 2008-03-01 12:54:04 105,984 -c----w C:\WINDOWS\ie8\url.dll
+ 2008-03-01 12:54:04 1,159,680 -c----w C:\WINDOWS\ie8\urlmon.dll
+ 2007-08-13 16:54:10 413,696 -c----w C:\WINDOWS\ie8\vbscript.dll
+ 2007-08-13 16:54:10 765,952 -c----w C:\WINDOWS\ie8\vgx.dll
+ 2008-03-01 12:54:05 233,472 -c----w C:\WINDOWS\ie8\webcheck.dll
+ 2007-08-13 16:45:16 206,336 -c----w C:\WINDOWS\ie8\winfxdocobj.exe
+ 2008-03-01 12:54:05 826,368 -c----w C:\WINDOWS\ie8\wininet.dll
+ 2008-04-14 05:51:18 175,104 ----a-w C:\WINDOWS\ime\chsime\applets\PINTLCSA.DLL
+ 2008-04-14 05:51:18 53,760 ----a-w C:\WINDOWS\ime\chsime\applets\PINTLCSD.DLL
+ 2008-04-14 05:50:20 97,792 ----a-w C:\WINDOWS\ime\CHTIME\Applets\CHTMBX.DLL
+ 2008-04-14 05:50:20 56,320 ----a-w C:\WINDOWS\ime\CHTIME\Applets\CHTSKDIC.DLL
+ 2008-04-14 05:50:20 173,568 ----a-w C:\WINDOWS\ime\CHTIME\Applets\CHTSKF.DLL
+ 2004-08-04 12:00:00 10,096,640 ----a-w C:\WINDOWS\ime\CHTIME\Applets\HWXCHT.DLL
+ 2008-04-14 05:50:42 13,463,552 ----a-w C:\WINDOWS\ime\imjp8_1\applets\hwxjpn.dll
+ 2004-08-04 12:00:00 471,102 ----a-w C:\WINDOWS\ime\imjp8_1\applets\imskdic.dll
+ 2008-04-14 05:50:46 315,455 ----a-w C:\WINDOWS\ime\imjp8_1\applets\imskf.dll
+ 2004-08-04 12:00:00 229,439 ----a-w C:\WINDOWS\ime\imjp8_1\applets\multibox.dll
+ 2004-08-04 12:00:00 143,422 ----a-w C:\WINDOWS\ime\imjp8_1\applets\softkey.dll
+ 2008-04-14 05:51:40 426,041 ----a-w C:\WINDOWS\ime\imjp8_1\applets\voicepad.dll
+ 2008-04-14 05:51:40 86,073 ----a-w C:\WINDOWS\ime\imjp8_1\applets\voicesub.dll
+ 2008-04-13 20:13:34 57,399 ----a-w C:\WINDOWS\ime\imjp8_1\cplexe.exe
+ 2008-04-14 05:50:46 368,696 ----a-w C:\WINDOWS\ime\imjp8_1\imjpcic.dll
+ 2008-04-14 05:50:46 716,856 ----a-w C:\WINDOWS\ime\imjp8_1\imjpcus.dll
+ 2004-08-04 12:00:00 57,398 ----a-w C:\WINDOWS\ime\imjp8_1\imjpdadm.exe
+ 2008-04-14 05:50:46 81,976 ----a-w C:\WINDOWS\ime\imjp8_1\imjpdct.dll
+ 2008-04-13 20:13:46 307,257 ----a-w C:\WINDOWS\ime\imjp8_1\imjpdct.exe
+ 2008-04-13 20:13:48 155,705 ----a-w C:\WINDOWS\ime\imjp8_1\imjpdsvr.exe
+ 2008-04-13 20:13:50 196,665 ----a-w C:\WINDOWS\ime\imjp8_1\imjpinst.exe
+ 2008-04-13 20:13:52 208,952 ----a-w C:\WINDOWS\ime\imjp8_1\imjpmig.exe
+ 2008-04-13 20:14:00 233,527 ----a-w C:\WINDOWS\ime\imjp8_1\imjprw.exe
+ 2004-08-04 12:00:00 45,109 ----a-w C:\WINDOWS\ime\imjp8_1\imjpuex.exe
+ 2008-04-13 20:14:02 262,200 ----a-w C:\WINDOWS\ime\imjp8_1\imjputy.exe
+ 2008-04-14 05:50:46 274,489 ----a-w C:\WINDOWS\ime\imjp8_1\imjputyc.dll
+ 2004-08-04 12:00:00 10,129,408 ----a-w C:\WINDOWS\ime\imkr6_1\applets\hwxkor.dll
+ 2008-04-14 05:50:44 86,016 ----a-w C:\WINDOWS\ime\imkr6_1\applets\imekrmbx.dll
+ 2004-08-04 12:00:00 36,864 ----a-w C:\WINDOWS\ime\imkr6_1\dicts\hanjadic.dll
+ 2008-04-14 05:50:44 106,496 ----a-w C:\WINDOWS\ime\imkr6_1\imekrcic.dll
+ 2004-08-04 12:00:00 44,032 ----a-w C:\WINDOWS\ime\imkr6_1\imekrmig.exe
+ 2004-08-04 12:00:00 59,904 ----a-w C:\WINDOWS\ime\imkr6_1\imkrinst.exe
+ 2004-08-04 12:00:00 102,463 ----a-w C:\WINDOWS\ime\shared\imepadsm.dll
+ 2004-08-04 12:00:00 311,359 ----a-w C:\WINDOWS\ime\shared\imepadsv.exe
+ 2008-04-14 05:50:46 102,456 ----a-w C:\WINDOWS\ime\shared\imlang.dll
+ 2008-04-14 05:51:18 15,872 ----a-w C:\WINDOWS\ime\shared\res\PADRS404.DLL
+ 2004-08-04 12:00:00 36,927 ----a-w C:\WINDOWS\ime\shared\res\padrs411.dll
+ 2004-08-04 12:00:00 14,336 ----a-w C:\WINDOWS\ime\shared\res\padrs412.dll
+ 2008-04-14 05:51:18 15,360 ----a-w C:\WINDOWS\ime\shared\res\padrs804.dll
+ 2008-05-11 23:01:29 2,998 ----a-r C:\WINDOWS\Installer\{0556F885-2415-4666-B53E-33727E46AEA1}\ARPPRODUCTICON.exe
+ 2008-06-07 22:18:41 23,558 ----a-r C:\WINDOWS\Installer\{5A9FE525-8B8F-4701-A937-7F6745A4E9C7}\_26e91eb.exe
+ 2008-05-30 19:33:09 32,768 ----a-r C:\WINDOWS\Installer\{716E0306-8318-4364-8B8F-0CC4E9376BAC}\icon.exe
+ 2008-05-12 19:22:17 23,558 ----a-r C:\WINDOWS\Installer\{9B34CAC6-738F-4A20-B428-A115C3E3474C}\_18be6784.exe
+ 2008-05-12 19:22:17 23,558 ----a-r C:\WINDOWS\Installer\{9B34CAC6-738F-4A20-B428-A115C3E3474C}\_294823.exe
+ 2008-05-12 19:22:17 23,558 ----a-r C:\WINDOWS\Installer\{9B34CAC6-738F-4A20-B428-A115C3E3474C}\_2cd672ae.exe
+ 2008-05-12 19:22:17 23,558 ----a-r C:\WINDOWS\Installer\{9B34CAC6-738F-4A20-B428-A115C3E3474C}\_4ae13d6c.exe
+ 2008-05-12 19:22:17 23,558 ----a-r C:\WINDOWS\Installer\{9B34CAC6-738F-4A20-B428-A115C3E3474C}\_69525f90.exe
+ 2007-04-02 21:56:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt0404.dll
+ 2007-04-02 21:56:02 19,456 ----a-w C:\WINDOWS\msagent\intl\agt0411.dll
+ 2007-04-02 21:56:02 19,456 ----a-w C:\WINDOWS\msagent\intl\agt0412.dll
+ 2007-04-02 21:56:04 19,456 ----a-w C:\WINDOWS\msagent\intl\agt0804.dll
- 2007-08-13 16:39:20 71,680 ----a-w C:\WINDOWS\system32\admparse.dll
+ 2008-03-03 18:51:50 69,120 ----a-w C:\WINDOWS\system32\admparse.dll
+ 2008-03-19 17:23:20 114,688 ----a-w C:\WINDOWS\system32\Adobe\Director\np32dsw.dll
+ 2008-03-19 17:36:22 202,168 ----a-w C:\WINDOWS\system32\Adobe\Director\swdir.dll
+ 2008-03-19 17:36:40 67,000 ----a-w C:\WINDOWS\system32\Adobe\Director\SwDnld.exe
+ 2008-03-19 17:24:02 487,424 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\Control.dll
+ 2008-03-19 16:46:26 1,798,144 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\dirapi.dll
+ 2008-03-19 17:24:04 9,216 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\DynaPlayer.dll
+ 2008-03-19 16:36:14 754,688 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\gi.dll
+ 2008-03-19 16:36:16 1,145,896 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\gt.exe
+ 2008-03-19 16:36:14 52,288 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\gtapi.dll
+ 2008-03-19 16:42:42 892,928 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\iml32.dll
+ 2008-03-19 17:22:34 249,856 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\Plugin.dll
+ 2008-03-19 17:25:36 442,368 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\Proj.dll
+ 2008-03-19 17:36:06 439,736 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\SwHelper_1100429.exe
+ 2008-03-19 17:26:20 110,592 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\SwInit.exe
+ 2008-03-19 17:22:22 94,208 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\SwMenu.dll
+ 2008-03-19 16:36:14 50,808 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\SYMCCHECKER.DLL
+ 1999-06-25 08:55:30 149,504 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\UNWISE.EXE
- 2008-03-01 12:53:51 124,928 ----a-w C:\WINDOWS\system32\advpack.dll
+ 2008-03-03 18:51:42 126,464 ----a-w C:\WINDOWS\system32\advpack.dll
+ 2008-04-14 05:52:08 218,112 ----a-w C:\WINDOWS\system32\c_g18030.dll
+ 2004-08-04 12:00:00 6,656 ----a-w C:\WINDOWS\system32\c_is2022.dll
+ 2004-08-04 12:00:00 1,677,824 ----a-w C:\WINDOWS\system32\chsbrkr.dll
+ 2004-08-04 12:00:00 838,144 ----a-w C:\WINDOWS\system32\chtbrkr.dll
+ 2005-03-19 00:19:58 2,337,488 ----a-w C:\WINDOWS\system32\d3dx9_25.dll
- 2007-08-13 16:39:20 71,680 -c----w C:\WINDOWS\system32\dllcache\admparse.dll
+ 2008-03-03 18:51:50 69,120 -c--a-w C:\WINDOWS\system32\dllcache\admparse.dll
- 2008-03-01 12:53:51 124,928 -c----w C:\WINDOWS\system32\dllcache\advpack.dll
+ 2008-03-03 18:51:42 126,464 -c--a-w C:\WINDOWS\system32\dllcache\advpack.dll
+ 2007-04-02 21:56:00 19,456 -c--a-w C:\WINDOWS\system32\dllcache\agt0404.dll
+ 2007-04-02 21:56:02 19,456 -c--a-w C:\WINDOWS\system32\dllcache\agt0411.dll
+ 2007-04-02 21:56:02 19,456 -c--a-w C:\WINDOWS\system32\dllcache\agt0412.dll
+ 2007-04-02 21:56:04 19,456 -c--a-w C:\WINDOWS\system32\dllcache\agt0804.dll
+ 2008-04-14 05:52:08 218,112 -c--a-w C:\WINDOWS\system32\dllcache\c_g18030.dll
- 2004-08-04 12:00:00 480,256 -c--a-w C:\WINDOWS\system32\dllcache\cintsetp.exe
+ 2008-04-13 20:13:40 480,256 -c--a-w C:\WINDOWS\system32\dllcache\cintsetp.exe
- 2007-08-13 16:42:54 17,408 -c----w C:\WINDOWS\system32\dllcache\corpol.dll
+ 2008-03-03 18:52:20 17,920 -c--a-w C:\WINDOWS\system32\dllcache\corpol.dll
- 2004-08-04 12:00:00 57,399 -c--a-w C:\WINDOWS\system32\dllcache\cplexe.exe
+ 2008-04-13 20:13:34 57,399 -c--a-w C:\WINDOWS\system32\dllcache\cplexe.exe
- 2008-03-01 12:53:51 347,136 -c----w C:\WINDOWS\system32\dllcache\dxtmsft.dll
+ 2008-03-03 18:50:34 345,600 -c--a-w C:\WINDOWS\system32\dllcache\dxtmsft.dll
- 2008-03-01 12:53:52 214,528 -c----w C:\WINDOWS\system32\dllcache\dxtrans.dll
+ 2008-03-03 18:50:30 212,992 -c--a-w C:\WINDOWS\system32\dllcache\dxtrans.dll
+ 2008-04-14 05:50:34 7,168 -c--a-w C:\WINDOWS\system32\dllcache\f3ahvoas.dll
- 2007-08-13 16:18:02 60,416 -c----w C:\WINDOWS\system32\dllcache\hmmapi.dll
+ 2008-03-03 18:46:02 68,096 -c--a-w C:\WINDOWS\system32\dllcache\hmmapi.dll
- 2008-03-01 12:53:52 63,488 -c----w C:\WINDOWS\system32\dllcache\icardie.dll
+ 2008-03-03 18:50:40 60,928 -c--a-w C:\WINDOWS\system32\dllcache\icardie.dll
- 2008-02-29 08:54:43 70,656 -c----w C:\WINDOWS\system32\dllcache\ie4uinit.exe
+ 2008-03-03 18:51:52 70,656 -c--a-w C:\WINDOWS\system32\dllcache\ie4uinit.exe
- 2008-03-01 12:53:52 153,088 -c----w C:\WINDOWS\system32\dllcache\ieakeng.dll
+ 2008-03-03 18:51:56 119,808 -c--a-w C:\WINDOWS\system32\dllcache\ieakeng.dll
- 2008-03-01 12:53:52 230,400 -c----w C:\WINDOWS\system32\dllcache\ieaksie.dll
+ 2008-03-03 18:52:04 224,768 -c--a-w C:\WINDOWS\system32\dllcache\ieaksie.dll
- 2008-02-15 05:44:25 161,792 -c--a-w C:\WINDOWS\system32\dllcache\ieakui.dll
+ 2008-03-03 18:51:50 149,504 -c--a-w C:\WINDOWS\system32\dllcache\ieakui.dll
- 2007-04-17 09:32:38 2,455,488 -c----w C:\WINDOWS\system32\dllcache\ieapfltr.dat
+ 2008-02-07 16:48:08 3,670,112 -c--a-w C:\WINDOWS\system32\dllcache\ieapfltr.dat
- 2008-03-01 12:53:52 383,488 -c----w C:\WINDOWS\system32\dllcache\ieapfltr.dll
+ 2008-03-03 18:34:48 440,832 -c--a-w C:\WINDOWS\system32\dllcache\ieapfltr.dll
- 2008-03-01 12:53:53 384,512 -c----w C:\WINDOWS\system32\dllcache\iedkcs32.dll
+ 2008-03-03 18:52:02 349,184 -c--a-w C:\WINDOWS\system32\dllcache\iedkcs32.dll
- 2007-08-13 16:44:02 69,120 -c----w C:\WINDOWS\system32\dllcache\iedw.exe
+ 2008-03-03 18:52:46 70,656 -c--a-w C:\WINDOWS\system32\dllcache\iedw.exe
- 2007-08-13 16:45:18 78,336 -c----w C:\WINDOWS\system32\dllcache\ieencode.dll
+ 2008-03-03 18:53:14 78,336 -c--a-w C:\WINDOWS\system32\dllcache\ieencode.dll
- 2008-03-01 12:53:56 6,066,176 -c----w C:\WINDOWS\system32\dllcache\ieframe.dll
+ 2008-03-03 18:55:22 8,016,384 -c--a-w C:\WINDOWS\system32\dllcache\ieframe.dll
- 2007-08-13 16:54:10 191,488 -c----w C:\WINDOWS\system32\dllcache\iepeers.dll
+ 2008-03-03 18:50:40 184,320 -c--a-w C:\WINDOWS\system32\dllcache\iepeers.dll
- 2008-03-01 12:53:57 44,544 -c----w C:\WINDOWS\system32\dllcache\iernonce.dll
+ 2008-03-03 18:51:46 44,032 -c--a-w C:\WINDOWS\system32\dllcache\iernonce.dll
- 2008-03-01 12:53:57 267,776 -c----w C:\WINDOWS\system32\dllcache\iertutil.dll
+ 2008-03-03 18:50:38 268,800 -c--a-w C:\WINDOWS\system32\dllcache\iertutil.dll
- 2007-08-13 16:39:12 55,296 -c----w C:\WINDOWS\system32\dllcache\iesetup.dll
+ 2008-03-03 18:51:48 69,120 -c--a-w C:\WINDOWS\system32\dllcache\iesetup.dll
- 2008-02-29 08:55:08 625,664 -c----w C:\WINDOWS\system32\dllcache\iexplore.exe
+ 2008-03-03 18:52:48 599,552 -c--a-w C:\WINDOWS\system32\dllcache\iexplore.exe
- 2007-08-13 16:36:06 36,352 -c----w C:\WINDOWS\system32\dllcache\imgutil.dll
+ 2008-03-03 18:50:30 36,352 -c--a-w C:\WINDOWS\system32\dllcache\imgutil.dll
- 2004-08-04 12:00:00 307,257 -c--a-w C:\WINDOWS\system32\dllcache\imjpdct.exe
+ 2008-04-13 20:13:46 307,257 -c--a-w C:\WINDOWS\system32\dllcache\imjpdct.exe
- 2004-08-04 12:00:00 155,705 -c--a-w C:\WINDOWS\system32\dllcache\imjpdsvr.exe
+ 2008-04-13 20:13:48 155,705 -c--a-w C:\WINDOWS\system32\dllcache\imjpdsvr.exe
- 2004-08-04 12:00:00 196,665 -c--a-w C:\WINDOWS\system32\dllcache\imjpinst.exe
+ 2008-04-13 20:13:50 196,665 -c--a-w C:\WINDOWS\system32\dllcache\imjpinst.exe
- 2004-08-04 12:00:00 208,952 -c--a-w C:\WINDOWS\system32\dllcache\imjpmig.exe
+ 2008-04-13 20:13:52 208,952 -c--a-w C:\WINDOWS\system32\dllcache\imjpmig.exe
- 2004-08-04 12:00:00 233,527 -c--a-w C:\WINDOWS\system32\dllcache\imjprw.exe
+ 2008-04-13 20:14:00 233,527 -c--a-w C:\WINDOWS\system32\dllcache\imjprw.exe
- 2004-08-04 12:00:00 262,200 -c--a-w C:\WINDOWS\system32\dllcache\imjputy.exe
+ 2008-04-13 20:14:02 262,200 -c--a-w C:\WINDOWS\system32\dllcache\imjputy.exe
- 2004-08-04 12:00:00 59,392 -c--a-w C:\WINDOWS\system32\dllcache\imscinst.exe
+ 2008-04-13 20:13:38 59,392 -c--a-w C:\WINDOWS\system32\dllcache\imscinst.exe
- 2007-08-13 16:39:02 92,672 -c----w C:\WINDOWS\system32\dllcache\inseng.dll
+ 2008-03-03 18:51:46 94,208 -c--a-w C:\WINDOWS\system32\dllcache\inseng.dll
- 2007-08-13 16:38:04 491,520 -c----w C:\WINDOWS\system32\dllcache\jscript.dll
+ 2008-03-03 18:51:38 557,056 -c--a-w C:\WINDOWS\system32\dllcache\jscript.dll
- 2008-03-01 12:53:58 27,648 -c----w C:\WINDOWS\system32\dllcache\jsproxy.dll
+ 2008-03-03 18:52:12 28,672 -c--a-w C:\WINDOWS\system32\dllcache\jsproxy.dll
+ 2008-04-14 05:50:52 6,144 -c--a-w C:\WINDOWS\system32\dllcache\kbd101.dll
+ 2001-08-17 12:55:56 6,144 -c--a-w C:\WINDOWS\system32\dllcache\kbd101b.dll
+ 2001-08-17 12:55:56 6,144 -c--a-w C:\WINDOWS\system32\dllcache\kbd101c.dll
+ 2001-08-17 12:55:56 5,632 -c--a-w C:\WINDOWS\system32\dllcache\kbd103.dll
+ 2008-04-14 05:50:52 6,144 -c--a-w C:\WINDOWS\system32\dllcache\kbd106.dll
+ 2008-04-14 05:50:52 6,144 -c--a-w C:\WINDOWS\system32\dllcache\kbd106n.dll
+ 2008-04-14 05:50:52 6,144 -c--a-w C:\WINDOWS\system32\dllcache\kbdax2.dll
+ 2008-04-14 05:50:52 7,168 -c--a-w C:\WINDOWS\system32\dllcache\kbdibm02.dll
+ 2001-08-18 02:53:46 8,704 -c--a-w C:\WINDOWS\system32\dllcache\kbdjpn.dll
+ 2001-08-18 02:53:46 8,192 -c--a-w C:\WINDOWS\system32\dllcache\kbdkor.dll
+ 2008-04-14 05:50:52 6,656 -c--a-w C:\WINDOWS\system32\dllcache\kbdlk41a.dll
+ 2008-04-14 05:50:52 6,144 -c--a-w C:\WINDOWS\system32\dllcache\kbdlk41j.dll
+ 2008-04-14 05:50:52 7,168 -c--a-w C:\WINDOWS\system32\dllcache\kbdnec.dll
- 2007-08-13 16:44:18 40,960 -c----w C:\WINDOWS\system32\dllcache\licmgr10.dll
+ 2008-03-03 18:52:54 41,984 -c--a-w C:\WINDOWS\system32\dllcache\licmgr10.dll
- 2008-03-01 12:53:59 459,264 -c----w C:\WINDOWS\system32\dllcache\msfeeds.dll
+ 2008-03-03 18:51:02 585,728 -c--a-w C:\WINDOWS\system32\dllcache\msfeeds.dll
- 2008-03-01 12:53:59 52,224 -c----w C:\WINDOWS\system32\dllcache\msfeedsbs.dll
+ 2008-03-03 18:50:40 52,224 -c--a-w C:\WINDOWS\system32\dllcache\msfeedsbs.dll
- 2007-08-13 16:32:30 45,568 -c----w C:\WINDOWS\system32\dllcache\mshta.exe
+ 2008-03-03 18:50:10 45,568 -c--a-w C:\WINDOWS\system32\dllcache\mshta.exe
- 2008-03-01 16:24:04 3,591,680 -c----w C:\WINDOWS\system32\dllcache\mshtml.dll
+ 2008-03-03 18:53:52 5,120,000 -c--a-w C:\WINDOWS\system32\dllcache\mshtml.dll
- 2008-03-01 12:54:02 478,208 -c----w C:\WINDOWS\system32\dllcache\mshtmled.dll
+ 2008-03-03 18:50:22 68,608 -c--a-w C:\WINDOWS\system32\dllcache\mshtmled.dll
- 2007-08-13 16:01:12 48,128 -c----w C:\WINDOWS\system32\dllcache\mshtmler.dll
+ 2008-03-03 18:50:16 48,128 -c--a-w C:\WINDOWS\system32\dllcache\mshtmler.dll
- 2007-08-13 16:54:10 156,160 -c--a-w C:\WINDOWS\system32\dllcache\msls31.dll
+ 2008-03-03 18:43:58 156,160 -c--a-w C:\WINDOWS\system32\dllcache\msls31.dll
- 2008-03-01 12:54:03 193,024 -c----w C:\WINDOWS\system32\dllcache\msrating.dll
+ 2008-03-03 18:52:58 193,024 -c--a-w C:\WINDOWS\system32\dllcache\msrating.dll
- 2008-03-01 12:54:03 671,232 -c----w C:\WINDOWS\system32\dllcache\mstime.dll
+ 2008-03-03 18:50:48 629,248 -c--a-w C:\WINDOWS\system32\dllcache\mstime.dll
- 2008-03-01 12:54:03 102,912 -c----w C:\WINDOWS\system32\dllcache\occache.dll
+ 2008-03-03 18:52:52 116,224 -c--a-w C:\WINDOWS\system32\dllcache\occache.dll
- 2008-03-01 12:54:04 44,544 -c----w C:\WINDOWS\system32\dllcache\pngfilt.dll
+ 2008-03-03 18:50:32 44,544 -c--a-w C:\WINDOWS\system32\dllcache\pngfilt.dll
+ 2008-01-11 10:35:32 134,144 -c----w C:\WINDOWS\system32\dllcache\sqmapi.dll
- 2004-08-04 12:00:00 44,032 -c--a-w C:\WINDOWS\system32\dllcache\tintlphr.exe
+ 2008-04-13 20:13:52 44,032 -c--a-w C:\WINDOWS\system32\dllcache\tintlphr.exe
- 2004-08-04 12:00:00 455,168 -c--a-w C:\WINDOWS\system32\dllcache\tintsetp.exe
+ 2008-04-13 20:13:54 455,168 -c--a-w C:\WINDOWS\system32\dllcache\tintsetp.exe
- 2008-03-01 12:54:04 105,984 -c----w C:\WINDOWS\system32\dllcache\url.dll
+ 2008-03-03 18:52:54 105,984 -c--a-w C:\WINDOWS\system32\dllcache\url.dll
- 2008-03-01 12:54:04 1,159,680 -c----w C:\WINDOWS\system32\dllcache\urlmon.dll
+ 2008-03-03 18:53:00 1,188,352 -c--a-w C:\WINDOWS\system32\dllcache\urlmon.dll
- 2007-08-13 16:54:10 413,696 -c----w C:\WINDOWS\system32\dllcache\vbscript.dll
+ 2008-03-03 18:51:50 434,176 -c--a-w C:\WINDOWS\system32\dllcache\vbscript.dll
- 2007-08-13 16:54:10 765,952 -c----w C:\WINDOWS\system32\dllcache\VGX.dll
+ 2008-03-03 18:52:34 755,200 -c--a-w C:\WINDOWS\system32\dllcache\VGX.dll
- 2008-03-01 12:54:05 233,472 -c----w C:\WINDOWS\system32\dllcache\webcheck.dll
+ 2008-03-03 18:53:06 233,984 -c--a-w C:\WINDOWS\system32\dllcache\webcheck.dll
- 2008-03-01 12:54:05 826,368 -c----w C:\WINDOWS\system32\dllcache\wininet.dll
+ 2008-03-03 18:52:42 830,464 -c--a-w C:\WINDOWS\system32\dllcache\wininet.dll
+ 2008-01-21 16:12:52 41,792 ----a-w C:\WINDOWS\system32\drivers\avgntdd.sys
+ 2008-01-21 16:11:28 22,336 ----a-w C:\WINDOWS\system32\drivers\avgntmgr.sys
+ 2008-03-04 11:28:49 79,424 ----a-w C:\WINDOWS\system32\drivers\avipbb.sys
+ 2007-11-08 17:03:26 21,248 ----a-w C:\WINDOWS\system32\drivers\ssmdrv.sys
- 2008-03-01 12:53:51 347,136 ----a-w C:\WINDOWS\system32\dxtmsft.dll
+ 2008-03-03 18:50:34 345,600 ----a-w C:\WINDOWS\system32\dxtmsft.dll
- 2008-03-01 12:53:52 214,528 ----a-w C:\WINDOWS\system32\dxtrans.dll
+ 2008-03-03 18:50:30 212,992 ----a-w C:\WINDOWS\system32\dxtrans.dll
+ 2008-04-14 05:50:34 7,168 ----a-w C:\WINDOWS\system32\f3ahvoas.dll
- 2008-05-10 18:36:35 1,402,064 ----a-w C:\WINDOWS\system32\FNTCACHE.DAT
+ 2008-06-10 14:57:01 1,443,680 ----a-w C:\WINDOWS\system32\FNTCACHE.DAT
+ 2006-05-24 08:45:48 176,128 ----a-w C:\WINDOWS\system32\FTD2XX.dll
- 2008-03-01 12:53:52 63,488 ----a-w C:\WINDOWS\system32\icardie.dll
+ 2008-03-03 18:50:40 60,928 ----a-w C:\WINDOWS\system32\icardie.dll
- 2006-06-29 06:05:44 26,112 ------w C:\WINDOWS\system32\idndl.dll
+ 2008-01-11 10:35:16 26,112 ----a-w C:\WINDOWS\system32\idndl.dll
- 2008-02-29 08:54:43 70,656 ----a-w C:\WINDOWS\system32\ie4uinit.exe
+ 2008-03-03 18:51:52 70,656 ----a-w C:\WINDOWS\system32\ie4uinit.exe
- 2008-03-01 12:53:52 153,088 ----a-w C:\WINDOWS\system32\ieakeng.dll
+ 2008-03-03 18:51:56 119,808 ----a-w C:\WINDOWS\system32\ieakeng.dll
- 2008-03-01 12:53:52 230,400 ----a-w C:\WINDOWS\system32\ieaksie.dll
+ 2008-03-03 18:52:04 224,768 ----a-w C:\WINDOWS\system32\ieaksie.dll
- 2008-02-15 05:44:25 161,792 ----a-w C:\WINDOWS\system32\ieakui.dll
+ 2008-03-03 18:51:50 149,504 ----a-w C:\WINDOWS\system32\ieakui.dll
- 2007-04-17 09:32:38 2,455,488 ----a-w C:\WINDOWS\system32\ieapfltr.dat
+ 2008-02-07 16:48:08 3,670,112 ----a-w C:\WINDOWS\system32\ieapfltr.dat
- 2008-03-01 12:53:52 383,488 ----a-w C:\WINDOWS\system32\ieapfltr.dll
+ 2008-03-03 18:34:48 440,832 ----a-w C:\WINDOWS\system32\ieapfltr.dll
- 2008-03-01 12:53:53 384,512 ----a-w C:\WINDOWS\system32\iedkcs32.dll
+ 2008-03-03 18:52:02 349,184 ----a-w C:\WINDOWS\system32\iedkcs32.dll
- 2008-03-01 12:53:56 6,066,176 ----a-w C:\WINDOWS\system32\ieframe.dll
+ 2008-03-03 18:55:22 8,016,384 ----a-w C:\WINDOWS\system32\ieframe.dll
- 2007-08-13 16:54:10 191,488 ----a-w C:\WINDOWS\system32\iepeers.dll
+ 2008-03-03 18:50:40 184,320 ----a-w C:\WINDOWS\system32\iepeers.dll
- 2008-03-01 12:53:57 44,544 ----a-w C:\WINDOWS\system32\iernonce.dll
+ 2008-03-03 18:51:46 44,032 ----a-w C:\WINDOWS\system32\iernonce.dll
- 2008-03-01 12:53:57 267,776 ----a-w C:\WINDOWS\system32\iertutil.dll
+ 2008-03-03 18:50:38 268,800 ----a-w C:\WINDOWS\system32\iertutil.dll
+ 2008-03-03 18:52:48 142,848 ------w C:\WINDOWS\system32\IESetting.dll
- 2007-08-13 16:39:12 55,296 ----a-w C:\WINDOWS\system32\iesetup.dll
+ 2008-03-03 18:51:48 69,120 ----a-w C:\WINDOWS\system32\iesetup.dll
- 2008-02-22 10:00:51 13,824 ----a-w C:\WINDOWS\system32\ieudinit.exe
+ 2008-03-03 18:51:46 36,864 ----a-w C:\WINDOWS\system32\ieudinit.exe
- 2007-08-13 16:54:10 180,736 ------w C:\WINDOWS\system32\ieui.dll
+ 2008-03-03 18:44:08 181,248 ----a-w C:\WINDOWS\system32\ieui.dll
+ 2008-04-14 05:50:20 198,656 ----a-w C:\WINDOWS\system32\IME\CINTLGNT\CINTIME.DLL
+ 2008-04-13 20:13:40 480,256 ----a-w C:\WINDOWS\system32\IME\CINTLGNT\CINTSETP.EXE
+ 2008-04-13 20:13:38 59,392 ----a-w C:\WINDOWS\system32\IME\PINTLGNT\IMSCINST.EXE
+ 2008-04-13 20:13:38 70,144 ----a-w C:\WINDOWS\system32\IME\PINTLGNT\PINTLPHR.EXE
+ 2008-04-14 05:51:18 67,584 ----a-w C:\WINDOWS\system32\IME\PINTLGNT\PMIGRATE.DLL
+ 2008-04-13 20:13:52 44,032 ----a-w C:\WINDOWS\system32\IME\TINTLGNT\TINTLPHR.EXE
+ 2008-04-13 20:13:54 455,168 ----a-w C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE
+ 2008-04-14 05:51:38 10,240 ----a-w C:\WINDOWS\system32\IME\TINTLGNT\TMIGRATE.DLL
- 2007-08-13 16:36:06 36,352 ----a-w C:\WINDOWS\system32\imgutil.dll
+ 2008-03-03 18:50:30 36,352 ----a-w C:\WINDOWS\system32\imgutil.dll
+ 2008-04-14 05:50:46 811,064 ----a-w C:\WINDOWS\system32\imjp81k.dll
- 2007-08-13 16:39:02 92,672 ----a-w C:\WINDOWS\system32\inseng.dll
+ 2008-03-03 18:51:46 94,208 ----a-w C:\WINDOWS\system32\inseng.dll
- 2005-11-10 09:27:06 49,248 ----a-w C:\WINDOWS\system32\java.exe
+ 2008-02-21 23:23:35 135,168 ----a-w C:\WINDOWS\system32\java.exe
- 2005-11-10 09:27:16 49,250 ----a-w C:\WINDOWS\system32\javaw.exe
+ 2008-02-21 23:23:39 135,168 ----a-w C:\WINDOWS\system32\javaw.exe
- 2005-11-10 11:03:54 127,078 ----a-w C:\WINDOWS\system32\javaws.exe
+ 2008-02-22 00:33:32 139,264 ----a-w C:\WINDOWS\system32\javaws.exe
- 2008-04-14 05:52:14 512,000 ----a-w C:\WINDOWS\system32\jscript.dll
+ 2008-03-03 18:51:38 557,056 ----a-w C:\WINDOWS\system32\jscript.dll
- 2008-03-01 12:53:58 27,648 ----a-w C:\WINDOWS\system32\jsproxy.dll
+ 2008-03-03 18:52:12 28,672 ----a-w C:\WINDOWS\system32\jsproxy.dll
+ 2008-04-14 05:50:52 6,144 ----a-w C:\WINDOWS\system32\kbd101.dll
+ 2004-08-04 12:00:00 6,144 ----a-w C:\WINDOWS\system32\kbd101a.dll
+ 2001-08-17 12:55:56 6,144 ----a-w C:\WINDOWS\system32\kbd101b.dll
+ 2001-08-17 12:55:56 6,144 ----a-w C:\WINDOWS\system32\kbd101c.dll
+ 2001-08-17 12:55:56 5,632 ----a-w C:\WINDOWS\system32\kbd103.dll
+ 2008-04-14 05:50:52 6,144 ----a-w C:\WINDOWS\system32\kbd106.dll
+ 2008-04-14 05:50:52 6,144 ----a-w C:\WINDOWS\system32\kbd106n.dll
+ 2008-04-14 05:50:52 6,144 ----a-w C:\WINDOWS\system32\kbdax2.dll
+ 2008-04-14 05:50:52 7,168 ----a-w C:\WINDOWS\system32\kbdibm02.dll
+ 2001-08-18 02:53:46 8,192 ----a-w C:\WINDOWS\system32\kbdkor.dll
+ 2008-04-14 05:50:52 6,656 ----a-w C:\WINDOWS\system32\kbdlk41a.dll
+ 2008-04-14 05:50:52 6,144 ----a-w C:\WINDOWS\system32\kbdlk41j.dll
+ 2004-08-04 12:00:00 7,168 ----a-w C:\WINDOWS\system32\kbdnec95.dll
+ 2004-08-04 12:00:00 9,216 ----a-w C:\WINDOWS\system32\kbdnecAT.dll
+ 2004-08-04 12:00:00 7,680 ----a-w C:\WINDOWS\system32\kbdnecNT.dll
+ 2004-08-04 12:00:00 70,656 ----a-w C:\WINDOWS\system32\korwbrkr.dll
- 2007-08-13 16:44:18 40,960 ----a-w C:\WINDOWS\system32\licmgr10.dll
+ 2008-03-03 18:52:54 41,984 ----a-w C:\WINDOWS\system32\licmgr10.dll
+ 2008-03-14 21:31:26 57,344 ----a-w C:\WINDOWS\system32\Macromed\Common\SwSupport.dll
+ 2008-03-24 18:21:00 2,889,088 ----a-w C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
+ 2008-03-24 18:21:00 218,496 ----a-w C:\WINDOWS\system32\Macromed\Flash\NPSWF32_FlashUtil.exe
+ 2008-03-14 21:29:22 581,632 ----a-w C:\WINDOWS\system32\Macromed\Shockwave 10\Control.dll
+ 2008-03-14 21:12:30 1,490,944 ----a-w C:\WINDOWS\system32\Macromed\Shockwave 10\dirapiX.dll
+ 2008-03-14 21:29:58 24,576 ----a-w C:\WINDOWS\system32\Macromed\Shockwave 10\DynaPlayer.dll
+ 2008-03-14 21:10:06 606,208 ----a-w C:\WINDOWS\system32\Macromed\Shockwave 10\iml32X.dll
+ 2008-03-14 21:28:48 339,968 ----a-w C:\WINDOWS\system32\Macromed\Shockwave 10\Plugin.dll
+ 2008-03-14 21:28:56 475,136 ----a-w C:\WINDOWS\system32\Macromed\Shockwave 10\PluginPing.dll
+ 2008-03-14 21:21:52 180,224 ----a-w C:\WINDOWS\system32\Macromed\Shockwave 10\Proj.dll
+ 2008-03-14 21:31:28 77,824 ----a-w C:\WINDOWS\system32\Macromed\Shockwave 10\SwInit.exe
+ 2008-03-15 09:38:08 86,016 ----a-w C:\WINDOWS\system32\Macromed\Shockwave 10\SwMenuX.dll
+ 2008-03-14 21:31:28 98,304 ----a-w C:\WINDOWS\system32\Macromed\Shockwave 10\SwOnce.dll
- 2008-04-05 20:56:22 19,836,024 ----a-w C:\WINDOWS\system32\MRT.exe
+ 2008-05-09 21:35:04 16,863,864 ----a-w C:\WINDOWS\system32\MRT.exe
- 2008-03-01 12:53:59 459,264 ----a-w C:\WINDOWS\system32\msfeeds.dll
+ 2008-03-03 18:51:02 585,728 ----a-w C:\WINDOWS\system32\msfeeds.dll
- 2008-03-01 12:53:59 52,224 ----a-w C:\WINDOWS\system32\msfeedsbs.dll
+ 2008-03-03 18:50:40 52,224 ----a-w C:\WINDOWS\system32\msfeedsbs.dll
- 2007-08-13 16:36:40 12,288 ------w C:\WINDOWS\system32\msfeedssync.exe
+ 2008-03-03 18:50:46 52,736 ----a-w C:\WINDOWS\system32\msfeedssync.exe
- 2007-08-13 16:32:30 45,568 ----a-w C:\WINDOWS\system32\mshta.exe
+ 2008-03-03 18:50:10 45,568 ----a-w C:\WINDOWS\system32\mshta.exe
- 2008-03-01 16:24:04 3,591,680 ----a-w C:\WINDOWS\system32\mshtml.dll
+ 2008-03-03 18:53:52 5,120,000 ----a-w C:\WINDOWS\system32\mshtml.dll
- 2008-03-01 12:54:02 478,208 ----a-w C:\WINDOWS\system32\mshtmled.dll
+ 2008-03-03 18:50:22 68,608 ----a-w C:\WINDOWS\system32\mshtmled.dll
- 2007-08-13 16:01:12 48,128 ----a-w C:\WINDOWS\system32\mshtmler.dll
+ 2008-03-03 18:50:16 48,128 ----a-w C:\WINDOWS\system32\mshtmler.dll
+ 2004-08-04 12:00:00 98,304 ----a-w C:\WINDOWS\system32\msir3jp.dll
- 2007-08-13 16:54:10 156,160 ----a-w C:\WINDOWS\system32\msls31.dll
+ 2008-03-03 18:43:58 156,160 ----a-w C:\WINDOWS\system32\msls31.dll
- 2008-03-01 12:54:03 193,024 ----a-w C:\WINDOWS\system32\msrating.dll
+ 2008-03-03 18:52:58 193,024 ----a-w C:\WINDOWS\system32\msrating.dll
- 2008-03-01 12:54:03 671,232 ----a-w C:\WINDOWS\system32\mstime.dll
+ 2008-03-03 18:50:48 629,248 ----a-w C:\WINDOWS\system32\mstime.dll
+ 2003-04-18 14:46:22 1,233,920 ----a-w C:\WINDOWS\system32\msxml4.dll
+ 2003-04-18 14:29:26 82,432 ----a-w C:\WINDOWS\system32\msxml4r.dll
- 2006-06-28 15:59:26 24,576 ------w C:\WINDOWS\system32\nlsdl.dll
+ 2008-01-11 10:35:16 24,576 ----a-w C:\WINDOWS\system32\nlsdl.dll
- 2006-06-29 06:05:44 23,552 ------w C:\WINDOWS\system32\normaliz.dll
+ 2008-01-11 10:35:16 23,552 ----a-w C:\WINDOWS\system32\normaliz.dll
+ 2007-07-06 22:25:17 102,400 ----a-w C:\WINDOWS\system32\nr_native_lib.dll
- 2008-03-01 12:54:03 102,912 ----a-w C:\WINDOWS\system32\occache.dll
+ 2008-03-03 18:52:52 116,224 ----a-w C:\WINDOWS\system32\occache.dll
- 2008-05-06 18:17:59 85,082 ----a-w C:\WINDOWS\system32\perfc007.dat
+ 2008-05-18 13:06:05 108,728 ----a-w C:\WINDOWS\system32\perfc007.dat
- 2008-05-06 18:17:59 71,642 ----a-w C:\WINDOWS\system32\perfc009.dat
+ 2008-05-18 13:06:05 89,284 ----a-w C:\WINDOWS\system32\perfc009.dat
- 2008-05-06 18:17:59 459,844 ----a-w C:\WINDOWS\system32\perfh007.dat
+ 2008-05-18 13:06:05 516,814 ----a-w C:\WINDOWS\system32\perfh007.dat
- 2008-05-06 18:17:59 441,958 ----a-w C:\WINDOWS\system32\perfh009.dat
+ 2008-05-18 13:06:05 488,666 ----a-w C:\WINDOWS\system32\perfh009.dat
- 2008-03-01 12:54:04 44,544 ----a-w C:\WINDOWS\system32\pngfilt.dll
+ 2008-03-03 18:50:32 44,544 ----a-w C:\WINDOWS\system32\pngfilt.dll
+ 2005-08-29 22:00:00 771,584 ----a-w C:\WINDOWS\system32\RGSS100J.dll
+ 2005-08-29 22:00:00 778,752 ----a-w C:\WINDOWS\system32\RGSS102E.dll
+ 2005-08-29 22:00:00 781,312 ----a-w C:\WINDOWS\system32\RGSS102J.dll
+ 2007-02-10 13:29:51 67,952 ----a-w C:\WINDOWS\system32\sqlctr90.dll
+ 2007-02-10 03:29:52 2,234,224 ----a-w C:\WINDOWS\system32\sqlncli.dll
- 2008-03-01 12:54:04 105,984 ----a-w C:\WINDOWS\system32\url.dll
+ 2008-03-03 18:52:54 105,984 ----a-w C:\WINDOWS\system32\url.dll
- 2008-03-01 12:54:04 1,159,680 ----a-w C:\WINDOWS\system32\urlmon.dll
+ 2008-03-03 18:53:00 1,188,352 ----a-w C:\WINDOWS\system32\urlmon.dll
- 2008-04-14 05:52:32 434,176 ----a-w C:\WINDOWS\system32\vbscript.dll
+ 2008-03-03 18:51:50 434,176 ----a-w C:\WINDOWS\system32\vbscript.dll
- 2008-03-01 12:54:05 233,472 ----a-w C:\WINDOWS\system32\webcheck.dll
+ 2008-03-03 18:53:06 233,984 ----a-w C:\WINDOWS\system32\webcheck.dll
- 2007-08-13 16:45:16 206,336 ------w C:\WINDOWS\system32\WinFXDocObj.exe
+ 2008-03-03 18:53:08 208,384 ----a-w C:\WINDOWS\system32\WinFXDocObj.exe
- 2008-03-01 12:54:05 826,368 ----a-w C:\WINDOWS\system32\wininet.dll
+ 2008-03-03 18:52:42 830,464 ----a-w C:\WINDOWS\system32\wininet.dll
- 2008-04-14 05:52:34 121,856 ------w C:\WINDOWS\system32\xmllite.dll
+ 2008-01-11 10:35:38 121,856 ----a-w C:\WINDOWS\system32\xmllite.dll
+ 2008-05-30 19:33:06 1,233,920 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9818.0_x-ww_8ff50c5d\msxml4.dll
+ 2008-05-30 19:33:06 82,432 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2R_6bd6b9abf345378f_4.1.0.0_x-ww_29c3ad6a\msxml4r.dll
+ 2005-09-22 21:49:12 95,744 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_6e805841\ATL80.dll
+ 2006-12-01 20:56:00 96,256 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_cbb27474\ATL80.dll
+ 2005-09-22 21:48:08 479,232 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\msvcm80.dll
+ 2005-09-22 21:48:08 548,864 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\msvcp80.dll
+ 2005-09-22 21:48:06 626,688 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\msvcr80.dll
+ 2006-12-01 20:54:32 479,232 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcm80.dll
+ 2006-12-01 20:54:34 548,864 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcp80.dll
+ 2006-12-01 20:54:32 626,688 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcr80.dll
+ 2005-09-23 09:16:02 1,093,632 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_dec6ddd2\mfc80.dll
+ 2005-09-23 09:16:06 1,079,808 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_dec6ddd2\mfc80u.dll
+ 2005-09-23 09:16:08 69,632 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_dec6ddd2\mfcm80.dll
+ 2005-09-23 09:16:10 57,344 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_dec6ddd2\mfcm80u.dll
+ 2006-12-01 22:25:52 1,101,824 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfc80.dll
+ 2006-12-01 22:25:56 1,093,120 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfc80u.dll
+ 2006-12-01 22:25:58 69,632 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfcm80.dll
+ 2006-12-01 22:26:00 57,856 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfcm80u.dll
+ 2005-09-23 08:58:06 40,960 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\mfc80CHS.dll
+ 2005-09-23 08:58:06 45,056 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\mfc80CHT.dll
+ 2005-09-23 08:58:06 65,536 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\mfc80DEU.dll
+ 2005-09-23 08:58:06 57,344 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\mfc80ENU.dll
+ 2005-09-23 08:58:06 61,440 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\mfc80ESP.dll
+ 2005-09-23 08:58:06 61,440 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\mfc80FRA.dll
+ 2005-09-23 08:58:06 61,440 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\mfc80ITA.dll
+ 2005-09-23 08:58:06 49,152 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\mfc80JPN.dll
+ 2005-09-23 08:58:06 49,152 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\mfc80KOR.dll
+ 2006-12-01 22:08:00 40,960 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80CHS.dll
+ 2006-12-01 22:08:00 45,056 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80CHT.dll
+ 2006-12-01 22:08:00 65,536 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80DEU.dll
+ 2006-12-01 22:08:00 57,344 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ENU.dll
+ 2006-12-01 22:08:00 61,440 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ESP.dll
+ 2006-12-01 22:08:00 61,440 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80FRA.dll
+ 2006-12-01 22:08:00 61,440 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ITA.dll
+ 2006-12-01 22:08:00 49,152 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80JPN.dll
+ 2006-12-01 22:08:00 49,152 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80KOR.dll
+ 2006-12-01 22:46:44 65,536 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6c18549a\vcomp.dll
+ 2007-11-07 15:19:32 161,784 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_312cf0e9\atl90.dll
+ 2007-11-07 15:19:38 1,156,600 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_a173767a\mfc90.dll
+ 2007-11-07 15:19:38 1,162,744 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_a173767a\mfc90u.dll
+ 2007-11-07 12:51:08 59,904 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_a173767a\mfcm90.dll
+ 2007-11-07 12:51:08 59,904 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_a173767a\mfcm90u.dll
.
-- Snapshot reset to current date --
.
(((((((((((((((((((((((((((( Autostart Punkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Hinweis* leere Eintrage & legitime Standardeintrage werden nicht angezeigt.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-14 07:52 15360]
"MsnMsgr"="C:\Programme\Windows Live\Messenger\MsnMsgr.exe" [2007-10-18 11:34 5724184]
"KeePass Password Safe"="C:\Programme\KeePass Password Safe\KeePass.exe" [2008-01-12 14:50 719872]
"AlcoholAutomount"="C:\Programme\Alcohol Soft\Alcohol 120\axcmd.exe" [2008-03-20 18:46 217544]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="C:\Programme\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784]
"VTTimer"="VTTimer.exe" [2005-03-08 03:33 53248 C:\WINDOWS\system32\VTTimer.exe]
"VTTrayp"="VTtrayp.exe" [2005-11-01 04:15 163840 C:\WINDOWS\system32\VTTrayp.exe]
"SoundMan"="SOUNDMAN.EXE" [2006-06-20 14:42 577536 C:\WINDOWS\soundman.exe]
"avgnt"="C:\Programme\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-02-12 10:06 262401]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2008-04-14 07:52 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avldr]
avldr.dll

[HKLM\~\startupfolder\C:^Dokumente und Einstellungen^Drilon^Startmenü^Programme^Autostart^hamachi.lnk]
path=C:\Dokumente und Einstellungen\Drilon\Startmenü\Programme\Autostart\hamachi.lnk
backup=C:\WINDOWS\pss\hamachi.lnkStartup

[HKLM\~\startupfolder\C:^Dokumente und Einstellungen^Drilon^Startmenü^Programme^Autostart^OpenOffice.org 2.2.lnk]
path=C:\Dokumente und Einstellungen\Drilon\Startmenü\Programme\Autostart\OpenOffice.org 2.2.lnk
backup=C:\WINDOWS\pss\OpenOffice.org 2.2.lnkStartup

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Programme\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Programme\\Windows Live\\Messenger\\livecall.exe"=
"C:\\Programme\\IEPro\\MiniDM.exe"=
"C:\\Programme\\Messenger\\msmsgs.exe"=
"C:\\WINDOWS\\system32\\dpvsetup.exe"=
"C:\\Soldat\\Soldat.exe"=
"C:\\Programme\\Skype\\Phone\\Skype.exe"=
"C:\\xampp\\apache\\bin\\apache.exe"=
"C:\\Programme\\Counter-Strike 1.6\\hl.exe"=
"C:\\Programme\\Counter-Strike 1.6\\hlds.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"7777:TCP"= 7777:TCP:GTA Hosten 7777
"2222:TCP"= 2222:TCP:2222

R2 Apache2.2;Apache2.2;"C:\xampp\apache\bin\apache.exe" -k runservice []
S3 dump_wmimmc;dump_wmimmc;C:\ijji\ENGLISH\Gunz\GameGuard\dump_wmimmc.sys []
S3 NETIMFLT;PANDA NDIS IM Filter Miniport;C:\WINDOWS\system32\DRIVERS\netimflt.sys []

.
**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-06-11 23:31:52
Windows 5.1.2600 Service Pack 3 NTFS

Scanne versteckte Prozesse...

Scanne versteckte Autostart Einträge...

Scanne versteckte Dateien...

Scan erfolgreich abgeschlossen
versteckte Dateien: 0

**************************************************************************
.
Zeit der Fertigstellung: 2008-06-11 23:33:52
ComboFix-quarantined-files.txt 2008-06-11 21:33:46
ComboFix2.txt 2008-05-11 11:41:13

14 Verzeichnis(se), 9,985,470,464 Bytes frei
16 Verzeichnis(se), 10,156,453,888 Bytes frei

944 --- E O F --- 2008-05-16 22:39:34
Seitenanfang Seitenende
12.06.2008, 00:35
Swisstreasure
Moderator

Beiträge: 5694
#4 Kommt die Virenmeldung immernoch?

Scanne mit Malwarebytes und lösche was gefunden wird + poste den report
http://virus-protect.org/artikel/tools/malwarebytes.html


Gruss Swiss
Seitenanfang Seitenende
12.06.2008, 15:26
juventiner
Member

Themenstarter

Beiträge: 47
#5 Nix gefunden, report:

Zitat


Malwarebytes' Anti-Malware 1.17
Datenbank Version: 849

15:25:31 12.06.2008
mbam-log-6-12-2008 (15-25-31).txt

Scan Art: Komplett Scan (C:\|)
Objekte gescannt: 145428
Scan Dauer: 1 hour(s), 7 minute(s), 18 second(s)

Infizierte Speicher Prozesse: 0
Infizierte Speicher Module: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Datei Objekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0

Infizierte Speicher Prozesse:
(Keine Malware Objekte gefunden)

Infizierte Speicher Module:
(Keine Malware Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine Malware Objekte gefunden)

Infizierte Registrierungswerte:
(Keine Malware Objekte gefunden)

Infizierte Datei Objekte der Registrierung:
(Keine Malware Objekte gefunden)

Infizierte Verzeichnisse:
(Keine Malware Objekte gefunden)

Infizierte Dateien:
(Keine Malware Objekte gefunden)
Seitenanfang Seitenende
12.06.2008, 17:07
Swisstreasure
Moderator

Beiträge: 5694
#6 Dann mach noch einen Onlinescan mit Bitdefender:
http://virus-protect.org/artikel/tools/bitdefender.html

EDIT: Also war Fehlalarm, dürfte alles wieder sauber sein ;)

Gruss Swiss
Dieser Beitrag wurde am 13.06.2008 um 00:51 Uhr von Tonstudio editiert.
Seitenanfang Seitenende
Um auf dieses Thema zu ANTWORTEN
bitte erst » hier kostenlos registrieren!!

Folgende Themen könnten Dich auch interessieren:
Seite(n): 1