ComboFix 08-07-23.5 - Iniciar 2008-08-02 20:21:17.10 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.2.1252.1.1046.18.2289 [GMT -3:00] Executando de: D:\Meus Progs\ComboFix.exe * Criado um novo ponto de restauro [color=red][b]ATENÇAO - ESTA MAQUINA NAO TEM A CONSOLE DE RECUPERAÇÃO INSTALADA !![/b][/color] . ((((((((((((((((((((((( Ficheiros criados de 2008-07-02 to 2008-08-02 )))))))))))))))))))))))))))))))) . 2008-08-02 17:57 . 2008-08-02 17:59 d-------- C:\Documents and Settings\All Users\Dados de aplicativos\Lavasoft 2008-08-02 17:57 . 2008-08-02 17:57 d-------- C:\Arquivos de programas\Lavasoft 2008-08-02 00:19 . 2008-08-02 00:19 17 --a------ C:\WINDOWS\system32\lyonelbass@hotmail.com 2008-08-02 00:11 . 2008-08-02 01:05 1,469 --a------ C:\WINDOWS\system32\MsnListObj.dsm 2008-08-02 00:01 . 2008-08-02 00:01 0 --a------ C:\WINDOWS\system32\dkwork.ini 2008-08-02 00:00 . 2008-08-02 00:01 290,304 ---hs---- C:\WINDOWS\system32\Orkservs.exe 2008-08-02 00:00 . 2008-08-02 00:00 268,288 ---hs---- C:\WINDOWS\system32\Msmservs.exe 2008-08-02 00:00 . 2008-08-02 18:39 1,074 --a------ C:\WINDOWS\system32\Config.dsm 2008-08-02 00:00 . 2008-08-02 18:39 687 --a------ C:\WINDOWS\system32\Html.dsm 2008-08-01 23:59 . 2008-08-02 00:00 509,440 ---hs---- C:\WINDOWS\system32\Intnetobj.exe 2008-08-01 23:58 . 2008-08-01 23:59 1,718,784 ---hs---- C:\WINDOWS\system32\Techserv.exe 2008-08-01 23:58 . 2008-08-01 23:59 214,528 --a------ C:\WINDOWS\system32\Winblaster.exe 2008-08-01 23:58 . 2008-08-01 23:58 55,808 --a------ C:\WINDOWS\system32\Windwn32.exe 2008-07-21 22:32 . 2008-07-21 22:46 d-------- C:\Arquivos de programas\Guitar and Bass Ear Trainer 2008-07-20 10:39 . 2008-07-20 10:39 0 --a------ C:\dump_dvd.vob 2008-07-19 12:10 . 2008-08-02 18:36 244 --ah----- C:\sqmnoopt19.sqm 2008-07-19 12:10 . 2008-08-02 18:36 232 --ah----- C:\sqmdata19.sqm 2008-07-19 12:03 . 2008-08-02 18:35 244 --ah----- C:\sqmnoopt18.sqm 2008-07-19 12:03 . 2008-08-02 18:35 232 --ah----- C:\sqmdata18.sqm 2008-07-19 11:41 . 2008-08-02 18:35 244 --ah----- C:\sqmnoopt17.sqm 2008-07-19 11:41 . 2008-08-02 18:35 232 --ah----- C:\sqmdata17.sqm 2008-07-19 11:35 . 2008-08-02 18:35 244 --ah----- C:\sqmnoopt16.sqm 2008-07-19 11:35 . 2008-08-02 18:35 232 --ah----- C:\sqmdata16.sqm 2008-07-19 11:17 . 2007-02-26 04:03 16,125,440 -ra------ C:\WINDOWS\Rthdcpl.exe.xpize 2008-07-19 11:17 . 2005-09-20 23:25 299,008 -ra------ C:\WINDOWS\system32\Alsndmgr.cpl.xpize 2008-07-19 11:17 . 2006-08-17 19:58 282,624 -ra------ C:\WINDOWS\system32\Rtsndmgr.cpl.xpize 2008-07-19 11:17 . 2006-07-21 05:14 86,016 -ra------ C:\WINDOWS\Soundman.exe.xpize 2008-07-19 11:15 . 2004-08-03 23:45 219,648 --a------ C:\WINDOWS\system32\uxtheme.backup 2008-07-19 10:56 . 2008-08-02 18:41 d-------- C:\Arquivos de programas\Thoosje Sidebar V2.3 2008-07-19 10:28 . 2008-05-24 00:24 224 -rahs---- C:\BOOT.BKK 2008-07-19 10:26 . 2008-07-19 10:26 d-------- C:\Arquivos de programas\TGTSoft 2008-07-19 00:48 . 2008-07-19 00:48 7,168 --ahs---- C:\WINDOWS\Thumbs.db 2008-07-15 00:16 . 2008-07-19 01:10 d-------- C:\Arquivos de programas\Stardock 2008-07-15 00:16 . 2008-07-19 01:10 d-------- C:\Arquivos de programas\Arquivos comuns\Stardock 2008-07-14 00:13 . 2008-07-14 00:13 d-------- C:\Arquivos de programas\Alwil Software 2008-07-13 23:03 . 2007-10-16 09:00 d--h----- C:\Documents and Settings\Administrador.CPU\Modelos 2008-07-13 23:03 . 2007-10-16 05:52 d-------- C:\Documents and Settings\Administrador.CPU\Meus documentos 2008-07-13 23:03 . 2007-10-16 05:52 dr------- C:\Documents and Settings\Administrador.CPU\Menu Iniciar 2008-07-13 23:03 . 2007-10-16 05:52 d-------- C:\Documents and Settings\Administrador.CPU\Favoritos 2008-07-13 23:03 . 2007-10-16 05:52 dr-h----- C:\Documents and Settings\Administrador.CPU\Dados de aplicativos 2008-07-13 23:03 . 2008-08-02 20:22 d--h----- C:\Documents and Settings\Administrador.CPU\Configurações locais 2008-07-13 23:03 . 2007-10-16 05:52 d--h----- C:\Documents and Settings\Administrador.CPU\Ambiente de rede 2008-07-13 23:03 . 2007-10-16 05:52 d--h----- C:\Documents and Settings\Administrador.CPU\Ambiente de impressão 2008-07-13 23:03 . 2008-07-13 23:03 d-------- C:\Documents and Settings\Administrador.CPU 2008-07-13 22:16 . 2007-10-16 09:00 d--h----- C:\Documents and Settings\Administrador\Modelos 2008-07-13 22:16 . 2007-10-16 05:52 d-------- C:\Documents and Settings\Administrador\Meus documentos 2008-07-13 22:16 . 2007-10-16 05:52 dr------- C:\Documents and Settings\Administrador\Menu Iniciar 2008-07-13 22:16 . 2007-10-16 05:52 d-------- C:\Documents and Settings\Administrador\Favoritos 2008-07-13 22:16 . 2007-10-16 05:52 dr-h----- C:\Documents and Settings\Administrador\Dados de aplicativos 2008-07-13 22:16 . 2008-07-13 22:16 d--h----- C:\Documents and Settings\Administrador\Configurações locais 2008-07-13 22:16 . 2007-10-16 05:52 d--h----- C:\Documents and Settings\Administrador\Ambiente de rede 2008-07-13 22:16 . 2007-10-16 05:52 d--h----- C:\Documents and Settings\Administrador\Ambiente de impressão 2008-07-13 22:16 . 2008-07-13 22:16 d-------- C:\Documents and Settings\Administrador 2008-07-13 11:49 . 2008-07-13 22:19 196 --a------ C:\fx.reg 2008-07-13 10:25 . 2008-07-13 10:25 27 --a------ C:\WINDOWS\winhlp32.dat 2008-07-09 23:19 . 2008-07-09 23:19 d-------- C:\Documents and Settings\Iniciar\Dados de aplicativos\Nokia Multimedia Player 2008-07-09 23:13 . 2008-08-02 18:12 54,156 --ah----- C:\WINDOWS\QTFont.qfn 2008-07-09 23:13 . 2008-07-09 23:13 1,409 --a------ C:\WINDOWS\QTFont.for 2008-07-09 18:02 . 2004-08-03 23:08 25,600 --a------ C:\WINDOWS\system32\drivers\usbser.sys 2008-07-09 18:02 . 2004-08-03 23:08 25,600 --a--c--- C:\WINDOWS\system32\dllcache\usbser.sys 2008-07-09 18:02 . 2008-07-09 18:02 0 --ah----- C:\WINDOWS\system32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf 2008-07-09 18:02 . 2008-07-09 18:02 0 --ah----- C:\WINDOWS\system32\drivers\Msft_Kernel_ccdcmb_01005.Wdf 2008-07-09 18:01 . 2008-07-09 18:03 d-------- C:\Documents and Settings\Iniciar\Dados de aplicativos\PC Suite 2008-07-09 18:01 . 2008-07-09 18:03 d-------- C:\Documents and Settings\Iniciar\Dados de aplicativos\Nokia 2008-07-09 18:01 . 2008-07-13 23:02 d-------- C:\Documents and Settings\All Users\Dados de aplicativos\PC Suite 2008-07-09 18:01 . 2008-07-09 18:01 d-------- C:\Arquivos de programas\PC Connectivity Solution 2008-07-09 18:01 . 2008-07-09 18:01 d-------- C:\Arquivos de programas\Arquivos comuns\PCSuite 2008-07-09 18:01 . 2008-07-09 18:01 d-------- C:\Arquivos de programas\Arquivos comuns\Nokia 2008-07-09 18:01 . 2007-11-29 10:33 1,419,232 --a------ C:\WINDOWS\system32\wdfcoinstaller01005.dll 2008-07-09 18:01 . 2007-11-29 10:39 95,744 --a------ C:\WINDOWS\system32\nmwcdcocls.dll 2008-07-09 18:01 . 2007-09-17 15:53 21,632 --a------ C:\WINDOWS\system32\drivers\pccsmcfd.sys 2008-07-09 18:01 . 2007-11-29 10:39 19,328 --a------ C:\WINDOWS\system32\drivers\ccdcmbo.sys 2008-07-09 18:01 . 2007-11-29 10:39 16,896 --a------ C:\WINDOWS\system32\drivers\ccdcmb.sys 2008-07-09 18:01 . 2007-11-29 10:39 8,064 --a------ C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys 2008-07-09 18:01 . 2007-11-29 10:39 8,064 --a------ C:\WINDOWS\system32\drivers\usbser_lowerflt.sys 2008-07-09 18:00 . 2008-07-09 18:00 d-------- C:\Documents and Settings\All Users\Dados de aplicativos\Installations 2008-07-09 18:00 . 2008-07-09 18:01 d-------- C:\Arquivos de programas\Nokia 2008-07-09 18:00 . 2007-11-29 10:32 48,128 --a------ C:\WINDOWS\system32\nmwcdcls.dll 2008-07-09 04:45 . 2008-07-19 16:17 d-------- C:\Documents and Settings\Iniciar\Dados de aplicativos\MassTube 2008-07-09 04:45 . 2008-07-09 04:45 d-------- C:\Arquivos de programas\MassTube . ((((((((((((((((((((((((((((((((((((( Relatório Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-08-02 22:43 --------- d-----w C:\Arquivos de programas\Arquivos comuns\Wise Installation Wizard 2008-08-02 21:42 --------- d-----w C:\Arquivos de programas\VisualTaskTips 2008-08-02 04:04 --------- d--h--w C:\Arquivos de programas\Scpad 2008-07-20 13:37 --------- d-----w C:\Documents and Settings\Iniciar\Dados de aplicativos\CyberLink 2008-07-20 13:37 --------- d-----w C:\Documents and Settings\All Users\Dados de aplicativos\CyberLink 2008-07-20 12:40 --------- d-----w C:\Documents and Settings\All Users\Dados de aplicativos\DVD Shrink 2008-07-20 00:12 --------- d-----w C:\Arquivos de programas\eMule 2008-07-20 00:04 --------- d-----w C:\Documents and Settings\Iniciar\Dados de aplicativos\uTorrent 2008-07-19 22:21 --------- d-----w C:\Arquivos de programas\Java 2008-07-19 15:00 219,648 ----a-w C:\WINDOWS\system32\uxtheme.dll 2008-07-19 03:43 --------- d-----w C:\Arquivos de programas\OBjectDock 2008-07-19 03:24 --------- d-----w C:\Arquivos de programas\Windows Media Connect 2 2008-07-19 03:24 --------- d-----w C:\Arquivos de programas\Pro Evolution Soccer 2008 2008-07-19 03:24 --------- d-----w C:\Arquivos de programas\LimeWire 2008-07-19 03:24 --------- d-----w C:\Arquivos de programas\iLuminaPO 2008-07-19 03:24 --------- d-----w C:\Arquivos de programas\AdorageI-SAL 2008-07-18 03:53 --------- d-----w C:\Documents and Settings\Iniciar\Dados de aplicativos\LimeWire 2008-07-09 21:01 --------- d-----w C:\Arquivos de programas\DIFX 2008-06-25 02:36 --------- d-----w C:\Arquivos de programas\DVD Decrypter 2008-06-25 02:35 --------- d-----w C:\Arquivos de programas\DVD Shrink 2008-06-20 17:41 247,808 ----a-w C:\WINDOWS\system32\mswsock.dll 2008-06-20 10:45 360,320 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys 2008-06-20 10:44 138,368 ----a-w C:\WINDOWS\system32\drivers\afd.sys 2008-06-20 09:52 225,920 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys 2008-06-18 16:19 --------- d-----w C:\Arquivos de programas\Vimicro Corporation 2008-06-18 16:18 --------- d--h--w C:\Arquivos de programas\InstallShield Installation Information 2008-06-18 16:18 --------- d-----w C:\Arquivos de programas\Vimicro 2008-06-16 19:59 --------- d-----w C:\Documents and Settings\Iniciar\Dados de aplicativos\Ahead 2008-06-16 19:59 --------- d-----w C:\Arquivos de programas\Arquivos comuns\Ahead 2008-06-14 17:59 272,384 ------w C:\WINDOWS\system32\drivers\bthport.sys 2008-06-04 11:50 --------- d-----w C:\Arquivos de programas\Viduku 2008-06-03 21:24 --------- d-----w C:\Arquivos de programas\FreeRIP2 2008-06-02 22:27 --------- d-----w C:\Arquivos de programas\Windows Live Safety Center 2008-06-02 21:42 --------- d-----w C:\Arquivos de programas\uTorrent 2008-06-02 20:56 --------- d-----w C:\Arquivos de programas\Arquivos comuns\Adobe 2008-06-02 15:54 --------- d-----w C:\Arquivos de programas\WinAVI Video Converter 2008-06-02 14:37 --------- d-----w C:\Arquivos de programas\Total Video Converter 2008-05-29 13:05 103,736 ----a-w C:\WINDOWS\system32\PnkBstrB.exe 2008-05-19 04:05 66,872 ----a-w C:\WINDOWS\system32\PnkBstrA.exe 2008-05-15 10:27 22,328 ----a-w C:\Documents and Settings\Iniciar\Dados de aplicativos\PnkBstrK.sys 2008-05-15 10:26 669,184 ----a-w C:\WINDOWS\system32\pbsvc.exe 2008-05-09 20:54 107,888 ----a-w C:\WINDOWS\system32\CmdLineExt.dll 2008-05-07 05:15 1,292,288 ----a-w C:\WINDOWS\system32\quartz.dll . ((((((((((((((((((((((((((((( snapshot_2008-07-19_16.35.29.48 ))))))))))))))))))))))))))))))))))))))))) . + 2008-01-16 01:12:48 296,336 ----a-w C:\WINDOWS\Downloaded Program Files\rufsi.dll - 2007-06-13 13:21:56 1,697,280 ----a-w C:\WINDOWS\explorer.exe + 2007-06-13 13:21:56 1,035,264 ----a-w C:\WINDOWS\explorer.exe - 2005-05-26 23:22:01 143,872 ----a-w C:\WINDOWS\hh.exe + 2005-05-26 23:22:01 10,752 ----a-w C:\WINDOWS\hh.exe - 2004-08-04 02:45:40 173,568 ----a-w C:\WINDOWS\pchealth\helpctr\binaries\msconfig.exe + 2004-08-04 02:45:40 159,744 ----a-w C:\WINDOWS\pchealth\helpctr\binaries\msconfig.exe - 2004-08-04 02:45:42 428,032 ----a-w C:\WINDOWS\regedit.exe + 2004-08-04 02:45:42 150,528 ----a-w C:\WINDOWS\regedit.exe - 2001-10-28 18:06:06 94,720 ----a-w C:\WINDOWS\system32\acctres.dll + 2001-10-28 18:06:06 68,096 ----a-w C:\WINDOWS\system32\acctres.dll - 2004-08-04 02:45:30 516,096 ----a-w C:\WINDOWS\system32\accwiz.exe + 2004-08-04 02:45:30 187,904 ----a-w C:\WINDOWS\system32\accwiz.exe + 2008-07-19 14:43:08 1,163,960 ----a-w C:\WINDOWS\system32\aswBoot.exe - 2006-10-18 23:47:08 284,672 ----a-w C:\WINDOWS\system32\audiodev.dll + 2006-10-18 23:47:08 276,992 ----a-w C:\WINDOWS\system32\audiodev.dll + 2008-07-19 14:30:53 94,392 ----a-w C:\WINDOWS\system32\AvastSS.scr - 2004-08-04 02:45:22 30,720 ----a-w C:\WINDOWS\system32\batmeter.dll + 2004-08-04 02:45:22 28,672 ----a-w C:\WINDOWS\system32\batmeter.dll - 2004-08-04 02:45:22 13,312 ----a-w C:\WINDOWS\system32\batt.dll + 2004-08-04 02:45:22 8,704 ----a-w C:\WINDOWS\system32\batt.dll - 2001-10-28 18:06:10 228,864 ----a-w C:\WINDOWS\system32\calc.exe + 2001-10-28 18:06:10 115,200 ----a-w C:\WINDOWS\system32\calc.exe - 2004-08-04 02:45:22 322,560 ----a-w C:\WINDOWS\system32\cdfview.dll + 2004-08-04 02:45:22 151,040 ----a-w C:\WINDOWS\system32\cdfview.dll - 2004-08-04 02:45:22 825,856 ----a-w C:\WINDOWS\system32\certmgr.dll + 2004-08-04 02:45:22 464,384 ----a-w C:\WINDOWS\system32\certmgr.dll - 2001-10-28 18:06:12 179,200 ----a-w C:\WINDOWS\system32\ciadmin.dll + 2001-10-28 18:06:12 164,864 ----a-w C:\WINDOWS\system32\ciadmin.dll - 2004-08-04 02:45:30 80,384 ----a-w C:\WINDOWS\system32\cleanmgr.exe + 2004-08-04 02:45:30 64,512 ----a-w C:\WINDOWS\system32\cleanmgr.exe - 2004-08-04 02:45:32 109,568 ----a-w C:\WINDOWS\system32\clipbrd.exe + 2004-08-04 02:45:32 104,960 ----a-w C:\WINDOWS\system32\clipbrd.exe - 2004-08-04 02:45:32 48,128 ----a-w C:\WINDOWS\system32\clipsrv.exe + 2004-08-04 02:45:32 33,280 ----a-w C:\WINDOWS\system32\clipsrv.exe - 2004-08-04 02:45:32 514,560 ----a-w C:\WINDOWS\system32\cmd.exe + 2004-08-04 02:45:32 400,384 ----a-w C:\WINDOWS\system32\cmd.exe - 2004-08-04 02:45:22 518,144 ----a-w C:\WINDOWS\system32\cmdial32.dll + 2004-08-04 02:45:22 347,648 ----a-w C:\WINDOWS\system32\cmdial32.dll - 2004-08-04 02:45:32 61,440 ----a-w C:\WINDOWS\system32\cmdl32.exe + 2004-08-04 02:45:32 47,104 ----a-w C:\WINDOWS\system32\cmdl32.exe - 2004-08-04 02:45:32 79,360 ----a-w C:\WINDOWS\system32\cmstp.exe + 2004-08-04 02:45:32 65,024 ----a-w C:\WINDOWS\system32\cmstp.exe - 2004-08-04 02:45:22 325,120 ----a-w C:\WINDOWS\system32\comdlg32.dll + 2004-08-04 02:45:22 275,456 ----a-w C:\WINDOWS\system32\comdlg32.dll - 2004-08-04 02:45:22 832,000 ----a-w C:\WINDOWS\system32\comres.dll + 2004-08-04 02:45:22 821,760 ----a-w C:\WINDOWS\system32\comres.dll - 2004-08-04 02:45:32 41,472 ----a-w C:\WINDOWS\system32\conime.exe + 2004-08-04 02:45:32 27,648 ----a-w C:\WINDOWS\system32\conime.exe - 2004-08-04 02:45:22 205,312 ----a-w C:\WINDOWS\system32\credui.dll + 2004-08-04 02:45:22 164,352 ----a-w C:\WINDOWS\system32\credui.dll - 2004-08-04 02:45:22 583,168 ----a-w C:\WINDOWS\system32\cryptui.dll + 2004-08-04 02:45:22 528,384 ----a-w C:\WINDOWS\system32\cryptui.dll - 2004-08-04 02:45:32 114,688 ----a-w C:\WINDOWS\system32\cscript.exe + 2004-08-04 02:45:32 98,304 ----a-w C:\WINDOWS\system32\cscript.exe - 2004-08-04 02:45:22 780,800 ----a-w C:\WINDOWS\system32\cscui.dll + 2004-08-04 02:45:22 331,776 ----a-w C:\WINDOWS\system32\cscui.dll - 2004-08-04 02:45:32 30,208 ----a-w C:\WINDOWS\system32\ctfmon.exe + 2004-08-04 02:45:32 15,360 ----a-w C:\WINDOWS\system32\ctfmon.exe - 2001-10-28 18:06:18 20,480 ----a-w C:\WINDOWS\system32\deskadp.dll + 2001-10-28 18:06:18 16,896 ----a-w C:\WINDOWS\system32\deskadp.dll - 2001-10-28 18:06:18 19,968 ----a-w C:\WINDOWS\system32\deskmon.dll + 2001-10-28 18:06:18 16,896 ----a-w C:\WINDOWS\system32\deskmon.dll - 2001-10-28 18:06:18 22,016 ----a-w C:\WINDOWS\system32\deskperf.dll + 2001-10-28 18:06:18 18,432 ----a-w C:\WINDOWS\system32\deskperf.dll - 2004-08-04 02:45:22 432,128 ----a-w C:\WINDOWS\system32\devmgr.dll + 2004-08-04 02:45:22 288,768 ----a-w C:\WINDOWS\system32\devmgr.dll - 2001-10-28 18:06:18 59,904 ----a-w C:\WINDOWS\system32\dfrgres.dll + 2001-10-28 18:06:18 54,272 ----a-w C:\WINDOWS\system32\dfrgres.dll - 2001-10-28 18:06:18 1,506,304 ----a-w C:\WINDOWS\system32\diskcopy.dll + 2001-10-28 18:06:18 1,502,208 ----a-w C:\WINDOWS\system32\diskcopy.dll - 2001-10-28 18:06:06 94,720 -c--a-w C:\WINDOWS\system32\dllcache\acctres.dll + 2001-10-28 18:06:06 68,096 -c--a-w C:\WINDOWS\system32\dllcache\acctres.dll - 2004-08-04 02:45:30 516,096 -c--a-w C:\WINDOWS\system32\dllcache\accwiz.exe + 2004-08-04 02:45:30 187,904 -c--a-w C:\WINDOWS\system32\dllcache\accwiz.exe - 2004-08-04 02:45:22 30,720 -c--a-w C:\WINDOWS\system32\dllcache\batmeter.dll + 2004-08-04 02:45:22 28,672 -c--a-w C:\WINDOWS\system32\dllcache\batmeter.dll - 2004-08-04 02:45:22 13,312 -c--a-w C:\WINDOWS\system32\dllcache\batt.dll + 2004-08-04 02:45:22 8,704 -c--a-w C:\WINDOWS\system32\dllcache\batt.dll - 2001-10-28 18:06:10 228,864 -c--a-w C:\WINDOWS\system32\dllcache\calc.exe + 2001-10-28 18:06:10 115,200 -c--a-w C:\WINDOWS\system32\dllcache\calc.exe - 2004-08-04 02:45:22 322,560 -c--a-w C:\WINDOWS\system32\dllcache\cdfview.dll + 2004-08-04 02:45:22 151,040 -c--a-w C:\WINDOWS\system32\dllcache\cdfview.dll - 2004-08-04 02:45:22 825,856 -c--a-w C:\WINDOWS\system32\dllcache\certmgr.dll + 2004-08-04 02:45:22 464,384 -c--a-w C:\WINDOWS\system32\dllcache\certmgr.dll - 2001-10-28 18:06:12 179,200 -c--a-w C:\WINDOWS\system32\dllcache\ciadmin.dll + 2001-10-28 18:06:12 164,864 -c--a-w C:\WINDOWS\system32\dllcache\ciadmin.dll - 2004-08-04 02:45:30 80,384 -c--a-w C:\WINDOWS\system32\dllcache\cleanmgr.exe + 2004-08-04 02:45:30 64,512 -c--a-w C:\WINDOWS\system32\dllcache\cleanmgr.exe - 2004-08-04 02:45:32 109,568 -c--a-w C:\WINDOWS\system32\dllcache\clipbrd.exe + 2004-08-04 02:45:32 104,960 -c--a-w C:\WINDOWS\system32\dllcache\clipbrd.exe - 2004-08-04 02:45:32 48,128 -c--a-w C:\WINDOWS\system32\dllcache\clipsrv.exe + 2004-08-04 02:45:32 33,280 -c--a-w C:\WINDOWS\system32\dllcache\clipsrv.exe - 2004-08-04 02:45:32 514,560 -c--a-w C:\WINDOWS\system32\dllcache\cmd.exe + 2004-08-04 02:45:32 400,384 -c--a-w C:\WINDOWS\system32\dllcache\cmd.exe - 2004-08-04 02:45:22 518,144 -c--a-w C:\WINDOWS\system32\dllcache\cmdial32.dll + 2004-08-04 02:45:22 347,648 -c--a-w C:\WINDOWS\system32\dllcache\cmdial32.dll - 2004-08-04 02:45:32 61,440 -c--a-w C:\WINDOWS\system32\dllcache\cmdl32.exe + 2004-08-04 02:45:32 47,104 -c--a-w C:\WINDOWS\system32\dllcache\cmdl32.exe - 2004-08-04 02:45:32 79,360 -c--a-w C:\WINDOWS\system32\dllcache\cmstp.exe + 2004-08-04 02:45:32 65,024 -c--a-w C:\WINDOWS\system32\dllcache\cmstp.exe - 2004-08-04 02:45:22 325,120 -c--a-w C:\WINDOWS\system32\dllcache\comdlg32.dll + 2004-08-04 02:45:22 275,456 -c--a-w C:\WINDOWS\system32\dllcache\comdlg32.dll - 2004-08-04 02:45:22 832,000 -c--a-w C:\WINDOWS\system32\dllcache\comres.dll + 2004-08-04 02:45:22 821,760 -c--a-w C:\WINDOWS\system32\dllcache\comres.dll - 2004-08-04 02:45:32 41,472 -c--a-w C:\WINDOWS\system32\dllcache\conime.exe + 2004-08-04 02:45:32 27,648 -c--a-w C:\WINDOWS\system32\dllcache\conime.exe - 2004-08-04 02:45:22 205,312 -c--a-w C:\WINDOWS\system32\dllcache\credui.dll + 2004-08-04 02:45:22 164,352 -c--a-w C:\WINDOWS\system32\dllcache\credui.dll - 2004-08-04 02:45:22 583,168 -c--a-w C:\WINDOWS\system32\dllcache\cryptui.dll + 2004-08-04 02:45:22 528,384 -c--a-w C:\WINDOWS\system32\dllcache\cryptui.dll - 2004-08-04 02:45:32 114,688 -c--a-w C:\WINDOWS\system32\dllcache\cscript.exe + 2004-08-04 02:45:32 98,304 -c--a-w C:\WINDOWS\system32\dllcache\cscript.exe - 2004-08-04 02:45:22 780,800 -c--a-w C:\WINDOWS\system32\dllcache\cscui.dll + 2004-08-04 02:45:22 331,776 -c--a-w C:\WINDOWS\system32\dllcache\cscui.dll - 2004-08-04 02:45:32 30,208 -c--a-w C:\WINDOWS\system32\dllcache\ctfmon.exe + 2004-08-04 02:45:32 15,360 -c--a-w C:\WINDOWS\system32\dllcache\ctfmon.exe - 2001-10-28 18:06:18 20,480 -c--a-w C:\WINDOWS\system32\dllcache\deskadp.dll + 2001-10-28 18:06:18 16,896 -c--a-w C:\WINDOWS\system32\dllcache\deskadp.dll - 2001-10-28 18:06:18 19,968 -c--a-w C:\WINDOWS\system32\dllcache\deskmon.dll + 2001-10-28 18:06:18 16,896 -c--a-w C:\WINDOWS\system32\dllcache\deskmon.dll - 2001-10-28 18:06:18 22,016 -c--a-w C:\WINDOWS\system32\dllcache\deskperf.dll + 2001-10-28 18:06:18 18,432 -c--a-w C:\WINDOWS\system32\dllcache\deskperf.dll - 2004-08-04 02:45:22 432,128 -c--a-w C:\WINDOWS\system32\dllcache\devmgr.dll + 2004-08-04 02:45:22 288,768 -c--a-w C:\WINDOWS\system32\dllcache\devmgr.dll - 2001-10-28 18:06:18 59,904 -c--a-w C:\WINDOWS\system32\dllcache\dfrgres.dll + 2001-10-28 18:06:18 54,272 -c--a-w C:\WINDOWS\system32\dllcache\dfrgres.dll - 2001-10-28 18:06:18 1,506,304 -c--a-w C:\WINDOWS\system32\dllcache\diskcopy.dll + 2001-10-28 18:06:18 1,502,208 -c--a-w C:\WINDOWS\system32\dllcache\diskcopy.dll - 2001-10-28 18:06:18 797,696 -c--a-w C:\WINDOWS\system32\dllcache\dmdlgs.dll + 2001-10-28 18:06:18 273,920 -c--a-w C:\WINDOWS\system32\dllcache\dmdlgs.dll - 2001-10-28 18:06:18 192,512 -c--a-w C:\WINDOWS\system32\dllcache\dmdskres.dll + 2001-10-28 18:06:18 127,488 -c--a-w C:\WINDOWS\system32\dllcache\dmdskres.dll - 2004-08-04 02:45:22 484,352 -c--a-w C:\WINDOWS\system32\dllcache\dpvoice.dll + 2004-08-04 02:45:22 212,992 -c--a-w C:\WINDOWS\system32\dllcache\dpvoice.dll - 2001-10-28 18:06:30 171,520 -c--a-w C:\WINDOWS\system32\dllcache\dskquoui.dll + 2001-10-28 18:06:30 146,944 -c--a-w C:\WINDOWS\system32\dllcache\dskquoui.dll - 2004-08-04 02:45:22 196,096 -c--a-w C:\WINDOWS\system32\dllcache\dsquery.dll + 2004-08-04 02:45:22 240,128 -c--a-w C:\WINDOWS\system32\dllcache\dsquery.dll - 2004-08-04 02:45:22 228,864 -c--a-w C:\WINDOWS\system32\dllcache\dsuiext.dll + 2004-08-04 02:45:22 113,664 -c--a-w C:\WINDOWS\system32\dllcache\dsuiext.dll - 2006-08-24 16:18:32 632,886 -c--a-w C:\WINDOWS\system32\dllcache\dxmasf.dll + 2006-08-24 16:18:32 499,766 -c--a-w C:\WINDOWS\system32\dllcache\dxmasf.dll - 2004-08-04 02:45:22 322,560 -c--a-w C:\WINDOWS\system32\dllcache\els.dll + 2004-08-04 02:45:22 185,344 -c--a-w C:\WINDOWS\system32\dllcache\els.dll - 2001-10-28 18:06:32 146,432 -c--a-w C:\WINDOWS\system32\dllcache\eventvwr.exe + 2001-10-28 18:06:32 9,216 -c--a-w C:\WINDOWS\system32\dllcache\eventvwr.exe - 2007-06-13 13:21:56 1,697,280 -c--a-w C:\WINDOWS\system32\dllcache\explorer.exe + 2007-06-13 13:21:56 1,035,264 -c--a-w C:\WINDOWS\system32\dllcache\explorer.exe - 2004-08-04 02:45:22 369,152 -c--a-w C:\WINDOWS\system32\dllcache\filemgmt.dll + 2004-08-04 02:45:22 342,528 -c--a-w C:\WINDOWS\system32\dllcache\filemgmt.dll - 2004-08-04 02:45:22 222,208 -c--a-w C:\WINDOWS\system32\dllcache\fldrclnr.dll + 2004-08-04 02:45:22 88,576 -c--a-w C:\WINDOWS\system32\dllcache\fldrclnr.dll - 2004-08-04 02:45:22 1,181,696 -c--a-w C:\WINDOWS\system32\dllcache\fontext.dll + 2004-08-04 02:45:22 384,512 -c--a-w C:\WINDOWS\system32\dllcache\fontext.dll - 2001-10-28 18:06:34 241,152 -c--a-w C:\WINDOWS\system32\dllcache\gcdef.dll + 2001-10-28 18:06:34 77,312 -c--a-w C:\WINDOWS\system32\dllcache\gcdef.dll - 2004-08-04 02:44:18 585,728 -c--a-w C:\WINDOWS\system32\dllcache\gpedit.dll + 2004-08-04 02:44:18 572,928 -c--a-w C:\WINDOWS\system32\dllcache\gpedit.dll - 2005-05-26 23:22:01 143,872 -c--a-w C:\WINDOWS\system32\dllcache\hh.exe + 2005-05-26 23:22:01 10,752 -c--a-w C:\WINDOWS\system32\dllcache\hh.exe - 2004-08-04 02:45:24 740,352 -c--a-w C:\WINDOWS\system32\dllcache\hnetwiz.dll + 2004-08-04 02:45:24 334,848 -c--a-w C:\WINDOWS\system32\dllcache\hnetwiz.dll - 2004-08-04 02:45:24 168,960 -c--a-w C:\WINDOWS\system32\dllcache\hotplug.dll + 2004-08-04 02:45:24 146,432 -c--a-w C:\WINDOWS\system32\dllcache\hotplug.dll - 2001-10-28 18:06:36 83,456 -c--a-w C:\WINDOWS\system32\dllcache\icmui.dll + 2001-10-28 18:06:36 55,808 -c--a-w C:\WINDOWS\system32\dllcache\icmui.dll - 2004-08-04 02:45:36 204,800 -c--a-w C:\WINDOWS\system32\dllcache\iexpress.exe + 2004-08-04 02:45:36 114,688 -c--a-w C:\WINDOWS\system32\dllcache\iexpress.exe - 2001-10-28 18:06:38 149,504 -c--a-w C:\WINDOWS\system32\dllcache\inetcplc.dll + 2001-10-28 18:06:38 117,248 -c--a-w C:\WINDOWS\system32\dllcache\inetcplc.dll - 2004-08-04 02:44:20 57,344 -c--a-w C:\WINDOWS\system32\dllcache\inetres.dll + 2004-08-04 02:44:20 49,664 -c--a-w C:\WINDOWS\system32\dllcache\inetres.dll - 2004-08-04 02:45:24 126,464 -c--a-w C:\WINDOWS\system32\dllcache\input.dll + 2004-08-04 02:45:24 125,440 -c--a-w C:\WINDOWS\system32\dllcache\input.dll - 2001-10-28 18:06:38 17,920 -c--a-w C:\WINDOWS\system32\dllcache\irclass.dll + 2001-10-28 18:06:38 13,312 -c--a-w C:\WINDOWS\system32\dllcache\irclass.dll - 2004-08-04 02:45:24 408,064 -c--a-w C:\WINDOWS\system32\dllcache\keymgr.dll + 2004-08-04 02:45:24 152,576 -c--a-w C:\WINDOWS\system32\dllcache\keymgr.dll - 2004-08-04 02:45:24 201,728 -c--a-w C:\WINDOWS\system32\dllcache\mdminst.dll + 2004-08-04 02:45:24 119,296 -c--a-w C:\WINDOWS\system32\dllcache\mdminst.dll - 2004-08-04 02:45:38 701,440 -c--a-w C:\WINDOWS\system32\dllcache\migwiz.exe + 2004-08-04 02:45:38 245,248 -c--a-w C:\WINDOWS\system32\dllcache\migwiz.exe - 2004-08-04 02:45:38 849,920 -c--a-w C:\WINDOWS\system32\dllcache\mmc.exe + 2004-08-04 02:45:38 815,616 -c--a-w C:\WINDOWS\system32\dllcache\mmc.exe - 2004-08-04 02:45:24 65,024 -c--a-w C:\WINDOWS\system32\dllcache\mmcshext.dll + 2004-08-04 02:45:24 50,688 -c--a-w C:\WINDOWS\system32\dllcache\mmcshext.dll - 2004-08-04 02:45:38 324,096 -c--a-w C:\WINDOWS\system32\dllcache\mobsync.exe + 2004-08-04 02:45:38 143,872 -c--a-w C:\WINDOWS\system32\dllcache\mobsync.exe - 2004-08-04 02:45:40 173,568 -c--a-w C:\WINDOWS\system32\dllcache\msconfig.exe + 2004-08-04 02:45:40 159,744 -c--a-w C:\WINDOWS\system32\dllcache\msconfig.exe - 2004-08-04 02:45:40 20,480 -c--a-w C:\WINDOWS\system32\dllcache\msdtc.exe + 2004-08-04 02:45:40 6,144 -c--a-w C:\WINDOWS\system32\dllcache\msdtc.exe - 2004-08-04 02:45:24 1,501,696 -c--a-w C:\WINDOWS\system32\dllcache\msgina.dll + 2004-08-04 02:45:24 997,888 -c--a-w C:\WINDOWS\system32\dllcache\msgina.dll - 2004-08-04 02:45:24 55,296 -c--a-w C:\WINDOWS\system32\dllcache\msident.dll + 2004-08-04 02:45:24 51,712 -c--a-w C:\WINDOWS\system32\dllcache\msident.dll - 2004-08-04 02:45:24 363,008 -c--a-w C:\WINDOWS\system32\dllcache\msieftp.dll + 2004-08-04 02:45:24 250,368 -c--a-w C:\WINDOWS\system32\dllcache\msieftp.dll - 2005-05-04 17:45:36 211,968 -c--a-w C:\WINDOWS\system32\dllcache\msiexec.exe + 2005-05-04 17:45:36 78,848 -c--a-w C:\WINDOWS\system32\dllcache\msiexec.exe - 2004-08-04 02:45:40 186,368 -c--a-w C:\WINDOWS\system32\dllcache\msimn.exe + 2004-08-04 02:45:40 60,416 -c--a-w C:\WINDOWS\system32\dllcache\msimn.exe - 2004-08-04 02:44:38 3,145,216 -c--a-w C:\WINDOWS\system32\dllcache\msoeres.dll + 2004-08-04 02:44:38 2,512,896 -c--a-w C:\WINDOWS\system32\dllcache\msoeres.dll - 2004-08-04 02:45:40 506,368 -c--a-w C:\WINDOWS\system32\dllcache\mspaint.exe + 2004-08-04 02:45:40 345,600 -c--a-w C:\WINDOWS\system32\dllcache\mspaint.exe - 2004-08-04 02:45:26 400,384 -c--a-w C:\WINDOWS\system32\dllcache\mstask.dll + 2004-08-04 02:45:26 278,528 -c--a-w C:\WINDOWS\system32\dllcache\mstask.dll - 2004-08-04 02:34:20 419,840 -c--a-w C:\WINDOWS\system32\dllcache\mstsc.exe + 2004-08-04 02:34:20 409,088 -c--a-w C:\WINDOWS\system32\dllcache\mstsc.exe - 2007-06-26 06:10:32 1,371,136 -c--a-w C:\WINDOWS\system32\dllcache\msxml3.dll + 2007-06-26 06:10:32 1,104,896 -c--a-w C:\WINDOWS\system32\dllcache\msxml3.dll - 2001-10-28 18:07:06 107,520 -c--a-w C:\WINDOWS\system32\dllcache\mycomput.dll + 2001-10-28 18:07:06 90,112 -c--a-w C:\WINDOWS\system32\dllcache\mycomput.dll - 2004-08-04 02:45:26 310,784 -c--a-w C:\WINDOWS\system32\dllcache\mydocs.dll + 2004-08-04 02:45:26 90,624 -c--a-w C:\WINDOWS\system32\dllcache\mydocs.dll - 2004-08-04 02:45:26 2,028,544 -c--a-w C:\WINDOWS\system32\dllcache\netplwiz.dll + 2004-08-04 02:45:26 879,616 -c--a-w C:\WINDOWS\system32\dllcache\netplwiz.dll - 2004-08-04 02:45:26 2,318,336 -c--a-w C:\WINDOWS\system32\dllcache\netshell.dll + 2004-08-04 02:45:26 1,714,688 -c--a-w C:\WINDOWS\system32\dllcache\netshell.dll - 2004-08-04 02:45:26 700,928 -c--a-w C:\WINDOWS\system32\dllcache\newdev.dll + 2004-08-04 02:45:26 249,856 -c--a-w C:\WINDOWS\system32\dllcache\newdev.dll - 2004-08-04 02:45:40 182,784 -c--a-w C:\WINDOWS\system32\dllcache\notepad.exe + 2004-08-04 02:45:40 70,144 -c--a-w C:\WINDOWS\system32\dllcache\notepad.exe - 2004-08-04 02:45:40 93,696 -c--a-w C:\WINDOWS\system32\dllcache\nslookup.exe + 2004-08-04 02:45:40 79,360 -c--a-w C:\WINDOWS\system32\dllcache\nslookup.exe - 2004-08-04 02:45:40 1,530,880 -c--a-w C:\WINDOWS\system32\dllcache\ntbackup.exe + 2004-08-04 02:45:40 1,218,560 -c--a-w C:\WINDOWS\system32\dllcache\ntbackup.exe - 2001-10-28 18:07:10 28,672 -c--a-w C:\WINDOWS\system32\dllcache\ntlanui2.dll + 2001-10-28 18:07:10 14,848 -c--a-w C:\WINDOWS\system32\dllcache\ntlanui2.dll - 2001-10-28 18:07:12 46,080 -c--a-w C:\WINDOWS\system32\dllcache\ntsd.exe + 2001-10-28 18:07:12 31,744 -c--a-w C:\WINDOWS\system32\dllcache\ntsd.exe - 2004-08-04 02:44:44 102,400 -c--a-w C:\WINDOWS\system32\dllcache\odbcint.dll + 2004-08-04 02:44:44 98,304 -c--a-w C:\WINDOWS\system32\dllcache\odbcint.dll - 2004-08-04 02:45:40 72,704 -c--a-w C:\WINDOWS\system32\dllcache\oemig50.exe + 2004-08-04 02:45:40 60,928 -c--a-w C:\WINDOWS\system32\dllcache\oemig50.exe - 2004-08-04 02:45:40 29,696 -c--a-w C:\WINDOWS\system32\dllcache\perfmon.exe + 2004-08-04 02:45:40 15,872 -c--a-w C:\WINDOWS\system32\dllcache\perfmon.exe - 2004-08-04 02:45:26 480,768 -c--a-w C:\WINDOWS\system32\dllcache\photowiz.dll + 2004-08-04 02:45:26 172,032 -c--a-w C:\WINDOWS\system32\dllcache\photowiz.dll - 2001-10-28 18:07:18 172,032 -c--a-w C:\WINDOWS\system32\dllcache\pifmgr.dll + 2001-10-28 18:07:18 35,328 -c--a-w C:\WINDOWS\system32\dllcache\pifmgr.dll - 2004-08-04 02:45:26 901,632 -c--a-w C:\WINDOWS\system32\dllcache\printui.dll + 2004-08-04 02:45:26 572,928 -c--a-w C:\WINDOWS\system32\dllcache\printui.dll - 2008-05-07 05:15:38 2,660,864 -c--a-w C:\WINDOWS\system32\dllcache\quartz.dll + 2008-05-07 05:15:38 1,292,288 -c--a-w C:\WINDOWS\system32\dllcache\quartz.dll - 2004-08-04 02:45:26 1,001,984 -c--a-w C:\WINDOWS\system32\dllcache\rasdlg.dll + 2004-08-04 02:45:26 672,768 -c--a-w C:\WINDOWS\system32\dllcache\rasdlg.dll - 2004-08-04 02:45:42 428,032 -c--a-w C:\WINDOWS\system32\dllcache\regedit.exe + 2004-08-04 02:45:42 150,528 -c--a-w C:\WINDOWS\system32\dllcache\regedit.exe - 2001-10-28 18:07:24 17,920 -c--a-w C:\WINDOWS\system32\dllcache\regedt32.exe + 2001-10-28 18:07:24 3,584 -c--a-w C:\WINDOWS\system32\dllcache\regedt32.exe - 2004-08-04 02:45:26 82,944 -c--a-w C:\WINDOWS\system32\dllcache\remotepg.dll + 2004-08-04 02:45:26 61,440 -c--a-w C:\WINDOWS\system32\dllcache\remotepg.dll - 2004-08-04 02:45:42 506,368 -c--a-w C:\WINDOWS\system32\dllcache\rstrui.exe + 2004-08-04 02:45:42 382,976 -c--a-w C:\WINDOWS\system32\dllcache\rstrui.exe - 2004-08-04 02:45:42 28,672 -c--a-w C:\WINDOWS\system32\dllcache\runonce.exe + 2004-08-04 02:45:42 14,336 -c--a-w C:\WINDOWS\system32\dllcache\runonce.exe - 2004-08-04 02:45:28 163,840 -c--a-w C:\WINDOWS\system32\dllcache\scrobj.dll + 2004-08-04 02:45:28 159,744 -c--a-w C:\WINDOWS\system32\dllcache\scrobj.dll - 2004-08-04 02:45:28 1,429,504 -c--a-w C:\WINDOWS\system32\dllcache\setupapi.dll + 2004-08-04 02:45:28 993,792 -c--a-w C:\WINDOWS\system32\dllcache\setupapi.dll - 2004-08-04 02:44:52 821,760 -c--a-w C:\WINDOWS\system32\dllcache\shdoclc.dll + 2004-08-04 02:44:52 563,712 -c--a-w C:\WINDOWS\system32\dllcache\shdoclc.dll - 2007-10-25 16:57:15 22,446,080 -c--a-w C:\WINDOWS\system32\dllcache\shell32.dll + 2007-10-25 16:57:15 8,484,352 -c--a-w C:\WINDOWS\system32\dllcache\shell32.dll - 2004-08-04 02:45:28 1,242,624 -c--a-w C:\WINDOWS\system32\dllcache\shimgvw.dll + 2004-08-04 02:45:28 439,808 -c--a-w C:\WINDOWS\system32\dllcache\shimgvw.dll - 2004-08-04 02:45:42 257,536 -c--a-w C:\WINDOWS\system32\dllcache\shrpubw.exe + 2004-08-04 02:45:42 78,336 -c--a-w C:\WINDOWS\system32\dllcache\shrpubw.exe - 2004-08-04 02:45:28 41,984 -c--a-w C:\WINDOWS\system32\dllcache\shscrap.dll + 2004-08-04 02:45:28 27,648 -c--a-w C:\WINDOWS\system32\dllcache\shscrap.dll - 2004-08-04 02:45:42 130,048 -c--a-w C:\WINDOWS\system32\dllcache\sigverif.exe + 2004-08-04 02:45:42 71,168 -c--a-w C:\WINDOWS\system32\dllcache\sigverif.exe - 2004-08-04 02:45:44 147,968 -c--a-w C:\WINDOWS\system32\dllcache\sndrec32.exe + 2004-08-04 02:45:44 132,608 -c--a-w C:\WINDOWS\system32\dllcache\sndrec32.exe - 2001-10-28 18:07:28 146,432 -c--a-w C:\WINDOWS\system32\dllcache\sndvol32.exe + 2001-10-28 18:07:28 139,264 -c--a-w C:\WINDOWS\system32\dllcache\sndvol32.exe - 2004-08-04 02:45:28 236,544 -c--a-w C:\WINDOWS\system32\dllcache\srrstr.dll + 2004-08-04 02:45:28 240,640 -c--a-w C:\WINDOWS\system32\dllcache\srrstr.dll - 2004-08-04 02:45:28 541,696 -c--a-w C:\WINDOWS\system32\dllcache\sti_ci.dll + 2004-08-04 02:45:28 137,216 -c--a-w C:\WINDOWS\system32\dllcache\sti_ci.dll - 2004-08-04 02:45:28 126,464 -c--a-w C:\WINDOWS\system32\dllcache\stobject.dll + 2004-08-04 02:45:28 122,368 -c--a-w C:\WINDOWS\system32\dllcache\stobject.dll - 2006-10-20 01:38:48 724,480 -c--a-w C:\WINDOWS\system32\dllcache\sxs.dll + 2006-10-20 01:38:48 714,752 -c--a-w C:\WINDOWS\system32\dllcache\sxs.dll - 2004-08-04 02:45:28 379,392 -c--a-w C:\WINDOWS\system32\dllcache\syncui.dll + 2004-08-04 02:45:28 194,560 -c--a-w C:\WINDOWS\system32\dllcache\syncui.dll - 2004-08-04 02:45:44 417,792 -c--a-w C:\WINDOWS\system32\dllcache\sysocmgr.exe + 2004-08-04 02:45:44 107,008 -c--a-w C:\WINDOWS\system32\dllcache\sysocmgr.exe - 2001-10-28 18:07:30 182,272 -c--a-w C:\WINDOWS\system32\dllcache\tapiui.dll + 2001-10-28 18:07:30 83,968 -c--a-w C:\WINDOWS\system32\dllcache\tapiui.dll - 2004-08-04 02:45:44 174,080 -c--a-w C:\WINDOWS\system32\dllcache\taskmgr.exe + 2004-08-04 02:45:44 141,312 -c--a-w C:\WINDOWS\system32\dllcache\taskmgr.exe - 2004-08-04 02:45:28 203,776 -c--a-w C:\WINDOWS\system32\dllcache\tcpmonui.dll + 2004-08-04 02:45:28 46,592 -c--a-w C:\WINDOWS\system32\dllcache\tcpmonui.dll - 2005-05-11 02:30:02 91,136 -c--a-w C:\WINDOWS\system32\dllcache\telnet.exe + 2005-05-11 02:30:02 77,312 -c--a-w C:\WINDOWS\system32\dllcache\telnet.exe - 2004-08-04 02:45:28 449,536 -c--a-w C:\WINDOWS\system32\dllcache\themeui.dll + 2004-08-04 02:45:28 388,608 -c--a-w C:\WINDOWS\system32\dllcache\themeui.dll - 2001-10-28 18:07:34 116,736 -c--a-w C:\WINDOWS\system32\dllcache\verifier.exe + 2001-10-28 18:07:34 102,400 -c--a-w C:\WINDOWS\system32\dllcache\verifier.exe - 2004-08-04 02:45:46 163,328 -c--a-w C:\WINDOWS\system32\dllcache\wab.exe + 2004-08-04 02:45:46 46,080 -c--a-w C:\WINDOWS\system32\dllcache\wab.exe - 2007-05-16 15:13:57 89,088 -c--a-w C:\WINDOWS\system32\dllcache\wabimp.dll + 2007-05-16 15:13:57 85,504 -c--a-w C:\WINDOWS\system32\dllcache\wabimp.dll - 2004-08-04 02:45:46 33,280 -c--a-w C:\WINDOWS\system32\dllcache\wabmig.exe + 2004-08-04 02:45:46 30,208 -c--a-w C:\WINDOWS\system32\dllcache\wabmig.exe - 2008-04-23 07:14:11 396,800 -c--a-w C:\WINDOWS\system32\dllcache\webcheck.dll + 2008-04-23 07:14:11 233,472 -c--a-w C:\WINDOWS\system32\dllcache\webcheck.dll - 2004-08-04 02:45:46 1,366,528 -c--a-w C:\WINDOWS\system32\dllcache\wiaacmgr.exe + 2004-08-04 02:45:46 434,688 -c--a-w C:\WINDOWS\system32\dllcache\wiaacmgr.exe - 2004-08-04 02:45:28 497,664 -c--a-w C:\WINDOWS\system32\dllcache\wiadefui.dll + 2004-08-04 02:45:28 464,384 -c--a-w C:\WINDOWS\system32\dllcache\wiadefui.dll - 2004-08-04 02:45:28 704,000 -c--a-w C:\WINDOWS\system32\dllcache\wiashext.dll + 2004-08-04 02:45:28 591,872 -c--a-w C:\WINDOWS\system32\dllcache\wiashext.dll - 2004-08-04 02:45:10 983,040 -c--a-w C:\WINDOWS\system32\dllcache\winbrand.dll + 2004-08-04 02:45:10 937,984 -c--a-w C:\WINDOWS\system32\dllcache\winbrand.dll - 2006-11-03 02:21:18 8,116,224 -c--a-w C:\WINDOWS\system32\dllcache\wmploc.dll + 2006-11-03 02:21:18 8,269,824 -c--a-w C:\WINDOWS\system32\dllcache\wmploc.dll - 2001-10-28 18:07:48 19,456 -c--a-w C:\WINDOWS\system32\dllcache\write.exe + 2001-10-28 18:07:48 5,632 -c--a-w C:\WINDOWS\system32\dllcache\write.exe - 2004-08-04 02:45:46 405,504 -c--a-w C:\WINDOWS\system32\dllcache\wscript.exe + 2004-08-04 02:45:46 114,688 -c--a-w C:\WINDOWS\system32\dllcache\wscript.exe - 2004-08-04 02:45:30 643,584 -c--a-w C:\WINDOWS\system32\dllcache\wsecedit.dll + 2004-08-04 02:45:30 607,744 -c--a-w C:\WINDOWS\system32\dllcache\wsecedit.dll - 2004-08-04 02:45:30 940,032 -c--a-w C:\WINDOWS\system32\dllcache\zipfldr.dll + 2004-08-04 02:45:30 338,944 -c--a-w C:\WINDOWS\system32\dllcache\zipfldr.dll - 2001-10-28 18:06:18 797,696 ----a-w C:\WINDOWS\system32\dmdlgs.dll + 2001-10-28 18:06:18 273,920 ----a-w C:\WINDOWS\system32\dmdlgs.dll - 2001-10-28 18:06:18 192,512 ----a-w C:\WINDOWS\system32\dmdskres.dll + 2001-10-28 18:06:18 127,488 ----a-w C:\WINDOWS\system32\dmdskres.dll - 2004-08-04 02:45:22 484,352 ----a-w C:\WINDOWS\system32\dpvoice.dll + 2004-08-04 02:45:22 212,992 ----a-w C:\WINDOWS\system32\dpvoice.dll + 2008-07-19 14:32:15 26,944 ----a-w C:\WINDOWS\system32\drivers\aavmker4.sys + 2008-07-19 14:37:42 20,560 ----a-w C:\WINDOWS\system32\drivers\aswFsBlk.sys + 2008-01-17 18:34:01 93,264 ----a-w C:\WINDOWS\system32\drivers\aswmon.sys + 2008-07-19 14:37:21 94,416 ----a-w C:\WINDOWS\system32\drivers\aswmon2.sys + 2008-07-19 14:33:42 23,152 ----a-w C:\WINDOWS\system32\drivers\aswRdr.sys + 2008-07-19 14:35:18 78,416 ----a-w C:\WINDOWS\system32\drivers\aswSP.sys + 2008-07-19 14:32:36 42,912 ----a-w C:\WINDOWS\system32\drivers\aswTdi.sys - 2001-10-28 18:06:30 171,520 ----a-w C:\WINDOWS\system32\dskquoui.dll + 2001-10-28 18:06:30 146,944 ----a-w C:\WINDOWS\system32\dskquoui.dll - 2004-08-04 02:45:22 196,096 ----a-w C:\WINDOWS\system32\dsquery.dll + 2004-08-04 02:45:22 240,128 ----a-w C:\WINDOWS\system32\dsquery.dll - 2004-08-04 02:45:22 228,864 ----a-w C:\WINDOWS\system32\dsuiext.dll + 2004-08-04 02:45:22 113,664 ----a-w C:\WINDOWS\system32\dsuiext.dll - 2006-08-24 16:18:32 632,886 ----a-w C:\WINDOWS\system32\dxmasf.dll + 2006-08-24 16:18:32 499,766 ----a-w C:\WINDOWS\system32\dxmasf.dll - 2004-08-04 02:45:22 322,560 ----a-w C:\WINDOWS\system32\els.dll + 2004-08-04 02:45:22 185,344 ----a-w C:\WINDOWS\system32\els.dll - 2001-10-28 18:06:32 146,432 ----a-w C:\WINDOWS\system32\eventvwr.exe + 2001-10-28 18:06:32 9,216 ----a-w C:\WINDOWS\system32\eventvwr.exe - 2004-08-04 02:45:22 369,152 ----a-w C:\WINDOWS\system32\filemgmt.dll + 2004-08-04 02:45:22 342,528 ----a-w C:\WINDOWS\system32\filemgmt.dll - 2004-08-04 02:45:22 222,208 ----a-w C:\WINDOWS\system32\fldrclnr.dll + 2004-08-04 02:45:22 88,576 ----a-w C:\WINDOWS\system32\fldrclnr.dll - 2004-08-04 02:45:22 1,181,696 ----a-w C:\WINDOWS\system32\fontext.dll + 2004-08-04 02:45:22 384,512 ----a-w C:\WINDOWS\system32\fontext.dll - 2004-08-04 02:45:34 399,360 ----a-w C:\WINDOWS\system32\fsquirt.exe + 2004-08-04 02:45:34 193,024 ----a-w C:\WINDOWS\system32\fsquirt.exe - 2001-10-28 18:06:34 241,152 ----a-w C:\WINDOWS\system32\gcdef.dll + 2001-10-28 18:06:34 77,312 ----a-w C:\WINDOWS\system32\gcdef.dll - 2004-08-04 02:44:18 585,728 ----a-w C:\WINDOWS\system32\gpedit.dll + 2004-08-04 02:44:18 572,928 ----a-w C:\WINDOWS\system32\gpedit.dll - 2004-08-04 02:45:24 740,352 ----a-w C:\WINDOWS\system32\hnetwiz.dll + 2004-08-04 02:45:24 334,848 ----a-w C:\WINDOWS\system32\hnetwiz.dll - 2004-08-04 02:45:24 168,960 ----a-w C:\WINDOWS\system32\hotplug.dll + 2004-08-04 02:45:24 146,432 ----a-w C:\WINDOWS\system32\hotplug.dll - 2001-10-28 18:06:36 83,456 ----a-w C:\WINDOWS\system32\icmui.dll + 2001-10-28 18:06:36 55,808 ----a-w C:\WINDOWS\system32\icmui.dll - 2004-08-04 02:45:36 204,800 ----a-w C:\WINDOWS\system32\iexpress.exe + 2004-08-04 02:45:36 114,688 ----a-w C:\WINDOWS\system32\iexpress.exe - 2001-10-28 18:06:38 149,504 ----a-w C:\WINDOWS\system32\inetcplc.dll + 2001-10-28 18:06:38 117,248 ----a-w C:\WINDOWS\system32\inetcplc.dll - 2004-08-04 02:44:20 57,344 ----a-w C:\WINDOWS\system32\inetres.dll + 2004-08-04 02:44:20 49,664 ----a-w C:\WINDOWS\system32\inetres.dll - 2004-08-04 02:45:24 126,464 ----a-w C:\WINDOWS\system32\input.dll + 2004-08-04 02:45:24 125,440 ----a-w C:\WINDOWS\system32\input.dll - 2001-10-28 18:06:38 17,920 ----a-w C:\WINDOWS\system32\irclass.dll + 2001-10-28 18:06:38 13,312 ----a-w C:\WINDOWS\system32\irclass.dll - 2008-02-22 04:23:35 135,168 ----a-w C:\WINDOWS\system32\java.exe + 2008-06-10 04:21:01 135,168 ----a-w C:\WINDOWS\system32\java.exe - 2008-02-22 04:23:39 135,168 ----a-w C:\WINDOWS\system32\javaw.exe + 2008-06-10 04:21:04 135,168 ----a-w C:\WINDOWS\system32\javaw.exe - 2008-02-22 05:33:32 139,264 ----a-w C:\WINDOWS\system32\javaws.exe + 2008-06-10 05:32:34 139,264 ----a-w C:\WINDOWS\system32\javaws.exe - 2004-08-04 02:45:24 408,064 ----a-w C:\WINDOWS\system32\keymgr.dll + 2004-08-04 02:45:24 152,576 ----a-w C:\WINDOWS\system32\keymgr.dll - 2001-10-28 18:06:58 135,680 ----a-w C:\WINDOWS\system32\mapi32.dll + 2001-10-28 18:06:58 112,128 ----a-w C:\WINDOWS\system32\mapi32.dll - 2004-08-04 02:45:24 201,728 ----a-w C:\WINDOWS\system32\mdminst.dll + 2004-08-04 02:45:24 119,296 ----a-w C:\WINDOWS\system32\mdminst.dll - 2004-08-04 02:45:38 849,920 ----a-w C:\WINDOWS\system32\mmc.exe + 2004-08-04 02:45:38 815,616 ----a-w C:\WINDOWS\system32\mmc.exe - 2004-08-04 02:45:24 65,024 ----a-w C:\WINDOWS\system32\mmcshext.dll + 2004-08-04 02:45:24 50,688 ----a-w C:\WINDOWS\system32\mmcshext.dll - 2004-08-04 02:45:38 324,096 ----a-w C:\WINDOWS\system32\mobsync.exe + 2004-08-04 02:45:38 143,872 ----a-w C:\WINDOWS\system32\mobsync.exe - 2004-08-04 02:45:40 20,480 ----a-w C:\WINDOWS\system32\msdtc.exe + 2004-08-04 02:45:40 6,144 ----a-w C:\WINDOWS\system32\msdtc.exe - 2004-08-04 02:45:24 1,501,696 ----a-w C:\WINDOWS\system32\msgina.dll + 2004-08-04 02:45:24 997,888 ----a-w C:\WINDOWS\system32\msgina.dll - 2004-08-04 02:45:24 55,296 ----a-w C:\WINDOWS\system32\msident.dll + 2004-08-04 02:45:24 51,712 ----a-w C:\WINDOWS\system32\msident.dll - 2004-08-04 02:45:24 363,008 ----a-w C:\WINDOWS\system32\msieftp.dll + 2004-08-04 02:45:24 250,368 ----a-w C:\WINDOWS\system32\msieftp.dll - 2005-05-04 17:45:36 211,968 ----a-w C:\WINDOWS\system32\msiexec.exe + 2005-05-04 17:45:36 78,848 ----a-w C:\WINDOWS\system32\msiexec.exe - 2004-08-04 02:45:40 506,368 ----a-w C:\WINDOWS\system32\mspaint.exe + 2004-08-04 02:45:40 345,600 ----a-w C:\WINDOWS\system32\mspaint.exe - 2004-08-04 02:45:26 400,384 ----a-w C:\WINDOWS\system32\mstask.dll + 2004-08-04 02:45:26 278,528 ----a-w C:\WINDOWS\system32\mstask.dll - 2004-08-04 02:34:20 419,840 ----a-w C:\WINDOWS\system32\mstsc.exe + 2004-08-04 02:34:20 409,088 ----a-w C:\WINDOWS\system32\mstsc.exe - 2007-06-26 06:10:32 1,371,136 ----a-w C:\WINDOWS\system32\msxml3.dll + 2007-06-26 06:10:32 1,104,896 ----a-w C:\WINDOWS\system32\msxml3.dll - 2001-10-28 18:07:06 107,520 ----a-w C:\WINDOWS\system32\mycomput.dll + 2001-10-28 18:07:06 90,112 ----a-w C:\WINDOWS\system32\mycomput.dll - 2004-08-04 02:45:26 310,784 ----a-w C:\WINDOWS\system32\mydocs.dll + 2004-08-04 02:45:26 90,624 ----a-w C:\WINDOWS\system32\mydocs.dll - 2004-08-04 02:45:26 2,028,544 ----a-w C:\WINDOWS\system32\netplwiz.dll + 2004-08-04 02:45:26 879,616 ----a-w C:\WINDOWS\system32\netplwiz.dll - 2004-08-04 02:45:26 2,318,336 ----a-w C:\WINDOWS\system32\netshell.dll + 2004-08-04 02:45:26 1,714,688 ----a-w C:\WINDOWS\system32\netshell.dll - 2004-08-04 02:45:26 700,928 ----a-w C:\WINDOWS\system32\newdev.dll + 2004-08-04 02:45:26 249,856 ----a-w C:\WINDOWS\system32\newdev.dll - 2004-08-04 02:45:40 182,784 ----a-w C:\WINDOWS\system32\notepad.exe + 2004-08-04 02:45:40 70,144 ----a-w C:\WINDOWS\system32\notepad.exe - 2004-08-04 02:45:40 93,696 ----a-w C:\WINDOWS\system32\nslookup.exe + 2004-08-04 02:45:40 79,360 ----a-w C:\WINDOWS\system32\nslookup.exe - 2004-08-04 02:45:40 1,530,880 ----a-w C:\WINDOWS\system32\ntbackup.exe + 2004-08-04 02:45:40 1,218,560 ----a-w C:\WINDOWS\system32\ntbackup.exe - 2001-10-28 18:07:10 28,672 ----a-w C:\WINDOWS\system32\ntlanui2.dll + 2001-10-28 18:07:10 14,848 ----a-w C:\WINDOWS\system32\ntlanui2.dll - 2001-10-28 18:07:12 46,080 ----a-w C:\WINDOWS\system32\ntsd.exe + 2001-10-28 18:07:12 31,744 ----a-w C:\WINDOWS\system32\ntsd.exe - 2004-08-04 02:44:44 102,400 ----a-w C:\WINDOWS\system32\odbcint.dll + 2004-08-04 02:44:44 98,304 ----a-w C:\WINDOWS\system32\odbcint.dll - 2008-07-19 16:15:43 52,900 ----a-w C:\WINDOWS\system32\perfc009.dat + 2008-08-02 21:55:15 52,900 ----a-w C:\WINDOWS\system32\perfc009.dat - 2008-07-19 16:15:43 61,618 ----a-w C:\WINDOWS\system32\perfc016.dat + 2008-08-02 21:55:15 61,618 ----a-w C:\WINDOWS\system32\perfc016.dat - 2008-07-19 16:15:43 380,486 ----a-w C:\WINDOWS\system32\perfh009.dat + 2008-08-02 21:55:15 380,486 ----a-w C:\WINDOWS\system32\perfh009.dat - 2008-07-19 16:15:43 413,480 ----a-w C:\WINDOWS\system32\perfh016.dat + 2008-08-02 21:55:15 413,480 ----a-w C:\WINDOWS\system32\perfh016.dat - 2004-08-04 02:45:40 29,696 ----a-w C:\WINDOWS\system32\perfmon.exe + 2004-08-04 02:45:40 15,872 ----a-w C:\WINDOWS\system32\perfmon.exe - 2004-08-04 02:45:26 480,768 ----a-w C:\WINDOWS\system32\photowiz.dll + 2004-08-04 02:45:26 172,032 ----a-w C:\WINDOWS\system32\photowiz.dll - 2001-10-28 18:07:18 172,032 ----a-w C:\WINDOWS\system32\pifmgr.dll + 2001-10-28 18:07:18 35,328 ----a-w C:\WINDOWS\system32\pifmgr.dll - 2004-08-04 02:45:26 901,632 ----a-w C:\WINDOWS\system32\printui.dll + 2004-08-04 02:45:26 572,928 ----a-w C:\WINDOWS\system32\printui.dll - 2004-08-04 02:45:26 1,001,984 ----a-w C:\WINDOWS\system32\rasdlg.dll + 2004-08-04 02:45:26 672,768 ----a-w C:\WINDOWS\system32\rasdlg.dll - 2001-10-28 18:07:24 17,920 ----a-w C:\WINDOWS\system32\regedt32.exe + 2001-10-28 18:07:24 3,584 ----a-w C:\WINDOWS\system32\regedt32.exe - 2004-08-04 02:45:26 82,944 ----a-w C:\WINDOWS\system32\remotepg.dll + 2004-08-04 02:45:26 61,440 ----a-w C:\WINDOWS\system32\remotepg.dll - 2004-08-04 02:45:42 506,368 ----a-w C:\WINDOWS\system32\Restore\rstrui.exe + 2004-08-04 02:45:42 382,976 ----a-w C:\WINDOWS\system32\Restore\rstrui.exe - 2004-08-04 02:45:42 28,672 ----a-w C:\WINDOWS\system32\runonce.exe + 2004-08-04 02:45:42 14,336 ----a-w C:\WINDOWS\system32\runonce.exe - 2004-08-04 02:45:28 163,840 ----a-w C:\WINDOWS\system32\scrobj.dll + 2004-08-04 02:45:28 159,744 ----a-w C:\WINDOWS\system32\scrobj.dll - 2004-08-04 02:45:28 1,429,504 ----a-w C:\WINDOWS\system32\setupapi.dll + 2004-08-04 02:45:28 993,792 ----a-w C:\WINDOWS\system32\setupapi.dll - 2004-08-04 02:44:52 821,760 ----a-w C:\WINDOWS\system32\shdoclc.dll + 2004-08-04 02:44:52 563,712 ----a-w C:\WINDOWS\system32\shdoclc.dll - 2007-10-25 16:57:15 22,446,080 ----a-w C:\WINDOWS\system32\shell32.dll + 2007-10-25 16:57:15 8,484,352 ----a-w C:\WINDOWS\system32\shell32.dll - 2004-08-04 02:45:28 1,242,624 ----a-w C:\WINDOWS\system32\shimgvw.dll + 2004-08-04 02:45:28 439,808 ----a-w C:\WINDOWS\system32\shimgvw.dll - 2004-08-04 02:45:42 257,536 ----a-w C:\WINDOWS\system32\shrpubw.exe + 2004-08-04 02:45:42 78,336 ----a-w C:\WINDOWS\system32\shrpubw.exe - 2004-08-04 02:45:28 41,984 ----a-w C:\WINDOWS\system32\shscrap.dll + 2004-08-04 02:45:28 27,648 ----a-w C:\WINDOWS\system32\shscrap.dll - 2004-08-04 02:45:42 130,048 ----a-w C:\WINDOWS\system32\sigverif.exe + 2004-08-04 02:45:42 71,168 ----a-w C:\WINDOWS\system32\sigverif.exe - 2004-08-04 02:45:44 147,968 ----a-w C:\WINDOWS\system32\sndrec32.exe + 2004-08-04 02:45:44 132,608 ----a-w C:\WINDOWS\system32\sndrec32.exe - 2001-10-28 18:07:28 146,432 ----a-w C:\WINDOWS\system32\sndvol32.exe + 2001-10-28 18:07:28 139,264 ----a-w C:\WINDOWS\system32\sndvol32.exe - 2004-08-04 02:45:28 236,544 ----a-w C:\WINDOWS\system32\srrstr.dll + 2004-08-04 02:45:28 240,640 ----a-w C:\WINDOWS\system32\srrstr.dll - 2004-08-04 02:45:28 541,696 ----a-w C:\WINDOWS\system32\sti_ci.dll + 2004-08-04 02:45:28 137,216 ----a-w C:\WINDOWS\system32\sti_ci.dll - 2004-08-04 02:45:28 126,464 ----a-w C:\WINDOWS\system32\stobject.dll + 2004-08-04 02:45:28 122,368 ----a-w C:\WINDOWS\system32\stobject.dll - 2006-10-20 01:38:48 724,480 ----a-w C:\WINDOWS\system32\sxs.dll + 2006-10-20 01:38:48 714,752 ----a-w C:\WINDOWS\system32\sxs.dll - 2004-08-04 02:45:28 379,392 ----a-w C:\WINDOWS\system32\syncui.dll + 2004-08-04 02:45:28 194,560 ----a-w C:\WINDOWS\system32\syncui.dll - 2004-08-04 02:45:44 417,792 ----a-w C:\WINDOWS\system32\sysocmgr.exe + 2004-08-04 02:45:44 107,008 ----a-w C:\WINDOWS\system32\sysocmgr.exe - 2001-10-28 18:07:30 182,272 ----a-w C:\WINDOWS\system32\tapiui.dll + 2001-10-28 18:07:30 83,968 ----a-w C:\WINDOWS\system32\tapiui.dll - 2004-08-04 02:45:44 174,080 ----a-w C:\WINDOWS\system32\taskmgr.exe + 2004-08-04 02:45:44 141,312 ----a-w C:\WINDOWS\system32\taskmgr.exe - 2004-08-04 02:45:28 203,776 ----a-w C:\WINDOWS\system32\tcpmonui.dll + 2004-08-04 02:45:28 46,592 ----a-w C:\WINDOWS\system32\tcpmonui.dll - 2005-05-11 02:30:02 91,136 ----a-w C:\WINDOWS\system32\telnet.exe + 2005-05-11 02:30:02 77,312 ----a-w C:\WINDOWS\system32\telnet.exe - 2004-08-04 02:45:28 449,536 ----a-w C:\WINDOWS\system32\themeui.dll + 2004-08-04 02:45:28 388,608 ----a-w C:\WINDOWS\system32\themeui.dll - 2004-08-04 02:45:38 701,440 ----a-w C:\WINDOWS\system32\usmt\migwiz.exe + 2004-08-04 02:45:38 245,248 ----a-w C:\WINDOWS\system32\usmt\migwiz.exe - 2001-10-28 18:07:34 116,736 ----a-w C:\WINDOWS\system32\verifier.exe + 2001-10-28 18:07:34 102,400 ----a-w C:\WINDOWS\system32\verifier.exe - 2008-04-23 07:14:11 396,800 ----a-w C:\WINDOWS\system32\webcheck.dll + 2008-04-23 07:14:11 233,472 ----a-w C:\WINDOWS\system32\webcheck.dll - 2004-08-04 02:45:46 1,366,528 ----a-w C:\WINDOWS\system32\wiaacmgr.exe + 2004-08-04 02:45:46 434,688 ----a-w C:\WINDOWS\system32\wiaacmgr.exe - 2004-08-04 02:45:28 497,664 ----a-w C:\WINDOWS\system32\wiadefui.dll + 2004-08-04 02:45:28 464,384 ----a-w C:\WINDOWS\system32\wiadefui.dll - 2004-08-04 02:45:28 704,000 ----a-w C:\WINDOWS\system32\wiashext.dll + 2004-08-04 02:45:28 591,872 ----a-w C:\WINDOWS\system32\wiashext.dll - 2004-08-04 02:45:10 983,040 ----a-w C:\WINDOWS\system32\winbrand.dll + 2004-08-04 02:45:10 937,984 ----a-w C:\WINDOWS\system32\winbrand.dll - 2006-11-03 02:21:18 8,116,224 ----a-w C:\WINDOWS\system32\wmploc.dll + 2006-11-03 02:21:18 8,269,824 ----a-w C:\WINDOWS\system32\wmploc.dll - 2001-10-28 18:07:48 19,456 ----a-w C:\WINDOWS\system32\write.exe + 2001-10-28 18:07:48 5,632 ----a-w C:\WINDOWS\system32\write.exe - 2004-08-04 02:45:46 405,504 ----a-w C:\WINDOWS\system32\wscript.exe + 2004-08-04 02:45:46 114,688 ----a-w C:\WINDOWS\system32\wscript.exe - 2004-08-04 02:45:30 643,584 ----a-w C:\WINDOWS\system32\wsecedit.dll + 2004-08-04 02:45:30 607,744 ----a-w C:\WINDOWS\system32\wsecedit.dll - 2004-08-04 02:45:02 3,786,752 ----a-w C:\WINDOWS\system32\xpsp2res.dll + 2004-08-04 02:45:02 2,945,536 ----a-w C:\WINDOWS\system32\xpsp2res.dll - 2004-08-04 02:45:30 940,032 ----a-w C:\WINDOWS\system32\zipfldr.dll + 2004-08-04 02:45:30 338,944 ----a-w C:\WINDOWS\system32\zipfldr.dll + 2008-08-02 21:50:39 16,384 ----atw C:\WINDOWS\TEMP\Perflib_Perfdata_6bc.dat . -- Snapshot reset to current date -- . (((((((((((((((((((((((((( Pontos de Carregamento do Registro ))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Nota* entradas vazias & legítimas por defeito não são mostradas. [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Arquivos de programas\Arquivos comuns\Ahead\Lib\NMBgMonitor.exe" [2006-11-16 19:04 139264] "updateMgr"="C:\Arquivos de programas\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [2006-03-30 16:45 313472] "MSMSGS"="C:\Arquivos de programas\Messenger\msmsgs.exe" [2004-10-13 13:24 1694208] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-03 23:45 15360] "Nokia.PCSync"="C:\Arquivos de programas\Nokia\Nokia PC Suite 6\PCSync2.exe" [2008-03-26 18:41 1232896] "PC Suite Tray"="C:\Arquivos de programas\Nokia\Nokia PC Suite 6\PCSuite.exe" [2008-04-16 12:53 1079808] "Winger32.exe"="C:\Documents and Settings\Iniciar\Desktop\Winger32.exe" [2008-08-01 23:59 285184] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-06-28 13:43 8466432] "SunJavaUpdateSched"="C:\Arquivos de programas\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 04:27 144784] "RemoteControl"="C:\Arquivos de programas\CyberLink\PowerDVD\PDVDServ.exe" [2006-11-23 15:10 56928] "LanguageShortcut"="C:\Arquivos de programas\CyberLink\PowerDVD\Language\Language.exe" [2006-12-05 22:55 54832] "Vistadrv"="C:\WINDOWS\HDbar\vsdrv.exe" [2006-07-30 02:37 121089] "NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2007-06-28 13:43 81920] "ISUSPM Startup"="C:\ARQUIV~1\ARQUIV~1\INSTAL~1\UPDATE~1\isuspm.exe" [2004-06-16 07:03 221184] "ISUSScheduler"="C:\Arquivos de programas\Arquivos comuns\InstallShield\UpdateService\issch.exe" [2004-06-16 07:03 81920] "PinnacleDriverCheck"="C:\WINDOWS\system32\PSDrvCheck.exe" [2004-03-10 16:26 406016] "NeroFilterCheck"="C:\Arquivos de programas\Arquivos comuns\Ahead\Lib\NeroCheck.exe" [2006-01-12 15:40 155648] "VMonitorVMUVC"="C:\Arquivos de programas\Vimicro\Vimicro UVC USB2.0 PC Camera\x86\VMonitor.exe" [2007-04-13 18:08 114688] "avast!"="C:\ARQUIV~1\ALWILS~1\Avast4\ashDisp.exe" [2008-07-19 11:38 78008] "Techserv.exe"="C:\WINDOWS\system32\Techserv.exe" [2008-08-01 23:59 1718784] "Intnetobj.exe"="C:\WINDOWS\system32\Intnetobj.exe" [2008-08-02 00:00 509440] "Msmservs.exe"="C:\WINDOWS\system32\Msmservs.exe" [2008-08-02 00:00 268288] "Orkservs.exe"="C:\WINDOWS\system32\Orkservs.exe" [2008-08-02 00:01 290304] "nwiz"="nwiz.exe" [2007-06-28 13:43 1626112 C:\WINDOWS\system32\nwiz.exe] "SkyTel"="SkyTel.EXE" [2006-05-16 07:04 2879488 C:\WINDOWS\SkyTel.exe] "RTHDCPL"="RTHDCPL.EXE" [2007-02-26 04:03 16125440 C:\WINDOWS\RTHDCPL.exe] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-03 23:45 15360] C:\Documents and Settings\Administrador.CPU\Menu Iniciar\Programas\Inicializar\ Stardock ObjectDock.lnk - C:\Arquivos de programas\Stardock\ObjectDock\ObjectDock.exe [2008-07-15 00:16:15 3450608] C:\Documents and Settings\Iniciar\Menu Iniciar\Programas\Inicializar\ ObjectDock.lnk - C:\Arquivos de programas\OBjectDock\ObjectDock.exe [2008-02-28 16:13:06 1826885] Stardock ObjectDock.lnk - C:\Arquivos de programas\Stardock\ObjectDock\ObjectDock.exe [2008-07-15 00:16:15 3450608] C:\DOCUME~1\ALLUSE~1\MENUIN~1\PROGRA~1\INICIA~1\ Adobe Reader Speed Launch.lnk - C:\Arquivos de programas\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2008-04-23 03:38:16 29696] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] "NoBandCustomize"= 0 (0x0) "NoMovingBands"= 0 (0x0) "NoCloseDragDropBands"= 0 (0x0) [hkey_local_machine\software\microsoft\windows\currentversion\explorer\SharedTaskScheduler] "{A3717295-941D-416F-9384-ED1736729F1C}"= "C:\Arquivos de programas\Scpad\scpLIB.dll" [BU] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] "CompIBBrd"= {A3717295-941D-416F-9384-ED1736729F1C} - C:\Arquivos de programas\Scpad\scpLIB.dll [BU] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "VIDC.3iv2"= C:\ARQUIV~1\K-LITE~1\codecs\3IVXVF~1.DLL "VIDC.VP60"= C:\ARQUIV~1\K-LITE~1\codecs\vp6vfw.dll "VIDC.VP61"= C:\ARQUIV~1\K-LITE~1\codecs\vp6vfw.dll "VIDC.VP62"= C:\ARQUIV~1\K-LITE~1\codecs\vp6vfw.dll "VIDC.VP70"= C:\ARQUIV~1\K-LITE~1\codecs\vp7vfw.dll "VIDC.VP31"= C:\ARQUIV~1\K-LITE~1\codecs\vp31vfw.dll "VIDC.FFDS"= C:\ARQUIV~1\K-LITE~1\ffdshow\ff_vfw.dll "msacm.ac3acm"= C:\ARQUIV~1\K-LITE~1\codecs\ac3acm.acm "msacm.l3fhg"= C:\ARQUIV~1\K-LITE~1\codecs\l3codecp.acm "VIDC.MJPG"= Pvmjpg21.dll "VIDC.PIM1"= pclepim1.dll [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "C:\\Arquivos de programas\\Windows Live\\Messenger\\msnmsgr.exe"= "C:\\Arquivos de programas\\Windows Live\\Messenger\\livecall.exe"= "C:\\Arquivos de programas\\Sierra Entertainment\\FEAR Perseus Mandate\\FEARXP2.exe"= "C:\\WINDOWS\\system32\\PnkBstrA.exe"= "C:\\WINDOWS\\system32\\PnkBstrB.exe"= "C:\\Arquivos de programas\\Ubisoft\\Tom Clancy's Rainbow Six Vegas 2\\Binaries\\R6Vegas2_Game.exe"= "C:\\Arquivos de programas\\Ubisoft\\Tom Clancy's Rainbow Six Vegas 2\\Binaries\\R6Vegas2_Launcher.exe"= "C:\\Arquivos de programas\\Ubisoft\\Splinter Cell Double Agent\\scda-offline\\System\\SplinterCell4.exe"= "C:\\Arquivos de programas\\Electronic Arts\\Crytek\\Crysis\\Bin32\\Crysis.exe"= "C:\\Arquivos de programas\\Electronic Arts\\Crytek\\Crysis\\Bin32\\CrysisDedicatedServer.exe"= "C:\\Arquivos de programas\\THQ\\S.T.A.L.K.E.R. - Shadow of Chernobyl\\bin\\XR_3DA.exe"= "C:\\Arquivos de programas\\THQ\\S.T.A.L.K.E.R. - Shadow of Chernobyl\\bin\\dedicated\\XR_3DA.exe"= "C:\\Arquivos de programas\\Electronic Arts\\Medal of Honor Airborne\\UnrealEngine3\\Binaries\\MOHA.exe"= "C:\\Arquivos de programas\\eMule\\emule.exe"= "C:\\Arquivos de programas\\LimeWire\\LimeWire.exe"= "C:\\Arquivos de programas\\uTorrent\\uTorrent.exe"= "C:\\WINDOWS\\system32\\Windwn32.exe"= "C:\\WINDOWS\\system32\\Techserv.exe"= "C:\\Documents and Settings\\Iniciar\\Desktop\\Winger32.exe"= "C:\\WINDOWS\\system32\\Intnetobj.exe"= "C:\\WINDOWS\\system32\\Msmservs.exe"= "C:\\WINDOWS\\system32\\Orkservs.exe"= R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-07-19 11:35] R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-07-19 11:37] R3 VMUVC;Vimicro Camera Service VMUVC;C:\WINDOWS\system32\Drivers\VMUVC.sys [2007-09-05 15:53] R3 vvftUVC;Vimicro Camera Filter Service VMUVC;C:\WINDOWS\system32\drivers\vvftUVC.sys [2007-06-13 14:00] . . ------- Ccan Suplementar ------- . R0 -: HKCU-Main,Start Page = hxxp://www.google.com R0 -: HKLM-Main,Start Page = hxxp://www.google.com R0 -: HKLM-Main,Window Title = O8 -: E&xportar para o Microsoft Excel - C:\ARQUIV~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-08-02 20:22:54 Windows 5.1.2600 Service Pack 2 NTFS Procurando processos ocultos ... Procurando entradas auto inicializáveis ocultas ... Procurando ficheiros ocultos ... Varredura completada com sucesso Ficheiros ocultos: 0 ************************************************************************** . Tempo para conclusão: 2008-08-02 20:23:34 ComboFix-quarantined-files.txt 2008-08-02 23:23:31 ComboFix2.txt 2008-07-19 19:35:44 ComboFix3.txt 2008-07-18 04:18:44 ComboFix4.txt 2008-07-18 03:39:47 ComboFix5.txt 2008-08-02 23:20:01 Pre-Run: 8 pasta(s) 125,518,417,920 bytes disponíveis Post-Run: 10 pasta(s) 125,941,927,936 bytes disponíveis 792 --- E O F --- 2008-07-12 02:35:22