Olimpo Informatico

mito74 · Mortale devoto Registrato: 23/10/08 09:02 Messaggi: 14

il mio antivirus AVANST mi ha trovato questo file AMVO.EXE- amvo1 mi dice che potrebbe essere un virus ma non riesce ad eliminarlo
mi date un consiglio???
ho già cercato alcune informazioni ma il problema permane

aiuto!!!!

grazie

bdoriano

Ciao mito74 e benvenuto, Ciao

Procedi con queste operazioni iniziali:

Pulisci i files temporanei con ATF-Cleaner e/o CCleaner
Segui le istruzioni di questo topic per usare MBAM.
scarica e installa la versione Free di SuperAntispyware:
la configuri come è stato spiegato a un'altra utente in questa discussione
esegui una scansione completa del sistema
Segui le istruzioni di questo topic per postare il log di HiJackThis.
Riferisci con un nuovo messaggio in questa discussione dell'esito: se ci sono stati problemi particolari, ecc. ecc. E riporta:
- Carica il log di MBAM su WikiSend e posta il Forum Link che ti viene assegnato.
- Carica il log di SuperAntiSpyware su WikiSend e posta il Forum Link che ti viene assegnato.
- Carica il log di HiJackThis su WikiSend e posta il Forum Link che ti viene assegnato.

PS: se vuoi, puoi presentarti qui

mito74 · Mortale devoto Registrato: 23/10/08 09:02 Messaggi: 14

ok stasera proverò a seguite i consigli
un'altra domanda
quando mi connetto a internet con adsl e lancio IE7 inizia a caricare la pagina di google ma me la lascia in bianco e non riesco ad entrare in nessun sito
è sempre lo stesso virus che mi da il problema o dipende da altro

grazie

mito74 · Mortale devoto Registrato: 23/10/08 09:02 Messaggi: 14

l'antivirus mi ha ora trovato il file 2fiji.com

riporto il file di malw.
antispy tutto ok
il problema persiste
help

Malwarebytes' Anti-Malware 1.30
Versione del database: 1306
Windows 5.1.2600 Service Pack 2

23/10/2008 21.34.29
mbam-log-2008-10-23 (21-34-29).txt

Tipo di scansione: Scansione completa (C:\|D:\|)
Elementi scansionati: 17462
Tempo trascorso: 1 minute(s), 19 second(s)

Processi delle memoria infetti: 0
Moduli della memoria infetti: 0
Chiavi di registro infette: 0
Valori di registro infetti: 1
Elementi dato del registro infetti: 0
Cartelle infette: 0
File infetti: 1

Processi delle memoria infetti:
(Nessun elemento malevolo rilevato)

Moduli della memoria infetti:
(Nessun elemento malevolo rilevato)

Chiavi di registro infette:
(Nessun elemento malevolo rilevato)

Valori di registro infetti:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\kamsoft (Trojan.FakeAlert.H) -> Quarantined and deleted successfully.

Elementi dato del registro infetti:
(Nessun elemento malevolo rilevato)

Cartelle infette:
(Nessun elemento malevolo rilevato)

File infetti:
C:\WINDOWS\system32\ckvo.exe (Trojan.FakeAlert.H) -> Quarantined and deleted successfully.

bdoriano

Manca il log di Hijackthis. Razz

Disinstalla Avast e procedi con questa scansione con Kaspersky.
Alla fine, posta il log di Kaspersky con un log aggiornato di Hijackthis.

mito74 · Mortale devoto Registrato: 23/10/08 09:02 Messaggi: 14

allego i seguenti log (HijackThis e combofix)
spero di essere riuscito a sistemare tutto
adesso riesco a vedere i file nascosti e ho eliminato il file 2fiji.com
attendo conferma che tutto è ok

grazie ancora !!!!!!

HijackThis log

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22.29.58, on 24/10/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmi\Alwil Software\Avast4\aswUpdSv.exe
C:\Programmi\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programmi\File comuni\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Programmi\File comuni\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmi\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\ATK0100\Hcontrol.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\Progra~1\ASUS\Power4 Gear\BatteryLife.exe
C:\WINDOWS\System32\sistray.EXE
C:\WINDOWS\System32\khooker.exe
C:\Programmi\Synaptics\SynTP\SynTPLpr.exe
C:\Programmi\Synaptics\SynTP\SynTPEnh.exe
C:\Programmi\File comuni\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmi\Messenger\msmsgs.exe
C:\WINDOWS\ATK0100\ATKOSD.exe
C:\Programmi\File comuni\Ahead\lib\NMBgMonitor.exe
C:\Programmi\Asus\Asus ChkMail\ChkMail.exe
C:\Programmi\Asus\ASUS Hotkey\Hotkey.exe
C:\Programmi\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Programmi\Alwil Software\Avast4\ashMaiSv.exe
C:\Programmi\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\explorer.exe
C:\hijackthis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.it/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (file missing)
O4 - HKLM\..\Run: [Hcontrol] C:\WINDOWS\ATK0100\Hcontrol.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [Power_Gear] C:\Progra~1\ASUS\Power4 Gear\BatteryLife.exe 1
O4 - HKLM\..\Run: [SiS Tray] C:\WINDOWS\System32\sistray.EXE
O4 - HKLM\..\Run: [SiS KHooker] C:\WINDOWS\System32\khooker.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Programmi\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Programmi\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Programmi\File comuni\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Programmi\File comuni\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Programmi\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Programmi\File comuni\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [amva] C:\WINDOWS\system32\amvo.exe
O4 - HKCU\..\Run: [kamsoft] C:\WINDOWS\system32\ckvo.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVIZIO DI RETE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: ASUS ChkMail.lnk = C:\Programmi\Asus\Asus ChkMail\ChkMail.exe
O4 - Global Startup: Hotkey.lnk = C:\Programmi\Asus\ASUS Hotkey\Hotkey.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programmi\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Programmi\File comuni\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Programmi\File comuni\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: DSLMON.lnk = C:\Programmi\SAGEM\SAGEM F@st 800-840\dslmon.exe
O4 - Global Startup: Tasto di scelta rapida per l'avvio di AutoCAD.lnk = C:\Programmi\File comuni\Autodesk Shared\acstart16.exe
O4 - Global Startup: Avvio veloce di Adobe Reader.lnk = C:\Programmi\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.asus.com.tw
O16 - DPF: {1F83CD9E-505E-4F87-BECE-0832A763E36F} (Image Uploader 3.0 Control) - http://www.mypixmania.com/it/it/importer/MypixUploader.cab
O16 - DPF: {7F8B1F27-AE54-479D-AACF-0A7B2334E7EE} (HTTPUplListX Control) - http://stampafoto.mediaworld.it/HTTPUplList.cab
O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - http://www.pixdiscount.it/clients/uploader_v2.1.0.56.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://www.adobe.com/products/acrobat/nos/gp.cab
O16 - DPF: {FB90BA05-66E6-4C56-BCD3-D65B0F7EBA39} (Foto.com SpeedUploader 1.0 Control) - http://express.foto.com/SFUploader/SpeedUploader.cab
O20 - Winlogon Notify: !SASWinLogon - C:\Programmi\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Programmi\File comuni\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Programmi\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Autodesk Licensing Service - Autodesk, Inc. - C:\Programmi\File comuni\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Programmi\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Programmi\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Programmi\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Utilità di pianificazione di LiveUpdate automatico - Symantec Corporation - C:\Programmi\Symantec\LiveUpdate\ALUSchedulerSvc.exe

--
End of file - 7116 bytes

combofix log
ComboFix 08-10-22.05 - matteo monica 2008-10-24 22.35.32.1 - FAT32x86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1040.18.227 [GMT 2:00]
Eseguito da: C:\Documents and Settings\matteo monica\Desktop\pc2\ComboFix.exe
* Creato nuovo punto di ripristino

ATENÇÃO - ESTA MAQUINA NAO TEM A CONSOLE DE RECUPERAÇÃO INSTALADA !!
.

((((((((((((((((((((((((((((((((((((( Altre eliminazioni )))))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\autorun.inf
C:\WINDOWS\system32\_000006_.tmp.dll
C:\WINDOWS\system32\ckvo.exe
C:\WINDOWS\system32\ckvo0.dll
D:\Autorun.inf

.
((((((((((((((((((((((((( Files Creati Da 2008-09-24 al 2008-10-24 )))))))))))))))))))))))))))))))))))
.

2008-10-24 20:44 . 2008-10-24 20:44 <DIR> d-------- C:\hijackthis
2008-10-23 23:01 . 2008-10-23 23:01 <DIR> d-------- C:\Programmi\SUPERAntiSpyware
2008-10-23 23:01 . 2008-10-23 23:01 <DIR> d-------- C:\Documents and Settings\matteo monica\Dati applicazioni\SUPERAntiSpyware.com
2008-10-23 23:01 . 2008-10-23 23:01 <DIR> d-------- C:\Documents and Settings\All Users\Dati applicazioni\SUPERAntiSpyware.com
2008-10-23 23:00 . 2008-10-23 23:00 <DIR> d-------- C:\Programmi\File comuni\Wise Installation Wizard
2008-10-23 21:31 . 2008-10-23 21:31 <DIR> d-------- C:\Programmi\Malwarebytes' Anti-Malware
2008-10-23 21:31 . 2008-10-23 21:31 <DIR> d-------- C:\Documents and Settings\matteo monica\Dati applicazioni\Malwarebytes
2008-10-23 21:31 . 2008-10-23 21:31 <DIR> d-------- C:\Documents and Settings\All Users\Dati applicazioni\Malwarebytes
2008-10-23 21:31 . 2008-10-22 16:10 38,496 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2008-10-23 21:31 . 2008-10-22 16:10 15,504 --a------ C:\WINDOWS\system32\drivers\mbam.sys
2008-10-23 21:27 . 2003-06-25 16:05 266,360 --a------ C:\WINDOWS\system32\TweakUI.exe
2008-10-23 21:27 . 2002-06-21 15:09 160,217 --a------ C:\WINDOWS\system32\PowerToysLicense.rtf
2008-10-22 23:56 . 2008-10-18 16:08 104,758 -r-hs---- C:\2fiji.com
2008-10-21 21:56 . 2008-10-21 21:56 <DIR> d-------- C:\Programmi\Avira
2008-10-21 21:56 . 2008-10-21 21:56 <DIR> d-------- C:\Documents and Settings\All Users\Dati applicazioni\Avira
2008-10-03 18:58 . 2008-10-03 18:58 6,066,176 --------- C:\WINDOWS\system32\SETC.tmp
2008-10-03 18:58 . 2008-10-03 18:58 6,066,176 --a------ C:\WINDOWS\system32\SET33.tmp
2008-09-24 22:12 . 2008-09-24 22:12 <DIR> d-------- C:\WINDOWS\system32\CatRoot_bak

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-10-03 16:58 6,066,176 ------w C:\WINDOWS\system32\dllcache\ieframe.dll
2008-09-15 15:38 1,846,016 ----a-w C:\WINDOWS\system32\win32k.sys
2008-09-15 15:38 1,846,016 ------w C:\WINDOWS\system32\dllcache\win32k.sys
2008-08-28 10:04 333,056 ----a-w C:\WINDOWS\system32\drivers\srv.sys
2008-08-28 10:04 333,056 ------w C:\WINDOWS\system32\dllcache\srv.sys
2008-08-27 08:57 3,593,216 ----a-w C:\WINDOWS\system32\SET2B.tmp
2008-08-27 08:57 3,593,216 ----a-w C:\WINDOWS\system32\dllcache\mshtml.dll
2008-08-25 08:39 70,656 ------w C:\WINDOWS\system32\dllcache\ie4uinit.exe
2008-08-25 08:38 13,824 ------w C:\WINDOWS\system32\dllcache\ieudinit.exe
2008-08-23 05:56 635,848 ------w C:\WINDOWS\system32\dllcache\iexplore.exe
2008-08-23 05:54 161,792 ----a-w C:\WINDOWS\system32\dllcache\ieakui.dll
2008-08-14 13:43 2,184,064 ----a-w C:\WINDOWS\system32\ntoskrnl.exe
2008-08-14 13:43 2,184,064 ------w C:\WINDOWS\system32\dllcache\ntoskrnl.exe
2008-08-14 13:42 2,139,648 ------w C:\WINDOWS\system32\dllcache\ntkrnlmp.exe
2008-08-14 13:42 2,061,440 ----a-w C:\WINDOWS\system32\ntkrnlpa.exe
2008-08-14 13:42 2,061,440 ------w C:\WINDOWS\system32\dllcache\ntkrnlpa.exe
2008-08-14 13:42 2,019,328 ------w C:\WINDOWS\system32\dllcache\ntkrpamp.exe
2008-08-14 09:51 138,368 ------w C:\WINDOWS\system32\dllcache\afd.sys
2007-07-22 13:09 88,088 ----a-w C:\Documents and Settings\matteo monica\Dati applicazioni\GDIPFONTCACHEV1.DAT
.

((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* i valori vuoti & legittimi/default non sono visualizzati.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-19 15360]
"MSMSGS"="C:\Programmi\Messenger\msmsgs.exe" [2004-10-13 1694208]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Programmi\File comuni\Ahead\lib\NMBgMonitor.exe" [2005-09-16 94208]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Hcontrol"="C:\WINDOWS\ATK0100\Hcontrol.exe" [2003-05-26 65536]
"Power_Gear"="C:\Progra~1\ASUS\Power4 Gear\BatteryLife.exe" [2002-11-29 73728]
"SiS Tray"="C:\WINDOWS\System32\sistray.EXE" [2002-11-17 303104]
"SiS KHooker"="C:\WINDOWS\System32\khooker.exe" [2002-09-24 290816]
"SynTPLpr"="C:\Programmi\Synaptics\SynTP\SynTPLpr.exe" [2003-05-08 126976]
"SynTPEnh"="C:\Programmi\Synaptics\SynTP\SynTPEnh.exe" [2003-05-08 561152]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 155648]
"Symantec PIF AlertEng"="C:\Programmi\File comuni\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2007-03-12 517768]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2008-07-19 78008]
"SoundMan"="SOUNDMAN.EXE" [2003-05-14 C:\WINDOWS\SOUNDMAN.EXE]
"AGRSMMSG"="AGRSMMSG.exe" [2003-05-07 C:\WINDOWS\AGRSMMSG.exe]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2004-08-19 15360]

C:\Documents and Settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\
ASUS ChkMail.lnk - C:\Programmi\Asus\Asus ChkMail\ChkMail.exe [2006-09-24 40960]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{C5F43BEF-CE2F-46D8-AFE6-A647BACD1F09}"= "C:\WINDOWS\system32\Bitkv0.dll" [2007-06-13 69632]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "C:\Programmi\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2008-07-23 16:28 352256 C:\Programmi\SUPERAntiSpyware\SASWINLO.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.GJPG"= GJPG.DLL

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"AntiVirusOverride"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=

R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-07-19 78416]
R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-07-19 20560]
R2 Utilità di pianificazione di LiveUpdate automatico;Utilità di pianificazione di LiveUpdate automatico;C:\Programmi\Symantec\LiveUpdate\ALUSchedulerSvc.exe [2006-08-03 100032]
R3 WBMS;Winbond Memory Stick Storage (MS) Device Driver;C:\WINDOWS\system32\Drivers\WBMS.SYS [2003-05-07 30208]
R3 WBSD;Winbond Secure Digital Storage (SD/MMC) Device Driver;C:\WINDOWS\system32\Drivers\WBSD.SYS [2003-05-07 25600]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9114f2bc-4d6c-11db-816c-000ea673f435}]
\Shell\AutoRun\command - J:\cqdis.cmd
\Shell\explore\Command - J:\cqdis.cmd
\Shell\open\Command - J:\cqdis.cmd

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b05a48da-9c6a-11dd-8292-000ea673f435}]
\Shell\AutoRun\command - H:\cqdis.cmd
\Shell\explore\Command - H:\cqdis.cmd
\Shell\open\Command - H:\cqdis.cmd
.
- - - - ORFÃOS REMOVIDOS - - - -

HKCU-Run-kamsoft - C:\WINDOWS\system32\ckvo.exe
HKLM-Run-NWEReboot - (no file)

.
------- Supplementare di scansione -------
.
R0 -: HKCU-Main,Start Page = hxxp://www.google.it/
O8 -: E&sporta in Microsoft Excel - C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000

O16 -: DirectAnimation Java Classes - file://C:\WINDOWS\Java\classes\dajava.cab
C:\WINDOWS\Downloaded Program Files\DirectAnimation Java Classes.osd

O16 -: Microsoft XML Parser for Java - file://C:\WINDOWS\Java\classes\xmldso.cab
C:\WINDOWS\Downloaded Program Files\Microsoft XML Parser for Java.osd

O16 -: {1F83CD9E-505E-4F87-BECE-0832A763E36F} - hxxp://www.mypixmania.com/it/it/importer/MypixUploader.cab
C:\WINDOWS\Downloaded Program Files\MypixUploader.inf
C:\WINDOWS\system32\unicows.dll
C:\WINDOWS\Downloaded Program Files\MypixUploader.ocx

O16 -: {7F8B1F27-AE54-479D-AACF-0A7B2334E7EE} - hxxp://stampafoto.mediaworld.it/HTTPUplList.cab
C:\WINDOWS\Downloaded Program Files\HTTPUplList.ocx

O16 -: {FB90BA05-66E6-4C56-BCD3-D65B0F7EBA39} - hxxp://express.foto.com/SFUploader/SpeedUploader.cab
C:\WINDOWS\Downloaded Program Files\SpeedUploader.inf
C:\WINDOWS\system32\unicows.dll
C:\WINDOWS\Downloaded Program Files\SpeedUploader.ocx
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-10-24 22:41:05
Windows 5.1.2600 Service Pack 2 FAT NTAPI

scansione processi nascosti ...

scansione entrate autostart nascoste ...

Scansione files nascosti ...

Scansione completata con successo
Files nascosti: 0

**************************************************************************
.
------------------------ Altri processi in esecuzione ------------------------
.
C:\PROGRAMMI\ALWIL SOFTWARE\AVAST4\ASWUPDSV.EXE
C:\PROGRAMMI\ALWIL SOFTWARE\AVAST4\ASHSERV.EXE
C:\PROGRAMMI\FILE COMUNI\MICROSOFT SHARED\VS7DEBUG\MDM.EXE
C:\PROGRAMMI\ALWIL SOFTWARE\AVAST4\ASHMAISV.EXE
C:\PROGRAMMI\ALWIL SOFTWARE\AVAST4\ASHWEBSV.EXE
C:\WINDOWS\ATK0100\ATKOSD.exe
C:\Programmi\Asus\ASUS Hotkey\Hotkey.exe
C:\Programmi\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Programmi\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\WINDOWS\System32\verclsid.exe
.
**************************************************************************
.
Ora fine scansione: 2008-10-24 22:44:49 - macchina è stato riavviato
ComboFix-quarantined-files.txt 2008-10-24 20:44:40

Pre-Run: 7.820.525.568 byte disponibili
Post-Run: 7,893,139,456 byte disponibili

163

bdoriano

Veramente, avevo chiesto una scansione con Kaspersky e il relativo log... Rolling Eyes

Fai queste operazioni, nell'ordine indicato:

Apri il Blocco note e crea un file di testo con le seguenti istruzioni:

Codice:

File::
C:\2fiji.com

Registry::
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9114f2bc-4d6c-11db-816c-000ea673f435}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b05a48da-9c6a-11dd-8292-000ea673f435}]

Salva il file sul desktop con il nome CFScript.txt e trascinalo sull'icona di ComboFix, come indicato in seguito:

Attendi pazientemente la fine dei lavori senza toccare tastiera, mouse o altro. Wink

Posta il log aggiornato di combofix.

Fai questa scansione con Kaspersky

Hai qualche periferica USB (chiavetta o HD esterno) infetta, dobbiamo disabilitarne l'avvio automatico all'inserimento per controllarle.
Per farlo in maniera semplice, scaricati il programma TweakUI da questa pagina e installalo.
Una volta installato, eseguilo e procedi con questi passaggi:

Citazione:

Espandi la sezione My Computer
Espandi la sottosezione Autoplay
Spostati in Types
Togli il segno di spunta a Enable Autoplay for removable drives
Clicca su Apply
Chiudi TweakUI

PS: Con Espandi intendo: clicca sul simbolo [+] di fianco alle voci che ti ho indicato Wink

Da questo momento tutti gli apparati USB smetteranno di avviarsi automaticamente.
Inserisci le tue chiavette e fai un check delle stesse con il tuo antivirus.
Quando sei sicuro che tutto è a posto, puoi riabilitare l'avvio automatico, rifacendo lo stesso percorso che ti ho indicato.

Segui le istruzioni di questo topic per postare il log di hijackthis.

mito74 · Mortale devoto Registrato: 23/10/08 09:02 Messaggi: 14

ok questa sera procedo seguento le istruzioni
grazie ancora

mito74 · Mortale devoto Registrato: 23/10/08 09:02 Messaggi: 14

ecco i log che mi hai chiesto
combofix
ComboFix 08-10-22.05 - matteo monica 2008-10-28 20.55.03.2 - FAT32x86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1040.18.190 [GMT 1:00]
Eseguito da: C:\Documents and Settings\matteo monica\Desktop\ComboFix.exe
Interruttori di comando utilizzati :: C:\Documents and Settings\matteo monica\Desktop\CFScript.txt
* Creato nuovo punto di ripristino

ATENÇÃO - ESTA MAQUINA NAO TEM A CONSOLE DE RECUPERAÇÃO INSTALADA !!

FILE ::
C:\2fiji.com
.

((((((((((((((((((((((((( Files Creati Da 2008-09-28 al 2008-10-28 )))))))))))))))))))))))))))))))))))
.

2008-10-26 16:13 . 2008-10-26 16:13 <DIR> d-------- C:\Programmi\NOS
2008-10-26 16:13 . 2008-10-26 16:13 <DIR> d-------- C:\Documents and Settings\All Users\Dati applicazioni\NOS
2008-10-26 16:03 . 2008-08-27 10:57 3,593,216 --------- C:\WINDOWS\system32\SET32.tmp
2008-10-26 16:03 . 2008-08-26 09:57 459,264 --------- C:\WINDOWS\system32\SET41.tmp
2008-10-26 16:03 . 2008-08-26 09:57 383,488 --------- C:\WINDOWS\system32\SET45.tmp
2008-10-26 16:03 . 2008-10-15 17:57 332,800 --------- C:\WINDOWS\system32\SETE.tmp
2008-10-26 16:03 . 2008-10-15 17:57 332,800 --a------ C:\WINDOWS\system32\SET27.tmp
2008-10-26 16:03 . 2008-08-26 09:57 63,488 --------- C:\WINDOWS\system32\SET4C.tmp
2008-10-26 16:03 . 2008-08-26 09:57 52,224 --------- C:\WINDOWS\system32\SET34.tmp
2008-10-24 20:44 . 2008-10-24 20:44 <DIR> d-------- C:\hijackthis
2008-10-23 23:01 . 2008-10-23 23:01 <DIR> d-------- C:\Programmi\SUPERAntiSpyware
2008-10-23 23:01 . 2008-10-23 23:01 <DIR> d-------- C:\Documents and Settings\matteo monica\Dati applicazioni\SUPERAntiSpyware.com
2008-10-23 23:01 . 2008-10-23 23:01 <DIR> d-------- C:\Documents and Settings\All Users\Dati applicazioni\SUPERAntiSpyware.com
2008-10-23 23:00 . 2008-10-23 23:00 <DIR> d-------- C:\Programmi\File comuni\Wise Installation Wizard
2008-10-23 21:31 . 2008-10-23 21:31 <DIR> d-------- C:\Programmi\Malwarebytes' Anti-Malware
2008-10-23 21:31 . 2008-10-23 21:31 <DIR> d-------- C:\Documents and Settings\matteo monica\Dati applicazioni\Malwarebytes
2008-10-23 21:31 . 2008-10-23 21:31 <DIR> d-------- C:\Documents and Settings\All Users\Dati applicazioni\Malwarebytes
2008-10-23 21:31 . 2008-10-22 16:10 38,496 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2008-10-23 21:31 . 2008-10-22 16:10 15,504 --a------ C:\WINDOWS\system32\drivers\mbam.sys
2008-10-23 21:27 . 2003-06-25 16:05 266,360 --a------ C:\WINDOWS\system32\TweakUI.exe
2008-10-23 21:27 . 2002-06-21 15:09 160,217 --a------ C:\WINDOWS\system32\PowerToysLicense.rtf
2008-10-21 21:56 . 2008-10-21 21:56 <DIR> d-------- C:\Programmi\Avira
2008-10-21 21:56 . 2008-10-21 21:56 <DIR> d-------- C:\Documents and Settings\All Users\Dati applicazioni\Avira
2008-10-03 18:58 . 2008-10-03 18:58 6,066,176 --------- C:\WINDOWS\system32\SETC.tmp
2008-10-03 18:58 . 2008-10-03 18:58 6,066,176 --a------ C:\WINDOWS\system32\SET33.tmp

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-10-15 16:57 332,800 ------w C:\WINDOWS\system32\dllcache\netapi32.dll
2008-10-03 17:58 6,066,176 ------w C:\WINDOWS\system32\dllcache\ieframe.dll
2008-09-15 16:38 1,846,016 ----a-w C:\WINDOWS\system32\win32k.sys
2008-09-15 16:38 1,846,016 ------w C:\WINDOWS\system32\dllcache\win32k.sys
2008-08-28 11:04 333,056 ----a-w C:\WINDOWS\system32\drivers\srv.sys
2008-08-28 11:04 333,056 ------w C:\WINDOWS\system32\dllcache\srv.sys
2008-08-27 09:57 3,593,216 ----a-w C:\WINDOWS\system32\SET2B.tmp
2008-08-27 09:57 3,593,216 ----a-w C:\WINDOWS\system32\dllcache\mshtml.dll
2008-08-25 09:39 70,656 ------w C:\WINDOWS\system32\dllcache\ie4uinit.exe
2008-08-25 09:38 13,824 ------w C:\WINDOWS\system32\dllcache\ieudinit.exe
2008-08-23 06:56 635,848 ------w C:\WINDOWS\system32\dllcache\iexplore.exe
2008-08-23 06:54 161,792 ----a-w C:\WINDOWS\system32\dllcache\ieakui.dll
2008-08-14 14:43 2,184,064 ----a-w C:\WINDOWS\system32\ntoskrnl.exe
2008-08-14 14:43 2,184,064 ------w C:\WINDOWS\system32\dllcache\ntoskrnl.exe
2008-08-14 14:42 2,139,648 ------w C:\WINDOWS\system32\dllcache\ntkrnlmp.exe
2008-08-14 14:42 2,061,440 ----a-w C:\WINDOWS\system32\ntkrnlpa.exe
2008-08-14 14:42 2,061,440 ------w C:\WINDOWS\system32\dllcache\ntkrnlpa.exe
2008-08-14 14:42 2,019,328 ------w C:\WINDOWS\system32\dllcache\ntkrpamp.exe
2008-08-14 10:51 138,368 ------w C:\WINDOWS\system32\dllcache\afd.sys
2007-07-22 14:09 88,088 ----a-w C:\Documents and Settings\matteo monica\Dati applicazioni\GDIPFONTCACHEV1.DAT
.

((((((((((((((((((((((((((((( snapshot@2008-10-24_22.44.03.59 )))))))))))))))))))))))))))))))))))))))))
.
+ 2004-11-17 17:41:12 352,768 ------w C:\WINDOWS\$hf_mig$\KB873339\SP2QFE\hypertrm.dll
+ 2004-10-14 09:35:26 8,704 ------w C:\WINDOWS\$hf_mig$\KB873339\spmsg.dll
+ 2004-10-14 09:36:22 171,008 ------w C:\WINDOWS\$hf_mig$\KB873339\spuninst.exe
+ 2004-10-14 09:36:22 21,504 ------w C:\WINDOWS\$hf_mig$\KB873339\update\spcustom.dll
+ 2004-10-14 09:35:28 662,528 ------w C:\WINDOWS\$hf_mig$\KB873339\update\update.exe
+ 2004-10-28 01:29:32 727,552 ------w C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\lsasrv.dll
+ 2004-10-28 01:15:16 448,128 ------w C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\mrxsmb.sys
+ 2004-10-28 01:14:56 174,592 ------w C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\rdbss.sys
+ 2004-10-14 10:35:26 8,704 ------w C:\WINDOWS\$hf_mig$\KB885835\spmsg.dll
+ 2004-10-14 10:36:22 171,008 ------w C:\WINDOWS\$hf_mig$\KB885835\spuninst.exe
+ 2004-10-14 10:36:22 21,504 ------w C:\WINDOWS\$hf_mig$\KB885835\update\spcustom.dll
+ 2004-10-14 10:35:28 662,528 ------w C:\WINDOWS\$hf_mig$\KB885835\update\update.exe
+ 2004-10-14 10:35:26 8,704 ------w C:\WINDOWS\$hf_mig$\KB885836\spmsg.dll
+ 2004-10-14 10:36:22 171,008 ------w C:\WINDOWS\$hf_mig$\KB885836\spuninst.exe
+ 2004-10-14 10:36:22 21,504 ------w C:\WINDOWS\$hf_mig$\KB885836\update\spcustom.dll
+ 2004-10-14 10:35:28 662,528 ------w C:\WINDOWS\$hf_mig$\KB885836\update\update.exe
+ 2004-09-29 22:31:18 134,912 ------w C:\WINDOWS\$hf_mig$\KB886185\SP2QFE\ipnat.sys
+ 2004-10-14 18:35:26 8,704 ------w C:\WINDOWS\$hf_mig$\KB886185\spmsg.dll
+ 2004-10-14 18:36:20 171,008 ------w C:\WINDOWS\$hf_mig$\KB886185\spuninst.exe
+ 2004-10-14 18:36:20 21,504 ------w C:\WINDOWS\$hf_mig$\KB886185\update\spcustom.dll
+ 2004-10-14 18:35:26 662,528 ------w C:\WINDOWS\$hf_mig$\KB886185\update\update.exe
+ 2004-10-13 16:21:24 1,694,208 ------w C:\WINDOWS\$hf_mig$\KB887472\SP2QFE\msmsgs.exe
+ 2004-10-14 10:35:26 8,704 ------w C:\WINDOWS\$hf_mig$\KB887472\spmsg.dll
+ 2004-10-14 10:36:22 171,008 ------w C:\WINDOWS\$hf_mig$\KB887472\spuninst.exe
+ 2004-10-14 10:36:22 21,504 ------w C:\WINDOWS\$hf_mig$\KB887472\update\spcustom.dll
+ 2004-10-14 10:35:28 662,528 ------w C:\WINDOWS\$hf_mig$\KB887472\update\update.exe
+ 2004-12-07 19:32:22 96,768 ------w C:\WINDOWS\$hf_mig$\KB888302\SP2QFE\srvsvc.dll
+ 2004-11-30 13:47:06 8,704 ------w C:\WINDOWS\$hf_mig$\KB888302\spmsg.dll
+ 2004-11-30 19:22:46 171,008 ------w C:\WINDOWS\$hf_mig$\KB888302\spuninst.exe
+ 2004-11-30 19:22:44 21,504 ------w C:\WINDOWS\$hf_mig$\KB888302\update\spcustom.dll
+ 2004-11-30 13:47:06 662,528 ------w C:\WINDOWS\$hf_mig$\KB888302\update\update.exe
+ 2005-04-22 05:19:50 57,344 ------w C:\WINDOWS\$hf_mig$\KB890046\SP2QFE\agentdpv.dll
+ 2005-05-17 00:44:50 19,968 ------w C:\WINDOWS\$hf_mig$\KB890046\SP2QFE\spru0410.dll
+ 2005-02-24 19:35:44 15,584 ------w C:\WINDOWS\$hf_mig$\KB890046\spmsg.dll
+ 2005-02-24 19:35:44 212,192 ------w C:\WINDOWS\$hf_mig$\KB890046\spuninst.exe
+ 2005-02-24 19:35:42 22,240 ------w C:\WINDOWS\$hf_mig$\KB890046\update\spcustom.dll
+ 2005-02-24 19:35:44 726,240 ------w C:\WINDOWS\$hf_mig$\KB890046\update\update.exe
+ 2005-02-24 19:35:44 391,392 ------w C:\WINDOWS\$hf_mig$\KB890046\update\updspapi.dll
+ 2005-03-02 18:20:04 62,464 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\authz.dll
+ 2005-03-02 18:12:16 2,139,136 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrnlmp.exe
+ 2005-03-02 18:12:16 2,060,672 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrnlpa.exe
+ 2005-03-02 18:12:20 2,018,816 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrpamp.exe
+ 2005-03-02 18:12:26 2,183,296 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe
+ 2005-03-02 18:20:04 578,048 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\user32.dll
+ 2005-03-02 18:12:14 1,836,288 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\win32k.sys
+ 2005-03-02 18:20:04 291,840 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\winsrv.dll
+ 2005-02-24 18:35:44 15,584 ------w C:\WINDOWS\$hf_mig$\KB890859\spmsg.dll
+ 2005-02-24 18:35:44 212,192 ------w C:\WINDOWS\$hf_mig$\KB890859\spuninst.exe
+ 2005-02-24 18:35:42 22,240 ------w C:\WINDOWS\$hf_mig$\KB890859\update\spcustom.dll
+ 2005-02-24 18:35:44 726,240 ------w C:\WINDOWS\$hf_mig$\KB890859\update\update.exe
+ 2005-02-24 18:35:44 391,392 ------w C:\WINDOWS\$hf_mig$\KB890859\update\updspapi.dll
+ 2004-11-30 13:47:06 8,704 ------w C:\WINDOWS\$hf_mig$\KB891781\spmsg.dll
+ 2004-11-30 19:22:46 171,008 ------w C:\WINDOWS\$hf_mig$\KB891781\spuninst.exe
+ 2004-11-30 19:22:44 21,504 ------w C:\WINDOWS\$hf_mig$\KB891781\update\spcustom.dll
+ 2004-11-30 13:47:06 662,528 ------w C:\WINDOWS\$hf_mig$\KB891781\update\update.exe
+ 2005-07-08 16:30:10 249,344 ------w C:\WINDOWS\$hf_mig$\KB893756\SP2QFE\tapisrv.dll
+ 2005-02-24 19:35:44 15,584 ------w C:\WINDOWS\$hf_mig$\KB893756\spmsg.dll
+ 2005-02-24 19:35:44 212,192 ------w C:\WINDOWS\$hf_mig$\KB893756\spuninst.exe
+ 2005-07-07 18:27:08 30,720 ------w C:\WINDOWS\$hf_mig$\KB893756\update\arpidfix.exe
+ 2005-02-24 19:35:42 22,240 ------w C:\WINDOWS\$hf_mig$\KB893756\update\spcustom.dll
+ 2005-02-24 19:35:44 726,240 ------w C:\WINDOWS\$hf_mig$\KB893756\update\update.exe
+ 2005-02-24 19:35:44 391,392 ------w C:\WINDOWS\$hf_mig$\KB893756\update\updspapi.dll
+ 2005-04-28 19:35:56 1,286,144 ------w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\ole32.dll
+ 2005-04-28 19:35:56 74,752 ------w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\olecli32.dll
+ 2005-04-28 19:35:56 37,376 ------w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\olecnv32.dll
+ 2005-04-28 19:35:56 396,288 ------w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\rpcss.dll
+ 2005-02-24 19:35:44 15,584 ------w C:\WINDOWS\$hf_mig$\KB894391\spmsg.dll
+ 2005-02-24 19:35:44 212,192 ------w C:\WINDOWS\$hf_mig$\KB894391\spuninst.exe
+ 2005-02-24 19:35:42 22,240 ------w C:\WINDOWS\$hf_mig$\KB894391\update\spcustom.dll
+ 2005-02-24 19:35:44 726,240 ------w C:\WINDOWS\$hf_mig$\KB894391\update\update.exe
+ 2005-02-24 19:35:44 391,392 ------w C:\WINDOWS\$hf_mig$\KB894391\update\updspapi.dll
+ 2005-05-26 23:26:50 10,752 ------w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\hh.exe
+ 2005-05-27 02:10:44 41,472 ------w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\hhsetup.dll
+ 2005-05-27 02:10:44 155,136 ------w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\itircl.dll
+ 2005-05-27 02:10:44 137,216 ------w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\itss.dll
+ 2005-02-24 19:35:44 15,584 ------w C:\WINDOWS\$hf_mig$\KB896358\spmsg.dll
+ 2005-02-24 19:35:44 212,192 ------w C:\WINDOWS\$hf_mig$\KB896358\spuninst.exe
+ 2005-02-24 19:35:42 22,240 ------w C:\WINDOWS\$hf_mig$\KB896358\update\spcustom.dll
+ 2005-02-24 19:35:44 726,240 ------w C:\WINDOWS\$hf_mig$\KB896358\update\update.exe
+ 2005-02-24 19:35:44 391,392 ------w C:\WINDOWS\$hf_mig$\KB896358\update\updspapi.dll
+ 2005-06-11 00:17:14 57,856 ------w C:\WINDOWS\$hf_mig$\KB896423\SP2QFE\spoolsv.exe
+ 2005-02-24 19:35:44 15,584 ------w C:\WINDOWS\$hf_mig$\KB896423\spmsg.dll
+ 2005-02-24 19:35:44 212,192 ------w C:\WINDOWS\$hf_mig$\KB896423\spuninst.exe
+ 2005-06-29 15:54:32 30,720 ------w C:\WINDOWS\$hf_mig$\KB896423\update\arpidfix.exe
+ 2005-02-24 19:35:42 22,240 ------w C:\WINDOWS\$hf_mig$\KB896423\update\spcustom.dll
+ 2005-02-24 19:35:44 726,240 ------w C:\WINDOWS\$hf_mig$\KB896423\update\update.exe
+ 2005-02-24 19:35:44 391,392 ------w C:\WINDOWS\$hf_mig$\KB896423\update\updspapi.dll
+ 2005-10-06 03:19:14 280,064 ------w C:\WINDOWS\$hf_mig$\KB896424\SP2QFE\gdi32.dll
+ 2005-10-06 03:11:38 1,839,488 ------w C:\WINDOWS\$hf_mig$\KB896424\SP2QFE\win32k.sys
+ 2005-02-24 19:35:44 15,584 ------w C:\WINDOWS\$hf_mig$\KB896424\spmsg.dll
+ 2005-02-24 19:35:44 212,192 ------w C:\WINDOWS\$hf_mig$\KB896424\spuninst.exe
+ 2005-10-05 15:39:46 30,720 ------w C:\WINDOWS\$hf_mig$\KB896424\update\arpidfix.exe
+ 2005-02-24 19:35:42 22,240 ------w C:\WINDOWS\$hf_mig$\KB896424\update\spcustom.dll
+ 2005-02-24 19:35:44 726,240 ------w C:\WINDOWS\$hf_mig$\KB896424\update\update.exe
+ 2005-02-24 19:35:44 391,392 ------w C:\WINDOWS\$hf_mig$\KB896424\update\updspapi.dll
+ 2005-05-11 02:32:38 77,824 ------w C:\WINDOWS\$hf_mig$\KB896428\SP2QFE\telnet.exe
+ 2005-02-24 19:35:44 15,584 ------w C:\WINDOWS\$hf_mig$\KB896428\spmsg.dll
+ 2005-02-24 19:35:44 212,192 ------w C:\WINDOWS\$hf_mig$\KB896428\spuninst.exe
+ 2005-02-24 19:35:42 22,240 ------w C:\WINDOWS\$hf_mig$\KB896428\update\spcustom.dll
+ 2005-02-24 19:35:44 726,240 ------w C:\WINDOWS\$hf_mig$\KB896428\update\update.exe
+ 2005-02-24 19:35:44 391,392 ------w C:\WINDOWS\$hf_mig$\KB896428\update\updspapi.dll
+ 2005-02-25 03:35:42 15,584 ------w C:\WINDOWS\$hf_mig$\KB898461\spmsg.dll
+ 2005-02-25 03:35:42 212,192 ------w C:\WINDOWS\$hf_mig$\KB898461\spuninst.exe
+ 2005-02-25 03:35:42 22,752 ------w C:\WINDOWS\$hf_mig$\KB898461\spupdsvc.exe
+ 2005-02-25 03:35:42 22,240 ------w C:\WINDOWS\$hf_mig$\KB898461\update\spcustom.dll
+ 2005-02-25 03:35:42 726,240 ------w C:\WINDOWS\$hf_mig$\KB898461\update\update.exe
+ 2005-02-25 03:35:44 391,392 ------w C:\WINDOWS\$hf_mig$\KB898461\update\updspapi.dll
+ 2005-06-15 17:48:50 297,984 ------w C:\WINDOWS\$hf_mig$\KB899587\SP2QFE\kerberos.dll
+ 2005-02-24 19:35:44 15,584 ------w C:\WINDOWS\$hf_mig$\KB899587\spmsg.dll
+ 2005-02-24 19:35:44 212,192 ------w C:\WINDOWS\$hf_mig$\KB899587\spuninst.exe
+ 2005-06-29 15:54:32 30,720 ------w C:\WINDOWS\$hf_mig$\KB899587\update\arpidfix.exe
+ 2005-02-24 19:35:42 22,240 ------w C:\WINDOWS\$hf_mig$\KB899587\update\spcustom.dll
+ 2005-02-24 19:35:44 726,240 ------w C:\WINDOWS\$hf_mig$\KB899587\update\update.exe
+ 2005-02-24 19:35:44 391,392 ------w C:\WINDOWS\$hf_mig$\KB899587\update\updspapi.dll
+ 2005-06-10 04:06:02 139,528 ------w C:\WINDOWS\$hf_mig$\KB899591\SP2QFE\rdpwd.sys
+ 2005-02-24 19:35:44 15,584 ------w C:\WINDOWS\$hf_mig$\KB899591\spmsg.dll
+ 2005-02-24 19:35:44 212,192 ------w C:\WINDOWS\$hf_mig$\KB899591\spuninst.exe
+ 2005-06-29 15:54:32 30,720 ------w C:\WINDOWS\$hf_mig$\KB899591\update\arpidfix.exe
+ 2005-02-24 19:35:42 22,240 ------w C:\WINDOWS\$hf_mig$\KB899591\update\spcustom.dll
+ 2005-02-24 19:35:44 726,240 ------w C:\WINDOWS\$hf_mig$\KB899591\update\update.exe
+ 2005-02-24 19:35:44 391,392 ------w C:\WINDOWS\$hf_mig$\KB899591\update\updspapi.dll
+ 2006-02-15 00:30:08 142,464 ------w C:\WINDOWS\$hf_mig$\KB900485\SP2QFE\aec.sys
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB900485\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB900485\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB900485\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB900485\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB900485\update\updspapi.dll
+ 2005-09-01 01:46:18 19,968 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\linkinfo.dll
+ 2005-09-23 03:25:24 8,481,792 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\shell32.dll
+ 2005-09-02 23:53:54 474,112 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\shlwapi.dll
+ 2005-09-27 00:47:48 24,064 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\spru0410.dll
+ 2005-09-01 01:46:20 292,352 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\winsrv.dll
+ 2005-02-24 19:35:44 15,584 ------w C:\WINDOWS\$hf_mig$\KB900725\spmsg.dll
+ 2005-02-24 19:35:44 212,192 ------w C:\WINDOWS\$hf_mig$\KB900725\spuninst.exe
+ 2005-09-26 16:36:24 30,720 ------w C:\WINDOWS\$hf_mig$\KB900725\update\arpidfix.exe
+ 2005-02-24 19:35:42 22,240 ------w C:\WINDOWS\$hf_mig$\KB900725\update\spcustom.dll
+ 2005-02-24 19:35:44 726,240 ------w C:\WINDOWS\$hf_mig$\KB900725\update\update.exe
+ 2005-02-24 19:35:44 391,392 ------w C:\WINDOWS\$hf_mig$\KB900725\update\updspapi.dll
+ 2005-09-10 01:51:38 2,068,480 ------w C:\WINDOWS\$hf_mig$\KB901017\SP2QFE\cdosys.dll
+ 2005-02-24 19:35:44 15,584 ------w C:\WINDOWS\$hf_mig$\KB901017\spmsg.dll
+ 2005-02-24 19:35:44 212,192 ------w C:\WINDOWS\$hf_mig$\KB901017\spuninst.exe
+ 2005-09-09 15:26:26 30,720 ------w C:\WINDOWS\$hf_mig$\KB901017\update\arpidfix.exe
+ 2005-02-24 19:35:42 22,240 ------w C:\WINDOWS\$hf_mig$\KB901017\update\spcustom.dll
+ 2005-02-24 19:35:44 726,240 ------w C:\WINDOWS\$hf_mig$\KB901017\update\update.exe
+ 2005-02-24 19:35:44 391,392 ------w C:\WINDOWS\$hf_mig$\KB901017\update\updspapi.dll
+ 2005-06-29 01:54:14 254,976 ------w C:\WINDOWS\$hf_mig$\KB901214\SP2QFE\icm32.dll
+ 2005-06-29 01:54:14 73,728 ------w C:\WINDOWS\$hf_mig$\KB901214\SP2QFE\mscms.dll
+ 2005-02-24 19:35:44 15,584 ------w C:\WINDOWS\$hf_mig$\KB901214\spmsg.dll
+ 2005-02-24 19:35:44 212,192 ------w C:\WINDOWS\$hf_mig$\KB901214\spuninst.exe
+ 2005-02-24 19:35:42 22,240 ------w C:\WINDOWS\$hf_mig$\KB901214\update\spcustom.dll
+ 2005-02-24 19:35:44 726,240 ------w C:\WINDOWS\$hf_mig$\KB901214\update\update.exe
+ 2005-02-24 19:35:44 391,392 ------w C:\WINDOWS\$hf_mig$\KB901214\update\updspapi.dll
+ 2005-07-26 04:27:32 225,792 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\catsrv.dll
+ 2005-07-26 04:27:34 625,152 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\catsrvut.dll
+ 2005-07-26 04:27:36 110,080 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\clbcatex.dll
+ 2005-07-26 04:27:36 498,688 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\clbcatq.dll
+ 2005-07-26 04:27:36 60,416 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\colbact.dll
+ 2005-07-26 04:27:36 195,072 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comadmin.dll
+ 2005-07-26 04:27:38 97,792 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comrepl.dll
+ 2005-07-26 04:27:40 1,267,200 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comsvcs.dll
+ 2005-07-26 04:27:40 540,160 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comuid.dll
+ 2005-07-26 04:27:40 243,200 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\es.dll
+ 2005-07-25 23:42:36 8,704 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\migregdb.exe
+ 2005-07-26 04:27:40 425,472 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\msdtcprx.dll
+ 2005-07-26 04:27:42 945,152 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\msdtctm.dll
+ 2005-07-26 04:27:42 161,280 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\msdtcuiu.dll
+ 2005-07-26 04:27:42 66,560 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\mtxclu.dll
+ 2005-07-26 04:27:42 91,136 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\mtxoci.dll
+ 2005-07-26 04:27:42 1,285,632 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\ole32.dll
+ 2005-07-26 04:27:44 74,752 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\olecli32.dll
+ 2005-07-26 04:27:44 37,376 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\olecnv32.dll
+ 2005-07-26 04:27:44 398,336 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\rpcss.dll
+ 2005-07-26 04:27:44 101,376 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\txflog.dll
+ 2005-07-26 04:27:44 11,776 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\xolehlp.dll
+ 2005-02-24 19:35:44 15,584 ------w C:\WINDOWS\$hf_mig$\KB902400\spmsg.dll
+ 2005-02-24 19:35:44 212,192 ------w C:\WINDOWS\$hf_mig$\KB902400\spuninst.exe
+ 2005-07-25 18:21:18 30,720 ------w C:\WINDOWS\$hf_mig$\KB902400\update\arpidfix.exe
+ 2005-02-24 19:35:42 22,240 ------w C:\WINDOWS\$hf_mig$\KB902400\update\spcustom.dll
+ 2005-02-24 19:35:44 726,240 ------w C:\WINDOWS\$hf_mig$\KB902400\update\update.exe
+ 2005-02-24 19:35:44 391,392 ------w C:\WINDOWS\$hf_mig$\KB902400\update\updspapi.dll
+ 2005-08-30 04:15:44 1,292,800 ------w C:\WINDOWS\$hf_mig$\KB904706\SP2QFE\quartz.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB904706\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB904706\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB904706\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB904706\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB904706\update\updspapi.dll
+ 2005-08-22 18:25:02 197,632 ------w C:\WINDOWS\$hf_mig$\KB905414\SP2QFE\netman.dll
+ 2005-02-25 03:35:42 15,584 ------w C:\WINDOWS\$hf_mig$\KB905414\spmsg.dll
+ 2005-02-25 03:35:42 212,192 ------w C:\WINDOWS\$hf_mig$\KB905414\spuninst.exe
+ 2005-08-19 23:50:32 30,720 ------w C:\WINDOWS\$hf_mig$\KB905414\update\arpidfix.exe
+ 2005-02-25 03:35:42 22,240 ------w C:\WINDOWS\$hf_mig$\KB905414\update\spcustom.dll
+ 2005-02-25 03:35:42 726,240 ------w C:\WINDOWS\$hf_mig$\KB905414\update\update.exe
+ 2005-02-25 03:35:44 391,392 ------w C:\WINDOWS\$hf_mig$\KB905414\update\updspapi.dll
+ 2005-08-23 03:41:08 124,928 ------w C:\WINDOWS\$hf_mig$\KB905749\SP2QFE\umpnpmgr.dll
+ 2005-02-24 19:35:44 15,584 ------w C:\WINDOWS\$hf_mig$\KB905749\spmsg.dll
+ 2005-02-24 19:35:44 212,192 ------w C:\WINDOWS\$hf_mig$\KB905749\spuninst.exe
+ 2005-08-22 17:01:30 30,720 ------w C:\WINDOWS\$hf_mig$\KB905749\update\arpidfix.exe
+ 2005-02-24 19:35:42 22,240 ------w C:\WINDOWS\$hf_mig$\KB905749\update\spcustom.dll
+ 2005-02-24 19:35:44 726,240 ------w C:\WINDOWS\$hf_mig$\KB905749\update\update.exe
+ 2005-02-24 19:35:44 391,392 ------w C:\WINDOWS\$hf_mig$\KB905749\update\updspapi.dll
+ 2005-10-17 21:22:22 80,896 ------w C:\WINDOWS\$hf_mig$\KB908519\SP2QFE\fontsub.dll
+ 2005-10-17 21:22:22 117,760 ------w C:\WINDOWS\$hf_mig$\KB908519\SP2QFE\t2embed.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB908519\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB908519\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB908519\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB908519\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB908519\update\updspapi.dll
+ 2006-03-17 04:48:12 8,483,840 ------w C:\WINDOWS\$hf_mig$\KB908531\SP2QFE\shell32.dll
+ 2006-03-22 01:51:50 25,600 ------w C:\WINDOWS\$hf_mig$\KB908531\SP2QFE\spru0410.dll
+ 2006-03-17 01:05:36 28,672 ------w C:\WINDOWS\$hf_mig$\KB908531\SP2QFE\verclsid.exe
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB908531\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB908531\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB908531\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB908531\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB908531\update\updspapi.dll
+ 2005-10-20 22:32:10 1,092,096 ------w C:\WINDOWS\$hf_mig$\KB910437\SP2QFE\esent.dll
+ 2005-10-12 23:17:58 15,584 ------w C:\WINDOWS\$hf_mig$\KB910437\spmsg.dll
+ 2005-10-12 23:18:00 215,776 ------w C:\WINDOWS\$hf_mig$\KB910437\spuninst.exe
+ 2005-10-12 23:17:58 22,752 ------w C:\WINDOWS\$hf_mig$\KB910437\update\spcustom.dll
+ 2005-10-12 23:18:02 724,192 ------w C:\WINDOWS\$hf_mig$\KB910437\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB910437\update\updspapi.dll
+ 2006-06-22 10:37:08 180,736 ------w C:\WINDOWS\$hf_mig$\KB911280\SP2QFE\rasmans.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB911280\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB911280\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB911280\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB911280\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB911280\update\updspapi.dll
+ 2006-03-23 05:52:58 143,360 ------w C:\WINDOWS\$hf_mig$\KB911562\SP2QFE\msadco.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB911562\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB911562\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB911562\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB911562\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB911562\update\updspapi.dll
+ 2006-03-17 09:13:40 679,424 ------w C:\WINDOWS\$hf_mig$\KB911567\SP2QFE\inetcomm.dll
+ 2006-03-17 09:13:40 1,311,744 ------w C:\WINDOWS\$hf_mig$\KB911567\SP2QFE\msoe.dll
+ 2006-03-17 09:13:40 510,464 ------w C:\WINDOWS\$hf_mig$\KB911567\SP2QFE\wab32.dll
+ 2006-03-17 09:13:40 85,504 ------w C:\WINDOWS\$hf_mig$\KB911567\SP2QFE\wabimp.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB911567\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB911567\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB911567\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB911567\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB911567\update\updspapi.dll
+ 2006-01-04 04:18:50 68,096 ------w C:\WINDOWS\$hf_mig$\KB911927\SP2QFE\webclnt.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB911927\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB911927\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB911927\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB911927\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB911927\update\updspapi.dll
+ 2005-12-29 03:07:36 280,064 ------w C:\WINDOWS\$hf_mig$\KB912919\SP2QFE\gdi32.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB912919\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB912919\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB912919\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB912919\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB912919\update\updspapi.dll
+ 2006-03-01 19:41:30 426,496 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\msdtcprx.dll
+ 2006-03-01 19:41:30 956,416 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\msdtctm.dll
+ 2006-03-01 19:41:30 161,280 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\msdtcuiu.dll
+ 2006-03-01 19:41:30 66,560 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\mtxclu.dll
+ 2006-03-01 19:41:30 91,136 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\mtxoci.dll
+ 2006-03-01 19:41:30 11,776 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\xolehlp.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB913580\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB913580\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB913580\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB913580\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB913580\update\updspapi.dll
+ 2006-05-19 13:58:42 112,128 ------w C:\WINDOWS\$hf_mig$\KB914388\SP2QFE\dhcpcsvc.dll
+ 2006-05-19 13:58:42 147,456 ------w C:\WINDOWS\$hf_mig$\KB914388\SP2QFE\dnsapi.dll
+ 2006-05-19 13:58:42 95,744 ------w C:\WINDOWS\$hf_mig$\KB914388\SP2QFE\iphlpapi.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB914388\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB914388\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB914388\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB914388\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB914388\update\updspapi.dll
+ 2006-05-05 10:16:40 454,400 ------w C:\WINDOWS\$hf_mig$\KB914389\SP2QFE\mrxsmb.sys
+ 2006-05-05 10:22:52 174,592 ------w C:\WINDOWS\$hf_mig$\KB914389\SP2QFE\rdbss.sys
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB914389\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB914389\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB914389\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB914389\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB914389\update\updspapi.dll
+ 2006-07-14 15:52:22 121,856 ------w C:\WINDOWS\$hf_mig$\KB915865\SP2QFE\xmllite.dll
+ 2005-10-13 00:12:26 14,048 ------w C:\WINDOWS\$hf_mig$\KB915865\spmsg.dll
+ 2005-10-13 00:12:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB915865\spuninst.exe
+ 2005-10-13 00:12:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB915865\update\spcustom.dll
+ 2005-10-13 00:12:28 716,000 ------w C:\WINDOWS\$hf_mig$\KB915865\update\update.exe
+ 2005-10-13 00:12:34 371,424 ------w C:\WINDOWS\$hf_mig$\KB915865\update\updspapi.dll
+ 2006-03-17 01:08:10 262,656 ------w C:\WINDOWS\$hf_mig$\KB916595\SP2QFE\http.sys
+ 2005-10-12 23:21:24 15,584 ------w C:\WINDOWS\$hf_mig$\KB916595\spmsg.dll
+ 2005-10-12 23:21:24 215,776 ------w C:\WINDOWS\$hf_mig$\KB916595\spuninst.exe
+ 2005-10-12 23:21:24 22,752 ------w C:\WINDOWS\$hf_mig$\KB916595\update\spcustom.dll
+ 2005-10-12 23:21:26 724,192 ------w C:\WINDOWS\$hf_mig$\KB916595\update\update.exe
+ 2005-10-12 23:21:32 390,880 ------w C:\WINDOWS\$hf_mig$\KB916595\update\updspapi.dll
+ 2006-04-21 06:46:16 332,800 ------w C:\WINDOWS\$hf_mig$\KB917159\SP2QFE\srv.sys
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB917159\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB917159\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB917159\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB917159\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB917159\update\updspapi.dll
+ 2006-05-18 05:44:26 450,560 ------w C:\WINDOWS\$hf_mig$\KB917344\SP2QFE\jscript.dll
+ 2005-10-12 23:21:24 15,584 ------w C:\WINDOWS\$hf_mig$\KB917344\spmsg.dll
+ 2005-10-12 23:21:24 215,776 ------w C:\WINDOWS\$hf_mig$\KB917344\spuninst.exe
+ 2005-10-12 23:21:24 22,752 ------w C:\WINDOWS\$hf_mig$\KB917344\update\spcustom.dll
+ 2005-10-12 23:21:26 724,192 ------w C:\WINDOWS\$hf_mig$\KB917344\update\update.exe
+ 2005-10-12 23:21:32 390,880 ------w C:\WINDOWS\$hf_mig$\KB917344\update\updspapi.dll
+ 2006-07-05 10:57:40 1,029,120 ------w C:\WINDOWS\$hf_mig$\KB917422\SP2QFE\kernel32.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB917422\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB917422\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB917422\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB917422\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB917422\update\updspapi.dll
+ 2006-04-20 12:18:36 360,576 ------w C:\WINDOWS\$hf_mig$\KB917953\SP2QFE\tcpip.sys
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB917953\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB917953\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB917953\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB917953\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB917953\update\updspapi.dll
+ 2006-11-27 15:18:38 539,136 ------w C:\WINDOWS\$hf_mig$\KB918118\SP2QFE\msftedit.dll
+ 2006-11-27 15:18:38 433,664 ------w C:\WINDOWS\$hf_mig$\KB918118\SP2QFE\riched20.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB918118\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB918118\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB918118\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB918118\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB918118\update\updspapi.dll
+ 2006-06-01 19:39:46 163,840 ------w C:\WINDOWS\$hf_mig$\KB918439\SP2QFE\jgdw400.dll
+ 2006-06-01 19:39:46 27,648 ------w C:\WINDOWS\$hf_mig$\KB918439\SP2QFE\jgpl400.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB918439\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB918439\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB918439\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB918439\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB918439\update\updspapi.dll
+ 2006-06-23 11:25:34 1,022,976 ------w C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\browseui.dll
+ 2006-06-23 11:25:34 151,552 ------w C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\cdfview.dll
+ 2006-06-23 11:25:34 1,056,256 ------w C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\danim.dll
+ 2006-06-23 11:25:34 357,888 ------w C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\dxtmsft.dll
+ 2006-06-23 11:25:34 205,312 ------w C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\dxtrans.dll
+ 2006-06-23 11:25:34 55,808 ------w C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\extmgr.dll
+ 2006-06-23 08:48:30 18,432 ------w C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\iedw.exe
+ 2006-06-23 11:25:34 251,904 ------w C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\iepeers.dll
+ 2006-06-23 11:25:34 96,768 ------w C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\inseng.dll
+ 2006-06-23 11:25:34 15,872 ------w C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\jsproxy.dll
+ 2006-07-28 11:29:28 3,079,168 ------w C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\mshtml.dll
+ 2006-06-23 11:25:34 448,512 ------w C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\mshtmled.dll
+ 2006-06-23 11:25:34 146,432 ------w C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\msrating.dll
+ 2006-06-23 11:25:34 532,480 ------w C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\mstime.dll
+ 2006-06-23 11:25:34 39,424 ------w C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\pngfilt.dll
+ 2006-06-23 11:25:34 1,497,088 ------w C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\shdocvw.dll
+ 2006-06-23 11:25:36 474,112 ------w C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\shlwapi.dll
+ 2006-06-23 09:09:20 99,840 ------w C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\spru0410.dll
+ 2006-07-25 20:43:08 616,448 ------w C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\urlmon.dll
+ 2006-06-23 11:25:36 667,136 ------w C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\wininet.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB918899\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB918899\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB918899\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB918899\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB918899\update\updspapi.dll
+ 2006-07-13 11:43:08 202,496 ------w C:\WINDOWS\$hf_mig$\KB919007\SP2QFE\rmcast.sys
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB919007\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB919007\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB919007\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB919007\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB919007\update\updspapi.dll
+ 2006-10-12 13:55:54 42,496 ------w C:\WINDOWS\$hf_mig$\KB920213\SP2QFE\agentdp2.dll
+ 2006-10-12 13:55:54 57,344 ------w C:\WINDOWS\$hf_mig$\KB920213\SP2QFE\agentdpv.dll
+ 2006-10-12 11:54:08 256,512 ------w C:\WINDOWS\$hf_mig$\KB920213\SP2QFE\agentsvr.exe
+ 2006-10-16 11:19:12 263,168 ------w C:\WINDOWS\$hf_mig$\KB920213\SP2QFE\spru0410.dll
+ 2005-10-12 23:21:24 15,584 ------w C:\WINDOWS\$hf_mig$\KB920213\spmsg.dll
+ 2005-10-12 23:21:24 215,776 ------w C:\WINDOWS\$hf_mig$\KB920213\spuninst.exe
+ 2005-10-12 23:21:24 22,752 ------w C:\WINDOWS\$hf_mig$\KB920213\update\spcustom.dll
+ 2005-10-12 23:21:26 724,192 ------w C:\WINDOWS\$hf_mig$\KB920213\update\update.exe
+ 2005-10-12 23:21:32 390,880 ------w C:\WINDOWS\$hf_mig$\KB920213\update\updspapi.dll
+ 2006-07-27 13:40:06 679,424 ------w C:\WINDOWS\$hf_mig$\KB920214\SP2QFE\inetcomm.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB920214\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB920214\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB920214\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB920214\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB920214\update\updspapi.dll
+ 2006-07-21 08:29:04 72,704 ------w C:\WINDOWS\$hf_mig$\KB920670\SP2QFE\hlink.dll
+ 2005-10-12 23:21:24 15,584 ------w C:\WINDOWS\$hf_mig$\KB920670\spmsg.dll
+ 2005-10-12 23:21:24 215,776 ------w C:\WINDOWS\$hf_mig$\KB920670\spuninst.exe
+ 2005-10-12 23:21:24 22,752 ------w C:\WINDOWS\$hf_mig$\KB920670\update\spcustom.dll
+ 2005-10-12 23:21:26 724,192 ------w C:\WINDOWS\$hf_mig$\KB920670\update\update.exe
+ 2005-10-12 23:21:32 390,880 ------w C:\WINDOWS\$hf_mig$\KB920670\update\updspapi.dll
+ 2006-06-26 17:46:52 147,456 ------w C:\WINDOWS\$hf_mig$\KB920683\SP2QFE\dnsapi.dll
+ 2006-06-26 17:46:52 7,680 ------w C:\WINDOWS\$hf_mig$\KB920683\SP2QFE\rasadhlp.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB920683\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB920683\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB920683\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB920683\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB920683\update\updspapi.dll
+ 2006-06-22 05:22:08 69,120 ------w C:\WINDOWS\$hf_mig$\KB920685\SP2QFE\ciodm.dll
+ 2006-06-22 05:22:08 1,439,232 ------w C:\WINDOWS\$hf_mig$\KB920685\SP2QFE\query.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB920685\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB920685\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB920685\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB920685\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB920685\update\updspapi.dll
+ 2006-06-14 08:50:20 172,416 ------w C:\WINDOWS\$hf_mig$\KB920872\SP2QFE\kmixer.sys
+ 2006-06-14 08:50:20 6,272 ------w C:\WINDOWS\$hf_mig$\KB920872\SP2QFE\splitter.sys
+ 2006-06-14 09:17:04 82,944 ------w C:\WINDOWS\$hf_mig$\KB920872\SP2QFE\wdmaud.sys
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB920872\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB920872\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB920872\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB920872\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB920872\update\updspapi.dll
+ 2006-07-13 14:03:42 8,486,912 ------w C:\WINDOWS\$hf_mig$\KB921398\SP2QFE\shell32.dll
+ 2006-07-13 11:52:54 163,328 ------w C:\WINDOWS\$hf_mig$\KB921398\SP2QFE\spru0410.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB921398\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB921398\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB921398\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB921398\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB921398\update\updspapi.dll
+ 2007-05-17 11:27:20 549,888 ------w C:\WINDOWS\$hf_mig$\KB921503\SP2QFE\oleaut32.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB921503\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB921503\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB921503\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB921503\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB921503\update\updspapi.dll
+ 2006-07-14 15:42:56 336,896 ------w C:\WINDOWS\$hf_mig$\KB921883\SP2QFE\netapi32.dll
+ 2005-10-12 23:21:24 15,584 ------w C:\WINDOWS\$hf_mig$\KB921883\spmsg.dll
+ 2005-10-12 23:21:24 215,776 ------w C:\WINDOWS\$hf_mig$\KB921883\spuninst.exe
+ 2005-10-12 23:21:24 22,752 ------w C:\WINDOWS\$hf_mig$\KB921883\update\spcustom.dll
+ 2005-10-12 23:21:26 724,192 ------w C:\WINDOWS\$hf_mig$\KB921883\update\update.exe
+ 2005-10-12 23:21:32 390,880 ------w C:\WINDOWS\$hf_mig$\KB921883\update\updspapi.dll
+ 2006-08-21 12:29:04 16,896 ------w C:\WINDOWS\$hf_mig$\KB922582\SP2QFE\fltlib.dll
+ 2006-08-21 09:43:32 23,040 ------w C:\WINDOWS\$hf_mig$\KB922582\SP2QFE\fltmc.exe
+ 2006-08-21 09:43:32 128,768 ------w C:\WINDOWS\$hf_mig$\KB922582\SP2QFE\fltmgr.sys
+ 2005-10-12 23:17:58 15,584 ------w C:\WINDOWS\$hf_mig$\KB922582\spmsg.dll
+ 2005-10-12 23:18:00 215,776 ------w C:\WINDOWS\$hf_mig$\KB922582\spuninst.exe
+ 2005-10-12 23:17:58 22,752 ------w C:\WINDOWS\$hf_mig$\KB922582\update\spcustom.dll
+ 2005-10-12 23:18:02 724,192 ------w C:\WINDOWS\$hf_mig$\KB922582\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB922582\update\updspapi.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB922616\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB922616\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB922616\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB922616\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB922616\update\updspapi.dll
+ 2006-09-14 08:36:44 1,022,976 ------w C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\browseui.dll
+ 2006-09-14 08:36:44 151,552 ------w C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\cdfview.dll
+ 2006-09-14 08:36:44 1,056,256 ------w C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\danim.dll
+ 2006-09-14 08:36:44 357,888 ------w C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\dxtmsft.dll
+ 2006-09-14 08:36:44 205,312 ------w C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\dxtrans.dll
+ 2006-09-14 08:36:44 55,808 ------w C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\extmgr.dll
+ 2006-09-13 09:10:28 18,432 ------w C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\iedw.exe
+ 2006-09-14 08:36:44 251,904 ------w C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\iepeers.dll
+ 2006-09-14 08:36:44 96,768 ------w C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\inseng.dll
+ 2006-09-14 08:36:44 15,872 ------w C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\jsproxy.dll
+ 2006-09-14 08:36:48 3,079,680 ------w C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\mshtml.dll
+ 2006-09-14 08:36:46 448,512 ------w C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\mshtmled.dll
+ 2006-09-14 08:36:48 146,432 ------w C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\msrating.dll
+ 2006-09-14 08:36:48 532,480 ------w C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\mstime.dll
+ 2006-09-14 08:36:48 39,424 ------w C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\pngfilt.dll
+ 2006-09-04 06:14:16 1,497,088 ------w C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\shdocvw.dll
+ 2006-09-14 08:36:48 474,112 ------w C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\shlwapi.dll
+ 2006-09-18 12:25:56 224,768 ------w C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\spru0410.dll
+ 2006-09-14 08:36:48 616,960 ------w C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\urlmon.dll
+ 2006-09-14 08:36:50 667,136 ------w C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\wininet.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB922760\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB922760\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB922760\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB922760\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB922760\update\updspapi.dll
+ 2006-08-16 12:13:54 100,352 ------w C:\WINDOWS\$hf_mig$\KB922819\SP2QFE\6to4svc.dll
+ 2006-08-16 10:13:40 225,664 ------w C:\WINDOWS\$hf_mig$\KB922819\SP2QFE\tcpip6.sys
+ 2005-10-12 23:21:24 15,584 ------w C:\WINDOWS\$hf_mig$\KB922819\spmsg.dll
+ 2005-10-12 23:21:24 215,776 ------w C:\WINDOWS\$hf_mig$\KB922819\spuninst.exe
+ 2005-10-12 23:21:24 22,752 ------w C:\WINDOWS\$hf_mig$\KB922819\update\spcustom.dll
+ 2005-10-12 23:21:26 724,192 ------w C:\WINDOWS\$hf_mig$\KB922819\update\update.exe
+ 2005-10-12 23:21:32 390,880 ------w C:\WINDOWS\$hf_mig$\KB922819\update\updspapi.dll
+ 2006-08-14 12:00:42 332,928 ------w C:\WINDOWS\$hf_mig$\KB923414\SP2QFE\srv.sys
+ 2005-10-12 23:21:24 15,584 ------w C:\WINDOWS\$hf_mig$\KB923414\spmsg.dll
+ 2005-10-12 23:21:24 215,776 ------w C:\WINDOWS\$hf_mig$\KB923414\spuninst.exe
+ 2005-10-12 23:21:24 22,752 ------w C:\WINDOWS\$hf_mig$\KB923414\update\spcustom.dll
+ 2005-10-12 23:21:26 724,192 ------w C:\WINDOWS\$hf_mig$\KB923414\update\update.exe
+ 2005-10-12 23:21:32 390,880 ------w C:\WINDOWS\$hf_mig$\KB923414\update\updspapi.dll
+ 2006-11-08 05:14:20 86,528 ------w C:\WINDOWS\$hf_mig$\KB923694\SP2QFE\directdb.dll
+ 2006-11-08 05:14:20 679,424 ------w C:\WINDOWS\$hf_mig$\KB923694\SP2QFE\inetcomm.dll
+ 2006-11-08 05:14:20 1,314,816 ------w C:\WINDOWS\$hf_mig$\KB923694\SP2QFE\msoe.dll
+ 2006-11-08 05:14:20 510,976 ------w C:\WINDOWS\$hf_mig$\KB923694\SP2QFE\wab32.dll
+ 2006-11-08 05:14:20 85,504 ------w C:\WINDOWS\$hf_mig$\KB923694\SP2QFE\wabimp.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB923694\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB923694\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB923694\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB923694\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB923694\update\updspapi.dll
+ 2006-10-13 12:42:00 64,000 ------w C:\WINDOWS\$hf_mig$\KB923980\SP2QFE\nwapi32.dll
+ 2006-10-13 12:42:00 143,360 ------w C:\WINDOWS\$hf_mig$\KB923980\SP2QFE\nwprovau.dll
+ 2006-10-13 10:39:12 163,456 ------w C:\WINDOWS\$hf_mig$\KB923980\SP2QFE\nwrdr.sys
+ 2006-10-13 12:42:00 65,536 ------w C:\WINDOWS\$hf_mig$\KB923980\SP2QFE\nwwks.dll
+ 2005-10-12 23:21:24 15,584 ------w C:\WINDOWS\$hf_mig$\KB923980\spmsg.dll
+ 2005-10-12 23:21:24 215,776 ------w C:\WINDOWS\$hf_mig$\KB923980\spuninst.exe
+ 2005-10-12 23:21:24 22,752 ------w C:\WINDOWS\$hf_mig$\KB923980\update\spcustom.dll
+ 2005-10-12 23:21:26 724,192 ------w C:\WINDOWS\$hf_mig$\KB923980\update\update.exe
+ 2005-10-12 23:21:32 390,880 ------w C:\WINDOWS\$hf_mig$\KB923980\update\updspapi.dll
+ 2006-09-13 05:08:16 1,084,416 ------w C:\WINDOWS\$hf_mig$\KB924191\SP2QFE\msxml3.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB924191\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB924191\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB924191\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB924191\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB924191\update\updspapi.dll
+ 2006-08-17 12:43:04 732,160 ------w C:\WINDOWS\$hf_mig$\KB924270\SP2QFE\lsasrv.dll
+ 2006-08-17 12:43:04 337,408 ------w C:\WINDOWS\$hf_mig$\KB924270\SP2QFE\netapi32.dll
+ 2006-08-17 12:43:04 132,096 ------w C:\WINDOWS\$hf_mig$\KB924270\SP2QFE\wkssvc.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB924270\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB924270\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB924270\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB924270\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB924270\update\updspapi.dll
+ 2006-09-04 06:14:16 1,497,088 ------w C:\WINDOWS\$hf_mig$\KB924496\SP2QFE\shdocvw.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB924496\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB924496\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB924496\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB924496\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB924496\update\updspapi.dll
+ 2006-10-23 15:34:34 1,022,976 ------w C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\browseui.dll
+ 2006-10-23 15:34:34 151,552 ------w C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\cdfview.dll
+ 2006-10-23 15:34:34 1,056,256 ------w C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\danim.dll
+ 2006-10-23 15:34:34 357,888 ------w C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\dxtmsft.dll
+ 2006-10-23 15:34:34 205,312 ------w C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\dxtrans.dll
+ 2006-10-23 15:34:34 55,808 ------w C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\extmgr.dll
+ 2006-10-23 11:02:38 18,432 ------w C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\iedw.exe
+ 2006-10-23 15:34:34 251,904 ------w C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\iepeers.dll
+ 2006-10-23 15:34:36 96,768 ------w C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\inseng.dll
+ 2006-10-23 15:34:36 15,872 ------w C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\jsproxy.dll
+ 2006-10-23 15:34:38 3,082,240 ------w C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\mshtml.dll
+ 2006-10-23 15:34:36 448,512 ------w C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\mshtmled.dll
+ 2006-10-23 15:34:36 146,432 ------w C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\msrating.dll
+ 2006-10-23 15:34:36 532,480 ------w C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\mstime.dll
+ 2006-10-23 15:34:36 39,424 ------w C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\pngfilt.dll
+ 2006-10-23 15:34:38 1,497,600 ------w C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\shdocvw.dll
+ 2006-10-23 15:34:38 474,112 ------w C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\shlwapi.dll
+ 2006-10-23 11:43:10 263,168 ------w C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\spru0410.dll
+ 2006-10-23 15:34:38 616,960 ------w C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\urlmon.dll
+ 2006-10-23 15:34:38 667,136 ------w C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\wininet.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB925454\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB925454\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB925454\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB925454\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB925454\update\updspapi.dll
+ 2006-09-18 14:28:38 851,968 ------w C:\WINDOWS\$hf_mig$\KB925486\SP2QFE\vgx.dll
+ 2005-10-12 23:21:24 15,584 ------w C:\WINDOWS\$hf_mig$\KB925486\spmsg.dll
+ 2005-10-12 23:21:24 215,776 ------w C:\WINDOWS\$hf_mig$\KB925486\spuninst.exe
+ 2005-10-12 23:21:24 22,752 ------w C:\WINDOWS\$hf_mig$\KB925486\update\spcustom.dll
+ 2005-10-12 23:21:26 724,192 ------w C:\WINDOWS\$hf_mig$\KB925486\update\update.exe
+ 2005-10-12 23:21:32 390,880 ------w C:\WINDOWS\$hf_mig$\KB925486\update\updspapi.dll
+ 2007-03-08 15:48:42 282,112 ------w C:\WINDOWS\$hf_mig$\KB925902\SP2QFE\gdi32.dll
+ 2007-03-08 15:48:42 40,960 ------w C:\WINDOWS\$hf_mig$\KB925902\SP2QFE\mf3216.dll
+ 2007-03-08 15:48:42 579,072 ------w C:\WINDOWS\$hf_mig$\KB925902\SP2QFE\user32.dll
+ 2007-03-08 15:45:14 1,843,968 ------w C:\WINDOWS\$hf_mig$\KB925902\SP2QFE\win32k.sys
+ 2006-01-19 19:29:34 15,584 ------w C:\WINDOWS\$hf_mig$\KB925902\spmsg.dll
+ 2006-01-19 19:29:34 215,776 ------w C:\WINDOWS\$hf_mig$\KB925902\spuninst.exe
+ 2006-01-19 19:29:34 22,752 ------w C:\WINDOWS\$hf_mig$\KB925902\update\spcustom.dll
+ 2006-01-19 19:29:34 724,192 ------w C:\WINDOWS\$hf_mig$\KB925902\update\update.exe
+ 2006-01-19 19:29:34 390,880 ------w C:\WINDOWS\$hf_mig$\KB925902\update\updspapi.dll
+ 2006-10-20 01:40:14 714,752 ------w C:\WINDOWS\$hf_mig$\KB926255\SP2QFE\sxs.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB926255\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB926255\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB926255\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB926255\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB926255\update\updspapi.dll
+ 2006-10-16 17:15:42 124,928 ------w C:\WINDOWS\$hf_mig$\KB926436\SP2QFE\oledlg.dll
+ 2005-10-12 23:21:24 15,584 ------w C:\WINDOWS\$hf_mig$\KB926436\spmsg.dll
+ 2005-10-12 23:21:24 215,776 ------w C:\WINDOWS\$hf_mig$\KB926436\spuninst.exe
+ 2005-10-12 23:21:24 22,752 ------w C:\WINDOWS\$hf_mig$\KB926436\update\spcustom.dll
+ 2005-10-12 23:21:26 724,192 ------w C:\WINDOWS\$hf_mig$\KB926436\update\update.exe
+ 2005-10-12 23:21:32 390,880 ------w C:\WINDOWS\$hf_mig$\KB926436\update\updspapi.dll
+ 2006-12-26 13:20:52 536,576 ------w C:\WINDOWS\$hf_mig$\KB927779\SP2QFE\msado15.dll
+ 2006-12-26 13:20:52 180,224 ------w C:\WINDOWS\$hf_mig$\KB927779\SP2QFE\msadomd.dll
+ 2006-12-26 13:20:52 200,704 ------w C:\WINDOWS\$hf_mig$\KB927779\SP2QFE\msadox.dll
+ 2006-12-26 13:20:52 102,400 ------w C:\WINDOWS\$hf_mig$\KB927779\SP2QFE\msjro.dll
+ 2006-01-19 19:29:34 15,584 ------w C:\WINDOWS\$hf_mig$\KB927779\spmsg.dll
+ 2006-01-19 19:29:34 215,776 ------w C:\WINDOWS\$hf_mig$\KB927779\spuninst.exe
+ 2006-01-19 19:29:34 22,752 ------w C:\WINDOWS\$hf_mig$\KB927779\update\spcustom.dll
+ 2006-01-19 19:29:34 724,192 ------w C:\WINDOWS\$hf_mig$\KB927779\update\update.exe
+ 2006-01-19 19:29:34 390,880 ------w C:\WINDOWS\$hf_mig$\KB927779\update\updspapi.dll
+ 2006-12-19 18:48:52 334,336 ------w C:\WINDOWS\$hf_mig$\KB927802\SP2QFE\wiaservc.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB927802\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB927802\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB927802\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB927802\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB927802\update\updspapi.dll
+ 2007-04-18 16:15:38 2,854,400 ------w C:\WINDOWS\$hf_mig$\KB927891\SP2QFE\msi31.dll
+ 2006-12-14 08:54:06 15,584 ------w C:\WINDOWS\$hf_mig$\KB927891\spmsg.dll
+ 2006-12-14 08:54:06 215,776 ------w C:\WINDOWS\$hf_mig$\KB927891\spuninst.exe
+ 2006-12-14 08:54:06 22,752 ------w C:\WINDOWS\$hf_mig$\KB927891\update\spcustom.dll
+ 2006-12-14 08:54:06 724,192 ------w C:\WINDOWS\$hf_mig$\KB927891\update\update.exe
+ 2006-12-14 08:54:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB927891\update\updspapi.dll
+ 2006-12-19 21:48:22 8,487,936 ------w C:\WINDOWS\$hf_mig$\KB928255\SP2QFE\shell32.dll
+ 2006-12-19 21:48:22 135,168 ------w C:\WINDOWS\$hf_mig$\KB928255\SP2QFE\shsvcs.dll
+ 2006-12-19 16:30:00 263,168 ------w C:\WINDOWS\$hf_mig$\KB928255\SP2QFE\spru0410.dll
+ 2006-01-19 19:29:34 15,584 ------w C:\WINDOWS\$hf_mig$\KB928255\spmsg.dll
+ 2006-01-19 19:29:34 215,776 ------w C:\WINDOWS\$hf_mig$\KB928255\spuninst.exe
+ 2006-01-19 19:29:34 22,752 ------w C:\WINDOWS\$hf_mig$\KB928255\update\spcustom.dll
+ 2006-01-19 19:29:34 724,192 ------w C:\WINDOWS\$hf_mig$\KB928255\update\update.exe
+ 2006-01-19 19:29:34 390,880 ------w C:\WINDOWS\$hf_mig$\KB928255\update\updspapi.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB928843\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB928843\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB928843\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB928843\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB928843\update\updspapi.dll
+ 2007-05-16 15:26:44 86,528 ------w C:\WINDOWS\$hf_mig$\KB929123\SP2QFE\directdb.dll
+ 2007-05-16 15:26:48 683,520 ------w C:\WINDOWS\$hf_mig$\KB929123\SP2QFE\inetcomm.dll
+ 2007-05-16 15:26:54 1,314,816 ------w C:\WINDOWS\$hf_mig$\KB929123\SP2QFE\msoe.dll
+ 2007-05-16 15:26:58 510,976 ------w C:\WINDOWS\$hf_mig$\KB929123\SP2QFE\wab32.dll
+ 2007-05-16 15:27:00 85,504 ------w C:\WINDOWS\$hf_mig$\KB929123\SP2QFE\wabimp.dll
+ 2006-01-19 19:29:34 15,584 ------w C:\WINDOWS\$hf_mig$\KB929123\spmsg.dll
+ 2006-01-19 19:29:34 215,776 ------w C:\WINDOWS\$hf_mig$\KB929123\spuninst.exe
+ 2006-01-19 19:29:34 22,752 ------w C:\WINDOWS\$hf_mig$\KB929123\update\spcustom.dll
+ 2006-01-19 19:29:34 724,192 ------w C:\WINDOWS\$hf_mig$\KB929123\update\update.exe
+ 2006-01-19 19:29:34 390,880 ------w C:\WINDOWS\$hf_mig$\KB929123\update\updspapi.dll
+ 2006-12-19 18:44:40 2,141,184 ------w C:\WINDOWS\$hf_mig$\KB929338\SP2QFE\ntkrnlmp.exe
+ 2006-12-19 18:44:52 2,063,104 ------w C:\WINDOWS\$hf_mig$\KB929338\SP2QFE\ntkrnlpa.exe
+ 2006-12-19 18:44:38 2,020,864 ------w C:\WINDOWS\$hf_mig$\KB929338\SP2QFE\ntkrpamp.exe
+ 2006-12-19 18:44:48 2,185,728 ------w C:\WINDOWS\$hf_mig$\KB929338\SP2QFE\ntoskrnl.exe
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB929338\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB929338\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB929338\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB929338\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB929338\update\updspapi.dll
+ 2006-12-19 18:40:56 852,480 ------w C:\WINDOWS\$hf_mig$\KB929969\SP2QFE\vgx.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB929969\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB929969\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB929969\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB929969\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB929969\update\updspapi.dll
+ 2007-03-17 13:46:02 293,376 ------w C:\WINDOWS\$hf_mig$\KB930178\SP2QFE\winsrv.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB930178\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB930178\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB930178\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB930178\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB930178\update\updspapi.dll
+ 2007-02-09 11:23:36 574,976 ------w C:\WINDOWS\$hf_mig$\KB930916\SP2QFE\ntfs.sys
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB930916\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB930916\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB930916\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB930916\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB930916\update\updspapi.dll
+ 2007-02-05 20:20:16 185,344 ------w C:\WINDOWS\$hf_mig$\KB931261\SP2QFE\upnphost.dll
+ 2006-01-19 19:29:34 15,584 ------w C:\WINDOWS\$hf_mig$\KB931261\spmsg.dll
+ 2006-01-19 19:29:34 215,776 ------w C:\WINDOWS\$hf_mig$\KB931261\spuninst.exe
+ 2006-01-19 19:29:34 22,752 ------w C:\WINDOWS\$hf_mig$\KB931261\update\spcustom.dll
+ 2006-01-19 19:29:34 724,192 ------w C:\WINDOWS\$hf_mig$\KB931261\update\update.exe
+ 2006-01-19 19:29:34 390,880 ------w C:\WINDOWS\$hf_mig$\KB931261\update\updspapi.dll
+ 2007-02-28 16:06:10 2,141,184 ------w C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntkrnlmp.exe
+ 2007-02-28 16:06:18 2,063,104 ------w C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntkrnlpa.exe
+ 2007-02-28 16:06:10 2,020,864 ------w C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntkrpamp.exe
+ 2007-02-28 16:06:16 2,185,856 ------w C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB931784\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB931784\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB931784\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB931784\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB931784\update\updspapi.dll
+ 2007-01-29 09:25:04 60,416 ------w C:\WINDOWS\$hf_mig$\KB931836\SP2QFE\tzchange.exe
+ 2006-01-19 19:29:34 15,584 ------w C:\WINDOWS\$hf_mig$\KB931836\spmsg.dll
+ 2006-01-19 19:29:34 215,776 ------w C:\WINDOWS\$hf_mig$\KB931836\spuninst.exe
+ 2006-01-19 19:29:34 22,752 ------w C:\WINDOWS\$hf_mig$\KB931836\update\spcustom.dll
+ 2006-01-19 19:29:34 724,192 ------w C:\WINDOWS\$hf_mig$\KB931836\update\update.exe
+ 2006-01-19 19:29:34 390,880 ------w C:\WINDOWS\$hf_mig$\KB931836\update\updspapi.dll
+ 2007-03-09 13:59:12 57,344 ------w C:\WINDOWS\$hf_mig$\KB932168\SP2QFE\agentdpv.dll
+ 2007-03-09 11:51:24 263,168 ------w C:\WINDOWS\$hf_mig$\KB932168\SP2QFE\spru0410.dll
+ 2006-01-19 19:29:34 15,584 ------w C:\WINDOWS\$hf_mig$\KB932168\spmsg.dll
+ 2006-01-19 19:29:34 215,776 ------w C:\WINDOWS\$hf_mig$\KB932168\spuninst.exe
+ 2006-01-19 19:29:34 22,752 ------w C:\WINDOWS\$hf_mig$\KB932168\update\spcustom.dll
+ 2006-01-19 19:29:34 724,192 ------w C:\WINDOWS\$hf_mig$\KB932168\update\update.exe
+ 2006-01-19 19:29:34 390,880 ------w C:\WINDOWS\$hf_mig$\KB932168\update\updspapi.dll
+ 2008-02-26 12:48:50 297,984 ------w C:\WINDOWS\$hf_mig$\KB932823-v3\SP2QFE\msctf.dll
+ 2007-03-06 02:48:10 15,584 ------w C:\WINDOWS\$hf_mig$\KB932823-v3\spmsg.dll
+ 2007-03-06 02:48:16 215,776 ------w C:\WINDOWS\$hf_mig$\KB932823-v3\spuninst.exe
+ 2007-03-06 02:48:08 22,752 ------w C:\WINDOWS\$hf_mig$\KB932823-v3\update\spcustom.dll
+ 2007-03-06 02:48:34 724,192 ------w C:\WINDOWS\$hf_mig$\KB932823-v3\update\update.exe
+ 2007-03-06 02:49:24 390,880 ------w C:\WINDOWS\$hf_mig$\KB932823-v3\update\updspapi.dll
+ 2007-07-18 10:33:06 60,416 ------w C:\WINDOWS\$hf_mig$\KB933360\SP2QFE\tzchange.exe
+ 2007-03-06 01:48:10 15,584 ------w C:\WINDOWS\$hf_mig$\KB933360\spmsg.dll
+ 2007-03-06 01:48:16 215,776 ------w C:\WINDOWS\$hf_mig$\KB933360\spuninst.exe
+ 2007-03-06 01:48:08 22,752 ------w C:\WINDOWS\$hf_mig$\KB933360\update\spcustom.dll
+ 2007-03-06 01:48:34 724,192 ------w C:\WINDOWS\$hf_mig$\KB933360\update\update.exe
+ 2007-03-06 01:49:24 390,880 ------w C:\WINDOWS\$hf_mig$\KB933360\update\updspapi.dll
+ 2007-04-25 08:26:00 124,928 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\advpack.dll
+ 2007-04-25 08:26:00 132,608 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\extmgr.dll
+ 2007-04-24 14:20:38 56,832 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\ie4uinit.exe
+ 2007-04-25 08:26:00 153,088 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\ieakeng.dll
+ 2007-04-25 08:26:00 230,400 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\ieaksie.dll
+ 2007-04-24 08:45:52 161,792 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\ieakui.dll
+ 2007-04-17 09:32:38 2,455,488 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\ieapfltr.dat
+ 2007-04-25 08:26:02 383,488 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\ieapfltr.dll
+ 2007-04-25 08:26:04 384,512 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\iedkcs32.dll
+ 2007-04-25 08:26:24 6,059,008 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\ieframe.dll
+ 2007-04-25 08:26:24 44,544 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\iernonce.dll
+ 2007-04-25 08:26:28 267,776 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\iertutil.dll
+ 2007-04-24 14:20:38 13,824 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\ieudinit.exe
+ 2007-04-24 14:20:42 625,152 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\iexplore.exe
+ 2007-04-25 08:26:40 27,648 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\jsproxy.dll
+ 2007-04-25 08:26:42 459,264 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\msfeeds.dll
+ 2007-04-25 08:26:42 52,224 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\msfeedsbs.dll
+ 2007-05-08 09:02:46 3,584,000 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\mshtml.dll
+ 2007-04-25 08:26:58 477,696 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\mshtmled.dll
+ 2007-04-25 08:27:00 193,024 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\msrating.dll
+ 2007-04-25 08:27:04 670,720 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\mstime.dll
+ 2007-04-25 08:27:06 102,400 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\occache.dll
+ 2007-04-25 08:27:06 105,984 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\url.dll
+ 2007-04-25 08:27:12 1,153,536 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\urlmon.dll
+ 2007-04-25 08:27:14 232,960 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\webcheck.dll
+ 2007-04-25 08:27:18 823,808 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\wininet.dll
+ 2006-01-19 19:29:34 15,584 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\spmsg.dll
+ 2006-01-19 19:29:34 215,776 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\spuninst.exe
+ 2006-01-19 19:29:34 22,752 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\update\spcustom.dll
+ 2006-01-19 19:29:34 724,192 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\update\update.exe
+ 2006-01-19 19:29:34 390,880 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\update\updspapi.dll
+ 2007-07-09 13:19:18 582,656 ------w C:\WINDOWS\$hf_mig$\KB933729\SP2QFE\rpcrt4.dll
+ 2007-06-18 23:24:36 366,592 ------w C:\WINDOWS\$hf_mig$\KB933729\SP2QFE\spru0410.dll
+ 2005-10-12 23:17:58 15,584 ------w C:\WINDOWS\$hf_mig$\KB933729\spmsg.dll
+ 2005-10-12 23:18:00 215,776 ------w C:\WINDOWS\$hf_mig$\KB933729\spuninst.exe
+ 2005-10-12 23:17:58 22,752 ------w C:\WINDOWS\$hf_mig$\KB933729\update\spcustom.dll
+ 2005-10-12 23:18:02 724,192 ------w C:

mito74 · Mortale devoto Registrato: 23/10/08 09:02 Messaggi: 14

log per kaspersky

[URL="http://freefilehosting.net/download/41c94"]kaspersky log_1225275234801_2381.txt[/URL]

mito74 · Mortale devoto Registrato: 23/10/08 09:02 Messaggi: 14

log hijackthis

[URL="http://freefilehosting.net/download/41c97"]hijackthis_1225275299851_2382.log[/URL]

log combo fix

[URL="http://freefilehosting.net/download/41c98"]ComboFix_1225275350358_2383.txt[/URL]

attendo notizie
grazie ancora
per l'aiuto

mito74 · Mortale devoto Registrato: 23/10/08 09:02 Messaggi: 14

log combofix

[URL="http://freefilehosting.net/download/41c98"]ComboFix_1225275350358_2383.txt[/URL]

mito74 · Mortale devoto Registrato: 23/10/08 09:02 Messaggi: 14

qualcuno mi aiuta !!!!!!!! Sad

mito74 · Mortale devoto Registrato: 23/10/08 09:02 Messaggi: 14

kaspersky non riesce a eliminare il seguente file:bitkv0.dll
mi dice che lo fa al riavvio del pc ma poi lo trova sempre alla successiva scansione

help !!!!