Olimpo Informatico

supereros18 · Mortale devoto Registrato: 20/03/08 12:49 Messaggi: 5

Ciao ragazzi è la prima volta che vi scrivo.Ho letto la guida per essere più preciso possibile,spero di non sbagliare.Allora avevo avg 7.5 che non mi trovava alcun maleware.Ho installato avg 8,ha trovato dei tracking coookie e un'altra cosa in win32,li ha corretti o eliminati.Dal quel momento in poi il computer era lento e le pagine internet andavano un pò si un pò no.L'ho disinstallato e ora va tutto normalmente,ma sicuramente c'è qualcosa sotto..vero?la mia situazione attuale è questa,ditemi per favore se riscontrate qualcosa di strano.GRAZIE MILLE!!

SISTEMA OPERATIVO:WINDOWS XP SP2
ANTIVIRUS:KASPERSKY v 7.0.1.321

Logfile of HijackThis v1.99.1
Scan saved at 11.43.27, on 20/03/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Programmi\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\stsystra.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Programmi\Microsoft LifeChat\LifeChat.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Programmi\File comuni\InstallShield\UpdateService\issch.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\Programmi\ScanSoft\OmniPage15.0\Opware15.exe
C:\Programmi\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
C:\Programmi\LClock\LClock.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmi\Microsoft ActiveSync\wcescomm.exe
C:\PROGRA~1\MI3AA1~1\rapimgr.exe
C:\Programmi\Stardock\ObjectDock\ObjectDock.exe
C:\Programmi\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
C:\Programmi\Bonjour\mDNSResponder.exe
C:\Programmi\Power Translator 11\LogoMedia TranslateDotNet Server.exe
C:\Programmi\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\system32\svchost.exe
C:\Programmi\Mozilla Firefox\firefox.exe
C:\Programmi\Internet Download Manager\IEMonitor.exe
C:\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O1 - Hosts: 84.20.192.244 api.betfair.com
O1 - Hosts: 210.4.86.33 au.site.sports.betfair.com
O1 - Hosts: 212.62.21.228 cache.betfair.com
O1 - Hosts: 212.62.21.231 content.betfair.com
O1 - Hosts: 212.62.21.228 forum.betfair.com
O1 - Hosts: 212.62.21.228 games.betfair.com
O1 - Hosts: 217.207.11.223 help.betfair.com
O1 - Hosts: 212.62.21.232 refresh.betfair.com
O1 - Hosts: 212.62.21.244 services.betfair.com
O1 - Hosts: 212.62.21.229 site.forum.betfair.com
O1 - Hosts: 84.20.192.132 site.sports.betfair.com
O1 - Hosts: 212.62.21.228 sports.betfair.com
O1 - Hosts: 212.62.21.250 uk.site.sports.betfair.com
O1 - Hosts: 212.62.21.228 www.betfair.com
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Programmi\Internet Download Manager\IDMIECC.dll
O2 - BHO: Supporto di collegamento per Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Programmi\AVG\AVG8\avgssie.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programmi\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Guida per l'accesso a Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programmi\File comuni\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Babylon - {965B54B0-71E0-4611-8DE7-F73FA0B20E26} - C:\Programmi\Babylon\Babylon Toolbar\BabylonIEToolBar.dll
O3 - Toolbar: LEC - {1DBAB667-A486-421e-AFE4-CF07DD0088E5} - C:\Programmi\Power Translator 11\Applications\LEC IE Translation Extension.dll
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Programmi\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programmi\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [Media Codec Update Service] C:\Programmi\Essentials Codec Pack\update.exe -silent
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [LifeChat] "C:\Programmi\Microsoft LifeChat\LifeChat.exe"
O4 - HKLM\..\Run: [NBKeyScan] "C:\Programmi\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Programmi\File comuni\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FILECO~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Programmi\File comuni\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\WINDOWS\system32\WLTRAY.exe
O4 - HKLM\..\Run: [Opware15] "C:\Programmi\ScanSoft\OmniPage15.0\Opware15.exe"
O4 - HKLM\..\Run: [OpScheduler] "C:\Programmi\ScanSoft\OmniPage15.0\OpScheduler.exe"
O4 - HKLM\..\Run: [PDF3 Registry Controller] "C:\Programmi\ScanSoft\OmniPage15.0\PDFConverter3\\RegistryController.exe"
O4 - HKLM\..\Run: [SetDefPrt] C:\Programmi\Brother\Brmfl05a\BrStDvPt.exe
O4 - HKLM\..\Run: [ControlCenter2.0] C:\Programmi\Brother\ControlCenter2\brctrcen.exe /autorun
O4 - HKLM\..\Run: [Babylon Client] C:\Programmi\Babylon\Babylon-Pro\Babylon.exe -AutoStart
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Programmi\File comuni\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [AVP] "C:\Programmi\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe"
O4 - HKCU\..\Run: [LClock] C:\Programmi\LClock\LClock.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Programmi\File comuni\Nero\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Programmi\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [WallpaperChanger] C:\Programmi\Wallpaper Master\Wallpaper.exe
O4 - Startup: Stardock ObjectDock.lnk = C:\Programmi\Stardock\ObjectDock\ObjectDock.exe
O8 - Extra context menu item: Download All Links with IDM - C:\Programmi\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download FLV video content with IDM - C:\Programmi\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Download with IDM - C:\Programmi\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Open with Scansoft PDF Converter 3.0 - res://C:\Programmi\ScanSoft\OmniPage15.0\PDFConverter3\IEShellExt.dll /100
O8 - Extra context menu item: Translate with &Babylon - res://C:\Programmi\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Translate.htm
O9 - Extra button: Web Anti-Virus statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Programmi\Kaspersky Lab\Kaspersky Anti-Virus 7.0\SCIEPlgn.dll
O9 - Extra button: Inserisci blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programmi\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: Inserisci &blog in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programmi\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra 'Tools' menuitem: Crea preferiti portatile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Poker\Titan Poker\casino.exe
O9 - Extra 'Tools' menuitem: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Poker\Titan Poker\casino.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: Barra di ricerca di Encarta - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Programmi\File comuni\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\programmi\bonjour\mdnsnsp.dll
O11 - Options group: [INTERNATIONAL] International*
O11 - Options group: [TABS] Tabbed Browsing
O16 - DPF: {D8089245-3211-40F6-819B-9E5E92CD61A2} (FlashXControl Object) - https://fortunelounge.microgaming.com/generic/FlashAX.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Programmi\File comuni\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FILECO~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\FILECO~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\wpdshserviceobj.dll
O23 - Service: Kaspersky Anti-Virus 7.0 (AVP) - Unknown owner - C:\Programmi\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe" -r (file missing)
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Programmi\Bonjour\mDNSResponder.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Programmi\File comuni\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programmi\File comuni\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LEC TranslateDotNet Server - Language Engineering Corporation, LLC - C:\Programmi\Power Translator 11\LogoMedia TranslateDotNet Server.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Programmi\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Programmi\File comuni\Nero\Lib\NMIndexingService.exe
O23 - Service: ServiceLayer - Nokia. - C:\Programmi\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE

bdoriano · Inviato: 20 Mar 2008 14:07 Oggetto:

Ciao supereros18, Ciao

Disabilita il ripristino di sistema.
Pulisci i files temporanei con ATF-Cleaner e/o CCleaner
Scarica Norman Malware Cleaner e NOD32 Scanner.
Avvia il pc in modalità provvisoria.
Avvia NOD32 e fagli fare la scansione completa.
Avvia Norman Malware Cleaner e fagli fare la scansione completa.
Viene generato un log sul desktop chiamandolo NFix_2008-03-gg_hh-mm-ss.log, alla fine della scansione caricalo su FreeFileHosting come indicato qui e posta il link che ti viene assegnato.
Segui le istruzioni di questo topic per postare il log di combofix.
Segui le istruzioni di questo topic per postare il log di hijackthis.

PS: se vuoi, puoi presentarti qui

supereros18 · Mortale devoto Registrato: 20/03/08 12:49 Messaggi: 5

Ciao,grazie per il tuo pronto aiuto,ho seguito le tue istruzioni e va molto meglio comunque i log sono questi.Secondo te ora va tutto bene?GRAZIE 1000

http://www.freefilehosting.net/download/3e006
____________________________________________

ComboFix 08-03-20.5 - Eros 2008-03-22 0.30.14.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1040.18.1453 [GMT 1:00]
Eseguito da: C:\Documents and Settings\Grishnackh\Desktop\ComboFix.exe

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Autorun.inf
C:\Documents and Settings\All Users\Menu Avvio\UUSEE~1.LNK
C:\Programmi\uusee
C:\Programmi\uusee\AD\1\000\index_new.html
C:\Programmi\uusee\AD\1\000\uue_new.jpg
C:\Programmi\uusee\AD\1\001\index_new.html
C:\Programmi\uusee\AD\1\001\uue_new.jpg
C:\Programmi\uusee\AD\1\chunwan\cw.html
C:\Programmi\uusee\AD\1\cy\cy.html
C:\Programmi\uusee\AD\1\dm\dm.html
C:\Programmi\uusee\AD\1\dsj\dsj.html
C:\Programmi\uusee\AD\1\dst\dst.html
C:\Programmi\uusee\AD\1\dy\dy.html
C:\Programmi\uusee\AD\1\jk\jk.html
C:\Programmi\uusee\AD\1\ty\ty.html
C:\Programmi\uusee\AD\1\uu\uu.html
C:\Programmi\uusee\AD\1\yl\yl.html
C:\Programmi\uusee\AD\1\yx\yx.html
C:\Programmi\uusee\AD\1\zx\zx.html
C:\Programmi\uusee\AD\2\100\index.html
C:\Programmi\uusee\AD\2\100\index.php
C:\Programmi\uusee\AD\2\200\index.html
C:\Programmi\uusee\AD\2\300\index.html
C:\Programmi\uusee\AD\2\300\index.php
C:\Programmi\uusee\AD\2\400\index.html
C:\Programmi\uusee\AD\UUAD_Banner_1.html
C:\Programmi\uusee\AD\UUAD_Banner_3.html
C:\Programmi\uusee\AD\UUAD_Buffering.html
C:\Programmi\uusee\AD\UUAD_Buffering.jpg
C:\Programmi\uusee\AD\UUAD_TextLink_0.xml
C:\Programmi\uusee\ARMP.ocx
C:\Programmi\uusee\ARMPD.dll
C:\Programmi\uusee\channelid_chatid.txt
C:\Programmi\uusee\check_cmd.exe
C:\Programmi\uusee\CoCode.dll
C:\Programmi\uusee\flvplayer.swf
C:\Programmi\uusee\GoogleToolbarInstaller_zh-CN_signed.msi
C:\Programmi\uusee\in_net.dll
C:\Programmi\uusee\in_psp.dll
C:\Programmi\uusee\msh.dat
C:\Programmi\uusee\MultiVMR9.dll
C:\Programmi\uusee\out_mmshttp.dll
C:\Programmi\uusee\rmsp011.ax
C:\Programmi\uusee\seeplayer.ocx
C:\Programmi\uusee\skins\UUPlayer\About.bmp
C:\Programmi\uusee\skins\UUPlayer\Control_Button_Compact_1.bmp
C:\Programmi\uusee\skins\UUPlayer\Control_Button_Compact_2.bmp
C:\Programmi\uusee\skins\UUPlayer\Control_Button_Compact_3.bmp
C:\Programmi\uusee\skins\UUPlayer\Control_Button_FullScreen_1.bmp
C:\Programmi\uusee\skins\UUPlayer\Control_Button_FullScreen_2.bmp
C:\Programmi\uusee\skins\UUPlayer\Control_Button_FullScreen_3.bmp
C:\Programmi\uusee\skins\UUPlayer\Control_Button_pause_1.bmp
C:\Programmi\uusee\skins\UUPlayer\Control_Button_pause_2.bmp
C:\Programmi\uusee\skins\UUPlayer\Control_Button_pause_3.bmp
C:\Programmi\uusee\skins\UUPlayer\Control_Button_pause_4.bmp
C:\Programmi\uusee\skins\UUPlayer\Control_Button_Recording_1.bmp
C:\Programmi\uusee\skins\UUPlayer\Control_Button_Recording_2.bmp
C:\Programmi\uusee\skins\UUPlayer\Control_Button_Recording_3.bmp
C:\Programmi\uusee\skins\UUPlayer\Ctrl_CheckBox_1.bmp
C:\Programmi\uusee\skins\UUPlayer\Ctrl_CheckBox_2.bmp
C:\Programmi\uusee\skins\UUPlayer\Ctrl_CheckBox_3.bmp
C:\Programmi\uusee\skins\UUPlayer\Ctrl_CheckBox_4.bmp
C:\Programmi\uusee\skins\UUPlayer\Ctrl_CheckBox_C1.bmp
C:\Programmi\uusee\skins\UUPlayer\Ctrl_CheckBox_C2.bmp
C:\Programmi\uusee\skins\UUPlayer\Ctrl_CheckBox_C3.bmp
C:\Programmi\uusee\skins\UUPlayer\Ctrl_CheckBox_C4.bmp
C:\Programmi\uusee\skins\UUPlayer\Ctrl_ComboBox_1.bmp
C:\Programmi\uusee\skins\UUPlayer\Ctrl_ComboBox_2.bmp
C:\Programmi\uusee\skins\UUPlayer\Ctrl_ComboBox_3.bmp
C:\Programmi\uusee\skins\UUPlayer\Ctrl_ComboBox_4.bmp
C:\Programmi\uusee\skins\UUPlayer\Ctrl_Edit_1.bmp
C:\Programmi\uusee\skins\UUPlayer\Ctrl_Edit_4.bmp
C:\Programmi\uusee\skins\UUPlayer\Ctrl_PushButton_1.bmp
C:\Programmi\uusee\skins\UUPlayer\Ctrl_PushButton_2.bmp
C:\Programmi\uusee\skins\UUPlayer\Ctrl_PushButton_3.bmp
C:\Programmi\uusee\skins\UUPlayer\Ctrl_PushButton_4.bmp
C:\Programmi\uusee\skins\UUPlayer\Ctrl_RadioButton_1.bmp
C:\Programmi\uusee\skins\UUPlayer\Ctrl_RadioButton_2.bmp
C:\Programmi\uusee\skins\UUPlayer\Ctrl_RadioButton_3.bmp
C:\Programmi\uusee\skins\UUPlayer\Ctrl_RadioButton_4.bmp
C:\Programmi\uusee\skins\UUPlayer\Ctrl_RadioButton_C1.bmp
C:\Programmi\uusee\skins\UUPlayer\Ctrl_RadioButton_C2.bmp
C:\Programmi\uusee\skins\UUPlayer\Ctrl_RadioButton_C3.bmp
C:\Programmi\uusee\skins\UUPlayer\Ctrl_RadioButton_C4.bmp
C:\Programmi\uusee\skins\UUPlayer\Dlg_Back.bmp
C:\Programmi\uusee\skins\UUPlayer\Dlg_Detect.bmp
C:\Programmi\uusee\skins\UUPlayer\Dlg_Frame_1.bmp
C:\Programmi\uusee\skins\UUPlayer\Dlg_Frame_2.bmp
C:\Programmi\uusee\skins\UUPlayer\Dlg_Frame_3.bmp
C:\Programmi\uusee\skins\UUPlayer\Dlg_Record_Task_1.bmp
C:\Programmi\uusee\skins\UUPlayer\Icon_Information.bmp
C:\Programmi\uusee\skins\UUPlayer\Icon_Question.bmp
C:\Programmi\uusee\skins\UUPlayer\Icon_Stop.bmp
C:\Programmi\uusee\skins\UUPlayer\ListHeader_1.bmp
C:\Programmi\uusee\skins\UUPlayer\ListHeader_2.bmp
C:\Programmi\uusee\skins\UUPlayer\ListHeader_3.bmp
C:\Programmi\uusee\skins\UUPlayer\ListHeader_ArrowD.bmp
C:\Programmi\uusee\skins\UUPlayer\ListHeader_ArrowU.bmp
C:\Programmi\uusee\skins\UUPlayer\ListHeader_SP.bmp
C:\Programmi\uusee\skins\UUPlayer\Play_Window_Rec_icon.bmp
C:\Programmi\uusee\skins\UUPlayer\Progressbar_Block_1.bmp
C:\Programmi\uusee\skins\UUPlayer\Progressbar_Block_2.bmp
C:\Programmi\uusee\skins\UUPlayer\Progressbar_Block_3.bmp
C:\Programmi\uusee\skins\UUPlayer\Progressbar_Block_4.bmp
C:\Programmi\uusee\skins\UUPlayer\Progressbar_BM_0.bmp
C:\Programmi\uusee\skins\UUPlayer\Progressbar_BM_1.bmp
C:\Programmi\uusee\skins\UUPlayer\Progressbar_BM_2.bmp
C:\Programmi\uusee\skins\UUPlayer\Progressbar_BM_3.bmp
C:\Programmi\uusee\skins\UUPlayer\Progressbar_BM_4.bmp
C:\Programmi\uusee\skins\UUPlayer\Progressbar_BM_5.bmp
C:\Programmi\uusee\skins\UUPlayer\Progressbar_BM_6.bmp
C:\Programmi\uusee\skins\UUPlayer\Progressbar_BM_7.bmp
C:\Programmi\uusee\skins\UUPlayer\Resource.h
C:\Programmi\uusee\skins\UUPlayer\Setting_Group_1_1.bmp
C:\Programmi\uusee\skins\UUPlayer\Setting_Group_1_2.bmp
C:\Programmi\uusee\skins\UUPlayer\Setting_Group_1_3.bmp
C:\Programmi\uusee\skins\UUPlayer\Setting_Group_2_1.bmp
C:\Programmi\uusee\skins\UUPlayer\Setting_Group_2_2.bmp
C:\Programmi\uusee\skins\UUPlayer\Setting_Group_2_3.bmp
C:\Programmi\uusee\skins\UUPlayer\Setting_Group_3_1.bmp
C:\Programmi\uusee\skins\UUPlayer\Setting_Group_3_2.bmp
C:\Programmi\uusee\skins\UUPlayer\Setting_Group_3_3.bmp
C:\Programmi\uusee\skins\UUPlayer\Setting_Group_4_1.bmp
C:\Programmi\uusee\skins\UUPlayer\Setting_Group_4_2.bmp
C:\Programmi\uusee\skins\UUPlayer\Setting_Group_4_3.bmp
C:\Programmi\uusee\skins\UUPlayer\Sidebar_Button_1_1.bmp
C:\Programmi\uusee\skins\UUPlayer\Sidebar_Button_1_2.bmp
C:\Programmi\uusee\skins\UUPlayer\Sidebar_Button_1_3.bmp
C:\Programmi\uusee\skins\UUPlayer\Sidebar_Group_1.bmp
C:\Programmi\uusee\skins\UUPlayer\Sidebar_Group_2.bmp
C:\Programmi\uusee\skins\UUPlayer\Sidebar_Group_3.bmp
C:\Programmi\uusee\skins\UUPlayer\Sidebar_Group_x1.bmp
C:\Programmi\uusee\skins\UUPlayer\Sidebar_Group_x2.bmp
C:\Programmi\uusee\skins\UUPlayer\Sidebar_Group_x3.bmp
C:\Programmi\uusee\skins\UUPlayer\Titlebar_button_Res_1.bmp
C:\Programmi\uusee\skins\UUPlayer\Titlebar_button_Res_2.bmp
C:\Programmi\uusee\skins\UUPlayer\Titlebar_button_Res_3.bmp
C:\Programmi\uusee\skins\UUPlayer\Toolbar_Button_Compact_1.bmp
C:\Programmi\uusee\skins\UUPlayer\Toolbar_Button_Compact_2.bmp
C:\Programmi\uusee\skins\UUPlayer\Toolbar_Button_Compact_3.bmp
C:\Programmi\uusee\skins\UUPlayer\Toolbar_Button_FullScreen_1.bmp
C:\Programmi\uusee\skins\UUPlayer\Toolbar_Button_FullScreen_2.bmp
C:\Programmi\uusee\skins\UUPlayer\Toolbar_Button_FullScreen_3.bmp
C:\Programmi\uusee\skins\UUPlayer\Toolbar_Button_TopMost_1.bmp
C:\Programmi\uusee\skins\UUPlayer\Toolbar_Button_TopMost_2.bmp
C:\Programmi\uusee\skins\UUPlayer\Toolbar_Button_TopMost_3.bmp
C:\Programmi\uusee\skins\UUPlayer\TopTab_Browse.bmp
C:\Programmi\uusee\skins\UUPlayer\TopTab_Browse1.bmp
C:\Programmi\uusee\skins\UUPlayer\TopTab_Play.bmp
C:\Programmi\uusee\skins\UUPlayer\TopTab_Play1.bmp
C:\Programmi\uusee\skins\UUPlayer\TopTab_Record.bmp
C:\Programmi\uusee\skins\UUPlayer\TopTab_Record1.bmp
C:\Programmi\uusee\skins\UUPlayer\Tree_Arrow.bmp
C:\Programmi\uusee\skins\UUPlayer\Tree_Collapse.bmp
C:\Programmi\uusee\skins\UUPlayer\Tree_Expand.bmp
C:\Programmi\uusee\skins\UUPlayer\Tree_Header.bmp
C:\Programmi\uusee\skins\UUPlayer\Tree_ScrollBar_D.bmp
C:\Programmi\uusee\skins\UUPlayer\Tree_ScrollBar_H.bmp
C:\Programmi\uusee\skins\UUPlayer\Tree_ScrollBar_N.bmp
C:\Programmi\uusee\skins\UUPlayer\Tree_ScrollBar_S.bmp
C:\Programmi\uusee\skins\UUPlayer\Tree_ScrollBarThumb_D.bmp
C:\Programmi\uusee\skins\UUPlayer\Tree_ScrollBarThumb_H.bmp
C:\Programmi\uusee\skins\UUPlayer\Tree_ScrollBarThumb_N.bmp
C:\Programmi\uusee\skins\UUPlayer\Tree_ScrollBarThumb_S.bmp
C:\Programmi\uusee\skins\UUPlayer\Tree_SortIconDown.bmp
C:\Programmi\uusee\skins\UUPlayer\Tree_SortIconUp.bmp
C:\Programmi\uusee\skins\UUPlayer\UUSEE.ui
C:\Programmi\uusee\skins\UUPlayer\Volume_Bar_Block_1.bmp
C:\Programmi\uusee\skins\UUPlayer\Volume_Bar_Block_2.bmp
C:\Programmi\uusee\skins\UUPlayer\Volume_Bar_Block_3.bmp
C:\Programmi\uusee\skins\UUPlayer\Volume_Button_2_1.bmp
C:\Programmi\uusee\skins\UUPlayer\Volume_Button_2_2.bmp
C:\Programmi\uusee\skins\UUPlayer\Volume_Button_2_3.bmp
C:\Programmi\uusee\skins\UUPlayer\Wnd_Browser_1.bmp
C:\Programmi\uusee\skins\UUPlayer\Wnd_Browser_2.bmp
C:\Programmi\uusee\skins\UUPlayer\Wnd_Browser_3.bmp
C:\Programmi\uusee\skins\UUPlayer\Wnd_ChannelInfo.bmp
C:\Programmi\uusee\skins\UUPlayer\Wnd_ChannelInfo_5.bmp
C:\Programmi\uusee\skins\UUPlayer\Wnd_Control_1.bmp
C:\Programmi\uusee\skins\UUPlayer\Wnd_Control_2.bmp
C:\Programmi\uusee\skins\UUPlayer\Wnd_Control_3.bmp
C:\Programmi\uusee\skins\UUPlayer\Wnd_Control_4.bmp
C:\Programmi\uusee\skins\UUPlayer\Wnd_Info.bmp
C:\Programmi\uusee\skins\UUPlayer\Wnd_Main_1.bmp
C:\Programmi\uusee\skins\UUPlayer\Wnd_Main_2.bmp
C:\Programmi\uusee\skins\UUPlayer\Wnd_Main_3.bmp
C:\Programmi\uusee\skins\UUPlayer\Wnd_Main_5.bmp
C:\Programmi\uusee\skins\UUPlayer\Wnd_Play_1.bmp
C:\Programmi\uusee\skins\UUPlayer\Wnd_Play_2.bmp
C:\Programmi\uusee\skins\UUPlayer\Wnd_Play_5.bmp
C:\Programmi\uusee\skins\UUPlayer\Wnd_Record_1.bmp
C:\Programmi\uusee\skins\UUPlayer\Wnd_Record_2.bmp
C:\Programmi\uusee\skins\UUPlayer\Wnd_Record_3.bmp
C:\Programmi\uusee\skins\UUPlayer\Wnd_Record_4.bmp
C:\Programmi\uusee\skins\UUPlayer\Wnd_Setting_1.bmp
C:\Programmi\uusee\skins\UUPlayer\Wnd_Setting_2.bmp
C:\Programmi\uusee\skins\UUPlayer\Wnd_Setting_3.bmp
C:\Programmi\uusee\skins\UUPlayer\Wnd_Side_1.bmp
C:\Programmi\uusee\skins\UUPlayer\Wnd_Side_2.bmp
C:\Programmi\uusee\skins\UUPlayer\Wnd_Side_3.bmp
C:\Programmi\uusee\skins\UUPlayer\Wnd_Toolbar_1.bmp
C:\Programmi\uusee\skins\UUPlayer\Wnd_Toolbar_2.bmp
C:\Programmi\uusee\skins\UUPlayer\Wnd_Toolbar_3.bmp
C:\Programmi\uusee\skins\UUPlayer\Wnd_Toolbar_4.bmp
C:\Programmi\uusee\skins\UUPlayer\Wnd_Top_1.bmp
C:\Programmi\uusee\skins\UUPlayer\Wnd_Top_2.bmp
C:\Programmi\uusee\skins\UUPlayer\Wnd_Top_3.bmp
C:\Programmi\uusee\trafficlight.dll
C:\Programmi\uusee\u264Dec.ax
C:\Programmi\uusee\UFDeMux.ax
C:\Programmi\uusee\uninst.exe
C:\Programmi\uusee\updateC2.ocx
C:\Programmi\uusee\UUPlayer.dll
C:\Programmi\uusee\UUPlayer.exe
C:\Programmi\uusee\UUPlayer.ocx
C:\Programmi\uusee\UUPlayer_update.ini
C:\Programmi\uusee\UUSee.url
C:\Programmi\uusee\uusee_video.dll
C:\Programmi\uusee\UUSEEAudioDec.ax
C:\Programmi\uusee\UUSeePlayer.exe
C:\Programmi\uusee\UUTV.xml
C:\Programmi\uusee\UUTV_Chat.xml
C:\Programmi\uusee\UUTV_MY.xml
C:\Programmi\uusee\UUTV_UUPlayer.xml
C:\Programmi\uusee\UUUpgrade.exe
C:\Programmi\uusee\UUUpgrade.ini
C:\Programmi\uusee\UUUpgrade.ocx
C:\Programmi\uusee\vermini.ini
C:\Programmi\uusee\vermini_x.ini
C:\Programmi\uusee\vermini_x1.ini
C:\Programmi\uusee\What's new.txt
C:\WINDOWS\system32\winitn.dll

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_NPF

((((((((((((((((((((((((( Files Created from 2008-02-21 to 2008-03-21 )))))))))))))))))))))))))))))))
.

2008-03-22 00:48 . 2008-03-22 00:48 <DIR> d-------- C:\WINDOWS\system32\xircom
2008-03-22 00:48 . 2008-03-22 00:48 <DIR> d-------- C:\Programmi\microsoft frontpage
2008-03-21 17:43 . 2008-03-21 17:43 <DIR> d-------- C:\Documents and Settings\Administrator\Dati applicazioni\Media Player Classic
2008-03-21 17:43 . 2008-03-21 17:43 <DIR> d-------- C:\Documents and Settings\Administrator\Dati applicazioni\DivX
2008-03-21 16:17 . 2008-03-21 16:17 <DIR> d-------- C:\Documents and Settings\Administrator\Dati applicazioni\Talkback
2008-03-21 16:17 . 2008-03-21 16:17 0 --a------ C:\WINDOWS\nsreg.dat
2008-03-21 14:58 . 2007-11-19 15:55 <DIR> d--h----- C:\Documents and Settings\Administrator\Risorse di stampa
2008-03-21 14:58 . 2007-11-19 15:55 <DIR> d--h----- C:\Documents and Settings\Administrator\Risorse di rete
2008-03-21 14:58 . 2007-11-19 15:55 <DIR> d-------- C:\Documents and Settings\Administrator\Preferiti
2008-03-21 14:58 . 2007-11-19 15:00 <DIR> d--h----- C:\Documents and Settings\Administrator\Modelli
2008-03-21 14:58 . 2007-11-19 15:55 <DIR> dr------- C:\Documents and Settings\Administrator\Menu Avvio
2008-03-21 14:58 . 2007-11-19 15:55 <DIR> d--h----- C:\Documents and Settings\Administrator\Impostazioni locali
2008-03-21 14:58 . 2008-03-21 16:12 <DIR> d-------- C:\Documents and Settings\Administrator\Documenti
2008-03-21 14:58 . 2008-03-21 17:44 <DIR> dr-h----- C:\Documents and Settings\Administrator\Dati applicazioni
2008-03-21 14:58 . 2007-07-25 16:29 816,888 --a------ C:\Documents and Settings\Administrator\SPTDinst-x86.exe
2008-03-21 14:58 . 2005-06-15 16:27 54,784 --a------ C:\Documents and Settings\Administrator\sfextra.dll
2008-03-20 11:41 . 2005-02-16 11:06 218,112 --a------ C:\HijackThis.exe
2008-03-20 11:34 . 2008-03-20 11:34 212,843 --a------ C:\hijackthis_199.zip
2008-03-19 13:27 . 2008-03-19 13:27 <DIR> d-------- C:\Programmi\AVG
2008-03-19 13:27 . 2008-03-20 11:25 <DIR> d-------- C:\Documents and Settings\All Users\Dati applicazioni\avg8
2008-03-16 13:05 . 2008-03-16 13:05 <DIR> d-------- C:\TarguTrans
2008-03-16 12:35 . 2008-03-16 12:41 <DIR> d-------- C:\Programmi\Power Translator 11
2008-03-08 16:50 . 2008-03-08 16:50 0 --a------ C:\WINDOWS\Irremote.ini
2008-02-26 22:52 . 2008-02-26 22:52 <DIR> d-------- C:\Programmi\Google
2008-02-24 15:28 . 2008-02-24 15:28 <DIR> d-------- C:\Programmi\Map24
2008-02-21 18:35 . 2008-02-21 18:35 <DIR> d-------- C:\Programmi\Lionhead Studios

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-03-21 23:50 32,695,072 --sha-w C:\WINDOWS\system32\drivers\fidbox.dat
2008-03-21 23:49 625,696 --sha-w C:\WINDOWS\system32\drivers\fidbox2.dat
2008-03-21 23:49 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\Kaspersky Lab
2008-03-21 23:47 61,772 --sha-w C:\WINDOWS\system32\drivers\fidbox2.idx
2008-03-21 23:47 441,776 --sha-w C:\WINDOWS\system32\drivers\fidbox.idx
2008-03-21 15:17 --------- d-----w C:\Programmi\FCM
2008-03-21 13:41 --------- d-----w C:\Documents and Settings\Grishnackh\Dati applicazioni\DMCache
2008-03-19 17:52 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\Microsoft Help
2008-03-19 17:41 --------- d-----w C:\Programmi\Windows Media Bonus Pack for Windows XP
2008-03-19 17:40 --------- d-----w C:\Programmi\Microsoft ActiveSync
2008-03-18 20:38 --------- d-----w C:\Documents and Settings\Grishnackh\Dati applicazioni\Skype
2008-03-18 19:33 --------- d-----w C:\Documents and Settings\Grishnackh\Dati applicazioni\skypePM
2008-03-08 16:21 --------- d-----w C:\Programmi\File comuni\Nero
2008-03-08 16:18 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\Nero
2008-03-02 17:49 --------- d--h--w C:\Programmi\InstallShield Installation Information
2008-03-02 17:48 --------- d-----w C:\Programmi\Internet Download Manager
2008-02-28 18:55 --------- d-----w C:\Programmi\Windows Live
2008-02-28 17:44 --------- d-----w C:\Documents and Settings\Grishnackh\Dati applicazioni\Babylon
2008-02-28 16:11 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\Babylon
2008-02-20 12:06 --------- d-----w C:\Programmi\Hasbro
2008-02-19 19:55 --------- d-----w C:\Programmi\Real Alternative
2008-02-19 19:55 --------- d-----w C:\Programmi\File comuni\Real
2008-02-19 19:21 90,112 ----a-w C:\WINDOWS\system32\agsaami.dll
2008-02-19 19:21 610,304 ----a-w C:\WINDOWS\system32\agsaamg.dll
2008-02-19 19:21 372,736 ----a-w C:\WINDOWS\system32\agsaamc.dll
2008-02-19 19:21 2,535,424 ----a-w C:\WINDOWS\system32\agsaamj.dll
2008-02-19 19:21 --------- d-----w C:\Programmi\AML Products
2008-02-17 02:04 --------- d-----w C:\Programmi\President Forever + Primaries
2008-02-17 01:46 --------- d-----w C:\Documents and Settings\Grishnackh\Dati applicazioni\Azureus
2008-02-16 20:14 --------- d-----w C:\Programmi\SopCast
2008-02-15 15:12 206,256 -c--a-w C:\WINDOWS\system32\idmmbc.dll
2008-02-14 00:30 --------- d-----w C:\Programmi\NeroInstall.bak
2008-02-13 00:51 --------- d-----w C:\Documents and Settings\Grishnackh\Dati applicazioni\Thinstall
2008-02-12 00:02 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\Grisoft
2008-02-11 23:45 --------- d-----w C:\Programmi\PC Sync Manager
2008-02-11 23:05 --------- d-----w C:\Programmi\NCH Swift Sound
2008-02-11 23:05 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\NCH Swift Sound
2008-02-11 23:01 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\ScanSoft
2008-02-07 00:23 --------- d-----w C:\Documents and Settings\Grishnackh\Dati applicazioni\NCH Swift Sound
2008-02-05 13:33 91,700 ----a-w C:\WINDOWS\system32\drivers\klin.dat
2008-02-05 13:14 85,860 ----a-w C:\WINDOWS\system32\drivers\klick.dat
2008-02-05 13:14 --------- d-----w C:\Programmi\Kaspersky Lab
2008-02-05 13:04 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\Kaspersky Lab Setup Files
2008-02-05 00:58 --------- d-----w C:\Documents and Settings\Grishnackh\Dati applicazioni\Winamp
2008-02-04 21:16 --------- d-----w C:\Programmi\Kuna
2008-02-04 21:10 --------- d-----w C:\Programmi\Wallpaper Master
2008-02-04 21:05 18 ------w C:\Documents and Settings\Grishnackh\Dati applicazioni\FileMark16.dll
2008-02-04 13:05 --------- d-----w C:\Programmi\Paradox Interactive
2008-02-04 11:22 --------- d-----w C:\Documents and Settings\Grishnackh\Dati applicazioni\Windows Live Writer
2008-02-04 00:50 --------- d-----w C:\Programmi\Microsoft SQL Server Compact Edition
2008-02-04 00:47 --------- d-----w C:\Programmi\File comuni\Wise Installation Wizard
2008-02-04 00:30 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\WLInstaller
2008-02-03 15:34 --------- d-----w C:\Programmi\TVAnts
2008-02-03 13:58 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\Azureus
2008-02-01 10:17 586,752 ----a-w C:\WINDOWS\WLXPGSS.SCR
2008-01-27 13:58 --------- d-----w C:\Documents and Settings\Grishnackh\Dati applicazioni\Nokia Multimedia Player
2008-01-27 13:30 --------- d-----w C:\Documents and Settings\Grishnackh\Dati applicazioni\PC Suite
2008-01-27 13:29 --------- d-----w C:\Programmi\Nokia
2008-01-27 13:29 --------- d-----w C:\Programmi\File comuni\PCSuite
2008-01-27 13:29 --------- d-----w C:\Programmi\File comuni\Nokia
2008-01-27 12:37 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\Installations
2008-01-27 12:30 --------- d-----w C:\Documents and Settings\Grishnackh\Dati applicazioni\Nokia
2008-01-27 12:30 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\PC Suite
2008-01-27 12:26 --------- d-----w C:\Programmi\DIFX
2008-01-27 12:25 --------- d-----w C:\Programmi\PC Connectivity Solution
2008-01-11 14:54 1,714 ------w C:\Documents and Settings\Grishnackh\Dati applicazioni\SAS7_000.DAT
2008-01-11 05:32 44,544 ------w C:\WINDOWS\system32\dllcache\pngfilt.dll
2007-11-21 14:43 32 ------w C:\Documents and Settings\All Users\Dati applicazioni\ezsid.dat
2007-07-25 15:29 816,888 ----a-w C:\WINDOWS\system32\config\systemprofile\SPTDinst-x86.exe
2007-07-25 15:29 816,888 ------w C:\Documents and Settings\Grishnackh\SPTDinst-x86.exe
2007-07-25 15:29 816,888 ------w C:\Documents and Settings\Default User\SPTDinst-x86.exe
2005-06-15 15:27 54,784 ----a-w C:\WINDOWS\system32\config\systemprofile\sfextra.dll
2005-06-15 15:27 54,784 ------w C:\Documents and Settings\Grishnackh\sfextra.dll
2005-06-15 15:27 54,784 ------w C:\Documents and Settings\Default User\sfextra.dll
.

------- Sigcheck -------

2004-08-19 15:39 544256 e6f62282ebaa63ba07fa2dc7198b8d0d C:\WINDOWS\system32\winlogon.exe
2004-08-19 15:39 504832 4166454e2bcfcc20d1b8a5ac9feab243 C:\WINDOWS\VistaMizer\old\winlogon.exe

2007-10-20 09:25 2281984 01973758c5fbef1b1cc3791f31307e72 C:\WINDOWS\system32\ntkrnlpa.exe
2007-10-20 09:25 2024448 490425dc4c13910372479345b913ddb6 C:\WINDOWS\VistaMizer\old\ntkrnlpa.exe

2007-10-20 09:07 2402304 e0f5bdf708abd94507e62352cb04b8ac C:\WINDOWS\system32\ntoskrnl.exe
2007-10-20 09:07 2144768 2374a104625951570fc7c20e4a4b56b2 C:\WINDOWS\VistaMizer\old\ntoskrnl.exe

2007-10-20 09:05 1554432 fb8a222c2828375f2f75758caedc0120 C:\WINDOWS\explorer.exe
2007-10-20 09:05 1035776 b4e85805be6d23de697f7b3ba7492d0b C:\WINDOWS\VistaMizer\old\explorer.exe
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{965B54B0-71E0-4611-8DE7-F73FA0B20E26}"= "C:\Programmi\Babylon\Babylon Toolbar\BabylonIEToolBar.dll" [2007-11-01 15:09 265952]

[HKEY_CLASSES_ROOT\clsid\{965b54b0-71e0-4611-8de7-f73fa0b20e26}]
[HKEY_CLASSES_ROOT\BabylonTBLib.BabylonTB.1]
[HKEY_CLASSES_ROOT\TypeLib\{162484B8-B114-453f-A344-C0B24B0F1D99}]
[HKEY_CLASSES_ROOT\BabylonTBLib.BabylonTB]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{965B54B0-71E0-4611-8DE7-F73FA0B20E26}"= C:\Programmi\Babylon\Babylon Toolbar\BabylonIEToolBar.dll [2007-11-01 15:09 265952]

[HKEY_CLASSES_ROOT\clsid\{965b54b0-71e0-4611-8de7-f73fa0b20e26}]
[HKEY_CLASSES_ROOT\BabylonTBLib.BabylonTB.1]
[HKEY_CLASSES_ROOT\TypeLib\{162484B8-B114-453f-A344-C0B24B0F1D99}]
[HKEY_CLASSES_ROOT\BabylonTBLib.BabylonTB]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LClock"="C:\Programmi\LClock\LClock.exe" [2004-09-19 20:27 65536]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-19 15:39 25088]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Programmi\File comuni\Nero\Lib\NMBgMonitor.exe" [2007-12-13 19:10 103720]
"H/PC Connection Agent"="C:\Programmi\Microsoft ActiveSync\wcescomm.exe" [2006-11-13 14:38 1289000]
"WallpaperChanger"="C:\Programmi\Wallpaper Master\Wallpaper.exe" [2005-01-06 21:28 509952]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"="C:\Programmi\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-10-10 19:51 39792]
"SunJavaUpdateSched"="C:\Programmi\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11 132496]
"Media Codec Update Service"="C:\Programmi\Essentials Codec Pack\update.exe" [ ]
"SigmatelSysTrayApp"="stsystra.exe" [2006-03-24 17:30 282624 C:\WINDOWS\stsystra.exe]
"igfxtray"="C:\WINDOWS\system32\igfxtray.exe" [2005-12-13 17:44 98304]
"igfxhkcmd"="C:\WINDOWS\system32\hkcmd.exe" [2005-12-13 17:41 77824]
"igfxpers"="C:\WINDOWS\system32\igfxpers.exe" [2005-12-13 17:45 118784]
"LifeChat"="C:\Programmi\Microsoft LifeChat\LifeChat.exe" [2007-01-26 14:31 259440]
"NBKeyScan"="C:\Programmi\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2007-12-03 14:21 2213160]
"SSBkgdUpdate"="C:\Programmi\File comuni\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2003-09-29 16:00 155648]
"ISUSPM Startup"="C:\PROGRA~1\FILECO~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2005-02-16 16:15 221184]
"ISUSScheduler"="C:\Programmi\File comuni\InstallShield\UpdateService\issch.exe" [2005-02-16 16:15 81920]
"Broadcom Wireless Manager UI"="C:\WINDOWS\system32\WLTRAY.exe" [2007-03-16 17:10 1392640]
"Opware15"="C:\Programmi\ScanSoft\OmniPage15.0\Opware15.exe" [2005-07-06 00:58 69632]
"OpScheduler"="C:\Programmi\ScanSoft\OmniPage15.0\OpScheduler.exe" [ ]
"PDF3 Registry Controller"="C:\Programmi\ScanSoft\OmniPage15.0\PDFConverter3\\RegistryController.exe" [2005-04-12 10:16 106496]
"SetDefPrt"="C:\Programmi\Brother\Brmfl05a\BrStDvPt.exe" [2005-01-26 18:02 49152]
"ControlCenter2.0"="C:\Programmi\Brother\ControlCenter2\brctrcen.exe" [2005-05-17 17:42 933888]
"Babylon Client"="C:\Programmi\Babylon\Babylon-Pro\Babylon.exe" [2008-02-28 17:11 3166432]
"NeroFilterCheck"="C:\Programmi\File comuni\Nero\Lib\NeroCheck.exe" [2007-03-01 14:57 153136]
"AVP"="C:\Programmi\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe" [2007-12-18 00:43 227856]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-19 15:39 25088]
"LClock"="C:\Programmi\LClock\LClock.exe" [2004-09-19 20:27 65536]
"Nokia.PCSync"="C:\Programmi\Nokia\Nokia PC Suite 6\PcSync2.exe" [2007-11-07 17:35 1294336]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"nltide_2"="regsvr32 /s /n /i:U shell32" []
"nltide_3"="advpack.dll" [2007-12-07 03:04 124928 C:\WINDOWS\system32\advpack.dll]

C:\Documents and Settings\Administrator\Menu Avvio\Programmi\Esecuzione automatica\
glass2k.exe.lnk - C:\Programmi\Glass2k\Glass2k.exe [2007-11-19 15:09:42 56325]

C:\Documents and Settings\Grishnackh\Menu Avvio\Programmi\Esecuzione automatica\
Stardock ObjectDock.lnk - C:\Programmi\Stardock\ObjectDock\ObjectDock.exe [2007-11-19 15:11:53 3444008]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoDesktopCleanupWizard"= 1 (0x1)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoResolveTrack"= 1 (0x1)
"NoResolveSearch"= 1 (0x1)

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoResolveTrack"= 1 (0x1)
"NoResolveSearch"= 1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"UIHost"="LogonUI.EXE"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"C:\\Programmi\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"C:\Programmi\Microsoft ActiveSync\rapimgr.exe"= C:\Programmi\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager
"C:\Programmi\Microsoft ActiveSync\wcescomm.exe"= C:\Programmi\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager
"C:\Programmi\Microsoft ActiveSync\WCESMgr.exe"= C:\Programmi\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application
"C:\\Programmi\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Programmi\\Windows Live\\Messenger\\livecall.exe"=
"C:\\Programmi\\Bonjour\\mDNSResponder.exe"=
"C:\\Programmi\\SOTI\\Pocket Controller-Professional\\PocketController.exe"=
"C:\\Programmi\\Kaspersky Lab\\Kaspersky Anti-Virus 7.0\\avp.exe"=
"C:\\Programmi\\File comuni\\Nero\\Nero Web\\SetupX.exe"=
"C:\\Programmi\\HTTP-Tunnel\\HTTP-TunnelClient.exe"=
"C:\\Programmi\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"26675:TCP"= 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service

R2 BCMWLNPF;Broadcom Netgroup Packet Filter;C:\WINDOWS\system32\drivers\bcmwlnpf.sys [2007-03-16 17:10]
R3 klim5;Kaspersky Anti-Virus NDIS Filter;C:\WINDOWS\system32\DRIVERS\klim5.sys [2007-12-13 13:28]
S3 BrScnUsb;Brother USB Still Image driver;C:\WINDOWS\system32\Drivers\BrScnUsb.sys [2004-10-15 12:50]
S3 PCANDIS5_RETWIFI;PCANDIS5_RETWIFI Protocol Driver;C:\PROGRA~1\EEYEDI~1\RETINA~1\PCANDIS5_RETWIFI.SYS []
S3 PCANDIS5_WIFISCAN.SYS;PCANDIS5_WIFISCAN.SYS;C:\Programmi\eEye Digital Security\Retina Wireless Scanner\PCANDIS5_WIFISCAN.SYS []
S3 USBSTOR;Driver archiviazione di massa USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 23:08]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{c3611da1-b011-11dc-bdfd-0018f36b5398}]
\Shell\auto\command - Knight.exe open
\Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Knight.exe open
\Shell\explore\command - Knight.exe open
\Shell\find\command - Knight.exe open
\Shell\install\command - Knight.exe open
\Shell\open\command - Knight.exe open

.
Contents of the 'Scheduled Tasks' folder
"2007-11-22 19:55:50 C:\WINDOWS\Tasks\Critical Battery Alarm Program.job"
"2007-11-19 16:12:02 C:\WINDOWS\Tasks\LifeChatTask.job"
- C:\Programmi\Microsoft LifeChat\LifeChat.exe
.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-03-22 00:49:32
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

PROCESS: C:\WINDOWS\explorer.exe
-> C:\Programmi\Stardock\ObjectDock\DockShellHook.dll
-> C:\Programmi\LClock\LC.dll
.
------------------------ Other Running Processes ------------------------
.
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\brss01a.exe
C:\Programmi\Bonjour\mDNSResponder.exe
C:\Programmi\Power Translator 11\LogoMedia TranslateDotNet Server.exe
C:\Programmi\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\PROGRA~1\MI3AA1~1\rapimgr.exe
.
**************************************************************************
.
Completion time: 2008-03-22 0:56:17 - machine was rebooted
ComboFix-quarantined-files.txt 2008-03-21 23:56:11
.
2008-03-12 22:15:48 --- E O F ---

__________________________________________________________

Logfile of HijackThis v1.99.1
Scan saved at 1.03.34, on 22/03/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\brss01a.exe
C:\Programmi\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
C:\Programmi\Bonjour\mDNSResponder.exe
C:\Programmi\Power Translator 11\LogoMedia TranslateDotNet Server.exe
C:\Programmi\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Programmi\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\stsystra.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Programmi\Microsoft LifeChat\LifeChat.exe
C:\Programmi\File comuni\InstallShield\UpdateService\issch.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\Programmi\ScanSoft\OmniPage15.0\Opware15.exe
C:\Programmi\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
C:\Programmi\LClock\LClock.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmi\Microsoft ActiveSync\wcescomm.exe
C:\Programmi\Wallpaper Master\Wallpaper.exe
C:\Programmi\Stardock\ObjectDock\ObjectDock.exe
C:\PROGRA~1\MI3AA1~1\rapimgr.exe
C:\WINDOWS\explorer.exe
C:\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Programmi\Internet Download Manager\IDMIECC.dll
O2 - BHO: Supporto di collegamento per Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Programmi\AVG\AVG8\avgssie.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programmi\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Guida per l'accesso a Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programmi\File comuni\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Babylon - {965B54B0-71E0-4611-8DE7-F73FA0B20E26} - C:\Programmi\Babylon\Babylon Toolbar\BabylonIEToolBar.dll
O3 - Toolbar: LEC - {1DBAB667-A486-421e-AFE4-CF07DD0088E5} - C:\Programmi\Power Translator 11\Applications\LEC IE Translation Extension.dll
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Programmi\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programmi\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [Media Codec Update Service] C:\Programmi\Essentials Codec Pack\update.exe -silent
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [LifeChat] "C:\Programmi\Microsoft LifeChat\LifeChat.exe"
O4 - HKLM\..\Run: [NBKeyScan] "C:\Programmi\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Programmi\File comuni\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FILECO~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Programmi\File comuni\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\WINDOWS\system32\WLTRAY.exe
O4 - HKLM\..\Run: [Opware15] "C:\Programmi\ScanSoft\OmniPage15.0\Opware15.exe"
O4 - HKLM\..\Run: [OpScheduler] "C:\Programmi\ScanSoft\OmniPage15.0\OpScheduler.exe"
O4 - HKLM\..\Run: [PDF3 Registry Controller] "C:\Programmi\ScanSoft\OmniPage15.0\PDFConverter3\\RegistryController.exe"
O4 - HKLM\..\Run: [SetDefPrt] C:\Programmi\Brother\Brmfl05a\BrStDvPt.exe
O4 - HKLM\..\Run: [ControlCenter2.0] C:\Programmi\Brother\ControlCenter2\brctrcen.exe /autorun
O4 - HKLM\..\Run: [Babylon Client] C:\Programmi\Babylon\Babylon-Pro\Babylon.exe -AutoStart
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Programmi\File comuni\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [AVP] "C:\Programmi\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe"
O4 - HKCU\..\Run: [LClock] C:\Programmi\LClock\LClock.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Programmi\File comuni\Nero\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Programmi\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [WallpaperChanger] C:\Programmi\Wallpaper Master\Wallpaper.exe
O4 - Startup: Stardock ObjectDock.lnk = C:\Programmi\Stardock\ObjectDock\ObjectDock.exe
O8 - Extra context menu item: Download All Links with IDM - C:\Programmi\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download FLV video content with IDM - C:\Programmi\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Download with IDM - C:\Programmi\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Open with Scansoft PDF Converter 3.0 - res://C:\Programmi\ScanSoft\OmniPage15.0\PDFConverter3\IEShellExt.dll /100
O8 - Extra context menu item: Translate with &Babylon - res://C:\Programmi\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Translate.htm
O9 - Extra button: Web Anti-Virus statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Programmi\Kaspersky Lab\Kaspersky Anti-Virus 7.0\SCIEPlgn.dll
O9 - Extra button: Inserisci blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programmi\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: Inserisci &blog in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programmi\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra 'Tools' menuitem: Crea preferiti portatile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Poker\Titan Poker\casino.exe
O9 - Extra 'Tools' menuitem: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Poker\Titan Poker\casino.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: Barra di ricerca di Encarta - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Programmi\File comuni\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\programmi\bonjour\mdnsnsp.dll
O11 - Options group: [INTERNATIONAL] International*
O11 - Options group: [TABS] Tabbed Browsing
O16 - DPF: {D8089245-3211-40F6-819B-9E5E92CD61A2} (FlashXControl Object) - https://fortunelounge.microgaming.com/generic/FlashAX.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Programmi\File comuni\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FILECO~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\FILECO~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\wpdshserviceobj.dll
O23 - Service: Kaspersky Anti-Virus 7.0 (AVP) - Unknown owner - C:\Programmi\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe" -r (file missing)
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Programmi\Bonjour\mDNSResponder.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Programmi\File comuni\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programmi\File comuni\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LEC TranslateDotNet Server - Language Engineering Corporation, LLC - C:\Programmi\Power Translator 11\LogoMedia TranslateDotNet Server.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Programmi\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Programmi\File comuni\Nero\Lib\NMIndexingService.exe
O23 - Service: ServiceLayer - Nokia. - C:\Programmi\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE

bdoriano · Inviato: 22 Mar 2008 11:58 Oggetto:

Combofix ha eliminato qualcosa. Wink

Adesso facciamo qualche controllo online:

Disabilita il tuo antivirus
Collegati a BitDefender (con IE) e fai la scansione completa.
Collegati a Kaspersky on-line scanner e fai la scansione estesa, come indicato qui.
Salva il risultato della scansione in un file (in formato HTML), carica il file su Freefilehosting e posta qui il link che ti viene assegnato.

supereros18 · Mortale devoto Registrato: 20/03/08 12:49 Messaggi: 5

Ciao bdoriano,ecco il risultato di quanto mi hai consigliato con kasp online

http://www.freefilehosting.net/download/3e1j5

ancora grazie per la tua preziosa assistenza

bdoriano · Inviato: 24 Mar 2008 09:56 Oggetto:

Ciao supereros18, Ciao

Il log di kaspersky sembra pulito.
Appena puoi, rifai una scansione aggiornata con combofix.

supereros18 · Mortale devoto Registrato: 20/03/08 12:49 Messaggi: 5

ecco qua il nuovo combofix,credo che sia tutto perfetto...ho un computer che vola adesso grazie a te-sei stato veramente gentilissimo

ComboFix 08-03-23.2 - Eros 2008-03-24 19.15.22.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1040.18.1534 [GMT 1:00]
Eseguito da: C:\Documents and Settings\Grishnackh\Desktop\SCARICATI\ComboFix.exe
* Creato nuovo punto di ripristino

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.
-- Other TimeOuts --
Findstr -MIF:/ "\\TTC\.pdb InsertAdvertisement"
GREP -i "C:\\Programmi\\[^\\]*\\[^\\]*$"
VFind -tf -s282624 "C:\Programmi\????????*[0-9].dll"
CF4801.exe /c " VFind.exe -ltf -s-1000000 -d+2007-12-24 "C:\Programmi\*" >progfile.dat"
VFind.exe -ltf -s-1000000 -d+2007-12-24 "C:\Programmi\*"
CF4801.exe /c " dir /a/s/b C:\_desktop.ini C:\desktop_.ini C:\cnsmin* C:\_install.exe >DirRoot"

((((((((((((((((((((((((( Files Creati Da 2008-02-24 al 2008-03-24 )))))))))))))))))))))))))))))))))))
.

2008-03-24 17:58 . 2008-03-24 17:58 <DIR> d-------- C:\Programmi\Microsoft Works
2008-03-24 17:57 . 2008-03-24 17:57 <DIR> d-------- C:\Programmi\Microsoft.NET
2008-03-24 17:53 . 2008-03-24 17:53 <DIR> d-------- C:\WINDOWS\SHELLNEW
2008-03-24 17:51 . 2008-03-24 17:51 <DIR> dr-h----- C:\MSOCache
2008-03-24 17:37 . 2008-03-24 19:19 1,349,408 --ahs---- C:\WINDOWS\system32\drivers\fidbox.dat
2008-03-24 17:37 . 2008-03-24 17:37 91,700 --a------ C:\WINDOWS\system32\drivers\klin.dat
2008-03-24 17:37 . 2008-03-24 17:37 85,860 --a------ C:\WINDOWS\system32\drivers\klick.dat
2008-03-24 17:37 . 2008-03-24 19:20 32,544 --ahs---- C:\WINDOWS\system32\drivers\fidbox2.dat
2008-03-24 17:37 . 2008-03-24 18:18 17,036 --ahs---- C:\WINDOWS\system32\drivers\fidbox.idx
2008-03-24 17:37 . 2008-03-24 18:18 3,308 --ahs---- C:\WINDOWS\system32\drivers\fidbox2.idx
2008-03-24 15:40 . 2007-11-21 17:31 402,728 --a------ C:\WINDOWS\system32\ImageDrive.cpl
2008-03-23 14:42 . 2008-03-23 14:54 <DIR> d-------- C:\Programmi\Your Uninstaller 2008
2008-03-23 14:42 . 2008-03-23 14:42 <DIR> d-------- C:\Documents and Settings\Grishnackh\Dati applicazioni\URSoft
2008-03-23 13:32 . 2006-10-26 19:56 32,592 --a------ C:\WINDOWS\system32\msonpmon.dll
2008-03-22 23:54 . 2008-03-22 23:54 <DIR> d-------- C:\WINDOWS\system32\Kaspersky Lab
2008-03-22 17:42 . 2008-03-22 19:24 <DIR> d-------- C:\WINDOWS\BDOSCAN8
2008-03-22 00:48 . 2008-03-22 00:48 <DIR> d-------- C:\WINDOWS\system32\xircom
2008-03-22 00:48 . 2008-03-22 00:48 <DIR> d-------- C:\Programmi\microsoft frontpage
2008-03-21 17:43 . 2008-03-21 17:43 <DIR> d-------- C:\Documents and Settings\Administrator\Dati applicazioni\Media Player Classic
2008-03-21 17:43 . 2008-03-21 17:43 <DIR> d-------- C:\Documents and Settings\Administrator\Dati applicazioni\DivX
2008-03-21 16:17 . 2008-03-21 16:17 <DIR> d-------- C:\Documents and Settings\Administrator\Dati applicazioni\Talkback
2008-03-21 16:17 . 2008-03-21 16:17 0 --a------ C:\WINDOWS\nsreg.dat
2008-03-21 14:58 . 2007-11-19 15:55 <DIR> d--h----- C:\Documents and Settings\Administrator\Risorse di stampa
2008-03-21 14:58 . 2007-11-19 15:55 <DIR> d--h----- C:\Documents and Settings\Administrator\Risorse di rete
2008-03-21 14:58 . 2007-11-19 15:55 <DIR> d-------- C:\Documents and Settings\Administrator\Preferiti
2008-03-21 14:58 . 2007-11-19 15:00 <DIR> d--h----- C:\Documents and Settings\Administrator\Modelli
2008-03-21 14:58 . 2007-11-19 15:55 <DIR> dr------- C:\Documents and Settings\Administrator\Menu Avvio
2008-03-21 14:58 . 2008-03-22 00:56 <DIR> d--h----- C:\Documents and Settings\Administrator\Impostazioni locali
2008-03-21 14:58 . 2008-03-21 16:12 <DIR> d-------- C:\Documents and Settings\Administrator\Documenti
2008-03-21 14:58 . 2008-03-21 17:44 <DIR> dr-h----- C:\Documents and Settings\Administrator\Dati applicazioni
2008-03-21 14:58 . 2007-07-25 16:29 816,888 --a------ C:\Documents and Settings\Administrator\SPTDinst-x86.exe
2008-03-21 14:58 . 2005-06-15 16:27 54,784 --a------ C:\Documents and Settings\Administrator\sfextra.dll
2008-03-20 11:41 . 2005-02-16 11:06 218,112 --a------ C:\HijackThis.exe
2008-03-20 11:34 . 2008-03-20 11:34 212,843 --a------ C:\hijackthis_199.zip
2008-03-19 13:27 . 2008-03-19 13:27 <DIR> d-------- C:\Programmi\AVG
2008-03-19 13:27 . 2008-03-20 11:25 <DIR> d-------- C:\Documents and Settings\All Users\Dati applicazioni\avg8
2008-03-16 13:05 . 2008-03-16 13:05 <DIR> d-------- C:\TarguTrans
2008-03-16 12:35 . 2008-03-16 12:41 <DIR> d-------- C:\Programmi\Power Translator 11
2008-03-08 16:50 . 2008-03-08 16:50 0 --a------ C:\WINDOWS\Irremote.ini
2008-02-26 22:52 . 2008-02-26 22:52 <DIR> d-------- C:\Programmi\Google
2008-02-24 15:28 . 2008-02-24 15:28 <DIR> d-------- C:\Programmi\Map24

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-03-24 17:31 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\Microsoft Help
2008-03-24 17:19 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\Kaspersky Lab
2008-03-24 16:56 --------- d-----w C:\Programmi\FCM
2008-03-24 16:37 --------- d-----w C:\Programmi\Kaspersky Lab
2008-03-24 16:29 --------- d---a-w C:\Documents and Settings\All Users\Dati applicazioni\TEMP
2008-03-24 16:28 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\Kaspersky Lab Setup Files
2008-03-24 16:26 --------- d-----w C:\Documents and Settings\Grishnackh\Dati applicazioni\DMCache
2008-03-23 13:52 --------- d-----w C:\Programmi\Internet Download Manager
2008-03-22 12:50 --------- d-----w C:\Programmi\Java
2008-03-19 17:41 --------- d-----w C:\Programmi\Windows Media Bonus Pack for Windows XP
2008-03-19 17:40 --------- d-----w C:\Programmi\Microsoft ActiveSync
2008-03-18 20:38 --------- d-----w C:\Documents and Settings\Grishnackh\Dati applicazioni\Skype
2008-03-18 19:33 --------- d-----w C:\Documents and Settings\Grishnackh\Dati applicazioni\skypePM
2008-03-08 16:21 --------- d-----w C:\Programmi\File comuni\Nero
2008-03-08 16:18 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\Nero
2008-03-02 17:49 --------- d--h--w C:\Programmi\InstallShield Installation Information
2008-02-28 18:55 --------- d-----w C:\Programmi\Windows Live
2008-02-28 17:44 --------- d-----w C:\Documents and Settings\Grishnackh\Dati applicazioni\Babylon
2008-02-28 16:11 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\Babylon
2008-02-21 17:35 --------- d-----w C:\Programmi\Lionhead Studios
2008-02-20 12:06 --------- d-----w C:\Programmi\Hasbro
2008-02-19 19:55 --------- d-----w C:\Programmi\Real Alternative
2008-02-19 19:55 --------- d-----w C:\Programmi\File comuni\Real
2008-02-19 19:21 90,112 ----a-w C:\WINDOWS\system32\agsaami.dll
2008-02-19 19:21 610,304 ----a-w C:\WINDOWS\system32\agsaamg.dll
2008-02-19 19:21 372,736 ----a-w C:\WINDOWS\system32\agsaamc.dll
2008-02-19 19:21 2,535,424 ----a-w C:\WINDOWS\system32\agsaamj.dll
2008-02-19 19:21 --------- d-----w C:\Programmi\AML Products
2008-02-17 02:04 --------- d-----w C:\Programmi\President Forever + Primaries
2008-02-17 01:46 --------- d-----w C:\Documents and Settings\Grishnackh\Dati applicazioni\Azureus
2008-02-16 20:14 --------- d-----w C:\Programmi\SopCast
2008-02-15 15:12 206,256 -c--a-w C:\WINDOWS\system32\idmmbc.dll
2008-02-13 00:51 --------- d-----w C:\Documents and Settings\Grishnackh\Dati applicazioni\Thinstall
2008-02-12 00:02 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\Grisoft
2008-02-11 23:45 --------- d-----w C:\Programmi\PC Sync Manager
2008-02-11 23:05 --------- d-----w C:\Programmi\NCH Swift Sound
2008-02-11 23:05 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\NCH Swift Sound
2008-02-11 23:01 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\ScanSoft
2008-02-08 17:37 219,664 ----a-w C:\WINDOWS\system32\klogon.dll
2008-02-08 17:35 23,604 ----a-w C:\WINDOWS\system32\drivers\klopp.dat
2008-02-07 00:23 --------- d-----w C:\Documents and Settings\Grishnackh\Dati applicazioni\NCH Swift Sound
2008-02-05 00:58 --------- d-----w C:\Documents and Settings\Grishnackh\Dati applicazioni\Winamp
2008-02-04 21:16 --------- d-----w C:\Programmi\Kuna
2008-02-04 21:10 --------- d-----w C:\Programmi\Wallpaper Master
2008-02-04 21:05 18 ------w C:\Documents and Settings\Grishnackh\Dati applicazioni\FileMark16.dll
2008-02-04 13:05 --------- d-----w C:\Programmi\Paradox Interactive
2008-02-04 11:22 --------- d-----w C:\Documents and Settings\Grishnackh\Dati applicazioni\Windows Live Writer
2008-02-04 00:50 --------- d-----w C:\Programmi\Microsoft SQL Server Compact Edition
2008-02-04 00:47 --------- d-----w C:\Programmi\File comuni\Wise Installation Wizard
2008-02-04 00:30 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\WLInstaller
2008-02-03 15:34 --------- d-----w C:\Programmi\TVAnts
2008-02-03 13:58 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\Azureus
2008-02-01 10:17 586,752 ----a-w C:\WINDOWS\WLXPGSS.SCR
2008-01-27 13:58 --------- d-----w C:\Documents and Settings\Grishnackh\Dati applicazioni\Nokia Multimedia Player
2008-01-27 13:30 --------- d-----w C:\Documents and Settings\Grishnackh\Dati applicazioni\PC Suite
2008-01-27 13:29 --------- d-----w C:\Programmi\Nokia
2008-01-27 13:29 --------- d-----w C:\Programmi\File comuni\PCSuite
2008-01-27 13:29 --------- d-----w C:\Programmi\File comuni\Nokia
2008-01-27 12:37 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\Installations
2008-01-27 12:30 --------- d-----w C:\Documents and Settings\Grishnackh\Dati applicazioni\Nokia
2008-01-27 12:30 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\PC Suite
2008-01-27 12:26 --------- d-----w C:\Programmi\DIFX
2008-01-27 12:25 --------- d-----w C:\Programmi\PC Connectivity Solution
2008-01-11 14:54 1,714 ------w C:\Documents and Settings\Grishnackh\Dati applicazioni\SAS7_000.DAT
2008-01-11 05:32 44,544 ------w C:\WINDOWS\system32\dllcache\pngfilt.dll
2008-01-09 14:01 53,248 ----a-w C:\WINDOWS\bdoscandel.exe
2007-11-21 14:43 32 ------w C:\Documents and Settings\All Users\Dati applicazioni\ezsid.dat
2007-07-25 15:29 816,888 ----a-w C:\WINDOWS\system32\config\systemprofile\SPTDinst-x86.exe
2007-07-25 15:29 816,888 ------w C:\Documents and Settings\Grishnackh\SPTDinst-x86.exe
2007-07-25 15:29 816,888 ------w C:\Documents and Settings\Default User\SPTDinst-x86.exe
2005-06-15 15:27 54,784 ----a-w C:\WINDOWS\system32\config\systemprofile\sfextra.dll
2005-06-15 15:27 54,784 ------w C:\Documents and Settings\Grishnackh\sfextra.dll
2005-06-15 15:27 54,784 ------w C:\Documents and Settings\Default User\sfextra.dll
.

------- Sigcheck -------

2004-08-19 15:39 544256 e6f62282ebaa63ba07fa2dc7198b8d0d C:\WINDOWS\system32\winlogon.exe
2004-08-19 15:39 504832 4166454e2bcfcc20d1b8a5ac9feab243 C:\WINDOWS\VistaMizer\old\winlogon.exe

2007-10-20 09:25 2281984 01973758c5fbef1b1cc3791f31307e72 C:\WINDOWS\system32\ntkrnlpa.exe
2007-10-20 09:25 2024448 490425dc4c13910372479345b913ddb6 C:\WINDOWS\VistaMizer\old\ntkrnlpa.exe

2007-10-20 09:07 2402304 e0f5bdf708abd94507e62352cb04b8ac C:\WINDOWS\system32\ntoskrnl.exe
2007-10-20 09:07 2144768 2374a104625951570fc7c20e4a4b56b2 C:\WINDOWS\VistaMizer\old\ntoskrnl.exe

2007-10-20 09:05 1554432 fb8a222c2828375f2f75758caedc0120 C:\WINDOWS\explorer.exe
2007-10-20 09:05 1035776 b4e85805be6d23de697f7b3ba7492d0b C:\WINDOWS\VistaMizer\old\explorer.exe
.
((((((((((((((((((((((((((((( snapshot@2008-03-22_ 0.54.56.31 )))))))))))))))))))))))))))))))))))))))))
.
- 2007-11-19 15:19:19 110,592 ------w C:\WINDOWS\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\adodb.dll
+ 2008-03-24 16:58:09 110,592 ----a-w C:\WINDOWS\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\adodb.dll
- 2007-11-19 15:19:15 65,536 ------w C:\WINDOWS\assembly\GAC\dao\10.0.4504.0__31bf3856ad364e35\DAO.DLL
+ 2008-03-24 16:58:05 65,536 ----a-w C:\WINDOWS\assembly\GAC\dao\10.0.4504.0__31bf3856ad364e35\DAO.DLL
- 2007-11-19 15:19:22 4,608 ------w C:\WINDOWS\assembly\GAC\Extensibility\7.0.3300.0__b03f5f7f11d50a3a\extensibility.dll
+ 2008-03-24 16:58:09 4,608 ----a-w C:\WINDOWS\assembly\GAC\Extensibility\7.0.3300.0__b03f5f7f11d50a3a\extensibility.dll
+ 2008-03-24 16:58:04 1,215,328 ----a-w C:\WINDOWS\assembly\GAC\IACore\1.7.6223.0__31bf3856ad364e35\IACore.dll
+ 2008-03-24 16:58:05 82,784 ----a-w C:\WINDOWS\assembly\GAC\IALoader\1.7.6223.0__31bf3856ad364e35\IALoader.dll
- 2007-11-19 15:19:18 8,007,680 ------w C:\WINDOWS\assembly\GAC\Microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.mshtml.dll
+ 2008-03-24 16:58:08 8,007,680 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.mshtml.dll
- 2007-11-19 15:16:57 80,696 ------w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.Access.Dao\12.0.0.0__71e9bce111e9429c\Microsoft.Office.interop.access.dao.dll
+ 2008-03-24 16:57:02 80,696 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.Access.Dao\12.0.0.0__71e9bce111e9429c\Microsoft.Office.interop.access.dao.dll
- 2007-11-19 15:18:04 1,612,592 ------w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.Access\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Access.dll
+ 2008-03-24 16:57:32 1,612,592 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.Access\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Access.dll
- 2007-11-19 15:18:05 1,276,720 ------w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.Excel\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Excel.dll
+ 2008-03-24 16:57:33 1,276,720 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.Excel\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Excel.dll
- 2007-11-19 15:18:06 150,320 ------w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.Graph\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Graph.dll
+ 2008-03-24 16:57:34 150,320 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.Graph\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Graph.dll
+ 2008-03-24 16:57:52 17,208 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.OneNote\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.OneNote.dll
- 2007-11-19 15:18:06 920,376 ------w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.Outlook\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Outlook.dll
+ 2008-03-24 16:57:35 920,376 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.Outlook\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Outlook.dll
- 2007-11-19 15:18:07 35,648 ------w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.OutlookViewCtl\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.OutlookViewCtl.dll
+ 2008-03-24 16:57:35 35,648 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.OutlookViewCtl\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.OutlookViewCtl.dll
- 2007-11-19 15:18:07 248,632 ------w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.PowerPoint\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.PowerPoint.dll
+ 2008-03-24 17:02:50 251,272 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.PowerPoint\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.PowerPoint.dll
- 2007-11-19 15:18:06 20,280 ------w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.SmartTag\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.SmartTag.dll
+ 2008-03-24 16:57:35 20,280 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.SmartTag\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.SmartTag.dll
- 2007-11-19 15:18:08 781,104 ------w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Word.dll
+ 2008-03-24 17:02:19 783,744 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Word.dll
- 2007-11-19 15:19:17 13,312 ------w C:\WINDOWS\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.stdformat.dll
+ 2008-03-24 16:58:07 13,312 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.stdformat.dll
- 2007-11-19 15:18:06 371,496 ------w C:\WINDOWS\assembly\GAC\Microsoft.Vbe.Interop.Forms\11.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.Forms.dll
+ 2008-03-24 16:57:34 371,496 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.Vbe.Interop.Forms\11.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.Forms.dll
- 2007-11-19 15:18:07 64,288 ------w C:\WINDOWS\assembly\GAC\Microsoft.Vbe.Interop\12.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.dll
+ 2008-03-24 16:57:35 64,288 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.Vbe.Interop\12.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.dll
- 2007-11-19 15:19:16 229,376 ------w C:\WINDOWS\assembly\GAC\mscomctl\10.0.4504.0__31bf3856ad364e35\MSCOMCTL.DLL
+ 2008-03-24 16:58:07 229,376 ----a-w C:\WINDOWS\assembly\GAC\mscomctl\10.0.4504.0__31bf3856ad364e35\MSCOMCTL.DLL
- 2007-11-19 15:19:19 4,096 ------w C:\WINDOWS\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\msdatasrc.dll
+ 2008-03-24 16:58:08 4,096 ----a-w C:\WINDOWS\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\msdatasrc.dll
- 2007-11-19 15:18:06 416,544 ------w C:\WINDOWS\assembly\GAC\office\12.0.0.0__71e9bce111e9429c\OFFICE.DLL
+ 2008-03-24 16:57:35 416,544 ----a-w C:\WINDOWS\assembly\GAC\office\12.0.0.0__71e9bce111e9429c\OFFICE.DLL
- 2007-11-19 15:16:55 12,104 ------w C:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Access\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Access.dll
+ 2008-03-24 16:57:01 12,104 ----a-w C:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Access\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Access.dll
- 2007-11-19 15:16:58 12,096 ------w C:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Excel\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Excel.dll
+ 2008-03-24 16:57:04 12,096 ----a-w C:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Excel\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Excel.dll
- 2007-11-19 15:18:29 12,096 ------w C:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Graph\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Graph.dll
+ 2008-03-24 16:57:40 12,096 ----a-w C:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Graph\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Graph.dll
- 2007-11-19 15:18:41 12,104 ------w C:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Outlook\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Outlook.dll
+ 2008-03-24 16:57:55 12,104 ----a-w C:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Outlook\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Outlook.dll
- 2007-11-19 15:18:39 12,632 ------w C:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.OutlookViewCtl\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.OutlookViewCtl.dll
+ 2008-03-24 16:57:52 12,632 ----a-w C:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.OutlookViewCtl\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.OutlookViewCtl.dll
- 2007-11-19 15:18:41 12,112 ------w C:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.PowerPoint\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.PowerPoint.dll
+ 2008-03-24 16:57:55 12,112 ----a-w C:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.PowerPoint\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.PowerPoint.dll
- 2007-11-19 15:18:31 12,104 ------w C:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.SmartTag\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.SmartTag.dll
+ 2008-03-24 16:57:43 12,104 ----a-w C:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.SmartTag\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.SmartTag.dll
- 2007-11-19 15:18:56 12,096 ------w C:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Word.dll
+ 2008-03-24 16:57:58 12,096 ----a-w C:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Word.dll
- 2007-11-19 15:18:33 12,080 ------w C:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Vbe.Interop\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Vbe.Interop.dll
+ 2008-03-24 16:57:45 12,080 ----a-w C:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Vbe.Interop\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Vbe.Interop.dll
- 2007-11-19 15:18:33 11,544 ------w C:\WINDOWS\assembly\GAC\Policy.11.0.office\12.0.0.0__71e9bce111e9429c\Policy.11.0.Office.dll
+ 2008-03-24 16:57:45 11,544 ----a-w C:\WINDOWS\assembly\GAC\Policy.11.0.office\12.0.0.0__71e9bce111e9429c\Policy.11.0.Office.dll
- 2007-11-19 15:19:17 16,384 ------w C:\WINDOWS\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll
+ 2008-03-24 16:58:07 16,384 ----a-w C:\WINDOWS\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll
+ 2008-03-22 16:42:10 45,056 ----a-w C:\WINDOWS\BDOSCAN8\avxdisk.dll
+ 2008-03-22 16:42:10 10,240 ----a-w C:\WINDOWS\BDOSCAN8\avxs.dll
+ 2008-03-22 16:42:10 27,136 ----a-w C:\WINDOWS\BDOSCAN8\avxt.dll
+ 2008-03-22 16:42:13 181,760 ----a-w C:\WINDOWS\BDOSCAN8\bdcore.dll
+ 2008-01-09 14:01:48 118,784 ----a-w C:\WINDOWS\BDOSCAN8\bdupd.dll
+ 2008-01-09 14:01:48 53,248 ----a-w C:\WINDOWS\BDOSCAN8\ipsupd.dll
+ 2008-03-22 16:42:20 142,848 ----a-w C:\WINDOWS\BDOSCAN8\libfn.dll
+ 2008-03-22 16:42:11 86,016 ----a-w C:\WINDOWS\BDOSCAN8\librtvr.dll
+ 2008-01-09 14:01:48 118,784 ----a-w C:\WINDOWS\Downloaded Program Files\bdupd.dll
+ 2008-01-09 14:01:48 53,248 ----a-w C:\WINDOWS\Downloaded Program Files\ipsupd.dll
+ 2007-02-22 22:41:12 304,544 ----a-w C:\WINDOWS\Downloaded Program Files\MessengerStatsPAClient.dll
+ 2006-10-27 14:00:10 576,376 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACACEDAO.DLL
+ 2006-10-26 20:18:12 162,616 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACCWIZ.DLL
+ 2006-10-27 14:00:12 1,751,904 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACECORE.DLL
+ 2006-10-27 14:00:10 576,376 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACEDAO.DLL
+ 2006-10-27 14:00:06 47,976 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACEERR.DLL
+ 2006-10-27 14:00:08 191,360 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACEES.DLL
+ 2006-10-26 19:13:34 338,800 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACEEXCH.DLL
+ 2006-10-26 19:13:44 629,616 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACEEXCL.DLL
+ 2006-10-26 19:13:28 207,736 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACELTS.DLL
+ 2006-10-26 19:13:32 279,352 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACEODBC.DLL
+ 2006-10-26 19:13:08 15,160 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACEODDBS.DLL
+ 2006-10-26 19:13:08 15,160 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACEODEXL.DLL
+ 2006-10-26 19:13:08 15,160 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACEODPDX.DLL
+ 2006-10-26 19:13:12 15,160 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACEODTXT.DLL
+ 2006-10-27 14:00:06 387,960 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACEOLEDB.DLL
+ 2006-10-26 19:13:38 392,048 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACEPDE.DLL
+ 2006-10-26 19:13:30 260,976 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACER2X.DLL
+ 2006-10-26 19:13:32 289,648 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACER3X.DLL
+ 2006-10-26 19:13:20 56,120 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACERCLR.DLL
+ 2006-10-26 19:13:38 551,800 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACEREP.DLL
+ 2006-10-26 19:13:30 224,104 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACETXT.DLL
+ 2006-10-27 14:40:34 208,760 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACEWSS.DLL
+ 2006-10-26 19:13:34 371,568 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACEXBE.DLL
+ 2006-10-27 14:41:04 399,640 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\CDLMSO.DLL
+ 2006-10-26 18:59:24 205,616 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\CLVIEW.EXE
+ 2006-10-26 20:30:42 65,312 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\COLLIMP.DLL
+ 2006-10-26 19:12:52 189,760 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\CONTACTPICKER.DLL
+ 2006-10-26 13:04:58 75,576 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\FORM.DLL
+ 2006-10-26 18:21:24 1,682,232 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\FPSRVUTL.DLL
+ 2006-10-27 14:09:36 983,376 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\FPWEC.DLL
+ 2006-10-26 19:02:12 2,526,520 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GRAPH.EXE
+ 2006-10-26 19:12:52 173,328 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\IEAWSDC.DLL
+ 2006-10-27 14:10:10 5,281,592 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\IPEDITOR.DLL
+ 2006-10-26 18:55:10 828,704 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MEDCAT.DLL
+ 2006-10-27 14:01:34 10,371,880 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSACCESS.EXE
+ 2006-10-26 20:18:06 66,880 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSAEXP30.DLL
+ 2006-10-27 13:59:06 161,080 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSOCF.DLL
+ 2006-10-26 18:48:12 14,664 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSOCFU.DLL
+ 2006-10-26 19:12:58 428,816 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSODCW.DLL
+ 2006-10-26 20:13:36 26,936 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSOEURO.DLL
+ 2006-10-26 19:00:08 6,635,320 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSORES.DLL
+ 2006-10-26 12:56:36 436,520 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSORUN.DLL
+ 2006-10-26 18:50:04 672,024 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSQRY32.EXE
+ 2006-10-26 12:56:40 505,136 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSSOAP30.DLL
+ 2006-10-26 18:55:12 832,800 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSTORDB.EXE
+ 2006-10-26 18:55:06 538,904 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSTORES.DLL
+ 2006-10-26 19:12:30 65,824 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\NAME.DLL
+ 2006-10-27 14:14:34 14,151,456 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OART.DLL
+ 2006-10-26 19:06:54 232,816 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ODEPLOY.EXE
+ 2006-10-26 19:14:06 7,033,152 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OFFOWC.DLL
+ 2006-10-27 14:18:36 1,658,152 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OGL.DLL
+ 2006-10-26 19:00:08 274,744 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OIS.EXE
+ 2006-10-26 19:00:12 998,208 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OISAPP.DLL
+ 2006-10-26 19:00:10 285,008 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OISGRAPH.DLL
+ 2006-10-26 19:32:42 604,000 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ONBTTNIE.DLL
+ 2006-10-27 14:39:36 687,432 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ONBTTNOL.DLL
+ 2006-10-27 14:03:04 1,018,664 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ONENOTE.EXE
+ 2006-10-26 19:24:54 98,632 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ONENOTEM.EXE
+ 2006-10-26 19:24:50 72,504 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ONFILTER.DLL
+ 2006-10-26 19:24:58 1,165,112 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ONLIBS.DLL
+ 2006-10-27 14:03:06 6,579,512 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ONMAIN.DLL
+ 2006-10-26 19:23:00 782,720 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ONSYNCPC.DLL
+ 2006-10-26 19:07:04 6,536,992 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OSETUP.DLL
+ 2006-07-26 17:53:56 459,080 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OUTLFLTR.DLL
+ 2006-10-26 20:30:44 482,088 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\PORTCONN.DLL
+ 2006-10-27 14:04:06 465,200 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\POWERPNT.EXE
+ 2006-10-27 14:04:06 7,980,848 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\PPCORE.DLL
+ 2008-03-24 16:57:35 248,632 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\PPTPIA.DLL
+ 2006-10-26 18:52:10 2,012,480 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\PPTVIEW.EXE
+ 2006-10-26 13:05:00 77,144 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\PSOM.DLL
+ 2006-10-26 20:13:38 38,168 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\REFEDIT.DLL
+ 2006-10-26 13:04:44 19,784 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\REVERSE.DLL
+ 2006-10-26 19:13:00 503,624 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\SELFCERT.EXE
+ 2006-10-26 19:06:58 439,600 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\SETUP.EXE
+ 2006-10-26 20:18:16 502,608 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\SOA.DLL
+ 2006-07-28 14:21:58 277,320 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\SSGEN.DLL
+ 2006-10-27 13:57:08 2,330,968 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\STSLIST.DLL
+ 2006-10-26 13:04:48 29,976 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\THOCRAPI.DLL
+ 2006-10-26 13:05:04 126,784 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\TWCUTCHR.DLL
+ 2006-10-26 13:05:02 86,840 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\TWCUTLIN.DLL
+ 2006-10-26 13:04:56 58,168 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\TWLAY32.DLL
+ 2006-10-26 13:04:48 27,456 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\TWORIENT.DLL
+ 2006-10-26 13:04:54 51,008 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\TWRECE.DLL
+ 2006-10-26 13:04:44 19,784 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\TWRECS.DLL
+ 2006-10-26 13:04:58 76,624 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\TWSTRUCT.DLL
+ 2006-09-29 23:42:56 2,583,344 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\VBE6.DLL
+ 2006-10-27 14:23:04 347,432 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\WINWORD.EXE
+ 2008-03-24 16:57:35 781,104 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\WORDPIA.DLL
+ 2006-10-26 13:05:08 1,181,520 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\XIMAGE3B.DLL
+ 2006-10-26 13:05:08 530,760 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\XPAGE3C.DLL
+ 2007-08-28 22:22:36 579,008 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ACACEDAO.DLL
+ 2007-08-24 04:17:04 165,256 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ACCWIZ.DLL
+ 2007-08-28 22:22:30 1,754,536 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ACECORE.DLL
+ 2007-08-28 22:22:36 579,008 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ACEDAO.DLL
+ 2007-08-28 22:22:38 50,616 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ACEERR.DLL
+ 2007-08-28 22:22:40 193,992 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ACEES.DLL
+ 2007-08-24 02:46:10 341,440 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ACEEXCH.DLL
+ 2007-08-24 02:46:14 632,248 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ACEEXCL.DLL
+ 2007-08-24 02:46:16 210,368 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ACELTS.DLL
+ 2007-08-24 02:46:18 281,992 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ACEODBC.DLL
+ 2007-08-24 02:46:20 17,800 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ACEODDBS.DLL
+ 2007-08-24 02:46:22 17,800 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ACEODEXL.DLL
+ 2007-08-24 02:46:22 17,800 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ACEODPDX.DLL
+ 2007-08-24 02:46:22 17,800 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ACEODTXT.DLL
+ 2007-08-28 22:22:44 390,600 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ACEOLEDB.DLL
+ 2007-08-24 02:46:28 394,688 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ACEPDE.DLL
+ 2007-08-24 02:46:30 263,616 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ACER2X.DLL
+ 2007-08-24 02:46:32 292,288 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ACER3X.DLL
+ 2007-08-24 02:46:34 58,760 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ACERCLR.DLL
+ 2007-08-24 02:46:38 554,440 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ACEREP.DLL
+ 2007-08-24 02:46:40 226,744 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ACETXT.DLL
+ 2007-08-28 23:52:12 201,664 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ACEWSS.DLL
+ 2007-08-24 02:46:44 374,200 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ACEXBE.DLL
+ 2007-08-28 23:53:12 402,784 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\CDLMSO.DLL
+ 2007-08-24 02:45:50 208,256 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\CLVIEW.EXE
+ 2007-08-24 04:38:36 67,952 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\COLLIMP.DLL
+ 2007-08-28 22:19:32 136,064 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\CONTAB32.DLL
+ 2007-08-24 02:36:26 192,400 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\CONTACTPICKER.DLL
+ 2007-08-24 03:49:12 89,976 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\DLGSETP.DLL
+ 2007-08-24 02:18:14 442,208 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\DWDCW20.DLL
+ 2007-08-24 02:18:18 437,160 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\DWTRIG20.EXE
+ 2007-10-05 19:37:38 17,927,192 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\EXCEL.EXE
+ 2007-08-23 00:03:38 1,195,888 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\FM20.DLL
+ 2007-08-23 00:19:06 78,728 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\FORM.DLL
+ 2007-08-25 18:11:44 1,685,896 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\FPSRVUTL.DLL
+ 2007-08-28 22:45:00 985,496 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\FPWEC.DLL
+ 2007-10-02 18:45:34 2,530,864 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\GRAPH.EXE
+ 2007-08-24 02:36:58 175,968 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\IEAWSDC.DLL
+ 2007-10-05 19:31:06 5,287,984 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\IPEDITOR.DLL
+ 2007-08-28 23:45:54 831,856 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\MEDCAT.DLL
+ 2007-08-24 03:49:40 342,888 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\MIMEDIR.DLL
+ 2007-08-28 22:13:52 10,367,352 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\MSACCESS.EXE
+ 2007-08-24 04:17:48 69,520 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\MSAEXP30.DLL
+ 2007-08-28 23:52:02 120,704 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\MSCONV97.DLL
+ 2007-09-14 20:45:58 16,901,168 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\MSO.DLL
+ 2007-08-28 22:20:06 163,712 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\MSOCF.DLL
+ 2007-08-28 22:20:12 17,304 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\MSOCFU.DLL
+ 2007-09-06 16:55:08 431,456 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\MSODCW.DLL
+ 2007-08-24 04:50:10 29,576 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\MSOEURO.DLL
+ 2007-08-27 19:20:14 6,637,960 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\MSORES.DLL
+ 2007-08-28 23:18:20 439,160 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\MSORUN.DLL
+ 2007-08-24 02:40:16 674,664 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\MSQRY32.EXE
+ 2007-08-23 00:12:20 507,768 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\MSSOAP30.DLL
+ 2007-08-28 23:45:58 835,952 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\MSTORDB.EXE
+ 2007-08-28 23:46:06 542,568 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\MSTORES.DLL
+ 2007-08-24 02:37:50 68,464 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\NAME.DLL
+ 2007-10-05 19:44:24 14,168,600 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\OART.DLL
+ 2007-10-02 18:51:22 8,436,776 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\OARTCONV.DLL
+ 2007-09-02 00:55:16 235,456 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ODEPLOY.EXE
+ 2007-08-28 23:37:40 7,039,888 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\OFFOWC.DLL
+ 2007-08-28 23:19:24 1,654,648 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\OGL.DLL
+ 2007-08-24 03:06:28 277,384 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\OIS.EXE
+ 2007-08-24 03:06:32 1,000,848 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\OISAPP.DLL
+ 2007-08-24 03:06:38 288,152 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\OISGRAPH.DLL
+ 2007-08-28 22:20:20 2,949,512 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\OLMAPI32.DLL
+ 2007-08-24 04:42:40 663,432 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\OMSMAIN.DLL
+ 2007-08-24 04:42:44 195,480 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\OMSXP32.DLL
+ 2007-08-28 23:49:28 606,120 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ONBTTNIE.DLL
+ 2007-08-28 23:49:34 667,544 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ONBTTNOL.DLL
+ 2007-08-28 22:43:30 1,022,840 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ONENOTE.EXE
+ 2007-08-24 03:45:42 101,784 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ONENOTEM.EXE
+ 2007-08-24 03:45:42 75,144 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ONFILTER.DLL
+ 2007-08-24 03:45:46 1,167,744 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ONLIBS.DLL
+ 2007-10-12 20:08:52 6,588,968 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ONMAIN.DLL
+ 2007-08-28 23:31:42 785,352 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ONSYNCPC.DLL
+ 2007-09-02 00:55:54 6,540,656 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\OSETUP.DLL
+ 2007-06-07 18:51:00 465,800 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\OUTLFLTR.DLL
+ 2007-08-28 22:20:44 600,992 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\OUTLMIME.DLL
+ 2007-09-06 17:01:10 12,836,728 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\OUTLOOK.EXE
+ 2007-08-28 22:22:04 180,128 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\OUTLPH.DLL
+ 2007-09-06 16:50:34 485,232 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\PORTCONN.DLL
+ 2007-08-28 22:06:16 467,840 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\POWERPNT.EXE
+ 2007-08-28 22:06:44 7,990,144 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\PPCORE.DLL
+ 2007-08-28 23:38:22 2,016,656 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\PPTVIEW.EXE
+ 2007-08-23 00:19:06 79,784 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\PSOM.DLL
+ 2007-08-24 03:51:48 416,112 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\PSTPRX32.DLL
+ 2007-08-24 04:50:10 41,832 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\REFEDIT.DLL
+ 2007-08-23 00:19:08 22,416 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\REVERSE.DLL
+ 2007-08-24 03:52:08 266,160 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\SCNPST32.DLL
+ 2007-08-24 03:52:10 275,896 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\SCNPST64.DLL
+ 2007-09-06 16:55:22 505,752 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\SELFCERT.EXE
+ 2007-09-02 00:55:34 442,240 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\SETUP.EXE
+ 2007-08-24 04:17:54 505,240 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\SOA.DLL
+ 2007-06-07 18:51:00 125,320 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\SSGEN.DLL
+ 2007-08-28 22:28:26 2,330,024 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\STSLIST.DLL
+ 2007-08-23 00:19:08 32,608 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\THOCRAPI.DLL
+ 2007-08-23 00:19:08 129,936 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\TWCUTCHR.DLL
+ 2007-08-23 00:19:10 90,504 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\TWCUTLIN.DLL
+ 2007-08-23 00:19:10 60,800 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\TWLAY32.DLL
+ 2007-08-23 00:19:12 30,096 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\TWORIENT.DLL
+ 2007-08-23 00:19:14 54,152 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\TWRECE.DLL
+ 2007-08-23 00:19:14 22,416 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\TWRECS.DLL
+ 2007-08-23 00:19:16 79,776 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\TWSTRUCT.DLL
+ 2007-06-27 19:58:12 2,585,936 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\VBE6.DLL
+ 2007-08-28 22:16:00 350,064 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\WINWORD.EXE
+ 2007-09-06 17:03:02 4,280,176 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\WRD12CNV.DLL
+ 2007-08-28 23:07:58 24,928 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\WRD12EXE.EXE
+ 2007-09-06 16:56:32 17,490,800 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\WWLIB.DLL
+ 2007-08-23 00:19:18 1,198,496 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\XIMAGE3B.DLL
+ 2007-10-02 19:00:06 14,708,760 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\XL12CNV.EXE
+ 2007-08-24 04:14:14 13,712 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\XLCALL32.DLL
+ 2007-08-23 00:19:20 535,448 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\XPAGE3C.DLL
- 2008-03-19 17:49:39 1,165,584 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\accicons.exe
+ 2008-03-24 17:29:04 1,165,584 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\accicons.exe
- 2008-03-19 17:49:40 20,240 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe
+ 2008-03-24 17:29:06 20,240 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe
- 2008-03-19 17:49:39 159,504 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\inficon.exe
+ 2008-03-24 17:29:04 159,504 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\inficon.exe
- 2008-03-19 17:49:40 184,080 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\joticon.exe
+ 2008-03-24 17:29:04 184,080 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\joticon.exe
- 2008-03-19 17:49:40 217,864 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe
+ 2008-03-24 17:29:05 217,864 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe
- 2008-03-19 17:49:40 18,704 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\mspicons.exe
+ 2008-03-24 17:29:06 18,704 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\mspicons.exe
- 2008-03-19 17:49:40 35,088 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe
+ 2008-03-24 17:29:07 35,088 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe
- 2008-03-19 17:49:40 845,584 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe
+ 2008-03-24 17:29:04 845,584 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe
- 2008-03-19 17:49:40 922,384 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pptico.exe
+ 2008-03-24 17:29:05 922,384 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pptico.exe
- 2008-03-19 17:49:40 272,648 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pubs.exe
+ 2008-03-24 17:29:05 272,648 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pubs.exe
- 2008-03-19 17:49:40 888,080 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe
+ 2008-03-24 17:29:06 888,080 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe
- 2008-03-19 17:49:39 1,172,240 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe
+ 2008-03-24 17:29:04 1,172,240 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe
- 2008-03-19 17:52:39 217,864 ----a-r C:\WINDOWS\Installer\{90120000-006E-0410-0000-0000000FF1CE}\misc.exe
+ 2008-03-24 17:31:47 217,864 ----a-r C:\WINDOWS\Installer\{90120000-006E-0410-0000-0000000FF1CE}\misc.exe
+ 2008-03-24 13:34:26 5,240 ----a-w C:\WINDOWS\SoftwareDistribution\EventCache\{9B5D161D-0804-4EE9-AA08-F70F9ECBF1B9}.bin
- 2008-03-21 13:51:48 16,384 --sha-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat
+ 2008-03-24 11:53:07 16,384 --sha-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat
- 2008-03-21 13:51:48 16,384 --sha-w C:\WINDOWS\system32\config\systemprofile\Impostazioni locali\Cronologia\History.IE5\index.dat
+ 2008-03-24 11:53:07 16,384 --sha-w C:\WINDOWS\system32\config\systemprofile\Impostazioni locali\Cronologia\History.IE5\index.dat
- 2008-03-21 13:51:48 32,768 --sha-w C:\WINDOWS\system32\config\systemprofile\Impostazioni locali\Temporary Internet Files\Content.IE5\index.dat
+ 2008-03-24 11:53:07 32,768 --sha-w C:\WINDOWS\system32\config\systemprofile\Impostazioni locali\Temporary Internet Files\Content.IE5\index.dat
- 2008-02-13 15:43:17 195,344 ----a-w C:\WINDOWS\system32\drivers\klif.sys
+ 2007-12-28 18:51:04 195,344 ----a-w C:\WINDOWS\system32\drivers\klif.sys
- 2006-10-26 13:10:08 1,190,688 ------w C:\WINDOWS\system32\FM20.DLL
+ 2007-08-23 00:03:38 1,195,888 ----a-w C:\WINDOWS\system32\FM20.DLL
- 2008-03-19 19:40:28 1,638,736 ----a-w C:\WINDOWS\system32\FNTCACHE.DAT
+ 2008-03-24 17:07:27 1,635,432 ----a-w C:\WINDOWS\system32\FNTCACHE.DAT
- 2007-09-24 21:30:28 135,168 ------w C:\WINDOWS\system32\java.exe
+ 2008-02-22 00:23:35 135,168 ----a-w C:\WINDOWS\system32\java.exe
- 2007-09-24 21:30:30 135,168 ------w C:\WINDOWS\system32\javaw.exe
+ 2008-02-22 00:23:39 135,168 ----a-w C:\WINDOWS\system32\javaw.exe
- 2007-09-24 22:31:42 139,264 ------w C:\WINDOWS\system32\javaws.exe
+ 2008-02-22 01:33:32 139,264 ----a-w C:\WINDOWS\system32\javaws.exe
+ 2005-05-24 11:27:16 213,048 ----a-w C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\kavss.dll
+ 2007-08-29 14:47:20 94,208 ----a-w C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\kavuninstall.exe
+ 2007-08-29 14:49:54 950,272 ----a-w C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\kavwebscan.dll
- 2008-03-21 23:26:25 63,522 ----a-w C:\WINDOWS\system32\perfc009.dat
+ 2008-03-24 17:23:53 63,522 ----a-w C:\WINDOWS\system32\perfc009.dat
- 2008-03-21 23:26:25 75,606 ----a-w C:\WINDOWS\system32\perfc010.dat
+ 2008-03-24 17:23:53 75,606 ----a-w C:\WINDOWS\system32\perfc010.dat
- 2008-03-21 23:26:25 404,302 ----a-w C:\WINDOWS\system32\perfh009.dat
+ 2008-03-24 17:23:53 404,302 ----a-w C:\WINDOWS\system32\perfh009.dat
- 2008-03-21 23:26:25 450,968 ----a-w C:\WINDOWS\system32\perfh010.dat
+ 2008-03-24 17:23:53 450,968 ----a-w C:\WINDOWS\system32\perfh010.dat
+ 2006-10-26 18:56:16 864,080 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\msonpdrv.dll
+ 2006-10-26 18:56:14 67,408 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\msonpui.dll
+ 2006-10-26 18:56:16 864,080 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\msonpdrv.dll
+ 2006-10-26 18:56:14 67,408 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\msonpui.dll
+ 2006-10-26 18:56:12 33,104 ----a-w C:\WINDOWS\system32\spool\prtprocs\w32x86\msonpppr.dll
- 2005-09-23 12:29:16 479,232 ------w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\msvcm80.dll
+ 2006-10-26 12:40:36 479,232 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\msvcm80.dll
- 2005-09-23 12:29:16 548,864 ------w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\msvcp80.dll
+ 2006-10-26 12:40:36 548,864 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\msvcp80.dll
- 2005-09-23 12:29:16 626,688 ------w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\msvcr80.dll
+ 2006-10-26 12:40:36 626,688 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\msvcr80.dll
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Nota* i valori vuoti & legittimi/default non sono visualizzati.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{965B54B0-71E0-4611-8DE7-F73FA0B20E26}"= "C:\Programmi\Babylon\Babylon Toolbar\BabylonIEToolBar.dll" [2007-11-01 15:09 265952]

[HKEY_CLASSES_ROOT\clsid\{965b54b0-71e0-4611-8de7-f73fa0b20e26}]
[HKEY_CLASSES_ROOT\BabylonTBLib.BabylonTB.1]
[HKEY_CLASSES_ROOT\TypeLib\{162484B8-B114-453f-A344-C0B24B0F1D99}]
[HKEY_CLASSES_ROOT\BabylonTBLib.BabylonTB]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{965B54B0-71E0-4611-8DE7-F73FA0B20E26}"= C:\Programmi\Babylon\Babylon Toolbar\BabylonIEToolBar.dll [2007-11-01 15:09 265952]

[HKEY_CLASSES_ROOT\clsid\{965b54b0-71e0-4611-8de7-f73fa0b20e26}]
[HKEY_CLASSES_ROOT\BabylonTBLib.BabylonTB.1]
[HKEY_CLASSES_ROOT\TypeLib\{162484B8-B114-453f-A344-C0B24B0F1D99}]
[HKEY_CLASSES_ROOT\BabylonTBLib.BabylonTB]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LClock"="C:\Programmi\LClock\LClock.exe" [2004-09-19 20:27 65536]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-19 15:39 25088]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Programmi\File comuni\Nero\Lib\NMBgMonitor.exe" [2007-12-13 19:10 103720]
"H/PC Connection Agent"="C:\Programmi\Microsoft ActiveSync\wcescomm.exe" [2006-11-13 14:38 1289000]
"WallpaperChanger"="C:\Programmi\Wallpaper Master\Wallpaper.exe" [2005-01-06 21:28 509952]
"DWQueuedReporting"="C:\PROGRA~1\FILECO~1\MICROS~1\DW\dwtrig20.exe" [2007-08-24 03:18 437160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"="C:\Programmi\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-10-10 19:51 39792]
"SunJavaUpdateSched"="C:\Programmi\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784]
"Media Codec Update Service"="C:\Programmi\Essentials Codec Pack\update.exe" [ ]
"SigmatelSysTrayApp"="stsystra.exe" [2006-03-24 17:30 282624 C:\WINDOWS\stsystra.exe]
"igfxtray"="C:\WINDOWS\system32\igfxtray.exe" [2005-12-13 17:44 98304]
"igfxhkcmd"="C:\WINDOWS\system32\hkcmd.exe" [2005-12-13 17:41 77824]
"igfxpers"="C:\WINDOWS\system32\igfxpers.exe" [2005-12-13 17:45 118784]
"LifeChat"="C:\Programmi\Microsoft LifeChat\LifeChat.exe" [2007-01-26 14:31 259440]
"NBKeyScan"="C:\Programmi\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2007-12-03 14:21 2213160]
"SSBkgdUpdate"="C:\Programmi\File comuni\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2003-09-29 16:00 155648]
"ISUS

bdoriano · Inviato: 24 Mar 2008 21:00 Oggetto:

Ciao supereros18, Ciao

mi fa piacere sapere che il pc funziona meglio. Smile

Purtroppo, l'ultimo log mi sembra incompleto. Per cortesia, caricalo su FreeFileHosting come indicato qui.