Esegui 
![[prego]](http://www.megalab.it/forum/images/smilies/worthy.gif "Prego")
ciaociao
![[boh]](http://www.megalab.it/forum/images/smilies/dntknw.gif "Boh")
ComboFix 08-10-25.01 - Maurino 2008-11-02 21.18.24.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1040.18.940 [GMT 1:00]
Eseguito da: D:\ComboFix.exe
* Resident AV is active
.
((((((((((((((((((((((((((((((((((((( Altre eliminazioni )))))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\WINDOWS\system32\_000006_.tmp.dll
C:\WINDOWS\system32\_000007_.tmp.dll
C:\WINDOWS\system32\_000008_.tmp.dll
.
((((((((((((((((((((((((( Files Creati Da 2008-10-02 al 2008-11-02 )))))))))))))))))))))))))))))))))))
.
2008-11-02 20:13 . 2004-08-19 14:39 221,184 --a------ C:\WINDOWS\system32\wmpns.dll
2008-11-02 19:48 . 2007-07-09 14:09 584,192 -----c--- C:\WINDOWS\system32\dllcache\rpcrt4.dll
2008-11-02 19:45 . 2008-11-02 20:15 1,374 --a------ C:\WINDOWS\imsins.BAK
2008-11-02 00:06 . 2008-11-02 00:06 24 --a------ C:\WINDOWS\popcinfot.dat
2008-11-02 00:04 . 2008-11-02 00:04 <DIR> d-------- C:\Documents and Settings\All Users\Dati applicazioni\PopCap Games
2008-11-02 00:03 . 2008-11-02 00:06 <DIR> d-------- C:\Programmi\Bejeweled Twist
2008-11-01 01:06 . 2008-11-01 23:25 <DIR> d-------- C:\Programmi\Spyware Doctor
2008-11-01 01:06 . 2008-11-01 01:06 <DIR> d-------- C:\Documents and Settings\Maurino\Dati applicazioni\PC Tools
2008-11-01 01:06 . 2008-08-25 12:36 81,288 --a------ C:\WINDOWS\system32\drivers\iksyssec.sys
2008-11-01 01:06 . 2008-08-25 12:36 66,952 --a------ C:\WINDOWS\system32\drivers\iksysflt.sys
2008-11-01 01:06 . 2008-08-25 12:36 40,840 --a------ C:\WINDOWS\system32\drivers\ikfilesec.sys
2008-11-01 01:06 . 2008-06-02 16:19 29,576 --a------ C:\WINDOWS\system32\drivers\kcom.sys
2008-10-30 23:23 . 2008-10-30 23:23 <DIR> d-------- C:\Programmi\Inno Setup 5
2008-10-30 22:33 . 2008-11-01 23:44 <DIR> d-a------ C:\Documents and Settings\All Users\Dati applicazioni\TEMP
2008-10-27 18:29 . 2008-10-27 18:29 <DIR> d-------- C:\Programmi\Proxy Switcher Standard
2008-10-27 18:29 . 2008-10-27 18:29 <DIR> d-------- C:\Documents and Settings\Maurino\Dati applicazioni\WNR
2008-10-26 12:50 . 2008-11-02 21:19 <DIR> d-------- C:\Programmi\PeerGuardian2
2008-10-21 23:15 . 2008-10-21 23:15 <DIR> d--h----- C:\WINDOWS\PIF
2008-10-21 17:29 . 2003-12-24 13:44 83,096 --a------ C:\WINDOWS\system32\SSSensor.dll
2008-10-21 17:29 . 2003-12-24 13:32 56,400 --a------ C:\WINDOWS\system32\drivers\Teefer.sys
2008-10-21 17:29 . 2003-12-24 13:34 18,515 --a------ C:\WINDOWS\system32\drivers\wpsdrvnt.sys
2008-10-21 17:29 . 2003-12-24 13:30 11,914 --a------ C:\WINDOWS\system32\drivers\wg3n.sys
2008-10-21 17:28 . 2008-10-21 17:28 <DIR> d-------- C:\Programmi\Sygate
2008-10-21 16:58 . 2006-11-08 09:51 62,336 --------- C:\WINDOWS\system32\drivers\rspndr.sys
2008-10-21 16:58 . 2006-11-08 09:51 10,752 --------- C:\WINDOWS\system32\rspndr.exe
2008-10-18 14:03 . 2008-10-18 14:05 <DIR> d-------- C:\Programmi\Software by Design
2008-10-18 14:03 . 2005-05-25 06:00 90,112 --------- C:\WINDOWS\SDUnInst.exe
2008-10-17 23:32 . 2008-10-17 23:32 24 -rahs---- C:\WINDOWS\system\OP_CACHE.ATR
2008-10-17 23:32 . 2008-10-17 23:32 12 -rahs---- C:\WINDOWS\system\OP_CACHE.IDX
2008-10-17 22:51 . 2008-10-17 22:51 96 -rahs---- C:\OP_CACHE.ATR
2008-10-17 22:51 . 2008-10-17 22:51 48 -rahs---- C:\OP_CACHE.IDX
2008-10-17 22:42 . 2008-10-21 00:03 14,880 -rahs---- C:\WINDOWS\system32\OP_CACHE.ATR
2008-10-17 22:42 . 2008-10-21 00:03 7,440 -rahs---- C:\WINDOWS\system32\OP_CACHE.IDX
2008-10-17 22:42 . 2008-10-21 00:00 480 -rahs---- C:\WINDOWS\OP_CACHE.ATR
2008-10-17 22:42 . 2008-10-21 00:00 240 -rahs---- C:\WINDOWS\OP_CACHE.IDX
2008-10-17 22:23 . 2008-10-17 22:52 <DIR> dr------- C:\Documents and Settings\LocalService\Preferiti
2008-10-16 22:53 . 2008-10-16 22:53 <DIR> d-------- C:\Programmi\Trend Micro
2008-10-13 21:31 . 2008-10-13 21:31 <DIR> d-------- C:\Programmi\Foxit Software
2008-10-13 20:21 . 2008-10-31 23:50 <DIR> d-------- C:\Documents and Settings\Maurino\Dati applicazioni\Thinstall
2008-10-12 21:28 . 2008-10-17 22:42 <DIR> d-------- C:\Programmi\nLite
2008-10-12 20:15 . 2008-10-17 22:42 <DIR> d-------- C:\Programmi\ClocX
2008-10-12 10:13 . 2008-10-12 10:13 <DIR> d-------- C:\Programmi\Engelmann Media
2008-10-12 09:54 . 2008-10-17 22:42 <DIR> d-------- C:\Programmi\Ntregopt
2008-10-05 21:20 . 2008-10-05 21:20 <DIR> d-------- C:\Programmi\SlySoft
2008-10-04 18:08 . 2008-10-07 18:11 <DIR> d-------- C:\Documents and Settings\Maurino\Dati applicazioni\ImgBurn
2008-10-04 17:07 . 2008-11-01 23:18 <DIR> d-------- C:\Documents and Settings\Maurino\Dati applicazioni\U3
2008-10-04 15:41 . 2008-10-17 22:42 <DIR> d-------- C:\Programmi\ImgBurn
2008-10-04 15:13 . 2008-10-31 23:48 <DIR> d-------- C:\Documents and Settings\Maurino\Dati applicazioni\OpenOffice.org2
2008-10-04 15:06 . 2008-10-04 15:06 <DIR> d-------- C:\Programmi\OpenOffice.org 2.4
2008-10-04 15:05 . 2008-10-04 15:05 <DIR> d-------- C:\Programmi\readmes
2008-10-04 15:05 . 2008-10-04 15:05 <DIR> d-------- C:\Programmi\licenses
2008-10-04 14:21 . 2008-10-17 22:52 <DIR> d-------- C:\Documents and Settings\All Users\Dati applicazioni\UDL
2008-10-04 13:57 . 2004-11-25 06:07 79,679 --a------ C:\WINDOWS\system32\E_FLMADE.DLL
2008-10-04 13:57 . 2003-05-21 03:27 64,000 --a------ C:\WINDOWS\system32\E_FBCBADE.DLL
2008-10-04 13:57 . 2004-09-10 21:12 49,152 --a------ C:\WINDOWS\system32\E_DCINST.DLL
2008-10-04 13:57 . 2000-06-07 02:01 34,304 --a------ C:\WINDOWS\system32\E_FBCHADE.DLL
2008-10-04 13:57 . 2004-08-03 22:01 25,856 --a------ C:\WINDOWS\system32\drivers\usbprint.sys
2008-10-04 13:57 . 2004-08-03 22:01 25,856 --a--c--- C:\WINDOWS\system32\dllcache\usbprint.sys
2008-10-04 13:57 . 2004-08-03 21:58 15,104 --a------ C:\WINDOWS\system32\drivers\usbscan.sys
2008-10-04 13:57 . 2004-08-03 21:58 15,104 --a--c--- C:\WINDOWS\system32\dllcache\usbscan.sys
2008-10-04 13:27 . 2008-10-04 14:22 <DIR> d-------- C:\Programmi\epson
2008-10-04 13:27 . 2005-02-24 23:00 46,080 --a------ C:\WINDOWS\system32\escimgd.dll
2008-10-04 13:27 . 2005-02-24 23:00 29,696 --a------ C:\WINDOWS\system32\escwiad.dll
2008-10-04 13:27 . 2005-02-24 23:00 22,016 --a------ C:\WINDOWS\system32\esccmd.dll
2008-10-04 13:27 . 2008-10-04 13:27 25 --a------ C:\WINDOWS\CDE DX4800EFGIPSD.ini
2008-10-03 22:29 . 2008-10-17 22:52 <DIR> d-------- C:\Documents and Settings\Maurino\.VirtualBox
2008-10-03 22:28 . 2008-10-03 22:28 <DIR> d----c--- C:\WINDOWS\system32\DRVSTORE
2008-10-03 22:28 . 2008-09-12 15:00 95,888 --a------ C:\WINDOWS\system32\drivers\VBoxDrv.sys
2008-10-03 22:28 . 2008-09-12 15:00 41,680 --a------ C:\WINDOWS\system32\drivers\VBoxUSBMon.sys
2008-10-03 22:28 . 2008-09-12 15:00 31,824 --a------ C:\WINDOWS\system32\drivers\VBoxUSB.sys
2008-10-03 18:49 . 2008-10-03 18:49 <DIR> d-------- C:\Documents and Settings\Maurino\Dati applicazioni\Canneverbe_Limited
2008-10-03 18:46 . 2008-10-17 22:42 <DIR> d-------- C:\Programmi\CDBurnerXP
2008-10-03 18:23 . 2008-10-17 22:42 <DIR> d-------- C:\Programmi\The KMPlayer
2008-10-02 20:21 . 2008-10-02 20:21 <DIR> d-------- C:\WINDOWS\Sun
2008-10-02 20:20 . 2008-10-17 22:42 <DIR> d-------- C:\Programmi\Java
2008-10-02 20:20 . 2008-06-10 01:32 73,728 --a------ C:\WINDOWS\system32\javacpl.cpl
2008-10-02 20:19 . 2008-10-02 20:19 <DIR> d-------- C:\Programmi\File comuni\Java
2008-10-02 20:16 . 2008-10-17 22:42 <DIR> d-------- C:\Programmi\uTorrent
2008-10-02 20:16 . 2008-11-02 17:48 <DIR> d-------- C:\Documents and Settings\Maurino\Dati applicazioni\uTorrent
2008-10-02 16:56 . 2008-10-02 16:56 556,682 --a------ C:\WINDOWS\system32\prfh0410.dat
2008-10-02 16:56 . 2008-10-02 16:56 107,448 --a------ C:\WINDOWS\system32\prfc0410.dat
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-11-02 20:24 --------- d-----w C:\Programmi\Packard Bell Data Secure
2008-11-02 18:53 --------- d-----w C:\Programmi\Crawler
2008-11-02 10:00 --------- d-----w C:\Documents and Settings\Maurino\Dati applicazioni\Spyware Terminator
2008-11-01 22:44 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\Spyware Terminator
2008-10-30 20:37 --------- d-----w C:\Programmi\Opera
2008-10-26 10:04 --------- d-----w C:\Programmi\Paint.NET
2008-10-25 11:58 --------- d-----w C:\Programmi\Spyware Terminator
2008-10-24 16:22 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\Acronis
2008-10-17 21:52 --------- d-----w C:\Documents and Settings\Maurino\Dati applicazioni\VMware
2008-10-17 21:52 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\WinZip
2008-10-17 21:42 --------- d-----w C:\Programmi\xp-AntiSpy
2008-10-17 21:42 --------- d-----w C:\Programmi\ProcessExpl
2008-10-17 21:42 --------- d-----w C:\Programmi\PowerMenu
2008-10-17 21:42 --------- d-----w C:\Programmi\HDD Health
2008-10-17 21:42 --------- d-----w C:\Programmi\ESET
2008-10-17 21:42 --------- d-----w C:\Programmi\Eraser
2008-10-17 21:42 --------- d-----w C:\Programmi\CCleaner
2008-10-17 21:41 72 --sha-r C:\Programmi\OP_CACHE.ATR
2008-10-17 21:41 36 --sha-r C:\Programmi\OP_CACHE.IDX
2008-10-17 21:41 --------- d-----w C:\Programmi\AutoPatcher
2008-10-04 13:29 --------- d--h--w C:\Programmi\InstallShield Installation Information
2008-10-04 13:28 --------- d-----w C:\Programmi\File comuni\InstallShield
2008-10-03 21:08 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\VMware
2008-10-03 17:48 --------- d-----w C:\Documents and Settings\LocalService\Dati applicazioni\VMware
2008-10-01 18:55 --------- d-----w C:\Programmi\File comuni\VMware
2008-10-01 17:05 141,312 ----a-w C:\WINDOWS\system32\drivers\sp_rsdrv2.sys
2008-09-30 22:04 --------- d-----w C:\Programmi\Ashampoo
2008-09-30 18:11 512,096 ----a-w C:\WINDOWS\system32\drivers\amon.sys
2008-09-30 18:11 15,424 ----a-w C:\WINDOWS\system32\drivers\nod32drv.sys
2008-09-30 18:00 360,320 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys
2008-09-30 17:31 --------- d-----w C:\Programmi\Xpy
2008-09-29 21:10 --------- d-----w C:\Programmi\Diskeeper Corporation
2008-09-29 21:10 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\Diskeeper Corporation
2008-09-28 20:57 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\Ashampoo
2008-09-28 20:26 --------- d-----w C:\Programmi\MSBuild
2008-09-28 20:20 --------- d-----w C:\Programmi\Reference Assemblies
2008-05-29 21:04 37,375 ----a-w C:\Programmi\openoffice.org-xsltfilter.cab
2008-05-29 21:04 2,607,364 ----a-w C:\Programmi\openoffice.org-writer.cab
2008-05-29 21:03 996,525 ----a-w C:\Programmi\openoffice.org-draw.cab
2008-05-29 21:03 86,870 ----a-w C:\Programmi\openoffice.org-graphicfilter.cab
2008-05-29 21:03 52,092 ----a-w C:\Programmi\openoffice.org-onlineupdate.cab
2008-05-29 21:03 303,642 ----a-w C:\Programmi\openoffice.org-core08.cab
2008-05-29 21:03 207,388 ----a-w C:\Programmi\openoffice.org-testtool.cab
2008-05-29 21:03 2,769 ----a-w C:\Programmi\openoffice.org-emailmerge.cab
2008-05-29 21:03 2,504,975 ----a-w C:\Programmi\openoffice.org-pyuno.cab
2008-05-29 21:03 2,031,954 ----a-w C:\Programmi\openoffice.org-core09.cab
2008-05-29 21:03 118,910 ----a-w C:\Programmi\openoffice.org-javafilter.cab
2008-05-29 21:03 1,340,611 ----a-w C:\Programmi\openoffice.org-impress.cab
2008-05-29 21:03 1,159,768 ----a-w C:\Programmi\openoffice.org-math.cab
2008-05-29 21:02 4,089,145 ----a-w C:\Programmi\openoffice.org-core07.cab
2008-05-29 21:02 28,887,098 ----a-w C:\Programmi\openoffice.org-core06.cab
2008-05-29 20:58 18,634,513 ----a-w C:\Programmi\openoffice.org-core05.cab
2008-05-29 20:57 16,503,595 ----a-w C:\Programmi\openoffice.org-core04.cab
2008-05-29 20:56 9,117,929 ----a-w C:\Programmi\openoffice.org-core03.cab
2008-05-29 20:55 3,859,906 ----a-w C:\Programmi\openoffice.org-core02.cab
2008-05-29 20:55 15,103,154 ----a-w C:\Programmi\openoffice.org-core01.cab
2008-05-29 20:54 43,005 ----a-w C:\Programmi\openoffice.org-activex.cab
2008-05-29 20:54 4,813,253 ----a-w C:\Programmi\openoffice.org-calc.cab
2008-05-29 20:54 4,378,112 ----a-w C:\Programmi\openofficeorg24.msi
2008-05-29 20:54 217 ----a-w C:\Programmi\setup.ini
2008-05-29 20:54 1,869,894 ----a-w C:\Programmi\openoffice.org-base.cab
2008-02-08 20:33 323,584 ----a-w C:\Programmi\setup.exe
2002-03-11 09:06 1,822,520 ----a-w C:\Programmi\instmsiw.exe
2002-03-11 08:45 1,708,856 ----a-w C:\Programmi\instmsia.exe
.
------- Sigcheck -------
2006-04-20 13:18 360576 b2220c618b42a2212a59d91ebd6fc4b4 C:\WINDOWS\$hf_mig$\KB917953\SP2QFE\tcpip.sys
2008-06-20 11:44 360960 744e57c99232201ae98c49168b918f48 C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip.sys
2008-06-20 12:51 361600 9aefa14bd6b182d61e3119fa5f436d3d C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip.sys
2008-06-20 12:59 361600 ad978a1b783b5719720cff204b666c8e C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys
2002-08-29 00:58 332928 244a2f9816bc9b593957281ef577d976 C:\WINDOWS\$NtServicePackUninstall$\tcpip.sys
2004-08-03 22:14 359040 9f4b36614a0fc234525ba224957de55c C:\WINDOWS\$NtUninstallKB917953$\tcpip.sys
2006-04-20 12:51 359808 1dbf125862891817f374f407626967f4 C:\WINDOWS\$NtUninstallKB951748$\tcpip.sys
2008-09-30 19:00 359040 a14fafd66adbd55a86f17a37e5ec4263 C:\WINDOWS\ServicePackFiles\i386\tcpip.sys
2008-04-13 20:20 361344 93ea8d04ec73a85db02eb8805988f733 C:\WINDOWS\SoftwareDistribution\Download\fc8deab818fa7e7ffabfc43e34347907\tcpip.sys
2008-09-30 19:00 360320 3b0c64ef8d0ebb5e43121603ad03545c C:\WINDOWS\system32\dllcache\tcpip.sys
2008-09-30 19:00 360320 3b0c64ef8d0ebb5e43121603ad03545c C:\WINDOWS\system32\drivers\tcpip.sys
.
((((((((((((((((((((((((((((( snapshot@2008-11-02_18.05.56.82 )))))))))))))))))))))))))))))))))))))))))
.
+ 2006-02-15 00:30:07 142,464 ----a-w C:\WINDOWS\$hf_mig$\KB900485\SP2QFE\aec.sys
+ 2005-10-12 23:17:56 15,584 ----a-w C:\WINDOWS\$hf_mig$\KB900485\spmsg.dll
+ 2005-10-12 23:17:57 215,776 ----a-w C:\WINDOWS\$hf_mig$\KB900485\spuninst.exe
+ 2005-10-12 23:17:55 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB900485\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ----a-w C:\WINDOWS\$hf_mig$\KB900485\update\update.exe
+ 2005-10-12 23:18:05 390,880 ----a-w C:\WINDOWS\$hf_mig$\KB900485\update\updspapi.dll
+ 2005-10-20 22:32:10 1,092,096 ----a-w C:\WINDOWS\$hf_mig$\KB910437\SP2QFE\esent.dll
+ 2005-10-12 23:17:58 15,584 ----a-w C:\WINDOWS\$hf_mig$\KB910437\spmsg.dll
+ 2005-10-12 23:17:59 215,776 ----a-w C:\WINDOWS\$hf_mig$\KB910437\spuninst.exe
+ 2005-10-12 23:17:58 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB910437\update\spcustom.dll
+ 2005-10-12 23:18:01 724,192 ----a-w C:\WINDOWS\$hf_mig$\KB910437\update\update.exe
+ 2005-10-12 23:18:06 390,880 ----a-w C:\WINDOWS\$hf_mig$\KB910437\update\updspapi.dll
+ 2006-03-17 01:08:10 262,656 ----a-w C:\WINDOWS\$hf_mig$\KB916595\SP2QFE\http.sys
+ 2005-10-12 23:21:23 15,584 ----a-w C:\WINDOWS\$hf_mig$\KB916595\spmsg.dll
+ 2005-10-12 23:21:23 215,776 ----a-w C:\WINDOWS\$hf_mig$\KB916595\spuninst.exe
+ 2005-10-12 23:21:23 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB916595\update\spcustom.dll
+ 2005-10-12 23:21:25 724,192 ----a-w C:\WINDOWS\$hf_mig$\KB916595\update\update.exe
+ 2005-10-12 23:21:31 390,880 ----a-w C:\WINDOWS\$hf_mig$\KB916595\update\updspapi.dll
+ 2006-06-14 08:50:19 172,416 ----a-w C:\WINDOWS\$hf_mig$\KB920872\SP2QFE\kmixer.sys
+ 2006-06-14 08:50:19 6,272 ----a-w C:\WINDOWS\$hf_mig$\KB920872\SP2QFE\splitter.sys
+ 2006-06-14 09:17:04 82,944 ----a-w C:\WINDOWS\$hf_mig$\KB920872\SP2QFE\wdmaud.sys
+ 2005-10-12 23:17:56 15,584 ----a-w C:\WINDOWS\$hf_mig$\KB920872\spmsg.dll
+ 2005-10-12 23:17:57 215,776 ----a-w C:\WINDOWS\$hf_mig$\KB920872\spuninst.exe
+ 2005-10-12 23:17:55 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB920872\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ----a-w C:\WINDOWS\$hf_mig$\KB920872\update\update.exe
+ 2005-10-12 23:18:05 390,880 ----a-w C:\WINDOWS\$hf_mig$\KB920872\update\updspapi.dll
+ 2006-10-04 14:04:59 73,216 ----a-w C:\WINDOWS\$hf_mig$\KB925720\SP2QFE\magnify.exe
+ 2006-10-04 14:04:57 54,784 ----a-w C:\WINDOWS\$hf_mig$\KB925720\SP2QFE\narrator.exe
+ 2006-10-04 14:04:59 216,576 ----a-w C:\WINDOWS\$hf_mig$\KB925720\SP2QFE\osk.exe
+ 2006-10-04 14:10:21 36,352 ----a-w C:\WINDOWS\$hf_mig$\KB925720\SP2QFE\umandlg.dll
+ 2006-10-04 14:04:59 50,176 ----a-w C:\WINDOWS\$hf_mig$\KB925720\SP2QFE\utilman.exe
+ 2005-10-12 23:21:23 15,584 ----a-w C:\WINDOWS\$hf_mig$\KB925720\spmsg.dll
+ 2005-10-12 23:21:23 215,776 ----a-w C:\WINDOWS\$hf_mig$\KB925720\spuninst.exe
+ 2005-10-12 23:21:23 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB925720\update\spcustom.dll
+ 2005-10-12 23:21:25 724,192 ----a-w C:\WINDOWS\$hf_mig$\KB925720\update\update.exe
+ 2005-10-12 23:21:31 390,880 ----a-w C:\WINDOWS\$hf_mig$\KB925720\update\updspapi.dll
+ 2007-04-18 16:15:38 2,854,400 ----a-w C:\WINDOWS\$hf_mig$\KB927891\SP2QFE\msi31.dll
+ 2006-12-14 08:54:05 15,584 ----a-w C:\WINDOWS\$hf_mig$\KB927891\spmsg.dll
+ 2006-12-14 08:54:05 215,776 ----a-w C:\WINDOWS\$hf_mig$\KB927891\spuninst.exe
+ 2006-12-14 08:54:05 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB927891\update\spcustom.dll
+ 2006-12-14 08:54:05 724,192 ----a-w C:\WINDOWS\$hf_mig$\KB927891\update\update.exe
+ 2006-12-14 08:54:06 390,880 ----a-w C:\WINDOWS\$hf_mig$\KB927891\update\updspapi.dll
+ 2007-02-09 11:23:36 574,976 ----a-w C:\WINDOWS\$hf_mig$\KB930916\SP2QFE\ntfs.sys
+ 2005-10-12 23:17:56 15,584 ----a-w C:\WINDOWS\$hf_mig$\KB930916\spmsg.dll
+ 2005-10-12 23:17:57 215,776 ----a-w C:\WINDOWS\$hf_mig$\KB930916\spuninst.exe
+ 2005-10-12 23:17:55 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB930916\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ----a-w C:\WINDOWS\$hf_mig$\KB930916\update\update.exe
+ 2005-10-12 23:18:05 390,880 ----a-w C:\WINDOWS\$hf_mig$\KB930916\update\updspapi.dll
+ 2007-07-09 13:19:18 582,656 ----a-w C:\WINDOWS\$hf_mig$\KB933729\SP2QFE\rpcrt4.dll
+ 2007-06-18 23:24:36 366,592 ----a-w C:\WINDOWS\$hf_mig$\KB933729\SP2QFE\spru0410.dll
+ 2005-10-12 23:17:58 15,584 ----a-w C:\WINDOWS\$hf_mig$\KB933729\spmsg.dll
+ 2005-10-12 23:17:59 215,776 ----a-w C:\WINDOWS\$hf_mig$\KB933729\spuninst.exe
+ 2005-10-12 23:17:58 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB933729\update\spcustom.dll
+ 2005-10-12 23:18:01 724,192 ----a-w C:\WINDOWS\$hf_mig$\KB933729\update\update.exe
+ 2005-10-12 23:18:06 390,880 ----a-w C:\WINDOWS\$hf_mig$\KB933729\update\updspapi.dll
+ 2007-07-06 09:52:38 72,960 ----a-w C:\WINDOWS\$hf_mig$\KB937894\SP2QFE\mqac.sys
+ 2007-07-06 13:08:28 138,240 ----a-w C:\WINDOWS\$hf_mig$\KB937894\SP2QFE\mqad.dll
+ 2007-07-06 13:08:28 47,104 ----a-w C:\WINDOWS\$hf_mig$\KB937894\SP2QFE\mqdscli.dll
+ 2007-07-06 13:08:28 16,896 ----a-w C:\WINDOWS\$hf_mig$\KB937894\SP2QFE\mqise.dll
+ 2007-07-06 13:08:28 660,992 ----a-w C:\WINDOWS\$hf_mig$\KB937894\SP2QFE\mqqm.dll
+ 2007-07-06 13:08:28 177,152 ----a-w C:\WINDOWS\$hf_mig$\KB937894\SP2QFE\mqrt.dll
+ 2007-07-06 13:08:28 95,744 ----a-w C:\WINDOWS\$hf_mig$\KB937894\SP2QFE\mqsec.dll
+ 2007-07-06 13:08:28 48,640 ----a-w C:\WINDOWS\$hf_mig$\KB937894\SP2QFE\mqupgrd.dll
+ 2007-07-06 13:08:28 519,168 ----a-w C:\WINDOWS\$hf_mig$\KB937894\SP2QFE\mqutil.dll
+ 2005-10-12 23:17:56 15,584 ----a-w C:\WINDOWS\$hf_mig$\KB937894\spmsg.dll
+ 2005-10-12 23:17:57 215,776 ----a-w C:\WINDOWS\$hf_mig$\KB937894\spuninst.exe
+ 2005-10-12 23:17:55 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB937894\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ----a-w C:\WINDOWS\$hf_mig$\KB937894\update\update.exe
+ 2005-10-12 23:18:05 390,880 ----a-w C:\WINDOWS\$hf_mig$\KB937894\update\updspapi.dll
+ 2007-06-13 13:10:37 1,035,776 ----a-w C:\WINDOWS\$hf_mig$\KB938828\SP2QFE\explorer.exe
+ 2005-10-12 23:17:56 15,584 ----a-w C:\WINDOWS\$hf_mig$\KB938828\spmsg.dll
+ 2005-10-12 23:17:57 215,776 ----a-w C:\WINDOWS\$hf_mig$\KB938828\spuninst.exe
+ 2005-10-12 23:17:55 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB938828\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ----a-w C:\WINDOWS\$hf_mig$\KB938828\update\update.exe
+ 2005-10-12 23:18:05 390,880 ----a-w C:\WINDOWS\$hf_mig$\KB938828\update\updspapi.dll
+ 2008-03-20 07:57:45 1,845,888 ----a-w C:\WINDOWS\$hf_mig$\KB941693\SP2QFE\win32k.sys
+ 2007-03-06 01:48:10 15,584 ----a-w C:\WINDOWS\$hf_mig$\KB941693\spmsg.dll
+ 2007-03-06 01:48:15 215,776 ----a-w C:\WINDOWS\$hf_mig$\KB941693\spuninst.exe
+ 2007-03-06 01:48:08 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB941693\update\spcustom.dll
+ 2007-03-06 01:48:33 724,192 ----a-w C:\WINDOWS\$hf_mig$\KB941693\update\update.exe
+ 2007-03-06 01:49:24 390,880 ----a-w C:\WINDOWS\$hf_mig$\KB941693\update\updspapi.dll
+ 2007-12-04 18:29:32 551,936 ----a-w C:\WINDOWS\$hf_mig$\KB943055\SP2QFE\oleaut32.dll
+ 2007-03-06 01:48:10 15,584 ----a-w C:\WINDOWS\$hf_mig$\KB943055\spmsg.dll
+ 2007-03-06 01:48:15 215,776 ----a-w C:\WINDOWS\$hf_mig$\KB943055\spuninst.exe
+ 2007-03-06 01:48:08 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB943055\update\spcustom.dll
+ 2007-03-06 01:48:33 724,192 ----a-w C:\WINDOWS\$hf_mig$\KB943055\update\update.exe
+ 2007-03-06 01:49:24 390,880 ----a-w C:\WINDOWS\$hf_mig$\KB943055\update\updspapi.dll
+ 2007-10-25 16:42:45 8,489,472 ----a-w C:\WINDOWS\$hf_mig$\KB943460\SP2QFE\shell32.dll
+ 2007-10-29 15:07:18 366,592 ----a-w C:\WINDOWS\$hf_mig$\KB943460\SP2QFE\spru0410.dll
+ 2007-03-06 01:48:09 15,584 ----a-w C:\WINDOWS\$hf_mig$\KB943460\spmsg.dll
+ 2007-03-06 01:48:14 215,776 ----a-w C:\WINDOWS\$hf_mig$\KB943460\spuninst.exe
+ 2007-03-06 01:48:07 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB943460\update\spcustom.dll
+ 2007-03-06 01:48:32 724,192 ----a-w C:\WINDOWS\$hf_mig$\KB943460\update\update.exe
+ 2007-03-06 01:49:24 390,880 ----a-w C:\WINDOWS\$hf_mig$\KB943460\update\updspapi.dll
+ 2007-11-07 09:49:53 732,672 ----a-w C:\WINDOWS\$hf_mig$\KB943485\SP2QFE\lsasrv.dll
+ 2007-03-06 01:48:10 15,584 ----a-w C:\WINDOWS\$hf_mig$\KB943485\spmsg.dll
+ 2007-03-06 01:48:15 215,776 ----a-w C:\WINDOWS\$hf_mig$\KB943485\spuninst.exe
+ 2007-03-06 01:48:08 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB943485\update\spcustom.dll
+ 2007-03-06 01:48:33 724,192 ----a-w C:\WINDOWS\$hf_mig$\KB943485\update\update.exe
+ 2007-03-06 01:49:24 390,880 ----a-w C:\WINDOWS\$hf_mig$\KB943485\update\updspapi.dll
+ 2007-11-13 08:47:45 20,480 ----a-w C:\WINDOWS\$hf_mig$\KB944653\SP2QFE\secdrv.sys
+ 2007-03-06 01:48:10 15,584 ----a-w C:\WINDOWS\$hf_mig$\KB944653\spmsg.dll
+ 2007-03-06 01:48:15 215,776 ----a-w C:\WINDOWS\$hf_mig$\KB944653\spuninst.exe
+ 2007-03-06 01:48:08 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB944653\update\spcustom.dll
+ 2007-03-06 01:48:33 724,192 ----a-w C:\WINDOWS\$hf_mig$\KB944653\update\update.exe
+ 2007-03-06 01:49:24 390,880 ----a-w C:\WINDOWS\$hf_mig$\KB944653\update\updspapi.dll
+ 2008-02-20 05:19:51 147,968 ----a-w C:\WINDOWS\$hf_mig$\KB945553\SP2QFE\dnsapi.dll
+ 2008-02-20 18:49:52 45,568 ----a-w C:\WINDOWS\$hf_mig$\KB945553\SP2QFE\dnsrslvr.dll
+ 2007-03-06 01:48:10 15,584 ----a-w C:\WINDOWS\$hf_mig$\KB945553\spmsg.dll
+ 2007-03-06 01:48:15 215,776 ----a-w C:\WINDOWS\$hf_mig$\KB945553\spuninst.exe
+ 2007-03-06 01:48:08 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB945553\update\spcustom.dll
+ 2007-03-06 01:48:33 724,192 ----a-w C:\WINDOWS\$hf_mig$\KB945553\update\update.exe
+ 2007-03-06 01:49:24 390,880 ----a-w C:\WINDOWS\$hf_mig$\KB945553\update\updspapi.dll
+ 2007-12-18 09:38:59 179,712 ----a-w C:\WINDOWS\$hf_mig$\KB946026\SP2QFE\mrxdav.sys
+ 2007-03-06 01:48:10 15,584 ----a-w C:\WINDOWS\$hf_mig$\KB946026\spmsg.dll
+ 2007-03-06 01:48:15 215,776 ----a-w C:\WINDOWS\$hf_mig$\KB946026\spuninst.exe
+ 2007-03-06 01:48:08 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB946026\update\spcustom.dll
+ 2007-03-06 01:48:33 724,192 ----a-w C:\WINDOWS\$hf_mig$\KB946026\update\update.exe
+ 2007-03-06 01:49:24 390,880 ----a-w C:\WINDOWS\$hf_mig$\KB946026\update\updspapi.dll
+ 2008-02-20 06:52:28 282,624 ----a-w C:\WINDOWS\$hf_mig$\KB948590\SP2QFE\gdi32.dll
+ 2007-03-06 01:48:10 15,584 ----a-w C:\WINDOWS\$hf_mig$\KB948590\spmsg.dll
+ 2007-03-06 01:48:15 215,776 ----a-w C:\WINDOWS\$hf_mig$\KB948590\spuninst.exe
+ 2007-03-06 01:48:08 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB948590\update\spcustom.dll
+ 2007-03-06 01:48:33 724,192 ----a-w C:\WINDOWS\$hf_mig$\KB948590\update\update.exe
+ 2007-03-06 01:49:24 390,880 ----a-w C:\WINDOWS\$hf_mig$\KB948590\update\updspapi.dll
+ 2004-08-03 20:39:38 142,464 -c----w C:\WINDOWS\$NtUninstallKB900485$\aec.sys
+ 2005-10-12 23:17:57 215,776 -c----w C:\WINDOWS\$NtUninstallKB900485$\spuninst\spuninst.exe
+ 2005-10-12 23:18:05 390,880 -c----w C:\WINDOWS\$NtUninstallKB900485$\spuninst\updspapi.dll
+ 2004-08-19 13:39:10 1,092,096 -c----w C:\WINDOWS\$NtUninstallKB910437$\esent.dll
+ 2005-10-12 23:17:59 215,776 -c----w C:\WINDOWS\$NtUninstallKB910437$\spuninst\spuninst.exe
+ 2005-10-12 23:18:06 390,880 -c----w C:\WINDOWS\$NtUninstallKB910437$\spuninst\updspapi.dll
+ 2004-08-03 21:00:14 263,040 -c----w C:\WINDOWS\$NtUninstallKB916595$\http.sys
+ 2005-10-12 23:21:23 215,776 -c----w C:\WINDOWS\$NtUninstallKB916595$\spuninst\spuninst.exe
+ 2005-10-12 23:21:31 390,880 -c----w C:\WINDOWS\$NtUninstallKB916595$\spuninst\updspapi.dll
+ 2004-08-03 21:07:50 171,776 -c----w C:\WINDOWS\$NtUninstallKB920872$\kmixer.sys
+ 2004-08-03 21:07:48 6,400 -c----w C:\WINDOWS\$NtUninstallKB920872$\splitter.sys
+ 2005-10-12 23:17:57 215,776 -c----w C:\WINDOWS\$NtUninstallKB920872$\spuninst\spuninst.exe
+ 2005-10-12 23:18:05 390,880 -c----w C:\WINDOWS\$NtUninstallKB920872$\spuninst\updspapi.dll
+ 2004-08-03 21:15:06 82,944 -c----w C:\WINDOWS\$NtUninstallKB920872$\wdmaud.sys
+ 2005-05-03 10:58:36 2,890,240 -c----w C:\WINDOWS\$NtUninstallKB927891$\msi.dll
+ 2006-12-14 08:54:05 215,776 -c----w C:\WINDOWS\$NtUninstallKB927891$\spuninst\spuninst.exe
+ 2006-12-14 08:54:06 390,880 -c----w C:\WINDOWS\$NtUninstallKB927891$\spuninst\updspapi.dll
+ 2004-08-03 21:15:10 574,592 -c----w C:\WINDOWS\$NtUninstallKB930916$\ntfs.sys
+ 2005-10-12 23:17:57 215,776 -c----w C:\WINDOWS\$NtUninstallKB930916$\spuninst\spuninst.exe
+ 2005-10-12 23:18:05 390,880 -c----w C:\WINDOWS\$NtUninstallKB930916$\spuninst\updspapi.dll
+ 2004-08-19 13:39:26 581,120 -c----w C:\WINDOWS\$NtUninstallKB933729$\rpcrt4.dll
+ 2005-10-12 23:17:59 215,776 -c----w C:\WINDOWS\$NtUninstallKB933729$\spuninst\spuninst.exe
+ 2005-10-12 23:18:06 390,880 -c----w C:\WINDOWS\$NtUninstallKB933729$\spuninst\updspapi.dll
+ 2006-01-19 19:29:34 215,776 -c----w C:\WINDOWS\$NtUninstallKB936357$\spuninst\spuninst.exe
+ 2006-01-19 19:29:34 390,880 -c----w C:\WINDOWS\$NtUninstallKB936357$\spuninst\updspapi.dll
+ 2004-09-01 22:27:22 209,280 -c----w C:\WINDOWS\$NtUninstallKB936357$\update.sys
+ 2005-06-28 09:23:36 215,776 -c----w C:\WINDOWS\$NtUninstallKB936782_WMP9$\spuninst\spuninst.exe
+ 2005-06-28 09:23:54 371,424 -c----w C:\WINDOWS\$NtUninstallKB936782_WMP9$\spuninst\updspapi.dll
+ 2004-08-19 13:39:34 4,874,240 -c----w C:\WINDOWS\$NtUninstallKB936782_WMP9$\wmp.dll
+ 2004-08-03 20:58:22 72,960 -c----w C:\WINDOWS\$NtUninstallKB937894$\mqac.sys
+ 2004-08-19 13:39:18 138,240 -c----w C:\WINDOWS\$NtUninstallKB937894$\mqad.dll
+ 2004-08-19 13:39:18 47,104 -c----w C:\WINDOWS\$NtUninstallKB937894$\mqdscli.dll
+ 2004-08-19 13:39:18 16,896 -c----w C:\WINDOWS\$NtUninstallKB937894$\mqise.dll
+ 2004-08-19 13:39:18 660,992 -c----w C:\WINDOWS\$NtUninstallKB937894$\mqqm.dll
+ 2004-08-19 13:39:18 177,152 -c----w C:\WINDOWS\$NtUninstallKB937894$\mqrt.dll
+ 2004-08-19 13:39:18 95,744 -c----w C:\WINDOWS\$NtUninstallKB937894$\mqsec.dll
+ 2004-08-19 13:39:18 48,640 -c----w C:\WINDOWS\$NtUninstallKB937894$\mqupgrd.dll
+ 2004-08-19 13:39:18 519,168 -c----w C:\WINDOWS\$NtUninstallKB937894$\mqutil.dll
+ 2005-10-12 23:17:57 215,776 -c----w C:\WINDOWS\$NtUninstallKB937894$\spuninst\spuninst.exe
+ 2005-10-12 23:18:05 390,880 -c----w C:\WINDOWS\$NtUninstallKB937894$\spuninst\updspapi.dll
+ 2004-08-19 13:39:36 1,034,752 -c----w C:\WINDOWS\$NtUninstallKB938828$\explorer.exe
+ 2005-10-12 23:17:57 215,776 -c----w C:\WINDOWS\$NtUninstallKB938828$\spuninst\spuninst.exe
+ 2005-10-12 23:18:05 390,880 -c----w C:\WINDOWS\$NtUninstallKB938828$\spuninst\updspapi.dll
+ 2005-06-28 09:23:36 215,776 -c----w C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe
+ 2005-06-28 09:23:54 371,424 -c----w C:\WINDOWS\$NtUninstallKB941569$\spuninst\updspapi.dll
+ 2004-08-19 13:39:32 230,400 -c----w C:\WINDOWS\$NtUninstallKB941569$\wmasf.dll
+ 2004-08-19 13:39:54 2,105,344 -c----w C:\WINDOWS\$NtUninstallKB941569$\wmvcore.dll
+ 2007-03-06 01:48:15 215,776 -c----w C:\WINDOWS\$NtUninstallKB941693$\spuninst\spuninst.exe
+ 2007-03-06 01:49:24 390,880 -c----w C:\WINDOWS\$NtUninstallKB941693$\spuninst\updspapi.dll
+ 2007-03-08 15:33:54 1,843,584 -c----w C:\WINDOWS\$NtUninstallKB941693$\win32k.sys
+ 2007-05-17 11:29:12 549,376 -c----w C:\WINDOWS\$NtUninstallKB943055$\oleaut32.dll
+ 2007-03-06 01:48:15 215,776 -c----w C:\WINDOWS\$NtUninstallKB943055$\spuninst\spuninst.exe
+ 2007-03-06 01:49:24 390,880 -c----w C:\WINDOWS\$NtUninstallKB943055$\spuninst\updspapi.dll
+ 2006-12-19 21:50:30 8,482,816 -c----w C:\WINDOWS\$NtUninstallKB943460$\shell32.dll
+ 2007-03-06 01:48:14 215,776 -c----w C:\WINDOWS\$NtUninstallKB943460$\spuninst\spuninst.exe
+ 2007-03-06 01:49:24 390,880 -c----w C:\WINDOWS\$NtUninstallKB943460$\spuninst\updspapi.dll
+ 2006-08-17 12:29:46 727,552 -c----w C:\WINDOWS\$NtUninstallKB943485$\lsasrv.dll
+ 2007-03-06 01:48:15 215,776 -c----w C:\WINDOWS\$NtUninstallKB943485$\spuninst\spuninst.exe
+ 2007-03-06 01:49:24 390,880 -c----w C:\WINDOWS\$NtUninstallKB943485$\spuninst\updspapi.dll
+ 2001-08-31 10:00:00 27,440 -c----w C:\WINDOWS\$NtUninstallKB944653$\secdrv.sys
+ 2007-03-06 01:48:15 215,776 -c----w C:\WINDOWS\$NtUninstallKB944653$\spuninst\spuninst.exe
+ 2007-03-06 01:49:24 390,880 -c----w C:\WINDOWS\$NtUninstallKB944653$\spuninst\updspapi.dll
+ 2004-08-19 13:39:08 45,568 -c----w C:\WINDOWS\$NtUninstallKB945553$\dnsrslvr.dll
+ 2007-03-06 01:48:15 215,776 -c----w C:\WINDOWS\$NtUninstallKB945553$\spuninst\spuninst.exe
+ 2007-03-06 01:49:24 390,880 -c----w C:\WINDOWS\$NtUninstallKB945553$\spuninst\updspapi.dll
+ 2004-08-03 21:00:58 181,248 -c----w C:\WINDOWS\$NtUninstallKB946026$\mrxdav.sys
+ 2007-03-06 01:48:15 215,776 -c----w C:\WINDOWS\$NtUninstallKB946026$\spuninst\spuninst.exe
+ 2007-03-06 01:49:24 390,880 -c----w C:\WINDOWS\$NtUninstallKB946026$\spuninst\updspapi.dll
+ 2007-06-19 13:30:47 282,112 -c----w C:\WINDOWS\$NtUninstallKB948590$\gdi32.dll
+ 2007-03-06 01:48:15 215,776 -c----w C:\WINDOWS\$NtUninstallKB948590$\spuninst\spuninst.exe
+ 2007-03-06 01:49:24 390,880 -c----w C:\WINDOWS\$NtUninstallKB948590$\spuninst\updspapi.dll
+ 2006-02-15 00:22:26 142,464 ------w C:\WINDOWS\Driver Cache\i386\aec.sys
+ 2006-03-17 00:33:10 262,784 ------w C:\WINDOWS\Driver Cache\i386\http.sys
+ 2006-06-14 08:47:45 172,416 ------w C:\WINDOWS\Driver Cache\i386\kmixer.sys
+ 2006-06-14 08:47:46 6,400 ------w C:\WINDOWS\Driver Cache\i386\splitter.sys
+ 2006-06-14 09:00:45 82,944 ------w C:\WINDOWS\Driver Cache\i386\wdmaud.sys
- 2004-08-19 13:39:36 1,034,752 ----a-w C:\WINDOWS\explorer.exe
+ 2007-06-13 13:22:28 1,035,776 ----a-w C:\WINDOWS\explorer.exe
- 2008-10-20 23:01:05 34,308 ----a-w C:\WINDOWS\system32\BASSMOD.dll
+ 2008-11-02 18:45:01 34,308 ----a-w C:\WINDOWS\system32\BASSMOD.dll
- 2004-08-03 20:39:38 142,464 -c--a-w C:\WINDOWS\system32\dllcache\aec.sys
+ 2006-02-15 00:22:26 142,464 -c--a-w C:\WINDOWS\system32\dllcache\aec.sys
+ 2008-02-20 05:33:54 45,568 -c----w C:\WINDOWS\system32\dllcache\dnsrslvr.dll
+ 2007-06-13 13:22:28 1,035,776 -c----w C:\WINDOWS\system32\dllcache\explorer.exe
- 2007-06-19 13:30:47 282,112 -c----w C:\WINDOWS\system32\dllcache\gdi32.dll
+ 2008-02-20 06:50:40 282,624 -c----w C:\WINDOWS\system32\dllcache\gdi32.dll
- 2004-08-03 21:07:50 171,776 -c--a-w C:\WINDOWS\system32\dllcache\kmixer.sys
+ 2006-06-14 08:47:45 172,416 -c--a-w C:\WINDOWS\system32\dllcache\kmixer.sys
- 2006-08-17 12:29:46 727,552 -c----w C:\WINDOWS\system32\dllcache\lsasrv.dll
+ 2007-11-07 09:27:27 727,552 -c----w C:\WINDOWS\system32\dllcache\lsasrv.dll
+ 2006-10-04 13:32:26 73,216 -c----w C:\WINDOWS\system32\dllcache\magnify.exe
+ 2007-07-06 10:05:47 72,960 -c----w C:\WINDOWS\system32\dllcache\mqac.sys
+ 2007-07-06 12:50:07 138,240 -c----w C:\WINDOWS\system32\dllcache\mqad.dll
+ 2007-07-06 12:50:07 47,104 -c----w C:\WINDOWS\system32\dllcache\mqdscli.dll
+ 2007-07-06 12:50:07 16,896 -c----w C:\WINDOWS\system32\dllcache\mqise.dll
+ 2007-07-06 12:50:07 660,992 -c----w C:\WINDOWS\system32\dllcache\mqqm.dll
+ 2007-07-06 12:50:07 177,152 -c----w C:\WINDOWS\system32\dllcache\mqrt.dll
+ 2007-07-06 12:50:07 95,744 -c----w C:\WINDOWS\system32\dllcache\mqsec.dll
+ 2007-07-06 12:50:07 48,640 -c----w C:\WINDOWS\system32\dllcache\mqupgrd.dll
+ 2007-07-06 12:50:07 519,168 -c----w C:\WINDOWS\system32\dllcache\mqutil.dll
+ 2007-12-18 09:51:35 179,584 -c----w C:\WINDOWS\system32\dllcache\mrxdav.sys
+ 2006-10-04 13:32:23 54,784 -c----w C:\WINDOWS\system32\dllcache\narrator.exe
+ 2007-02-09 11:10:35 574,464 -c----w C:\WINDOWS\system32\dllcache\ntfs.sys
- 2007-05-17 11:29:12 549,376 -c----w C:\WINDOWS\system32\dllcache\oleaut32.dll
+ 2007-12-04 18:40:54 550,912 -c----w C:\WINDOWS\system32\dllcache\oleaut32.dll
+ 2006-10-04 13:32:25 216,576 -c----w C:\WINDOWS\system32\dllcache\osk.exe
- 2006-12-19 21:50:30 8,482,816 -c----w C:\WINDOWS\system32\dllcache\shell32.dll
+ 2007-10-25 16:54:49 8,483,840 -c----w C:\WINDOWS\system32\dllcache\shell32.dll
- 2004-08-03 21:07:48 6,400 -c--a-w C:\WINDOWS\system32\dllcache\splitter.sys
+ 2006-06-14 08:47:46 6,400 -c--a-w C:\WINDOWS\system32\dllcache\splitter.sys
+ 2006-10-04 13:33:45 36,352 -c----w C:\WINDOWS\system32\dllcache\umandlg.dll
+ 2007-04-23 10:14:23 364,160 -c----w C:\WINDOWS\system32\dllcache\update.sys
+ 2006-10-04 13:32:20 50,176 -c----w C:\WINDOWS\system32\dllcache\utilman.exe
- 2004-08-03 21:15:06 82,944 -c--a-w C:\WINDOWS\system32\dllcache\wdmaud.sys
+ 2006-06-14 09:00:45 82,944 -c--a-w C:\WINDOWS\system32\dllcache\wdmaud.sys
+ 2008-09-05 22:30:52 267,304 -c----w C:\WINDOWS\system32\dllcache\wgaLogon.dll
+ 2008-09-05 22:30:06 952,360 -c----w C:\WINDOWS\system32\dllcache\WgaTray.exe
- 2007-03-08 15:33:54 1,843,584 -c----w C:\WINDOWS\system32\dllcache\win32k.sys
+ 2008-03-20 08:06:49 1,845,248 -c----w C:\WINDOWS\system32\dllcache\win32k.sys
+ 2007-10-25 09:00:50 230,912 -c----w C:\WINDOWS\system32\dllcache\wmasf.dll
+ 2007-10-25 09:01:10 2,109,440 -c----w C:\WINDOWS\system32\dllcache\wmvcore.dll
- 2004-08-19 13:39:08 45,568 ----a-w C:\WINDOWS\system32\dnsrslvr.dll
+ 2008-02-20 05:33:54 45,568 ----a-w C:\WINDOWS\system32\dnsrslvr.dll
- 2004-08-03 20:39:38 142,464 ----a-w C:\WINDOWS\system32\drivers\aec.sys
+ 2006-02-15 00:22:26 142,464 ----a-w C:\WINDOWS\system32\drivers\aec.sys
- 2004-08-03 21:00:14 263,040 ------w C:\WINDOWS\system32\drivers\http.sys
+ 2006-03-17 00:33:10 262,784 ------w C:\WINDOWS\system32\drivers\http.sys
- 2004-08-03 21:07:50 171,776 ----a-w C:\WINDOWS\system32\drivers\kmixer.sys
+ 2006-06-14 08:47:45 172,416 ----a-w C:\WINDOWS\system32\drivers\kmixer.sys
- 2004-08-03 20:58:22 72,960 ----a-w C:\WINDOWS\system32\drivers\mqac.sys
+ 2007-07-06 10:05:47 72,960 ----a-w C:\WINDOWS\system32\drivers\mqac.sys
- 2004-08-03 21:00:58 181,248 ----a-w C:\WINDOWS\system32\drivers\mrxdav.sys
+ 2007-12-18 09:51:35 179,584 ----a-w C:\WINDOWS\system32\drivers\mrxdav.sys
- 2004-08-03 21:15:10 574,592 ----a-w C:\WINDOWS\system32\drivers\ntfs.sys
+ 2007-02-09 11:10:35 574,464 ----a-w C:\WINDOWS\system32\drivers\ntfs.sys
- 2001-08-31 10:00:00 27,440 ----a-w C:\WINDOWS\system32\drivers\secdrv.sys
+ 2007-11-13 10:25:54 20,480 ----a-w C:\WINDOWS\system32\drivers\secdrv.sys
- 2004-08-03 21:07:48 6,400 ----a-w C:\WINDOWS\system32\drivers\splitter.sys
+ 2006-06-14 08:47:46 6,400 ----a-w C:\WINDOWS\system32\drivers\splitter.sys
- 2004-09-01 22:27:22 209,280 ----a-w C:\WINDOWS\system32\drivers\update.sys
+ 2007-04-23 10:14:23 364,160 ----a-w C:\WINDOWS\system32\drivers\update.sys
- 2004-08-03 21:15:06 82,944 ----a-w C:\WINDOWS\system32\drivers\wdmaud.sys
+ 2006-06-14 09:00:45 82,944 ----a-w C:\WINDOWS\system32\drivers\wdmaud.sys
- 2004-08-19 13:39:10 1,092,096 ----a-w C:\WINDOWS\system32\esent.dll
+ 2005-10-20 22:25:53 1,092,096 ----a-w C:\WINDOWS\system32\esent.dll
- 2008-10-05 20:24:44 118,152 ----a-w C:\WINDOWS\system32\FNTCACHE.DAT
+ 2008-11-02 20:22:04 118,152 ----a-w C:\WINDOWS\system32\FNTCACHE.DAT
- 2007-06-19 13:30:47 282,112 ----a-w C:\WINDOWS\system32\gdi32.dll
+ 2008-02-20 06:50:40 282,624 ----a-w C:\WINDOWS\system32\gdi32.dll
+ 2008-09-05 22:30:06 1,480,232 ------w C:\WINDOWS\system32\LegitCheckControl.dll
- 2006-08-17 12:29:46 727,552 ----a-w C:\WINDOWS\system32\lsasrv.dll
+ 2007-11-07 09:27:27 727,552 ----a-w C:\WINDOWS\system32\lsasrv.dll
- 2004-08-19 13:39:38 73,216 ----a-w C:\WINDOWS\system32\magnify.exe
+ 2006-10-04 13:32:26 73,216 ----a-w C:\WINDOWS\system32\magnify.exe
- 2004-08-19 13:39:18 138,240 ----a-w C:\WINDOWS\system32\mqad.dll
+ 2007-07-06 12:50:07 138,240 ----a-w C:\WINDOWS\system32\mqad.dll
- 2004-08-19 13:39:18 47,104 ----a-w C:\WINDOWS\system32\mqdscli.dll
+ 2007-07-06 12:50:07 47,104 ----a-w C:\WINDOWS\system32\mqdscli.dll
- 2004-08-19 13:39:18 16,896 ----a-w C:\WINDOWS\system32\mqise.dll
+ 2007-07-06 12:50:07 16,896 ----a-w C:\WINDOWS\system32\mqise.dll
- 2004-08-19 13:39:18 660,992 ----a-w C:\WINDOWS\system32\mqqm.dll
+ 2007-07-06 12:50:07 660,992 ----a-w C:\WINDOWS\system32\mqqm.dll
- 2004-08-19 13:39:18 177,152 ----a-w C:\WINDOWS\system32\mqrt.dll
+ 2007-07-06 12:50:07 177,152 ----a-w C:\WINDOWS\system32\mqrt.dll
- 2004-08-19 13:39:18 95,744 ----a-w C:\WINDOWS\system32\mqsec.dll
+ 2007-07-06 12:50:07 95,744 ----a-w C:\WINDOWS\system32\mqsec.dll
- 2004-08-19 13:39:18 48,640 ----a-w C:\WINDOWS\system32\mqupgrd.dll
+ 2007-07-06 12:50:07 48,640 ----a-w C:\WINDOWS\system32\mqupgrd.dll
- 2004-08-19 13:39:18 519,168 ----a-w C:\WINDOWS\system32\mqutil.dll
+ 2007-07-06 12:50:07 519,168 ----a-w C:\WINDOWS\system32\mqutil.dll
- 2005-05-03 10:58:36 2,890,240 ----a-w C:\WINDOWS\system32\msi.dll
+ 2007-04-18 16:14:23 2,854,400 ----a-w C:\WINDOWS\system32\msi.dll
- 2004-08-19 13:39:42 54,784 ----a-w C:\WINDOWS\system32\narrator.exe
+ 2006-10-04 13:32:23 54,784 ----a-w C:\WINDOWS\system32\narrator.exe
- 2007-05-17 11:29:12 549,376 ----a-w C:\WINDOWS\system32\oleaut32.dll
+ 2007-12-04 18:40:54 550,912 ----a-w C:\WINDOWS\system32\oleaut32.dll
- 2004-08-19 13:39:44 216,576 ----a-w C:\WINDOWS\system32\osk.exe
+ 2006-10-04 13:32:25 216,576 ----a-w C:\WINDOWS\system32\osk.exe
- 2008-11-01 00:07:56 92,222 ----a-w C:\WINDOWS\system32\perfc009.dat
+ 2008-11-02 20:25:41 92,222 ----a-w C:\WINDOWS\system32\perfc009.dat
- 2008-11-01 00:07:56 110,090 ----a-w C:\WINDOWS\system32\perfc010.dat
+ 2008-11-02 20:25:41 110,090 ----a-w C:\WINDOWS\system32\perfc010.dat
- 2008-11-01 00:07:56 505,558 ----a-w C:\WINDOWS\system32\perfh009.dat
+ 2008-11-02 20:25:41 505,558 ----a-w C:\WINDOWS\system32\perfh009.dat
- 2008-11-01 00:07:56 562,422 ----a-w C:\WINDOWS\system32\perfh010.dat
+ 2008-11-02 20:25:41 562,422 ----a-w C:\WINDOWS\system32\perfh010.dat
- 2004-08-19 13:39:26 581,120 ----a-w C:\WINDOWS\system32\rpcrt4.dll
+ 2007-07-09 13:09:43 584,192 ----a-w C:\WINDOWS\system32\rpcrt4.dll
- 2006-12-19 21:50:30 8,482,816 ----a-w C:\WINDOWS\system32\shell32.dll
+ 2007-10-25 16:54:49 8,483,840 ----a-w C:\WINDOWS\system32\shell32.dll
+ 2004-08-19 14:38:30 680,448 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\PCL5ERES.DLL
- 2004-08-19 13:39:30 36,352 ----a-w C:\WINDOWS\system32\umandlg.dll
+ 2006-10-04 13:33:45 36,352 ----a-w C:\WINDOWS\system32\umandlg.dll
- 2004-08-19 13:39:46 50,176 ----a-w C:\WINDOWS\system32\utilman.exe
+ 2006-10-04 13:32:20 50,176 ----a-w C:\WINDOWS\system32\utilman.exe
+ 2008-09-05 22:30:52 267,304 ------w C:\WINDOWS\system32\WgaLogon.dll
+ 2008-09-05 22:30:06 952,360 ------w C:\WINDOWS\system32\WgaTray.exe
- 2007-03-08 15:33:54 1,843,584 ----a-w C:\WINDOWS\system32\win32k.sys
+ 2008-03-20 08:06:49 1,845,248 ----a-w C:\WINDOWS\system32\win32k.sys
- 2004-08-19 13:39:32 230,400 ----a-w C:\WINDOWS\system32\wmasf.dll
+ 2007-10-25 09:00:50 230,912 ----a-w C:\WINDOWS\system32\wmasf.dll
- 2004-08-19 13:39:34 4,874,240 ------w C:\WINDOWS\system32\wmp.dll
+ 2007-04-30 01:22:16 4,734,976 ------w C:\WINDOWS\system32\wmp.dll
- 2004-08-19 13:39:54 2,105,344 ----a-w C:\WINDOWS\system32\wmvcore.dll
+ 2007-10-25 09:01:10 2,109,440 ----a-w C:\WINDOWS\system32\wmvcore.dll
+ 2008-11-02 20:22:30 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_550.dat
.
-- Snapshot per reimpostare la data corrente --
.
((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* i valori vuoti & legittimi/default non sono visualizzati.
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-19 15360]
"Packard Bell Data Secure"="C:\Programmi\Packard Bell Data Secure\PBDataSecure.exe" [2006-06-20 2361856]
"Eraser"="C:\Programmi\Eraser\Eraser.exe" [2007-12-23 916240]
"UIWatcher"="C:\Programmi\Ashampoo\Ashampoo UnInstaller Platinum 2\UIWatcher.exe" [2008-06-02 1741184]
"PeerGuardian"="C:\Programmi\PeerGuardian2\pg2.exe" [2005-09-18 1421824]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2004-05-14 3784704]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2004-05-14 81920]
"SpywareTerminator"="C:\Programmi\Spyware Terminator\SpywareTerminatorShield.exe" [2008-10-01 1783808]
"Acronis Scheduler2 Service"="C:\Programmi\File comuni\Acronis\Schedule2\schedhlp.exe" [2006-12-12 87584]
"TrueImageMonitor.exe"="C:\Programmi\Acronis\TrueImageHome\TrueImageMonitor.exe" [2006-12-12 1186904]
"AcronisTimounterMonitor"="C:\Programmi\Acronis\TrueImageHome\TimounterMonitor.exe" [2006-12-12 1962736]
"PowerMenu"="C:\Programmi\PowerMenu\PowerMenu.exe" [2002-12-20 57344]
"nod32kui"="C:\Programmi\Eset\nod32kui.exe" [2008-09-30 949376]
"EPSON Stylus DX4800 Series"="C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE" [2005-02-02 98304]
"ClocX"="C:\Programmi\ClocX\ClocX.exe" [2007-07-26 270336]
"SmcService"="C:\PROGRA~1\Sygate\SPF\smc.exe" [2003-12-24 2344160]
"nwiz"="nwiz.exe" [2004-05-14 C:\WINDOWS\system32\nwiz.exe]
"Run StartupMonitor"="StartupMonitor.exe" [2000-05-20 C:\WINDOWS\StartupMonitor.exe]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2004-08-19 15360]
C:\Documents and Settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\
OP_CACHE.ATR [2008-10-17 24]
OP_CACHE.IDX [2008-10-17 12]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"SynchronousMachineGroupPolicy"= 0 (0x0)
"SynchronousUserGroupPolicy"= 0 (0x0)
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoStrCmpLogical"= 1 (0x1)
"NoResolveSearch"= 1 (0x1)
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoSMBalloonTip"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Programmi\\uTorrent\\uTorrent.exe"=
R0 videX32;videX32;C:\WINDOWS\system32\DRIVERS\videX32.sys [2006-02-23 9728]
R1 sp_rsdrv2;Spyware Terminator Driver 2;C:\WINDOWS\system32\drivers\sp_rsdrv2.sys [2008-10-01 141312]
R1 VBoxDrv;VirtualBox Service;C:\WINDOWS\system32\DRIVERS\VBoxDrv.sys [2008-09-12 95888]
R1 VBoxUSBMon;VirtualBox USB Monitor Driver;C:\WINDOWS\system32\DRIVERS\VBoxUSBMon.sys [2008-09-12 41680]
R2 NMSAccessU;NMSAccessU;C:\Programmi\CDBurnerXP\NMSAccessU.exe [2008-06-15 71096]
S3 CY_FX_AT;USB Storage Adapter FX_AT (CY);C:\WINDOWS\system32\DRIVERS\CY_FX_AT.SYS [2006-05-24 33536]
S3 VBoxUSB;VirtualBox USB;C:\WINDOWS\system32\Drivers\VBoxUSB.sys [2008-09-12 31824]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\I]
\Shell\AutoRun\command - I:\LaunchU3.exe -a
*Newly Created Service* - PGFILTER
*Newly Created Service* - SPUPDSVC
.
.
------- Supplementare di scansione -------
.
FireFox -: Profile - C:\Documents and Settings\Maurino\Dati applicazioni\Mozilla\Firefox\Profiles\8tamnm53.default\
FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://www.yahoo.it/
.
**************************************************************************
catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-11-02 21:23:46
Windows 5.1.2600 Service Pack 2 NTFS
scansione processi nascosti ...
scansione entrate autostart nascoste ...
Scansione files nascosti ...
Scansione completata con successo
Files nascosti: 0
**************************************************************************
.
--------------------- DLLs Carregadas Sob os Processos em Execução ---------------------
PROCESSO: C:\WINDOWS\system32\lsass.exe
-> C:\Programmi\Eset\pr_imon.dll
.
------------------------ Altri processi in esecuzione ------------------------
.
C:\Programmi\Sygate\SPF\Smc.exe
C:\Programmi\File comuni\Acronis\Schedule2\schedul2.exe
C:\Programmi\Diskeeper Corporation\Diskeeper\DkService.exe
C:\Programmi\ESET\nod32krn.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Programmi\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\system32\rundll32.exe
.
**************************************************************************
.
Ora fine scansione: 2008-11-02 21:26:49 - macchina è stato riavviato
ComboFix-quarantined-files.txt 2008-11-02 20:26:42
ComboFix2.txt 2008-11-02 17:06:18
Pre-Run: 77.243.330.560 byte disponibili
Post-Run: 77,250,748,416 byte disponibili
605 --- E O F --- 2008-11-02 19:15:48
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1040.18.940 [GMT 1:00]
Eseguito da: D:\ComboFix.exe
* Resident AV is active
.
((((((((((((((((((((((((((((((((((((( Altre eliminazioni )))))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\WINDOWS\system32\_000006_.tmp.dll
C:\WINDOWS\system32\_000007_.tmp.dll
C:\WINDOWS\system32\_000008_.tmp.dll
.
((((((((((((((((((((((((( Files Creati Da 2008-10-02 al 2008-11-02 )))))))))))))))))))))))))))))))))))
.
2008-11-02 20:13 . 2004-08-19 14:39 221,184 --a------ C:\WINDOWS\system32\wmpns.dll
2008-11-02 19:48 . 2007-07-09 14:09 584,192 -----c--- C:\WINDOWS\system32\dllcache\rpcrt4.dll
2008-11-02 19:45 . 2008-11-02 20:15 1,374 --a------ C:\WINDOWS\imsins.BAK
2008-11-02 00:06 . 2008-11-02 00:06 24 --a------ C:\WINDOWS\popcinfot.dat
2008-11-02 00:04 . 2008-11-02 00:04 <DIR> d-------- C:\Documents and Settings\All Users\Dati applicazioni\PopCap Games
2008-11-02 00:03 . 2008-11-02 00:06 <DIR> d-------- C:\Programmi\Bejeweled Twist
2008-11-01 01:06 . 2008-11-01 23:25 <DIR> d-------- C:\Programmi\Spyware Doctor
2008-11-01 01:06 . 2008-11-01 01:06 <DIR> d-------- C:\Documents and Settings\Maurino\Dati applicazioni\PC Tools
2008-11-01 01:06 . 2008-08-25 12:36 81,288 --a------ C:\WINDOWS\system32\drivers\iksyssec.sys
2008-11-01 01:06 . 2008-08-25 12:36 66,952 --a------ C:\WINDOWS\system32\drivers\iksysflt.sys
2008-11-01 01:06 . 2008-08-25 12:36 40,840 --a------ C:\WINDOWS\system32\drivers\ikfilesec.sys
2008-11-01 01:06 . 2008-06-02 16:19 29,576 --a------ C:\WINDOWS\system32\drivers\kcom.sys
2008-10-30 23:23 . 2008-10-30 23:23 <DIR> d-------- C:\Programmi\Inno Setup 5
2008-10-30 22:33 . 2008-11-01 23:44 <DIR> d-a------ C:\Documents and Settings\All Users\Dati applicazioni\TEMP
2008-10-27 18:29 . 2008-10-27 18:29 <DIR> d-------- C:\Programmi\Proxy Switcher Standard
2008-10-27 18:29 . 2008-10-27 18:29 <DIR> d-------- C:\Documents and Settings\Maurino\Dati applicazioni\WNR
2008-10-26 12:50 . 2008-11-02 21:19 <DIR> d-------- C:\Programmi\PeerGuardian2
2008-10-21 23:15 . 2008-10-21 23:15 <DIR> d--h----- C:\WINDOWS\PIF
2008-10-21 17:29 . 2003-12-24 13:44 83,096 --a------ C:\WINDOWS\system32\SSSensor.dll
2008-10-21 17:29 . 2003-12-24 13:32 56,400 --a------ C:\WINDOWS\system32\drivers\Teefer.sys
2008-10-21 17:29 . 2003-12-24 13:34 18,515 --a------ C:\WINDOWS\system32\drivers\wpsdrvnt.sys
2008-10-21 17:29 . 2003-12-24 13:30 11,914 --a------ C:\WINDOWS\system32\drivers\wg3n.sys
2008-10-21 17:28 . 2008-10-21 17:28 <DIR> d-------- C:\Programmi\Sygate
2008-10-21 16:58 . 2006-11-08 09:51 62,336 --------- C:\WINDOWS\system32\drivers\rspndr.sys
2008-10-21 16:58 . 2006-11-08 09:51 10,752 --------- C:\WINDOWS\system32\rspndr.exe
2008-10-18 14:03 . 2008-10-18 14:05 <DIR> d-------- C:\Programmi\Software by Design
2008-10-18 14:03 . 2005-05-25 06:00 90,112 --------- C:\WINDOWS\SDUnInst.exe
2008-10-17 23:32 . 2008-10-17 23:32 24 -rahs---- C:\WINDOWS\system\OP_CACHE.ATR
2008-10-17 23:32 . 2008-10-17 23:32 12 -rahs---- C:\WINDOWS\system\OP_CACHE.IDX
2008-10-17 22:51 . 2008-10-17 22:51 96 -rahs---- C:\OP_CACHE.ATR
2008-10-17 22:51 . 2008-10-17 22:51 48 -rahs---- C:\OP_CACHE.IDX
2008-10-17 22:42 . 2008-10-21 00:03 14,880 -rahs---- C:\WINDOWS\system32\OP_CACHE.ATR
2008-10-17 22:42 . 2008-10-21 00:03 7,440 -rahs---- C:\WINDOWS\system32\OP_CACHE.IDX
2008-10-17 22:42 . 2008-10-21 00:00 480 -rahs---- C:\WINDOWS\OP_CACHE.ATR
2008-10-17 22:42 . 2008-10-21 00:00 240 -rahs---- C:\WINDOWS\OP_CACHE.IDX
2008-10-17 22:23 . 2008-10-17 22:52 <DIR> dr------- C:\Documents and Settings\LocalService\Preferiti
2008-10-16 22:53 . 2008-10-16 22:53 <DIR> d-------- C:\Programmi\Trend Micro
2008-10-13 21:31 . 2008-10-13 21:31 <DIR> d-------- C:\Programmi\Foxit Software
2008-10-13 20:21 . 2008-10-31 23:50 <DIR> d-------- C:\Documents and Settings\Maurino\Dati applicazioni\Thinstall
2008-10-12 21:28 . 2008-10-17 22:42 <DIR> d-------- C:\Programmi\nLite
2008-10-12 20:15 . 2008-10-17 22:42 <DIR> d-------- C:\Programmi\ClocX
2008-10-12 10:13 . 2008-10-12 10:13 <DIR> d-------- C:\Programmi\Engelmann Media
2008-10-12 09:54 . 2008-10-17 22:42 <DIR> d-------- C:\Programmi\Ntregopt
2008-10-05 21:20 . 2008-10-05 21:20 <DIR> d-------- C:\Programmi\SlySoft
2008-10-04 18:08 . 2008-10-07 18:11 <DIR> d-------- C:\Documents and Settings\Maurino\Dati applicazioni\ImgBurn
2008-10-04 17:07 . 2008-11-01 23:18 <DIR> d-------- C:\Documents and Settings\Maurino\Dati applicazioni\U3
2008-10-04 15:41 . 2008-10-17 22:42 <DIR> d-------- C:\Programmi\ImgBurn
2008-10-04 15:13 . 2008-10-31 23:48 <DIR> d-------- C:\Documents and Settings\Maurino\Dati applicazioni\OpenOffice.org2
2008-10-04 15:06 . 2008-10-04 15:06 <DIR> d-------- C:\Programmi\OpenOffice.org 2.4
2008-10-04 15:05 . 2008-10-04 15:05 <DIR> d-------- C:\Programmi\readmes
2008-10-04 15:05 . 2008-10-04 15:05 <DIR> d-------- C:\Programmi\licenses
2008-10-04 14:21 . 2008-10-17 22:52 <DIR> d-------- C:\Documents and Settings\All Users\Dati applicazioni\UDL
2008-10-04 13:57 . 2004-11-25 06:07 79,679 --a------ C:\WINDOWS\system32\E_FLMADE.DLL
2008-10-04 13:57 . 2003-05-21 03:27 64,000 --a------ C:\WINDOWS\system32\E_FBCBADE.DLL
2008-10-04 13:57 . 2004-09-10 21:12 49,152 --a------ C:\WINDOWS\system32\E_DCINST.DLL
2008-10-04 13:57 . 2000-06-07 02:01 34,304 --a------ C:\WINDOWS\system32\E_FBCHADE.DLL
2008-10-04 13:57 . 2004-08-03 22:01 25,856 --a------ C:\WINDOWS\system32\drivers\usbprint.sys
2008-10-04 13:57 . 2004-08-03 22:01 25,856 --a--c--- C:\WINDOWS\system32\dllcache\usbprint.sys
2008-10-04 13:57 . 2004-08-03 21:58 15,104 --a------ C:\WINDOWS\system32\drivers\usbscan.sys
2008-10-04 13:57 . 2004-08-03 21:58 15,104 --a--c--- C:\WINDOWS\system32\dllcache\usbscan.sys
2008-10-04 13:27 . 2008-10-04 14:22 <DIR> d-------- C:\Programmi\epson
2008-10-04 13:27 . 2005-02-24 23:00 46,080 --a------ C:\WINDOWS\system32\escimgd.dll
2008-10-04 13:27 . 2005-02-24 23:00 29,696 --a------ C:\WINDOWS\system32\escwiad.dll
2008-10-04 13:27 . 2005-02-24 23:00 22,016 --a------ C:\WINDOWS\system32\esccmd.dll
2008-10-04 13:27 . 2008-10-04 13:27 25 --a------ C:\WINDOWS\CDE DX4800EFGIPSD.ini
2008-10-03 22:29 . 2008-10-17 22:52 <DIR> d-------- C:\Documents and Settings\Maurino\.VirtualBox
2008-10-03 22:28 . 2008-10-03 22:28 <DIR> d----c--- C:\WINDOWS\system32\DRVSTORE
2008-10-03 22:28 . 2008-09-12 15:00 95,888 --a------ C:\WINDOWS\system32\drivers\VBoxDrv.sys
2008-10-03 22:28 . 2008-09-12 15:00 41,680 --a------ C:\WINDOWS\system32\drivers\VBoxUSBMon.sys
2008-10-03 22:28 . 2008-09-12 15:00 31,824 --a------ C:\WINDOWS\system32\drivers\VBoxUSB.sys
2008-10-03 18:49 . 2008-10-03 18:49 <DIR> d-------- C:\Documents and Settings\Maurino\Dati applicazioni\Canneverbe_Limited
2008-10-03 18:46 . 2008-10-17 22:42 <DIR> d-------- C:\Programmi\CDBurnerXP
2008-10-03 18:23 . 2008-10-17 22:42 <DIR> d-------- C:\Programmi\The KMPlayer
2008-10-02 20:21 . 2008-10-02 20:21 <DIR> d-------- C:\WINDOWS\Sun
2008-10-02 20:20 . 2008-10-17 22:42 <DIR> d-------- C:\Programmi\Java
2008-10-02 20:20 . 2008-06-10 01:32 73,728 --a------ C:\WINDOWS\system32\javacpl.cpl
2008-10-02 20:19 . 2008-10-02 20:19 <DIR> d-------- C:\Programmi\File comuni\Java
2008-10-02 20:16 . 2008-10-17 22:42 <DIR> d-------- C:\Programmi\uTorrent
2008-10-02 20:16 . 2008-11-02 17:48 <DIR> d-------- C:\Documents and Settings\Maurino\Dati applicazioni\uTorrent
2008-10-02 16:56 . 2008-10-02 16:56 556,682 --a------ C:\WINDOWS\system32\prfh0410.dat
2008-10-02 16:56 . 2008-10-02 16:56 107,448 --a------ C:\WINDOWS\system32\prfc0410.dat
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-11-02 20:24 --------- d-----w C:\Programmi\Packard Bell Data Secure
2008-11-02 18:53 --------- d-----w C:\Programmi\Crawler
2008-11-02 10:00 --------- d-----w C:\Documents and Settings\Maurino\Dati applicazioni\Spyware Terminator
2008-11-01 22:44 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\Spyware Terminator
2008-10-30 20:37 --------- d-----w C:\Programmi\Opera
2008-10-26 10:04 --------- d-----w C:\Programmi\Paint.NET
2008-10-25 11:58 --------- d-----w C:\Programmi\Spyware Terminator
2008-10-24 16:22 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\Acronis
2008-10-17 21:52 --------- d-----w C:\Documents and Settings\Maurino\Dati applicazioni\VMware
2008-10-17 21:52 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\WinZip
2008-10-17 21:42 --------- d-----w C:\Programmi\xp-AntiSpy
2008-10-17 21:42 --------- d-----w C:\Programmi\ProcessExpl
2008-10-17 21:42 --------- d-----w C:\Programmi\PowerMenu
2008-10-17 21:42 --------- d-----w C:\Programmi\HDD Health
2008-10-17 21:42 --------- d-----w C:\Programmi\ESET
2008-10-17 21:42 --------- d-----w C:\Programmi\Eraser
2008-10-17 21:42 --------- d-----w C:\Programmi\CCleaner
2008-10-17 21:41 72 --sha-r C:\Programmi\OP_CACHE.ATR
2008-10-17 21:41 36 --sha-r C:\Programmi\OP_CACHE.IDX
2008-10-17 21:41 --------- d-----w C:\Programmi\AutoPatcher
2008-10-04 13:29 --------- d--h--w C:\Programmi\InstallShield Installation Information
2008-10-04 13:28 --------- d-----w C:\Programmi\File comuni\InstallShield
2008-10-03 21:08 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\VMware
2008-10-03 17:48 --------- d-----w C:\Documents and Settings\LocalService\Dati applicazioni\VMware
2008-10-01 18:55 --------- d-----w C:\Programmi\File comuni\VMware
2008-10-01 17:05 141,312 ----a-w C:\WINDOWS\system32\drivers\sp_rsdrv2.sys
2008-09-30 22:04 --------- d-----w C:\Programmi\Ashampoo
2008-09-30 18:11 512,096 ----a-w C:\WINDOWS\system32\drivers\amon.sys
2008-09-30 18:11 15,424 ----a-w C:\WINDOWS\system32\drivers\nod32drv.sys
2008-09-30 18:00 360,320 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys
2008-09-30 17:31 --------- d-----w C:\Programmi\Xpy
2008-09-29 21:10 --------- d-----w C:\Programmi\Diskeeper Corporation
2008-09-29 21:10 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\Diskeeper Corporation
2008-09-28 20:57 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\Ashampoo
2008-09-28 20:26 --------- d-----w C:\Programmi\MSBuild
2008-09-28 20:20 --------- d-----w C:\Programmi\Reference Assemblies
2008-05-29 21:04 37,375 ----a-w C:\Programmi\openoffice.org-xsltfilter.cab
2008-05-29 21:04 2,607,364 ----a-w C:\Programmi\openoffice.org-writer.cab
2008-05-29 21:03 996,525 ----a-w C:\Programmi\openoffice.org-draw.cab
2008-05-29 21:03 86,870 ----a-w C:\Programmi\openoffice.org-graphicfilter.cab
2008-05-29 21:03 52,092 ----a-w C:\Programmi\openoffice.org-onlineupdate.cab
2008-05-29 21:03 303,642 ----a-w C:\Programmi\openoffice.org-core08.cab
2008-05-29 21:03 207,388 ----a-w C:\Programmi\openoffice.org-testtool.cab
2008-05-29 21:03 2,769 ----a-w C:\Programmi\openoffice.org-emailmerge.cab
2008-05-29 21:03 2,504,975 ----a-w C:\Programmi\openoffice.org-pyuno.cab
2008-05-29 21:03 2,031,954 ----a-w C:\Programmi\openoffice.org-core09.cab
2008-05-29 21:03 118,910 ----a-w C:\Programmi\openoffice.org-javafilter.cab
2008-05-29 21:03 1,340,611 ----a-w C:\Programmi\openoffice.org-impress.cab
2008-05-29 21:03 1,159,768 ----a-w C:\Programmi\openoffice.org-math.cab
2008-05-29 21:02 4,089,145 ----a-w C:\Programmi\openoffice.org-core07.cab
2008-05-29 21:02 28,887,098 ----a-w C:\Programmi\openoffice.org-core06.cab
2008-05-29 20:58 18,634,513 ----a-w C:\Programmi\openoffice.org-core05.cab
2008-05-29 20:57 16,503,595 ----a-w C:\Programmi\openoffice.org-core04.cab
2008-05-29 20:56 9,117,929 ----a-w C:\Programmi\openoffice.org-core03.cab
2008-05-29 20:55 3,859,906 ----a-w C:\Programmi\openoffice.org-core02.cab
2008-05-29 20:55 15,103,154 ----a-w C:\Programmi\openoffice.org-core01.cab
2008-05-29 20:54 43,005 ----a-w C:\Programmi\openoffice.org-activex.cab
2008-05-29 20:54 4,813,253 ----a-w C:\Programmi\openoffice.org-calc.cab
2008-05-29 20:54 4,378,112 ----a-w C:\Programmi\openofficeorg24.msi
2008-05-29 20:54 217 ----a-w C:\Programmi\setup.ini
2008-05-29 20:54 1,869,894 ----a-w C:\Programmi\openoffice.org-base.cab
2008-02-08 20:33 323,584 ----a-w C:\Programmi\setup.exe
2002-03-11 09:06 1,822,520 ----a-w C:\Programmi\instmsiw.exe
2002-03-11 08:45 1,708,856 ----a-w C:\Programmi\instmsia.exe
.
------- Sigcheck -------
2006-04-20 13:18 360576 b2220c618b42a2212a59d91ebd6fc4b4 C:\WINDOWS\$hf_mig$\KB917953\SP2QFE\tcpip.sys
2008-06-20 11:44 360960 744e57c99232201ae98c49168b918f48 C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip.sys
2008-06-20 12:51 361600 9aefa14bd6b182d61e3119fa5f436d3d C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip.sys
2008-06-20 12:59 361600 ad978a1b783b5719720cff204b666c8e C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys
2002-08-29 00:58 332928 244a2f9816bc9b593957281ef577d976 C:\WINDOWS\$NtServicePackUninstall$\tcpip.sys
2004-08-03 22:14 359040 9f4b36614a0fc234525ba224957de55c C:\WINDOWS\$NtUninstallKB917953$\tcpip.sys
2006-04-20 12:51 359808 1dbf125862891817f374f407626967f4 C:\WINDOWS\$NtUninstallKB951748$\tcpip.sys
2008-09-30 19:00 359040 a14fafd66adbd55a86f17a37e5ec4263 C:\WINDOWS\ServicePackFiles\i386\tcpip.sys
2008-04-13 20:20 361344 93ea8d04ec73a85db02eb8805988f733 C:\WINDOWS\SoftwareDistribution\Download\fc8deab818fa7e7ffabfc43e34347907\tcpip.sys
2008-09-30 19:00 360320 3b0c64ef8d0ebb5e43121603ad03545c C:\WINDOWS\system32\dllcache\tcpip.sys
2008-09-30 19:00 360320 3b0c64ef8d0ebb5e43121603ad03545c C:\WINDOWS\system32\drivers\tcpip.sys
.
((((((((((((((((((((((((((((( snapshot@2008-11-02_18.05.56.82 )))))))))))))))))))))))))))))))))))))))))
.
+ 2006-02-15 00:30:07 142,464 ----a-w C:\WINDOWS\$hf_mig$\KB900485\SP2QFE\aec.sys
+ 2005-10-12 23:17:56 15,584 ----a-w C:\WINDOWS\$hf_mig$\KB900485\spmsg.dll
+ 2005-10-12 23:17:57 215,776 ----a-w C:\WINDOWS\$hf_mig$\KB900485\spuninst.exe
+ 2005-10-12 23:17:55 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB900485\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ----a-w C:\WINDOWS\$hf_mig$\KB900485\update\update.exe
+ 2005-10-12 23:18:05 390,880 ----a-w C:\WINDOWS\$hf_mig$\KB900485\update\updspapi.dll
+ 2005-10-20 22:32:10 1,092,096 ----a-w C:\WINDOWS\$hf_mig$\KB910437\SP2QFE\esent.dll
+ 2005-10-12 23:17:58 15,584 ----a-w C:\WINDOWS\$hf_mig$\KB910437\spmsg.dll
+ 2005-10-12 23:17:59 215,776 ----a-w C:\WINDOWS\$hf_mig$\KB910437\spuninst.exe
+ 2005-10-12 23:17:58 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB910437\update\spcustom.dll
+ 2005-10-12 23:18:01 724,192 ----a-w C:\WINDOWS\$hf_mig$\KB910437\update\update.exe
+ 2005-10-12 23:18:06 390,880 ----a-w C:\WINDOWS\$hf_mig$\KB910437\update\updspapi.dll
+ 2006-03-17 01:08:10 262,656 ----a-w C:\WINDOWS\$hf_mig$\KB916595\SP2QFE\http.sys
+ 2005-10-12 23:21:23 15,584 ----a-w C:\WINDOWS\$hf_mig$\KB916595\spmsg.dll
+ 2005-10-12 23:21:23 215,776 ----a-w C:\WINDOWS\$hf_mig$\KB916595\spuninst.exe
+ 2005-10-12 23:21:23 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB916595\update\spcustom.dll
+ 2005-10-12 23:21:25 724,192 ----a-w C:\WINDOWS\$hf_mig$\KB916595\update\update.exe
+ 2005-10-12 23:21:31 390,880 ----a-w C:\WINDOWS\$hf_mig$\KB916595\update\updspapi.dll
+ 2006-06-14 08:50:19 172,416 ----a-w C:\WINDOWS\$hf_mig$\KB920872\SP2QFE\kmixer.sys
+ 2006-06-14 08:50:19 6,272 ----a-w C:\WINDOWS\$hf_mig$\KB920872\SP2QFE\splitter.sys
+ 2006-06-14 09:17:04 82,944 ----a-w C:\WINDOWS\$hf_mig$\KB920872\SP2QFE\wdmaud.sys
+ 2005-10-12 23:17:56 15,584 ----a-w C:\WINDOWS\$hf_mig$\KB920872\spmsg.dll
+ 2005-10-12 23:17:57 215,776 ----a-w C:\WINDOWS\$hf_mig$\KB920872\spuninst.exe
+ 2005-10-12 23:17:55 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB920872\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ----a-w C:\WINDOWS\$hf_mig$\KB920872\update\update.exe
+ 2005-10-12 23:18:05 390,880 ----a-w C:\WINDOWS\$hf_mig$\KB920872\update\updspapi.dll
+ 2006-10-04 14:04:59 73,216 ----a-w C:\WINDOWS\$hf_mig$\KB925720\SP2QFE\magnify.exe
+ 2006-10-04 14:04:57 54,784 ----a-w C:\WINDOWS\$hf_mig$\KB925720\SP2QFE\narrator.exe
+ 2006-10-04 14:04:59 216,576 ----a-w C:\WINDOWS\$hf_mig$\KB925720\SP2QFE\osk.exe
+ 2006-10-04 14:10:21 36,352 ----a-w C:\WINDOWS\$hf_mig$\KB925720\SP2QFE\umandlg.dll
+ 2006-10-04 14:04:59 50,176 ----a-w C:\WINDOWS\$hf_mig$\KB925720\SP2QFE\utilman.exe
+ 2005-10-12 23:21:23 15,584 ----a-w C:\WINDOWS\$hf_mig$\KB925720\spmsg.dll
+ 2005-10-12 23:21:23 215,776 ----a-w C:\WINDOWS\$hf_mig$\KB925720\spuninst.exe
+ 2005-10-12 23:21:23 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB925720\update\spcustom.dll
+ 2005-10-12 23:21:25 724,192 ----a-w C:\WINDOWS\$hf_mig$\KB925720\update\update.exe
+ 2005-10-12 23:21:31 390,880 ----a-w C:\WINDOWS\$hf_mig$\KB925720\update\updspapi.dll
+ 2007-04-18 16:15:38 2,854,400 ----a-w C:\WINDOWS\$hf_mig$\KB927891\SP2QFE\msi31.dll
+ 2006-12-14 08:54:05 15,584 ----a-w C:\WINDOWS\$hf_mig$\KB927891\spmsg.dll
+ 2006-12-14 08:54:05 215,776 ----a-w C:\WINDOWS\$hf_mig$\KB927891\spuninst.exe
+ 2006-12-14 08:54:05 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB927891\update\spcustom.dll
+ 2006-12-14 08:54:05 724,192 ----a-w C:\WINDOWS\$hf_mig$\KB927891\update\update.exe
+ 2006-12-14 08:54:06 390,880 ----a-w C:\WINDOWS\$hf_mig$\KB927891\update\updspapi.dll
+ 2007-02-09 11:23:36 574,976 ----a-w C:\WINDOWS\$hf_mig$\KB930916\SP2QFE\ntfs.sys
+ 2005-10-12 23:17:56 15,584 ----a-w C:\WINDOWS\$hf_mig$\KB930916\spmsg.dll
+ 2005-10-12 23:17:57 215,776 ----a-w C:\WINDOWS\$hf_mig$\KB930916\spuninst.exe
+ 2005-10-12 23:17:55 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB930916\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ----a-w C:\WINDOWS\$hf_mig$\KB930916\update\update.exe
+ 2005-10-12 23:18:05 390,880 ----a-w C:\WINDOWS\$hf_mig$\KB930916\update\updspapi.dll
+ 2007-07-09 13:19:18 582,656 ----a-w C:\WINDOWS\$hf_mig$\KB933729\SP2QFE\rpcrt4.dll
+ 2007-06-18 23:24:36 366,592 ----a-w C:\WINDOWS\$hf_mig$\KB933729\SP2QFE\spru0410.dll
+ 2005-10-12 23:17:58 15,584 ----a-w C:\WINDOWS\$hf_mig$\KB933729\spmsg.dll
+ 2005-10-12 23:17:59 215,776 ----a-w C:\WINDOWS\$hf_mig$\KB933729\spuninst.exe
+ 2005-10-12 23:17:58 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB933729\update\spcustom.dll
+ 2005-10-12 23:18:01 724,192 ----a-w C:\WINDOWS\$hf_mig$\KB933729\update\update.exe
+ 2005-10-12 23:18:06 390,880 ----a-w C:\WINDOWS\$hf_mig$\KB933729\update\updspapi.dll
+ 2007-07-06 09:52:38 72,960 ----a-w C:\WINDOWS\$hf_mig$\KB937894\SP2QFE\mqac.sys
+ 2007-07-06 13:08:28 138,240 ----a-w C:\WINDOWS\$hf_mig$\KB937894\SP2QFE\mqad.dll
+ 2007-07-06 13:08:28 47,104 ----a-w C:\WINDOWS\$hf_mig$\KB937894\SP2QFE\mqdscli.dll
+ 2007-07-06 13:08:28 16,896 ----a-w C:\WINDOWS\$hf_mig$\KB937894\SP2QFE\mqise.dll
+ 2007-07-06 13:08:28 660,992 ----a-w C:\WINDOWS\$hf_mig$\KB937894\SP2QFE\mqqm.dll
+ 2007-07-06 13:08:28 177,152 ----a-w C:\WINDOWS\$hf_mig$\KB937894\SP2QFE\mqrt.dll
+ 2007-07-06 13:08:28 95,744 ----a-w C:\WINDOWS\$hf_mig$\KB937894\SP2QFE\mqsec.dll
+ 2007-07-06 13:08:28 48,640 ----a-w C:\WINDOWS\$hf_mig$\KB937894\SP2QFE\mqupgrd.dll
+ 2007-07-06 13:08:28 519,168 ----a-w C:\WINDOWS\$hf_mig$\KB937894\SP2QFE\mqutil.dll
+ 2005-10-12 23:17:56 15,584 ----a-w C:\WINDOWS\$hf_mig$\KB937894\spmsg.dll
+ 2005-10-12 23:17:57 215,776 ----a-w C:\WINDOWS\$hf_mig$\KB937894\spuninst.exe
+ 2005-10-12 23:17:55 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB937894\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ----a-w C:\WINDOWS\$hf_mig$\KB937894\update\update.exe
+ 2005-10-12 23:18:05 390,880 ----a-w C:\WINDOWS\$hf_mig$\KB937894\update\updspapi.dll
+ 2007-06-13 13:10:37 1,035,776 ----a-w C:\WINDOWS\$hf_mig$\KB938828\SP2QFE\explorer.exe
+ 2005-10-12 23:17:56 15,584 ----a-w C:\WINDOWS\$hf_mig$\KB938828\spmsg.dll
+ 2005-10-12 23:17:57 215,776 ----a-w C:\WINDOWS\$hf_mig$\KB938828\spuninst.exe
+ 2005-10-12 23:17:55 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB938828\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ----a-w C:\WINDOWS\$hf_mig$\KB938828\update\update.exe
+ 2005-10-12 23:18:05 390,880 ----a-w C:\WINDOWS\$hf_mig$\KB938828\update\updspapi.dll
+ 2008-03-20 07:57:45 1,845,888 ----a-w C:\WINDOWS\$hf_mig$\KB941693\SP2QFE\win32k.sys
+ 2007-03-06 01:48:10 15,584 ----a-w C:\WINDOWS\$hf_mig$\KB941693\spmsg.dll
+ 2007-03-06 01:48:15 215,776 ----a-w C:\WINDOWS\$hf_mig$\KB941693\spuninst.exe
+ 2007-03-06 01:48:08 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB941693\update\spcustom.dll
+ 2007-03-06 01:48:33 724,192 ----a-w C:\WINDOWS\$hf_mig$\KB941693\update\update.exe
+ 2007-03-06 01:49:24 390,880 ----a-w C:\WINDOWS\$hf_mig$\KB941693\update\updspapi.dll
+ 2007-12-04 18:29:32 551,936 ----a-w C:\WINDOWS\$hf_mig$\KB943055\SP2QFE\oleaut32.dll
+ 2007-03-06 01:48:10 15,584 ----a-w C:\WINDOWS\$hf_mig$\KB943055\spmsg.dll
+ 2007-03-06 01:48:15 215,776 ----a-w C:\WINDOWS\$hf_mig$\KB943055\spuninst.exe
+ 2007-03-06 01:48:08 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB943055\update\spcustom.dll
+ 2007-03-06 01:48:33 724,192 ----a-w C:\WINDOWS\$hf_mig$\KB943055\update\update.exe
+ 2007-03-06 01:49:24 390,880 ----a-w C:\WINDOWS\$hf_mig$\KB943055\update\updspapi.dll
+ 2007-10-25 16:42:45 8,489,472 ----a-w C:\WINDOWS\$hf_mig$\KB943460\SP2QFE\shell32.dll
+ 2007-10-29 15:07:18 366,592 ----a-w C:\WINDOWS\$hf_mig$\KB943460\SP2QFE\spru0410.dll
+ 2007-03-06 01:48:09 15,584 ----a-w C:\WINDOWS\$hf_mig$\KB943460\spmsg.dll
+ 2007-03-06 01:48:14 215,776 ----a-w C:\WINDOWS\$hf_mig$\KB943460\spuninst.exe
+ 2007-03-06 01:48:07 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB943460\update\spcustom.dll
+ 2007-03-06 01:48:32 724,192 ----a-w C:\WINDOWS\$hf_mig$\KB943460\update\update.exe
+ 2007-03-06 01:49:24 390,880 ----a-w C:\WINDOWS\$hf_mig$\KB943460\update\updspapi.dll
+ 2007-11-07 09:49:53 732,672 ----a-w C:\WINDOWS\$hf_mig$\KB943485\SP2QFE\lsasrv.dll
+ 2007-03-06 01:48:10 15,584 ----a-w C:\WINDOWS\$hf_mig$\KB943485\spmsg.dll
+ 2007-03-06 01:48:15 215,776 ----a-w C:\WINDOWS\$hf_mig$\KB943485\spuninst.exe
+ 2007-03-06 01:48:08 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB943485\update\spcustom.dll
+ 2007-03-06 01:48:33 724,192 ----a-w C:\WINDOWS\$hf_mig$\KB943485\update\update.exe
+ 2007-03-06 01:49:24 390,880 ----a-w C:\WINDOWS\$hf_mig$\KB943485\update\updspapi.dll
+ 2007-11-13 08:47:45 20,480 ----a-w C:\WINDOWS\$hf_mig$\KB944653\SP2QFE\secdrv.sys
+ 2007-03-06 01:48:10 15,584 ----a-w C:\WINDOWS\$hf_mig$\KB944653\spmsg.dll
+ 2007-03-06 01:48:15 215,776 ----a-w C:\WINDOWS\$hf_mig$\KB944653\spuninst.exe
+ 2007-03-06 01:48:08 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB944653\update\spcustom.dll
+ 2007-03-06 01:48:33 724,192 ----a-w C:\WINDOWS\$hf_mig$\KB944653\update\update.exe
+ 2007-03-06 01:49:24 390,880 ----a-w C:\WINDOWS\$hf_mig$\KB944653\update\updspapi.dll
+ 2008-02-20 05:19:51 147,968 ----a-w C:\WINDOWS\$hf_mig$\KB945553\SP2QFE\dnsapi.dll
+ 2008-02-20 18:49:52 45,568 ----a-w C:\WINDOWS\$hf_mig$\KB945553\SP2QFE\dnsrslvr.dll
+ 2007-03-06 01:48:10 15,584 ----a-w C:\WINDOWS\$hf_mig$\KB945553\spmsg.dll
+ 2007-03-06 01:48:15 215,776 ----a-w C:\WINDOWS\$hf_mig$\KB945553\spuninst.exe
+ 2007-03-06 01:48:08 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB945553\update\spcustom.dll
+ 2007-03-06 01:48:33 724,192 ----a-w C:\WINDOWS\$hf_mig$\KB945553\update\update.exe
+ 2007-03-06 01:49:24 390,880 ----a-w C:\WINDOWS\$hf_mig$\KB945553\update\updspapi.dll
+ 2007-12-18 09:38:59 179,712 ----a-w C:\WINDOWS\$hf_mig$\KB946026\SP2QFE\mrxdav.sys
+ 2007-03-06 01:48:10 15,584 ----a-w C:\WINDOWS\$hf_mig$\KB946026\spmsg.dll
+ 2007-03-06 01:48:15 215,776 ----a-w C:\WINDOWS\$hf_mig$\KB946026\spuninst.exe
+ 2007-03-06 01:48:08 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB946026\update\spcustom.dll
+ 2007-03-06 01:48:33 724,192 ----a-w C:\WINDOWS\$hf_mig$\KB946026\update\update.exe
+ 2007-03-06 01:49:24 390,880 ----a-w C:\WINDOWS\$hf_mig$\KB946026\update\updspapi.dll
+ 2008-02-20 06:52:28 282,624 ----a-w C:\WINDOWS\$hf_mig$\KB948590\SP2QFE\gdi32.dll
+ 2007-03-06 01:48:10 15,584 ----a-w C:\WINDOWS\$hf_mig$\KB948590\spmsg.dll
+ 2007-03-06 01:48:15 215,776 ----a-w C:\WINDOWS\$hf_mig$\KB948590\spuninst.exe
+ 2007-03-06 01:48:08 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB948590\update\spcustom.dll
+ 2007-03-06 01:48:33 724,192 ----a-w C:\WINDOWS\$hf_mig$\KB948590\update\update.exe
+ 2007-03-06 01:49:24 390,880 ----a-w C:\WINDOWS\$hf_mig$\KB948590\update\updspapi.dll
+ 2004-08-03 20:39:38 142,464 -c----w C:\WINDOWS\$NtUninstallKB900485$\aec.sys
+ 2005-10-12 23:17:57 215,776 -c----w C:\WINDOWS\$NtUninstallKB900485$\spuninst\spuninst.exe
+ 2005-10-12 23:18:05 390,880 -c----w C:\WINDOWS\$NtUninstallKB900485$\spuninst\updspapi.dll
+ 2004-08-19 13:39:10 1,092,096 -c----w C:\WINDOWS\$NtUninstallKB910437$\esent.dll
+ 2005-10-12 23:17:59 215,776 -c----w C:\WINDOWS\$NtUninstallKB910437$\spuninst\spuninst.exe
+ 2005-10-12 23:18:06 390,880 -c----w C:\WINDOWS\$NtUninstallKB910437$\spuninst\updspapi.dll
+ 2004-08-03 21:00:14 263,040 -c----w C:\WINDOWS\$NtUninstallKB916595$\http.sys
+ 2005-10-12 23:21:23 215,776 -c----w C:\WINDOWS\$NtUninstallKB916595$\spuninst\spuninst.exe
+ 2005-10-12 23:21:31 390,880 -c----w C:\WINDOWS\$NtUninstallKB916595$\spuninst\updspapi.dll
+ 2004-08-03 21:07:50 171,776 -c----w C:\WINDOWS\$NtUninstallKB920872$\kmixer.sys
+ 2004-08-03 21:07:48 6,400 -c----w C:\WINDOWS\$NtUninstallKB920872$\splitter.sys
+ 2005-10-12 23:17:57 215,776 -c----w C:\WINDOWS\$NtUninstallKB920872$\spuninst\spuninst.exe
+ 2005-10-12 23:18:05 390,880 -c----w C:\WINDOWS\$NtUninstallKB920872$\spuninst\updspapi.dll
+ 2004-08-03 21:15:06 82,944 -c----w C:\WINDOWS\$NtUninstallKB920872$\wdmaud.sys
+ 2005-05-03 10:58:36 2,890,240 -c----w C:\WINDOWS\$NtUninstallKB927891$\msi.dll
+ 2006-12-14 08:54:05 215,776 -c----w C:\WINDOWS\$NtUninstallKB927891$\spuninst\spuninst.exe
+ 2006-12-14 08:54:06 390,880 -c----w C:\WINDOWS\$NtUninstallKB927891$\spuninst\updspapi.dll
+ 2004-08-03 21:15:10 574,592 -c----w C:\WINDOWS\$NtUninstallKB930916$\ntfs.sys
+ 2005-10-12 23:17:57 215,776 -c----w C:\WINDOWS\$NtUninstallKB930916$\spuninst\spuninst.exe
+ 2005-10-12 23:18:05 390,880 -c----w C:\WINDOWS\$NtUninstallKB930916$\spuninst\updspapi.dll
+ 2004-08-19 13:39:26 581,120 -c----w C:\WINDOWS\$NtUninstallKB933729$\rpcrt4.dll
+ 2005-10-12 23:17:59 215,776 -c----w C:\WINDOWS\$NtUninstallKB933729$\spuninst\spuninst.exe
+ 2005-10-12 23:18:06 390,880 -c----w C:\WINDOWS\$NtUninstallKB933729$\spuninst\updspapi.dll
+ 2006-01-19 19:29:34 215,776 -c----w C:\WINDOWS\$NtUninstallKB936357$\spuninst\spuninst.exe
+ 2006-01-19 19:29:34 390,880 -c----w C:\WINDOWS\$NtUninstallKB936357$\spuninst\updspapi.dll
+ 2004-09-01 22:27:22 209,280 -c----w C:\WINDOWS\$NtUninstallKB936357$\update.sys
+ 2005-06-28 09:23:36 215,776 -c----w C:\WINDOWS\$NtUninstallKB936782_WMP9$\spuninst\spuninst.exe
+ 2005-06-28 09:23:54 371,424 -c----w C:\WINDOWS\$NtUninstallKB936782_WMP9$\spuninst\updspapi.dll
+ 2004-08-19 13:39:34 4,874,240 -c----w C:\WINDOWS\$NtUninstallKB936782_WMP9$\wmp.dll
+ 2004-08-03 20:58:22 72,960 -c----w C:\WINDOWS\$NtUninstallKB937894$\mqac.sys
+ 2004-08-19 13:39:18 138,240 -c----w C:\WINDOWS\$NtUninstallKB937894$\mqad.dll
+ 2004-08-19 13:39:18 47,104 -c----w C:\WINDOWS\$NtUninstallKB937894$\mqdscli.dll
+ 2004-08-19 13:39:18 16,896 -c----w C:\WINDOWS\$NtUninstallKB937894$\mqise.dll
+ 2004-08-19 13:39:18 660,992 -c----w C:\WINDOWS\$NtUninstallKB937894$\mqqm.dll
+ 2004-08-19 13:39:18 177,152 -c----w C:\WINDOWS\$NtUninstallKB937894$\mqrt.dll
+ 2004-08-19 13:39:18 95,744 -c----w C:\WINDOWS\$NtUninstallKB937894$\mqsec.dll
+ 2004-08-19 13:39:18 48,640 -c----w C:\WINDOWS\$NtUninstallKB937894$\mqupgrd.dll
+ 2004-08-19 13:39:18 519,168 -c----w C:\WINDOWS\$NtUninstallKB937894$\mqutil.dll
+ 2005-10-12 23:17:57 215,776 -c----w C:\WINDOWS\$NtUninstallKB937894$\spuninst\spuninst.exe
+ 2005-10-12 23:18:05 390,880 -c----w C:\WINDOWS\$NtUninstallKB937894$\spuninst\updspapi.dll
+ 2004-08-19 13:39:36 1,034,752 -c----w C:\WINDOWS\$NtUninstallKB938828$\explorer.exe
+ 2005-10-12 23:17:57 215,776 -c----w C:\WINDOWS\$NtUninstallKB938828$\spuninst\spuninst.exe
+ 2005-10-12 23:18:05 390,880 -c----w C:\WINDOWS\$NtUninstallKB938828$\spuninst\updspapi.dll
+ 2005-06-28 09:23:36 215,776 -c----w C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe
+ 2005-06-28 09:23:54 371,424 -c----w C:\WINDOWS\$NtUninstallKB941569$\spuninst\updspapi.dll
+ 2004-08-19 13:39:32 230,400 -c----w C:\WINDOWS\$NtUninstallKB941569$\wmasf.dll
+ 2004-08-19 13:39:54 2,105,344 -c----w C:\WINDOWS\$NtUninstallKB941569$\wmvcore.dll
+ 2007-03-06 01:48:15 215,776 -c----w C:\WINDOWS\$NtUninstallKB941693$\spuninst\spuninst.exe
+ 2007-03-06 01:49:24 390,880 -c----w C:\WINDOWS\$NtUninstallKB941693$\spuninst\updspapi.dll
+ 2007-03-08 15:33:54 1,843,584 -c----w C:\WINDOWS\$NtUninstallKB941693$\win32k.sys
+ 2007-05-17 11:29:12 549,376 -c----w C:\WINDOWS\$NtUninstallKB943055$\oleaut32.dll
+ 2007-03-06 01:48:15 215,776 -c----w C:\WINDOWS\$NtUninstallKB943055$\spuninst\spuninst.exe
+ 2007-03-06 01:49:24 390,880 -c----w C:\WINDOWS\$NtUninstallKB943055$\spuninst\updspapi.dll
+ 2006-12-19 21:50:30 8,482,816 -c----w C:\WINDOWS\$NtUninstallKB943460$\shell32.dll
+ 2007-03-06 01:48:14 215,776 -c----w C:\WINDOWS\$NtUninstallKB943460$\spuninst\spuninst.exe
+ 2007-03-06 01:49:24 390,880 -c----w C:\WINDOWS\$NtUninstallKB943460$\spuninst\updspapi.dll
+ 2006-08-17 12:29:46 727,552 -c----w C:\WINDOWS\$NtUninstallKB943485$\lsasrv.dll
+ 2007-03-06 01:48:15 215,776 -c----w C:\WINDOWS\$NtUninstallKB943485$\spuninst\spuninst.exe
+ 2007-03-06 01:49:24 390,880 -c----w C:\WINDOWS\$NtUninstallKB943485$\spuninst\updspapi.dll
+ 2001-08-31 10:00:00 27,440 -c----w C:\WINDOWS\$NtUninstallKB944653$\secdrv.sys
+ 2007-03-06 01:48:15 215,776 -c----w C:\WINDOWS\$NtUninstallKB944653$\spuninst\spuninst.exe
+ 2007-03-06 01:49:24 390,880 -c----w C:\WINDOWS\$NtUninstallKB944653$\spuninst\updspapi.dll
+ 2004-08-19 13:39:08 45,568 -c----w C:\WINDOWS\$NtUninstallKB945553$\dnsrslvr.dll
+ 2007-03-06 01:48:15 215,776 -c----w C:\WINDOWS\$NtUninstallKB945553$\spuninst\spuninst.exe
+ 2007-03-06 01:49:24 390,880 -c----w C:\WINDOWS\$NtUninstallKB945553$\spuninst\updspapi.dll
+ 2004-08-03 21:00:58 181,248 -c----w C:\WINDOWS\$NtUninstallKB946026$\mrxdav.sys
+ 2007-03-06 01:48:15 215,776 -c----w C:\WINDOWS\$NtUninstallKB946026$\spuninst\spuninst.exe
+ 2007-03-06 01:49:24 390,880 -c----w C:\WINDOWS\$NtUninstallKB946026$\spuninst\updspapi.dll
+ 2007-06-19 13:30:47 282,112 -c----w C:\WINDOWS\$NtUninstallKB948590$\gdi32.dll
+ 2007-03-06 01:48:15 215,776 -c----w C:\WINDOWS\$NtUninstallKB948590$\spuninst\spuninst.exe
+ 2007-03-06 01:49:24 390,880 -c----w C:\WINDOWS\$NtUninstallKB948590$\spuninst\updspapi.dll
+ 2006-02-15 00:22:26 142,464 ------w C:\WINDOWS\Driver Cache\i386\aec.sys
+ 2006-03-17 00:33:10 262,784 ------w C:\WINDOWS\Driver Cache\i386\http.sys
+ 2006-06-14 08:47:45 172,416 ------w C:\WINDOWS\Driver Cache\i386\kmixer.sys
+ 2006-06-14 08:47:46 6,400 ------w C:\WINDOWS\Driver Cache\i386\splitter.sys
+ 2006-06-14 09:00:45 82,944 ------w C:\WINDOWS\Driver Cache\i386\wdmaud.sys
- 2004-08-19 13:39:36 1,034,752 ----a-w C:\WINDOWS\explorer.exe
+ 2007-06-13 13:22:28 1,035,776 ----a-w C:\WINDOWS\explorer.exe
- 2008-10-20 23:01:05 34,308 ----a-w C:\WINDOWS\system32\BASSMOD.dll
+ 2008-11-02 18:45:01 34,308 ----a-w C:\WINDOWS\system32\BASSMOD.dll
- 2004-08-03 20:39:38 142,464 -c--a-w C:\WINDOWS\system32\dllcache\aec.sys
+ 2006-02-15 00:22:26 142,464 -c--a-w C:\WINDOWS\system32\dllcache\aec.sys
+ 2008-02-20 05:33:54 45,568 -c----w C:\WINDOWS\system32\dllcache\dnsrslvr.dll
+ 2007-06-13 13:22:28 1,035,776 -c----w C:\WINDOWS\system32\dllcache\explorer.exe
- 2007-06-19 13:30:47 282,112 -c----w C:\WINDOWS\system32\dllcache\gdi32.dll
+ 2008-02-20 06:50:40 282,624 -c----w C:\WINDOWS\system32\dllcache\gdi32.dll
- 2004-08-03 21:07:50 171,776 -c--a-w C:\WINDOWS\system32\dllcache\kmixer.sys
+ 2006-06-14 08:47:45 172,416 -c--a-w C:\WINDOWS\system32\dllcache\kmixer.sys
- 2006-08-17 12:29:46 727,552 -c----w C:\WINDOWS\system32\dllcache\lsasrv.dll
+ 2007-11-07 09:27:27 727,552 -c----w C:\WINDOWS\system32\dllcache\lsasrv.dll
+ 2006-10-04 13:32:26 73,216 -c----w C:\WINDOWS\system32\dllcache\magnify.exe
+ 2007-07-06 10:05:47 72,960 -c----w C:\WINDOWS\system32\dllcache\mqac.sys
+ 2007-07-06 12:50:07 138,240 -c----w C:\WINDOWS\system32\dllcache\mqad.dll
+ 2007-07-06 12:50:07 47,104 -c----w C:\WINDOWS\system32\dllcache\mqdscli.dll
+ 2007-07-06 12:50:07 16,896 -c----w C:\WINDOWS\system32\dllcache\mqise.dll
+ 2007-07-06 12:50:07 660,992 -c----w C:\WINDOWS\system32\dllcache\mqqm.dll
+ 2007-07-06 12:50:07 177,152 -c----w C:\WINDOWS\system32\dllcache\mqrt.dll
+ 2007-07-06 12:50:07 95,744 -c----w C:\WINDOWS\system32\dllcache\mqsec.dll
+ 2007-07-06 12:50:07 48,640 -c----w C:\WINDOWS\system32\dllcache\mqupgrd.dll
+ 2007-07-06 12:50:07 519,168 -c----w C:\WINDOWS\system32\dllcache\mqutil.dll
+ 2007-12-18 09:51:35 179,584 -c----w C:\WINDOWS\system32\dllcache\mrxdav.sys
+ 2006-10-04 13:32:23 54,784 -c----w C:\WINDOWS\system32\dllcache\narrator.exe
+ 2007-02-09 11:10:35 574,464 -c----w C:\WINDOWS\system32\dllcache\ntfs.sys
- 2007-05-17 11:29:12 549,376 -c----w C:\WINDOWS\system32\dllcache\oleaut32.dll
+ 2007-12-04 18:40:54 550,912 -c----w C:\WINDOWS\system32\dllcache\oleaut32.dll
+ 2006-10-04 13:32:25 216,576 -c----w C:\WINDOWS\system32\dllcache\osk.exe
- 2006-12-19 21:50:30 8,482,816 -c----w C:\WINDOWS\system32\dllcache\shell32.dll
+ 2007-10-25 16:54:49 8,483,840 -c----w C:\WINDOWS\system32\dllcache\shell32.dll
- 2004-08-03 21:07:48 6,400 -c--a-w C:\WINDOWS\system32\dllcache\splitter.sys
+ 2006-06-14 08:47:46 6,400 -c--a-w C:\WINDOWS\system32\dllcache\splitter.sys
+ 2006-10-04 13:33:45 36,352 -c----w C:\WINDOWS\system32\dllcache\umandlg.dll
+ 2007-04-23 10:14:23 364,160 -c----w C:\WINDOWS\system32\dllcache\update.sys
+ 2006-10-04 13:32:20 50,176 -c----w C:\WINDOWS\system32\dllcache\utilman.exe
- 2004-08-03 21:15:06 82,944 -c--a-w C:\WINDOWS\system32\dllcache\wdmaud.sys
+ 2006-06-14 09:00:45 82,944 -c--a-w C:\WINDOWS\system32\dllcache\wdmaud.sys
+ 2008-09-05 22:30:52 267,304 -c----w C:\WINDOWS\system32\dllcache\wgaLogon.dll
+ 2008-09-05 22:30:06 952,360 -c----w C:\WINDOWS\system32\dllcache\WgaTray.exe
- 2007-03-08 15:33:54 1,843,584 -c----w C:\WINDOWS\system32\dllcache\win32k.sys
+ 2008-03-20 08:06:49 1,845,248 -c----w C:\WINDOWS\system32\dllcache\win32k.sys
+ 2007-10-25 09:00:50 230,912 -c----w C:\WINDOWS\system32\dllcache\wmasf.dll
+ 2007-10-25 09:01:10 2,109,440 -c----w C:\WINDOWS\system32\dllcache\wmvcore.dll
- 2004-08-19 13:39:08 45,568 ----a-w C:\WINDOWS\system32\dnsrslvr.dll
+ 2008-02-20 05:33:54 45,568 ----a-w C:\WINDOWS\system32\dnsrslvr.dll
- 2004-08-03 20:39:38 142,464 ----a-w C:\WINDOWS\system32\drivers\aec.sys
+ 2006-02-15 00:22:26 142,464 ----a-w C:\WINDOWS\system32\drivers\aec.sys
- 2004-08-03 21:00:14 263,040 ------w C:\WINDOWS\system32\drivers\http.sys
+ 2006-03-17 00:33:10 262,784 ------w C:\WINDOWS\system32\drivers\http.sys
- 2004-08-03 21:07:50 171,776 ----a-w C:\WINDOWS\system32\drivers\kmixer.sys
+ 2006-06-14 08:47:45 172,416 ----a-w C:\WINDOWS\system32\drivers\kmixer.sys
- 2004-08-03 20:58:22 72,960 ----a-w C:\WINDOWS\system32\drivers\mqac.sys
+ 2007-07-06 10:05:47 72,960 ----a-w C:\WINDOWS\system32\drivers\mqac.sys
- 2004-08-03 21:00:58 181,248 ----a-w C:\WINDOWS\system32\drivers\mrxdav.sys
+ 2007-12-18 09:51:35 179,584 ----a-w C:\WINDOWS\system32\drivers\mrxdav.sys
- 2004-08-03 21:15:10 574,592 ----a-w C:\WINDOWS\system32\drivers\ntfs.sys
+ 2007-02-09 11:10:35 574,464 ----a-w C:\WINDOWS\system32\drivers\ntfs.sys
- 2001-08-31 10:00:00 27,440 ----a-w C:\WINDOWS\system32\drivers\secdrv.sys
+ 2007-11-13 10:25:54 20,480 ----a-w C:\WINDOWS\system32\drivers\secdrv.sys
- 2004-08-03 21:07:48 6,400 ----a-w C:\WINDOWS\system32\drivers\splitter.sys
+ 2006-06-14 08:47:46 6,400 ----a-w C:\WINDOWS\system32\drivers\splitter.sys
- 2004-09-01 22:27:22 209,280 ----a-w C:\WINDOWS\system32\drivers\update.sys
+ 2007-04-23 10:14:23 364,160 ----a-w C:\WINDOWS\system32\drivers\update.sys
- 2004-08-03 21:15:06 82,944 ----a-w C:\WINDOWS\system32\drivers\wdmaud.sys
+ 2006-06-14 09:00:45 82,944 ----a-w C:\WINDOWS\system32\drivers\wdmaud.sys
- 2004-08-19 13:39:10 1,092,096 ----a-w C:\WINDOWS\system32\esent.dll
+ 2005-10-20 22:25:53 1,092,096 ----a-w C:\WINDOWS\system32\esent.dll
- 2008-10-05 20:24:44 118,152 ----a-w C:\WINDOWS\system32\FNTCACHE.DAT
+ 2008-11-02 20:22:04 118,152 ----a-w C:\WINDOWS\system32\FNTCACHE.DAT
- 2007-06-19 13:30:47 282,112 ----a-w C:\WINDOWS\system32\gdi32.dll
+ 2008-02-20 06:50:40 282,624 ----a-w C:\WINDOWS\system32\gdi32.dll
+ 2008-09-05 22:30:06 1,480,232 ------w C:\WINDOWS\system32\LegitCheckControl.dll
- 2006-08-17 12:29:46 727,552 ----a-w C:\WINDOWS\system32\lsasrv.dll
+ 2007-11-07 09:27:27 727,552 ----a-w C:\WINDOWS\system32\lsasrv.dll
- 2004-08-19 13:39:38 73,216 ----a-w C:\WINDOWS\system32\magnify.exe
+ 2006-10-04 13:32:26 73,216 ----a-w C:\WINDOWS\system32\magnify.exe
- 2004-08-19 13:39:18 138,240 ----a-w C:\WINDOWS\system32\mqad.dll
+ 2007-07-06 12:50:07 138,240 ----a-w C:\WINDOWS\system32\mqad.dll
- 2004-08-19 13:39:18 47,104 ----a-w C:\WINDOWS\system32\mqdscli.dll
+ 2007-07-06 12:50:07 47,104 ----a-w C:\WINDOWS\system32\mqdscli.dll
- 2004-08-19 13:39:18 16,896 ----a-w C:\WINDOWS\system32\mqise.dll
+ 2007-07-06 12:50:07 16,896 ----a-w C:\WINDOWS\system32\mqise.dll
- 2004-08-19 13:39:18 660,992 ----a-w C:\WINDOWS\system32\mqqm.dll
+ 2007-07-06 12:50:07 660,992 ----a-w C:\WINDOWS\system32\mqqm.dll
- 2004-08-19 13:39:18 177,152 ----a-w C:\WINDOWS\system32\mqrt.dll
+ 2007-07-06 12:50:07 177,152 ----a-w C:\WINDOWS\system32\mqrt.dll
- 2004-08-19 13:39:18 95,744 ----a-w C:\WINDOWS\system32\mqsec.dll
+ 2007-07-06 12:50:07 95,744 ----a-w C:\WINDOWS\system32\mqsec.dll
- 2004-08-19 13:39:18 48,640 ----a-w C:\WINDOWS\system32\mqupgrd.dll
+ 2007-07-06 12:50:07 48,640 ----a-w C:\WINDOWS\system32\mqupgrd.dll
- 2004-08-19 13:39:18 519,168 ----a-w C:\WINDOWS\system32\mqutil.dll
+ 2007-07-06 12:50:07 519,168 ----a-w C:\WINDOWS\system32\mqutil.dll
- 2005-05-03 10:58:36 2,890,240 ----a-w C:\WINDOWS\system32\msi.dll
+ 2007-04-18 16:14:23 2,854,400 ----a-w C:\WINDOWS\system32\msi.dll
- 2004-08-19 13:39:42 54,784 ----a-w C:\WINDOWS\system32\narrator.exe
+ 2006-10-04 13:32:23 54,784 ----a-w C:\WINDOWS\system32\narrator.exe
- 2007-05-17 11:29:12 549,376 ----a-w C:\WINDOWS\system32\oleaut32.dll
+ 2007-12-04 18:40:54 550,912 ----a-w C:\WINDOWS\system32\oleaut32.dll
- 2004-08-19 13:39:44 216,576 ----a-w C:\WINDOWS\system32\osk.exe
+ 2006-10-04 13:32:25 216,576 ----a-w C:\WINDOWS\system32\osk.exe
- 2008-11-01 00:07:56 92,222 ----a-w C:\WINDOWS\system32\perfc009.dat
+ 2008-11-02 20:25:41 92,222 ----a-w C:\WINDOWS\system32\perfc009.dat
- 2008-11-01 00:07:56 110,090 ----a-w C:\WINDOWS\system32\perfc010.dat
+ 2008-11-02 20:25:41 110,090 ----a-w C:\WINDOWS\system32\perfc010.dat
- 2008-11-01 00:07:56 505,558 ----a-w C:\WINDOWS\system32\perfh009.dat
+ 2008-11-02 20:25:41 505,558 ----a-w C:\WINDOWS\system32\perfh009.dat
- 2008-11-01 00:07:56 562,422 ----a-w C:\WINDOWS\system32\perfh010.dat
+ 2008-11-02 20:25:41 562,422 ----a-w C:\WINDOWS\system32\perfh010.dat
- 2004-08-19 13:39:26 581,120 ----a-w C:\WINDOWS\system32\rpcrt4.dll
+ 2007-07-09 13:09:43 584,192 ----a-w C:\WINDOWS\system32\rpcrt4.dll
- 2006-12-19 21:50:30 8,482,816 ----a-w C:\WINDOWS\system32\shell32.dll
+ 2007-10-25 16:54:49 8,483,840 ----a-w C:\WINDOWS\system32\shell32.dll
+ 2004-08-19 14:38:30 680,448 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\PCL5ERES.DLL
- 2004-08-19 13:39:30 36,352 ----a-w C:\WINDOWS\system32\umandlg.dll
+ 2006-10-04 13:33:45 36,352 ----a-w C:\WINDOWS\system32\umandlg.dll
- 2004-08-19 13:39:46 50,176 ----a-w C:\WINDOWS\system32\utilman.exe
+ 2006-10-04 13:32:20 50,176 ----a-w C:\WINDOWS\system32\utilman.exe
+ 2008-09-05 22:30:52 267,304 ------w C:\WINDOWS\system32\WgaLogon.dll
+ 2008-09-05 22:30:06 952,360 ------w C:\WINDOWS\system32\WgaTray.exe
- 2007-03-08 15:33:54 1,843,584 ----a-w C:\WINDOWS\system32\win32k.sys
+ 2008-03-20 08:06:49 1,845,248 ----a-w C:\WINDOWS\system32\win32k.sys
- 2004-08-19 13:39:32 230,400 ----a-w C:\WINDOWS\system32\wmasf.dll
+ 2007-10-25 09:00:50 230,912 ----a-w C:\WINDOWS\system32\wmasf.dll
- 2004-08-19 13:39:34 4,874,240 ------w C:\WINDOWS\system32\wmp.dll
+ 2007-04-30 01:22:16 4,734,976 ------w C:\WINDOWS\system32\wmp.dll
- 2004-08-19 13:39:54 2,105,344 ----a-w C:\WINDOWS\system32\wmvcore.dll
+ 2007-10-25 09:01:10 2,109,440 ----a-w C:\WINDOWS\system32\wmvcore.dll
+ 2008-11-02 20:22:30 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_550.dat
.
-- Snapshot per reimpostare la data corrente --
.
((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* i valori vuoti & legittimi/default non sono visualizzati.
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-19 15360]
"Packard Bell Data Secure"="C:\Programmi\Packard Bell Data Secure\PBDataSecure.exe" [2006-06-20 2361856]
"Eraser"="C:\Programmi\Eraser\Eraser.exe" [2007-12-23 916240]
"UIWatcher"="C:\Programmi\Ashampoo\Ashampoo UnInstaller Platinum 2\UIWatcher.exe" [2008-06-02 1741184]
"PeerGuardian"="C:\Programmi\PeerGuardian2\pg2.exe" [2005-09-18 1421824]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2004-05-14 3784704]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2004-05-14 81920]
"SpywareTerminator"="C:\Programmi\Spyware Terminator\SpywareTerminatorShield.exe" [2008-10-01 1783808]
"Acronis Scheduler2 Service"="C:\Programmi\File comuni\Acronis\Schedule2\schedhlp.exe" [2006-12-12 87584]
"TrueImageMonitor.exe"="C:\Programmi\Acronis\TrueImageHome\TrueImageMonitor.exe" [2006-12-12 1186904]
"AcronisTimounterMonitor"="C:\Programmi\Acronis\TrueImageHome\TimounterMonitor.exe" [2006-12-12 1962736]
"PowerMenu"="C:\Programmi\PowerMenu\PowerMenu.exe" [2002-12-20 57344]
"nod32kui"="C:\Programmi\Eset\nod32kui.exe" [2008-09-30 949376]
"EPSON Stylus DX4800 Series"="C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE" [2005-02-02 98304]
"ClocX"="C:\Programmi\ClocX\ClocX.exe" [2007-07-26 270336]
"SmcService"="C:\PROGRA~1\Sygate\SPF\smc.exe" [2003-12-24 2344160]
"nwiz"="nwiz.exe" [2004-05-14 C:\WINDOWS\system32\nwiz.exe]
"Run StartupMonitor"="StartupMonitor.exe" [2000-05-20 C:\WINDOWS\StartupMonitor.exe]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2004-08-19 15360]
C:\Documents and Settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\
OP_CACHE.ATR [2008-10-17 24]
OP_CACHE.IDX [2008-10-17 12]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"SynchronousMachineGroupPolicy"= 0 (0x0)
"SynchronousUserGroupPolicy"= 0 (0x0)
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoStrCmpLogical"= 1 (0x1)
"NoResolveSearch"= 1 (0x1)
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoSMBalloonTip"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Programmi\\uTorrent\\uTorrent.exe"=
R0 videX32;videX32;C:\WINDOWS\system32\DRIVERS\videX32.sys [2006-02-23 9728]
R1 sp_rsdrv2;Spyware Terminator Driver 2;C:\WINDOWS\system32\drivers\sp_rsdrv2.sys [2008-10-01 141312]
R1 VBoxDrv;VirtualBox Service;C:\WINDOWS\system32\DRIVERS\VBoxDrv.sys [2008-09-12 95888]
R1 VBoxUSBMon;VirtualBox USB Monitor Driver;C:\WINDOWS\system32\DRIVERS\VBoxUSBMon.sys [2008-09-12 41680]
R2 NMSAccessU;NMSAccessU;C:\Programmi\CDBurnerXP\NMSAccessU.exe [2008-06-15 71096]
S3 CY_FX_AT;USB Storage Adapter FX_AT (CY);C:\WINDOWS\system32\DRIVERS\CY_FX_AT.SYS [2006-05-24 33536]
S3 VBoxUSB;VirtualBox USB;C:\WINDOWS\system32\Drivers\VBoxUSB.sys [2008-09-12 31824]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\I]
\Shell\AutoRun\command - I:\LaunchU3.exe -a
*Newly Created Service* - PGFILTER
*Newly Created Service* - SPUPDSVC
.
.
------- Supplementare di scansione -------
.
FireFox -: Profile - C:\Documents and Settings\Maurino\Dati applicazioni\Mozilla\Firefox\Profiles\8tamnm53.default\
FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://www.yahoo.it/
.
**************************************************************************
catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-11-02 21:23:46
Windows 5.1.2600 Service Pack 2 NTFS
scansione processi nascosti ...
scansione entrate autostart nascoste ...
Scansione files nascosti ...
Scansione completata con successo
Files nascosti: 0
**************************************************************************
.
--------------------- DLLs Carregadas Sob os Processos em Execução ---------------------
PROCESSO: C:\WINDOWS\system32\lsass.exe
-> C:\Programmi\Eset\pr_imon.dll
.
------------------------ Altri processi in esecuzione ------------------------
.
C:\Programmi\Sygate\SPF\Smc.exe
C:\Programmi\File comuni\Acronis\Schedule2\schedul2.exe
C:\Programmi\Diskeeper Corporation\Diskeeper\DkService.exe
C:\Programmi\ESET\nod32krn.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Programmi\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\system32\rundll32.exe
.
**************************************************************************
.
Ora fine scansione: 2008-11-02 21:26:49 - macchina è stato riavviato
ComboFix-quarantined-files.txt 2008-11-02 20:26:42
ComboFix2.txt 2008-11-02 17:06:18
Pre-Run: 77.243.330.560 byte disponibili
Post-Run: 77,250,748,416 byte disponibili
605 --- E O F --- 2008-11-02 19:15:48
![[!!!]](http://www.megalab.it/forum/images/smilies/attenzione.gif "Attenzione")