All pastes #1091320 Raw Edit

Something

public text v1 · immutable
#1091320 ·published 2008-08-02 23:32 UTC
rendered paste body
ComboFix 08-07-23.5 - Iniciar 2008-08-02 20:21:17.10 - NTFSx86
Microsoft Windows XP Professional  5.1.2600.2.1252.1.1046.18.2289 [GMT -3:00]
Executando de: D:\Meus Progs\ComboFix.exe
 * Criado um novo ponto de restauro

[color=red][b]ATENÇAO - ESTA MAQUINA NAO TEM A CONSOLE DE RECUPERAÇÃO INSTALADA !![/b][/color]
.

(((((((((((((((((((((((   Ficheiros criados de 2008-07-02 to 2008-08-02  ))))))))))))))))))))))))))))))))
.

2008-08-02 17:57 . 2008-08-02 17:59	<DIR>	d--------	C:\Documents and Settings\All Users\Dados de aplicativos\Lavasoft
2008-08-02 17:57 . 2008-08-02 17:57	<DIR>	d--------	C:\Arquivos de programas\Lavasoft
2008-08-02 00:19 . 2008-08-02 00:19	17	--a------	C:\WINDOWS\system32\lyonelbass@hotmail.com
2008-08-02 00:11 . 2008-08-02 01:05	1,469	--a------	C:\WINDOWS\system32\MsnListObj.dsm
2008-08-02 00:01 . 2008-08-02 00:01	0	--a------	C:\WINDOWS\system32\dkwork.ini
2008-08-02 00:00 . 2008-08-02 00:01	290,304	---hs----	C:\WINDOWS\system32\Orkservs.exe
2008-08-02 00:00 . 2008-08-02 00:00	268,288	---hs----	C:\WINDOWS\system32\Msmservs.exe
2008-08-02 00:00 . 2008-08-02 18:39	1,074	--a------	C:\WINDOWS\system32\Config.dsm
2008-08-02 00:00 . 2008-08-02 18:39	687	--a------	C:\WINDOWS\system32\Html.dsm
2008-08-01 23:59 . 2008-08-02 00:00	509,440	---hs----	C:\WINDOWS\system32\Intnetobj.exe
2008-08-01 23:58 . 2008-08-01 23:59	1,718,784	---hs----	C:\WINDOWS\system32\Techserv.exe
2008-08-01 23:58 . 2008-08-01 23:59	214,528	--a------	C:\WINDOWS\system32\Winblaster.exe
2008-08-01 23:58 . 2008-08-01 23:58	55,808	--a------	C:\WINDOWS\system32\Windwn32.exe
2008-07-21 22:32 . 2008-07-21 22:46	<DIR>	d--------	C:\Arquivos de programas\Guitar and Bass Ear Trainer
2008-07-20 10:39 . 2008-07-20 10:39	0	--a------	C:\dump_dvd.vob
2008-07-19 12:10 . 2008-08-02 18:36	244	--ah-----	C:\sqmnoopt19.sqm
2008-07-19 12:10 . 2008-08-02 18:36	232	--ah-----	C:\sqmdata19.sqm
2008-07-19 12:03 . 2008-08-02 18:35	244	--ah-----	C:\sqmnoopt18.sqm
2008-07-19 12:03 . 2008-08-02 18:35	232	--ah-----	C:\sqmdata18.sqm
2008-07-19 11:41 . 2008-08-02 18:35	244	--ah-----	C:\sqmnoopt17.sqm
2008-07-19 11:41 . 2008-08-02 18:35	232	--ah-----	C:\sqmdata17.sqm
2008-07-19 11:35 . 2008-08-02 18:35	244	--ah-----	C:\sqmnoopt16.sqm
2008-07-19 11:35 . 2008-08-02 18:35	232	--ah-----	C:\sqmdata16.sqm
2008-07-19 11:17 . 2007-02-26 04:03	16,125,440	-ra------	C:\WINDOWS\Rthdcpl.exe.xpize
2008-07-19 11:17 . 2005-09-20 23:25	299,008	-ra------	C:\WINDOWS\system32\Alsndmgr.cpl.xpize
2008-07-19 11:17 . 2006-08-17 19:58	282,624	-ra------	C:\WINDOWS\system32\Rtsndmgr.cpl.xpize
2008-07-19 11:17 . 2006-07-21 05:14	86,016	-ra------	C:\WINDOWS\Soundman.exe.xpize
2008-07-19 11:15 . 2004-08-03 23:45	219,648	--a------	C:\WINDOWS\system32\uxtheme.backup
2008-07-19 10:56 . 2008-08-02 18:41	<DIR>	d--------	C:\Arquivos de programas\Thoosje Sidebar V2.3
2008-07-19 10:28 . 2008-05-24 00:24	224	-rahs----	C:\BOOT.BKK
2008-07-19 10:26 . 2008-07-19 10:26	<DIR>	d--------	C:\Arquivos de programas\TGTSoft
2008-07-19 00:48 . 2008-07-19 00:48	7,168	--ahs----	C:\WINDOWS\Thumbs.db
2008-07-15 00:16 . 2008-07-19 01:10	<DIR>	d--------	C:\Arquivos de programas\Stardock
2008-07-15 00:16 . 2008-07-19 01:10	<DIR>	d--------	C:\Arquivos de programas\Arquivos comuns\Stardock
2008-07-14 00:13 . 2008-07-14 00:13	<DIR>	d--------	C:\Arquivos de programas\Alwil Software
2008-07-13 23:03 . 2007-10-16 09:00	<DIR>	d--h-----	C:\Documents and Settings\Administrador.CPU\Modelos
2008-07-13 23:03 . 2007-10-16 05:52	<DIR>	d--------	C:\Documents and Settings\Administrador.CPU\Meus documentos
2008-07-13 23:03 . 2007-10-16 05:52	<DIR>	dr-------	C:\Documents and Settings\Administrador.CPU\Menu Iniciar
2008-07-13 23:03 . 2007-10-16 05:52	<DIR>	d--------	C:\Documents and Settings\Administrador.CPU\Favoritos
2008-07-13 23:03 . 2007-10-16 05:52	<DIR>	dr-h-----	C:\Documents and Settings\Administrador.CPU\Dados de aplicativos
2008-07-13 23:03 . 2008-08-02 20:22	<DIR>	d--h-----	C:\Documents and Settings\Administrador.CPU\Configurações locais
2008-07-13 23:03 . 2007-10-16 05:52	<DIR>	d--h-----	C:\Documents and Settings\Administrador.CPU\Ambiente de rede
2008-07-13 23:03 . 2007-10-16 05:52	<DIR>	d--h-----	C:\Documents and Settings\Administrador.CPU\Ambiente de impressão
2008-07-13 23:03 . 2008-07-13 23:03	<DIR>	d--------	C:\Documents and Settings\Administrador.CPU
2008-07-13 22:16 . 2007-10-16 09:00	<DIR>	d--h-----	C:\Documents and Settings\Administrador\Modelos
2008-07-13 22:16 . 2007-10-16 05:52	<DIR>	d--------	C:\Documents and Settings\Administrador\Meus documentos
2008-07-13 22:16 . 2007-10-16 05:52	<DIR>	dr-------	C:\Documents and Settings\Administrador\Menu Iniciar
2008-07-13 22:16 . 2007-10-16 05:52	<DIR>	d--------	C:\Documents and Settings\Administrador\Favoritos
2008-07-13 22:16 . 2007-10-16 05:52	<DIR>	dr-h-----	C:\Documents and Settings\Administrador\Dados de aplicativos
2008-07-13 22:16 . 2008-07-13 22:16	<DIR>	d--h-----	C:\Documents and Settings\Administrador\Configurações locais
2008-07-13 22:16 . 2007-10-16 05:52	<DIR>	d--h-----	C:\Documents and Settings\Administrador\Ambiente de rede
2008-07-13 22:16 . 2007-10-16 05:52	<DIR>	d--h-----	C:\Documents and Settings\Administrador\Ambiente de impressão
2008-07-13 22:16 . 2008-07-13 22:16	<DIR>	d--------	C:\Documents and Settings\Administrador
2008-07-13 11:49 . 2008-07-13 22:19	196	--a------	C:\fx.reg
2008-07-13 10:25 . 2008-07-13 10:25	27	--a------	C:\WINDOWS\winhlp32.dat
2008-07-09 23:19 . 2008-07-09 23:19	<DIR>	d--------	C:\Documents and Settings\Iniciar\Dados de aplicativos\Nokia Multimedia Player
2008-07-09 23:13 . 2008-08-02 18:12	54,156	--ah-----	C:\WINDOWS\QTFont.qfn
2008-07-09 23:13 . 2008-07-09 23:13	1,409	--a------	C:\WINDOWS\QTFont.for
2008-07-09 18:02 . 2004-08-03 23:08	25,600	--a------	C:\WINDOWS\system32\drivers\usbser.sys
2008-07-09 18:02 . 2004-08-03 23:08	25,600	--a--c---	C:\WINDOWS\system32\dllcache\usbser.sys
2008-07-09 18:02 . 2008-07-09 18:02	0	--ah-----	C:\WINDOWS\system32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf
2008-07-09 18:02 . 2008-07-09 18:02	0	--ah-----	C:\WINDOWS\system32\drivers\Msft_Kernel_ccdcmb_01005.Wdf
2008-07-09 18:01 . 2008-07-09 18:03	<DIR>	d--------	C:\Documents and Settings\Iniciar\Dados de aplicativos\PC Suite
2008-07-09 18:01 . 2008-07-09 18:03	<DIR>	d--------	C:\Documents and Settings\Iniciar\Dados de aplicativos\Nokia
2008-07-09 18:01 . 2008-07-13 23:02	<DIR>	d--------	C:\Documents and Settings\All Users\Dados de aplicativos\PC Suite
2008-07-09 18:01 . 2008-07-09 18:01	<DIR>	d--------	C:\Arquivos de programas\PC Connectivity Solution
2008-07-09 18:01 . 2008-07-09 18:01	<DIR>	d--------	C:\Arquivos de programas\Arquivos comuns\PCSuite
2008-07-09 18:01 . 2008-07-09 18:01	<DIR>	d--------	C:\Arquivos de programas\Arquivos comuns\Nokia
2008-07-09 18:01 . 2007-11-29 10:33	1,419,232	--a------	C:\WINDOWS\system32\wdfcoinstaller01005.dll
2008-07-09 18:01 . 2007-11-29 10:39	95,744	--a------	C:\WINDOWS\system32\nmwcdcocls.dll
2008-07-09 18:01 . 2007-09-17 15:53	21,632	--a------	C:\WINDOWS\system32\drivers\pccsmcfd.sys
2008-07-09 18:01 . 2007-11-29 10:39	19,328	--a------	C:\WINDOWS\system32\drivers\ccdcmbo.sys
2008-07-09 18:01 . 2007-11-29 10:39	16,896	--a------	C:\WINDOWS\system32\drivers\ccdcmb.sys
2008-07-09 18:01 . 2007-11-29 10:39	8,064	--a------	C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys
2008-07-09 18:01 . 2007-11-29 10:39	8,064	--a------	C:\WINDOWS\system32\drivers\usbser_lowerflt.sys
2008-07-09 18:00 . 2008-07-09 18:00	<DIR>	d--------	C:\Documents and Settings\All Users\Dados de aplicativos\Installations
2008-07-09 18:00 . 2008-07-09 18:01	<DIR>	d--------	C:\Arquivos de programas\Nokia
2008-07-09 18:00 . 2007-11-29 10:32	48,128	--a------	C:\WINDOWS\system32\nmwcdcls.dll
2008-07-09 04:45 . 2008-07-19 16:17	<DIR>	d--------	C:\Documents and Settings\Iniciar\Dados de aplicativos\MassTube
2008-07-09 04:45 . 2008-07-09 04:45	<DIR>	d--------	C:\Arquivos de programas\MassTube

.
(((((((((((((((((((((((((((((((((((((   Relatório Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-08-02 22:43	---------	d-----w	C:\Arquivos de programas\Arquivos comuns\Wise Installation Wizard
2008-08-02 21:42	---------	d-----w	C:\Arquivos de programas\VisualTaskTips
2008-08-02 04:04	---------	d--h--w	C:\Arquivos de programas\Scpad
2008-07-20 13:37	---------	d-----w	C:\Documents and Settings\Iniciar\Dados de aplicativos\CyberLink
2008-07-20 13:37	---------	d-----w	C:\Documents and Settings\All Users\Dados de aplicativos\CyberLink
2008-07-20 12:40	---------	d-----w	C:\Documents and Settings\All Users\Dados de aplicativos\DVD Shrink
2008-07-20 00:12	---------	d-----w	C:\Arquivos de programas\eMule
2008-07-20 00:04	---------	d-----w	C:\Documents and Settings\Iniciar\Dados de aplicativos\uTorrent
2008-07-19 22:21	---------	d-----w	C:\Arquivos de programas\Java
2008-07-19 15:00	219,648	----a-w	C:\WINDOWS\system32\uxtheme.dll
2008-07-19 03:43	---------	d-----w	C:\Arquivos de programas\OBjectDock
2008-07-19 03:24	---------	d-----w	C:\Arquivos de programas\Windows Media Connect 2
2008-07-19 03:24	---------	d-----w	C:\Arquivos de programas\Pro Evolution Soccer 2008
2008-07-19 03:24	---------	d-----w	C:\Arquivos de programas\LimeWire
2008-07-19 03:24	---------	d-----w	C:\Arquivos de programas\iLuminaPO
2008-07-19 03:24	---------	d-----w	C:\Arquivos de programas\AdorageI-SAL
2008-07-18 03:53	---------	d-----w	C:\Documents and Settings\Iniciar\Dados de aplicativos\LimeWire
2008-07-09 21:01	---------	d-----w	C:\Arquivos de programas\DIFX
2008-06-25 02:36	---------	d-----w	C:\Arquivos de programas\DVD Decrypter
2008-06-25 02:35	---------	d-----w	C:\Arquivos de programas\DVD Shrink
2008-06-20 17:41	247,808	----a-w	C:\WINDOWS\system32\mswsock.dll
2008-06-20 10:45	360,320	----a-w	C:\WINDOWS\system32\drivers\tcpip.sys
2008-06-20 10:44	138,368	----a-w	C:\WINDOWS\system32\drivers\afd.sys
2008-06-20 09:52	225,920	----a-w	C:\WINDOWS\system32\drivers\tcpip6.sys
2008-06-18 16:19	---------	d-----w	C:\Arquivos de programas\Vimicro Corporation
2008-06-18 16:18	---------	d--h--w	C:\Arquivos de programas\InstallShield Installation Information
2008-06-18 16:18	---------	d-----w	C:\Arquivos de programas\Vimicro
2008-06-16 19:59	---------	d-----w	C:\Documents and Settings\Iniciar\Dados de aplicativos\Ahead
2008-06-16 19:59	---------	d-----w	C:\Arquivos de programas\Arquivos comuns\Ahead
2008-06-14 17:59	272,384	------w	C:\WINDOWS\system32\drivers\bthport.sys
2008-06-04 11:50	---------	d-----w	C:\Arquivos de programas\Viduku
2008-06-03 21:24	---------	d-----w	C:\Arquivos de programas\FreeRIP2
2008-06-02 22:27	---------	d-----w	C:\Arquivos de programas\Windows Live Safety Center
2008-06-02 21:42	---------	d-----w	C:\Arquivos de programas\uTorrent
2008-06-02 20:56	---------	d-----w	C:\Arquivos de programas\Arquivos comuns\Adobe
2008-06-02 15:54	---------	d-----w	C:\Arquivos de programas\WinAVI Video Converter
2008-06-02 14:37	---------	d-----w	C:\Arquivos de programas\Total Video Converter
2008-05-29 13:05	103,736	----a-w	C:\WINDOWS\system32\PnkBstrB.exe
2008-05-19 04:05	66,872	----a-w	C:\WINDOWS\system32\PnkBstrA.exe
2008-05-15 10:27	22,328	----a-w	C:\Documents and Settings\Iniciar\Dados de aplicativos\PnkBstrK.sys
2008-05-15 10:26	669,184	----a-w	C:\WINDOWS\system32\pbsvc.exe
2008-05-09 20:54	107,888	----a-w	C:\WINDOWS\system32\CmdLineExt.dll
2008-05-07 05:15	1,292,288	----a-w	C:\WINDOWS\system32\quartz.dll
.

(((((((((((((((((((((((((((((   snapshot_2008-07-19_16.35.29.48   )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-01-16 01:12:48	296,336	----a-w	C:\WINDOWS\Downloaded Program Files\rufsi.dll
- 2007-06-13 13:21:56	1,697,280	----a-w	C:\WINDOWS\explorer.exe
+ 2007-06-13 13:21:56	1,035,264	----a-w	C:\WINDOWS\explorer.exe
- 2005-05-26 23:22:01	143,872	----a-w	C:\WINDOWS\hh.exe
+ 2005-05-26 23:22:01	10,752	----a-w	C:\WINDOWS\hh.exe
- 2004-08-04 02:45:40	173,568	----a-w	C:\WINDOWS\pchealth\helpctr\binaries\msconfig.exe
+ 2004-08-04 02:45:40	159,744	----a-w	C:\WINDOWS\pchealth\helpctr\binaries\msconfig.exe
- 2004-08-04 02:45:42	428,032	----a-w	C:\WINDOWS\regedit.exe
+ 2004-08-04 02:45:42	150,528	----a-w	C:\WINDOWS\regedit.exe
- 2001-10-28 18:06:06	94,720	----a-w	C:\WINDOWS\system32\acctres.dll
+ 2001-10-28 18:06:06	68,096	----a-w	C:\WINDOWS\system32\acctres.dll
- 2004-08-04 02:45:30	516,096	----a-w	C:\WINDOWS\system32\accwiz.exe
+ 2004-08-04 02:45:30	187,904	----a-w	C:\WINDOWS\system32\accwiz.exe
+ 2008-07-19 14:43:08	1,163,960	----a-w	C:\WINDOWS\system32\aswBoot.exe
- 2006-10-18 23:47:08	284,672	----a-w	C:\WINDOWS\system32\audiodev.dll
+ 2006-10-18 23:47:08	276,992	----a-w	C:\WINDOWS\system32\audiodev.dll
+ 2008-07-19 14:30:53	94,392	----a-w	C:\WINDOWS\system32\AvastSS.scr
- 2004-08-04 02:45:22	30,720	----a-w	C:\WINDOWS\system32\batmeter.dll
+ 2004-08-04 02:45:22	28,672	----a-w	C:\WINDOWS\system32\batmeter.dll
- 2004-08-04 02:45:22	13,312	----a-w	C:\WINDOWS\system32\batt.dll
+ 2004-08-04 02:45:22	8,704	----a-w	C:\WINDOWS\system32\batt.dll
- 2001-10-28 18:06:10	228,864	----a-w	C:\WINDOWS\system32\calc.exe
+ 2001-10-28 18:06:10	115,200	----a-w	C:\WINDOWS\system32\calc.exe
- 2004-08-04 02:45:22	322,560	----a-w	C:\WINDOWS\system32\cdfview.dll
+ 2004-08-04 02:45:22	151,040	----a-w	C:\WINDOWS\system32\cdfview.dll
- 2004-08-04 02:45:22	825,856	----a-w	C:\WINDOWS\system32\certmgr.dll
+ 2004-08-04 02:45:22	464,384	----a-w	C:\WINDOWS\system32\certmgr.dll
- 2001-10-28 18:06:12	179,200	----a-w	C:\WINDOWS\system32\ciadmin.dll
+ 2001-10-28 18:06:12	164,864	----a-w	C:\WINDOWS\system32\ciadmin.dll
- 2004-08-04 02:45:30	80,384	----a-w	C:\WINDOWS\system32\cleanmgr.exe
+ 2004-08-04 02:45:30	64,512	----a-w	C:\WINDOWS\system32\cleanmgr.exe
- 2004-08-04 02:45:32	109,568	----a-w	C:\WINDOWS\system32\clipbrd.exe
+ 2004-08-04 02:45:32	104,960	----a-w	C:\WINDOWS\system32\clipbrd.exe
- 2004-08-04 02:45:32	48,128	----a-w	C:\WINDOWS\system32\clipsrv.exe
+ 2004-08-04 02:45:32	33,280	----a-w	C:\WINDOWS\system32\clipsrv.exe
- 2004-08-04 02:45:32	514,560	----a-w	C:\WINDOWS\system32\cmd.exe
+ 2004-08-04 02:45:32	400,384	----a-w	C:\WINDOWS\system32\cmd.exe
- 2004-08-04 02:45:22	518,144	----a-w	C:\WINDOWS\system32\cmdial32.dll
+ 2004-08-04 02:45:22	347,648	----a-w	C:\WINDOWS\system32\cmdial32.dll
- 2004-08-04 02:45:32	61,440	----a-w	C:\WINDOWS\system32\cmdl32.exe
+ 2004-08-04 02:45:32	47,104	----a-w	C:\WINDOWS\system32\cmdl32.exe
- 2004-08-04 02:45:32	79,360	----a-w	C:\WINDOWS\system32\cmstp.exe
+ 2004-08-04 02:45:32	65,024	----a-w	C:\WINDOWS\system32\cmstp.exe
- 2004-08-04 02:45:22	325,120	----a-w	C:\WINDOWS\system32\comdlg32.dll
+ 2004-08-04 02:45:22	275,456	----a-w	C:\WINDOWS\system32\comdlg32.dll
- 2004-08-04 02:45:22	832,000	----a-w	C:\WINDOWS\system32\comres.dll
+ 2004-08-04 02:45:22	821,760	----a-w	C:\WINDOWS\system32\comres.dll
- 2004-08-04 02:45:32	41,472	----a-w	C:\WINDOWS\system32\conime.exe
+ 2004-08-04 02:45:32	27,648	----a-w	C:\WINDOWS\system32\conime.exe
- 2004-08-04 02:45:22	205,312	----a-w	C:\WINDOWS\system32\credui.dll
+ 2004-08-04 02:45:22	164,352	----a-w	C:\WINDOWS\system32\credui.dll
- 2004-08-04 02:45:22	583,168	----a-w	C:\WINDOWS\system32\cryptui.dll
+ 2004-08-04 02:45:22	528,384	----a-w	C:\WINDOWS\system32\cryptui.dll
- 2004-08-04 02:45:32	114,688	----a-w	C:\WINDOWS\system32\cscript.exe
+ 2004-08-04 02:45:32	98,304	----a-w	C:\WINDOWS\system32\cscript.exe
- 2004-08-04 02:45:22	780,800	----a-w	C:\WINDOWS\system32\cscui.dll
+ 2004-08-04 02:45:22	331,776	----a-w	C:\WINDOWS\system32\cscui.dll
- 2004-08-04 02:45:32	30,208	----a-w	C:\WINDOWS\system32\ctfmon.exe
+ 2004-08-04 02:45:32	15,360	----a-w	C:\WINDOWS\system32\ctfmon.exe
- 2001-10-28 18:06:18	20,480	----a-w	C:\WINDOWS\system32\deskadp.dll
+ 2001-10-28 18:06:18	16,896	----a-w	C:\WINDOWS\system32\deskadp.dll
- 2001-10-28 18:06:18	19,968	----a-w	C:\WINDOWS\system32\deskmon.dll
+ 2001-10-28 18:06:18	16,896	----a-w	C:\WINDOWS\system32\deskmon.dll
- 2001-10-28 18:06:18	22,016	----a-w	C:\WINDOWS\system32\deskperf.dll
+ 2001-10-28 18:06:18	18,432	----a-w	C:\WINDOWS\system32\deskperf.dll
- 2004-08-04 02:45:22	432,128	----a-w	C:\WINDOWS\system32\devmgr.dll
+ 2004-08-04 02:45:22	288,768	----a-w	C:\WINDOWS\system32\devmgr.dll
- 2001-10-28 18:06:18	59,904	----a-w	C:\WINDOWS\system32\dfrgres.dll
+ 2001-10-28 18:06:18	54,272	----a-w	C:\WINDOWS\system32\dfrgres.dll
- 2001-10-28 18:06:18	1,506,304	----a-w	C:\WINDOWS\system32\diskcopy.dll
+ 2001-10-28 18:06:18	1,502,208	----a-w	C:\WINDOWS\system32\diskcopy.dll
- 2001-10-28 18:06:06	94,720	-c--a-w	C:\WINDOWS\system32\dllcache\acctres.dll
+ 2001-10-28 18:06:06	68,096	-c--a-w	C:\WINDOWS\system32\dllcache\acctres.dll
- 2004-08-04 02:45:30	516,096	-c--a-w	C:\WINDOWS\system32\dllcache\accwiz.exe
+ 2004-08-04 02:45:30	187,904	-c--a-w	C:\WINDOWS\system32\dllcache\accwiz.exe
- 2004-08-04 02:45:22	30,720	-c--a-w	C:\WINDOWS\system32\dllcache\batmeter.dll
+ 2004-08-04 02:45:22	28,672	-c--a-w	C:\WINDOWS\system32\dllcache\batmeter.dll
- 2004-08-04 02:45:22	13,312	-c--a-w	C:\WINDOWS\system32\dllcache\batt.dll
+ 2004-08-04 02:45:22	8,704	-c--a-w	C:\WINDOWS\system32\dllcache\batt.dll
- 2001-10-28 18:06:10	228,864	-c--a-w	C:\WINDOWS\system32\dllcache\calc.exe
+ 2001-10-28 18:06:10	115,200	-c--a-w	C:\WINDOWS\system32\dllcache\calc.exe
- 2004-08-04 02:45:22	322,560	-c--a-w	C:\WINDOWS\system32\dllcache\cdfview.dll
+ 2004-08-04 02:45:22	151,040	-c--a-w	C:\WINDOWS\system32\dllcache\cdfview.dll
- 2004-08-04 02:45:22	825,856	-c--a-w	C:\WINDOWS\system32\dllcache\certmgr.dll
+ 2004-08-04 02:45:22	464,384	-c--a-w	C:\WINDOWS\system32\dllcache\certmgr.dll
- 2001-10-28 18:06:12	179,200	-c--a-w	C:\WINDOWS\system32\dllcache\ciadmin.dll
+ 2001-10-28 18:06:12	164,864	-c--a-w	C:\WINDOWS\system32\dllcache\ciadmin.dll
- 2004-08-04 02:45:30	80,384	-c--a-w	C:\WINDOWS\system32\dllcache\cleanmgr.exe
+ 2004-08-04 02:45:30	64,512	-c--a-w	C:\WINDOWS\system32\dllcache\cleanmgr.exe
- 2004-08-04 02:45:32	109,568	-c--a-w	C:\WINDOWS\system32\dllcache\clipbrd.exe
+ 2004-08-04 02:45:32	104,960	-c--a-w	C:\WINDOWS\system32\dllcache\clipbrd.exe
- 2004-08-04 02:45:32	48,128	-c--a-w	C:\WINDOWS\system32\dllcache\clipsrv.exe
+ 2004-08-04 02:45:32	33,280	-c--a-w	C:\WINDOWS\system32\dllcache\clipsrv.exe
- 2004-08-04 02:45:32	514,560	-c--a-w	C:\WINDOWS\system32\dllcache\cmd.exe
+ 2004-08-04 02:45:32	400,384	-c--a-w	C:\WINDOWS\system32\dllcache\cmd.exe
- 2004-08-04 02:45:22	518,144	-c--a-w	C:\WINDOWS\system32\dllcache\cmdial32.dll
+ 2004-08-04 02:45:22	347,648	-c--a-w	C:\WINDOWS\system32\dllcache\cmdial32.dll
- 2004-08-04 02:45:32	61,440	-c--a-w	C:\WINDOWS\system32\dllcache\cmdl32.exe
+ 2004-08-04 02:45:32	47,104	-c--a-w	C:\WINDOWS\system32\dllcache\cmdl32.exe
- 2004-08-04 02:45:32	79,360	-c--a-w	C:\WINDOWS\system32\dllcache\cmstp.exe
+ 2004-08-04 02:45:32	65,024	-c--a-w	C:\WINDOWS\system32\dllcache\cmstp.exe
- 2004-08-04 02:45:22	325,120	-c--a-w	C:\WINDOWS\system32\dllcache\comdlg32.dll
+ 2004-08-04 02:45:22	275,456	-c--a-w	C:\WINDOWS\system32\dllcache\comdlg32.dll
- 2004-08-04 02:45:22	832,000	-c--a-w	C:\WINDOWS\system32\dllcache\comres.dll
+ 2004-08-04 02:45:22	821,760	-c--a-w	C:\WINDOWS\system32\dllcache\comres.dll
- 2004-08-04 02:45:32	41,472	-c--a-w	C:\WINDOWS\system32\dllcache\conime.exe
+ 2004-08-04 02:45:32	27,648	-c--a-w	C:\WINDOWS\system32\dllcache\conime.exe
- 2004-08-04 02:45:22	205,312	-c--a-w	C:\WINDOWS\system32\dllcache\credui.dll
+ 2004-08-04 02:45:22	164,352	-c--a-w	C:\WINDOWS\system32\dllcache\credui.dll
- 2004-08-04 02:45:22	583,168	-c--a-w	C:\WINDOWS\system32\dllcache\cryptui.dll
+ 2004-08-04 02:45:22	528,384	-c--a-w	C:\WINDOWS\system32\dllcache\cryptui.dll
- 2004-08-04 02:45:32	114,688	-c--a-w	C:\WINDOWS\system32\dllcache\cscript.exe
+ 2004-08-04 02:45:32	98,304	-c--a-w	C:\WINDOWS\system32\dllcache\cscript.exe
- 2004-08-04 02:45:22	780,800	-c--a-w	C:\WINDOWS\system32\dllcache\cscui.dll
+ 2004-08-04 02:45:22	331,776	-c--a-w	C:\WINDOWS\system32\dllcache\cscui.dll
- 2004-08-04 02:45:32	30,208	-c--a-w	C:\WINDOWS\system32\dllcache\ctfmon.exe
+ 2004-08-04 02:45:32	15,360	-c--a-w	C:\WINDOWS\system32\dllcache\ctfmon.exe
- 2001-10-28 18:06:18	20,480	-c--a-w	C:\WINDOWS\system32\dllcache\deskadp.dll
+ 2001-10-28 18:06:18	16,896	-c--a-w	C:\WINDOWS\system32\dllcache\deskadp.dll
- 2001-10-28 18:06:18	19,968	-c--a-w	C:\WINDOWS\system32\dllcache\deskmon.dll
+ 2001-10-28 18:06:18	16,896	-c--a-w	C:\WINDOWS\system32\dllcache\deskmon.dll
- 2001-10-28 18:06:18	22,016	-c--a-w	C:\WINDOWS\system32\dllcache\deskperf.dll
+ 2001-10-28 18:06:18	18,432	-c--a-w	C:\WINDOWS\system32\dllcache\deskperf.dll
- 2004-08-04 02:45:22	432,128	-c--a-w	C:\WINDOWS\system32\dllcache\devmgr.dll
+ 2004-08-04 02:45:22	288,768	-c--a-w	C:\WINDOWS\system32\dllcache\devmgr.dll
- 2001-10-28 18:06:18	59,904	-c--a-w	C:\WINDOWS\system32\dllcache\dfrgres.dll
+ 2001-10-28 18:06:18	54,272	-c--a-w	C:\WINDOWS\system32\dllcache\dfrgres.dll
- 2001-10-28 18:06:18	1,506,304	-c--a-w	C:\WINDOWS\system32\dllcache\diskcopy.dll
+ 2001-10-28 18:06:18	1,502,208	-c--a-w	C:\WINDOWS\system32\dllcache\diskcopy.dll
- 2001-10-28 18:06:18	797,696	-c--a-w	C:\WINDOWS\system32\dllcache\dmdlgs.dll
+ 2001-10-28 18:06:18	273,920	-c--a-w	C:\WINDOWS\system32\dllcache\dmdlgs.dll
- 2001-10-28 18:06:18	192,512	-c--a-w	C:\WINDOWS\system32\dllcache\dmdskres.dll
+ 2001-10-28 18:06:18	127,488	-c--a-w	C:\WINDOWS\system32\dllcache\dmdskres.dll
- 2004-08-04 02:45:22	484,352	-c--a-w	C:\WINDOWS\system32\dllcache\dpvoice.dll
+ 2004-08-04 02:45:22	212,992	-c--a-w	C:\WINDOWS\system32\dllcache\dpvoice.dll
- 2001-10-28 18:06:30	171,520	-c--a-w	C:\WINDOWS\system32\dllcache\dskquoui.dll
+ 2001-10-28 18:06:30	146,944	-c--a-w	C:\WINDOWS\system32\dllcache\dskquoui.dll
- 2004-08-04 02:45:22	196,096	-c--a-w	C:\WINDOWS\system32\dllcache\dsquery.dll
+ 2004-08-04 02:45:22	240,128	-c--a-w	C:\WINDOWS\system32\dllcache\dsquery.dll
- 2004-08-04 02:45:22	228,864	-c--a-w	C:\WINDOWS\system32\dllcache\dsuiext.dll
+ 2004-08-04 02:45:22	113,664	-c--a-w	C:\WINDOWS\system32\dllcache\dsuiext.dll
- 2006-08-24 16:18:32	632,886	-c--a-w	C:\WINDOWS\system32\dllcache\dxmasf.dll
+ 2006-08-24 16:18:32	499,766	-c--a-w	C:\WINDOWS\system32\dllcache\dxmasf.dll
- 2004-08-04 02:45:22	322,560	-c--a-w	C:\WINDOWS\system32\dllcache\els.dll
+ 2004-08-04 02:45:22	185,344	-c--a-w	C:\WINDOWS\system32\dllcache\els.dll
- 2001-10-28 18:06:32	146,432	-c--a-w	C:\WINDOWS\system32\dllcache\eventvwr.exe
+ 2001-10-28 18:06:32	9,216	-c--a-w	C:\WINDOWS\system32\dllcache\eventvwr.exe
- 2007-06-13 13:21:56	1,697,280	-c--a-w	C:\WINDOWS\system32\dllcache\explorer.exe
+ 2007-06-13 13:21:56	1,035,264	-c--a-w	C:\WINDOWS\system32\dllcache\explorer.exe
- 2004-08-04 02:45:22	369,152	-c--a-w	C:\WINDOWS\system32\dllcache\filemgmt.dll
+ 2004-08-04 02:45:22	342,528	-c--a-w	C:\WINDOWS\system32\dllcache\filemgmt.dll
- 2004-08-04 02:45:22	222,208	-c--a-w	C:\WINDOWS\system32\dllcache\fldrclnr.dll
+ 2004-08-04 02:45:22	88,576	-c--a-w	C:\WINDOWS\system32\dllcache\fldrclnr.dll
- 2004-08-04 02:45:22	1,181,696	-c--a-w	C:\WINDOWS\system32\dllcache\fontext.dll
+ 2004-08-04 02:45:22	384,512	-c--a-w	C:\WINDOWS\system32\dllcache\fontext.dll
- 2001-10-28 18:06:34	241,152	-c--a-w	C:\WINDOWS\system32\dllcache\gcdef.dll
+ 2001-10-28 18:06:34	77,312	-c--a-w	C:\WINDOWS\system32\dllcache\gcdef.dll
- 2004-08-04 02:44:18	585,728	-c--a-w	C:\WINDOWS\system32\dllcache\gpedit.dll
+ 2004-08-04 02:44:18	572,928	-c--a-w	C:\WINDOWS\system32\dllcache\gpedit.dll
- 2005-05-26 23:22:01	143,872	-c--a-w	C:\WINDOWS\system32\dllcache\hh.exe
+ 2005-05-26 23:22:01	10,752	-c--a-w	C:\WINDOWS\system32\dllcache\hh.exe
- 2004-08-04 02:45:24	740,352	-c--a-w	C:\WINDOWS\system32\dllcache\hnetwiz.dll
+ 2004-08-04 02:45:24	334,848	-c--a-w	C:\WINDOWS\system32\dllcache\hnetwiz.dll
- 2004-08-04 02:45:24	168,960	-c--a-w	C:\WINDOWS\system32\dllcache\hotplug.dll
+ 2004-08-04 02:45:24	146,432	-c--a-w	C:\WINDOWS\system32\dllcache\hotplug.dll
- 2001-10-28 18:06:36	83,456	-c--a-w	C:\WINDOWS\system32\dllcache\icmui.dll
+ 2001-10-28 18:06:36	55,808	-c--a-w	C:\WINDOWS\system32\dllcache\icmui.dll
- 2004-08-04 02:45:36	204,800	-c--a-w	C:\WINDOWS\system32\dllcache\iexpress.exe
+ 2004-08-04 02:45:36	114,688	-c--a-w	C:\WINDOWS\system32\dllcache\iexpress.exe
- 2001-10-28 18:06:38	149,504	-c--a-w	C:\WINDOWS\system32\dllcache\inetcplc.dll
+ 2001-10-28 18:06:38	117,248	-c--a-w	C:\WINDOWS\system32\dllcache\inetcplc.dll
- 2004-08-04 02:44:20	57,344	-c--a-w	C:\WINDOWS\system32\dllcache\inetres.dll
+ 2004-08-04 02:44:20	49,664	-c--a-w	C:\WINDOWS\system32\dllcache\inetres.dll
- 2004-08-04 02:45:24	126,464	-c--a-w	C:\WINDOWS\system32\dllcache\input.dll
+ 2004-08-04 02:45:24	125,440	-c--a-w	C:\WINDOWS\system32\dllcache\input.dll
- 2001-10-28 18:06:38	17,920	-c--a-w	C:\WINDOWS\system32\dllcache\irclass.dll
+ 2001-10-28 18:06:38	13,312	-c--a-w	C:\WINDOWS\system32\dllcache\irclass.dll
- 2004-08-04 02:45:24	408,064	-c--a-w	C:\WINDOWS\system32\dllcache\keymgr.dll
+ 2004-08-04 02:45:24	152,576	-c--a-w	C:\WINDOWS\system32\dllcache\keymgr.dll
- 2004-08-04 02:45:24	201,728	-c--a-w	C:\WINDOWS\system32\dllcache\mdminst.dll
+ 2004-08-04 02:45:24	119,296	-c--a-w	C:\WINDOWS\system32\dllcache\mdminst.dll
- 2004-08-04 02:45:38	701,440	-c--a-w	C:\WINDOWS\system32\dllcache\migwiz.exe
+ 2004-08-04 02:45:38	245,248	-c--a-w	C:\WINDOWS\system32\dllcache\migwiz.exe
- 2004-08-04 02:45:38	849,920	-c--a-w	C:\WINDOWS\system32\dllcache\mmc.exe
+ 2004-08-04 02:45:38	815,616	-c--a-w	C:\WINDOWS\system32\dllcache\mmc.exe
- 2004-08-04 02:45:24	65,024	-c--a-w	C:\WINDOWS\system32\dllcache\mmcshext.dll
+ 2004-08-04 02:45:24	50,688	-c--a-w	C:\WINDOWS\system32\dllcache\mmcshext.dll
- 2004-08-04 02:45:38	324,096	-c--a-w	C:\WINDOWS\system32\dllcache\mobsync.exe
+ 2004-08-04 02:45:38	143,872	-c--a-w	C:\WINDOWS\system32\dllcache\mobsync.exe
- 2004-08-04 02:45:40	173,568	-c--a-w	C:\WINDOWS\system32\dllcache\msconfig.exe
+ 2004-08-04 02:45:40	159,744	-c--a-w	C:\WINDOWS\system32\dllcache\msconfig.exe
- 2004-08-04 02:45:40	20,480	-c--a-w	C:\WINDOWS\system32\dllcache\msdtc.exe
+ 2004-08-04 02:45:40	6,144	-c--a-w	C:\WINDOWS\system32\dllcache\msdtc.exe
- 2004-08-04 02:45:24	1,501,696	-c--a-w	C:\WINDOWS\system32\dllcache\msgina.dll
+ 2004-08-04 02:45:24	997,888	-c--a-w	C:\WINDOWS\system32\dllcache\msgina.dll
- 2004-08-04 02:45:24	55,296	-c--a-w	C:\WINDOWS\system32\dllcache\msident.dll
+ 2004-08-04 02:45:24	51,712	-c--a-w	C:\WINDOWS\system32\dllcache\msident.dll
- 2004-08-04 02:45:24	363,008	-c--a-w	C:\WINDOWS\system32\dllcache\msieftp.dll
+ 2004-08-04 02:45:24	250,368	-c--a-w	C:\WINDOWS\system32\dllcache\msieftp.dll
- 2005-05-04 17:45:36	211,968	-c--a-w	C:\WINDOWS\system32\dllcache\msiexec.exe
+ 2005-05-04 17:45:36	78,848	-c--a-w	C:\WINDOWS\system32\dllcache\msiexec.exe
- 2004-08-04 02:45:40	186,368	-c--a-w	C:\WINDOWS\system32\dllcache\msimn.exe
+ 2004-08-04 02:45:40	60,416	-c--a-w	C:\WINDOWS\system32\dllcache\msimn.exe
- 2004-08-04 02:44:38	3,145,216	-c--a-w	C:\WINDOWS\system32\dllcache\msoeres.dll
+ 2004-08-04 02:44:38	2,512,896	-c--a-w	C:\WINDOWS\system32\dllcache\msoeres.dll
- 2004-08-04 02:45:40	506,368	-c--a-w	C:\WINDOWS\system32\dllcache\mspaint.exe
+ 2004-08-04 02:45:40	345,600	-c--a-w	C:\WINDOWS\system32\dllcache\mspaint.exe
- 2004-08-04 02:45:26	400,384	-c--a-w	C:\WINDOWS\system32\dllcache\mstask.dll
+ 2004-08-04 02:45:26	278,528	-c--a-w	C:\WINDOWS\system32\dllcache\mstask.dll
- 2004-08-04 02:34:20	419,840	-c--a-w	C:\WINDOWS\system32\dllcache\mstsc.exe
+ 2004-08-04 02:34:20	409,088	-c--a-w	C:\WINDOWS\system32\dllcache\mstsc.exe
- 2007-06-26 06:10:32	1,371,136	-c--a-w	C:\WINDOWS\system32\dllcache\msxml3.dll
+ 2007-06-26 06:10:32	1,104,896	-c--a-w	C:\WINDOWS\system32\dllcache\msxml3.dll
- 2001-10-28 18:07:06	107,520	-c--a-w	C:\WINDOWS\system32\dllcache\mycomput.dll
+ 2001-10-28 18:07:06	90,112	-c--a-w	C:\WINDOWS\system32\dllcache\mycomput.dll
- 2004-08-04 02:45:26	310,784	-c--a-w	C:\WINDOWS\system32\dllcache\mydocs.dll
+ 2004-08-04 02:45:26	90,624	-c--a-w	C:\WINDOWS\system32\dllcache\mydocs.dll
- 2004-08-04 02:45:26	2,028,544	-c--a-w	C:\WINDOWS\system32\dllcache\netplwiz.dll
+ 2004-08-04 02:45:26	879,616	-c--a-w	C:\WINDOWS\system32\dllcache\netplwiz.dll
- 2004-08-04 02:45:26	2,318,336	-c--a-w	C:\WINDOWS\system32\dllcache\netshell.dll
+ 2004-08-04 02:45:26	1,714,688	-c--a-w	C:\WINDOWS\system32\dllcache\netshell.dll
- 2004-08-04 02:45:26	700,928	-c--a-w	C:\WINDOWS\system32\dllcache\newdev.dll
+ 2004-08-04 02:45:26	249,856	-c--a-w	C:\WINDOWS\system32\dllcache\newdev.dll
- 2004-08-04 02:45:40	182,784	-c--a-w	C:\WINDOWS\system32\dllcache\notepad.exe
+ 2004-08-04 02:45:40	70,144	-c--a-w	C:\WINDOWS\system32\dllcache\notepad.exe
- 2004-08-04 02:45:40	93,696	-c--a-w	C:\WINDOWS\system32\dllcache\nslookup.exe
+ 2004-08-04 02:45:40	79,360	-c--a-w	C:\WINDOWS\system32\dllcache\nslookup.exe
- 2004-08-04 02:45:40	1,530,880	-c--a-w	C:\WINDOWS\system32\dllcache\ntbackup.exe
+ 2004-08-04 02:45:40	1,218,560	-c--a-w	C:\WINDOWS\system32\dllcache\ntbackup.exe
- 2001-10-28 18:07:10	28,672	-c--a-w	C:\WINDOWS\system32\dllcache\ntlanui2.dll
+ 2001-10-28 18:07:10	14,848	-c--a-w	C:\WINDOWS\system32\dllcache\ntlanui2.dll
- 2001-10-28 18:07:12	46,080	-c--a-w	C:\WINDOWS\system32\dllcache\ntsd.exe
+ 2001-10-28 18:07:12	31,744	-c--a-w	C:\WINDOWS\system32\dllcache\ntsd.exe
- 2004-08-04 02:44:44	102,400	-c--a-w	C:\WINDOWS\system32\dllcache\odbcint.dll
+ 2004-08-04 02:44:44	98,304	-c--a-w	C:\WINDOWS\system32\dllcache\odbcint.dll
- 2004-08-04 02:45:40	72,704	-c--a-w	C:\WINDOWS\system32\dllcache\oemig50.exe
+ 2004-08-04 02:45:40	60,928	-c--a-w	C:\WINDOWS\system32\dllcache\oemig50.exe
- 2004-08-04 02:45:40	29,696	-c--a-w	C:\WINDOWS\system32\dllcache\perfmon.exe
+ 2004-08-04 02:45:40	15,872	-c--a-w	C:\WINDOWS\system32\dllcache\perfmon.exe
- 2004-08-04 02:45:26	480,768	-c--a-w	C:\WINDOWS\system32\dllcache\photowiz.dll
+ 2004-08-04 02:45:26	172,032	-c--a-w	C:\WINDOWS\system32\dllcache\photowiz.dll
- 2001-10-28 18:07:18	172,032	-c--a-w	C:\WINDOWS\system32\dllcache\pifmgr.dll
+ 2001-10-28 18:07:18	35,328	-c--a-w	C:\WINDOWS\system32\dllcache\pifmgr.dll
- 2004-08-04 02:45:26	901,632	-c--a-w	C:\WINDOWS\system32\dllcache\printui.dll
+ 2004-08-04 02:45:26	572,928	-c--a-w	C:\WINDOWS\system32\dllcache\printui.dll
- 2008-05-07 05:15:38	2,660,864	-c--a-w	C:\WINDOWS\system32\dllcache\quartz.dll
+ 2008-05-07 05:15:38	1,292,288	-c--a-w	C:\WINDOWS\system32\dllcache\quartz.dll
- 2004-08-04 02:45:26	1,001,984	-c--a-w	C:\WINDOWS\system32\dllcache\rasdlg.dll
+ 2004-08-04 02:45:26	672,768	-c--a-w	C:\WINDOWS\system32\dllcache\rasdlg.dll
- 2004-08-04 02:45:42	428,032	-c--a-w	C:\WINDOWS\system32\dllcache\regedit.exe
+ 2004-08-04 02:45:42	150,528	-c--a-w	C:\WINDOWS\system32\dllcache\regedit.exe
- 2001-10-28 18:07:24	17,920	-c--a-w	C:\WINDOWS\system32\dllcache\regedt32.exe
+ 2001-10-28 18:07:24	3,584	-c--a-w	C:\WINDOWS\system32\dllcache\regedt32.exe
- 2004-08-04 02:45:26	82,944	-c--a-w	C:\WINDOWS\system32\dllcache\remotepg.dll
+ 2004-08-04 02:45:26	61,440	-c--a-w	C:\WINDOWS\system32\dllcache\remotepg.dll
- 2004-08-04 02:45:42	506,368	-c--a-w	C:\WINDOWS\system32\dllcache\rstrui.exe
+ 2004-08-04 02:45:42	382,976	-c--a-w	C:\WINDOWS\system32\dllcache\rstrui.exe
- 2004-08-04 02:45:42	28,672	-c--a-w	C:\WINDOWS\system32\dllcache\runonce.exe
+ 2004-08-04 02:45:42	14,336	-c--a-w	C:\WINDOWS\system32\dllcache\runonce.exe
- 2004-08-04 02:45:28	163,840	-c--a-w	C:\WINDOWS\system32\dllcache\scrobj.dll
+ 2004-08-04 02:45:28	159,744	-c--a-w	C:\WINDOWS\system32\dllcache\scrobj.dll
- 2004-08-04 02:45:28	1,429,504	-c--a-w	C:\WINDOWS\system32\dllcache\setupapi.dll
+ 2004-08-04 02:45:28	993,792	-c--a-w	C:\WINDOWS\system32\dllcache\setupapi.dll
- 2004-08-04 02:44:52	821,760	-c--a-w	C:\WINDOWS\system32\dllcache\shdoclc.dll
+ 2004-08-04 02:44:52	563,712	-c--a-w	C:\WINDOWS\system32\dllcache\shdoclc.dll
- 2007-10-25 16:57:15	22,446,080	-c--a-w	C:\WINDOWS\system32\dllcache\shell32.dll
+ 2007-10-25 16:57:15	8,484,352	-c--a-w	C:\WINDOWS\system32\dllcache\shell32.dll
- 2004-08-04 02:45:28	1,242,624	-c--a-w	C:\WINDOWS\system32\dllcache\shimgvw.dll
+ 2004-08-04 02:45:28	439,808	-c--a-w	C:\WINDOWS\system32\dllcache\shimgvw.dll
- 2004-08-04 02:45:42	257,536	-c--a-w	C:\WINDOWS\system32\dllcache\shrpubw.exe
+ 2004-08-04 02:45:42	78,336	-c--a-w	C:\WINDOWS\system32\dllcache\shrpubw.exe
- 2004-08-04 02:45:28	41,984	-c--a-w	C:\WINDOWS\system32\dllcache\shscrap.dll
+ 2004-08-04 02:45:28	27,648	-c--a-w	C:\WINDOWS\system32\dllcache\shscrap.dll
- 2004-08-04 02:45:42	130,048	-c--a-w	C:\WINDOWS\system32\dllcache\sigverif.exe
+ 2004-08-04 02:45:42	71,168	-c--a-w	C:\WINDOWS\system32\dllcache\sigverif.exe
- 2004-08-04 02:45:44	147,968	-c--a-w	C:\WINDOWS\system32\dllcache\sndrec32.exe
+ 2004-08-04 02:45:44	132,608	-c--a-w	C:\WINDOWS\system32\dllcache\sndrec32.exe
- 2001-10-28 18:07:28	146,432	-c--a-w	C:\WINDOWS\system32\dllcache\sndvol32.exe
+ 2001-10-28 18:07:28	139,264	-c--a-w	C:\WINDOWS\system32\dllcache\sndvol32.exe
- 2004-08-04 02:45:28	236,544	-c--a-w	C:\WINDOWS\system32\dllcache\srrstr.dll
+ 2004-08-04 02:45:28	240,640	-c--a-w	C:\WINDOWS\system32\dllcache\srrstr.dll
- 2004-08-04 02:45:28	541,696	-c--a-w	C:\WINDOWS\system32\dllcache\sti_ci.dll
+ 2004-08-04 02:45:28	137,216	-c--a-w	C:\WINDOWS\system32\dllcache\sti_ci.dll
- 2004-08-04 02:45:28	126,464	-c--a-w	C:\WINDOWS\system32\dllcache\stobject.dll
+ 2004-08-04 02:45:28	122,368	-c--a-w	C:\WINDOWS\system32\dllcache\stobject.dll
- 2006-10-20 01:38:48	724,480	-c--a-w	C:\WINDOWS\system32\dllcache\sxs.dll
+ 2006-10-20 01:38:48	714,752	-c--a-w	C:\WINDOWS\system32\dllcache\sxs.dll
- 2004-08-04 02:45:28	379,392	-c--a-w	C:\WINDOWS\system32\dllcache\syncui.dll
+ 2004-08-04 02:45:28	194,560	-c--a-w	C:\WINDOWS\system32\dllcache\syncui.dll
- 2004-08-04 02:45:44	417,792	-c--a-w	C:\WINDOWS\system32\dllcache\sysocmgr.exe
+ 2004-08-04 02:45:44	107,008	-c--a-w	C:\WINDOWS\system32\dllcache\sysocmgr.exe
- 2001-10-28 18:07:30	182,272	-c--a-w	C:\WINDOWS\system32\dllcache\tapiui.dll
+ 2001-10-28 18:07:30	83,968	-c--a-w	C:\WINDOWS\system32\dllcache\tapiui.dll
- 2004-08-04 02:45:44	174,080	-c--a-w	C:\WINDOWS\system32\dllcache\taskmgr.exe
+ 2004-08-04 02:45:44	141,312	-c--a-w	C:\WINDOWS\system32\dllcache\taskmgr.exe
- 2004-08-04 02:45:28	203,776	-c--a-w	C:\WINDOWS\system32\dllcache\tcpmonui.dll
+ 2004-08-04 02:45:28	46,592	-c--a-w	C:\WINDOWS\system32\dllcache\tcpmonui.dll
- 2005-05-11 02:30:02	91,136	-c--a-w	C:\WINDOWS\system32\dllcache\telnet.exe
+ 2005-05-11 02:30:02	77,312	-c--a-w	C:\WINDOWS\system32\dllcache\telnet.exe
- 2004-08-04 02:45:28	449,536	-c--a-w	C:\WINDOWS\system32\dllcache\themeui.dll
+ 2004-08-04 02:45:28	388,608	-c--a-w	C:\WINDOWS\system32\dllcache\themeui.dll
- 2001-10-28 18:07:34	116,736	-c--a-w	C:\WINDOWS\system32\dllcache\verifier.exe
+ 2001-10-28 18:07:34	102,400	-c--a-w	C:\WINDOWS\system32\dllcache\verifier.exe
- 2004-08-04 02:45:46	163,328	-c--a-w	C:\WINDOWS\system32\dllcache\wab.exe
+ 2004-08-04 02:45:46	46,080	-c--a-w	C:\WINDOWS\system32\dllcache\wab.exe
- 2007-05-16 15:13:57	89,088	-c--a-w	C:\WINDOWS\system32\dllcache\wabimp.dll
+ 2007-05-16 15:13:57	85,504	-c--a-w	C:\WINDOWS\system32\dllcache\wabimp.dll
- 2004-08-04 02:45:46	33,280	-c--a-w	C:\WINDOWS\system32\dllcache\wabmig.exe
+ 2004-08-04 02:45:46	30,208	-c--a-w	C:\WINDOWS\system32\dllcache\wabmig.exe
- 2008-04-23 07:14:11	396,800	-c--a-w	C:\WINDOWS\system32\dllcache\webcheck.dll
+ 2008-04-23 07:14:11	233,472	-c--a-w	C:\WINDOWS\system32\dllcache\webcheck.dll
- 2004-08-04 02:45:46	1,366,528	-c--a-w	C:\WINDOWS\system32\dllcache\wiaacmgr.exe
+ 2004-08-04 02:45:46	434,688	-c--a-w	C:\WINDOWS\system32\dllcache\wiaacmgr.exe
- 2004-08-04 02:45:28	497,664	-c--a-w	C:\WINDOWS\system32\dllcache\wiadefui.dll
+ 2004-08-04 02:45:28	464,384	-c--a-w	C:\WINDOWS\system32\dllcache\wiadefui.dll
- 2004-08-04 02:45:28	704,000	-c--a-w	C:\WINDOWS\system32\dllcache\wiashext.dll
+ 2004-08-04 02:45:28	591,872	-c--a-w	C:\WINDOWS\system32\dllcache\wiashext.dll
- 2004-08-04 02:45:10	983,040	-c--a-w	C:\WINDOWS\system32\dllcache\winbrand.dll
+ 2004-08-04 02:45:10	937,984	-c--a-w	C:\WINDOWS\system32\dllcache\winbrand.dll
- 2006-11-03 02:21:18	8,116,224	-c--a-w	C:\WINDOWS\system32\dllcache\wmploc.dll
+ 2006-11-03 02:21:18	8,269,824	-c--a-w	C:\WINDOWS\system32\dllcache\wmploc.dll
- 2001-10-28 18:07:48	19,456	-c--a-w	C:\WINDOWS\system32\dllcache\write.exe
+ 2001-10-28 18:07:48	5,632	-c--a-w	C:\WINDOWS\system32\dllcache\write.exe
- 2004-08-04 02:45:46	405,504	-c--a-w	C:\WINDOWS\system32\dllcache\wscript.exe
+ 2004-08-04 02:45:46	114,688	-c--a-w	C:\WINDOWS\system32\dllcache\wscript.exe
- 2004-08-04 02:45:30	643,584	-c--a-w	C:\WINDOWS\system32\dllcache\wsecedit.dll
+ 2004-08-04 02:45:30	607,744	-c--a-w	C:\WINDOWS\system32\dllcache\wsecedit.dll
- 2004-08-04 02:45:30	940,032	-c--a-w	C:\WINDOWS\system32\dllcache\zipfldr.dll
+ 2004-08-04 02:45:30	338,944	-c--a-w	C:\WINDOWS\system32\dllcache\zipfldr.dll
- 2001-10-28 18:06:18	797,696	----a-w	C:\WINDOWS\system32\dmdlgs.dll
+ 2001-10-28 18:06:18	273,920	----a-w	C:\WINDOWS\system32\dmdlgs.dll
- 2001-10-28 18:06:18	192,512	----a-w	C:\WINDOWS\system32\dmdskres.dll
+ 2001-10-28 18:06:18	127,488	----a-w	C:\WINDOWS\system32\dmdskres.dll
- 2004-08-04 02:45:22	484,352	----a-w	C:\WINDOWS\system32\dpvoice.dll
+ 2004-08-04 02:45:22	212,992	----a-w	C:\WINDOWS\system32\dpvoice.dll
+ 2008-07-19 14:32:15	26,944	----a-w	C:\WINDOWS\system32\drivers\aavmker4.sys
+ 2008-07-19 14:37:42	20,560	----a-w	C:\WINDOWS\system32\drivers\aswFsBlk.sys
+ 2008-01-17 18:34:01	93,264	----a-w	C:\WINDOWS\system32\drivers\aswmon.sys
+ 2008-07-19 14:37:21	94,416	----a-w	C:\WINDOWS\system32\drivers\aswmon2.sys
+ 2008-07-19 14:33:42	23,152	----a-w	C:\WINDOWS\system32\drivers\aswRdr.sys
+ 2008-07-19 14:35:18	78,416	----a-w	C:\WINDOWS\system32\drivers\aswSP.sys
+ 2008-07-19 14:32:36	42,912	----a-w	C:\WINDOWS\system32\drivers\aswTdi.sys
- 2001-10-28 18:06:30	171,520	----a-w	C:\WINDOWS\system32\dskquoui.dll
+ 2001-10-28 18:06:30	146,944	----a-w	C:\WINDOWS\system32\dskquoui.dll
- 2004-08-04 02:45:22	196,096	----a-w	C:\WINDOWS\system32\dsquery.dll
+ 2004-08-04 02:45:22	240,128	----a-w	C:\WINDOWS\system32\dsquery.dll
- 2004-08-04 02:45:22	228,864	----a-w	C:\WINDOWS\system32\dsuiext.dll
+ 2004-08-04 02:45:22	113,664	----a-w	C:\WINDOWS\system32\dsuiext.dll
- 2006-08-24 16:18:32	632,886	----a-w	C:\WINDOWS\system32\dxmasf.dll
+ 2006-08-24 16:18:32	499,766	----a-w	C:\WINDOWS\system32\dxmasf.dll
- 2004-08-04 02:45:22	322,560	----a-w	C:\WINDOWS\system32\els.dll
+ 2004-08-04 02:45:22	185,344	----a-w	C:\WINDOWS\system32\els.dll
- 2001-10-28 18:06:32	146,432	----a-w	C:\WINDOWS\system32\eventvwr.exe
+ 2001-10-28 18:06:32	9,216	----a-w	C:\WINDOWS\system32\eventvwr.exe
- 2004-08-04 02:45:22	369,152	----a-w	C:\WINDOWS\system32\filemgmt.dll
+ 2004-08-04 02:45:22	342,528	----a-w	C:\WINDOWS\system32\filemgmt.dll
- 2004-08-04 02:45:22	222,208	----a-w	C:\WINDOWS\system32\fldrclnr.dll
+ 2004-08-04 02:45:22	88,576	----a-w	C:\WINDOWS\system32\fldrclnr.dll
- 2004-08-04 02:45:22	1,181,696	----a-w	C:\WINDOWS\system32\fontext.dll
+ 2004-08-04 02:45:22	384,512	----a-w	C:\WINDOWS\system32\fontext.dll
- 2004-08-04 02:45:34	399,360	----a-w	C:\WINDOWS\system32\fsquirt.exe
+ 2004-08-04 02:45:34	193,024	----a-w	C:\WINDOWS\system32\fsquirt.exe
- 2001-10-28 18:06:34	241,152	----a-w	C:\WINDOWS\system32\gcdef.dll
+ 2001-10-28 18:06:34	77,312	----a-w	C:\WINDOWS\system32\gcdef.dll
- 2004-08-04 02:44:18	585,728	----a-w	C:\WINDOWS\system32\gpedit.dll
+ 2004-08-04 02:44:18	572,928	----a-w	C:\WINDOWS\system32\gpedit.dll
- 2004-08-04 02:45:24	740,352	----a-w	C:\WINDOWS\system32\hnetwiz.dll
+ 2004-08-04 02:45:24	334,848	----a-w	C:\WINDOWS\system32\hnetwiz.dll
- 2004-08-04 02:45:24	168,960	----a-w	C:\WINDOWS\system32\hotplug.dll
+ 2004-08-04 02:45:24	146,432	----a-w	C:\WINDOWS\system32\hotplug.dll
- 2001-10-28 18:06:36	83,456	----a-w	C:\WINDOWS\system32\icmui.dll
+ 2001-10-28 18:06:36	55,808	----a-w	C:\WINDOWS\system32\icmui.dll
- 2004-08-04 02:45:36	204,800	----a-w	C:\WINDOWS\system32\iexpress.exe
+ 2004-08-04 02:45:36	114,688	----a-w	C:\WINDOWS\system32\iexpress.exe
- 2001-10-28 18:06:38	149,504	----a-w	C:\WINDOWS\system32\inetcplc.dll
+ 2001-10-28 18:06:38	117,248	----a-w	C:\WINDOWS\system32\inetcplc.dll
- 2004-08-04 02:44:20	57,344	----a-w	C:\WINDOWS\system32\inetres.dll
+ 2004-08-04 02:44:20	49,664	----a-w	C:\WINDOWS\system32\inetres.dll
- 2004-08-04 02:45:24	126,464	----a-w	C:\WINDOWS\system32\input.dll
+ 2004-08-04 02:45:24	125,440	----a-w	C:\WINDOWS\system32\input.dll
- 2001-10-28 18:06:38	17,920	----a-w	C:\WINDOWS\system32\irclass.dll
+ 2001-10-28 18:06:38	13,312	----a-w	C:\WINDOWS\system32\irclass.dll
- 2008-02-22 04:23:35	135,168	----a-w	C:\WINDOWS\system32\java.exe
+ 2008-06-10 04:21:01	135,168	----a-w	C:\WINDOWS\system32\java.exe
- 2008-02-22 04:23:39	135,168	----a-w	C:\WINDOWS\system32\javaw.exe
+ 2008-06-10 04:21:04	135,168	----a-w	C:\WINDOWS\system32\javaw.exe
- 2008-02-22 05:33:32	139,264	----a-w	C:\WINDOWS\system32\javaws.exe
+ 2008-06-10 05:32:34	139,264	----a-w	C:\WINDOWS\system32\javaws.exe
- 2004-08-04 02:45:24	408,064	----a-w	C:\WINDOWS\system32\keymgr.dll
+ 2004-08-04 02:45:24	152,576	----a-w	C:\WINDOWS\system32\keymgr.dll
- 2001-10-28 18:06:58	135,680	----a-w	C:\WINDOWS\system32\mapi32.dll
+ 2001-10-28 18:06:58	112,128	----a-w	C:\WINDOWS\system32\mapi32.dll
- 2004-08-04 02:45:24	201,728	----a-w	C:\WINDOWS\system32\mdminst.dll
+ 2004-08-04 02:45:24	119,296	----a-w	C:\WINDOWS\system32\mdminst.dll
- 2004-08-04 02:45:38	849,920	----a-w	C:\WINDOWS\system32\mmc.exe
+ 2004-08-04 02:45:38	815,616	----a-w	C:\WINDOWS\system32\mmc.exe
- 2004-08-04 02:45:24	65,024	----a-w	C:\WINDOWS\system32\mmcshext.dll
+ 2004-08-04 02:45:24	50,688	----a-w	C:\WINDOWS\system32\mmcshext.dll
- 2004-08-04 02:45:38	324,096	----a-w	C:\WINDOWS\system32\mobsync.exe
+ 2004-08-04 02:45:38	143,872	----a-w	C:\WINDOWS\system32\mobsync.exe
- 2004-08-04 02:45:40	20,480	----a-w	C:\WINDOWS\system32\msdtc.exe
+ 2004-08-04 02:45:40	6,144	----a-w	C:\WINDOWS\system32\msdtc.exe
- 2004-08-04 02:45:24	1,501,696	----a-w	C:\WINDOWS\system32\msgina.dll
+ 2004-08-04 02:45:24	997,888	----a-w	C:\WINDOWS\system32\msgina.dll
- 2004-08-04 02:45:24	55,296	----a-w	C:\WINDOWS\system32\msident.dll
+ 2004-08-04 02:45:24	51,712	----a-w	C:\WINDOWS\system32\msident.dll
- 2004-08-04 02:45:24	363,008	----a-w	C:\WINDOWS\system32\msieftp.dll
+ 2004-08-04 02:45:24	250,368	----a-w	C:\WINDOWS\system32\msieftp.dll
- 2005-05-04 17:45:36	211,968	----a-w	C:\WINDOWS\system32\msiexec.exe
+ 2005-05-04 17:45:36	78,848	----a-w	C:\WINDOWS\system32\msiexec.exe
- 2004-08-04 02:45:40	506,368	----a-w	C:\WINDOWS\system32\mspaint.exe
+ 2004-08-04 02:45:40	345,600	----a-w	C:\WINDOWS\system32\mspaint.exe
- 2004-08-04 02:45:26	400,384	----a-w	C:\WINDOWS\system32\mstask.dll
+ 2004-08-04 02:45:26	278,528	----a-w	C:\WINDOWS\system32\mstask.dll
- 2004-08-04 02:34:20	419,840	----a-w	C:\WINDOWS\system32\mstsc.exe
+ 2004-08-04 02:34:20	409,088	----a-w	C:\WINDOWS\system32\mstsc.exe
- 2007-06-26 06:10:32	1,371,136	----a-w	C:\WINDOWS\system32\msxml3.dll
+ 2007-06-26 06:10:32	1,104,896	----a-w	C:\WINDOWS\system32\msxml3.dll
- 2001-10-28 18:07:06	107,520	----a-w	C:\WINDOWS\system32\mycomput.dll
+ 2001-10-28 18:07:06	90,112	----a-w	C:\WINDOWS\system32\mycomput.dll
- 2004-08-04 02:45:26	310,784	----a-w	C:\WINDOWS\system32\mydocs.dll
+ 2004-08-04 02:45:26	90,624	----a-w	C:\WINDOWS\system32\mydocs.dll
- 2004-08-04 02:45:26	2,028,544	----a-w	C:\WINDOWS\system32\netplwiz.dll
+ 2004-08-04 02:45:26	879,616	----a-w	C:\WINDOWS\system32\netplwiz.dll
- 2004-08-04 02:45:26	2,318,336	----a-w	C:\WINDOWS\system32\netshell.dll
+ 2004-08-04 02:45:26	1,714,688	----a-w	C:\WINDOWS\system32\netshell.dll
- 2004-08-04 02:45:26	700,928	----a-w	C:\WINDOWS\system32\newdev.dll
+ 2004-08-04 02:45:26	249,856	----a-w	C:\WINDOWS\system32\newdev.dll
- 2004-08-04 02:45:40	182,784	----a-w	C:\WINDOWS\system32\notepad.exe
+ 2004-08-04 02:45:40	70,144	----a-w	C:\WINDOWS\system32\notepad.exe
- 2004-08-04 02:45:40	93,696	----a-w	C:\WINDOWS\system32\nslookup.exe
+ 2004-08-04 02:45:40	79,360	----a-w	C:\WINDOWS\system32\nslookup.exe
- 2004-08-04 02:45:40	1,530,880	----a-w	C:\WINDOWS\system32\ntbackup.exe
+ 2004-08-04 02:45:40	1,218,560	----a-w	C:\WINDOWS\system32\ntbackup.exe
- 2001-10-28 18:07:10	28,672	----a-w	C:\WINDOWS\system32\ntlanui2.dll
+ 2001-10-28 18:07:10	14,848	----a-w	C:\WINDOWS\system32\ntlanui2.dll
- 2001-10-28 18:07:12	46,080	----a-w	C:\WINDOWS\system32\ntsd.exe
+ 2001-10-28 18:07:12	31,744	----a-w	C:\WINDOWS\system32\ntsd.exe
- 2004-08-04 02:44:44	102,400	----a-w	C:\WINDOWS\system32\odbcint.dll
+ 2004-08-04 02:44:44	98,304	----a-w	C:\WINDOWS\system32\odbcint.dll
- 2008-07-19 16:15:43	52,900	----a-w	C:\WINDOWS\system32\perfc009.dat
+ 2008-08-02 21:55:15	52,900	----a-w	C:\WINDOWS\system32\perfc009.dat
- 2008-07-19 16:15:43	61,618	----a-w	C:\WINDOWS\system32\perfc016.dat
+ 2008-08-02 21:55:15	61,618	----a-w	C:\WINDOWS\system32\perfc016.dat
- 2008-07-19 16:15:43	380,486	----a-w	C:\WINDOWS\system32\perfh009.dat
+ 2008-08-02 21:55:15	380,486	----a-w	C:\WINDOWS\system32\perfh009.dat
- 2008-07-19 16:15:43	413,480	----a-w	C:\WINDOWS\system32\perfh016.dat
+ 2008-08-02 21:55:15	413,480	----a-w	C:\WINDOWS\system32\perfh016.dat
- 2004-08-04 02:45:40	29,696	----a-w	C:\WINDOWS\system32\perfmon.exe
+ 2004-08-04 02:45:40	15,872	----a-w	C:\WINDOWS\system32\perfmon.exe
- 2004-08-04 02:45:26	480,768	----a-w	C:\WINDOWS\system32\photowiz.dll
+ 2004-08-04 02:45:26	172,032	----a-w	C:\WINDOWS\system32\photowiz.dll
- 2001-10-28 18:07:18	172,032	----a-w	C:\WINDOWS\system32\pifmgr.dll
+ 2001-10-28 18:07:18	35,328	----a-w	C:\WINDOWS\system32\pifmgr.dll
- 2004-08-04 02:45:26	901,632	----a-w	C:\WINDOWS\system32\printui.dll
+ 2004-08-04 02:45:26	572,928	----a-w	C:\WINDOWS\system32\printui.dll
- 2004-08-04 02:45:26	1,001,984	----a-w	C:\WINDOWS\system32\rasdlg.dll
+ 2004-08-04 02:45:26	672,768	----a-w	C:\WINDOWS\system32\rasdlg.dll
- 2001-10-28 18:07:24	17,920	----a-w	C:\WINDOWS\system32\regedt32.exe
+ 2001-10-28 18:07:24	3,584	----a-w	C:\WINDOWS\system32\regedt32.exe
- 2004-08-04 02:45:26	82,944	----a-w	C:\WINDOWS\system32\remotepg.dll
+ 2004-08-04 02:45:26	61,440	----a-w	C:\WINDOWS\system32\remotepg.dll
- 2004-08-04 02:45:42	506,368	----a-w	C:\WINDOWS\system32\Restore\rstrui.exe
+ 2004-08-04 02:45:42	382,976	----a-w	C:\WINDOWS\system32\Restore\rstrui.exe
- 2004-08-04 02:45:42	28,672	----a-w	C:\WINDOWS\system32\runonce.exe
+ 2004-08-04 02:45:42	14,336	----a-w	C:\WINDOWS\system32\runonce.exe
- 2004-08-04 02:45:28	163,840	----a-w	C:\WINDOWS\system32\scrobj.dll
+ 2004-08-04 02:45:28	159,744	----a-w	C:\WINDOWS\system32\scrobj.dll
- 2004-08-04 02:45:28	1,429,504	----a-w	C:\WINDOWS\system32\setupapi.dll
+ 2004-08-04 02:45:28	993,792	----a-w	C:\WINDOWS\system32\setupapi.dll
- 2004-08-04 02:44:52	821,760	----a-w	C:\WINDOWS\system32\shdoclc.dll
+ 2004-08-04 02:44:52	563,712	----a-w	C:\WINDOWS\system32\shdoclc.dll
- 2007-10-25 16:57:15	22,446,080	----a-w	C:\WINDOWS\system32\shell32.dll
+ 2007-10-25 16:57:15	8,484,352	----a-w	C:\WINDOWS\system32\shell32.dll
- 2004-08-04 02:45:28	1,242,624	----a-w	C:\WINDOWS\system32\shimgvw.dll
+ 2004-08-04 02:45:28	439,808	----a-w	C:\WINDOWS\system32\shimgvw.dll
- 2004-08-04 02:45:42	257,536	----a-w	C:\WINDOWS\system32\shrpubw.exe
+ 2004-08-04 02:45:42	78,336	----a-w	C:\WINDOWS\system32\shrpubw.exe
- 2004-08-04 02:45:28	41,984	----a-w	C:\WINDOWS\system32\shscrap.dll
+ 2004-08-04 02:45:28	27,648	----a-w	C:\WINDOWS\system32\shscrap.dll
- 2004-08-04 02:45:42	130,048	----a-w	C:\WINDOWS\system32\sigverif.exe
+ 2004-08-04 02:45:42	71,168	----a-w	C:\WINDOWS\system32\sigverif.exe
- 2004-08-04 02:45:44	147,968	----a-w	C:\WINDOWS\system32\sndrec32.exe
+ 2004-08-04 02:45:44	132,608	----a-w	C:\WINDOWS\system32\sndrec32.exe
- 2001-10-28 18:07:28	146,432	----a-w	C:\WINDOWS\system32\sndvol32.exe
+ 2001-10-28 18:07:28	139,264	----a-w	C:\WINDOWS\system32\sndvol32.exe
- 2004-08-04 02:45:28	236,544	----a-w	C:\WINDOWS\system32\srrstr.dll
+ 2004-08-04 02:45:28	240,640	----a-w	C:\WINDOWS\system32\srrstr.dll
- 2004-08-04 02:45:28	541,696	----a-w	C:\WINDOWS\system32\sti_ci.dll
+ 2004-08-04 02:45:28	137,216	----a-w	C:\WINDOWS\system32\sti_ci.dll
- 2004-08-04 02:45:28	126,464	----a-w	C:\WINDOWS\system32\stobject.dll
+ 2004-08-04 02:45:28	122,368	----a-w	C:\WINDOWS\system32\stobject.dll
- 2006-10-20 01:38:48	724,480	----a-w	C:\WINDOWS\system32\sxs.dll
+ 2006-10-20 01:38:48	714,752	----a-w	C:\WINDOWS\system32\sxs.dll
- 2004-08-04 02:45:28	379,392	----a-w	C:\WINDOWS\system32\syncui.dll
+ 2004-08-04 02:45:28	194,560	----a-w	C:\WINDOWS\system32\syncui.dll
- 2004-08-04 02:45:44	417,792	----a-w	C:\WINDOWS\system32\sysocmgr.exe
+ 2004-08-04 02:45:44	107,008	----a-w	C:\WINDOWS\system32\sysocmgr.exe
- 2001-10-28 18:07:30	182,272	----a-w	C:\WINDOWS\system32\tapiui.dll
+ 2001-10-28 18:07:30	83,968	----a-w	C:\WINDOWS\system32\tapiui.dll
- 2004-08-04 02:45:44	174,080	----a-w	C:\WINDOWS\system32\taskmgr.exe
+ 2004-08-04 02:45:44	141,312	----a-w	C:\WINDOWS\system32\taskmgr.exe
- 2004-08-04 02:45:28	203,776	----a-w	C:\WINDOWS\system32\tcpmonui.dll
+ 2004-08-04 02:45:28	46,592	----a-w	C:\WINDOWS\system32\tcpmonui.dll
- 2005-05-11 02:30:02	91,136	----a-w	C:\WINDOWS\system32\telnet.exe
+ 2005-05-11 02:30:02	77,312	----a-w	C:\WINDOWS\system32\telnet.exe
- 2004-08-04 02:45:28	449,536	----a-w	C:\WINDOWS\system32\themeui.dll
+ 2004-08-04 02:45:28	388,608	----a-w	C:\WINDOWS\system32\themeui.dll
- 2004-08-04 02:45:38	701,440	----a-w	C:\WINDOWS\system32\usmt\migwiz.exe
+ 2004-08-04 02:45:38	245,248	----a-w	C:\WINDOWS\system32\usmt\migwiz.exe
- 2001-10-28 18:07:34	116,736	----a-w	C:\WINDOWS\system32\verifier.exe
+ 2001-10-28 18:07:34	102,400	----a-w	C:\WINDOWS\system32\verifier.exe
- 2008-04-23 07:14:11	396,800	----a-w	C:\WINDOWS\system32\webcheck.dll
+ 2008-04-23 07:14:11	233,472	----a-w	C:\WINDOWS\system32\webcheck.dll
- 2004-08-04 02:45:46	1,366,528	----a-w	C:\WINDOWS\system32\wiaacmgr.exe
+ 2004-08-04 02:45:46	434,688	----a-w	C:\WINDOWS\system32\wiaacmgr.exe
- 2004-08-04 02:45:28	497,664	----a-w	C:\WINDOWS\system32\wiadefui.dll
+ 2004-08-04 02:45:28	464,384	----a-w	C:\WINDOWS\system32\wiadefui.dll
- 2004-08-04 02:45:28	704,000	----a-w	C:\WINDOWS\system32\wiashext.dll
+ 2004-08-04 02:45:28	591,872	----a-w	C:\WINDOWS\system32\wiashext.dll
- 2004-08-04 02:45:10	983,040	----a-w	C:\WINDOWS\system32\winbrand.dll
+ 2004-08-04 02:45:10	937,984	----a-w	C:\WINDOWS\system32\winbrand.dll
- 2006-11-03 02:21:18	8,116,224	----a-w	C:\WINDOWS\system32\wmploc.dll
+ 2006-11-03 02:21:18	8,269,824	----a-w	C:\WINDOWS\system32\wmploc.dll
- 2001-10-28 18:07:48	19,456	----a-w	C:\WINDOWS\system32\write.exe
+ 2001-10-28 18:07:48	5,632	----a-w	C:\WINDOWS\system32\write.exe
- 2004-08-04 02:45:46	405,504	----a-w	C:\WINDOWS\system32\wscript.exe
+ 2004-08-04 02:45:46	114,688	----a-w	C:\WINDOWS\system32\wscript.exe
- 2004-08-04 02:45:30	643,584	----a-w	C:\WINDOWS\system32\wsecedit.dll
+ 2004-08-04 02:45:30	607,744	----a-w	C:\WINDOWS\system32\wsecedit.dll
- 2004-08-04 02:45:02	3,786,752	----a-w	C:\WINDOWS\system32\xpsp2res.dll
+ 2004-08-04 02:45:02	2,945,536	----a-w	C:\WINDOWS\system32\xpsp2res.dll
- 2004-08-04 02:45:30	940,032	----a-w	C:\WINDOWS\system32\zipfldr.dll
+ 2004-08-04 02:45:30	338,944	----a-w	C:\WINDOWS\system32\zipfldr.dll
+ 2008-08-02 21:50:39	16,384	----atw	C:\WINDOWS\TEMP\Perflib_Perfdata_6bc.dat
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((   Pontos de Carregamento do Registro   )))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Nota* entradas vazias & legítimas por defeito não são mostradas.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Arquivos de programas\Arquivos comuns\Ahead\Lib\NMBgMonitor.exe" [2006-11-16 19:04 139264]
"updateMgr"="C:\Arquivos de programas\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [2006-03-30 16:45 313472]
"MSMSGS"="C:\Arquivos de programas\Messenger\msmsgs.exe" [2004-10-13 13:24 1694208]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-03 23:45 15360]
"Nokia.PCSync"="C:\Arquivos de programas\Nokia\Nokia PC Suite 6\PCSync2.exe" [2008-03-26 18:41 1232896]
"PC Suite Tray"="C:\Arquivos de programas\Nokia\Nokia PC Suite 6\PCSuite.exe" [2008-04-16 12:53 1079808]
"Winger32.exe"="C:\Documents and Settings\Iniciar\Desktop\Winger32.exe" [2008-08-01 23:59 285184]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-06-28 13:43 8466432]
"SunJavaUpdateSched"="C:\Arquivos de programas\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 04:27 144784]
"RemoteControl"="C:\Arquivos de programas\CyberLink\PowerDVD\PDVDServ.exe" [2006-11-23 15:10 56928]
"LanguageShortcut"="C:\Arquivos de programas\CyberLink\PowerDVD\Language\Language.exe" [2006-12-05 22:55 54832]
"Vistadrv"="C:\WINDOWS\HDbar\vsdrv.exe" [2006-07-30 02:37 121089]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2007-06-28 13:43 81920]
"ISUSPM Startup"="C:\ARQUIV~1\ARQUIV~1\INSTAL~1\UPDATE~1\isuspm.exe" [2004-06-16 07:03 221184]
"ISUSScheduler"="C:\Arquivos de programas\Arquivos comuns\InstallShield\UpdateService\issch.exe" [2004-06-16 07:03 81920]
"PinnacleDriverCheck"="C:\WINDOWS\system32\PSDrvCheck.exe" [2004-03-10 16:26 406016]
"NeroFilterCheck"="C:\Arquivos de programas\Arquivos comuns\Ahead\Lib\NeroCheck.exe" [2006-01-12 15:40 155648]
"VMonitorVMUVC"="C:\Arquivos de programas\Vimicro\Vimicro UVC USB2.0 PC Camera\x86\VMonitor.exe" [2007-04-13 18:08 114688]
"avast!"="C:\ARQUIV~1\ALWILS~1\Avast4\ashDisp.exe" [2008-07-19 11:38 78008]
"Techserv.exe"="C:\WINDOWS\system32\Techserv.exe" [2008-08-01 23:59 1718784]
"Intnetobj.exe"="C:\WINDOWS\system32\Intnetobj.exe" [2008-08-02 00:00 509440]
"Msmservs.exe"="C:\WINDOWS\system32\Msmservs.exe" [2008-08-02 00:00 268288]
"Orkservs.exe"="C:\WINDOWS\system32\Orkservs.exe" [2008-08-02 00:01 290304]
"nwiz"="nwiz.exe" [2007-06-28 13:43 1626112 C:\WINDOWS\system32\nwiz.exe]
"SkyTel"="SkyTel.EXE" [2006-05-16 07:04 2879488 C:\WINDOWS\SkyTel.exe]
"RTHDCPL"="RTHDCPL.EXE" [2007-02-26 04:03 16125440 C:\WINDOWS\RTHDCPL.exe]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-03 23:45 15360]

C:\Documents and Settings\Administrador.CPU\Menu Iniciar\Programas\Inicializar\
Stardock ObjectDock.lnk - C:\Arquivos de programas\Stardock\ObjectDock\ObjectDock.exe [2008-07-15 00:16:15 3450608]

C:\Documents and Settings\Iniciar\Menu Iniciar\Programas\Inicializar\
ObjectDock.lnk - C:\Arquivos de programas\OBjectDock\ObjectDock.exe [2008-02-28 16:13:06 1826885]
Stardock ObjectDock.lnk - C:\Arquivos de programas\Stardock\ObjectDock\ObjectDock.exe [2008-07-15 00:16:15 3450608]

C:\DOCUME~1\ALLUSE~1\MENUIN~1\PROGRA~1\INICIA~1\
Adobe Reader Speed Launch.lnk - C:\Arquivos de programas\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2008-04-23 03:38:16 29696]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoBandCustomize"= 0 (0x0)
"NoMovingBands"= 0 (0x0)
"NoCloseDragDropBands"= 0 (0x0)

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\SharedTaskScheduler]
"{A3717295-941D-416F-9384-ED1736729F1C}"= "C:\Arquivos de programas\Scpad\scpLIB.dll" [BU]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
"CompIBBrd"= {A3717295-941D-416F-9384-ED1736729F1C} - C:\Arquivos de programas\Scpad\scpLIB.dll [BU]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.3iv2"= C:\ARQUIV~1\K-LITE~1\codecs\3IVXVF~1.DLL
"VIDC.VP60"= C:\ARQUIV~1\K-LITE~1\codecs\vp6vfw.dll
"VIDC.VP61"= C:\ARQUIV~1\K-LITE~1\codecs\vp6vfw.dll
"VIDC.VP62"= C:\ARQUIV~1\K-LITE~1\codecs\vp6vfw.dll
"VIDC.VP70"= C:\ARQUIV~1\K-LITE~1\codecs\vp7vfw.dll
"VIDC.VP31"= C:\ARQUIV~1\K-LITE~1\codecs\vp31vfw.dll
"VIDC.FFDS"= C:\ARQUIV~1\K-LITE~1\ffdshow\ff_vfw.dll
"msacm.ac3acm"= C:\ARQUIV~1\K-LITE~1\codecs\ac3acm.acm
"msacm.l3fhg"= C:\ARQUIV~1\K-LITE~1\codecs\l3codecp.acm
"VIDC.MJPG"= Pvmjpg21.dll
"VIDC.PIM1"= pclepim1.dll

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Arquivos de programas\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Arquivos de programas\\Windows Live\\Messenger\\livecall.exe"=
"C:\\Arquivos de programas\\Sierra Entertainment\\FEAR Perseus Mandate\\FEARXP2.exe"=
"C:\\WINDOWS\\system32\\PnkBstrA.exe"=
"C:\\WINDOWS\\system32\\PnkBstrB.exe"=
"C:\\Arquivos de programas\\Ubisoft\\Tom Clancy's Rainbow Six Vegas 2\\Binaries\\R6Vegas2_Game.exe"=
"C:\\Arquivos de programas\\Ubisoft\\Tom Clancy's Rainbow Six Vegas 2\\Binaries\\R6Vegas2_Launcher.exe"=
"C:\\Arquivos de programas\\Ubisoft\\Splinter Cell Double Agent\\scda-offline\\System\\SplinterCell4.exe"=
"C:\\Arquivos de programas\\Electronic Arts\\Crytek\\Crysis\\Bin32\\Crysis.exe"=
"C:\\Arquivos de programas\\Electronic Arts\\Crytek\\Crysis\\Bin32\\CrysisDedicatedServer.exe"=
"C:\\Arquivos de programas\\THQ\\S.T.A.L.K.E.R. - Shadow of Chernobyl\\bin\\XR_3DA.exe"=
"C:\\Arquivos de programas\\THQ\\S.T.A.L.K.E.R. - Shadow of Chernobyl\\bin\\dedicated\\XR_3DA.exe"=
"C:\\Arquivos de programas\\Electronic Arts\\Medal of Honor Airborne\\UnrealEngine3\\Binaries\\MOHA.exe"=
"C:\\Arquivos de programas\\eMule\\emule.exe"=
"C:\\Arquivos de programas\\LimeWire\\LimeWire.exe"=
"C:\\Arquivos de programas\\uTorrent\\uTorrent.exe"=
"C:\\WINDOWS\\system32\\Windwn32.exe"=
"C:\\WINDOWS\\system32\\Techserv.exe"=
"C:\\Documents and Settings\\Iniciar\\Desktop\\Winger32.exe"=
"C:\\WINDOWS\\system32\\Intnetobj.exe"=
"C:\\WINDOWS\\system32\\Msmservs.exe"=
"C:\\WINDOWS\\system32\\Orkservs.exe"=

R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-07-19 11:35]
R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-07-19 11:37]
R3 VMUVC;Vimicro Camera Service VMUVC;C:\WINDOWS\system32\Drivers\VMUVC.sys [2007-09-05 15:53]
R3 vvftUVC;Vimicro Camera Filter Service VMUVC;C:\WINDOWS\system32\drivers\vvftUVC.sys [2007-06-13 14:00]
.
.
------- Ccan Suplementar -------
.
R0 -: HKCU-Main,Start Page = hxxp://www.google.com
R0 -: HKLM-Main,Start Page = hxxp://www.google.com
R0 -: HKLM-Main,Window Title = 
O8 -: E&xportar para o Microsoft Excel - C:\ARQUIV~1\MICROS~2\OFFICE11\EXCEL.EXE/3000


**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-08-02 20:22:54
Windows 5.1.2600 Service Pack 2 NTFS

Procurando processos ocultos ...

Procurando entradas auto inicializáveis ocultas ...

Procurando ficheiros ocultos ...

Varredura completada com sucesso
Ficheiros ocultos: 0

**************************************************************************
.
Tempo para conclusão: 2008-08-02 20:23:34
ComboFix-quarantined-files.txt  2008-08-02 23:23:31
ComboFix2.txt  2008-07-19 19:35:44
ComboFix3.txt  2008-07-18 04:18:44
ComboFix4.txt  2008-07-18 03:39:47
ComboFix5.txt  2008-08-02 23:20:01

Pre-Run: 8 pasta(s) 125,518,417,920 bytes disponíveis
Post-Run: 10 pasta(s) 125,941,927,936 bytes disponíveis

792	--- E O F ---	2008-07-12 02:35:22