Pogledaj te ovo

1

Pogledaj te ovo

offline
  • Pridružio: 06 Maj 2008
  • Poruke: 90

Logfile of HijackThis v1.99.1
Scan saved at 7:59:43 AM, on 14-Sep-08
Platform: Windows XP SP3, v.3264 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\acs.exe
C:\WINDOWS\Explorer.EXE
C:\Documents and Settings\All Users\Application Data\jozevmtk\tczgnihe.exe
C:\Program Files\Eset\nod32kui.exe
C:\WINDOWS\ATK0100\Hcontrol.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\TP-LINK\TWCU\TWCU.exe
C:\Program Files\ASUSTek\ASUSDVD\PDVDServ.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\FlashGet\flashget.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\DOCUME~1\stamenko\LOCALS~1\Temp\D3B.tmp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\pctspk.exe
C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\svchost.exe
C:\DOCUME~1\stamenko\LOCALS~1\Temp\c.exe
C:\WINDOWS\ATK0100\ATKOSD.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\stamenko\Desktop\Lek\TR3.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = google.rs/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = go.microsoft.com/fwlink/?LinkId=69157
R3 - URLSearchHook: Winamp Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: (no name) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: XML module - {500BCA15-57A7-4eaf-8143-8C619470B13D} - C:\WINDOWS\system32\msxml71.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.0.1225.9868\swg.dll
O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.0.0.0\PDFCreator_Toolbar.dll
O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll
O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)
O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.0.0.0\PDFCreator_Toolbar.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [Hcontrol] C:\WINDOWS\ATK0100\Hcontrol.exe
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [MsmqIntCert] regsvr32 /s mqrt.dll
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [TWCU] "C:\Program Files\TP-LINK\TWCU\TWCU.exe" -nogui
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\ASUSTek\ASUSDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [Flashget] C:\Program Files\FlashGet\flashget.exe /min
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1
O4 - HKCU\..\Run: [Miro] C:\Program Files\Participatory Culture Foundation\Miro\Miro.exe
O4 - HKCU\..\Run: [Somefox] C:\DOCUME~1\stamenko\LOCALS~1\Temp\D3B.tmp.exe
O4 - Global Startup: AutoCAD Startup Accelerator.lnk = C:\Program Files\Common Files\Autodesk Shared\acstart16.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &Download All with FlashGet - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: &Download with FlashGet - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\inetrepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\inetrepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\inetrepl.dll
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - update.microsoft.com/windowsupdate/v6/V.....4231977837
O17 - HKLM\System\CCS\Services\Tcpip\..\{DC33E2EC-BDAB-485B-9C5F-9C0423EB064B}: NameServer = 77.46.137.2
O20 - Winlogon Notify: dimsntfy - %SystemRoot%\System32\dimsntfy.dll (file missing)
O23 - Service: TP-LINK Configuration Service (ACS) - Unknown owner - C:\WINDOWS\System32\acs.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: Autodesk Licensing Service - Autodesk, Inc. - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InCD Helper (InCDsrv) - AHEAD Software - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe
O23 - Service: Sentinel Keys Server (SentinelKeysServer) - SafeNet, Inc. - C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
O23 - Service: Sentinel Protection Server (SentinelProtectionServer) - SafeNet, Inc - C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
O23 - Service: Service - Unknown owner - C:\Program Files\BIEN Soft\dxflines\dxflines.exe (file missing)


Sta je ovo? Na svakih pola minuta pojavi se ovo dole ipravi
probleme u pisanju.



zatim se pojavi ovo i jos neki objekti.












NOD nista ne nalazi.

offline
  • dr_Bora  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 24 Jul 2007
  • Poruke: 12280
  • Gde živiš: Höganäs, SE

Poz...




Preuzmi instalaciju za program Malwarebytes Anti-Malware sa sledećeg linka:
http://www.besttechie.net/tools/mbam-setup.exe

Dvoklikom pokreni instalaciju - na samom kraju procesa, proveri da su obeležene opcije:

* Update Malwarebytes' Anti-Malware
* Launch Malwarebytes Anti-Malware
* Zatim klikni Finish.

Nakon završenog ažuriranja program će se pokrenuti.
Izaberi opciju Perform Quick Scan i klikni Scan.
Po završetku procesa klikni OK, Show Results: u listi detektovanog malware-a, obeleži sve stavke i klikni Remove Selected.

Po završetku procesa, logfile će se otvoriti u Notepad-u; iskopiraj ga u temu na forumu.
Ukoliko dođe do restarta na kraju procesa čišćenja, logfile će biti dostupan na Logs kartici (obeleži ga i klikni Open).


Takođe, nakon svega, postavi i svež HijackThis logfile.

offline
  • Pridružio: 06 Maj 2008
  • Poruke: 90

Malwarebytes' Anti-Malware 1.25
Database version: 1062
Windows 5.1.2600 Service Pack 3, v.3264

3:18:38 PM 14-Sep-08
mbam-log-09-14-2008 (15-18-3Cool.txt

Scan type: Quick Scan
Objects scanned: 51669
Time elapsed: 7 minute(s), 42 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 6
Registry Values Infected: 1
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 2

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CLASSES_ROOT\xml.xml (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{9233c3c0-1472-4091-a505-5580a23bb4ac} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{500bca15-57a7-4eaf-8143-8c619470b13d} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{500bca15-57a7-4eaf-8143-8c619470b13d} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\xml.xml.1 (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\mwc (Malware.Trace) -> Quarantined and deleted successfully.

Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Somefox (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\WINDOWS\system32\msxml71.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\stamenko\Local Settings\Temp\D3B.tmp.exe (Trojan.FakeAlert) -> Delete on reboot.


Malwarebytes' Anti-Malware 1.25
Database version: 1062
Windows 5.1.2600 Service Pack 3, v.3264

3:18:38 PM 14-Sep-08
mbam-log-09-14-2008 (15-18-3Cool.txt

Scan type: Quick Scan
Objects scanned: 51669
Time elapsed: 7 minute(s), 42 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 6
Registry Values Infected: 1
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 2

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CLASSES_ROOT\xml.xml (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{9233c3c0-1472-4091-a505-5580a23bb4ac} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{500bca15-57a7-4eaf-8143-8c619470b13d} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{500bca15-57a7-4eaf-8143-8c619470b13d} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\xml.xml.1 (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\mwc (Malware.Trace) -> Quarantined and deleted successfully.

Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Somefox (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\WINDOWS\system32\msxml71.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\stamenko\Local Settings\Temp\D3B.tmp.exe (Trojan.FakeAlert) -> Delete on reboot.
Logfile of HijackThis v1.99.1
Scan saved at 3:32:27 PM, on 14-Sep-08
Platform: Windows XP SP3, v.3264 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\acs.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\pctspk.exe
C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Documents and Settings\All Users\Application Data\jozevmtk\tczgnihe.exe
C:\Program Files\Eset\nod32kui.exe
C:\WINDOWS\ATK0100\Hcontrol.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\TP-LINK\TWCU\TWCU.exe
C:\Program Files\ASUSTek\ASUSDVD\PDVDServ.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\FlashGet\flashget.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\DOCUME~1\stamenko\LOCALS~1\Temp\D3B.tmp.exe
C:\DOCUME~1\stamenko\LOCALS~1\Temp\c.exe
C:\WINDOWS\ATK0100\ATKOSD.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Internet Explorer\iexplore.exe
c:\program files\winamp toolbar\WinampTbServer.exe
C:\Documents and Settings\stamenko\Desktop\Lek\TR3.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = google.rs/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = go.microsoft.com/fwlink/?LinkId=69157
R3 - URLSearchHook: Winamp Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: (no name) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.0.1225.9868\swg.dll
O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.0.0.0\PDFCreator_Toolbar.dll
O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll
O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)
O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.0.0.0\PDFCreator_Toolbar.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [Hcontrol] C:\WINDOWS\ATK0100\Hcontrol.exe
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [MsmqIntCert] regsvr32 /s mqrt.dll
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [TWCU] "C:\Program Files\TP-LINK\TWCU\TWCU.exe" -nogui
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\ASUSTek\ASUSDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [Flashget] C:\Program Files\FlashGet\flashget.exe /min
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1
O4 - HKCU\..\Run: [Miro] C:\Program Files\Participatory Culture Foundation\Miro\Miro.exe
O4 - Global Startup: AutoCAD Startup Accelerator.lnk = C:\Program Files\Common Files\Autodesk Shared\acstart16.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &Download All with FlashGet - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: &Download with FlashGet - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\inetrepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\inetrepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\inetrepl.dll
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - update.microsoft.com/windowsupdate/v6/V.....4231977837
O17 - HKLM\System\CCS\Services\Tcpip\..\{DC33E2EC-BDAB-485B-9C5F-9C0423EB064B}: NameServer = 77.46.137.2
O20 - Winlogon Notify: dimsntfy - %SystemRoot%\System32\dimsntfy.dll (file missing)
O23 - Service: TP-LINK Configuration Service (ACS) - Unknown owner - C:\WINDOWS\System32\acs.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: Autodesk Licensing Service - Autodesk, Inc. - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InCD Helper (InCDsrv) - AHEAD Software - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe
O23 - Service: Sentinel Keys Server (SentinelKeysServer) - SafeNet, Inc. - C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
O23 - Service: Sentinel Protection Server (SentinelProtectionServer) - SafeNet, Inc - C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
O23 - Service: Service - Unknown owner - C:\Program Files\BIEN Soft\dxflines\dxflines.exe (file missing)

Stanje je i dalje isto

offline
  • dr_Bora  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 24 Jul 2007
  • Poruke: 12280
  • Gde živiš: Höganäs, SE

* Otvori Nod32 Control Center (Klik na njegovu tray ikonicu ( ) u donjem desnom uglu ekrana).
* Izaberi AMON iz Threat Protection grupe opcija.
* Na desnom panelu deštikliraj opciju File system monitor (AMON) enabled.
* Gašenje ove opcije pokazaće se kroz promenu boje Control Center-a iz zelene u crvenu.

Napomena: Ne zaboravi da uključiš ovu opciju po završetku čišćenja.




Arrow Skini ComboFix sa jedne od sledecih adresa na Desktop:
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
http://www.forospyware.com/sUBs/ComboFix.exe
http://subs.geekstogo.com/ComboFix.exe

Startuj ga i ne diraj prozor programa dok skenira.
Sledi uputstva na ekranu. Kada zavrsi pojavice se log (C:\ComboFix.txt) koji ces nam ovde iskopirati.

offline
  • Pridružio: 06 Maj 2008
  • Poruke: 90

ComboFix 08-09-13.05 - stamenko 2008-09-14 16:39:19.6 - NTFSx86
Running from: C:\Documents and Settings\stamenko\Desktop\ComboFix.exe
* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\stamenko\Desktop\Download programs.url
C:\Documents and Settings\stamenko\Desktop\Games.url
C:\Documents and Settings\stamenko\Favorites\Download programs.url
C:\Documents and Settings\stamenko\Favorites\Games.url
C:\Documents and Settings\stamenko\Favorites\Translator.url
C:\Documents and Settings\stamenko\Favorites\Videos.url
C:\Documents and Settings\stamenko\Start Menu\Programs\Download programs.url
C:\Documents and Settings\stamenko\Start Menu\Programs\Games.url
C:\Documents and Settings\stamenko\Start Menu\Programs\Translator.url
C:\Documents and Settings\stamenko\Start Menu\Programs\Videos.url
C:\WINDOWS\system32\drxcator.ini

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_SERVICE
-------\Service_Service


((((((((((((((((((((((((( Files Created from 2008-08-14 to 2008-09-14 )))))))))))))))))))))))))))))))
.

2008-09-13 22:52 . 2008-09-13 22:52 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\jozevmtk
2008-09-11 18:16 . 2008-09-11 18:16 <DIR> d----c--- C:\WINDOWS\system32\DRVSTORE
2008-09-11 18:16 . 2008-09-11 18:16 <DIR> d-------- C:\Program Files\SafeNet Sentinel
2008-09-11 18:16 . 2008-09-11 18:16 <DIR> d-------- C:\Program Files\Common Files\SafeNet Sentinel
2008-09-11 18:12 . 2008-09-12 12:23 <DIR> d-------- C:\Documents and Settings\stamenko\Application Data\PS-Exchange
2008-09-11 18:11 . 2008-09-11 18:11 <DIR> d-------- C:\Program Files\Delcam
2008-09-11 18:02 . 2008-09-11 18:10 <DIR> d-------- C:\Program Files\ArtCAM 2008
2008-09-11 17:40 . 2008-09-11 17:40 <DIR> d-------- C:\Program Files\MagicISO
2008-09-11 14:58 . 2008-09-11 14:58 <DIR> d-------- C:\Program Files\WinISO
2008-09-10 23:31 . 2008-09-11 15:36 119,615 ---h----- C:\TREEINFO.WC
2008-09-07 20:43 . 2008-09-07 20:44 117 --a------ C:\WINDOWS\Mach1Filter.INI
2008-09-04 17:44 . 2008-09-04 17:44 <DIR> d-------- C:\ArtCAM Videos
2008-08-30 23:24 . 2008-09-14 15:07 <DIR> d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-08-30 23:20 . 2008-08-30 23:23 <DIR> d-------- C:\Documents and Settings\stamenko\Application Data\PCF-VLC(2)
2008-08-30 22:28 . 2008-08-30 22:28 552 --a------ C:\WINDOWS\system32\d3d8caps.dat
2008-08-29 14:09 . 2008-08-17 15:01 38,472 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2008-08-29 14:09 . 2008-08-17 15:01 17,144 --a------ C:\WINDOWS\system32\drivers\mbam.sys
2008-08-28 15:59 . 2008-08-28 15:59 41 --a------ C:\WINDOWS\system32\Filzip.ini
2008-08-28 15:18 . 2008-08-28 15:18 <DIR> d-------- C:\Program Files\GBS
2008-08-23 13:10 . 2007-02-28 23:44 88,960 --a------ C:\WINDOWS\system32\drivers\ewusbmdm.sys
2008-08-23 13:10 . 2007-02-28 23:44 24,448 --a------ C:\WINDOWS\system32\drivers\ewdcsc.sys
2008-08-23 13:09 . 2008-08-23 13:09 <DIR> d-------- C:\Program Files\Huawei technologies
2008-08-22 14:50 . 2007-12-01 00:26 221,184 --a------ C:\WINDOWS\system32\wmpns.dll
2008-08-21 21:59 . 2008-08-21 21:59 <DIR> d-------- C:\Program Files\Vector Magic
2008-08-18 17:42 . 2008-08-18 17:42 <DIR> d-------- C:\Documents and Settings\stamenko\Application Data\Participatory Culture Foundation
2008-08-18 17:41 . 2008-08-18 17:41 <DIR> d-------- C:\Program Files\Participatory Culture Foundation
2008-08-17 22:30 . 2008-08-30 23:20 <DIR> d-------- C:\Documents and Settings\stamenko\Application Data\LimeWire
2008-08-17 22:29 . 2008-08-17 22:29 <DIR> d-------- C:\Program Files\Sun
2008-08-17 22:28 . 2008-06-10 02:32 73,728 --a------ C:\WINDOWS\system32\javacpl.cpl
2008-08-17 22:27 . 2008-08-17 22:28 <DIR> d-------- C:\Program Files\Java
2008-08-17 22:10 . 2008-08-17 22:10 <DIR> d-------- C:\Program Files\Common Files\Java
2008-08-17 21:55 . 2008-08-31 22:15 <DIR> d-------- C:\Program Files\LimeWire
2008-08-17 21:49 . 2008-08-18 17:02 <DIR> d-------- C:\Program Files\CamStudio
2008-08-14 13:21 . 2008-08-14 13:21 35 --a------ C:\WINDOWS\iltwain.ini
2008-08-14 13:20 . 2008-08-30 23:23 <DIR> d-------- C:\Program Files\Qimage

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-09-14 14:43 --------- d-----w C:\Program Files\FlashGet
2008-09-06 20:46 --------- d-----w C:\Program Files\PRIPREMA
2008-08-31 20:06 --------- d-----w C:\Program Files\Raster to Vector
2008-08-29 12:05 72,748 ----a-w C:\WINDOWS\unins000.exe
2008-08-23 11:09 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-08-13 17:27 --------- d-----w C:\Program Files\Opera
2008-08-12 15:33 --------- d-----w C:\Program Files\Winamp Toolbar
2008-08-12 15:33 --------- d-----w C:\Program Files\Winamp
2008-08-12 15:33 --------- d-----w C:\Documents and Settings\stamenko\Application Data\Winamp
2008-08-12 15:33 --------- d-----w C:\Documents and Settings\All Users\Application Data\Winamp Toolbar
2008-08-12 14:38 --------- d-----w C:\Program Files\UltimateZip
2008-08-07 13:24 --------- d-----w C:\Program Files\FDRLab
2008-08-07 13:06 --------- d-----w C:\Program Files\Common Files\xing shared
2008-08-07 13:06 --------- d-----w C:\Program Files\Common Files\Real
2008-08-06 15:33 --------- d-----w C:\Program Files\Yahoo!
2008-08-05 14:23 --------- d-----w C:\Documents and Settings\stamenko\Application Data\Yahoo!
2008-08-05 14:21 --------- d-----w C:\Documents and Settings\stamenko\Application Data\Moyea
2008-08-05 14:20 --------- d-----w C:\Program Files\Moyea
2008-08-05 14:18 --------- d-----w C:\Program Files\FLV Player
2008-08-03 09:11 2,083,080 ----a-w C:\Program Files\VDownloader.exe
2008-07-27 07:49 --------- d-----w C:\Program Files\PKWARE
2008-07-27 05:06 --------- d-----w C:\Program Files\ArtCAM Gerber Spooler
2008-07-25 04:20 544 ---ha-w C:\os765059.bin
2008-07-23 16:01 --------- d-----w C:\Documents and Settings\stamenko\Application Data\AdobeUM
2008-07-15 15:45 --------- d-----w C:\Documents and Settings\stamenko\Application Data\Malwarebytes
2008-07-15 15:45 --------- d-----w C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-07-11 19:53 10,037,419 ----a-w C:\Program Files\MasterCAM_X2_v11_SP1-CYGiSO_keygen.zip
2008-06-12 14:32 397 ----a-w C:\Program Files\CNC 3d Upravljac.lnk
2008-06-12 12:40 8,704 --sha-w C:\Program Files\Thumbs.db
2007-12-09 05:24 2,492 ----a-w C:\Documents and Settings\stamenko\Application Data\ViewerApp.dat
2007-03-21 07:10 60,273 ----a-w C:\Program Files\pthreadGC2.dll
2007-03-10 10:38 2,640,384 ----a-w C:\Program Files\ffmpeg.exe
2006-08-18 18:25 5,040 ----a-w C:\Program Files\LazyCamsDocs.zip
.

((((((((((((((((((((((((((((( snapshot@2008-07-15_21.15.27.77 )))))))))))))))))))))))))))))))))))))))))
.
+ 2004-08-03 19:10:08 53,248 -c----w C:\WINDOWS\$NtServicePackUninstall$\1394bus.sys
+ 2008-03-25 20:10:22 2,678 -c----w C:\WINDOWS\$NtServicePackUninstall$\6c6z7t3h.dat
+ 2004-08-03 20:56:42 100,352 -c----w C:\WINDOWS\$NtServicePackUninstall$\6to4svc.dll
+ 2004-08-03 22:56:48 183,808 -c----w C:\WINDOWS\$NtServicePackUninstall$\accwiz.exe
+ 2004-08-03 20:56:42 1,852,416 -c----w C:\WINDOWS\$NtServicePackUninstall$\acgenral.dll
+ 2004-08-03 20:56:42 1,852,416 -c----w C:\WINDOWS\$NtServicePackUninstall$\acgenral.dll.000
+ 2004-08-03 20:56:42 450,048 -c----w C:\WINDOWS\$NtServicePackUninstall$\aclayers.dll
+ 2004-08-03 20:56:42 450,048 -c----w C:\WINDOWS\$NtServicePackUninstall$\aclayers.dll.000
+ 2004-08-03 20:56:42 137,728 -c----w C:\WINDOWS\$NtServicePackUninstall$\aclua.dll
+ 2004-08-03 20:56:42 137,728 -c----w C:\WINDOWS\$NtServicePackUninstall$\aclua.dll.000
+ 2004-08-03 20:56:42 114,688 -c----w C:\WINDOWS\$NtServicePackUninstall$\aclui.dll
+ 2004-08-03 19:07:38 187,776 -c----w C:\WINDOWS\$NtServicePackUninstall$\acpi.sys
+ 2004-08-03 20:56:42 244,736 -c----w C:\WINDOWS\$NtServicePackUninstall$\acspecfc.dll
+ 2004-08-03 20:56:42 244,736 -c----w C:\WINDOWS\$NtServicePackUninstall$\acspecfc.dll.000
+ 2004-08-03 20:56:42 194,048 -c----w C:\WINDOWS\$NtServicePackUninstall$\activeds.dll
+ 2004-08-03 20:56:48 4,096 -c----w C:\WINDOWS\$NtServicePackUninstall$\actmovie.exe
+ 2004-08-03 20:56:42 101,888 -c----w C:\WINDOWS\$NtServicePackUninstall$\actxprxy.dll
+ 2002-08-29 00:40:48 255,488 -c----w C:\WINDOWS\$NtServicePackUninstall$\acverfyr.dll
+ 2002-08-29 00:40:48 255,488 -c----w C:\WINDOWS\$NtServicePackUninstall$\acverfyr.dll.000
+ 2004-08-03 20:56:42 116,224 -c----w C:\WINDOWS\$NtServicePackUninstall$\acxtrnal.dll
+ 2004-08-03 20:56:42 116,224 -c----w C:\WINDOWS\$NtServicePackUninstall$\acxtrnal.dll.000
+ 2004-08-03 22:56:42 29,696 -c----w C:\WINDOWS\$NtServicePackUninstall$\admexs.dll
+ 2003-03-24 14:52:04 20,540 -c----w C:\WINDOWS\$NtServicePackUninstall$\admin.dll
+ 2003-03-24 14:52:04 16,439 -c----w C:\WINDOWS\$NtServicePackUninstall$\admin.exe
+ 2004-08-03 20:56:42 61,440 -c----w C:\WINDOWS\$NtServicePackUninstall$\admparse.dll
+ 2004-08-03 22:56:42 43,520 -c----w C:\WINDOWS\$NtServicePackUninstall$\admwprox.dll
+ 2004-08-03 22:56:42 290,816 -c----w C:\WINDOWS\$NtServicePackUninstall$\adsiis.dll
+ 2004-08-03 22:56:42 290,816 -c----w C:\WINDOWS\$NtServicePackUninstall$\adsiis51.dll
+ 2004-08-03 20:56:42 175,616 -c----w C:\WINDOWS\$NtServicePackUninstall$\adsldp.dll
+ 2004-08-03 20:56:42 143,360 -c----w C:\WINDOWS\$NtServicePackUninstall$\adsldpc.dll
+ 2004-08-03 20:56:42 68,096 -c----w C:\WINDOWS\$NtServicePackUninstall$\adsmsext.dll
+ 2004-08-03 20:56:42 263,680 -c----w C:\WINDOWS\$NtServicePackUninstall$\adsnt.dll
+ 2001-08-23 10:00:00 109,568 -c----w C:\WINDOWS\$NtServicePackUninstall$\adsnw.dll
+ 2004-08-03 20:56:42 616,960 -c----w C:\WINDOWS\$NtServicePackUninstall$\advapi32.dll
+ 2004-08-03 20:56:42 99,840 -c----w C:\WINDOWS\$NtServicePackUninstall$\advpack.dll
+ 2004-08-03 21:05:44 142,464 -c----w C:\WINDOWS\$NtServicePackUninstall$\aec.sys
+ 2004-08-03 19:14:16 138,496 -c----w C:\WINDOWS\$NtServicePackUninstall$\afd.sys
+ 2004-08-03 20:56:42 24,064 -c----w C:\WINDOWS\$NtServicePackUninstall$\agentanm.dll
+ 2004-08-03 20:56:42 214,016 -c----w C:\WINDOWS\$NtServicePackUninstall$\agentctl.dll
+ 2004-08-03 20:56:42 41,984 -c----w C:\WINDOWS\$NtServicePackUninstall$\agentdp2.dll
+ 2004-08-03 20:56:42 58,880 -c----w C:\WINDOWS\$NtServicePackUninstall$\agentdpv.dll
+ 2004-08-03 20:56:42 49,152 -c----w C:\WINDOWS\$NtServicePackUninstall$\agentmpx.dll
+ 2004-08-03 20:56:42 24,064 -c----w C:\WINDOWS\$NtServicePackUninstall$\agentpsh.dll
+ 2004-08-03 20:56:42 44,032 -c----w C:\WINDOWS\$NtServicePackUninstall$\agentsr.dll
+ 2004-08-03 20:56:48 256,512 -c----w C:\WINDOWS\$NtServicePackUninstall$\agentsvr.exe
+ 2004-08-03 21:07:42 42,368 -c----w C:\WINDOWS\$NtServicePackUninstall$\agp440.sys
+ 2004-08-03 21:05:44 44,928 -c----w C:\WINDOWS\$NtServicePackUninstall$\agpcpq.sys
+ 2001-08-23 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0401.dll
+ 2001-08-23 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0404.dll
+ 2001-08-23 10:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0405.dll
+ 2001-08-23 10:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0406.dll
+ 2001-08-23 10:00:00 21,504 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0407.dll
+ 2001-08-23 10:00:00 22,016 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0408.dll
+ 2001-08-23 10:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0409.dll
+ 2001-08-23 10:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt040b.dll
+ 2001-08-23 10:00:00 21,504 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt040c.dll
+ 2001-08-23 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt040d.dll
+ 2001-08-23 10:00:00 19,968 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt040e.dll
+ 2001-08-23 10:00:00 20,992 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0410.dll
+ 2001-08-23 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0411.dll
+ 2001-08-23 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0412.dll
+ 2001-08-23 10:00:00 20,992 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0413.dll
+ 2001-08-23 10:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0414.dll
+ 2001-08-23 10:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0415.dll
+ 2001-08-23 10:00:00 20,480 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0416.dll
+ 2001-08-23 10:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0419.dll
+ 2001-08-23 10:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt041d.dll
+ 2001-08-23 10:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt041f.dll
+ 2001-08-23 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0804.dll
+ 2001-08-23 10:00:00 20,992 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0816.dll
+ 2001-08-23 10:00:00 20,480 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0c0a.dll
+ 2004-08-03 20:56:42 24,064 -c----w C:\WINDOWS\$NtServicePackUninstall$\agtintl.dll
+ 2004-08-03 20:56:48 98,304 -c----w C:\WINDOWS\$NtServicePackUninstall$\ahui.exe
+ 2004-08-03 20:56:48 44,544 -c----w C:\WINDOWS\$NtServicePackUninstall$\alg.exe
+ 2004-08-03 21:05:44 42,752 -c----w C:\WINDOWS\$NtServicePackUninstall$\alim1541.sys
+ 2004-08-03 20:56:42 17,408 -c----w C:\WINDOWS\$NtServicePackUninstall$\alrsvc.dll
+ 2004-08-03 21:05:44 43,008 -c----w C:\WINDOWS\$NtServicePackUninstall$\amdagp.sys
+ 2004-08-03 21:05:44 36,992 -c----w C:\WINDOWS\$NtServicePackUninstall$\amdk6.sys
+ 2004-08-03 21:05:44 37,376 -c----w C:\WINDOWS\$NtServicePackUninstall$\amdk7.sys
+ 2004-08-03 20:56:42 70,656 -c----w C:\WINDOWS\$NtServicePackUninstall$\amstream.dll
+ 2004-08-03 22:56:42 108,544 -c----w C:\WINDOWS\$NtServicePackUninstall$\appconf.dll
+ 2004-08-03 20:56:42 126,976 -c----w C:\WINDOWS\$NtServicePackUninstall$\apphelp.dll
+ 2004-08-03 20:56:42 167,936 -c----w C:\WINDOWS\$NtServicePackUninstall$\appmgmts.dll
+ 2004-08-03 20:56:42 295,936 -c----w C:\WINDOWS\$NtServicePackUninstall$\appmgr.dll
+ 2004-08-03 22:56:42 331,264 -c----w C:\WINDOWS\$NtServicePackUninstall$\aqueue.dll
+ 2004-08-03 21:05:44 60,800 -c----w C:\WINDOWS\$NtServicePackUninstall$\arp1394.sys
+ 2004-08-03 20:56:00 8,192 -c----w C:\WINDOWS\$NtServicePackUninstall$\asferror.dll
+ 2002-08-29 00:40:48 14,366 -c----w C:\WINDOWS\$NtServicePackUninstall$\asfsipc.dll
+ 2004-08-03 22:56:42 369,664 -c----w C:\WINDOWS\$NtServicePackUninstall$\asp.dll
+ 2004-08-03 22:56:42 369,664 -c----w C:\WINDOWS\$NtServicePackUninstall$\asp51.dll
+ 2004-08-03 20:56:48 30,208 -c----w C:\WINDOWS\$NtServicePackUninstall$\asr_fmt.exe
+ 2004-08-03 20:56:48 32,768 -c----w C:\WINDOWS\$NtServicePackUninstall$\asr_pfu.exe
+ 2004-08-03 20:56:42 65,024 -c----w C:\WINDOWS\$NtServicePackUninstall$\asycfilt.dll
+ 2004-08-03 19:05:04 14,336 -c----w C:\WINDOWS\$NtServicePackUninstall$\asyncmac.sys
+ 2004-08-03 20:56:48 25,088 -c----w C:\WINDOWS\$NtServicePackUninstall$\at.exe
+ 2004-08-03 18:59:44 95,360 -c----w C:\WINDOWS\$NtServicePackUninstall$\atapi.sys
+ 2004-08-03 20:56:42 58,880 -c----w C:\WINDOWS\$NtServicePackUninstall$\atl.dll
+ 2004-08-03 20:56:48 11,264 -c----w C:\WINDOWS\$NtServicePackUninstall$\atmadm.exe
+ 2004-08-03 18:58:32 59,904 -c----w C:\WINDOWS\$NtServicePackUninstall$\atmarpc.sys
+ 2004-08-03 20:56:00 285,696 -c----w C:\WINDOWS\$NtServicePackUninstall$\atmfd.dll
+ 2004-08-03 18:58:36 55,936 -c----w C:\WINDOWS\$NtServicePackUninstall$\atmlane.sys
+ 2004-08-03 20:56:42 30,208 -c----w C:\WINDOWS\$NtServicePackUninstall$\atmlib.dll
+ 2001-08-23 10:00:00 11,264 -c----w C:\WINDOWS\$NtServicePackUninstall$\attrib.exe
+ 2004-08-03 20:56:42 42,496 -c----w C:\WINDOWS\$NtServicePackUninstall$\audiosrv.dll
+ 2004-08-03 20:56:48 14,336 -c----w C:\WINDOWS\$NtServicePackUninstall$\auditusr.exe
+ 2003-03-24 14:52:04 20,540 -c----w C:\WINDOWS\$NtServicePackUninstall$\author.dll
+ 2003-03-24 14:52:04 16,439 -c----w C:\WINDOWS\$NtServicePackUninstall$\author.exe
+ 2004-08-03 20:56:42 56,832 -c----w C:\WINDOWS\$NtServicePackUninstall$\authz.dll
+ 2004-08-03 20:56:48 588,800 -c----w C:\WINDOWS\$NtServicePackUninstall$\autochk.exe
+ 2004-08-03 20:56:48 602,624 -c----w C:\WINDOWS\$NtServicePackUninstall$\autoconv.exe
+ 2004-08-03 20:56:48 580,608 -c----w C:\WINDOWS\$NtServicePackUninstall$\autofmt.exe
+ 2004-08-03 20:56:48 11,264 -c----w C:\WINDOWS\$NtServicePackUninstall$\autolfn.exe
+ 2004-08-03 20:56:42 84,992 -c----w C:\WINDOWS\$NtServicePackUninstall$\avifil32.dll
+ 2004-08-03 20:56:42 52,736 -c----w C:\WINDOWS\$NtServicePackUninstall$\basesrv.dll
+ 2004-08-03 20:56:42 28,672 -c----w C:\WINDOWS\$NtServicePackUninstall$\batmeter.dll
+ 2004-08-03 20:56:42 8,704 -c----w C:\WINDOWS\$NtServicePackUninstall$\batt.dll
+ 2001-08-23 10:00:00 14,080 -c----w C:\WINDOWS\$NtServicePackUninstall$\battc.sys
+ 2004-08-03 21:05:44 11,776 -c----w C:\WINDOWS\$NtServicePackUninstall$\bdasup.sys
+ 2004-08-03 20:56:42 17,408 -c----w C:\WINDOWS\$NtServicePackUninstall$\bidispl.dll
+ 2004-08-03 22:56:42 8,192 -c----w C:\WINDOWS\$NtServicePackUninstall$\bitsprx2.dll
+ 2004-08-03 22:56:42 7,168 -c----w C:\WINDOWS\$NtServicePackUninstall$\bitsprx3.dll
+ 2004-08-03 20:56:42 286,208 -c----w C:\WINDOWS\$NtServicePackUninstall$\blackbox.dll
+ 2004-08-03 20:56:48 71,680 -c----w C:\WINDOWS\$NtServicePackUninstall$\blastcln.exe
+ 2001-08-23 10:00:00 136,704 -c----w C:\WINDOWS\$NtServicePackUninstall$\bootcfg.exe
+ 2004-08-03 18:59:58 71,552 -c----w C:\WINDOWS\$NtServicePackUninstall$\bridge.sys
+ 2004-08-03 20:56:00 63,488 -c----w C:\WINDOWS\$NtServicePackUninstall$\browselc.dll
+ 2004-08-03 20:56:42 77,312 -c----w C:\WINDOWS\$NtServicePackUninstall$\browser.dll
+ 2004-08-03 20:56:42 1,016,832 -c----w C:\WINDOWS\$NtServicePackUninstall$\browseui.dll
+ 2004-08-03 20:56:42 78,336 -c----w C:\WINDOWS\$NtServicePackUninstall$\browsewm.dll
+ 2004-08-03 20:56:42 20,992 -c----w C:\WINDOWS\$NtServicePackUninstall$\bthci.dll
+ 2004-08-03 20:56:42 30,208 -c----w C:\WINDOWS\$NtServicePackUninstall$\bthserv.dll
+ 2004-08-03 20:56:42 50,688 -c----w C:\WINDOWS\$NtServicePackUninstall$\btpanui.dll
+ 2001-08-23 12:00:00 218,112 -c----w C:\WINDOWS\$NtServicePackUninstall$\c_g18030.dll
+ 2004-08-03 20:56:42 59,904 -c----w C:\WINDOWS\$NtServicePackUninstall$\cabinet.dll
+ 2004-08-03 20:56:42 84,480 -c----w C:\WINDOWS\$NtServicePackUninstall$\cabview.dll
+ 2001-08-23 10:00:00 18,432 -c----w C:\WINDOWS\$NtServicePackUninstall$\cacls.exe
+ 2004-08-03 22:56:42 385,024 -c----w C:\WINDOWS\$NtServicePackUninstall$\callcont.dll
+ 2004-08-03 20:56:42 50,688 -c----w C:\WINDOWS\$NtServicePackUninstall$\camocx.dll
+ 2001-08-23 10:00:00 142,848 -c----w C:\WINDOWS\$NtServicePackUninstall$\capesnpn.dll
+ 2004-08-03 22:56:42 229,888 -c----w C:\WINDOWS\$NtServicePackUninstall$\catsrv.dll
+ 2004-08-03 22:56:42 85,504 -c----w C:\WINDOWS\$NtServicePackUninstall$\catsrvps.dll
+ 2004-08-03 22:56:42 628,224 -c----w C:\WINDOWS\$NtServicePackUninstall$\catsrvut.dll
+ 2004-08-03 21:10:18 17,024 -c----w C:\WINDOWS\$NtServicePackUninstall$\ccdecode.sys
+ 2004-08-03 19:14:12 63,744 -c----w C:\WINDOWS\$NtServicePackUninstall$\cdfs.sys
+ 2004-08-03 20:56:42 150,528 -c----w C:\WINDOWS\$NtServicePackUninstall$\cdfview.dll
+ 2004-08-03 20:56:42 2,067,968 -c----w C:\WINDOWS\$NtServicePackUninstall$\cdosys.dll
+ 2004-08-03 18:59:54 49,536 -c----w C:\WINDOWS\$NtServicePackUninstall$\cdrom.sys
+ 2004-08-03 20:56:42 194,560 -c----w C:\WINDOWS\$NtServicePackUninstall$\certcli.dll
+ 2004-08-03 20:56:42 457,728 -c----w C:\WINDOWS\$NtServicePackUninstall$\certmgr.dll
+ 2004-08-03 22:56:42 38,912 -c----w C:\WINDOWS\$NtServicePackUninstall$\cfgbkend.dll
+ 2004-08-03 20:56:02 16,896 -c----w C:\WINDOWS\$NtServicePackUninstall$\cfgmgr32.dll
+ 2003-03-24 14:52:04 188,480 -c----w C:\WINDOWS\$NtServicePackUninstall$\cfgwiz.exe
+ 2004-08-03 20:31:52 97,792 -c----w C:\WINDOWS\$NtServicePackUninstall$\chtmbx.dll
+ 2004-08-03 20:31:54 56,320 -c----w C:\WINDOWS\$NtServicePackUninstall$\chtskdic.dll
+ 2004-08-03 20:31:54 173,568 -c----w C:\WINDOWS\$NtServicePackUninstall$\chtskf.dll
+ 2001-08-23 10:00:00 109,568 -c----w C:\WINDOWS\$NtServicePackUninstall$\cic.dll
+ 2004-08-03 22:56:42 1,352,192 -c----w C:\WINDOWS\$NtServicePackUninstall$\cimwin32.dll
+ 2004-08-03 20:31:54 198,656 -c----w C:\WINDOWS\$NtServicePackUninstall$\cintime.dll
+ 2004-08-03 20:56:42 69,120 -c----w C:\WINDOWS\$NtServicePackUninstall$\ciodm.dll
+ 2004-08-03 20:56:48 56,320 -c----w C:\WINDOWS\$NtServicePackUninstall$\cipher.exe
+ 2004-08-03 20:56:48 5,632 -c----w C:\WINDOWS\$NtServicePackUninstall$\cisvc.exe
+ 2004-08-03 19:14:28 49,664 -c----w C:\WINDOWS\$NtServicePackUninstall$\classpnp.sys
+ 2004-08-03 22:56:42 110,080 -c----w C:\WINDOWS\$NtServicePackUninstall$\clbcatex.dll
+ 2004-08-03 22:56:42 501,248 -c----w C:\WINDOWS\$NtServicePackUninstall$\clbcatq.dll
+ 2004-08-03 20:56:48 64,000 -c----w C:\WINDOWS\$NtServicePackUninstall$\cleanmgr.exe
+ 2004-08-03 20:56:42 77,824 -c----w C:\WINDOWS\$NtServicePackUninstall$\cliconfg.dll
+ 2004-08-03 20:56:48 20,480 -c----w C:\WINDOWS\$NtServicePackUninstall$\cliconfg.exe
+ 2004-08-03 22:56:48 102,912 -c----w C:\WINDOWS\$NtServicePackUninstall$\clipbrd.exe
+ 2004-08-03 20:56:48 33,280 -c----w C:\WINDOWS\$NtServicePackUninstall$\clipsrv.exe
+ 2004-08-03 20:56:42 57,856 -c----w C:\WINDOWS\$NtServicePackUninstall$\clusapi.dll
+ 2004-08-03 21:05:44 14,080 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmbatt.sys
+ 2004-08-03 20:56:42 15,872 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmcfg32.dll
+ 2004-08-03 20:56:50 388,608 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmd.exe
+ 2004-08-03 20:56:44 45,568 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmdevtgprov.dll
+ 2004-08-03 20:56:42 343,040 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmdial32.dll
+ 2004-08-03 20:56:50 47,104 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmdl32.exe
+ 2004-08-03 20:56:50 39,936 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmmon32.exe
+ 2004-08-03 22:56:42 185,344 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmprops.dll
+ 2004-08-03 20:56:42 13,824 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmsetacl.dll
+ 2004-08-03 20:56:50 63,488 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmstp.exe
+ 2004-08-03 20:56:42 39,936 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmutil.dll
+ 2004-08-03 21:05:44 47,104 -c----w C:\WINDOWS\$NtServicePackUninstall$\cnbjmon.dll
+ 2004-08-03 22:56:42 46,592 -c----w C:\WINDOWS\$NtServicePackUninstall$\coadmin.dll
+ 2004-08-03 22:56:42 62,464 -c----w C:\WINDOWS\$NtServicePackUninstall$\colbact.dll
+ 2001-08-23 12:00:00 25,600 -c----w C:\WINDOWS\$NtServicePackUninstall$\comaddin.dll
+ 2004-08-03 22:56:42 195,584 -c----w C:\WINDOWS\$NtServicePackUninstall$\comadmin.dll
+ 2004-08-03 20:56:42 611,328 -c----w C:\WINDOWS\$NtServicePackUninstall$\comctl32.dll
+ 2004-08-03 20:56:42 276,992 -c----w C:\WINDOWS\$NtServicePackUninstall$\comdlg32.dll
+ 2004-08-03 20:56:42 252,928 -c----w C:\WINDOWS\$NtServicePackUninstall$\compatui.dll
+ 2001-08-23 10:00:00 9,344 -c----w C:\WINDOWS\$NtServicePackUninstall$\compbatt.sys
+ 2004-08-03 22:56:42 24,064 -c----w C:\WINDOWS\$NtServicePackUninstall$\compfilt.dll
+ 2004-08-03 20:56:42 229,376 -c----w C:\WINDOWS\$NtServicePackUninstall$\compstui.dll
+ 2001-08-23 12:00:00 82,432 -c----w C:\WINDOWS\$NtServicePackUninstall$\comrepl.dll
+ 2004-08-03 22:56:50 9,728 -c----w C:\WINDOWS\$NtServicePackUninstall$\comrepl.exe
+ 2001-08-23 12:00:00 5,120 -c----w C:\WINDOWS\$NtServicePackUninstall$\comrereg.exe
+ 2004-08-03 20:56:42 792,064 -c----w C:\WINDOWS\$NtServicePackUninstall$\comres.dll
+ 2001-08-23 10:00:00 259,584 -c----w C:\WINDOWS\$NtServicePackUninstall$\comsetup.dll
+ 2001-08-23 12:00:00 147,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\comsnap.dll
+ 2004-08-03 22:56:42 1,251,840 -c----w C:\WINDOWS\$NtServicePackUninstall$\comsvcs.dll
+ 2004-08-03 22:56:42 540,160 -c----w C:\WINDOWS\$NtServicePackUninstall$\comuid.dll
+ 2004-08-03 22:56:50 1,032,192 -c----w C:\WINDOWS\$NtServicePackUninstall$\conf.exe
+ 2004-08-03 22:56:42 45,056 -c----w C:\WINDOWS\$NtServicePackUninstall$\confmrsl.dll
+ 2001-08-23 10:00:00 345,600 -c----w C:\WINDOWS\$NtServicePackUninstall$\confmsp.dll
+ 2004-08-03 20:56:50 27,648 -c----w C:\WINDOWS\$NtServicePackUninstall$\conime.exe
+ 2004-08-03 20:56:42 35,328 -c----w C:\WINDOWS\$NtServicePackUninstall$\corpol.dll
+ 2004-08-03 20:56:42 163,840 -c----w C:\WINDOWS\$NtServicePackUninstall$\credui.dll
+ 2004-08-03 21:05:44 36,480 -c----w C:\WINDOWS\$NtServicePackUninstall$\crusoe.sys
+ 2004-08-03 20:56:42 597,504 -c----w C:\WINDOWS\$NtServicePackUninstall$\crypt32.dll
+ 2004-08-03 20:56:42 74,752 -c----w C:\WINDOWS\$NtServicePackUninstall$\cryptdlg.dll
+ 2004-08-03 20:56:42 33,280 -c----w C:\WINDOWS\$NtServicePackUninstall$\cryptdll.dll
+ 2004-08-03 20:56:42 53,760 -c----w C:\WINDOWS\$NtServicePackUninstall$\cryptext.dll
+ 2004-08-03 20:56:42 63,488 -c----w C:\WINDOWS\$NtServicePackUninstall$\cryptnet.dll
+ 2004-08-03 20:56:42 60,416 -c----w C:\WINDOWS\$NtServicePackUninstall$\cryptsvc.dll
+ 2004-08-03 20:56:42 512,512 -c----w C:\WINDOWS\$NtServicePackUninstall$\cryptui.dll
+ 2004-08-03 20:56:42 101,888 -c----w C:\WINDOWS\$NtServicePackUninstall$\cscdll.dll
+ 2004-08-03 20:56:50 98,304 -c----w C:\WINDOWS\$NtServicePackUninstall$\cscript.exe
+ 2004-08-03 20:56:42 326,656 -c----w C:\WINDOWS\$NtServicePackUninstall$\cscui.dll
+ 2004-08-03 20:56:42 32,768 -c----w C:\WINDOWS\$NtServicePackUninstall$\csrsrv.dll
+ 2004-08-03 20:56:50 6,144 -c----w C:\WINDOWS\$NtServicePackUninstall$\csrss.exe
+ 2004-08-03 20:56:50 15,360 -c----w C:\WINDOWS\$NtServicePackUninstall$\ctfmon.exe
+ 2004-08-03 22:56:42 28,672 -c----w C:\WINDOWS\$NtServicePackUninstall$\custsat.dll
+ 2004-08-03 20:56:42 1,179,648 -c----w C:\WINDOWS\$NtServicePackUninstall$\d3d8.dll
+ 2004-08-03 20:56:42 8,192 -c----w C:\WINDOWS\$NtServicePackUninstall$\d3d8thk.dll
+ 2004-08-03 20:56:42 1,689,088 -c----w C:\WINDOWS\$NtServicePackUninstall$\d3d9.dll
+ 2004-08-03 20:56:42 825,344 -c----w C:\WINDOWS\$NtServicePackUninstall$\d3dim700.dll
+ 2004-08-03 20:56:42 1,053,696 -c----w C:\WINDOWS\$NtServicePackUninstall$\danim.dll
+ 2004-08-03 22:56:44 561,179 -c----w C:\WINDOWS\$NtServicePackUninstall$\dao360.dll
+ 2004-08-03 20:56:44 54,272 -c----w C:\WINDOWS\$NtServicePackUninstall$\dataclen.dll
+ 2001-08-23 10:00:00 152,064 -c----w C:\WINDOWS\$NtServicePackUninstall$\datime.dll
+ 2004-08-03 22:56:50 42,496 -c----w C:\WINDOWS\$NtServicePackUninstall$\davcdata.exe
+ 2004-08-03 20:56:44 24,576 -c----w C:\WINDOWS\$NtServicePackUninstall$\davclnt.dll
+ 2004-08-03 20:56:44 640,000 -c----w C:\WINDOWS\$NtServicePackUninstall$\dbghelp.dll
+ 2004-08-03 20:56:44 24,576 -c----w C:\WINDOWS\$NtServicePackUninstall$\dbmsrpcn.dll
+ 2004-08-03 20:56:44 110,592 -c----w C:\WINDOWS\$NtServicePackUninstall$\dbnetlib.dll
+ 2004-08-03 20:56:44 28,672 -c----w C:\WINDOWS\$NtServicePackUninstall$\dbnmpntw.dll
+ 2004-08-03 21:07:22 1,788 -c----w C:\WINDOWS\$NtServicePackUninstall$\dcache.bin
+ 2004-08-03 22:56:44 40,960 -c----w C:\WINDOWS\$NtServicePackUninstall$\dcap32.dll
+ 2004-08-03 20:56:44 8,704 -c----w C:\WINDOWS\$NtServicePackUninstall$\dciman32.dll
+ 2001-08-23 12:00:00 5,120 -c----w C:\WINDOWS\$NtServicePackUninstall$\dcomcnfg.exe
+ 2004-08-03 20:56:50 30,208 -c----w C:\WINDOWS\$NtServicePackUninstall$\ddeshare.exe
+ 2004-08-03 20:56:44 266,240 -c----w C:\WINDOWS\$NtServicePackUninstall$\ddraw.dll
+ 2004-08-03 20:56:44 27,136 -c----w C:\WINDOWS\$NtServicePackUninstall$\ddrawex.dll
+ 2004-08-03 20:56:50 25,088 -c----w C:\WINDOWS\$NtServicePackUninstall$\defrag.exe
+ 2004-08-03 20:56:44 59,904 -c----w C:\WINDOWS\$NtServicePackUninstall$\devenum.dll
+ 2004-08-03 20:56:44 282,624 -c----w C:\WINDOWS\$NtServicePackUninstall$\devmgr.dll
+ 2004-08-03 20:56:50 82,432 -c----w C:\WINDOWS\$NtServicePackUninstall$\dfrgfat.exe
+ 2004-08-03 20:56:50 104,960 -c----w C:\WINDOWS\$NtServicePackUninstall$\dfrgntfs.exe
+ 2004-08-03 20:56:44 38,912 -c----w C:\WINDOWS\$NtServicePackUninstall$\dfrgsnap.dll
+ 2004-08-03 20:56:44 123,904 -c----w C:\WINDOWS\$NtServicePackUninstall$\dfrgui.dll
+ 2004-08-03 20:56:44 28,672 -c----w C:\WINDOWS\$NtServicePackUninstall$\dfsshlex.dll
+ 2004-08-03 20:56:44 111,104 -c----w C:\WINDOWS\$NtServicePackUninstall$\dgnet.dll
+ 2004-08-03 20:56:44 111,104 -c----w C:\WINDOWS\$NtServicePackUninstall$\dhcpcsvc.dll
+ 2001-08-23 10:00:00 370,176 -c----w C:\WINDOWS\$NtServicePackUninstall$\dhcpmon.dll
+ 2004-08-03 22:56:50 539,136 -c----w C:\WINDOWS\$NtServicePackUninstall$\dialer.exe
+ 2004-08-03 20:56:50 85,504 -c----w C:\WINDOWS\$NtServicePackUninstall$\diantz.exe
+ 2004-08-03 20:56:44 68,608 -c----w C:\WINDOWS\$NtServicePackUninstall$\digest.dll
+ 2004-08-03 20:56:44 159,232 -c----w C:\WINDOWS\$NtServicePackUninstall$\dinput.dll
+ 2004-08-03 20:56:44 181,760 -c----w C:\WINDOWS\$NtServicePackUninstall$\dinput8.dll
+ 2004-08-03 22:56:44 81,408 -c----w C:\WINDOWS\$NtServicePackUninstall$\directdb.dll
+ 2004-08-03 18:59:56 36,352 -c----w C:\WINDOWS\$NtServicePackUninstall$\disk.sys
+ 2001-08-23 10:00:00 1,501,696 -c----w C:\WINDOWS\$NtServicePackUninstall$\diskcopy.dll
+ 2004-08-03 18:59:54 14,208 -c----w C:\WINDOWS\$NtServicePackUninstall$\diskdump.sys
+ 2004-08-03 20:56:50 163,840 -c----w C:\WINDOWS\$NtServicePackUninstall$\diskpart.exe
+ 2001-08-23 10:00:00 45,083 -c----w C:\WINDOWS\$NtServicePackUninstall$\dispex.dll
+ 2002-08-29 03:41:22 294,912 -c----w C:\WINDOWS\$NtServicePackUninstall$\dlimport.exe
+ 2004-08-03 20:56:50 5,120 -c----w C:\WINDOWS\$NtServicePackUninstall$\dllhost.exe
+ 2004-08-03 20:56:50 224,768 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmadmin.exe
+ 2004-08-03 20:56:44 28,672 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmband.dll
+ 2004-08-03 19:07:18 799,744 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmboot.sys
+ 2004-08-03 20:56:44 61,440 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmcompos.dll
+ 2001-08-23 10:00:00 273,920 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmdlgs.dll
+ 2004-08-03 20:56:44 200,704 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmdskmgr.dll
+ 2004-08-03 20:56:44 181,248 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmime.dll
+ 2004-08-03 19:07:18 153,344 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmio.sys
+ 2004-08-03 20:56:44 35,840 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmloader.dll
+ 2004-08-03 20:56:50 15,872 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmremote.exe
+ 2004-08-03 20:56:44 82,432 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmscript.dll
+ 2004-08-03 20:56:44 23,552 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmserver.dll
+ 2004-08-03 20:56:44 105,984 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmstyle.dll
+ 2004-08-03 20:56:44 103,424 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmsynth.dll
+ 2004-08-03 20:56:44 104,448 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmusic.dll
+ 2004-08-03 21:07:40 52,864 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmusic.sys
+ 2004-08-03 21:05:44 52,224 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmutil.dll
+ 2004-08-03 20:56:44 148,480 -c----w C:\WINDOWS\$NtServicePackUninstall$\dnsapi.dll
+ 2004-08-03 20:56:44 45,568 -c----w C:\WINDOWS\$NtServicePackUninstall$\dnsrslvr.dll
+ 2004-08-03 20:56:44 48,128 -c----w C:\WINDOWS\$NtServicePackUninstall$\docprop2.dll
+ 2004-08-03 20:58:30 207,360 -c----w C:\WINDOWS\$NtServicePackUninstall$\dot4.sys
+ 2004-08-03 20:56:28 96,768 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpcdll.dll
+ 2004-08-03 20:56:50 30,208 -c----w C:\WINDOWS\$NtServicePackUninstall$\dplaysvr.exe
+ 2004-08-03 20:56:44 229,888 -c----w C:\WINDOWS\$NtServicePackUninstall$\dplayx.dll
+ 2004-08-03 20:56:44 23,552 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpmodemx.dll
+ 2004-08-03 20:56:04 3,584 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpnaddr.dll
+ 2004-08-03 20:56:44 375,296 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpnet.dll
+ 2004-08-03 20:56:44 35,328 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpnhpast.dll
+ 2004-08-03 20:56:44 60,928 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpnhupnp.dll
+ 2004-08-03 20:56:04 3,584 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpnlobby.dll
+ 2004-08-03 20:56:50 18,432 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpnsvr.exe
+ 2004-08-03 20:56:44 21,504 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpvacm.dll
+ 2004-08-03 20:56:44 212,480 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpvoice.dll
+ 2004-08-03 20:56:50 83,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpvsetup.exe
+ 2004-08-03 20:56:44 116,736 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpvvox.dll
+ 2004-08-03 20:56:44 57,344 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpwsockx.dll
+ 2001-08-23 10:00:00 58,368 -c----w C:\WINDOWS\$NtServicePackUninstall$\driverquery.exe
+ 2004-08-03 20:57:06 299,520 -c----w C:\WINDOWS\$NtServicePackUninstall$\drmclien.dll
+ 2004-08-03 21:05:44 60,288 -c----w C:\WINDOWS\$NtServicePackUninstall$\drmk.sys
+ 2004-08-03 21:05:44 2,944 -c----w C:\WINDOWS\$NtServicePackUninstall$\drmkaud.sys
+ 2004-08-03 20:56:44 87,040 -c----w C:\WINDOWS\$NtServicePackUninstall$\drmstor.dll
+ 2004-08-03 20:57:04 695,296 -c----w C:\WINDOWS\$NtServicePackUninstall$\drmv2clt.dll
+ 2004-08-03 20:56:44 14,336 -c----w C:\WINDOWS\$NtServicePackUninstall$\drprov.dll
+ 2001-08-23 10:00:00 58,368 -c----w C:\WINDOWS\$NtServicePackUninstall$\drvqry.exe
+ 2004-08-03 20:56:44 16,384 -c----w C:\WINDOWS\$NtServicePackUninstall$\ds32gt.dll
+ 2004-08-03 20:56:44 181,760 -c----w C:\WINDOWS\$NtServicePackUninstall$\dsdmo.dll
+ 2004-08-03 20:56:44 71,680 -c----w C:\WINDOWS\$NtServicePackUninstall$\dsdmoprp.dll
+ 2004-08-03 20:56:44 92,672 -c----w C:\WINDOWS\$NtServicePackUninstall$\dskquota.dll
+ 2001-08-23 10:00:00 144,384 -c----w C:\WINDOWS\$NtServicePackUninstall$\dskquoui.dll
+ 2004-08-03 20:56:44 367,616 -c----w C:\WINDOWS\$NtServicePackUninstall$\dsound.dll
+ 2004-08-03 20:56:44 1,294,336 -c----w C:\WINDOWS\$NtServicePackUninstall$\dsound3d.dll
+ 2004-08-03 20:56:44 142,336 -c----w C:\WINDOWS\$NtServicePackUninstall$\dsprop.dll
+ 2004-08-03 20:56:06 4,096 -c----w C:\WINDOWS\$NtServicePackUninstall$\dsprpres.dll
+ 2004-08-03 20:56:44 239,104 -c----w C:\WINDOWS\$NtServicePackUninstall$\dsquery.dll
+ 2004-08-03 20:56:44 51,200 -c----w C:\WINDOWS\$NtServicePackUninstall$\dssec.dll
+ 2004-08-03 18:31:44 137,216 -c----w C:\WINDOWS\$NtServicePackUninstall$\dssenh.dll
+ 2004-08-03 20:56:44 113,152 -c----w C:\WINDOWS\$NtServicePackUninstall$\dsuiext.dll
+ 2004-08-03 20:56:44 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\dswave.dll
+ 2004-08-03 20:56:50 10,752 -c----w C:\WINDOWS\$NtServicePackUninstall$\dumprep.exe
+ 2004-08-03 20:56:44 304,128 -c----w C:\WINDOWS\$NtServicePackUninstall$\duser.dll
+ 2004-08-03 20:56:50 17,920 -c----w C:\WINDOWS\$NtServicePackUninstall$\dvdupgrd.exe
+ 2004-08-03 20:56:50 180,224 -c----w C:\WINDOWS\$NtServicePackUninstall$\dwwin.exe
+ 2004-08-03 20:56:44 619,008 -c----w C:\WINDOWS\$NtServicePackUninstall$\dx7vb.dll
+ 2004-08-03 20:56:44 1,227,264 -c----w C:\WINDOWS\$NtServicePackUninstall$\dx8vb.dll
+ 2004-08-03 20:56:50 1,298,432 -c----w C:\WINDOWS\$NtServicePackUninstall$\dxdiag.exe
+ 2004-08-03 20:56:44 2,113,536 -c----w C:\WINDOWS\$NtServicePackUninstall$\dxdiagn.dll
+ 2004-08-03 19:00:56 71,040 -c----w C:\WINDOWS\$NtServicePackUninstall$\dxg.sys
+ 2004-08-03 20:56:44 498,205 -c----w C:\WINDOWS\$NtServicePackUninstall$\dxmasf.dll
+ 2004-08-03 20:56:44 357,888 -c----w C:\WINDOWS\$NtServicePackUninstall$\dxtmsft.dll
+ 2004-08-03 20:56:44 201,728 -c----w C:\WINDOWS\$NtServicePackUninstall$\dxtrans.dll
+ 2008-03-25 20:10:18 2,678 -c----w C:\WINDOWS\$NtServicePackUninstall$\e2yn1jl7.dat
+ 2004-08-03 20:56:44 26,624 -c----w C:\WINDOWS\$NtServicePackUninstall$\efsadu.dll
+ 2004-08-03 20:56:44 183,296 -c----w C:\WINDOWS\$NtServicePackUninstall$\els.dll
+ 2004-08-03 20:56:44 20,480 -c----w C:\WINDOWS\$NtServicePackUninstall$\encapi.dll
+ 2004-08-03 20:56:44 186,368 -c----w C:\WINDOWS\$NtServicePackUninstall$\encdec.dll
+ 2004-08-03 20:56:44 23,040 -c----w C:\WINDOWS\$NtServicePackUninstall$\ersvc.dll
+ 2004-08-03 20:56:44 243,200 -c----w C:\WINDOWS\$NtServicePackUninstall$\es.dll
+ 2004-08-03 20:56:44 1,082,368 -c----w C:\WINDOWS\$NtServicePackUninstall$\esent.dll
+ 2004-08-03 22:56:44 247,808 -c----w C:\WINDOWS\$NtServicePackUninstall$\esscli.dll
+ 2004-08-03 20:56:50 193,024 -c----w C:\WINDOWS\$NtServicePackUninstall$\eudcedit.exe
+ 2004-08-03 20:56:50 50,176 -c----w C:\WINDOWS\$NtServicePackUninstall$\evcreate.exe
+ 2004-08-03 20:56:50 50,176 -c----w C:\WINDOWS\$NtServicePackUninstall$\eventcreate.exe
+ 2004-08-03 20:56:44 55,808 -c----w C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll
+ 2001-08-23 10:00:00 77,824 -c----w C:\WINDOWS\$NtServicePackUninstall$\eventtriggers.exe
+ 2004-08-03 22:56:44 101,888 -c----w C:\WINDOWS\$NtServicePackUninstall$\evntagnt.dll
+ 2004-08-03 22:56:50 24,064 -c----w C:\WINDOWS\$NtServicePackUninstall$\evntcmd.exe
+ 2004-08-03 20:56:44 22,016 -c----w C:\WINDOWS\$NtServicePackUninstall$\evntrprv.dll
+ 2004-08-03 22:56:50 92,160 -c----w C:\WINDOWS\$NtServicePackUninstall$\evntwin.exe
+ 2004-08-03 20:56:44 45,568 -c----w C:\WINDOWS\$NtServicePackUninstall$\evtgprov.dll
+ 2001-08-23 10:00:00 77,824 -c----w C:\WINDOWS\$NtServicePackUninstall$\evtrig.exe
+ 2004-08-03 20:56:50 1,032,192 -c----w C:\WINDOWS\$NtServicePackUninstall$\explorer.exe
+ 2004-08-03 20:56:44 380,957 -c----w C:\WINDOWS\$NtServicePackUninstall$\expsrv.dll
+ 2004-08-03 22:56:44 14,336 -c----w C:\WINDOWS\$NtServicePackUninstall$\exstrace.dll
+ 2004-08-03 20:56:44 55,808 -c----w C:\WINDOWS\$NtServicePackUninstall$\extmgr.dll
+ 2004-08-03 20:56:50 45,568 -c----w C:\WINDOWS\$NtServicePackUninstall$\extrac32.exe
+ 2001-08-23 10:00:00 121,856 -c----w C:\WINDOWS\$NtServicePackUninstall$\exts.dll
+ 2001-08-23 12:00:00 7,168 -c----w C:\WINDOWS\$NtServicePackUninstall$\f3ahvoas.dll
+ 2004-08-03 19:14:18 143,360 -c----w C:\WINDOWS\$NtServicePackUninstall$\fastfat.sys
+ 2004-08-03 22:56:44 472,064 -c----w C:\WINDOWS\$NtServicePackUninstall$\fastprox.dll
+ 2004-08-03 20:56:44 80,384 -c----w C:\WINDOWS\$NtServicePackUninstall$\faultrep.dll
+ 2008-03-25 20:10:22 2,678 -c----w C:\WINDOWS\$NtServicePackUninstall$\fdb1vpjp.dat
+ 2004-08-03 18:59:28 27,392 -c----w C:\WINDOWS\$NtServicePackUninstall$\fdc.sys
+ 2001-08-23 10:00:00 117,760 -c----w C:\WINDOWS\$NtServicePackUninstall$\fde.dll
+ 2004-08-03 20:56:44 73,728 -c----w C:\WINDOWS\$NtServicePackUninstall$\fdeploy.dll
+ 2004-08-03 20:56:44 21,504 -c----w C:\WINDOWS\$NtServicePackUninstall$\feclient.dll
+ 2004-08-03 20:56:44 337,920 -c----w C:\WINDOWS\$NtServicePackUninstall$\filemgmt.dll
+ 2004-08-03 20:56:50 27,136 -c----w C:\WINDOWS\$NtServicePackUninstall$\findstr.exe
+ 2001-08-23 10:00:00 34,944 -c----w C:\WINDOWS\$NtServicePackUninstall$\fips.sys
+ 2004-08-03 20:56:44 87,552 -c----w C:\WINDOWS\$NtServicePackUninstall$\fldrclnr.dll
+ 2004-08-03 18:59:28 20,480 -c----w C:\WINDOWS\$NtServicePackUninstall$\flpydisk.sys
+ 2004-08-03 22:56:44 16,896 -c----w C:\WINDOWS\$NtServicePackUninstall$\fltlib.dll
+ 2004-08-03 22:56:50 22,528 -c----w C:\WINDOWS\$NtServicePackUninstall$\fltmc.exe
+ 2004-08-03 21:01:20 124,800 -c----w C:\WINDOWS\$NtServicePackUninstall$\fltmgr.sys
+ 2004-08-03 20:56:44 382,976 -c----w C:\WINDOWS\$NtServicePackUninstall$\fontext.dll
+ 2001-08-23 10:00:00 79,360 -c----w C:\WINDOWS\$NtServicePackUninstall$\fontsub.dll
+ 2004-08-03 20:56:50 20,992 -c----w C:\WINDOWS\$NtServicePackUninstall$\fontview.exe
+ 2001-08-23 10:00:00 7,168 -c----w C:\WINDOWS\$NtServicePackUninstall$\forcedos.exe
+ 2001-08-23 10:00:00 25,600 -c----w C:\WINDOWS\$NtServicePackUninstall$\format.com
+ 2004-08-03 20:56:44 32,828 -c----w C:\WINDOWS\$NtServicePackUninstall$\fp40ext.dll
+ 2004-05-12 22:39:48 184,435 -c----w C:\WINDOWS\$NtServicePackUninstall$\fp4amsft.dll
+ 2003-03-24 14:52:04 82,035 -c----w C:\WINDOWS\$NtServicePackUninstall$\fp4anscp.dll
+ 2003-03-24 14:52:04 147,513 -c----w C:\WINDOWS\$NtServicePackUninstall$\fp4apws.dll
+ 2003-03-24 14:52:04 49,210 -c----w C:\WINDOWS\$NtServicePackUninstall$\fp4areg.dll
+ 2003-03-24 14:52:04 102,509 -c----w C:\WINDOWS\$NtServicePackUninstall$\fp4atxt.dll
+ 2003-03-24 14:52:04 618,605 -c----w C:\WINDOWS\$NtServicePackUninstall$\fp4autl.dll
+ 2003-03-24 14:52:04 41,020 -c----w C:\WINDOWS\$NtServicePackUninstall$\fp4avnb.dll
+ 2003-03-24 14:52:04 32,826 -c----w C:\WINDOWS\$NtServicePackUninstall$\fp4avss.dll
+ 2003-03-24 14:52:04 49,212 -c----w C:\WINDOWS\$NtServicePackUninstall$\fp4awebs.dll
+ 2004-05-12 22:39:48 876,653 -c----w C:\WINDOWS\$NtServicePackUninstall$\fp4awel.dll
+ 2002-05-14 10:08:54 14,608 -c----w C:\WINDOWS\$NtServicePackUninstall$\fp98sadm.exe
+ 2002-05-14 10:08:54 109,328 -c----w C:\WINDOWS\$NtServicePackUninstall$\fp98swin.exe
+ 2003-03-24 14:52:04 24,632 -c----w C:\WINDOWS\$NtServicePackUninstall$\fpadmcgi.exe
+ 2003-03-24 14:52:04 20,541 -c----w C:\WINDOWS\$NtServicePackUninstall$\fpadmdll.dll
+ 2003-03-24 14:52:04 188,494 -c----w C:\WINDOWS\$NtServicePackUninstall$\fpcount.exe
+ 2002-05-14 10:08:54 94,208 -c----w C:\WINDOWS\$NtServicePackUninstall$\fpencode.dll
+ 2003-03-24 14:52:04 20,541 -c----w C:\WINDOWS\$NtServicePackUninstall$\fpexedll.dll
+ 2004-05-12 22:39:48 598,071 -c----w C:\WINDOWS\$NtServicePackUninstall$\fpmmc.dll
+ 2003-03-24 14:52:06 208,896 -c----w C:\WINDOWS\$NtServicePackUninstall$\fpmmcsat.dll
+ 2003-03-24 14:52:04 20,538 -c----w C:\WINDOWS\$NtServicePackUninstall$\fpremadm.exe
+ 2003-03-24 14:52:04 16,449 -c----w C:\WINDOWS\$NtServicePackUninstall$\fpsrvadm.exe
+ 2003-03-24 14:52:04 65,601 -c----w C:\WINDOWS\$NtServicePackUninstall$\fpsrvwin.exe
+ 2004-08-03 20:56:08 9,344 -c----w C:\WINDOWS\$NtServicePackUninstall$\framebuf.dll
+ 2004-08-03 22:56:44 185,856 -c----w C:\WINDOWS\$NtServicePackUninstall$\framedyn.dll
+ 2004-08-03 20:56:50 193,024 -c----w C:\WINDOWS\$NtServicePackUninstall$\fsquirt.exe
+ 2004-08-03 20:56:50 42,496 -c----w C:\WINDOWS\$NtServicePackUninstall$\ftp.exe
+ 2004-08-03 22:56:44 6,144 -c----w C:\WINDOWS\$NtServicePackUninstall$\ftpmib.dll
+ 2004-08-03 22:56:44 125,952 -c----w C:\WINDOWS\$NtServicePackUninstall$\ftpsv251.dll
+ 2004-08-03 20:56:44 60,416 -c----w C:\WINDOWS\$NtServicePackUninstall$\fwcfg.dll
+ 2004-08-03 22:56:44 452,096 -c----w C:\WINDOWS\$NtServicePackUninstall$\fxsapi.dll
+ 2004-08-03 22:56:50 143,360 -c----w C:\WINDOWS\$NtServicePackUninstall$\fxsclnt.exe
+ 2004-08-03 22:56:44 72,192 -c----w C:\WINDOWS\$NtServicePackUninstall$\fxscom.dll
+ 2004-08-03 22:56:44 285,184 -c----w C:\WINDOWS\$NtServicePackUninstall$\fxscomex.dll
+ 2004-08-03 22:56:50 229,376 -c----w C:\WINDOWS\$NtServicePackUninstall$\fxscover.exe
+ 2004-08-03 22:56:44 27,136 -c----w C:\WINDOWS\$NtServicePackUninstall$\fxsdrv.dll
+ 2004-08-03 22:56:44 55,296 -c----w C:\WINDOWS\$NtServicePackUninstall$\fxsevent.dll
+ 2004-08-03 22:56:44 23,552 -c----w C:\WINDOWS\$NtServicePackUninstall$\fxsext32.dll
+ 2004-08-03 22:56:44 23,552 -c----w C:\WINDOWS\$NtServicePackUninstall$\fxsmon.dll
+ 2004-08-03 20:56:44 132,608 -c----w C:\WINDOWS\$NtServicePackUninstall$\fxsocm.dll
+ 2004-08-03 22:56:44 8,704 -c----w C:\WINDOWS\$NtServicePackUninstall$\fxsperf.dll
+ 2004-08-03 22:56:08 6,656 -c----w C:\WINDOWS\$NtServicePackUninstall$\fxsres.dll
+ 2004-08-03 22:56:44 562,176 -c----w C:\WINDOWS\$NtServicePackUninstall$\fxsst.dll
+ 2004-08-03 22:56:50 267,776 -c----w C:\WINDOWS\$NtServicePackUninstall$\fxssvc.exe
+ 2004-08-03 22:56:44 246,272 -c----w C:\WINDOWS\$NtServicePackUninstall$\fxst30.dll
+ 2004-08-03 22:56:44 397,312 -c----w C:\WINDOWS\$NtServicePackUninstall$\fxstiff.dll
+ 2004-08-03 22:56:44 154,112 -c----w C:\WINDOWS\$NtServicePackUninstall$\fxsui.dll
+ 2004-08-03 22:56:44 192,512 -c----w C:\WINDOWS\$NtServicePackUninstall$\fxswzrd.dll
+ 2004-08-03 22:56:44 400,384 -c----w C:\WINDOWS\$NtServicePackUninstall$\fxsxp32.dll
+ 2004-08-03 21:05:44 46,464 -c----w C:\WINDOWS\$NtServicePackUninstall$\gagp30kx.sys
+ 2004-08-03 20:56:44 278,016 -c----w C:\WINDOWS\$NtServicePackUninstall$\gdi32.dll
+ 2001-08-23 10:00:00 55,296 -c----w C:\WINDOWS\$NtServicePackUninstall$\getmac.exe
+ 2004-08-03 20:56:44 122,880 -c----w C:\WINDOWS\$NtServicePackUninstall$\glu32.dll
+ 2004-08-03 20:56:08 566,784 -c----w C:\WINDOWS\$NtServicePackUninstall$\gpedit.dll
+ 2004-08-03 20:56:08 9,728 -c----w C:\WINDOWS\$NtServicePackUninstall$\gpkrsrc.dll
+ 2004-08-03 20:56:50 119,808 -c----w C:\WINDOWS\$NtServicePackUninstall$\gpresult.exe
+ 2004-08-03 20:56:50 119,808 -c----w C:\WINDOWS\$NtServicePackUninstall$\gprslt.exe
+ 2004-08-03 20:56:44 198,656 -c----w C:\WINDOWS\$NtServicePackUninstall$\gptext.dll
+ 2004-08-03 20:56:50 39,424 -c----w C:\WINDOWS\$NtServicePackUninstall$\grpconv.exe
+ 2004-08-03 20:56:44 123,904 -c----w C:\WINDOWS\$NtServicePackUninstall$\guitrn.dll
+ 2004-08-03 22:56:44 32,256 -c----w C:\WINDOWS\$NtServicePackUninstall$\gzip.dll
+ 2004-08-03 22:56:44 57,344 -c----w C:\WINDOWS\$NtServicePackUninstall$\h323cc.dll
+ 2004-08-03 20:56:44 614,912 -c----w C:\WINDOWS\$NtServicePackUninstall$\h323msp.dll
+ 2004-08-03 18:59:08 81,280 -c----w C:\WINDOWS\$NtServicePackUninstall$\hal.dll
+ 2004-08-03 20:56:44 7,168 -c----w C:\WINDOWS\$NtServicePackUninstall$\hccoin.dll
+ 2001-08-23 10:00:00 14,848 -c----w C:\WINDOWS\$NtServicePackUninstall$\help.exe
+ 2004-08-03 22:56:50 768,512 -c----w C:\WINDOWS\$NtServicePackUninstall$\helpctr.exe
+ 2004-08-03 22:56:52 743,936 -c----w C:\WINDOWS\$NtServicePackUninstall$\helpsvc.exe
+ 2004-08-03 20:56:52 10,752 -c----w C:\WINDOWS\$NtServicePackUninstall$\hh.exe
+ 2004-08-03 20:56:44 38,912 -c----w C:\WINDOWS\$NtServicePackUninstall$\hhsetup.dll
+ 2004-08-03 21:05:44 20,992 -c----w C:\WINDOWS\$NtServicePackUninstall$\hid.dll
+ 2004-08-03 19:08:20 36,224 -c----w C:\WINDOWS\$NtServicePackUninstall$\hidclass.sys
+ 2004-08-03 19:08:18 24,960 -c----w C:\WINDOWS\$NtServicePackUninstall$\hidparse.sys
+ 2001-08-23 10:00:00 9,600 -c----w C:\WINDOWS\$NtServicePackUninstall$\hidusb.sys
+ 2001-08-23 10:00:00 77,850 -c----w C:\WINDOWS\$NtServicePackUninstall$\hlink.dll
+ 2004-08-03 22:56:44 38,912 -c----w C:\WINDOWS\$NtServicePackUninstall$\hmmapi.dll
+ 2004-08-03 20:56:44 344,064 -c----w C:\WINDOWS\$NtServicePackUninstall$\hnetcfg.dll
+ 2004-08-03 20:56:44 330,752 -c----w C:\WINDOWS\$NtServicePackUninstall$\hnetwiz.dll
+ 2004-08-03 22:56:44 39,936 -c----w C:\WINDOWS\$NtServicePackUninstall$\hostmib.dll
+ 2004-08-03 20:56:44 144,896 -c----w C:\WINDOWS\$NtServicePackUninstall$\hotplug.dll
+ 2004-08-03 22:56:44 87,552 -c----w C:\WINDOWS\$NtServicePackUninstall$\hpfud50.dll
+ 2004-08-03 22:56:52 18,944 -c----w C:\WINDOWS\$NtServicePackUninstall$\hscupd.exe
+ 2004-08-03 19:00:14 263,040 -c----w C:\WINDOWS\$NtServicePackUninstall$\http.sys
+ 2004-08-03 20:56:44 24,576 -c----w C:\WINDOWS\$NtServicePackUninstall$\httpapi.dll
+ 2004-08-03 22:56:44 268,288 -c----w C:\WINDOWS\$NtServicePackUninstall$\httpext.dll
+ 2004-08-03 22:56:44 8,192 -c----w C:\WINDOWS\$NtServicePackUninstall$\httpmb51.dll
+ 2004-08-03 22:56:44 8,192 -c----w C:\WINDOWS\$NtServicePackUninstall$\httpmib.dll
+ 2004-08-03 22:56:44 61,440 -c----w C:\WINDOWS\$NtServicePackUninstall$\httpod51.dll
+ 2004-08-03 22:56:44 61,440 -c----w C:\WINDOWS\$NtServicePackUninstall$\httpodbc.dll
+ 2004-08-03 20:56:44 41,984 -c----w C:\WINDOWS\$NtServicePackUninstall$\htui.dll
+ 2001-08-23 12:00:00 13,463,552 -c----w C:\WINDOWS\$NtServicePackUninstall$\hwxjpn.dll
+ 2004-08-03 22:56:44 345,088 -c----w C:\WINDOWS\$NtServicePackUninstall$\hypertrm.dll
+ 2004-08-03 19:14:38 52,736 -c----w C:\WINDOWS\$NtServicePackUninstall$\i8042prt.sys
+ 2004-08-03 20:56:44 119,808 -c----w C:\WINDOWS\$NtServicePackUninstall$\iasrad.dll
+ 2004-08-03 22:56:44 11,264 -c----w C:\WINDOWS\$NtServicePackUninstall$\icaapi.dll
+ 2004-08-03 20:56:44 80,384 -c----w C:\WINDOWS\$NtServicePackUninstall$\iccvid.dll
+ 2004-08-03 20:56:44 253,952 -c----w C:\WINDOWS\$NtServicePackUninstall$\icm32.dll
+ 2004-08-03 20:56:08 3,584 -c----w C:\WINDOWS\$NtServicePackUninstall$\icmp.dll
+ 2004-08-03 20:56:44 4,096 -c----w C:\WINDOWS\$NtServicePackUninstall$\iconlib.dll
+ 2004-08-03 22:56:44 61,440 -c----w C:\WINDOWS\$NtServicePackUninstall$\icwconn.dll
+ 2004-08-03 22:56:52 214,528 -c----w C:\WINDOWS\$NtServicePackUninstall$\icwconn1.exe
+ 2004-08-03 22:56:52 86,016 -c----w C:\WINDOWS\$NtServicePackUninstall$\icwconn2.exe
+ 2004-08-03 22:56:44 73,728 -c----w C:\WINDOWS\$NtServicePackUninstall$\icwdial.dll
+ 2004-08-03 22:56:44 32,768 -c----w C:\WINDOWS\$NtServicePackUninstall$\icwdl.dll
+ 2004-08-03 22:56:44 172,032 -c----w C:\WINDOWS\$NtServicePackUninstall$\icwhelp.dll
+ 2004-08-03 22:56:44 65,536 -c----w C:\WINDOWS\$NtServicePackUninstall$\icwphbk.dll
+ 2004-08-03 22:56:52 24,576 -c----w C:\WINDOWS\$NtServicePackUninstall$\icwrmind.exe
+ 2004-08-03 22:56:44 49,152 -c----w C:\WINDOWS\$NtServicePackUninstall$\icwutil.dll
+ 2004-08-03 20:56:44 120,832 -c----w C:\WINDOWS\$NtServicePackUninstall$\idq.dll
+ 2004-08-03 20:56:52 34,304 -c----w C:\WINDOWS\$NtServicePackUninstall$\ie4uinit.exe
+ 2004-08-03 20:56:44 139,264 -c----w C:\WINDOWS\$NtServicePackUninstall$\ieakeng.dll
+ 2004-08-03 20:56:44 216,576 -c----w C:\WINDOWS\$NtServicePackUninstall$\ieaksie.dll
+ 2004-08-03 20:56:44 323,584 -c----w C:\WINDOWS\$NtServicePackUninstall$\iedkcs32.dll
+ 2004-08-03 22:56:52 18,432 -c----w C:\WINDOWS\$NtServicePackUninstall$\iedw.exe
+ 2004-08-03 20:56:44 81,920 -c----w C:\WINDOWS\$NtServicePackUninstall$\ieencode.dll
+ 2004-08-03 20:56:44 249,344 -c----w C:\WINDOWS\$NtServicePackUninstall$\iepeers.dll
+ 2004-08-03 20:56:44 48,640 -c----w C:\WINDOWS\$NtServicePackUninstall$\iernonce.dll
+ 2004-08-03 20:56:44 62,976 -c----w C:\WINDOWS\$NtServicePackUninstall$\iesetup.dll
+ 2004-08-03 22:56:52 93,184 -c----w C:\WINDOWS\$NtServicePackUninstall$\iexplore.exe
+ 2004-08-03 20:56:52 114,688 -c----w C:\WINDOWS\$NtServicePackUninstall$\iexpress.exe
+ 2004-08-03 20:56:44 135,680 -c----w C:\WINDOWS\$NtServicePackUninstall$\ifmon.dll
+ 2004-08-03 20:56:44 8,192 -c----w C:\WINDOWS\$NtServicePackUninstall$\igmpagnt.dll
+ 2004-08-03 20:56:44 505,344 -c----w C:\WINDOWS\$NtServicePackUninstall$\iis.dll
+ 2004-08-03 22:56:44 25,088 -c----w C:\WINDOWS\$NtServicePackUninstall$\iisadmin.dll
+ 2004-08-03 22:56:44 145,408 -c----w C:\WINDOWS\$NtServicePackUninstall$\iische51.dll
+ 2004-08-03 22:56:44 145,408 -c----w C:\WINDOWS\$NtServicePackUninstall$\iischema.dll
+ 2004-08-03 22:56:44 68,608 -c----w C:\WINDOWS\$NtServicePackUninstall$\iisext.dll
+ 2004-08-03 22:56:44 68,608 -c----w C:\WINDOWS\$NtServicePackUninstall$\iisext51.dll
+ 2004-08-03 22:56:44 7,168 -c----w C:\WINDOWS\$NtServicePackUninstall$\iisfecnv.dll
+ 2004-08-03 22:56:44 79,872 -c----w C:\WINDOWS\$NtServicePackUninstall$\iislog.dll
+ 2004-08-03 22:56:44 79,872 -c----w C:\WINDOWS\$NtServicePackUninstall$\iislog51.dll
+ 2004-08-03 22:56:44 64,512 -c----w C:\WINDOWS\$NtServicePackUninstall$\iismap.dll
+ 2004-08-03 22:56:52 30,720 -c----w C:\WINDOWS\$NtServicePackUninstall$\iisrstas.exe
+ 2004-08-03 22:56:44 133,632 -c----w C:\WINDOWS\$NtServicePackUninstall$\iisrtl.dll
+ 2004-08-03 22:56:44 81,920 -c----w C:\WINDOWS\$NtServicePackUninstall$\ils.dll
+ 2004-08-03 20:56:44 144,384 -c----w C:\WINDOWS\$NtServicePackUninstall$\imagehlp.dll
+ 2004-08-03 20:56:52 150,016 -c----w C:\WINDOWS\$NtServicePackUninstall$\imapi.exe
+ 2004-08-03 19:00:16 41,856 -c----w C:\WINDOWS\$NtServicePackUninstall$\imapi.sys
+ 2004-08-03 21:04:38 106,496 -c----w C:\WINDOWS\$NtServicePackUninstall$\imekrcic.dll
+ 2004-08-03 21:04:34 86,016 -c----w C:\WINDOWS\$NtServicePackUninstall$\imekrmbx.dll
+ 2004-08-03 20:56:44 36,921 -c----w C:\WINDOWS\$NtServicePackUninstall$\imeshare.dll
+ 2004-08-03 20:56:44 35,840 -c----w C:\WINDOWS\$NtServicePackUninstall$\imgutil.dll
+ 2004-08-03 20:31:50 811,064 -c----w C:\WINDOWS\$NtServicePackUninstall$\imjp81k.dll
+ 2004-08-03 20:31:52 368,696 -c----w C:\WINDOWS\$NtServicePackUninstall$\imjpcic.dll
+ 2004-08-03 20:31:52 716,856 -c----w C:\WINDOWS\$NtServicePackUninstall$\imjpcus.dll
+ 2004-08-03 20:31:54 81,976 -c----w C:\WINDOWS\$NtServicePackUninstall$\imjpdct.dll
+ 2004-08-03 20:32:16 274,489 -c----w C:\WINDOWS\$NtServicePackUninstall$\imjputyc.dll
+ 2004-08-03 20:32:28 102,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\imlang.dll
+ 2004-08-03 20:56:44 110,080 -c----w C:\WINDOWS\$NtServicePackUninstall$\imm32.dll
+ 2001-08-23 10:00:00 115,712 -c----w C:\WINDOWS\$NtServicePackUninstall$\imsinsnt.dll
+ 2001-08-23 12:00:00 315,452 -c----w C:\WINDOWS\$NtServicePackUninstall$\imskf.dll
+ 2004-08-03 22:56:44 274,432 -c----w C:\WINDOWS\$NtServicePackUninstall$\inetcfg.dll
+ 2004-08-03 22:56:44 678,400 -c----w C:\WINDOWS\$NtServicePackUninstall$\inetcomm.dll
+ 2004-08-03 22:56:52 15,872 -c----w C:\WINDOWS\$NtServicePackUninstall$\inetin51.exe
+ 2004-08-03 22:56:52 15,872 -c----w C:\WINDOWS\$NtServicePackUninstall$\inetinfo.exe
+ 2004-08-03 22:56:44 829,440 -c----w C:\WINDOWS\$NtServicePackUninstall$\inetmgr.dll
+ 2004-08-03 20:56:44 33,280 -c----w C:\WINDOWS\$NtServicePackUninstall$\inetmib1.dll
+ 2004-08-03 20:56:44 75,264 -c----w C:\WINDOWS\$NtServicePackUninstall$\inetpp.dll
+ 2004-08-03 20:56:44 15,872 -c----w C:\WINDOWS\$NtServicePackUninstall$\inetppui.dll
+ 2004-08-03 22:56:10 48,128 -c----w C:\WINDOWS\$NtServicePackUninstall$\inetres.dll
+ 2004-08-03 22:56:52 20,480 -c----w C:\WINDOWS\$NtServicePackUninstall$\inetwiz.exe
+ 2004-08-03 22:56:44 13,312 -c----w C:\WINDOWS\$NtServicePackUninstall$\infoadmn.dll
+ 2004-08-03 22:56:44 257,024 -c----w C:\WINDOWS\$NtServicePackUninstall$\infocomm.dll
+ 2004-08-03 20:56:44 147,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\initpki.dll
+ 2004-08-03 20:56:44 123,392 -c----w C:\WINDOWS\$NtServicePackUninstall$\input.dll
+ 2004-08-03 20:56:44 96,256 -c----w C:\WINDOWS\$NtServicePackUninstall$\inseng.dll
+ 2004-08-03 18:59:42 5,504 -c----w C:\WINDOWS\$NtServicePackUninstall$\intelide.sys
+ 2004-08-03 18:59:20 36,096 -c----w C:\WINDOWS\$NtServicePackUninstall$\intelppm.sys
+ 2004-08-03 19:00:08 29,056 -c----w C:\WINDOWS\$NtServicePackUninstall$\ip6fw.sys
+ 2004-08-03 20:56:52 55,808 -c----w C:\WINDOWS\$NtServicePackUninstall$\ipconfig.exe
+ 2004-08-03 20:56:44 94,720 -c----w C:\WINDOWS\$NtServicePackUninstall$\iphlpapi.dll
+ 2004-08-03 19:04:46 20,992 -c----w C:\WINDOWS\$NtServicePackUninstall$\ipinip.sys
+ 2001-08-23 10:00:00 154,112 -c----w C:\WINDOWS\$NtServicePackUninstall$\ipmontr.dll
+ 2004-08-03 19:04:52 134,912 -c----w C:\WINDOWS\$NtServicePackUninstall$\ipnat.sys
+ 2004-08-03 20:56:44 331,264 -c----w C:\WINDOWS\$NtServicePackUninstall$\ipnathlp.dll
+ 2004-08-03 20:56:44 330,752 -c----w C:\WINDOWS\$NtServicePackUninstall$\ippromon.dll
+ 2004-08-03 20:56:44 35,328 -c----w C:\WINDOWS\$NtServicePackUninstall$\iprip.dll
+ 2001-08-23 10:00:00 169,984 -c----w C:\WINDOWS\$NtServicePackUninstall$\iprtrmgr.dll
+ 2004-08-03 19:14:30 74,752 -c----w C:\WINDOWS\$NtServicePackUninstall$\ipsec.sys
+ 2004-08-03 20:56:44 349,696 -c----w C:\WINDOWS\$NtServicePackUninstall$\ipsecsnp.dll
+ 2004-08-03 20:56:44 182,784 -c----w C:\WINDOWS\$NtServicePackUninstall$\ipsecsvc.dll
+ 2004-08-03 20:56:44 384,000 -c----w C:\WINDOWS\$NtServicePackUninstall$\ipsmsnap.dll
+ 2004-08-03 20:56:52 53,248 -c----w C:\WINDOWS\$NtServicePackUninstall$\ipv6.exe
+ 2004-08-03 20:56:44 59,904 -c----w C:\WINDOWS\$NtServicePackUninstall$\ipv6mon.dll
+ 2004-08-03 20:56:52 23,552 -c----w C:\WINDOWS\$NtServicePackUninstall$\ipxroute.exe
+ 2001-08-23 10:00:00 20,992 -c----w C:\WINDOWS\$NtServicePackUninstall$\ipxwan.dll
+ 2004-08-03 20:56:44 120,320 -c----w C:\WINDOWS\$NtServicePackUninstall$\ir41_qc.dll
+ 2004-08-03 20:56:44 338,432 -c----w C:\WINDOWS\$NtServicePackUninstall$\ir41_qcx.dll
+ 2004-08-03 20:56:44 755,200 -c----w C:\WINDOWS\$NtServicePackUninstall$\ir50_32.dll
+ 2004-08-03 20:56:44 200,192 -c----w C:\WINDOWS\$NtServicePackUninstall$\ir50_qc.dll
+ 2004-08-03 20:56:44 183,808 -c----w C:\WINDOWS\$NtServicePackUninstall$\ir50_qcx.dll
+ 2004-08-03 21:00:54 87,424 -c----w C:\WINDOWS\$NtServicePackUninstall$\irda.sys
+ 2004-08-03 21:00:48 11,264 -c----w C:\WINDOWS\$NtServicePackUninstall$\irenum.sys
+ 2004-08-03 22:56:52 152,576 -c----w C:\WINDOWS\$NtServicePackUninstall$\irftp.exe
+ 2004-08-03 22:56:44 27,136 -c----w C:\WINDOWS\$NtServicePackUninstall$\irmon.dll
+ 2001-08-23 10:00:00 35,840 -c----w C:\WINDOWS\$NtServicePackUninstall$\isapnp.sys
+ 2004-08-03 22:56:44 68,608 -c----w C:\WINDOWS\$NtServicePackUninstall$\isatq.dll
+ 2004-08-03 22:56:44 26,624 -c----w C:\WINDOWS\$NtServicePackUninstall$\iscomlog.dll
+ 2004-08-03 22:56:44 81,920 -c----w C:\WINDOWS\$NtServicePackUninstall$\isign32.dll
+ 2004-08-03 22:56:44 32,768 -c----w C:\WINDOWS\$NtServicePackUninstall$\isrdbg32.dll
+ 2004-08-03 20:56:44 143,872 -c----w C:\WINDOWS\$NtServicePackUninstall$\itircl.dll
+ 2004-08-03 20:56:44 134,144 -c----w C:\WINDOWS\$NtServicePackUninstall$\itss.dll
+ 2004-08-03 20:56:44 192,000 -c----w C:\WINDOWS\$NtServicePackUninstall$\iuengine.dll
+ 2004-08-03 20:56:44 54,272 -c----w C:\WINDOWS\$NtServicePackUninstall$\ixsso.dll
+ 2004-08-03 21:05:44 47,616 -c----w C:\WINDOWS\$NtServicePackUninstall$\iyuv_32.dll
+ 2001-08-23 10:00:00 144,896 -c----w C:\WINDOWS\$NtServicePackUninstall$\jgdw400.dll
+ 2001-08-23 10:00:00 42,496 -c----w C:\WINDOWS\$NtServicePackUninstall$\jgpl400.dll
+ 2004-08-03 20:56:44 450,560 -c----w C:\WINDOWS\$NtServicePackUninstall$\jscript.dll
+ 2004-08-03 20:56:44 15,872 -c----w C:\WINDOWS\$NtServicePackUninstall$\jsproxy.dll
+ 2001-08-23 12:00:00 6,144 -c----w C:\WINDOWS\$NtServicePackUninstall$\kbd101.dll
+ 2001-08-23 10:00:00 6,144 -c----w C:\WINDOWS\$NtServicePackUninstall$\kbd106.dll
+ 2001-08-23 12:00:00 6,144 -c----w C:\WINDOWS\$NtServicePackUninstall$\kbd106n.dll
+ 2001-08-23 12:00:00 6,144 -c----w C:\WINDOWS\$NtServicePackUninstall$\kbdax2.dll
+ 2004-08-03 18:58:34 24,576 -c----w C:\WINDOWS\$NtServicePackUninstall$\kbdclass.sys
+ 2004-08-03 20:56:12 7,168 -c----w C:\WINDOWS\$NtServicePackUninstall$\kbdfi1.dll
+ 2001-08-23 12:00:00 7,168 -c----w C:\WINDOWS\$NtServicePackUninstall$\kbdibm02.dll
+ 2004-08-03 20:56:12 6,144 -c----w C:\WINDOWS\$NtServicePackUninstall$\kbdinbe1.dll
+ 2004-08-03 20:56:12 6,656 -c----w C:\WINDOWS\$NtServicePackUninstall$\kbdinben.dll
+ 2004-08-03 20:56:12 6,656 -c----w C:\WINDOWS\$NtServicePackUninstall$\kbdinmal.dll
+ 2001-08-23 12:00:00 6,656 -c----w C:\WINDOWS\$NtServicePackUninstall$\kbdlk41a.dll
+ 2001-08-23 12:00:00 6,144 -c----w C:\WINDOWS\$NtServicePackUninstall$\kbdlk41j.dll
+ 2004-08-03 20:56:12 5,632 -c----w C:\WINDOWS\$NtServicePackUninstall$\kbdmaori.dll
+ 2004-08-03 20:56:12 6,144 -c----w C:\WINDOWS\$NtServicePackUninstall$\kbdmlt47.dll
+ 2004-08-03 20:56:12 6,144 -c----w C:\WINDOWS\$NtServicePackUninstall$\kbdmlt48.dll
+ 2001-08-23 10:00:00 7,168 -c----w C:\WINDOWS\$NtServicePackUninstall$\kbdnec.dll
+ 2004-08-03 20:56:12 7,168 -c----w C:\WINDOWS\$NtServicePackUninstall$\kbdno1.dll
+ 2004-08-03 20:56:12 7,680 -c----w C:\WINDOWS\$NtServicePackUninstall$\kbdsmsfi.dll
+ 2004-08-03 20:56:12 7,680 -c----w C:\WINDOWS\$NtServicePackUninstall$\kbdsmsno.dll
+ 2004-08-03 20:56:12 7,168 -c----w C:\WINDOWS\$NtServicePackUninstall$\kbdukx.dll
+ 2004-08-03 18:59:24 7,424 -c----w C:\WINDOWS\$NtServicePackUninstall$\kd1394.dll
+ 2004-08-03 20:56:44 294,400 -c----w C:\WINDOWS\$NtServicePackUninstall$\kerberos.dll
+ 2004-08-03 20:56:44 983,552 -c----w C:\WINDOWS\$NtServicePackUninstall$\kernel32.dll
+ 2004-08-03 20:56:44 150,528 -c----w C:\WINDOWS\$NtServicePackUninstall$\keymgr.dll
+ 2004-08-03 21:05:44 171,776 -c----w C:\WINDOWS\$NtServicePackUninstall$\kmixer.sys
+ 2004-08-03 22:56:44 24,576 -c----w C:\WINDOWS\$NtServicePackUninstall$\krnlprov.dll
+ 2004-08-03 21:05:44 140,928 -c----w C:\WINDOWS\$NtServicePackUninstall$\ks.sys
+ 2004-08-03 18:59:48 92,032 -c----w C:\WINDOWS\$NtServicePackUninstall$\ksecdd.sys
+ 2004-08-03 22:56:44 4,096 -c----w C:\WINDOWS\$NtServicePackUninstall$\ksuser.dll
+ 2008-03-25 20:11:08 2,678 -c----w C:\WINDOWS\$NtServicePackUninstall$\l7lj9vpj.dat
+ 2004-08-03 20:56:44 423,936 -c----w C:\WINDOWS\$NtServicePackUninstall$\licdll.dll
+ 2004-08-03 20:56:44 22,016 -c----w C:\WINDOWS\$NtServicePackUninstall$\licmgr10.dll
+ 2004-08-03 22:56:44 58,880 -c----w C:\WINDOWS\$NtServicePackUninstall$\licwmi.dll
+ 2004-08-03 20:56:44 18,944 -c----w C:\WINDOWS\$NtServicePackUninstall$\linkinfo.dll
+ 2004-08-03 20:56:44 13,824 -c----w C:\WINDOWS\$NtServicePackUninstall$\lmhsvc.dll
+ 2004-08-03 20:56:44 33,792 -c----w C:\WINDOWS\$NtServicePackUninstall$\lmmib2.dll
+ 2004-08-03 20:56:44 399,872 -c----w C:\WINDOWS\$NtServicePackUninstall$\lmrt.dll
+ 2004-08-03 20:56:44 97,280 -c----w C:\WINDOWS\$NtServicePackUninstall$\loadperf.dll
+ 2004-08-03 20:56:44 221,696 -c----w C:\WINDOWS\$NtServicePackUninstall$\localsec.dll
+ 2004-08-03 20:56:44 341,504 -c----w C:\WINDOWS\$NtServicePackUninstall$\localspl.dll
+ 2004-08-03 20:56:44 11,776 -c----w C:\WINDOWS\$NtServicePackUninstall$\localui.dll
+ 2004-08-03 20:56:52 75,264 -c----w C:\WINDOWS\$NtServicePackUninstall$\locator.exe
+ 2004-08-03 20:56:44 19,968 -c----w C:\WINDOWS\$NtServicePackUninstall$\log.dll
+ 2004-08-03 20:56:52 59,392 -c----w C:\WINDOWS\$NtServicePackUninstall$\logman.exe
+ 2004-08-03 20:56:58 220,672 -c----w C:\WINDOWS\$NtServicePackUninstall$\logon.scr
+ 2004-08-03 20:56:52 514,560 -c----w C:\WINDOWS\$NtServicePackUninstall$\logonui.exe
+ 2004-08-03 22:56:44 13,312 -c----w C:\WINDOWS\$NtServicePackUninstall$\lonsint.dll
+ 2004-08-03 20:56:44 22,528 -c----w C:\WINDOWS\$NtServicePackUninstall$\lpdsvc.dll
+ 2004-08-03 20:56:44 22,016 -c----w C:\WINDOWS\$NtServicePackUninstall$\lpk.dll
+ 2004-08-03 20:56:44 10,240 -c----w C:\WINDOWS\$NtServicePackUninstall$\lprhelp.dll
+ 2004-08-03 20:56:44 18,944 -c----w C:\WINDOWS\$NtServicePackUninstall$\lprmon.dll
+ 2004-08-03 20:56:44 721,920 -c----w C:\WINDOWS\$NtServicePackUninstall$\lsasrv.dll
+ 2004-08-03 20:56:52 13,312 -c----w C:\WINDOWS\$NtServicePackUninstall$\lsass.exe
+ 2004-08-03 20:56:52 72,704 -c----w C:\WINDOWS\$NtServicePackUninstall$\magnify.exe
+ 2004-08-03 20:56:52 85,504 -c----w C:\WINDOWS\$NtServicePackUninstall$\makecab.exe
+ 2004-08-03 20:56:44 14,848 -c----w C:\WINDOWS\$NtServicePackUninstall$\mcastmib.dll
+ 2004-08-03 20:56:44 84,480 -c----w C:\WINDOWS\$NtServicePackUninstall$\mciavi32.dll
+ 2004-08-03 20:56:44 35,328 -c----w C:\WINDOWS\$NtServicePackUninstall$\mciqtz32.dll
+ 2004-08-03 20:56:44 23,040 -c----w C:\WINDOWS\$NtServicePackUninstall$\mciseq.dll
+ 2004-08-03 20:56:44 23,552 -c----w C:\WINDOWS\$NtServicePackUninstall$\mciwave.dll
+ 2004-08-03 22:56:44 37,888 -c----w C:\WINDOWS\$NtServicePackUninstall$\md5filt.dll
+ 2004-08-03 20:56:44 118,272 -c----w C:\WINDOWS\$NtServicePackUninstall$\mdminst.dll
+ 2004-08-03 20:56:44 16,896 -c----w C:\WINDOWS\$NtServicePackUninstall$\medctroc.dll
+ 2004-08-03 22:56:44 85,504 -c----w C:\WINDOWS\$NtServicePackUninstall$\metada51.dll
+ 2004-08-03 22:56:44 85,504 -c----w C:\WINDOWS\$NtServicePackUninstall$\metadata.dll
+ 2004-08-03 21:05:44 63,744 -c----w C:\WINDOWS\$NtServicePackUninstall$\mf.sys
+ 2004-08-03 20:56:44 39,936 -c----w C:\WINDOWS\$NtServicePackUninstall$\mf3216.dll
+ 2001-08-23 10:00:00 924,432 -c----w C:\WINDOWS\$NtServicePackUninstall$\mfc40u.dll
+ 2004-08-03 20:56:44 1,028,096 -c----w C:\WINDOWS\$NtServicePackUninstall$\mfc42.dll
+ 2004-08-03 20:56:44 1,024,000 -c----w C:\WINDOWS\$NtServicePackUninstall$\mfc42u.dll
+ 2004-08-03 20:56:44 22,528 -c----w C:\WINDOWS\$NtServicePackUninstall$\mfcsubs.dll
+ 2004-08-03 20:56:44 14,848 -c----w C:\WINDOWS\$NtServicePackUninstall$\mgmtapi.dll
+ 2004-08-03 20:56:44 18,944 -c----w C:\WINDOWS\$NtServicePackUninstall$\midimap.dll
+ 2004-08-03 20:56:44 201,216 -c----w C:\WINDOWS\$NtServicePackUninstall$\migism.dll
+ 2004-08-03 20:56:44 60,928 -c----w C:\WINDOWS\$NtServicePackUninstall$\miglibnt.dll
+ 2004-08-03 20:56:52 103,424 -c----w C:\WINDOWS\$NtServicePackUninstall$\migload.exe
+ 2004-08-03 22:56:52 786,432 -c----w C:\WINDOWS\$NtServicePackUninstall$\migrate.exe
+ 2004-08-03 22:56:52 7,680 -c----w C:\WINDOWS\$NtServicePackUninstall$\migregdb.exe
+ 2004-08-03 20:56:52 240,128 -c----w C:\WINDOWS\$NtServicePackUninstall$\migwiz.exe
+ 2001-08-23 10:00:00 18,944 -c----w C:\WINDOWS\$NtServicePackUninstall$\mimefilt.dll
+ 2004-08-03 20:56:44 586,240 -c----w C:\WINDOWS\$NtServicePackUninstall$\mlang.dll
+ 2004-08-03 20:56:52 815,104 -c----w C:\WINDOWS\$NtServicePackUninstall$\mmc.exe
+ 2004-08-03 20:56:44 70,656 -c----w C:\WINDOWS\$NtServicePackUninstal

offline
  • Pridružio: 06 Maj 2008
  • Poruke: 90

Pogledaj te kako mi se sada namestilo.



offline
  • dr_Bora  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 24 Jul 2007
  • Poruke: 12280
  • Gde živiš: Höganäs, SE

Log nije kompletan, priloži ga uz poruku (C:\ComboFix.txt).

offline
  • Pridružio: 06 Maj 2008
  • Poruke: 90

Nisam te razumio jeli da ponovim skeniralje.

offline
  • dr_Bora  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 24 Jul 2007
  • Poruke: 12280
  • Gde živiš: Höganäs, SE

Samo prikači file uz poruku. Lokacija file-a je C:\ComboFix.txt.

offline
  • Pridružio: 06 Maj 2008
  • Poruke: 90

mycity.rs/must-login.png

Ko je trenutno na forumu
 

Ukupno su 986 korisnika na forumu :: 37 registrovanih, 8 sakrivenih i 941 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 3466 - dana 01 Jun 2021 17:07

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: A.R.Chafee.Jr., anta, ArchaBasha, bigfoot, bojan_t, Brana01, ccoogg123, cenejac111, dijica, djuradj, Džordžino, galerija, ivan1973, Jeremiah, Kubovac, kubura91, kybonacci, laurusri, Mcdado, mercedesamg, mile33, milos97, milutin134, mnn2, mocnijogurt, nenaddz, Parker, prle122, S2M, savaskytec, Shinobi, shone34, sol, wolverined4, zillbg, Zoca, 1107