jj.loved00 request

Sorry - I tried to cut inot 2 halves, since it was too big to post. 2nd attempt!

ComboFix 12-02-23.02 - Yule family 25/02/2012 23:12:02.7.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.44.1033.18.3006.2562 [GMT 0:00]
Running from: c:\documents and settings\Yule family\Desktop\ComboFix.exe
AV: McAfee Anti-Virus and Anti-Spyware *Disabled/Updated* {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
FW: McAfee Firewall *Disabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\Downloaded Installations\BMP
c:\windows\Downloaded Installations\BMP\{61C062D5-7A00-44BC-BC16-125BDF22EA65}\1033.MST
c:\windows\Downloaded Installations\BMP\{61C062D5-7A00-44BC-BC16-125BDF22EA65}\BACS.msi
c:\windows\system32\SET104.tmp
c:\windows\system32\SET145.tmp
c:\windows\system32\SETF8.tmp
c:\windows\system32\SETFC.tmp
.
.
((((((((((((((((((((((((( Files Created from 2012-01-25 to 2012-02-25 )))))))))))))))))))))))))))))))
.
.
2012-02-24 00:00 . 2012-02-24 00:00 73728 ----a-w- c:\windows\system32\javacpl.cpl
2012-02-21 22:37 . 2011-12-10 15:24 20464 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-02-21 00:25 . 2012-02-21 00:25 -------- d-----w- c:\documents and settings\Yule family\Application Data\SUPERAntiSpyware.com
2012-02-21 00:23 . 2012-02-21 00:25 -------- d-----w- c:\program files\SUPERAntiSpyware
2012-02-21 00:23 . 2012-02-21 00:23 -------- d-----w- c:\documents and settings\All Users.WINDOWS\Application Data\SUPERAntiSpyware.com
2012-02-16 12:04 . 2012-01-11 19:06 3072 -c----w- c:\windows\system32\dllcache\iacenc.dll
2012-02-16 12:04 . 2012-01-11 19:06 3072 ------w- c:\windows\system32\iacenc.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-02-24 00:00 . 2010-08-12 19:10 472808 ----a-w- c:\windows\system32\deployJava1.dll
2012-02-05 09:48 . 2011-06-06 18:05 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-01-12 16:53 . 2004-08-04 10:00 1859968 ----a-w- c:\windows\system32\win32k.sys
2011-12-17 19:46 . 2006-03-04 03:33 916992 ----a-w- c:\windows\system32\wininet.dll
2011-12-17 19:46 . 2004-08-04 10:00 43520 ----a-w- c:\windows\system32\licmgr10.dll
2011-12-17 19:46 . 2004-08-04 10:00 1469440 ----a-w- c:\windows\system32\inetcpl.cpl
2011-12-16 12:22 . 2004-08-04 10:00 385024 ----a-w- c:\windows\system32\html.iec
.
.
((((((((((((((((((((((((((((( SnapShot@2011-11-25_00.33.05 )))))))))))))))))))))))))))))))))))))))))
.
+ 2012-02-25 22:45 . 2012-02-25 22:45 16384 c:\windows\temp\Perflib_Perfdata_174.dat
+ 2011-08-05 19:26 . 2011-08-05 19:26 65024 c:\windows\system32\ZuneTcp2Udp.dll
+ 2011-08-05 19:26 . 2011-08-05 19:26 58368 c:\windows\system32\ZuneRegUtil.dll
+ 2011-08-05 19:26 . 2011-08-05 19:26 46080 c:\windows\system32\ZunePTDNS.dll
+ 2006-09-28 18:56 . 2009-07-13 18:16 64512 c:\windows\system32\WudfSvc.dll
+ 2006-09-28 20:13 . 2009-07-13 18:16 39936 c:\windows\system32\WUDFCoinstaller.dll
+ 2006-11-02 07:00 . 2006-11-02 07:00 24136 c:\windows\system32\winusb.dll
- 2010-01-20 18:53 . 2011-07-08 13:49 46080 c:\windows\system32\tzchange.exe
+ 2010-01-20 18:53 . 2011-11-08 13:46 46080 c:\windows\system32\tzchange.exe
- 2010-01-20 18:28 . 2009-01-07 18:21 26144 c:\windows\system32\spupdsvc.exe
+ 2010-01-20 18:28 . 2008-11-07 18:55 26144 c:\windows\system32\spupdsvc.exe
+ 2011-12-26 10:24 . 2008-11-07 18:55 16928 c:\windows\system32\spmsgXP_2k3.dll
+ 2010-02-18 11:26 . 2008-11-07 18:55 16928 c:\windows\system32\spmsg.dll
+ 2004-08-04 10:00 . 2012-02-17 00:35 67884 c:\windows\system32\perfc009.dat
+ 2004-08-04 10:00 . 2011-11-18 12:35 60416 c:\windows\system32\packager.exe
+ 2006-03-04 03:33 . 2011-12-17 19:46 66560 c:\windows\system32\mshtmled.dll
- 2006-03-04 03:33 . 2011-08-22 23:48 66560 c:\windows\system32\mshtmled.dll
- 2009-03-08 04:31 . 2011-08-22 23:48 55296 c:\windows\system32\msfeedsbs.dll
+ 2009-03-08 04:31 . 2011-12-17 19:46 55296 c:\windows\system32\msfeedsbs.dll
+ 2004-08-04 10:00 . 2011-10-14 14:47 23040 c:\windows\system32\mciseq.dll
- 2004-08-04 10:00 . 2008-04-14 00:11 23040 c:\windows\system32\mciseq.dll
+ 2004-08-04 10:00 . 2011-12-17 19:46 25600 c:\windows\system32\jsproxy.dll
- 2004-08-04 10:00 . 2011-08-22 23:48 25600 c:\windows\system32\jsproxy.dll
+ 2011-08-30 23:05 . 2011-08-30 23:05 50536 c:\windows\system32\jdns_sd.dll
+ 2011-12-28 17:40 . 2011-08-02 17:38 42496 c:\windows\system32\DRVSTORE\usbaapl_091115F4EDEB41DBA0EC91574CE905B4E0482482\usbaapl.sys
+ 2011-12-28 17:40 . 2011-08-02 17:38 18432 c:\windows\system32\DRVSTORE\netaapl_63AA05C4700EB9CAF2D048DAC1D06D764A0D4C41\netaapl.sys
+ 2011-12-28 17:45 . 2009-05-18 13:17 26600 c:\windows\system32\DRVSTORE\GEARAspiWD_3B7AACF0636A2C042EB7AD2AFF76D37B27BDD28C\x86\GEARAspiWDM.sys
+ 2011-08-05 12:12 . 2011-08-05 12:12 41472 c:\windows\system32\drivers\zumbus.sys
+ 2006-09-28 18:55 . 2009-07-13 16:50 91904 c:\windows\system32\drivers\WudfPf.sys
+ 2006-11-02 07:00 . 2006-11-02 07:00 39368 c:\windows\system32\drivers\winusb.sys
+ 2009-07-14 10:35 . 2009-07-14 10:35 37608 c:\windows\system32\drivers\wdfldr.sys
+ 2011-12-28 17:40 . 2011-08-02 17:38 42496 c:\windows\system32\drivers\usbaapl.sys
+ 2004-09-14 14:38 . 2009-05-18 13:17 26600 c:\windows\system32\drivers\GEARAspiWDM.sys
- 2004-08-04 10:00 . 2008-04-13 18:40 62976 c:\windows\system32\drivers\cdrom.sys
+ 2004-08-04 10:00 . 2008-05-02 10:49 62976 c:\windows\system32\drivers\cdrom.sys
+ 2011-08-30 23:05 . 2011-08-30 23:05 73064 c:\windows\system32\dnssd.dll
+ 2011-08-30 23:05 . 2011-08-30 23:05 83816 c:\windows\system32\dns-sd.exe
- 2010-01-20 23:18 . 2011-08-22 23:48 12800 c:\windows\system32\dllcache\xpshims.dll
+ 2010-01-20 23:18 . 2011-12-17 19:46 12800 c:\windows\system32\dllcache\xpshims.dll
+ 2011-11-18 12:35 . 2011-11-18 12:35 60416 c:\windows\system32\dllcache\packager.exe
+ 2006-03-04 03:33 . 2011-12-17 19:46 66560 c:\windows\system32\dllcache\mshtmled.dll
- 2006-03-04 03:33 . 2011-08-22 23:48 66560 c:\windows\system32\dllcache\mshtmled.dll
+ 2010-01-20 23:18 . 2011-12-17 19:46 55296 c:\windows\system32\dllcache\msfeedsbs.dll
- 2010-01-20 23:18 . 2011-08-22 23:48 55296 c:\windows\system32\dllcache\msfeedsbs.dll
+ 2011-10-14 14:47 . 2011-10-14 14:47 23040 c:\windows\system32\dllcache\mciseq.dll
+ 2004-08-04 10:00 . 2011-12-17 19:46 43520 c:\windows\system32\dllcache\licmgr10.dll
- 2004-08-04 10:00 . 2011-08-22 23:48 43520 c:\windows\system32\dllcache\licmgr10.dll
- 2004-08-04 10:00 . 2011-08-22 23:48 25600 c:\windows\system32\dllcache\jsproxy.dll
+ 2004-08-04 10:00 . 2011-12-17 19:46 25600 c:\windows\system32\dllcache\jsproxy.dll
+ 2004-08-04 10:00 . 2011-10-28 05:31 33280 c:\windows\system32\dllcache\csrsrv.dll
- 2004-08-04 10:00 . 2011-04-26 11:07 33280 c:\windows\system32\dllcache\csrsrv.dll
+ 2011-12-26 10:39 . 2008-05-02 10:49 62976 c:\windows\system32\dllcache\cdrom.sys
- 2004-08-04 10:00 . 2011-04-26 11:07 33280 c:\windows\system32\csrsrv.dll
+ 2004-08-04 10:00 . 2011-10-28 05:31 33280 c:\windows\system32\csrsrv.dll
+ 2010-08-16 17:28 . 2012-02-25 12:33 32768 c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
- 2010-08-16 17:28 . 2011-11-24 19:17 32768 c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
+ 2010-01-16 16:49 . 2012-02-25 12:33 32768 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
- 2010-01-16 16:49 . 2011-11-24 19:17 32768 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
- 2010-08-24 19:57 . 2011-11-24 19:17 32768 c:\windows\system32\config\systemprofile\Cookies\index.dat
+ 2011-11-25 08:21 . 2012-02-25 12:33 32768 c:\windows\system32\config\systemprofile\Cookies\index.dat
+ 2011-12-25 03:49 . 2011-12-25 03:49 31504 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
+ 2011-12-26 10:46 . 2011-12-26 10:46 29184 c:\windows\Installer\3a5fdb.msi
+ 2011-12-26 10:46 . 2011-12-26 10:46 29184 c:\windows\Installer\3a5fd5.msi
+ 2011-12-26 10:46 . 2011-12-26 10:46 29184 c:\windows\Installer\3a5fcf.msi
+ 2011-12-26 10:46 . 2011-12-26 10:46 29184 c:\windows\Installer\3a5fc9.msi
+ 2011-12-26 10:46 . 2011-12-26 10:46 29184 c:\windows\Installer\3a5fc3.msi
+ 2011-12-26 10:46 . 2011-12-26 10:46 29184 c:\windows\Installer\3a5fbd.msi
+ 2011-12-26 10:46 . 2011-12-26 10:46 29184 c:\windows\Installer\3a5fb7.msi
+ 2011-12-26 10:46 . 2011-12-26 10:46 29184 c:\windows\Installer\3a5fb1.msi
+ 2011-12-26 10:46 . 2011-12-26 10:46 29184 c:\windows\Installer\3a5fab.msi
+ 2011-12-26 10:46 . 2011-12-26 10:46 29184 c:\windows\Installer\3a5fa5.msi
+ 2011-12-26 10:46 . 2011-12-26 10:46 29184 c:\windows\Installer\3a5f9f.msi
+ 2011-12-26 10:46 . 2011-12-26 10:46 29184 c:\windows\Installer\3a5f99.msi
+ 2011-12-26 10:46 . 2011-12-26 10:46 29184 c:\windows\Installer\3a5f93.msi
+ 2011-12-26 10:46 . 2011-12-26 10:46 29184 c:\windows\Installer\3a5f8d.msi
+ 2011-12-26 10:46 . 2011-12-26 10:46 29184 c:\windows\Installer\3a5f87.msi
+ 2011-12-26 10:46 . 2011-12-26 10:46 29184 c:\windows\Installer\3a5f81.msi
+ 2011-12-26 10:46 . 2011-12-26 10:46 29184 c:\windows\Installer\3a5f7b.msi
+ 2011-12-26 10:46 . 2011-12-26 10:46 29184 c:\windows\Installer\3a5f75.msi
+ 2011-12-26 10:46 . 2011-12-26 10:46 29184 c:\windows\Installer\3a5f6f.msi
+ 2011-12-26 10:46 . 2011-12-26 10:46 29184 c:\windows\Installer\3a5f69.msi
+ 2011-12-26 10:46 . 2011-12-26 10:46 29184 c:\windows\Installer\3a5f63.msi
+ 2011-12-26 10:46 . 2011-12-26 10:46 29184 c:\windows\Installer\3a5f5d.msi
+ 2011-12-26 10:46 . 2011-12-26 10:46 74240 c:\windows\Installer\3a5f57.msi
+ 2012-02-04 12:36 . 2012-02-04 12:36 22016 c:\windows\Installer\343e68.msi
+ 2011-12-28 17:41 . 2011-12-28 17:41 27136 c:\windows\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}\AppleSoftwareUpdateIco.exe
+ 2012-02-17 00:29 . 2011-11-04 19:20 12800 c:\windows\ie8updates\KB2647516-IE8\xpshims.dll
+ 2012-02-17 00:29 . 2011-11-04 19:20 66560 c:\windows\ie8updates\KB2647516-IE8\mshtmled.dll
+ 2012-02-17 00:29 . 2011-11-04 19:20 55296 c:\windows\ie8updates\KB2647516-IE8\msfeedsbs.dll
+ 2012-02-17 00:29 . 2011-11-04 19:20 43520 c:\windows\ie8updates\KB2647516-IE8\licmgr10.dll
+ 2012-02-17 00:29 . 2011-11-04 19:20 25600 c:\windows\ie8updates\KB2647516-IE8\jsproxy.dll
+ 2011-12-14 09:13 . 2011-08-22 23:48 12800 c:\windows\ie8updates\KB2618444-IE8\xpshims.dll
+ 2011-12-14 09:13 . 2011-08-22 23:48 66560 c:\windows\ie8updates\KB2618444-IE8\mshtmled.dll
+ 2011-12-14 09:13 . 2011-08-22 23:48 55296 c:\windows\ie8updates\KB2618444-IE8\msfeedsbs.dll
+ 2011-12-14 09:13 . 2011-08-22 23:48 43520 c:\windows\ie8updates\KB2618444-IE8\licmgr10.dll
+ 2011-12-14 09:13 . 2011-08-22 23:48 25600 c:\windows\ie8updates\KB2618444-IE8\jsproxy.dll

+ 2011-12-26 10:39 . 2008-05-02 10:49 62976 c:\windows\Driver Cache\i386\cdrom.sys
+ 2012-02-17 00:43 . 2012-02-17 00:43 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\UIXControls\1949a02cd69091283fb28af70665147d\UIXControls.ni.dll
+ 2012-02-17 00:43 . 2012-02-17 00:43 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\dab766b18e6fe0a8f53a93c56be7b40e\System.Windows.Presentation.ni.dll
+ 2012-02-17 00:43 . 2012-02-17 00:43 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\31b65443e56a470d199f293085576e05\System.Web.DynamicData.Design.ni.dll
+ 2012-02-17 00:41 . 2012-02-17 00:41 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\89dfd3999ad1d72c59243d7b4bf40d5a\System.ComponentModel.DataAnnotations.ni.dll
+ 2012-02-17 00:36 . 2012-02-17 00:36 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\3aa4296d4aa01fe0533de2c15f818d5f\PresentationFontCache.ni.exe
+ 2012-02-17 00:35 . 2012-02-17 00:35 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\820acb71782d9cd006800b3ac7e1ca53\PresentationCFFRasterizer.ni.dll
+ 2012-02-17 00:40 . 2012-02-17 00:40 50176 c:\windows\assembly\NativeImages_v2.0.50727_32\PHOTOfunSTUDIO\a81282597cdc02d338ee9d42678776cd\PHOTOfunSTUDIO.ni.exe
+ 2012-02-17 00:39 . 2012-02-17 00:39 42496 c:\windows\assembly\NativeImages_v2.0.50727_32\Panasonic.Core.Spec#\8c4cc54ebe5bf3e9d48e4743e49e1357\Panasonic.Core.Spec.Plugin.Stream.ni.dll
+ 2012-02-17 00:40 . 2012-02-17 00:40 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\d07f0222f62dbed7898a6e2e909d407a\Microsoft.Vsa.ni.dll
+ 2012-02-17 00:40 . 2012-02-17 00:40 89600 c:\windows\assembly\NativeImages_v2.0.50727_32\CLicenseAgreementDlg\ff2c72e08bc6b5420a7af074ea930dfc\CLicenseAgreementDlg.ni.dll
- 2011-10-12 23:28 . 2011-10-12 23:28 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
- 2011-10-12 23:28 . 2011-10-12 23:28 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
- 2011-10-12 23:28 . 2011-10-12 23:28 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
- 2011-10-12 23:28 . 2011-10-12 23:28 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
- 2011-10-12 23:28 . 2011-10-12 23:28 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
- 2011-10-12 23:28 . 2011-10-12 23:28 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
- 2011-10-12 23:28 . 2011-10-12 23:28 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
- 2011-10-12 23:28 . 2011-10-12 23:28 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
- 2011-10-12 23:28 . 2011-10-12 23:28 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
- 2011-10-12 23:28 . 2011-10-12 23:28 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
- 2011-10-12 23:28 . 2011-10-12 23:28 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
- 2011-10-12 23:28 . 2011-10-12 23:28 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2011-10-12 23:28 . 2011-10-12 23:28 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2011-12-26 10:22 . 2006-09-28 18:56 55808 c:\windows\$NtUninstallWudf01009$\wudfsvc.dll
+ 2011-12-26 10:22 . 2006-09-28 19:00 82944 c:\windows\$NtUninstallWudf01009$\wudfrd.sys
+ 2011-12-26 10:22 . 2006-09-28 18:55 77568 c:\windows\$NtUninstallWudf01009$\wudfpf.sys
+ 2011-12-26 10:22 . 2006-09-28 20:13 95344 c:\windows\$NtUninstallWudf01009$\wudfcoinstaller.dll
+ 2011-12-26 10:22 . 2009-07-13 16:50 74752 c:\windows\$NtUninstallWudf01009$\spuninst\WudfCustom.dll
+ 2011-12-26 10:24 . 2009-07-13 16:49 47104 c:\windows\$NtUninstallWdf01009$\spuninst\KmdfCustom.dll
+ 2011-12-26 10:42 . 2008-04-13 18:40 62976 c:\windows\$NtUninstallKB932716-v2$\cdrom.sys
+ 2011-12-14 09:10 . 2011-07-08 13:49 46080 c:\windows\$NtUninstallKB2633952$\tzchange.exe
+ 2011-12-14 09:10 . 2011-11-08 14:58 16896 c:\windows\$NtUninstallKB2633952$\spuninst\tzchange.dll
+ 2011-12-14 09:10 . 2011-04-26 11:07 33280 c:\windows\$NtUninstallKB2620712$\csrsrv.dll
+ 2012-01-12 00:48 . 2008-04-14 00:11 23040 c:\windows\$NtUninstallKB2598479$\mciseq.dll
+ 2012-01-12 00:44 . 2008-04-14 00:12 58368 c:\windows\$NtUninstallKB2584146$\packager.exe
+ 2012-01-12 00:52 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2646524\update\spcustom.dll
+ 2012-01-12 00:52 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2646524\spmsg.dll
+ 2011-12-14 09:14 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2639417\update\spcustom.dll
+ 2011-12-14 09:14 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2639417\spmsg.dll
+ 2011-12-14 09:09 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2633171\update\spcustom.dll
+ 2011-12-14 07:44 . 2011-10-26 10:50 16896 c:\windows\$hf_mig$\KB2633171\update\mpsyschk.dll
+ 2011-12-14 09:09 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2633171\spmsg.dll
+ 2012-01-12 00:52 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2631813\update\spcustom.dll
+ 2012-01-12 00:52 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2631813\spmsg.dll
+ 2011-12-14 09:14 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2624667\update\spcustom.dll
+ 2011-12-14 09:14 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2624667\spmsg.dll
+ 2011-12-14 09:10 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2620712\update\spcustom.dll
+ 2011-12-14 09:10 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2620712\spmsg.dll
+ 2011-10-28 05:31 . 2011-10-28 05:31 33280 c:\windows\$hf_mig$\KB2620712\SP3QFE\csrsrv.dll
+ 2011-12-14 09:10 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2619339\update\spcustom.dll
+ 2011-12-14 09:10 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2619339\spmsg.dll
+ 2011-12-14 09:10 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2618451\update\spcustom.dll
+ 2011-12-14 09:10 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2618451\spmsg.dll
+ 2011-12-14 09:13 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2618444-IE8\update\spcustom.dll
+ 2011-12-14 09:13 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2618444-IE8\spmsg.dll
+ 2011-12-14 07:43 . 2011-11-04 19:19 12800 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\xpshims.dll
+ 2011-12-14 07:44 . 2011-11-04 19:19 66560 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\mshtmled.dll
+ 2011-12-14 07:44 . 2011-11-04 19:19 55296 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\msfeedsbs.dll
+ 2011-12-14 07:44 . 2011-11-04 19:19 43520 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\licmgr10.dll
+ 2011-12-14 07:44 . 2011-11-04 19:19 25600 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\jsproxy.dll
+ 2012-01-12 00:44 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2603381\update\spcustom.dll
+ 2012-01-12 00:44 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2603381\spmsg.dll
+ 2012-01-12 00:49 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2598479\update\spcustom.dll
+ 2012-01-12 00:49 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2598479\spmsg.dll
+ 2011-10-14 14:45 . 2011-10-14 14:45 23040 c:\windows\$hf_mig$\KB2598479\SP3QFE\mciseq.dll
+ 2012-01-15 00:02 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2585542\update\spcustom.dll
+ 2012-01-15 00:02 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2585542\spmsg.dll
+ 2012-01-12 00:44 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2584146\update\spcustom.dll
+ 2012-01-12 00:44 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2584146\spmsg.dll
+ 2011-11-18 12:41 . 2011-11-18 12:41 60416 c:\windows\$hf_mig$\KB2584146\SP3QFE\packager.exe
+ 2012-02-17 00:34 . 2012-02-17 00:34 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
- 2011-10-12 23:28 . 2011-10-12 23:28 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
- 2010-02-18 10:57 . 2011-11-09 22:57 3350 c:\windows\system32\KGyGaAvL.sys
+ 2010-02-18 10:57 . 2012-02-12 23:31 3350 c:\windows\system32\KGyGaAvL.sys
- 2011-10-12 23:28 . 2011-10-12 23:28 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2011-10-12 23:28 . 2011-10-12 23:28 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2011-10-12 23:28 . 2011-10-12 23:28 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
- 2011-10-12 23:28 . 2011-10-12 23:28 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2012-01-11 06:41 . 2011-11-03 18:17 4608 c:\windows\$hf_mig$\KB2603381\update\customaddreg.dll
- 2011-10-12 23:28 . 2011-10-12 23:28 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
- 2011-10-12 23:28 . 2011-10-12 23:28 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
+ 2011-05-14 01:17 . 2011-05-14 01:17 632656 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcr80.dll
+ 2011-05-14 01:12 . 2011-05-14 01:12 554832 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcp80.dll
+ 2011-05-14 01:11 . 2011-05-14 01:11 479232 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcm80.dll
+ 2011-08-05 19:26 . 2011-08-05 19:26 130560 c:\windows\system32\ZuneUsbTransport.dll
+ 2011-08-05 19:26 . 2011-08-05 19:26 365056 c:\windows\system32\ZuneNetProxy.dll
+ 2011-08-05 19:26 . 2011-08-05 19:26 203776 c:\windows\system32\ZuneMTPZ.dll
+ 2011-08-05 19:26 . 2011-08-05 19:26 332800 c:\windows\system32\ZuneCoInst.dll
+ 2006-09-28 18:56 . 2009-07-13 18:16 567808 c:\windows\system32\WUDFx.dll
+ 2006-09-28 18:56 . 2009-07-13 16:50 148480 c:\windows\system32\WudfPlatform.dll
+ 2006-09-28 18:56 . 2009-07-13 18:14 195584 c:\windows\system32\WudfHost.exe
+ 2011-06-06 20:48 . 2011-06-06 20:48 581192 c:\windows\system32\WinUSBCoInstaller.dll
+ 2004-08-04 10:00 . 2011-11-25 21:57 293376 c:\windows\system32\winsrv.dll
- 2004-08-04 10:00 . 2011-06-20 17:44 293376 c:\windows\system32\winsrv.dll
+ 2004-08-04 10:00 . 2011-10-14 14:47 176128 c:\windows\system32\winmm.dll
- 2004-08-04 10:00 . 2008-04-14 00:12 176128 c:\windows\system32\winmm.dll
+ 2004-08-04 10:00 . 2011-11-16 14:21 354816 c:\windows\system32\winhttp.dll
- 2004-08-04 10:00 . 2009-08-25 09:17 354816 c:\windows\system32\winhttp.dll
- 2004-08-04 10:00 . 2011-08-22 23:48 105984 c:\windows\system32\url.dll
+ 2004-08-04 10:00 . 2011-12-17 19:46 105984 c:\windows\system32\url.dll
+ 2004-08-04 10:00 . 2011-11-16 14:21 152064 c:\windows\system32\schannel.dll
+ 2004-08-04 10:00 . 2011-11-03 15:28 386048 c:\windows\system32\qdvd.dll
- 2004-08-04 10:00 . 2008-04-14 00:12 386048 c:\windows\system32\qdvd.dll
+ 2004-08-04 10:00 . 2012-02-17 00:35 432928 c:\windows\system32\perfh009.dat
- 2004-08-04 10:00 . 2011-08-22 23:48 206848 c:\windows\system32\occache.dll
+ 2004-08-04 10:00 . 2011-12-17 19:46 206848 c:\windows\system32\occache.dll
- 2006-03-04 03:33 . 2011-08-22 23:48 611840 c:\windows\system32\mstime.dll
+ 2006-03-04 03:33 . 2011-12-17 19:46 611840 c:\windows\system32\mstime.dll
+ 2009-03-08 04:32 . 2011-12-17 19:46 602112 c:\windows\system32\msfeeds.dll
- 2009-03-08 04:32 . 2011-08-22 23:48 602112 c:\windows\system32\msfeeds.dll
+ 2012-02-05 09:48 . 2012-02-05 09:48 247968 c:\windows\system32\Macromed\Flash\FlashUtil11e_ActiveX.exe
+ 2012-02-05 09:48 . 2012-02-05 09:48 335520 c:\windows\system32\Macromed\Flash\FlashUtil11e_ActiveX.dll
- 2011-10-19 20:25 . 2011-10-03 04:06 157472 c:\windows\system32\javaws.exe
+ 2012-02-24 00:00 . 2012-02-24 00:00 157472 c:\windows\system32\javaws.exe
+ 2012-02-24 00:00 . 2012-02-24 00:00 149280 c:\windows\system32\javaw.exe
+ 2012-02-24 00:00 . 2012-02-24 00:00 149280 c:\windows\system32\java.exe
+ 2011-12-26 10:39 . 2008-05-02 13:25 465920 c:\windows\system32\imapi2fs.dll
+ 2011-12-26 10:39 . 2008-05-02 13:25 317952 c:\windows\system32\imapi2.dll
+ 2006-03-04 03:33 . 2011-12-17 19:46 184320 c:\windows\system32\iepeers.dll
- 2006-03-04 03:33 . 2011-08-22 23:48 184320 c:\windows\system32\iepeers.dll
- 2004-08-04 10:00 . 2011-08-22 23:48 387584 c:\windows\system32\iedkcs32.dll
+ 2004-08-04 10:00 . 2011-12-17 19:46 387584 c:\windows\system32\iedkcs32.dll
- 2004-08-04 10:00 . 2011-08-22 11:56 174080 c:\windows\system32\ie4uinit.exe
+ 2004-08-04 10:00 . 2011-12-16 12:23 174080 c:\windows\system32\ie4uinit.exe
+ 2004-09-14 14:38 . 2008-04-17 12:12 107368 c:\windows\system32\GEARAspi.dll
+ 2010-01-16 16:29 . 2012-02-17 03:15 289296 c:\windows\system32\FNTCACHE.DAT
- 2004-08-04 10:00 . 2011-02-09 13:53 186880 c:\windows\system32\encdec.dll
+ 2004-08-04 10:00 . 2011-10-18 11:13 186880 c:\windows\system32\encdec.dll
+ 2011-12-28 17:45 . 2008-04-17 12:12 107368 c:\windows\system32\DRVSTORE\GEARAspiWD_3B7AACF0636A2C042EB7AD2AFF76D37B27BDD28C\x86\GEARAspi.dll
+ 2006-09-28 19:00 . 2009-07-13 16:50 132224 c:\windows\system32\drivers\WudfRd.sys
+ 2009-07-14 10:35 . 2009-07-14 10:35 444136 c:\windows\system32\drivers\wdf01000.sys
+ 2011-08-05 19:26 . 2011-08-05 19:26 796672 c:\windows\system32\drivers\UMDF\ZuneDriver.dll
+ 2011-08-30 23:05 . 2011-08-30 23:05 178536 c:\windows\system32\dnssdX.dll
- 2004-08-04 10:00 . 2011-06-20 17:44 293376 c:\windows\system32\dllcache\winsrv.dll
+ 2004-08-04 10:00 . 2011-11-25 21:57 293376 c:\windows\system32\dllcache\winsrv.dll
- 2004-08-04 10:00 . 2008-04-14 00:12 176128 c:\windows\system32\dllcache\winmm.dll
+ 2004-08-04 10:00 . 2011-10-14 14:47 176128 c:\windows\system32\dllcache\winmm.dll
+ 2006-03-04 03:33 . 2011-12-17 19:46 916992 c:\windows\system32\dllcache\wininet.dll
- 2004-08-04 10:00 . 2009-08-25 09:17 354816 c:\windows\system32\dllcache\winhttp.dll
+ 2004-08-04 10:00 . 2011-11-16 14:21 354816 c:\windows\system32\dllcache\winhttp.dll
+ 2004-08-04 10:00 . 2011-12-17 19:46 105984 c:\windows\system32\dllcache\url.dll
- 2004-08-04 10:00 . 2011-08-22 23:48 105984 c:\windows\system32\dllcache\url.dll
+ 2004-08-04 10:00 . 2011-11-16 14:21 152064 c:\windows\system32\dllcache\schannel.dll
+ 2011-11-03 15:28 . 2011-11-03 15:28 386048 c:\windows\system32\dllcache\qdvd.dll
- 2004-08-04 10:00 . 2011-08-22 23:48 206848 c:\windows\system32\dllcache\occache.dll
+ 2004-08-04 10:00 . 2011-12-17 19:46 206848 c:\windows\system32\dllcache\occache.dll
+ 2006-03-04 03:33 . 2011-12-17 19:46 611840 c:\windows\system32\dllcache\mstime.dll
- 2006-03-04 03:33 . 2011-08-22 23:48 611840 c:\windows\system32\dllcache\mstime.dll
- 2010-01-20 23:18 . 2011-08-22 23:48 602112 c:\windows\system32\dllcache\msfeeds.dll
+ 2010-01-20 23:18 . 2011-12-17 19:46 602112 c:\windows\system32\dllcache\msfeeds.dll
+ 2011-12-26 10:39 . 2008-05-02 13:25 465920 c:\windows\system32\dllcache\imapi2fs.dll
+ 2011-12-26 10:39 . 2008-05-02 13:25 317952 c:\windows\system32\dllcache\imapi2.dll
- 2010-01-20 23:18 . 2011-08-22 23:48 247808 c:\windows\system32\dllcache\ieproxy.dll
+ 2010-01-20 23:18 . 2011-12-17 19:46 247808 c:\windows\system32\dllcache\ieproxy.dll
+ 2006-03-04 03:33 . 2011-12-17 19:46 184320 c:\windows\system32\dllcache\iepeers.dll
- 2006-03-04 03:33 . 2011-08-22 23:48 184320 c:\windows\system32\dllcache\iepeers.dll
- 2010-06-12 11:11 . 2011-08-22 23:48 743424 c:\windows\system32\dllcache\iedvtool.dll
+ 2010-06-12 11:11 . 2011-12-17 19:46 743424 c:\windows\system32\dllcache\iedvtool.dll
+ 2004-08-04 10:00 . 2011-12-17 19:46 387584 c:\windows\system32\dllcache\iedkcs32.dll
- 2004-08-04 10:00 . 2011-08-22 23:48 387584 c:\windows\system32\dllcache\iedkcs32.dll
+ 2004-08-04 10:00 . 2011-12-16 12:23 174080 c:\windows\system32\dllcache\ie4uinit.exe
- 2004-08-04 10:00 . 2011-08-22 11:56 174080 c:\windows\system32\dllcache\ie4uinit.exe
- 2004-08-04 10:00 . 2011-02-09 13:53 186880 c:\windows\system32\dllcache\encdec.dll
+ 2004-08-04 10:00 . 2011-10-18 11:13 186880 c:\windows\system32\dllcache\encdec.dll
+ 2010-08-15 10:08 . 2012-02-17 09:23 262144 c:\windows\system32\config\systemprofile\IETldCache\index.dat
- 2010-08-15 10:08 . 2011-04-17 10:39 262144 c:\windows\system32\config\systemprofile\IETldCache\index.dat

+ 2011-12-25 03:49 . 2011-12-25 03:49 436496 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
+ 2011-12-25 05:40 . 2011-12-25 05:40 819200 c:\windows\Installer\94a13.msp
+ 2011-12-26 10:44 . 2011-12-26 10:44 751616 c:\windows\Installer\3a5f51.msi
+ 2012-02-24 00:02 . 2012-02-24 00:02 203776 c:\windows\Installer\28c75ed.msi
+ 2012-02-24 00:00 . 2012-02-24 00:00 901120 c:\windows\Installer\28c75dd.msi
+ 2011-12-28 17:46 . 2011-12-28 17:46 380928 c:\windows\Installer\{B7DBF6E8-0D17-4BE4-853B-ACD6EFBD4A1F}\iTunesIco.exe
+ 2012-02-17 00:29 . 2011-11-04 19:20 916992 c:\windows\ie8updates\KB2647516-IE8\wininet.dll
+ 2012-02-17 00:29 . 2011-11-04 19:20 105984 c:\windows\ie8updates\KB2647516-IE8\url.dll
+ 2012-02-17 00:29 . 2010-07-05 13:16 382840 c:\windows\ie8updates\KB2647516-IE8\spuninst\updspapi.dll
+ 2012-02-17 00:29 . 2010-07-05 13:15 231288 c:\windows\ie8updates\KB2647516-IE8\spuninst\spuninst.exe
+ 2012-02-17 00:29 . 2011-11-04 19:20 206848 c:\windows\ie8updates\KB2647516-IE8\occache.dll
+ 2012-02-17 00:29 . 2011-11-04 19:20 611840 c:\windows\ie8updates\KB2647516-IE8\mstime.dll
+ 2012-02-17 00:29 . 2011-11-04 19:20 602112 c:\windows\ie8updates\KB2647516-IE8\msfeeds.dll
+ 2012-02-17 00:29 . 2011-11-04 19:20 247808 c:\windows\ie8updates\KB2647516-IE8\ieproxy.dll
+ 2012-02-17 00:29 . 2011-11-04 19:20 184320 c:\windows\ie8updates\KB2647516-IE8\iepeers.dll
+ 2012-02-17 00:29 . 2011-11-04 19:20 743424 c:\windows\ie8updates\KB2647516-IE8\iedvtool.dll
+ 2012-02-17 00:29 . 2011-11-04 19:20 387584 c:\windows\ie8updates\KB2647516-IE8\iedkcs32.dll
+ 2012-02-17 00:29 . 2011-11-04 11:24 174080 c:\windows\ie8updates\KB2647516-IE8\ie4uinit.exe
+ 2011-12-14 09:13 . 2011-08-22 23:48 916480 c:\windows\ie8updates\KB2618444-IE8\wininet.dll
+ 2011-12-14 09:13 . 2011-08-22 23:48 105984 c:\windows\ie8updates\KB2618444-IE8\url.dll
+ 2011-12-14 09:13 . 2010-07-05 13:16 382840 c:\windows\ie8updates\KB2618444-IE8\spuninst\updspapi.dll
+ 2011-12-14 09:13 . 2010-07-05 13:15 231288 c:\windows\ie8updates\KB2618444-IE8\spuninst\spuninst.exe
+ 2011-12-14 09:13 . 2011-08-22 23:48 206848 c:\windows\ie8updates\KB2618444-IE8\occache.dll
+ 2011-12-14 09:13 . 2011-08-22 23:48 611840 c:\windows\ie8updates\KB2618444-IE8\mstime.dll
+ 2011-12-14 09:13 . 2011-08-22 23:48 602112 c:\windows\ie8updates\KB2618444-IE8\msfeeds.dll
+ 2011-12-14 09:13 . 2011-08-22 23:48 247808 c:\windows\ie8updates\KB2618444-IE8\ieproxy.dll
+ 2011-12-14 09:13 . 2011-08-22 23:48 184320 c:\windows\ie8updates\KB2618444-IE8\iepeers.dll
+ 2011-12-14 09:13 . 2011-08-22 23:48 743424 c:\windows\ie8updates\KB2618444-IE8\iedvtool.dll
+ 2011-12-14 09:13 . 2011-08-22 23:48 387584 c:\windows\ie8updates\KB2618444-IE8\iedkcs32.dll
+ 2011-12-14 09:13 . 2011-08-22 11:56 174080 c:\windows\ie8updates\KB2618444-IE8\ie4uinit.exe
+ 2012-02-17 00:40 . 2012-02-17 00:40 897536 c:\windows\assembly\NativeImages_v2.0.50727_32\YTUploader\f25e0241119b0d1671d8403cfe3cccc7\YTUploader.ni.dll
+ 2012-02-17 00:40 . 2012-02-17 00:40 136192 c:\windows\assembly\NativeImages_v2.0.50727_32\YouTubeUploaderMain\45409343f771a51bae5a38475b4a15c5\YouTubeUploaderMain.ni.exe
+ 2012-02-17 00:41 . 2012-02-17 00:41 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\edc5691acfb65ac37f49de2ec497083a\WsatConfig.ni.exe
+ 2012-02-17 00:37 . 2012-02-17 00:37 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\4ad8369d6a60765d7e9b43cdf9023f41\WindowsFormsIntegration.ni.dll
+ 2012-02-17 00:37 . 2012-02-17 00:37 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\68f4157e570c77df653057c0583395bd\UIAutomationClient.ni.dll
+ 2012-02-17 00:43 . 2012-02-17 00:43 400896 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\c2a12bd4056b44f8005a7eb3af161e6a\System.Xml.Linq.ni.dll
+ 2012-02-17 00:42 . 2012-02-17 00:42 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\fc63b434b2f253cd27625487f7b02ac0\System.Web.Routing.ni.dll
+ 2012-02-17 00:39 . 2012-02-17 00:39 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\67877f896b2b0e42286e838fe307f3fd\System.Web.RegularExpressions.ni.dll
+ 2012-02-17 00:43 . 2012-02-17 00:43 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\86650d4fb220f94f25bb5da42a03d454\System.Web.Extensions.Design.ni.dll
+ 2012-02-17 00:43 . 2012-02-17 00:43 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\654465871e547e131668874de7c60b8c\System.Web.Entity.ni.dll
+ 2012-02-17 00:43 . 2012-02-17 00:43 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\f0d6895f6e709d425cb5da6053c603d2\System.Web.Entity.Design.ni.dll
+ 2012-02-17 00:43 . 2012-02-17 00:43 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\3f3b7dc7208e302e39a2dfb5b2cb953b\System.Web.DynamicData.ni.dll
+ 2012-02-17 00:42 . 2012-02-17 00:42 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\e9cddd213343f15d611b14620d649bb0\System.Web.Abstractions.ni.dll
+ 2012-02-17 00:39 . 2012-02-17 00:39 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\f25d114cb629d1f512f98883c6535a75\System.Transactions.ni.dll
+ 2012-02-17 00:40 . 2012-02-17 00:40 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\11dcb806c92f55111f5fa9f1a90e3bdd\System.ServiceProcess.ni.dll
+ 2012-02-17 00:39 . 2012-02-17 00:39 679936 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\5fb9981f4147b537b53be9d58bf4e9b4\System.Security.ni.dll
+ 2012-02-17 00:39 . 2012-02-17 00:39 311296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\1335dd98ce5ce22ad1f51cc274ca5a1d\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2012-02-17 00:39 . 2012-02-17 00:39 771584 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\c14e58265386feb509cc61bb5e8dd296\System.Runtime.Remoting.ni.dll
+ 2012-02-17 00:42 . 2012-02-17 00:42 621056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\a4b2b1ee81acd843970d9a81b281f1c1\System.Net.ni.dll
+ 2012-02-17 00:40 . 2012-02-17 00:40 998400 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\a2a14380e8c9149d5b212d0100ef588a\System.Management.ni.dll
+ 2012-02-17 00:42 . 2012-02-17 00:42 330752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\e3436edde657a5111d39d5b2eecf9715\System.Management.Instrumentation.ni.dll
+ 2012-02-17 00:40 . 2012-02-17 00:40 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\974ded7dd3bca225a1b90de778846c78\System.IO.Log.ni.dll
+ 2012-02-17 00:40 . 2012-02-17 00:40 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\01eba24390736a59c39becd825b5756e\System.IdentityModel.Selectors.ni.dll
+ 2012-02-17 00:39 . 2012-02-17 00:39 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\c0d15fb6308587fef8744d568e64bcda\System.EnterpriseServices.Wrapper.dll
+ 2012-02-17 00:39 . 2012-02-17 00:39 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\c0d15fb6308587fef8744d568e64bcda\System.EnterpriseServices.ni.dll
+ 2012-02-17 00:37 . 2012-02-17 00:37 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\e9ae7ae6d1e9edc7aaf819889cd1c692\System.Drawing.Design.ni.dll
+ 2012-02-17 00:39 . 2012-02-17 00:39 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\78a370dc153011708dd9e4cb0e606bfc\System.DirectoryServices.Protocols.ni.dll
+ 2012-02-17 00:42 . 2012-02-17 00:42 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\6e644fc7464d9fe23fc9cd6001296f2f\System.DirectoryServices.AccountManagement.ni.dll
+ 2012-02-17 00:40 . 2012-02-17 00:40 689664 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlServ#\acdadddbd126cbcc44f8a78fa02911f1\System.Data.SqlServerCe.ni.dll
+ 2012-02-17 00:42 . 2012-02-17 00:42 939008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\bac39be66bb9f987c1948b766833f8e6\System.Data.Services.Client.ni.dll
+ 2012-02-17 00:42 . 2012-02-17 00:42 354816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\2b5ecd231320e57010043c408783d80b\System.Data.Services.Design.ni.dll
+ 2012-02-17 00:42 . 2012-02-17 00:42 756736 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\4ac9ac2326720485aefd4d79d2024945\System.Data.Entity.Design.ni.dll
+ 2012-02-17 00:41 . 2012-02-17 00:41 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\d504d550fd0a6994fcb1466ea7be92af\System.Data.DataSetExtensions.ni.dll
+ 2012-02-17 00:39 . 2012-02-17 00:39 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\94a40f415bfa947e251888bbe88bb973\System.Configuration.ni.dll
+ 2012-02-17 00:40 . 2012-02-17 00:40 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\28637135c6939e74450bbbf110b12643\System.Configuration.Install.ni.dll
+ 2012-02-17 00:41 . 2012-02-17 00:41 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\958b5c0114d664ab5ba72575c301e2ea\System.AddIn.ni.dll
+ 2012-02-17 00:41 . 2012-02-17 00:41 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\4dcff3b0e79fc27e31549bb2af00efb5\SMSvcHost.ni.exe
+ 2012-02-17 00:41 . 2012-02-17 00:41 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\bd3bfd5b6ef659dac4d6cccb34577d33\SMDiagnostics.ni.dll
+ 2012-02-17 00:41 . 2012-02-17 00:41 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\edec83be646eb52204c991371751a428\ServiceModelReg.ni.exe
+ 2012-02-17 00:36 . 2012-02-17 00:36 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\52015457bc28e7a9a563d9eab8ab0015\PresentationFramework.Royale.ni.dll
+ 2012-02-17 00:36 . 2012-02-17 00:36 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\46a680814559114706a33282e9df4b7a\PresentationFramework.Classic.ni.dll
+ 2012-02-17 00:36 . 2012-02-17 00:36 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\2713754549b1114c9152d33efe5f72c7\PresentationFramework.Aero.ni.dll
+ 2012-02-17 00:36 . 2012-02-17 00:36 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\1552f18ca434c1dca6d082df476d089a\PresentationFramework.Luna.ni.dll
+ 2012-02-17 00:40 . 2012-02-17 00:40 121856 c:\windows\assembly\NativeImages_v2.0.50727_32\Panasonic.Framework#\a24a43d359e15dfa5d7a1279834fdd63\Panasonic.Framework.View.Util.ni.dll
+ 2012-02-17 00:40 . 2012-02-17 00:40 308224 c:\windows\assembly\NativeImages_v2.0.50727_32\Panasonic.Framework#\83db2fe60ef352d9a909650dffd4b6aa\Panasonic.Framework.Model.Command.ni.dll
+ 2012-02-17 00:40 . 2012-02-17 00:40 184832 c:\windows\assembly\NativeImages_v2.0.50727_32\Panasonic.Core.Spec#\d043264cf7932b8fd9b87b3877fdf4b8\Panasonic.Core.Spec.Plugin.Base.ni.dll
+ 2012-02-17 00:40 . 2012-02-17 00:40 196096 c:\windows\assembly\NativeImages_v2.0.50727_32\Panasonic.Core.Spec#\cfb2d284e0e90b8b9b42baabe9c8fb73\Panasonic.Core.Spec.Plugin.DCF.ni.dll
+ 2012-02-17 00:40 . 2012-02-17 00:40 450560 c:\windows\assembly\NativeImages_v2.0.50727_32\Panasonic.Core.Spec#\9d390d4bd306f37eba647aaf293d0eeb\Panasonic.Core.Spec.ContentInformation.ni.dll
+ 2012-02-17 00:39 . 2012-02-17 00:39 117248 c:\windows\assembly\NativeImages_v2.0.50727_32\Panasonic.Core.Spec#\870ff0c641ee9afec134973610fe00fb\Panasonic.Core.Spec.Plugin.Base.ni.dll
+ 2012-02-17 00:39 . 2012-02-17 00:39 111104 c:\windows\assembly\NativeImages_v2.0.50727_32\Panasonic.Core.Spec#\01047e45fd1d95a3ff68a93832aaf24d\Panasonic.Core.Spec.Plugin.AVCHD.ni.dll
+ 2012-02-17 00:40 . 2012-02-17 00:40 239104 c:\windows\assembly\NativeImages_v2.0.50727_32\Panasonic.Core.Face#\04c18ed3eb1d9ae2092dd50731d1b703\Panasonic.Core.FaceIdentifierCli.ni.dll
+ 2012-02-17 00:41 . 2012-02-17 00:41 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\7c51497b188c82e2ccbe6315549ce023\MSBuild.ni.exe
+ 2012-02-17 00:41 . 2012-02-17 00:41 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\f0f6dd614d294295c5d8386cc4192034\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2012-02-17 00:41 . 2012-02-17 00:41 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\fd1338828beec8737fed8f50f4fcc567\Microsoft.Build.Utilities.ni.dll
+ 2012-02-17 00:41 . 2012-02-17 00:41 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\0d5f999c4b7e51151548c37c676c1b8e\Microsoft.Build.Utilities.v3.5.ni.dll
+ 2012-02-17 00:41 . 2012-02-17 00:41 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\792168ce8fe03a3db43e12cf736cf91e\Microsoft.Build.Engine.ni.dll
+ 2012-02-17 00:41 . 2012-02-17 00:41 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\0a5277c34ddc1f55df1defb4231e814f\Microsoft.Build.Conversion.v3.5.ni.dll
+ 2012-02-17 00:41 . 2012-02-17 00:41 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\a8df37aadb089f1f34d3d2f103966fbc\ComSvcConfig.ni.exe
+ 2012-02-17 00:39 . 2012-02-17 00:39 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\25ce400b547f517258c8afb0480390ea\AspNetMMCExt.ni.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
- 2011-10-12 23:28 . 2011-10-12 23:28 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
- 2011-10-12 23:28 . 2011-10-12 23:28 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
- 2011-10-12 23:28 . 2011-10-12 23:28 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2011-10-12 23:28 . 2011-10-12 23:28 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
- 2011-10-12 23:28 . 2011-10-12 23:28 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
- 2011-10-12 23:28 . 2011-10-12 23:28 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
- 2011-10-12 23:28 . 2011-10-12 23:28 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
- 2011-10-12 23:28 . 2011-10-12 23:28 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
- 2011-10-12 23:28 . 2011-10-12 23:28 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
- 2011-10-12 23:28 . 2011-10-12 23:28 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
- 2011-10-12 23:28 . 2011-10-12 23:28 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
- 2011-10-12 23:28 . 2011-10-12 23:28 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
- 2011-10-12 23:28 . 2011-10-12 23:28 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
- 2011-10-12 23:28 . 2011-10-12 23:28 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
- 2011-10-12 23:28 . 2011-10-12 23:28 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
- 2011-10-12 23:28 . 2011-10-12 23:28 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2011-10-12 23:28 . 2011-10-12 23:28 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
- 2011-10-12 23:28 . 2011-10-12 23:28 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
- 2011-10-12 23:28 . 2011-10-12 23:28 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
- 2011-10-12 23:28 . 2011-10-12 23:28 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
- 2011-10-12 23:28 . 2011-10-12 23:28 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
- 2011-10-12 23:28 . 2011-10-12 23:28 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
- 2011-10-12 23:28 . 2011-10-12 23:28 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2011-10-12 23:28 . 2011-10-12 23:28 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2011-10-12 23:28 . 2011-10-12 23:28 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
- 2011-10-12 23:28 . 2011-10-12 23:28 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2011-12-26 10:22 . 2006-09-28 18:56 316416 c:\windows\$NtUninstallWudf01009$\wudfx.dll
+ 2011-12-26 10:22 . 2006-09-28 18:56 165376 c:\windows\$NtUninstallWudf01009$\wudfplatform.dll
+ 2011-12-26 10:22 . 2006-09-28 18:56 146432 c:\windows\$NtUninstallWudf01009$\wudfhost.exe
+ 2011-12-26 10:22 . 2008-11-07 18:55 382496 c:\windows\$NtUninstallWudf01009$\spuninst\updspapi.dll
+ 2011-12-26 10:22 . 2008-11-07 18:55 231456 c:\windows\$NtUninstallWudf01009$\spuninst\spuninst.exe
+ 2011-12-26 10:23 . 2006-10-08 21:53 379184 c:\windows\$NtUninstallwinusb0100$\spuninst\updspapi.dll
+ 2011-12-26 10:23 . 2006-10-08 21:53 221488 c:\windows\$NtUninstallwinusb0100$\spuninst\spuninst.exe
+ 2011-12-26 10:24 . 2008-11-07 18:55 382496 c:\windows\$NtUninstallWdf01009$\spuninst\updspapi.dll
+ 2011-12-26 10:24 . 2008-11-07 18:55 231456 c:\windows\$NtUninstallWdf01009$\spuninst\spuninst.exe
+ 2011-12-26 10:42 . 2007-07-27 10:41 382840 c:\windows\$NtUninstallKB973442_WM11$\spuninst\updspapi.dll
+ 2011-12-26 10:42 . 2007-07-27 10:41 231288 c:\windows\$NtUninstallKB973442_WM11$\spuninst\spuninst.exe
+ 2011-12-26 10:42 . 2007-11-30 11:18 382840 c:\windows\$NtUninstallKB932716-v2$\spuninst\updspapi.dll
+ 2011-12-26 10:42 . 2007-11-30 11:18 231288 c:\windows\$NtUninstallKB932716-v2$\spuninst\spuninst.exe
+ 2012-01-12 00:52 . 2011-06-20 17:44 293376 c:\windows\$NtUninstallKB2646524$\winsrv.dll
+ 2012-01-12 00:52 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2646524$\spuninst\updspapi.dll
+ 2012-01-12 00:52 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2646524$\spuninst\spuninst.exe
+ 2011-12-14 09:14 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2639417$\spuninst\updspapi.dll
+ 2011-12-14 09:14 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2639417$\spuninst\spuninst.exe
+ 2011-12-14 09:10 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2633952$\spuninst\updspapi.dll
+ 2011-12-14 09:10 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2633952$\spuninst\spuninst.exe
+ 2011-12-14 09:09 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2633171$\spuninst\updspapi.dll
+ 2011-12-14 09:09 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2633171$\spuninst\spuninst.exe
+ 2012-01-12 00:52 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2631813$\spuninst\updspapi.dll
+ 2012-01-12 00:52 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2631813$\spuninst\spuninst.exe
+ 2012-01-12 00:52 . 2008-04-14 00:12 386048 c:\windows\$NtUninstallKB2631813$\qdvd.dll
+ 2011-12-14 09:14 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2624667$\spuninst\updspapi.dll
+ 2011-12-14 09:14 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2624667$\spuninst\spuninst.exe
+ 2011-12-14 09:10 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2620712$\spuninst\updspapi.dll
+ 2011-12-14 09:10 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2620712$\spuninst\spuninst.exe
+ 2011-12-14 09:10 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2619339$\spuninst\updspapi.dll
+ 2011-12-14 09:10 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2619339$\spuninst\spuninst.exe
+ 2011-12-14 09:10 . 2011-02-09 13:53 186880 c:\windows\$NtUninstallKB2619339$\encdec.dll
+ 2011-12-14 09:10 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2618451$\spuninst\updspapi.dll
+ 2011-12-14 09:10 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2618451$\spuninst\spuninst.exe
+ 2012-01-12 00:44 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2603381$\spuninst\updspapi.dll
+ 2012-01-12 00:44 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2603381$\spuninst\spuninst.exe
+ 2012-01-12 00:48 . 2008-04-14 00:12 176128 c:\windows\$NtUninstallKB2598479$\winmm.dll
+ 2012-01-12 00:48 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2598479$\spuninst\updspapi.dll
+ 2012-01-12 00:48 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2598479$\spuninst\spuninst.exe
+ 2012-01-15 00:02 . 2009-08-25 09:17 354816 c:\windows\$NtUninstallKB2585542$\winhttp.dll
+ 2012-01-15 00:02 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2585542$\spuninst\updspapi.dll
+ 2012-01-15 00:02 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2585542$\spuninst\spuninst.exe
+ 2012-01-15 00:02 . 2011-04-29 17:25 151552 c:\windows\$NtUninstallKB2585542$\schannel.dll
+ 2012-01-12 00:44 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2584146$\spuninst\updspapi.dll
+ 2012-01-12 00:44 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2584146$\spuninst\spuninst.exe

2nd instalment


+ 2012-01-12 00:52 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2646524\update\updspapi.dll
+ 2012-01-12 00:52 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2646524\update\update.exe
+ 2012-01-12 00:52 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2646524\spuninst.exe
+ 2011-11-25 21:56 . 2011-11-25 21:56 293376 c:\windows\$hf_mig$\KB2646524\SP3QFE\winsrv.dll
+ 2011-12-14 09:14 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2639417\update\updspapi.dll
+ 2011-12-14 09:14 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2639417\update\update.exe
+ 2011-12-14 09:14 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2639417\spuninst.exe
+ 2011-12-14 09:09 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2633171\update\updspapi.dll
+ 2011-12-14 09:09 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2633171\update\update.exe
+ 2011-12-14 09:09 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2633171\spuninst.exe
+ 2012-01-12 00:52 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2631813\update\updspapi.dll
+ 2012-01-12 00:52 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2631813\update\update.exe
+ 2012-01-12 00:52 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2631813\spuninst.exe
+ 2011-11-03 15:27 . 2011-11-03 15:27 386048 c:\windows\$hf_mig$\KB2631813\SP3QFE\qdvd.dll
+ 2011-12-14 09:14 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2624667\update\updspapi.dll
+ 2011-12-14 09:14 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2624667\update\update.exe
+ 2011-12-14 09:14 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2624667\spuninst.exe
+ 2011-12-14 09:10 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2620712\update\updspapi.dll
+ 2011-12-14 09:10 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2620712\update\update.exe
+ 2011-12-14 09:10 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2620712\spuninst.exe
+ 2011-12-14 09:10 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2619339\update\updspapi.dll
+ 2011-12-14 09:10 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2619339\update\update.exe
+ 2011-12-14 09:10 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2619339\spuninst.exe
+ 2011-10-18 11:12 . 2011-10-18 11:12 186880 c:\windows\$hf_mig$\KB2619339\SP3QFE\encdec.dll
+ 2011-12-14 09:10 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2618451\update\updspapi.dll
+ 2011-12-14 09:10 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2618451\update\update.exe
+ 2011-12-14 09:10 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2618451\spuninst.exe
+ 2011-12-14 09:13 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2618444-IE8\update\updspapi.dll
+ 2011-12-14 09:13 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2618444-IE8\update\update.exe
+ 2011-12-14 09:13 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2618444-IE8\spuninst.exe
+ 2011-12-14 07:43 . 2011-11-04 19:19 919552 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\wininet.dll
+ 2011-12-14 07:43 . 2011-11-04 19:19 105984 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\url.dll
+ 2011-12-14 07:43 . 2011-11-04 19:19 206848 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\occache.dll
+ 2011-12-14 07:44 . 2011-11-04 19:19 611840 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\mstime.dll
+ 2011-12-14 07:44 . 2011-11-04 19:19 602112 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\msfeeds.dll
+ 2011-12-14 07:43 . 2011-11-04 19:19 247808 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\ieproxy.dll
+ 2011-12-14 07:43 . 2011-11-04 19:19 184320 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\iepeers.dll
+ 2011-12-14 07:43 . 2011-11-04 19:19 743424 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\iedvtool.dll
+ 2011-12-14 07:43 . 2011-11-04 19:19 387584 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\iedkcs32.dll
+ 2011-12-14 07:43 . 2011-10-25 12:01 174080 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\ie4uinit.exe
+ 2012-01-12 00:44 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2603381\update\updspapi.dll
+ 2012-01-12 00:44 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2603381\update\update.exe
+ 2012-01-12 00:44 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2603381\spuninst.exe
+ 2012-01-12 00:49 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2598479\update\updspapi.dll
+ 2012-01-12 00:49 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2598479\update\update.exe
+ 2012-01-12 00:49 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2598479\spuninst.exe
+ 2011-10-14 14:45 . 2011-10-14 14:45 176128 c:\windows\$hf_mig$\KB2598479\SP3QFE\winmm.dll
+ 2012-01-15 00:02 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2585542\update\updspapi.dll
+ 2012-01-15 00:02 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2585542\update\update.exe
+ 2012-01-15 00:02 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2585542\spuninst.exe
+ 2012-01-14 20:19 . 2011-11-16 14:20 354816 c:\windows\$hf_mig$\KB2585542\SP3QFE\winhttp.dll
+ 2012-01-14 20:19 . 2011-11-16 14:20 152064 c:\windows\$hf_mig$\KB2585542\SP3QFE\schannel.dll
+ 2012-01-12 00:44 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2584146\update\updspapi.dll
+ 2012-01-12 00:44 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2584146\update\update.exe
+ 2012-01-12 00:44 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2584146\spuninst.exe
+ 2011-06-06 20:48 . 2011-06-06 20:48 1837296 c:\windows\system32\WUDFUpdate_01009.dll
+ 2006-10-18 21:47 . 2009-07-14 10:08 1543680 c:\windows\system32\wmvdecod.dll
- 2006-10-18 21:47 . 2006-10-18 21:47 1543680 c:\windows\system32\WMVDECOD.dll
+ 2011-06-06 20:48 . 2011-06-06 13:49 1461992 c:\windows\system32\WdfCoInstaller01009.dll
+ 2011-12-28 17:40 . 2011-08-02 17:38 4517664 c:\windows\system32\usbaaplrc.dll
+ 2006-03-18 11:09 . 2011-12-17 19:46 1212416 c:\windows\system32\urlmon.dll
- 2006-03-18 11:09 . 2011-08-22 23:48 1212416 c:\windows\system32\urlmon.dll
+ 2004-08-04 10:00 . 2011-11-03 15:28 1292288 c:\windows\system32\quartz.dll
+ 2004-08-04 10:00 . 2011-11-01 16:07 1288704 c:\windows\system32\ole32.dll
- 2005-03-30 01:23 . 2010-12-09 13:38 2192768 c:\windows\system32\ntoskrnl.exe
+ 2005-03-30 01:23 . 2011-10-25 13:33 2192768 c:\windows\system32\ntoskrnl.exe
- 2005-03-30 01:01 . 2010-12-09 13:07 2069376 c:\windows\system32\ntkrnlpa.exe
+ 2005-03-30 01:01 . 2011-10-25 12:52 2069376 c:\windows\system32\ntkrnlpa.exe
+ 2006-03-23 17:32 . 2011-12-17 19:46 5979136 c:\windows\system32\mshtml.dll
- 2009-03-08 04:32 . 2011-08-22 23:48 2000384 c:\windows\system32\iertutil.dll
+ 2009-03-08 04:32 . 2011-12-17 19:46 2000384 c:\windows\system32\iertutil.dll
+ 2011-12-28 17:40 . 2011-08-02 17:38 4517664 c:\windows\system32\DRVSTORE\usbaapl_091115F4EDEB41DBA0EC91574CE905B4E0482482\usbaaplrc.dll
+ 2011-12-28 17:40 . 2011-08-02 17:38 1461992 c:\windows\system32\DRVSTORE\netaapl_63AA05C4700EB9CAF2D048DAC1D06D764A0D4C41\wdfcoinstaller01009.dll
+ 2004-08-04 10:00 . 2012-01-12 16:53 1859968 c:\windows\system32\dllcache\win32k.sys
+ 2006-03-18 11:09 . 2011-12-17 19:46 1212416 c:\windows\system32\dllcache\urlmon.dll
- 2006-03-18 11:09 . 2011-08-22 23:48 1212416 c:\windows\system32\dllcache\urlmon.dll
+ 2004-08-04 10:00 . 2011-11-03 15:28 1292288 c:\windows\system32\dllcache\quartz.dll
+ 2004-08-04 10:00 . 2011-11-01 16:07 1288704 c:\windows\system32\dllcache\ole32.dll
+ 2005-03-30 01:23 . 2011-10-25 13:33 2192768 c:\windows\system32\dllcache\ntoskrnl.exe
- 2005-03-30 01:23 . 2010-12-09 13:38 2192768 c:\windows\system32\dllcache\ntoskrnl.exe
+ 2010-01-20 18:50 . 2011-10-25 12:52 2027008 c:\windows\system32\dllcache\ntkrpamp.exe
- 2010-01-20 18:50 . 2010-12-09 13:07 2027008 c:\windows\system32\dllcache\ntkrpamp.exe
+ 2005-03-30 01:01 . 2011-10-25 12:52 2069376 c:\windows\system32\dllcache\ntkrnlpa.exe
- 2005-03-30 01:01 . 2010-12-09 13:07 2069376 c:\windows\system32\dllcache\ntkrnlpa.exe
+ 2010-01-20 18:50 . 2011-10-25 13:37 2148864 c:\windows\system32\dllcache\ntkrnlmp.exe
- 2010-01-20 18:50 . 2010-12-09 13:42 2148864 c:\windows\system32\dllcache\ntkrnlmp.exe
+ 2006-03-23 17:32 . 2011-12-17 19:46 5979136 c:\windows\system32\dllcache\mshtml.dll
- 2010-01-20 23:18 . 2011-08-22 23:48 2000384 c:\windows\system32\dllcache\iertutil.dll
+ 2010-01-20 23:18 . 2011-12-17 19:46 2000384 c:\windows\system32\dllcache\iertutil.dll
+ 2011-12-25 03:50 . 2011-12-25 03:50 5246976 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
+ 2011-10-26 03:39 . 2011-10-26 03:39 3186688 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
+ 2012-01-02 11:18 . 2012-01-02 11:18 1252864 c:\windows\Installer\f67328.msi
+ 2011-12-28 17:46 . 2011-12-28 17:46 5651456 c:\windows\Installer\37629d.msi
+ 2011-12-28 17:41 . 2011-12-28 17:41 1769984 c:\windows\Installer\375c8b.msi
+ 2011-12-28 17:41 . 2011-12-28 17:41 1717248 c:\windows\Installer\375c61.msi
+ 2011-12-28 17:39 . 2011-12-28 17:39 2002432 c:\windows\Installer\375c21.msi
+ 2011-12-28 17:39 . 2011-12-28 17:39 1530368 c:\windows\Installer\375c18.msi
+ 2011-10-30 22:54 . 2011-10-30 22:54 2748416 c:\windows\Installer\2b4f368.msp
+ 2011-12-26 09:59 . 2011-12-26 09:59 4368896 c:\windows\Installer\188747a.msp
+ 2012-02-17 00:29 . 2011-11-04 19:20 1212416 c:\windows\ie8updates\KB2647516-IE8\urlmon.dll
+ 2012-02-17 00:29 . 2011-11-04 19:20 5978112 c:\windows\ie8updates\KB2647516-IE8\mshtml.dll
+ 2012-02-17 00:29 . 2011-11-04 19:20 2000384 c:\windows\ie8updates\KB2647516-IE8\iertutil.dll
+ 2011-12-14 09:13 . 2011-08-22 23:48 1212416 c:\windows\ie8updates\KB2618444-IE8\urlmon.dll
+ 2011-12-14 09:13 . 2011-10-03 08:35 5971456 c:\windows\ie8updates\KB2618444-IE8\mshtml.dll
+ 2011-12-14 09:13 . 2011-08-22 23:48 2000384 c:\windows\ie8updates\KB2618444-IE8\iertutil.dll
+ 2010-01-20 18:50 . 2011-10-25 13:33 2192768 c:\windows\Driver Cache\i386\ntoskrnl.exe
- 2010-01-20 18:50 . 2010-12-09 13:38 2192768 c:\windows\Driver Cache\i386\ntoskrnl.exe
+ 2010-01-20 18:50 . 2011-10-25 12:52 2027008 c:\windows\Driver Cache\i386\ntkrpamp.exe
- 2010-01-20 18:50 . 2010-12-09 13:07 2027008 c:\windows\Driver Cache\i386\ntkrpamp.exe
+ 2009-02-07 19:02 . 2011-10-25 12:52 2069376 c:\windows\Driver Cache\i386\ntkrnlpa.exe
- 2009-02-07 19:02 . 2010-12-09 13:07 2069376 c:\windows\Driver Cache\i386\ntkrnlpa.exe
- 2010-01-20 18:50 . 2010-12-09 13:42 2148864 c:\windows\Driver Cache\i386\ntkrnlmp.exe
+ 2010-01-20 18:50 . 2011-10-25 13:37 2148864 c:\windows\Driver Cache\i386\ntkrnlmp.exe
+ 2012-02-17 00:43 . 2012-02-17 00:43 4353536 c:\windows\assembly\NativeImages_v2.0.50727_32\ZuneShell\875b4de10ac0ee07fae0bd88cc8bf2dd\ZuneShell.ni.dll
+ 2012-02-17 00:43 . 2012-02-17 00:43 2557440 c:\windows\assembly\NativeImages_v2.0.50727_32\ZuneDBApi\60e15758912837abe8b8f31253a73095\ZuneDBApi.ni.dll
+ 2012-02-17 00:35 . 2012-02-17 00:35 3325440 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\174c2f776741812aed02c337bbcd1dae\WindowsBase.ni.dll
+ 2012-02-17 00:43 . 2012-02-17 00:43 4579328 c:\windows\assembly\NativeImages_v2.0.50727_32\UIX\b79115e5926aaf7a5915cc74b2b242f1\UIX.ni.dll
+ 2012-02-17 00:43 . 2012-02-17 00:43 1832448 c:\windows\assembly\NativeImages_v2.0.50727_32\UIX.RenderApi\7c47bb4f7522ead5144b3ebd01a7387f\UIX.RenderApi.ni.dll
+ 2012-02-17 00:37 . 2012-02-17 00:37 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\94f5164ff4f664c5e4e7fb4c3af1abad\UIAutomationClientsideProviders.ni.dll
+ 2012-02-17 00:35 . 2012-02-17 00:35 7953408 c:\windows\assembly\NativeImages_v2.0.50727_32\System\9e3803cd2a11f056291862e306a8e2b2\System.ni.dll
+ 2012-02-17 00:37 . 2012-02-17 00:37 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\77e1279cbf4eecfb0284b63316fe43fe\System.Xml.ni.dll
+ 2012-02-17 00:43 . 2012-02-17 00:43 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\c4c671c737b553db8e07664816475333\System.WorkflowServices.ni.dll
+ 2012-02-17 00:43 . 2012-02-17 00:43 1908224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\248ea47105ff4af6ee75e6fdd5b450a1\System.Workflow.Runtime.ni.dll
+ 2012-02-17 00:43 . 2012-02-17 00:43 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\80a288b6611668160334668cc2608e4a\System.Workflow.ComponentModel.ni.dll
+ 2012-02-17 00:43 . 2012-02-17 00:43 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\4c27548df5897320840ee0d65db38742\System.Workflow.Activities.ni.dll
+ 2012-02-17 00:39 . 2012-02-17 00:39 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\e9ba004858dcdb5958d86f26f043f85a\System.Web.Services.ni.dll
+ 2012-02-17 00:43 . 2012-02-17 00:43 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\030cde14924eefebc06c240dbfe093a4\System.Web.Mobile.ni.dll
+ 2012-02-17 00:43 . 2012-02-17 00:43 2405888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\6379c8ca8ae11effb415139990923ff1\System.Web.Extensions.ni.dll
+ 2012-02-17 00:37 . 2012-02-17 00:37 1917440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\e456140d5d6c43d7383bd36d3f9e12c6\System.Speech.ni.dll
+ 2012-02-17 00:42 . 2012-02-17 00:42 1706496 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\285dfbf2380436e187cb624bd1cd4683\System.ServiceModel.Web.ni.dll
+ 2012-02-17 00:40 . 2012-02-17 00:40 2345472 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\f2532204217dc10f152afd077b09927c\System.Runtime.Serialization.ni.dll
+ 2012-02-17 00:37 . 2012-02-17 00:37 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\d51e6bb07124a1d780d1e024858e0dc1\System.Printing.ni.dll
+ 2012-02-17 00:40 . 2012-02-17 00:40 1070080 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\8ef05061cd205c4f2a8583d97f32a603\System.IdentityModel.ni.dll
+ 2012-02-17 00:37 . 2012-02-17 00:37 1587200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\9351cf29bb1ba951e45a9b3b0edab937\System.Drawing.ni.dll
+ 2012-02-17 00:39 . 2012-02-17 00:39 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\77d0e93f024055d04c07cc2700b4c590\System.DirectoryServices.ni.dll
+ 2012-02-17 00:39 . 2012-02-17 00:39 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\707a05a7d5a8d99dd56d1d50311a60d2\System.Deployment.ni.dll
+ 2012-02-17 00:36 . 2012-02-17 00:36 6616576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\ae888f8633fce3ff1de98e32bce0abbf\System.Data.ni.dll
+ 2012-02-17 00:39 . 2012-02-17 00:39 2510336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\857300fa64d09c69125451fd8894f3da\System.Data.SqlXml.ni.dll
+ 2012-02-17 00:42 . 2012-02-17 00:42 1328128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\e9d4a1fb13572c769ddd9b86e55baab4\System.Data.Services.ni.dll
+ 2012-02-17 00:39 . 2012-02-17 00:39 1115136 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\3f2e74586111fb32d5edc059f709fa94\System.Data.OracleClient.ni.dll
+ 2012-02-17 00:37 . 2012-02-17 00:37 2516480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\c3d9c33f71d15a3e2e240092a244eba3\System.Data.Linq.ni.dll
+ 2012-02-17 00:42 . 2012-02-17 00:42 9924096 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\424160369b301ccd1b6fd86265611955\System.Data.Entity.ni.dll
+ 2012-02-17 00:36 . 2012-02-17 00:36 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\0a6d6717e76be12295711ff02c7aa1d4\System.Core.ni.dll
+ 2012-02-17 00:39 . 2012-02-17 00:39 2318336 c:\windows\assembly\NativeImages_v2.0.50727_32\SceneCutEditorForPFS\e19b77a9c60a75298d91d91183802980\SceneCutEditorForPFS.ni.exe
+ 2012-02-17 00:36 . 2012-02-17 00:36 2128896 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\33cdfb4c322a528260016ac759230501\ReachFramework.ni.dll
+ 2012-02-17 00:36 . 2012-02-17 00:36 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\a6def83aee1aaf3336675ce58ac09013\PresentationUI.ni.dll
+ 2012-02-17 00:35 . 2012-02-17 00:35 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\59cd6ce5a254006179eee92952cd2272\PresentationBuildTasks.ni.dll
+ 2012-02-17 00:40 . 2012-02-17 00:40 1900032 c:\windows\assembly\NativeImages_v2.0.50727_32\Panasonic.Framework#\eac5db28fe8d54c701204a6c694e9d3f\Panasonic.Framework.View.Area.ni.dll
+ 2012-02-17 00:40 . 2012-02-17 00:40 1177088 c:\windows\assembly\NativeImages_v2.0.50727_32\Panasonic.Framework#\df3f3c94de5781587d60d1fa9be81482\Panasonic.Framework.View.Parts.ni.dll
+ 2012-02-17 00:40 . 2012-02-17 00:40 2309120 c:\windows\assembly\NativeImages_v2.0.50727_32\Panasonic.Framework#\c406b6923bc44b297b97528b9703dadb\Panasonic.Framework.Model.ni.dll
+ 2012-02-17 00:40 . 2012-02-17 00:40 3987968 c:\windows\assembly\NativeImages_v2.0.50727_32\Panasonic.Framework#\9bf67cf8cd5e36eb34e2d826fb49f935\Panasonic.Framework.View.ni.dll
+ 2012-02-17 00:40 . 2012-02-17 00:40 3396096 c:\windows\assembly\NativeImages_v2.0.50727_32\Panasonic.Framework#\434dfb8d6d6cfa389f00330eb8e0c0fe\Panasonic.Framework.View.Resource.ni.dll
+ 2012-02-17 00:40 . 2012-02-17 00:40 1712128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\96e485c02ad346a2bd26a635e7fcb023\Microsoft.VisualBasic.ni.dll
+ 2012-02-17 00:41 . 2012-02-17 00:41 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\f7071f9a1c0523540f6aa7f11c302fb6\Microsoft.Transactions.Bridge.ni.dll
+ 2012-02-17 00:40 . 2012-02-17 00:40 2332160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\806b1d127ed3e906db972751e87585c4\Microsoft.JScript.ni.dll
+ 2012-02-17 00:41 . 2012-02-17 00:41 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\912789fd859e0887e10a935cade08e72\Microsoft.Build.Tasks.v3.5.ni.dll
+ 2012-02-17 00:41 . 2012-02-17 00:41 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\6c1d3eec78906cc2a2ecffb013114c50\Microsoft.Build.Tasks.ni.dll
+ 2012-02-17 00:41 . 2012-02-17 00:41 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\d6edd4b4619a9052d3dfe50c3067d5e0\Microsoft.Build.Engine.ni.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 3186688 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
- 2011-10-12 23:28 . 2011-10-12 23:28 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
- 2011-10-12 23:28 . 2011-10-12 23:28 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
- 2010-10-04 22:47 . 2010-10-04 22:47 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
+ 2012-01-11 00:57 . 2012-01-11 00:57 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
- 2011-10-12 23:28 . 2011-10-12 23:28 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 5246976 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
- 2011-10-12 23:28 . 2011-10-12 23:28 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
- 2011-10-12 23:28 . 2011-10-12 23:28 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2012-02-17 00:34 . 2012-02-17 00:34 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2011-12-26 10:42 . 2006-10-18 21:47 1543680 c:\windows\$NtUninstallKB973442_WM11$\wmvdecod.dll
+ 2011-12-14 09:14 . 2011-09-06 13:20 1858944 c:\windows\$NtUninstallKB2639417$\win32k.sys
+ 2011-12-14 09:09 . 2010-12-09 13:38 2192768 c:\windows\$NtUninstallKB2633171$\ntoskrnl.exe
+ 2011-12-14 09:09 . 2010-12-09 13:07 2027008 c:\windows\$NtUninstallKB2633171$\ntkrpamp.exe
+ 2011-12-14 09:09 . 2010-12-09 13:07 2069376 c:\windows\$NtUninstallKB2633171$\ntkrnlpa.exe
+ 2011-12-14 09:09 . 2010-12-09 13:42 2148864 c:\windows\$NtUninstallKB2633171$\ntkrnlmp.exe
+ 2012-01-12 00:52 . 2010-02-05 18:27 1291776 c:\windows\$NtUninstallKB2631813$\quartz.dll
+ 2011-12-14 09:14 . 2010-07-16 12:05 1288192 c:\windows\$NtUninstallKB2624667$\ole32.dll
+ 2011-11-23 13:29 . 2011-11-23 13:29 1868544 c:\windows\$hf_mig$\KB2639417\SP3QFE\win32k.sys
+ 2011-10-25 13:34 . 2011-10-25 13:34 2192768 c:\windows\$hf_mig$\KB2633171\SP3QFE\ntoskrnl.exe
+ 2011-10-25 12:52 . 2011-10-25 12:52 2027008 c:\windows\$hf_mig$\KB2633171\SP3QFE\ntkrpamp.exe
+ 2011-10-25 12:52 . 2011-10-25 12:52 2069376 c:\windows\$hf_mig$\KB2633171\SP3QFE\ntkrnlpa.exe
+ 2011-10-25 13:38 . 2011-10-25 13:38 2148864 c:\windows\$hf_mig$\KB2633171\SP3QFE\ntkrnlmp.exe
+ 2011-11-03 15:27 . 2011-11-03 15:27 1292288 c:\windows\$hf_mig$\KB2631813\SP3QFE\quartz.dll
+ 2011-11-01 16:05 . 2011-11-01 16:05 1289216 c:\windows\$hf_mig$\KB2624667\SP3QFE\ole32.dll
+ 2011-12-14 07:43 . 2011-11-04 19:19 1214464 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\urlmon.dll
+ 2011-12-14 07:43 . 2011-11-04 19:19 5978624 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\mshtml.dll
+ 2011-12-14 07:43 . 2011-11-04 19:19 2001408 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\iertutil.dll
+ 2010-01-20 22:55 . 2012-02-17 00:30 52550552 c:\windows\system32\MRT.exe
+ 2009-03-08 04:39 . 2011-12-18 14:46 11082240 c:\windows\system32\ieframe.dll
+ 2010-01-20 23:18 . 2011-12-18 14:46 11082240 c:\windows\system32\dllcache\ieframe.dll
+ 2012-01-03 17:58 . 2012-01-03 17:58 15929344 c:\windows\Installer\df25be.msp
+ 2012-02-17 00:29 . 2011-11-04 19:20 11081728 c:\windows\ie8updates\KB2647516-IE8\ieframe.dll
+ 2011-12-14 09:13 . 2011-08-23 16:48 11081728 c:\windows\ie8updates\KB2618444-IE8\ieframe.dll
+ 2012-02-17 00:37 . 2012-02-17 00:37 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\ad99ac6b5666edb8ee742dd64f9578af\System.Windows.Forms.ni.dll
+ 2012-02-17 00:39 . 2012-02-17 00:39 11817472 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\29bdc8352d3c26e3c572ea60639dec3b\System.Web.ni.dll
+ 2012-02-17 00:41 . 2012-02-17 00:41 17403904 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\1cdcd6d97627d345d5ff446e6ec88b97\System.ServiceModel.ni.dll
+ 2012-02-17 00:37 . 2012-02-17 00:37 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\7c8f8fb506c32500acc1b6190d054f26\System.Design.ni.dll
+ 2012-02-17 00:36 . 2012-02-17 00:36 14328320 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\5060105fb9e169399fe45600b1e9215e\PresentationFramework.ni.dll
+ 2012-02-17 00:36 . 2012-02-17 00:36 12215808 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\0665bba8c9962deadc418881eb3a2a2a\PresentationCore.ni.dll
+ 2011-11-05 14:19 . 2011-11-05 14:19 11083776 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\ieframe.dll
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-06-18 68856]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SigmatelSysTrayApp"="stsystra.exe" [2006-07-27 282624]
"DSLSTATEXE"="c:\program files\BT Voyager 105 ADSL Modem\dslstat.exe" [2007-01-25 1658965]
"DSLAGENTEXE"="c:\program files\BT Voyager 105 ADSL Modem\dslagent.exe" [2007-01-25 16384]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 110592]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2010-04-03 110696]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2010-04-03 13670504]
"mcui_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2011-11-22 1318816]
"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2011-11-01 59240]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696]
.
c:\documents and settings\All Users.WINDOWS\Start Menu\Programs\Startup\
McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\2.0.181\SSScheduler.exe [2010-1-15 255536]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2011-07-19 113024]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2011-05-04 17:54 551296 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.DLL
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]
path=c:\documents and settings\All Users.WINDOWS\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
backup=c:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Start Menu^Programs^Startup^Microsoft Office.lnk]
path=c:\documents and settings\All Users.WINDOWS\Start Menu\Programs\Startup\Microsoft Office.lnk
backup=c:\windows\pss\Microsoft Office.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Start Menu^Programs^Startup^PHOTOfunSTUDIO 4.0 HD Edition.lnk]
path=c:\documents and settings\All Users.WINDOWS\Start Menu\Programs\Startup\PHOTOfunSTUDIO 4.0 HD Edition.lnk
backup=c:\windows\pss\PHOTOfunSTUDIO 4.0 HD Edition.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Start Menu^Programs^Startup^Quicken Scheduled Updates.lnk]
path=c:\documents and settings\All Users.WINDOWS\Start Menu\Programs\Startup\Quicken Scheduled Updates.lnk
backup=c:\windows\pss\Quicken Scheduled Updates.lnkCommon Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2012-01-03 07:37 843712 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Corel File Shell Monitor]
2007-12-01 17:38 38400 ----a-r- c:\program files\Corel\Corel MediaOne\CorelIOMonitor.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2011-12-08 01:36 421736 ----a-w- c:\program files\iTunes\iTunesHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2010-01-17 23:12 98304 ----a-w- c:\program files\QuickTime\QTTask.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Zune Launcher]
2011-08-05 12:29 159456 ----a-w- c:\program files\Zune\ZuneLauncher.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeFirewall]
"DisableMonitoring"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Common Files\\McAfee\\McSvcHost\\McSvHost.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Common Files\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
.
R0 RapportKELL;RapportKELL;c:\windows\system32\drivers\RapportKELL.sys [25/09/2011 19:00 56336]
R1 mfetdi2k;McAfee Inc. mfetdi2k;c:\windows\system32\drivers\mfetdi2k.sys [30/05/2010 15:15 89792]
R1 RapportCerberus_32029;RapportCerberus_32029;c:\documents and settings\All Users.WINDOWS\Application Data\Trusteer\Rapport\store\exts\RapportCerberus\32029\RapportCerberus32_32029.sys [10/11/2011 12:15 227312]
R1 RapportEI;RapportEI;c:\program files\Trusteer\Rapport\bin\RapportEI.sys [25/09/2011 19:00 70416]
R1 RapportPG;RapportPG;c:\program files\Trusteer\Rapport\bin\RapportPG.sys [25/09/2011 19:00 161936]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [22/07/2011 16:27 12880]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [12/07/2011 21:55 67664]
R2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCore.exe [11/08/2011 23:38 116608]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\McAfee\SiteAdvisor\McSACore.exe [20/01/2010 22:42 95200]
R2 McMPFSvc;McAfee Personal Firewall Service;"c:\program files\Common Files\Mcafee\McSvcHost\McSvHost.exe" /McCoreSvc [09/10/2011 17:01 214904]
R2 McNaiAnn;McAfee VirusScan Announcer;"c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe" /McCoreSvc [09/10/2011 17:01 214904]
R2 mfefire;McAfee Firewall Core Service;c:\program files\Common Files\McAfee\SystemCore\mfefire.exe [09/10/2011 17:02 160608]
R2 mfevtp;McAfee Validation Trust Protection Service;c:\windows\system32\mfevtps.exe [09/10/2011 16:49 150856]
R2 RapportMgmtService;Rapport Management Service;c:\program files\Trusteer\Rapport\bin\RapportMgmtService.exe [25/09/2011 18:59 919352]
R3 cfwids;McAfee Inc. cfwids;c:\windows\system32\drivers\cfwids.sys [30/05/2010 15:15 57600]
R3 mfefirek;McAfee Inc. mfefirek;c:\windows\system32\drivers\mfefirek.sys [30/05/2010 15:15 338176]
R3 mfendiskmp;mfendiskmp;c:\windows\system32\drivers\mfendisk.sys [30/05/2010 15:15 83856]
R3 RapportIaso;RapportIaso;c:\documents and settings\All Users.WINDOWS\Application Data\Trusteer\Rapport\store\exts\RapportMS\28896\RapportIaso.sys [15/08/2011 08:38 21520]
S1 MpKsl56ce2b3f;MpKsl56ce2b3f;\??\c:\windows\system32\MpEngineStore\MpKsl56ce2b3f.sys --> c:\windows\system32\MpEngineStore\MpKsl56ce2b3f.sys [?]
S1 MpKsl8b16be60;MpKsl8b16be60;\??\c:\windows\system32\MpEngineStore\MpKsl8b16be60.sys --> c:\windows\system32\MpEngineStore\MpKsl8b16be60.sys [?]
S1 MpKslfb1eeb2a;MpKslfb1eeb2a;\??\c:\windows\system32\MpEngineStore\MpKslfb1eeb2a.sys --> c:\windows\system32\MpEngineStore\MpKslfb1eeb2a.sys [?]
S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [26/09/2009 17:28 133104]
S3 gupdatem;Google Update Service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [26/09/2009 17:28 133104]
S3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\2.0.181\McCHSvc.exe [15/01/2010 12:49 227232]
S3 mfendisk;McAfee Core NDIS Intermediate Filter;c:\windows\system32\drivers\mfendisk.sys [30/05/2010 15:15 83856]
S3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys [30/05/2010 15:15 87656]
S3 se46bus;Sony Ericsson Device 070 driver (WDM);c:\windows\system32\drivers\se46bus.sys [22/02/2010 11:55 61536]
S3 WMZuneComm;Zune Windows Mobile Connectivity Service;c:\program files\Zune\WMZuneComm.exe [05/08/2011 12:30 268512]
.
--- Other Services/Drivers In Memory ---
.
*Deregistered* - mfeavfk01
.
Contents of the 'Scheduled Tasks' folder
.
2012-01-14 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2011-06-01 17:57]
.
2012-02-25 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-09-26 17:28]
.
2012-02-25 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-09-26 17:28]
.
2011-12-15 c:\windows\Tasks\McDefragTask.job
- c:\progra~1\mcafee\mqc\QcConsol.exe [2010-01-20 12:22]
.
2011-08-01 c:\windows\Tasks\McQcTask.job
- c:\progra~1\mcafee\mqc\QcConsol.exe [2010-01-20 12:22]
.
2012-02-25 c:\windows\Tasks\User_Feed_Synchronization-{DF8E2BEC-7A9C-4D85-9DC0-FDC10DEDCB66}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 04:31]
.
2012-02-19 c:\windows\Tasks\vtscheduletask.job
- c:\program files\McAfee\Supportability\MVT\MvtApp.exe [2010-11-07 14:25]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.co.uk/
Trusted Zone: internet
Trusted Zone: mcafee.com
TCP: Interfaces\{BDFDCEE7-68BD-4CF4-8DF5-8A48D1A001D6}: NameServer = 194.72.0.114 194.74.65.69
DPF: {83A4D5A6-E2C1-4EDD-AD48-1A1C50BD06EF} - hxxp://www.pitchero.com/profile/ImageUploader6.cab
.
- - - - ORPHANS REMOVED - - - -
.
SafeBoot-WudfPf
SafeBoot-WudfRd
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-02-25 23:21
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'winlogon.exe'(1004)
c:\program files\SUPERAntiSpyware\SASWINLO.DLL
c:\windows\system32\WININET.dll
.
Completion time: 2012-02-25 23:23:20
ComboFix-quarantined-files.txt 2012-02-25 23:23
.
Pre-Run: 65,615,478,784 bytes free
Post-Run: 65,691,045,888 bytes free
.
- - End Of File - - F7A70038F9E7FF454386D47DBE960527

Re-running ComboFix to remove infections:

• Close any open browsers.
  
• Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
  
• Open notepad and copy/paste the text in the quotebox below into it:
  

  
  KillAll::
  
  FireFox::
  Trusted Zone: internet
  Trusted Zone: mcafee.com
  
  DDS::
  Trusted Zone: internet
  Trusted Zone: mcafee.com
  
  

  
  
• Save this as CFScript.txt, in the same location as ComboFix.exe
  
  
  
  
• Referring to the picture above, drag CFScript into ComboFix.exe
  
• When finished, it shall produce a log for you at C:\ComboFix.txt
  
• I don't need to see the log from this script.
  

**********************************************************
SysProt Antirootkit

Download
SysProt Antirootkit from the link below (you will find it at the bottom
of the page under attachments, or you can get it from one of the
mirrors).

http://sites.google.com/site/sysprotantirootkit/

Unzip it into a folder on your desktop.
[list]
[*]Double click Sysprot.exe to start the program.
[*]Click on the Log tab.
[*]In the Write to log box select the following items.

• Process << Selected
  
• Kernel Modules << Selected
  
• SSDT << Selected
  
• Kernel Hooks << Selected
  
• IRP Hooks << NOT Selected
  
• Ports << NOT Selected
  
• Hidden Files << Selected
  

[*]At the bottom of the page

• Hidden Objects Only << Selected
  

[*]Click on the Create Log button on the bottom right.
[*]After a few seconds a new window should appear.
[*]Select Scan Root Drive. Click on the Start button.
[*]When it is complete a new window will appear to indicate that the scan is finished.
[*]The log will be saved automatically in the same folder Sysprot.exe was extracted to. Open the text file and copy/paste the log here.
[/list

NB When ComboFix ran , it again produced an error "pev.3XE failed", after Stage 2. When not reported the other 50 stages ran.
The SysProt log is:
SysProt AntiRootkit v1.0.1.0
by swatkat

******************************************************************************************
******************************************************************************************

No Hidden Processes found

******************************************************************************************
******************************************************************************************
Kernel Modules:
Module Name: Combo-Fix.sys
Service Name: ---
Module Base: B8108000
Module End: B8117000
Hidden: Yes

Module Name: \SystemRoot\System32\Drivers\dump_atapi.sys
Service Name: ---
Module Base: B45CA000
Module End: B45E2000
Hidden: Yes

Module Name: \SystemRoot\System32\Drivers\dump_WMILIB.SYS
Service Name: ---
Module Base: B8634000
Module End: B8636000
Hidden: Yes

Module Name: \??\C:\ComboFix\catchme.sys
Service Name: catchme
Module Base: B83C8000
Module End: B83D0000
Hidden: Yes

Module Name: \??\C:\WINDOWS\system32\Drivers\PROCEXP113.SYS
Service Name: ---
Module Base: B85C8000
Module End: B85CA000
Hidden: Yes

******************************************************************************************
******************************************************************************************
SSDT:
Function Name: ZwAssignProcessToJobObject
Address: B4765FC0
Driver Base: B4765000
Driver End: B478B000
Driver Name: \??\C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys

Function Name: ZwCreateFile
Address: B4766A56
Driver Base: B4765000
Driver End: B478B000
Driver Name: \??\C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys

Function Name: ZwCreateThread
Address: B495C5C0
Driver Base: B4938000
Driver End: B496E000
Driver Name: \??\C:\Documents and Settings\All Users.WINDOWS\Application Data\Trusteer\Rapport\store\exts\RapportCerberus\32029\RapportCerberus32_32029.sys

Function Name: ZwDeleteFile
Address: B4766BD4
Driver Base: B4765000
Driver End: B478B000
Driver Name: \??\C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys

Function Name: ZwDeleteKey
Address: B476A27C
Driver Base: B4765000
Driver End: B478B000
Driver Name: \??\C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys

Function Name: ZwDeleteValueKey
Address: B476A2AE
Driver Base: B4765000
Driver End: B478B000
Driver Name: \??\C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys

Function Name: ZwLoadKey
Address: B476A410
Driver Base: B4765000
Driver End: B478B000
Driver Name: \??\C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys

Function Name: ZwOpenFile
Address: B4766B2C
Driver Base: B4765000
Driver End: B478B000
Driver Name: \??\C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys

Function Name: ZwOpenProcess
Address: B4766104
Driver Base: B4765000
Driver End: B478B000
Driver Name: \??\C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys

Function Name: ZwOpenThread
Address: B47662F6
Driver Base: B4765000
Driver End: B478B000
Driver Name: \??\C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys

Function Name: ZwProtectVirtualMemory
Address: B4766428
Driver Base: B4765000
Driver End: B478B000
Driver Name: \??\C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys

Function Name: ZwQueryValueKey
Address: B476A386
Driver Base: B4765000
Driver End: B478B000
Driver Name: \??\C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys

Function Name: ZwRenameKey
Address: B476A2F0
Driver Base: B4765000
Driver End: B478B000
Driver Name: \??\C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys

Function Name: ZwReplaceKey
Address: B476A322
Driver Base: B4765000
Driver End: B478B000
Driver Name: \??\C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys

Function Name: ZwRestoreKey
Address: B476A354
Driver Base: B4765000
Driver End: B478B000
Driver Name: \??\C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys

Function Name: ZwSetContextThread
Address: B4765F66
Driver Base: B4765000
Driver End: B478B000
Driver Name: \??\C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys

Function Name: ZwSetInformationFile
Address: B4766C40
Driver Base: B4765000
Driver End: B478B000
Driver Name: \??\C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys

Function Name: ZwSetValueKey
Address: B476A214
Driver Base: B4765000
Driver End: B478B000
Driver Name: \??\C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys

Function Name: ZwSuspendThread
Address: B4765F02
Driver Base: B4765000
Driver End: B478B000
Driver Name: \??\C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys

Function Name: ZwTerminateProcess
Address: B4765E56
Driver Base: B4765000
Driver End: B478B000
Driver Name: \??\C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys

Function Name: ZwTerminateThread
Address: B4765E9E
Driver Base: B4765000
Driver End: B478B000
Driver Name: \??\C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys

******************************************************************************************
******************************************************************************************
Kernel Hooks:
Hooked Function: ZwYieldExecution
At Address: 8050225C
Jump To: B7EB853C
Module Name: C:\WINDOWS\system32\drivers\mfehidk.sys

Hooked Function: ZwUnmapViewOfSection
At Address: 805A83DA
Jump To: B7EB8568
Module Name: C:\WINDOWS\system32\drivers\mfehidk.sys

Hooked Function: ZwSetSecurityObject
At Address: 805B6114
Jump To: B7EB8528
Module Name: C:\WINDOWS\system32\drivers\mfehidk.sys

Hooked Function: ZwOpenThread
At Address: 805C1684
Jump To: B7EB849C
Module Name: C:\WINDOWS\system32\drivers\mfehidk.sys

Hooked Function: ZwOpenProcess
At Address: 805C13F8
Jump To: B7EB8488
Module Name: C:\WINDOWS\system32\drivers\mfehidk.sys

Hooked Function: ZwOpenKey
At Address: 8061C0CA
Jump To: B7EB84B0
Module Name: C:\WINDOWS\system32\drivers\mfehidk.sys

Hooked Function: ZwMapViewOfSection
At Address: 805A75C4
Jump To: B7EB8552
Module Name: C:\WINDOWS\system32\drivers\mfehidk.sys

Hooked Function: ZwCreateKey
At Address: 8061ACEC
Jump To: B7EB84C4
Module Name: C:\WINDOWS\system32\drivers\mfehidk.sys

******************************************************************************************
******************************************************************************************
IRP Hooks:
Hooked Module: C:\WINDOWS\system32\DRIVERS\kbdhid.sys
Hooked IRP: IRP_MJ_INTERNAL_DEVICE_CONTROL
Jump To: B811C810
Hooking Module: C:\WINDOWS\system32\drivers\RapportKELL.sys

******************************************************************************************
******************************************************************************************
Ports:
Local Address: YULES:27015
Remote Address: LOCALHOST:1035
Type: TCP
Process: C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
State: ESTABLISHED

Local Address: YULES:27015
Remote Address: 0.0.0.0:0
Type: TCP
Process: C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
State: LISTENING

Local Address: YULES:5354
Remote Address: LOCALHOST:1027
Type: TCP
Process: C:\Program Files\Bonjour\mDNSResponder.exe
State: ESTABLISHED

Local Address: YULES:5354
Remote Address: 0.0.0.0:0
Type: TCP
Process: C:\Program Files\Bonjour\mDNSResponder.exe
State: LISTENING

Local Address: YULES:5152
Remote Address: LOCALHOST:1608
Type: TCP
Process: C:\Program Files\Java\jre6\bin\jqs.exe
State: CLOSE_WAIT

Local Address: YULES:5152
Remote Address: 0.0.0.0:0
Type: TCP
Process: C:\Program Files\Java\jre6\bin\jqs.exe
State: LISTENING

Local Address: YULES:1035
Remote Address: LOCALHOST:27015
Type: TCP
Process: C:\Program Files\iTunes\iTunesHelper.exe
State: ESTABLISHED

Local Address: YULES:1031
Remote Address: 0.0.0.0:0
Type: TCP
Process: C:\WINDOWS\system32\alg.exe
State: LISTENING

Local Address: YULES:1027
Remote Address: LOCALHOST:5354
Type: TCP
Process: C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
State: ESTABLISHED

Local Address: YULES:NETBIOS-SSN
Remote Address: 0.0.0.0:0
Type: TCP
Process: C:\WINDOWS\system32\svchost.exe
State: LISTENING

Local Address: YULES:6646
Remote Address: 0.0.0.0:0
Type: TCP
Process: C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
State: LISTENING

Local Address: YULES:3389
Remote Address: 0.0.0.0:0
Type: TCP
Process: C:\WINDOWS\system32\svchost.exe
State: LISTENING

Local Address: YULES:MICROSOFT-DS
Remote Address: 0.0.0.0:0
Type: TCP
Process: System
State: LISTENING

Local Address: YULES:EPMAP
Remote Address: 0.0.0.0:0
Type: TCP
Process: C:\WINDOWS\system32\svchost.exe
State: LISTENING

Local Address: YULES:5353
Remote Address: NA
Type: UDP
Process: C:\Program Files\Bonjour\mDNSResponder.exe
State: NA

Local Address: YULES:1900
Remote Address: NA
Type: UDP
Process: C:\WINDOWS\system32\svchost.exe
State: NA

Local Address: YULES:1192
Remote Address: NA
Type: UDP
Process: C:\Program Files\Internet Explorer\iexplore.exe
State: NA

Local Address: YULES:1129
Remote Address: NA
Type: UDP
Process: C:\Program Files\Internet Explorer\iexplore.exe
State: NA

Local Address: YULES:1039
Remote Address: NA
Type: UDP
Process: C:\Program Files\Internet Explorer\iexplore.exe
State: NA

Local Address: YULES:1037
Remote Address: NA
Type: UDP
Process: C:\Program Files\iTunes\iTunesHelper.exe
State: NA

Local Address: YULES:1036
Remote Address: NA
Type: UDP
Process: C:\Program Files\iTunes\iTunesHelper.exe
State: NA

Local Address: YULES:1026
Remote Address: NA
Type: UDP
Process: C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
State: NA

Local Address: YULES:1025
Remote Address: NA
Type: UDP
Process: C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
State: NA

Local Address: YULES:123
Remote Address: NA
Type: UDP
Process: C:\WINDOWS\system32\svchost.exe
State: NA

Local Address: YULES:1900
Remote Address: NA
Type: UDP
Process: C:\WINDOWS\system32\svchost.exe
State: NA

Local Address: YULES:138
Remote Address: NA
Type: UDP
Process: C:\WINDOWS\system32\svchost.exe
State: NA

Local Address: YULES:NETBIOS-NS
Remote Address: NA
Type: UDP
Process: C:\WINDOWS\system32\svchost.exe
State: NA

Local Address: YULES:123
Remote Address: NA
Type: UDP
Process: C:\WINDOWS\system32\svchost.exe
State: NA

Local Address: YULES:4500
Remote Address: NA
Type: UDP
Process: C:\WINDOWS\system32\lsass.exe
State: NA

Local Address: YULES:1900
Remote Address: NA
Type: UDP
Process: C:\Program Files\Zune\ZuneBusEnum.exe
State: NA

Local Address: YULES:1028
Remote Address: NA
Type: UDP
Process: C:\Program Files\Bonjour\mDNSResponder.exe
State: NA

Local Address: YULES:500
Remote Address: NA
Type: UDP
Process: C:\WINDOWS\system32\lsass.exe
State: NA

Local Address: YULES:MICROSOFT-DS
Remote Address: NA
Type: UDP
Process: System
State: NA

******************************************************************************************
******************************************************************************************
Hidden files/folders:
Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\0QW00AP0\76260bf9437e;ord=07JWR9002B9G0PZ4JBQT;s=173;s=85;s=82;s=36;s=96;s=199;s=25;s=196;s=104;s=k85;s=k96;s=k25;s=k196;s=k104;s=m4;s=m1;z=912;z=905;z=896;tile
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\0QW00AP0\AAAAAAADEjwIAAAAAAAIAAgAAAAAAlBWZpyUBAAAAAAAAAABHcpYESXgzAAAAAAIAAAAAAAAgzqQAAAAAAAAAAAAAAAAAfANJeDMAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2F
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\0QW00AP0\AAAAAAADEjwIAAAAAAAIAAgAAAAAAlokrriUBAAAAAAAAAABHcpYEqREzAAAAAAIAAAAAAAAgzqQAAAAAAAAAAAAAAAAAfAOpETMAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2F
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\0QW00AP0\AAAIAAgAAAAAA.uTgqyUBAAAAAAAAADE0NzI2MmJhLWVkNWMtMTFkZS1iZTVjLTAwMWQwOTYzZWM2MwDDZgAAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\0QW00AP0\AAAIAAgAAAAAA.YyDmSUBAAAAAAAAAGI2MzRjNzllLWVhOGUtMTFkZS1hNmJkLTAwMWQwOTYzZjJiZQBllioAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\0QW00AP0\AAAIAAgAAAAAA1YYgriUBAAAAAAAAAGVhMTQzZTk2LWVkYjMtMTFkZS04ZDFiLTAwMWUwYjVhMDQzOABllioAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\0QW00AP0\AAAIAAgAAAAAA4Q8AmSUBAAAAAAAAAGE1ZWRhMTllLWVhN2EtMTFkZS04MTNiLTAwMWNjNGZhY2UzYQBllioAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\0QW00AP0\AAAIAAgAAAAAA7EJWmSUBAAAAAAAAAGNkMTc5MTAwLWVhODctMTFkZS1iMzk4LTAwMWNjNGZhY2U5YwBllioAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\0QW00AP0\AAAIAAgAAAAAAa2fFmSUBAAAAAAAAAGMyOTkyMWE2LWVhOTgtMTFkZS05NWMyLTAwMWQwOTYzZWU1ZAAQwisAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\0QW00AP0\AAAIAAgAAAAAAfBcepiUBAAAAAAAAADBhZjZhMzE4LWVjN2ItMTFkZS05NDE4LTAwMWNjNDNjOWViYQBBUAAAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\0QW00AP0\AAAIAAgAAAAAAfzPfniUBAAAAAAAAADAyNGNkYjY4LWViNjAtMTFkZS04ZWI0LTAwMWUwYjVhMjBmZgCgICsAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\0QW00AP0\AAAIAAgAAAAAAGMuGmSUBAAAAAAAAADM0ZGVhNzQwLWVhOGYtMTFkZS1hNzFiLTAwMWQwOTYzZWIxOQBllioAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\0QW00AP0\AAAIAAgAAAAAAM6nvqyUBAAAAAAAAADU1NDJhZjc4LWVkNWUtMTFkZS04M2EwLTAwMWQwOTYzZjc2ZgCAvisAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\0QW00AP0\AAAIAAgAAAAAAqh0dmSUBAAAAAAAAADE0ZDgwNmMyLWVhN2YtMTFkZS05NjBiLTAwMWQwOTYzZWIxOQBiXQAAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\0QW00AP0\AAAIAAgAAAAAAqnnWniUBAAAAAAAAAGFkNzFkYjMwLWViNWUtMTFkZS1iNTg0LTAwMWQwOTYzZWZjYQBllioAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\0QW00AP0\AAAIAAgAAAAAAqTm.mSUBAAAAAAAAAGQxM2RhZGE0LWVhOTctMTFkZS04MTRiLTAwMWQwOTYzZWE3NACCVgAAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\0QW00AP0\AAAIAAgAAAAAARGzAmSUBAAAAAAAAADAwMDY4MjE0LWVhOTgtMTFkZS1iMDkzLTAwMWUwYjVhMzIwYQBllioAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\0QW00AP0\AAAIAAgAAAAAARNCnmSUBAAAAAAAAADNlYjhiM2M4LWVhOTQtMTFkZS05ODMwLTAwMWNjNGZiOTBmYQBllioAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\0QW00AP0\AAAIAAgAAAAAAT4C9mSUBAAAAAAAAADhkZTU3MmU0LWVhOTctMTFkZS1iZjhmLTAwMWQwOTYzZWRmNgBllioAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\0QW00AP0\AAAIAAgAAAAAAUjSmrCUBAAAAAAAAADJmZGQxZTgyLWVkN2EtMTFkZS05YWI4LTAwMWVjOWI0MWZiNwBllioAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\0QW00AP0\AAAIAAgAAAAAAVAfbpiUBAAAAAAAAAGRmNGY5YmU0LWVjOTctMTFkZS1hMjJmLTAwMWUwYjVhMjBiMQBllioAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\0QW00AP0\AAAIAAgAAAAAAVEzkqyUBAAAAAAAAADk5NjZmYjdhLWVkNWMtMTFkZS05ODQ0LTAwMWUwYjVhMDQxYQBllioAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\0QW00AP0\AAAIAAgAAAAAAW1BdpyUBAAAAAAAAAGMwOTQ0YzcyLWVjYWItMTFkZS04OTE5LTAwMWQwOTYzZTk3MABARgAAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\0QW00AP0\dP.mCUBAAAAAAAAADljYzA1MDk0LWVhN2EtMTFkZS05MWZmLTAwMWUwYjVhMDRmOABllioAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3Dcp1252,;ord=1
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\0QW00AP0\ote%2013];u15=[P%20Quote%2014];u16=[P%20Quote%2015];u17=[P%20Quote%2016];u18=[P%20Quote%2017];u19=[P%20Quote%2018];u20=[P%20Quote%2019];ord=62440602516
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\0QW00AP0\st&18=manchester&24=europe&25=medium&26=PVT&erightsid=null&tile=1261077967656&ind=undefined&wrap=null&leaderserved=1&rsi=,J07717_10555,&asset=story&ref
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\1K33BUMV\AAAAAAADEjwIAAAAAAAIAAgAAAAAAabx7DSYBAAAAAAAAAABP2pYEeVs9AAAAAAIAAAAAAAAgzqQAAAAAAAAAAAAAAAAAfAN5Wz0AAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2F
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\1K33BUMV\AAAAAAADEjwIAAAAAAAIAAgAAAAAAar.PDSYBAAAAAAAAAABP2pYESSo1AAAAAAIAAAAAAAAgzqQAAAAAAAAAAAAAAAAAfANJKjUAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2F
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\1K33BUMV\AAAAAAADEjwIAAAAAAAIAAgAAAAAAFy8qDSYBAAAAAAAAAABP2pYESY02AAAAAAIAAAAAAAAgzqQAAAAAAAAAAAAAAAAAfANJjTYAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2F
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\1K33BUMV\AAAIAAgAAAAAAK6W6DCYBAAAAAAAAADRlNTUyY2E4LWZjMjMtMTFkZS04Yjc5LTAwMWUwYjVhMDFkZAACXgAAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\1K33BUMV\AAAIAAgAAAAAAwNB5DSYBAAAAAAAAADc5ZWJhYzQ0LWZjNDAtMTFkZS05NTg2LTAwMWQwOTYzZDkwOQBQyysAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\1K33BUMV\QKCDSYBAAAAAAAAAGI5ZjgyNmQ2LWZjNDEtMTFkZS1hZWY4LTAwMWVjOWIzYjU0YwAQfSsAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3Dcp1252,;ord=1
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\1Q9VB64H\AAAIAAgAAAAAAEeo-DSYBAAAAAAAAADdkMTg5MWQ4LWZjMzctMTFkZS04NDUyLTAwMWQwOTYzZWYyMABllioAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\1Q9VB64H\AAAIAAgAAAAAASg74DiYBAAAAAAAAAGNkMmY4ZTIyLWZjN2EtMTFkZS1hM2M2LTAwMWQwOTYzZTg3NgBhTgAAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\1Q9VB64H\AAAIAAgAAAAAAvTMrDSYBAAAAAAAAADdiMTY1OWE0LWZjMzQtMTFkZS04Yzk4LTAwMWNjNDEwYzk4ZgAiVwAAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\1Q9VB64H\B6CDSYBAAAAAAAAAGJlM2YwM2E0LWZjNDEtMTFkZS1iNmQ3LTAwMWUwYjVhMDE4YgBllioAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3Dcp1252,;ord=1
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\29T2HB2X\AAAAAAADEjwIAAAAAAAIAAgAAAAAAnMXODSYBAAAAAAAAAABP2pYEeTE-AAAAAAIAAAAAAAAgzqQAAAAAAAAAAAAAAAAAfAN5MT4AAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2F
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\29T2HB2X\AAAIAAgAAAAAAbIqiDiYBAAAAAAAAAGMwYzA3MTcyLWZjNmQtMTFkZS1iZmQxLTAwMWNjNDEwOWE4ZQDEawAAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\29T2HB2X\ZeBDSYBAAAAAAAAAGE5YTIwYTRhLWZjNDEtMTFkZS05MTMwLTAwMWI3OGQyY2M2YwDiWgAAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3Dcp1252,;ord=1
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\3EVMCX3A\AAAAAAADEjwIAAAAAAAIAAgAAAAAACMkLDSYBAAAAAAAAAABP2pYE-VQ7AAAAAAIAAAAAAAAgzqQAAAAAAAAAAAAAAAAAfAP5VDsAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2F
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\3EVMCX3A\AAAIAAgAAAAAAWqB5DSYBAAAAAAAAADcyODkyNTU4LWZjNDAtMTFkZS1iYjZkLTAwMWNjNDEwZjcxMADwvysAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\3EVMCX3A\AAAIAAgAAAAAAX9wBDSYBAAAAAAAAADJjMzE5ZDg2LWZjMmUtMTFkZS1iODdiLTAwMWQwOTYzZTNhNwBCWgAAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\3EVMCX3A\AAAIAAgAAAAAAyz8eDSYBAAAAAAAAADgxMWQzMTllLWZjMzItMTFkZS1hYWRmLTAwMWVjOWIzODJlYwDjZAAAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\4DXHH5TX\AAAAAAADEjwIAAAAAAAIAAgAAAAAAiNZ7DSYBAAAAAAAAAABP2pYEqbo-AAAAAAIAAAAAAAAgzqQAAAAAAAAAAAAAAAAAfAOpuj4AAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2F
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\4DXHH5TX\AAAAAAADEjwIAAAAAAAIAAgAAAAAAMEOtDCYBAAAAAAAAAABP2pYEuQg0AAAAAAIAAAAAAAAgzqQAAAAAAAAAAAAAAAAAfAO5CDQAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2F
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\4DXHH5TX\AAAAAAADEjwIAAAAAAAIAAgAAAAAAP.cBDSYBAAAAAAAAAAAAAK59XQAAAAAAAAIAAAAAAAAgzqQAAAAAAAAAAAAAAAAAfAMJUzUAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2F
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\D5OXPMBV\AAAAAAADEjwIAAAAAAAIAAgAAAAAAphu6DSYBAAAAAAAAAABP2pYECb87AAAAAAIAAAAAAAAgzqQAAAAAAAAAAAAAAAAAfAMJvzsAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2F
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\D5OXPMBV\AAAIAAgAAAAAAbBzPDSYBAAAAAAAAADdkYzc5ZDY2LWZjNGQtMTFkZS04MzdhLTAwMWQwOTYzZjE5ZQCAwisAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\D5OXPMBV\AAAIAAgAAAAAAdZAWDSYBAAAAAAAAADU0ZWMzNDg2LWZjMzEtMTFkZS1iMmZjLTAwMWUwYjVhMjA3YgBjZwAAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\D5OXPMBV\AAAIAAgAAAAAAOL8rDSYBAAAAAAAAADkwNWVjODgyLWZjMzQtMTFkZS04YTQ4LTAwMWNjNDEwZDY4NgCBUQAAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\GL5C3FB9\AAAAAAADEjwIAAAAAAAIAAgAAAAAAeO55DiYBAAAAAAAAAABP2pYEKRs1AAAAAAIAAAAAAAAgzqQAAAAAAAAAAAAAAAAAfAMpGzUAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2F
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\GL5C3FB9\AAAIAAgAAAAAA5il6DSYBAAAAAAAAADg3ODVmNjcwLWZjNDAtMTFkZS1iMjlhLTAwMWQwOTYzZjBkYgBllioAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\GL5C3FB9\AAAIAAgAAAAAAdF6tDCYBAAAAAAAAADQ3YmFkYzUwLWZjMjEtMTFkZS1hZjA0LTAwMWNjNDEwY2E2ZABllioAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\GL5C3FB9\AAAIAAgAAAAAAKT74DiYBAAAAAAAAAGQ0N2Q3OGUyLWZjN2EtMTFkZS1iZTUxLTAwMWVjOWI0MjgxMwCAeCsAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\GL5C3FB9\D6ADSYBAAAAAAAAADc1MDg2MWU0LWZjNDEtMTFkZS04OTZjLTAwMWNjNGZhNmViOADEawAAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3Dcp1252,;ord=1
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\GL5C3FB9\dJ.DSYBAAAAAAAAADY0OWJkMDY2LWZjNDEtMTFkZS05NWVmLTAwMWNjNGZiNTBiMgBllioAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3Dcp1252,;ord=1
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\H1XZ6KH2\AAAAAAADEjwIAAAAAAAIAAgAAAAAA8s71DiYBAAAAAAAAAABP2pZ01ZYqAAAAAAIAAAAAAAAgzqQAAAAAAAAAAAAAAAAAfHPVlioAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2F
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\H1XZ6KH2\AAAAAAADEjwIAAAAAAAIAAgAAAAAAltJ5DSYBAAAAAAAAAABP2pYEyew6AAAAAAIAAAAAAAAgzqQAAAAAAAAAAAAAAAAAfAPJ7DoAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2F
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\H1XZ6KH2\AAAIAAgAAAAAAL.YBDSYBAAAAAAAAADMwMjFlMDkwLWZjMmUtMTFkZS05OGY1LTAwMWNjNGZhY2U5YwCEagAAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\MN1DW8WX\AAAAAAADEjwIAAAAAAAIAAgAAAAAAI5yrDCYBAAAAAAAAAABP2pYESXgzAAAAAAIAAAAAAAAgzqQAAAAAAAAAAAAAAAAAfANJeDMAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2F
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\MN1DW8WX\AAAAAAADEjwIAAAAAAAIAAgAAAAAAuMErDSYBAAAAAAAAAABP2pYEGVM7AAAAAAIAAAAAAAAgzqQAAAAAAAAAAAAAAAAAfAMZUzsAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2F
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\MN1DW8WX\AAAAAAADEjwIAAAAAAAIAAgAAAAAAUR7PDSYBAAAAAAAAAABP2pYEyeg-AAAAAAIAAAAAAAAgzqQAAAAAAAAAAAAAAAAAfAPJ6D4AAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2F
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\POKSWDT2\AAAAAAADEjwIAAAAAAAIAAgAAAAAAfwGADSYBAAAAAAAAAABP2pYEuT83AAAAAAIAAAAAAAAgzqQAAAAAAAAAAAAAAAAAfAO5PzcAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2F
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\POKSWDT2\AAAAAAADEjwIAAAAAAAIAAgAAAAAArugVDSYBAAAAAAAAAABP2pYEuT83AAAAAAIAAAAAAAAgzqQAAAAAAAAAAAAAAAAAfAO5PzcAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2F
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\POKSWDT2\AAAIAAgAAAAAA2LvPDSYBAAAAAAAAADk2MWIwMGQ4LWZjNGQtMTFkZS04NTRhLTAwMWNjNDNjOWVkYQBllioAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\POKSWDT2\AAAIAAgAAAAAA5L0VDSYBAAAAAAAAADM0Y2FmZjhlLWZjMzEtMTFkZS1hZmQ5LTAwMWQwOTYzZTNiMQAARQAAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\POKSWDT2\AAAIAAgAAAAAA7bl7DSYBAAAAAAAAAGM0OTAxN2VlLWZjNDAtMTFkZS1hNjAxLTAwMWUwYjg0M2ZkOABllioAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\POKSWDT2\AAAIAAgAAAAAADUEtDSYBAAAAAAAAAGNiM2U2YzVhLWZjMzQtMTFkZS05ZmVmLTAwMWQwOTYzZWJhYQACWQAAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\XS7LWWH2\AAAAAAADEjwIAAAAAAAIAAgAAAAAA.eJ-DSYBAAAAAAAAAABP2pYEOWg2AAAAAAIAAAAAAAAgzqQAAAAAAAAAAAAAAAAAfAM5aDYAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2F
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\XS7LWWH2\AAAAAAADEjwIAAAAAAAIAAgAAAAAAAjN.DSYBAAAAAAAAAABP2pYEeX0yAAAAAAIAAAAAAAAgzqQAAAAAAAAAAAAAAAAAfAN5fTIAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2F
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\XS7LWWH2\AAAAAAADEjwIAAAAAAAIAAgAAAAAAC0IeDSYBAAAAAAAAAABP2pYEuU8yAAAAAAIAAAAAAAAgzqQAAAAAAAAAAAAAAAAAfAO5TzIAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2F
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\XS7LWWH2\AAAAAAADEjwIAAAAAAAIAAgAAAAAAiKJ5DSYBAAAAAAAAAABP2pYE2Tc0AAAAAAIAAAAAAAAgzqQAAAAAAAAAAAAAAAAAfAPZNzQAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2F
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\XS7LWWH2\AAAAAAADEjwIAAAAAAAIAAgAAAAAAw94BDSYBAAAAAAAAAABP2pYEudk3AAAAAAIAAAAAAAAgzqQAAAAAAAAAAAAAAAAAfAO52TcAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2F
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\XS7LWWH2\AAAIAAgAAAAAAFucVDSYBAAAAAAAAADNiMTQxYmM4LWZjMzEtMTFkZS1hZTUyLTAwMWUwYjVhMDQyOADgRgAAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\XS7LWWH2\AAAIAAgAAAAAAqB8DDSYBAAAAAAAAADVkODVlODFhLWZjMmUtMTFkZS05ZTFmLTAwMWNjNGZiYzA0MgBCXwAAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\XS7LWWH2\AAAIAAgAAAAAAzIWtDCYBAAAAAAAAADRkYmJkNzhhLWZjMjEtMTFkZS04Yzk1LTAwMWQwOTYzZTE2YwAhTQAAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\ZVXABFTT\AAAAAAADEjwIAAAAAAAIAAgAAAAAA.B-CDSYBAAAAAAAAAABP2pYEaUQ4AAAAAAIAAAAAAAAgzqQAAAAAAAAAAAAAAAAAfANpRDgAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2F
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\ZVXABFTT\AAAAAAADEjwIAAAAAAAIAAgAAAAAAJxD4DiYBAAAAAAAAAAAAAK59XQAAAAAAAAIAAAAAAAAgzqQAAAAAAAAAAAAAAAAAfANZ.D4AAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2F
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\ZVXABFTT\AAAAAAADEjwIAAAAAAAIAAgAAAAAAtDUrDSYBAAAAAAAAAAAAAJYE6a03AAAAAAIAAAAAAAAgzqQAAAAAAAAAAAAAAAAAfAPprTcAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2F
Status: Hidden

Object: C:\Documents and Settings\Arnie Yule delet\Local Settings\Temporary Internet Files\Content.IE5\ZVXABFTT\AAAIAAgAAAAAADWAWDSYBAAAAAAAAADRkODk2MmE0LWZjMzEtMTFkZS05ZGM2LTAwMWUwYjVhMDM1ZQCjaAAAAAA=,,http%3A%2F%2Fuk.mc263.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3
Status: Hidden

Object: C:\Qoobox\BackEnv\AppData.folder.dat
Status: Access denied

Object: C:\Qoobox\BackEnv\Cache.folder.dat
Status: Access denied

Object: C:\Qoobox\BackEnv\Cookies.folder.dat
Status: Access denied

Object: C:\Qoobox\BackEnv\Desktop.folder.dat
Status: Access denied

Object: C:\Qoobox\BackEnv\Favorites.folder.dat
Status: Access denied

Object: C:\Qoobox\BackEnv\History.folder.dat
Status: Access denied

Object: C:\Qoobox\BackEnv\LocalAppData.folder.dat
Status: Access denied

Object: C:\Qoobox\BackEnv\LocalSettings.folder.dat
Status: Access denied

Object: C:\Qoobox\BackEnv\Music.folder.dat
Status: Access denied

Object: C:\Qoobox\BackEnv\NetHood.folder.dat
Status: Access denied

Object: C:\Qoobox\BackEnv\Personal.folder.dat
Status: Access denied

Object: C:\Qoobox\BackEnv\Pictures.folder.dat
Status: Access denied

Object: C:\Qoobox\BackEnv\PrintHood.folder.dat
Status: Access denied

Object: C:\Qoobox\BackEnv\Profiles.Folder.dat
Status: Access denied

Object: C:\Qoobox\BackEnv\Profiles.Folder.folder.dat
Status: Access denied

Object: C:\Qoobox\BackEnv\Programs.folder.dat
Status: Access denied

Object: C:\Qoobox\BackEnv\Recent.folder.dat
Status: Access denied

Object: C:\Qoobox\BackEnv\SendTo.folder.dat
Status: Access denied

Object: C:\Qoobox\BackEnv\SetPath.bat
Status: Access denied

Object: C:\Qoobox\BackEnv\StartMenu.folder.dat
Status: Access denied

Object: C:\Qoobox\BackEnv\StartUp.folder.dat
Status: Access denied

Object: C:\Qoobox\BackEnv\SysPath.dat
Status: Access denied

Object: C:\Qoobox\BackEnv\Templates.folder.dat
Status: Access denied

Object: C:\Qoobox\BackEnv\VikPev00
Status: Access denied

END_______

How's your computer working now?

Clean out your temporary internet files and temp files.

Download TFC by OldTimer to your desktop.

Double-click TFC.exe to run it.

Note: If you are running on Vista, right-click on the file and choose Run As Administrator

TFC will close all programs when run, so make sure you have saved all your work before you begin.

* Click the Start button to begin the cleaning process.
* Depending on how often you clean temp files, execution time should be anywhere from a few seconds to a minute or two.
* Please let TFC run uninterrupted until it is finished.

Once TFC is finished it should restart your computer. If it does not, please manually restart the computer yourself to ensure a complete cleaning.
*******************************************************
I'd like to scan your machine with ESET OnlineScan

•Hold down Control and click on the following link to open ESET OnlineScan in a new window.
ESET OnlineScan
•Click the button.
•For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)

• Click on to download the ESET Smart Installer. Save it to your desktop.
  
• Double click on the icon on your desktop.
  

•Check
•Click the button.
•Accept any security warnings from your browser.
•Check
•Push the Start button.
•ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
•When the scan completes, push
•Push , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
•Push the button.
•Push
A log file will be saved here: C:\Program Files\ESET\ESET Online Scanner\log.txt

fyi, I ran CCleaner last night before OTC.
I have not had the initial virus since the first scan at the start of this process. But today we got 2 "delicious.aurella would like to add you to his or her online contact list".
OTC cleared lots of files, before the last of the 3 requersts todfay.
ESET ran and found zero; there is no log to enter here..

Please update and run SAS and MBAM again and post the logs.

The SAS log is:
SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 02/29/2012 at 00:30 AM

Application Version : 5.0.1144

Core Rules Database Version : 8286
Trace Rules Database Version: 6098

Scan type : Complete Scan
Total Scan Time : 01:51:55

Operating System Information
Windows XP Home Edition 32-bit, Service Pack 3 (Build 5.01.2600)
Administrator

Memory items scanned : 518
Memory threats detected : 0
Registry items scanned : 34128
Registry threats detected : 0
File items scanned : 107691
File threats detected : 1

Adware.Tracking Cookie
C:\Documents and Settings\Yule family\Cookies\TRXFEEKN.txt [ /adserver2.pitchero.com
NB I know the pitchero site.

After completing SAS, I got a messsage from delicious.janella. NB I also got one on my work PC - separate location / network entirely.

The MBAM log is:
Malwarebytes Anti-Malware 1.60.1.1000
www.malwarebytes.org

Database version: v2012.02.29.07

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Yule family :: YULES [administrator]

29/02/2012 23:38:11
mbam-log-2012-02-29 (23-38-11).txt

Scan type: Full scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 385951
Time elapsed: 2 hour(s), 2 minute(s), 15 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 1
HKCU\SOFTWARE|24d1ca9a-a864-4f7b-86fe-495eb56529d8 (Malware.Trace) -> Data: -> Quarantined and deleted successfully.

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)

Could you please run the ESET scan and post the log?

I ran ESET, and found zero threats.
And afterwards got a "delicious.janella request"!
How can this occur on two different machines, without being related to a common factor, and that most likely would be Yahoo?

All those requests you're receiving on Yahoo mail do not look like a virus. If it is, it's a new one to me.

And afterwards got a "delicious.janella request"!
How can this occur on two different machines, without being related to a common factor, and that most likely would be Yahoo?.

I believe the problem is with Yahoo mail. Why don't you block them?

Hi
I have - I think - blocked them.
And I believe that you have de-virused my PC; so it is unlikely to be the source of the problem.
The request has not re-appeared in the last 24 hours. So I am happy to close this thread . If it does reappear and I can't resolve it via Yahoo, I guess I'll have to come back for some other advice!
thanks for your efforts. and assitance.

We should do some cleanup before you go.

To uninstall ComboFix

• Click the Start button. Click Run. For Vista: type in Run in the Start search, and click on Run in the results pane.
  
• In the field, type in ComboFix /uninstall
  

(Note: Make sure there's a space between the word ComboFix and the forward-slash.)

• Then, press Enter, or click OK.
  
• This will uninstall ComboFix, delete its folders and files, hides System files and folders, and resets System Restore.
  

*************************************************
Use the Secunia Software Inspector to check for out of date software.

•Click Start Now

•Check the box next to Enable thorough system inspection.

•Click Start

•Allow the scan to finish and scroll down to see if any updates are needed.
•Update anything listed.
.
----------

Go to Microsoft Windows Update and get all critical updates.

----------

I suggest using WOT - Web of Trust. WOT is a free Internet security addon for your browser. It will keep you safe from online scams, identity theft, spyware, spam, viruses and unreliable shopping sites. WOT warns you before you interact with a risky website. It's easy and it's free.

SpywareBlaster- Secure your Internet Explorer to make it harder for ActiveX programs to run on your computer. Also stop certain cookies from being added to your computer when running Mozilla based browsers like Firefox.
* Using SpywareBlaster to protect your computer from Spyware and Malware
* If you don't know what ActiveX controls are, see here

Protect yourself against spyware using the Immunize feature in Spybot - Search & Destroy. Guide: Use Spybot's Immunize Feature to prevent spyware infection in real-time. Note: To ensure you have the latest Immunizations always update Spybot - Search & Destroy before Immunizing. Spybot - Search & Destroy FAQ

Check out Keeping Yourself Safe On The Web for tips and free tools to help keep you safe in the future.

Also see Slow Computer? It may not be Malware for free cleaning/maintenance tools to help keep your computer running smoothly.
Safe Surfing!

Thannks for these suggestions. I am working my way through them. Specifically, I have uninstalled Combofix, and run Secunia (several times) and Microsoft Windows.

As a result I have some queries:

1 Secunia continually finds the need to do 3 updates:
- Macromedia Floash v4.0.7.0 upgrade to v10
- Macromedia Flash v7.0.11.0 to v10.x
- a whole series of Windows upgrades.
But I have run Microsoft Upgrade, and fully upgraded; so now, MS Upgrade shows that my system is uptodate. And I have tried to upgrade Flash 2 or 3 times.
Can Secunia be out of sync? And why does it find 2 versions of Flash?

2 In amongst these upgrades, I was prompted by Adobe to check my system. This ran SCUDownloader, which found 296 Registry problems (even after I had run Ccleaner), and some other issues. I didn't take their automatic correction. Should I trust SCU Downloader? And/or should I wait until after I had followed all your earlier suggestions.

3 My wife was prompted by McAfee that they had blocked a "risky connection", IP address 91.217.1784, program system. Does that mean anything , or do I just be grateful that they have blocked something and move on?!

4 "madam_lovey" is now sending me online contact requests!! So I will add her to my blocking list! But is there something that additional that I should be doing, eg with Yahoo?

Thanks, as ever.

Can Secunia be out of sync?

Yes, that's possible. It's just to make sure that all your programs are up-to-date. Malware just loves out-of-date programs.

In amongst these upgrades, I was prompted by Adobe to check my system. This ran SCUDownloader, which found 296 Registry problems (even after I had run Ccleaner), and some other issues. I didn't take their automatic correction. Should I trust SCU Downloader? And/or should I wait until after I had followed all your earlier suggestions.

SCU could be a malicious program. Don't trust it.

My wife was prompted by McAfee that they had blocked a "risky connection", IP address 91.217.1784, program system. Does that mean anything , or do I just be grateful that they have blocked something and move on?!

It's doing what you paid for.

madam_lovey" is now sending me online contact requests!! So I will add her to my blocking list! But is there something that additional that I should be doing, eg with Yahoo?

The only thing I can think of is to keep blocking them. Are you using WOT?