WiredWX Hobby Weather ToolsLog in

 


windows virtual memory to low

2 posters

descriptionwindows virtual memory to low Emptywindows virtual memory to low

more_horiz
Hi
I got this pop up, i checked my virtual memory and firefox and ekin.exe were hogging the memory. I did a search and couldn't find ekin.exe in my computer. Is it a virus? Running windows xp.
thankspdog

descriptionwindows virtual memory to low EmptyRe: windows virtual memory to low

more_horiz
Hi there! Welcome back to the forums.

Please visit this webpage for a tutorial on downloading and running ComboFix:

http://www.bleepingcomputer.com/combofix/how-to-use-combofix

See the area: Using ComboFix, and when done, post the log back here.

descriptionwindows virtual memory to low EmptyRe: windows virtual memory to low

more_horiz
ok, i have been using combo fix for quite awhile now, i will run it tonight and post the log. Is there a log somewhere saved from the last time i ran combo fix?

descriptionwindows virtual memory to low EmptyRe: windows virtual memory to low

more_horiz
c:\combofix.txt

Post the log when you can.

Also, it is dangerous to run ComboFix anytime you want to. Should only be done under guidance of malware remover, such as myself.

descriptionwindows virtual memory to low EmptyRe: windows virtual memory to low

more_horiz
oh, ok i didn't no that. Heres the log:

ComboFix 12-07-07.04 - Boyd 07/07/2012 10:19:36.13.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.959.542 [GMT -6:00]
Running from: c:\documents and settings\Boyd\Desktop\ComboFix.exe
AV: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\Boyd\Application Data\PriceGong
c:\documents and settings\Boyd\Application Data\PriceGong\Data\1.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\4489.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\450.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\a.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\b.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\c.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\d.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\e.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\f.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\g.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\h.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\i.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\j.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\k.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\l.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\m.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\mru.xml
c:\documents and settings\Boyd\Application Data\PriceGong\Data\n.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\o.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\p.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\q.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\r.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\s.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\t.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\u.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\v.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\w.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\wlu.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\x.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\y.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\z.txt
.
.
((((((((((((((((((((((((( Files Created from 2012-06-07 to 2012-07-07 )))))))))))))))))))))))))))))))
.
.
2012-06-15 00:42 . 2012-06-15 00:42 -------- d-----w- c:\documents and settings\Boyd\Application Data\HD Tune Pro
2012-06-15 00:42 . 2012-06-15 00:42 -------- d-----w- c:\program files\HD Tune Pro
2012-06-13 00:43 . 2012-06-13 00:43 421200 ----a-w- c:\program files\Mozilla Firefox\msvcp100.dll
2012-06-13 00:43 . 2012-06-13 00:43 770384 ----a-w- c:\program files\Mozilla Firefox\msvcr100.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-06-04 23:35 . 2009-08-07 01:23 222448 ----a-w- c:\windows\system32\muweb.dll
2012-06-02 21:19 . 2007-04-17 05:44 22040 ----a-w- c:\windows\system32\wucltui.dll.mui
2012-06-02 21:19 . 2007-07-06 18:23 329240 ----a-w- c:\windows\system32\wucltui.dll
2012-06-02 21:19 . 2007-07-06 18:23 219160 ----a-w- c:\windows\system32\wuaucpl.cpl
2012-06-02 21:19 . 2007-07-06 18:23 210968 ----a-w- c:\windows\system32\wuweb.dll
2012-06-02 21:19 . 2007-04-17 05:46 15384 ----a-w- c:\windows\system32\wuaucpl.cpl.mui
2012-06-02 21:19 . 2007-07-06 18:23 53784 ----a-w- c:\windows\system32\wuauclt.exe
2012-06-02 21:19 . 2007-07-06 18:23 35864 ----a-w- c:\windows\system32\wups.dll
2012-06-02 21:19 . 2007-07-06 18:05 97304 ----a-w- c:\windows\system32\cdm.dll
2012-06-02 21:19 . 2007-04-17 05:46 15384 ----a-w- c:\windows\system32\wuapi.dll.mui
2012-06-02 21:19 . 2007-04-17 05:45 45080 ----a-w- c:\windows\system32\wups2.dll
2012-06-02 21:19 . 2007-04-17 05:45 17944 ----a-w- c:\windows\system32\wuaueng.dll.mui
2012-06-02 21:19 . 2007-07-06 18:23 577048 ----a-w- c:\windows\system32\wuapi.dll
2012-06-02 21:19 . 2007-07-06 18:23 1933848 ----a-w- c:\windows\system32\wuaueng.dll
2012-06-02 21:18 . 2012-05-10 08:42 275696 ----a-w- c:\windows\system32\mucltui.dll
2012-06-02 21:18 . 2012-05-10 08:42 17136 ----a-w- c:\windows\system32\mucltui.dll.mui
2012-05-31 13:22 . 2007-07-06 18:05 599040 ----a-w- c:\windows\system32\crypt32.dll
2012-05-15 15:39 . 2007-07-06 18:05 832512 ----a-w- c:\windows\system32\wininet.dll
2012-05-15 13:20 . 2007-07-06 18:05 1863168 ----a-w- c:\windows\system32\win32k.sys
2012-05-04 13:12 . 2007-07-06 18:05 2192640 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-05-04 12:32 . 2004-08-03 22:59 2069120 ----a-w- c:\windows\system32\ntkrnlpa.exe
2012-05-02 13:46 . 2007-07-06 18:22 139656 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2012-04-23 14:46 . 2007-07-06 18:05 78336 ----a-w- c:\windows\system32\ieencode.dll
2012-04-23 14:46 . 2007-07-06 18:05 1830912 ------w- c:\windows\system32\inetcpl.cpl
2012-04-23 14:46 . 2007-07-06 18:05 17408 ------w- c:\windows\system32\corpol.dll
2010-10-22 02:09 . 2010-10-22 02:08 8567024 ----a-w- c:\program files\Firefox Setup 3.6.11.exe
2010-04-13 23:14 . 2009-11-14 04:24 318904 ----a-w- c:\program files\wmpfirefoxplugin.exe
2010-02-14 21:35 . 2011-05-05 04:03 4411392 ----a-w- c:\program files\mplayerc.exe
2010-02-13 04:16 . 2010-02-13 04:16 4938120 ----a-w- c:\program files\Silverlight.exe
2009-02-25 03:25 . 2009-02-25 03:23 9676176 ----a-w- c:\program files\PokerStarsInstall.exe
2012-06-17 20:06 . 2011-11-07 23:48 85472 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((( SnapShot_2012-05-26_02.23.17 )))))))))))))))))))))))))))))))))))))))))
.
+ 2012-06-30 16:36 . 2012-06-30 16:36 16384 c:\windows\temp\Perflib_Perfdata_460.dat
+ 2012-06-19 11:22 . 2012-06-02 21:19 45080 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.6.7600.256\wups2.dll
+ 2012-06-19 11:22 . 2012-06-02 21:19 35864 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.6.7600.256\wups.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 44544 c:\windows\system32\pngfilt.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 44544 c:\windows\system32\pngfilt.dll
- 2007-07-06 18:05 . 2012-05-26 01:57 68584 c:\windows\system32\perfc009.dat
+ 2007-07-06 18:05 . 2012-06-15 01:01 68584 c:\windows\system32\perfc009.dat
+ 2007-08-14 00:54 . 2012-04-23 14:46 52224 c:\windows\system32\msfeedsbs.dll
- 2007-08-14 00:54 . 2012-03-01 01:25 52224 c:\windows\system32\msfeedsbs.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 27648 c:\windows\system32\jsproxy.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 27648 c:\windows\system32\jsproxy.dll
+ 2007-08-14 00:39 . 2012-04-23 11:33 13824 c:\windows\system32\ieudinit.exe
- 2007-08-14 00:39 . 2012-02-29 12:16 13824 c:\windows\system32\ieudinit.exe
+ 2007-07-06 18:05 . 2012-04-23 14:46 44544 c:\windows\system32\iernonce.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 44544 c:\windows\system32\iernonce.dll
- 2007-07-06 18:05 . 2012-02-29 12:16 70656 c:\windows\system32\ie4uinit.exe
+ 2007-07-06 18:05 . 2012-04-23 11:33 70656 c:\windows\system32\ie4uinit.exe
+ 2007-08-14 00:36 . 2012-04-23 14:46 63488 c:\windows\system32\icardie.dll
- 2007-08-14 00:36 . 2012-03-01 01:25 63488 c:\windows\system32\icardie.dll
+ 2007-07-06 18:23 . 2012-06-02 21:19 35864 c:\windows\system32\dllcache\wups.dll
+ 2007-07-06 18:23 . 2012-06-02 21:19 53784 c:\windows\system32\dllcache\wuauclt.exe
+ 2007-07-06 18:05 . 2012-04-23 14:46 44544 c:\windows\system32\dllcache\pngfilt.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 44544 c:\windows\system32\dllcache\pngfilt.dll
+ 2007-10-30 00:22 . 2012-04-23 14:46 52224 c:\windows\system32\dllcache\msfeedsbs.dll
- 2007-10-30 00:22 . 2012-03-01 01:25 52224 c:\windows\system32\dllcache\msfeedsbs.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 27648 c:\windows\system32\dllcache\jsproxy.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 27648 c:\windows\system32\dllcache\jsproxy.dll
+ 2007-10-30 00:22 . 2012-04-23 11:33 13824 c:\windows\system32\dllcache\ieudinit.exe
- 2007-10-30 00:22 . 2012-02-29 12:16 13824 c:\windows\system32\dllcache\ieudinit.exe
+ 2007-07-06 18:05 . 2012-04-23 14:46 44544 c:\windows\system32\dllcache\iernonce.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 44544 c:\windows\system32\dllcache\iernonce.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 78336 c:\windows\system32\dllcache\ieencode.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 78336 c:\windows\system32\dllcache\ieencode.dll
+ 2007-07-06 18:05 . 2012-04-23 11:33 70656 c:\windows\system32\dllcache\ie4uinit.exe
- 2007-07-06 18:05 . 2012-02-29 12:16 70656 c:\windows\system32\dllcache\ie4uinit.exe
- 2007-10-30 00:22 . 2012-03-01 01:25 63488 c:\windows\system32\dllcache\icardie.dll
+ 2007-10-30 00:22 . 2012-04-23 14:46 63488 c:\windows\system32\dllcache\icardie.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 17408 c:\windows\system32\dllcache\corpol.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 17408 c:\windows\system32\dllcache\corpol.dll
+ 2007-07-06 18:05 . 2012-06-02 21:19 97304 c:\windows\system32\dllcache\cdm.dll
+ 2012-06-28 06:18 . 2012-06-28 06:18 22016 c:\windows\Installer\35cd20cd.msi
+ 2012-06-15 00:31 . 2012-03-01 01:25 44544 c:\windows\ie7updates\KB2699988-IE7\pngfilt.dll
+ 2012-06-15 00:31 . 2012-03-01 01:25 52224 c:\windows\ie7updates\KB2699988-IE7\msfeedsbs.dll
+ 2012-06-15 00:31 . 2012-03-01 01:25 27648 c:\windows\ie7updates\KB2699988-IE7\jsproxy.dll
+ 2012-06-15 00:31 . 2012-02-29 12:16 13824 c:\windows\ie7updates\KB2699988-IE7\ieudinit.exe
+ 2012-06-15 00:31 . 2012-03-01 01:25 44544 c:\windows\ie7updates\KB2699988-IE7\iernonce.dll
+ 2012-06-15 00:31 . 2012-03-01 01:25 78336 c:\windows\ie7updates\KB2699988-IE7\ieencode.dll
+ 2012-06-15 00:31 . 2012-02-29 12:16 70656 c:\windows\ie7updates\KB2699988-IE7\ie4uinit.exe
+ 2012-06-15 00:31 . 2012-03-01 01:25 63488 c:\windows\ie7updates\KB2699988-IE7\icardie.dll
+ 2012-06-15 00:31 . 2012-03-01 01:25 17408 c:\windows\ie7updates\KB2699988-IE7\corpol.dll
+ 2012-06-15 01:33 . 2012-06-15 01:33 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\3b34fc2c8c94ffe21f75168980b69dfe\System.Web.DynamicData.Design.ni.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
- 2012-05-10 13:23 . 2012-05-10 13:23 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
+ 2012-06-15 01:01 . 2012-06-15 01:01 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
+ 2012-06-15 01:01 . 2012-06-15 01:01 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2012-06-05 04:11 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2718704\update\spcustom.dll
+ 2012-06-05 04:11 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2718704\spmsg.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2012-06-15 01:01 . 2012-06-15 01:01 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2012-05-10 13:24 . 2012-05-10 13:24 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 233472 c:\windows\system32\webcheck.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 233472 c:\windows\system32\webcheck.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 106496 c:\windows\system32\url.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 106496 c:\windows\system32\url.dll
+ 2007-07-06 18:05 . 2012-06-15 01:01 435688 c:\windows\system32\perfh009.dat
- 2007-07-06 18:05 . 2012-05-26 01:57 435688 c:\windows\system32\perfh009.dat
- 2007-07-06 18:05 . 2012-03-01 01:25 102912 c:\windows\system32\occache.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 102912 c:\windows\system32\occache.dll
+ 2012-05-26 03:03 . 2012-04-05 00:47 772504 c:\windows\system32\npDeployJava1.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 671232 c:\windows\system32\mstime.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 671232 c:\windows\system32\mstime.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 193024 c:\windows\system32\msrating.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 193024 c:\windows\system32\msrating.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 479744 c:\windows\system32\mshtmled.dll
+ 2007-08-14 00:54 . 2012-04-23 14:46 496128 c:\windows\system32\msfeeds.dll
+ 2012-05-26 03:03 . 2012-04-05 00:47 227720 c:\windows\system32\javaws.exe
+ 2012-05-26 03:03 . 2012-05-26 03:02 174024 c:\windows\system32\javaw.exe
+ 2012-05-26 03:03 . 2012-05-26 03:02 174024 c:\windows\system32\java.exe
- 2007-08-14 00:34 . 2012-03-01 01:25 268288 c:\windows\system32\iertutil.dll
+ 2007-08-14 00:34 . 2012-04-23 14:46 268288 c:\windows\system32\iertutil.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 192512 c:\windows\system32\iepeers.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 192512 c:\windows\system32\iepeers.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 384512 c:\windows\system32\iedkcs32.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 384512 c:\windows\system32\iedkcs32.dll
- 2007-07-11 18:27 . 2012-03-01 01:25 380928 c:\windows\system32\ieapfltr.dll
+ 2007-07-11 18:27 . 2012-04-23 14:46 380928 c:\windows\system32\ieapfltr.dll
+ 2007-07-06 18:05 . 2012-04-22 06:39 161792 c:\windows\system32\ieakui.dll
- 2007-07-06 18:05 . 2012-02-29 10:59 161792 c:\windows\system32\ieakui.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 230400 c:\windows\system32\ieaksie.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 230400 c:\windows\system32\ieaksie.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 153088 c:\windows\system32\ieakeng.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 153088 c:\windows\system32\ieakeng.dll
+ 2007-07-06 11:14 . 2012-06-15 01:10 134872 c:\windows\system32\FNTCACHE.DAT
- 2007-07-06 11:14 . 2012-05-20 17:00 134872 c:\windows\system32\FNTCACHE.DAT
+ 2007-07-06 18:05 . 2012-04-23 14:46 133120 c:\windows\system32\extmgr.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 133120 c:\windows\system32\extmgr.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 214528 c:\windows\system32\dxtrans.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 214528 c:\windows\system32\dxtrans.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 347136 c:\windows\system32\dxtmsft.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 347136 c:\windows\system32\dxtmsft.dll
+ 2007-07-06 18:23 . 2012-06-02 21:19 210968 c:\windows\system32\dllcache\wuweb.dll
+ 2007-07-06 18:23 . 2012-06-02 21:19 329240 c:\windows\system32\dllcache\wucltui.dll
+ 2007-07-06 18:23 . 2012-06-02 21:19 577048 c:\windows\system32\dllcache\wuapi.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 832512 c:\windows\system32\dllcache\wininet.dll
+ 2007-07-06 18:05 . 2012-05-15 15:39 832512 c:\windows\system32\dllcache\wininet.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 233472 c:\windows\system32\dllcache\webcheck.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 233472 c:\windows\system32\dllcache\webcheck.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 106496 c:\windows\system32\dllcache\url.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 106496 c:\windows\system32\dllcache\url.dll
+ 2011-08-11 03:40 . 2012-05-02 13:46 139656 c:\windows\system32\dllcache\rdpwd.sys
+ 2007-07-06 18:05 . 2012-04-23 14:46 102912 c:\windows\system32\dllcache\occache.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 102912 c:\windows\system32\dllcache\occache.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 671232 c:\windows\system32\dllcache\mstime.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 671232 c:\windows\system32\dllcache\mstime.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 193024 c:\windows\system32\dllcache\msrating.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 193024 c:\windows\system32\dllcache\msrating.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 479744 c:\windows\system32\dllcache\mshtmled.dll
+ 2007-10-30 00:22 . 2012-04-23 14:46 496128 c:\windows\system32\dllcache\msfeeds.dll
+ 2007-07-06 18:23 . 2012-04-22 06:40 634488 c:\windows\system32\dllcache\iexplore.exe
+ 2007-10-30 00:22 . 2012-04-23 14:46 268288 c:\windows\system32\dllcache\iertutil.dll
- 2007-10-30 00:22 . 2012-03-01 01:25 268288 c:\windows\system32\dllcache\iertutil.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 192512 c:\windows\system32\dllcache\iepeers.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 192512 c:\windows\system32\dllcache\iepeers.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 384512 c:\windows\system32\dllcache\iedkcs32.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 384512 c:\windows\system32\dllcache\iedkcs32.dll
- 2007-10-30 00:22 . 2012-03-01 01:25 380928 c:\windows\system32\dllcache\ieapfltr.dll
+ 2007-10-30 00:22 . 2012-04-23 14:46 380928 c:\windows\system32\dllcache\ieapfltr.dll
- 2007-07-06 18:05 . 2012-02-29 10:59 161792 c:\windows\system32\dllcache\ieakui.dll
+ 2007-07-06 18:05 . 2012-04-22 06:39 161792 c:\windows\system32\dllcache\ieakui.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 230400 c:\windows\system32\dllcache\ieaksie.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 230400 c:\windows\system32\dllcache\ieaksie.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 153088 c:\windows\system32\dllcache\ieakeng.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 153088 c:\windows\system32\dllcache\ieakeng.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 133120 c:\windows\system32\dllcache\extmgr.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 133120 c:\windows\system32\dllcache\extmgr.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 214528 c:\windows\system32\dllcache\dxtrans.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 214528 c:\windows\system32\dllcache\dxtrans.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 347136 c:\windows\system32\dllcache\dxtmsft.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 347136 c:\windows\system32\dllcache\dxtmsft.dll
+ 2011-09-03 10:17 . 2012-05-31 13:22 599040 c:\windows\system32\dllcache\crypt32.dll
- 2011-09-03 10:17 . 2011-09-28 07:06 599040 c:\windows\system32\dllcache\crypt32.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 124928 c:\windows\system32\dllcache\advpack.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 124928 c:\windows\system32\dllcache\advpack.dll
+ 2010-07-15 04:32 . 2012-04-05 00:47 687504 c:\windows\system32\deployJava1.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 124928 c:\windows\system32\advpack.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 124928 c:\windows\system32\advpack.dll
- 2012-01-31 09:38 . 2012-01-31 09:38 630784 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
+ 2012-04-21 13:15 . 2012-04-21 13:15 630784 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
+ 2012-04-22 03:55 . 2012-04-22 03:55 980480 c:\windows\Installer\2da5543e.msp
+ 2012-05-26 03:04 . 2012-05-26 03:04 176128 c:\windows\Installer\103873c4.msi
+ 2012-05-26 03:03 . 2012-05-26 03:03 457216 c:\windows\Installer\103873b0.msi
+ 2012-05-26 03:02 . 2012-05-26 03:02 863744 c:\windows\Installer\103873ac.msi
+ 2012-06-15 00:31 . 2012-03-01 01:25 832512 c:\windows\ie7updates\KB2699988-IE7\wininet.dll
+ 2012-06-15 00:31 . 2012-03-01 01:25 233472 c:\windows\ie7updates\KB2699988-IE7\webcheck.dll
+ 2012-06-15 00:31 . 2012-03-01 01:25 106496 c:\windows\ie7updates\KB2699988-IE7\url.dll
+ 2012-06-15 00:32 . 2012-03-08 15:40 382840 c:\windows\ie7updates\KB2699988-IE7\spuninst\updspapi.dll
+ 2012-06-15 00:32 . 2012-03-08 15:40 231288 c:\windows\ie7updates\KB2699988-IE7\spuninst\spuninst.exe
+ 2012-06-15 00:31 . 2012-03-01 01:25 102912 c:\windows\ie7updates\KB2699988-IE7\occache.dll
+ 2012-06-15 00:31 . 2012-03-01 01:25 671232 c:\windows\ie7updates\KB2699988-IE7\mstime.dll
+ 2012-06-15 00:31 . 2012-03-01 01:25 193024 c:\windows\ie7updates\KB2699988-IE7\msrating.dll
+ 2012-06-15 00:31 . 2012-03-01 01:25 478720 c:\windows\ie7updates\KB2699988-IE7\mshtmled.dll
+ 2012-06-15 00:31 . 2012-03-01 01:25 468480 c:\windows\ie7updates\KB2699988-IE7\msfeeds.dll
+ 2012-06-15 00:31 . 2012-02-29 11:01 634680 c:\windows\ie7updates\KB2699988-IE7\iexplore.exe
+ 2012-06-15 00:31 . 2012-03-01 01:25 268288 c:\windows\ie7updates\KB2699988-IE7\iertutil.dll
+ 2012-06-15 00:31 . 2012-03-01 01:25 192512 c:\windows\ie7updates\KB2699988-IE7\iepeers.dll
+ 2012-06-15 00:31 . 2012-03-01 01:25 384512 c:\windows\ie7updates\KB2699988-IE7\iedkcs32.dll
+ 2012-06-15 00:31 . 2012-03-01 01:25 380928 c:\windows\ie7updates\KB2699988-IE7\ieapfltr.dll
+ 2012-06-15 00:31 . 2012-02-29 10:59 161792 c:\windows\ie7updates\KB2699988-IE7\ieakui.dll
+ 2012-06-15 00:31 . 2012-03-01 01:25 230400 c:\windows\ie7updates\KB2699988-IE7\ieaksie.dll
+ 2012-06-15 00:31 . 2012-03-01 01:25 153088 c:\windows\ie7updates\KB2699988-IE7\ieakeng.dll
+ 2012-06-15 00:31 . 2012-03-01 01:25 133120 c:\windows\ie7updates\KB2699988-IE7\extmgr.dll
+ 2012-06-15 00:31 . 2012-03-01 01:25 214528 c:\windows\ie7updates\KB2699988-IE7\dxtrans.dll
+ 2012-06-15 00:31 . 2012-03-01 01:25 347136 c:\windows\ie7updates\KB2699988-IE7\dxtmsft.dll
+ 2012-06-15 00:31 . 2012-03-01 01:25 124928 c:\windows\ie7updates\KB2699988-IE7\advpack.dll
+ 2012-06-15 01:22 . 2012-06-15 01:22 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\86e11a59f02b2dda27ec2e7cba351744\WindowsFormsIntegration.ni.dll
+ 2012-06-15 01:33 . 2012-06-15 01:33 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\698c2093d7ac57af935b399d1c0b1790\System.Web.Routing.ni.dll
+ 2012-06-15 01:33 . 2012-06-15 01:33 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\75248baf640115daeb0e580f1c5ff98b\System.Web.Extensions.Design.ni.dll
+ 2012-06-15 01:33 . 2012-06-15 01:33 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\40c3b61ac38613e2b4b0f196e86185eb\System.Web.Entity.ni.dll
+ 2012-06-15 01:33 . 2012-06-15 01:33 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\39cc9a830f7f08fd9f397be452fd78b0\System.Web.Entity.Design.ni.dll
+ 2012-06-15 01:33 . 2012-06-15 01:33 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\88b1fd4792e7b698b788594d8e5e3c09\System.Web.DynamicData.ni.dll
+ 2012-06-15 01:33 . 2012-06-15 01:33 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\6333d22a2ea347432d46c40d93194c68\System.Web.Abstractions.ni.dll
+ 2012-06-15 01:32 . 2012-06-15 01:32 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\8b84bb74d7724e147a642a1d5358feb7\System.ServiceProcess.ni.dll
+ 2012-06-15 01:08 . 2012-06-15 01:08 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\96a3fc1f74a00b618b70bd1701600408\System.Drawing.Design.ni.dll
+ 2012-06-15 01:32 . 2012-06-15 01:32 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\badd66e1d2b8416e9bb868ad059203c6\System.Configuration.Install.ni.dll
+ 2012-06-15 01:32 . 2012-06-15 01:32 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\c0045c1c7c29c7e7cc7bd60001b729a7\AspNetMMCExt.ni.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2012-06-15 01:01 . 2012-06-15 01:01 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2012-06-15 01:01 . 2012-06-15 01:01 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 630784 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 630784 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2012-06-15 01:01 . 2012-06-15 01:01 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2012-06-15 01:01 . 2012-06-15 01:01 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2012-06-15 01:01 . 2012-06-15 01:01 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2012-06-15 01:01 . 2012-06-15 01:01 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2012-06-15 01:01 . 2012-06-15 01:01 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
- 2012-05-10 13:23 . 2012-05-10 13:23 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2012-06-15 01:01 . 2012-06-15 01:01 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2012-06-05 04:11 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2718704$\spuninst\updspapi.dll
+ 2012-06-05 04:11 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2718704$\spuninst\spuninst.exe
+ 2012-06-05 04:11 . 2011-09-28 07:06 599040 c:\windows\$NtUninstallKB2718704$\crypt32.dll
+ 2012-06-05 04:11 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2718704\update\updspapi.dll
+ 2012-06-05 04:11 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2718704\update\update.exe
+ 2012-06-05 04:11 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2718704\spuninst.exe
+ 2012-05-31 13:19 . 2012-05-31 13:19 599552 c:\windows\$hf_mig$\KB2718704\SP3QFE\crypt32.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 1168896 c:\windows\system32\urlmon.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 1168896 c:\windows\system32\urlmon.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 3618816 c:\windows\system32\mshtml.dll
+ 2007-08-14 00:54 . 2012-04-23 14:46 6105088 c:\windows\system32\ieframe.dll
+ 2007-07-06 18:23 . 2012-06-02 21:19 1933848 c:\windows\system32\dllcache\wuaueng.dll
+ 2008-10-14 18:10 . 2012-05-15 13:20 1863168 c:\windows\system32\dllcache\win32k.sys
- 2007-07-06 18:05 . 2012-03-01 01:25 1168896 c:\windows\system32\dllcache\urlmon.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 1168896 c:\windows\system32\dllcache\urlmon.dll
- 2009-04-15 06:47 . 2012-04-11 13:10 2192640 c:\windows\system32\dllcache\ntoskrnl.exe
+ 2009-04-15 06:47 . 2012-05-04 13:12 2192640 c:\windows\system32\dllcache\ntoskrnl.exe
+ 2009-04-15 06:47 . 2012-05-04 12:32 2026496 c:\windows\system32\dllcache\ntkrpamp.exe
- 2009-04-15 06:47 . 2012-04-11 12:35 2026496 c:\windows\system32\dllcache\ntkrpamp.exe
+ 2009-02-08 01:02 . 2012-05-04 12:32 2069120 c:\windows\system32\dllcache\ntkrnlpa.exe
- 2009-02-08 01:02 . 2012-04-11 12:35 2069120 c:\windows\system32\dllcache\ntkrnlpa.exe
+ 2009-04-15 06:47 . 2012-05-04 13:16 2148352 c:\windows\system32\dllcache\ntkrnlmp.exe
- 2009-04-15 06:47 . 2012-04-11 13:14 2148352 c:\windows\system32\dllcache\ntkrnlmp.exe
+ 2007-07-06 18:05 . 2012-04-23 14:46 3618816 c:\windows\system32\dllcache\mshtml.dll
+ 2007-10-30 00:22 . 2012-04-23 14:46 6105088 c:\windows\system32\dllcache\ieframe.dll
+ 2012-03-20 11:23 . 2012-03-20 11:23 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
- 2011-12-25 09:50 . 2011-12-25 09:50 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
+ 2012-03-20 11:23 . 2012-03-20 11:23 5062656 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
- 2008-07-25 17:17 . 2008-07-25 17:17 5062656 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
+ 2012-03-21 05:57 . 2012-03-21 05:57 6188544 c:\windows\Installer\2d7eb1ed.msp
+ 2012-06-15 00:31 . 2012-03-01 01:25 1168896 c:\windows\ie7updates\KB2699988-IE7\urlmon.dll
+ 2012-06-15 00:31 . 2012-03-01 01:25 3616768 c:\windows\ie7updates\KB2699988-IE7\mshtml.dll
+ 2012-06-15 00:31 . 2012-03-01 01:25 6076928 c:\windows\ie7updates\KB2699988-IE7\ieframe.dll
- 2009-04-15 06:47 . 2012-04-11 13:10 2192640 c:\windows\Driver Cache\i386\ntoskrnl.exe
+ 2009-04-15 06:47 . 2012-05-04 13:12 2192640 c:\windows\Driver Cache\i386\ntoskrnl.exe
- 2009-04-15 06:47 . 2012-04-11 12:35 2026496 c:\windows\Driver Cache\i386\ntkrpamp.exe
+ 2009-04-15 06:47 . 2012-05-04 12:32 2026496 c:\windows\Driver Cache\i386\ntkrpamp.exe
- 2009-02-08 01:02 . 2012-04-11 12:35 2069120 c:\windows\Driver Cache\i386\ntkrnlpa.exe
+ 2009-02-08 01:02 . 2012-05-04 12:32 2069120 c:\windows\Driver Cache\i386\ntkrnlpa.exe
+ 2009-04-15 06:47 . 2012-05-04 13:16 2148352 c:\windows\Driver Cache\i386\ntkrnlmp.exe
- 2009-04-15 06:47 . 2012-04-11 13:14 2148352 c:\windows\Driver Cache\i386\ntkrnlmp.exe
+ 2012-06-15 01:34 . 2012-06-15 01:34 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\bd5bd406670d483b82bd51249eee59e3\System.WorkflowServices.ni.dll
+ 2012-06-15 01:34 . 2012-06-15 01:34 1908224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\77361ebe9ad8ff77cc9a8d7f8363eb05\System.Workflow.Runtime.ni.dll
+ 2012-06-15 01:34 . 2012-06-15 01:34 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\1c12dfa7826b331b243b7b45daf9904d\System.Workflow.ComponentModel.ni.dll
+ 2012-06-15 01:34 . 2012-06-15 01:34 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\514bf0e69e2c9fc8509cd23236057356\System.Workflow.Activities.ni.dll
+ 2012-06-15 01:34 . 2012-06-15 01:34 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\e70343406253e43964f9fe1f42cfbd7c\System.Web.Services.ni.dll
+ 2012-06-15 01:34 . 2012-06-15 01:34 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\77f8cde07b131839f1841be702837e8e\System.Web.Mobile.ni.dll
+ 2012-06-15 01:33 . 2012-06-15 01:33 2405888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\242b168aaca18197eca371ec269e23ac\System.Web.Extensions.ni.dll
+ 2012-06-15 01:08 . 2012-06-15 01:08 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\d380f1813e27c2a086e62f0218669d67\System.Printing.ni.dll
+ 2012-06-15 01:08 . 2012-06-15 01:08 1592320 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\d86f2038209a4cf0d0f5b30f6375c9b2\System.Drawing.ni.dll
+ 2012-06-15 01:32 . 2012-06-15 01:32 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\7a53d68ad544f8e9edfdbd5a90a48fd3\System.Deployment.ni.dll
+ 2012-06-15 01:07 . 2012-06-15 01:07 2146304 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\443dd7f0b84c3de54b1a72be655e307c\ReachFramework.ni.dll
+ 2012-06-15 01:07 . 2012-06-15 01:07 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\48ddcafff1a5603fb3289e90330275c0\PresentationUI.ni.dll
+ 2012-06-15 01:32 . 2012-06-15 01:32 1712128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\359fd69eb60e9844ffd497e92345178c\Microsoft.VisualBasic.ni.dll
+ 2012-06-15 01:32 . 2012-06-15 01:32 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\4e463dcf2a03c71913a61b44c32e2389\Microsoft.Build.Tasks.ni.dll
+ 2012-06-15 01:32 . 2012-06-15 01:32 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\395b4a85c7941ac4dd9d1c6f5eb444c7\Microsoft.Build.Tasks.v3.5.ni.dll
+ 2012-06-15 01:01 . 2012-06-15 01:01 3186688 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 3186688 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
- 2012-05-10 13:23 . 2012-05-10 13:23 5246976 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 5246976 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
+ 2012-06-15 01:01 . 2012-06-15 01:01 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2012-06-15 01:01 . 2012-06-15 01:01 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2007-08-18 03:00 . 2012-06-15 00:38 56731752 c:\windows\system32\MRT.exe
+ 2012-06-15 01:14 . 2012-06-15 01:14 12433920 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\01abbadafaf265d9f4ac9bbb247acb98\System.Windows.Forms.ni.dll
+ 2012-06-15 01:33 . 2012-06-15 01:33 11817472 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\dbc413807cb7360b3e26ef3ca1d54f9a\System.Web.ni.dll
+ 2012-06-15 01:08 . 2012-06-15 01:08 10682368 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\f73a8455f384e90f6925309336fece24\System.Design.ni.dll
+ 2012-06-15 01:06 . 2012-06-15 01:06 14329856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\e4ecfaaf5417aceecb7fa8abddf06113\PresentationFramework.ni.dll
+ 2012-06-15 01:05 . 2012-06-15 01:05 12218368 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\f33e2a4d9b385234406fa2d662f78875\PresentationCore.ni.dll
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{ba14329e-9550-4989-b3f2-9732e92d17cc}"= "c:\program files\Vuze_Remote\prxtbVuz0.dll" [2011-05-09 176936]
.
[HKEY_CLASSES_ROOT\clsid\{ba14329e-9550-4989-b3f2-9732e92d17cc}]
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{ba14329e-9550-4989-b3f2-9732e92d17cc}]
2011-05-09 09:49 176936 ----a-w- c:\program files\Vuze_Remote\prxtbVuz0.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{ba14329e-9550-4989-b3f2-9732e92d17cc}"= "c:\program files\Vuze_Remote\prxtbVuz0.dll" [2011-05-09 176936]
.
[HKEY_CLASSES_ROOT\clsid\{ba14329e-9550-4989-b3f2-9732e92d17cc}]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{BA14329E-9550-4989-B3F2-9732E92D17CC}"= "c:\program files\Vuze_Remote\prxtbVuz0.dll" [2011-05-09 176936]
.
[HKEY_CLASSES_ROOT\clsid\{ba14329e-9550-4989-b3f2-9732e92d17cc}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2006-10-19 204288]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2003-12-09 32768]
"InCD"="c:\program files\Ahead\InCD\InCD.exe" [2004-09-07 1400944]
"SoundMan"="SOUNDMAN.EXE" [2006-03-01 577536]
"VTTimer"="VTTimer.exe" [2005-03-07 53248]
"VTTrayp"="VTtrayp.exe" [2006-07-10 176128]
"PhoneTray"="c:\program files\Traysoft\PhoneTray\PhoneTray.exe" [2007-06-15 430640]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2010-03-19 202256]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2010-03-25 2145000]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2011-08-31 40368]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-01-17 252296]
.
c:\documents and settings\Boyd\Start Menu\Programs\Startup\
Picture Motion Browser Media Check Tool.lnk - c:\program files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe [2010-10-12 385024]
.
c:\documents and settings\All Users\Start Menu\Programs\Startup\
hp psc 1000 series.lnk - c:\program files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe [2003-4-6 147456]
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
"%windir%\\system32\\drivers\\svchost.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
"c:\\Program Files\\Vuze\\Azureus.exe"=
"f:\\Dream Box\\DCC.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"62525:TCP"= 62525:TCP:vuze
.
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [3/24/2010 8:31 PM 114984]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [3/24/2010 8:33 PM 95872]
R2 DLPortIO;DriverLINX Port I/O Driver;c:\windows\system32\drivers\DLPORTIO.sys [10/25/2007 9:13 PM 3584]
R2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [3/24/2010 8:31 PM 810120]
R2 lowpp;Lowrance MMC Parallel Port Driver;c:\windows\system32\drivers\lowpp.sys [5/26/2008 8:16 PM 7787]
R2 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [10/20/2009 12:19 PM 50704]
R3 pcouffin;VSO Software pcouffin;c:\windows\system32\drivers\pcouffin.sys [7/23/2007 9:24 PM 47360]
S0 TfFsMon;TfFsMon;c:\windows\system32\drivers\TfFsMon.sys --> c:\windows\system32\drivers\TfFsMon.sys [?]
S0 TfSysMon;TfSysMon;c:\windows\system32\drivers\TfSysMon.sys --> c:\windows\system32\drivers\TfSysMon.sys [?]
S2 gupdate1cac795a54b50dd;Google Update Service (gupdate1cac795a54b50dd);c:\program files\Google\Update\GoogleUpdate.exe [3/19/2010 12:54 PM 133104]
S3 gupdatem;Google Update Service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [3/19/2010 12:54 PM 133104]
S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [5/8/2012 9:17 PM 113120]
S3 TfNetMon;TfNetMon;\??\c:\windows\system32\drivers\TfNetMon.sys --> c:\windows\system32\drivers\TfNetMon.sys [?]
.
Contents of the 'Scheduled Tasks' folder
.
2007-11-24 c:\windows\Tasks\FRU Task 2003-04-06 08:52ewlett-Packard2003-04-06 08:52p psc 1200 series5E771253C1676EBED677BF361FDFC537825E15B8187974490.job
- c:\program files\Hewlett-Packard\Digital Imaging\Bin\hpqfrucl.exe [2003-04-06 06:52]
.
2012-07-07 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-03-19 18:54]
.
2012-07-07 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-03-19 18:54]
.
2012-07-02 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-1004336348-261478967-1801674531-1004.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2010-02-25 04:09]
.
2012-07-02 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-1004336348-261478967-1801674531-1004.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2010-02-25 04:09]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://hotmail.com/
uInternet Settings,ProxyServer = 85.17.92.29:3128
IE: Crawler Search - tbr:iemenu
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.2.1 142.165.200.5 142.165.21.5
FF - ProfilePath - c:\documents and settings\Boyd\Application Data\Mozilla\Firefox\Profiles\4bepqfxl.default\
FF - prefs.js: browser.search.selectedEngine - Search Results
FF - prefs.js: browser.startup.homepage - hxxp://google.com/
FF - prefs.js: keyword.URL - hxxp://dts.search-results.com/sr?src=ffb&appid=315&systemid=1&q=
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-07-07 10:35
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\software\ESET\ESET Security\CurrentVersion\Info]
@Denied: (2) (LocalSystem)
"AppDataDir"="c:\\Documents and Settings\\All Users\\Application Data\\ESET\\ESET NOD32 Antivirus\\"
"DataDir"="ESET\\ESET NOD32 Antivirus\\"
"EditionName"=" "
"InstallDir"="c:\\Program Files\\ESET\\ESET NOD32 Antivirus\\"
"LanguageId"=dword:00000409
"PackageTag"=dword:6090e758
"ProductBase"=dword:00000000
"ProductCode"="{08B857DF-E6F9-4283-853A-4F329CC09A4F}"
"ProductName"="ESET NOD32 Antivirus"
"ProductType"="eav"
"ProductVersion"="4.2.40.0"
"UniqueId"="003191254D784F1B"
"ScannerBuild"=dword:00001a9b
"ScannerVersionId"=dword:0000136c
"ScannerVersion"="Locked/open ESET for status."
"ei2"=hex(b):d9,9e,5a,34,3e,2e,88,6f
"ei1"=hex(b):00,19,66,11,c9,7f,00,00
"ei3"=hex(b):88,7b,79,4d,00,00,00,00
"ei4"=dword:00000000
.
[HKEY_LOCAL_MACHINE\software\Microsoft\DbgagD\1*]
"value"="?\0a\04\06\00)\1d?"
.
Completion time: 2012-07-07 10:39:43
ComboFix-quarantined-files.txt 2012-07-07 16:39
ComboFix2.txt 2012-05-26 02:28
ComboFix3.txt 2012-01-24 03:59
ComboFix4.txt 2011-12-16 04:51
ComboFix5.txt 2012-07-07 16:16
.
Pre-Run: 50,433,560,576 bytes free
Post-Run: 51,014,848,512 bytes free
.
- - End Of File - - 07DDFEA07C6F3DCABACD17C0D0C788DB

descriptionwindows virtual memory to low EmptyRe: windows virtual memory to low

more_horiz
Any more issues?

We need to know any other issues that are plaguing your computer. Kindly give a summary so we know how to continue from here.

Many of the things to note for us would be:

  • Slow computer
  • Error messages
  • Fake antivirus alerts or the icon in the system tray
  • svchost.exe running at 100%
  • System crashes or blue screen of death

descriptionwindows virtual memory to low EmptyRe: windows virtual memory to low

more_horiz
DragonMaster Jay wrote:
Any more issues?

We need to know any other issues that are plaguing your computer. Kindly give a summary so we know how to continue from here.

Many of the things to note for us would be:

  • Slow computer ( yes very slow)
  • Error messages ( no, error messages)
  • Fake antivirus alerts or the icon in the system tray(none)
  • svchost.exe running at 100%(not sure how to check this,there are 10 of these under the process tab in the manager)
  • System crashes or blue screen of death
( none of these)

descriptionwindows virtual memory to low EmptyRe: windows virtual memory to low

more_horiz
Any other messages about virtual memory?

descriptionwindows virtual memory to low EmptyRe: windows virtual memory to low

more_horiz
no, not anymore

descriptionwindows virtual memory to low EmptyRe: windows virtual memory to low

more_horiz
Awesome!

Clean up System Restore

Now, to get you off to a clean start, we will be creating a new Restore Point, then clearing the old ones to make sure you do not get reinfected, in case you need to "restore back."
  • Select Start > All Programs > Accessories > System tools > System Restore.
  • On the dialogue box that appears select Create a Restore Point
  • Click NEXT
  • Enter a name e.g. Clean
  • Click CREATE

You now have a clean restore point, to get rid of the bad ones:
  • Select Start > All Programs > Accessories > System tools > Disk Cleanup.
  • In the Drop down box that appears select your main drive e.g. C
  • Click OK
  • The System will do some calculation and the display a dialogue box with TABS
  • Select the More Options Tab.
  • At the bottom will be a system restore box with a CLEANUP button click this
  • Accept the Warning and select OK again, the program will close and you are done


Run OTC to remove our tools

To remove all of the tools we used and the files and folders they created, please do the following:
Please download OTC.exe by OldTimer:
  • Save it to your Desktop.
  • Double click OTC.exe.
  • Click the CleanUp! button.
  • If you are prompted to Reboot during the cleanup, select Yes.
  • The tool will delete itself once it finishes.

Note: If any tool, file or folder (belonging to the program we have used) hasn't been deleted, please delete it manually.

Purge old temporary files

Please download TFC by OldTimer to your desktop
  • Please double-click TFC.exe to run it. (Note: If you are running on Vista, right-click on the file and choose Run As Administrator).
  • It will close all programs when run, so make sure you have saved all your work before you begin.
  • Click the Start
    button to begin the process. Depending on how often you clean temp
    files, execution time should be anywhere from a few seconds to a minute
    or two. Let it run uninterrupted to completion.
  • Once it's finished it should reboot your machine. If it does not, please manually reboot the machine yourself to ensure a complete clean.


Security Check

Please download Security Check by screen317 from SpywareInfoforum.org or Changelog.fr.
  • Save it to your Desktop.
  • Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
  • A Notepad document should open automatically called checkup.txt; please post the contents of that document.


Tell me in your next reply, if you have completed these tasks:
  • Cleaned System Restore
  • Ran OTC
  • Ran TFC
  • Ran Security Check

Also, let me know how your computer is running, and don't forget to post the contents of the Security Check log.

descriptionwindows virtual memory to low EmptyRe: windows virtual memory to low

more_horiz
cleaned system restore (done)
ran otc (done)
ran tfc (done)
ran security check (done)
log file: Results of screen317's Security Check version 0.99.42
Windows XP Service Pack 3 x86
Internet Explorer 7 Out of date!
``````````````Antivirus/Firewall Check:``````````````
Windows Firewall Enabled!
ESET NOD32 Antivirus
`````````Anti-malware/Other Utilities Check:`````````
JavaFX 2.1.0
Java(TM) 7 Update 4
Java version out of Date!
Adobe Flash Player 10 Flash Player out of Date!
Adobe Flash Player 10.3.183.7 Flash Player out of Date!
Adobe Reader 8 Adobe Reader out of Date!
Mozilla Firefox (13.0.1)
Mozilla Thunderbird (12.0.1)
Google Chrome 19.0.1084.56
Google Chrome 20.0.1132.47
````````Process Check: objlist.exe by Laurent````````
`````````````````System Health check`````````````````
Total Fragmentation on Drive C:: 19% Defragment your hard drive soon!
````````````````````End of Log``````````````````````

was my computer infected?? I will let you know how it is running.

descriptionwindows virtual memory to low EmptyRe: windows virtual memory to low

more_horiz
Yes it was infected.

Download Secunia PSI to stay updated for your software: http://secunia.com/vulnerability_scanning/personal/

Let me know of anymore questions.

Personal Tips on Preventing Malware

See this page for more info about malware and prevention.

Please consider optionally donating to me to help boost my individual services on the site.

Any other questions before I mark this topic solved?

Last edited by DragonMaster Jay on 11th July 2012, 8:53 am; edited 1 time in total

descriptionwindows virtual memory to low EmptyRe: windows virtual memory to low

more_horiz
my computer doesn't seem to running any faster.
thank you for the help

descriptionwindows virtual memory to low EmptyRe: windows virtual memory to low

more_horiz
What is your processor speed and RAM amount?

descriptionwindows virtual memory to low EmptyRe: windows virtual memory to low

more_horiz
2.42 GHz, 960 MB of ram

descriptionwindows virtual memory to low EmptyRe: windows virtual memory to low

more_horiz
privacy_tip Permissions in this forum:
You cannot reply to topics in this forum