navigazione internet a scatti, forse virus...

Buonasera a tutti,
il sintomo era una navigazione internet "a scatti". In pratica succede che se sto caricando una pagina abbastanza lunga, vedo che ogni 3 o 4 secondi si blocca il browser per circa 1 secondo, e così via, fino a quando la pagina è caricata completamente...
ho provato sia con firefox che con internet explorer e il comportamento è uguale. Magari i tempi che ho scritto non sono costanti, a volte il blocco è più breve...

comunque ho seguito la procedura per pulire un pc infetto e di seguito riporto i log di MalwareBytes, ComboFix, e HiJackThis

spero che qualcuno mi dica qualcosa

[non mi ci sta tutto in messaggio, continua nel secondo...]



Malwarebytes Anti-Malware 1.61.0.1400
http://www.malwarebytes.org

Versione database: v2012.07.03.03

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Marco :: MARCOBAVERA [amministratore]

03/07/2012 13.00.21
mbam-log-2012-07-03 (13-00-21).txt

Tipo di scansione: Scansione completa
Opzioni di scansione attive: Memoria | Esecuzione automatica | Registro | File system | Euristica/Extra | Euristica/Shuriken | PUP | PUM
Opzioni di scansione disattivate: P2P
Elementi esaminati: 428051
Tempo impiegato: 1 ore, 41 minuti, 31 secondi

Processi rilevati in memoria: 0
(non sono stati rilevati elementi nocivi)

Moduli di memoria rilevati: 0
(non sono stati rilevati elementi nocivi)

Chiavi di registro rilevate: 0
(non sono stati rilevati elementi nocivi)

Valori di registro rilevati: 0
(non sono stati rilevati elementi nocivi)

Voci rilevate nei dati di registro: 0
(non sono stati rilevati elementi nocivi)

Cartelle rilevate: 0
(non sono stati rilevati elementi nocivi)

File rilevati: 1
C:\System Volume Information\_restore{96CF19D8-81C3-4A35-8411-E2299A2E4BBA}\RP1277\A0209674.exe (PUP.ToolbarDownloader) -> Spostato in quarantena ed eliminato con successo.

(fine)








ComboFix 12-07-02.01 - Marco 03/07/2012 18.42.25.2.2 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.39.1040.18.2038.1517 [GMT 2:00]
Eseguito da: c:\marco\New Folder\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
ATTENZIONE - QUESTO PC NON HA LA CONSOLE DI RIPRISTINO DI EMERGENZA INSTALLATA !!
.
.
((((((((((((((((((((((((((((((((((((( Altre eliminazioni )))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\Marco\Dati applicazioni\0ad
c:\documents and settings\Marco\Dati applicazioni\0ad\config\user.cfg
.
.
((((((((((((((((((((((((( Files Creati Da 2012-06-03 al 2012-07-03 )))))))))))))))))))))))))))))))))))
.
.
2012-07-02 21:34 . 2012-07-02 21:34 -------- d-----w- c:\documents and settings\Marco\Dati applicazioni\Scooter Software
2012-07-02 21:34 . 2012-07-02 21:36 -------- d-----w- c:\programmi\Beyond Compare 3
2012-06-19 20:55 . 2012-06-19 21:13 -------- d-----w- c:\documents and settings\Marco\Impostazioni locali\Dati applicazioni\0ad
2012-06-18 21:25 . 2012-06-18 21:33 -------- d-----w- C:\backup_sito_20120618
2012-06-14 18:41 . 2012-06-14 18:41 -------- d-----w- c:\programmi\IrfanView
2012-06-13 06:34 . 2012-05-11 14:40 521728 ------w- c:\windows\system32\dllcache\jsdbgui.dll
2012-06-11 17:20 . 2012-06-11 17:20 -------- d-----w- c:\documents and settings\Marco\Impostazioni locali\Dati applicazioni\fontconfig
2012-06-11 17:20 . 2012-06-21 21:22 -------- d-----w- c:\documents and settings\Marco\.gimp-2.8
2012-06-11 17:20 . 2012-06-11 17:20 -------- d-----w- c:\documents and settings\Marco\Impostazioni locali\Dati applicazioni\gegl-0.2
2012-06-11 17:15 . 2012-06-11 19:42 -------- d-----w- c:\programmi\GIMP 2
2012-06-07 06:11 . 2012-06-07 06:11 421200 ----a-w- c:\programmi\Mozilla Firefox\msvcp100.dll
2012-06-07 06:11 . 2012-06-07 06:11 770384 ----a-w- c:\programmi\Mozilla Firefox\msvcr100.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-06-22 15:20 . 2012-04-03 17:20 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-06-22 15:20 . 2011-06-02 21:35 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-06-02 13:19 . 2004-09-09 07:49 329240 ----a-w- c:\windows\system32\wucltui.dll
2012-06-02 13:19 . 2004-09-09 07:49 210968 ----a-w- c:\windows\system32\wuweb.dll
2012-06-02 13:19 . 2004-09-09 07:49 219160 ----a-w- c:\windows\system32\wuaucpl.cpl
2012-06-02 13:19 . 2007-07-30 17:19 45080 ----a-w- c:\windows\system32\wups2.dll
2012-06-02 13:19 . 2004-09-09 07:49 35864 ----a-w- c:\windows\system32\wups.dll
2012-06-02 13:19 . 2004-09-09 07:49 53784 ----a-w- c:\windows\system32\wuauclt.exe
2012-06-02 13:19 . 2004-09-09 07:36 97304 ----a-w- c:\windows\system32\cdm.dll
2012-06-02 13:19 . 2007-07-30 17:20 15896 ----a-w- c:\windows\system32\wuapi.dll.mui
2012-06-02 13:19 . 2007-07-30 17:20 15896 ----a-w- c:\windows\system32\wuaucpl.cpl.mui
2012-06-02 13:19 . 2007-07-30 17:19 24088 ----a-w- c:\windows\system32\wucltui.dll.mui
2012-06-02 13:19 . 2007-07-30 17:18 18968 ----a-w- c:\windows\system32\wuaueng.dll.mui
2012-06-02 13:19 . 2004-09-09 07:49 577048 ----a-w- c:\windows\system32\wuapi.dll
2012-06-02 13:19 . 2004-09-09 07:49 1933848 ----a-w- c:\windows\system32\wuaueng.dll
2012-05-31 13:21 . 2004-09-09 07:36 603136 ----a-w- c:\windows\system32\crypt32.dll
2012-05-16 15:06 . 2004-09-09 07:37 916992 ----a-w- c:\windows\system32\wininet.dll
2012-05-15 13:56 . 2004-09-09 07:37 1863168 ----a-w- c:\windows\system32\win32k.sys
2012-05-11 14:40 . 2004-09-09 07:36 43520 ----a-w- c:\windows\system32\licmgr10.dll
2012-05-11 14:40 . 2004-09-09 07:36 1469440 ------w- c:\windows\system32\inetcpl.cpl
2012-05-11 11:38 . 2004-09-09 07:36 385024 ----a-w- c:\windows\system32\html.iec
2012-05-05 03:14 . 2004-09-09 07:37 2151936 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-05-05 03:14 . 2004-08-19 14:34 2030080 ----a-w- c:\windows\system32\ntkrnlpa.exe
2012-05-02 13:46 . 2004-09-09 07:48 139656 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2012-06-18 14:40 . 2011-04-28 18:19 85472 ----a-w- c:\programmi\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2012-05-09_20.50.24 )))))))))))))))))))))))))))))))))))))))))
.
+ 2012-07-03 16:29 . 2012-07-03 16:29 16384 c:\windows\Temp\Perflib_Perfdata_684.dat
+ 2012-06-19 05:17 . 2012-06-02 13:19 45080 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.6.7600.256\wups2.dll
+ 2012-06-19 05:17 . 2012-06-02 13:19 35864 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.6.7600.256\wups.dll
+ 2004-09-09 07:37 . 2012-07-03 16:33 84028 c:\windows\system32\perfc010.dat
- 2004-09-09 07:37 . 2012-05-09 19:01 84028 c:\windows\system32\perfc010.dat
- 2004-09-09 07:37 . 2012-05-09 19:01 71508 c:\windows\system32\perfc009.dat
+ 2004-09-09 07:37 . 2012-07-03 16:33 71508 c:\windows\system32\perfc009.dat
+ 2012-05-15 20:05 . 2012-03-14 16:23 54784 c:\windows\system32\pdfcmon.dll
+ 2012-05-15 20:05 . 1998-07-05 23:00 23552 c:\windows\system32\MSMPIDE.DLL
+ 2004-09-09 07:37 . 2012-05-11 14:40 67072 c:\windows\system32\mshtmled.dll
- 2009-03-08 02:31 . 2012-03-01 11:00 55296 c:\windows\system32\msfeedsbs.dll
+ 2009-03-08 02:31 . 2012-05-11 14:40 55296 c:\windows\system32\msfeedsbs.dll
+ 2012-05-15 20:05 . 1998-08-05 06:45 63488 c:\windows\system32\MSCC2IT.DLL
+ 2004-09-09 07:36 . 2012-05-11 14:40 25600 c:\windows\system32\jsproxy.dll
- 2004-09-09 07:36 . 2012-03-01 11:00 25600 c:\windows\system32\jsproxy.dll
- 2009-07-02 16:37 . 2012-03-01 11:00 12800 c:\windows\system32\dllcache\xpshims.dll
+ 2009-07-02 16:37 . 2012-05-11 14:40 12800 c:\windows\system32\dllcache\xpshims.dll
+ 2004-09-09 07:49 . 2012-06-02 13:19 35864 c:\windows\system32\dllcache\wups.dll
+ 2004-09-09 07:49 . 2012-06-02 13:19 53784 c:\windows\system32\dllcache\wuauclt.exe
+ 2009-03-08 02:31 . 2012-05-11 14:40 67072 c:\windows\system32\dllcache\mshtmled.dll
+ 2009-07-28 17:49 . 2012-05-11 14:40 55296 c:\windows\system32\dllcache\msfeedsbs.dll
- 2009-07-28 17:49 . 2012-03-01 11:00 55296 c:\windows\system32\dllcache\msfeedsbs.dll
- 2004-09-09 07:36 . 2012-03-01 11:00 43520 c:\windows\system32\dllcache\licmgr10.dll
+ 2004-09-09 07:36 . 2012-05-11 14:40 43520 c:\windows\system32\dllcache\licmgr10.dll
+ 2009-03-08 02:33 . 2012-05-11 14:40 25600 c:\windows\system32\dllcache\jsproxy.dll
- 2009-03-08 02:33 . 2012-03-01 11:00 25600 c:\windows\system32\dllcache\jsproxy.dll
+ 2004-09-09 07:36 . 2012-06-02 13:19 97304 c:\windows\system32\dllcache\cdm.dll
+ 2012-06-13 13:24 . 2012-03-01 11:00 12800 c:\windows\ie8updates\KB2699988-IE8\xpshims.dll
+ 2012-06-13 13:24 . 2012-03-01 11:00 66560 c:\windows\ie8updates\KB2699988-IE8\mshtmled.dll
+ 2012-06-13 13:24 . 2012-03-01 11:00 55296 c:\windows\ie8updates\KB2699988-IE8\msfeedsbs.dll
+ 2012-06-13 13:24 . 2012-03-01 11:00 43520 c:\windows\ie8updates\KB2699988-IE8\licmgr10.dll
+ 2012-06-13 13:24 . 2012-03-01 11:00 25600 c:\windows\ie8updates\KB2699988-IE8\jsproxy.dll
+ 2012-06-13 13:24 . 2012-06-13 13:24 90112 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_a1da886d\System.Drawing.Design.dll
+ 2012-05-10 05:35 . 2012-05-10 05:35 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\f121ccced1aa14badb316d8d9be5154d\UIAutomationProvider.ni.dll
+ 2012-05-10 05:50 . 2012-05-10 05:50 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\316e223f2ab8c69cd6a5a06de21650ec\System.Windows.Presentation.ni.dll
+ 2012-06-13 16:31 . 2012-06-13 16:31 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\3b34fc2c8c94ffe21f75168980b69dfe\System.Web.DynamicData.Design.ni.dll
+ 2012-05-10 05:48 . 2012-05-10 05:48 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\34c988dea48c291b4e648941207e83fb\System.ComponentModel.DataAnnotations.ni.dll
+ 2012-05-10 05:48 . 2012-05-10 05:48 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\7bb7e51275fa19f8b4894c772bdb1e10\System.AddIn.Contract.ni.dll
+ 2012-05-10 05:33 . 2012-05-10 05:33 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\f0c4a4528f130ef2ff1ae63dd7b39075\PresentationFontCache.ni.exe
+ 2012-05-10 05:32 . 2012-05-10 05:32 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\53931181e5a5e194da82605613cda6af\PresentationCFFRasterizer.ni.dll
+ 2012-05-10 05:49 . 2012-05-10 05:49 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\f2be3ad4cda6853d7959a84cec0414c5\Microsoft.Vsa.ni.dll
+ 2012-05-10 05:48 . 2012-05-10 05:48 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\8fab9cd28bbc860a34feec119512664d\Microsoft.Build.Framework.ni.dll
+ 2012-05-10 05:48 . 2012-05-10 05:48 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\0eac132c7c36f1c100ae23c956b379e7\Microsoft.Build.Framework.ni.dll
+ 2012-05-10 05:48 . 2012-05-10 05:48 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\d66bc03eb7eae89b4dde2d09eda1414f\dfsvc.ni.exe
+ 2012-05-10 05:47 . 2012-05-10 05:47 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\016444dfc5f7e3d11c776f2fbc7a4594\Accessibility.ni.dll
- 2012-04-10 19:47 . 2012-04-10 19:47 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
- 2012-04-10 19:47 . 2012-04-10 19:47 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2012-04-10 19:48 . 2012-04-10 19:48 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2012-04-10 19:47 . 2012-04-10 19:47 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
- 2012-04-10 19:48 . 2012-04-10 19:48 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
- 2012-04-10 19:47 . 2012-04-10 19:47 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
- 2012-04-10 19:47 . 2012-04-10 19:47 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
- 2012-04-10 19:48 . 2012-04-10 19:48 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
- 2012-04-10 19:48 . 2012-04-10 19:48 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
- 2012-04-10 19:47 . 2012-04-10 19:47 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
- 2012-04-10 19:47 . 2012-04-10 19:47 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2012-04-10 19:48 . 2012-04-10 19:48 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2012-04-10 19:47 . 2012-04-10 19:47 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2012-05-10 05:25 . 2010-07-05 13:19 26488 c:\windows\$hf_mig$\KB2695962\update\spcustom.dll
+ 2012-05-10 05:25 . 2010-07-05 13:19 18808 c:\windows\$hf_mig$\KB2695962\spmsg.dll
+ 2012-05-10 05:25 . 2010-07-05 13:19 26488 c:\windows\$hf_mig$\KB2686509\update\spcustom.dll
+ 2012-05-10 05:25 . 2010-07-05 13:19 18808 c:\windows\$hf_mig$\KB2686509\spmsg.dll
+ 2012-05-10 05:23 . 2010-07-05 13:19 26488 c:\windows\$hf_mig$\KB2676562\update\spcustom.dll
+ 2012-05-10 05:20 . 2012-04-11 13:53 16896 c:\windows\$hf_mig$\KB2676562\update\mpsyschk.dll
+ 2012-05-10 05:23 . 2010-07-05 13:19 18808 c:\windows\$hf_mig$\KB2676562\spmsg.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
- 2012-04-10 19:48 . 2012-04-10 19:48 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
- 2012-04-10 19:47 . 2012-04-10 19:47 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2012-04-10 19:47 . 2012-04-10 19:47 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2012-04-10 19:47 . 2012-04-10 19:47 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
- 2012-04-10 19:48 . 2012-04-10 19:48 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2012-05-10 05:20 . 2012-04-19 11:26 8192 c:\windows\$hf_mig$\KB2686509\update\kblChecker.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
- 2012-04-10 19:47 . 2012-04-10 19:47 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
- 2012-04-10 19:47 . 2012-04-10 19:47 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
+ 2012-04-05 21:13 . 2012-04-05 21:13 299080 c:\windows\system32\XPSViewer\XPSViewer.exe
+ 2012-05-15 20:05 . 1998-08-05 06:45 122128 c:\windows\system32\VB6IT.DLL
+ 2004-09-09 07:37 . 2012-05-11 14:40 105984 c:\windows\system32\url.dll
- 2004-09-09 07:37 . 2012-03-01 11:00 105984 c:\windows\system32\url.dll
+ 2004-09-09 07:37 . 2012-07-03 16:33 488338 c:\windows\system32\perfh010.dat
- 2004-09-09 07:37 . 2012-05-09 19:01 488338 c:\windows\system32\perfh010.dat
+ 2004-09-09 07:37 . 2012-07-03 16:33 440790 c:\windows\system32\perfh009.dat
- 2004-09-09 07:37 . 2012-05-09 19:01 440790 c:\windows\system32\perfh009.dat
+ 2004-09-09 07:37 . 2012-05-11 14:40 206848 c:\windows\system32\occache.dll
- 2004-09-09 07:37 . 2012-03-01 11:00 206848 c:\windows\system32\occache.dll
+ 2004-09-09 07:37 . 2012-05-11 14:40 611840 c:\windows\system32\mstime.dll
- 2004-09-09 07:37 . 2012-03-01 11:00 611840 c:\windows\system32\mstime.dll
+ 2009-03-08 02:32 . 2012-05-11 14:40 629760 c:\windows\system32\msfeeds.dll
+ 2012-05-15 20:05 . 1998-08-05 06:45 150528 c:\windows\system32\MSCMCIT.DLL
+ 2012-06-22 15:20 . 2012-06-22 15:20 686280 c:\windows\system32\Macromed\Flash\FlashUtil32_11_3_300_262_Plugin.exe
+ 2012-04-03 17:20 . 2012-06-22 15:20 250056 c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
- 2004-09-09 07:36 . 2012-03-01 11:00 184320 c:\windows\system32\iepeers.dll
+ 2004-09-09 07:36 . 2012-05-11 14:40 184320 c:\windows\system32\iepeers.dll
- 2004-09-09 07:36 . 2012-03-01 11:00 387584 c:\windows\system32\iedkcs32.dll
+ 2004-09-09 07:36 . 2012-05-11 14:40 387584 c:\windows\system32\iedkcs32.dll
+ 2004-09-09 07:36 . 2012-05-11 11:38 174080 c:\windows\system32\ie4uinit.exe
- 2004-09-09 07:36 . 2012-02-29 12:17 174080 c:\windows\system32\ie4uinit.exe
- 2004-09-09 07:43 . 2012-03-14 16:14 290088 c:\windows\system32\FNTCACHE.DAT
+ 2004-09-09 07:43 . 2012-06-13 16:00 290088 c:\windows\system32\FNTCACHE.DAT
+ 2004-09-09 07:49 . 2012-06-02 13:19 210968 c:\windows\system32\dllcache\wuweb.dll
+ 2004-09-09 07:49 . 2012-06-02 13:19 329240 c:\windows\system32\dllcache\wucltui.dll
+ 2004-09-09 07:49 . 2012-06-02 13:19 577048 c:\windows\system32\dllcache\wuapi.dll
- 2008-04-21 06:43 . 2012-03-01 11:00 916992 c:\windows\system32\dllcache\wininet.dll
+ 2008-04-21 06:43 . 2012-05-16 15:06 916992 c:\windows\system32\dllcache\wininet.dll
+ 2009-03-08 02:34 . 2012-05-11 14:40 105984 c:\windows\system32\dllcache\url.dll
- 2009-03-08 02:34 . 2012-03-01 11:00 105984 c:\windows\system32\dllcache\url.dll
+ 2011-08-16 19:40 . 2012-05-02 13:46 139656 c:\windows\system32\dllcache\rdpwd.sys
+ 2009-03-08 02:34 . 2012-05-11 14:40 206848 c:\windows\system32\dllcache\occache.dll
- 2009-03-08 02:34 . 2012-03-01 11:00 206848 c:\windows\system32\dllcache\occache.dll
+ 2009-03-08 02:32 . 2012-05-11 14:40 611840 c:\windows\system32\dllcache\mstime.dll
- 2009-03-08 02:32 . 2012-03-01 11:00 611840 c:\windows\system32\dllcache\mstime.dll
+ 2009-07-28 17:49 . 2012-05-11 14:40 629760 c:\windows\system32\dllcache\msfeeds.dll
+ 2009-07-02 16:37 . 2012-05-11 14:40 247808 c:\windows\system32\dllcache\ieproxy.dll
- 2009-07-02 16:37 . 2012-03-01 11:00 247808 c:\windows\system32\dllcache\ieproxy.dll
+ 2009-03-08 02:31 . 2012-05-11 14:40 184320 c:\windows\system32\dllcache\iepeers.dll
- 2009-03-08 02:31 . 2012-03-01 11:00 184320 c:\windows\system32\dllcache\iepeers.dll
- 2010-06-08 17:15 . 2012-03-01 11:00 743424 c:\windows\system32\dllcache\iedvtool.dll
+ 2010-06-08 17:15 . 2012-05-11 14:40 743424 c:\windows\system32\dllcache\iedvtool.dll
+ 2009-03-08 12:09 . 2012-05-11 14:40 387584 c:\windows\system32\dllcache\iedkcs32.dll
- 2009-03-08 12:09 . 2012-03-01 11:00 387584 c:\windows\system32\dllcache\iedkcs32.dll
- 2009-03-08 02:32 . 2012-02-29 12:17 174080 c:\windows\system32\dllcache\ie4uinit.exe
+ 2009-03-08 02:32 . 2012-05-11 11:38 174080 c:\windows\system32\dllcache\ie4uinit.exe
- 2011-09-03 10:17 . 2011-09-28 07:06 603136 c:\windows\system32\dllcache\crypt32.dll
+ 2011-09-03 10:17 . 2012-05-31 13:21 603136 c:\windows\system32\dllcache\crypt32.dll
+ 2012-04-05 21:52 . 2012-04-05 21:52 131168 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationHostDLL.dll
- 2012-01-31 01:38 . 2012-01-31 01:38 630784 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
+ 2012-04-21 05:15 . 2012-04-21 05:15 630784 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
+ 2011-12-25 01:50 . 2011-12-25 01:50 389888 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
+ 2011-12-25 01:50 . 2011-12-25 01:50 364816 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
+ 2011-12-25 01:50 . 2011-12-25 01:50 989968 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
+ 2012-04-25 15:45 . 2012-04-25 15:45 471040 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Drawing.dll
- 2012-01-27 15:35 . 2012-01-27 15:35 471040 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Drawing.dll
+ 2011-12-22 14:50 . 2011-12-22 14:50 256000 c:\windows\Installer\810b1.msp
+ 2012-06-25 17:12 . 2012-06-25 17:12 348160 c:\windows\Installer\25b1452.msi
+ 2012-04-21 19:55 . 2012-04-21 19:55 980480 c:\windows\Installer\176a15b.msp
+ 2010-03-30 23:16 . 2010-03-30 23:16 130408 c:\windows\Installer\$PatchCache$\Managed\0DC1503A46F231838AD88BCDDC8E8F7C\3.2.30729\PresentationHostDLL_X86.dll
+ 2012-06-13 13:24 . 2012-03-01 11:00 916992 c:\windows\ie8updates\KB2699988-IE8\wininet.dll
+ 2012-06-13 13:24 . 2012-03-01 11:00 105984 c:\windows\ie8updates\KB2699988-IE8\url.dll
+ 2012-06-13 13:25 . 2010-07-05 13:20 402296 c:\windows\ie8updates\KB2699988-IE8\spuninst\updspapi.dll
+ 2012-06-13 13:25 . 2010-07-05 13:19 233848 c:\windows\ie8updates\KB2699988-IE8\spuninst\spuninst.exe
+ 2012-06-13 13:24 . 2012-03-01 11:00 206848 c:\windows\ie8updates\KB2699988-IE8\occache.dll
+ 2012-06-13 13:24 . 2012-03-01 11:00 611840 c:\windows\ie8updates\KB2699988-IE8\mstime.dll
+ 2012-06-13 13:24 . 2012-03-01 11:00 602112 c:\windows\ie8updates\KB2699988-IE8\msfeeds.dll
+ 2012-06-13 13:24 . 2009-03-08 02:35 521216 c:\windows\ie8updates\KB2699988-IE8\jsdbgui.dll
+ 2012-06-13 13:24 . 2012-03-01 11:00 247808 c:\windows\ie8updates\KB2699988-IE8\ieproxy.dll
+ 2012-06-13 13:24 . 2012-03-01 11:00 184320 c:\windows\ie8updates\KB2699988-IE8\iepeers.dll
+ 2012-06-13 13:24 . 2012-03-01 11:00 743424 c:\windows\ie8updates\KB2699988-IE8\iedvtool.dll
+ 2012-06-13 13:24 . 2012-03-01 11:00 387584 c:\windows\ie8updates\KB2699988-IE8\iedkcs32.dll
+ 2012-06-13 13:24 . 2012-02-29 12:17 174080 c:\windows\ie8updates\KB2699988-IE8\ie4uinit.exe
+ 2012-06-13 13:24 . 2012-06-13 13:24 843776 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_1d70fd6e\System.Drawing.dll
+ 2012-06-13 13:24 . 2012-06-13 13:24 192512 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_fb2d5150\System.Drawing.Design.dll
+ 2012-05-10 05:48 . 2012-05-10 05:48 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\ac4fc3032c19946f9b2729468888206d\WsatConfig.ni.exe
+ 2012-06-13 16:04 . 2012-06-13 16:04 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\86e11a59f02b2dda27ec2e7cba351744\WindowsFormsIntegration.ni.dll
+ 2012-05-10 05:35 . 2012-05-10 05:35 187904 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\be27ab5913cec2b292a019c2a13ec701\UIAutomationTypes.ni.dll
+ 2012-05-10 05:35 . 2012-05-10 05:35 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\04e5e2be34a70ee7f4c87550238095a0\UIAutomationClient.ni.dll
+ 2012-05-10 05:50 . 2012-05-10 05:50 400896 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\1c13b08593e99d6f5bef49ae7939c78b\System.Xml.Linq.ni.dll
+ 2012-06-13 16:31 . 2012-06-13 16:31 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\698c2093d7ac57af935b399d1c0b1790\System.Web.Routing.ni.dll
+ 2012-05-10 05:50 . 2012-05-10 05:50 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\6c7765c10516d375e9ddedad2dbab848\System.Web.RegularExpressions.ni.dll
+ 2012-06-13 16:31 . 2012-06-13 16:31 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\75248baf640115daeb0e580f1c5ff98b\System.Web.Extensions.Design.ni.dll
+ 2012-06-13 16:31 . 2012-06-13 16:31 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\40c3b61ac38613e2b4b0f196e86185eb\System.Web.Entity.ni.dll
+ 2012-06-13 16:31 . 2012-06-13 16:31 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\39cc9a830f7f08fd9f397be452fd78b0\System.Web.Entity.Design.ni.dll
+ 2012-06-13 16:31 . 2012-06-13 16:31 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\88b1fd4792e7b698b788594d8e5e3c09\System.Web.DynamicData.ni.dll
+ 2012-06-13 16:31 . 2012-06-13 16:31 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\6333d22a2ea347432d46c40d93194c68\System.Web.Abstractions.ni.dll
+ 2012-05-10 05:50 . 2012-05-10 05:50 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\41f6f6dd0c8427d4a8e6fd3915505a6b\System.Transactions.ni.dll
+ 2012-06-13 16:31 . 2012-06-13 16:31 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\8b84bb74d7724e147a642a1d5358feb7\System.ServiceProcess.ni.dll
+ 2012-05-10 05:48 . 2012-05-10 05:48 679936 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\129b15861e200613ff78ae15581f9093\System.Security.ni.dll
+ 2012-05-10 05:49 . 2012-05-10 05:49 311296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\a644ec04e18202b60f9d828bc207972b\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2012-05-10 05:49 . 2012-05-10 05:49 621056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\4a9eb43005a041959ddc5c7e586ab746\System.Net.ni.dll
+ 2012-05-10 05:49 . 2012-05-10 05:49 998400 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\9080c8e8e7b6dfb502c1328673d636f8\System.Management.ni.dll
+ 2012-05-10 05:49 . 2012-05-10 05:49 330752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\3182a049ba953010dec649cf290a9e90\System.Management.Instrumentation.ni.dll
+ 2012-05-10 05:47 . 2012-05-10 05:47 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\8991f21d4b3676bf6f779110db8d4ac9\System.IO.Log.ni.dll
+ 2012-05-10 05:47 . 2012-05-10 05:47 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\cd9c60a35d4958e94d2e3dd2f778e2e9\System.IdentityModel.Selectors.ni.dll
+ 2012-05-10 05:49 . 2012-05-10 05:49 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\29bce0113d611084a9329349e33528ac\System.EnterpriseServices.Wrapper.dll
+ 2012-05-10 05:49 . 2012-05-10 05:49 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\29bce0113d611084a9329349e33528ac\System.EnterpriseServices.ni.dll
+ 2012-06-13 16:03 . 2012-06-13 16:03 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\96a3fc1f74a00b618b70bd1701600408\System.Drawing.Design.ni.dll
+ 2012-05-10 05:49 . 2012-05-10 05:49 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\ca484772955bc4db03b5dcb611c09423\System.DirectoryServices.Protocols.ni.dll
+ 2012-05-10 05:49 . 2012-05-10 05:49 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\8ba5e68dddfd3279a8469d39eded48f3\System.DirectoryServices.AccountManagement.ni.dll
+ 2012-05-10 05:49 . 2012-05-10 05:49 354816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\a0109fce606a3110a5e7f9a4773f517e\System.Data.Services.Design.ni.dll
+ 2012-05-10 05:49 . 2012-05-10 05:49 939008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\3a68d0441f509ffa6f8f0fb9cfcc5780\System.Data.Services.Client.ni.dll
+ 2012-05-10 05:49 . 2012-05-10 05:49 756736 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\04440b3dd5d822da4973a525ee04b05d\System.Data.Entity.Design.ni.dll
+ 2012-05-10 05:48 . 2012-05-10 05:48 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\7bbb5d9e3b161b4d4b968e590442d3ae\System.Data.DataSetExtensions.ni.dll
+ 2012-05-10 05:48 . 2012-05-10 05:48 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\3d5b7368bde0f65aa15d9f46b498cc89\System.Configuration.ni.dll
+ 2012-06-13 13:27 . 2012-06-13 13:27 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\badd66e1d2b8416e9bb868ad059203c6\System.Configuration.Install.ni.dll
+ 2012-05-10 05:48 . 2012-05-10 05:48 634368 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\931a2bece4668863db4f852401c828cf\System.AddIn.ni.dll
+ 2012-05-10 05:48 . 2012-05-10 05:48 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\6762f1ee780fa9c0b4ef66b285c64844\SMSvcHost.ni.exe
+ 2012-05-10 05:48 . 2012-05-10 05:48 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\660c4d6dd69ef22bc05587e1998cd135\SMDiagnostics.ni.dll
+ 2012-05-10 05:48 . 2012-05-10 05:48 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\47ed5bc9f42ea0054ce9acfde5e640b8\ServiceModelReg.ni.exe
+ 2012-05-10 05:33 . 2012-05-10 05:33 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\a4706b850df9a3483f2fc439b6abe616\PresentationFramework.Royale.ni.dll
+ 2012-05-10 05:33 . 2012-05-10 05:33 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\8b873631a0855fb6aa0ad25f1d9de7fe\PresentationFramework.Luna.ni.dll
+ 2012-05-10 05:33 . 2012-05-10 05:33 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\7416fe825e6e49a87fa8ff60c8971813\PresentationFramework.Classic.ni.dll
+ 2012-05-10 05:33 . 2012-05-10 05:33 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\186c27fbd7b38b5551889274f6fa2ccd\PresentationFramework.Aero.ni.dll
+ 2012-05-10 05:48 . 2012-05-10 05:48 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\5a121969a115d11b6256eb960c145686\MSBuild.ni.exe
+ 2012-05-10 05:48 . 2012-05-10 05:48 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\97c613d3899b320a6765793bdf490272\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2012-05-10 05:48 . 2012-05-10 05:48 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\dec22fb7d6b8929a41380e5359741a07\Microsoft.Build.Utilities.v3.5.ni.dll
+ 2012-05-10 05:48 . 2012-05-10 05:48 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\1009b31c86a1b798fffa9e0127cec29c\Microsoft.Build.Utilities.ni.dll
+ 2012-05-10 05:48 . 2012-05-10 05:48 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\21d88631ef629715d3eecdd08e62e0b8\Microsoft.Build.Engine.ni.dll
+ 2012-05-10 05:48 . 2012-05-10 05:48 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\a0f38c6478cca8297fb160291346c1c9\Microsoft.Build.Conversion.v3.5.ni.dll
+ 2012-05-10 05:48 . 2012-05-10 05:48 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\bb26dd100d656605c576881a1a823667\CustomMarshalers.ni.dll
+ 2012-05-10 05:48 . 2012-05-10 05:48 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\9869c02d18825fdd32e64135a3e7246b\ComSvcConfig.ni.exe
+ 2012-06-13 16:30 . 2012-06-13 16:30 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\c0045c1c7c29c7e7cc7bd60001b729a7\AspNetMMCExt.ni.dll
- 2012-04-10 19:47 . 2012-04-10 19:47 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
- 2012-04-10 19:47 . 2012-04-10 19:47 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2012-04-10 19:48 . 2012-04-10 19:48 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2012-04-10 19:48 . 2012-04-10 19:48 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
- 2012-04-10 19:47 . 2012-04-10 19:47 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
- 2012-04-10 19:47 . 2012-04-10 19:47 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
- 2012-04-10 19:47 . 2012-04-10 19:47 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
- 2012-04-10 19:47 . 2012-04-10 19:47 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 630784 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
- 2012-04-10 19:48 . 2012-04-10 19:48 630784 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2012-04-10 19:47 . 2012-04-10 19:47 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2012-04-10 19:47 . 2012-04-10 19:47 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
- 2012-04-10 19:48 . 2012-04-10 19:48 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
- 2012-04-10 19:48 . 2012-04-10 19:48 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
- 2012-04-10 19:48 . 2012-04-10 19:48 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2012-05-10 05:35 . 2012-05-10 05:35 163840 c:\windows\assembly\GAC_MSIL\System.AddIn\3.5.0.0__b77a5c561934e089\System.AddIn.dll
- 2011-12-12 22:48 . 2011-12-12 22:48 163840 c:\windows\assembly\GAC_MSIL\System.AddIn\3.5.0.0__b77a5c561934e089\System.AddIn.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
- 2012-04-10 19:47 . 2012-04-10 19:47 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2012-05-10 05:24 . 2012-05-10 05:24 532480 c:\windows\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\ReachFramework.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
- 2012-04-10 19:47 . 2012-04-10 19:47 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2012-04-10 19:47 . 2012-04-10 19:47 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2012-04-10 19:47 . 2012-04-10 19:47 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
- 2012-04-10 19:47 . 2012-04-10 19:47 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
- 2012-04-10 19:48 . 2012-04-10 19:48 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
- 2012-04-10 19:48 . 2012-04-10 19:48 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
- 2012-04-10 19:47 . 2012-04-10 19:47 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
- 2012-04-10 19:47 . 2012-04-10 19:47 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2012-05-10 05:24 . 2012-05-10 05:24 368640 c:\windows\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll
- 2011-12-12 22:47 . 2011-12-12 22:47 368640 c:\windows\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2012-04-10 19:47 . 2012-04-10 19:47 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
- 2012-04-10 19:47 . 2012-04-10 19:47 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
- 2012-04-10 19:47 . 2012-04-10 19:47 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
- 2012-04-10 19:49 . 2012-04-10 19:49 471040 c:\windows\assembly\GAC\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2012-06-13 13:24 . 2012-06-13 13:24 471040 c:\windows\assembly\GAC\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2012-05-10 05:25 . 2010-07-05 13:20 402296 c:\windows\$NtUninstallKB2695962$\spuninst\updspapi.dll
+ 2012-05-10 05:25 . 2010-07-05 13:19 233848 c:\windows\$NtUninstallKB2695962$\spuninst\spuninst.exe
+ 2012-05-10 05:25 . 2010-07-05 13:20 402296 c:\windows\$NtUninstallKB2686509$\spuninst\updspapi.dll
+ 2012-05-10 05:25 . 2010-07-05 13:19 233848 c:\windows\$NtUninstallKB2686509$\spuninst\spuninst.exe
+ 2012-05-10 05:23 . 2010-07-05 13:20 402296 c:\windows\$NtUninstallKB2676562$\spuninst\updspapi.dll
+ 2012-05-10 05:23 . 2010-07-05 13:19 233848 c:\windows\$NtUninstallKB2676562$\spuninst\spuninst.exe
+ 2012-05-10 05:36 . 2010-07-05 13:20 402296 c:\windows\$NtUninstallKB2659262$\spuninst\updspapi.dll
+ 2012-05-10 05:36 . 2010-07-05 13:19 233848 c:\windows\$NtUninstallKB2659262$\spuninst\spuninst.exe
+ 2012-05-10 05:25 . 2010-07-05 13:20 402296 c:\windows\$hf_mig$\KB2695962\update\updspapi.dll
+ 2012-05-10 05:25 . 2010-07-05 13:20 763768 c:\windows\$hf_mig$\KB2695962\update\update.exe
+ 2012-05-10 05:25 . 2010-07-05 13:19 233848 c:\windows\$hf_mig$\KB2695962\spuninst.exe
+ 2012-05-10 05:25 . 2010-07-05 13:20 402296 c:\windows\$hf_mig$\KB2686509\update\updspapi.dll
+ 2012-05-10 05:25 . 2010-07-05 13:20 763768 c:\windows\$hf_mig$\KB2686509\update\update.exe
+ 2012-05-10 05:25 . 2010-07-05 13:19 233848 c:\windows\$hf_mig$\KB2686509\spuninst.exe
+ 2012-05-10 05:23 . 2010-07-05 13:20 402296 c:\windows\$hf_mig$\KB2676562\update\updspapi.dll
+ 2012-05-10 05:23 . 2010-07-05 13:20 763768 c:\windows\$hf_mig$\KB2676562\update\update.exe
+ 2012-05-10 05:23 . 2010-07-05 13:19 233848 c:\windows\$hf_mig$\KB2676562\spuninst.exe

+ 2012-05-10 05:20 . 2012-02-09 15:43 1748992 c:\windows\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6002.22791_x-ww_c8dff154\GdiPlus.dll
- 2004-09-09 07:37 . 2012-03-01 11:00 1212416 c:\windows\system32\urlmon.dll
+ 2004-09-09 07:37 . 2012-05-11 14:40 1212416 c:\windows\system32\urlmon.dll
+ 2004-09-09 07:37 . 2012-05-11 14:40 6007808 c:\windows\system32\mshtml.dll
+ 2012-06-22 15:20 . 2012-06-22 15:20 9459912 c:\windows\system32\Macromed\Flash\NPSWF32_11_3_300_262.dll
- 2009-03-08 02:32 . 2012-03-01 11:00 2000384 c:\windows\system32\iertutil.dll
+ 2009-03-08 02:32 . 2012-05-11 14:40 2000384 c:\windows\system32\iertutil.dll
+ 2004-09-09 07:49 . 2012-06-02 13:19 1933848 c:\windows\system32\dllcache\wuaueng.dll
+ 2008-10-16 04:10 . 2012-05-15 13:56 1863168 c:\windows\system32\dllcache\win32k.sys
+ 2008-06-26 08:13 . 2012-05-11 14:40 1212416 c:\windows\system32\dllcache\urlmon.dll
- 2008-06-26 08:13 . 2012-03-01 11:00 1212416 c:\windows\system32\dllcache\urlmon.dll
+ 2008-10-16 04:16 . 2012-05-05 03:14 2196352 c:\windows\system32\dllcache\ntoskrnl.exe
+ 2008-10-16 04:16 . 2012-05-05 03:14 2030080 c:\windows\system32\dllcache\ntkrpamp.exe
+ 2008-10-16 04:16 . 2012-05-05 03:14 2072832 c:\windows\system32\dllcache\ntkrnlpa.exe
+ 2008-10-16 04:16 . 2012-05-05 03:14 2151936 c:\windows\system32\dllcache\ntkrnlmp.exe
+ 2008-04-21 06:43 . 2012-05-11 14:40 6007808 c:\windows\system32\dllcache\mshtml.dll
- 2009-07-02 16:37 . 2012-03-01 11:00 2000384 c:\windows\system32\dllcache\iertutil.dll
+ 2009-07-02 16:37 . 2012-05-11 14:40 2000384 c:\windows\system32\dllcache\iertutil.dll
- 2011-03-25 05:15 . 2011-03-25 05:15 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
+ 2012-03-20 03:23 . 2012-03-20 03:23 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
- 2011-10-26 02:39 . 2011-10-26 02:39 3186688 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
+ 2011-12-25 01:50 . 2011-12-25 01:50 3186688 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
+ 2012-03-20 03:23 . 2012-03-20 03:23 5062656 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
- 2008-07-25 10:17 . 2008-07-25 10:17 5062656 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
+ 2011-12-25 01:50 . 2011-12-25 01:50 5913360 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
+ 2011-12-25 01:50 . 2011-12-25 01:50 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
- 2011-07-07 04:18 . 2011-07-07 04:18 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
- 2012-01-31 02:46 . 2012-01-31 02:46 6385664 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\M2656370\M2656370Uninstall.msp
+ 2012-04-26 00:32 . 2012-04-26 00:32 6385664 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\M2656370\M2656370Uninstall.msp
+ 2012-04-25 17:32 . 2012-04-25 17:32 7069184 c:\windows\Installer\176a155.msp
+ 2012-03-20 21:57 . 2012-03-20 21:57 6188544 c:\windows\Installer\176a14c.msp
+ 2010-03-30 23:16 . 2010-03-30 23:16 1249280 c:\windows\Installer\$PatchCache$\Managed\0DC1503A46F231838AD88BCDDC8E8F7C\3.2.30729\WindowsBase_x86.dll
+ 2011-12-13 22:11 . 2011-12-13 22:11 1249280 c:\windows\Installer\$PatchCache$\Managed\0DC1503A46F231838AD88BCDDC8E8F7C\3.2.30729\WindowsBase_GAC_x86.dll
+ 2010-03-30 23:16 . 2010-03-30 23:16 4210688 c:\windows\Installer\$PatchCache$\Managed\0DC1503A46F231838AD88BCDDC8E8F7C\3.2.30729\PresentationCore_x86.dll
+ 2011-12-13 22:11 . 2011-12-13 22:11 4210688 c:\windows\Installer\$PatchCache$\Managed\0DC1503A46F231838AD88BCDDC8E8F7C\3.2.30729\PresentationCore_GAC_x86.dll
+ 2012-06-13 13:24 . 2012-03-01 11:00 1212416 c:\windows\ie8updates\KB2699988-IE8\urlmon.dll
+ 2012-06-13 13:24 . 2012-03-01 11:00 5978624 c:\windows\ie8updates\KB2699988-IE8\mshtml.dll
+ 2012-06-13 13:24 . 2012-03-01 11:00 2000384 c:\windows\ie8updates\KB2699988-IE8\iertutil.dll
+ 2008-10-16 04:16 . 2012-05-05 03:14 2196352 c:\windows\Driver Cache\i386\ntoskrnl.exe
+ 2008-10-16 04:16 . 2012-05-05 03:14 2030080 c:\windows\Driver Cache\i386\ntkrpamp.exe
+ 2008-10-16 04:16 . 2012-05-05 03:14 2072832 c:\windows\Driver Cache\i386\ntkrnlpa.exe
+ 2008-10-16 04:16 . 2012-05-05 03:14 2151936 c:\windows\Driver Cache\i386\ntkrnlmp.exe
+ 2012-06-13 13:24 . 2012-06-13 13:24 7917568 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_ba064b34\System.Windows.Forms.dll
+ 2012-06-13 13:24 . 2012-06-13 13:24 3035136 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_331d9f2c\System.Windows.Forms.dll
+ 2012-06-13 13:25 . 2012-06-13 13:25 2248704 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_b250ccfe\System.Drawing.dll
+ 2012-06-13 13:24 . 2012-06-13 13:24 1466368 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_56258dd8\System.Design.dll
+ 2012-06-13 13:25 . 2012-06-13 13:25 3395584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_14b05c85\System.Design.dll
+ 2012-05-10 05:32 . 2012-05-10 05:32 3325440 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\6d8bef0d008389874e55c0308f0c18e5\WindowsBase.ni.dll
+ 2012-05-10 05:35 . 2012-05-10 05:35 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\41a81b97625c113b591ed082c95276e2\UIAutomationClientsideProviders.ni.dll
+ 2012-05-10 05:32 . 2012-05-10 05:32 7953408 c:\windows\assembly\NativeImages_v2.0.50727_32\System\e4b5afc4da43b1c576f9322f9f2e1bfe\System.ni.dll
+ 2012-05-10 05:34 . 2012-05-10 05:34 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\3bba1b8b0b5ef0be238b011cc7a0575e\System.Xml.ni.dll
+ 2012-06-13 16:31 . 2012-06-13 16:31 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\bd5bd406670d483b82bd51249eee59e3\System.WorkflowServices.ni.dll
+ 2012-06-13 13:28 . 2012-06-13 13:28 1908224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\77361ebe9ad8ff77cc9a8d7f8363eb05\System.Workflow.Runtime.ni.dll
+ 2012-06-13 16:31 . 2012-06-13 16:31 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\1c12dfa7826b331b243b7b45daf9904d\System.Workflow.ComponentModel.ni.dll
+ 2012-06-13 16:31 . 2012-06-13 16:31 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\514bf0e69e2c9fc8509cd23236057356\System.Workflow.Activities.ni.dll
+ 2012-06-13 13:27 . 2012-06-13 13:27 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\e70343406253e43964f9fe1f42cfbd7c\System.Web.Services.ni.dll
+ 2012-06-13 16:31 . 2012-06-13 16:31 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\77f8cde07b131839f1841be702837e8e\System.Web.Mobile.ni.dll
+ 2012-06-13 16:31 . 2012-06-13 16:31 2405888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\242b168aaca18197eca371ec269e23ac\System.Web.Extensions.ni.dll
+ 2012-05-10 05:34 . 2012-05-10 05:34 1917440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\5efb50c91f3c5e49be2079f625d933b7\System.Speech.ni.dll
+ 2012-05-10 05:49 . 2012-05-10 05:49 1706496 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\97d635f5c656ae43d94b55e67fc4ab50\System.ServiceModel.Web.ni.dll
+ 2012-05-10 05:47 . 2012-05-10 05:47 2345472 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\505e12638acd6fdb22e1fd2d4c6fc232\System.Runtime.Serialization.ni.dll
+ 2012-06-13 16:03 . 2012-06-13 16:03 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\d380f1813e27c2a086e62f0218669d67\System.Printing.ni.dll
+ 2012-05-10 05:47 . 2012-05-10 05:47 1070080 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\e09496ddb2bf6f3b69707924f2e6b5ff\System.IdentityModel.ni.dll
+ 2012-06-13 16:03 . 2012-06-13 16:03 1592320 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\d86f2038209a4cf0d0f5b30f6375c9b2\System.Drawing.ni.dll
+ 2012-05-10 05:49 . 2012-05-10 05:49 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\b55887436d2cfbe1fb32dd18d554185b\System.DirectoryServices.ni.dll
+ 2012-06-13 16:30 . 2012-06-13 16:30 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\7a53d68ad544f8e9edfdbd5a90a48fd3\System.Deployment.ni.dll
+ 2012-05-10 05:34 . 2012-05-10 05:34 6616576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\12c6fe8d4dd78f9bddf847d3b2821c03\System.Data.ni.dll
+ 2012-05-10 05:48 . 2012-05-10 05:48 2510336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\982b508698278c6ffb3d143bbe1e8bb8\System.Data.SqlXml.ni.dll
+ 2012-05-10 05:49 . 2012-05-10 05:49 1328128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\2de7666b1cd0a1bc363726c9553dc39c\System.Data.Services.ni.dll
+ 2012-05-10 05:34 . 2012-05-10 05:34 2516480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\44a5fc9e7c71b1fe1e2c79b03ecc3bc7\System.Data.Linq.ni.dll
+ 2012-05-10 05:49 . 2012-05-10 05:49 9924096 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\772c94f595cd87b7fa187d592ef46fcf\System.Data.Entity.ni.dll
+ 2012-05-10 05:33 . 2012-05-10 05:33 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\38d07a5ac34b99d94fd14f42e779f625\System.Core.ni.dll
+ 2012-06-13 16:02 . 2012-06-13 16:02 2146304 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\443dd7f0b84c3de54b1a72be655e307c\ReachFramework.ni.dll
+ 2012-06-13 16:02 . 2012-06-13 16:02 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\48ddcafff1a5603fb3289e90330275c0\PresentationUI.ni.dll
+ 2012-05-10 05:32 . 2012-05-10 05:32 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\8c509044eea2ab22689ea43926b30108\PresentationBuildTasks.ni.dll
+ 2012-06-13 16:30 . 2012-06-13 16:30 1712128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\359fd69eb60e9844ffd497e92345178c\Microsoft.VisualBasic.ni.dll
+ 2012-05-10 05:48 . 2012-05-10 05:48 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\42145ebf75f77cabad442f0801a81c64\Microsoft.Transactions.Bridge.ni.dll
+ 2012-05-10 05:49 . 2012-05-10 05:49 2332160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\cfe15312373b4668398404b5822bab7d\Microsoft.JScript.ni.dll
+ 2012-06-13 16:30 . 2012-06-13 16:30 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\4e463dcf2a03c71913a61b44c32e2389\Microsoft.Build.Tasks.ni.dll
+ 2012-06-13 16:30 . 2012-06-13 16:30 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\395b4a85c7941ac4dd9d1c6f5eb444c7\Microsoft.Build.Tasks.v3.5.ni.dll
+ 2012-05-10 05:48 . 2012-05-10 05:48 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\5aa63a1cb41e3a5e1e8ed17072e60ec3\Microsoft.Build.Engine.ni.dll
- 2011-12-13 22:11 . 2011-12-13 22:11 1249280 c:\windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll
+ 2012-05-10 05:24 . 2012-05-10 05:24 1249280 c:\windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 3186688 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
- 2012-04-10 19:48 . 2012-04-10 19:48 3186688 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
- 2012-04-10 19:48 . 2012-04-10 19:48 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
- 2012-04-10 19:47 . 2012-04-10 19:47 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
- 2012-04-10 19:47 . 2012-04-10 19:47 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2012-05-10 05:24 . 2012-05-10 05:24 5283840 c:\windows\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll
- 2012-04-10 19:47 . 2012-04-10 19:47 5246976 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 5246976 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
- 2012-04-10 19:48 . 2012-04-10 19:48 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
+ 2012-05-10 05:24 . 2012-05-10 05:24 4214784 c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
+ 2012-06-13 13:31 . 2012-06-13 13:31 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
- 2012-04-10 19:47 . 2012-04-10 19:47 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2012-05-10 05:23 . 2012-02-03 09:57 1860096 c:\windows\$NtUninstallKB2676562$\win32k.sys
+ 2012-05-10 05:23 . 2011-10-26 10:49 2152448 c:\windows\$NtUninstallKB2676562$\ntoskrnl.exe
+ 2012-05-10 05:23 . 2011-10-26 10:49 2030592 c:\windows\$NtUninstallKB2676562$\ntkrpamp.exe
+ 2012-05-10 05:23 . 2011-10-26 10:49 2030592 c:\windows\$NtUninstallKB2676562$\ntkrnlpa.exe
+ 2012-05-10 05:23 . 2011-10-26 10:49 2152448 c:\windows\$NtUninstallKB2676562$\ntkrnlmp.exe
+ 2012-04-11 13:50 . 2012-04-11 13:50 1871360 c:\windows\$hf_mig$\KB2676562\SP3QFE\win32k.sys
+ 2012-04-11 13:50 . 2012-04-11 13:50 2196352 c:\windows\$hf_mig$\KB2676562\SP3QFE\ntoskrnl.exe
+ 2012-04-11 13:50 . 2012-04-11 13:50 2030080 c:\windows\$hf_mig$\KB2676562\SP3QFE\ntkrpamp.exe
+ 2012-04-11 13:50 . 2012-04-11 13:50 2072832 c:\windows\$hf_mig$\KB2676562\SP3QFE\ntkrnlpa.exe
+ 2012-04-11 13:50 . 2012-04-11 13:50 2151936 c:\windows\$hf_mig$\KB2676562\SP3QFE\ntkrnlmp.exe
+ 2007-10-13 08:08 . 2012-06-13 13:25 56731752 c:\windows\system32\MRT.exe
+ 2009-03-08 02:39 . 2012-05-11 18:10 11111424 c:\windows\system32\ieframe.dll
+ 2009-07-02 16:37 . 2012-05-11 18:10 11111424 c:\windows\system32\dllcache\ieframe.dll
+ 2012-04-06 00:12 . 2012-04-06 00:12 15709696 c:\windows\Installer\810b8.msp
+ 2012-01-04 00:25 . 2012-01-04 00:25 17751552 c:\windows\Installer\810aa.msp
+ 2012-04-06 01:13 . 2012-04-06 01:13 16527872 c:\windows\Installer\8109d.msp
+ 2012-06-13 13:24 . 2012-03-02 04:00 11082752 c:\windows\ie8updates\KB2699988-IE8\ieframe.dll
+ 2012-06-13 16:04 . 2012-06-13 16:04 12433920 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\01abbadafaf265d9f4ac9bbb247acb98\System.Windows.Forms.ni.dll
+ 2012-06-13 16:31 . 2012-06-13 16:31 11817472 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\dbc413807cb7360b3e26ef3ca1d54f9a\System.Web.ni.dll
+ 2012-05-10 05:48 . 2012-05-10 05:48 17403904 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\bc254d2fa26664898ae21d45643bc194\System.ServiceModel.ni.dll
+ 2012-06-13 16:03 . 2012-06-13 16:03 10682368 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\f73a8455f384e90f6925309336fece24\System.Design.ni.dll
+ 2012-06-13 16:01 . 2012-06-13 16:01 14329856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\e4ecfaaf5417aceecb7fa8abddf06113\PresentationFramework.ni.dll
+ 2012-06-13 13:32 . 2012-06-13 13:32 12218368 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\f33e2a4d9b385234406fa2d662f78875\PresentationCore.ni.dll
+ 2012-05-10 05:32 . 2012-05-10 05:32 11492352 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\e337c89bc9f81b69d7237aa70e935900\mscorlib.ni.dll
.
-- Snapshot per reimpostare la data corrente --
.
((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* i valori vuoti & legittimi/default non sono visualizzati.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-03-07 00:15 123536 ----a-w- c:\programmi\Alwil Software\Avast5\ashShell.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"igfxhkcmd"="c:\windows\system32\hkcmd.exe" [2005-12-13 77824]
"igfxpers"="c:\windows\system32\igfxpers.exe" [2005-12-13 118784]
"Broadcom Wireless Manager UI"="c:\windows\system32\WLTRAY.exe" [2006-10-31 1392640]
"CTSVolFE.exe"="c:\programmi\Creative\Mixer\CTSVolFE.exe" [2005-02-23 57344]
"ISUSPM Startup"="c:\progra~1\FILECO~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2006-10-03 221184]
"ISUSScheduler"="c:\programmi\File comuni\InstallShield\UpdateService\issch.exe" [2006-10-03 81920]
"igfxtray"="c:\windows\system32\igfxtray.exe" [2005-12-13 98304]
"SynTPEnh"="c:\programmi\Synaptics\SynTP\SynTPEnh.exe" [2006-03-08 761947]
"Dell QuickSet"="c:\programmi\Dell\QuickSet\Quickset.exe" [2007-02-20 1191936]
"SunJavaUpdateSched"="c:\programmi\File comuni\Java\Java Update\jusched.exe" [2012-01-18 254696]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
2008-11-20 18:54 133104 ----atw- c:\documents and settings\Marco\Impostazioni locali\Dati applicazioni\Google\Update\GoogleUpdate.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
2007-05-08 14:24 54840 ----a-w- c:\programmi\HP\HP Software Update\hpwuSchd2.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Start WingMan Profiler]
2008-04-04 18:37 88584 ----a-w- c:\programmi\Logitech\Gaming Software\LWEMon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Programmi\\Dell\\MediaDirect\\PCMService.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\Programmi\\Mozilla Firefox\\firefox.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Documents and Settings\\Marco\\Impostazioni locali\\Dati applicazioni\\Google\\Google Talk Plugin\\googletalkplugin.dll"=
"c:\\Documents and Settings\\Marco\\Impostazioni locali\\Dati applicazioni\\Google\\Google Talk Plugin\\googletalkplugin.exe"=
"c:\\Papyrus\\NASCAR Racing 2003 Season\\Nr2003.exe"=
"c:\\Papyrus\\NASCAR Racing 2003 Season\\server.exe"=
"c:\\Programmi\\Java\\jre6\\bin\\java.exe"=
"c:\\Programmi\\Skype\\Phone\\Skype.exe"=
"c:\\Programmi\\Google\\Google Earth\\plugin\\geplugin.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpfcCopy.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"=
"c:\\Programmi\\HP\\HP Software Update\\HPWUCli.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\{722B4A13-F24D-43AE-8813-5DB82C0B23C2}\\setup\\hpznui01.exe"=
"c:\\Programmi\\uTorrent\\uTorrent.exe"=
.
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [06/04/2011 7.21.36 612184]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [05/04/2008 9.15.08 337880]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [05/04/2008 9.15.08 20696]
R3 seehcri;Sony Ericsson seehcri Device Driver;c:\windows\system32\drivers\seehcri.sys [17/10/2010 22.48.22 27632]
S2 gupdate;Servizio di Google Update (gupdate);c:\programmi\Google\Update\GoogleUpdate.exe [11/08/2010 22.22.00 136176]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [03/04/2012 19.20.42 250056]
S3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\drivers\ggflt.sys [17/10/2010 22.48.08 13224]
S3 gupdatem;Servizio Google Update (gupdatem);c:\programmi\Google\Update\GoogleUpdate.exe [11/08/2010 22.22.00 136176]
S3 MozillaMaintenance;Mozilla Maintenance Service;c:\programmi\Mozilla Maintenance Service\maintenanceservice.exe [24/04/2012 23.29.24 113120]
S3 PAC207;USB PC Cam Plus;c:\windows\system32\drivers\PFC027.sys [24/02/2005 13.29.14 162176]
S3 pmx3gmdm;Olivetti USB Device for Legacy Serial Communication;c:\windows\system32\drivers\pmx3gmdm.sys [09/03/2010 20.18.38 103552]
S3 pmx3gnet;Olivetti USB-NDIS miniport;c:\windows\system32\drivers\pmx3gnet.sys [09/03/2010 20.18.53 117120]
S3 Service_Desktop;Desktop;c:\programmi\Free-Soft\Virtual Desktop\Desktop.exe --> c:\programmi\Free-Soft\Virtual Desktop\Desktop.exe [?]
.
--- Altri Servizi/Drivers In Memoria ---
.
*NewlyCreated* - IDSVC
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
HPService REG_MULTI_SZ HPSLPSVC
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
Contenuto della cartella 'Scheduled Tasks'
.
2012-07-03 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-03 15:20]
.
2012-07-03 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\programmi\Google\Update\GoogleUpdate.exe [2010-08-11 12:14]
.
2012-07-03 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\programmi\Google\Update\GoogleUpdate.exe [2010-08-11 12:14]
.
2012-07-02 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-486478474-1946997025-4171476511-1005Core.job
- c:\documents and settings\Marco\Impostazioni locali\Dati applicazioni\Google\Update\GoogleUpdate.exe [2008-11-20 18:54]
.
2012-07-03 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-486478474-1946997025-4171476511-1005UA.job
- c:\documents and settings\Marco\Impostazioni locali\Dati applicazioni\Google\Update\GoogleUpdate.exe [2008-11-20 18:54]
.
.
------- Scansione supplementare -------
.
uStart Page = hxxp://www.google.it/ig/dell?hl=it&clie ... bd=2071003
uInternet Connection Wizard,ShellNext = iexplore
IE: E&sporta in Microsoft Excel - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
FF - ProfilePath - c:\documents and settings\Marco\Dati applicazioni\Mozilla\Firefox\Profiles\9qw40vcw.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.it/
FF - user.js: yahoo.ytff.general.dontshowhpoffer - true
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-07-03 18:49
Windows 5.1.2600 Service Pack 3 NTFS
.
scansione processi nascosti ...
.
scansione entrate autostart nascoste ...
.
Scansione files nascosti ...
.
Scansione completata con successo
Files nascosti: 0
.
**************************************************************************
.
Ora fine scansione: 2012-07-03 18:51:35
ComboFix-quarantined-files.txt 2012-07-03 16:51
.
Pre-Run: 12°410°621°952 byte disponibili
Post-Run: 12°506°050°560 byte disponibili
.
- - End Of File - - EECA5E2DAD727F0F4C5CA3F313770C9F









Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22.34.33, on 03/07/2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\Programmi\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Programmi\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\PAStiSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\Programmi\Creative\Mixer\CTSVolFE.exe
C:\Programmi\Synaptics\SynTP\SynTPEnh.exe
C:\Programmi\Dell\QuickSet\Quickset.exe
C:\Programmi\File comuni\Java\Java Update\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmi\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Marco\New Folder\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.it/ig/dell?hl=it&clie ... bd=2071003
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = http://www.google.it/ig/dell?hl=it&clie ... bd=2071003
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programmi\Java\jre6\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programmi\Alwil Software\Avast5\aswWebRepIE.dll
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Programmi\Dell\BAE\BAE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programmi\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programmi\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programmi\Alwil Software\Avast5\aswWebRepIE.dll
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\WINDOWS\system32\WLTRAY.exe
O4 - HKLM\..\Run: [CTSVolFE.exe] "C:\Programmi\Creative\Mixer\CTSVolFE.exe" /r
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FILECO~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Programmi\File comuni\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Programmi\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Dell QuickSet] C:\Programmi\Dell\QuickSet\Quickset.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programmi\File comuni\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Ricerche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FILECO~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Precaricatore Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Daemon di cache delle categorie di componenti - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Programmi\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Programmi\DellSupport\brkrsvc.exe
O23 - Service: Servizio di Google Update (gupdate) (gupdate) - Google Inc. - C:\Programmi\Google\Update\GoogleUpdate.exe
O23 - Service: Servizio Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Programmi\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programmi\File comuni\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programmi\Java\jre6\bin\jqs.exe
O23 - Service: MATLAB Server (matlabserver) - Unknown owner - C:\MATLAB6p5\webserver\bin\win32\matlabserver.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Programmi\File comuni\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Programmi\File comuni\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: Desktop (Service_Desktop) - Unknown owner - C:\Programmi\Free-Soft\Virtual Desktop\Desktop.exe (file missing)
O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Programmi\File comuni\SureThing Shared\stllssvr.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE

--
End of file - 6923 bytes

Ciao !

Segui questa guida:
informatica-ed-internet-windows-xp/velocizzare-il-pc-windows-xp-t21611.html

Poi riprova dopo aver riavviato con Google Chrome.

Prova anche con l'antivirus disabilitato.

Grazie per le indicazioni, proverò a seguire quella procedura (molte cose di fatto le ho già fatte).

Comunque leggendo i log hai notato qualcosa di strano? qualche processo indesiderato?

no niente di particolare