Windows XP Internet Security 2012

Corrine · June 08, 2012, 01:55:42 AM

Since none of those problems depend on IE8, it should be fine. Although, how or why Bryan managed to install IE7 after IE8 was installed, I cannot guess. That is likely what messed up the configuration of IE8.

DonnaB · June 08, 2012, 02:29:43 AM

Corrine. I was thinking the same thing.

Just created a Restore Point and went to uninstall IE7 via Add/Remove but there is no Remove option when I click on it. I could change:

%windir%\ie8\spuninst\spuninst.exe

to

%windir%\ie7\spuninst\spuninst.exe

Couldn't I? Or will I have to go to MS Updates to uninstall the update? I noticed last night when I was looking around in Updates hISTORY that it installed towards the end of 2011.

By the way, I do have right click function but no left click functions for any links in this thread, however, I can right click the link on How to change the file extension in post #3 then left click links from there. Never had that ability earlier this happened after Step #4 below. Tried it with TDSSKiller but nothing else.

In the meantime, here are the things I tried from the other links above:

Steps 2, 3, and 4 from first link above:

Results for Step #2:

Reset Internet Settings. No change.

Results for Step #3:

Didn't see anything that was related to the issue.

Results for Step #4:

Clicked Fix It button. Requested to install Microsoft .Net Framework Version 2.0 Redistributable Package (x86) then tried MS Fix It 50492 after installing dotntfix thing. No change.

On a whim, I clicked on Tools > Manage Add-ons and found that uTorrentbar Findbar was enabled. Disabled that, left clicked on TDSSKiller.exe above and was not able to access download, though I could right click and was presented with menu to choose Open in New Tab which I clicked and was presented with the TDSSKiller executable ready to download.

From my research the Add-on has to be disabled before uninstalling through Add/Remove programs. Unfortunately, it is not listed in the Add/Remove Programs because I uninstalled uTorrent prior to running scans to provide logs for the first post. Still can not click on MBAM download button on cnet and Error on page is displayed in lower left corner.

DonnaB · June 08, 2012, 02:44:17 AM

Uninstalled IE8 via Command Prompt and IE7 and the version number are correct when I click on Tools > About Internet Explorer.

I'll wait to update to IE8 till I receive a reply from you.

Thank you Corrine for all your help so far! :hug:

Corrine · June 08, 2012, 07:09:44 PM

Hi, Donna.

Yes, I was waiting to resolve the IE issue until providing the script for ComboFix. Let's do that now.

Custom CFScript

Note: The following instructions were created specifically for this user. If you are not this user, do NOT follow these directions as they could damage the workings of your system.

Please open Notepad (Click Start -> Run -> type notepad in the Open field -> OK). Copy/Paste all of the text present inside the code box below:

Code Select


Firefox::
FF - ProfilePath - c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\
FF - Ext: Conduit Engine : engine@conduit.com - %profile%\extensions\engine@conduit.com
FF - Ext: uTorrentBar Community Toolbar: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - %profile%\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
FF - component: c:\documents and settings\bryan\application data\mozilla\firefox\profiles\upz37x4t.default\extensions\engine@conduit.com\components\RadioWMPCoreGecko19.dll
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}

DDS::
EB: {32683183-48a0-441b-a342-7c2a440a9478} -

Save this as CFScript.txt and place it on your desktop.
Close any open browsers.
Close/disable all antivirus and anti-malware programs so they do not interfere with the running of ComboFix.

Referring to the screenshot above, drag CFScript.txt into ComboFix.exe.
ComboFix will now run a scan on your system. It may reboot your system when it finishes. This is normal.
When finished, it will produce a log for you. Copy and paste the contents of the log in your next reply.

CAUTION: Do not mouse-click ComboFix's window while it is running. That may cause it to stall.

How is IE7 working?

DonnaB · June 09, 2012, 12:40:55 AM

QuoteHow is IE7 working?

Much better but very, very slow.......

Prior to running CFScript fix it would load in "pieces", meaning that as IE loaded you could see the desktop where the Menu Bar should be. Didn't do that after the fix was initiated. Loaded just fine though took forever for the site to load once I clicked on the shortcut I have on the desktop to this thread.

Sorry about the Microsoft .NET Framework 2.0. The log would have been much shorter if I had not installed that whilst troubleshooting.

Following is the resultant log:

ComboFix 12-06-08.02 - Bryan 06/08/2012 19:05:26.2.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1271.890 [GMT -5:00]
Running from: c:\documents and settings\Bryan\Desktop\ComboFix.exe
Command switches used :: c:\documents and settings\Bryan\Desktop\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\chrome.manifest
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\chrome\utorrentbar.jar
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\components\ConduitAutoCompleteSearch.js
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\components\ConduitAutoCompleteSearch.xpt
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\components\ConduitToolbar.idl
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\components\ConduitToolbar.js
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\components\ConduitToolbar.xpt
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\components\RadioWMPCore.dll
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\components\RadioWMPCore.xpt
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\components\RadioWMPCoreGecko19.dll
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\defaults\alertSettingsComponent.xml
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\defaults\appContextMenu.xml
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\defaults\engineContextMenu.xml
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\defaults\engineSettings.json
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\defaults\fbAlert.js
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\defaults\getAppsContextMenu.xml
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\defaults\postAppsContextMenu.xml
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\defaults\toolbarContextMenu.xml
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\defaults\unsharedAppsContextMenu.xml
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\install.rdf
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\lib\xpcom.js
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\META-INF\manifest.mf
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\META-INF\zigbert.rsa
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\META-INF\zigbert.sf
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\searchplugin\conduit.gif
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\searchplugin\conduit.ico
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\searchplugin\conduit.PNG
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\searchplugin\conduit.src
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\searchplugin\conduit.xml
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\setup.ini
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\version.txt
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\engine@conduit.com
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\engine@conduit.com\chrome.manifest
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\engine@conduit.com\chrome\conduitengine.jar
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\engine@conduit.com\components\ConduitAutoCompleteSearch.js
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\engine@conduit.com\components\ConduitAutoCompleteSearch.xpt
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\engine@conduit.com\components\ConduitToolbar.idl
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\engine@conduit.com\components\ConduitToolbar.js
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\engine@conduit.com\components\ConduitToolbar.xpt
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\engine@conduit.com\components\RadioWMPCore.dll
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\engine@conduit.com\components\RadioWMPCore.xpt
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\engine@conduit.com\components\RadioWMPCoreGecko19.dll
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\engine@conduit.com\defaults\alertSettingsComponent.xml
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\engine@conduit.com\defaults\appContextMenu.xml
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\engine@conduit.com\defaults\engineContextMenu.xml
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\engine@conduit.com\defaults\engineSettings.json
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\engine@conduit.com\defaults\fbAlert.js
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\engine@conduit.com\defaults\getAppsContextMenu.xml
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\engine@conduit.com\defaults\postAppsContextMenu.xml
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\engine@conduit.com\defaults\toolbarContextMenu.xml
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\engine@conduit.com\defaults\unsharedAppsContextMenu.xml
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\engine@conduit.com\DualPackage\install.rdf
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\engine@conduit.com\install.rdf
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\engine@conduit.com\lib\xpcom.js
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\engine@conduit.com\META-INF\manifest.mf
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\engine@conduit.com\META-INF\zigbert.rsa
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\engine@conduit.com\META-INF\zigbert.sf
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\engine@conduit.com\searchplugin\conduit.gif
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\engine@conduit.com\searchplugin\conduit.ico
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\engine@conduit.com\searchplugin\conduit.PNG
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\engine@conduit.com\searchplugin\conduit.src
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\engine@conduit.com\searchplugin\conduit.xml
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\engine@conduit.com\setup.ini
c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\extensions\engine@conduit.com\version.txt
c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}\chrome.manifest
c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}\chrome\content\ffjcext\ffjcext.js
c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}\chrome\content\ffjcext\ffjcext.xul
c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}\chrome\locale\de-DE\ffjcext\ffjcext.dtd
c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}\chrome\locale\en-US\ffjcext\ffjcext.dtd
c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}\chrome\locale\es-ES\ffjcext\ffjcext.dtd
c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}\chrome\locale\fr-FR\ffjcext\ffjcext.dtd
c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}\chrome\locale\it-IT\ffjcext\ffjcext.dtd
c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}\chrome\locale\ja-JP\ffjcext\ffjcext.dtd
c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}\chrome\locale\ko-KR\ffjcext\ffjcext.dtd
c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}\chrome\locale\sv-SE\ffjcext\ffjcext.dtd
c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}\chrome\locale\zh-CN\ffjcext\ffjcext.dtd
c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}\chrome\locale\zh-TW\ffjcext\ffjcext.dtd
c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}\install.rdf
.
.
((((((((((((((((((((((((( Files Created from 2012-05-09 to 2012-06-09 )))))))))))))))))))))))))))))))
.
.
2012-06-08 23:54 . 2012-06-08 23:54   --------   d-----w-   c:\windows\LastGood
2012-06-08 02:01 . 2012-06-08 23:56   419488   ----a-w-   c:\windows\system32\FlashPlayerApp.exe
2012-06-07 17:36 . 2012-06-07 17:36   --------   d-----w-   c:\program files\Malwarebytes' Anti-Malware
2012-06-07 17:36 . 2012-04-04 20:56   22344   ----a-w-   c:\windows\system32\drivers\mbam.sys
2012-06-07 03:04 . 2012-01-11 19:06   3072   -c----w-   c:\windows\system32\dllcache\iacenc.dll
2012-06-07 03:04 . 2012-01-11 19:06   3072   ------w-   c:\windows\system32\iacenc.dll
2012-06-07 02:50 . 2012-06-07 02:50   --------   d-----w-   c:\documents and settings\Bryan\Local Settings\Application Data\Sun
2012-06-07 02:35 . 2012-06-07 02:35   --------   d-----w-   c:\program files\Common Files\Java
2012-06-07 02:34 . 2012-06-07 02:34   --------   d-----w-   c:\documents and settings\Bryan\Application Data\Oracle
2012-06-07 02:34 . 2012-06-07 02:34   143872   ----a-w-   c:\windows\system32\javacpl.cpl
2012-06-07 02:34 . 2012-04-04 23:47   772504   ----a-w-   c:\windows\system32\npDeployJava1.dll
2012-06-07 01:56 . 2012-06-07 01:56   388096   ----a-r-   c:\documents and settings\Bryan\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2012-06-06 04:00 . 2012-06-06 04:01   --------   d-----w-   C:\rsit
2012-06-06 03:43 . 2012-06-06 03:43   --------   d-sh--w-   c:\documents and settings\Bryan\IECompatCache
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-06-08 23:56 . 2012-01-07 03:50   70304   ----a-w-   c:\windows\system32\FlashPlayerCPLApp.cpl
2012-05-31 13:22 . 2001-08-18 12:00   599040   ----a-w-   c:\windows\system32\crypt32.dll
2012-04-11 13:12 . 2001-08-18 12:00   1862272   ----a-w-   c:\windows\system32\win32k.sys
2012-04-11 13:10 . 2001-08-18 12:00   2192640   ----a-w-   c:\windows\system32\ntoskrnl.exe
2012-04-11 12:35 . 2001-08-17 13:48   2069120   ----a-w-   c:\windows\system32\ntkrnlpa.exe
.
.
((((((((((((((((((((((((((((( SnapShot@2012-06-06_21.56.08 )))))))))))))))))))))))))))))))))))))))))
.
+ 2012-06-08 23:51 . 2012-06-08 23:51   16384 c:\windows\temp\Perflib_Perfdata_4bc.dat
+ 2001-08-18 12:00 . 2011-10-31 23:43   44544 c:\windows\system32\pngfilt.dll
+ 2001-08-18 12:00 . 2012-06-08 01:15   58596 c:\windows\system32\perfc009.dat
+ 2005-09-23 12:28 . 2005-09-23 12:28   32768 c:\windows\system32\netfxperf.dll
+ 2001-08-18 12:00 . 2007-08-14 00:01   48128 c:\windows\system32\mshtmler.dll
- 2001-08-18 12:00 . 2009-03-08 10:31   48128 c:\windows\system32\mshtmler.dll
- 2001-08-18 12:00 . 2009-03-08 10:31   45568 c:\windows\system32\mshta.exe
+ 2001-08-18 12:00 . 2007-08-14 00:32   45568 c:\windows\system32\mshta.exe
+ 2007-08-14 00:36 . 2007-08-14 00:36   12288 c:\windows\system32\msfeedssync.exe
+ 2007-08-14 00:54 . 2011-10-31 23:43   52224 c:\windows\system32\msfeedsbs.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   74240 c:\windows\system32\mscories.dll
+ 2001-08-18 12:00 . 2007-08-14 00:44   40960 c:\windows\system32\licmgr10.dll
+ 2001-08-18 12:00 . 2011-10-31 23:43   27648 c:\windows\system32\jsproxy.dll
+ 2001-08-18 12:00 . 2007-08-14 00:39   92672 c:\windows\system32\inseng.dll
+ 2001-08-18 12:00 . 2007-08-14 00:36   36352 c:\windows\system32\imgutil.dll
+ 2001-08-18 12:00 . 2007-08-14 00:39   55296 c:\windows\system32\iesetup.dll
+ 2001-08-18 12:00 . 2011-10-31 23:43   44544 c:\windows\system32\iernonce.dll
+ 2012-01-07 03:38 . 2011-10-31 23:43   78336 c:\windows\system32\ieencode.dll
+ 2001-08-18 12:00 . 2011-10-31 20:56   70656 c:\windows\system32\ie4uinit.exe
+ 2007-08-14 00:36 . 2011-10-31 23:43   63488 c:\windows\system32\icardie.dll
+ 2007-08-14 00:36 . 2011-10-31 23:43   44544 c:\windows\system32\dllcache\pngfilt.dll
- 2007-08-14 00:01 . 2009-03-08 10:31   48128 c:\windows\system32\dllcache\mshtmler.dll
+ 2007-08-14 00:01 . 2007-08-14 00:01   48128 c:\windows\system32\dllcache\mshtmler.dll
- 2007-08-14 00:32 . 2009-03-08 10:31   45568 c:\windows\system32\dllcache\mshta.exe
+ 2007-08-14 00:32 . 2007-08-14 00:32   45568 c:\windows\system32\dllcache\mshta.exe
+ 2009-10-29 07:46 . 2011-10-31 23:43   52224 c:\windows\system32\dllcache\msfeedsbs.dll
+ 2007-08-14 00:44 . 2007-08-14 00:44   40960 c:\windows\system32\dllcache\licmgr10.dll
+ 2007-08-14 00:54 . 2011-10-31 23:43   27648 c:\windows\system32\dllcache\jsproxy.dll
+ 2007-08-14 00:39 . 2007-08-14 00:39   92672 c:\windows\system32\dllcache\inseng.dll
+ 2007-08-14 00:36 . 2007-08-14 00:36   36352 c:\windows\system32\dllcache\imgutil.dll
+ 2007-08-14 00:39 . 2007-08-14 00:39   55296 c:\windows\system32\dllcache\iesetup.dll
+ 2007-08-14 00:39 . 2011-10-31 23:43   44544 c:\windows\system32\dllcache\iernonce.dll
+ 2012-01-07 03:38 . 2011-10-31 23:43   78336 c:\windows\system32\dllcache\ieencode.dll
+ 2007-08-14 00:39 . 2011-10-31 20:56   70656 c:\windows\system32\dllcache\ie4uinit.exe
+ 2009-10-29 07:46 . 2011-10-31 23:43   63488 c:\windows\system32\dllcache\icardie.dll
+ 2007-08-14 00:18 . 2007-08-14 00:18   60416 c:\windows\system32\dllcache\hmmapi.dll
+ 2007-08-14 00:42 . 2011-10-31 23:43   17408 c:\windows\system32\dllcache\corpol.dll
+ 2007-08-14 00:39 . 2007-08-14 00:39   71680 c:\windows\system32\dllcache\admparse.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   83456 c:\windows\system32\dfshim.dll
+ 2001-08-18 12:00 . 2011-10-31 23:43   17408 c:\windows\system32\corpol.dll
+ 2001-08-18 12:00 . 2007-08-14 00:39   71680 c:\windows\system32\admparse.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   28160 c:\windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   71680 c:\windows\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL
+ 2005-09-23 12:28 . 2005-09-23 12:28   86016 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   47616 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
+ 2005-09-23 12:29 . 2005-09-23 12:29   85504 c:\windows\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll
+ 2005-09-23 12:29 . 2005-09-23 12:29   59072 c:\windows\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe
+ 2005-09-23 12:28 . 2005-09-23 12:28   32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
+ 2005-09-23 12:28 . 2005-09-23 12:28   53248 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
+ 2005-09-23 12:28 . 2005-09-23 12:28   78336 c:\windows\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   14848 c:\windows\Microsoft.NET\Framework\v2.0.50727\normalization.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   96440 c:\windows\Microsoft.NET\Framework\v2.0.50727\ngen.exe
+ 2005-09-23 12:29 . 2005-09-23 12:29   22528 c:\windows\Microsoft.NET\Framework\v2.0.50727\MUI\0409\mscorsecr.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   10240 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscortim.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   66240 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
+ 2005-09-23 12:28 . 2005-09-23 12:28   67072 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   81408 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorld.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorie.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   73216 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   69632 c:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
+ 2005-09-23 12:28 . 2005-09-23 12:28   87552 c:\windows\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   12800 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   73728 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
+ 2005-09-23 11:36 . 2005-09-23 11:36   85504 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.3082.dll
+ 2005-09-23 11:29 . 2005-09-23 11:29   80896 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.3076.dll
+ 2005-09-23 11:47 . 2005-09-23 11:47   84480 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.2070.dll
+ 2005-09-23 11:30 . 2005-09-23 11:30   80896 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.2052.dll
+ 2005-09-23 11:47 . 2005-09-23 11:47   80896 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1055.dll
+ 2005-09-23 11:47 . 2005-09-23 11:47   81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1053.dll
+ 2005-09-23 11:47 . 2005-09-23 11:47   82432 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1049.dll
+ 2005-09-23 11:47 . 2005-09-23 11:47   82432 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1046.dll
+ 2005-09-23 11:46 . 2005-09-23 11:46   83456 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1045.dll
+ 2005-09-23 11:46 . 2005-09-23 11:46   81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1044.dll
+ 2005-09-23 11:46 . 2005-09-23 11:46   83456 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1043.dll
+ 2005-09-23 11:44 . 2005-09-23 11:44   80896 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1042.dll
+ 2005-09-23 11:42 . 2005-09-23 11:42   80896 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1041.dll
+ 2005-09-23 11:40 . 2005-09-23 11:40   84480 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1040.dll
+ 2005-09-23 11:40 . 2005-09-23 11:40   83968 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1038.dll
+ 2005-09-23 11:40 . 2005-09-23 11:40   80896 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1037.dll
+ 2005-09-23 11:38 . 2005-09-23 11:38   86016 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1036.dll
+ 2005-09-23 11:38 . 2005-09-23 11:38   81408 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1035.dll
+ 2005-09-23 08:46 . 2005-09-23 08:46   80896 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1033.dll
+ 2005-09-23 11:36 . 2005-09-23 11:36   87552 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1032.dll
+ 2005-09-23 11:34 . 2005-09-23 11:34   85504 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1031.dll
+ 2005-09-23 11:34 . 2005-09-23 11:34   81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1030.dll
+ 2005-09-23 11:34 . 2005-09-23 11:34   82944 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1029.dll
+ 2005-09-23 11:32 . 2005-09-23 11:32   80896 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1028.dll
+ 2005-09-23 11:29 . 2005-09-23 11:29   80896 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1025.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   40960 c:\windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe
+ 2005-09-23 12:28 . 2005-09-23 12:28   72192 c:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   55296 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
+ 2005-09-23 12:28 . 2005-09-23 12:28   36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEHost.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   52736 c:\windows\Microsoft.NET\Framework\v2.0.50727\dfdll.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   31936 c:\windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
+ 2005-09-23 12:28 . 2005-09-23 12:28   68608 c:\windows\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   17920 c:\windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   13312 c:\windows\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   76984 c:\windows\Microsoft.NET\Framework\v2.0.50727\csc.exe
+ 2005-09-23 12:28 . 2005-09-23 12:28   88576 c:\windows\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   29888 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
+ 2005-09-23 12:28 . 2005-09-23 12:28   29896 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
+ 2005-09-23 12:28 . 2005-09-23 12:28   26824 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
+ 2005-09-23 12:28 . 2005-09-23 12:28   13824 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
+ 2005-09-23 12:28 . 2005-09-23 12:28   70656 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   23552 c:\windows\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   10752 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
+ 2005-09-23 12:28 . 2005-09-23 12:28   55488 c:\windows\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
+ 2005-09-23 12:28 . 2005-09-23 12:28   87552 c:\windows\Microsoft.NET\Framework\v2.0.50727\alink.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   10752 c:\windows\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   18944 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   86528 c:\windows\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   72704 c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe
+ 2012-06-07 03:48 . 2012-06-07 03:48   38240 c:\windows\Installer\{90120000-0020-0409-0000-0000000FF1CE}\O12ConvIcon.exe
- 2010-08-16 04:39 . 2010-08-16 04:39   38240 c:\windows\Installer\{90120000-0020-0409-0000-0000000FF1CE}\O12ConvIcon.exe
+ 2012-06-08 01:37 . 2012-06-08 01:37   81920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\edd5de95ab688746aaf9f07fb17b9ed4\Microsoft.Build.Framework.ni.dll
+ 2012-06-08 01:37 . 2012-06-08 01:37   15360 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\4bc8216937403c4cbda0698b89d3f47d\dfsvc.ni.exe
+ 2012-06-08 01:37 . 2012-06-08 01:37   26624 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\8dca35b2213e4240abd32d6982e99231\Accessibility.ni.dll
+ 2012-06-08 01:12 . 2012-06-08 01:12   86016 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2012-06-08 01:12 . 2012-06-08 01:12   81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
+ 2012-06-08 01:12 . 2012-06-08 01:12   81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
+ 2012-06-08 01:12 . 2012-06-08 01:12   32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
+ 2012-06-08 01:12 . 2012-06-08 01:12   12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2012-06-08 01:12 . 2012-06-08 01:12   28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
+ 2012-06-08 01:12 . 2012-06-08 01:12   73728 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
+ 2012-06-08 01:12 . 2012-06-08 01:12   36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
+ 2012-06-08 01:12 . 2012-06-08 01:12   36864 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
+ 2012-06-08 01:12 . 2012-06-08 01:12   13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
+ 2012-06-08 01:12 . 2012-06-08 01:12   10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2012-06-08 01:12 . 2012-06-08 01:12   72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2012-06-08 01:12 . 2012-06-08 01:12   68608 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2005-09-23 12:29 . 2005-09-23 12:29   6144 c:\windows\system32\mui\0409\mscorees.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   7680 c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   9216 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   7168 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll
+ 2005-09-23 12:29 . 2005-09-23 12:29   5632 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   5632 c:\windows\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   8192 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   9728 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
+ 2005-09-23 12:28 . 2005-09-23 12:28   9216 c:\windows\Microsoft.NET\Framework\v2.0.50727\fusion.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   4608 c:\windows\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
+ 2005-09-23 12:28 . 2005-09-23 12:28   8192 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   4608 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   7680 c:\windows\Microsoft.NET\Framework\SharedReg12.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   7680 c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   7680 c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   7680 c:\windows\Microsoft.NET\Framework\sbscmp10.dll
+ 2005-09-23 12:29 . 2005-09-23 12:29   5120 c:\windows\Microsoft.NET\Framework\sbs_wminet_utils.dll
+ 2005-09-23 12:29 . 2005-09-23 12:29   5120 c:\windows\Microsoft.NET\Framework\sbs_VsaVb7rt.dll
+ 2005-09-23 12:29 . 2005-09-23 12:29   5120 c:\windows\Microsoft.NET\Framework\sbs_system.enterpriseservices.dll
+ 2005-09-23 12:29 . 2005-09-23 12:29   5120 c:\windows\Microsoft.NET\Framework\sbs_system.data.dll
+ 2005-09-23 12:29 . 2005-09-23 12:29   5120 c:\windows\Microsoft.NET\Framework\sbs_system.configuration.install.dll
+ 2005-09-23 12:29 . 2005-09-23 12:29   5120 c:\windows\Microsoft.NET\Framework\sbs_mscorsec.dll
+ 2005-09-23 12:29 . 2005-09-23 12:29   5120 c:\windows\Microsoft.NET\Framework\sbs_mscorrc.dll
+ 2005-09-23 12:29 . 2005-09-23 12:29   5120 c:\windows\Microsoft.NET\Framework\sbs_mscordbi.dll
+ 2005-09-23 12:29 . 2005-09-23 12:29   5632 c:\windows\Microsoft.NET\Framework\sbs_microsoft.vsa.vb.codedomprocessor.dll
+ 2005-09-23 12:29 . 2005-09-23 12:29   5120 c:\windows\Microsoft.NET\Framework\sbs_microsoft.jscript.dll
+ 2005-09-23 12:29 . 2005-09-23 12:29   5120 c:\windows\Microsoft.NET\Framework\sbs_iehost.dll
+ 2005-09-23 12:29 . 2005-09-23 12:29   5120 c:\windows\Microsoft.NET\Framework\sbs_diasymreader.dll
+ 2012-06-08 01:12 . 2012-06-08 01:12   7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
+ 2012-06-08 01:13 . 2012-06-08 01:13   5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2012-06-08 01:12 . 2012-06-08 01:12   5632 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
+ 2012-06-08 01:12 . 2012-06-08 01:12   8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2012-06-08 01:12 . 2012-06-08 01:12   114176 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
+ 2012-06-08 01:12 . 2012-06-08 01:12   258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
+ 2001-08-18 12:00 . 2012-02-29 14:10   177664 c:\windows\system32\wintrust.dll
- 2001-08-18 12:00 . 2009-12-24 06:59   177664 c:\windows\system32\wintrust.dll
+ 2001-08-18 12:00 . 2011-10-31 23:43   832512 c:\windows\system32\wininet.dll
- 2009-12-23 16:44 . 2009-08-25 09:17   354816 c:\windows\system32\winhttp.dll
+ 2009-12-23 16:44 . 2011-11-16 14:21   354816 c:\windows\system32\winhttp.dll
+ 2007-08-14 00:45 . 2007-08-14 00:45   206336 c:\windows\system32\winfxdocobj.exe
+ 2001-08-18 12:00 . 2011-10-31 23:43   233472 c:\windows\system32\webcheck.dll
+ 2001-08-18 12:00 . 2011-03-04 06:45   434176 c:\windows\system32\vbscript.dll
+ 2001-08-18 12:00 . 2011-10-31 23:43   106496 c:\windows\system32\url.dll
+ 2001-08-18 12:00 . 2011-11-16 14:21   152064 c:\windows\system32\schannel.dll
+ 2001-08-18 12:00 . 2012-06-08 01:15   392296 c:\windows\system32\perfh009.dat
+ 2001-08-18 12:00 . 2011-10-31 23:43   102912 c:\windows\system32\occache.dll
+ 2001-08-18 12:00 . 2011-10-31 23:43   671232 c:\windows\system32\mstime.dll
+ 2001-08-18 12:00 . 2011-10-31 23:43   193024 c:\windows\system32\msrating.dll
- 2001-08-18 12:00 . 2009-03-08 10:22   156160 c:\windows\system32\msls31.dll
+ 2001-08-18 12:00 . 2007-08-14 00:54   156160 c:\windows\system32\msls31.dll
+ 2001-08-18 12:00 . 2011-10-31 23:43   478720 c:\windows\system32\mshtmled.dll
+ 2007-08-14 00:54 . 2011-10-31 23:43   468480 c:\windows\system32\msfeeds.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   150016 c:\windows\system32\mscorier.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   270848 c:\windows\system32\mscoree.dll
+ 2012-06-08 02:01 . 2012-06-08 02:01   351904 c:\windows\system32\Macromed\Flash\FlashUtil32_11_2_202_235_Plugin.exe
+ 2012-06-08 23:56 . 2012-06-08 23:56   351904 c:\windows\system32\Macromed\Flash\FlashUtil32_11_2_202_235_ActiveX.exe
+ 2012-06-08 23:56 . 2012-06-08 23:56   424096 c:\windows\system32\Macromed\Flash\FlashUtil32_11_2_202_235_ActiveX.dll
+ 2012-06-08 02:01 . 2012-06-08 23:56   257696 c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
+ 2001-08-18 12:00 . 2011-03-04 06:45   512000 c:\windows\system32\jscript.dll
+ 2012-06-07 02:34 . 2012-06-07 02:34   227784 c:\windows\system32\javaws.exe
+ 2012-06-07 02:34 . 2012-06-07 02:34   174024 c:\windows\system32\javaw.exe
+ 2012-06-07 02:34 . 2012-06-07 02:34   174024 c:\windows\system32\java.exe
+ 2001-08-18 12:00 . 2012-02-29 14:10   148480 c:\windows\system32\imagehlp.dll
+ 2007-08-14 00:54 . 2007-08-14 00:54   180736 c:\windows\system32\ieui.dll
+ 2007-08-14 00:34 . 2011-10-31 23:43   268288 c:\windows\system32\iertutil.dll
+ 2001-08-18 12:00 . 2011-10-31 23:43   192512 c:\windows\system32\iepeers.dll
+ 2001-08-18 12:00 . 2011-10-31 23:43   384512 c:\windows\system32\iedkcs32.dll
+ 2007-07-11 18:27 . 2011-10-31 23:43   380928 c:\windows\system32\ieapfltr.dll
+ 2001-08-18 12:00 . 2011-10-27 12:49   161792 c:\windows\system32\ieakui.dll
+ 2001-08-18 12:00 . 2011-10-31 23:43   230400 c:\windows\system32\ieaksie.dll
+ 2001-08-18 12:00 . 2011-10-31 23:43   153088 c:\windows\system32\ieakeng.dll
+ 2009-12-23 10:19 . 2012-06-07 03:18   176264 c:\windows\system32\FNTCACHE.DAT
- 2009-12-23 10:19 . 2011-12-16 05:20   176264 c:\windows\system32\FNTCACHE.DAT
+ 2001-08-18 12:00 . 2011-10-31 23:43   214528 c:\windows\system32\dxtrans.dll
+ 2001-08-18 12:00 . 2011-10-31 23:43   347136 c:\windows\system32\dxtmsft.dll
+ 2009-12-23 16:25 . 2012-01-09 16:20   139784 c:\windows\system32\drivers\rdpwd.sys
+ 2009-12-24 06:59 . 2012-02-29 14:10   177664 c:\windows\system32\dllcache\wintrust.dll
- 2009-12-24 06:59 . 2009-12-24 06:59   177664 c:\windows\system32\dllcache\wintrust.dll
+ 2007-08-14 00:54 . 2011-10-31 23:43   832512 c:\windows\system32\dllcache\wininet.dll
- 2008-12-16 12:30 . 2009-08-25 09:17   354816 c:\windows\system32\dllcache\winhttp.dll
+ 2008-12-16 12:30 . 2011-11-16 14:21   354816 c:\windows\system32\dllcache\winhttp.dll
+ 2007-08-14 00:54 . 2011-10-31 23:43   233472 c:\windows\system32\dllcache\webcheck.dll
+ 2007-08-14 00:54 . 2011-04-30 08:50   766464 c:\windows\system32\dllcache\vgx.dll
+ 2007-08-14 00:54 . 2011-03-04 06:45   434176 c:\windows\system32\dllcache\vbscript.dll
+ 2007-08-14 00:44 . 2011-10-31 23:43   106496 c:\windows\system32\dllcache\url.dll
+ 2008-12-05 06:54 . 2011-11-16 14:21   152064 c:\windows\system32\dllcache\schannel.dll
+ 2011-08-10 20:52 . 2012-01-09 16:20   139784 c:\windows\system32\dllcache\rdpwd.sys
+ 2007-08-14 00:44 . 2011-10-31 23:43   102912 c:\windows\system32\dllcache\occache.dll
+ 2007-08-14 00:54 . 2011-10-31 23:43   671232 c:\windows\system32\dllcache\mstime.dll
+ 2007-08-14 00:44 . 2011-10-31 23:43   193024 c:\windows\system32\dllcache\msrating.dll
- 2001-08-18 12:00 . 2009-03-08 10:22   156160 c:\windows\system32\dllcache\msls31.dll
+ 2001-08-18 12:00 . 2007-08-14 00:54   156160 c:\windows\system32\dllcache\msls31.dll
+ 2007-08-14 00:54 . 2011-10-31 23:43   478720 c:\windows\system32\dllcache\mshtmled.dll
+ 2009-10-29 07:46 . 2011-10-31 23:43   468480 c:\windows\system32\dllcache\msfeeds.dll
+ 2007-08-14 00:38 . 2011-03-04 06:45   512000 c:\windows\system32\dllcache\jscript.dll
+ 2012-02-29 14:10 . 2012-02-29 14:10   148480 c:\windows\system32\dllcache\imagehlp.dll
+ 2007-08-14 00:43 . 2011-10-31 10:46   634504 c:\windows\system32\dllcache\iexplore.exe
+ 2009-10-29 07:46 . 2011-10-31 23:43   268288 c:\windows\system32\dllcache\iertutil.dll
+ 2007-08-14 00:54 . 2011-10-31 23:43   192512 c:\windows\system32\dllcache\iepeers.dll
+ 2007-08-14 00:39 . 2011-10-31 23:43   384512 c:\windows\system32\dllcache\iedkcs32.dll
+ 2009-10-29 07:46 . 2011-10-31 23:43   380928 c:\windows\system32\dllcache\ieapfltr.dll
+ 2001-08-18 12:00 . 2011-10-27 12:49   161792 c:\windows\system32\dllcache\ieakui.dll
+ 2007-08-14 00:39 . 2011-10-31 23:43   230400 c:\windows\system32\dllcache\ieaksie.dll
+ 2007-08-14 00:39 . 2011-10-31 23:43   153088 c:\windows\system32\dllcache\ieakeng.dll
+ 2007-08-14 00:35 . 2011-10-31 23:43   214528 c:\windows\system32\dllcache\dxtrans.dll
+ 2007-08-14 00:35 . 2011-10-31 23:43   347136 c:\windows\system32\dllcache\dxtmsft.dll
- 2011-09-03 10:17 . 2011-09-28 07:06   599040 c:\windows\system32\dllcache\crypt32.dll
+ 2011-09-03 10:17 . 2012-05-31 13:22   599040 c:\windows\system32\dllcache\crypt32.dll
+ 2007-08-14 00:39 . 2011-10-31 23:43   124928 c:\windows\system32\dllcache\advpack.dll
+ 2001-08-18 12:00 . 2011-10-31 23:43   124928 c:\windows\system32\advpack.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   298496 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   823296 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   835584 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   260096 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   114688 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   131072 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   299008 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   368640 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Management.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   114176 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   700416 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   188416 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   397312 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   884736 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   716800 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   482304 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   389120 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   377344 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   107520 c:\windows\Microsoft.NET\Framework\v2.0.50727\shfusion.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   136192 c:\windows\Microsoft.NET\Framework\v2.0.50727\peverify.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   226816 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll
+ 2005-09-23 12:29 . 2005-09-23 12:29   330752 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   102400 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   326144 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   288768 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   800768 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
+ 2005-09-23 12:29 . 2005-09-23 12:29   667648 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll
+ 2005-09-23 12:29 . 2005-09-23 12:29   372736 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll
+ 2005-09-23 12:29 . 2005-09-23 12:29   110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   745472 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   647168 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   413696 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll
+ 2005-09-23 12:57 . 2005-09-23 12:57   245408 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\unicows.dll
+ 2005-09-23 12:01 . 2005-09-23 12:01   609472 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
+ 2005-09-23 12:28 . 2005-09-23 12:28   224952 c:\windows\Microsoft.NET\Framework\v2.0.50727\ilasm.exe
+ 2005-09-23 12:28 . 2005-09-23 12:28   788992 c:\windows\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll
+ 2005-09-23 12:29 . 2005-09-23 12:29   547840 c:\windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   106496 c:\windows\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
+ 2005-09-23 12:28 . 2005-09-23 12:28   503808 c:\windows\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   106496 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
+ 2005-09-23 12:28 . 2005-09-23 12:28   138240 c:\windows\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   208896 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll
+ 2005-09-23 12:29 . 2005-09-23 12:29   183808 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   136192 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll
+ 2012-06-07 02:35 . 2012-06-07 02:35   176128 c:\windows\Installer\8d290.msi
+ 2012-06-07 02:34 . 2012-06-07 02:34   863744 c:\windows\Installer\8d27e.msi
+ 2006-10-27 02:49 . 2006-10-27 02:49   509200 c:\windows\Installer\$PatchCache$\Managed\00002109020090400000000000F01FEC\12.0.6021\WRD12CVR.DLL
+ 2012-01-07 03:38 . 2006-09-06 23:43   213216 c:\windows\ie7\spuninst\spuninst.exe
+ 2012-06-08 01:38 . 2012-06-08 01:38   237568 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\b40c81c7bdfedf4ebd614bab1d2410f1\System.Web.RegularExpressions.ni.dll
+ 2012-06-08 01:38 . 2012-06-08 01:38   684032 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\5d157e11f69ea74c8f03b42548d99447\System.Transactions.ni.dll
+ 2012-06-08 01:37 . 2012-06-08 01:37   729088 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\62de1185f5e5f8459ee8890410d1c59c\System.Security.ni.dll
+ 2012-06-08 01:37 . 2012-06-08 01:37   294912 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\4c99bedd8f9ae24ca59988ee04661a53\System.EnterpriseServices.Wrapper.dll
+ 2012-06-08 01:37 . 2012-06-08 01:37   659456 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\4c99bedd8f9ae24ca59988ee04661a53\System.EnterpriseServices.ni.dll
+ 2012-06-08 01:14 . 2012-06-08 01:14   229376 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\76b00691ee493e448309879c86ad8a18\System.Drawing.Design.ni.dll
+ 2012-06-08 01:37 . 2012-06-08 01:37   512000 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\f350cc8bd91dda459745b606008752fd\System.DirectoryServices.Protocols.ni.dll
+ 2012-06-08 01:37 . 2012-06-08 01:37   962560 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\ac201a8b85b8ff45acda9910db7e7a1c\System.Configuration.ni.dll
+ 2012-06-08 01:37 . 2012-06-08 01:37   163840 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\dc4899a640e8d34f99a4b8dab00e8b26\Microsoft.Build.Utilities.ni.dll
+ 2012-06-08 01:37 . 2012-06-08 01:37   880640 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\00d82d0dd5f5be4492da5ab7112f54e8\Microsoft.Build.Engine.ni.dll
+ 2012-06-08 01:37 . 2012-06-08 01:37   237568 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\0cc114157200344ca78b97b737fa14f4\CustomMarshalers.ni.dll
+ 2012-06-08 01:37 . 2012-06-08 01:37   860160 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\6e20fec549fef748954a2e451776100e\AspNetMMCExt.ni.dll
+ 2012-06-08 01:12 . 2012-06-08 01:12   823296 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2012-06-08 01:13 . 2012-06-08 01:13   835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2012-06-08 01:12 . 2012-06-08

Corrine · June 09, 2012, 02:16:02 AM

.NET Framework can be a royal pain -- especially when it results in the log being cut off. :D

Can you locate the following and copy/paste to the end of the log, please.

+ 2012-06-08 01:13 . 2012-06-08 01:13 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2012-06-08 01:12 . 2012-06-08

DonnaB · June 09, 2012, 02:31:20 AM

I'm sorry Corrine. I didn't review after I had posted.

+ 2012-06-08 01:12 . 2012-06-08 01:12   823296 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2012-06-08 01:13 . 2012-06-08 01:13   835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2012-06-08 01:12 . 2012-06-08 01:12   114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2012-06-08 01:12 . 2012-06-08 01:12   258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2012-06-08 01:13 . 2012-06-08 01:13   131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2012-06-08 01:13 . 2012-06-08 01:13   299008 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2012-06-08 01:13 . 2012-06-08 01:13   258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2012-06-08 01:13 . 2012-06-08 01:13   368640 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2012-06-08 01:13 . 2012-06-08 01:13   700416 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2012-06-08 01:12 . 2012-06-08 01:12   397312 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2012-06-08 01:12 . 2012-06-08 01:12   188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2012-06-08 01:12 . 2012-06-08 01:12   884736 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2012-06-08 01:13 . 2012-06-08 01:13   716800 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2012-06-08 01:13 . 2012-06-08 01:13   389120 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2012-06-08 01:13 . 2012-06-08 01:13   110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2012-06-08 01:13 . 2012-06-08 01:13   667648 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2012-06-08 01:13 . 2012-06-08 01:13   372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
+ 2012-06-08 01:13 . 2012-06-08 01:13   110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2012-06-08 01:12 . 2012-06-08 01:12   745472 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2012-06-08 01:12 . 2012-06-08 01:12   647168 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
+ 2012-06-08 01:12 . 2012-06-08 01:12   413696 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2012-06-08 01:12 . 2012-06-08 01:12   503808 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2012-06-08 01:13 . 2012-06-08 01:13   260096 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2012-06-08 01:12 . 2012-06-08 01:12   114176 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2012-06-08 01:12 . 2012-06-08 01:12   258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2012-06-08 01:13 . 2012-06-08 01:13   482304 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2012-06-07 03:06 . 2012-02-09 15:43   1748992 c:\windows\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6002.22791_x-ww_c8dff154\GdiPlus.dll
+ 2001-08-18 12:00 . 2011-10-31 23:43   1168896 c:\windows\system32\urlmon.dll
+ 2001-08-18 12:00 . 2011-11-04 15:16   3616256 c:\windows\system32\mshtml.dll
+ 2012-06-08 02:01 . 2012-06-08 02:01   8797856 c:\windows\system32\Macromed\Flash\NPSWF32_11_2_202_235.dll
+ 2007-08-14 00:54 . 2011-10-31 23:43   6076416 c:\windows\system32\ieframe.dll
+ 2007-02-12 22:10 . 2009-06-29 08:33   2452872 c:\windows\system32\ieapfltr.dat
+ 2010-05-02 05:22 . 2012-04-11 13:12   1862272 c:\windows\system32\dllcache\win32k.sys
+ 2007-08-14 00:54 . 2011-10-31 23:43   1168896 c:\windows\system32\dllcache\urlmon.dll
+ 2010-07-12 05:56 . 2012-04-11 13:10   2192640 c:\windows\system32\dllcache\ntoskrnl.exe
+ 2010-07-12 05:56 . 2012-04-11 12:35   2026496 c:\windows\system32\dllcache\ntkrpamp.exe
+ 2009-02-08 00:02 . 2012-04-11 12:35   2069120 c:\windows\system32\dllcache\ntkrnlpa.exe
+ 2010-07-12 05:56 . 2012-04-11 13:14   2148352 c:\windows\system32\dllcache\ntkrnlmp.exe
+ 2007-08-14 00:54 . 2011-11-04 15:16   3616256 c:\windows\system32\dllcache\mshtml.dll
+ 2009-10-29 07:46 . 2011-10-31 23:43   6076416 c:\windows\system32\dllcache\ieframe.dll
+ 2009-06-29 08:33 . 2009-06-29 08:33   2452872 c:\windows\system32\dllcache\ieapfltr.dat
+ 2005-09-23 12:28 . 2005-09-23 12:28   1306624 c:\windows\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll
+ 2005-09-23 12:29 . 2005-09-23 12:29   1140920 c:\windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe
+ 2005-09-23 12:28 . 2005-09-23 12:28   2035712 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.XML.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   5316608 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   3018752 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   5050368 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   2878976 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   5615616 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   4308992 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
+ 2005-09-23 12:28 . 2005-09-23 12:28   1144832 c:\windows\Microsoft.NET\Framework\v2.0.50727\cscomp.dll
+ 2012-06-07 01:56 . 2012-06-07 01:56   1094656 c:\windows\Installer\dd083e.msi
+ 2012-06-08 01:13 . 2012-06-08 01:13   2109440 c:\windows\Installer\1d312a7.msi
+ 2011-11-01 18:34 . 2011-11-01 18:34   1552384 c:\windows\Installer\1b1cd2.msp
+ 2012-04-05 03:38 . 2012-04-05 03:38   2831360 c:\windows\Installer\1b1cca.msp
+ 2012-04-05 03:38 . 2012-04-05 03:38   3620864 c:\windows\Installer\1b1cc2.msp
+ 2011-11-01 18:34 . 2011-11-01 18:34   2531840 c:\windows\Installer\1b1cba.msp
+ 2012-04-29 02:43 . 2012-04-29 02:43   8459264 c:\windows\Installer\1b1cb2.msp
+ 2011-08-17 14:49 . 2011-08-17 14:49   4683624 c:\windows\Installer\$PatchCache$\Managed\00002109020090400000000000F01FEC\12.0.6612\WRD12CNV.DLL
+ 2011-07-27 09:44 . 2011-07-27 09:44   1791824 c:\windows\Installer\$PatchCache$\Managed\00002109020090400000000000F01FEC\12.0.6612\PPCNV.DLL
+ 2011-07-07 07:58 . 2011-07-07 07:58   1616240 c:\windows\Installer\$PatchCache$\Managed\00002109020090400000000000F01FEC\12.0.6612\OGL.DLL
+ 2010-07-12 05:56 . 2012-04-11 13:10   2192640 c:\windows\Driver Cache\i386\ntoskrnl.exe
+ 2010-07-12 05:56 . 2012-04-11 12:35   2026496 c:\windows\Driver Cache\i386\ntkrpamp.exe
+ 2009-02-08 00:02 . 2012-04-11 12:35   2069120 c:\windows\Driver Cache\i386\ntkrnlpa.exe
+ 2010-07-12 05:56 . 2012-04-11 13:14   2148352 c:\windows\Driver Cache\i386\ntkrnlmp.exe
+ 2012-06-08 01:14 . 2012-06-08 01:14   8093696 c:\windows\assembly\NativeImages_v2.0.50727_32\System\bb698d74b5ee804da5f6fbe80ea78f40\System.ni.dll
+ 2012-06-08 01:14 . 2012-06-08 01:14   5640192 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\0163af88c5350f47b606ec98fceed54f\System.Xml.ni.dll
+ 2012-06-08 01:38 . 2012-06-08 01:38   1945600 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\0b04cfd51007c949b4405851207c9e64\System.Web.Services.ni.dll
+ 2012-06-08 01:38 . 2012-06-08 01:38   2310144 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\b5c5dd070471374a882ecbe8deb982a5\System.Web.Mobile.ni.dll
+ 2012-06-08 01:14 . 2012-06-08 01:14   1626112 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\76f177188e32634a93a25fe1a7cb8da0\System.Drawing.ni.dll
+ 2012-06-08 01:37 . 2012-06-08 01:37   1220608 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\34f1d0b5665c7e42842304d0fd35d133\System.DirectoryServices.ni.dll
+ 2012-06-08 01:37 . 2012-06-08 01:37   1712128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\35e342592f8a42449bbc2c7d7eeef9d5\System.Deployment.ni.dll
+ 2012-06-08 01:14 . 2012-06-08 01:14   6688768 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\a4d50ff00c5d4d46b161bb1912deed72\System.Data.ni.dll
+ 2012-06-08 01:37 . 2012-06-08 01:37   1724416 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\083aa6e6e308d943b5d71108e9ca9bf3\Microsoft.VisualBasic.ni.dll
+ 2012-06-08 01:37 . 2012-06-08 01:37   1691648 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\ba7b2e706947354e9d234e05f8fc451d\Microsoft.Build.Tasks.ni.dll
+ 2012-06-08 01:13 . 2012-06-08 01:13   3018752 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
+ 2012-06-08 01:12 . 2012-06-08 01:12   2035712 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
+ 2012-06-08 01:12 . 2012-06-08 01:12   5316608 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2012-06-08 01:12 . 2012-06-08 01:12   5050368 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2012-06-08 01:12 . 2012-06-08 01:12   5025792 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
+ 2012-06-08 01:12 . 2012-06-08 01:12   2878976 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
+ 2012-06-08 01:12 . 2012-06-08 01:12   4308992 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2010-07-12 04:36 . 2012-04-27 01:08   55656824 c:\windows\system32\MRT.exe
+ 2005-09-23 12:48 . 2005-09-23 12:48   24863744 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\netfx.msi
+ 2011-09-15 23:37 . 2011-09-15 23:37   38176256 c:\windows\Installer\16e3ec.msp
+ 2011-08-30 13:40 . 2011-08-30 13:40   15145832 c:\windows\Installer\$PatchCache$\Managed\00002109020090400000000000F01FEC\12.0.6612\XL12CNV.EXE
+ 2012-06-08 01:14 . 2012-06-08 01:14   13107200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\f8f88f5a3ad3844fa1b4e2e8fd40a883\System.Windows.Forms.ni.dll
+ 2012-06-08 01:38 . 2012-06-08 01:38   11808768 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\c0360b6618e1274c87c95fa987d244f3\System.Web.ni.dll
+ 2012-06-08 01:15 . 2012-06-08 01:15   10723328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\9b70f282eff5784cb07091e08227651b\System.Design.ni.dll
+ 2012-06-08 01:13 . 2012-06-08 01:13   11411456 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\c4311129b73bd048993b6d2fe6a07797\mscorlib.ni.dll
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-11-28 18:01   122512   ----a-w-   c:\program files\Alwil Software\Avast5\ashShell.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"igfxhkcmd"="c:\windows\system32\hkcmd.exe" [2005-07-20 77824]
"igfxpers"="c:\windows\system32\igfxpers.exe" [2005-07-20 114688]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2009-11-11 417792]
"Monitor"="c:\program files\LeapFrog\LeapFrog Connect\Monitor.exe" [2010-11-19 193880]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-01-17 252296]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2009-09-03 22:21   548352   ----a-w-   c:\program files\SUPERAntiSpyware\SASWINLO.DLL
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"igfxtray"=c:\windows\system32\igfxtray.exe
"NeroFilterCheck"=c:\windows\system32\NeroCheck.exe
"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe"
"SoundMAXPnP"=c:\program files\Analog Devices\Core\smax4pnp.exe
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe"
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\WINDOWS\\system32\\sessmgr.exe"=
"c:\\Program Files\\Opera\\opera.exe"=
"c:\\Documents and Settings\\All Users\\Application Data\\NexonUS\\NGM\\NGM.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\LeapFrog\\LeapFrog Connect\\LeapFrogConnect.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
.
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [8/20/2011 4:48 PM 435032]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [8/19/2010 9:45 PM 314456]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [2/17/2010 1:25 PM 12872]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [5/10/2010 1:41 PM 67656]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [8/19/2010 9:45 PM 20568]
R2 MotoHelper;MotoHelper Service;c:\program files\Motorola\MotoHelper\MotoHelperService.exe [9/7/2010 11:47 AM 202048]
R3 pcouffin;VSO Software pcouffin;c:\windows\system32\drivers\pcouffin.sys [12/23/2009 2:41 PM 47360]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [6/7/2012 9:01 PM 257696]
S3 FlyUsb;FLY Fusion;c:\windows\system32\drivers\FlyUsb.sys [12/26/2010 11:01 AM 18560]
S3 motandroidusb;Mot ADB Interface Driver;c:\windows\system32\drivers\motoandroid.sys [2/8/2011 2:10 AM 25856]
S3 motccgp;Motorola USB Composite Device Driver;c:\windows\system32\drivers\motccgp.sys [2/8/2011 2:10 AM 19968]
S3 motccgpfl;MotCcgpFlService;c:\windows\system32\drivers\motccgpfl.sys [2/8/2011 2:10 AM 8320]
S3 pbfilter;pbfilter;\??\c:\program files\PeerBlock\pbfilter.sys --> c:\program files\PeerBlock\pbfilter.sys [?]
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - ADOBEFLASHPLAYERUPDATESVC
.
Contents of the 'Scheduled Tasks' folder
.
2012-06-08 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-08 23:56]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.facebook.com/home.php
TCP: DhcpNameServer = 75.105.128.61
FF - ProfilePath - c:\documents and settings\Bryan\Application Data\Mozilla\Firefox\Profiles\upz37x4t.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.facebook.com/
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Malware Search: {27c60876-b5c9-4335-b4f3-52b26782220c} - %profile%\extensions\{27c60876-b5c9-4335-b4f3-52b26782220c}
.
- - - - ORPHANS REMOVED - - - -
.
Toolbar-Locked - (no file)
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-06-08 19:15
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'winlogon.exe'(560)
c:\program files\SUPERAntiSpyware\SASWINLO.DLL
c:\windows\system32\WININET.dll
.
Completion time: 2012-06-08 19:19:30
ComboFix-quarantined-files.txt 2012-06-09 00:19
ComboFix2.txt 2012-06-06 22:02
.
Pre-Run: 16,794,451,968 bytes free
Post-Run: 16,815,112,192 bytes free
.
- - End Of File - - DEF0A890A9B1E043AF72630C7727E04B

DonnaB · June 09, 2012, 02:44:47 PM

Update:

Upon shutting down computer last night 2 Windows updates were installed:

2nd: Internet Explorer 8 for Windows XP
1st: Cumulative Security Update for Internet Explorer 7 for Wondows XP (KB2675157)

Was requested to install ActiveX again.

Checked Add/Remove Programs. IE8 is listed there. IE7 is not.

Computer seems to be functioning well.

Corrine · June 09, 2012, 11:57:28 PM

Hi, Donna. Now that Bryan's old desktop is back to working condition, please do the following to implement cleanup procedures and also to reset System Restore points:

Click Start > Run and copy/paste the following bolded text into the Run box and click OK:

ComboFix /Uninstall

Note: In the event you wish to contribute to the ongoing development of ComboFix, the developer is accepting donations via PayPal.

I know you have his Windows Update setting to automatic. The most serious issue is his use of uTorrent and the accompanying add-ons related to uTorrent. This is my favoirte P2P lecture. Feel free to share any part of it with Bryan that you feel is appropriate:

P2P programs form a direct conduit on to your computer. They have always been a target of malware writers and are increasingly so of late. P2P security measures are easily circumvented and if your P2P program is not configured correctly, you may be sharing more files than you realize. There have been cases where people's passwords, address books and other personal, private, and financial details have been exposed to the file sharing network by a badly configured program.

With P2P file sharing, what means do you have of identifying or authenticating the source of the download? In addition, a file can be distributed among many hosts, and peers will provide for download the sections that they have already downloaded. This results in the distinct possibility of a distribution method in which malicious bits are mixed with with good files.

BTW, there was another Adobe Flash Player and Adobe ARM critical security update released yesterday. Direct download links are available from my blog post at Adobe Flash Player Security Update.

DonnaB · June 10, 2012, 12:22:29 AM

Hi Corrine,

ComboFix is uninstalled and I just cleared out the restore points and created a new one.

I'm going to send that P2P lecture to him in an email. He's away for training at the moment so he'll be tickled to get an email from me. As a joke, I'd like to create a batch file that pops up everytime he boots windows with a warning about installing P2P programs. :grin:

I think a recent update did come out concerning Adobe. I'll check to make sure it is updated. Think I might just install Secunia. Isn't that the program that I see you recommend. I've recommended Update Checker but you have to manually initiate that program. Secunia runs in the background doesn't it?

Thank you so much for all your help. :)

Corrine · June 10, 2012, 12:34:02 AM

The reason I recommend Secunia is that it advises of security updates and, as appropriate, flags older, vulnerable programs left behind (i.e. even if Java is updated, if there's a vulnerable version on the computer, it will flag that). Other programs merely offer the updated software.

DonnaB · June 10, 2012, 01:13:15 AM

Hm. So it just advises then. I'll install that so he can be warned when an update is needed.

Firefox is still at 3.6.28 :shock: Better update that to the latest version as well.

I did install Update Checker. It found 9 updates needed on his installed software. :thud:

Corrine · June 10, 2012, 02:06:39 AM

When you send that e-mail to Bryan, tell him if he has installed uTorrent on his laptop, he is grounded!

DonnaB · June 10, 2012, 02:25:09 AM

I found that grounding doesn't hurt as badly as taking away the xBox. (snicker, snicker, snort, snicker) LOL!

Remember when I used the disks I created from the recovery partition manager to reinstall? I couldn't believe I eyes when I checked the Programs and Features. uTorrent was actually an pre-installed piece of software from the factory!! Does ASUS have stock in the malicious code writers or what?!?!?!? :shock: