1. Tämä sivusto käyttää keksejä (cookie). Jatkamalla sivuston käyttämistä hyväksyt keksien käyttämisen. Lue lisää.

varmaan troijia ja kaikkea muuta mörköö koneella. tulee pop-uppeja ja on hidas jne. hj-loki.

Viestiketju Virukset ja haittaohjelmat - HijackThis -logit -osiossa. Ketjun avasi hrjanske 26.08.2008.

  1. hrjanske

    hrjanske Member

    Liittynyt:
    26.08.2008
    Viestejä:
    11
    Kiitokset:
    0
    Pisteet:
    11
    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 17:32:56, on 26.8.2008
    Platform: Windows Vista SP1 (WinNT 6.00.1905)
    MSIE: Internet Explorer v7.00 (7.00.6001.18000)
    Boot mode: Normal

    Running processes:
    C:\Windows\System32\smss.exe
    C:\Windows\system32\csrss.exe
    C:\Windows\system32\wininit.exe
    C:\Windows\system32\csrss.exe
    C:\Windows\system32\services.exe
    C:\Windows\system32\lsass.exe
    C:\Windows\system32\lsm.exe
    C:\Windows\system32\winlogon.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\System32\svchost.exe
    C:\Windows\system32\Ati2evxx.exe
    C:\Windows\System32\svchost.exe
    C:\Windows\System32\svchost.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\SLsvc.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\Ati2evxx.exe
    C:\Windows\system32\taskeng.exe
    C:\Windows\System32\spoolsv.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\Dwm.exe
    C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
    C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
    C:\Windows\system32\svchost.exe
    D:\Ohjelmia\Spyware\Spyware Doctor\pctsAuxs.exe
    D:\Ohjelmia\Spyware\Spyware Doctor\pctsSvc.exe
    C:\Windows\RtHDVCpl.exe
    C:\PROGRA~1\AVG\AVG8\avgam.exe
    C:\PROGRA~1\AVG\AVG8\avgrsx.exe
    D:\Ohjelmia\Winamp\winampa.exe
    C:\Users\mönkkönen\sccs.exe
    C:\Users\mönkkönen\ppxcs.exe
    C:\Windows\System32\VIE445C.exe
    C:\Windows\System32\VIE44E8.exe
    C:\Windows\System32\VIE4650.exe
    C:\Windows\System32\VIE4769.exe
    C:\Windows\system32\svchost.exe
    D:\Ohjelmia\Spyware\Spyware Doctor\pctsTray.exe
    C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe
    C:\Windows\System32\svchost.exe
    C:\Windows\system32\SearchIndexer.exe
    C:\Program Files\AVG\AVG8\avgtray.exe
    C:\Program Files\Windows Media Player\wmpnscfg.exe
    C:\Windows\system32\WUDFHost.exe
    C:\PROGRA~1\AVG\AVG8\avgemc.exe
    C:\Program Files\Windows Media Player\wmpnetwk.exe
    C:\PROGRA~1\AVG\AVG8\avgnsx.exe
    C:\Windows\system32\taskeng.exe
    C:\Windows\system32\rundll32.exe
    C:\Windows\system32\taskeng.exe
    C:\Windows\system32\taskeng.exe
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\Windows\system32\taskeng.exe
    C:\Windows\system32\taskeng.exe
    C:\Windows\explorer.exe
    C:\Program Files\Windows Live\installer\WLSetupSvc.exe
    C:\Windows\System32\rundll32.exe
    D:\CCleaner\CCleaner.exe
    C:\Windows\system32\consent.exe
    D:\Ohjelmia\Mozilla\firefox.exe
    C:\Windows\system32\wbem\wmiprvse.exe
    D:\hijackthis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    O1 - Hosts: ::1 localhost
    O2 - BHO: Adobe PDF Reader -linkkiavustaja - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
    O2 - BHO: QXK Olive - {E350B1C6-A8DC-4EEF-90DB-61DCAE9D1B67} - C:\Windows\rodqgpvlkoa.dll
    O3 - Toolbar: qalkfxor - {18C388BB-5014-4906-AE38-E62BA5AA7387} - C:\Windows\qalkfxor.dll
    O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
    O4 - HKLM\..\Run: [StartCCC] "c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
    O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
    O4 - HKLM\..\Run: [WinampAgent] D:\Ohjelmia\Winamp\winampa.exe
    O4 - HKLM\..\Run: [Sccs] C:\Users\mönkkönen\sccs.exe
    O4 - HKLM\..\Run: [Css] C:\Users\mönkkönen\css.exe
    O4 - HKLM\..\Run: [ppxcs] C:\Users\mönkkönen\ppxcs.exe
    O4 - HKLM\..\Run: [\VIE445C.exe] C:\Windows\System32\VIE445C.exe
    O4 - HKLM\..\Run: [\VIE44E8.exe] C:\Windows\System32\VIE44E8.exe
    O4 - HKLM\..\Run: [\VIE4650.exe] C:\Windows\System32\VIE4650.exe
    O4 - HKLM\..\Run: [\VIE4769.exe] C:\Windows\System32\VIE4769.exe
    O4 - HKLM\..\Run: [MSServer] rundll32.exe C:\Windows\system32\awTLecCv.dll,#1
    O4 - HKLM\..\Run: [ISTray] "D:\Ohjelmia\Spyware\Spyware Doctor\pctsTray.exe"
    O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
    O4 - HKCU\..\Run: [recinfo] c:\recinfo\recinfo.exe
    O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
    O4 - HKCU\..\Run: [\VIE445C.exe] C:\Windows\System32\VIE445C.exe
    O4 - HKCU\..\Run: [\VIE44E8.exe] C:\Windows\System32\VIE44E8.exe
    O4 - HKCU\..\Run: [\VIE4650.exe] C:\Windows\System32\VIE4650.exe
    O4 - HKCU\..\Run: [\VIE4769.exe] C:\Windows\System32\VIE4769.exe
    O4 - HKCU\..\Run: [MSServer] rundll32.exe C:\Users\MNKKNE~1\AppData\Local\Temp\wvUnNedC.dll,#1
    O4 - HKCU\..\Run: [e63762dc] rundll32.exe "C:\Users\MNKKNE~1\AppData\Local\Temp\obtkrwce.dll",b
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Paikallinen palvelu')
    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'Paikallinen palvelu')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Verkkopalvelu')
    O4 - HKUS\S-1-5-18\..\Run: [fsc-reg] C:\ProgramData\fsc-reg\fscreg.exe (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [fsc-reg] C:\ProgramData\fsc-reg\fscreg.exe (User 'Default user')
    O9 - Extra button: Lähetä OneNoteen - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra 'Tools' menuitem: Läh&etä OneNoteen - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
    O13 - Gopher Prefix:
    O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
    O20 - AppInit_DLLs: avgrsstx.dll
    O21 - SSODL: pdoskegl - {A07E00E6-2279-4148-B2CE-1DA204B5C809} - C:\Windows\pdoskegl.dll
    O21 - SSODL: rqbmvpso - {4BC74439-682A-4C92-865E-6474F7528AA6} - C:\Windows\rqbmvpso.dll
    O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
    O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
    O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
    O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
    O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
    O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - D:\Ohjelmia\Spyware\Spyware Doctor\pctsAuxs.exe
    O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - D:\Ohjelmia\Spyware\Spyware Doctor\pctsSvc.exe
    O23 - Service: Fujitsu Siemens Computers Diagnostic Testhandler (TestHandler) - Fujitsu Siemens Computers - C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe

    --
    End of file - 7904 bytes
     
    hrjanske, 26.08.2008
    #1
  2.  
  3. Hujo

    Hujo Guest

    1.Lataa combofix.exe työpöydällesi yhdestä linkistä:
    combofix1
    combofix2

    2. Tuplaklikkaa combofix.exe tiedostoa ja seuraa ohjeistuksia.
    3. Kun työkalu on valmis, se tuottaa lokin. Lähetä tämä loki viesti ketjuusi.
    Huom! Älä klikkaile combofixin ikkunaa käytön aikana. Tämä saattaa aiheuttaa ohjelman jumiutumisen.

    ===========

    Lataa Malwarebytes' Anti-Malware työpöydällesi.

    1. Tuplaklikkaa mbam-setup.exe ja seuraa ohjeita asentaaksesi ohjelman.
    2. Lopuksi varmistu, että seuraavat on valittu: Update Malwarebytes', Anti-Malwareja
    Launch Malwarebytes' Anti-Malware ja sen jälkeen klikkaaFinish.
    3. Jos päivitys löytyy. ohjelma lataa ja asentaa uusimman version.
    4. Kun ohjelma on latautunut, valitse Perform full scan ja klikkaa Scan.
    5. Kun skanni on valmis, klikkaa OK ja sitten Show Results nähdäksesi tulokset.
    6. Varmistu, että kaikki on merkitty ja klikkaa Remove Selected.
    7. Tämän jälkeen loki avautuu muistioon. Tallenna se paikkaan, josta löydät sen helposti. Loki
    löytyy myös täältä: C:\Documents and Settings\Käyttäjänimi\Application
    Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-päiväys.txt
    8. Lähetä lokin sisältö seuraavassa viestissäsi.
     
    Hujo, 26.08.2008
    #2
  4. hrjanske

    hrjanske Member

    Liittynyt:
    26.08.2008
    Viestejä:
    11
    Kiitokset:
    0
    Pisteet:
    11
    ei anna aukasta tota combofix.exe .. en oo varma estääkö sen joku avg-plug in??

    Malwarebytes' Anti-Malware 1.25
    Tietokantaversio: 1088
    Windows 6.0.6001 Service Pack 1

    20:09:00 26.8.2008
    mbam-log-08-26-2008 (20-08-54).txt

    Tarkistustyyppi: Täysi tarkistus (C:\|D:\|)
    Tarkistetut kohteet: 103307
    Kulunut aika: 46 minute(s), 10 second(s)

    Saastuneita muistiprosesseja: 7
    Saastuneita muistimoduuleja: 2
    Saastuneita rekisteriavaimia: 43
    Saastuneita rekisteriarvoja: 21
    Saastuneita rekisterikohteita: 0
    Saastuneita hakemistoja: 1
    Saastuneita tiedostoja: 41

    Saastuneita muistiprosesseja:
    C:\Users\mönkkönen\sccs.exe (Trojan.Agent) -> No action taken.
    C:\Users\mönkkönen\css.exe (Trojan.Agent) -> No action taken.
    C:\Users\mönkkönen\ppxcs.exe (Trojan.Agent) -> No action taken.
    C:\Windows\System32\VIE44E8.exe (Trojan.Fakealert) -> No action taken.
    C:\Windows\System32\VIE4769.exe (Trojan.Fakealert) -> No action taken.
    C:\Windows\System32\VIE445C.exe (Trojan.Fakealert) -> No action taken.
    C:\Windows\System32\VIE4650.exe (Trojan.Fakealert) -> No action taken.

    Saastuneita muistimoduuleja:
    C:\Users\mönkkönen\AppData\Local\Temp\obtkrwce.dll (Trojan.Vundo) -> No action taken.
    C:\Users\mönkkönen\AppData\Local\Temp\cbXOIyYp.dll (Trojan.Vundo) -> No action taken.

    Saastuneita rekisteriavaimia:
    HKEY_CLASSES_ROOT\CLSID\{74ce56ff-3469-47c0-93e1-d0cb8b203ea9} (Trojan.Vundo) -> No action taken.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\rdfa (Trojan.Vundo) -> No action taken.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\contim (Trojan.Vundo) -> No action taken.
    HKEY_CLASSES_ROOT\TypeLib\{31e49456-3ec8-4cf9-b756-cd4bb7d43f61} (Trojan.FakeAlert) -> No action taken.
    HKEY_CLASSES_ROOT\Interface\{e3a8bb7f-47df-4a13-9f50-ca0d1f89da7f} (Trojan.FakeAlert) -> No action taken.
    HKEY_CLASSES_ROOT\Interface\{fd929af1-d3ce-4374-9a73-c8e70bc02c17} (Trojan.FakeAlert) -> No action taken.
    HKEY_CLASSES_ROOT\CLSID\{e350b1c6-a8dc-4eef-90db-61dcae9d1b67} (Trojan.FakeAlert) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{e350b1c6-a8dc-4eef-90db-61dcae9d1b67} (Trojan.FakeAlert) -> No action taken.
    HKEY_CLASSES_ROOT\CLSID\{19fe511f-9cc4-4fef-945e-5790992bd32d} (Trojan.FakeAlert) -> No action taken.
    HKEY_CLASSES_ROOT\CLSID\{3090a493-10e7-489e-b3ff-c5c2e8216c9a} (Trojan.FakeAlert) -> No action taken.
    HKEY_CLASSES_ROOT\CLSID\{35deb17c-3047-461f-a972-5f4e4cc5ca50} (Trojan.FakeAlert) -> No action taken.
    HKEY_CLASSES_ROOT\CLSID\{39dda04b-adbc-4c1a-b5a7-96391a2398a3} (Trojan.FakeAlert) -> No action taken.
    HKEY_CLASSES_ROOT\CLSID\{45e752e5-c85e-4445-b2c1-aa2e8084acd1} (Trojan.FakeAlert) -> No action taken.
    HKEY_CLASSES_ROOT\CLSID\{4bc74439-682a-4c92-865e-6474f7528aa6} (Trojan.FakeAlert) -> No action taken.
    HKEY_CLASSES_ROOT\CLSID\{569420e8-db42-47c8-a9de-a058797a8f66} (Trojan.FakeAlert) -> No action taken.
    HKEY_CLASSES_ROOT\CLSID\{76e1cdf1-7017-454e-941b-41c28f4514ce} (Trojan.FakeAlert) -> No action taken.
    HKEY_CLASSES_ROOT\CLSID\{81788ae0-5316-414a-ae39-d610e0e77e0b} (Trojan.FakeAlert) -> No action taken.
    HKEY_CLASSES_ROOT\CLSID\{822cddd9-a96c-49e7-98eb-0404c4ff8a7d} (Trojan.FakeAlert) -> No action taken.
    HKEY_CLASSES_ROOT\CLSID\{ab7c3d96-8eda-4352-a30f-27c054b6c0ec} (Trojan.FakeAlert) -> No action taken.
    HKEY_CLASSES_ROOT\CLSID\{b924d024-32d2-4693-8be2-c4e4d57918fc} (Trojan.FakeAlert) -> No action taken.
    HKEY_CLASSES_ROOT\CLSID\{becc082a-0d73-4a6f-bb8f-783d64b49eba} (Trojan.FakeAlert) -> No action taken.
    HKEY_CLASSES_ROOT\CLSID\{c44f9db7-05ee-4b7e-b6db-2561b77a2f04} (Trojan.FakeAlert) -> No action taken.
    HKEY_CLASSES_ROOT\CLSID\{e4cb5fb9-f727-4eaa-9261-a3125a8dc4a9} (Trojan.FakeAlert) -> No action taken.
    HKEY_CLASSES_ROOT\TypeLib\{2e94e090-6554-4076-97a0-bc0ebe5cd9b2} (Trojan.FakeAlert) -> No action taken.
    HKEY_CLASSES_ROOT\Interface\{ade410f2-0722-420f-8b03-9a874f23a3bc} (Trojan.FakeAlert) -> No action taken.
    HKEY_CLASSES_ROOT\CLSID\{18c388bb-5014-4906-ae38-e62ba5aa7387} (Trojan.FakeAlert) -> No action taken.
    HKEY_CLASSES_ROOT\CLSID\{0cb3bab7-dd15-495f-a7c7-b35ee2c91e7e} (Trojan.FakeAlert) -> No action taken.
    HKEY_CLASSES_ROOT\CLSID\{14161905-2f7f-4c43-91ea-736b14510288} (Trojan.FakeAlert) -> No action taken.
    HKEY_CLASSES_ROOT\CLSID\{2de28b31-ede2-4457-bccd-fb00b40fe5fe} (Trojan.FakeAlert) -> No action taken.
    HKEY_CLASSES_ROOT\CLSID\{3384f74d-bc01-4433-b584-5470718e8376} (Trojan.FakeAlert) -> No action taken.
    HKEY_CLASSES_ROOT\CLSID\{3400237c-e4fd-4f8b-8b94-e69b13d73e83} (Trojan.FakeAlert) -> No action taken.
    HKEY_CLASSES_ROOT\CLSID\{55e1af0a-3532-4f88-93b3-157b70bdadab} (Trojan.FakeAlert) -> No action taken.
    HKEY_CLASSES_ROOT\CLSID\{717a7db5-ba8e-499a-a60d-9db498008849} (Trojan.FakeAlert) -> No action taken.
    HKEY_CLASSES_ROOT\CLSID\{932b3ef8-02c1-4997-a842-137d56c4281d} (Trojan.FakeAlert) -> No action taken.
    HKEY_CLASSES_ROOT\CLSID\{949d1ec8-62d8-4fef-80a3-955e37f4f61f} (Trojan.FakeAlert) -> No action taken.
    HKEY_CLASSES_ROOT\CLSID\{a07e00e6-2279-4148-b2ce-1da204b5c809} (Trojan.FakeAlert) -> No action taken.
    HKEY_CLASSES_ROOT\CLSID\{cc8e9fe5-7065-47d8-9c1f-409c61e38ea3} (Trojan.FakeAlert) -> No action taken.
    HKEY_CLASSES_ROOT\CLSID\{d09d5570-afce-4c8f-9193-0d97f523122f} (Trojan.FakeAlert) -> No action taken.
    HKEY_CLASSES_ROOT\CLSID\{e565680d-2a09-489f-91eb-b6fcb9d3ebd3} (Trojan.FakeAlert) -> No action taken.
    HKEY_CLASSES_ROOT\CLSID\{f1ee3adc-265e-4597-9ce3-dba7eaab0254} (Trojan.FakeAlert) -> No action taken.
    HKEY_CLASSES_ROOT\CLSID\{f90a80f4-2124-46b1-945e-e542919f05e2} (Trojan.FakeAlert) -> No action taken.
    HKEY_CLASSES_ROOT\qalkfxor.bpqk (Trojan.FakeAlert) -> No action taken.
    HKEY_CLASSES_ROOT\qalkfxor.toolbar.1 (Trojan.FakeAlert) -> No action taken.

    Saastuneita rekisteriarvoja:
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\e63762dc (Trojan.Vundo) -> No action taken.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\msserver (Trojan.Vundo) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\sccs (Trojan.Agent) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\css (Trojan.Agent) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ppxcs (Trojan.Agent) -> No action taken.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\vie44e8.exe (Trojan.Fakealert) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\vie44e8.exe (Trojan.Fakealert) -> No action taken.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\vie4769.exe (Trojan.Fakealert) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\vie4769.exe (Trojan.Fakealert) -> No action taken.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\vie445c.exe (Trojan.Fakealert) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\vie445c.exe (Trojan.Fakealert) -> No action taken.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\vie4650.exe (Trojan.Fakealert) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\vie4650.exe (Trojan.Fakealert) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{74ce56ff-3469-47c0-93e1-d0cb8b203ea9} (Trojan.Vundo) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\msserver (Trojan.Vundo) -> No action taken.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\viea8c3.exe (Trojan.Agent) -> No action taken.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\viea8c4.exe (Trojan.Agent) -> No action taken.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\viec207.exe (Trojan.Agent) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\rqbmvpso (Trojan.FakeAlert) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{18c388bb-5014-4906-ae38-e62ba5aa7387} (Trojan.FakeAlert) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\pdoskegl (Trojan.FakeAlert) -> No action taken.

    Saastuneita rekisterikohteita:
    (Haitallisia kohteita ei löydetty)

    Saastuneita hakemistoja:
    C:\Program Files\PCHealthCenter (Trojan.Fakealert) -> No action taken.

    Saastuneita tiedostoja:
    C:\Users\mönkkönen\AppData\Local\Temp\obtkrwce.dll (Trojan.Vundo) -> No action taken.
    C:\Users\mönkkönen\AppData\Local\Temp\cbXOIyYp.dll (Trojan.Vundo) -> No action taken.
    C:\Users\mönkkönen\sccs.exe (Trojan.Agent) -> No action taken.
    C:\Users\mönkkönen\css.exe (Trojan.Agent) -> No action taken.
    C:\Users\mönkkönen\ppxcs.exe (Trojan.Agent) -> No action taken.
    C:\Windows\System32\VIE44E8.exe (Trojan.Fakealert) -> No action taken.
    C:\Windows\System32\VIE4769.exe (Trojan.Fakealert) -> No action taken.
    C:\Windows\System32\VIE445C.exe (Trojan.Fakealert) -> No action taken.
    C:\Windows\System32\VIE4650.exe (Trojan.Fakealert) -> No action taken.
    C:\Windows\System32\awTLecCv.dll (Trojan.Vundo) -> No action taken.
    C:\Program Files\PCHealthCenter\1.exe (Trojan.Fakealert) -> No action taken.
    C:\Program Files\PCHealthCenter\2.exe (Trojan.Fakealert) -> No action taken.
    C:\Program Files\PCHealthCenter\3.exe (Trojan.Fakealert) -> No action taken.
    C:\Program Files\PCHealthCenter\4.exe (Trojan.Fakealert) -> No action taken.
    C:\Users\mönkkönen\intelOP.exe (Trojan.Agent) -> No action taken.
    C:\Users\mönkkönen\AppData\Local\Temp\solwtulx.dll (Trojan.Vundo) -> No action taken.
    C:\Users\mönkkönen\AppData\Local\Temp\tmp00010356 (Trojan.Vundo) -> No action taken.
    C:\Users\mönkkönen\AppData\Local\Temp\yicxcvtv.dll (Trojan.Vundo) -> No action taken.
    C:\Users\mönkkönen\AppData\Local\Temp\jkkHWNHy.dll (Trojan.Vundo) -> No action taken.
    C:\Windows\etbr.exe (Trojan.FakeAlert) -> No action taken.
    C:\Windows\System32\ssqqnnkj.dll (Trojan.Vundo) -> No action taken.
    C:\Windows\System32\byXOiJDu.dll (Trojan.Vundo) -> No action taken.
    C:\Windows\System32\ddcBQhFU.dll (Trojan.Vundo) -> No action taken.
    C:\Windows\System32\efcdEvUN.dll (Trojan.Vundo) -> No action taken.
    C:\Windows\System32\wvULEVno.dll (Trojan.Vundo) -> No action taken.
    C:\Program Files\PCHealthCenter\0.exe (Trojan.Fakealert) -> No action taken.
    C:\Program Files\PCHealthCenter\0.gif (Trojan.Fakealert) -> No action taken.
    C:\Program Files\PCHealthCenter\2.gif (Trojan.Fakealert) -> No action taken.
    C:\Program Files\PCHealthCenter\3.gif (Trojan.Fakealert) -> No action taken.
    C:\Program Files\PCHealthCenter\7.exe (Trojan.Fakealert) -> No action taken.
    C:\Program Files\PCHealthCenter\sc.html (Trojan.Fakealert) -> No action taken.
    C:\Program Files\MSA\msa0.dat (Rogue.MSAntivirus) -> No action taken.
    C:\Program Files\MSA\msa1.dat (Rogue.MSAntivirus) -> No action taken.
    C:\Windows\rodqgpvlkoa.dll (Trojan.FakeAlert) -> No action taken.
    C:\Windows\rvoelbxt.exe (Trojan.FakeAlert) -> No action taken.
    C:\Windows\rqbmvpso.dll (Trojan.FakeAlert) -> No action taken.
    C:\Windows\qalkfxor.dll (Trojan.FakeAlert) -> No action taken.
    C:\Windows\pdoskegl.dll (Trojan.FakeAlert) -> No action taken.
    C:\Users\mönkkönen\Desktop\PORN & CUMSHOTS.url (Rogue.Link) -> No action taken.
    C:\Users\mönkkönen\Desktop\TEEN PORN SEX.url (Rogue.Link) -> No action taken.
    C:\Users\mönkkönen\MediaTubeCodec_ver1.1463.0.exe (Trojan.FakeAlert) -> No action taken.
     
    hrjanske, 26.08.2008
    #3
  5. Hujo

    Hujo Guest

    scannaa uudestaan täysi scannaus

    sitten tämä kohta

    • Kun skanni on valmis, klikkaa OK ja sitten Show Results nähdäksesi tulokset.
    • Varmistu, että kaikki on merkitty ja klikkaa Remove Selected.
     
    Hujo, 26.08.2008
    #4
  6. hrjanske

    hrjanske Member

    Liittynyt:
    26.08.2008
    Viestejä:
    11
    Kiitokset:
    0
    Pisteet:
    11
    windows aukee normaalitilassa, mut ei anna aukasta sit mitään ohjelmaa. vikasietotilassa toimii. mikähä nyt avuks?

    Malwarebytes' Anti-Malware 1.25
    Tietokantaversio: 1088
    Windows 6.0.6001 Service Pack 1

    14:19:28 28.8.2008
    mbam-log-08-28-2008 (14-19-28).txt

    Tarkistustyyppi: Täysi tarkistus (C:\|D:\|)
    Tarkistetut kohteet: 102641
    Kulunut aika: 11 minute(s), 29 second(s)

    Saastuneita muistiprosesseja: 0
    Saastuneita muistimoduuleja: 0
    Saastuneita rekisteriavaimia: 0
    Saastuneita rekisteriarvoja: 0
    Saastuneita rekisterikohteita: 0
    Saastuneita hakemistoja: 0
    Saastuneita tiedostoja: 0

    Saastuneita muistiprosesseja:
    (Haitallisia kohteita ei löydetty)

    Saastuneita muistimoduuleja:
    (Haitallisia kohteita ei löydetty)

    Saastuneita rekisteriavaimia:
    (Haitallisia kohteita ei löydetty)

    Saastuneita rekisteriarvoja:
    (Haitallisia kohteita ei löydetty)

    Saastuneita rekisterikohteita:
    (Haitallisia kohteita ei löydetty)

    Saastuneita hakemistoja:
    (Haitallisia kohteita ei löydetty)

    Saastuneita tiedostoja:
    (Haitallisia kohteita ei löydetty)
     
    hrjanske, 28.08.2008
    #5
  7. hrjanske

    hrjanske Member

    Liittynyt:
    26.08.2008
    Viestejä:
    11
    Kiitokset:
    0
    Pisteet:
    11
    Tässä vielä HjT-loki. nämä siis tehty vikasietotilassa ku muuten ei toimi..

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 14:20:56, on 28.8.2008
    Platform: Windows Vista SP1 (WinNT 6.00.1905)
    MSIE: Internet Explorer v7.00 (7.00.6001.18000)
    Boot mode: Safe mode with network support

    Running processes:
    C:\Windows\Explorer.EXE
    C:\Program Files\Windows Media Player\wmpnscfg.exe
    D:\Ohjelmia\Mozilla\firefox.exe
    C:\Windows\system32\NOTEPAD.EXE
    D:\hijackthis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    O1 - Hosts: ::1 localhost
    O2 - BHO: Adobe PDF Reader -linkkiavustaja - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
    O4 - HKLM\..\Run: [StartCCC] "c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
    O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
    O4 - HKLM\..\Run: [WinampAgent] D:\Ohjelmia\Winamp\winampa.exe
    O4 - HKLM\..\Run: [ISTray] "D:\Ohjelmia\Spyware\Spyware Doctor\pctsTray.exe"
    O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
    O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "D:\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
    O4 - HKCU\..\Run: [recinfo] c:\recinfo\recinfo.exe
    O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Paikallinen palvelu')
    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'Paikallinen palvelu')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Verkkopalvelu')
    O4 - HKUS\S-1-5-18\..\Run: [fsc-reg] C:\ProgramData\fsc-reg\fscreg.exe (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [fsc-reg] C:\ProgramData\fsc-reg\fscreg.exe (User 'Default user')
    O9 - Extra button: Lähetä OneNoteen - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra 'Tools' menuitem: Läh&etä OneNoteen - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
    O13 - Gopher Prefix:
    O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
    O20 - AppInit_DLLs: avgrsstx.dll
    O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
    O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
    O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
    O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
    O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
    O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - D:\Ohjelmia\Spyware\Spyware Doctor\pctsAuxs.exe
    O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - D:\Ohjelmia\Spyware\Spyware Doctor\pctsSvc.exe
    O23 - Service: Fujitsu Siemens Computers Diagnostic Testhandler (TestHandler) - Fujitsu Siemens Computers - C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe

    --
    End of file - 4239 bytes
     
    hrjanske, 28.08.2008
    #6
  8. Hujo

    Hujo Guest

    eikö kone aukee normaaliin tilaan ollenkaan.
     
    Hujo, 28.08.2008
    #7
  9. hrjanske

    hrjanske Member

    Liittynyt:
    26.08.2008
    Viestejä:
    11
    Kiitokset:
    0
    Pisteet:
    11
    nyt toimii taas normaalitilassa, mut on todella hidas! sivuille pääseminen kesti ainaki 20min
     
    hrjanske, 28.08.2008
    #8
  10. Hujo

    Hujo Guest

    otas normaalissa tilassa hjt:n loki uusi
     
    Hujo, 28.08.2008
    #9
  11. hrjanske

    hrjanske Member

    Liittynyt:
    26.08.2008
    Viestejä:
    11
    Kiitokset:
    0
    Pisteet:
    11
    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 18:45:25, on 28.8.2008
    Platform: Windows Vista SP1 (WinNT 6.00.1905)
    MSIE: Internet Explorer v7.00 (7.00.6001.18000)
    Boot mode: Normal

    Running processes:
    C:\Windows\System32\smss.exe
    C:\Windows\system32\csrss.exe
    C:\Windows\system32\wininit.exe
    C:\Windows\system32\csrss.exe
    C:\Windows\system32\services.exe
    C:\Windows\system32\lsass.exe
    C:\Windows\system32\lsm.exe
    C:\Windows\system32\winlogon.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\System32\svchost.exe
    C:\Windows\system32\Ati2evxx.exe
    C:\Windows\System32\svchost.exe
    C:\Windows\System32\svchost.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\SLsvc.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\Ati2evxx.exe
    C:\Windows\system32\taskeng.exe
    C:\Windows\System32\spoolsv.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\taskeng.exe
    C:\Windows\system32\Dwm.exe
    C:\Windows\Explorer.EXE
    C:\Windows\RtHDVCpl.exe
    D:\Ohjelmia\Winamp\winampa.exe
    C:\Program Files\AVG\AVG8\avgtray.exe
    C:\Program Files\Windows Media Player\wmpnscfg.exe
    C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
    C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
    C:\Windows\system32\svchost.exe
    D:\Ohjelmia\Spyware\Spyware Doctor\pctsAuxs.exe
    D:\Ohjelmia\Spyware\Spyware Doctor\pctsSvc.exe
    C:\PROGRA~1\AVG\AVG8\avgam.exe
    C:\PROGRA~1\AVG\AVG8\avgrsx.exe
    C:\PROGRA~1\AVG\AVG8\avgnsx.exe
    C:\Windows\system32\svchost.exe
    C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe
    C:\Windows\System32\svchost.exe
    C:\Windows\system32\SearchIndexer.exe
    C:\Windows\system32\WUDFHost.exe
    C:\PROGRA~1\AVG\AVG8\avgemc.exe
    D:\Ohjelmia\Spyware\Spyware Doctor\pctsTray.exe
    C:\Windows\System32\mobsync.exe
    C:\Program Files\Windows Media Player\wmpnetwk.exe
    D:\Ohjelmia\Mozilla\firefox.exe
    C:\Windows\system32\taskeng.exe
    D:\hijackthis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    O1 - Hosts: ::1 localhost
    O2 - BHO: Adobe PDF Reader -linkkiavustaja - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
    O4 - HKLM\..\Run: [StartCCC] "c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
    O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
    O4 - HKLM\..\Run: [WinampAgent] D:\Ohjelmia\Winamp\winampa.exe
    O4 - HKLM\..\Run: [ISTray] "D:\Ohjelmia\Spyware\Spyware Doctor\pctsTray.exe"
    O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
    O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "D:\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
    O4 - HKCU\..\Run: [recinfo] c:\recinfo\recinfo.exe
    O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Paikallinen palvelu')
    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'Paikallinen palvelu')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Verkkopalvelu')
    O4 - HKUS\S-1-5-18\..\Run: [fsc-reg] C:\ProgramData\fsc-reg\fscreg.exe (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [fsc-reg] C:\ProgramData\fsc-reg\fscreg.exe (User 'Default user')
    O9 - Extra button: Lähetä OneNoteen - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra 'Tools' menuitem: Läh&etä OneNoteen - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
    O13 - Gopher Prefix:
    O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
    O20 - AppInit_DLLs: avgrsstx.dll
    O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
    O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
    O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
    O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
    O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
    O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - D:\Ohjelmia\Spyware\Spyware Doctor\pctsAuxs.exe
    O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - D:\Ohjelmia\Spyware\Spyware Doctor\pctsSvc.exe
    O23 - Service: Fujitsu Siemens Computers Diagnostic Testhandler (TestHandler) - Fujitsu Siemens Computers - C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe

    --
    End of file - 5821 bytes
     
    hrjanske, 28.08.2008
    #10
  12. Hujo

    Hujo Guest

    scannaa hjt:llä merkkaa paina Fix checked

    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
    O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "D:\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
     
    Hujo, 28.08.2008
    #11
  13. hrjanske

    hrjanske Member

    Liittynyt:
    26.08.2008
    Viestejä:
    11
    Kiitokset:
    0
    Pisteet:
    11
    nyt on sekin tehty.. nyt taas nopeutu vähäse. vieläki vähä hidastelee, mitään tehtävissä enään?
     
    hrjanske, 28.08.2008
    #12
  14. Hujo

    Hujo Guest

    aja tuo combofix normaalissa tilassa.
     
    Hujo, 28.08.2008
    #13
  15. hrjanske

    hrjanske Member

    Liittynyt:
    26.08.2008
    Viestejä:
    11
    Kiitokset:
    0
    Pisteet:
    11
    pistän kahdessa osassa ku ei mee yhteen viestiin combofix logi

    ComboFix 08-08-27.06 - mönkkönen 2008-08-28 20:39:38.2 - NTFSx86
    Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.1.1035.18.2030 [GMT 3:00]
    Running from: C:\Users\mönkkönen\Desktop\ComboFix.exe
    * Created a new restore point
    .

    ((((( Tiedostot, jotka on luotu seuraavalla aikavälillä: 2008-07-28 to 2008-08-28 )))))))))))))))))
    .

    2008-08-28 19:24 . 2008-08-28 19:24 <KANSIO> d-------- C:\Windows\LastGood
    2008-08-27 18:18 . 2008-07-16 04:32 2,048 --a------ C:\Windows\System32\tzres.dll
    2008-08-27 18:06 . 2008-08-27 18:06 <KANSIO> d-------- C:\Program Files\MSXML 4.0
    2008-08-26 19:33 . 2008-06-26 04:45 12,240,896 --a------ C:\Windows\System32\NlsLexicons0007.dll
    2008-08-26 19:33 . 2008-06-26 04:45 2,644,480 --a------ C:\Windows\System32\NlsLexicons0009.dll
    2008-08-26 19:33 . 2008-06-26 06:29 801,280 --a------ C:\Windows\System32\NaturalLanguage6.dll
    2008-08-26 19:31 . 2008-06-27 04:55 1,383,424 --a------ C:\Windows\System32\mshtml.tlb
    2008-08-26 19:31 . 2008-06-27 07:15 827,392 --a------ C:\Windows\System32\wininet.dll
    2008-08-26 19:31 . 2008-06-19 06:31 361,984 --a------ C:\Windows\System32\IPSECSVC.DLL
    2008-08-26 19:31 . 2008-04-18 08:48 269,312 --a------ C:\Windows\System32\es.dll
    2008-08-26 19:30 . 2008-04-10 08:12 738,304 --a------ C:\Windows\System32\inetcomm.dll
    2008-08-26 19:30 . 2008-05-09 00:59 430,080 --a------ C:\Windows\System32\vbscript.dll
    2008-08-26 19:30 . 2008-05-09 00:59 180,224 --a------ C:\Windows\System32\scrobj.dll
    2008-08-26 19:30 . 2008-05-09 00:59 172,032 --a------ C:\Windows\System32\scrrun.dll
    2008-08-26 19:30 . 2008-05-09 00:59 155,648 --a------ C:\Windows\System32\wscript.exe
    2008-08-26 19:30 . 2008-05-09 00:58 135,168 --a------ C:\Windows\System32\wshom.ocx
    2008-08-26 19:30 . 2008-05-09 00:58 135,168 --a------ C:\Windows\System32\cscript.exe
    2008-08-26 19:30 . 2008-05-09 00:59 90,112 --a------ C:\Windows\System32\wshext.dll
    2008-08-26 19:16 . 2008-08-26 19:16 <KANSIO> d-------- C:\Users\mönkkönen\AppData\Roaming\Malwarebytes
    2008-08-26 19:15 . 2008-08-26 19:15 <KANSIO> d-------- C:\Users\All Users\Malwarebytes
    2008-08-26 19:15 . 2008-08-26 19:15 <KANSIO> d-------- C:\ProgramData\Malwarebytes
    2008-08-26 19:15 . 2008-08-17 15:01 38,472 --a------ C:\Windows\System32\drivers\mbamswissarmy.sys
    2008-08-26 19:15 . 2008-08-17 15:01 17,144 --a------ C:\Windows\System32\drivers\mbam.sys
    2008-08-26 16:51 . 2008-08-28 19:23 <KANSIO> d-------- C:\Program Files\Windows Live
    2008-08-26 16:51 . 2008-08-28 19:23 <KANSIO> d--hsc--- C:\Program Files\Common Files\WindowsLiveInstaller
    2008-08-26 16:50 . 2008-08-28 19:20 <KANSIO> d-------- C:\Users\All Users\WLInstaller
    2008-08-26 16:50 . 2008-08-28 19:20 <KANSIO> d-------- C:\ProgramData\WLInstaller
    2008-08-25 19:44 . 2008-08-28 13:54 <KANSIO> d--h----- C:\$AVG8.VAULT$
    2008-08-25 18:17 . 2008-08-27 18:05 12,936 --a------ C:\Windows\System32\drivers\avgrkx86.sys
    2008-08-25 18:17 . 2008-08-27 18:05 10,520 --a------ C:\Windows\System32\avgrsstx.dll
    2008-08-25 18:16 . 2008-08-28 17:33 <KANSIO> d-------- C:\Windows\System32\drivers\Avg
    2008-08-25 18:16 . 2008-08-26 09:13 <KANSIO> d-------- C:\Users\All Users\avg8
    2008-08-25 18:16 . 2008-08-26 09:13 <KANSIO> d-------- C:\ProgramData\avg8
    2008-08-25 18:16 . 2008-08-25 18:16 <KANSIO> d-------- C:\Program Files\AVG
    2008-08-25 18:16 . 2008-08-27 18:05 97,928 --a------ C:\Windows\System32\drivers\avgldx86.sys
    2008-08-25 18:16 . 2008-08-27 18:06 69,128 --a------ C:\Windows\System32\drivers\avgwfpx.sys
    2008-08-25 17:58 . 2008-08-25 17:58 <KANSIO> d-------- C:\Users\mönkkönen\AppData\Roaming\PC Tools
    2008-08-25 17:58 . 2008-08-28 17:37 <KANSIO> d-a------ C:\Users\All Users\TEMP
    2008-08-25 17:58 . 2008-08-25 17:58 <KANSIO> d-------- C:\Users\All Users\PC Tools
    2008-08-25 17:58 . 2008-08-28 17:37 <KANSIO> d-a------ C:\ProgramData\TEMP
    2008-08-25 17:58 . 2008-08-25 17:58 <KANSIO> d-------- C:\ProgramData\PC Tools
    2008-08-25 17:58 . 2008-08-25 18:02 <KANSIO> d-------- C:\Program Files\Common Files\PC Tools
    2008-08-25 17:58 . 2008-08-25 18:05 160,792 --a------ C:\Windows\System32\drivers\pctfw2.sys
    2008-08-25 17:58 . 2008-06-10 21:22 81,288 --a------ C:\Windows\System32\drivers\iksyssec.sys
    2008-08-25 17:58 . 2008-06-02 15:19 66,952 --a------ C:\Windows\System32\drivers\iksysflt.sys
    2008-08-25 17:58 . 2008-06-02 15:19 42,376 --a------ C:\Windows\System32\drivers\ikfilesec.sys
    2008-08-25 17:58 . 2008-06-02 15:19 29,576 --a------ C:\Windows\System32\drivers\kcom.sys
    2008-08-25 17:39 . 2008-08-25 17:39 <KANSIO> d-------- C:\Users\mönkkönen\AppData\Roaming\WinRAR
    2008-08-25 17:26 . 2008-08-26 20:09 <KANSIO> d-------- C:\Program Files\MSA
    2008-08-25 16:51 . 2008-08-25 16:51 <KANSIO> d-------- C:\Users\mönkkönen\AppData\Roaming\Mozilla
    2008-08-25 15:43 . 2008-08-25 15:43 <KANSIO> d-------- C:\Users\mönkkönen\AppData\Roaming\Macromedia
    2008-08-23 00:41 . 2008-08-25 15:43 <KANSIO> d-------- C:\Users\mönkkönen\AppData\Roaming\Adobe
    2008-08-23 00:40 . 2008-08-23 00:40 0 --a------ C:\Users\mönkkönen\AppData\Roaming\wklnhst.dat
    2008-08-22 20:54 . 2006-12-10 23:32 499,712 --a------ C:\Windows\System32\msvcp71.dll
    2008-08-22 20:54 . 2008-07-09 11:05 421,888 --a------ C:\Windows\System32\ac3filter.acm
    2008-08-22 20:54 . 2006-12-10 23:32 348,160 --a------ C:\Windows\System32\msvcr71.dll
    2008-08-22 20:54 . 2008-06-08 23:58 60,273 --a------ C:\Windows\System32\pthreadGC2.dll
    2008-08-22 20:54 . 2008-06-12 20:36 7,680 --a------ C:\Windows\System32\ff_vfw.dll
    2008-08-22 20:54 . 2007-07-10 18:10 547 --a------ C:\Windows\System32\ff_vfw.dll.manifest
    2008-08-22 20:49 . 2008-08-22 21:00 <KANSIO> d-------- C:\Users\mönkkönen\AppData\Roaming\Winamp
    2008-08-22 20:49 . 2007-03-08 02:51 129,784 --------- C:\Windows\System32\pxafs.dll
    2008-08-22 20:46 . 2008-08-22 22:47 <KANSIO> d-------- C:\Users\mönkkönen\AppData\Roaming\BSplayer PRO
    2008-08-18 22:23 . 2008-08-18 22:23 <KANSIO> d-------- C:\Users\mönkkönen\AppData\Roaming\Nero
    2008-08-18 21:59 . 2008-08-18 22:24 69 --a------ C:\Windows\NeroDigital.ini
    2008-08-18 19:44 . 2008-08-18 19:44 <KANSIO> dr------- C:\Users\mönkkönen\Videos
    2008-08-18 19:44 . 2008-08-18 19:44 <KANSIO> dr------- C:\Users\mönkkönen\Videos
    2008-08-18 19:44 . 2008-08-18 19:44 <KANSIO> dr------- C:\Users\mönkkönen\Searches
    2008-08-18 19:44 . 2008-08-18 19:44 <KANSIO> dr------- C:\Users\mönkkönen\Searches
    2008-08-18 19:44 . 2008-08-18 19:44 <KANSIO> dr------- C:\Users\mönkkönen\Saved Games
    2008-08-18 19:44 . 2008-08-18 19:44 <KANSIO> dr------- C:\Users\mönkkönen\Saved Games
    2008-08-18 19:44 . 2008-08-18 22:21 <KANSIO> dr------- C:\Users\mönkkönen\Pictures
    2008-08-18 19:44 . 2008-08-18 22:21 <KANSIO> dr------- C:\Users\mönkkönen\Pictures
    2008-08-18 19:44 . 2008-08-18 19:44 <KANSIO> dr------- C:\Users\mönkkönen\Music
    2008-08-18 19:44 . 2008-08-18 19:44 <KANSIO> dr------- C:\Users\mönkkönen\Music
    2008-08-18 19:44 . 2008-08-18 19:44 <KANSIO> dr------- C:\Users\mönkkönen\Links
    2008-08-18 19:44 . 2008-08-18 19:44 <KANSIO> dr------- C:\Users\mönkkönen\Links
    2008-08-18 19:44 . 2008-08-18 19:44 <KANSIO> dr------- C:\Users\mönkkönen\Favorites
    2008-08-18 19:44 . 2008-08-18 19:44 <KANSIO> dr------- C:\Users\mönkkönen\Favorites
    2008-08-18 19:44 . 2008-08-28 20:33 <KANSIO> dr------- C:\Users\mönkkönen\Downloads
    2008-08-18 19:44 . 2008-08-28 20:33 <KANSIO> dr------- C:\Users\mönkkönen\Downloads
    2008-08-18 19:44 . 2008-08-28 19:40 <KANSIO> dr------- C:\Users\mönkkönen\Documents
    2008-08-18 19:44 . 2008-08-28 19:40 <KANSIO> dr------- C:\Users\mönkkönen\Documents
    2008-08-18 19:44 . 2008-08-28 20:34 <KANSIO> dr------- C:\Users\mönkkönen\Desktop
    2008-08-18 19:44 . 2008-08-28 20:34 <KANSIO> dr------- C:\Users\mönkkönen\Desktop
    2008-08-18 19:44 . 2008-08-28 19:38 <KANSIO> dr------- C:\Users\mönkkönen\Contacts
    2008-08-18 19:44 . 2008-08-28 19:38 <KANSIO> dr------- C:\Users\mönkkönen\Contacts
    2008-08-18 19:44 . 2008-08-28 19:39 <KANSIO> d---s---- C:\Users\mönkkönen\AppData\Roaming\Microsoft
    2008-08-18 19:44 . 2006-11-02 15:37 <KANSIO> d-------- C:\Users\mönkkönen\AppData\Roaming\Media Center Programs
    2008-08-18 19:44 . 2008-08-18 19:44 <KANSIO> d-------- C:\Users\mönkkönen\AppData\Roaming\Identities
    2008-08-18 19:44 . 2008-08-18 19:44 <KANSIO> d-------- C:\Users\mönkkönen\AppData\Roaming\ATI
    2008-08-18 19:44 . 2008-08-18 19:44 <KANSIO> d--h----- C:\Users\mönkkönen\AppData
    2008-08-18 19:44 . 2008-08-18 19:44 <KANSIO> d--h----- C:\Users\mönkkönen\AppData
    2008-08-18 19:44 . 2008-08-28 19:24 <KANSIO> d-------- C:\Users\mönkkönen
    2008-08-18 19:44 . 2008-08-18 19:44 <KANSIO> d-------- C:\Users\All Users\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
    2008-08-18 19:44 . 2008-08-18 19:44 <KANSIO> d-------- C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
    2008-08-18 19:44 . 2008-08-18 19:44 <KANSIO> d-------- C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
    2008-08-18 19:44 . 2008-08-28 20:44 1,048,576 --ahs---- C:\Users\mönkkönen\NTUSER.DAT
    2008-08-18 19:44 . 2008-08-28 20:44 1,048,576 --ahs---- C:\Users\mönkkönen\NTUSER.DAT
    2008-08-18 19:41 . 2008-08-18 19:41 <KANSIO> d-------- C:\Users\All Users\fsc-reg
    2008-08-18 19:41 . 2008-08-18 19:41 <KANSIO> d-------- C:\ProgramData\fsc-reg
    2008-08-18 19:41 . 2008-08-18 19:41 <KANSIO> d-------- C:\Program Files\Fujitsu Siemens Computers
    2008-08-18 19:41 . 2008-08-18 19:41 <KANSIO> d-------- C:\Program Files\Common Files\Fujitsu Siemens Computers
    2008-08-18 19:40 . 2006-10-26 19:56 32,592 --a------ C:\Windows\System32\msonpmon.dll
    2008-08-18 19:39 . 2008-08-18 19:39 <KANSIO> d-------- C:\Windows\PCHEALTH
    2008-08-18 19:39 . 2008-08-18 19:39 <KANSIO> d-------- C:\Program Files\Microsoft.NET
    2008-08-18 19:39 . 2008-08-18 19:42 <KANSIO> d-------- C:\Program Files\Microsoft Works
    2008-08-18 19:38 . 2008-08-27 18:19 <KANSIO> d-------- C:\Users\All Users\Microsoft Help
    2008-08-18 19:38 . 2008-08-27 18:19 <KANSIO> d-------- C:\ProgramData\Microsoft Help
    2008-08-18 19:37 . 2008-08-18 19:37 <KANSIO> dr-h----- C:\MSOCache
    2008-08-18 19:36 . 2008-08-18 19:36 <KANSIO> dr------- C:\Windows\System32\config\systemprofile\Documents
    2008-08-18 19:35 . 2008-08-18 19:35 <KANSIO> d-------- C:\Users\All Users\Nero
    2008-08-18 19:35 . 2008-08-18 19:35 <KANSIO> d-------- C:\ProgramData\Nero
    2008-08-18 19:35 . 2008-08-18 19:35 <KANSIO> d-------- C:\Program Files\Nero
    2008-08-18 19:35 . 2008-08-18 19:36 <KANSIO> d-------- C:\Program Files\Common Files\Nero
    2008-08-18 19:33 . 2008-08-18 19:33 <KANSIO> d-------- C:\Windows\System32\Macromed
    2008-08-18 19:33 . 2008-06-20 13:02 14,848 --a------ C:\Windows\System32\Fujitsu-Siemens.scr
    2008-08-18 19:32 . 2008-08-18 19:32 <KANSIO> d-------- C:\Users\All Users\Adobe
    2008-08-18 19:32 . 2008-08-18 19:32 <KANSIO> d-------- C:\Program Files\Common Files\Adobe
    2008-08-18 19:25 . 2008-08-18 19:25 <KANSIO> dr------- C:\Windows\System32\config\systemprofile\Contacts

    .
    (((((((((((((((((((((((((((((((((((( Find3M-raportti ))))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-08-28 17:44 1,048,576 --sha-w C:\Users\mönkkönen\NTUSER.DAT
    2008-08-28 17:44 1,048,576 --sha-w C:\Users\mönkkönen\NTUSER.DAT
    2008-08-28 16:39 --------- d-s---w C:\Users\mönkkönen\AppData\Roaming\Microsoft
    2008-08-27 15:20 --------- d-----w C:\Program Files\Windows Mail
    2008-08-26 16:16 --------- d-----w C:\Users\mönkkönen\AppData\Roaming\Malwarebytes
    2008-08-25 14:58 --------- d-----w C:\Users\mönkkönen\AppData\Roaming\PC Tools
    2008-08-25 14:39 --------- d-----w C:\Users\mönkkönen\AppData\Roaming\WinRAR
    2008-08-25 13:51 --------- d-----w C:\Users\mönkkönen\AppData\Roaming\Mozilla
    2008-08-25 12:43 --------- d-----w C:\Users\mönkkönen\AppData\Roaming\Macromedia
    2008-08-25 12:43 --------- d-----w C:\Users\mönkkönen\AppData\Roaming\Adobe
    2008-08-22 21:40 0 ----a-w C:\Users\mönkkönen\AppData\Roaming\wklnhst.dat
    2008-08-22 19:47 --------- d-----w C:\Users\mönkkönen\AppData\Roaming\BSplayer PRO
    2008-08-22 18:00 --------- d-----w C:\Users\mönkkönen\AppData\Roaming\Winamp
    2008-08-18 19:23 --------- d-----w C:\Users\mönkkönen\AppData\Roaming\Nero
    2008-08-18 16:44 --------- d-----w C:\Users\mönkkönen\AppData\Roaming\Identities
    2008-08-18 16:44 --------- d-----w C:\Users\mönkkönen\AppData\Roaming\ATI
    2008-07-03 05:23 --------- d-----w C:\ProgramData\ATI
    2008-07-03 05:20 12 ----a-w C:\Windows\system32\drivers\FSC__PI__MS-7304VP__FUJITSU SIEMENS_MS-7304VP__Default System BIOS_FSC - 20080430_V3.06__ATI Radeon HD 3200 Graphics__ATI Radeon HD 3600 Series.MRK
    2008-07-03 05:05 --------- d-----w C:\Program Files\ATI Technologies
    2008-07-03 05:04 --------- d-----w C:\Program Files\ATI
    2008-07-03 04:39 0 ---ha-w C:\Windows\system32\drivers\Msft_User_WpdFs_01_00_00.Wdf
    2008-06-02 11:38 32,768 ----a-w C:\Windows\System32\RtkCoInst.dll
    2008-05-30 21:19 507,400 ----a-w C:\Windows\System32\XAudio2_1.dll
    2008-05-30 21:18 238,088 ----a-w C:\Windows\System32\xactengine3_1.dll
    2008-05-30 21:17 65,032 ----a-w C:\Windows\System32\XAPOFX1_0.dll
    2008-05-30 21:17 25,608 ----a-w C:\Windows\System32\X3DAudio1_4.dll
    2008-05-30 21:11 467,984 ----a-w C:\Windows\System32\d3dx10_38.dll
    2008-05-30 21:11 3,850,760 ----a-w C:\Windows\System32\D3DX9_38.dll
    2008-05-30 21:11 1,491,992 ----a-w C:\Windows\System32\D3DCompiler_38.dll
    2008-05-28 14:06 6,144,000 ----a-w C:\Windows\RtHDVCpl.exe
    2008-01-21 02:43 174 --sha-w C:\Program Files\desktop.ini
    .

    ((((((((((((((((((((((((((((( snapshot@2008-08-26_20.49.08.38 )))))))))))))))))))))))))))))))))))))))))
    .
    - 2008-08-18 16:39:42 248,632 ----a-w C:\Windows\assembly\GAC\Microsoft.Office.Interop.PowerPoint\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.PowerPoint.dll
    + 2008-08-27 15:11:58 250,928 ----a-w C:\Windows\assembly\GAC\Microsoft.Office.Interop.PowerPoint\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.PowerPoint.dll
    - 2008-08-18 16:31:20 51,200 ----a-w C:\Windows\inf\infpub.dat
    + 2008-08-28 16:24:08 51,200 ----a-w C:\Windows\inf\infpub.dat
    - 2008-07-03 05:08:56 86,016 ----a-w C:\Windows\inf\infstor.dat
    + 2008-08-28 16:24:08 86,016 ----a-w C:\Windows\inf\infstor.dat
    - 2008-07-03 05:09:04 86,016 ----a-w C:\Windows\inf\infstrng.dat
    + 2008-08-28 16:24:08 86,016 ----a-w C:\Windows\inf\infstrng.dat
    + 2006-10-26 17:08:00 1,764,112 ----a-r C:\Windows\Installer\$PatchCache$\Managed\000021090200B0400000000000F01FEC\12.0.4518\PPCNV.DLL
    + 2006-10-26 17:07:50 67,920 ----a-r C:\Windows\Installer\$PatchCache$\Managed\000021090200B0400000000000F01FEC\12.0.4518\PXBCOM.EXE
    + 2006-10-27 12:11:38 4,235,560 ----a-r C:\Windows\Installer\$PatchCache$\Managed\000021090200B0400000000000F01FEC\12.0.4518\WRD12CNV.DLL
    + 2006-10-27 12:11:36 21,264 ----a-r C:\Windows\Installer\$PatchCache$\Managed\000021090200B0400000000000F01FEC\12.0.4518\WRD12EXE.EXE
    + 2006-10-26 18:13:08 14,674,216 ----a-r C:\Windows\Installer\$PatchCache$\Managed\000021090200B0400000000000F01FEC\12.0.4518\XL12CNV.EXE
    + 2006-10-27 12:07:36 17,891,112 ----a-r C:\Windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\EXCEL.EXE
    + 2006-10-27 12:04:06 465,200 ----a-r C:\Windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\POWERPNT.EXE
    + 2006-10-27 12:04:06 7,980,848 ----a-r C:\Windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\PPCORE.DLL
    + 2008-08-18 16:39:42 248,632 ----a-r C:\Windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\PPTPIA.DLL
    + 2006-10-27 12:23:04 347,432 ----a-r C:\Windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\WINWORD.EXE
    + 2006-10-27 12:11:38 4,235,560 ----a-r C:\Windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\WRD12CNV.DLL
    + 2006-10-27 12:11:36 21,264 ----a-r C:\Windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\WRD12EXE.EXE
    + 2006-10-27 12:23:08 17,483,560 ----a-r C:\Windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\WWLIB.DLL
    + 2006-10-26 18:13:08 14,674,216 ----a-r C:\Windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\XL12CNV.EXE
    + 2006-10-26 18:17:08 11,072 ----a-r C:\Windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\XLCALL32.DLL
    + 2006-10-26 17:08:00 1,764,112 ----a-r C:\Windows\Installer\$PatchCache$\Managed\00002159FA00B0400000000000F01FEC\12.0.4518\PPCNV.DLL
    + 2006-10-26 17:07:50 67,920 ----a-r C:\Windows\Installer\$PatchCache$\Managed\00002159FA00B0400000000000F01FEC\12.0.4518\PXBCOM.EXE
    - 2008-08-18 16:43:12 35,600 ----a-r C:\Windows\Installer\{90120000-0020-040B-0000-0000000FF1CE}\O12ConvIcon.exe
    + 2008-08-27 15:16:35 35,600 ----a-r C:\Windows\Installer\{90120000-0020-040B-0000-0000000FF1CE}\O12ConvIcon.exe
    - 2008-08-18 16:40:32 20,240 ----a-r C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\cagicon.exe
    + 2008-08-27 15:19:58 20,240 ----a-r C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\cagicon.exe
    - 2008-08-18 16:40:32 184,080 ----a-r C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\joticon.exe
    + 2008-08-27 15:19:58 184,080 ----a-r C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\joticon.exe
    - 2008-08-18 16:40:32 217,864 ----a-r C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\misc.exe
    + 2008-08-27 15:19:58 217,864 ----a-r C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\misc.exe
    - 2008-08-18 16:40:32 18,704 ----a-r C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\mspicons.exe
    + 2008-08-27 15:19:58 18,704 ----a-r C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\mspicons.exe
    - 2008-08-18 16:40:32 35,088 ----a-r C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\oisicon.exe
    + 2008-08-27 15:19:58 35,088 ----a-r C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\oisicon.exe
    - 2008-08-18 16:40:32 922,384 ----a-r C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\pptico.exe
    + 2008-08-27 15:19:58 922,384 ----a-r C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\pptico.exe
    - 2008-08-18 16:40:32 888,080 ----a-r C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\wordicon.exe
    + 2008-08-27 15:19:58 888,080 ----a-r C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\wordicon.exe
    - 2008-08-18 16:40:32 1,172,240 ----a-r C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\xlicons.exe
    + 2008-08-27 15:19:58 1,172,240 ----a-r C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\xlicons.exe
    - 2008-08-18 16:43:05 49,936 ----a-r C:\Windows\Installer\{95120000-00AF-040B-0000-0000000FF1CE}\ppvwicon.exe
    + 2008-08-27 15:17:47 49,936 ----a-r C:\Windows\Installer\{95120000-00AF-040B-0000-0000000FF1CE}\ppvwicon.exe
    + 2008-08-28 16:23:47 29,926 ----a-r C:\Windows\Installer\{A9174A72-1B46-445B-B3CF-90ED2C63D83B}\MsblIco.Exe
    + 2008-08-27 15:06:50 32,768 ----a-r C:\Windows\Installer\{C04E32E0-0416-434D-AFB9-6969D703A9EF}\icon.exe
    - 2008-08-26 17:13:02 2,048 --sha-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
    + 2008-08-28 14:25:29 2,048 --sha-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
    - 2008-08-26 17:13:02 2,048 --sha-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
    + 2008-08-28 14:25:29 2,048 --sha-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
    - 2008-08-26 17:13:55 262,144 --sha-w C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT
    + 2008-08-28 16:24:40 262,144 --sha-w C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT
    + 2008-08-28 16:24:40 262,144 ---ha-w C:\Windows\ServiceProfiles\LocalService\ntuser.dat.LOG1
    - 2008-08-26 17:14:34 262,144 --sha-w C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT
    + 2008-08-28 16:24:29 262,144 --sha-w C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT
    + 2008-08-28 16:24:29 262,144 ---ha-w C:\Windows\ServiceProfiles\NetworkService\ntuser.dat.LOG1
    - 2008-08-26 17:13:03 32,768 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
    + 2008-08-28 14:25:49 32,768 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
    - 2008-08-26 17:13:03 32,768 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
    + 2008-08-28 14:25:49 32,768 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
    - 2008-08-26 17:13:03 16,384 --sha-w C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
    + 2008-08-28 14:25:49 16,384 --sha-w C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
    - 2008-08-26 17:42:23 262,144 ----a-w C:\Windows\System32\config\systemprofile\ntuser.dat
    + 2008-08-28 17:39:29 262,144 ----a-w C:\Windows\System32\config\systemprofile\ntuser.dat
    - 2008-08-25 15:16:50 26,184 ----a-w C:\Windows\System32\drivers\avgmfx86.sys
    + 2008-08-27 15:05:28 26,824 ----a-w C:\Windows\System32\drivers\avgmfx86.sys
    - 2008-01-21 02:24:41 6,068,736 ----a-w C:\Windows\System32\ieframe.dll
    + 2008-06-27 04:15:23 6,068,736 ----a-w C:\Windows\System32\ieframe.dll
    - 2008-01-21 02:24:59 512,000 ----a-w C:\Windows\System32\jscript.dll
    + 2008-05-08 21:59:28 512,000 ----a-w C:\Windows\System32\jscript.dll
    - 2008-04-25 04:35:13 28,160 ----a-w C:\Windows\System32\jsproxy.dll
    + 2008-06-27 04:15:24 28,160 ----a-w C:\Windows\System32\jsproxy.dll
    + 2008-03-25 03:21:18 2,889,088 ----a-w C:\Windows\System32\Macromed\Flash\NPSWF32.dll
    + 2008-03-25 03:21:20 218,496 ----a-w C:\Windows\System32\Macromed\Flash\NPSWF32_FlashUtil.exe
    + 2008-08-26 19:27:18 70,264 ----a-w C:\Windows\System32\Macromed\Flash\uninstall_plugin.exe
    - 2008-04-25 04:35:24 64,512 ----a-w C:\Windows\System32\migration\WininetPlugin.dll
    + 2008-06-27 04:15:28 64,512 ----a-w C:\Windows\System32\migration\WininetPlugin.dll
    - 2008-04-25 04:35:14 3,578,368 ----a-w C:\Windows\System32\mshtml.dll
    + 2008-06-27 04:15:24 3,578,368 ----a-w C:\Windows\System32\mshtml.dll
    - 2008-04-25 04:35:16 671,232 ----a-w C:\Windows\System32\mstime.dll
    + 2008-06-27 04:15:25 671,232 ----a-w C:\Windows\System32\mstime.dll
    - 2003-04-18 13:46:22 1,233,920 ----a-w C:\Windows\System32\msxml4.dll
    + 2007-05-08 12:03:04 1,275,392 ----a-w C:\Windows\System32\msxml4.dll
    - 2008-08-26 17:19:13 101,052 ----a-w C:\Windows\System32\perfc009.dat
    + 2008-08-28 14:34:59 101,052 ----a-w C:\Windows\System32\perfc009.dat
    - 2008-08-26 17:19:13 80,514 ----a-w C:\Windows\System32\perfc00B.dat
    + 2008-08-28 14:34:59 80,514 ----a-w C:\Windows\System32\perfc00B.dat
    - 2008-08-26 17:19:13 586,980 ----a-w C:\Windows\System32\perfh009.dat
    + 2008-08-28 14:34:59 586,980 ----a-w C:\Windows\System32\perfh009.dat
    - 2008-08-26 17:19:14 435,392 ----a-w C:\Windows\System32\perfh00B.dat
    + 2008-08-28 14:34:59 435,392 ----a-w C:\Windows\System32\perfh00B.dat
    - 2008-01-21 02:23:46 11,580,416 ----a-w C:\Windows\System32\shell32.dll
    + 2008-04-24 04:58:20 11,580,416 ----a-w C:\Windows\System32\shell32.dll
    + 2007-10-18 08:31:46 51,224 ----a-w C:\Windows\System32\sirenacm.dll
    - 2008-08-26 17:11:14 6,291,456 ----a-w C:\Windows\System32\SMI\Store\Machine\SCHEMA.DAT
    + 2008-08-27 15:33:26 6,291,456 ----a-w C:\Windows\System32\SMI\Store\Machine\SCHEMA.DAT
    - 2008-04-25 04:35:19 1,166,336 ----a-w C:\Windows\System32\urlmon.dll
    + 2008-06-27 04:15:28 1,166,336 ----a-w C:\Windows\System32\urlmon.dll
    - 2008-08-26 17:15:15 2,454 ----a-w C:\Windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-2586952071-3533426760-1646572439-1000_UserData.bin
    + 2008-08-28 14:28:37 2,992 ----a-w C:\Windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-2586952071-3533426760-1646572439-1000_UserData.bin
    - 2008-08-26 17:15:15 59,564 ----a-w C:\Windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
    + 2008-08-28 14:28:16 62,382 ----a-w C:\Windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
    - 2008-08-26 17:15:14 21,622 ----a-w C:\Windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
    + 2008-08-28 14:28:14 23,222 ----a-w C:\Windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
    - 2008-08-26 16:32:07 23,270,115 ----a-w C:\Windows\winsxs\ManifestCache\6.0.6001.18000_001c50b5_blobs.bin
    + 2008-08-27 15:20:58 24,142,439 ----a-w C:\Windows\winsxs\ManifestCache\6.0.6001.18000_001c50b5_blobs.bin
    + 2008-07-16 04:09:38 124,928 ----a-w C:\Windows\winsxs\x86_microsoft-windows-advpack_31bf3856ad364e35_6.0.6000.16717_none_a9e15ad3f5abc778\advpack.dll
    + 2008-07-18 03:13:52 124,928 ----a-w C:\Windows\winsxs\x86_microsoft-windows-advpack_31bf3856ad364e35_6.0.6000.20879_none_aa2c18ab0ef84196\advpack.dll
    + 2008-04-19 08:13:07 268,800 ----a-w C:\Windows\winsxs\x86_microsoft-windows-c..complus-eventsystem_31bf3856ad364e35_6.0.6000.16677_none_0ac2b30954c98430\es.dll
    + 2008-04-19 08:27:37 268,800 ----a-w C:\Windows\winsxs\x86_microsoft-windows-c..complus-eventsystem_31bf3856ad364e35_6.0.6000.20818_none_0b8e318c6db592d2\es.dll
    + 2008-04-18 05:48:39 269,312 ----a-w C:\Windows\winsxs\x86_microsoft-windows-c..complus-eventsystem_31bf3856ad364e35_6.0.6001.18057_none_0cbe918751dfdd3f\es.dll
    + 2008-04-18 05:30:29 269,312 ----a-w C:\Windows\winsxs\x86_microsoft-windows-c..complus-eventsystem_31bf3856ad364e35_6.0.6001.22162_none_0d385cf46b0a1a47\es.dll
    + 2008-06-27 03:54:48 44,544 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..ablenetworkgraphics_31bf3856ad364e35_6.0.6000.16711_none_ebd662c7164a156d\pngfilt.dll
    + 2008-06-27 03:49:09 44,544 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..ablenetworkgraphics_31bf3856ad364e35_6.0.6000.20868_none_ec30f1fc2f89f24d\pngfilt.dll
    + 2008-06-27 03:54:49 1,159,680 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6000.16711_none_b2f30b79d9aa8cd1\urlmon.dll
    + 2008-06-27 03:49:41 1,162,752 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6000.20868_none_b34d9aaef2ea69b1\urlmon.dll
    + 2008-06-27 04:15:28 1,166,336 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6001.18099_none_b48acb29d70acadb\urlmon.dll
    + 2008-06-27 03:50:29 1,166,848 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6001.22212_none_b563e734efedd6e3\urlmon.dll
    + 2008-06-27 03:54:47 671,232 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6000.16711_none_ded59a427f534c40\mstime.dll
    + 2008-06-27 03:47:51 671,232 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6000.20868_none_df30297798932920\mstime.dll
    + 2008-06-27 04:15:25 671,232 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6001.18099_none_e06d59f27cb38a4a\mstime.dll
    + 2008-06-27 03:48:43 671,232 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6001.22212_none_e14675fd95969652\mstime.dll
    + 2008-07-15 23:48:18 2,048 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6000.16717_none_135d4bd00c6d4a6b\tzres.dll
    + 2008-07-16 04:09:30 18,944 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6000.16717_none_135d4bd00c6d4a6b\tzupd.exe
    + 2008-07-15 23:43:45 2,048 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6000.20878_none_13a7095d25baab32\tzres.dll
    + 2008-07-16 01:28:34 18,944 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6000.20878_none_13a7095d25baab32\tzupd.exe
    + 2008-07-16 01:32:44 2,048 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6001.18108_none_154f5aac098ad8c2\tzres.dll
    + 2008-01-21 02:23:44 18,944 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6001.18108_none_154f5aac098ad8c2\tzupd.exe
    + 2008-07-16 01:27:35 2,048 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6001.22223_none_15be562d22bd31bb\tzres.dll
    + 2008-07-16 01:27:35 18,944 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6001.22223_none_15be562d22bd31bb\tzupd.exe
    + 2008-06-27 03:54:45 27,648 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16711_none_fff8e71ba4b3b364\jsproxy.dll
    + 2008-06-27 03:54:49 826,368 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16711_none_fff8e71ba4b3b364\wininet.dll
    + 2008-06-27 03:54:49 64,512 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16711_none_fff8e71ba4b3b364\WininetPlugin.dll
    + 2008-06-27 03:47:03 27,648 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.20868_none_00537650bdf39044\jsproxy.dll
    + 2008-06-27 03:49:46 827,904 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.20868_none_00537650bdf39044\wininet.dll
    + 2008-06-27 03:49:46 64,512 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.20868_none_00537650bdf39044\WininetPlugin.dll
    + 2008-06-27 04:15:24 28,160 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.18099_none_0190a6cba213f16e\jsproxy.dll
    + 2008-06-27 04:15:28 827,392 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.18099_none_0190a6cba213f16e\wininet.dll
    + 2008-06-27 04:15:28 64,512 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.18099_none_0190a6cba213f16e\WininetPlugin.dll
    + 2008-06-27 03:47:35 28,160 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.22212_none_0269c2d6baf6fd76\jsproxy.dll
    + 2008-06-27 03:50:35 827,904 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.22212_none_0269c2d6baf6fd76\wininet.dll
    + 2008-06-27 03:50:35 64,512 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.22212_none_0269c2d6baf6fd76\WininetPlugin.dll
    + 2008-06-27 03:54:45 383,488 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.16711_none_f9a209f56e9f2db7\ieapfltr.dll
    + 2008-06-27 03:46:48 383,488 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.20868_none_f9fc992a87df0a97\ieapfltr.dll
    + 2008-06-27 03:54:44 347,136 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.16711_none_95d642ad8484b3e5\dxtmsft.dll
    + 2008-06-27 03:54:44 214,528 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.16711_none_95d642ad8484b3e5\dxtrans.dll
    + 2008-06-27 03:46:25 347,136 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.20868_none_9630d1e29dc490c5\dxtmsft.dll
    + 2008-06-27 03:46:25 214,528 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.20868_none_9630d1e29dc490c5\dxtrans.dll
    + 2008-06-27 03:54:45 477,696 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-htmlediting_31bf3856ad364e35_6.0.6000.16711_none_4638dd0546456672\mshtmled.dll
    + 2008-06-27 03:47:32 477,696 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-htmlediting_31bf3856ad364e35_6.0.6000.20868_none_46936c3a5f854352\mshtmled.dll
    + 2008-06-27 03:54:45 3,592,192 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6000.16711_none_1153063a250a1c9a\mshtml.dll
    + 2008-06-27 03:47:31 3,594,240 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6000.20868_none_11ad956f3e49f97a\mshtml.dll
    + 2008-06-27 04:15:24 3,578,368 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6001.18099_none_12eac5ea226a5aa4\mshtml.dll
    + 2008-06-27 03:48:28 3,578,880 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6001.22212_none_13c3e1f53b4d66ac\mshtml.dll
    + 2008-06-27 03:54:45 63,488 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-infocard_31bf3856ad364e35_6.0.6000.16711_none_58ab7304671ea8a3\icardie.dll
    + 2008-06-27 03:46:48 63,488 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-infocard_31bf3856ad364e35_6.0.6000.20868_none_59060239805e8583\icardie.dll
    + 2008-06-27 03:54:09 26,624 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16711_none_2d71f3a71cdf2247\ieUnatt.exe
    + 2008-06-27 03:54:09 625,664 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16711_none_2d71f3a71cdf2247\iexplore.exe
    + 2008-06-27 01:41:11 26,624 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.20868_none_2dcc82dc361eff27\ieUnatt.exe
    + 2008-06-27 01:41:30 625,664 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.20868_none_2dcc82dc361eff27\iexplore.exe
    + 2008-06-27 03:54:09 70,656 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.16711_none_c3e0a8c26159eaec\ie4uinit.exe
    + 2008-06-27 03:54:45 44,544 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.16711_none_c3e0a8c26159eaec\iernonce.dll
    + 2008-06-27 03:54:45 56,320 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.16711_none_c3e0a8c26159eaec\iesetup.dll
    + 2008-06-27 01:41:00 70,656 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.20868_none_c43b37f77a99c7cc\ie4uinit.exe
    + 2008-06-27 03:46:49 44,544 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.20868_none_c43b37f77a99c7cc\iernonce.dll
    + 2008-06-27 03:46:49 56,320 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.20868_none_c43b37f77a99c7cc\iesetup.dll
    + 2008-06-27 03:54:45 52,736 ----a-w C:\Windows\winsxs\x86_microsoft-windows-iebrshim_31bf3856ad364e35_6.0.6000.16711_none_2a05bf326809c049\iebrshim.dll
    + 2008-06-27 03:46:48 52,736 ----a-w C:\Windows\winsxs\x86_microsoft-windows-iebrshim_31bf3856ad364e35_6.0.6000.20868_none_2a604e6781499d29\iebrshim.dll
    + 2008-06-27 03:54:45 6,066,176 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.16711_none_62b2603db0ffaac7\ieframe.dll
    + 2008-06-27 03:54:45 180,736 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.16711_none_62b2603db0ffaac7\ieui.dll
    + 2008-06-27 03:46:49 6,068,736 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.20868_none_630cef72ca3f87a7\ieframe.dll
    + 2008-06-27 03:46:49 180,736 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.20868_none_630cef72ca3f87a7\ieui.dll
    + 2008-06-27 04:15:23 6,068,736 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6001.18099_none_644a1fedae5fe8d1\ieframe.dll
    + 2008-06-27 03:47:06 6,070,272 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6001.22212_none_65233bf8c742f4d9\ieframe.dll
    + 2008-06-27 03:47:06 180,736 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6001.22212_none_65233bf8c742f4d9\ieui.dll
    + 2008-06-27 03:54:09 263,168 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ieinstal_31bf3856ad364e35_6.0.6000.16711_none_e6abccbc9482feff\ieinstal.exe
    + 2008-06-27 01:41:23 263,168 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ieinstal_31bf3856ad364e35_6.0.6000.20868_none_e7065bf1adc2dbdf\ieinstal.exe
    + 2008-06-27 03:54:09 301,568 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ieuser_31bf3856ad364e35_6.0.6000.16711_none_0b5401d8d6fdbeb1\ieuser.exe
    + 2008-06-27 01:41:24 301,568 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ieuser_31bf3856ad364e35_6.0.6000.20868_none_0bae910df03d9b91\ieuser.exe
    + 2008-04-30 05:29:59 454,656 ----a-w C:\Windows\winsxs\x86_microsoft-windows-m..nts-mdac-rds-ce-dll_31bf3856ad364e35_6.0.6000.16683_none_5fb7376b44d6ca52\msadce.dll
    + 2008-04-30 05:19:33 454,656 ----a-w C:\Windows\winsxs\x86_microsoft-windows-m..nts-mdac-rds-ce-dll_31bf3856ad364e35_6.0.6000.20825_none_6083b6385dc1f24b\msadce.dll
    + 2008-04-30 05:36:32 454,656 ----a-w C:\Windows\winsxs\x86_microsoft-windows-m..nts-mdac-rds-ce-dll_31bf3856ad364e35_6.0.6001.18065_none_61b5167d41eb560f\msadce.dll
    + 2008-04-30 05:25:53 454,656 ----a-w C:\Windows\winsxs\x86_microsoft-windows-m..nts-mdac-rds-ce-dll_31bf3856ad364e35_6.0.6001.22169_none_6242b4705b055b35\msadce.dll
    + 2008-04-10 05:01:31 737,792 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mail-comm-dll_31bf3856ad364e35_6.0.6000.16669_none_77930ed65b8e9f2d\inetcomm.dll
    + 2008-04-10 02:43:11 84,480 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mail-comm-dll_31bf3856ad364e35_6.0.6000.16669_none_77930ed65b8e9f2d\INETRES.dll
    + 2008-04-10 04:56:31 737,792 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mail-comm-dll_31bf3856ad364e35_6.0.6000.20810_none_7849ba89748bcc5a\inetcomm.dll
    + 2008-04-10 02:44:56 84,480 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mail-comm-dll_31bf3856ad364e35_6.0.6000.20810_none_7849ba89748bcc5a\INETRES.dll
    + 2008-04-10 05:12:41 738,304 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mail-comm-dll_31bf3856ad364e35_6.0.6001.18049_none_798eed5458a4f83c\inetcomm.dll
    + 2008-04-10 04:59:52 738,304 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mail-comm-dll_31bf3856ad364e35_6.0.6001.22154_none_7a08b8c171cf3544\inetcomm.dll
    + 2008-04-10 02:51:10 84,480 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mail-comm-dll_31bf3856ad364e35_6.0.6001.22154_none_7a08b8c171cf3544\INETRES.dll
    + 2008-06-19 03:25:22 28,672 ----a-w C:\Windows\winsxs\x86_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.0.6000.16705_none_422d3c83eeda2955\FwRemoteSvr.dll
    + 2008-06-19 03:25:22 361,984 ----a-w C:\Windows\winsxs\x86_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.0.6000.16705_none_422d3c83eeda2955\IPSECSVC.DLL
    + 2008-06-19 03:25:25 272,896 ----a-w C:\Windows\winsxs\x86_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.0.6000.16705_none_422d3c83eeda2955\polstore.dll
    + 2008-06-19 03:25:26 61,440 ----a-w C:\Windows\winsxs\x86_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.0.6000.16705_none_422d3c83eeda2955\winipsec.dll
    + 2008-06-19 03:11:10 28,672 ----a-w C:\Windows\winsxs\x86_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.0.6000.20861_none_4271f89f082c0b69\FwRemoteSvr.dll
    + 2008-06-19 03:11:28 361,984 ----a-w C:\Windows\winsxs\x86_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.0.6000.20861_none_4271f89f082c0b69\IPSECSVC.DLL
    + 2008-06-19 03:13:36 272,896 ----a-w C:\Windows\winsxs\x86_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.0.6000.20861_none_4271f89f082c0b69\polstore.dll
    + 2008-06-19 03:14:12 61,440 ----a-w C:\Windows\winsxs\x86_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.0.6000.20861_none_4271f89f082c0b69\winipsec.dll
    + 2008-06-19 03:31:48 361,984 ----a-w C:\Windows\winsxs\x86_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.0.6001.18094_none_43b129adec4a9f41\IPSECSVC.DLL
    + 2008-06-19 03:12:13 28,672 ----a-w C:\Windows\winsxs\x86_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.0.6001.22206_none_449e183f051d7367\FwRemoteSvr.dll
    + 2008-06-19 03:12:58 361,984 ----a-w C:\Windows\winsxs\x86_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.0.6001.22206_none_449e183f051d7367\IPSECSVC.DLL
    + 2008-06-19 03:15:05 272,896 ----a-w C:\Windows\winsxs\x86_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.0.6001.22206_none_449e183f051d7367\polstore.dll
    + 2008-06-19 03:15:48 61,440 ----a-w C:\Windows\winsxs\x86_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.0.6001.22206_none_449e183f051d7367\winipsec.dll
    + 2008-06-26 03:22:33 797,696 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NaturalLanguage6.dll
    + 2008-06-26 03:22:33 1,523,200 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0000.dll
    + 2008-06-26 03:22:33 2,597,888 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0001.dll
    + 2008-06-26 03:22:33 1,963,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0002.dll
    + 2008-06-26 03:22:33 1,963,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0003.dll
    + 2008-06-26 03:22:33 2,241,024 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0007.dll
    + 2008-06-26 03:22:33 4,874,240 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0009.dll
    + 2008-06-26 03:22:33 9,845,248 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData000a.dll
    + 2008-06-26 03:22:33 2,641,408 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData000c.dll
    + 2008-06-26 03:22:33 2,340,864 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData000d.dll
    + 2008-06-26 03:22:33 1,963,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData000f.dll
    + 2008-06-26 03:22:33 4,493,312 ----a-w C:\Wi
     
    hrjanske, 28.08.2008
    #14
  16. hrjanske

    hrjanske Member

    Liittynyt:
    26.08.2008
    Viestejä:
    11
    Kiitokset:
    0
    Pisteet:
    11
    ComboFix 08-08-27.06 - mönkkönen 2008-08-28 20:39:38.2 - NTFSx86
    Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.1.1035.18.2030 [GMT 3:00]
    Running from: C:\Users\mönkkönen\Desktop\ComboFix.exe
    * Created a new restore point
    .

    ((((( Tiedostot, jotka on luotu seuraavalla aikavälillä: 2008-07-28 to 2008-08-28 )))))))))))))))))
    .

    2008-08-28 19:24 . 2008-08-28 19:24 <KANSIO> d-------- C:\Windows\LastGood
    2008-08-27 18:18 . 2008-07-16 04:32 2,048 --a------ C:\Windows\System32\tzres.dll
    2008-08-27 18:06 . 2008-08-27 18:06 <KANSIO> d-------- C:\Program Files\MSXML 4.0
    2008-08-26 19:33 . 2008-06-26 04:45 12,240,896 --a------ C:\Windows\System32\NlsLexicons0007.dll
    2008-08-26 19:33 . 2008-06-26 04:45 2,644,480 --a------ C:\Windows\System32\NlsLexicons0009.dll
    2008-08-26 19:33 . 2008-06-26 06:29 801,280 --a------ C:\Windows\System32\NaturalLanguage6.dll
    2008-08-26 19:31 . 2008-06-27 04:55 1,383,424 --a------ C:\Windows\System32\mshtml.tlb
    2008-08-26 19:31 . 2008-06-27 07:15 827,392 --a------ C:\Windows\System32\wininet.dll
    2008-08-26 19:31 . 2008-06-19 06:31 361,984 --a------ C:\Windows\System32\IPSECSVC.DLL
    2008-08-26 19:31 . 2008-04-18 08:48 269,312 --a------ C:\Windows\System32\es.dll
    2008-08-26 19:30 . 2008-04-10 08:12 738,304 --a------ C:\Windows\System32\inetcomm.dll
    2008-08-26 19:30 . 2008-05-09 00:59 430,080 --a------ C:\Windows\System32\vbscript.dll
    2008-08-26 19:30 . 2008-05-09 00:59 180,224 --a------ C:\Windows\System32\scrobj.dll
    2008-08-26 19:30 . 2008-05-09 00:59 172,032 --a------ C:\Windows\System32\scrrun.dll
    2008-08-26 19:30 . 2008-05-09 00:59 155,648 --a------ C:\Windows\System32\wscript.exe
    2008-08-26 19:30 . 2008-05-09 00:58 135,168 --a------ C:\Windows\System32\wshom.ocx
    2008-08-26 19:30 . 2008-05-09 00:58 135,168 --a------ C:\Windows\System32\cscript.exe
    2008-08-26 19:30 . 2008-05-09 00:59 90,112 --a------ C:\Windows\System32\wshext.dll
    2008-08-26 19:16 . 2008-08-26 19:16 <KANSIO> d-------- C:\Users\mönkkönen\AppData\Roaming\Malwarebytes
    2008-08-26 19:15 . 2008-08-26 19:15 <KANSIO> d-------- C:\Users\All Users\Malwarebytes
    2008-08-26 19:15 . 2008-08-26 19:15 <KANSIO> d-------- C:\ProgramData\Malwarebytes
    2008-08-26 19:15 . 2008-08-17 15:01 38,472 --a------ C:\Windows\System32\drivers\mbamswissarmy.sys
    2008-08-26 19:15 . 2008-08-17 15:01 17,144 --a------ C:\Windows\System32\drivers\mbam.sys
    2008-08-26 16:51 . 2008-08-28 19:23 <KANSIO> d-------- C:\Program Files\Windows Live
    2008-08-26 16:51 . 2008-08-28 19:23 <KANSIO> d--hsc--- C:\Program Files\Common Files\WindowsLiveInstaller
    2008-08-26 16:50 . 2008-08-28 19:20 <KANSIO> d-------- C:\Users\All Users\WLInstaller
    2008-08-26 16:50 . 2008-08-28 19:20 <KANSIO> d-------- C:\ProgramData\WLInstaller
    2008-08-25 19:44 . 2008-08-28 13:54 <KANSIO> d--h----- C:\$AVG8.VAULT$
    2008-08-25 18:17 . 2008-08-27 18:05 12,936 --a------ C:\Windows\System32\drivers\avgrkx86.sys
    2008-08-25 18:17 . 2008-08-27 18:05 10,520 --a------ C:\Windows\System32\avgrsstx.dll
    2008-08-25 18:16 . 2008-08-28 17:33 <KANSIO> d-------- C:\Windows\System32\drivers\Avg
    2008-08-25 18:16 . 2008-08-26 09:13 <KANSIO> d-------- C:\Users\All Users\avg8
    2008-08-25 18:16 . 2008-08-26 09:13 <KANSIO> d-------- C:\ProgramData\avg8
    2008-08-25 18:16 . 2008-08-25 18:16 <KANSIO> d-------- C:\Program Files\AVG
    2008-08-25 18:16 . 2008-08-27 18:05 97,928 --a------ C:\Windows\System32\drivers\avgldx86.sys
    2008-08-25 18:16 . 2008-08-27 18:06 69,128 --a------ C:\Windows\System32\drivers\avgwfpx.sys
    2008-08-25 17:58 . 2008-08-25 17:58 <KANSIO> d-------- C:\Users\mönkkönen\AppData\Roaming\PC Tools
    2008-08-25 17:58 . 2008-08-28 17:37 <KANSIO> d-a------ C:\Users\All Users\TEMP
    2008-08-25 17:58 . 2008-08-25 17:58 <KANSIO> d-------- C:\Users\All Users\PC Tools
    2008-08-25 17:58 . 2008-08-28 17:37 <KANSIO> d-a------ C:\ProgramData\TEMP
    2008-08-25 17:58 . 2008-08-25 17:58 <KANSIO> d-------- C:\ProgramData\PC Tools
    2008-08-25 17:58 . 2008-08-25 18:02 <KANSIO> d-------- C:\Program Files\Common Files\PC Tools
    2008-08-25 17:58 . 2008-08-25 18:05 160,792 --a------ C:\Windows\System32\drivers\pctfw2.sys
    2008-08-25 17:58 . 2008-06-10 21:22 81,288 --a------ C:\Windows\System32\drivers\iksyssec.sys
    2008-08-25 17:58 . 2008-06-02 15:19 66,952 --a------ C:\Windows\System32\drivers\iksysflt.sys
    2008-08-25 17:58 . 2008-06-02 15:19 42,376 --a------ C:\Windows\System32\drivers\ikfilesec.sys
    2008-08-25 17:58 . 2008-06-02 15:19 29,576 --a------ C:\Windows\System32\drivers\kcom.sys
    2008-08-25 17:39 . 2008-08-25 17:39 <KANSIO> d-------- C:\Users\mönkkönen\AppData\Roaming\WinRAR
    2008-08-25 17:26 . 2008-08-26 20:09 <KANSIO> d-------- C:\Program Files\MSA
    2008-08-25 16:51 . 2008-08-25 16:51 <KANSIO> d-------- C:\Users\mönkkönen\AppData\Roaming\Mozilla
    2008-08-25 15:43 . 2008-08-25 15:43 <KANSIO> d-------- C:\Users\mönkkönen\AppData\Roaming\Macromedia
    2008-08-23 00:41 . 2008-08-25 15:43 <KANSIO> d-------- C:\Users\mönkkönen\AppData\Roaming\Adobe
    2008-08-23 00:40 . 2008-08-23 00:40 0 --a------ C:\Users\mönkkönen\AppData\Roaming\wklnhst.dat
    2008-08-22 20:54 . 2006-12-10 23:32 499,712 --a------ C:\Windows\System32\msvcp71.dll
    2008-08-22 20:54 . 2008-07-09 11:05 421,888 --a------ C:\Windows\System32\ac3filter.acm
    2008-08-22 20:54 . 2006-12-10 23:32 348,160 --a------ C:\Windows\System32\msvcr71.dll
    2008-08-22 20:54 . 2008-06-08 23:58 60,273 --a------ C:\Windows\System32\pthreadGC2.dll
    2008-08-22 20:54 . 2008-06-12 20:36 7,680 --a------ C:\Windows\System32\ff_vfw.dll
    2008-08-22 20:54 . 2007-07-10 18:10 547 --a------ C:\Windows\System32\ff_vfw.dll.manifest
    2008-08-22 20:49 . 2008-08-22 21:00 <KANSIO> d-------- C:\Users\mönkkönen\AppData\Roaming\Winamp
    2008-08-22 20:49 . 2007-03-08 02:51 129,784 --------- C:\Windows\System32\pxafs.dll
    2008-08-22 20:46 . 2008-08-22 22:47 <KANSIO> d-------- C:\Users\mönkkönen\AppData\Roaming\BSplayer PRO
    2008-08-18 22:23 . 2008-08-18 22:23 <KANSIO> d-------- C:\Users\mönkkönen\AppData\Roaming\Nero
    2008-08-18 21:59 . 2008-08-18 22:24 69 --a------ C:\Windows\NeroDigital.ini
    2008-08-18 19:44 . 2008-08-18 19:44 <KANSIO> dr------- C:\Users\mönkkönen\Videos
    2008-08-18 19:44 . 2008-08-18 19:44 <KANSIO> dr------- C:\Users\mönkkönen\Videos
    2008-08-18 19:44 . 2008-08-18 19:44 <KANSIO> dr------- C:\Users\mönkkönen\Searches
    2008-08-18 19:44 . 2008-08-18 19:44 <KANSIO> dr------- C:\Users\mönkkönen\Searches
    2008-08-18 19:44 . 2008-08-18 19:44 <KANSIO> dr------- C:\Users\mönkkönen\Saved Games
    2008-08-18 19:44 . 2008-08-18 19:44 <KANSIO> dr------- C:\Users\mönkkönen\Saved Games
    2008-08-18 19:44 . 2008-08-18 22:21 <KANSIO> dr------- C:\Users\mönkkönen\Pictures
    2008-08-18 19:44 . 2008-08-18 22:21 <KANSIO> dr------- C:\Users\mönkkönen\Pictures
    2008-08-18 19:44 . 2008-08-18 19:44 <KANSIO> dr------- C:\Users\mönkkönen\Music
    2008-08-18 19:44 . 2008-08-18 19:44 <KANSIO> dr------- C:\Users\mönkkönen\Music
    2008-08-18 19:44 . 2008-08-18 19:44 <KANSIO> dr------- C:\Users\mönkkönen\Links
    2008-08-18 19:44 . 2008-08-18 19:44 <KANSIO> dr------- C:\Users\mönkkönen\Links
    2008-08-18 19:44 . 2008-08-18 19:44 <KANSIO> dr------- C:\Users\mönkkönen\Favorites
    2008-08-18 19:44 . 2008-08-18 19:44 <KANSIO> dr------- C:\Users\mönkkönen\Favorites
    2008-08-18 19:44 . 2008-08-28 20:33 <KANSIO> dr------- C:\Users\mönkkönen\Downloads
    2008-08-18 19:44 . 2008-08-28 20:33 <KANSIO> dr------- C:\Users\mönkkönen\Downloads
    2008-08-18 19:44 . 2008-08-28 19:40 <KANSIO> dr------- C:\Users\mönkkönen\Documents
    2008-08-18 19:44 . 2008-08-28 19:40 <KANSIO> dr------- C:\Users\mönkkönen\Documents
    2008-08-18 19:44 . 2008-08-28 20:34 <KANSIO> dr------- C:\Users\mönkkönen\Desktop
    2008-08-18 19:44 . 2008-08-28 20:34 <KANSIO> dr------- C:\Users\mönkkönen\Desktop
    2008-08-18 19:44 . 2008-08-28 19:38 <KANSIO> dr------- C:\Users\mönkkönen\Contacts
    2008-08-18 19:44 . 2008-08-28 19:38 <KANSIO> dr------- C:\Users\mönkkönen\Contacts
    2008-08-18 19:44 . 2008-08-28 19:39 <KANSIO> d---s---- C:\Users\mönkkönen\AppData\Roaming\Microsoft
    2008-08-18 19:44 . 2006-11-02 15:37 <KANSIO> d-------- C:\Users\mönkkönen\AppData\Roaming\Media Center Programs
    2008-08-18 19:44 . 2008-08-18 19:44 <KANSIO> d-------- C:\Users\mönkkönen\AppData\Roaming\Identities
    2008-08-18 19:44 . 2008-08-18 19:44 <KANSIO> d-------- C:\Users\mönkkönen\AppData\Roaming\ATI
    2008-08-18 19:44 . 2008-08-18 19:44 <KANSIO> d--h----- C:\Users\mönkkönen\AppData
    2008-08-18 19:44 . 2008-08-18 19:44 <KANSIO> d--h----- C:\Users\mönkkönen\AppData
    2008-08-18 19:44 . 2008-08-28 19:24 <KANSIO> d-------- C:\Users\mönkkönen
    2008-08-18 19:44 . 2008-08-18 19:44 <KANSIO> d-------- C:\Users\All Users\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
    2008-08-18 19:44 . 2008-08-18 19:44 <KANSIO> d-------- C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
    2008-08-18 19:44 . 2008-08-18 19:44 <KANSIO> d-------- C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
    2008-08-18 19:44 . 2008-08-28 20:44 1,048,576 --ahs---- C:\Users\mönkkönen\NTUSER.DAT
    2008-08-18 19:44 . 2008-08-28 20:44 1,048,576 --ahs---- C:\Users\mönkkönen\NTUSER.DAT
    2008-08-18 19:41 . 2008-08-18 19:41 <KANSIO> d-------- C:\Users\All Users\fsc-reg
    2008-08-18 19:41 . 2008-08-18 19:41 <KANSIO> d-------- C:\ProgramData\fsc-reg
    2008-08-18 19:41 . 2008-08-18 19:41 <KANSIO> d-------- C:\Program Files\Fujitsu Siemens Computers
    2008-08-18 19:41 . 2008-08-18 19:41 <KANSIO> d-------- C:\Program Files\Common Files\Fujitsu Siemens Computers
    2008-08-18 19:40 . 2006-10-26 19:56 32,592 --a------ C:\Windows\System32\msonpmon.dll
    2008-08-18 19:39 . 2008-08-18 19:39 <KANSIO> d-------- C:\Windows\PCHEALTH
    2008-08-18 19:39 . 2008-08-18 19:39 <KANSIO> d-------- C:\Program Files\Microsoft.NET
    2008-08-18 19:39 . 2008-08-18 19:42 <KANSIO> d-------- C:\Program Files\Microsoft Works
    2008-08-18 19:38 . 2008-08-27 18:19 <KANSIO> d-------- C:\Users\All Users\Microsoft Help
    2008-08-18 19:38 . 2008-08-27 18:19 <KANSIO> d-------- C:\ProgramData\Microsoft Help
    2008-08-18 19:37 . 2008-08-18 19:37 <KANSIO> dr-h----- C:\MSOCache
    2008-08-18 19:36 . 2008-08-18 19:36 <KANSIO> dr------- C:\Windows\System32\config\systemprofile\Documents
    2008-08-18 19:35 . 2008-08-18 19:35 <KANSIO> d-------- C:\Users\All Users\Nero
    2008-08-18 19:35 . 2008-08-18 19:35 <KANSIO> d-------- C:\ProgramData\Nero
    2008-08-18 19:35 . 2008-08-18 19:35 <KANSIO> d-------- C:\Program Files\Nero
    2008-08-18 19:35 . 2008-08-18 19:36 <KANSIO> d-------- C:\Program Files\Common Files\Nero
    2008-08-18 19:33 . 2008-08-18 19:33 <KANSIO> d-------- C:\Windows\System32\Macromed
    2008-08-18 19:33 . 2008-06-20 13:02 14,848 --a------ C:\Windows\System32\Fujitsu-Siemens.scr
    2008-08-18 19:32 . 2008-08-18 19:32 <KANSIO> d-------- C:\Users\All Users\Adobe
    2008-08-18 19:32 . 2008-08-18 19:32 <KANSIO> d-------- C:\Program Files\Common Files\Adobe
    2008-08-18 19:25 . 2008-08-18 19:25 <KANSIO> dr------- C:\Windows\System32\config\systemprofile\Contacts

    .
    (((((((((((((((((((((((((((((((((((( Find3M-raportti ))))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-08-28 17:44 1,048,576 --sha-w C:\Users\mönkkönen\NTUSER.DAT
    2008-08-28 17:44 1,048,576 --sha-w C:\Users\mönkkönen\NTUSER.DAT
    2008-08-28 16:39 --------- d-s---w C:\Users\mönkkönen\AppData\Roaming\Microsoft
    2008-08-27 15:20 --------- d-----w C:\Program Files\Windows Mail
    2008-08-26 16:16 --------- d-----w C:\Users\mönkkönen\AppData\Roaming\Malwarebytes
    2008-08-25 14:58 --------- d-----w C:\Users\mönkkönen\AppData\Roaming\PC Tools
    2008-08-25 14:39 --------- d-----w C:\Users\mönkkönen\AppData\Roaming\WinRAR
    2008-08-25 13:51 --------- d-----w C:\Users\mönkkönen\AppData\Roaming\Mozilla
    2008-08-25 12:43 --------- d-----w C:\Users\mönkkönen\AppData\Roaming\Macromedia
    2008-08-25 12:43 --------- d-----w C:\Users\mönkkönen\AppData\Roaming\Adobe
    2008-08-22 21:40 0 ----a-w C:\Users\mönkkönen\AppData\Roaming\wklnhst.dat
    2008-08-22 19:47 --------- d-----w C:\Users\mönkkönen\AppData\Roaming\BSplayer PRO
    2008-08-22 18:00 --------- d-----w C:\Users\mönkkönen\AppData\Roaming\Winamp
    2008-08-18 19:23 --------- d-----w C:\Users\mönkkönen\AppData\Roaming\Nero
    2008-08-18 16:44 --------- d-----w C:\Users\mönkkönen\AppData\Roaming\Identities
    2008-08-18 16:44 --------- d-----w C:\Users\mönkkönen\AppData\Roaming\ATI
    2008-07-03 05:23 --------- d-----w C:\ProgramData\ATI
    2008-07-03 05:20 12 ----a-w C:\Windows\system32\drivers\FSC__PI__MS-7304VP__FUJITSU SIEMENS_MS-7304VP__Default System BIOS_FSC - 20080430_V3.06__ATI Radeon HD 3200 Graphics__ATI Radeon HD 3600 Series.MRK
    2008-07-03 05:05 --------- d-----w C:\Program Files\ATI Technologies
    2008-07-03 05:04 --------- d-----w C:\Program Files\ATI
    2008-07-03 04:39 0 ---ha-w C:\Windows\system32\drivers\Msft_User_WpdFs_01_00_00.Wdf
    2008-06-02 11:38 32,768 ----a-w C:\Windows\System32\RtkCoInst.dll
    2008-05-30 21:19 507,400 ----a-w C:\Windows\System32\XAudio2_1.dll
    2008-05-30 21:18 238,088 ----a-w C:\Windows\System32\xactengine3_1.dll
    2008-05-30 21:17 65,032 ----a-w C:\Windows\System32\XAPOFX1_0.dll
    2008-05-30 21:17 25,608 ----a-w C:\Windows\System32\X3DAudio1_4.dll
    2008-05-30 21:11 467,984 ----a-w C:\Windows\System32\d3dx10_38.dll
    2008-05-30 21:11 3,850,760 ----a-w C:\Windows\System32\D3DX9_38.dll
    2008-05-30 21:11 1,491,992 ----a-w C:\Windows\System32\D3DCompiler_38.dll
    2008-05-28 14:06 6,144,000 ----a-w C:\Windows\RtHDVCpl.exe
    2008-01-21 02:43 174 --sha-w C:\Program Files\desktop.ini
    .

    ((((((((((((((((((((((((((((( snapshot@2008-08-26_20.49.08.38 )))))))))))))))))))))))))))))))))))))))))
    .
    - 2008-08-18 16:39:42 248,632 ----a-w C:\Windows\assembly\GAC\Microsoft.Office.Interop.PowerPoint\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.PowerPoint.dll
    + 2008-08-27 15:11:58 250,928 ----a-w C:\Windows\assembly\GAC\Microsoft.Office.Interop.PowerPoint\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.PowerPoint.dll
    - 2008-08-18 16:31:20 51,200 ----a-w C:\Windows\inf\infpub.dat
    + 2008-08-28 16:24:08 51,200 ----a-w C:\Windows\inf\infpub.dat
    - 2008-07-03 05:08:56 86,016 ----a-w C:\Windows\inf\infstor.dat
    + 2008-08-28 16:24:08 86,016 ----a-w C:\Windows\inf\infstor.dat
    - 2008-07-03 05:09:04 86,016 ----a-w C:\Windows\inf\infstrng.dat
    + 2008-08-28 16:24:08 86,016 ----a-w C:\Windows\inf\infstrng.dat
    + 2006-10-26 17:08:00 1,764,112 ----a-r C:\Windows\Installer\$PatchCache$\Managed\000021090200B0400000000000F01FEC\12.0.4518\PPCNV.DLL
    + 2006-10-26 17:07:50 67,920 ----a-r C:\Windows\Installer\$PatchCache$\Managed\000021090200B0400000000000F01FEC\12.0.4518\PXBCOM.EXE
    + 2006-10-27 12:11:38 4,235,560 ----a-r C:\Windows\Installer\$PatchCache$\Managed\000021090200B0400000000000F01FEC\12.0.4518\WRD12CNV.DLL
    + 2006-10-27 12:11:36 21,264 ----a-r C:\Windows\Installer\$PatchCache$\Managed\000021090200B0400000000000F01FEC\12.0.4518\WRD12EXE.EXE
    + 2006-10-26 18:13:08 14,674,216 ----a-r C:\Windows\Installer\$PatchCache$\Managed\000021090200B0400000000000F01FEC\12.0.4518\XL12CNV.EXE
    + 2006-10-27 12:07:36 17,891,112 ----a-r C:\Windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\EXCEL.EXE
    + 2006-10-27 12:04:06 465,200 ----a-r C:\Windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\POWERPNT.EXE
    + 2006-10-27 12:04:06 7,980,848 ----a-r C:\Windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\PPCORE.DLL
    + 2008-08-18 16:39:42 248,632 ----a-r C:\Windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\PPTPIA.DLL
    + 2006-10-27 12:23:04 347,432 ----a-r C:\Windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\WINWORD.EXE
    + 2006-10-27 12:11:38 4,235,560 ----a-r C:\Windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\WRD12CNV.DLL
    + 2006-10-27 12:11:36 21,264 ----a-r C:\Windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\WRD12EXE.EXE
    + 2006-10-27 12:23:08 17,483,560 ----a-r C:\Windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\WWLIB.DLL
    + 2006-10-26 18:13:08 14,674,216 ----a-r C:\Windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\XL12CNV.EXE
    + 2006-10-26 18:17:08 11,072 ----a-r C:\Windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\XLCALL32.DLL
    + 2006-10-26 17:08:00 1,764,112 ----a-r C:\Windows\Installer\$PatchCache$\Managed\00002159FA00B0400000000000F01FEC\12.0.4518\PPCNV.DLL
    + 2006-10-26 17:07:50 67,920 ----a-r C:\Windows\Installer\$PatchCache$\Managed\00002159FA00B0400000000000F01FEC\12.0.4518\PXBCOM.EXE
    - 2008-08-18 16:43:12 35,600 ----a-r C:\Windows\Installer\{90120000-0020-040B-0000-0000000FF1CE}\O12ConvIcon.exe
    + 2008-08-27 15:16:35 35,600 ----a-r C:\Windows\Installer\{90120000-0020-040B-0000-0000000FF1CE}\O12ConvIcon.exe
    - 2008-08-18 16:40:32 20,240 ----a-r C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\cagicon.exe
    + 2008-08-27 15:19:58 20,240 ----a-r C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\cagicon.exe
    - 2008-08-18 16:40:32 184,080 ----a-r C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\joticon.exe
    + 2008-08-27 15:19:58 184,080 ----a-r C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\joticon.exe
    - 2008-08-18 16:40:32 217,864 ----a-r C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\misc.exe
    + 2008-08-27 15:19:58 217,864 ----a-r C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\misc.exe
    - 2008-08-18 16:40:32 18,704 ----a-r C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\mspicons.exe
    + 2008-08-27 15:19:58 18,704 ----a-r C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\mspicons.exe
    - 2008-08-18 16:40:32 35,088 ----a-r C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\oisicon.exe
    + 2008-08-27 15:19:58 35,088 ----a-r C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\oisicon.exe
    - 2008-08-18 16:40:32 922,384 ----a-r C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\pptico.exe
    + 2008-08-27 15:19:58 922,384 ----a-r C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\pptico.exe
    - 2008-08-18 16:40:32 888,080 ----a-r C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\wordicon.exe
    + 2008-08-27 15:19:58 888,080 ----a-r C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\wordicon.exe
    - 2008-08-18 16:40:32 1,172,240 ----a-r C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\xlicons.exe
    + 2008-08-27 15:19:58 1,172,240 ----a-r C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\xlicons.exe
    - 2008-08-18 16:43:05 49,936 ----a-r C:\Windows\Installer\{95120000-00AF-040B-0000-0000000FF1CE}\ppvwicon.exe
    + 2008-08-27 15:17:47 49,936 ----a-r C:\Windows\Installer\{95120000-00AF-040B-0000-0000000FF1CE}\ppvwicon.exe
    + 2008-08-28 16:23:47 29,926 ----a-r C:\Windows\Installer\{A9174A72-1B46-445B-B3CF-90ED2C63D83B}\MsblIco.Exe
    + 2008-08-27 15:06:50 32,768 ----a-r C:\Windows\Installer\{C04E32E0-0416-434D-AFB9-6969D703A9EF}\icon.exe
    - 2008-08-26 17:13:02 2,048 --sha-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
    + 2008-08-28 14:25:29 2,048 --sha-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
    - 2008-08-26 17:13:02 2,048 --sha-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
    + 2008-08-28 14:25:29 2,048 --sha-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
    - 2008-08-26 17:13:55 262,144 --sha-w C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT
    + 2008-08-28 16:24:40 262,144 --sha-w C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT
    + 2008-08-28 16:24:40 262,144 ---ha-w C:\Windows\ServiceProfiles\LocalService\ntuser.dat.LOG1
    - 2008-08-26 17:14:34 262,144 --sha-w C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT
    + 2008-08-28 16:24:29 262,144 --sha-w C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT
    + 2008-08-28 16:24:29 262,144 ---ha-w C:\Windows\ServiceProfiles\NetworkService\ntuser.dat.LOG1
    - 2008-08-26 17:13:03 32,768 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
    + 2008-08-28 14:25:49 32,768 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
    - 2008-08-26 17:13:03 32,768 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
    + 2008-08-28 14:25:49 32,768 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
    - 2008-08-26 17:13:03 16,384 --sha-w C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
    + 2008-08-28 14:25:49 16,384 --sha-w C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
    - 2008-08-26 17:42:23 262,144 ----a-w C:\Windows\System32\config\systemprofile\ntuser.dat
    + 2008-08-28 17:39:29 262,144 ----a-w C:\Windows\System32\config\systemprofile\ntuser.dat
    - 2008-08-25 15:16:50 26,184 ----a-w C:\Windows\System32\drivers\avgmfx86.sys
    + 2008-08-27 15:05:28 26,824 ----a-w C:\Windows\System32\drivers\avgmfx86.sys
    - 2008-01-21 02:24:41 6,068,736 ----a-w C:\Windows\System32\ieframe.dll
    + 2008-06-27 04:15:23 6,068,736 ----a-w C:\Windows\System32\ieframe.dll
    - 2008-01-21 02:24:59 512,000 ----a-w C:\Windows\System32\jscript.dll
    + 2008-05-08 21:59:28 512,000 ----a-w C:\Windows\System32\jscript.dll
    - 2008-04-25 04:35:13 28,160 ----a-w C:\Windows\System32\jsproxy.dll
    + 2008-06-27 04:15:24 28,160 ----a-w C:\Windows\System32\jsproxy.dll
    + 2008-03-25 03:21:18 2,889,088 ----a-w C:\Windows\System32\Macromed\Flash\NPSWF32.dll
    + 2008-03-25 03:21:20 218,496 ----a-w C:\Windows\System32\Macromed\Flash\NPSWF32_FlashUtil.exe
    + 2008-08-26 19:27:18 70,264 ----a-w C:\Windows\System32\Macromed\Flash\uninstall_plugin.exe
    - 2008-04-25 04:35:24 64,512 ----a-w C:\Windows\System32\migration\WininetPlugin.dll
    + 2008-06-27 04:15:28 64,512 ----a-w C:\Windows\System32\migration\WininetPlugin.dll
    - 2008-04-25 04:35:14 3,578,368 ----a-w C:\Windows\System32\mshtml.dll
    + 2008-06-27 04:15:24 3,578,368 ----a-w C:\Windows\System32\mshtml.dll
    - 2008-04-25 04:35:16 671,232 ----a-w C:\Windows\System32\mstime.dll
    + 2008-06-27 04:15:25 671,232 ----a-w C:\Windows\System32\mstime.dll
    - 2003-04-18 13:46:22 1,233,920 ----a-w C:\Windows\System32\msxml4.dll
    + 2007-05-08 12:03:04 1,275,392 ----a-w C:\Windows\System32\msxml4.dll
    - 2008-08-26 17:19:13 101,052 ----a-w C:\Windows\System32\perfc009.dat
    + 2008-08-28 14:34:59 101,052 ----a-w C:\Windows\System32\perfc009.dat
    - 2008-08-26 17:19:13 80,514 ----a-w C:\Windows\System32\perfc00B.dat
    + 2008-08-28 14:34:59 80,514 ----a-w C:\Windows\System32\perfc00B.dat
    - 2008-08-26 17:19:13 586,980 ----a-w C:\Windows\System32\perfh009.dat
    + 2008-08-28 14:34:59 586,980 ----a-w C:\Windows\System32\perfh009.dat
    - 2008-08-26 17:19:14 435,392 ----a-w C:\Windows\System32\perfh00B.dat
    + 2008-08-28 14:34:59 435,392 ----a-w C:\Windows\System32\perfh00B.dat
    - 2008-01-21 02:23:46 11,580,416 ----a-w C:\Windows\System32\shell32.dll
    + 2008-04-24 04:58:20 11,580,416 ----a-w C:\Windows\System32\shell32.dll
    + 2007-10-18 08:31:46 51,224 ----a-w C:\Windows\System32\sirenacm.dll
    - 2008-08-26 17:11:14 6,291,456 ----a-w C:\Windows\System32\SMI\Store\Machine\SCHEMA.DAT
    + 2008-08-27 15:33:26 6,291,456 ----a-w C:\Windows\System32\SMI\Store\Machine\SCHEMA.DAT
    - 2008-04-25 04:35:19 1,166,336 ----a-w C:\Windows\System32\urlmon.dll
    + 2008-06-27 04:15:28 1,166,336 ----a-w C:\Windows\System32\urlmon.dll
    - 2008-08-26 17:15:15 2,454 ----a-w C:\Windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-2586952071-3533426760-1646572439-1000_UserData.bin
    + 2008-08-28 14:28:37 2,992 ----a-w C:\Windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-2586952071-3533426760-1646572439-1000_UserData.bin
    - 2008-08-26 17:15:15 59,564 ----a-w C:\Windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
    + 2008-08-28 14:28:16 62,382 ----a-w C:\Windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
    - 2008-08-26 17:15:14 21,622 ----a-w C:\Windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
    + 2008-08-28 14:28:14 23,222 ----a-w C:\Windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
    - 2008-08-26 16:32:07 23,270,115 ----a-w C:\Windows\winsxs\ManifestCache\6.0.6001.18000_001c50b5_blobs.bin
    + 2008-08-27 15:20:58 24,142,439 ----a-w C:\Windows\winsxs\ManifestCache\6.0.6001.18000_001c50b5_blobs.bin
    + 2008-07-16 04:09:38 124,928 ----a-w C:\Windows\winsxs\x86_microsoft-windows-advpack_31bf3856ad364e35_6.0.6000.16717_none_a9e15ad3f5abc778\advpack.dll
    + 2008-07-18 03:13:52 124,928 ----a-w C:\Windows\winsxs\x86_microsoft-windows-advpack_31bf3856ad364e35_6.0.6000.20879_none_aa2c18ab0ef84196\advpack.dll
    + 2008-04-19 08:13:07 268,800 ----a-w C:\Windows\winsxs\x86_microsoft-windows-c..complus-eventsystem_31bf3856ad364e35_6.0.6000.16677_none_0ac2b30954c98430\es.dll
    + 2008-04-19 08:27:37 268,800 ----a-w C:\Windows\winsxs\x86_microsoft-windows-c..complus-eventsystem_31bf3856ad364e35_6.0.6000.20818_none_0b8e318c6db592d2\es.dll
    + 2008-04-18 05:48:39 269,312 ----a-w C:\Windows\winsxs\x86_microsoft-windows-c..complus-eventsystem_31bf3856ad364e35_6.0.6001.18057_none_0cbe918751dfdd3f\es.dll
    + 2008-04-18 05:30:29 269,312 ----a-w C:\Windows\winsxs\x86_microsoft-windows-c..complus-eventsystem_31bf3856ad364e35_6.0.6001.22162_none_0d385cf46b0a1a47\es.dll
    + 2008-06-27 03:54:48 44,544 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..ablenetworkgraphics_31bf3856ad364e35_6.0.6000.16711_none_ebd662c7164a156d\pngfilt.dll
    + 2008-06-27 03:49:09 44,544 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..ablenetworkgraphics_31bf3856ad364e35_6.0.6000.20868_none_ec30f1fc2f89f24d\pngfilt.dll
    + 2008-06-27 03:54:49 1,159,680 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6000.16711_none_b2f30b79d9aa8cd1\urlmon.dll
    + 2008-06-27 03:49:41 1,162,752 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6000.20868_none_b34d9aaef2ea69b1\urlmon.dll
    + 2008-06-27 04:15:28 1,166,336 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6001.18099_none_b48acb29d70acadb\urlmon.dll
    + 2008-06-27 03:50:29 1,166,848 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6001.22212_none_b563e734efedd6e3\urlmon.dll
    + 2008-06-27 03:54:47 671,232 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6000.16711_none_ded59a427f534c40\mstime.dll
    + 2008-06-27 03:47:51 671,232 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6000.20868_none_df30297798932920\mstime.dll
    + 2008-06-27 04:15:25 671,232 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6001.18099_none_e06d59f27cb38a4a\mstime.dll
    + 2008-06-27 03:48:43 671,232 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6001.22212_none_e14675fd95969652\mstime.dll
    + 2008-07-15 23:48:18 2,048 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6000.16717_none_135d4bd00c6d4a6b\tzres.dll
    + 2008-07-16 04:09:30 18,944 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6000.16717_none_135d4bd00c6d4a6b\tzupd.exe
    + 2008-07-15 23:43:45 2,048 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6000.20878_none_13a7095d25baab32\tzres.dll
    + 2008-07-16 01:28:34 18,944 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6000.20878_none_13a7095d25baab32\tzupd.exe
    + 2008-07-16 01:32:44 2,048 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6001.18108_none_154f5aac098ad8c2\tzres.dll
    + 2008-01-21 02:23:44 18,944 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6001.18108_none_154f5aac098ad8c2\tzupd.exe
    + 2008-07-16 01:27:35 2,048 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6001.22223_none_15be562d22bd31bb\tzres.dll
    + 2008-07-16 01:27:35 18,944 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6001.22223_none_15be562d22bd31bb\tzupd.exe
    + 2008-06-27 03:54:45 27,648 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16711_none_fff8e71ba4b3b364\jsproxy.dll
    + 2008-06-27 03:54:49 826,368 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16711_none_fff8e71ba4b3b364\wininet.dll
    + 2008-06-27 03:54:49 64,512 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16711_none_fff8e71ba4b3b364\WininetPlugin.dll
    + 2008-06-27 03:47:03 27,648 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.20868_none_00537650bdf39044\jsproxy.dll
    + 2008-06-27 03:49:46 827,904 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.20868_none_00537650bdf39044\wininet.dll
    + 2008-06-27 03:49:46 64,512 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.20868_none_00537650bdf39044\WininetPlugin.dll
    + 2008-06-27 04:15:24 28,160 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.18099_none_0190a6cba213f16e\jsproxy.dll
    + 2008-06-27 04:15:28 827,392 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.18099_none_0190a6cba213f16e\wininet.dll
    + 2008-06-27 04:15:28 64,512 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.18099_none_0190a6cba213f16e\WininetPlugin.dll
    + 2008-06-27 03:47:35 28,160 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.22212_none_0269c2d6baf6fd76\jsproxy.dll
    + 2008-06-27 03:50:35 827,904 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.22212_none_0269c2d6baf6fd76\wininet.dll
    + 2008-06-27 03:50:35 64,512 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.22212_none_0269c2d6baf6fd76\WininetPlugin.dll
    + 2008-06-27 03:54:45 383,488 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.16711_none_f9a209f56e9f2db7\ieapfltr.dll
    + 2008-06-27 03:46:48 383,488 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.20868_none_f9fc992a87df0a97\ieapfltr.dll
    + 2008-06-27 03:54:44 347,136 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.16711_none_95d642ad8484b3e5\dxtmsft.dll
    + 2008-06-27 03:54:44 214,528 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.16711_none_95d642ad8484b3e5\dxtrans.dll
    + 2008-06-27 03:46:25 347,136 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.20868_none_9630d1e29dc490c5\dxtmsft.dll
    + 2008-06-27 03:46:25 214,528 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.20868_none_9630d1e29dc490c5\dxtrans.dll
    + 2008-06-27 03:54:45 477,696 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-htmlediting_31bf3856ad364e35_6.0.6000.16711_none_4638dd0546456672\mshtmled.dll
    + 2008-06-27 03:47:32 477,696 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-htmlediting_31bf3856ad364e35_6.0.6000.20868_none_46936c3a5f854352\mshtmled.dll
    + 2008-06-27 03:54:45 3,592,192 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6000.16711_none_1153063a250a1c9a\mshtml.dll
    + 2008-06-27 03:47:31 3,594,240 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6000.20868_none_11ad956f3e49f97a\mshtml.dll
    + 2008-06-27 04:15:24 3,578,368 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6001.18099_none_12eac5ea226a5aa4\mshtml.dll
    + 2008-06-27 03:48:28 3,578,880 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6001.22212_none_13c3e1f53b4d66ac\mshtml.dll
    + 2008-06-27 03:54:45 63,488 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-infocard_31bf3856ad364e35_6.0.6000.16711_none_58ab7304671ea8a3\icardie.dll
    + 2008-06-27 03:46:48 63,488 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-infocard_31bf3856ad364e35_6.0.6000.20868_none_59060239805e8583\icardie.dll
    + 2008-06-27 03:54:09 26,624 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16711_none_2d71f3a71cdf2247\ieUnatt.exe
    + 2008-06-27 03:54:09 625,664 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16711_none_2d71f3a71cdf2247\iexplore.exe
    + 2008-06-27 01:41:11 26,624 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.20868_none_2dcc82dc361eff27\ieUnatt.exe
    + 2008-06-27 01:41:30 625,664 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.20868_none_2dcc82dc361eff27\iexplore.exe
    + 2008-06-27 03:54:09 70,656 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.16711_none_c3e0a8c26159eaec\ie4uinit.exe
    + 2008-06-27 03:54:45 44,544 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.16711_none_c3e0a8c26159eaec\iernonce.dll
    + 2008-06-27 03:54:45 56,320 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.16711_none_c3e0a8c26159eaec\iesetup.dll
    + 2008-06-27 01:41:00 70,656 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.20868_none_c43b37f77a99c7cc\ie4uinit.exe
    + 2008-06-27 03:46:49 44,544 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.20868_none_c43b37f77a99c7cc\iernonce.dll
    + 2008-06-27 03:46:49 56,320 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.20868_none_c43b37f77a99c7cc\iesetup.dll
    + 2008-06-27 03:54:45 52,736 ----a-w C:\Windows\winsxs\x86_microsoft-windows-iebrshim_31bf3856ad364e35_6.0.6000.16711_none_2a05bf326809c049\iebrshim.dll
    + 2008-06-27 03:46:48 52,736 ----a-w C:\Windows\winsxs\x86_microsoft-windows-iebrshim_31bf3856ad364e35_6.0.6000.20868_none_2a604e6781499d29\iebrshim.dll
    + 2008-06-27 03:54:45 6,066,176 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.16711_none_62b2603db0ffaac7\ieframe.dll
    + 2008-06-27 03:54:45 180,736 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.16711_none_62b2603db0ffaac7\ieui.dll
    + 2008-06-27 03:46:49 6,068,736 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.20868_none_630cef72ca3f87a7\ieframe.dll
    + 2008-06-27 03:46:49 180,736 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.20868_none_630cef72ca3f87a7\ieui.dll
    + 2008-06-27 04:15:23 6,068,736 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6001.18099_none_644a1fedae5fe8d1\ieframe.dll
    + 2008-06-27 03:47:06 6,070,272 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6001.22212_none_65233bf8c742f4d9\ieframe.dll
    + 2008-06-27 03:47:06 180,736 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6001.22212_none_65233bf8c742f4d9\ieui.dll
    + 2008-06-27 03:54:09 263,168 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ieinstal_31bf3856ad364e35_6.0.6000.16711_none_e6abccbc9482feff\ieinstal.exe
    + 2008-06-27 01:41:23 263,168 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ieinstal_31bf3856ad364e35_6.0.6000.20868_none_e7065bf1adc2dbdf\ieinstal.exe
    + 2008-06-27 03:54:09 301,568 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ieuser_31bf3856ad364e35_6.0.6000.16711_none_0b5401d8d6fdbeb1\ieuser.exe
    + 2008-06-27 01:41:24 301,568 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ieuser_31bf3856ad364e35_6.0.6000.20868_none_0bae910df03d9b91\ieuser.exe
    + 2008-04-30 05:29:59 454,656 ----a-w C:\Windows\winsxs\x86_microsoft-windows-m..nts-mdac-rds-ce-dll_31bf3856ad364e35_6.0.6000.16683_none_5fb7376b44d6ca52\msadce.dll
    + 2008-04-30 05:19:33 454,656 ----a-w C:\Windows\winsxs\x86_microsoft-windows-m..nts-mdac-rds-ce-dll_31bf3856ad364e35_6.0.6000.20825_none_6083b6385dc1f24b\msadce.dll
    + 2008-04-30 05:36:32 454,656 ----a-w C:\Windows\winsxs\x86_microsoft-windows-m..nts-mdac-rds-ce-dll_31bf3856ad364e35_6.0.6001.18065_none_61b5167d41eb560f\msadce.dll
    + 2008-04-30 05:25:53 454,656 ----a-w C:\Windows\winsxs\x86_microsoft-windows-m..nts-mdac-rds-ce-dll_31bf3856ad364e35_6.0.6001.22169_none_6242b4705b055b35\msadce.dll
    + 2008-04-10 05:01:31 737,792 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mail-comm-dll_31bf3856ad364e35_6.0.6000.16669_none_77930ed65b8e9f2d\inetcomm.dll
    + 2008-04-10 02:43:11 84,480 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mail-comm-dll_31bf3856ad364e35_6.0.6000.16669_none_77930ed65b8e9f2d\INETRES.dll
    + 2008-04-10 04:56:31 737,792 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mail-comm-dll_31bf3856ad364e35_6.0.6000.20810_none_7849ba89748bcc5a\inetcomm.dll
    + 2008-04-10 02:44:56 84,480 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mail-comm-dll_31bf3856ad364e35_6.0.6000.20810_none_7849ba89748bcc5a\INETRES.dll
    + 2008-04-10 05:12:41 738,304 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mail-comm-dll_31bf3856ad364e35_6.0.6001.18049_none_798eed5458a4f83c\inetcomm.dll
    + 2008-04-10 04:59:52 738,304 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mail-comm-dll_31bf3856ad364e35_6.0.6001.22154_none_7a08b8c171cf3544\inetcomm.dll
    + 2008-04-10 02:51:10 84,480 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mail-comm-dll_31bf3856ad364e35_6.0.6001.22154_none_7a08b8c171cf3544\INETRES.dll
    + 2008-06-19 03:25:22 28,672 ----a-w C:\Windows\winsxs\x86_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.0.6000.16705_none_422d3c83eeda2955\FwRemoteSvr.dll
    + 2008-06-19 03:25:22 361,984 ----a-w C:\Windows\winsxs\x86_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.0.6000.16705_none_422d3c83eeda2955\IPSECSVC.DLL
    + 2008-06-19 03:25:25 272,896 ----a-w C:\Windows\winsxs\x86_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.0.6000.16705_none_422d3c83eeda2955\polstore.dll
    + 2008-06-19 03:25:26 61,440 ----a-w C:\Windows\winsxs\x86_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.0.6000.16705_none_422d3c83eeda2955\winipsec.dll
    + 2008-06-19 03:11:10 28,672 ----a-w C:\Windows\winsxs\x86_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.0.6000.20861_none_4271f89f082c0b69\FwRemoteSvr.dll
    + 2008-06-19 03:11:28 361,984 ----a-w C:\Windows\winsxs\x86_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.0.6000.20861_none_4271f89f082c0b69\IPSECSVC.DLL
    + 2008-06-19 03:13:36 272,896 ----a-w C:\Windows\winsxs\x86_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.0.6000.20861_none_4271f89f082c0b69\polstore.dll
    + 2008-06-19 03:14:12 61,440 ----a-w C:\Windows\winsxs\x86_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.0.6000.20861_none_4271f89f082c0b69\winipsec.dll
    + 2008-06-19 03:31:48 361,984 ----a-w C:\Windows\winsxs\x86_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.0.6001.18094_none_43b129adec4a9f41\IPSECSVC.DLL
    + 2008-06-19 03:12:13 28,672 ----a-w C:\Windows\winsxs\x86_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.0.6001.22206_none_449e183f051d7367\FwRemoteSvr.dll
    + 2008-06-19 03:12:58 361,984 ----a-w C:\Windows\winsxs\x86_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.0.6001.22206_none_449e183f051d7367\IPSECSVC.DLL
    + 2008-06-19 03:15:05 272,896 ----a-w C:\Windows\winsxs\x86_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.0.6001.22206_none_449e183f051d7367\polstore.dll
    + 2008-06-19 03:15:48 61,440 ----a-w C:\Windows\winsxs\x86_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.0.6001.22206_none_449e183f051d7367\winipsec.dll
    + 2008-06-26 03:22:33 797,696 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NaturalLanguage6.dll
    + 2008-06-26 03:22:33 1,523,200 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0000.dll
    + 2008-06-26 03:22:33 2,597,888 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0001.dll
    + 2008-06-26 03:22:33 1,963,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0002.dll
    + 2008-06-26 03:22:33 1,963,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0003.dll
    + 2008-06-26 03:22:33 2,241,024 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0007.dll
    + 2008-06-26 03:22:33 4,874,240 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0009.dll
    + 2008-06-26 03:22:33 9,845,248 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData000a.dll
    + 2008-06-26 03:22:33 2,641,408 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData000c.dll
    + 2008-06-26 03:22:33 2,340,864 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData000d.dll
    + 2008-06-26 03:22:33 1,963,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData000f.dll
    + 2008-06-26 03:22:33 4,493,312 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0010.dll
    + 2008-06-26 03:22:33 2,655,232 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0011.dll
    + 2008-06-26 03:22:33 3,464,704 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0013.dll
    + 2008-06-26 03:22:33 1,963,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0018.dll
    + 2008-06-26 03:22:33 4,495,360 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0019.dll
    + 2008-06-26 03:22:33 1,963,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData001a.dll
    + 2008-06-26 03:22:33 1,963,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData001b.dll
    + 2008-06-26 03:22:33 4,493,312 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData001d.dll
    + 2008-06-26 03:22:33 3,102,720 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0020.dll
    + 2008-06-26 03:22:33 1,799,168 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0021.dll
    + 2008-06-26 03:22:33 1,799,168 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0022.dll
    + 2008-06-26 03:22:33 1,963,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0024.dll
    + 2008-06-26 03:22:33 1,963,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0026.dll
    + 2008-06-26 03:22:33 1,965,056 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0027.dll
    + 2008-06-26 03:22:33 1,799,168 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData002a.dll
    + 2008-06-26 03:22:33 3,102,720 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0039.dll
    + 2008-06-26 03:22:33 1,799,168 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData003e.dll
    + 2008-06-26 03:22:33 3,102,720 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0045.dll
    + 2008-06-26 03:22:33 3,102,720 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0046.dll
    + 2008-06-26 03:22:33 3,102,720 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0047.dll
    + 2008-06-26 03:22:33 3,102,720 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0049.dll
    + 2008-06-26 03:22:33 3,102,720 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData004a.dll
    + 2008-06-26 03:22:33 3,102,720 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData004b.dll
    + 2008-06-26 03:22:33 3,102,720 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData004c.dll
    + 2008-06-26 03:22:33 3,102,720 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData004e.dll
    + 2008-06-26 03:22:33 4,493,312 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0414.dll
    + 2008-06-26 03:22:33 4,493,312 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0416.dll
    + 2008-06-26 03:22:33 4,493,312 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0816.dll
    + 2008-06-26 03:22:33 1,963,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData081a.dll
    + 2008-06-26 03:22:33 1,963,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0c1a.dll
    + 2008-06-26 00:33:04 11,722,752 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0001.dll
    + 2008-06-26 00:34:20 4,164,096 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0002.dll
    + 2008-06-26 00:33:41 1,452,544 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0003.dll
    + 2008-06-26 00:33:35 12,240,896 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0007.dll
    + 2008-06-26 00:33:33 2,644,480 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0009.dll
    + 2008-06-26 00:33:39 9,892,864 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons000a.dll
    + 2008-06-26 00:33:34 6,237,696 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons000c.dll
    + 2008-06-26 00:33:36 1,722,368 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons000d.dll
    + 2008-06-26 00:33:48 5,654,528 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons000f.dll
    + 2008-06-26 00:33:49 4,175,872 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0010.dll
    + 2008-06-26 00:33:37 2,466,816 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0011.dll
    + 2008-06-26 00:33:12 4,981,248 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0013.dll
    + 2008-06-26 00:34:01 3,331,072 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0018.dll
    + 2008-06-26 00:34:03 6,781,440 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0019.dll
    + 2008-06-26 00:33:43 6,014,976 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons001a.dll
    + 2008-06-26 00:34:37 6,585,856 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons001b.dll
    + 2008-06-26 00:34:14 6,346,240 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons001d.dll
    + 2008-06-26 00:34:34 1,236,992 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0020.dll
    + 2008-06-26 00:33:40 2,136,064 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0021.dll
    + 2008-06-26 00:34:33 5,499,904 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0022.dll
    + 2008-06-26 00:34:39 7,964,672 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0024.dll
    + 2008-06-26 00:34:30 5,791,232 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0026.dll
    + 2008-06-26 00:33:50 6,224,896 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0027.dll
    + 2008-06-26 00:34:26 4,096 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons002a.dll
    + 2008-06-26 00:33:46 1,782,272 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0039.dll
    + 2008-06-26 00:33:52 4,045,824 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons003e.dll
    + 2008-06-26 00:34:18 1,793,536 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0045.dll
    + 2008-06-26 00:33:58 1,808,896 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0046.dll
    + 2008-06-26 00:33:45 1,411,072 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0047.dll
    + 2008-06-26 00:34:24 1,558,016 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0049.dll
    + 2008-06-26 00:34:25 3,419,136 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons004a.dll
    + 2008-06-26 00:34:22 1,702,912 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons004b.dll
    + 2008-06-26 00:34:36 4,093,440 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons004c.dll
    + 2008-06-26 00:34:23 1,972,736 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons004e.dll
    + 2008-06-26 00:33:54 4,616,192 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0414.dll
    + 2008-06-26 00:33:57 5,090,816 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0416.dll
    + 2008-06-26 00:33:56 5,031,936 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0816.dll
    + 2008-06-26 00:34:11 7,042,560 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons081a.dll
    + 2008-06-26 00:34:09 6,917,120 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0c1a.dll
    + 2008-06-26 00:33:01 5,071,872 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsModels0011.dll
    + 2008-06-26 03:18:12 797,696 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NaturalLanguage6.dll
    + 2008-06-26 03:18:18 1,523,200 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0000.dll
    + 2008-06-26 03:18:19 2,597,888 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0001.dll
    + 2008-06-26 03:18:20 1,963,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0002.dll
    + 2008-06-26 03:18:21 1,963,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0003.dll
    + 2008-06-26 03:18:21 2,241,024 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0007.dll
    + 2008-06-26 03:18:22 4,874,240 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0009.dll
    + 2008-06-26 03:18:24 9,845,248 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData000a.dll
    + 2008-06-26 03:18:24 2,641,408 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData000c.dll
    + 2008-06-26 03:18:26 2,340,864 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData000d.dll
    + 2008-06-26 03:18:26 1,963,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData000f.dll
    + 2008-06-26 03:18:30 4,493,312 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0010.dll
    + 2008-06-26 03:18:32 2,655,232 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0011.dll
    + 2008-06-26 03:18:33 3,464,704 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0013.dll
    + 2008-06-26 03:18:34 1,963,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0018.dll
    + 2008-06-26 03:18:38 4,495,360 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0019.dll
    + 2008-06-26 03:18:38 1,963,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData001a.dll
    + 2008-06-26 03:18:40 1,963,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData001b.dll
    + 2008-06-26 03:18:42 4,493,312 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData001d.dll
    + 2008-06-26 03:18:43 3,102,720 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0020.dll
    + 2008-06-26 03:18:44 1,799,168 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0021.dll
    + 2008-06-26 03:18:44 1,799,168 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0022.dll
    + 2008-06-26 03:18:44 1,963,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0024.dll
    + 2008-06-26 03:18:45 1,963,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0026.dll
    + 2008-06-26 03:18:45 1,965,056 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0027.dll
    + 2008-06-26 03:18:46 1,799,168 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData002a.dll
    + 2008-06-26 03:18:46 3,102,720 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0039.dll
    + 2008-06-26 03:18:47 1,799,168 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData003e.dll
    + 2008-06-26 03:18:49 3,102,720 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0045.dll
    + 2008-06-26 03:18:51 3,102,720 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0046.dll
    + 2008-06-26 03:18:52 3,102,720 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0047.dll
    + 2008-06-26 03:18:53 3,102,720 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0049.dll
    + 2008-06-26 03:18:54 3,102,720 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData004a.dll
    + 2008-06-26 03:18:54 3,102,720 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData004b.dll
    + 2008-06-26 03:18:57 3,102,720 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData004c.dll
    + 2008-06-26 03:18:58 3,102,720 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData004e.dll
    + 2008-06-26 03:19:00 4,493,312 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0414.dll
    + 2008-06-26 03:19:01 4,493,312 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0416.dll
    + 2008-06-26 03:19:04 4,493,312 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0816.dll
    + 2008-06-26 03:19:04 1,963,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData081a.dll
    + 2008-06-26 03:19:05 1,963,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0c1a.dll
    + 2008-06-26 00:30:04 11,722,752 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0001.dll
    + 2008-06-26 00:31:26 4,164,096 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0002.dll
    + 2008-06-26 00:30:49 1,452,544 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0003.dll
    + 2008-06-26 00:30:39 12,240,896 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0007.dll
    + 2008-06-26 00:30:36 2,644,480 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0009.dll
    + 2008-06-26 00:30:47 9,892,864 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons000a.dll
    + 2008-06-26 00:30:37 6,237,696 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons000c.dll
    + 2008-06-26 00:30:43 1,722,368 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons000d.dll
    + 2008-06-26 00:30:54 5,654,528 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons000f.dll
    + 2008-06-26 00:30:55 4,175,872 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0010.dll
    + 2008-06-26 00:30:45 2,466,816 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0011.dll
    + 2008-06-26 00:30:11 4,981,248 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0013.dll
    + 2008-06-26 00:31:06 3,331,072 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0018.dll
    + 2008-06-26 00:31:09 6,781,440 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0019.dll
    + 2008-06-26 00:30:50 6,014,976 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons001a.dll
    + 2008-06-26 00:31:46 6,585,856 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons001b.dll
    + 2008-06-26 00:31:23 6,346,240 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons001d.dll
    + 2008-06-26 00:31:44 1,236,992 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0020.dll
    + 2008-06-26 00:30:48 2,136,064 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0021.dll
    + 2008-06-26 00:31:40 5,499,904 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0022.dll
    + 2008-06-26 00:31:48 7,964,672 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0024.dll
    + 2008-06-26 00:31:35 5,791,232 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0026.dll
    + 2008-06-26 00:30:57 6,224,896 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0027.dll
    + 2008-06-26 00:31:34 4,096 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons002a.dll
    + 2008-06-26 00:30:53 1,782,272 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0039.dll
    + 2008-06-26 00:30:59 4,045,824 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons003e.dll
    + 2008-06-26 00:31:25 1,793,536 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0045.dll
    + 2008-06-26 00:31:04 1,808,896 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0046.dll
    + 2008-06-26 00:30:52 1,411,072 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0047.dll
    + 2008-06-26 00:31:32 1,558,016 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0049.dll
    + 2008-06-26 00:31:33 3,419,136 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons004a.dll
    + 2008-06-26 00:31:29 1,702,912 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons004b.dll
    + 2008-06-26 00:31:45 4,093,440 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons004c.dll
    + 2008-06-26 00:31:30 1,972,736 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons004e.dll
    + 2008-06-26 00:31:00 4,616,192 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0414.dll
    + 2008-06-26 00:31:03 5,090,816 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0416.dll
    + 2008-06-26 00:31:02 5,031,936 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0816.dll
    + 2008-06-26 00:31:22 7,042,560 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons081a.dll
    + 2008-06-26 00:31:16 6,917,120 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0c1a.dll
    + 2008-06-26 00:30:01 5,071,872 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsModels0011.dll
    + 2008-06-26 03:29:06 801,280 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18098_none_9d81873e2afd9b5e\NaturalLanguage6.dll
    + 2008-06-26 01:45:43 12,240,896 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18098_none_9d81873e2afd9b5e\NlsLexicons0007.dll
    + 2008-06-26 01:45:55 2,644,480 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18098_none_9d81873e2afd9b5e\NlsLexicons0009.dll
    + 2008-06-26 03:19:03 801,280 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NaturalLanguage6.dll
    + 2008-06-26 03:19:12 1,523,712 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0000.dll
    + 2008-06-26 03:19:16 2,599,936 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0001.dll
    + 2008-06-26 03:19:20 1,965,056 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0002.dll
    + 2008-06-26 03:19:22 1,965,056 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0003.dll
    + 2008-06-26 03:19:23 2,243,072 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0007.dll
    + 2008-06-26 03:19:24 4,875,776 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0009.dll
    + 2008-06-26 03:19:27 9,847,296 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData000a.dll
    + 2008-06-26 03:19:27 2,643,456 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData000c.dll
    + 2008-06-26 03:19:31 2,342,912 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData000d.dll
    + 2008-06-26 03:19:32 1,965,056 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData000f.dll
    + 2008-06-26 03:19:32 4,495,360 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0010.dll
    + 2008-06-26 03:19:32 2,657,280 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0011.dll
    + 2008-06-26 03:19:34 3,466,752 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0013.dll
    + 2008-06-26 03:19:35 1,965,056 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0018.dll
    + 2008-06-26 03:19:36 4,497,408 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0019.dll
    + 2008-06-26 03:19:37 1,965,056 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData001a.dll
    + 2008-06-26 03:19:38 1,965,056 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData001b.dll
    + 2008-06-26 03:19:40 4,495,360 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData001d.dll
    + 2008-06-26 03:19:41 3,104,768 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0020.dll
    + 2008-06-26 03:19:42 1,801,216 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0021.dll
    + 2008-06-26 03:19:43 1,801,216 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0022.dll
    + 2008-06-26 03:19:44 1,965,056 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0024.dll
    + 2008-06-26 03:19:44 1,965,056 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0026.dll
    + 2008-06-26 03:19:45 1,966,592 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0027.dll
    + 2008-06-26 03:19:46 1,801,216 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData002a.dll
    + 2008-06-26 03:19:48 3,104,768 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0039.dll
    + 2008-06-26 03:19:48 1,801,216 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData003e.dll
    + 2008-06-26 03:19:50 3,104,768 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0045.dll
    + 2008-06-26 03:19:51 3,104,768 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0046.dll
    + 2008-06-26 03:19:52 3,104,768 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0047.dll
    + 2008-06-26 03:19:54 3,104,768 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0049.dll
    + 2008-06-26 03:19:56 3,104,768 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData004a.dll
    + 2008-06-26 03:19:57 3,104,768 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData004b.dll
    + 2008-06-26 03:19:58 3,104,768 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData004c.dll
    + 2008-06-26 03:20:00 3,104,768 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData004e.dll
    + 2008-06-26 03:20:04 4,495,360 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0414.dll
    + 2008-06-26 03:20:05 4,495,360 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0416.dll
    + 2008-06-26 03:20:07 4,495,360 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0816.dll
    + 2008-06-26 03:20:08 1,965,056 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData081a.dll
    + 2008-06-26 03:20:09 1,965,056 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0c1a.dll
    + 2008-06-26 01:42:33 11,722,752 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0001.dll
    + 2008-06-26 01:42:55 4,164,096 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0002.dll
    + 2008-06-26 01:42:31 1,452,544 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0003.dll
    + 2008-06-26 01:42:38 12,240,896 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0007.dll
    + 2008-06-26 01:42:38 2,644,480 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0009.dll
    + 2008-06-26 01:42:38 9,892,864 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons000a.dll
    + 2008-06-26 01:42:31 6,237,696 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons000c.dll
    + 2008-06-26 01:42:27 1,722,368 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons000d.dll
    + 2008-06-26 01:42:40 5,654,528 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons000f.dll
    + 2008-06-26 01:42:38 4,175,872 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0010.dll
    + 2008-06-26 01:42:29 2,466,816 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0011.dll
    + 2008-06-26 01:42:27 4,981,248 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0013.dll
    + 2008-06-26 01:42:48 3,331,072 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0018.dll
    + 2008-06-26 01:42:54 6,781,440 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0019.dll
    + 2008-06-26 01:42:36 6,014,976 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons001a.dll
    + 2008-06-26 01:43:07 6,585,856 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons001b.dll
    + 2008-06-26 01:42:55 6,346,240 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons001d.dll
    + 2008-06-26 01:43:07 1,236,992 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0020.dll
    + 2008-06-26 01:42:31 2,136,064 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0021.dll
    + 2008-06-26 01:43:07 5,499,904 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0022.dll
    + 2008-06-26 01:43:14 7,964,672 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0024.dll
    + 2008-06-26 01:43:07 5,791,232 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0026.dll
    + 2008-06-26 01:42:41 6,224,896 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0027.dll
    + 2008-06-26 01:42:55 4,096 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons002a.dll
    + 2008-06-26 01:42:35 1,782,272 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0039.dll
    + 2008-06-26 01:42:41 4,045,824 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons003e.dll
    + 2008-06-26 01:42:51 1,793,536 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0045.dll
    + 2008-06-26 01:42:43 1,808,896 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0046.dll
    + 2008-06-26 01:42:33 1,411,072 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0047.dll
    + 2008-06-26 01:42:56 1,558,016 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0049.dll
    + 2008-06-26 01:42:58 3,419,136 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons004a.dll
    + 2008-06-26 01:42:53 1,702,912 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons004b.dll
    + 2008-06-26 01:43:07 4,093,440 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons004c.dll
    + 2008-06-26 01:42:56 1,972,736 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons004e.dll
    + 2008-06-26 01:42:43 4,616,192 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0414.dll
    + 2008-06-26 01:42:47 5,090,816 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0416.dll
    + 2008-06-26 01:42:44 5,031,936 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0816.dll
    + 2008-06-26 01:42:57 7,042,560 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons081a.dll
    + 2008-06-26 01:42:57 6,917,120 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0c1a.dll
    + 2008-06-26 01:42:23 5,071,872 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsModels0011.dll
    + 2008-06-30 23:03:49 2,413,032 ----a-w C:\Windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6000.16714_none_f09b0ea06e5840aa\OESpamFilter.dat
    + 2008-06-30 22:56:06 2,413,032 ----a-w C:\Windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6000.20874_none_f0e3cbe387a6881a\OESpamFilter.dat
    + 2008-07-04 02:02:58 2,413,032 ----a-w C:\Windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6001.18104_none_f28c1d326b76b5aa\OESpamFilter.dat
    + 2008-06-30 23:00:26 2,413,032 ----a-w C:\Windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6001.22218_none_f30eeb398498d6c1\OESpamFilter.dat
    + 2008-05-08 21:59:35 90,112 ----a-w C:\Windows\winsxs\x86_microsoft-windows-s..ing-shell-extension_31bf3856ad364e35_6.0.6001.18068_none_0a48f9ec246cf834\wshext.dll
    + 2008-05-08 05:22:33 90,112 ----a-w C:\Windows\winsxs\x86_microsoft-windows-s..ing-shell-extension_31bf3856ad364e35_6.0.6001.22175_none_0ac4c5ed3d9567ea\wshext.dll
    + 2008-05-08 21:59:28 512,000 ----a-w C:\Windows\winsxs\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_6.0.6001.18068_none_82a70b5ef74dc96b\jscript.dll
    + 2008-05-08 05:18:59 512,000 ----a-w C:\Windows\winsxs\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_6.0.6001.22175_none_8322d76010763921\jscript.dll
    + 2008-05-08 21:59:33 430,080 ----a-w C:\Windows\winsxs\x86_microsoft-windows-scripting-vbscript_31bf3856ad364e35_6.0.6001.18068_none_482126172e1075a7\vbscript.dll
    + 2008-05-08 05:22:13 430,080 ----a-w C:\Windows\winsxs\x86_microsoft-windows-scripting-vbscript_31bf3856ad364e35_6.0.6001.22175_none_489cf2184738e55d\vbscript.dll
    + 2008-05-08 21:58:40 135,168 ----a-w C:\Windows\winsxs\x86_microsoft-windows-scripting_31bf3856ad364e35_6.0.6001.18068_none_482f75de008363d9\cscript.exe
    + 2008-05-08 21:59:32 180,224 ----a-w C:\Windows\winsxs\x86_microsoft-windows-scripting_31bf3856ad364e35_6.0.6001.18068_none_482f75de008363d9\scrobj.dll
    + 2008-05-08 21:59:32 172,032 ----a-w C:\Windows\winsxs\x86_microsoft-windows-scripting_31bf3856ad364e35_6.0.6001.18068_none_482f75de008363d9\scrrun.dll
    + 2008-05-08 21:59:26 155,648 ----a-w C:\Windows\winsxs\x86_microsoft-windows-scripting_31bf3856ad364e35_6.0.6001.18068_none_482f75de008363d9\wscript.exe
    + 2008-05-08 03:12:11 135,168 ----a-w C:\Windows\winsxs\x86_microsoft-windows-scripting_31bf3856ad364e35_6.0.6001.22175_none_48ab41df19abd38f\cscript.exe
    + 2008-05-08 05:17:02 32,768 ----a-w C:\Windows\winsxs\x86_microsoft-windows-scripting_31bf3856ad364e35_6.0.6001.22175_none_48ab41df19abd38f\dispex.dll
    + 2008-05-08 05:21:52 180,224 ----a-w C:\Windows\winsxs\x86_microsoft-windows-scripting_31bf3856ad364e35_6.0.6001.22175_none_48ab41df19abd38f\scrobj.dll
    + 2008-05-08 05:21:52 172,032 ----a-w C:\Windows\winsxs\x86_microsoft-windows-scripting_31bf3856ad364e35_6.0.6001.22175_none_48ab41df19abd38f\scrrun.dll
    + 2008-05-08 03:12:11 155,648 ----a-w C:\Windows\winsxs\x86_microsoft-windows-scripting_31bf3856ad364e35_6.0.6001.22175_none_48ab41df19abd38f\wscript.exe
    + 2008-05-08 05:22:33 36,864 ----a-w C:\Windows\winsxs\x86_microsoft-windows-scripting_31bf3856ad364e35_6.0.6001.22175_none_48ab41df19abd38f\wshcon.dll
    + 2008-04-24 04:51:39 11,315,712 ----a-w C:\Windows\winsxs\x86_microsoft-windows-shell32_31bf3856ad364e35_6.0.6000.16680_none_69ec6cd815163c56\shell32.dll
    + 2008-04-24 04:40:28 11,319,808 ----a-w C:\Windows\winsxs\x86_microsoft-windows-shell32_31bf3856ad364e35_6.0.6000.20822_none_6ab8eba52e01644f\shell32.dll
    + 2008-04-24 04:58:20 11,580,416 ----a-w C:\Windows\winsxs\x86_microsoft-windows-shell32_31bf3856ad364e35_6.0.6001.18062_none_6bea4bea122ac813\shell32.dll
    + 2008-04-24 04:45:45 11,581,440 ----a-w C:\Windows\winsxs\x86_microsoft-windows-shell32_31bf3856ad364e35_6.0.6001.22166_none_6c77e9dd2b44cd39\shell32.dll
    + 2008-08-27 15:06:50 1,275,392 ----a-w C:\Windows\winsxs\x86_microsoft.msxml2_6bd6b9abf345378f_4.20.9848.0_none_b7e811287b298060\msxml4.dll
    .
    -- Snapshot reset to current date --
    .
    (((((((((((((((((((((((((((((( Rekisterin käynnistyskohteet )))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Huom* Tyhjiä arvoja ja laillisia oletusarvoja ei näytetä
    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "recinfo"="c:\recinfo\recinfo.exe" [2008-02-13 14:45 52224]
    "WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 05:25 202240]
    "MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 11:34 5724184]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "StartCCC"="c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-01-21 22:17 61440]
    "WinampAgent"="D:\Ohjelmia\Winamp\winampa.exe" [2008-04-01 21:49 36352]
    "ISTray"="D:\Ohjelmia\Spyware\Spyware Doctor\pctsTray.exe" [2008-06-10 21:22 1163656]
    "AVG8_TRAY"="C:\PROGRA~1\AVG\AVG8\avgtray.exe" [2008-08-27 18:05 1235736]
    "RtHDVCpl"="RtHDVCpl.exe" [2008-05-28 17:06 6144000 C:\Windows\RtHDVCpl.exe]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "fsc-reg"="C:\ProgramData\fsc-reg\fscreg.exe" [2007-11-08 12:05 470288]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "EnableUIADesktopToggle"= 0 (0x0)

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
    "AppInit_DLLs"=avgrsstx.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
    "msacm.ac3filter"= ac3filter.acm

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
    "{8503E230-17AA-4232-86A8-F2909E103A9E}"= UDP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
    "{7B5A13B9-F167-41D4-AC96-F056F9EB449F}"= TCP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
    "TCP Query User{0FB8DD90-F4A5-49AC-8DD8-DA36ACEB195A}D:\\ohjelmia\\bitlord\\bitlord.exe"= UDP:D:\ohjelmia\bitlord\bitlord.exe:BitLord
    "UDP Query User{4ABC1F85-0CEA-412D-9206-06940D831769}D:\\ohjelmia\\bitlord\\bitlord.exe"= TCP:D:\ohjelmia\bitlord\bitlord.exe:BitLord
    "TCP Query User{E71F12D7-A6FC-4098-BEF6-F84DE8B95143}D:\\ohjelmia\\bitlord\\bitlord.exe"= UDP:D:\ohjelmia\bitlord\bitlord.exe:BitLord
    "UDP Query User{B150481C-3D65-4420-9559-5DBD9FB364B8}D:\\ohjelmia\\bitlord\\bitlord.exe"= TCP:D:\ohjelmia\bitlord\bitlord.exe:BitLord
    "{6616B7DB-B76E-4B87-A587-89F2D4E81AEA}"= C:\Program Files\AVG\AVG8\avgupd.exe:avgupd.exe
    "{E7EFFCD7-7895-4280-A7D1-460F448B817E}"= C:\Program Files\AVG\AVG8\avgemc.exe:avgemc.exe
    "{9F738E4E-A9E4-4479-A244-C0F7B60D3B4A}"= C:\Program Files\AVG\AVG8\avgnsx.exe:avgnsx.exe
    "{07F6960A-E11D-476E-BA16-EDE98B81B723}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)

    R0 AtiPcie;ATI PCI Express (3GIO) Filter;C:\Windows\system32\DRIVERS\AtiPcie.sys [2008-05-29 16:44]
    R0 AvgRkx86;avgrkx86.sys;C:\Windows\system32\Drivers\avgrkx86.sys [2008-08-27 18:05]
    R1 AvgLdx86;AVG AVI Loader Driver x86;C:\Windows\system32\Drivers\avgldx86.sys [2008-08-27 18:05]
    R1 pctfw2;pctfw2;C:\Windows\System32\drivers\pctfw2.sys [2008-08-25 18:05]
    R2 avg8emc;AVG8 E-mail Scanner;C:\PROGRA~1\AVG\AVG8\avgemc.exe [2008-08-27 18:05]
    R2 avg8wd;AVG8 WatchDog;C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2008-08-27 18:05]
    R2 TestHandler;Fujitsu Siemens Computers Diagnostic Testhandler;C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe [2008-02-29 14:13]
    R3 atikmdag;atikmdag;C:\Windows\system32\DRIVERS\atikmdag.sys [2008-03-29 03:24]
    R3 AvgWfpX;AVG8 Firewall Driver x86;C:\Windows\system32\Drivers\avgwfpx.sys [2008-08-27 18:06]
    S4 ahcix86s;ahcix86s;C:\Windows\system32\drivers\ahcix86s.sys [2007-12-19 20:45]
    S4 ErrDev;Microsoft Hardware Error Device Driver;C:\Windows\system32\drivers\errdev.sys [2008-01-21 05:23]
    S4 MegaSR;MegaSR;C:\Windows\system32\drivers\megasr.sys [2008-01-21 05:23]
    .
    .
    ------- Supplementary Scan -------
    .
    FireFox -: Profile - C:\Users\mönkkönen\AppData\Roaming\Mozilla\Firefox\Profiles\4kr9zti9.default\
    FireFox -: prefs.js - STARTUP.HOMEPAGE - google.fi
    FF -: plugin - D:\Ohjelmia\Mozilla\plugins\npnul32.dll
    .

    **************************************************************************

    catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-08-28 20:44:50
    Windows 6.0.6001 Service Pack 1 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************
    .
    Completion time: 2008-08-28 20:48:17
    ComboFix-quarantined-files.txt 2008-08-28 17:47:47
    ComboFix2.txt 2008-08-26 17:51:12

    Pre-Run: 141,638,037,504 tavua vapaana
    Post-Run: 141,305,159,680 tavua vapaana

    711 --- E O F --- 2008-08-27 15:32:34
     
    hrjanske, 28.08.2008
    #15
  17. Hujo

    Hujo Guest

    Lataa Tästä Ccleaner
    CCleaner v2.05.555- Standard Build, ÄLÄ aseenna Yahoo toolbaria!
    Asennuksessa poista merkki/rasti kohdasta "asenna Yahoo! toolbar/työkalupalkki".
    Asennuksen jälkeen aukaise CCleaner.
    Valitse vasemmalta pystyrivistä Options.
    Valitse viereisestä pystyrivistä Settings.
    Language kohtaan valitse Suomi.

    Puhdistaja
    Valitse vasemmalta pystyrivistä Puhdistaja.
    Paina alhaalta Tutki.
    Nyt CCleaner tutkii, mitä voidaan poistaa (tempit, cookiessit jne.).
    Kun tutkiminen on valmis, paina Aja CCleaner.
    Nyt CCleaner poistaa löydetyt tempit, cookiessit jne.

    Rekisterin virheiden korjaus
    Valitse vasemmalta pystyrivistä Rekisteri.
    Paina alhaalta Etsi rekisterin virheitä.
    Kun etsintä on valmis ja olet varma, että haluat korjata ne rivit jotka ovat merkattuja, niin paina Korjaa valitut rekisterin virheet.
    Sinulta kysytään "haluatko varmuuskopioida muutokset rekisteriin", paina Kyllä. Tallenna varmuuskopio vaikka "Omat tiedostot" -kansioon.
    Klikkaa uudesta aukeavasta ikkunasta Korjaa kaikki valitut virheet.
    Saat vielä varmistus kysymyksen, paina Ok.
    Kun virheet on korjattu, paina Sulje.
    Nyt voit sulkea CCleanerin painamalla oikealta ylhäältä punaista rastia.

    ==============

    Lataa Atribunen ATF Cleaner

    Ohjeet;

    Tupla-klikkaa ATF-Cleaner.exe käynnistääksesi ohjelman.Main:n alla valitse: Select All
    Klikkaa Empty Selected valintaa.
    Jos käytät FireFoxia selaimenasi Klikkaa Firefox yläpuolelta ja valitse: Select All
    Klikkaa Empty Selected valintaa.
    HUOMIO: Jos haluaisit pitää tallennetut salasanasi, klikkaa No kun se sitä kysyy.
    Jos käytät Operaa selaimenasiKlikkaa Opera yläpuolelta ja valitse: Select All
    Klikkaa Empty Selected valintaa taas.
    HUOMIO: Jos haluaisit pitää tallennetut salasanasi, klikkaa No kun se sitä kysyy.
    Klikkaa Exit päävalikosta sulkeaksesi ohjelman.
    Teknistä tukea tulee jos tupla-klikkaat sähköpostiosoitetta joka sijaitsee jokaisen menun alapuolella kyseisessä työkalussa. (Huomatkaa että se tuki on sitten englanniksi)
     
    Hujo, 28.08.2008
    #16
  18. hrjanske

    hrjanske Member

    Liittynyt:
    26.08.2008
    Viestejä:
    11
    Kiitokset:
    0
    Pisteet:
    11
    + 2008-06-26 03:22:33 2,655,232 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0011.dll
    + 2008-06-26 03:22:33 3,464,704 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0013.dll
    + 2008-06-26 03:22:33 1,963,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0018.dll
    + 2008-06-26 03:22:33 4,495,360 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0019.dll
    + 2008-06-26 03:22:33 1,963,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData001a.dll
    + 2008-06-26 03:22:33 1,963,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData001b.dll
    + 2008-06-26 03:22:33 4,493,312 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData001d.dll
    + 2008-06-26 03:22:33 3,102,720 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0020.dll
    + 2008-06-26 03:22:33 1,799,168 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0021.dll
    + 2008-06-26 03:22:33 1,799,168 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0022.dll
    + 2008-06-26 03:22:33 1,963,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0024.dll
    + 2008-06-26 03:22:33 1,963,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0026.dll
    + 2008-06-26 03:22:33 1,965,056 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0027.dll
    + 2008-06-26 03:22:33 1,799,168 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData002a.dll
    + 2008-06-26 03:22:33 3,102,720 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0039.dll
    + 2008-06-26 03:22:33 1,799,168 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData003e.dll
    + 2008-06-26 03:22:33 3,102,720 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0045.dll
    + 2008-06-26 03:22:33 3,102,720 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0046.dll
    + 2008-06-26 03:22:33 3,102,720 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0047.dll
    + 2008-06-26 03:22:33 3,102,720 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0049.dll
    + 2008-06-26 03:22:33 3,102,720 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData004a.dll
    + 2008-06-26 03:22:33 3,102,720 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData004b.dll
    + 2008-06-26 03:22:33 3,102,720 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData004c.dll
    + 2008-06-26 03:22:33 3,102,720 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData004e.dll
    + 2008-06-26 03:22:33 4,493,312 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0414.dll
    + 2008-06-26 03:22:33 4,493,312 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0416.dll
    + 2008-06-26 03:22:33 4,493,312 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0816.dll
    + 2008-06-26 03:22:33 1,963,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData081a.dll
    + 2008-06-26 03:22:33 1,963,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsData0c1a.dll
    + 2008-06-26 00:33:04 11,722,752 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0001.dll
    + 2008-06-26 00:34:20 4,164,096 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0002.dll
    + 2008-06-26 00:33:41 1,452,544 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0003.dll
    + 2008-06-26 00:33:35 12,240,896 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0007.dll
    + 2008-06-26 00:33:33 2,644,480 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0009.dll
    + 2008-06-26 00:33:39 9,892,864 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons000a.dll
    + 2008-06-26 00:33:34 6,237,696 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons000c.dll
    + 2008-06-26 00:33:36 1,722,368 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons000d.dll
    + 2008-06-26 00:33:48 5,654,528 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons000f.dll
    + 2008-06-26 00:33:49 4,175,872 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0010.dll
    + 2008-06-26 00:33:37 2,466,816 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0011.dll
    + 2008-06-26 00:33:12 4,981,248 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0013.dll
    + 2008-06-26 00:34:01 3,331,072 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0018.dll
    + 2008-06-26 00:34:03 6,781,440 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0019.dll
    + 2008-06-26 00:33:43 6,014,976 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons001a.dll
    + 2008-06-26 00:34:37 6,585,856 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons001b.dll
    + 2008-06-26 00:34:14 6,346,240 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons001d.dll
    + 2008-06-26 00:34:34 1,236,992 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0020.dll
    + 2008-06-26 00:33:40 2,136,064 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0021.dll
    + 2008-06-26 00:34:33 5,499,904 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0022.dll
    + 2008-06-26 00:34:39 7,964,672 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0024.dll
    + 2008-06-26 00:34:30 5,791,232 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0026.dll
    + 2008-06-26 00:33:50 6,224,896 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0027.dll
    + 2008-06-26 00:34:26 4,096 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons002a.dll
    + 2008-06-26 00:33:46 1,782,272 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0039.dll
    + 2008-06-26 00:33:52 4,045,824 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons003e.dll
    + 2008-06-26 00:34:18 1,793,536 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0045.dll
    + 2008-06-26 00:33:58 1,808,896 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0046.dll
    + 2008-06-26 00:33:45 1,411,072 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0047.dll
    + 2008-06-26 00:34:24 1,558,016 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0049.dll
    + 2008-06-26 00:34:25 3,419,136 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons004a.dll
    + 2008-06-26 00:34:22 1,702,912 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons004b.dll
    + 2008-06-26 00:34:36 4,093,440 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons004c.dll
    + 2008-06-26 00:34:23 1,972,736 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons004e.dll
    + 2008-06-26 00:33:54 4,616,192 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0414.dll
    + 2008-06-26 00:33:57 5,090,816 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0416.dll
    + 2008-06-26 00:33:56 5,031,936 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0816.dll
    + 2008-06-26 00:34:11 7,042,560 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons081a.dll
    + 2008-06-26 00:34:09 6,917,120 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsLexicons0c1a.dll
    + 2008-06-26 00:33:01 5,071,872 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.16710_none_9be9c78e2d9d5d54\NlsModels0011.dll
    + 2008-06-26 03:18:12 797,696 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NaturalLanguage6.dll
    + 2008-06-26 03:18:18 1,523,200 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0000.dll
    + 2008-06-26 03:18:19 2,597,888 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0001.dll
    + 2008-06-26 03:18:20 1,963,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0002.dll
    + 2008-06-26 03:18:21 1,963,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0003.dll
    + 2008-06-26 03:18:21 2,241,024 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0007.dll
    + 2008-06-26 03:18:22 4,874,240 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0009.dll
    + 2008-06-26 03:18:24 9,845,248 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData000a.dll
    + 2008-06-26 03:18:24 2,641,408 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData000c.dll
    + 2008-06-26 03:18:26 2,340,864 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData000d.dll
    + 2008-06-26 03:18:26 1,963,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData000f.dll
    + 2008-06-26 03:18:30 4,493,312 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0010.dll
    + 2008-06-26 03:18:32 2,655,232 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0011.dll
    + 2008-06-26 03:18:33 3,464,704 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0013.dll
    + 2008-06-26 03:18:34 1,963,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0018.dll
    + 2008-06-26 03:18:38 4,495,360 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0019.dll
    + 2008-06-26 03:18:38 1,963,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData001a.dll
    + 2008-06-26 03:18:40 1,963,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData001b.dll
    + 2008-06-26 03:18:42 4,493,312 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData001d.dll
    + 2008-06-26 03:18:43 3,102,720 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0020.dll
    + 2008-06-26 03:18:44 1,799,168 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0021.dll
    + 2008-06-26 03:18:44 1,799,168 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0022.dll
    + 2008-06-26 03:18:44 1,963,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0024.dll
    + 2008-06-26 03:18:45 1,963,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0026.dll
    + 2008-06-26 03:18:45 1,965,056 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0027.dll
    + 2008-06-26 03:18:46 1,799,168 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData002a.dll
    + 2008-06-26 03:18:46 3,102,720 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0039.dll
    + 2008-06-26 03:18:47 1,799,168 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData003e.dll
    + 2008-06-26 03:18:49 3,102,720 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0045.dll
    + 2008-06-26 03:18:51 3,102,720 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0046.dll
    + 2008-06-26 03:18:52 3,102,720 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0047.dll
    + 2008-06-26 03:18:53 3,102,720 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0049.dll
    + 2008-06-26 03:18:54 3,102,720 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData004a.dll
    + 2008-06-26 03:18:54 3,102,720 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData004b.dll
    + 2008-06-26 03:18:57 3,102,720 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData004c.dll
    + 2008-06-26 03:18:58 3,102,720 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData004e.dll
    + 2008-06-26 03:19:00 4,493,312 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0414.dll
    + 2008-06-26 03:19:01 4,493,312 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0416.dll
    + 2008-06-26 03:19:04 4,493,312 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0816.dll
    + 2008-06-26 03:19:04 1,963,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData081a.dll
    + 2008-06-26 03:19:05 1,963,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsData0c1a.dll
    + 2008-06-26 00:30:04 11,722,752 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0001.dll
    + 2008-06-26 00:31:26 4,164,096 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0002.dll
    + 2008-06-26 00:30:49 1,452,544 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0003.dll
    + 2008-06-26 00:30:39 12,240,896 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0007.dll
    + 2008-06-26 00:30:36 2,644,480 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0009.dll
    + 2008-06-26 00:30:47 9,892,864 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons000a.dll
    + 2008-06-26 00:30:37 6,237,696 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons000c.dll
    + 2008-06-26 00:30:43 1,722,368 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons000d.dll
    + 2008-06-26 00:30:54 5,654,528 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons000f.dll
    + 2008-06-26 00:30:55 4,175,872 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0010.dll
    + 2008-06-26 00:30:45 2,466,816 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0011.dll
    + 2008-06-26 00:30:11 4,981,248 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0013.dll
    + 2008-06-26 00:31:06 3,331,072 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0018.dll
    + 2008-06-26 00:31:09 6,781,440 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0019.dll
    + 2008-06-26 00:30:50 6,014,976 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons001a.dll
    + 2008-06-26 00:31:46 6,585,856 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons001b.dll
    + 2008-06-26 00:31:23 6,346,240 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons001d.dll
    + 2008-06-26 00:31:44 1,236,992 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0020.dll
    + 2008-06-26 00:30:48 2,136,064 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0021.dll
    + 2008-06-26 00:31:40 5,499,904 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0022.dll
    + 2008-06-26 00:31:48 7,964,672 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0024.dll
    + 2008-06-26 00:31:35 5,791,232 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0026.dll
    + 2008-06-26 00:30:57 6,224,896 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0027.dll
    + 2008-06-26 00:31:34 4,096 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons002a.dll
    + 2008-06-26 00:30:53 1,782,272 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0039.dll
    + 2008-06-26 00:30:59 4,045,824 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons003e.dll
    + 2008-06-26 00:31:25 1,793,536 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0045.dll
    + 2008-06-26 00:31:04 1,808,896 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0046.dll
    + 2008-06-26 00:30:52 1,411,072 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0047.dll
    + 2008-06-26 00:31:32 1,558,016 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0049.dll
    + 2008-06-26 00:31:33 3,419,136 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons004a.dll
    + 2008-06-26 00:31:29 1,702,912 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons004b.dll
    + 2008-06-26 00:31:45 4,093,440 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons004c.dll
    + 2008-06-26 00:31:30 1,972,736 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons004e.dll
    + 2008-06-26 00:31:00 4,616,192 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0414.dll
    + 2008-06-26 00:31:03 5,090,816 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0416.dll
    + 2008-06-26 00:31:02 5,031,936 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0816.dll
    + 2008-06-26 00:31:22 7,042,560 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons081a.dll
    + 2008-06-26 00:31:16 6,917,120 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsLexicons0c1a.dll
    + 2008-06-26 00:30:01 5,071,872 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6000.20867_none_9c4456c346dd3a34\NlsModels0011.dll
    + 2008-06-26 03:29:06 801,280 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18098_none_9d81873e2afd9b5e\NaturalLanguage6.dll
    + 2008-06-26 01:45:43 12,240,896 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18098_none_9d81873e2afd9b5e\NlsLexicons0007.dll
    + 2008-06-26 01:45:55 2,644,480 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18098_none_9d81873e2afd9b5e\NlsLexicons0009.dll
    + 2008-06-26 03:19:03 801,280 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NaturalLanguage6.dll
    + 2008-06-26 03:19:12 1,523,712 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0000.dll
    + 2008-06-26 03:19:16 2,599,936 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0001.dll
    + 2008-06-26 03:19:20 1,965,056 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0002.dll
    + 2008-06-26 03:19:22 1,965,056 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0003.dll
    + 2008-06-26 03:19:23 2,243,072 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0007.dll
    + 2008-06-26 03:19:24 4,875,776 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0009.dll
    + 2008-06-26 03:19:27 9,847,296 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData000a.dll
    + 2008-06-26 03:19:27 2,643,456 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData000c.dll
    + 2008-06-26 03:19:31 2,342,912 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData000d.dll
    + 2008-06-26 03:19:32 1,965,056 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData000f.dll
    + 2008-06-26 03:19:32 4,495,360 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0010.dll
    + 2008-06-26 03:19:32 2,657,280 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0011.dll
    + 2008-06-26 03:19:34 3,466,752 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0013.dll
    + 2008-06-26 03:19:35 1,965,056 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0018.dll
    + 2008-06-26 03:19:36 4,497,408 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0019.dll
    + 2008-06-26 03:19:37 1,965,056 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData001a.dll
    + 2008-06-26 03:19:38 1,965,056 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData001b.dll
    + 2008-06-26 03:19:40 4,495,360 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData001d.dll
    + 2008-06-26 03:19:41 3,104,768 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0020.dll
    + 2008-06-26 03:19:42 1,801,216 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0021.dll
    + 2008-06-26 03:19:43 1,801,216 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0022.dll
    + 2008-06-26 03:19:44 1,965,056 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0024.dll
    + 2008-06-26 03:19:44 1,965,056 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0026.dll
    + 2008-06-26 03:19:45 1,966,592 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0027.dll
    + 2008-06-26 03:19:46 1,801,216 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData002a.dll
    + 2008-06-26 03:19:48 3,104,768 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0039.dll
    + 2008-06-26 03:19:48 1,801,216 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData003e.dll
    + 2008-06-26 03:19:50 3,104,768 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0045.dll
    + 2008-06-26 03:19:51 3,104,768 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0046.dll
    + 2008-06-26 03:19:52 3,104,768 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0047.dll
    + 2008-06-26 03:19:54 3,104,768 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0049.dll
    + 2008-06-26 03:19:56 3,104,768 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData004a.dll
    + 2008-06-26 03:19:57 3,104,768 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData004b.dll
    + 2008-06-26 03:19:58 3,104,768 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData004c.dll
    + 2008-06-26 03:20:00 3,104,768 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData004e.dll
    + 2008-06-26 03:20:04 4,495,360 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0414.dll
    + 2008-06-26 03:20:05 4,495,360 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0416.dll
    + 2008-06-26 03:20:07 4,495,360 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0816.dll
    + 2008-06-26 03:20:08 1,965,056 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData081a.dll
    + 2008-06-26 03:20:09 1,965,056 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsData0c1a.dll
    + 2008-06-26 01:42:33 11,722,752 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0001.dll
    + 2008-06-26 01:42:55 4,164,096 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0002.dll
    + 2008-06-26 01:42:31 1,452,544 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0003.dll
    + 2008-06-26 01:42:38 12,240,896 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0007.dll
    + 2008-06-26 01:42:38 2,644,480 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0009.dll
    + 2008-06-26 01:42:38 9,892,864 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons000a.dll
    + 2008-06-26 01:42:31 6,237,696 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons000c.dll
    + 2008-06-26 01:42:27 1,722,368 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons000d.dll
    + 2008-06-26 01:42:40 5,654,528 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons000f.dll
    + 2008-06-26 01:42:38 4,175,872 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0010.dll
    + 2008-06-26 01:42:29 2,466,816 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0011.dll
    + 2008-06-26 01:42:27 4,981,248 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0013.dll
    + 2008-06-26 01:42:48 3,331,072 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0018.dll
    + 2008-06-26 01:42:54 6,781,440 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0019.dll
    + 2008-06-26 01:42:36 6,014,976 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons001a.dll
    + 2008-06-26 01:43:07 6,585,856 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons001b.dll
    + 2008-06-26 01:42:55 6,346,240 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons001d.dll
    + 2008-06-26 01:43:07 1,236,992 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0020.dll
    + 2008-06-26 01:42:31 2,136,064 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0021.dll
    + 2008-06-26 01:43:07 5,499,904 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0022.dll
    + 2008-06-26 01:43:14 7,964,672 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0024.dll
    + 2008-06-26 01:43:07 5,791,232 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0026.dll
    + 2008-06-26 01:42:41 6,224,896 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0027.dll
    + 2008-06-26 01:42:55 4,096 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons002a.dll
    + 2008-06-26 01:42:35 1,782,272 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0039.dll
    + 2008-06-26 01:42:41 4,045,824 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons003e.dll
    + 2008-06-26 01:42:51 1,793,536 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0045.dll
    + 2008-06-26 01:42:43 1,808,896 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0046.dll
    + 2008-06-26 01:42:33 1,411,072 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0047.dll
    + 2008-06-26 01:42:56 1,558,016 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0049.dll
    + 2008-06-26 01:42:58 3,419,136 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons004a.dll
    + 2008-06-26 01:42:53 1,702,912 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons004b.dll
    + 2008-06-26 01:43:07 4,093,440 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons004c.dll
    + 2008-06-26 01:42:56 1,972,736 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons004e.dll
    + 2008-06-26 01:42:43 4,616,192 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0414.dll
    + 2008-06-26 01:42:47 5,090,816 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0416.dll
    + 2008-06-26 01:42:44 5,031,936 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0816.dll
    + 2008-06-26 01:42:57 7,042,560 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons081a.dll
    + 2008-06-26 01:42:57 6,917,120 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsLexicons0c1a.dll
    + 2008-06-26 01:42:23 5,071,872 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.22211_none_9e5aa34943e0a766\NlsModels0011.dll
    + 2008-06-30 23:03:49 2,413,032 ----a-w C:\Windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6000.16714_none_f09b0ea06e5840aa\OESpamFilter.dat
    + 2008-06-30 22:56:06 2,413,032 ----a-w C:\Windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6000.20874_none_f0e3cbe387a6881a\OESpamFilter.dat
    + 2008-07-04 02:02:58 2,413,032 ----a-w C:\Windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6001.18104_none_f28c1d326b76b5aa\OESpamFilter.dat
    + 2008-06-30 23:00:26 2,413,032 ----a-w C:\Windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6001.22218_none_f30eeb398498d6c1\OESpamFilter.dat
    + 2008-05-08 21:59:35 90,112 ----a-w C:\Windows\winsxs\x86_microsoft-windows-s..ing-shell-extension_31bf3856ad364e35_6.0.6001.18068_none_0a48f9ec246cf834\wshext.dll
    + 2008-05-08 05:22:33 90,112 ----a-w C:\Windows\winsxs\x86_microsoft-windows-s..ing-shell-extension_31bf3856ad364e35_6.0.6001.22175_none_0ac4c5ed3d9567ea\wshext.dll
    + 2008-05-08 21:59:28 512,000 ----a-w C:\Windows\winsxs\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_6.0.6001.18068_none_82a70b5ef74dc96b\jscript.dll
    + 2008-05-08 05:18:59 512,000 ----a-w C:\Windows\winsxs\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_6.0.6001.22175_none_8322d76010763921\jscript.dll
    + 2008-05-08 21:59:33 430,080 ----a-w C:\Windows\winsxs\x86_microsoft-windows-scripting-vbscript_31bf3856ad364e35_6.0.6001.18068_none_482126172e1075a7\vbscript.dll
    + 2008-05-08 05:22:13 430,080 ----a-w C:\Windows\winsxs\x86_microsoft-windows-scripting-vbscript_31bf3856ad364e35_6.0.6001.22175_none_489cf2184738e55d\vbscript.dll
    + 2008-05-08 21:58:40 135,168 ----a-w C:\Windows\winsxs\x86_microsoft-windows-scripting_31bf3856ad364e35_6.0.6001.18068_none_482f75de008363d9\cscript.exe
    + 2008-05-08 21:59:32 180,224 ----a-w C:\Windows\winsxs\x86_microsoft-windows-scripting_31bf3856ad364e35_6.0.6001.18068_none_482f75de008363d9\scrobj.dll
    + 2008-05-08 21:59:32 172,032 ----a-w C:\Windows\winsxs\x86_microsoft-windows-scripting_31bf3856ad364e35_6.0.6001.18068_none_482f75de008363d9\scrrun.dll
    + 2008-05-08 21:59:26 155,648 ----a-w C:\Windows\winsxs\x86_microsoft-windows-scripting_31bf3856ad364e35_6.0.6001.18068_none_482f75de008363d9\wscript.exe
    + 2008-05-08 03:12:11 135,168 ----a-w C:\Windows\winsxs\x86_microsoft-windows-scripting_31bf3856ad364e35_6.0.6001.22175_none_48ab41df19abd38f\cscript.exe
    + 2008-05-08 05:17:02 32,768 ----a-w C:\Windows\winsxs\x86_microsoft-windows-scripting_31bf3856ad364e35_6.0.6001.22175_none_48ab41df19abd38f\dispex.dll
    + 2008-05-08 05:21:52 180,224 ----a-w C:\Windows\winsxs\x86_microsoft-windows-scripting_31bf3856ad364e35_6.0.6001.22175_none_48ab41df19abd38f\scrobj.dll
    + 2008-05-08 05:21:52 172,032 ----a-w C:\Windows\winsxs\x86_microsoft-windows-scripting_31bf3856ad364e35_6.0.6001.22175_none_48ab41df19abd38f\scrrun.dll
    + 2008-05-08 03:12:11 155,648 ----a-w C:\Windows\winsxs\x86_microsoft-windows-scripting_31bf3856ad364e35_6.0.6001.22175_none_48ab41df19abd38f\wscript.exe
    + 2008-05-08 05:22:33 36,864 ----a-w C:\Windows\winsxs\x86_microsoft-windows-scripting_31bf3856ad364e35_6.0.6001.22175_none_48ab41df19abd38f\wshcon.dll
    + 2008-04-24 04:51:39 11,315,712 ----a-w C:\Windows\winsxs\x86_microsoft-windows-shell32_31bf3856ad364e35_6.0.6000.16680_none_69ec6cd815163c56\shell32.dll
    + 2008-04-24 04:40:28 11,319,808 ----a-w C:\Windows\winsxs\x86_microsoft-windows-shell32_31bf3856ad364e35_6.0.6000.20822_none_6ab8eba52e01644f\shell32.dll
    + 2008-04-24 04:58:20 11,580,416 ----a-w C:\Windows\winsxs\x86_microsoft-windows-shell32_31bf3856ad364e35_6.0.6001.18062_none_6bea4bea122ac813\shell32.dll
    + 2008-04-24 04:45:45 11,581,440 ----a-w C:\Windows\winsxs\x86_microsoft-windows-shell32_31bf3856ad364e35_6.0.6001.22166_none_6c77e9dd2b44cd39\shell32.dll
    + 2008-08-27 15:06:50 1,275,392 ----a-w C:\Windows\winsxs\x86_microsoft.msxml2_6bd6b9abf345378f_4.20.9848.0_none_b7e811287b298060\msxml4.dll
    .
    -- Snapshot reset to current date --
    .
    (((((((((((((((((((((((((((((( Rekisterin käynnistyskohteet )))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Huom* Tyhjiä arvoja ja laillisia oletusarvoja ei näytetä
    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "recinfo"="c:\recinfo\recinfo.exe" [2008-02-13 14:45 52224]
    "WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 05:25 202240]
    "MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 11:34 5724184]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "StartCCC"="c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-01-21 22:17 61440]
    "WinampAgent"="D:\Ohjelmia\Winamp\winampa.exe" [2008-04-01 21:49 36352]
    "ISTray"="D:\Ohjelmia\Spyware\Spyware Doctor\pctsTray.exe" [2008-06-10 21:22 1163656]
    "AVG8_TRAY"="C:\PROGRA~1\AVG\AVG8\avgtray.exe" [2008-08-27 18:05 1235736]
    "RtHDVCpl"="RtHDVCpl.exe" [2008-05-28 17:06 6144000 C:\Windows\RtHDVCpl.exe]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "fsc-reg"="C:\ProgramData\fsc-reg\fscreg.exe" [2007-11-08 12:05 470288]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "EnableUIADesktopToggle"= 0 (0x0)

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
    "AppInit_DLLs"=avgrsstx.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
    "msacm.ac3filter"= ac3filter.acm

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
    "{8503E230-17AA-4232-86A8-F2909E103A9E}"= UDP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
    "{7B5A13B9-F167-41D4-AC96-F056F9EB449F}"= TCP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
    "TCP Query User{0FB8DD90-F4A5-49AC-8DD8-DA36ACEB195A}D:\\ohjelmia\\bitlord\\bitlord.exe"= UDP:D:\ohjelmia\bitlord\bitlord.exe:BitLord
    "UDP Query User{4ABC1F85-0CEA-412D-9206-06940D831769}D:\\ohjelmia\\bitlord\\bitlord.exe"= TCP:D:\ohjelmia\bitlord\bitlord.exe:BitLord
    "TCP Query User{E71F12D7-A6FC-4098-BEF6-F84DE8B95143}D:\\ohjelmia\\bitlord\\bitlord.exe"= UDP:D:\ohjelmia\bitlord\bitlord.exe:BitLord
    "UDP Query User{B150481C-3D65-4420-9559-5DBD9FB364B8}D:\\ohjelmia\\bitlord\\bitlord.exe"= TCP:D:\ohjelmia\bitlord\bitlord.exe:BitLord
    "{6616B7DB-B76E-4B87-A587-89F2D4E81AEA}"= C:\Program Files\AVG\AVG8\avgupd.exe:avgupd.exe
    "{E7EFFCD7-7895-4280-A7D1-460F448B817E}"= C:\Program Files\AVG\AVG8\avgemc.exe:avgemc.exe
    "{9F738E4E-A9E4-4479-A244-C0F7B60D3B4A}"= C:\Program Files\AVG\AVG8\avgnsx.exe:avgnsx.exe
    "{07F6960A-E11D-476E-BA16-EDE98B81B723}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)

    R0 AtiPcie;ATI PCI Express (3GIO) Filter;C:\Windows\system32\DRIVERS\AtiPcie.sys [2008-05-29 16:44]
    R0 AvgRkx86;avgrkx86.sys;C:\Windows\system32\Drivers\avgrkx86.sys [2008-08-27 18:05]
    R1 AvgLdx86;AVG AVI Loader Driver x86;C:\Windows\system32\Drivers\avgldx86.sys [2008-08-27 18:05]
    R1 pctfw2;pctfw2;C:\Windows\System32\drivers\pctfw2.sys [2008-08-25 18:05]
    R2 avg8emc;AVG8 E-mail Scanner;C:\PROGRA~1\AVG\AVG8\avgemc.exe [2008-08-27 18:05]
    R2 avg8wd;AVG8 WatchDog;C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2008-08-27 18:05]
    R2 TestHandler;Fujitsu Siemens Computers Diagnostic Testhandler;C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe [2008-02-29 14:13]
    R3 atikmdag;atikmdag;C:\Windows\system32\DRIVERS\atikmdag.sys [2008-03-29 03:24]
    R3 AvgWfpX;AVG8 Firewall Driver x86;C:\Windows\system32\Drivers\avgwfpx.sys [2008-08-27 18:06]
    S4 ahcix86s;ahcix86s;C:\Windows\system32\drivers\ahcix86s.sys [2007-12-19 20:45]
    S4 ErrDev;Microsoft Hardware Error Device Driver;C:\Windows\system32\drivers\errdev.sys [2008-01-21 05:23]
    S4 MegaSR;MegaSR;C:\Windows\system32\drivers\megasr.sys [2008-01-21 05:23]
    .
    .
    ------- Supplementary Scan -------
    .
    FireFox -: Profile - C:\Users\mönkkönen\AppData\Roaming\Mozilla\Firefox\Profiles\4kr9zti9.default\
    FireFox -: prefs.js - STARTUP.HOMEPAGE - google.fi
    FF -: plugin - D:\Ohjelmia\Mozilla\plugins\npnul32.dll
    .

    **************************************************************************

    catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-08-28 20:44:50
    Windows 6.0.6001 Service Pack 1 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************
    .
    Completion time: 2008-08-28 20:48:17
    ComboFix-quarantined-files.txt 2008-08-28 17:47:47
    ComboFix2.txt 2008-08-26 17:51:12

    Pre-Run: 141,638,037,504 tavua vapaana
    Post-Run: 141,305,159,680 tavua vapaana

    711 --- E O F --- 2008-08-27 15:32:34
     
    hrjanske, 28.08.2008
    #17
  19. hrjanske

    hrjanske Member

    Liittynyt:
    26.08.2008
    Viestejä:
    11
    Kiitokset:
    0
    Pisteet:
    11
    nyt on nekin puhdistettu. alkaa taas toimi aika hyvin. enään mitään tehtävää?
     
    hrjanske, 28.08.2008
    #18
  20. Hujo

    Hujo Guest

    Tarkista koneesi F-Securen online skannerilla

    Huom, skanneri toimii vain Internet Explorer selaimella

    * Lue sivun ohjeet huolella läpi
    * Klikkaa Start scanning
    * Mikäli saat Internet Explorer -suojausvaroituksen, klikkaa Asenna
    * Klikkaa Accept
    * Klikkaa Custom Scan
    * Säädä asetukset seuraavasti

    o "Virus Scan Option" kohdasta valitse Scan whole system
    o "Other Scan Option" kohdasta valitse Scan All Files
    o Valitse Scan whole system for rootkits
    o Valitse Scan whole system for spyware
    o Laita ruksi kohtaan Scan inside archives
    o Varmista että Use advanced heuristics on valittuna

    * Klikkaa Start
    * Skannaus käynnistyy kun tarvittavat tiedostot/päivitykset on ladattu
    * Odota kärsivällisesti
    * Kun sakannaus on suoritettu, klikkaa Automatic cleaning
    * Klikkaa Show Report
    * Raportti aukeaa selaimessa, kopioi teksti kokonaan
    * Liitä kopioitu teksti esim. muistioon tai Wordiin ja tallenna työpöydälle
    * Voit sulkea skannerin
    * Lähetä raportti viestiketjuusi

    Älä tee muuta sillä voi aiheuttaa koneen jumiutumisen
     
    Moderaattorin viimeksi muokkaama: 28.08.2008
    Hujo, 28.08.2008
    #19

Jaa tämä sivu