Olimpo Informatico

[mito74]

il mio antivirus AVANST mi ha trovato questo file AMVO.EXE- amvo1 mi dice che potrebbe essere un virus ma non riesce ad eliminarlo
mi date un consiglio???
ho già cercato alcune informazioni ma il problema permane

aiuto!!!!

grazie

[bdoriano]

Ciao mito74 e benvenuto,

Procedi con queste operazioni iniziali:

• Pulisci i files temporanei con ATF-Cleaner e/o CCleaner
  
• Segui le istruzioni di questo topic per usare MBAM.
  
• scarica e installa la versione Free di SuperAntispyware:
  la configuri come è stato spiegato a un'altra utente in questa discussione
  esegui una scansione completa del sistema
  
• Segui le istruzioni di questo topic per postare il log di HiJackThis.
  
• Riferisci con un nuovo messaggio in questa discussione dell'esito: se ci sono stati problemi particolari, ecc. ecc. E riporta:
  
  • Carica il log di MBAM su WikiSend e posta il Forum Link che ti viene assegnato.
    
  • Carica il log di SuperAntiSpyware su WikiSend e posta il Forum Link che ti viene assegnato.
    
  • Carica il log di HiJackThis su WikiSend e posta il Forum Link che ti viene assegnato.

PS: se vuoi, puoi presentarti qui

[mito74]

ok stasera proverò a seguite i consigli
un'altra domanda
quando mi connetto a internet con adsl e lancio IE7 inizia a caricare la pagina di google ma me la lascia in bianco e non riesco ad entrare in nessun sito
è sempre lo stesso virus che mi da il problema o dipende da altro

grazie

[mito74]

l'antivirus mi ha ora trovato il file 2fiji.com

riporto il file di malw.
antispy tutto ok
il problema persiste
help


Malwarebytes' Anti-Malware 1.30
Versione del database: 1306
Windows 5.1.2600 Service Pack 2

23/10/2008 21.34.29
mbam-log-2008-10-23 (21-34-29).txt

Tipo di scansione: Scansione completa (C:\|D:\|)
Elementi scansionati: 17462
Tempo trascorso: 1 minute(s), 19 second(s)

Processi delle memoria infetti: 0
Moduli della memoria infetti: 0
Chiavi di registro infette: 0
Valori di registro infetti: 1
Elementi dato del registro infetti: 0
Cartelle infette: 0
File infetti: 1

Processi delle memoria infetti:
(Nessun elemento malevolo rilevato)

Moduli della memoria infetti:
(Nessun elemento malevolo rilevato)

Chiavi di registro infette:
(Nessun elemento malevolo rilevato)

Valori di registro infetti:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\kamsoft (Trojan.FakeAlert.H) -> Quarantined and deleted successfully.

Elementi dato del registro infetti:
(Nessun elemento malevolo rilevato)

Cartelle infette:
(Nessun elemento malevolo rilevato)

File infetti:
C:\WINDOWS\system32\ckvo.exe (Trojan.FakeAlert.H) -> Quarantined and deleted successfully.

[bdoriano]

Manca il log di Hijackthis.

Disinstalla Avast e procedi con questa scansione con Kaspersky.
Alla fine, posta il log di Kaspersky con un log aggiornato di Hijackthis.

[mito74]

allego i seguenti log (HijackThis e combofix)
spero di essere riuscito a sistemare tutto
adesso riesco a vedere i file nascosti e ho eliminato il file 2fiji.com
attendo conferma che tutto è ok

grazie ancora !!!!!!

HijackThis log

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22.29.58, on 24/10/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmi\Alwil Software\Avast4\aswUpdSv.exe
C:\Programmi\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programmi\File comuni\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Programmi\File comuni\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmi\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\ATK0100\Hcontrol.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\Progra~1\ASUS\Power4 Gear\BatteryLife.exe
C:\WINDOWS\System32\sistray.EXE
C:\WINDOWS\System32\khooker.exe
C:\Programmi\Synaptics\SynTP\SynTPLpr.exe
C:\Programmi\Synaptics\SynTP\SynTPEnh.exe
C:\Programmi\File comuni\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmi\Messenger\msmsgs.exe
C:\WINDOWS\ATK0100\ATKOSD.exe
C:\Programmi\File comuni\Ahead\lib\NMBgMonitor.exe
C:\Programmi\Asus\Asus ChkMail\ChkMail.exe
C:\Programmi\Asus\ASUS Hotkey\Hotkey.exe
C:\Programmi\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Programmi\Alwil Software\Avast4\ashMaiSv.exe
C:\Programmi\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\explorer.exe
C:\hijackthis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.it/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (file missing)
O4 - HKLM\..\Run: [Hcontrol] C:\WINDOWS\ATK0100\Hcontrol.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [Power_Gear] C:\Progra~1\ASUS\Power4 Gear\BatteryLife.exe 1
O4 - HKLM\..\Run: [SiS Tray] C:\WINDOWS\System32\sistray.EXE
O4 - HKLM\..\Run: [SiS KHooker] C:\WINDOWS\System32\khooker.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Programmi\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Programmi\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Programmi\File comuni\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Programmi\File comuni\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Programmi\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Programmi\File comuni\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [amva] C:\WINDOWS\system32\amvo.exe
O4 - HKCU\..\Run: [kamsoft] C:\WINDOWS\system32\ckvo.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVIZIO DI RETE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: ASUS ChkMail.lnk = C:\Programmi\Asus\Asus ChkMail\ChkMail.exe
O4 - Global Startup: Hotkey.lnk = C:\Programmi\Asus\ASUS Hotkey\Hotkey.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programmi\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Programmi\File comuni\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Programmi\File comuni\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: DSLMON.lnk = C:\Programmi\SAGEM\SAGEM F@st 800-840\dslmon.exe
O4 - Global Startup: Tasto di scelta rapida per l'avvio di AutoCAD.lnk = C:\Programmi\File comuni\Autodesk Shared\acstart16.exe
O4 - Global Startup: Avvio veloce di Adobe Reader.lnk = C:\Programmi\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.asus.com.tw
O16 - DPF: {1F83CD9E-505E-4F87-BECE-0832A763E36F} (Image Uploader 3.0 Control) - http://www.mypixmania.com/it/it/importer/MypixUploader.cab
O16 - DPF: {7F8B1F27-AE54-479D-AACF-0A7B2334E7EE} (HTTPUplListX Control) - http://stampafoto.mediaworld.it/HTTPUplList.cab
O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - http://www.pixdiscount.it/clients/uploader_v2.1.0.56.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://www.adobe.com/products/acrobat/nos/gp.cab
O16 - DPF: {FB90BA05-66E6-4C56-BCD3-D65B0F7EBA39} (Foto.com SpeedUploader 1.0 Control) - http://express.foto.com/SFUploader/SpeedUploader.cab
O20 - Winlogon Notify: !SASWinLogon - C:\Programmi\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Programmi\File comuni\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Programmi\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Autodesk Licensing Service - Autodesk, Inc. - C:\Programmi\File comuni\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Programmi\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Programmi\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Programmi\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Utilità di pianificazione di LiveUpdate automatico - Symantec Corporation - C:\Programmi\Symantec\LiveUpdate\ALUSchedulerSvc.exe

--
End of file - 7116 bytes



combofix log
ComboFix 08-10-22.05 - matteo monica 2008-10-24 22.35.32.1 - FAT32x86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1040.18.227 [GMT 2:00]
Eseguito da: C:\Documents and Settings\matteo monica\Desktop\pc2\ComboFix.exe
* Creato nuovo punto di ripristino

ATENÇÃO - ESTA MAQUINA NAO TEM A CONSOLE DE RECUPERAÇÃO INSTALADA !!
.

((((((((((((((((((((((((((((((((((((( Altre eliminazioni )))))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\autorun.inf
C:\WINDOWS\system32\_000006_.tmp.dll
C:\WINDOWS\system32\ckvo.exe
C:\WINDOWS\system32\ckvo0.dll
D:\Autorun.inf

.
((((((((((((((((((((((((( Files Creati Da 2008-09-24 al 2008-10-24 )))))))))))))))))))))))))))))))))))
.

2008-10-24 20:44 . 2008-10-24 20:44 <DIR> d-------- C:\hijackthis
2008-10-23 23:01 . 2008-10-23 23:01 <DIR> d-------- C:\Programmi\SUPERAntiSpyware
2008-10-23 23:01 . 2008-10-23 23:01 <DIR> d-------- C:\Documents and Settings\matteo monica\Dati applicazioni\SUPERAntiSpyware.com
2008-10-23 23:01 . 2008-10-23 23:01 <DIR> d-------- C:\Documents and Settings\All Users\Dati applicazioni\SUPERAntiSpyware.com
2008-10-23 23:00 . 2008-10-23 23:00 <DIR> d-------- C:\Programmi\File comuni\Wise Installation Wizard
2008-10-23 21:31 . 2008-10-23 21:31 <DIR> d-------- C:\Programmi\Malwarebytes' Anti-Malware
2008-10-23 21:31 . 2008-10-23 21:31 <DIR> d-------- C:\Documents and Settings\matteo monica\Dati applicazioni\Malwarebytes
2008-10-23 21:31 . 2008-10-23 21:31 <DIR> d-------- C:\Documents and Settings\All Users\Dati applicazioni\Malwarebytes
2008-10-23 21:31 . 2008-10-22 16:10 38,496 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2008-10-23 21:31 . 2008-10-22 16:10 15,504 --a------ C:\WINDOWS\system32\drivers\mbam.sys
2008-10-23 21:27 . 2003-06-25 16:05 266,360 --a------ C:\WINDOWS\system32\TweakUI.exe
2008-10-23 21:27 . 2002-06-21 15:09 160,217 --a------ C:\WINDOWS\system32\PowerToysLicense.rtf
2008-10-22 23:56 . 2008-10-18 16:08 104,758 -r-hs---- C:\2fiji.com
2008-10-21 21:56 . 2008-10-21 21:56 <DIR> d-------- C:\Programmi\Avira
2008-10-21 21:56 . 2008-10-21 21:56 <DIR> d-------- C:\Documents and Settings\All Users\Dati applicazioni\Avira
2008-10-03 18:58 . 2008-10-03 18:58 6,066,176 --------- C:\WINDOWS\system32\SETC.tmp
2008-10-03 18:58 . 2008-10-03 18:58 6,066,176 --a------ C:\WINDOWS\system32\SET33.tmp
2008-09-24 22:12 . 2008-09-24 22:12 <DIR> d-------- C:\WINDOWS\system32\CatRoot_bak

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-10-03 16:58 6,066,176 ------w C:\WINDOWS\system32\dllcache\ieframe.dll
2008-09-15 15:38 1,846,016 ----a-w C:\WINDOWS\system32\win32k.sys
2008-09-15 15:38 1,846,016 ------w C:\WINDOWS\system32\dllcache\win32k.sys
2008-08-28 10:04 333,056 ----a-w C:\WINDOWS\system32\drivers\srv.sys
2008-08-28 10:04 333,056 ------w C:\WINDOWS\system32\dllcache\srv.sys
2008-08-27 08:57 3,593,216 ----a-w C:\WINDOWS\system32\SET2B.tmp
2008-08-27 08:57 3,593,216 ----a-w C:\WINDOWS\system32\dllcache\mshtml.dll
2008-08-25 08:39 70,656 ------w C:\WINDOWS\system32\dllcache\ie4uinit.exe
2008-08-25 08:38 13,824 ------w C:\WINDOWS\system32\dllcache\ieudinit.exe
2008-08-23 05:56 635,848 ------w C:\WINDOWS\system32\dllcache\iexplore.exe
2008-08-23 05:54 161,792 ----a-w C:\WINDOWS\system32\dllcache\ieakui.dll
2008-08-14 13:43 2,184,064 ----a-w C:\WINDOWS\system32\ntoskrnl.exe
2008-08-14 13:43 2,184,064 ------w C:\WINDOWS\system32\dllcache\ntoskrnl.exe
2008-08-14 13:42 2,139,648 ------w C:\WINDOWS\system32\dllcache\ntkrnlmp.exe
2008-08-14 13:42 2,061,440 ----a-w C:\WINDOWS\system32\ntkrnlpa.exe
2008-08-14 13:42 2,061,440 ------w C:\WINDOWS\system32\dllcache\ntkrnlpa.exe
2008-08-14 13:42 2,019,328 ------w C:\WINDOWS\system32\dllcache\ntkrpamp.exe
2008-08-14 09:51 138,368 ------w C:\WINDOWS\system32\dllcache\afd.sys
2007-07-22 13:09 88,088 ----a-w C:\Documents and Settings\matteo monica\Dati applicazioni\GDIPFONTCACHEV1.DAT
.

((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* i valori vuoti & legittimi/default non sono visualizzati.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-19 15360]
"MSMSGS"="C:\Programmi\Messenger\msmsgs.exe" [2004-10-13 1694208]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Programmi\File comuni\Ahead\lib\NMBgMonitor.exe" [2005-09-16 94208]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Hcontrol"="C:\WINDOWS\ATK0100\Hcontrol.exe" [2003-05-26 65536]
"Power_Gear"="C:\Progra~1\ASUS\Power4 Gear\BatteryLife.exe" [2002-11-29 73728]
"SiS Tray"="C:\WINDOWS\System32\sistray.EXE" [2002-11-17 303104]
"SiS KHooker"="C:\WINDOWS\System32\khooker.exe" [2002-09-24 290816]
"SynTPLpr"="C:\Programmi\Synaptics\SynTP\SynTPLpr.exe" [2003-05-08 126976]
"SynTPEnh"="C:\Programmi\Synaptics\SynTP\SynTPEnh.exe" [2003-05-08 561152]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 155648]
"Symantec PIF AlertEng"="C:\Programmi\File comuni\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2007-03-12 517768]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2008-07-19 78008]
"SoundMan"="SOUNDMAN.EXE" [2003-05-14 C:\WINDOWS\SOUNDMAN.EXE]
"AGRSMMSG"="AGRSMMSG.exe" [2003-05-07 C:\WINDOWS\AGRSMMSG.exe]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2004-08-19 15360]

C:\Documents and Settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\
ASUS ChkMail.lnk - C:\Programmi\Asus\Asus ChkMail\ChkMail.exe [2006-09-24 40960]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{C5F43BEF-CE2F-46D8-AFE6-A647BACD1F09}"= "C:\WINDOWS\system32\Bitkv0.dll" [2007-06-13 69632]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "C:\Programmi\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2008-07-23 16:28 352256 C:\Programmi\SUPERAntiSpyware\SASWINLO.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.GJPG"= GJPG.DLL

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"AntiVirusOverride"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=

R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-07-19 78416]
R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-07-19 20560]
R2 Utilità di pianificazione di LiveUpdate automatico;Utilità di pianificazione di LiveUpdate automatico;C:\Programmi\Symantec\LiveUpdate\ALUSchedulerSvc.exe [2006-08-03 100032]
R3 WBMS;Winbond Memory Stick Storage (MS) Device Driver;C:\WINDOWS\system32\Drivers\WBMS.SYS [2003-05-07 30208]
R3 WBSD;Winbond Secure Digital Storage (SD/MMC) Device Driver;C:\WINDOWS\system32\Drivers\WBSD.SYS [2003-05-07 25600]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9114f2bc-4d6c-11db-816c-000ea673f435}]
\Shell\AutoRun\command - J:\cqdis.cmd
\Shell\explore\Command - J:\cqdis.cmd
\Shell\open\Command - J:\cqdis.cmd

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b05a48da-9c6a-11dd-8292-000ea673f435}]
\Shell\AutoRun\command - H:\cqdis.cmd
\Shell\explore\Command - H:\cqdis.cmd
\Shell\open\Command - H:\cqdis.cmd
.
- - - - ORFÃOS REMOVIDOS - - - -

HKCU-Run-kamsoft - C:\WINDOWS\system32\ckvo.exe
HKLM-Run-NWEReboot - (no file)


.
------- Supplementare di scansione -------
.
R0 -: HKCU-Main,Start Page = hxxp://www.google.it/
O8 -: E&sporta in Microsoft Excel - C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000

O16 -: DirectAnimation Java Classes - file://C:\WINDOWS\Java\classes\dajava.cab
C:\WINDOWS\Downloaded Program Files\DirectAnimation Java Classes.osd

O16 -: Microsoft XML Parser for Java - file://C:\WINDOWS\Java\classes\xmldso.cab
C:\WINDOWS\Downloaded Program Files\Microsoft XML Parser for Java.osd

O16 -: {1F83CD9E-505E-4F87-BECE-0832A763E36F} - hxxp://www.mypixmania.com/it/it/importer/MypixUploader.cab
C:\WINDOWS\Downloaded Program Files\MypixUploader.inf
C:\WINDOWS\system32\unicows.dll
C:\WINDOWS\Downloaded Program Files\MypixUploader.ocx

O16 -: {7F8B1F27-AE54-479D-AACF-0A7B2334E7EE} - hxxp://stampafoto.mediaworld.it/HTTPUplList.cab
C:\WINDOWS\Downloaded Program Files\HTTPUplList.ocx

O16 -: {FB90BA05-66E6-4C56-BCD3-D65B0F7EBA39} - hxxp://express.foto.com/SFUploader/SpeedUploader.cab
C:\WINDOWS\Downloaded Program Files\SpeedUploader.inf
C:\WINDOWS\system32\unicows.dll
C:\WINDOWS\Downloaded Program Files\SpeedUploader.ocx
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-10-24 22:41:05
Windows 5.1.2600 Service Pack 2 FAT NTAPI

scansione processi nascosti ...

scansione entrate autostart nascoste ...

Scansione files nascosti ...

Scansione completata con successo
Files nascosti: 0

**************************************************************************
.
------------------------ Altri processi in esecuzione ------------------------
.
C:\PROGRAMMI\ALWIL SOFTWARE\AVAST4\ASWUPDSV.EXE
C:\PROGRAMMI\ALWIL SOFTWARE\AVAST4\ASHSERV.EXE
C:\PROGRAMMI\FILE COMUNI\MICROSOFT SHARED\VS7DEBUG\MDM.EXE
C:\PROGRAMMI\ALWIL SOFTWARE\AVAST4\ASHMAISV.EXE
C:\PROGRAMMI\ALWIL SOFTWARE\AVAST4\ASHWEBSV.EXE
C:\WINDOWS\ATK0100\ATKOSD.exe
C:\Programmi\Asus\ASUS Hotkey\Hotkey.exe
C:\Programmi\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Programmi\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\WINDOWS\System32\verclsid.exe
.
**************************************************************************
.
Ora fine scansione: 2008-10-24 22:44:49 - macchina è stato riavviato
ComboFix-quarantined-files.txt 2008-10-24 20:44:40

Pre-Run: 7.820.525.568 byte disponibili
Post-Run: 7,893,139,456 byte disponibili

163

[bdoriano]

Veramente, avevo chiesto una scansione con Kaspersky e il relativo log...

Fai queste operazioni, nell'ordine indicato:

1. Apri il Blocco note e crea un file di testo con le seguenti istruzioni:
   

   Codice:

   File:: C:\2fiji.com Registry:: [-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9114f2bc-4d6c-11db-816c-000ea673f435}] [-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b05a48da-9c6a-11dd-8292-000ea673f435}]

   
   Salva il file sul desktop con il nome CFScript.txt e trascinalo sull'icona di ComboFix, come indicato in seguito:
   
   Attendi pazientemente la fine dei lavori senza toccare tastiera, mouse o altro.
   Posta il log aggiornato di combofix.
   
   
2. Fai questa scansione con Kaspersky
   
   
3. Hai qualche periferica USB (chiavetta o HD esterno) infetta, dobbiamo disabilitarne l'avvio automatico all'inserimento per controllarle.
   Per farlo in maniera semplice, scaricati il programma TweakUI da questa pagina e installalo.
   Una volta installato, eseguilo e procedi con questi passaggi:
   

   Citazione:

   Espandi la sezione My Computer Espandi la sottosezione Autoplay Spostati in Types Togli il segno di spunta a Enable Autoplay for removable drives Clicca su Apply Chiudi TweakUI PS: Con Espandi intendo: clicca sul simbolo [+] di fianco alle voci che ti ho indicato

   
   Da questo momento tutti gli apparati USB smetteranno di avviarsi automaticamente.
   Inserisci le tue chiavette e fai un check delle stesse con il tuo antivirus.
   Quando sei sicuro che tutto è a posto, puoi riabilitare l'avvio automatico, rifacendo lo stesso percorso che ti ho indicato.
   
   
4. Segui le istruzioni di questo topic per postare il log di hijackthis.

[mito74]

ok questa sera procedo seguento le istruzioni
grazie ancora

[mito74]

ecco i log che mi hai chiesto
combofix
ComboFix 08-10-22.05 - matteo monica 2008-10-28 20.55.03.2 - FAT32x86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1040.18.190 [GMT 1:00]
Eseguito da: C:\Documents and Settings\matteo monica\Desktop\ComboFix.exe
Interruttori di comando utilizzati :: C:\Documents and Settings\matteo monica\Desktop\CFScript.txt
* Creato nuovo punto di ripristino

ATENÇÃO - ESTA MAQUINA NAO TEM A CONSOLE DE RECUPERAÇÃO INSTALADA !!

FILE ::
C:\2fiji.com
.

((((((((((((((((((((((((( Files Creati Da 2008-09-28 al 2008-10-28 )))))))))))))))))))))))))))))))))))
.

2008-10-26 16:13 . 2008-10-26 16:13 <DIR> d-------- C:\Programmi\NOS
2008-10-26 16:13 . 2008-10-26 16:13 <DIR> d-------- C:\Documents and Settings\All Users\Dati applicazioni\NOS
2008-10-26 16:03 . 2008-08-27 10:57 3,593,216 --------- C:\WINDOWS\system32\SET32.tmp
2008-10-26 16:03 . 2008-08-26 09:57 459,264 --------- C:\WINDOWS\system32\SET41.tmp
2008-10-26 16:03 . 2008-08-26 09:57 383,488 --------- C:\WINDOWS\system32\SET45.tmp
2008-10-26 16:03 . 2008-10-15 17:57 332,800 --------- C:\WINDOWS\system32\SETE.tmp
2008-10-26 16:03 . 2008-10-15 17:57 332,800 --a------ C:\WINDOWS\system32\SET27.tmp
2008-10-26 16:03 . 2008-08-26 09:57 63,488 --------- C:\WINDOWS\system32\SET4C.tmp
2008-10-26 16:03 . 2008-08-26 09:57 52,224 --------- C:\WINDOWS\system32\SET34.tmp
2008-10-24 20:44 . 2008-10-24 20:44 <DIR> d-------- C:\hijackthis
2008-10-23 23:01 . 2008-10-23 23:01 <DIR> d-------- C:\Programmi\SUPERAntiSpyware
2008-10-23 23:01 . 2008-10-23 23:01 <DIR> d-------- C:\Documents and Settings\matteo monica\Dati applicazioni\SUPERAntiSpyware.com
2008-10-23 23:01 . 2008-10-23 23:01 <DIR> d-------- C:\Documents and Settings\All Users\Dati applicazioni\SUPERAntiSpyware.com
2008-10-23 23:00 . 2008-10-23 23:00 <DIR> d-------- C:\Programmi\File comuni\Wise Installation Wizard
2008-10-23 21:31 . 2008-10-23 21:31 <DIR> d-------- C:\Programmi\Malwarebytes' Anti-Malware
2008-10-23 21:31 . 2008-10-23 21:31 <DIR> d-------- C:\Documents and Settings\matteo monica\Dati applicazioni\Malwarebytes
2008-10-23 21:31 . 2008-10-23 21:31 <DIR> d-------- C:\Documents and Settings\All Users\Dati applicazioni\Malwarebytes
2008-10-23 21:31 . 2008-10-22 16:10 38,496 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2008-10-23 21:31 . 2008-10-22 16:10 15,504 --a------ C:\WINDOWS\system32\drivers\mbam.sys
2008-10-23 21:27 . 2003-06-25 16:05 266,360 --a------ C:\WINDOWS\system32\TweakUI.exe
2008-10-23 21:27 . 2002-06-21 15:09 160,217 --a------ C:\WINDOWS\system32\PowerToysLicense.rtf
2008-10-21 21:56 . 2008-10-21 21:56 <DIR> d-------- C:\Programmi\Avira
2008-10-21 21:56 . 2008-10-21 21:56 <DIR> d-------- C:\Documents and Settings\All Users\Dati applicazioni\Avira
2008-10-03 18:58 . 2008-10-03 18:58 6,066,176 --------- C:\WINDOWS\system32\SETC.tmp
2008-10-03 18:58 . 2008-10-03 18:58 6,066,176 --a------ C:\WINDOWS\system32\SET33.tmp

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-10-15 16:57 332,800 ------w C:\WINDOWS\system32\dllcache\netapi32.dll
2008-10-03 17:58 6,066,176 ------w C:\WINDOWS\system32\dllcache\ieframe.dll
2008-09-15 16:38 1,846,016 ----a-w C:\WINDOWS\system32\win32k.sys
2008-09-15 16:38 1,846,016 ------w C:\WINDOWS\system32\dllcache\win32k.sys
2008-08-28 11:04 333,056 ----a-w C:\WINDOWS\system32\drivers\srv.sys
2008-08-28 11:04 333,056 ------w C:\WINDOWS\system32\dllcache\srv.sys
2008-08-27 09:57 3,593,216 ----a-w C:\WINDOWS\system32\SET2B.tmp
2008-08-27 09:57 3,593,216 ----a-w C:\WINDOWS\system32\dllcache\mshtml.dll
2008-08-25 09:39 70,656 ------w C:\WINDOWS\system32\dllcache\ie4uinit.exe
2008-08-25 09:38 13,824 ------w C:\WINDOWS\system32\dllcache\ieudinit.exe
2008-08-23 06:56 635,848 ------w C:\WINDOWS\system32\dllcache\iexplore.exe
2008-08-23 06:54 161,792 ----a-w C:\WINDOWS\system32\dllcache\ieakui.dll
2008-08-14 14:43 2,184,064 ----a-w C:\WINDOWS\system32\ntoskrnl.exe
2008-08-14 14:43 2,184,064 ------w C:\WINDOWS\system32\dllcache\ntoskrnl.exe
2008-08-14 14:42 2,139,648 ------w C:\WINDOWS\system32\dllcache\ntkrnlmp.exe
2008-08-14 14:42 2,061,440 ----a-w C:\WINDOWS\system32\ntkrnlpa.exe
2008-08-14 14:42 2,061,440 ------w C:\WINDOWS\system32\dllcache\ntkrnlpa.exe
2008-08-14 14:42 2,019,328 ------w C:\WINDOWS\system32\dllcache\ntkrpamp.exe
2008-08-14 10:51 138,368 ------w C:\WINDOWS\system32\dllcache\afd.sys
2007-07-22 14:09 88,088 ----a-w C:\Documents and Settings\matteo monica\Dati applicazioni\GDIPFONTCACHEV1.DAT
.

((((((((((((((((((((((((((((( snapshot@2008-10-24_22.44.03.59 )))))))))))))))))))))))))))))))))))))))))
.
+ 2004-11-17 17:41:12 352,768 ------w C:\WINDOWS\$hf_mig$\KB873339\SP2QFE\hypertrm.dll
+ 2004-10-14 09:35:26 8,704 ------w C:\WINDOWS\$hf_mig$\KB873339\spmsg.dll
+ 2004-10-14 09:36:22 171,008 ------w C:\WINDOWS\$hf_mig$\KB873339\spuninst.exe
+ 2004-10-14 09:36:22 21,504 ------w C:\WINDOWS\$hf_mig$\KB873339\update\spcustom.dll
+ 2004-10-14 09:35:28 662,528 ------w C:\WINDOWS\$hf_mig$\KB873339\update\update.exe
+ 2004-10-28 01:29:32 727,552 ------w C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\lsasrv.dll
+ 2004-10-28 01:15:16 448,128 ------w C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\mrxsmb.sys
+ 2004-10-28 01:14:56 174,592 ------w C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\rdbss.sys
+ 2004-10-14 10:35:26 8,704 ------w C:\WINDOWS\$hf_mig$\KB885835\spmsg.dll
+ 2004-10-14 10:36:22 171,008 ------w C:\WINDOWS\$hf_mig$\KB885835\spuninst.exe
+ 2004-10-14 10:36:22 21,504 ------w C:\WINDOWS\$hf_mig$\KB885835\update\spcustom.dll
+ 2004-10-14 10:35:28 662,528 ------w C:\WINDOWS\$hf_mig$\KB885835\update\update.exe
+ 2004-10-14 10:35:26 8,704 ------w C:\WINDOWS\$hf_mig$\KB885836\spmsg.dll
+ 2004-10-14 10:36:22 171,008 ------w C:\WINDOWS\$hf_mig$\KB885836\spuninst.exe
+ 2004-10-14 10:36:22 21,504 ------w C:\WINDOWS\$hf_mig$\KB885836\update\spcustom.dll
+ 2004-10-14 10:35:28 662,528 ------w C:\WINDOWS\$hf_mig$\KB885836\update\update.exe
+ 2004-09-29 22:31:18 134,912 ------w C:\WINDOWS\$hf_mig$\KB886185\SP2QFE\ipnat.sys
+ 2004-10-14 18:35:26 8,704 ------w C:\WINDOWS\$hf_mig$\KB886185\spmsg.dll
+ 2004-10-14 18:36:20 171,008 ------w C:\WINDOWS\$hf_mig$\KB886185\spuninst.exe
+ 2004-10-14 18:36:20 21,504 ------w C:\WINDOWS\$hf_mig$\KB886185\update\spcustom.dll
+ 2004-10-14 18:35:26 662,528 ------w C:\WINDOWS\$hf_mig$\KB886185\update\update.exe
+ 2004-10-13 16:21:24 1,694,208 ------w C:\WINDOWS\$hf_mig$\KB887472\SP2QFE\msmsgs.exe
+ 2004-10-14 10:35:26 8,704 ------w C:\WINDOWS\$hf_mig$\KB887472\spmsg.dll
+ 2004-10-14 10:36:22 171,008 ------w C:\WINDOWS\$hf_mig$\KB887472\spuninst.exe
+ 2004-10-14 10:36:22 21,504 ------w C:\WINDOWS\$hf_mig$\KB887472\update\spcustom.dll
+ 2004-10-14 10:35:28 662,528 ------w C:\WINDOWS\$hf_mig$\KB887472\update\update.exe
+ 2004-12-07 19:32:22 96,768 ------w C:\WINDOWS\$hf_mig$\KB888302\SP2QFE\srvsvc.dll
+ 2004-11-30 13:47:06 8,704 ------w C:\WINDOWS\$hf_mig$\KB888302\spmsg.dll
+ 2004-11-30 19:22:46 171,008 ------w C:\WINDOWS\$hf_mig$\KB888302\spuninst.exe
+ 2004-11-30 19:22:44 21,504 ------w C:\WINDOWS\$hf_mig$\KB888302\update\spcustom.dll
+ 2004-11-30 13:47:06 662,528 ------w C:\WINDOWS\$hf_mig$\KB888302\update\update.exe
+ 2005-04-22 05:19:50 57,344 ------w C:\WINDOWS\$hf_mig$\KB890046\SP2QFE\agentdpv.dll
+ 2005-05-17 00:44:50 19,968 ------w C:\WINDOWS\$hf_mig$\KB890046\SP2QFE\spru0410.dll
+ 2005-02-24 19:35:44 15,584 ------w C:\WINDOWS\$hf_mig$\KB890046\spmsg.dll
+ 2005-02-24 19:35:44 212,192 ------w C:\WINDOWS\$hf_mig$\KB890046\spuninst.exe
+ 2005-02-24 19:35:42 22,240 ------w C:\WINDOWS\$hf_mig$\KB890046\update\spcustom.dll
+ 2005-02-24 19:35:44 726,240 ------w C:\WINDOWS\$hf_mig$\KB890046\update\update.exe
+ 2005-02-24 19:35:44 391,392 ------w C:\WINDOWS\$hf_mig$\KB890046\update\updspapi.dll
+ 2005-03-02 18:20:04 62,464 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\authz.dll
+ 2005-03-02 18:12:16 2,139,136 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrnlmp.exe
+ 2005-03-02 18:12:16 2,060,672 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrnlpa.exe
+ 2005-03-02 18:12:20 2,018,816 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrpamp.exe
+ 2005-03-02 18:12:26 2,183,296 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe
+ 2005-03-02 18:20:04 578,048 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\user32.dll
+ 2005-03-02 18:12:14 1,836,288 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\win32k.sys
+ 2005-03-02 18:20:04 291,840 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\winsrv.dll
+ 2005-02-24 18:35:44 15,584 ------w C:\WINDOWS\$hf_mig$\KB890859\spmsg.dll
+ 2005-02-24 18:35:44 212,192 ------w C:\WINDOWS\$hf_mig$\KB890859\spuninst.exe
+ 2005-02-24 18:35:42 22,240 ------w C:\WINDOWS\$hf_mig$\KB890859\update\spcustom.dll
+ 2005-02-24 18:35:44 726,240 ------w C:\WINDOWS\$hf_mig$\KB890859\update\update.exe
+ 2005-02-24 18:35:44 391,392 ------w C:\WINDOWS\$hf_mig$\KB890859\update\updspapi.dll
+ 2004-11-30 13:47:06 8,704 ------w C:\WINDOWS\$hf_mig$\KB891781\spmsg.dll
+ 2004-11-30 19:22:46 171,008 ------w C:\WINDOWS\$hf_mig$\KB891781\spuninst.exe
+ 2004-11-30 19:22:44 21,504 ------w C:\WINDOWS\$hf_mig$\KB891781\update\spcustom.dll
+ 2004-11-30 13:47:06 662,528 ------w C:\WINDOWS\$hf_mig$\KB891781\update\update.exe
+ 2005-07-08 16:30:10 249,344 ------w C:\WINDOWS\$hf_mig$\KB893756\SP2QFE\tapisrv.dll
+ 2005-02-24 19:35:44 15,584 ------w C:\WINDOWS\$hf_mig$\KB893756\spmsg.dll
+ 2005-02-24 19:35:44 212,192 ------w C:\WINDOWS\$hf_mig$\KB893756\spuninst.exe
+ 2005-07-07 18:27:08 30,720 ------w C:\WINDOWS\$hf_mig$\KB893756\update\arpidfix.exe
+ 2005-02-24 19:35:42 22,240 ------w C:\WINDOWS\$hf_mig$\KB893756\update\spcustom.dll
+ 2005-02-24 19:35:44 726,240 ------w C:\WINDOWS\$hf_mig$\KB893756\update\update.exe
+ 2005-02-24 19:35:44 391,392 ------w C:\WINDOWS\$hf_mig$\KB893756\update\updspapi.dll
+ 2005-04-28 19:35:56 1,286,144 ------w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\ole32.dll
+ 2005-04-28 19:35:56 74,752 ------w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\olecli32.dll
+ 2005-04-28 19:35:56 37,376 ------w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\olecnv32.dll
+ 2005-04-28 19:35:56 396,288 ------w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\rpcss.dll
+ 2005-02-24 19:35:44 15,584 ------w C:\WINDOWS\$hf_mig$\KB894391\spmsg.dll
+ 2005-02-24 19:35:44 212,192 ------w C:\WINDOWS\$hf_mig$\KB894391\spuninst.exe
+ 2005-02-24 19:35:42 22,240 ------w C:\WINDOWS\$hf_mig$\KB894391\update\spcustom.dll
+ 2005-02-24 19:35:44 726,240 ------w C:\WINDOWS\$hf_mig$\KB894391\update\update.exe
+ 2005-02-24 19:35:44 391,392 ------w C:\WINDOWS\$hf_mig$\KB894391\update\updspapi.dll
+ 2005-05-26 23:26:50 10,752 ------w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\hh.exe
+ 2005-05-27 02:10:44 41,472 ------w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\hhsetup.dll
+ 2005-05-27 02:10:44 155,136 ------w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\itircl.dll
+ 2005-05-27 02:10:44 137,216 ------w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\itss.dll
+ 2005-02-24 19:35:44 15,584 ------w C:\WINDOWS\$hf_mig$\KB896358\spmsg.dll
+ 2005-02-24 19:35:44 212,192 ------w C:\WINDOWS\$hf_mig$\KB896358\spuninst.exe
+ 2005-02-24 19:35:42 22,240 ------w C:\WINDOWS\$hf_mig$\KB896358\update\spcustom.dll
+ 2005-02-24 19:35:44 726,240 ------w C:\WINDOWS\$hf_mig$\KB896358\update\update.exe
+ 2005-02-24 19:35:44 391,392 ------w C:\WINDOWS\$hf_mig$\KB896358\update\updspapi.dll
+ 2005-06-11 00:17:14 57,856 ------w C:\WINDOWS\$hf_mig$\KB896423\SP2QFE\spoolsv.exe
+ 2005-02-24 19:35:44 15,584 ------w C:\WINDOWS\$hf_mig$\KB896423\spmsg.dll
+ 2005-02-24 19:35:44 212,192 ------w C:\WINDOWS\$hf_mig$\KB896423\spuninst.exe
+ 2005-06-29 15:54:32 30,720 ------w C:\WINDOWS\$hf_mig$\KB896423\update\arpidfix.exe
+ 2005-02-24 19:35:42 22,240 ------w C:\WINDOWS\$hf_mig$\KB896423\update\spcustom.dll
+ 2005-02-24 19:35:44 726,240 ------w C:\WINDOWS\$hf_mig$\KB896423\update\update.exe
+ 2005-02-24 19:35:44 391,392 ------w C:\WINDOWS\$hf_mig$\KB896423\update\updspapi.dll
+ 2005-10-06 03:19:14 280,064 ------w C:\WINDOWS\$hf_mig$\KB896424\SP2QFE\gdi32.dll
+ 2005-10-06 03:11:38 1,839,488 ------w C:\WINDOWS\$hf_mig$\KB896424\SP2QFE\win32k.sys
+ 2005-02-24 19:35:44 15,584 ------w C:\WINDOWS\$hf_mig$\KB896424\spmsg.dll
+ 2005-02-24 19:35:44 212,192 ------w C:\WINDOWS\$hf_mig$\KB896424\spuninst.exe
+ 2005-10-05 15:39:46 30,720 ------w C:\WINDOWS\$hf_mig$\KB896424\update\arpidfix.exe
+ 2005-02-24 19:35:42 22,240 ------w C:\WINDOWS\$hf_mig$\KB896424\update\spcustom.dll
+ 2005-02-24 19:35:44 726,240 ------w C:\WINDOWS\$hf_mig$\KB896424\update\update.exe
+ 2005-02-24 19:35:44 391,392 ------w C:\WINDOWS\$hf_mig$\KB896424\update\updspapi.dll
+ 2005-05-11 02:32:38 77,824 ------w C:\WINDOWS\$hf_mig$\KB896428\SP2QFE\telnet.exe
+ 2005-02-24 19:35:44 15,584 ------w C:\WINDOWS\$hf_mig$\KB896428\spmsg.dll
+ 2005-02-24 19:35:44 212,192 ------w C:\WINDOWS\$hf_mig$\KB896428\spuninst.exe
+ 2005-02-24 19:35:42 22,240 ------w C:\WINDOWS\$hf_mig$\KB896428\update\spcustom.dll
+ 2005-02-24 19:35:44 726,240 ------w C:\WINDOWS\$hf_mig$\KB896428\update\update.exe
+ 2005-02-24 19:35:44 391,392 ------w C:\WINDOWS\$hf_mig$\KB896428\update\updspapi.dll
+ 2005-02-25 03:35:42 15,584 ------w C:\WINDOWS\$hf_mig$\KB898461\spmsg.dll
+ 2005-02-25 03:35:42 212,192 ------w C:\WINDOWS\$hf_mig$\KB898461\spuninst.exe
+ 2005-02-25 03:35:42 22,752 ------w C:\WINDOWS\$hf_mig$\KB898461\spupdsvc.exe
+ 2005-02-25 03:35:42 22,240 ------w C:\WINDOWS\$hf_mig$\KB898461\update\spcustom.dll
+ 2005-02-25 03:35:42 726,240 ------w C:\WINDOWS\$hf_mig$\KB898461\update\update.exe
+ 2005-02-25 03:35:44 391,392 ------w C:\WINDOWS\$hf_mig$\KB898461\update\updspapi.dll
+ 2005-06-15 17:48:50 297,984 ------w C:\WINDOWS\$hf_mig$\KB899587\SP2QFE\kerberos.dll
+ 2005-02-24 19:35:44 15,584 ------w C:\WINDOWS\$hf_mig$\KB899587\spmsg.dll
+ 2005-02-24 19:35:44 212,192 ------w C:\WINDOWS\$hf_mig$\KB899587\spuninst.exe
+ 2005-06-29 15:54:32 30,720 ------w C:\WINDOWS\$hf_mig$\KB899587\update\arpidfix.exe
+ 2005-02-24 19:35:42 22,240 ------w C:\WINDOWS\$hf_mig$\KB899587\update\spcustom.dll
+ 2005-02-24 19:35:44 726,240 ------w C:\WINDOWS\$hf_mig$\KB899587\update\update.exe
+ 2005-02-24 19:35:44 391,392 ------w C:\WINDOWS\$hf_mig$\KB899587\update\updspapi.dll
+ 2005-06-10 04:06:02 139,528 ------w C:\WINDOWS\$hf_mig$\KB899591\SP2QFE\rdpwd.sys
+ 2005-02-24 19:35:44 15,584 ------w C:\WINDOWS\$hf_mig$\KB899591\spmsg.dll
+ 2005-02-24 19:35:44 212,192 ------w C:\WINDOWS\$hf_mig$\KB899591\spuninst.exe
+ 2005-06-29 15:54:32 30,720 ------w C:\WINDOWS\$hf_mig$\KB899591\update\arpidfix.exe
+ 2005-02-24 19:35:42 22,240 ------w C:\WINDOWS\$hf_mig$\KB899591\update\spcustom.dll
+ 2005-02-24 19:35:44 726,240 ------w C:\WINDOWS\$hf_mig$\KB899591\update\update.exe
+ 2005-02-24 19:35:44 391,392 ------w C:\WINDOWS\$hf_mig$\KB899591\update\updspapi.dll
+ 2006-02-15 00:30:08 142,464 ------w C:\WINDOWS\$hf_mig$\KB900485\SP2QFE\aec.sys
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB900485\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB900485\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB900485\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB900485\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB900485\update\updspapi.dll
+ 2005-09-01 01:46:18 19,968 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\linkinfo.dll
+ 2005-09-23 03:25:24 8,481,792 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\shell32.dll
+ 2005-09-02 23:53:54 474,112 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\shlwapi.dll
+ 2005-09-27 00:47:48 24,064 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\spru0410.dll
+ 2005-09-01 01:46:20 292,352 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\winsrv.dll
+ 2005-02-24 19:35:44 15,584 ------w C:\WINDOWS\$hf_mig$\KB900725\spmsg.dll
+ 2005-02-24 19:35:44 212,192 ------w C:\WINDOWS\$hf_mig$\KB900725\spuninst.exe
+ 2005-09-26 16:36:24 30,720 ------w C:\WINDOWS\$hf_mig$\KB900725\update\arpidfix.exe
+ 2005-02-24 19:35:42 22,240 ------w C:\WINDOWS\$hf_mig$\KB900725\update\spcustom.dll
+ 2005-02-24 19:35:44 726,240 ------w C:\WINDOWS\$hf_mig$\KB900725\update\update.exe
+ 2005-02-24 19:35:44 391,392 ------w C:\WINDOWS\$hf_mig$\KB900725\update\updspapi.dll
+ 2005-09-10 01:51:38 2,068,480 ------w C:\WINDOWS\$hf_mig$\KB901017\SP2QFE\cdosys.dll
+ 2005-02-24 19:35:44 15,584 ------w C:\WINDOWS\$hf_mig$\KB901017\spmsg.dll
+ 2005-02-24 19:35:44 212,192 ------w C:\WINDOWS\$hf_mig$\KB901017\spuninst.exe
+ 2005-09-09 15:26:26 30,720 ------w C:\WINDOWS\$hf_mig$\KB901017\update\arpidfix.exe
+ 2005-02-24 19:35:42 22,240 ------w C:\WINDOWS\$hf_mig$\KB901017\update\spcustom.dll
+ 2005-02-24 19:35:44 726,240 ------w C:\WINDOWS\$hf_mig$\KB901017\update\update.exe
+ 2005-02-24 19:35:44 391,392 ------w C:\WINDOWS\$hf_mig$\KB901017\update\updspapi.dll
+ 2005-06-29 01:54:14 254,976 ------w C:\WINDOWS\$hf_mig$\KB901214\SP2QFE\icm32.dll
+ 2005-06-29 01:54:14 73,728 ------w C:\WINDOWS\$hf_mig$\KB901214\SP2QFE\mscms.dll
+ 2005-02-24 19:35:44 15,584 ------w C:\WINDOWS\$hf_mig$\KB901214\spmsg.dll
+ 2005-02-24 19:35:44 212,192 ------w C:\WINDOWS\$hf_mig$\KB901214\spuninst.exe
+ 2005-02-24 19:35:42 22,240 ------w C:\WINDOWS\$hf_mig$\KB901214\update\spcustom.dll
+ 2005-02-24 19:35:44 726,240 ------w C:\WINDOWS\$hf_mig$\KB901214\update\update.exe
+ 2005-02-24 19:35:44 391,392 ------w C:\WINDOWS\$hf_mig$\KB901214\update\updspapi.dll
+ 2005-07-26 04:27:32 225,792 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\catsrv.dll
+ 2005-07-26 04:27:34 625,152 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\catsrvut.dll
+ 2005-07-26 04:27:36 110,080 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\clbcatex.dll
+ 2005-07-26 04:27:36 498,688 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\clbcatq.dll
+ 2005-07-26 04:27:36 60,416 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\colbact.dll
+ 2005-07-26 04:27:36 195,072 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comadmin.dll
+ 2005-07-26 04:27:38 97,792 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comrepl.dll
+ 2005-07-26 04:27:40 1,267,200 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comsvcs.dll
+ 2005-07-26 04:27:40 540,160 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comuid.dll
+ 2005-07-26 04:27:40 243,200 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\es.dll
+ 2005-07-25 23:42:36 8,704 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\migregdb.exe
+ 2005-07-26 04:27:40 425,472 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\msdtcprx.dll
+ 2005-07-26 04:27:42 945,152 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\msdtctm.dll
+ 2005-07-26 04:27:42 161,280 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\msdtcuiu.dll
+ 2005-07-26 04:27:42 66,560 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\mtxclu.dll
+ 2005-07-26 04:27:42 91,136 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\mtxoci.dll
+ 2005-07-26 04:27:42 1,285,632 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\ole32.dll
+ 2005-07-26 04:27:44 74,752 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\olecli32.dll
+ 2005-07-26 04:27:44 37,376 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\olecnv32.dll
+ 2005-07-26 04:27:44 398,336 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\rpcss.dll
+ 2005-07-26 04:27:44 101,376 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\txflog.dll
+ 2005-07-26 04:27:44 11,776 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\xolehlp.dll
+ 2005-02-24 19:35:44 15,584 ------w C:\WINDOWS\$hf_mig$\KB902400\spmsg.dll
+ 2005-02-24 19:35:44 212,192 ------w C:\WINDOWS\$hf_mig$\KB902400\spuninst.exe
+ 2005-07-25 18:21:18 30,720 ------w C:\WINDOWS\$hf_mig$\KB902400\update\arpidfix.exe
+ 2005-02-24 19:35:42 22,240 ------w C:\WINDOWS\$hf_mig$\KB902400\update\spcustom.dll
+ 2005-02-24 19:35:44 726,240 ------w C:\WINDOWS\$hf_mig$\KB902400\update\update.exe
+ 2005-02-24 19:35:44 391,392 ------w C:\WINDOWS\$hf_mig$\KB902400\update\updspapi.dll
+ 2005-08-30 04:15:44 1,292,800 ------w C:\WINDOWS\$hf_mig$\KB904706\SP2QFE\quartz.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB904706\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB904706\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB904706\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB904706\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB904706\update\updspapi.dll
+ 2005-08-22 18:25:02 197,632 ------w C:\WINDOWS\$hf_mig$\KB905414\SP2QFE\netman.dll
+ 2005-02-25 03:35:42 15,584 ------w C:\WINDOWS\$hf_mig$\KB905414\spmsg.dll
+ 2005-02-25 03:35:42 212,192 ------w C:\WINDOWS\$hf_mig$\KB905414\spuninst.exe
+ 2005-08-19 23:50:32 30,720 ------w C:\WINDOWS\$hf_mig$\KB905414\update\arpidfix.exe
+ 2005-02-25 03:35:42 22,240 ------w C:\WINDOWS\$hf_mig$\KB905414\update\spcustom.dll
+ 2005-02-25 03:35:42 726,240 ------w C:\WINDOWS\$hf_mig$\KB905414\update\update.exe
+ 2005-02-25 03:35:44 391,392 ------w C:\WINDOWS\$hf_mig$\KB905414\update\updspapi.dll
+ 2005-08-23 03:41:08 124,928 ------w C:\WINDOWS\$hf_mig$\KB905749\SP2QFE\umpnpmgr.dll
+ 2005-02-24 19:35:44 15,584 ------w C:\WINDOWS\$hf_mig$\KB905749\spmsg.dll
+ 2005-02-24 19:35:44 212,192 ------w C:\WINDOWS\$hf_mig$\KB905749\spuninst.exe
+ 2005-08-22 17:01:30 30,720 ------w C:\WINDOWS\$hf_mig$\KB905749\update\arpidfix.exe
+ 2005-02-24 19:35:42 22,240 ------w C:\WINDOWS\$hf_mig$\KB905749\update\spcustom.dll
+ 2005-02-24 19:35:44 726,240 ------w C:\WINDOWS\$hf_mig$\KB905749\update\update.exe
+ 2005-02-24 19:35:44 391,392 ------w C:\WINDOWS\$hf_mig$\KB905749\update\updspapi.dll
+ 2005-10-17 21:22:22 80,896 ------w C:\WINDOWS\$hf_mig$\KB908519\SP2QFE\fontsub.dll
+ 2005-10-17 21:22:22 117,760 ------w C:\WINDOWS\$hf_mig$\KB908519\SP2QFE\t2embed.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB908519\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB908519\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB908519\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB908519\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB908519\update\updspapi.dll
+ 2006-03-17 04:48:12 8,483,840 ------w C:\WINDOWS\$hf_mig$\KB908531\SP2QFE\shell32.dll
+ 2006-03-22 01:51:50 25,600 ------w C:\WINDOWS\$hf_mig$\KB908531\SP2QFE\spru0410.dll
+ 2006-03-17 01:05:36 28,672 ------w C:\WINDOWS\$hf_mig$\KB908531\SP2QFE\verclsid.exe
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB908531\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB908531\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB908531\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB908531\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB908531\update\updspapi.dll
+ 2005-10-20 22:32:10 1,092,096 ------w C:\WINDOWS\$hf_mig$\KB910437\SP2QFE\esent.dll
+ 2005-10-12 23:17:58 15,584 ------w C:\WINDOWS\$hf_mig$\KB910437\spmsg.dll
+ 2005-10-12 23:18:00 215,776 ------w C:\WINDOWS\$hf_mig$\KB910437\spuninst.exe
+ 2005-10-12 23:17:58 22,752 ------w C:\WINDOWS\$hf_mig$\KB910437\update\spcustom.dll
+ 2005-10-12 23:18:02 724,192 ------w C:\WINDOWS\$hf_mig$\KB910437\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB910437\update\updspapi.dll
+ 2006-06-22 10:37:08 180,736 ------w C:\WINDOWS\$hf_mig$\KB911280\SP2QFE\rasmans.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB911280\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB911280\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB911280\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB911280\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB911280\update\updspapi.dll
+ 2006-03-23 05:52:58 143,360 ------w C:\WINDOWS\$hf_mig$\KB911562\SP2QFE\msadco.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB911562\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB911562\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB911562\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB911562\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB911562\update\updspapi.dll
+ 2006-03-17 09:13:40 679,424 ------w C:\WINDOWS\$hf_mig$\KB911567\SP2QFE\inetcomm.dll
+ 2006-03-17 09:13:40 1,311,744 ------w C:\WINDOWS\$hf_mig$\KB911567\SP2QFE\msoe.dll
+ 2006-03-17 09:13:40 510,464 ------w C:\WINDOWS\$hf_mig$\KB911567\SP2QFE\wab32.dll
+ 2006-03-17 09:13:40 85,504 ------w C:\WINDOWS\$hf_mig$\KB911567\SP2QFE\wabimp.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB911567\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB911567\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB911567\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB911567\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB911567\update\updspapi.dll
+ 2006-01-04 04:18:50 68,096 ------w C:\WINDOWS\$hf_mig$\KB911927\SP2QFE\webclnt.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB911927\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB911927\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB911927\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB911927\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB911927\update\updspapi.dll
+ 2005-12-29 03:07:36 280,064 ------w C:\WINDOWS\$hf_mig$\KB912919\SP2QFE\gdi32.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB912919\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB912919\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB912919\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB912919\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB912919\update\updspapi.dll
+ 2006-03-01 19:41:30 426,496 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\msdtcprx.dll
+ 2006-03-01 19:41:30 956,416 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\msdtctm.dll
+ 2006-03-01 19:41:30 161,280 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\msdtcuiu.dll
+ 2006-03-01 19:41:30 66,560 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\mtxclu.dll
+ 2006-03-01 19:41:30 91,136 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\mtxoci.dll
+ 2006-03-01 19:41:30 11,776 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\xolehlp.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB913580\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB913580\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB913580\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB913580\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB913580\update\updspapi.dll
+ 2006-05-19 13:58:42 112,128 ------w C:\WINDOWS\$hf_mig$\KB914388\SP2QFE\dhcpcsvc.dll
+ 2006-05-19 13:58:42 147,456 ------w C:\WINDOWS\$hf_mig$\KB914388\SP2QFE\dnsapi.dll
+ 2006-05-19 13:58:42 95,744 ------w C:\WINDOWS\$hf_mig$\KB914388\SP2QFE\iphlpapi.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB914388\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB914388\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB914388\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB914388\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB914388\update\updspapi.dll
+ 2006-05-05 10:16:40 454,400 ------w C:\WINDOWS\$hf_mig$\KB914389\SP2QFE\mrxsmb.sys
+ 2006-05-05 10:22:52 174,592 ------w C:\WINDOWS\$hf_mig$\KB914389\SP2QFE\rdbss.sys
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB914389\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB914389\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB914389\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB914389\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB914389\update\updspapi.dll
+ 2006-07-14 15:52:22 121,856 ------w C:\WINDOWS\$hf_mig$\KB915865\SP2QFE\xmllite.dll
+ 2005-10-13 00:12:26 14,048 ------w C:\WINDOWS\$hf_mig$\KB915865\spmsg.dll
+ 2005-10-13 00:12:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB915865\spuninst.exe
+ 2005-10-13 00:12:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB915865\update\spcustom.dll
+ 2005-10-13 00:12:28 716,000 ------w C:\WINDOWS\$hf_mig$\KB915865\update\update.exe
+ 2005-10-13 00:12:34 371,424 ------w C:\WINDOWS\$hf_mig$\KB915865\update\updspapi.dll
+ 2006-03-17 01:08:10 262,656 ------w C:\WINDOWS\$hf_mig$\KB916595\SP2QFE\http.sys
+ 2005-10-12 23:21:24 15,584 ------w C:\WINDOWS\$hf_mig$\KB916595\spmsg.dll
+ 2005-10-12 23:21:24 215,776 ------w C:\WINDOWS\$hf_mig$\KB916595\spuninst.exe
+ 2005-10-12 23:21:24 22,752 ------w C:\WINDOWS\$hf_mig$\KB916595\update\spcustom.dll
+ 2005-10-12 23:21:26 724,192 ------w C:\WINDOWS\$hf_mig$\KB916595\update\update.exe
+ 2005-10-12 23:21:32 390,880 ------w C:\WINDOWS\$hf_mig$\KB916595\update\updspapi.dll
+ 2006-04-21 06:46:16 332,800 ------w C:\WINDOWS\$hf_mig$\KB917159\SP2QFE\srv.sys
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB917159\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB917159\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB917159\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB917159\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB917159\update\updspapi.dll
+ 2006-05-18 05:44:26 450,560 ------w C:\WINDOWS\$hf_mig$\KB917344\SP2QFE\jscript.dll
+ 2005-10-12 23:21:24 15,584 ------w C:\WINDOWS\$hf_mig$\KB917344\spmsg.dll
+ 2005-10-12 23:21:24 215,776 ------w C:\WINDOWS\$hf_mig$\KB917344\spuninst.exe
+ 2005-10-12 23:21:24 22,752 ------w C:\WINDOWS\$hf_mig$\KB917344\update\spcustom.dll
+ 2005-10-12 23:21:26 724,192 ------w C:\WINDOWS\$hf_mig$\KB917344\update\update.exe
+ 2005-10-12 23:21:32 390,880 ------w C:\WINDOWS\$hf_mig$\KB917344\update\updspapi.dll
+ 2006-07-05 10:57:40 1,029,120 ------w C:\WINDOWS\$hf_mig$\KB917422\SP2QFE\kernel32.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB917422\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB917422\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB917422\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB917422\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB917422\update\updspapi.dll
+ 2006-04-20 12:18:36 360,576 ------w C:\WINDOWS\$hf_mig$\KB917953\SP2QFE\tcpip.sys
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB917953\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB917953\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB917953\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB917953\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB917953\update\updspapi.dll
+ 2006-11-27 15:18:38 539,136 ------w C:\WINDOWS\$hf_mig$\KB918118\SP2QFE\msftedit.dll
+ 2006-11-27 15:18:38 433,664 ------w C:\WINDOWS\$hf_mig$\KB918118\SP2QFE\riched20.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB918118\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB918118\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB918118\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB918118\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB918118\update\updspapi.dll
+ 2006-06-01 19:39:46 163,840 ------w C:\WINDOWS\$hf_mig$\KB918439\SP2QFE\jgdw400.dll
+ 2006-06-01 19:39:46 27,648 ------w C:\WINDOWS\$hf_mig$\KB918439\SP2QFE\jgpl400.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB918439\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB918439\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB918439\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB918439\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB918439\update\updspapi.dll
+ 2006-06-23 11:25:34 1,022,976 ------w C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\browseui.dll
+ 2006-06-23 11:25:34 151,552 ------w C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\cdfview.dll
+ 2006-06-23 11:25:34 1,056,256 ------w C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\danim.dll
+ 2006-06-23 11:25:34 357,888 ------w C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\dxtmsft.dll
+ 2006-06-23 11:25:34 205,312 ------w C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\dxtrans.dll
+ 2006-06-23 11:25:34 55,808 ------w C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\extmgr.dll
+ 2006-06-23 08:48:30 18,432 ------w C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\iedw.exe
+ 2006-06-23 11:25:34 251,904 ------w C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\iepeers.dll
+ 2006-06-23 11:25:34 96,768 ------w C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\inseng.dll
+ 2006-06-23 11:25:34 15,872 ------w C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\jsproxy.dll
+ 2006-07-28 11:29:28 3,079,168 ------w C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\mshtml.dll
+ 2006-06-23 11:25:34 448,512 ------w C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\mshtmled.dll
+ 2006-06-23 11:25:34 146,432 ------w C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\msrating.dll
+ 2006-06-23 11:25:34 532,480 ------w C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\mstime.dll
+ 2006-06-23 11:25:34 39,424 ------w C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\pngfilt.dll
+ 2006-06-23 11:25:34 1,497,088 ------w C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\shdocvw.dll
+ 2006-06-23 11:25:36 474,112 ------w C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\shlwapi.dll
+ 2006-06-23 09:09:20 99,840 ------w C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\spru0410.dll
+ 2006-07-25 20:43:08 616,448 ------w C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\urlmon.dll
+ 2006-06-23 11:25:36 667,136 ------w C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\wininet.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB918899\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB918899\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB918899\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB918899\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB918899\update\updspapi.dll
+ 2006-07-13 11:43:08 202,496 ------w C:\WINDOWS\$hf_mig$\KB919007\SP2QFE\rmcast.sys
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB919007\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB919007\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB919007\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB919007\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB919007\update\updspapi.dll
+ 2006-10-12 13:55:54 42,496 ------w C:\WINDOWS\$hf_mig$\KB920213\SP2QFE\agentdp2.dll
+ 2006-10-12 13:55:54 57,344 ------w C:\WINDOWS\$hf_mig$\KB920213\SP2QFE\agentdpv.dll
+ 2006-10-12 11:54:08 256,512 ------w C:\WINDOWS\$hf_mig$\KB920213\SP2QFE\agentsvr.exe
+ 2006-10-16 11:19:12 263,168 ------w C:\WINDOWS\$hf_mig$\KB920213\SP2QFE\spru0410.dll
+ 2005-10-12 23:21:24 15,584 ------w C:\WINDOWS\$hf_mig$\KB920213\spmsg.dll
+ 2005-10-12 23:21:24 215,776 ------w C:\WINDOWS\$hf_mig$\KB920213\spuninst.exe
+ 2005-10-12 23:21:24 22,752 ------w C:\WINDOWS\$hf_mig$\KB920213\update\spcustom.dll
+ 2005-10-12 23:21:26 724,192 ------w C:\WINDOWS\$hf_mig$\KB920213\update\update.exe
+ 2005-10-12 23:21:32 390,880 ------w C:\WINDOWS\$hf_mig$\KB920213\update\updspapi.dll
+ 2006-07-27 13:40:06 679,424 ------w C:\WINDOWS\$hf_mig$\KB920214\SP2QFE\inetcomm.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB920214\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB920214\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB920214\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB920214\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB920214\update\updspapi.dll
+ 2006-07-21 08:29:04 72,704 ------w C:\WINDOWS\$hf_mig$\KB920670\SP2QFE\hlink.dll
+ 2005-10-12 23:21:24 15,584 ------w C:\WINDOWS\$hf_mig$\KB920670\spmsg.dll
+ 2005-10-12 23:21:24 215,776 ------w C:\WINDOWS\$hf_mig$\KB920670\spuninst.exe
+ 2005-10-12 23:21:24 22,752 ------w C:\WINDOWS\$hf_mig$\KB920670\update\spcustom.dll
+ 2005-10-12 23:21:26 724,192 ------w C:\WINDOWS\$hf_mig$\KB920670\update\update.exe
+ 2005-10-12 23:21:32 390,880 ------w C:\WINDOWS\$hf_mig$\KB920670\update\updspapi.dll
+ 2006-06-26 17:46:52 147,456 ------w C:\WINDOWS\$hf_mig$\KB920683\SP2QFE\dnsapi.dll
+ 2006-06-26 17:46:52 7,680 ------w C:\WINDOWS\$hf_mig$\KB920683\SP2QFE\rasadhlp.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB920683\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB920683\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB920683\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB920683\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB920683\update\updspapi.dll
+ 2006-06-22 05:22:08 69,120 ------w C:\WINDOWS\$hf_mig$\KB920685\SP2QFE\ciodm.dll
+ 2006-06-22 05:22:08 1,439,232 ------w C:\WINDOWS\$hf_mig$\KB920685\SP2QFE\query.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB920685\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB920685\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB920685\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB920685\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB920685\update\updspapi.dll
+ 2006-06-14 08:50:20 172,416 ------w C:\WINDOWS\$hf_mig$\KB920872\SP2QFE\kmixer.sys
+ 2006-06-14 08:50:20 6,272 ------w C:\WINDOWS\$hf_mig$\KB920872\SP2QFE\splitter.sys
+ 2006-06-14 09:17:04 82,944 ------w C:\WINDOWS\$hf_mig$\KB920872\SP2QFE\wdmaud.sys
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB920872\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB920872\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB920872\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB920872\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB920872\update\updspapi.dll
+ 2006-07-13 14:03:42 8,486,912 ------w C:\WINDOWS\$hf_mig$\KB921398\SP2QFE\shell32.dll
+ 2006-07-13 11:52:54 163,328 ------w C:\WINDOWS\$hf_mig$\KB921398\SP2QFE\spru0410.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB921398\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB921398\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB921398\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB921398\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB921398\update\updspapi.dll
+ 2007-05-17 11:27:20 549,888 ------w C:\WINDOWS\$hf_mig$\KB921503\SP2QFE\oleaut32.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB921503\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB921503\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB921503\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB921503\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB921503\update\updspapi.dll
+ 2006-07-14 15:42:56 336,896 ------w C:\WINDOWS\$hf_mig$\KB921883\SP2QFE\netapi32.dll
+ 2005-10-12 23:21:24 15,584 ------w C:\WINDOWS\$hf_mig$\KB921883\spmsg.dll
+ 2005-10-12 23:21:24 215,776 ------w C:\WINDOWS\$hf_mig$\KB921883\spuninst.exe
+ 2005-10-12 23:21:24 22,752 ------w C:\WINDOWS\$hf_mig$\KB921883\update\spcustom.dll
+ 2005-10-12 23:21:26 724,192 ------w C:\WINDOWS\$hf_mig$\KB921883\update\update.exe
+ 2005-10-12 23:21:32 390,880 ------w C:\WINDOWS\$hf_mig$\KB921883\update\updspapi.dll
+ 2006-08-21 12:29:04 16,896 ------w C:\WINDOWS\$hf_mig$\KB922582\SP2QFE\fltlib.dll
+ 2006-08-21 09:43:32 23,040 ------w C:\WINDOWS\$hf_mig$\KB922582\SP2QFE\fltmc.exe
+ 2006-08-21 09:43:32 128,768 ------w C:\WINDOWS\$hf_mig$\KB922582\SP2QFE\fltmgr.sys
+ 2005-10-12 23:17:58 15,584 ------w C:\WINDOWS\$hf_mig$\KB922582\spmsg.dll
+ 2005-10-12 23:18:00 215,776 ------w C:\WINDOWS\$hf_mig$\KB922582\spuninst.exe
+ 2005-10-12 23:17:58 22,752 ------w C:\WINDOWS\$hf_mig$\KB922582\update\spcustom.dll
+ 2005-10-12 23:18:02 724,192 ------w C:\WINDOWS\$hf_mig$\KB922582\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB922582\update\updspapi.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB922616\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB922616\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB922616\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB922616\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB922616\update\updspapi.dll
+ 2006-09-14 08:36:44 1,022,976 ------w C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\browseui.dll
+ 2006-09-14 08:36:44 151,552 ------w C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\cdfview.dll
+ 2006-09-14 08:36:44 1,056,256 ------w C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\danim.dll
+ 2006-09-14 08:36:44 357,888 ------w C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\dxtmsft.dll
+ 2006-09-14 08:36:44 205,312 ------w C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\dxtrans.dll
+ 2006-09-14 08:36:44 55,808 ------w C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\extmgr.dll
+ 2006-09-13 09:10:28 18,432 ------w C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\iedw.exe
+ 2006-09-14 08:36:44 251,904 ------w C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\iepeers.dll
+ 2006-09-14 08:36:44 96,768 ------w C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\inseng.dll
+ 2006-09-14 08:36:44 15,872 ------w C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\jsproxy.dll
+ 2006-09-14 08:36:48 3,079,680 ------w C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\mshtml.dll
+ 2006-09-14 08:36:46 448,512 ------w C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\mshtmled.dll
+ 2006-09-14 08:36:48 146,432 ------w C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\msrating.dll
+ 2006-09-14 08:36:48 532,480 ------w C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\mstime.dll
+ 2006-09-14 08:36:48 39,424 ------w C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\pngfilt.dll
+ 2006-09-04 06:14:16 1,497,088 ------w C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\shdocvw.dll
+ 2006-09-14 08:36:48 474,112 ------w C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\shlwapi.dll
+ 2006-09-18 12:25:56 224,768 ------w C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\spru0410.dll
+ 2006-09-14 08:36:48 616,960 ------w C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\urlmon.dll
+ 2006-09-14 08:36:50 667,136 ------w C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\wininet.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB922760\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB922760\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB922760\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB922760\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB922760\update\updspapi.dll
+ 2006-08-16 12:13:54 100,352 ------w C:\WINDOWS\$hf_mig$\KB922819\SP2QFE\6to4svc.dll
+ 2006-08-16 10:13:40 225,664 ------w C:\WINDOWS\$hf_mig$\KB922819\SP2QFE\tcpip6.sys
+ 2005-10-12 23:21:24 15,584 ------w C:\WINDOWS\$hf_mig$\KB922819\spmsg.dll
+ 2005-10-12 23:21:24 215,776 ------w C:\WINDOWS\$hf_mig$\KB922819\spuninst.exe
+ 2005-10-12 23:21:24 22,752 ------w C:\WINDOWS\$hf_mig$\KB922819\update\spcustom.dll
+ 2005-10-12 23:21:26 724,192 ------w C:\WINDOWS\$hf_mig$\KB922819\update\update.exe
+ 2005-10-12 23:21:32 390,880 ------w C:\WINDOWS\$hf_mig$\KB922819\update\updspapi.dll
+ 2006-08-14 12:00:42 332,928 ------w C:\WINDOWS\$hf_mig$\KB923414\SP2QFE\srv.sys
+ 2005-10-12 23:21:24 15,584 ------w C:\WINDOWS\$hf_mig$\KB923414\spmsg.dll
+ 2005-10-12 23:21:24 215,776 ------w C:\WINDOWS\$hf_mig$\KB923414\spuninst.exe
+ 2005-10-12 23:21:24 22,752 ------w C:\WINDOWS\$hf_mig$\KB923414\update\spcustom.dll
+ 2005-10-12 23:21:26 724,192 ------w C:\WINDOWS\$hf_mig$\KB923414\update\update.exe
+ 2005-10-12 23:21:32 390,880 ------w C:\WINDOWS\$hf_mig$\KB923414\update\updspapi.dll
+ 2006-11-08 05:14:20 86,528 ------w C:\WINDOWS\$hf_mig$\KB923694\SP2QFE\directdb.dll
+ 2006-11-08 05:14:20 679,424 ------w C:\WINDOWS\$hf_mig$\KB923694\SP2QFE\inetcomm.dll
+ 2006-11-08 05:14:20 1,314,816 ------w C:\WINDOWS\$hf_mig$\KB923694\SP2QFE\msoe.dll
+ 2006-11-08 05:14:20 510,976 ------w C:\WINDOWS\$hf_mig$\KB923694\SP2QFE\wab32.dll
+ 2006-11-08 05:14:20 85,504 ------w C:\WINDOWS\$hf_mig$\KB923694\SP2QFE\wabimp.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB923694\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB923694\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB923694\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB923694\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB923694\update\updspapi.dll
+ 2006-10-13 12:42:00 64,000 ------w C:\WINDOWS\$hf_mig$\KB923980\SP2QFE\nwapi32.dll
+ 2006-10-13 12:42:00 143,360 ------w C:\WINDOWS\$hf_mig$\KB923980\SP2QFE\nwprovau.dll
+ 2006-10-13 10:39:12 163,456 ------w C:\WINDOWS\$hf_mig$\KB923980\SP2QFE\nwrdr.sys
+ 2006-10-13 12:42:00 65,536 ------w C:\WINDOWS\$hf_mig$\KB923980\SP2QFE\nwwks.dll
+ 2005-10-12 23:21:24 15,584 ------w C:\WINDOWS\$hf_mig$\KB923980\spmsg.dll
+ 2005-10-12 23:21:24 215,776 ------w C:\WINDOWS\$hf_mig$\KB923980\spuninst.exe
+ 2005-10-12 23:21:24 22,752 ------w C:\WINDOWS\$hf_mig$\KB923980\update\spcustom.dll
+ 2005-10-12 23:21:26 724,192 ------w C:\WINDOWS\$hf_mig$\KB923980\update\update.exe
+ 2005-10-12 23:21:32 390,880 ------w C:\WINDOWS\$hf_mig$\KB923980\update\updspapi.dll
+ 2006-09-13 05:08:16 1,084,416 ------w C:\WINDOWS\$hf_mig$\KB924191\SP2QFE\msxml3.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB924191\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB924191\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB924191\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB924191\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB924191\update\updspapi.dll
+ 2006-08-17 12:43:04 732,160 ------w C:\WINDOWS\$hf_mig$\KB924270\SP2QFE\lsasrv.dll
+ 2006-08-17 12:43:04 337,408 ------w C:\WINDOWS\$hf_mig$\KB924270\SP2QFE\netapi32.dll
+ 2006-08-17 12:43:04 132,096 ------w C:\WINDOWS\$hf_mig$\KB924270\SP2QFE\wkssvc.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB924270\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB924270\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB924270\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB924270\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB924270\update\updspapi.dll
+ 2006-09-04 06:14:16 1,497,088 ------w C:\WINDOWS\$hf_mig$\KB924496\SP2QFE\shdocvw.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB924496\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB924496\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB924496\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB924496\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB924496\update\updspapi.dll
+ 2006-10-23 15:34:34 1,022,976 ------w C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\browseui.dll
+ 2006-10-23 15:34:34 151,552 ------w C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\cdfview.dll
+ 2006-10-23 15:34:34 1,056,256 ------w C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\danim.dll
+ 2006-10-23 15:34:34 357,888 ------w C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\dxtmsft.dll
+ 2006-10-23 15:34:34 205,312 ------w C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\dxtrans.dll
+ 2006-10-23 15:34:34 55,808 ------w C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\extmgr.dll
+ 2006-10-23 11:02:38 18,432 ------w C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\iedw.exe
+ 2006-10-23 15:34:34 251,904 ------w C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\iepeers.dll
+ 2006-10-23 15:34:36 96,768 ------w C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\inseng.dll
+ 2006-10-23 15:34:36 15,872 ------w C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\jsproxy.dll
+ 2006-10-23 15:34:38 3,082,240 ------w C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\mshtml.dll
+ 2006-10-23 15:34:36 448,512 ------w C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\mshtmled.dll
+ 2006-10-23 15:34:36 146,432 ------w C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\msrating.dll
+ 2006-10-23 15:34:36 532,480 ------w C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\mstime.dll
+ 2006-10-23 15:34:36 39,424 ------w C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\pngfilt.dll
+ 2006-10-23 15:34:38 1,497,600 ------w C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\shdocvw.dll
+ 2006-10-23 15:34:38 474,112 ------w C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\shlwapi.dll
+ 2006-10-23 11:43:10 263,168 ------w C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\spru0410.dll
+ 2006-10-23 15:34:38 616,960 ------w C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\urlmon.dll
+ 2006-10-23 15:34:38 667,136 ------w C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\wininet.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB925454\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB925454\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB925454\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB925454\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB925454\update\updspapi.dll
+ 2006-09-18 14:28:38 851,968 ------w C:\WINDOWS\$hf_mig$\KB925486\SP2QFE\vgx.dll
+ 2005-10-12 23:21:24 15,584 ------w C:\WINDOWS\$hf_mig$\KB925486\spmsg.dll
+ 2005-10-12 23:21:24 215,776 ------w C:\WINDOWS\$hf_mig$\KB925486\spuninst.exe
+ 2005-10-12 23:21:24 22,752 ------w C:\WINDOWS\$hf_mig$\KB925486\update\spcustom.dll
+ 2005-10-12 23:21:26 724,192 ------w C:\WINDOWS\$hf_mig$\KB925486\update\update.exe
+ 2005-10-12 23:21:32 390,880 ------w C:\WINDOWS\$hf_mig$\KB925486\update\updspapi.dll
+ 2007-03-08 15:48:42 282,112 ------w C:\WINDOWS\$hf_mig$\KB925902\SP2QFE\gdi32.dll
+ 2007-03-08 15:48:42 40,960 ------w C:\WINDOWS\$hf_mig$\KB925902\SP2QFE\mf3216.dll
+ 2007-03-08 15:48:42 579,072 ------w C:\WINDOWS\$hf_mig$\KB925902\SP2QFE\user32.dll
+ 2007-03-08 15:45:14 1,843,968 ------w C:\WINDOWS\$hf_mig$\KB925902\SP2QFE\win32k.sys
+ 2006-01-19 19:29:34 15,584 ------w C:\WINDOWS\$hf_mig$\KB925902\spmsg.dll
+ 2006-01-19 19:29:34 215,776 ------w C:\WINDOWS\$hf_mig$\KB925902\spuninst.exe
+ 2006-01-19 19:29:34 22,752 ------w C:\WINDOWS\$hf_mig$\KB925902\update\spcustom.dll
+ 2006-01-19 19:29:34 724,192 ------w C:\WINDOWS\$hf_mig$\KB925902\update\update.exe
+ 2006-01-19 19:29:34 390,880 ------w C:\WINDOWS\$hf_mig$\KB925902\update\updspapi.dll
+ 2006-10-20 01:40:14 714,752 ------w C:\WINDOWS\$hf_mig$\KB926255\SP2QFE\sxs.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB926255\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB926255\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB926255\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB926255\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB926255\update\updspapi.dll
+ 2006-10-16 17:15:42 124,928 ------w C:\WINDOWS\$hf_mig$\KB926436\SP2QFE\oledlg.dll
+ 2005-10-12 23:21:24 15,584 ------w C:\WINDOWS\$hf_mig$\KB926436\spmsg.dll
+ 2005-10-12 23:21:24 215,776 ------w C:\WINDOWS\$hf_mig$\KB926436\spuninst.exe
+ 2005-10-12 23:21:24 22,752 ------w C:\WINDOWS\$hf_mig$\KB926436\update\spcustom.dll
+ 2005-10-12 23:21:26 724,192 ------w C:\WINDOWS\$hf_mig$\KB926436\update\update.exe
+ 2005-10-12 23:21:32 390,880 ------w C:\WINDOWS\$hf_mig$\KB926436\update\updspapi.dll
+ 2006-12-26 13:20:52 536,576 ------w C:\WINDOWS\$hf_mig$\KB927779\SP2QFE\msado15.dll
+ 2006-12-26 13:20:52 180,224 ------w C:\WINDOWS\$hf_mig$\KB927779\SP2QFE\msadomd.dll
+ 2006-12-26 13:20:52 200,704 ------w C:\WINDOWS\$hf_mig$\KB927779\SP2QFE\msadox.dll
+ 2006-12-26 13:20:52 102,400 ------w C:\WINDOWS\$hf_mig$\KB927779\SP2QFE\msjro.dll
+ 2006-01-19 19:29:34 15,584 ------w C:\WINDOWS\$hf_mig$\KB927779\spmsg.dll
+ 2006-01-19 19:29:34 215,776 ------w C:\WINDOWS\$hf_mig$\KB927779\spuninst.exe
+ 2006-01-19 19:29:34 22,752 ------w C:\WINDOWS\$hf_mig$\KB927779\update\spcustom.dll
+ 2006-01-19 19:29:34 724,192 ------w C:\WINDOWS\$hf_mig$\KB927779\update\update.exe
+ 2006-01-19 19:29:34 390,880 ------w C:\WINDOWS\$hf_mig$\KB927779\update\updspapi.dll
+ 2006-12-19 18:48:52 334,336 ------w C:\WINDOWS\$hf_mig$\KB927802\SP2QFE\wiaservc.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB927802\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB927802\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB927802\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB927802\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB927802\update\updspapi.dll
+ 2007-04-18 16:15:38 2,854,400 ------w C:\WINDOWS\$hf_mig$\KB927891\SP2QFE\msi31.dll
+ 2006-12-14 08:54:06 15,584 ------w C:\WINDOWS\$hf_mig$\KB927891\spmsg.dll
+ 2006-12-14 08:54:06 215,776 ------w C:\WINDOWS\$hf_mig$\KB927891\spuninst.exe
+ 2006-12-14 08:54:06 22,752 ------w C:\WINDOWS\$hf_mig$\KB927891\update\spcustom.dll
+ 2006-12-14 08:54:06 724,192 ------w C:\WINDOWS\$hf_mig$\KB927891\update\update.exe
+ 2006-12-14 08:54:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB927891\update\updspapi.dll
+ 2006-12-19 21:48:22 8,487,936 ------w C:\WINDOWS\$hf_mig$\KB928255\SP2QFE\shell32.dll
+ 2006-12-19 21:48:22 135,168 ------w C:\WINDOWS\$hf_mig$\KB928255\SP2QFE\shsvcs.dll
+ 2006-12-19 16:30:00 263,168 ------w C:\WINDOWS\$hf_mig$\KB928255\SP2QFE\spru0410.dll
+ 2006-01-19 19:29:34 15,584 ------w C:\WINDOWS\$hf_mig$\KB928255\spmsg.dll
+ 2006-01-19 19:29:34 215,776 ------w C:\WINDOWS\$hf_mig$\KB928255\spuninst.exe
+ 2006-01-19 19:29:34 22,752 ------w C:\WINDOWS\$hf_mig$\KB928255\update\spcustom.dll
+ 2006-01-19 19:29:34 724,192 ------w C:\WINDOWS\$hf_mig$\KB928255\update\update.exe
+ 2006-01-19 19:29:34 390,880 ------w C:\WINDOWS\$hf_mig$\KB928255\update\updspapi.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB928843\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB928843\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB928843\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB928843\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB928843\update\updspapi.dll
+ 2007-05-16 15:26:44 86,528 ------w C:\WINDOWS\$hf_mig$\KB929123\SP2QFE\directdb.dll
+ 2007-05-16 15:26:48 683,520 ------w C:\WINDOWS\$hf_mig$\KB929123\SP2QFE\inetcomm.dll
+ 2007-05-16 15:26:54 1,314,816 ------w C:\WINDOWS\$hf_mig$\KB929123\SP2QFE\msoe.dll
+ 2007-05-16 15:26:58 510,976 ------w C:\WINDOWS\$hf_mig$\KB929123\SP2QFE\wab32.dll
+ 2007-05-16 15:27:00 85,504 ------w C:\WINDOWS\$hf_mig$\KB929123\SP2QFE\wabimp.dll
+ 2006-01-19 19:29:34 15,584 ------w C:\WINDOWS\$hf_mig$\KB929123\spmsg.dll
+ 2006-01-19 19:29:34 215,776 ------w C:\WINDOWS\$hf_mig$\KB929123\spuninst.exe
+ 2006-01-19 19:29:34 22,752 ------w C:\WINDOWS\$hf_mig$\KB929123\update\spcustom.dll
+ 2006-01-19 19:29:34 724,192 ------w C:\WINDOWS\$hf_mig$\KB929123\update\update.exe
+ 2006-01-19 19:29:34 390,880 ------w C:\WINDOWS\$hf_mig$\KB929123\update\updspapi.dll
+ 2006-12-19 18:44:40 2,141,184 ------w C:\WINDOWS\$hf_mig$\KB929338\SP2QFE\ntkrnlmp.exe
+ 2006-12-19 18:44:52 2,063,104 ------w C:\WINDOWS\$hf_mig$\KB929338\SP2QFE\ntkrnlpa.exe
+ 2006-12-19 18:44:38 2,020,864 ------w C:\WINDOWS\$hf_mig$\KB929338\SP2QFE\ntkrpamp.exe
+ 2006-12-19 18:44:48 2,185,728 ------w C:\WINDOWS\$hf_mig$\KB929338\SP2QFE\ntoskrnl.exe
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB929338\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB929338\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB929338\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB929338\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB929338\update\updspapi.dll
+ 2006-12-19 18:40:56 852,480 ------w C:\WINDOWS\$hf_mig$\KB929969\SP2QFE\vgx.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB929969\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB929969\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB929969\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB929969\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB929969\update\updspapi.dll
+ 2007-03-17 13:46:02 293,376 ------w C:\WINDOWS\$hf_mig$\KB930178\SP2QFE\winsrv.dll
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB930178\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB930178\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB930178\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB930178\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB930178\update\updspapi.dll
+ 2007-02-09 11:23:36 574,976 ------w C:\WINDOWS\$hf_mig$\KB930916\SP2QFE\ntfs.sys
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB930916\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB930916\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB930916\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB930916\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB930916\update\updspapi.dll
+ 2007-02-05 20:20:16 185,344 ------w C:\WINDOWS\$hf_mig$\KB931261\SP2QFE\upnphost.dll
+ 2006-01-19 19:29:34 15,584 ------w C:\WINDOWS\$hf_mig$\KB931261\spmsg.dll
+ 2006-01-19 19:29:34 215,776 ------w C:\WINDOWS\$hf_mig$\KB931261\spuninst.exe
+ 2006-01-19 19:29:34 22,752 ------w C:\WINDOWS\$hf_mig$\KB931261\update\spcustom.dll
+ 2006-01-19 19:29:34 724,192 ------w C:\WINDOWS\$hf_mig$\KB931261\update\update.exe
+ 2006-01-19 19:29:34 390,880 ------w C:\WINDOWS\$hf_mig$\KB931261\update\updspapi.dll
+ 2007-02-28 16:06:10 2,141,184 ------w C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntkrnlmp.exe
+ 2007-02-28 16:06:18 2,063,104 ------w C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntkrnlpa.exe
+ 2007-02-28 16:06:10 2,020,864 ------w C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntkrpamp.exe
+ 2007-02-28 16:06:16 2,185,856 ------w C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe
+ 2005-10-12 23:17:56 15,584 ------w C:\WINDOWS\$hf_mig$\KB931784\spmsg.dll
+ 2005-10-12 23:17:58 215,776 ------w C:\WINDOWS\$hf_mig$\KB931784\spuninst.exe
+ 2005-10-12 23:17:56 22,752 ------w C:\WINDOWS\$hf_mig$\KB931784\update\spcustom.dll
+ 2005-10-12 23:18:00 724,192 ------w C:\WINDOWS\$hf_mig$\KB931784\update\update.exe
+ 2005-10-12 23:18:06 390,880 ------w C:\WINDOWS\$hf_mig$\KB931784\update\updspapi.dll
+ 2007-01-29 09:25:04 60,416 ------w C:\WINDOWS\$hf_mig$\KB931836\SP2QFE\tzchange.exe
+ 2006-01-19 19:29:34 15,584 ------w C:\WINDOWS\$hf_mig$\KB931836\spmsg.dll
+ 2006-01-19 19:29:34 215,776 ------w C:\WINDOWS\$hf_mig$\KB931836\spuninst.exe
+ 2006-01-19 19:29:34 22,752 ------w C:\WINDOWS\$hf_mig$\KB931836\update\spcustom.dll
+ 2006-01-19 19:29:34 724,192 ------w C:\WINDOWS\$hf_mig$\KB931836\update\update.exe
+ 2006-01-19 19:29:34 390,880 ------w C:\WINDOWS\$hf_mig$\KB931836\update\updspapi.dll
+ 2007-03-09 13:59:12 57,344 ------w C:\WINDOWS\$hf_mig$\KB932168\SP2QFE\agentdpv.dll
+ 2007-03-09 11:51:24 263,168 ------w C:\WINDOWS\$hf_mig$\KB932168\SP2QFE\spru0410.dll
+ 2006-01-19 19:29:34 15,584 ------w C:\WINDOWS\$hf_mig$\KB932168\spmsg.dll
+ 2006-01-19 19:29:34 215,776 ------w C:\WINDOWS\$hf_mig$\KB932168\spuninst.exe
+ 2006-01-19 19:29:34 22,752 ------w C:\WINDOWS\$hf_mig$\KB932168\update\spcustom.dll
+ 2006-01-19 19:29:34 724,192 ------w C:\WINDOWS\$hf_mig$\KB932168\update\update.exe
+ 2006-01-19 19:29:34 390,880 ------w C:\WINDOWS\$hf_mig$\KB932168\update\updspapi.dll
+ 2008-02-26 12:48:50 297,984 ------w C:\WINDOWS\$hf_mig$\KB932823-v3\SP2QFE\msctf.dll
+ 2007-03-06 02:48:10 15,584 ------w C:\WINDOWS\$hf_mig$\KB932823-v3\spmsg.dll
+ 2007-03-06 02:48:16 215,776 ------w C:\WINDOWS\$hf_mig$\KB932823-v3\spuninst.exe
+ 2007-03-06 02:48:08 22,752 ------w C:\WINDOWS\$hf_mig$\KB932823-v3\update\spcustom.dll
+ 2007-03-06 02:48:34 724,192 ------w C:\WINDOWS\$hf_mig$\KB932823-v3\update\update.exe
+ 2007-03-06 02:49:24 390,880 ------w C:\WINDOWS\$hf_mig$\KB932823-v3\update\updspapi.dll
+ 2007-07-18 10:33:06 60,416 ------w C:\WINDOWS\$hf_mig$\KB933360\SP2QFE\tzchange.exe
+ 2007-03-06 01:48:10 15,584 ------w C:\WINDOWS\$hf_mig$\KB933360\spmsg.dll
+ 2007-03-06 01:48:16 215,776 ------w C:\WINDOWS\$hf_mig$\KB933360\spuninst.exe
+ 2007-03-06 01:48:08 22,752 ------w C:\WINDOWS\$hf_mig$\KB933360\update\spcustom.dll
+ 2007-03-06 01:48:34 724,192 ------w C:\WINDOWS\$hf_mig$\KB933360\update\update.exe
+ 2007-03-06 01:49:24 390,880 ------w C:\WINDOWS\$hf_mig$\KB933360\update\updspapi.dll
+ 2007-04-25 08:26:00 124,928 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\advpack.dll
+ 2007-04-25 08:26:00 132,608 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\extmgr.dll
+ 2007-04-24 14:20:38 56,832 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\ie4uinit.exe
+ 2007-04-25 08:26:00 153,088 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\ieakeng.dll
+ 2007-04-25 08:26:00 230,400 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\ieaksie.dll
+ 2007-04-24 08:45:52 161,792 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\ieakui.dll
+ 2007-04-17 09:32:38 2,455,488 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\ieapfltr.dat
+ 2007-04-25 08:26:02 383,488 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\ieapfltr.dll
+ 2007-04-25 08:26:04 384,512 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\iedkcs32.dll
+ 2007-04-25 08:26:24 6,059,008 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\ieframe.dll
+ 2007-04-25 08:26:24 44,544 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\iernonce.dll
+ 2007-04-25 08:26:28 267,776 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\iertutil.dll
+ 2007-04-24 14:20:38 13,824 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\ieudinit.exe
+ 2007-04-24 14:20:42 625,152 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\iexplore.exe
+ 2007-04-25 08:26:40 27,648 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\jsproxy.dll
+ 2007-04-25 08:26:42 459,264 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\msfeeds.dll
+ 2007-04-25 08:26:42 52,224 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\msfeedsbs.dll
+ 2007-05-08 09:02:46 3,584,000 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\mshtml.dll
+ 2007-04-25 08:26:58 477,696 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\mshtmled.dll
+ 2007-04-25 08:27:00 193,024 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\msrating.dll
+ 2007-04-25 08:27:04 670,720 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\mstime.dll
+ 2007-04-25 08:27:06 102,400 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\occache.dll
+ 2007-04-25 08:27:06 105,984 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\url.dll
+ 2007-04-25 08:27:12 1,153,536 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\urlmon.dll
+ 2007-04-25 08:27:14 232,960 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\webcheck.dll
+ 2007-04-25 08:27:18 823,808 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\wininet.dll
+ 2006-01-19 19:29:34 15,584 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\spmsg.dll
+ 2006-01-19 19:29:34 215,776 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\spuninst.exe
+ 2006-01-19 19:29:34 22,752 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\update\spcustom.dll
+ 2006-01-19 19:29:34 724,192 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\update\update.exe
+ 2006-01-19 19:29:34 390,880 ------w C:\WINDOWS\$hf_mig$\KB933566-IE7\update\updspapi.dll
+ 2007-07-09 13:19:18 582,656 ------w C:\WINDOWS\$hf_mig$\KB933729\SP2QFE\rpcrt4.dll
+ 2007-06-18 23:24:36 366,592 ------w C:\WINDOWS\$hf_mig$\KB933729\SP2QFE\spru0410.dll
+ 2005-10-12 23:17:58 15,584 ------w C:\WINDOWS\$hf_mig$\KB933729\spmsg.dll
+ 2005-10-12 23:18:00 215,776 ------w C:\WINDOWS\$hf_mig$\KB933729\spuninst.exe
+ 2005-10-12 23:17:58 22,752 ------w C:\WINDOWS\$hf_mig$\KB933729\update\spcustom.dll
+ 2005-10-12 23:18:02 724,192 ------w C:

[mito74]

log per kaspersky

[URL="http://freefilehosting.net/download/41c94"]kaspersky log_1225275234801_2381.txt[/URL]

[mito74]

log hijackthis

[URL="http://freefilehosting.net/download/41c97"]hijackthis_1225275299851_2382.log[/URL]

log combo fix

[URL="http://freefilehosting.net/download/41c98"]ComboFix_1225275350358_2383.txt[/URL]


attendo notizie
grazie ancora
per l'aiuto

[mito74]

log combofix

[URL="http://freefilehosting.net/download/41c98"]ComboFix_1225275350358_2383.txt[/URL]

[mito74]

qualcuno mi aiuta !!!!!!!!

[mito74]

kaspersky non riesce a eliminare il seguente file:bitkv0.dll
mi dice che lo fa al riavvio del pc ma poi lo trova sempre alla successiva scansione

help !!!!