Kontroll av användarkonto

3 december, 2009

I dag har jag haft en pop-up med jämna mellanrum som säger att Windows vill kontrollera mitt användarnamn inför en uppdatering, kan man lita på att det är windows som ligger bakom?

Tacksam för svar

Johan

3 december, 2009

Nej, Microsoft har inget behov av något användarnamn för att lägga ut uppdateringar på Windows Update och Windows vet ju redan vilket användarnamn du är inloggad med.

Menar du att popupen kommer i webbläsaren eller på skrivbordet?

3 december, 2009

Hej Cecilia!

Det var nog du som var hjälpsam för två år sedan också när jag hade worm-problem. Popuppen dyker upp soom en... popup med windows logga och trycker man på mer information så står det att man ska godkänna att windows kontrollerar lösenord/kod.

Johan

3 december, 2009

När man trycker fortsätt dyker detta upp

Johan

[bild raderad 2009-12-03 19:10:37 av joscariot]

3 december, 2009

Jag kunde inte ladda ned skärmbilden men det som dyker upp är en installation för Adobe Flash player från Adobe Systems Incorporated, är den äkta så laddar jag väl ned den men i och med att den är så jobbigt återkommande verkar det skumt.

3 december, 2009

Du kan lägga upp skärmbilden på t ex http://pici.se/

Det finns många falska Flash-installationer så sådana ska man inte installera på något annat sätt än direkt på Adobes webbsida.

3 december, 2009

OK, men går det att bli av med den irriterande popuppen?

Johan

3 december, 2009

Om det inte är så att den dyker upp på vissa webbsidor så antar jag att det beror på något olämpligt i datorn.

Vi kan se vad DDS visar till att börja med. Spara DDS på Skrivbordet.

http://download.bleepingcomputer.com/sUBs/dds.scr

Starta programmet (i Vista högerklicka och Kör som administratör).

Tryck Yes/Ja om frågan om Optional Scan dyker upp.

I ditt svar bifogar du de två loggarna DSS.txt och Attach.txt på detta sätt:

Tryck på LOG-knappen i Besvara-fönstret

Klistra in loggen

Tryck igen på LOG-knappen nappen i Besvara-fönstret

Upprepa med nästa logg.

3 december, 2009

Nu har jag försökt att klistra in loggarna flera gånger men bara misslyckats, huyr exakt bär man sig åt, jag har sparat dem på skrivbordet?

Johan

3 december, 2009

Öppna DDS.txt i Anteckningar, vilket är vad som borde hända när du dubbelklickar på den, markera hela texten (Redigera - Markera allt), kopiera hela texten (Redigera - Kopiera).

Därefter trycker du på Besvara på mitt inlägg och i det nya fönstret så trycker du på LOG-knappen, därefter högerklickar du i skrivfältet och väljer Klistra in och slutligen trycker du på LOG-knappen igen.

Sedan gör du likadant med nästa logg.

4 december, 2009

[log]

DDS (Ver_09-12-01.01) - NTFSx86

Run by Joscariot at 20:19:06,75 on 2009-12-03

Internet Explorer: 8.0.6001.18828

Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.46.1053.18.2038.914 [GMT 1:00]

AV: CA Anti-Virus *On-access scanning enabled* (Updated) {17CFD1EA-56CF-40B5-A06B-BD3A27397C93}

SP: Lavasoft Ad-Watch Live! *disabled* (Updated) {67844DAE-4F77-4D69-9457-98E8CFFDAA22}

SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\wininit.exe

C:\Windows\system32\lsm.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\svchost.exe -k rpcss

C:\Windows\System32\svchost.exe -k secsvcs

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k GPSvcGroup

C:\Windows\system32\SLsvc.exe

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

C:\Windows\system32\svchost.exe -k bthsvcs

C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe

C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\ISafe.exe

C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe

C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe

C:\Acer\Empowering Technology\eNet\eNet Service.exe

C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe

C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE

C:\Program Files\Common Files\LightScribe\LSSrvc.exe

C:\Acer\Mobility Center\MobilityService.exe

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

C:\Program Files\CyberLink\Shared Files\RichVideo.exe

C:\Windows\system32\svchost.exe -k imgsvc

C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\VetMsg.exe

C:\Windows\System32\svchost.exe -k WerSvcGroup

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

C:\Acer\Empowering Technology\ePower\ePowerSvc.exe

C:\Windows\system32\SearchIndexer.exe

C:\Windows\system32\DRIVERS\xaudio.exe

C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Windows\system32\wbem\unsecapp.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

C:\Windows\system32\taskeng.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Program Files\Windows Defender\MSASCui.exe

C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe

C:\Windows\RtHDVCpl.exe

C:\Users\JOSCAR~1\AppData\Local\Temp\RtkBtMnt.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe

C:\Program Files\Synaptics\SynTP\SynTPStart.exe

C:\Acer\Empowering Technology\eAudio\eAudio.exe

C:\Acer\Empowering Technology\eDataSecurity\eDSLoader.exe

C:\Program Files\Launch Manager\LManager.exe

C:\Program Files\CA\CA Internet Security Suite\cctray\cctray.exe

C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\cavrid.exe

C:\Windows\System32\igfxpers.exe

C:\Program Files\Common Files\Real\Update_OB\realsched.exe

C:\Windows\system32\igfxsrvc.exe

C:\Program Files\Java\jre6\bin\jusched.exe

C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

C:\Program Files\OpenOffice.org 3\program\soffice.exe

C:\Windows\system32\igfxext.exe

C:\Program Files\OpenOffice.org 3\program\soffice.bin

C:\Windows\system32\igfxsrvc.exe

C:\Acer\Empowering Technology\EPOWER\EPOWER_DMC.EXE

C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE

C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE

C:\Program Files\Huawei technologies\Mobile Connect\Mobile Connect.exe

C:\Program Files\CA\CA Internet Security Suite\ccprovsp.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Windows\system32\Macromed\Flash\FlashUtil10c.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe

C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Users\Joscariot\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CJD2GUXO\dds[1].scr

C:\Windows\system32\conime.exe

============== Pseudo HJT Report ===============

uSearch Page = hxxp://uk.rd.yahoo.com/customize/ycomp/defaults/sp/*http://uk.yahoo.com

uStart Page = hxxp://www.eniro.se/

uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7

mStart Page = hxxp://sv.intl.acer.yahoo.com

mDefault_Page_URL = hxxp://sv.intl.acer.yahoo.com

uSearchURL,(Default) = hxxp://uk.rd.yahoo.com/customize/ycomp/defaults/su/*http://uk.yahoo.com

uURLSearchHooks: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll

BHO: Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\program files\yahoo!\companion\installs\cpn\yt.dll

BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll

BHO: {7E853D72-626A-48EC-A868-BA8D5E23E045} - No File

BHO: ShowBarObj Class: {83a2f9b1-01a2-4aa5-87d1-45b6b8505e96} - c:\windows\system32\ActiveToolBand.dll

BHO: Inloggningshjälp för Windows Live ID: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll

BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll

BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.2.4204.1700\swg.dll

BHO: Google Dictionary Compression sdch: {c84d72fe-e17d-4195-bb24-76c02e2e7c4e} - c:\program files\google\google toolbar\component\fastsearch_B7C5AC242193BB3E.dll

BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll

TB: Acer eDataSecurity Management: {5cbe3b7c-1e47-477e-a7dd-396db0476e29} - c:\windows\system32\eDStoolbar.dll

TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll

TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar_32.dll

uRun: [Acer Tour Reminder]

mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide

mRun: [iAAnotif] "c:\program files\intel\intel matrix storage manager\Iaanotif.exe"

mRun: [RtHDVCpl] RtHDVCpl.exe

mRun: [synTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe

mRun: [Acer Tour]

mRun: [PlayMovie] "c:\program files\acer arcade deluxe\play movie\PMVService.exe"

mRun: [synTPStart] c:\program files\synaptics\syntp\SynTPStart.exe

mRun: [eAudio] "c:\acer\empowering technology\eaudio\eAudio.exe"

mRun: [eDataSecurity Loader] c:\acer\empowering technology\edatasecurity\eDSloader.exe

mRun: [LManager] c:\progra~1\launch~1\LManager.exe

mRun: [eRecoveryService]

mRun: [WarReg_PopUp] c:\acer\wr_popup\WarReg_PopUp.exe

mRun: [cctray] "c:\program files\ca\ca internet security suite\cctray\cctray.exe"

mRun: [CAVRID] "c:\program files\ca\ca internet security suite\ca anti-virus\CAVRID.exe"

mRun: [igfxTray] c:\windows\system32\igfxtray.exe

mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe

mRun: [Persistence] c:\windows\system32\igfxpers.exe

mRun: [skytel] Skytel.exe

mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot

mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe"

mRun: [CanonSolutionMenu] c:\program files\canon\solutionmenu\CNSLMAIN.exe /logon

mRun: [CanonMyPrinter] c:\program files\canon\myprinter\BJMyPrt.exe /logon

mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime

mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"

mRun: [sunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"

StartupFolder: c:\users\joscar~1\appdata\roaming\micros~1\windows\startm~1\programs\startup\openof~1.lnk - c:\program files\openoffice.org 3\program\quickstart.exe

StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\bttray.lnk - c:\program files\widcomm\bluetooth software\BTTray.exe

StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\empowe~1.lnk - c:\acer\empowering technology\eAPLauncher.exe

mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0)

mPolicies-system: EnableUIADesktopToggle = 0 (0x0)

IE: E&xportera till Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000

IE: Skicka bild till &Bluetooth-enhet... - c:\program files\widcomm\bluetooth software\btsendto_ie_ctx.htm

IE: Skicka sida till &Bluetooth-enhet... - c:\program files\widcomm\bluetooth software\btsendto_ie.htm

IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\program files\widcomm\bluetooth software\btsendto_ie.htm

IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~2\office12\ONBttnIE.dll

IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL

LSP: c:\windows\system32\VetRedir.dll

DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

TCP: {71376C27-343A-4076-A4FC-DE8309A3DEDD} = 130.244.127.161 130.244.127.169

Notify: igfxcui - igfxdev.dll

============= SERVICES / DRIVERS ===============

S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2007-2-8 179712]

=============== Created Last 30 ================

2009-11-29 22:23:28 0 d-----w- c:\programdata\Real

2009-11-28 00:49:14 2048 ----a-w- c:\windows\system32\tzres.dll

2009-11-25 21:03:35 1401856 ----a-w- c:\windows\system32\msxml6.dll

2009-11-25 21:03:34 1248768 ----a-w- c:\windows\system32\msxml3.dll

2009-11-25 21:03:22 714240 ----a-w- c:\windows\system32\timedate.cpl

2009-11-17 16:16:36 0 d-----w- c:\program files\Windows Portable Devices

2009-11-17 16:08:17 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdMtpDr_01_07_00.Wdf

2009-11-17 16:07:17 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdFs_01_07_00.Wdf

2009-11-17 00:05:35 81920 ----a-w- c:\windows\system32\wpdbusenum.dll

2009-11-17 00:04:17 4096 ----a-w- c:\windows\system32\oleaccrc.dll

2009-11-17 00:04:17 234496 ----a-w- c:\windows\system32\oleacc.dll

2009-11-17 00:04:16 555520 ----a-w- c:\windows\system32\UIAutomationCore.dll

2009-11-12 20:48:28 2036736 ----a-w- c:\windows\system32\win32k.sys

2009-11-12 20:48:20 355328 ----a-w- c:\windows\system32\WSDApi.dll

2009-11-05 16:25:06 1638912 ----a-w- c:\windows\system32\mshtml.tlb

==================== Find3M ====================

2009-12-03 13:40:38 597836 ----a-w- c:\windows\system32\perfh01D.dat

2009-12-03 13:40:38 117416 ----a-w- c:\windows\system32\perfc01D.dat

2009-12-02 14:17:17 739696 ----a-w- c:\windows\system32\drivers\vetefile.sys

2009-12-02 14:17:17 32240 ----a-w- c:\windows\system32\drivers\vetmonnt.sys

2009-12-02 14:17:17 26352 ----a-w- c:\windows\system32\drivers\vet-filt.sys

2009-12-02 14:17:17 21488 ----a-w- c:\windows\system32\drivers\vetfddnt.sys

2009-12-02 14:17:17 21104 ----a-w- c:\windows\system32\drivers\vet-rec.sys

2009-12-02 14:17:17 133520 ----a-w- c:\windows\system32\drivers\veteboot.sys

2009-11-17 16:16:31 665600 ----a-w- c:\windows\inf\drvindex.dat

2009-11-17 16:16:31 51200 ----a-w- c:\windows\inf\infpub.dat

2009-11-17 16:16:31 143360 ----a-w- c:\windows\inf\infstrng.dat

2009-11-17 16:16:31 143360 ----a-w- c:\windows\inf\infstor.dat

2009-11-02 19:42:06 195456 ------w- c:\windows\system32\MpSigStub.exe

2009-10-28 09:38:23 93360 ----a-w- c:\windows\system32\drivers\SBREDrv.sys

2009-10-28 09:38:21 15880 ----a-w- c:\windows\system32\lsdelete.exe

2009-10-14 19:27:39 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdMtpDr_01_00_00.Wdf

2009-10-11 03:17:27 411368 ----a-w- c:\windows\system32\deploytk.dll

2009-10-01 01:02:17 2537472 ----a-w- c:\windows\system32\wpdshext.dll

2009-10-01 01:02:05 30208 ----a-w- c:\windows\system32\WPDShextAutoplay.exe

2009-10-01 01:02:04 334848 ----a-w- c:\windows\system32\PortableDeviceApi.dll

2009-10-01 01:02:02 87552 ----a-w- c:\windows\system32\WPDShServiceObj.dll

2009-10-01 01:02:00 31232 ----a-w- c:\windows\system32\BthMtpContextHandler.dll

2009-10-01 01:01:59 546816 ----a-w- c:\windows\system32\wpd_ci.dll

2009-10-01 01:01:59 160256 ----a-w- c:\windows\system32\PortableDeviceTypes.dll

2009-10-01 01:01:56 60928 ----a-w- c:\windows\system32\PortableDeviceConnectApi.dll

2009-10-01 01:01:56 350208 ----a-w- c:\windows\system32\WPDSp.dll

2009-10-01 01:01:56 196608 ----a-w- c:\windows\system32\PortableDeviceWMDRM.dll

2009-10-01 01:01:56 100864 ----a-w- c:\windows\system32\PortableDeviceClassExtension.dll

2009-10-01 01:01:50 226816 ----a-w- c:\windows\system32\WpdMtp.dll

2009-10-01 01:01:49 61952 ----a-w- c:\windows\system32\WpdMtpUS.dll

2009-10-01 01:01:49 33280 ----a-w- c:\windows\system32\WpdConns.dll

2009-09-25 02:10:10 974848 ----a-w- c:\windows\system32\WindowsCodecs.dll

2009-09-25 02:07:08 189440 ----a-w- c:\windows\system32\WindowsCodecsExt.dll

2009-09-25 02:04:32 321024 ----a-w- c:\windows\system32\PhotoMetadataHandler.dll

2009-09-25 01:49:22 1554432 ----a-w- c:\windows\system32\xpsservices.dll

2009-09-25 01:48:08 351232 ----a-w- c:\windows\system32\XpsPrint.dll

2009-09-25 01:38:29 847360 ----a-w- c:\windows\system32\OpcServices.dll

2009-09-25 01:36:13 280064 ----a-w- c:\windows\system32\XpsGdiConverter.dll

2009-09-25 01:35:31 135680 ----a-w- c:\windows\system32\XpsRasterService.dll

2009-09-25 01:33:25 195584 ----a-w- c:\windows\system32\dxdiagn.dll

2009-09-25 01:33:15 829440 ----a-w- c:\windows\system32\d3d10warp.dll

2009-09-25 01:33:01 369664 ----a-w- c:\windows\system32\WMPhoto.dll

2009-09-25 01:32:59 252928 ----a-w- c:\windows\system32\dxdiag.exe

2009-09-25 01:31:53 519680 ----a-w- c:\windows\system32\d3d11.dll

2009-09-25 01:31:26 486912 ----a-w- c:\windows\system32\d3d10level9.dll

2009-09-25 01:31:21 161280 ----a-w- c:\windows\system32\d3d10_1.dll

2009-09-25 01:31:19 218112 ----a-w- c:\windows\system32\d3d10_1core.dll

2009-09-25 01:31:16 1030144 ----a-w- c:\windows\system32\d3d10.dll

2009-09-25 01:31:15 828928 ----a-w- c:\windows\system32\d2d1.dll

2009-09-25 01:30:23 481792 ----a-w- c:\windows\system32\dxgi.dll

2009-09-25 01:30:23 190464 ----a-w- c:\windows\system32\d3d10core.dll

2009-09-25 01:27:04 793088 ----a-w- c:\windows\system32\FntCache.dll

2009-09-25 01:27:04 37888 ----a-w- c:\windows\system32\cdd.dll

2009-09-25 01:27:04 1064448 ----a-w- c:\windows\system32\DWrite.dll

2009-09-24 22:54:55 258048 ----a-w- c:\windows\system32\winspool.drv

2009-09-24 22:54:53 667648 ----a-w- c:\windows\system32\printfilterpipelinesvc.exe

2009-09-24 22:54:52 26112 ----a-w- c:\windows\system32\printfilterpipelineprxy.dll

2009-09-19 22:20:40 37665 ----a-w- c:\windows\fonts\GlobalUserInterface.CompositeFont

2009-09-10 16:48:01 218624 ----a-w- c:\windows\system32\msv1_0.dll

2009-09-10 14:59:26 8147456 ----a-w- c:\windows\system32\wmploc.DLL

2009-09-10 14:58:28 310784 ----a-w- c:\windows\system32\unregmp2.exe

2009-09-10 02:01:02 3023360 ----a-w- c:\windows\system32\UIRibbon.dll

2009-09-10 02:00:54 1164800 ----a-w- c:\windows\system32\UIRibbonRes.dll

2009-09-10 02:00:36 92672 ----a-w- c:\windows\system32\UIAnimation.dll

2008-07-23 20:50:42 174 --sha-w- c:\program files\desktop.ini

2007-10-18 04:14:16 35978 ----a-w- c:\windows\inf\perflib\041d\perfd.dat

2007-10-18 04:14:16 35978 ----a-w- c:\windows\inf\perflib\041d\perfc.dat

2007-10-18 04:14:16 290490 ----a-w- c:\windows\inf\perflib\041d\perfi.dat

2007-10-18 04:14:16 290490 ----a-w- c:\windows\inf\perflib\041d\perfh.dat

2006-11-02 09:20:21 287440 ----a-w- c:\windows\inf\perflib\0000\perfi.dat

2006-11-02 09:20:21 287440 ----a-w- c:\windows\inf\perflib\0000\perfh.dat

2006-11-02 09:20:19 30674 ----a-w- c:\windows\inf\perflib\0000\perfd.dat

2006-11-02 09:20:19 30674 ----a-w- c:\windows\inf\perflib\0000\perfc.dat

============= FINISH: 20:22:56,37 ===============

[/log][log]