View Full Version : Kollah? - Cannot run any security programs
nicholsc
2009-08-15, 21:36
Hello,
Hopefully you can help me with this. Here is the list of events so far:
Operating System: Windows XP Version 2002, Service Pack 3
At start up, received a message: Generic host process for win32 services has encountered a problem and needs to close. We are sorry for the inconvenience.
Ran CA Anti-Spyware. Resulted in various files, all of which could be removed except for Kollah.
After that, I attempted to run various other programs – Spybot, CA Antivirus, ad-aware, Super-Antispware, Smitfraud, Abexo Registry Cleaner, Advanced System Care, etc.. All of them, after reaching a certain point, would close unexpectedly. When trying to open again, this error would pop up: “Windows cannot access the specified device, path, or file. You may not have appropriate permissions to access the file.” The only program I can run is CA Anti-Spyware.
I cannot update windows security updates, or any other virus/malware/spyware programs. They all end up telling me I do not have any rights to perform that operation. I have attempted this in safe-mode, tried system restoring to a previous date, with no luck.
NOTE: I tried to run Hijack this to create a log and it did the same as all other programs – it closed and the error “Windows cannot access the specified device, path, or file. You may not have appropriate permissions to access the file” was displayed.
Hi,
Download GMER (http://www.gmer.net) here by clicking download exe -button and then saving it your desktop:
Double-click .exe that you downloaded
Click rootkit-tab and then scan.
Don't check
Show All
box while scanning in progress!
When scanning is ready, click Copy.
This copies log to clipboard
Post log in your reply.
nicholsc
2009-08-19, 02:44
I ran the program, and it ran about 30 some minutes and did the same thing as all the others. It would close and when trying to reopen it gave me the error "Windows cannot access the specified device, path, or file. You may not have appropriate permissions to access the file.”
Hi,
Let's see how this goes..
Download GMER again and when it asks location where to put the file, use name "something.com" to have the file renamed (remember to have those quotes there). Then try to run it.
Download DDS and save it to your desktop from here (http://download.bleepingcomputer.com/sUBs/dds.scr).
Disable any script blocker, and then double click dds.scr to run the tool.
When done, DDS will open two (2) logs:
DDS.txt
Attach.txt
Save both reports to your desktop. Post them back to your topic.
nicholsc
2009-08-20, 05:08
Ran GMER under "Something.com". Ran about twice as long at previously, but then closed and when tried to reopen came up with Windows cannot access the specified device, path, or file. You may not have appropriate permissions to access the file.” Will try dds tomorrow.
Thanks,
Cory
nicholsc
2009-08-21, 01:44
OK. I got it to run, but the DDS.SCR I downloaded didn't work. It opened directly with a text file with a lot of goofy characters. I found another one called dds.pif. It ran and here are the results. DDS.text first, attach.text second:
DDS (Ver_09-07-30.01) - NTFSx86
Run by NEWXPOWNER at 17:31:15.95 on Thu 08/20/2009
Internet Explorer: 6.0.2900.5512
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.502.230 [GMT -5:00]
AV: CA Anti-Virus *On-access scanning enabled* (Updated) {17CFD1EA-56CF-40B5-A06B-BD3A27397C93}
============== Running Processes ===============
C:\WINNT\system32\svchost -k DcomLaunch
C:\WINNT\system32\svchost -k rpcss
C:\WINNT\System32\svchost.exe -k netsvcs
C:\WINNT\system32\svchost.exe -k NetworkService
C:\WINNT\system32\svchost.exe -k LocalService
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINNT\Explorer.EXE
C:\WINNT\ehome\ehtray.exe
C:\WINNT\system32\igfxpers.exe
C:\WINNT\stsystra.exe
C:\Program Files\CA\CA Internet Security Suite\cctray\cctray.exe
C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spam\QSP-5.1.18.0\QOELoader.exe
C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\CAVRID.exe
C:\WINNT\system32\ctfmon.exe
C:\Program Files\DNA\btdna.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spyware\CAPPActiveProtection.exe
C:\WINNT\system32\svchost.exe -k LocalService
C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\ISafe.exe
C:\WINNT\eHome\ehRecvr.exe
C:\WINNT\eHome\ehSched.exe
C:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exe
C:\Program Files\CA\SharedComponents\PPRT\bin\ITMRTSVC.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINNT\system32\svchost.exe -k LocalService
svchost
C:\WINNT\system32\svchost.exe -k imgsvc
C:\Program Files\UPHClean\uphclean.exe
C:\WINNT\ehome\mcrdsvc.exe
C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spyware\PPCtlPriv.exe
C:\WINNT\system32\dllhost.exe
C:\Program Files\CA\CA Internet Security Suite\ccprovsp.exe
C:\WINNT\System32\alg.exe
C:\WINNT\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINNT\system32\wbem\wmiprvse.exe
C:\Documents and Settings\NEWXPOWNER\Desktop\Computer Fix\dds.pif
============== Pseudo HJT Report ===============
uStart Page = hxxp://www.yahoo.com/
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\system32\blank.htm
mWinlogon: Userinit=c:\winnt\system32\userinit.exe,c:\winnt\system32\sdra64.exe,
TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
uRun: [ctfmon.exe] c:\winnt\system32\ctfmon.exe
uRun: [BitTorrent DNA] "c:\program files\dna\btdna.exe"
uRun: [SUPERAntiSpyware] c:\program files\superantispyware\SUPERAntiSpyware.exe
mRun: [ehTray] c:\winnt\ehome\ehtray.exe
mRun: [IgfxTray] c:\winnt\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\winnt\system32\hkcmd.exe
mRun: [Persistence] c:\winnt\system32\igfxpers.exe
mRun: [SigmatelSysTrayApp] stsystra.exe
mRun: [cctray] "c:\program files\ca\ca internet security suite\cctray\cctray.exe"
mRun: [QOELOADER] "c:\program files\ca\ca internet security suite\ca anti-spam\qsp-5.1.18.0\QOELoader.exe"
mRun: [CAVRID] "c:\program files\ca\ca internet security suite\ca anti-virus\CAVRID.exe"
mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
mRun: [LXBSCATS] rundll32 c:\winnt\system32\spool\drivers\w32x86\3\LXBStime.dll,_RunDLLEntry@16
StartupFolder: c:\docume~1\alluse~1.win\startm~1\programs\startup\adober~1.lnk - c:\program files\adobe\acrobat 7.0\reader\reader_sl.exe
StartupFolder: c:\docume~1\alluse~1.win\startm~1\programs\startup\micros~1.lnk - c:\program files\microsoft office\office10\OSA.EXE
uPolicies-system: EnableProfileQuota = 1 (0x1)
IE: E&xport to Microsoft Excel - c:\progra~1\mi1933~1\office10\EXCEL.EXE/3000
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC} - c:\program files\java\jre1.6.0_07\bin\ssv.dll
LSP: c:\winnt\system32\VetRedir.dll
Trusted Zone: turbotax.com
DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} - hxxp://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} - hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://javadl.sun.com/webapps/download/AutoDL?BundleId=23100
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - c:\program files\common files\microsoft shared\web folders\PKMCDO.DLL
Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.dll
Notify: igfxcui - igfxdev.dll
LSA: Authentication Packages = msv1_0 c:\winnt\system32\jkkji.dll
============= SERVICES / DRIVERS ===============
R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2006-10-10 5632]
R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2007-2-27 32256]
R1 VET-FILT;VET File System Filter;c:\winnt\system32\drivers\vet-filt.sys [2008-3-29 26376]
R1 VET-REC;VET File System Recognizer;c:\winnt\system32\drivers\vet-rec.sys [2008-3-29 21128]
R1 VETEFILE;VET File Scan Engine;c:\winnt\system32\drivers\vetefile.sys [2008-6-4 880560]
R1 VETFDDNT;VET Floppy Boot Sector Monitor;c:\winnt\system32\drivers\vetfddnt.sys [2008-3-29 21512]
R1 VETMONNT;VET File Monitor;c:\winnt\system32\drivers\vetmonnt.sys [2008-3-29 32264]
R2 aawservice;Lavasoft Ad-Aware Service;c:\program files\lavasoft\ad-aware\aawservice.exe [2008-9-10 611664]
R2 CAISafe;CAISafe;c:\program files\ca\ca internet security suite\ca anti-virus\isafe.exe [2008-3-29 144960]
R2 IntuitUpdateService;Intuit Update Service;c:\program files\common files\intuit\update service\IntuitUpdateService.exe [2008-10-10 13088]
R2 McrdSvc;Media Center Extender Service;c:\winnt\ehome\mcrdsvc.exe [2005-8-5 99328]
R3 PPCtlPriv;PPCtlPriv;c:\program files\ca\ca internet security suite\ca anti-spyware\PPCtlPriv.exe [2007-8-16 189704]
R3 VETEBOOT;VET Boot Scan Engine;c:\winnt\system32\drivers\veteboot.sys [2008-6-4 108368]
S2 VETMSGNT;VET Message Service;c:\program files\ca\ca internet security suite\ca anti-virus\vetmsg.exe [2008-3-29 242952]
S3 PRSUSB;Sony Reader;c:\winnt\system32\drivers\PRSUSB.sys [2006-8-16 18944]
S3 SASENUM;SASENUM;c:\program files\superantispyware\SASENUM.SYS [2006-2-16 4096]
=============== Created Last 30 ================
2009-08-10 22:26 <DIR> --d----- c:\winnt\system32\wbem\Repository
2009-08-10 22:25 <DIR> --d----- c:\docume~1\newxpo~1\applic~1\IObit
2009-08-10 22:25 <DIR> --d----- c:\program files\common files\ParetoLogic
2009-08-10 22:25 <DIR> --d----- c:\docume~1\alluse~1.win\applic~1\ParetoLogic
2009-08-10 22:25 <DIR> --d-h--- c:\winnt\PIF
2009-08-10 22:25 <DIR> --d----- c:\docume~1\newxpo~1\applic~1\Malwarebytes
2009-08-10 22:23 <DIR> --d----- c:\program files\TeaTimer (Spybot - Search & Destroy)
2009-08-10 22:23 <DIR> --d----- c:\program files\SDHelper (Spybot - Search & Destroy)
2009-08-10 22:23 <DIR> --d----- c:\program files\Misc. Support Library (Spybot - Search & Destroy)
2009-08-10 22:23 <DIR> --d----- c:\program files\File Scanner Library (Spybot - Search & Destroy)
2009-08-09 14:57 <DIR> --d----- c:\program files\IObit
2009-08-09 13:45 580,640 a--sh--- c:\winnt\system32\drivers\fidbox.dat
2009-08-09 13:45 23,328 a--sh--- c:\winnt\system32\drivers\fidbox2.dat
2009-08-09 13:45 9,896 a--sh--- c:\winnt\system32\drivers\fidbox.idx
2009-08-09 13:45 3,236 a--sh--- c:\winnt\system32\drivers\fidbox2.idx
2009-08-09 13:45 1,814 a------- C:\rollback.ini
2009-08-09 13:38 <DIR> --d----- c:\docume~1\alluse~1.win\applic~1\ParetoLogic Anti-Virus PLUS
2009-08-09 13:31 <DIR> --d----- c:\docume~1\alluse~1.win\applic~1\Malwarebytes
2009-08-09 11:48 <DIR> --d----- c:\winnt\system32\XPSViewer
2009-08-09 11:47 597,504 -c------ c:\winnt\system32\dllcache\printfilterpipelinesvc.exe
2009-08-09 11:47 575,488 -c------ c:\winnt\system32\dllcache\xpsshhdr.dll
2009-08-09 11:47 89,088 -c------ c:\winnt\system32\dllcache\filterpipelineprintproc.dll
2009-08-09 11:47 575,488 -------- c:\winnt\system32\xpsshhdr.dll
2009-08-09 11:47 117,760 -------- c:\winnt\system32\prntvpt.dll
2009-08-09 11:47 1,676,288 -c------ c:\winnt\system32\dllcache\xpssvcs.dll
2009-08-09 11:47 1,676,288 -------- c:\winnt\system32\xpssvcs.dll
2009-08-09 10:55 <DIR> --d----- c:\winnt\system32\CatRoot
2009-08-07 09:44 189,325 a------- c:\winnt\system32\wisdstr.exe
2009-08-07 09:44 75,776 a------- C:\yedfjdy.exe
2009-08-07 09:44 19,456 a------- C:\niawndos.exe
2009-08-07 09:44 19,456 a------- C:\hcel.exe
2009-08-07 09:44 9,728 a------- C:\umoikchf.exe
==================== Find3M ====================
2009-08-10 19:42 2,478 a------- c:\winnt\system32\tmp.reg
2009-07-13 10:08 286,720 a------- c:\winnt\system32\wmpdxm.dll
2009-06-26 11:50 666,624 a------- c:\winnt\system32\wininet.dll
2009-06-26 11:50 81,920 a------- c:\winnt\system32\ieencode.dll
2009-06-16 09:36 119,808 a------- c:\winnt\system32\t2embed.dll
2009-06-16 09:36 81,920 a------- c:\winnt\system32\fontsub.dll
2009-06-03 14:09 1,291,264 a------- c:\winnt\system32\quartz.dll
2008-09-07 10:15 60,200 a------- c:\docume~1\newxpo~1\applic~1\GDIPFONTCACHEV1.DAT
2007-11-25 12:10 307 a------- c:\documents and settings\newxpowner\x.dat
2007-11-25 12:09 266,729 a------- c:\documents and settings\newxpowner\z.dat
2006-01-14 11:42 251 a------- c:\program files\wt3d.ini
============= FINISH: 17:32:48.18 ===============
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
DDS (Ver_09-07-30.01)
Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume2
Install Date: 7/3/2007 6:46:02 PM
System Uptime: 8/19/2009 9:05:25 PM (20 hours ago)
Motherboard: Dell Inc. | | 0KF623
Processor: Intel(R) Pentium(R) 4 CPU 3.00GHz | Microprocessor | 2992/800mhz
==== Disk Partitions =========================
C: is FIXED (NTFS) - 144 GiB total, 106.74 GiB free.
D: is Removable
E: is Removable
F: is Removable
G: is Removable
H: is CDROM ()
I: is FIXED (NTFS) - 233 GiB total, 220.286 GiB free.
==== Disabled Device Manager Items =============
==== System Restore Points ===================
No restore point in system.
==== Installed Programs ======================
Abexo Free Registry Cleaner
Ad-Aware
Adobe Flash Player 10 ActiveX
Adobe Reader 7.0.8
AnswerWorks 4.0 Runtime - English
AnswerWorks 5.0 English Runtime
AnswerWorks Runtime
Apple Software Update
AutoCAD 2002
BearShare
BitTorrent
CA Anti-Spam
CA Anti-Spyware
CA Anti-Virus
CA Internet Security Suite
CDBurnerXP
Citrix Presentation Server Client
Conexant D850 56K V.9x DFVc Modem
Corel Paint Shop Pro X
Dell Resource CD
Dell ResourceCD
DNA
High Definition Audio Driver Package - KB835221
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows Media Player 10 (KB903157)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Intel(R) Graphics Media Accelerator Driver
Intel(R) PRO Network Connections Drivers
J2SE Runtime Environment 5.0 Update 11
Java 2 Runtime Environment Standard Edition v1.3.1_16
Java(TM) 6 Update 5
Java(TM) 6 Update 7
KODAK EASYSHARE Gallery Upload ActiveX Control
Lexmark 810 Series
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB928366)
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft Office XP Professional with FrontPage
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
PC Pitstop Optimize 1.0t
Power Tab Editor 1.7
PRS-500 USB driver
QuickTime
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 10 (KB936782)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950759)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951376)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB953838)
Security Update for Windows XP (KB953839)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956390)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958215)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958690)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960714)
Security Update for Windows XP (KB960715)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB961371)
Security Update for Windows XP (KB961373)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB963027)
Security Update for Windows XP (KB968537)
Security Update for Windows XP (KB969897)
Security Update for Windows XP (KB969898)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB971633)
Security Update for Windows XP (KB972260)
Security Update for Windows XP (KB973346)
SigmaTel Audio
SUPERAntiSpyware Free Edition
TurboTax 2008
TurboTax 2008 WinPerFedFormset
TurboTax 2008 WinPerProgramHelp
TurboTax 2008 WinPerReleaseEngine
TurboTax 2008 WinPerTaxSupport
TurboTax 2008 WinPerUserEducation
TurboTax 2008 wrapper
TurboTax 2008 wwiiper
TurboTax Deluxe 2007
Update for Windows Media Player 10 (KB913800)
Update for Windows Media Player 10 (KB926251)
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB951978)
Update for Windows XP (KB955839)
Update for Windows XP (KB967715)
Update Rollup 2 for Windows XP Media Center Edition 2005
User Profile Hive Cleanup Service
WebFldrs XP
Winamp (remove only)
WinCleaner Complete PC Care Version 10
Windows Driver Package - Sony Corporation (PRSUSB) USB (08/08/2006 1.0.03.08080)
Windows Genuine Advantage Notifications (KB905474)
Windows Media Format Runtime
Windows XP Media Center Edition 2005 KB908250
Windows XP Service Pack 3
WinZip
Yahoo! Toolbar
==== Event Viewer Messages From Past Week ========
8/16/2009 3:01:26 AM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0xd0000156: Security Update for Windows XP (KB960859).
8/16/2009 3:00:57 AM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0xd0000156: Security Update for Windows XP (KB971657).
8/16/2009 3:00:57 AM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0xd0000156: Security Update for Windows XP (KB971557).
8/15/2009 9:23:19 AM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0xd0000156: Security Update for Windows XP (KB956744).
8/15/2009 9:23:11 AM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0xd0000156: Security Update for Windows XP (KB973869).
8/15/2009 9:23:06 AM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0xd0000156: Security Update for Windows XP (KB973507).
8/15/2009 9:23:00 AM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0xd0000156: Security Update for Windows XP (KB973354).
8/15/2009 9:21:55 AM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0xd0000156: Security Update for Windows XP (KB973815).
8/14/2009 4:54:53 PM, error: Service Control Manager [7000] - The VET Message Service service failed to start due to the following error: Access is denied.
8/14/2009 4:54:26 PM, error: NetBT [4311] - Initialization failed because the driver device could not be created.
8/13/2009 2:14:14 AM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0xd0000156: Update for Windows XP (KB961118).
==== End Of File ===========================
Hi,
Re-download GMER (from that download exe -button again) and start it. Uncheck these from the options:
Devices
Sections
When unchecked, run the scan. Post back the report if run was successful.
nicholsc
2009-08-22, 14:06
I tried to run it again, but at some point it closed and could not open coming up with the same error.
Hi,
Please save this (http://download.bleepingcomputer.com/rootrepeal/Win32kDiag.exe) file to your desktop. Double-click on it to run a scan. When it's finished, there will be a log called Win32kDiag.txt on your desktop. Please open it with notepad and post the contents here.
nicholsc
2009-08-23, 00:19
Can't post all of it at one time. here is Part 1
WARNING: Could not get backup privileges!
Searching 'C:\WINNT'...
Found mount point : C:\WINNT\$hf_mig$\{29F8DDC1-9487-49b8-B27E-3E0C3C1298FF}
Mount point destination : \Device\__max++>\^
Cannot access: C:\WINNT\SoftwareDistribution\Download\07a96de176867bc25b7dc839d22b07e2\update\update.exe
[1] 2004-10-14 10:34:54 654848 C:\WINNT\$hf_mig$\KB873339\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 11:34:54 654848 C:\WINNT\$hf_mig$\KB885835\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 11:34:54 654848 C:\WINNT\$hf_mig$\KB885836\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 13:34:52 654848 C:\WINNT\$hf_mig$\KB886185\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 11:34:54 654848 C:\WINNT\$hf_mig$\KB887472\update\update.exe (Microsoft Corporation)
[1] 2004-11-30 14:46:40 654848 C:\WINNT\$hf_mig$\KB888302\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB890046\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 19:35:06 718048 C:\WINNT\$hf_mig$\KB890859\update\update.exe (Microsoft Corporation)
[1] 2004-11-30 14:46:40 654848 C:\WINNT\$hf_mig$\KB891781\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB893756\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB894391\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB896358\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB896423\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB896428\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 22:35:05 718048 C:\WINNT\$hf_mig$\KB898461\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB899587\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB899591\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB900485\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB900725\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB901017\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB901214\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB902400\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 22:35:05 718048 C:\WINNT\$hf_mig$\KB905414\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB905749\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB908519\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB908531\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB910437\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB911280\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB911562\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB911927\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB913580\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB914388\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB914389\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB916595\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:16:51 716000 C:\WINNT\$hf_mig$\KB917344\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB917953\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB918118\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB918439\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB919007\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:16:51 716000 C:\WINNT\$hf_mig$\KB920213\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB920670\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB920683\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB920685\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB920872\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB921503\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB922582\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:16:51 716000 C:\WINNT\$hf_mig$\KB922819\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB923414\update\update.exe (Microsoft Corporation)
[1] 2008-11-15 12:18:04 755576 C:\WINNT\$hf_mig$\KB923561\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB923980\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB924191\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB924270\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB924496\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB925902\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB926255\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:16:51 716000 C:\WINNT\$hf_mig$\KB926436\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB927779\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB927802\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB927891\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB928255\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB928843\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB929123\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB929969\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB930178\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB930916\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB931261\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB931784\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB931836\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB933360\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB933729\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB935839\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB935840\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB936021\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB936357\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB937894\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB938127\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB938828\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB938829\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB941202\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB941644\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB941693\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB942763\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB942840\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB943055\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB943485\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB944338\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB944653\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB945553\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB946026\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:56 716000 C:\WINNT\$hf_mig$\KB946627\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:20:44 755576 C:\WINNT\$hf_mig$\KB946648\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB948590\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:56 716000 C:\WINNT\$hf_mig$\KB948881\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB950749\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB950759\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB950760\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB950762\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB950974\update\update.exe (Microsoft Corporation)
[1] 2007-12-03 10:25:31 755576 C:\WINNT\$hf_mig$\KB951066\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB951072-v2\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB951376\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB951376-v2\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB951698\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB951748\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB951978\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB952004\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB952287\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB952954\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB953838\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB953839\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB954211\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB954459\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB954600\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB955069\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB955839\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB956390\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB956391\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB956572\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB956802\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB956803\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB956841\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB957095\update\update.exe (Microsoft Corporation)
[1] 2008-07-08 08:02:04 755576 C:\WINNT\$hf_mig$\KB957097\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB958215\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB958644\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB958687\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB958690\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB959426\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB960225\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB960714\update\update.exe (Microsoft Corporation)
[1] 2008-11-15 12:18:04 755576 C:\WINNT\$hf_mig$\KB960715\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB960803\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 06:40:52 755576 C:\WINNT\$hf_mig$\KB961371\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB961373\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB961501\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB963027\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB967715\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB968537\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB969897\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB969898\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB970238\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB971633\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 06:40:52 755576 C:\WINNT\$hf_mig$\KB972260\update\update.exe (Microsoft Corporation)
[1] 2008-07-08 08:02:04 755576 C:\WINNT\$hf_mig$\KB973346\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\07a96de176867bc25b7dc839d22b07e2\update\update.exe ()
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\0dd0244816ffb4b094c1caba4c3b1178\update\update.exe ()
[1] 2007-07-27 10:41:48 755576 C:\WINNT\SoftwareDistribution\Download\122ece420ea2cadf18cdf04c90b6d8f1\update\update.exe (Microsoft Corporation)
[1] 2008-07-08 08:02:04 755576 C:\WINNT\SoftwareDistribution\Download\2c95b28351986132d7f36dd28eece9b0\update\update.exe ()
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\678162639e69c808c1768ab6340eae25\update\update.exe ()
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\6913c676e5d33978934caa46c49fdc75\update\update.exe ()
[1] 2007-11-30 06:18:51 755576 C:\WINNT\SoftwareDistribution\Download\6b4e49f1a78b9558feeb103a07b06a32\update\update.exe ()
[1] 2007-03-05 20:22:59 716000 C:\WINNT\SoftwareDistribution\Download\730e45fefcdf343b61704b89c95d7cca\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINNT\SoftwareDistribution\Download\80046d42bf5044b609b7f7326dd9674d\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\9cf59263a134ab3fbbee78365a2fa5fc\update\update.exe ()
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\b7f0b2892b21211a5630518d058f48d9\update\update.exe ()
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\d48a3b967ba5709df048e8f2a49cf8a6\update\update.exe ()
[2] 2006-12-10 13:10:04 742192 C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP398\A0037864.exe (Microsoft Corporation)
Cannot access: C:\WINNT\SoftwareDistribution\Download\0dd0244816ffb4b094c1caba4c3b1178\update\update.exe
[1] 2004-10-14 10:34:54 654848 C:\WINNT\$hf_mig$\KB873339\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 11:34:54 654848 C:\WINNT\$hf_mig$\KB885835\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 11:34:54 654848 C:\WINNT\$hf_mig$\KB885836\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 13:34:52 654848 C:\WINNT\$hf_mig$\KB886185\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 11:34:54 654848 C:\WINNT\$hf_mig$\KB887472\update\update.exe (Microsoft Corporation)
[1] 2004-11-30 14:46:40 654848 C:\WINNT\$hf_mig$\KB888302\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB890046\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 19:35:06 718048 C:\WINNT\$hf_mig$\KB890859\update\update.exe (Microsoft Corporation)
[1] 2004-11-30 14:46:40 654848 C:\WINNT\$hf_mig$\KB891781\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB893756\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB894391\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB896358\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB896423\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB896428\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 22:35:05 718048 C:\WINNT\$hf_mig$\KB898461\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB899587\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB899591\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB900485\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB900725\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB901017\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB901214\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB902400\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 22:35:05 718048 C:\WINNT\$hf_mig$\KB905414\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB905749\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB908519\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB908531\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB910437\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB911280\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB911562\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB911927\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB913580\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB914388\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB914389\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB916595\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:16:51 716000 C:\WINNT\$hf_mig$\KB917344\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB917953\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB918118\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB918439\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB919007\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:16:51 716000 C:\WINNT\$hf_mig$\KB920213\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB920670\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB920683\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB920685\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB920872\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB921503\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB922582\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:16:51 716000 C:\WINNT\$hf_mig$\KB922819\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB923414\update\update.exe (Microsoft Corporation)
[1] 2008-11-15 12:18:04 755576 C:\WINNT\$hf_mig$\KB923561\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB923980\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB924191\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB924270\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB924496\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB925902\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB926255\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:16:51 716000 C:\WINNT\$hf_mig$\KB926436\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB927779\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB927802\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB927891\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB928255\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB928843\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB929123\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB929969\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB930178\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB930916\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB931261\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB931784\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB931836\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB933360\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB933729\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB935839\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB935840\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB936021\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB936357\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB937894\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB938127\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB938828\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB938829\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB941202\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB941644\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB941693\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB942763\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB942840\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB943055\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB943485\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB944338\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB944653\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB945553\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB946026\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:56 716000 C:\WINNT\$hf_mig$\KB946627\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:20:44 755576 C:\WINNT\$hf_mig$\KB946648\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB948590\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:56 716000 C:\WINNT\$hf_mig$\KB948881\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB950749\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB950759\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB950760\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB950762\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB950974\update\update.exe (Microsoft Corporation)
[1] 2007-12-03 10:25:31 755576 C:\WINNT\$hf_mig$\KB951066\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB951072-v2\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB951376\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB951376-v2\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB951698\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB951748\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB951978\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB952004\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB952287\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB952954\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB953838\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB953839\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB954211\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB954459\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB954600\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB955069\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB955839\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB956390\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB956391\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB956572\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB956802\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB956803\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB956841\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB957095\update\update.exe (Microsoft Corporation)
[1] 2008-07-08 08:02:04 755576 C:\WINNT\$hf_mig$\KB957097\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB958215\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB958644\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB958687\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB958690\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB959426\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB960225\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB960714\update\update.exe (Microsoft Corporation)
[1] 2008-11-15 12:18:04 755576 C:\WINNT\$hf_mig$\KB960715\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB960803\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 06:40:52 755576 C:\WINNT\$hf_mig$\KB961371\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB961373\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB961501\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB963027\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB967715\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB968537\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB969897\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB969898\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB970238\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB971633\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 06:40:52 755576 C:\WINNT\$hf_mig$\KB972260\update\update.exe (Microsoft Corporation)
[1] 2008-07-08 08:02:04 755576 C:\WINNT\$hf_mig$\KB973346\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\07a96de176867bc25b7dc839d22b07e2\update\update.exe ()
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\0dd0244816ffb4b094c1caba4c3b1178\update\update.exe ()
[1] 2007-07-27 10:41:48 755576 C:\WINNT\SoftwareDistribution\Download\122ece420ea2cadf18cdf04c90b6d8f1\update\update.exe (Microsoft Corporation)
[1] 2008-07-08 08:02:04 755576 C:\WINNT\SoftwareDistribution\Download\2c95b28351986132d7f36dd28eece9b0\update\update.exe ()
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\678162639e69c808c1768ab6340eae25\update\update.exe ()
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\6913c676e5d33978934caa46c49fdc75\update\update.exe ()
[1] 2007-11-30 06:18:51 755576 C:\WINNT\SoftwareDistribution\Download\6b4e49f1a78b9558feeb103a07b06a32\update\update.exe ()
[1] 2007-03-05 20:22:59 716000 C:\WINNT\SoftwareDistribution\Download\730e45fefcdf343b61704b89c95d7cca\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINNT\SoftwareDistribution\Download\80046d42bf5044b609b7f7326dd9674d\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\9cf59263a134ab3fbbee78365a2fa5fc\update\update.exe ()
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\b7f0b2892b21211a5630518d058f48d9\update\update.exe ()
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\d48a3b967ba5709df048e8f2a49cf8a6\update\update.exe ()
[2] 2006-12-10 13:10:04 742192 C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP398\A0037864.exe (Microsoft Corporation)
Cannot access: C:\WINNT\SoftwareDistribution\Download\2c95b28351986132d7f36dd28eece9b0\update\update.exe
[1] 2004-10-14 10:34:54 654848 C:\WINNT\$hf_mig$\KB873339\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 11:34:54 654848 C:\WINNT\$hf_mig$\KB885835\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 11:34:54 654848 C:\WINNT\$hf_mig$\KB885836\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 13:34:52 654848 C:\WINNT\$hf_mig$\KB886185\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 11:34:54 654848 C:\WINNT\$hf_mig$\KB887472\update\update.exe (Microsoft Corporation)
[1] 2004-11-30 14:46:40 654848 C:\WINNT\$hf_mig$\KB888302\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB890046\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 19:35:06 718048 C:\WINNT\$hf_mig$\KB890859\update\update.exe (Microsoft Corporation)
[1] 2004-11-30 14:46:40 654848 C:\WINNT\$hf_mig$\KB891781\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB893756\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB894391\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB896358\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB896423\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB896428\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 22:35:05 718048 C:\WINNT\$hf_mig$\KB898461\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB899587\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB899591\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB900485\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB900725\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB901017\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB901214\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB902400\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 22:35:05 718048 C:\WINNT\$hf_mig$\KB905414\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB905749\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB908519\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB908531\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB910437\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB911280\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB911562\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB911927\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB913580\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB914388\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB914389\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB916595\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:16:51 716000 C:\WINNT\$hf_mig$\KB917344\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB917953\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB918118\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB918439\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB919007\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:16:51 716000 C:\WINNT\$hf_mig$\KB920213\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB920670\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB920683\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB920685\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB920872\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB921503\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB922582\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:16:51 716000 C:\WINNT\$hf_mig$\KB922819\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB923414\update\update.exe (Microsoft Corporation)
[1] 2008-11-15 12:18:04 755576 C:\WINNT\$hf_mig$\KB923561\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB923980\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB924191\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB924270\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB924496\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB925902\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB926255\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:16:51 716000 C:\WINNT\$hf_mig$\KB926436\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB927779\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB927802\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB927891\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB928255\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB928843\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB929123\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB929969\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB930178\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB930916\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB931261\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB931784\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB931836\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB933360\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB933729\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB935839\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB935840\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB936021\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB936357\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB937894\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB938127\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB938828\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB938829\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB941202\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB941644\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB941693\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB942763\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB942840\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB943055\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB943485\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB944338\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB944653\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB945553\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB946026\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:56 716000 C:\WINNT\$hf_mig$\KB946627\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:20:44 755576 C:\WINNT\$hf_mig$\KB946648\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB948590\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:56 716000 C:\WINNT\$hf_mig$\KB948881\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB950749\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB950759\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB950760\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB950762\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB950974\update\update.exe (Microsoft Corporation)
[1] 2007-12-03 10:25:31 755576 C:\WINNT\$hf_mig$\KB951066\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB951072-v2\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB951376\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB951376-v2\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB951698\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB951748\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB951978\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB952004\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB952287\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB952954\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB953838\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB953839\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB954211\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB954459\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB954600\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB955069\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB955839\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB956390\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB956391\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB956572\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB956802\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB956803\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB956841\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB957095\update\update.exe (Microsoft Corporation)
[1] 2008-07-08 08:02:04 755576 C:\WINNT\$hf_mig$\KB957097\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB958215\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB958644\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB958687\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB958690\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB959426\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB960225\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB960714\update\update.exe (Microsoft Corporation)
[1] 2008-11-15 12:18:04 755576 C:\WINNT\$hf_mig$\KB960715\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB960803\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 06:40:52 755576 C:\WINNT\$hf_mig$\KB961371\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB961373\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB961501\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB963027\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB967715\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB968537\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB969897\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB969898\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB970238\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB971633\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 06:40:52 755576 C:\WINNT\$hf_mig$\KB972260\update\update.exe (Microsoft Corporation)
[1] 2008-07-08 08:02:04 755576 C:\WINNT\$hf_mig$\KB973346\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\07a96de176867bc25b7dc839d22b07e2\update\update.exe ()
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\0dd0244816ffb4b094c1caba4c3b1178\update\update.exe ()
[1] 2007-07-27 10:41:48 755576 C:\WINNT\SoftwareDistribution\Download\122ece420ea2cadf18cdf04c90b6d8f1\update\update.exe (Microsoft Corporation)
[1] 2008-07-08 08:02:04 755576 C:\WINNT\SoftwareDistribution\Download\2c95b28351986132d7f36dd28eece9b0\update\update.exe ()
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\678162639e69c808c1768ab6340eae25\update\update.exe ()
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\6913c676e5d33978934caa46c49fdc75\update\update.exe ()
[1] 2007-11-30 06:18:51 755576 C:\WINNT\SoftwareDistribution\Download\6b4e49f1a78b9558feeb103a07b06a32\update\update.exe ()
[1] 2007-03-05 20:22:59 716000 C:\WINNT\SoftwareDistribution\Download\730e45fefcdf343b61704b89c95d7cca\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINNT\SoftwareDistribution\Download\80046d42bf5044b609b7f7326dd9674d\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\9cf59263a134ab3fbbee78365a2fa5fc\update\update.exe ()
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\b7f0b2892b21211a5630518d058f48d9\update\update.exe ()
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\d48a3b967ba5709df048e8f2a49cf8a6\update\update.exe ()
[2] 2006-12-10 13:10:04 742192 C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP398\A0037864.exe (Microsoft Corporation)
Cannot access: C:\WINNT\SoftwareDistribution\Download\678162639e69c808c1768ab6340eae25\update\update.exe
[1] 2004-10-14 10:34:54 654848 C:\WINNT\$hf_mig$\KB873339\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 11:34:54 654848 C:\WINNT\$hf_mig$\KB885835\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 11:34:54 654848 C:\WINNT\$hf_mig$\KB885836\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 13:34:52 654848 C:\WINNT\$hf_mig$\KB886185\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 11:34:54 654848 C:\WINNT\$hf_mig$\KB887472\update\update.exe (Microsoft Corporation)
[1] 2004-11-30 14:46:40 654848 C:\WINNT\$hf_mig$\KB888302\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB890046\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 19:35:06 718048 C:\WINNT\$hf_mig$\KB890859\update\update.exe (Microsoft Corporation)
[1] 2004-11-30 14:46:40 654848 C:\WINNT\$hf_mig$\KB891781\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB893756\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB894391\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB896358\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB896423\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB896428\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 22:35:05 718048 C:\WINNT\$hf_mig$\KB898461\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB899587\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB899591\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB900485\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB900725\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB901017\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB901214\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB902400\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 22:35:05 718048 C:\WINNT\$hf_mig$\KB905414\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB905749\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB908519\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB908531\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB910437\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB911280\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB911562\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB911927\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB913580\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB914388\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB914389\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB916595\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:16:51 716000 C:\WINNT\$hf_mig$\KB917344\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB917953\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB918118\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB918439\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB919007\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:16:51 716000 C:\WINNT\$hf_mig$\KB920213\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB920670\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB920683\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB920685\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB920872\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB921503\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB922582\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:16:51 716000 C:\WINNT\$hf_mig$\KB922819\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB923414\update\update.exe (Microsoft Corporation)
[1] 2008-11-15 12:18:04 755576 C:\WINNT\$hf_mig$\KB923561\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB923980\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB924191\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB924270\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB924496\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB925902\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB926255\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:16:51 716000 C:\WINNT\$hf_mig$\KB926436\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB927779\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB927802\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB927891\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB928255\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB928843\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB929123\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB929969\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB930178\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB930916\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB931261\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB931784\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB931836\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB933360\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB933729\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB935839\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB935840\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB936021\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB936357\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB937894\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB938127\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB938828\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB938829\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB941202\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB941644\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB941693\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB942763\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB942840\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB943055\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB943485\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB944338\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB944653\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB945553\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB946026\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:56 716000 C:\WINNT\$hf_mig$\KB946627\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:20:44 755576 C:\WINNT\$hf_mig$\KB946648\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB948590\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:56 716000 C:\WINNT\$hf_mig$\KB948881\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB950749\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB950759\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB950760\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB950762\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB950974\update\update.exe (Microsoft Corporation)
[1] 2007-12-03 10:25:31 755576 C:\WINNT\$hf_mig$\KB951066\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB951072-v2\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB951376\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB951376-v2\update\update.exe (Microsoft Corporation)
nicholsc
2009-08-23, 00:20
Part 2
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB951698\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB951748\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB951978\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB952004\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB952287\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB952954\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB953838\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB953839\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB954211\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB954459\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB954600\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB955069\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB955839\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB956390\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB956391\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB956572\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB956802\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB956803\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB956841\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB957095\update\update.exe (Microsoft Corporation)
[1] 2008-07-08 08:02:04 755576 C:\WINNT\$hf_mig$\KB957097\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB958215\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB958644\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB958687\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB958690\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB959426\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB960225\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB960714\update\update.exe (Microsoft Corporation)
[1] 2008-11-15 12:18:04 755576 C:\WINNT\$hf_mig$\KB960715\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB960803\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 06:40:52 755576 C:\WINNT\$hf_mig$\KB961371\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB961373\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB961501\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB963027\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB967715\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB968537\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB969897\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB969898\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB970238\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB971633\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 06:40:52 755576 C:\WINNT\$hf_mig$\KB972260\update\update.exe (Microsoft Corporation)
[1] 2008-07-08 08:02:04 755576 C:\WINNT\$hf_mig$\KB973346\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\07a96de176867bc25b7dc839d22b07e2\update\update.exe ()
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\0dd0244816ffb4b094c1caba4c3b1178\update\update.exe ()
[1] 2007-07-27 10:41:48 755576 C:\WINNT\SoftwareDistribution\Download\122ece420ea2cadf18cdf04c90b6d8f1\update\update.exe (Microsoft Corporation)
[1] 2008-07-08 08:02:04 755576 C:\WINNT\SoftwareDistribution\Download\2c95b28351986132d7f36dd28eece9b0\update\update.exe ()
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\678162639e69c808c1768ab6340eae25\update\update.exe ()
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\6913c676e5d33978934caa46c49fdc75\update\update.exe ()
[1] 2007-11-30 06:18:51 755576 C:\WINNT\SoftwareDistribution\Download\6b4e49f1a78b9558feeb103a07b06a32\update\update.exe ()
[1] 2007-03-05 20:22:59 716000 C:\WINNT\SoftwareDistribution\Download\730e45fefcdf343b61704b89c95d7cca\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINNT\SoftwareDistribution\Download\80046d42bf5044b609b7f7326dd9674d\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\9cf59263a134ab3fbbee78365a2fa5fc\update\update.exe ()
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\b7f0b2892b21211a5630518d058f48d9\update\update.exe ()
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\d48a3b967ba5709df048e8f2a49cf8a6\update\update.exe ()
[2] 2006-12-10 13:10:04 742192 C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP398\A0037864.exe (Microsoft Corporation)
Cannot access: C:\WINNT\SoftwareDistribution\Download\6913c676e5d33978934caa46c49fdc75\update\update.exe
[1] 2004-10-14 10:34:54 654848 C:\WINNT\$hf_mig$\KB873339\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 11:34:54 654848 C:\WINNT\$hf_mig$\KB885835\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 11:34:54 654848 C:\WINNT\$hf_mig$\KB885836\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 13:34:52 654848 C:\WINNT\$hf_mig$\KB886185\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 11:34:54 654848 C:\WINNT\$hf_mig$\KB887472\update\update.exe (Microsoft Corporation)
[1] 2004-11-30 14:46:40 654848 C:\WINNT\$hf_mig$\KB888302\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB890046\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 19:35:06 718048 C:\WINNT\$hf_mig$\KB890859\update\update.exe (Microsoft Corporation)
[1] 2004-11-30 14:46:40 654848 C:\WINNT\$hf_mig$\KB891781\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB893756\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB894391\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB896358\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB896423\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB896428\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 22:35:05 718048 C:\WINNT\$hf_mig$\KB898461\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB899587\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB899591\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB900485\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB900725\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB901017\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB901214\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB902400\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 22:35:05 718048 C:\WINNT\$hf_mig$\KB905414\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB905749\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB908519\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB908531\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB910437\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB911280\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB911562\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB911927\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB913580\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB914388\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB914389\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB916595\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:16:51 716000 C:\WINNT\$hf_mig$\KB917344\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB917953\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB918118\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB918439\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB919007\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:16:51 716000 C:\WINNT\$hf_mig$\KB920213\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB920670\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB920683\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB920685\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB920872\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB921503\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB922582\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:16:51 716000 C:\WINNT\$hf_mig$\KB922819\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB923414\update\update.exe (Microsoft Corporation)
[1] 2008-11-15 12:18:04 755576 C:\WINNT\$hf_mig$\KB923561\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB923980\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB924191\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB924270\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB924496\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB925902\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB926255\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:16:51 716000 C:\WINNT\$hf_mig$\KB926436\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB927779\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB927802\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB927891\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB928255\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB928843\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB929123\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB929969\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB930178\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB930916\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB931261\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB931784\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB931836\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB933360\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB933729\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB935839\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB935840\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB936021\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB936357\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB937894\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB938127\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB938828\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB938829\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB941202\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB941644\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB941693\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB942763\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB942840\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB943055\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB943485\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB944338\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB944653\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB945553\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB946026\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:56 716000 C:\WINNT\$hf_mig$\KB946627\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:20:44 755576 C:\WINNT\$hf_mig$\KB946648\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB948590\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:56 716000 C:\WINNT\$hf_mig$\KB948881\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB950749\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB950759\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB950760\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB950762\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB950974\update\update.exe (Microsoft Corporation)
[1] 2007-12-03 10:25:31 755576 C:\WINNT\$hf_mig$\KB951066\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB951072-v2\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB951376\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB951376-v2\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB951698\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB951748\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB951978\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB952004\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB952287\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB952954\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB953838\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB953839\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB954211\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB954459\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB954600\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB955069\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB955839\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB956390\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB956391\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB956572\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB956802\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB956803\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB956841\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB957095\update\update.exe (Microsoft Corporation)
[1] 2008-07-08 08:02:04 755576 C:\WINNT\$hf_mig$\KB957097\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB958215\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB958644\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB958687\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB958690\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB959426\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB960225\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB960714\update\update.exe (Microsoft Corporation)
[1] 2008-11-15 12:18:04 755576 C:\WINNT\$hf_mig$\KB960715\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB960803\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 06:40:52 755576 C:\WINNT\$hf_mig$\KB961371\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB961373\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB961501\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB963027\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB967715\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB968537\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB969897\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB969898\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB970238\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB971633\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 06:40:52 755576 C:\WINNT\$hf_mig$\KB972260\update\update.exe (Microsoft Corporation)
[1] 2008-07-08 08:02:04 755576 C:\WINNT\$hf_mig$\KB973346\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\07a96de176867bc25b7dc839d22b07e2\update\update.exe ()
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\0dd0244816ffb4b094c1caba4c3b1178\update\update.exe ()
[1] 2007-07-27 10:41:48 755576 C:\WINNT\SoftwareDistribution\Download\122ece420ea2cadf18cdf04c90b6d8f1\update\update.exe (Microsoft Corporation)
[1] 2008-07-08 08:02:04 755576 C:\WINNT\SoftwareDistribution\Download\2c95b28351986132d7f36dd28eece9b0\update\update.exe ()
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\678162639e69c808c1768ab6340eae25\update\update.exe ()
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\6913c676e5d33978934caa46c49fdc75\update\update.exe ()
[1] 2007-11-30 06:18:51 755576 C:\WINNT\SoftwareDistribution\Download\6b4e49f1a78b9558feeb103a07b06a32\update\update.exe ()
[1] 2007-03-05 20:22:59 716000 C:\WINNT\SoftwareDistribution\Download\730e45fefcdf343b61704b89c95d7cca\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINNT\SoftwareDistribution\Download\80046d42bf5044b609b7f7326dd9674d\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\9cf59263a134ab3fbbee78365a2fa5fc\update\update.exe ()
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\b7f0b2892b21211a5630518d058f48d9\update\update.exe ()
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\d48a3b967ba5709df048e8f2a49cf8a6\update\update.exe ()
[2] 2006-12-10 13:10:04 742192 C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP398\A0037864.exe (Microsoft Corporation)
Cannot access: C:\WINNT\SoftwareDistribution\Download\6b4e49f1a78b9558feeb103a07b06a32\update\update.exe
[1] 2004-10-14 10:34:54 654848 C:\WINNT\$hf_mig$\KB873339\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 11:34:54 654848 C:\WINNT\$hf_mig$\KB885835\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 11:34:54 654848 C:\WINNT\$hf_mig$\KB885836\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 13:34:52 654848 C:\WINNT\$hf_mig$\KB886185\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 11:34:54 654848 C:\WINNT\$hf_mig$\KB887472\update\update.exe (Microsoft Corporation)
[1] 2004-11-30 14:46:40 654848 C:\WINNT\$hf_mig$\KB888302\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB890046\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 19:35:06 718048 C:\WINNT\$hf_mig$\KB890859\update\update.exe (Microsoft Corporation)
[1] 2004-11-30 14:46:40 654848 C:\WINNT\$hf_mig$\KB891781\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB893756\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB894391\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB896358\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB896423\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB896428\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 22:35:05 718048 C:\WINNT\$hf_mig$\KB898461\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB899587\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB899591\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB900485\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB900725\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB901017\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB901214\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB902400\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 22:35:05 718048 C:\WINNT\$hf_mig$\KB905414\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB905749\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB908519\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB908531\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB910437\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB911280\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB911562\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB911927\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB913580\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB914388\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB914389\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB916595\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:16:51 716000 C:\WINNT\$hf_mig$\KB917344\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB917953\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB918118\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB918439\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB919007\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:16:51 716000 C:\WINNT\$hf_mig$\KB920213\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB920670\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB920683\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB920685\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB920872\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB921503\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB922582\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:16:51 716000 C:\WINNT\$hf_mig$\KB922819\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB923414\update\update.exe (Microsoft Corporation)
[1] 2008-11-15 12:18:04 755576 C:\WINNT\$hf_mig$\KB923561\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB923980\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB924191\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB924270\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB924496\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB925902\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB926255\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:16:51 716000 C:\WINNT\$hf_mig$\KB926436\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB927779\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB927802\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB927891\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB928255\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB928843\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB929123\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB929969\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB930178\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB930916\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB931261\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB931784\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB931836\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB933360\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB933729\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB935839\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB935840\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB936021\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB936357\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB937894\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB938127\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB938828\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB938829\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB941202\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB941644\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB941693\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB942763\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB942840\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB943055\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB943485\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB944338\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB944653\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB945553\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB946026\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:56 716000 C:\WINNT\$hf_mig$\KB946627\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:20:44 755576 C:\WINNT\$hf_mig$\KB946648\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB948590\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:56 716000 C:\WINNT\$hf_mig$\KB948881\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB950749\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB950759\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB950760\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB950762\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB950974\update\update.exe (Microsoft Corporation)
[1] 2007-12-03 10:25:31 755576 C:\WINNT\$hf_mig$\KB951066\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB951072-v2\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB951376\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB951376-v2\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB951698\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB951748\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB951978\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB952004\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB952287\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB952954\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB953838\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB953839\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB954211\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB954459\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB954600\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB955069\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB955839\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB956390\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB956391\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB956572\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB956802\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB956803\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB956841\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB957095\update\update.exe (Microsoft Corporation)
[1] 2008-07-08 08:02:04 755576 C:\WINNT\$hf_mig$\KB957097\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB958215\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB958644\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB958687\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB958690\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB959426\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB960225\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB960714\update\update.exe (Microsoft Corporation)
[1] 2008-11-15 12:18:04 755576 C:\WINNT\$hf_mig$\KB960715\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB960803\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 06:40:52 755576 C:\WINNT\$hf_mig$\KB961371\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB961373\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB961501\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB963027\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB967715\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB968537\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB969897\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB969898\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB970238\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB971633\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 06:40:52 755576 C:\WINNT\$hf_mig$\KB972260\update\update.exe (Microsoft Corporation)
[1] 2008-07-08 08:02:04 755576 C:\WINNT\$hf_mig$\KB973346\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\07a96de176867bc25b7dc839d22b07e2\update\update.exe ()
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\0dd0244816ffb4b094c1caba4c3b1178\update\update.exe ()
[1] 2007-07-27 10:41:48 755576 C:\WINNT\SoftwareDistribution\Download\122ece420ea2cadf18cdf04c90b6d8f1\update\update.exe (Microsoft Corporation)
[1] 2008-07-08 08:02:04 755576 C:\WINNT\SoftwareDistribution\Download\2c95b28351986132d7f36dd28eece9b0\update\update.exe ()
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\678162639e69c808c1768ab6340eae25\update\update.exe ()
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\6913c676e5d33978934caa46c49fdc75\update\update.exe ()
[1] 2007-11-30 06:18:51 755576 C:\WINNT\SoftwareDistribution\Download\6b4e49f1a78b9558feeb103a07b06a32\update\update.exe ()
[1] 2007-03-05 20:22:59 716000 C:\WINNT\SoftwareDistribution\Download\730e45fefcdf343b61704b89c95d7cca\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINNT\SoftwareDistribution\Download\80046d42bf5044b609b7f7326dd9674d\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\9cf59263a134ab3fbbee78365a2fa5fc\update\update.exe ()
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\b7f0b2892b21211a5630518d058f48d9\update\update.exe ()
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\d48a3b967ba5709df048e8f2a49cf8a6\update\update.exe ()
[2] 2006-12-10 13:10:04 742192 C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP398\A0037864.exe (Microsoft Corporation)
Cannot access: C:\WINNT\SoftwareDistribution\Download\9cf59263a134ab3fbbee78365a2fa5fc\update\update.exe
[1] 2004-10-14 10:34:54 654848 C:\WINNT\$hf_mig$\KB873339\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 11:34:54 654848 C:\WINNT\$hf_mig$\KB885835\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 11:34:54 654848 C:\WINNT\$hf_mig$\KB885836\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 13:34:52 654848 C:\WINNT\$hf_mig$\KB886185\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 11:34:54 654848 C:\WINNT\$hf_mig$\KB887472\update\update.exe (Microsoft Corporation)
[1] 2004-11-30 14:46:40 654848 C:\WINNT\$hf_mig$\KB888302\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB890046\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 19:35:06 718048 C:\WINNT\$hf_mig$\KB890859\update\update.exe (Microsoft Corporation)
[1] 2004-11-30 14:46:40 654848 C:\WINNT\$hf_mig$\KB891781\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB893756\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB894391\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB896358\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB896423\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB896428\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 22:35:05 718048 C:\WINNT\$hf_mig$\KB898461\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB899587\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB899591\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB900485\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB900725\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB901017\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB901214\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB902400\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 22:35:05 718048 C:\WINNT\$hf_mig$\KB905414\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB905749\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB908519\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB908531\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB910437\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB911280\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB911562\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB911927\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB913580\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB914388\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB914389\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB916595\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:16:51 716000 C:\WINNT\$hf_mig$\KB917344\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB917953\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB918118\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB918439\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB919007\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:16:51 716000 C:\WINNT\$hf_mig$\KB920213\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB920670\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB920683\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB920685\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB920872\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB921503\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB922582\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:16:51 716000 C:\WINNT\$hf_mig$\KB922819\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB923414\update\update.exe (Microsoft Corporation)
[1] 2008-11-15 12:18:04 755576 C:\WINNT\$hf_mig$\KB923561\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB923980\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB924191\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB924270\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB924496\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB925902\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB926255\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:16:51 716000 C:\WINNT\$hf_mig$\KB926436\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB927779\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB927802\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB927891\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB928255\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB928843\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB929123\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB929969\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB930178\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB930916\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB931261\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB931784\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB931836\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB933360\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB933729\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB935839\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB935840\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB936021\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB936357\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB937894\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB938127\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB938828\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB938829\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB941202\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB941644\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB941693\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB942763\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB942840\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB943055\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB943485\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB944338\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB944653\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB945553\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB946026\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:56 716000 C:\WINNT\$hf_mig$\KB946627\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:20:44 755576 C:\WINNT\$hf_mig$\KB946648\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB948590\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:56 716000 C:\WINNT\$hf_mig$\KB948881\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB950749\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB950759\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB950760\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB950762\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB950974\update\update.exe (Microsoft Corporation)
[1] 2007-12-03 10:25:31 755576 C:\WINNT\$hf_mig$\KB951066\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB951072-v2\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB951376\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB951376-v2\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB951698\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB951748\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB951978\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB952004\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB952287\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB952954\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB953838\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB953839\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB954211\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB954459\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB954600\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB955069\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB955839\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB956390\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB956391\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB956572\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB956802\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB956803\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB956841\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB957095\update\update.exe (Microsoft Corporation)
[1] 2008-07-08 08:02:04 755576 C:\WINNT\$hf_mig$\KB957097\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB958215\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB958644\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB958687\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB958690\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB959426\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB960225\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB960714\update\update.exe (Microsoft Corporation)
[1] 2008-11-15 12:18:04 755576 C:\WINNT\$hf_mig$\KB960715\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB960803\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 06:40:52 755576 C:\WINNT\$hf_mig$\KB961371\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB961373\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB961501\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB963027\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB967715\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB968537\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB969897\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB969898\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB970238\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB971633\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 06:40:52 755576 C:\WINNT\$hf_mig$\KB972260\update\update.exe (Microsoft Corporation)
[1] 2008-07-08 08:02:04 755576 C:\WINNT\$hf_mig$\KB973346\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\07a96de176867bc25b7dc839d22b07e2\update\update.exe ()
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\0dd0244816ffb4b094c1caba4c3b1178\update\update.exe ()
[1] 2007-07-27 10:41:48 755576 C:\WINNT\SoftwareDistribution\Download\122ece420ea2cadf18cdf04c90b6d8f1\update\update.exe (Microsoft Corporation)
[1] 2008-07-08 08:02:04 755576 C:\WINNT\SoftwareDistribution\Download\2c95b28351986132d7f36dd28eece9b0\update\update.exe ()
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\678162639e69c808c1768ab6340eae25\update\update.exe ()
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\6913c676e5d33978934caa46c49fdc75\update\update.exe ()
[1] 2007-11-30 06:18:51 755576 C:\WINNT\SoftwareDistribution\Download\6b4e49f1a78b9558feeb103a07b06a32\update\update.exe ()
[1] 2007-03-05 20:22:59 716000 C:\WINNT\SoftwareDistribution\Download\730e45fefcdf343b61704b89c95d7cca\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINNT\SoftwareDistribution\Download\80046d42bf5044b609b7f7326dd9674d\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\9cf59263a134ab3fbbee78365a2fa5fc\update\update.exe ()
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\b7f0b2892b21211a5630518d058f48d9\update\update.exe ()
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\d48a3b967ba5709df048e8f2a49cf8a6\update\update.exe ()
[2] 2006-12-10 13:10:04 742192 C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP398\A0037864.exe (Microsoft Corporation)
Cannot access: C:\WINNT\SoftwareDistribution\Download\b7f0b2892b21211a5630518d058f48d9\update\update.exe
[1] 2004-10-14 10:34:54 654848 C:\WINNT\$hf_mig$\KB873339\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 11:34:54 654848 C:\WINNT\$hf_mig$\KB885835\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 11:34:54 654848 C:\WINNT\$hf_mig$\KB885836\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 13:34:52 654848 C:\WINNT\$hf_mig$\KB886185\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 11:34:54 654848 C:\WINNT\$hf_mig$\KB887472\update\update.exe (Microsoft Corporation)
[1] 2004-11-30 14:46:40 654848 C:\WINNT\$hf_mig$\KB888302\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB890046\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 19:35:06 718048 C:\WINNT\$hf_mig$\KB890859\update\update.exe (Microsoft Corporation)
[1] 2004-11-30 14:46:40 654848 C:\WINNT\$hf_mig$\KB891781\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB893756\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB894391\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB896358\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB896423\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB896428\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 22:35:05 718048 C:\WINNT\$hf_mig$\KB898461\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB899587\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB899591\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB900485\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB900725\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB901017\update\update.exe (Microsoft Corporation)
nicholsc
2009-08-23, 00:21
Part 3
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB901214\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB902400\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 22:35:05 718048 C:\WINNT\$hf_mig$\KB905414\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB905749\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB908519\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB908531\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB910437\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB911280\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB911562\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB911927\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB913580\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB914388\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB914389\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB916595\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:16:51 716000 C:\WINNT\$hf_mig$\KB917344\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB917953\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB918118\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB918439\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB919007\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:16:51 716000 C:\WINNT\$hf_mig$\KB920213\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB920670\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB920683\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB920685\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB920872\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB921503\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB922582\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:16:51 716000 C:\WINNT\$hf_mig$\KB922819\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB923414\update\update.exe (Microsoft Corporation)
[1] 2008-11-15 12:18:04 755576 C:\WINNT\$hf_mig$\KB923561\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB923980\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB924191\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB924270\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB924496\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB925902\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB926255\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:16:51 716000 C:\WINNT\$hf_mig$\KB926436\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB927779\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB927802\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB927891\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB928255\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB928843\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB929123\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB929969\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB930178\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB930916\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB931261\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB931784\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB931836\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB933360\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB933729\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB935839\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB935840\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB936021\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB936357\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB937894\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB938127\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB938828\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB938829\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB941202\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB941644\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB941693\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB942763\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB942840\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB943055\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB943485\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB944338\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB944653\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB945553\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB946026\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:56 716000 C:\WINNT\$hf_mig$\KB946627\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:20:44 755576 C:\WINNT\$hf_mig$\KB946648\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB948590\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:56 716000 C:\WINNT\$hf_mig$\KB948881\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB950749\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB950759\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB950760\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB950762\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB950974\update\update.exe (Microsoft Corporation)
[1] 2007-12-03 10:25:31 755576 C:\WINNT\$hf_mig$\KB951066\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB951072-v2\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB951376\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB951376-v2\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB951698\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB951748\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB951978\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB952004\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB952287\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB952954\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB953838\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB953839\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB954211\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB954459\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB954600\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB955069\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB955839\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB956390\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB956391\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB956572\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB956802\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB956803\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB956841\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB957095\update\update.exe (Microsoft Corporation)
[1] 2008-07-08 08:02:04 755576 C:\WINNT\$hf_mig$\KB957097\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB958215\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB958644\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB958687\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB958690\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB959426\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB960225\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB960714\update\update.exe (Microsoft Corporation)
[1] 2008-11-15 12:18:04 755576 C:\WINNT\$hf_mig$\KB960715\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB960803\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 06:40:52 755576 C:\WINNT\$hf_mig$\KB961371\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB961373\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB961501\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB963027\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB967715\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB968537\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB969897\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB969898\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB970238\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB971633\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 06:40:52 755576 C:\WINNT\$hf_mig$\KB972260\update\update.exe (Microsoft Corporation)
[1] 2008-07-08 08:02:04 755576 C:\WINNT\$hf_mig$\KB973346\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\07a96de176867bc25b7dc839d22b07e2\update\update.exe ()
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\0dd0244816ffb4b094c1caba4c3b1178\update\update.exe ()
[1] 2007-07-27 10:41:48 755576 C:\WINNT\SoftwareDistribution\Download\122ece420ea2cadf18cdf04c90b6d8f1\update\update.exe (Microsoft Corporation)
[1] 2008-07-08 08:02:04 755576 C:\WINNT\SoftwareDistribution\Download\2c95b28351986132d7f36dd28eece9b0\update\update.exe ()
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\678162639e69c808c1768ab6340eae25\update\update.exe ()
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\6913c676e5d33978934caa46c49fdc75\update\update.exe ()
[1] 2007-11-30 06:18:51 755576 C:\WINNT\SoftwareDistribution\Download\6b4e49f1a78b9558feeb103a07b06a32\update\update.exe ()
[1] 2007-03-05 20:22:59 716000 C:\WINNT\SoftwareDistribution\Download\730e45fefcdf343b61704b89c95d7cca\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINNT\SoftwareDistribution\Download\80046d42bf5044b609b7f7326dd9674d\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\9cf59263a134ab3fbbee78365a2fa5fc\update\update.exe ()
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\b7f0b2892b21211a5630518d058f48d9\update\update.exe ()
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\d48a3b967ba5709df048e8f2a49cf8a6\update\update.exe ()
[2] 2006-12-10 13:10:04 742192 C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP398\A0037864.exe (Microsoft Corporation)
Cannot access: C:\WINNT\SoftwareDistribution\Download\d48a3b967ba5709df048e8f2a49cf8a6\update\update.exe
[1] 2004-10-14 10:34:54 654848 C:\WINNT\$hf_mig$\KB873339\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 11:34:54 654848 C:\WINNT\$hf_mig$\KB885835\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 11:34:54 654848 C:\WINNT\$hf_mig$\KB885836\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 13:34:52 654848 C:\WINNT\$hf_mig$\KB886185\update\update.exe (Microsoft Corporation)
[1] 2004-10-14 11:34:54 654848 C:\WINNT\$hf_mig$\KB887472\update\update.exe (Microsoft Corporation)
[1] 2004-11-30 14:46:40 654848 C:\WINNT\$hf_mig$\KB888302\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB890046\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 19:35:06 718048 C:\WINNT\$hf_mig$\KB890859\update\update.exe (Microsoft Corporation)
[1] 2004-11-30 14:46:40 654848 C:\WINNT\$hf_mig$\KB891781\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB893756\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB894391\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB896358\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB896423\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB896428\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 22:35:05 718048 C:\WINNT\$hf_mig$\KB898461\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB899587\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB899591\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB900485\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB900725\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB901017\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB901214\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB902400\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 22:35:05 718048 C:\WINNT\$hf_mig$\KB905414\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 20:35:06 718048 C:\WINNT\$hf_mig$\KB905749\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB908519\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB908531\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB910437\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB911280\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB911562\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB911927\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB913580\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB914388\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB914389\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB916595\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:16:51 716000 C:\WINNT\$hf_mig$\KB917344\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB917953\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB918118\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB918439\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB919007\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:16:51 716000 C:\WINNT\$hf_mig$\KB920213\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB920670\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB920683\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB920685\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB920872\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB921503\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB922582\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:16:51 716000 C:\WINNT\$hf_mig$\KB922819\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB923414\update\update.exe (Microsoft Corporation)
[1] 2008-11-15 12:18:04 755576 C:\WINNT\$hf_mig$\KB923561\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB923980\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB924191\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB924270\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB924496\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB925902\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB926255\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:16:51 716000 C:\WINNT\$hf_mig$\KB926436\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB927779\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB927802\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB927891\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB928255\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB928843\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB929123\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB929969\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB930178\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB930916\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB931261\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB931784\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB931836\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB933360\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB933729\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:28 716000 C:\WINNT\$hf_mig$\KB935839\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB935840\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB936021\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB936357\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB937894\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB938127\update\update.exe (Microsoft Corporation)
[1] 2005-10-12 18:12:29 716000 C:\WINNT\$hf_mig$\KB938828\update\update.exe (Microsoft Corporation)
[1] 2006-01-19 14:29:19 716000 C:\WINNT\$hf_mig$\KB938829\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB941202\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB941644\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB941693\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB942763\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB942840\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB943055\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB943485\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB944338\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB944653\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB945553\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB946026\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:56 716000 C:\WINNT\$hf_mig$\KB946627\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:20:44 755576 C:\WINNT\$hf_mig$\KB946648\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB948590\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:56 716000 C:\WINNT\$hf_mig$\KB948881\update\update.exe (Microsoft Corporation)
[1] 2007-03-05 20:22:59 716000 C:\WINNT\$hf_mig$\KB950749\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB950759\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB950760\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB950762\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB950974\update\update.exe (Microsoft Corporation)
[1] 2007-12-03 10:25:31 755576 C:\WINNT\$hf_mig$\KB951066\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB951072-v2\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB951376\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB951376-v2\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB951698\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB951748\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB951978\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB952004\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB952287\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB952954\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB953838\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB953839\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB954211\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB954459\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB954600\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB955069\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB955839\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB956390\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB956391\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB956572\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB956802\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB956803\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB956841\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB957095\update\update.exe (Microsoft Corporation)
[1] 2008-07-08 08:02:04 755576 C:\WINNT\$hf_mig$\KB957097\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB958215\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB958644\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 06:18:51 755576 C:\WINNT\$hf_mig$\KB958687\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB958690\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB959426\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB960225\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB960714\update\update.exe (Microsoft Corporation)
[1] 2008-11-15 12:18:04 755576 C:\WINNT\$hf_mig$\KB960715\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB960803\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 06:40:52 755576 C:\WINNT\$hf_mig$\KB961371\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB961373\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB961501\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB963027\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB967715\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB968537\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB969897\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:22 755576 C:\WINNT\$hf_mig$\KB969898\update\update.exe (Microsoft Corporation)
[1] 2007-11-30 07:39:18 755576 C:\WINNT\$hf_mig$\KB970238\update\update.exe (Microsoft Corporation)
[1] 2008-07-09 02:38:29 755576 C:\WINNT\$hf_mig$\KB971633\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 06:40:52 755576 C:\WINNT\$hf_mig$\KB972260\update\update.exe (Microsoft Corporation)
[1] 2008-07-08 08:02:04 755576 C:\WINNT\$hf_mig$\KB973346\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\07a96de176867bc25b7dc839d22b07e2\update\update.exe ()
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\0dd0244816ffb4b094c1caba4c3b1178\update\update.exe ()
[1] 2007-07-27 10:41:48 755576 C:\WINNT\SoftwareDistribution\Download\122ece420ea2cadf18cdf04c90b6d8f1\update\update.exe (Microsoft Corporation)
[1] 2008-07-08 08:02:04 755576 C:\WINNT\SoftwareDistribution\Download\2c95b28351986132d7f36dd28eece9b0\update\update.exe ()
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\678162639e69c808c1768ab6340eae25\update\update.exe ()
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\6913c676e5d33978934caa46c49fdc75\update\update.exe ()
[1] 2007-11-30 06:18:51 755576 C:\WINNT\SoftwareDistribution\Download\6b4e49f1a78b9558feeb103a07b06a32\update\update.exe ()
[1] 2007-03-05 20:22:59 716000 C:\WINNT\SoftwareDistribution\Download\730e45fefcdf343b61704b89c95d7cca\update\update.exe (Microsoft Corporation)
[1] 2005-02-24 21:35:06 718048 C:\WINNT\SoftwareDistribution\Download\80046d42bf5044b609b7f7326dd9674d\update\update.exe (Microsoft Corporation)
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\9cf59263a134ab3fbbee78365a2fa5fc\update\update.exe ()
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\b7f0b2892b21211a5630518d058f48d9\update\update.exe ()
[1] 2009-05-26 06:40:52 755576 C:\WINNT\SoftwareDistribution\Download\d48a3b967ba5709df048e8f2a49cf8a6\update\update.exe ()
[2] 2006-12-10 13:10:04 742192 C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP398\A0037864.exe (Microsoft Corporation)
Cannot access: C:\WINNT\system32\MRT.exe
[1] 2009-07-29 19:49:14 24281536 C:\WINNT\system32\MRT.exe ()
[2] 2006-01-04 20:46:40 2827616 C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP398\A0037814.exe (Microsoft Corporation)
[2] 2007-04-03 12:48:54 13511640 C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP419\A0038216.exe (Microsoft Corporation)
[2] 2007-04-27 15:45:12 14970328 C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP451\A0038830.exe (Microsoft Corporation)
[2] 2009-05-07 02:16:29 24699336 C:\System Volume Information\_restore{FD67194F-D922-4E8C-9B80-AA0185522B7E}\RP711\A0039275.exe (Microsoft Corporation)
[2] 2009-06-01 11:51:12 23635392 C:\System Volume Information\_restore{FD67194F-D922-4E8C-9B80-AA0185522B7E}\RP746\A0039677.exe (Microsoft Corporation)
[2] 2009-07-07 10:10:56 24539592 C:\System Volume Information\_restore{FD67194F-D922-4E8C-9B80-AA0185522B7E}\RP782\A0053304.exe (Microsoft Corporation)
Cannot access: C:\WINNT\system32\scecli.dll
[1] 2004-08-10 06:00:00 180224 C:\WINNT\$NtServicePackUninstall$\scecli.dll (Microsoft Corporation)
[1] 2008-04-13 19:12:05 181248 C:\WINNT\ServicePackFiles\i386\scecli.dll (Microsoft Corporation)
[1] 2008-04-13 19:12:05 60928 C:\WINNT\system32\scecli.dll ()
[2] 2008-04-13 19:12:05 181248 C:\WINNT\system32\sceclt.dll (Microsoft Corporation)
[1] 2004-08-10 06:00:00 180224 C:\i386\scecli.dll (Microsoft Corporation)
Finished!
Hi,
Open notepad and then copy and paste the bolded lines below into it. Go to File > save as and name the file fixes.bat, change the Save as type to all files and save it to your desktop.
@echo off
copy C:\WINNT\system32\sceclt.dll c:\scecli.dll
Double-click on fixes.bat file to execute it.
Download The Avenger by Swandog46 from here (http://swandog46.geekstogo.com/avenger2/download.php).
Unzip/extract it to a folder on your desktop.
Double click on avenger.exe to run The Avenger.
Click OK.
Make sure that the box next to Scan for rootkits has a tick in it and that the box next to Automatically disable any rootkits found does not have a tick in it.
Copy all of the text in the below textbox to the clibpboard by highlighting it and then pressing Ctrl+C.
Files to move:
c:\scecli.dll | C:\WINDOWS\system32\scecli.dll
In the avenger window, click the Paste Script from Clipboard, http://img220.imageshack.us/img220/8923/pastets4.png button.
Click the Execute button.
You will be asked Are you sure you want to execute the current script?.
Click Yes.
You will now be asked First step completed --- The Avenger has been successfully set up to run on next boot. Reboot now?.
Click Yes.
Your PC will now be rebooted.
Note: If the above script contains Drivers to delete: or Drivers to disable:, then The Avenger will require two reboots to complete its operation.
If that is the case, it will force a BSOD on the first reboot. This is normal & expected behaviour.
After your PC has completed the necessary reboots, a log should automatically open. If it does not automatically open, then the log can be found at %systemdrive%\avenger.txt (typically C:\avenger.txt).
Please post this log in your next reply. Then run DDS again and post back its log.
nicholsc
2009-08-23, 04:21
Will post in 3 posts.
Avenger:
Logfile of The Avenger Version 2.0, (c) by Swandog46
http://swandog46.geekstogo.com
Platform: Windows XP
*******************
Script file opened successfully.
Script file read successfully.
Backups directory opened successfully at C:\Avenger
*******************
Beginning to process script file:
Rootkit scan active.
No rootkits found!
Error: could not move file "c:\scecli.dll"
File move operation "c:\scecli.dll|C:\WINDOWS\system32\scecli.dll" failed!
Status: 0xc000003a (STATUS_OBJECT_PATH_NOT_FOUND)
--> bad path / the parent directory does not exist
Completed script processing.
*******************
Finished! Terminate.
nicholsc
2009-08-23, 04:22
DDS File:
DDS (Ver_09-07-30.01) - NTFSx86
Run by NEWXPOWNER at 20:18:50.70 on Sat 08/22/2009
Internet Explorer: 6.0.2900.5512
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.502.96 [GMT -5:00]
AV: CA Anti-Virus *On-access scanning enabled* (Updated) {17CFD1EA-56CF-40B5-A06B-BD3A27397C93}
============== Running Processes ===============
C:\WINNT\system32\svchost -k DcomLaunch
C:\WINNT\system32\svchost -k rpcss
C:\WINNT\System32\svchost.exe -k netsvcs
C:\WINNT\system32\svchost.exe -k NetworkService
C:\WINNT\system32\svchost.exe -k LocalService
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINNT\Explorer.EXE
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\svchost.exe -k LocalService
C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\ISafe.exe
C:\WINNT\eHome\ehRecvr.exe
C:\WINNT\eHome\ehSched.exe
C:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exe
C:\Program Files\CA\SharedComponents\PPRT\bin\ITMRTSVC.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
svchost
C:\WINNT\system32\svchost.exe -k LocalService
C:\WINNT\system32\svchost.exe -k imgsvc
C:\Program Files\UPHClean\uphclean.exe
C:\WINNT\ehome\mcrdsvc.exe
C:\WINNT\system32\dllhost.exe
C:\WINNT\System32\alg.exe
C:\WINNT\ehome\ehtray.exe
C:\WINNT\system32\igfxpers.exe
C:\WINNT\stsystra.exe
C:\Program Files\CA\CA Internet Security Suite\cctray\cctray.exe
C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spam\QSP-5.1.18.0\QOELoader.exe
C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\CAVRID.exe
C:\WINNT\system32\ctfmon.exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spyware\CAPPActiveProtection.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spyware\PPCtlPriv.exe
C:\Program Files\CA\CA Internet Security Suite\ccprovsp.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINNT\system32\wuauclt.exe
C:\WINNT\system32\wbem\wmiprvse.exe
C:\WINNT\system32\wuauclt.exe
C:\WINNT\explorer.exe
C:\Documents and Settings\NEWXPOWNER\Desktop\Computer Fix\dds.pif
============== Pseudo HJT Report ===============
uStart Page = hxxp://www.yahoo.com/
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\system32\blank.htm
mWinlogon: Userinit=c:\winnt\system32\userinit.exe,c:\winnt\system32\sdra64.exe,
TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
uRun: [ctfmon.exe] c:\winnt\system32\ctfmon.exe
uRun: [BitTorrent DNA] "c:\program files\dna\btdna.exe"
uRun: [SUPERAntiSpyware] c:\program files\superantispyware\SUPERAntiSpyware.exe
mRun: [ehTray] c:\winnt\ehome\ehtray.exe
mRun: [IgfxTray] c:\winnt\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\winnt\system32\hkcmd.exe
mRun: [Persistence] c:\winnt\system32\igfxpers.exe
mRun: [SigmatelSysTrayApp] stsystra.exe
mRun: [cctray] "c:\program files\ca\ca internet security suite\cctray\cctray.exe"
mRun: [QOELOADER] "c:\program files\ca\ca internet security suite\ca anti-spam\qsp-5.1.18.0\QOELoader.exe"
mRun: [CAVRID] "c:\program files\ca\ca internet security suite\ca anti-virus\CAVRID.exe"
mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
mRun: [LXBSCATS] rundll32 c:\winnt\system32\spool\drivers\w32x86\3\LXBStime.dll,_RunDLLEntry@16
StartupFolder: c:\docume~1\alluse~1.win\startm~1\programs\startup\adober~1.lnk - c:\program files\adobe\acrobat 7.0\reader\reader_sl.exe
StartupFolder: c:\docume~1\alluse~1.win\startm~1\programs\startup\micros~1.lnk - c:\program files\microsoft office\office10\OSA.EXE
uPolicies-system: EnableProfileQuota = 1 (0x1)
IE: E&xport to Microsoft Excel - c:\progra~1\mi1933~1\office10\EXCEL.EXE/3000
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC} - c:\program files\java\jre1.6.0_07\bin\ssv.dll
LSP: c:\winnt\system32\VetRedir.dll
Trusted Zone: turbotax.com
DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} - hxxp://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} - hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://javadl.sun.com/webapps/download/AutoDL?BundleId=23100
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - c:\program files\common files\microsoft shared\web folders\PKMCDO.DLL
Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.dll
Notify: igfxcui - igfxdev.dll
LSA: Authentication Packages = msv1_0 c:\winnt\system32\jkkji.dll
============= SERVICES / DRIVERS ===============
R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2006-10-10 5632]
R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2007-2-27 32256]
R1 VET-FILT;VET File System Filter;c:\winnt\system32\drivers\vet-filt.sys [2008-3-29 26376]
R1 VET-REC;VET File System Recognizer;c:\winnt\system32\drivers\vet-rec.sys [2008-3-29 21128]
R1 VETEFILE;VET File Scan Engine;c:\winnt\system32\drivers\vetefile.sys [2008-6-4 880560]
R1 VETFDDNT;VET Floppy Boot Sector Monitor;c:\winnt\system32\drivers\vetfddnt.sys [2008-3-29 21512]
R1 VETMONNT;VET File Monitor;c:\winnt\system32\drivers\vetmonnt.sys [2008-3-29 32264]
R2 aawservice;Lavasoft Ad-Aware Service;c:\program files\lavasoft\ad-aware\aawservice.exe [2008-9-10 611664]
R2 CAISafe;CAISafe;c:\program files\ca\ca internet security suite\ca anti-virus\isafe.exe [2008-3-29 144960]
R2 IntuitUpdateService;Intuit Update Service;c:\program files\common files\intuit\update service\IntuitUpdateService.exe [2008-10-10 13088]
R2 McrdSvc;Media Center Extender Service;c:\winnt\ehome\mcrdsvc.exe [2005-8-5 99328]
R3 PPCtlPriv;PPCtlPriv;c:\program files\ca\ca internet security suite\ca anti-spyware\PPCtlPriv.exe [2007-8-16 189704]
R3 VETEBOOT;VET Boot Scan Engine;c:\winnt\system32\drivers\veteboot.sys [2008-6-4 108368]
S2 VETMSGNT;VET Message Service;c:\program files\ca\ca internet security suite\ca anti-virus\vetmsg.exe [2008-3-29 242952]
S3 PRSUSB;Sony Reader;c:\winnt\system32\drivers\PRSUSB.sys [2006-8-16 18944]
S3 SASENUM;SASENUM;c:\program files\superantispyware\SASENUM.SYS [2006-2-16 4096]
=============== Created Last 30 ================
2009-08-22 20:14 135,168 a------- C:\zip.exe
2009-08-22 20:14 19,286 a------- C:\cleanup.exe
2009-08-22 20:14 574 a------- C:\cleanup.bat
2009-08-22 20:11 181,248 a------- C:\scecli.dll
2009-08-10 22:26 <DIR> --d----- c:\winnt\system32\wbem\Repository
2009-08-10 22:25 <DIR> --d----- c:\docume~1\newxpo~1\applic~1\IObit
2009-08-10 22:25 <DIR> --d----- c:\program files\common files\ParetoLogic
2009-08-10 22:25 <DIR> --d----- c:\docume~1\alluse~1.win\applic~1\ParetoLogic
2009-08-10 22:25 <DIR> --d-h--- c:\winnt\PIF
2009-08-10 22:25 <DIR> --d----- c:\docume~1\newxpo~1\applic~1\Malwarebytes
2009-08-10 22:23 <DIR> --d----- c:\program files\TeaTimer (Spybot - Search & Destroy)
2009-08-10 22:23 <DIR> --d----- c:\program files\SDHelper (Spybot - Search & Destroy)
2009-08-10 22:23 <DIR> --d----- c:\program files\Misc. Support Library (Spybot - Search & Destroy)
2009-08-10 22:23 <DIR> --d----- c:\program files\File Scanner Library (Spybot - Search & Destroy)
2009-08-09 14:57 <DIR> --d----- c:\program files\IObit
2009-08-09 13:45 580,640 a--sh--- c:\winnt\system32\drivers\fidbox.dat
2009-08-09 13:45 23,328 a--sh--- c:\winnt\system32\drivers\fidbox2.dat
2009-08-09 13:45 9,896 a--sh--- c:\winnt\system32\drivers\fidbox.idx
2009-08-09 13:45 3,236 a--sh--- c:\winnt\system32\drivers\fidbox2.idx
2009-08-09 13:45 1,814 a------- C:\rollback.ini
2009-08-09 13:38 <DIR> --d----- c:\docume~1\alluse~1.win\applic~1\ParetoLogic Anti-Virus PLUS
2009-08-09 13:31 <DIR> --d----- c:\docume~1\alluse~1.win\applic~1\Malwarebytes
2009-08-09 11:48 <DIR> --d----- c:\winnt\system32\XPSViewer
2009-08-09 11:47 597,504 -c------ c:\winnt\system32\dllcache\printfilterpipelinesvc.exe
2009-08-09 11:47 575,488 -c------ c:\winnt\system32\dllcache\xpsshhdr.dll
2009-08-09 11:47 89,088 -c------ c:\winnt\system32\dllcache\filterpipelineprintproc.dll
2009-08-09 11:47 575,488 -------- c:\winnt\system32\xpsshhdr.dll
2009-08-09 11:47 117,760 -------- c:\winnt\system32\prntvpt.dll
2009-08-09 11:47 1,676,288 -c------ c:\winnt\system32\dllcache\xpssvcs.dll
2009-08-09 11:47 1,676,288 -------- c:\winnt\system32\xpssvcs.dll
2009-08-09 10:55 <DIR> --d----- c:\winnt\system32\CatRoot
2009-08-07 09:44 <DIR> --dsh--- c:\winnt\system32\lowsec
2009-08-07 09:44 189,325 a------- c:\winnt\system32\wisdstr.exe
2009-08-07 09:44 75,776 a------- C:\yedfjdy.exe
2009-08-07 09:44 19,456 a------- C:\niawndos.exe
2009-08-07 09:44 19,456 a------- C:\hcel.exe
2009-08-07 09:44 9,728 a------- C:\umoikchf.exe
==================== Find3M ====================
2009-08-10 19:42 2,478 a------- c:\winnt\system32\tmp.reg
2009-07-13 10:08 286,720 a------- c:\winnt\system32\wmpdxm.dll
2009-06-26 11:50 666,624 a------- c:\winnt\system32\wininet.dll
2009-06-26 11:50 81,920 a------- c:\winnt\system32\ieencode.dll
2009-06-16 09:36 119,808 a------- c:\winnt\system32\t2embed.dll
2009-06-16 09:36 81,920 a------- c:\winnt\system32\fontsub.dll
2009-06-03 14:09 1,291,264 a------- c:\winnt\system32\quartz.dll
2008-09-07 10:15 60,200 a------- c:\docume~1\newxpo~1\applic~1\GDIPFONTCACHEV1.DAT
2007-11-25 12:10 307 a------- c:\documents and settings\newxpowner\x.dat
2007-11-25 12:09 266,729 a------- c:\documents and settings\newxpowner\z.dat
2006-01-14 11:42 251 a------- c:\program files\wt3d.ini
============= FINISH: 20:19:23.62 ===============
nicholsc
2009-08-23, 04:23
Attach File:
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
DDS (Ver_09-07-30.01)
Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume2
Install Date: 7/3/2007 6:46:02 PM
System Uptime: 8/22/2009 8:15:38 PM (0 hours ago)
Motherboard: Dell Inc. | | 0KF623
Processor: Intel(R) Pentium(R) 4 CPU 3.00GHz | Microprocessor | 2992/800mhz
==== Disk Partitions =========================
C: is FIXED (NTFS) - 144 GiB total, 106.843 GiB free.
D: is Removable
E: is Removable
F: is Removable
G: is Removable
H: is CDROM ()
I: is FIXED (NTFS) - 233 GiB total, 220.286 GiB free.
==== Disabled Device Manager Items =============
==== System Restore Points ===================
No restore point in system.
==== Installed Programs ======================
Abexo Free Registry Cleaner
Ad-Aware
Adobe Flash Player 10 ActiveX
Adobe Reader 7.0.8
AnswerWorks 4.0 Runtime - English
AnswerWorks 5.0 English Runtime
AnswerWorks Runtime
Apple Software Update
AutoCAD 2002
BearShare
BitTorrent
CA Anti-Spam
CA Anti-Spyware
CA Anti-Virus
CA Internet Security Suite
CDBurnerXP
Citrix Presentation Server Client
Conexant D850 56K V.9x DFVc Modem
Corel Paint Shop Pro X
Dell Resource CD
Dell ResourceCD
DNA
High Definition Audio Driver Package - KB835221
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows Media Player 10 (KB903157)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Intel(R) Graphics Media Accelerator Driver
Intel(R) PRO Network Connections Drivers
J2SE Runtime Environment 5.0 Update 11
Java 2 Runtime Environment Standard Edition v1.3.1_16
Java(TM) 6 Update 5
Java(TM) 6 Update 7
KODAK EASYSHARE Gallery Upload ActiveX Control
Lexmark 810 Series
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB928366)
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft Office XP Professional with FrontPage
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
PC Pitstop Optimize 1.0t
Power Tab Editor 1.7
PRS-500 USB driver
QuickTime
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 10 (KB936782)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950759)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951376)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB953838)
Security Update for Windows XP (KB953839)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956390)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958215)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958690)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960714)
Security Update for Windows XP (KB960715)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB961371)
Security Update for Windows XP (KB961373)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB963027)
Security Update for Windows XP (KB968537)
Security Update for Windows XP (KB969897)
Security Update for Windows XP (KB969898)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB971633)
Security Update for Windows XP (KB972260)
Security Update for Windows XP (KB973346)
SigmaTel Audio
SUPERAntiSpyware Free Edition
TurboTax 2008
TurboTax 2008 WinPerFedFormset
TurboTax 2008 WinPerProgramHelp
TurboTax 2008 WinPerReleaseEngine
TurboTax 2008 WinPerTaxSupport
TurboTax 2008 WinPerUserEducation
TurboTax 2008 wrapper
TurboTax 2008 wwiiper
TurboTax Deluxe 2007
Update for Windows Media Player 10 (KB913800)
Update for Windows Media Player 10 (KB926251)
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB951978)
Update for Windows XP (KB955839)
Update for Windows XP (KB967715)
Update Rollup 2 for Windows XP Media Center Edition 2005
User Profile Hive Cleanup Service
WebFldrs XP
Winamp (remove only)
WinCleaner Complete PC Care Version 10
Windows Driver Package - Sony Corporation (PRSUSB) USB (08/08/2006 1.0.03.08080)
Windows Genuine Advantage Notifications (KB905474)
Windows Media Format Runtime
Windows XP Media Center Edition 2005 KB908250
Windows XP Service Pack 3
WinZip
Yahoo! Toolbar
==== Event Viewer Messages From Past Week ========
8/16/2009 3:01:26 AM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0xd0000156: Security Update for Windows XP (KB960859).
8/16/2009 3:00:57 AM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0xd0000156: Security Update for Windows XP (KB971657).
8/16/2009 3:00:57 AM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0xd0000156: Security Update for Windows XP (KB971557).
8/15/2009 9:23:19 AM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0xd0000156: Security Update for Windows XP (KB956744).
8/15/2009 9:23:11 AM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0xd0000156: Security Update for Windows XP (KB973869).
8/15/2009 9:23:06 AM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0xd0000156: Security Update for Windows XP (KB973507).
8/15/2009 9:23:00 AM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0xd0000156: Security Update for Windows XP (KB973354).
8/15/2009 9:21:55 AM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0xd0000156: Security Update for Windows XP (KB973815).
8/15/2009 1:42:57 PM, error: Service Control Manager [7000] - The VET Message Service service failed to start due to the following error: Access is denied.
8/15/2009 1:42:26 PM, error: NetBT [4311] - Initialization failed because the driver device could not be created.
==== End Of File ===========================
Hi,
Please repeat instructions in post #10 but this time attach the output file as an attachment to your reply.
nicholsc
2009-08-25, 02:27
Here are the results in four attachments
Ok. Let's take another attempt :)
Double click on avenger.exe to run The Avenger.
Click OK.
Make sure that the box next to Scan for rootkits has a tick in it and that the box next to Automatically disable any rootkits found does not have a tick in it.
Copy all of the text in the below textbox to the clibpboard by highlighting it and then pressing Ctrl+C.
Files to move:
c:\scecli.dll | C:\WINNT\system32\scecli.dll
In the avenger window, click the Paste Script from Clipboard, http://img220.imageshack.us/img220/8923/pastets4.png button.
Click the Execute button.
You will be asked Are you sure you want to execute the current script?.
Click Yes.
You will now be asked First step completed --- The Avenger has been successfully set up to run on next boot. Reboot now?.
Click Yes.
Your PC will now be rebooted.
Note: If the above script contains Drivers to delete: or Drivers to disable:, then The Avenger will require two reboots to complete its operation.
If that is the case, it will force a BSOD on the first reboot. This is normal & expected behaviour.
After your PC has completed the necessary reboots, a log should automatically open. If it does not automatically open, then the log can be found at %systemdrive%\avenger.txt (typically C:\avenger.txt).
Please post this log in your next reply. Then run DDS again and post back its log.
nicholsc
2009-08-25, 14:31
OK. When I run avenger, this pops up before I can execute: "Error: Failed to open 'C:\cleanup.exe' for reading (error 5: access is denied.). Here is the avenger report:
//////////////////////////////////////////
Avenger Pre-Processor log
//////////////////////////////////////////
Platform: Windows XP (build 2600, Service Pack 3)
Tue Aug 25 06:15:37 2009
06:12:34: Error: Failed to open 'C:\cleanup.exe' for reading (error 5: access is denied.)
06:15:15: Error: Failed to open 'C:\cleanup.exe' for reading (error 5: access is denied.)
//////////////////////////////////////////
Logfile of The Avenger Version 2.0, (c) by Swandog46
http://swandog46.geekstogo.com
Platform: Windows XP
*******************
Script file opened successfully.
Script file read successfully.
Backups directory opened successfully at C:\Avenger
*******************
Beginning to process script file:
Rootkit scan active.
No rootkits found!
File move operation "c:\scecli.dll|C:\WINNT\system32\scecli.dll" completed successfully.
Completed script processing.
*******************
Finished! Terminate.
DDS
ATTACH.TXT
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
DDS (Ver_09-07-30.01)
Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume2
Install Date: 7/3/2007 6:46:02 PM
System Uptime: 8/25/2009 6:19:05 AM (0 hours ago)
Motherboard: Dell Inc. | | 0KF623
Processor: Intel(R) Pentium(R) 4 CPU 3.00GHz | Microprocessor | 2992/800mhz
==== Disk Partitions =========================
C: is FIXED (NTFS) - 144 GiB total, 106.725 GiB free.
D: is Removable
E: is Removable
F: is Removable
G: is Removable
H: is CDROM ()
I: is FIXED (NTFS) - 233 GiB total, 220.286 GiB free.
==== Disabled Device Manager Items =============
==== System Restore Points ===================
No restore point in system.
==== Installed Programs ======================
Abexo Free Registry Cleaner
Ad-Aware
Adobe Flash Player 10 ActiveX
Adobe Reader 7.0.8
AnswerWorks 4.0 Runtime - English
AnswerWorks 5.0 English Runtime
AnswerWorks Runtime
Apple Software Update
AutoCAD 2002
BearShare
BitTorrent
CA Anti-Spam
CA Anti-Spyware
CA Anti-Virus
CA Internet Security Suite
CDBurnerXP
Citrix Presentation Server Client
Conexant D850 56K V.9x DFVc Modem
Corel Paint Shop Pro X
Dell Resource CD
Dell ResourceCD
DNA
High Definition Audio Driver Package - KB835221
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows Media Player 10 (KB903157)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Intel(R) Graphics Media Accelerator Driver
Intel(R) PRO Network Connections Drivers
J2SE Runtime Environment 5.0 Update 11
Java 2 Runtime Environment Standard Edition v1.3.1_16
Java(TM) 6 Update 5
Java(TM) 6 Update 7
KODAK EASYSHARE Gallery Upload ActiveX Control
Lexmark 810 Series
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB928366)
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft Office XP Professional with FrontPage
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
PC Pitstop Optimize 1.0t
Power Tab Editor 1.7
PRS-500 USB driver
QuickTime
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 10 (KB936782)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950759)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951376)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB953838)
Security Update for Windows XP (KB953839)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956390)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958215)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958690)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960714)
Security Update for Windows XP (KB960715)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB961371)
Security Update for Windows XP (KB961373)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB963027)
Security Update for Windows XP (KB968537)
Security Update for Windows XP (KB969897)
Security Update for Windows XP (KB969898)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB971633)
Security Update for Windows XP (KB972260)
Security Update for Windows XP (KB973346)
SigmaTel Audio
SUPERAntiSpyware Free Edition
TurboTax 2008
TurboTax 2008 WinPerFedFormset
TurboTax 2008 WinPerProgramHelp
TurboTax 2008 WinPerReleaseEngine
TurboTax 2008 WinPerTaxSupport
TurboTax 2008 WinPerUserEducation
TurboTax 2008 wrapper
TurboTax 2008 wwiiper
TurboTax Deluxe 2007
Update for Windows Media Player 10 (KB913800)
Update for Windows Media Player 10 (KB926251)
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB951978)
Update for Windows XP (KB955839)
Update for Windows XP (KB967715)
Update Rollup 2 for Windows XP Media Center Edition 2005
User Profile Hive Cleanup Service
WebFldrs XP
Winamp (remove only)
WinCleaner Complete PC Care Version 10
Windows Driver Package - Sony Corporation (PRSUSB) USB (08/08/2006 1.0.03.08080)
Windows Genuine Advantage Notifications (KB905474)
Windows Media Format Runtime
Windows XP Media Center Edition 2005 KB908250
Windows XP Service Pack 3
WinZip
Yahoo! Toolbar
==== Event Viewer Messages From Past Week ========
8/23/2009 8:12:14 PM, error: VETMONNT [105] - File infection: A0051464.exe is Win32/Ertfor.AK trojan.
8/23/2009 8:10:55 PM, error: VETMONNT [105] - File infection: A0047704.exe is Win32/Ertfor.AK trojan.
8/23/2009 8:08:39 PM, error: VETMONNT [105] - File infection: A0041304.exe is Win32/Ertfor.AK trojan.
8/22/2009 8:16:40 PM, error: Service Control Manager [7000] - The VET Message Service service failed to start due to the following error: Access is denied.
8/22/2009 8:16:27 PM, error: NetBT [4311] - Initialization failed because the driver device could not be created.
==== End Of File ===========================
DDS
DDS.TXT
DDS (Ver_09-07-30.01) - NTFSx86
Run by NEWXPOWNER at 6:20:43.04 on Tue 08/25/2009
Internet Explorer: 6.0.2900.5512
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.502.133 [GMT -5:00]
AV: CA Anti-Virus *On-access scanning enabled* (Updated) {17CFD1EA-56CF-40B5-A06B-BD3A27397C93}
============== Running Processes ===============
C:\WINNT\system32\svchost -k DcomLaunch
C:\WINNT\system32\svchost -k rpcss
C:\WINNT\System32\svchost.exe -k netsvcs
C:\WINNT\system32\svchost.exe -k NetworkService
C:\WINNT\system32\svchost.exe -k LocalService
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINNT\Explorer.EXE
C:\WINNT\ehome\ehtray.exe
C:\WINNT\system32\igfxpers.exe
C:\WINNT\stsystra.exe
C:\Program Files\CA\CA Internet Security Suite\cctray\cctray.exe
C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spam\QSP-5.1.18.0\QOELoader.exe
C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\CAVRID.exe
C:\WINNT\system32\ctfmon.exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spyware\CAPPActiveProtection.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\svchost.exe -k LocalService
C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\ISafe.exe
C:\WINNT\eHome\ehRecvr.exe
C:\WINNT\eHome\ehSched.exe
C:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exe
C:\Program Files\CA\SharedComponents\PPRT\bin\ITMRTSVC.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINNT\system32\svchost.exe -k LocalService
C:\WINNT\system32\svchost.exe -k imgsvc
C:\Program Files\UPHClean\uphclean.exe
svchost
C:\WINNT\ehome\mcrdsvc.exe
C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spyware\PPCtlPriv.exe
C:\WINNT\system32\dllhost.exe
C:\Program Files\CA\CA Internet Security Suite\ccprovsp.exe
C:\WINNT\System32\alg.exe
C:\Documents and Settings\NEWXPOWNER\Desktop\Computer Fix\dds.pif
C:\WINNT\system32\wuauclt.exe
C:\WINNT\system32\wbem\wmiprvse.exe
============== Pseudo HJT Report ===============
uStart Page = hxxp://www.yahoo.com/
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\system32\blank.htm
mWinlogon: Userinit=c:\winnt\system32\userinit.exe,c:\winnt\system32\sdra64.exe,
TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
uRun: [ctfmon.exe] c:\winnt\system32\ctfmon.exe
uRun: [BitTorrent DNA] "c:\program files\dna\btdna.exe"
uRun: [SUPERAntiSpyware] c:\program files\superantispyware\SUPERAntiSpyware.exe
mRun: [ehTray] c:\winnt\ehome\ehtray.exe
mRun: [IgfxTray] c:\winnt\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\winnt\system32\hkcmd.exe
mRun: [Persistence] c:\winnt\system32\igfxpers.exe
mRun: [SigmatelSysTrayApp] stsystra.exe
mRun: [cctray] "c:\program files\ca\ca internet security suite\cctray\cctray.exe"
mRun: [QOELOADER] "c:\program files\ca\ca internet security suite\ca anti-spam\qsp-5.1.18.0\QOELoader.exe"
mRun: [CAVRID] "c:\program files\ca\ca internet security suite\ca anti-virus\CAVRID.exe"
mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
mRun: [LXBSCATS] rundll32 c:\winnt\system32\spool\drivers\w32x86\3\LXBStime.dll,_RunDLLEntry@16
StartupFolder: c:\docume~1\alluse~1.win\startm~1\programs\startup\adober~1.lnk - c:\program files\adobe\acrobat 7.0\reader\reader_sl.exe
StartupFolder: c:\docume~1\alluse~1.win\startm~1\programs\startup\micros~1.lnk - c:\program files\microsoft office\office10\OSA.EXE
uPolicies-system: EnableProfileQuota = 1 (0x1)
IE: E&xport to Microsoft Excel - c:\progra~1\mi1933~1\office10\EXCEL.EXE/3000
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC} - c:\program files\java\jre1.6.0_07\bin\ssv.dll
LSP: c:\winnt\system32\VetRedir.dll
Trusted Zone: turbotax.com
DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} - hxxp://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} - hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://javadl.sun.com/webapps/download/AutoDL?BundleId=23100
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - c:\program files\common files\microsoft shared\web folders\PKMCDO.DLL
Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.dll
Notify: igfxcui - igfxdev.dll
LSA: Authentication Packages = msv1_0 c:\winnt\system32\jkkji.dll
============= SERVICES / DRIVERS ===============
R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2006-10-10 5632]
R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2007-2-27 32256]
R1 VET-FILT;VET File System Filter;c:\winnt\system32\drivers\vet-filt.sys [2008-3-29 26376]
R1 VET-REC;VET File System Recognizer;c:\winnt\system32\drivers\vet-rec.sys [2008-3-29 21128]
R1 VETEFILE;VET File Scan Engine;c:\winnt\system32\drivers\vetefile.sys [2008-6-4 880560]
R1 VETFDDNT;VET Floppy Boot Sector Monitor;c:\winnt\system32\drivers\vetfddnt.sys [2008-3-29 21512]
R1 VETMONNT;VET File Monitor;c:\winnt\system32\drivers\vetmonnt.sys [2008-3-29 32264]
R2 aawservice;Lavasoft Ad-Aware Service;c:\program files\lavasoft\ad-aware\aawservice.exe [2008-9-10 611664]
R2 CAISafe;CAISafe;c:\program files\ca\ca internet security suite\ca anti-virus\isafe.exe [2008-3-29 144960]
R2 IntuitUpdateService;Intuit Update Service;c:\program files\common files\intuit\update service\IntuitUpdateService.exe [2008-10-10 13088]
R2 McrdSvc;Media Center Extender Service;c:\winnt\ehome\mcrdsvc.exe [2005-8-5 99328]
R3 PPCtlPriv;PPCtlPriv;c:\program files\ca\ca internet security suite\ca anti-spyware\PPCtlPriv.exe [2007-8-16 189704]
R3 VETEBOOT;VET Boot Scan Engine;c:\winnt\system32\drivers\veteboot.sys [2008-6-4 108368]
S2 VETMSGNT;VET Message Service;c:\program files\ca\ca internet security suite\ca anti-virus\vetmsg.exe [2008-3-29 242952]
S3 PRSUSB;Sony Reader;c:\winnt\system32\drivers\PRSUSB.sys [2006-8-16 18944]
S3 SASENUM;SASENUM;c:\program files\superantispyware\SASENUM.SYS [2006-2-16 4096]
=============== Created Last 30 ================
2009-08-22 20:14 135,168 a------- C:\zip.exe
2009-08-22 20:14 19,286 a------- C:\cleanup.exe
2009-08-22 20:14 574 a------- C:\cleanup.bat
2009-08-10 22:26 <DIR> --d----- c:\winnt\system32\wbem\Repository
2009-08-10 22:25 <DIR> --d----- c:\docume~1\newxpo~1\applic~1\IObit
2009-08-10 22:25 <DIR> --d----- c:\program files\common files\ParetoLogic
2009-08-10 22:25 <DIR> --d----- c:\docume~1\alluse~1.win\applic~1\ParetoLogic
2009-08-10 22:25 <DIR> --d-h--- c:\winnt\PIF
2009-08-10 22:25 <DIR> --d----- c:\docume~1\newxpo~1\applic~1\Malwarebytes
2009-08-10 22:23 <DIR> --d----- c:\program files\TeaTimer (Spybot - Search & Destroy)
2009-08-10 22:23 <DIR> --d----- c:\program files\SDHelper (Spybot - Search & Destroy)
2009-08-10 22:23 <DIR> --d----- c:\program files\Misc. Support Library (Spybot - Search & Destroy)
2009-08-10 22:23 <DIR> --d----- c:\program files\File Scanner Library (Spybot - Search & Destroy)
2009-08-09 14:57 <DIR> --d----- c:\program files\IObit
2009-08-09 13:45 580,640 a--sh--- c:\winnt\system32\drivers\fidbox.dat
2009-08-09 13:45 23,328 a--sh--- c:\winnt\system32\drivers\fidbox2.dat
2009-08-09 13:45 9,896 a--sh--- c:\winnt\system32\drivers\fidbox.idx
2009-08-09 13:45 3,236 a--sh--- c:\winnt\system32\drivers\fidbox2.idx
2009-08-09 13:45 1,814 a------- C:\rollback.ini
2009-08-09 13:38 <DIR> --d----- c:\docume~1\alluse~1.win\applic~1\ParetoLogic Anti-Virus PLUS
2009-08-09 13:31 <DIR> --d----- c:\docume~1\alluse~1.win\applic~1\Malwarebytes
2009-08-09 11:48 <DIR> --d----- c:\winnt\system32\XPSViewer
2009-08-09 11:47 597,504 -c------ c:\winnt\system32\dllcache\printfilterpipelinesvc.exe
2009-08-09 11:47 575,488 -c------ c:\winnt\system32\dllcache\xpsshhdr.dll
2009-08-09 11:47 89,088 -c------ c:\winnt\system32\dllcache\filterpipelineprintproc.dll
2009-08-09 11:47 575,488 -------- c:\winnt\system32\xpsshhdr.dll
2009-08-09 11:47 117,760 -------- c:\winnt\system32\prntvpt.dll
2009-08-09 11:47 1,676,288 -c------ c:\winnt\system32\dllcache\xpssvcs.dll
2009-08-09 11:47 1,676,288 -------- c:\winnt\system32\xpssvcs.dll
2009-08-09 10:55 <DIR> --d----- c:\winnt\system32\CatRoot
2009-08-07 09:44 189,325 a------- c:\winnt\system32\wisdstr.exe
2009-08-07 09:44 75,776 a------- C:\yedfjdy.exe
2009-08-07 09:44 19,456 a------- C:\niawndos.exe
2009-08-07 09:44 19,456 a------- C:\hcel.exe
2009-08-07 09:44 9,728 a------- C:\umoikchf.exe
==================== Find3M ====================
2009-08-10 19:42 2,478 a------- c:\winnt\system32\tmp.reg
2009-07-13 10:08 286,720 a------- c:\winnt\system32\wmpdxm.dll
2009-06-26 11:50 666,624 a------- c:\winnt\system32\wininet.dll
2009-06-26 11:50 81,920 a------- c:\winnt\system32\ieencode.dll
2009-06-16 09:36 119,808 a------- c:\winnt\system32\t2embed.dll
2009-06-16 09:36 81,920 a------- c:\winnt\system32\fontsub.dll
2009-06-03 14:09 1,291,264 a------- c:\winnt\system32\quartz.dll
2008-09-07 10:15 60,200 a------- c:\docume~1\newxpo~1\applic~1\GDIPFONTCACHEV1.DAT
2007-11-25 12:10 307 a------- c:\documents and settings\newxpowner\x.dat
2007-11-25 12:09 266,729 a------- c:\documents and settings\newxpowner\z.dat
2006-01-14 11:42 251 a------- c:\program files\wt3d.ini
============= FINISH: 6:27:54.42 ===============
Hi,
Please save this (http://download.bleepingcomputer.com/rootrepeal/Win32kDiag.exe) file to your desktop. Click on Start->Run, and copy-paste the following command (the bolded text) into the "Open" box, and click OK. When it's finished, there will be a log called Win32kDiag.txt on your desktop. Archive it to zip file and attach to your reply.
"%userprofile%\desktop\win32kdiag.exe" -f -r
nicholsc
2009-08-26, 02:53
OK. Here you go. Are we making any progress? Thanks for all your help.
Hi,
Yes, we are making progress :)
IMPORTANT I notice there are signs of one or more P2P (Peer to Peer) File Sharing Programs on your computer.
BearShare
BitTorrent
DNA
I'd like you to read this thread (http://forums.spybot.info/showthread.php?t=282).
Please go to Control Panel > Add/Remove Programs and uninstall the programs listed above (in red).
After that:
Please visit this webpage for download links, and instructions for running ComboFix tool:
http://www.bleepingcomputer.com/combofix/how-to-use-combofix
Please ensure you read this guide carefully and install the Recovery Console first.
The Windows Recovery Console will allow you to boot up into a special recovery (repair) mode. This allows us to more easily help you should your computer have a problem after an attempted removal of malware. It is a simple procedure that will only take a few moments of your time.
Once installed, you should see a blue screen prompt that says:
The Recovery Console was successfully installed.
Please continue as follows:
Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix, link (http://www.bleepingcomputer.com/forums/topic114351.html)
Remember to re-enable them afterwards.
Click Yes to allow ComboFix to continue scanning for malware.
When the tool is finished, it will produce a report for you.
Please include the following reports for further review, and so we may continue cleansing the system:
C:\ComboFix.txt
New dds.txt log.
A word of warning: Neither I nor sUBs are responsible for any damage you may have caused your machine by running ComboFix. This tool is not a toy and not for everyday use.
nicholsc
2009-08-27, 03:37
OK. Here's what I have. The first time I clicked on it it wanted me to choose what program to use. The second time it came up with something like "can't run......virus". I can't remember what it exactly said. I restarted and it ran. Only thing that came up was something about a rootkit - C:|winnt\system32\sdra64.exe. It restarted and ran fine. I attached the combofix.txt file, but couldn't find the NEW DDS.TXT file you had bolded.
Hi,
To get 'new dds.txt log' you have to re-run DDS.
nicholsc
2009-08-28, 03:38
OK. Here are the two logs as attachments. Do you know where we stand with this problem? Is it a virus? Malware? Something quite complicated, or is it pretty common? I just want to know where we are at with this process. Thanks for all of your help.
Hi,
One of the latest infections is/was present in your system. I won't give any exact estimations of the time when we've finished but things are going according to the plans.
Go Start > Run and copy/paste the following single-line command into the Run box and click OK:
cmd /c PEV -l "%systemdrive%\proquota.exe" >Log.txt&Log.txt&del Log.txt
A Notepad file will open. Post the contents of Log.txt in your next reply.
Open notepad and copy/paste the text in the quotebox below into it:
Folder::
c:\program files\BearShare
Registry::
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UpdatesDisableNotify"=-
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ComputerAssociatesAntiVirus]
"DisableMonitoring"=-
Save this as
CFScript
A word of warning: Neither I nor sUBs are responsible for any damage you may have caused your machine. This tool is not a toy and not for everyday use.
http://img.photobucket.com/albums/v666/sUBs/CFScriptB-4.gif
Close all browser windows and refering to the picture above, drag CFScript into ComboFix.exe
Then post the resultant log.
Combofix should never take more that 20 minutes including the reboot if malware is detected.
If it does, open Task Manager then Processes tab (press ctrl, alt and del at the same time) and end any processes of findstr, find, sed or swreg, then combofix should continue.
If that happened we want to know, and also what process you had to end.
Uninstall old Adobe Reader versions and get the latest one (9.1 + updates 9.1.2 & 9.1.3 for it) here (http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows) or get Foxit Reader here (http://www.foxitsoftware.com/pdf/reader_2/down_reader.htm). Make sure you don't install toolbar if choose Foxit Reader! You may also check free readers introduced here (http://pdfreaders.org/).
Check here (http://www.adobe.com/software/flash/about/) to see if your Flash is up-to-date (do it separately with each of your browsers). If not, uninstall vulnerable versions by following instructions here (http://kb2.adobe.com/cps/141/tn_14157.html). Fresh version can be obtained here (http://get.adobe.com/flashplayer/).
Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system. Please follow these steps to remove older version Java components and update to the latest version...
Updating Java:
Download the latest version of Java Runtime Environment (JRE) 6 Update 16 (http://java.sun.com/javase/downloads/index.jsp).
Click the
Download
button to the right.
Select Windows on platform combobox and check the box that says:
Accept License Agreement. Click continue.
The page will refresh.
Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop.
Close any programs you may have running - especially your web browser.
Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java.
Check any item with Java Runtime Environment (JRE or J2SE) in the name.
Click the Remove or Change/Remove button.
Repeat as many times as necessary to remove each Java versions.
Reboot your computer once all Java components are removed.
Then from your desktop double-click on jre-6u16-windows-i586-p.exe to install the newest version. Uncheck Carbonite online backup trial if it's offered there.
Download ATF (Atribune Temp File) Cleaner© by Atribune (http://www.atribune.org/ccount/click.php?id=1) to your desktop.
Double-click ATF Cleaner.exe to open it
Under Main choose:
Windows Temp
Current User Temp
All Users Temp
Cookies
Temporary Internet Files
Prefetch
Java Cache
*The other boxes are optional*
Then click the Empty Selected button.
If you use Firefox:
Click Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click NO at the prompt.
If you use Opera:
Click Opera at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click NO at the prompt.
Click Exit on the Main menu to close the program.
Please run an online scan with Kaspersky Online Scanner (http://www.kaspersky.com/virusscanner) as instructed in the screenshot here (http://i275.photobucket.com/albums/jj285/Bleeping/KAS/KAS9.gif).
Post back its report, a fresh dds.txt log and above mentioned ComboFix resultant log.
nicholsc
2009-08-31, 15:35
Will reply tonight.
nicholsc
2009-09-01, 10:33
OK. Five reports.
Hi,
Are you familiar with these files:
C:\Documents and Settings\NEWXPOWNER\Application Data\Business Logic\UWC\Backup\J39266.8334409259.WCU
C:\Documents and Settings\NEWXPOWNER\Application Data\Business Logic\UWC\Backup\J39412.9101906019.WCU
C:\Documents and Settings\NEWXPOWNER\Application Data\Business Logic\UWC\Backup\J39418.7573638657.WCU
Open notepad and copy/paste the text in the quotebox below into it:
FCopy::
C:\WINNT\ServicePackFiles\i386\proquota.exe | c:\windows\system32\proquota.exe
C:\WINNT\ServicePackFiles\i386\proquota.exe | c:\windows\system32\dllcache\proquota.exe
File::
C:\Cory's Stuff\Misc. Files\BearshareSINSTALLOLD.exe
C:\WINDOWS-OLD\default.htm
C:\WINNT\system32\sdra64(10).exe
C:\WINNT\system32\sdra64(11).exe
C:\WINNT\system32\sdra64(12).exe
C:\WINNT\system32\sdra64(13).exe
C:\WINNT\system32\sdra64(14).exe
C:\WINNT\system32\sdra64(15).exe
C:\WINNT\system32\sdra64(16).exe
C:\WINNT\system32\sdra64(2).exe
C:\WINNT\system32\sdra64(3).exe
C:\WINNT\system32\sdra64(4).exe
C:\WINNT\system32\sdra64(5).exe
C:\WINNT\system32\sdra64(6).exe
C:\WINNT\system32\sdra64(7).exe
C:\WINNT\system32\sdra64(8).exe
C:\WINNT\system32\sdra64(9).exe
I:\Cory's Folder\Cory's Stuff\Misc. Files\BearshareSINSTALLOLD.exe
Save this as
CFScript
A word of warning: Neither I nor sUBs are responsible for any damage you may have caused your machine. This tool is not a toy and not for everyday use.
http://img.photobucket.com/albums/v666/sUBs/CFScriptB-4.gif
Close all browser windows and refering to the picture above, drag CFScript into ComboFix.exe
Then post the resultant log.
nicholsc
2009-09-01, 15:56
No, I am not familiar with those documents. I am not aware of what a WCU extension is. Will this change the latest instructions?
Hi,
Delete those three .WCU files too. You may need to make hidden files visible to find them:
Show hidden files
-----------------
* Click Start.
* Open My Computer.
* Select the Tools menu and click Folder Options.
* Select the View Tab.
* Under the Hidden files and folders heading select Show hidden files and folders.
* Uncheck the Hide protected operating system files (recommended) option.
* Click Yes to confirm.
* Click OK.
nicholsc
2009-09-02, 03:41
Here you go. Just a note. I ran CA Anti-Spyware last night and Kollah came up again but this time CA was able to quarantine and delete it.
Thanks
Hi,
We need to run ComboFix again due to my bug in script :oops:
Open notepad and copy/paste the text in the quotebox below into it:
FCopy::
C:\WINNT\ServicePackFiles\i386\proquota.exe | c:\WINNT\system32\proquota.exe
C:\WINNT\ServicePackFiles\i386\proquota.exe | c:\WINNT\system32\dllcache\proquota.exe
Save this as
CFScript
A word of warning: Neither I nor sUBs are responsible for any damage you may have caused your machine. This tool is not a toy and not for everyday use.
http://img.photobucket.com/albums/v666/sUBs/CFScriptB-4.gif
Close all browser windows and refering to the picture above, drag CFScript into ComboFix.exe
Then post the resultant log & fresh dds.txt log. Any remaining problems?
nicholsc
2009-09-02, 15:19
I will run tonight. The only problem I have had since the beginning was when I tried to run any spyware, virus or malware programs I would receive this message: "“Windows cannot access the specified device, path, or file. You may not have appropriate permissions to access the file.” Will I need to uninstall and reinstall to run? I can't delete any of the Spybot files as it says I do not have any rights. I also receive this error if I try to change any of the settings in the CA Antivirus program (Not the CA anti-spyware program). Whenever it tries to update these two programs it is unable to install the updated files.
nicholsc
2009-09-02, 16:13
In addition to the previous post, one more question. Based upon the problems I have been having, as well as the various procedures I have been going through, has our computer been compromised? Would anyone have been able to access any of our information?
Hi,
Do this for every .exe file you get that error:
1. Copy this (http://download.bleepingcomputer.com/sUBs/MiniFixes/Inherit.exe) file to the same folder with problematic .exe file.
2. Drag 'n' drop problematic .exe to this fixer to release its lock.
Based upon the problems I have been having, as well as the various procedures I have been going through, has our computer been compromised? Would anyone have been able to access any of our information?
There're chances for that. It would be recommended to change your online passwords from other, clean system for just in case.
nicholsc
2009-09-05, 15:20
Working on it. Please don't close thread yet.
Ok. Thanks for the heads up :)
nicholsc
2009-09-07, 22:22
OK. Finally got to running Combofix again. I have attached the results. I used the inherit program and was able to run all of my spyware/malware/adware programs with no problems. One thing is I am unable to perform any updates on the CA Security program. Other than that, from what I can tell, everything looks good. is there anything else you feel I should do?
Hi,
Please run ComboFix once more (let it update itself if asked for permission). Then attach its log and fresh dds log to your reply. How's the system running? CA may need reinstall.
nicholsc
2009-09-12, 09:55
From what I can tell everything seems to be good. All of the antispyware and related programs are able to run and eliminate anything they come up with. Still working on the CA security problem. The firewall states someone is trying to access our computer - so far it shows around 1,000 times. From what i've found on the internet this is sort of common??? Also, it states internet explorer is trying to act as a server. What is this, do I allow or deny?
The firewall states someone is trying to access our computer - so far it shows around 1,000 times. From what i've found on the internet this is sort of common???
Yes, that's common nowadays.
Also, it states internet explorer is trying to act as a server. What is this, do I allow or deny?
Deny that access.
Did you sort out CA update problem? I'd still like to see those logs requested in my previous post so I can give final instructions if things are ok.
nicholsc
2009-09-14, 04:28
OK! Here you go!
Hi,
Show hidden files
-----------------
* Click Start.
* Open My Computer.
* Select the Tools menu and click Folder Options.
* Select the View Tab.
* Under the Hidden files and folders heading select Show hidden files and folders.
* Uncheck the Hide protected operating system files (recommended) option.
* Click Yes to confirm.
* Click OK.
Delete these files:
c:\documents and settings\newxpowner\x.dat
c:\documents and settings\newxpowner\z.dat
Were you able to make CA work properly again?
nicholsc
2009-09-14, 18:27
CA Works properly, I am just not able to install the updates for some reason. I haven't totally uninstalled and reinstalled it. I will delete those files this evening. Anything else I should do after deleting those, or is everything finished?
Hi,
I'll give final steps when you've tested CA updating after reinstallation :)
nicholsc
2009-09-16, 15:25
OK. Deleted those two files and uninstalled and reinstalled it. I didn't receive any messages stating it was unable to update or unable to install updates. I guess it's working OK. Anything more to do?
Well congrats, it appears your system is all clean Are you still noticing any problems? If not, it's time to secure your system to prevent against further intrusions.
THESE STEPS ARE VERY IMPORTANT
Let's reset system restore
Reset and Re-enable your System Restore to remove infected files that have been backed up by Windows. The files in System Restore are protected to prevent any programs changing those files. This is the only way to clean these files: You will lose all previous restore points which are likely to be infected. Please note you need Administrator Access to do clean the restore points.
1. Turn off System Restore.
On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
Check Turn off System Restore.
Click Apply, and then click OK.
2. Reboot.
3. Turn ON System Restore.
On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
UN-Check *Turn off System Restore*.
Click Apply, and then click OK.
NOTE: only do this ONCE,NOT on a regular basis
Now lets uninstall ComboFix:
Click START then RUN
Now copy-paste "c:\documents and settings\NEWXPOWNER\Desktop\Computer Fix\ComboFix.exe" /u in the runbox and click OK
Next we remove all used tools.
Please download OTC (http://oldtimer.geekstogo.com/OTC.exe) and save it to desktop.
Double-click OTC.exe.
Click the CleanUp! button.
Select Yes when the
Begin cleanup Process?
prompt appears.
If you are prompted to Reboot during the cleanup, select Yes.
The tool will delete itself once it finishes, if not delete it by yourself.
Note: If you receive a warning from your firewall or other security programs regarding OTC attempting to contact the internet, please allow it to do so.
You may manually delete other tool files we used (Win32kDiag, GMER, DDS)
UPDATING WINDOWS AND INTERNET EXPLORER
IMPORTANT: You Need to Update Windows and Internet Explorer to protect your computer from the malware that is around on the Internet. Please go to the windows update site (http://windowsupdate.microsoft.com/) to get the critical updates.
If you are running Microsoft Office, or any portion thereof, go to the Microsoft's Office Update site and make sure you have at least all the critical updates installed (Free) Microsoft Office Update.
Make your Internet Explorer more secure
This can be done by following these simple instructions:
From within Internet Explorer click on the Tools menu and then click on Options.
Click once on the Security tab
Click once on the Internet icon so it becomes highlighted.
Click once on the Custom Level button.
Change the Download signed ActiveX controls to Prompt
Change the Download unsigned ActiveX controls to Disable
Change the Initialize and script ActiveX controls not marked as safe to Disable
Change the Installation of desktop items to Prompt
Change the Launching programs and files in an IFRAME to Prompt
Change the Navigate sub-frames across different domains to Prompt
When all these settings have been made, click on the OK button.
If it prompts you as to whether or not you want to save the settings, press the Yes button.
Next press the Apply button and then the OK to exit the Internet Properties page.
The following are recommended third party programs that are designed to keep your computer clean. A link as well as a brief description is included with each item.
hosts file:
Every version of windows has a hosts file as part of them. In a very basic sense, they are used to locate webpages. We can customize a hosts file so that it blocks certain webpages. However, it can slow down certain computers. This is why using a hosts file is optional!!
Download it here (http://www.mvps.org/winhelp2002/hosts.htm). Make sure you read the instructions on how to install the hosts file. There is a good tutorial here (http://www.bleepingcomputer.com/forums/tutorial51.html)
If you decide to download the hosts file, the slowdown problems can usually be avoided by following these steps:
Click the start button (at the lower left hand corner of your screen) Click run In the dialog box, type services.msc hit enter, then locate dns client Highlight it, then double-click it. On the dropdown box, change the setting from automatic to manual. Click ok
Just a final reminder for you. I am trying to stress these two points.
UPDATE UPDATE UPDATE!!! Make sure you do this about every 1-2 weeks.
Make sure all of your security programs are up to date.
Visit Microsoft's Windows Update Site Frequently - It is important that you visit http://www.windowsupdate.com regularly. This will ensure your computer has always the latest security updates available installed on your computer. If there are new updates to install, install them immediately, reboot your computer, and revisit the site until there are no more critical updates.
Once again, please post and tell me how things are going with your system... problems etc.
Have a great day,
Blade :cool:
nicholsc
2009-09-19, 18:44
OK! from what I can tell everything looks to be OK. Anything else you feel should be done? if not, thank you for all of your help. I really appreciate it very much.
Since this issue appears to be resolved ... this Topic has been closed. Glad I could help. :)
Note:If it has been four days or more since your last post, and the helper assisting you posted a response to that post to which you did not reply, your topic will not be reopened. At that point, if you still require help, please start a new topic and include a fresh HijackThis log and a link to your previous thread.
If it has been less than four days since your last response and you need the thread re-opened, please send me or MOD a private message (pm). A valid, working link to the closed topic is required.