Spyware Forum

[GK]

================================================> >


at this



## The only START.EXE that popped up was START.EXE C:\windows\SMINST .

If nothing


directories, see


get.

## It just leads me to things I KNOW that are supposed to StartUp - nothing
anywhere that says Secret-Crush or that looks suspicious. Where can this
scumware be hiding???? We've put hours into this Hijacker already and since
we reset that browser thing Spybot isn't picking it up anymore. Could
Spybot have removed it?




FS..........

Delete that start.exe you found and leave in your recycle bin. I bet that's it.
I have no start.exe. On my computer. Run Sybot again, see if you get the same results.

 

[~ Free Spirit ~]

Delete that start.exe you found and leave in your recycle bin. I bet that's it.
I have no start.exe. On my computer. Run Sybot again, see if you get the

same results.

## It's "PC System Recovery" so I better leave it alone. That's the ONLY
start.exe that was found. Spybot and Ad-Aware do not find Secret-Crush. I
think my computer is haunted.

FS..........

 

[David Candy]

Type cmd in Start Run
then
dir /a /b /s c:\start.exe and
dir /a /b /s c:\restart.exe

This will find all if there.

 

[GK]

that's it.


same results.

## It's "PC System Recovery" so I better leave it alone. That's the ONLY
start.exe that was found. Spybot and Ad-Aware do not find Secret-Crush. I
think my computer is haunted.

FS..........

The infected file won't be called "Secret Crush", so get that thought out of your
head. The infected process file is "start.exe". Secret Crush is the "process name"
given to the file - not the "file name" of the parasite. In other words, the Secret
Crush parasite is hiding inside the file Start.exe. Start.exe is the name of the
infected file. Neither Spybot nor Ad-aware will identify the file itself as
Secret Crush. If one or both of the anti-spyware programs are pointing to start.exe,
then that's the bullshit file. There is no SMINST folder or start.exe file on my XP
home computer system, and I'm pretty sure if you have one, it was introduced from
a foreign source or 3rd party, hence, the friendly folks of Secret Crush in this
case. It's possible that it could be a legit 3rd party program, but not likely
given the circumstances. It's up to you to whether to delete it, but if you don't, it
will continue to be backed up into your system restore folders over and over. However,
this may not be a real big deal as long as the file isn't giving you any problems. I can
see you're uncomfortable deleting the file, all I can say is that it is up to you.
These kinds of things don't scare me as much, but you are not me.

 

[GK]

that's it.


same results.

## It's "PC System Recovery" so I better leave it alone. That's the ONLY
start.exe that was found. Spybot and Ad-Aware do not find Secret-Crush. I
think my computer is haunted.

FS..........

The infected file won't be called "Secret Crush", so get that thought out of your
head. The infected process file is "start.exe". Secret Crush is the "process name"
given to the parasite - not the "file name" of the parasite. In other words, the
Secret Crush parasite is hiding inside the file Start.exe. Start.exe is the
the file that's infected with the Secret Crush parasite. Neither Spybot nor Ad-aware
will identify the file itself as Secret Crush. If one or both of the anti-spyware
programs are pointing to start.exe, then that's the bullshit file. I seriously
doubt that this file has anything at all to do with system recovery, other than
the fact that it is being stored there.

There is no SMINST folder or start.exe file on my XP home computer system, and I'm
pretty sure if you have one, it was introduced from a foreign source/3rd party,
hence, the friendly folks of Secret Crush in this case. It's possible that it could
be a legit 3rd party program, but not likely given the circumstances. It's up to you
to whether to delete it, but if you don't, it will continue to be backed up into
your system restore folders over and over. However, this may not be a real big deal
as long as the file isn't giving you any problems. I can see you're uncomfortable
deleting the file, all I can say is that it is up to you. These kinds of things
don't scare me as much, but you are not me.

 

[~ Free Spirit ~]

Type cmd in Start Run
then
dir /a /b /s c:\start.exe and
dir /a /b /s c:\restart.exe

This will find all if there.
======================
All it finds is the same SMINST.START.EXE file. When I looked it up it has
something to do with the system restore feature. How can I know for sure?

The C:\restart.exe file was "not found."

FS............

 

[~ Free Spirit ~]

The infected file won't be called "Secret Crush", so get that thought out of your
head.

** AdAware did not find it - SPYBOT picked it right up,.... and by the name
SECRET-CRUSH! That's how I knew I had a problem! All AdAware seems good
for is tracker-cookies. I've never had it find anything else. Spybot is
the one that finds the scrum and shit-ware on our PCs.

The infected process file is "start.exe". Secret Crush is the "process name"

given to the file - not the "file name" of the parasite. In other words, the Secret
Crush parasite is hiding inside the file Start.exe. Start.exe is the name of the
infected file. Neither Spybot nor Ad-aware will identify the file itself as
Secret Crush.

** I printed out the sheet from Spy-bot and it called it Secret-Crush,
although that name is not on my PC. I have no idea where it got the name
from.

If one or both of the anti-spyware programs are pointing to start.exe,

then that's the bullshit file. There is no SMINST folder or start.exe file on my XP
home computer system,

** It says in properties it's "PC System Recovery." Is that BS to hide the
evil files? If so, then were is or what are the System Recovery files?

and I'm pretty sure if you have one, it was introduced from

a foreign source or 3rd party, hence, the friendly folks of Secret Crush in this
case. It's possible that it could be a legit 3rd party program, but not likely
given the circumstances.

** I agree.

It's up to you to whether to delete it, but if you don't, it

will continue to be backed up into your system restore folders over and over. However,
this may not be a real big deal as long as the file isn't giving you any problems. I can
see you're uncomfortable deleting the file, all I can say is that it is up to you.
These kinds of things don't scare me as much, but you are not me.

** You know XP better than we do! I hate to delete anything I'm not
POSITIVE about. Where would the REAL "PC System Recovery" files be located
or called in XP=Home?

FS.............

 

[David Candy]

Your other reply (to GK) I can't see. So post it again. The server sometimes lie about a post not being available for a few seconds. But once OE thinks it's gone, it doesn't recheck.

Maybe you aren't infected? There is no Start in XP (it's an internal command in XP so is only part of 9x as a seperate file). So it's not system restore. It may be your computer manufacturer's restore program.

Why do you think you are infected at this moment in time? Try to be logical AND consise.

Type msinfo32 in Start Run, go to Software Environment - Loaded Modules. File menu - Export (and make sure you only export this page - I won't read hundreds of pages of crap if you export every page). Do the same for Startup Programs.

 

[~ Free Spirit ~]

The infected file won't be called "Secret Crush", so get that thought out of your
head. The infected process file is "start.exe". Secret Crush is the "process name"
given to the parasite - not the "file name" of the parasite. In other words, the
Secret Crush parasite is hiding inside the file Start.exe. Start.exe is the
the file that's infected with the Secret Crush parasite.

&& Gotcha!

Neither Spybot nor Ad-aware

will identify the file itself as Secret Crush. If one or both of the anti-spyware
programs are pointing to start.exe, then that's the bullshit file. I seriously
doubt that this file has anything at all to do with system recovery, other than
the fact that it is being stored there.

&& Makes sense! But then,... where are the REAL system recovery files?
Do you know what they're called? I can see the scumbag hiding his/her evil
files behind such a benign name.

There is no SMINST folder or start.exe file on my XP home computer system, and I'm
pretty sure if you have one, it was introduced from a foreign source/3rd party,
hence, the friendly folks of Secret Crush in this case. It's possible that it could
be a legit 3rd party program, but not likely given the circumstances. It's up to you
to whether to delete it, but if you don't, it will continue to be backed up into
your system restore folders over and over. However, this may not be a real big deal
as long as the file isn't giving you any problems. I can see you're uncomfortable
deleting the file, all I can say is that it is up to you. These kinds of things
don't scare me as much, but you are not me.

&& I'm not as PC savvy as you are! Before I delete this start.exe file I
would feel better knowing where the real PC system recovery files are on my
PC.

FS.......

 

[GK]

of your


"process name"


words, the



&& Gotcha!

Neither Spybot nor Ad-aware



&& Makes sense! But then,... where are the REAL system recovery files?
Do you know what they're called? I can see the scumbag hiding his/her evil
files behind such a benign name.



and I'm


it could


up to you


up into


big deal



&& I'm not as PC savvy as you are! Before I delete this start.exe file I
would feel better knowing where the real PC system recovery files are on my
PC.

FS.......

System Volume Information is where the restore files are located.

 

[David Candy]

In c:\windws\system32\retore and is called rstrui.exe

 

[GK]

System Volume Information is where the restore files are located.

BTW, if you do decide to delete start.exe, it will go to your recycle bin.
You can always restore it from there quite easily, so leave it there for a day or
two. If you delete the file, run your anti-crapware programs again and see if
you come up clean.

I'm covering eyes

 

[GK]

In c:\windws\system32\retore and is called rstrui.exe

She might be confused. That's the restore application, not the
restore files.

 

[~ Free Spirit ~]

Your other reply (to GK) I can't see. So post it again. The server sometimes
lie about a post not being available for a few seconds. But once OE thinks
it's gone, it doesn't recheck.

Maybe you aren't infected? There is no Start in XP (it's an internal command
in XP so is only part of 9x as a seperate file). So it's not system restore.
It may be your computer manufacturer's restore program.

$$ Well it's now in the Recycle Bin. I did a Google on SMINST and all I
came up with was a Forum.

Why do you think you are infected at this moment in time? Try to be logical
AND consise.

$$ No. The browser seems to be working fine.

Type msinfo32 in Start Run, go to Software Environment - Loaded Modules.
File menu - Export (and make sure you only export this page - I won't read
hundreds of pages of crap if you export every page). Do the same for Startup
Programs.

## This is from Start-up programs:

System Information report written at: 01/06/04 20:00:20
System Name: CAROL
[Startup Programs]

Program Command User Name Location
desktop desktop.ini NT AUTHORITY\SYSTEM Startup
desktop desktop.ini CAROL\Owner Startup
NVIEW rundll32.exe nview.dll,nviewloadhook CAROL\Owner
HKU\S-1-5-21-528958456-3320138927-35547488-1003\SOFTWARE\Microsoft\Windows\C
urrentVersion\Run
desktop desktop.ini .DEFAULT Startup
desktop desktop.ini All Users Common Startup
Dpcstart c:\progra~1\direcway\bin\dpcstart.exe All Users Common Startup
NAV Agent c:\progra~1\norton~1\norton~1\navapw32.exe All Users
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
QD FastAndSafe All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
NvCplDaemon rundll32.exe c:\windows\system32\nvcpl.dll,nvstartup All Users
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Zone Labs Client c:\progra~1\zonela~1\zoneal~1\zlclient.exe All Users
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
MSConfig c:\windows\pchealth\helpctr\binaries\msconfig.exe /auto All Users
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run


$$ This is from Loaded Modules:

System Information report written at: 01/06/04 19:56:48
System Name: CAROL
[Loaded Modules]

Name Version Size File Date Manufacturer Path
smss 5.1.2600.1106 (xpsp1.020828-1920) 44.50 KB (45,568 bytes) 12/31/2003
4:00 PM Microsoft Corporation c:\windows\system32\smss.exe
ntdll 5.1.2600.1217 (xpsp2.030429-2131) 639.00 KB (654,336 bytes) 4/10/2003
12:05 AM Microsoft Corporation c:\windows\system32\ntdll.dll
winlogon 5.1.2600.1106 (xpsp1.020828-1920) 504.50 KB (516,608 bytes)
12/31/2003 4:00 PM Microsoft Corporation c:\windows\system32\winlogon.exe
kernel32 5.1.2600.1106 (xpsp1.020828-1920) 908.50 KB (930,304 bytes)
12/31/2003 3:50 PM Microsoft Corporation c:\windows\system32\kernel32.dll
msvcrt 7.0.2600.1106 (xpsp1.020828-1920) 315.50 KB (323,072 bytes)
12/31/2003 3:59 PM Microsoft Corporation c:\windows\system32\msvcrt.dll
advapi32 5.1.2600.1106 (xpsp1.020828-1920) 545.00 KB (558,080 bytes)
12/31/2003 3:50 PM Microsoft Corporation c:\windows\system32\advapi32.dll
rpcrt4 5.1.2600.1254 (xpsp2.030801-1834) 520.00 KB (532,480 bytes) 1/1/2004
12:43 AM Microsoft Corporation c:\windows\system32\rpcrt4.dll
gdi32 5.1.2600.1106 (xpsp1.020828-1920) 244.50 KB (250,368 bytes) 12/31/2003
3:50 PM Microsoft Corporation c:\windows\system32\gdi32.dll
user32 5.1.2600.1255 (xpsp2.030804-1745) 547.00 KB (560,128 bytes)
12/31/2003 4:00 PM Microsoft Corporation c:\windows\system32\user32.dll
userenv 5.1.2600.1106 (xpsp1.020828-1920) 651.50 KB (667,136 bytes)
12/31/2003 4:00 PM Microsoft Corporation c:\windows\system32\userenv.dll
nddeapi 5.1.2600.0 (xpclient.010817-1148) 15.00 KB (15,360 bytes) 12/31/2003
3:51 PM Microsoft Corporation c:\windows\system32\nddeapi.dll
crypt32 5.131.2600.1123 (xpsp2.020921-0842) 531.50 KB (544,256 bytes)
1/1/2004 12:40 AM Microsoft Corporation c:\windows\system32\crypt32.dll
msasn1 5.1.2600.0 (XPClient.010817-1148) 50.00 KB (51,200 bytes) 12/31/2003
3:59 PM Microsoft Corporation c:\windows\system32\msasn1.dll
secur32 5.1.2600.1106 (xpsp1.020828-1920) 51.00 KB (52,224 bytes) 12/31/2003
4:00 PM Microsoft Corporation c:\windows\system32\secur32.dll
winsta 5.1.2600.1106 (xpsp1.020828-1920) 47.00 KB (48,128 bytes) 12/31/2003
4:00 PM Microsoft Corporation c:\windows\system32\winsta.dll
profmap 5.1.2600.0 (xpclient.010817-1148) 28.00 KB (28,672 bytes) 12/31/2003
3:59 PM Microsoft Corporation c:\windows\system32\profmap.dll
netapi32 5.1.2600.1106 (xpsp1.020828-1920) 302.00 KB (309,248 bytes)
12/31/2003 3:51 PM Microsoft Corporation c:\windows\system32\netapi32.dll
regapi 5.1.2600.1106 (xpsp1.020828-1920) 43.00 KB (44,032 bytes) 12/31/2003
4:00 PM Microsoft Corporation c:\windows\system32\regapi.dll
ws2_32 5.1.2600.0 (xpclient.010817-1148) 73.50 KB (75,264 bytes) 12/31/2003
4:00 PM Microsoft Corporation c:\windows\system32\ws2_32.dll
ws2help 5.1.2600.0 (xpclient.010817-1148) 18.50 KB (18,944 bytes) 12/31/2003
4:00 PM Microsoft Corporation c:\windows\system32\ws2help.dll
authz 5.1.2600.0 (xpclient.010817-1148) 50.00 KB (51,200 bytes) 12/31/2003
3:50 PM Microsoft Corporation c:\windows\system32\authz.dll
psapi 5.1.2600.1106 (xpsp1.020828-1920) 17.00 KB (17,408 bytes) 12/31/2003
3:59 PM Microsoft Corporation c:\windows\system32\psapi.dll
version 5.1.2600.0 (xpclient.010817-1148) 16.00 KB (16,384 bytes) 12/31/2003
4:00 PM Microsoft Corporation c:\windows\system32\version.dll
setupapi 5.1.2600.1106 (xpsp1.020828-1920) 911.00 KB (932,864 bytes)
12/31/2003 4:00 PM Microsoft Corporation c:\windows\system32\setupapi.dll
msgina 5.1.2600.1106 (xpsp1.020828-1920) 945.50 KB (968,192 bytes)
12/31/2003 3:59 PM Microsoft Corporation c:\windows\system32\msgina.dll
shell32 6.00.2800.1233 (xpsp2.030604-1804) 7.86 MB (8,240,640 bytes)
1/1/2004 12:40 AM Microsoft Corporation c:\windows\system32\shell32.dll
shlwapi 6.00.2800.1276 386.00 KB (395,264 bytes) 10/16/2003 2:38 PM
Microsoft Corporation c:\windows\system32\shlwapi.dll
comctl32 5.82 (xpsp1.020828-1920) 544.00 KB (557,056 bytes) 12/31/2003 3:50
PM Microsoft Corporation c:\windows\system32\comctl32.dll
odbc32 3.520.9041.40 200.00 KB (204,800 bytes) 7/22/2003 12:22 PM Microsoft
Corporation c:\windows\system32\odbc32.dll
comdlg32 6.00.2800.1106 (xpsp1.020828-1920) 252.00 KB (258,048 bytes)
12/31/2003 3:50 PM Microsoft Corporation c:\windows\system32\comdlg32.dll
comctl32 6.0 (xpsp1.020828-1920) 900.00 KB (921,600 bytes) 4/9/2003 5:09 PM
Microsoft Corporation
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0
..10.0_x-ww_f7fb5805\comctl32.dll
odbcint 3.520.7713.0 88.00 KB (90,112 bytes) 12/31/2003 3:51 PM Microsoft
Corporation c:\windows\system32\odbcint.dll
shsvcs 6.00.2800.1106 (xpsp1.020828-1920) 113.50 KB (116,224 bytes)
12/31/2003 4:00 PM Microsoft Corporation c:\windows\system32\shsvcs.dll
sfc 5.1.2600.0 (xpclient.010817-1148) 4.00 KB (4,096 bytes) 12/31/2003 4:00
PM Microsoft Corporation c:\windows\system32\sfc.dll
sfc_os 5.1.2600.1106 (xpsp1.020828-1920) 130.00 KB (133,120 bytes)
12/31/2003 4:00 PM Microsoft Corporation c:\windows\system32\sfc_os.dll
wintrust 5.131.2600.0 (xpclient.010817-1148) 163.00 KB (166,912 bytes)
12/31/2003 4:00 PM Microsoft Corporation c:\windows\system32\wintrust.dll
ole32 5.1.2600.1263 (xpsp2.030819-2129) 1.12 MB (1,172,992 bytes) 1/1/2004
12:43 AM Microsoft Corporation c:\windows\system32\ole32.dll
imagehlp 5.1.2600.1106 (xpsp1.020828-1920) 124.00 KB (126,976 bytes)
4/10/2003 12:05 AM Microsoft Corporation c:\windows\system32\imagehlp.dll
winscard 5.1.2600.0 (xpclient.010817-1148) 91.00 KB (93,184 bytes)
12/31/2003 4:00 PM Microsoft Corporation c:\windows\system32\winscard.dll
wtsapi32 5.1.2600.1106 (xpsp1.020828-1920) 17.00 KB (17,408 bytes)
12/31/2003 4:00 PM Microsoft Corporation c:\windows\system32\wtsapi32.dll
sxs 5.1.2600.1106 (xpsp1.020828-1920) 659.00 KB (674,816 bytes) 12/31/2003
4:00 PM Microsoft Corporation c:\windows\system32\sxs.dll
uxtheme 6.00.2800.1106 (xpsp1.020828-1920) 198.50 KB (203,264 bytes)
12/31/2003 4:00 PM Microsoft Corporation c:\windows\system32\uxtheme.dll
winmm 5.1.2600.1106 (xpsp1.020828-1920) 167.50 KB (171,520 bytes) 12/31/2003
4:00 PM Microsoft Corporation c:\windows\system32\winmm.dll
cscdll 5.1.2600.0 (xpclient.010817-1148) 87.50 KB (89,600 bytes) 12/31/2003
3:50 PM Microsoft Corporation c:\windows\system32\cscdll.dll
opxpgina Not Available 40.00 KB (40,960 bytes) 4/10/2003 6:20 AM Not
Available c:\program files\softex\omnipass\opxpgina.dll
rsaenh 5.1.2600.1029 (xpsp1.020426-1800) 130.50 KB (133,632 bytes)
12/31/2003 4:00 PM Microsoft Corporation c:\windows\system32\rsaenh.dll
wlnotify 5.1.2600.1106 (xpsp1.020828-1920) 84.50 KB (86,528 bytes)
12/31/2003 4:00 PM Microsoft Corporation c:\windows\system32\wlnotify.dll
winspool 5.1.2600.1106 (xpsp1.020828-1920) 129.00 KB (132,096 bytes)
12/31/2003 4:00 PM Microsoft Corporation c:\windows\system32\winspool.drv
mpr 5.1.2600.0 (xpclient.010817-1148) 54.50 KB (55,808 bytes) 12/31/2003
3:59 PM Microsoft Corporation c:\windows\system32\mpr.dll
samlib 5.1.2600.1106 (xpsp1.020828-1920) 53.50 KB (54,784 bytes) 12/31/2003
4:00 PM Microsoft Corporation c:\windows\system32\samlib.dll
cscui 5.1.2600.1106 (xpsp1.020828-1920) 300.50 KB (307,712 bytes) 12/31/2003
3:50 PM Microsoft Corporation c:\windows\system32\cscui.dll
msv1_0 5.1.2600.1106 (xpsp1.020828-1920) 106.00 KB (108,544 bytes)
12/31/2003 3:59 PM Microsoft Corporation c:\windows\system32\msv1_0.dll
wdmaud 5.1.2600.0 (XPClient.010817-1148) 21.50 KB (22,016 bytes) 8/18/2001
12:37 AM Microsoft Corporation c:\windows\system32\wdmaud.drv
msacm32 5.1.2600.0 (xpclient.010817-1148) 20.00 KB (20,480 bytes) 12/31/2003
3:59 PM Microsoft Corporation c:\windows\system32\msacm32.drv
msacm32 5.1.2600.0 (xpclient.010817-1148) 65.50 KB (67,072 bytes) 12/31/2003
3:59 PM Microsoft Corporation c:\windows\system32\msacm32.dll
midimap 5.1.2600.0 (xpclient.010817-1148) 17.50 KB (17,920 bytes) 12/31/2003
3:59 PM Microsoft Corporation c:\windows\system32\midimap.dll
ntmarta 5.1.2600.1106 (xpsp1.020828-1920) 109.50 KB (112,128 bytes)
12/31/2003 3:51 PM Microsoft Corporation c:\windows\system32\ntmarta.dll
wldap32 5.1.2600.1106 (xpsp1.020828-1920) 164.50 KB (168,448 bytes)
12/31/2003 4:00 PM Microsoft Corporation c:\windows\system32\wldap32.dll
comres 2001.12.4414.42 773.50 KB (792,064 bytes) 12/31/2003 3:50 PM
Microsoft Corporation c:\windows\system32\comres.dll
oleaut32 3.50.5016.0 556.00 KB (569,344 bytes) 12/31/2003 3:51 PM Microsoft
Corporation c:\windows\system32\oleaut32.dll
clbcatq 2001.12.4414.42 457.50 KB (468,480 bytes) 12/31/2003 3:50 PM
Microsoft Corporation c:\windows\system32\clbcatq.dll
services 5.1.2600.0 (xpclient.010817-1148) 99.00 KB (101,376 bytes)
12/31/2003 4:00 PM Microsoft Corporation c:\windows\system32\services.exe
scesrv 5.1.2600.1106 (xpsp1.020828-1920) 291.00 KB (297,984 bytes)
12/31/2003 4:00 PM Microsoft Corporation c:\windows\system32\scesrv.dll
umpnpmgr 5.1.2600.1106 (xpsp1.020828-1920) 104.50 KB (107,008 bytes)
12/31/2003 4:00 PM Microsoft Corporation c:\windows\system32\umpnpmgr.dll
ncobjapi 5.1.2600.1106 (xpsp1.020828-1920) 41.50 KB (42,496 bytes)
12/31/2003 3:51 PM Microsoft Corporation c:\windows\system32\ncobjapi.dll
eventlog 5.1.2600.1106 (xpsp1.020828-1920) 48.00 KB (49,152 bytes)
12/31/2003 3:50 PM Microsoft Corporation c:\windows\system32\eventlog.dll
apphelp 5.1.2600.1106 (xpsp1.020828-1920) 113.00 KB (115,712 bytes)
12/31/2003 3:50 PM Microsoft Corporation c:\windows\system32\apphelp.dll
lsass 5.1.2600.1106 (xpsp1.020828-1920) 11.50 KB (11,776 bytes) 12/31/2003
3:51 PM Microsoft Corporation c:\windows\system32\lsass.exe
lsasrv 5.1.2600.1106 (xpsp1.020828-1920) 656.00 KB (671,744 bytes)
12/31/2003 3:51 PM Microsoft Corporation c:\windows\system32\lsasrv.dll
samsrv 5.1.2600.0 (xpclient.010817-1148) 401.50 KB (411,136 bytes)
12/31/2003 4:00 PM Microsoft Corporation c:\windows\system32\samsrv.dll
cryptdll 5.1.2600.0 (xpclient.010817-1148) 28.50 KB (29,184 bytes)
12/31/2003 3:50 PM Microsoft Corporation c:\windows\system32\cryptdll.dll
dnsapi 5.1.2600.1106 (xpsp1.020828-1920) 136.00 KB (139,264 bytes)
12/31/2003 3:59 PM Microsoft Corporation c:\windows\system32\dnsapi.dll
ntdsapi 5.1.2600.0 (xpclient.010817-1148) 63.00 KB (64,512 bytes) 12/31/2003
3:51 PM Microsoft Corporation c:\windows\system32\ntdsapi.dll
msprivs 5.1.2600.0 (xpclient.010817-1148) 44.00 KB (45,056 bytes) 12/31/2003
3:59 PM Microsoft Corporation c:\windows\system32\msprivs.dll
kerberos 5.1.2600.1106 (xpsp1.020828-1920) 266.50 KB (272,896 bytes)
12/31/2003 3:50 PM Microsoft Corporation c:\windows\system32\kerberos.dll
netlogon 5.1.2600.1106 (xpsp1.020828-1920) 390.00 KB (399,360 bytes)
12/31/2003 3:51 PM Microsoft Corporation c:\windows\system32\netlogon.dll
w32time 5.1.2600.1106 (xpsp1.020828-1920) 161.50 KB (165,376 bytes)
12/31/2003 4:00 PM Microsoft Corporation c:\windows\system32\w32time.dll
msvcp60 6.00.8972.0 392.05 KB (401,462 bytes) 12/31/2003 3:59 PM Microsoft
Corporation c:\windows\system32\msvcp60.dll
iphlpapi 5.1.2600.2 (xpsp1.020828-1920) 81.00 KB (82,944 bytes) 12/31/2003
3:50 PM Microsoft Corporation c:\windows\system32\iphlpapi.dll
schannel 5.1.2600.1106 (xpsp1.020828-1920) 133.50 KB (136,704 bytes)
12/31/2003 4:00 PM Microsoft Corporation c:\windows\system32\schannel.dll
wdigest 5.1.2600.0 (xpclient.010817-1148) 45.50 KB (46,592 bytes) 12/31/2003
4:00 PM Microsoft Corporation c:\windows\system32\wdigest.dll
scecli 5.1.2600.1106 (xpsp1.020828-1920) 170.50 KB (174,592 bytes)
12/31/2003 4:00 PM Microsoft Corporation c:\windows\system32\scecli.dll
ipsecsvc 5.1.2600.1106 (xpsp1.020828-1920) 152.00 KB (155,648 bytes)
12/31/2003 3:50 PM Microsoft Corporation c:\windows\system32\ipsecsvc.dll
oakley 5.1.2600.1106 (xpsp1.020828-1920) 321.00 KB (328,704 bytes)
12/31/2003 3:51 PM Microsoft Corporation c:\windows\system32\oakley.dll
winipsec 5.1.2600.0 (xpclient.010817-1148) 25.00 KB (25,600 bytes)
12/31/2003 4:00 PM Microsoft Corporation c:\windows\system32\winipsec.dll
mswsock 5.1.2600.0 (xpclient.010817-1148) 223.00 KB (228,352 bytes)
12/31/2003 3:59 PM Microsoft Corporation c:\windows\system32\mswsock.dll
wshtcpip 5.1.2600.0 (xpclient.010817-1148) 17.00 KB (17,408 bytes)
12/31/2003 4:00 PM Microsoft Corporation c:\windows\system32\wshtcpip.dll
pstorsvc 5.1.2600.0 (xpclient.010817-1148) 25.00 KB (25,600 bytes)
12/31/2003 3:59 PM Microsoft Corporation c:\windows\system32\pstorsvc.dll
psbase 5.1.2600.1106 (xpsp1.020828-1920) 81.00 KB (82,944 bytes) 12/31/2003
3:59 PM Microsoft Corporation c:\windows\system32\psbase.dll
dssenh 5.1.2600.1029 (xpsp1.020426-1800) 122.00 KB (124,928 bytes)
12/31/2003 3:59 PM Microsoft Corporation c:\windows\system32\dssenh.dll
svchost 5.1.2600.0 (xpclient.010817-1148) 12.50 KB (12,800 bytes) 12/31/2003
4:00 PM Microsoft Corporation c:\windows\system32\svchost.exe
rpcss 5.1.2600.1263 (xpsp2.030819-2129) 254.50 KB (260,608 bytes) 1/1/2004
12:43 AM Microsoft Corporation c:\windows\system32\rpcss.dll
winrnr 5.1.2600.0 (xpclient.010817-1148) 14.50 KB (14,848 bytes) 12/31/2003
4:00 PM Microsoft Corporation c:\windows\system32\winrnr.dll
rasadhlp 5.1.2600.0 (xpclient.010817-1148) 6.00 KB (6,144 bytes) 12/31/2003
3:59 PM Microsoft Corporation c:\windows\system32\rasadhlp.dll
dhcpcsvc 5.1.2600.1106 (xpsp1.020828-1920) 97.50 KB (99,840 bytes)
12/31/2003 3:59 PM Microsoft Corporation c:\windows\system32\dhcpcsvc.dll
wzcsvc 5.1.2600.1106 (xpsp1.020828-1920) 258.50 KB (264,704 bytes) 8/29/2002
5:41 AM Microsoft Corporation c:\windows\system32\wzcsvc.dll
rtutils 5.1.2600.0 (xpclient.010817-1148) 39.00 KB (39,936 bytes) 12/31/2003
4:00 PM Microsoft Corporation c:\windows\system32\rtutils.dll
wmi 5.1.2600.0 (XPClient.010817-1148) 5.50 KB (5,632 bytes) 12/31/2003 4:00
PM Microsoft Corporation c:\windows\system32\wmi.dll
esent 5.1.2600.0 (xpclient.010817-1148) 994.50 KB (1,018,368 bytes)
12/31/2003 3:50 PM Microsoft Corporation c:\windows\system32\esent.dll
rastls 5.1.2600.1106 (xpsp1.020828-1920) 89.00 KB (91,136 bytes) 12/31/2003
3:59 PM Microsoft Corporation c:\windows\system32\rastls.dll
atl 3.00.9435 73.06 KB (74,810 bytes) 12/31/2003 3:50 PM Microsoft
Corporation c:\windows\system32\atl.dll
cryptui 5.131.2600.1243 (xpsp2.030702-2125) 466.50 KB (477,696 bytes)
7/24/2003 5:40 PM Microsoft Corporation c:\windows\system32\cryptui.dll
wininet 6.00.2800.1106 (xpsp1.020828-1920) 585.00 KB (599,040 bytes)
12/31/2003 4:00 PM Microsoft Corporation c:\windows\system32\wininet.dll
mprapi 5.1.2600.0 (xpclient.010817-1148) 77.50 KB (79,360 bytes) 12/31/2003
3:59 PM Microsoft Corporation c:\windows\system32\mprapi.dll
activeds 5.1.2600.0 (xpclient.010817-1148) 177.50 KB (181,760 bytes)
12/31/2003 3:50 PM Microsoft Corporation c:\windows\system32\activeds.dll
adsldpc 5.1.2600.1106 (xpsp1.020828-1920) 136.50 KB (139,776 bytes)
12/31/2003 3:50 PM Microsoft Corporation c:\windows\system32\adsldpc.dll
rasapi32 5.1.2600.1106 (xpsp1.020828-1920) 212.00 KB (217,088 bytes)
12/31/2003 3:59 PM Microsoft Corporation c:\windows\system32\rasapi32.dll
rasman 5.1.2600.1106 (xpsp1.020828-1920) 54.50 KB (55,808 bytes) 12/31/2003
3:59 PM Microsoft Corporation c:\windows\system32\rasman.dll
tapi32 5.1.2600.1106 (xpsp1.020828-1920) 161.50 KB (165,376 bytes)
12/31/2003 4:00 PM Microsoft Corporation c:\windows\system32\tapi32.dll
schedsvc 5.1.2600.1106 (xpsp1.020828-1920) 155.50 KB (159,232 bytes)
12/31/2003 4:00 PM Microsoft Corporation c:\windows\system32\schedsvc.dll
raschap 5.1.2600.1106 (xpsp1.020828-1920) 56.50 KB (57,856 bytes) 12/31/2003
3:59 PM Microsoft Corporation c:\windows\system32\raschap.dll
msidle 6.00.2600.0000 (xpclient.010817-1148) 5.00 KB (5,120 bytes)
12/31/2003 3:59 PM Microsoft Corporation c:\windows\system32\msidle.dll
audiosrv 5.1.2600.1106 (xpsp1.020828-1920) 38.00 KB (38,912 bytes)
12/31/2003 3:50 PM Microsoft Corporation c:\windows\system32\audiosrv.dll
wkssvc 5.1.2600.1309 (xpsp2.031013-2110) 117.00 KB (119,808 bytes)
12/31/2003 4:00 PM Microsoft Corporation c:\windows\system32\wkssvc.dll
cryptsvc 5.1.2600.1190 (xpsp2.030320-1720) 52.50 KB (53,760 bytes) 1/1/2004
12:40 AM Microsoft Corporation c:\windows\system32\cryptsvc.dll
certcli 5.1.2600.1106 (xpsp1.020828-1920) 182.50 KB (186,880 bytes)
12/31/2003 3:50 PM Microsoft Corporation c:\windows\system32\certcli.dll
ersvc 5.1.2600.1106 (xpsp1.020828-1920) 19.00 KB (19,456 bytes) 12/31/2003
3:50 PM Microsoft Corporation c:\windows\system32\ersvc.dll
es 2001.12.4414.46 220.00 KB (225,280 bytes) 12/31/2003 3:50 PM Microsoft
Corporation c:\windows\system32\es.dll
srvsvc 5.1.2600.0 (xpclient.010817-1148) 85.00 KB (87,040 bytes) 12/31/2003
4:00 PM Microsoft Corporation c:\windows\system32\srvsvc.dll
netman 5.1.2600.1106 (xpsp1.020828-1920) 150.50 KB (154,112 bytes)
12/31/2003 3:51 PM Microsoft Corporation c:\windows\system32\netman.dll
msgsvc 5.1.2600.1309 (xpsp2.031013-2110) 31.50 KB (32,256 bytes) 1/1/2004
12:54 AM Microsoft Corporation c:\windows\system32\msgsvc.dll
pchsvc 5.1.2600.1106 (xpsp1.020828-1920) 29.00 KB (29,696 bytes) 12/31/2003
3:59 PM Microsoft Corporation
c:\windows\pchealth\helpctr\binaries\pchsvc.dll
seclogon 5.1.2600.0 (xpclient.010817-1148) 20.50 KB (20,992 bytes)
12/31/2003 4:00 PM Microsoft Corporation c:\windows\system32\seclogon.dll
sens 5.1.2600.1106 (xpsp1.020828-1920) 35.50 KB (36,352 bytes) 12/31/2003
4:00 PM Microsoft Corporation c:\windows\system32\sens.dll
srsvc 5.1.2600.1106 (xpsp1.020828-1920) 155.00 KB (158,720 bytes) 12/31/2003
4:00 PM Microsoft Corporation c:\windows\system32\srsvc.dll
powrprof 6.00.2600.0000 (xpclient.010817-1148) 14.50 KB (14,848 bytes)
12/31/2003 3:59 PM Microsoft Corporation c:\windows\system32\powrprof.dll
tapisrv 5.1.2600.1106 (xpsp1.020828-1920) 228.50 KB (233,984 bytes)
12/31/2003 4:00 PM Microsoft Corporation c:\windows\system32\tapisrv.dll
trkwks 5.1.2600.1106 (xpsp1.020828-1920) 80.00 KB (81,920 bytes) 12/31/2003
4:00 PM Microsoft Corporation c:\windows\system32\trkwks.dll
wmisvc 5.1.2600.1106 (xpsp1.020828-1920) 99.00 KB (101,376 bytes) 12/31/2003
4:00 PM Microsoft Corporation c:\windows\system32\wbem\wmisvc.dll
wbemcomn 5.1.2600.1106 (xpsp1.020828-1920) 210.00 KB (215,040 bytes)
12/31/2003 4:00 PM Microsoft Corporation
c:\windows\system32\wbem\wbemcomn.dll
vssapi 5.1.2600.1106 (xpsp1.020828-1920) 399.50 KB (409,088 bytes)
12/31/2003 4:00 PM Microsoft Corporation c:\windows\system32\vssapi.dll
rasmans 5.1.2600.1106 (xpsp1.020828-1920) 155.00 KB (158,720 bytes)
12/31/2003 3:59 PM Microsoft Corporation c:\windows\system32\rasmans.dll
netcfgx 5.1.2600.1106 (xpsp1.020828-1920) 570.50 KB (584,192 bytes)
12/31/2003 3:51 PM Microsoft Corporation c:\windows\system32\netcfgx.dll
clusapi 5.1.2600.1106 (xpsp1.020828-1920) 53.00 KB (54,272 bytes) 12/31/2003
3:50 PM Microsoft Corporation c:\windows\system32\clusapi.dll
wuauserv 5.4.3630.1106 (xpsp1.020828-1920) 9.00 KB (9,216 bytes) 12/31/2003
4:00 PM Microsoft Corporation c:\windows\system32\wuauserv.dll
wuaueng 5.4.3630.1106 (xpsp1.020828-1920) 185.00 KB (189,440 bytes)
12/31/2003 4:00 PM Microsoft Corporation c:\windows\system32\wuaueng.dll
advpack 6.00.2800.1106 (xpsp1.020828-1920) 89.00 KB (91,136 bytes)
12/31/2003 3:50 PM Microsoft Corporation c:\windows\system32\advpack.dll
rastapi 5.1.2600.1106 (xpsp1.020828-1920) 53.00 KB (54,272 bytes) 12/31/2003
3:59 PM Microsoft Corporation c:\windows\system32\rastapi.dll
comsvcs 2001.12.4414.46 1.12 MB (1,172,992 bytes) 12/31/2003 3:50 PM
Microsoft Corporation c:\windows\system32\comsvcs.dll
mtxclu 2001.12.4414.42 60.00 KB (61,440 bytes) 12/31/2003 3:59 PM Microsoft
Corporation c:\windows\system32\mtxclu.dll
wsock32 5.1.2600.0 (xpclient.010817-1148) 21.00 KB (21,504 bytes) 12/31/2003
4:00 PM Microsoft Corporation c:\windows\system32\wsock32.dll
colbact 2001.12.4414.42 55.50 KB (56,832 bytes) 12/31/2003 3:50 PM Microsoft
Corporation c:\windows\system32\colbact.dll
resutils 5.1.2600.0 (xpclient.010817-1148) 53.50 KB (54,784 bytes)
12/31/2003 4:00 PM Microsoft Corporation c:\windows\system32\resutils.dll
mtxoci 2001.12.4414.42 82.00 KB (83,968 bytes) 12/31/2003 3:59 PM Microsoft
Corporation c:\windows\system32\mtxoci.dll
browser 5.1.2600.1106 (xpsp1.020828-1920) 48.00 KB (49,152 bytes) 12/31/2003
3:50 PM Microsoft Corporation c:\windows\system32\browser.dll
unimdm 5.1.2600.0 (xpclient.010817-1148) 184.50 KB (188,928 bytes)
12/31/2003 4:00 PM Microsoft Corporation c:\windows\system32\unimdm.tsp
uniplat 5.1.2600.0 (xpclient.010817-1148) 13.50 KB (13,824 bytes) 12/31/2003
4:00 PM Microsoft Corporation c:\windows\system32\uniplat.dll
unimdmat 5.1.2600.0 (xpclient.010817-1148) 67.50 KB (69,120 bytes)
12/31/2003 4:00 PM Microsoft Corporation c:\windows\system32\unimdmat.dll
modemui 5.1.2600.0 (xpclient.010817-1148) 142.00 KB (145,408 bytes)
12/31/2003 3:59 PM Microsoft Corporation c:\windows\system32\modemui.dll
kmddsp 5.1.2600.0 (xpclient.010817-1148) 31.50 KB (32,256 bytes) 12/31/2003
3:50 PM Microsoft Corporation c:\windows\system32\kmddsp.tsp
ndptsp 5.1.2600.0 (xpclient.010817-1148) 51.50 KB (52,736 bytes) 12/31/2003
3:51 PM Microsoft Corporation c:\windows\system32\ndptsp.tsp
ipconf 5.1.2600.0 (xpclient.010817-1148) 16.00 KB (16,384 bytes) 12/31/2003
3:50 PM Microsoft Corporation c:\windows\system32\ipconf.tsp
h323 5.1.2600.0 (xpclient.010817-1148) 247.00 KB (252,928 bytes) 12/31/2003
3:50 PM Microsoft Corporation c:\windows\system32\h323.tsp
hidphone 5.1.2600.0 (xpclient.010817-1148) 27.50 KB (28,160 bytes)
12/31/2003 3:50 PM Microsoft Corporation c:\windows\system32\hidphone.tsp
hid 5.1.2600.0 (XPClient.010817-1148) 22.00 KB (22,528 bytes) 8/18/2001
12:36 AM Microsoft Corporation c:\windows\system32\hid.dll
rasppp 5.1.2600.1106 (xpsp1.020828-1920) 189.00 KB (193,536 bytes)
12/31/2003 3:59 PM Microsoft Corporation c:\windows\system32\rasppp.dll
ntlsapi 5.1.2600.0 (xpclient.010817-1148) 6.50 KB (6,656 bytes) 12/31/2003
3:51 PM Microsoft Corporation c:\windows\system32\ntlsapi.dll
ipnathlp 5.1.2600.1106 (xpsp1.020828-1920) 425.00 KB (435,200 bytes)
12/31/2003 3:50 PM Microsoft Corporation c:\windows\system32\ipnathlp.dll
netshell 5.1.2600.1106 (xpsp1.020828-1920) 1.55 MB (1,622,528 bytes)
12/31/2003 3:51 PM Microsoft Corporation c:\windows\system32\netshell.dll
credui 5.1.2600.1106 (xpsp1.020828-1920) 155.00 KB (158,720 bytes)
12/31/2003 3:50 PM Microsoft Corporation c:\windows\system32\credui.dll
hnetcfg 5.1.2600.1106 (xpsp1.020828-1920) 235.00 KB (240,640 bytes)
12/31/2003 3:50 PM Microsoft Corporation c:\windows\system32\hnetcfg.dll
wbemcore 5.1.2600.1106 (xpsp1.020828-1920) 469.00 KB (480,256 bytes)
12/31/2003 4:00 PM Microsoft Corporation
c:\windows\system32\wbem\wbemcore.dll
esscli 5.1.2600.1106 (xpsp1.020828-1920) 230.00 KB (235,520 bytes)
12/31/2003 3:50 PM Microsoft Corporation c:\windows\system32\wbem\esscli.dll
fastprox 5.1.2600.1106 (xpsp1.020828-1920) 552.00 KB (565,248 bytes)
12/31/2003 3:50 PM Microsoft Corporation
c:\windows\system32\wbem\fastprox.dll
wmiutils 5.1.2600.1106 (xpsp1.020828-1920) 94.00 KB (96,256 bytes)
12/31/2003 4:00 PM Microsoft Corporation
c:\windows\system32\wbem\wmiutils.dll
repdrvfs 5.1.2600.1106 (xpsp1.020828-190) 135.00 KB (138,240 bytes)
12/31/2003 4:00 PM Microsoft Corporation
c:\windows\system32\wbem\repdrvfs.dll
wmiprvsd 5.1.2600.1106 (xpsp1.020828-1920) 399.00 KB (408,576 bytes)
12/31/2003 4:00 PM Microsoft Corporation
c:\windows\system32\wbem\wmiprvsd.dll
wbemess 5.1.2600.1106 (xpsp1.020828-1920) 253.00 KB (259,072 bytes)
12/31/2003 4:00 PM Microsoft Corporation
c:\windows\system32\wbem\wbemess.dll
termsrv 5.1.2600.1106 (xpsp1.020828-1920) 195.50 KB (200,192 bytes)
12/31/2003 4:00 PM Microsoft Corporation c:\windows\system32\termsrv.dll
icaapi 5.1.2600.1106 (xpsp1.020828-1920) 9.00 KB (9,216 bytes) 12/31/2003
3:50 PM Microsoft Corporation c:\windows\system32\icaapi.dll
mstlsapi 5.1.2600.0 (xpclient.010817-1148) 101.50 KB (103,936 bytes)
12/31/2003 3:59 PM Microsoft Corporation c:\windows\system32\mstlsapi.dll
upnphost 5.1.2600.1106 (xpsp1.020828-1920) 161.00 KB (164,864 bytes)
12/31/2003 4:00 PM Microsoft Corporation c:\windows\system32\upnphost.dll
ssdpapi 5.1.2600.1106 (xpsp1.020828-1920) 26.50 KB (27,136 bytes) 12/31/2003
4:00 PM Microsoft Corporation c:\windows\system32\ssdpapi.dll
upnp 5.1.2600.1106 (xpsp1.020828-1920) 117.50 KB (120,320 bytes) 12/31/2003
4:00 PM Microsoft Corporation c:\windows\system32\upnp.dll
msi 2.0.2600.1106 1.99 MB (2,086,400 bytes) 12/31/2003 3:59 PM Microsoft
Corporation c:\windows\system32\msi.dll
rasdlg 5.1.2600.1106 (xpsp1.020828-1920) 617.00 KB (631,808 bytes)
12/31/2003 3:59 PM Microsoft Corporation c:\windows\system32\rasdlg.dll
msxml3 8.30.9926.0 1.07 MB (1,122,304 bytes) 12/31/2003 3:59 PM Microsoft
Corporation c:\windows\system32\msxml3.dll
sensapi 5.1.2600.1106 (xpsp1.020828-1920) 6.00 KB (6,144 bytes) 12/31/2003
4:00 PM Microsoft Corporation c:\windows\system32\sensapi.dll
urlmon 6.00.2800.1282 473.00 KB (484,352 bytes) 10/17/2003 8:15 PM Microsoft
Corporation c:\windows\system32\urlmon.dll
winhttp 5.1.2600.1106 (xpsp1.020828-1920) 303.00 KB (310,272 bytes)
12/31/2003 4:00 PM Microsoft Corporation c:\windows\system32\winhttp.dll
ncprov 5.1.2600.1106 (xpsp1.020828-1920) 59.00 KB (60,416 bytes) 12/31/2003
3:51 PM Microsoft Corporation c:\windows\system32\wbem\ncprov.dll
catsrvut 2001.12.4414.46 569.00 KB (582,656 bytes) 12/31/2003 3:50 PM
Microsoft Corporation c:\windows\system32\catsrvut.dll
mfcsubs 2001.12.4414.42 20.50 KB (20,992 bytes) 12/31/2003 3:59 PM Microsoft
Corporation c:\windows\system32\mfcsubs.dll
cabinet 5.1.2600.1106 (xpsp1.020828-1920) 58.50 KB (59,904 bytes) 4/10/2003
12:05 AM Microsoft Corporation c:\windows\system32\cabinet.dll
catsrv 2001.12.4414.42 210.00 KB (215,040 bytes) 12/31/2003 3:50 PM
Microsoft Corporation c:\windows\system32\catsrv.dll
wbemsvc 5.1.2600.0 (xpclient.010817-1148) 47.00 KB (48,128 bytes) 12/31/2003
4:00 PM Microsoft Corporation c:\windows\system32\wbem\wbemsvc.dll
spoolsv 5.1.2600.0 (XPClient.010817-1148) 50.00 KB (51,200 bytes) 12/31/2003
4:00 PM Microsoft Corporation c:\windows\system32\spoolsv.exe
spoolss 5.1.2600.1106 (xpsp1.020828-1920) 65.00 KB (66,560 bytes) 12/31/2003
4:00 PM Microsoft Corporation c:\windows\system32\spoolss.dll
localspl 5.1.2600.1106 (xpsp1.020828-1920) 289.00 KB (295,936 bytes)
12/31/2003 3:51 PM Microsoft Corporation c:\windows\system32\localspl.dll
cnbjmon 5.1.2503.0 (Lab06_N.010129-0357) 44.50 KB (45,568 bytes) 8/18/2001
12:36 AM Microsoft Corporation c:\windows\system32\cnbjmon.dll
hpzlnt05 2,128,0,0 144.05 KB (147,512 bytes) 5/22/2002 12:28 AM HP
c:\windows\system32\hpzlnt05.dll
fxsmon 5.2.1776.0 21.50 KB (22,016 bytes) 12/31/2003 3:50 PM Microsoft
Corporation c:\windows\system32\fxsmon.dll
fxsevent 5.2.1776.0 52.50 KB (53,760 bytes) 12/31/2003 3:50 PM Microsoft
Corporation c:\windows\system32\fxsevent.dll
pjlmon 5.1.2600.0 (XPClient.010817-1148) 12.50 KB (12,800 bytes) 8/18/2001
12:36 AM Microsoft Corporation c:\windows\system32\pjlmon.dll
tcpmon 5.1.2600.0 (XPClient.010817-1148) 39.50 KB (40,448 bytes) 12/31/2003
4:00 PM Microsoft Corporation c:\windows\system32\tcpmon.dll
usbmon 5.1.2600.0 (XPClient.010817-1148) 14.50 KB (14,848 bytes) 12/31/2003
4:00 PM Microsoft Corporation c:\windows\system32\usbmon.dll
win32spl 5.1.2600.1106 (xpsp1.020828-1920) 97.00 KB (99,328 bytes)
12/31/2003 4:00 PM Microsoft Corporation c:\windows\system32\win32spl.dll
netrap 5.1.2600.0 (xpclient.010817-1148) 10.50 KB (10,752 bytes) 12/31/2003
3:51 PM Microsoft Corporation c:\windows\system32\netrap.dll
inetpp 5.1.2600.0 (XPClient.010817-1148) 66.50 KB (68,096 bytes) 12/31/2003
3:50 PM Microsoft Corporation c:\windows\system32\inetpp.dll
icmp 5.1.2600.0 (xpclient.010817-1148) 3.00 KB (3,072 bytes) 12/31/2003 3:50
PM Microsoft Corporation c:\windows\system32\icmp.dll
dpcproxy 4.0.3.9 40.00 KB (40,960 bytes) 12/31/2003 6:15 PM Hughes Network
Systems c:\progra~1\direcway\bin\dpcproxy.exe
http 4.0.3.9 552.00 KB (565,248 bytes) 12/31/2003 6:15 PM Hughes Network
Systems c:\progra~1\direcway\bin\http.dll
dpctrace 4.0.3.9 88.00 KB (90,112 bytes) 12/31/2003 6:15 PM Hughes Network
Systems c:\progra~1\direcway\bin\dpctrace.dll
navapsvc 8.07.17 113.62 KB (116,344 bytes) 12/31/2003 9:21 PM Symantec
Corporation c:\program files\norton systemworks\norton
antivirus\navapsvc.exe
nprotect 15.03.0.36 132.00 KB (135,168 bytes) 12/31/2003 9:21 PM Symantec
Corporation c:\program files\norton systemworks\norton
utilities\nprotect.exe
s32krnll 20.0.0.181 207.50 KB (212,480 bytes) 12/31/2003 9:21 PM Symantec
Corporation c:\program files\norton systemworks\norton
utilities\s32krnll.dll
numisc 15.03.0.36 44.00 KB (45,056 bytes) 12/31/2003 9:21 PM Symantec
Corporation c:\program files\norton systemworks\norton utilities\numisc.dll
s32utill 20.0.0.181 105.00 KB (107,520 bytes) 12/31/2003 9:21 PM Symantec
Corporation c:\program files\norton systemworks\norton
utilities\s32utill.dll
npcomsvr 15.03.0.36 32.00 KB (32,768 bytes) 12/31/2003 9:21 PM Symantec
Corporation c:\progra~1\norton~1\norton~3\npcomsvr.dll
nvsvc32 6.14.10.4523 76.00 KB (77,824 bytes) 7/28/2003 4:19 PM NVIDIA
Corporation c:\windows\system32\nvsvc32.exe
omniserv Not Available 67.09 KB (68,704 bytes) 4/10/2003 6:20 AM Not
Available c:\program files\softex\omnipass\omniserv.exe
sftxtgp 5.00.2128.1 293.64 KB (300,688 bytes) 4/10/2003 6:20 AM Windows (R)
2000 DDK provider c:\program files\softex\omnipass\sftxtgp.dll
nopdb 6.03.0.36 168.03 KB (172,065 bytes) 12/31/2003 9:21 PM Symantec
Corporation c:\progra~1\norton~1\speedd~1\nopdb.exe
SDEXCEPTION 6.03.0.36 48.04 KB (49,191 bytes) 12/31/2003 9:21 PM Symantec
Corporation c:\progra~1\norton~1\speedd~1\sdexception.dll
SDOPTIONS 6.03.0.36 148.04 KB (151,589 bytes) 12/31/2003 9:21 PM Symantec
Corporation c:\progra~1\norton~1\speedd~1\sdoptions.dll
wiaservc 5.1.2600.1106 (xpsp1.020828-1920) 309.00 KB (316,416 bytes)
12/31/2003 4:00 PM Microsoft Corporation c:\windows\system32\wiaservc.dll
cfgmgr32 5.1.2600.0 (xpclient.010817-1148) 16.50 KB (16,896 bytes)
12/31/2003 3:50 PM Microsoft Corporation c:\windows\system32\cfgmgr32.dll
mscms 5.1.2600.1106 (xpsp1.020828-1920) 66.50 KB (68,096 bytes) 12/31/2003
3:59 PM Microsoft Corporation c:\windows\system32\mscms.dll
actxprxy 6.00.2600.0000 (XPClient.010817-1148) 96.00 KB (98,304 bytes)
12/31/2003 3:50 PM Microsoft Corporation c:\windows\system32\actxprxy.dll
sti 5.1.2600.1106 (xpsp1.020828-1920) 60.50 KB (61,952 bytes) 12/31/2003
4:00 PM Microsoft Corporation c:\windows\system32\sti.dll
vsmon 4.5.538.000 805.27 KB (824,592 bytes) 1/4/2004 10:11 PM Zone Labs Inc.
c:\windows\system32\zonelabs\vsmon.exe
vsutil 4.5.538.000 273.27 KB (279,832 bytes) 1/4/2004 10:10 PM Zone Labs
Inc. c:\windows\system32\vsutil.dll
vsinit 4.5.538.000 73.27 KB (75,032 bytes) 1/4/2004 10:10 PM Zone Labs Inc.
c:\windows\system32\vsinit.dll
ssleay32 4.5.538.000 461.27 KB (472,344 bytes) 1/4/2004 10:11 PM Zone Labs
Inc. c:\windows\system32\zonelabs\ssleay32.dll
vsdata 4.5.538.000 69.27 KB (70,936 bytes) 1/4/2004 10:10 PM Zone Labs Inc.
c:\windows\system32\vsdata.dll
vsruledb 4.5.538.000 749.27 KB (767,256 bytes) 1/4/2004 10:11 PM Zone Labs
Inc. c:\windows\system32\zonelabs\vsruledb.dll
vsdb 4.5.538.000 61.27 KB (62,736 bytes) 1/4/2004 10:11 PM Zone Labs Inc.
c:\windows\system32\zonelabs\vsdb.dll
vsvault 4.5.538.000 125.27 KB (128,280 bytes) 1/4/2004 10:11 PM Zone Labs
Inc. c:\windows\system32\zonelabs\vsvault.dll
vsregexp 4.5.538.000 61.27 KB (62,744 bytes) 1/4/2004 10:11 PM Zone Labs
Inc. c:\windows\system32\zonelabs\vsregexp.dll
html 4.5.538.000 29.27 KB (29,968 bytes) 1/4/2004 10:11 PM Zone Labs Inc.
c:\windows\system32\zonelabs\html.tdr
opxpapp Not Available 52.00 KB (53,248 bytes) 4/10/2003 6:20 AM Not
Available c:\program files\softex\omnipass\opxpapp.exe
ginastub Not Available 60.00 KB (61,440 bytes) 4/10/2003 6:20 AM Not
Available c:\program files\softex\omnipass\ginastub.dll
explorer 6.00.2800.1221 (xpsp2.030511-1403) 973.00 KB (996,352 bytes)
5/11/2003 10:12 PM Microsoft Corporation c:\windows\explorer.exe
browseui 6.00.2800.1106 (xpsp1.020828-1920) 998.00 KB (1,021,952 bytes)
12/31/2003 3:50 PM Microsoft Corporation c:\windows\system32\browseui.dll
shdocvw 6.00.2800.1276 1.28 MB (1,339,392 bytes) 10/16/2003 2:36 PM
Microsoft Corporation c:\windows\system32\shdocvw.dll
themeui 6.00.2800.1106 (xpsp1.020828-1920) 375.00 KB (384,000 bytes)
12/31/2003 4:00 PM Microsoft Corporation c:\windows\system32\themeui.dll
msimg32 5.1.2600.1106 (xpsp1.020828-1920) 4.50 KB (4,608 bytes) 12/31/2003
3:59 PM Microsoft Corporation c:\windows\system32\msimg32.dll
linkinfo 5.1.2600.0 (xpclient.010817-1148) 15.00 KB (15,360 bytes)
12/31/2003 3:51 PM Microsoft Corporation c:\windows\system32\linkinfo.dll
ntshrui 5.1.2600.1106 (xpsp1.020828-1920) 134.00 KB (137,216 bytes)
12/31/2003 3:51 PM Microsoft Corporation c:\windows\system32\ntshrui.dll
nview 6.14.10.4523 832.07 KB (852,038 bytes) 7/28/2003 4:19 PM NVIDIA
Corporation c:\windows\system32\nview.dll
olepro32 5.0.5014 104.00 KB (106,496 bytes) 12/31/2003 3:51 PM Microsoft
Corporation c:\windows\system32\olepro32.dll
ddraw 5.3.0000000.900 built by: DIRECTX 277.50 KB (284,160 bytes) 12/12/2002
8:14 AM Microsoft Corporation c:\windows\system32\ddraw.dll
dciman32 5.1.2600.0 (xpclient.010817-1148) 7.50 KB (7,680 bytes) 12/31/2003
3:59 PM Microsoft Corporation c:\windows\system32\dciman32.dll
webcheck 6.00.2800.1106 (xpsp1.020828-1920) 252.00 KB (258,048 bytes)
12/31/2003 4:00 PM Microsoft Corporation c:\windows\system32\webcheck.dll
stobject 5.1.2600.1106 (xpsp1.020828-1920) 115.00 KB (117,760 bytes)
12/31/2003 4:00 PM Microsoft Corporation c:\windows\system32\stobject.dll
batmeter 6.00.2600.0000 (xpclient.010817-1148) 26.50 KB (27,136 bytes)
12/31/2003 3:50 PM Microsoft Corporation c:\windows\system32\batmeter.dll
printui 5.1.2600.1106 (xpsp1.020828-1920) 510.00 KB (522,240 bytes)
12/31/2003 3:59 PM Microsoft Corporation c:\windows\system32\printui.dll
fxsst 5.2.1776.1023 546.50 KB (559,616 bytes) 12/31/2003 3:50 PM Microsoft
Corporation c:\windows\system32\fxsst.dll
fxsapi 5.2.1776.1023 433.00 KB (443,392 bytes) 12/31/2003 3:50 PM Microsoft
Corporation c:\windows\system32\fxsapi.dll
drprov 5.1.2600.0 (xpclient.010817-1148) 11.50 KB (11,776 bytes) 12/31/2003
3:59 PM Microsoft Corporation c:\windows\system32\drprov.dll
ntlanman 5.1.2600.1106 (xpsp1.020828-1920) 37.50 KB (38,400 bytes)
12/31/2003 3:51 PM Microsoft Corporation c:\windows\system32\ntlanman.dll
netui0 5.1.2600.0 (xpclient.010817-1148) 73.00 KB (74,752 bytes) 12/31/2003
3:51 PM Microsoft Corporation c:\windows\system32\netui0.dll
netui1 5.1.2600.0 (xpclient.010817-1148) 225.00 KB (230,400 bytes)
12/31/2003 3:51 PM Microsoft Corporation c:\windows\system32\netui1.dll
davclnt 5.1.2600.0 (xpclient.010817-1148) 21.50 KB (22,016 bytes) 12/31/2003
3:59 PM Microsoft Corporation c:\windows\system32\davclnt.dll
shdoclc 6.00.2600.0000 (xpclient.010817-1148) 536.00 KB (548,864 bytes)
12/31/2003 4:00 PM Microsoft Corporation c:\windows\system32\shdoclc.dll
browselc 6.00.2800.1106 (xpsp1.020828-1920) 61.50 KB (62,976 bytes)
12/31/2003 3:50 PM Microsoft Corporation c:\windows\system32\browselc.dll
scrauth 1, 1, 0, 126 101.13 KB (103,560 bytes) 8/14/2001 12:18 AM Symantec
Corporation c:\program files\common files\symantec shared\script
blocking\scrauth.dll
scrblock 1, 1, 0, 126 117.13 KB (119,944 bytes) 8/14/2001 12:19 AM Symantec
Corporation c:\program files\common files\symantec shared\script
blocking\scrblock.dll
cryptnet 5.131.2600.0 (xpclient.010817-1148) 52.00 KB (53,248 bytes)
12/31/2003 3:50 PM Microsoft Corporation c:\windows\system32\cryptnet.dll
jscript 5.6.0.8513 576.06 KB (589,881 bytes) 1/13/2003 2:57 PM Microsoft
Corporation c:\windows\system32\jscript.dll
duser 5.1.2600.1106 (xpsp1.020828-1920) 257.50 KB (263,680 bytes) 12/31/2003
3:59 PM Microsoft Corporation c:\windows\system32\duser.dll
mscoree 1.0.3705.0 128.00 KB (131,072 bytes) 1/5/2002 5:31 AM Microsoft
Corporation c:\windows\system32\mscoree.dll
shfusion 1.0.3705.0 244.00 KB (249,856 bytes) 1/5/2002 5:32 AM Microsoft
Corporation c:\windows\microsoft.net\framework\v1.0.3705\shfusion.dll
msvcr70 7.00.9466.0 336.00 KB (344,064 bytes) 1/5/2002 11:37 AM Microsoft
Corporation c:\windows\microsoft.net\framework\v1.0.3705\msvcr70.dll
xpsp1res 5.1.2600.1106 (xpsp1.020828-1920) 183.50 KB (187,904 bytes)
12/31/2003 4:00 PM Microsoft Corporation c:\windows\system32\xpsp1res.dll
uzshlex Not Available 399.50 KB (409,088 bytes) 3/20/2002 11:14 PM Not
Available c:\progra~1\ultima~1.7\uzshlex.dll
navshext 8.07.17 100.00 KB (102,400 bytes) 12/31/2003 9:21 PM Symantec
Corporation c:\program files\norton systemworks\norton
antivirus\navshext.dll
opshelle 1, 0, 0, 1 104.00 KB (106,496 bytes) 4/10/2003 6:20 AM Softex
Incorporated c:\program files\softex\omnipass\opshelle.dll
opcomm 1, 0, 0, 1 168.00 KB (172,032 bytes) 4/10/2003 6:20 AM c:\program
files\softex\omnipass\opcomm.dll
opfscure 1, 0, 0, 1 132.00 KB (135,168 bytes) 4/10/2003 6:20 AM Softex
Incorporated c:\program files\softex\omnipass\opfscure.dll
mfc42 6.00.8665.0 972.05 KB (995,383 bytes) 12/31/2003 3:59 PM Microsoft
Corporation c:\windows\system32\mfc42.dll
menuhdl 6.01.0012 28.00 KB (28,672 bytes) 12/31/2003 5:30 PM Symantec
Corporation c:\progra~1\norton~1\norton~2\menuhdl.dll
mstask 5.1.2600.1106 (xpsp1.020828-1920) 244.50 KB (250,368 bytes)
12/31/2003 3:59 PM Microsoft Corporation c:\windows\system32\mstask.dll
mydocs 6.00.2600.0000 (xpclient.010817-1148) 86.00 KB (88,064 bytes)
12/31/2003 3:59 PM Microsoft Corporation c:\windows\system32\mydocs.dll
navapw32 8.07.17 73.62 KB (75,384 bytes) 12/31/2003 9:21 PM Symantec
Corporation c:\progra~1\norton~1\norton~1\navapw32.exe
apwutil 8.07.17 36.00 KB (36,864 bytes) 12/31/2003 9:21 PM Symantec
Corporation c:\progra~1\norton~1\norton~1\apwutil.dll
apwcmdnt 8.07.17 92.00 KB (94,208 bytes) 12/31/2003 9:21 PM Symantec
Corporation c:\progra~1\norton~1\norton~1\apwcmdnt.dll
navproxy 8.07.17 108.00 KB (110,592 bytes) 12/31/2003 9:21 PM Symantec
Corporation c:\progra~1\norton~1\norton~1\navproxy.dll
symredir 4.5.2.01 29.65 KB (30,360 bytes) 12/31/2003 9:21 PM Symantec
Corporation c:\windows\system32\symredir.dll
defalert 8.07.17 200.00 KB (204,800 bytes) 12/31/2003 9:21 PM Symantec
Corporation c:\progra~1\norton~1\norton~1\defalert.dll
zlclient 4.5.538.000 677.27 KB (693,528 bytes) 1/4/2004 10:11 PM Zone Labs
Inc. c:\progra~1\zonela~1\zoneal~1\zlclient.exe
vspubapi 4.5.538.000 129.27 KB (132,376 bytes) 1/4/2004 10:11 PM Zone Labs
Inc. c:\windows\system32\vspubapi.dll
framewrk 4.5.538.000 1.02 MB (1,066,264 bytes) 1/4/2004 10:11 PM Zone Labs
Inc. c:\progra~1\zonela~1\zoneal~1\framewrk.dll
vsmonapi 4.5.538.000 109.27 KB (111,896 bytes) 1/4/2004 10:11 PM Zone Labs
Inc. c:\windows\system32\vsmonapi.dll
alert 4.5.538.000 141.27 KB (144,656 bytes) 1/4/2004 10:11 PM Zone Labs Inc.
c:\progra~1\zonela~1\zoneal~1\alert.zap
email 4.5.538.000 69.27 KB (70,928 bytes) 1/4/2004 10:11 PM Zone Labs Inc.
c:\progra~1\zonela~1\zoneal~1\email.zap
filter 4.5.538.000 53.27 KB (54,552 bytes) 1/4/2004 10:11 PM Zone Labs Inc.
c:\progra~1\zonela~1\zoneal~1\filter.zap
firewall 4.5.538.000 117.27 KB (120,088 bytes) 1/4/2004 10:11 PM Zone Labs
Inc. c:\progra~1\zonela~1\zoneal~1\firewall.zap
idlock 4.5.538.000 237.27 KB (242,968 bytes) 1/4/2004 10:11 PM Zone Labs
Inc. c:\progra~1\zonela~1\zoneal~1\idlock.zap
privacy 4.5.538.000 117.27 KB (120,088 bytes) 1/4/2004 10:11 PM Zone Labs
Inc. c:\progra~1\zonela~1\zoneal~1\privacy.zap
programs 4.5.538.000 241.27 KB (247,064 bytes) 1/4/2004 10:11 PM Zone Labs
Inc. c:\progra~1\zonela~1\zoneal~1\programs.zap
security 4.5.538.000 245.27 KB (251,160 bytes) 1/4/2004 10:11 PM Zone Labs
Inc. c:\progra~1\zonela~1\zoneal~1\security.zap
dpcstart 4.0.3.9 60.00 KB (61,440 bytes) 12/31/2003 6:15 PM Hughes Network
Systems c:\program files\direcway\bin\dpcstart.exe
dpctrace 4.0.3.9 88.00 KB (90,112 bytes) 12/31/2003 6:15 PM Hughes Network
Systems c:\program files\direcway\bin\dpctrace.dll
dpcdiapi 4.0.3.9 152.00 KB (155,648 bytes) 12/31/2003 6:15 PM Hughes Network
Systems c:\program files\direcway\bin\dpcdiapi.dll
rundll32 5.1.2600.0 (xpclient.010817-1148) 31.00 KB (31,744 bytes)
12/31/2003 4:00 PM Microsoft Corporation c:\windows\system32\rundll32.exe
nvshell 6.14.10.4523 460.07 KB (471,112 bytes) 7/28/2003 4:19 PM NVIDIA
Corporation c:\windows\system32\nvshell.dll
dpcnav 4.0.3.9 172.00 KB (176,128 bytes) 12/31/2003 6:15 PM Hughes Network
Systems c:\progra~1\direcway\bin\dpcnav.exe
bicdd32 4.0.3.9 240.00 KB (245,760 bytes) 12/31/2003 6:15 PM Hughes Network
Systems c:\progra~1\direcway\bin\bicdd32.dll
dpcdiapi 4.0.3.9 152.00 KB (155,648 bytes) 12/31/2003 6:15 PM Hughes Network
Systems c:\progra~1\direcway\bin\dpcdiapi.dll
utility 4.0.3.9 60.00 KB (61,440 bytes) 12/31/2003 6:15 PM Hughes Network
Systems c:\progra~1\direcway\bin\utility.dll
diagintf 4.0.3.9 24.00 KB (24,576 bytes) 12/31/2003 6:15 PM Hughes Network
Systems c:\progra~1\direcway\bin\diagintf.dll
hlthrprt 4.0.3.9 192.00 KB (196,608 bytes) 12/31/2003 6:15 PM Hughes Network
Systems c:\progra~1\direcway\bin\hlthrprt.ocx
dpcevlog 4.0.3.9 40.00 KB (40,960 bytes) 12/31/2003 6:15 PM Hughes Network
Systems c:\progra~1\direcway\bin\dpcevlog.ocx
dpccom32 4.00.0003 208.00 KB (212,992 bytes) 12/31/2003 6:15 PM Hughes
Network Systems c:\progra~1\direcway\bin\dpccom32.ocx
msvbvm60 6.00.9237 1.32 MB (1,388,544 bytes) 12/31/2003 3:59 PM Microsoft
Corporation c:\windows\system32\msvbvm60.dll
autsetup 4.0.3.9 116.00 KB (118,784 bytes) 12/31/2003 6:15 PM Hughes Network
Systems c:\progra~1\direcway\bin\autsetup.ocx
dpcusb 4.0.3.9 48.00 KB (49,152 bytes) 12/31/2003 6:15 PM Hughes Network
Systems c:\progra~1\direcway\bin\dpcusb.ocx
trbodll 4.0.3.9 312.00 KB (319,488 bytes) 12/31/2003 6:15 PM Hughes Network
Systems c:\progra~1\direcway\bin\trbodll.dll
tapidlo 4.0.3.9 64.00 KB (65,536 bytes) 12/31/2003 6:15 PM Hughes Network
Systems c:\progra~1\direcway\bin\tapidlo.dll
msvcirt 7.0.2600.0 (xpclient.010817-1148) 49.50 KB (50,688 bytes) 12/31/2003
3:59 PM Microsoft Corporation c:\windows\system32\msvcirt.dll
si_rx 4.0.3.9 104.00 KB (106,496 bytes) 12/31/2003 6:15 PM Hughes Network
Systems c:\progra~1\direcway\bin\si_rx.dll
rxglue32 4.0.3.9 44.00 KB (45,056 bytes) 12/31/2003 6:15 PM Hughes Network
Systems c:\progra~1\direcway\bin\rxglue32.dll
cdlo 4.0.3.9 48.00 KB (49,152 bytes) 12/31/2003 6:15 PM Hughes Network
Systems c:\progra~1\direcway\bin\cdlo.dll
pkgsrv 4.0.3.9 452.05 KB (462,896 bytes) 12/31/2003 6:15 PM Hughes Network
Systems c:\progra~1\direcway\bin\pkgsrv.dll
dbsshare 4.0.3.9 40.00 KB (40,960 bytes) 12/31/2003 6:15 PM Hughes Network
Systems c:\progra~1\direcway\bin\dbsshare.dll
ctreestd Not Available 340.00 KB (348,160 bytes) 12/31/2003 6:15 PM Not
Available c:\progra~1\direcway\bin\ctreestd.dll
cacheldr 4.0.3.9 64.00 KB (65,536 bytes) 12/31/2003 6:15 PM Hughes Network
Systems c:\progra~1\direcway\bin\cacheldr.dll
msimn 6.00.2800.1123 55.50 KB (56,832 bytes) 3/3/2003 3:57 PM Microsoft
Corporation c:\program files\outlook express\msimn.exe
msoe 6.00.2800.1158 1.12 MB (1,174,528 bytes) 3/3/2003 3:57 PM Microsoft
Corporation c:\program files\outlook express\msoe.dll
msoert2 6.00.2800.1123 89.00 KB (91,136 bytes) 3/3/2003 3:57 PM Microsoft
Corporation c:\windows\system32\msoert2.dll
msoeacct 6.00.2800.1123 223.50 KB (228,864 bytes) 3/3/2003 3:57 PM Microsoft
Corporation c:\windows\system32\msoeacct.dll
inetcomm 6.00.2800.1165 578.50 KB (592,384 bytes) 3/3/2003 3:57 PM Microsoft
Corporation c:\windows\system32\inetcomm.dll
acctres 6.00.2600.0000 (xpclient.010817-1148) 63.00 KB (64,512 bytes)
12/31/2003 3:50 PM Microsoft Corporation c:\windows\system32\acctres.dll
inetres 6.00.2800.1123 46.50 KB (47,616 bytes) 10/11/2002 3:08 PM Microsoft
Corporation c:\windows\system32\inetres.dll
msoeres 6.00.2800.1123 2.36 MB (2,479,616 bytes) 10/11/2002 3:09 PM
Microsoft Corporation c:\program files\outlook express\msoeres.dll
msident 6.00.2800.1123 43.00 KB (44,032 bytes) 3/3/2003 3:57 PM Microsoft
Corporation c:\windows\system32\msident.dll
msidntld 6.00.2600.0000 (xpclient.010817-1148) 14.50 KB (14,848 bytes)
12/31/2003 3:59 PM Microsoft Corporation c:\windows\system32\msidntld.dll
pstorec 5.1.2600.0 (xpclient.010817-1148) 37.00 KB (37,888 bytes) 12/31/2003
3:59 PM Microsoft Corporation c:\windows\system32\pstorec.dll
directdb 6.00.2800.1123 74.00 KB (75,776 bytes) 3/3/2003 3:57 PM Microsoft
Corporation c:\program files\common files\system\directdb.dll
mlang 6.00.2600.0000 (xpclient.010817-1148) 563.50 KB (577,024 bytes)
12/31/2003 3:59 PM Microsoft Corporation c:\windows\system32\mlang.dll
mshtml 6.00.2800.1276 2.67 MB (2,799,104 bytes) 10/16/2003 2:34 PM Microsoft
Corporation c:\windows\system32\mshtml.dll
msimtf 5.1.2600.1106 (xpsp1.020828-1920) 140.50 KB (143,872 bytes)
12/31/2003 3:59 PM Microsoft Corporation c:\windows\system32\msimtf.dll
msctf 5.1.2600.1106 (xpsp1.020828-1920) 260.50 KB (266,752 bytes) 12/31/2003
3:59 PM Microsoft Corporation c:\windows\system32\msctf.dll
mshtmled 6.00.2800.1106 (xpsp1.020828-1920) 430.00 KB (440,320 bytes)
12/31/2003 3:59 PM Microsoft Corporation c:\windows\system32\mshtmled.dll
msls31 3.10.349.0 143.00 KB (146,432 bytes) 12/31/2003 3:59 PM Microsoft
Corporation c:\windows\system32\msls31.dll
imgutil 6.00.2800.1106 (xpsp1.020828-1920) 29.50 KB (30,208 bytes)
12/31/2003 3:50 PM Microsoft Corporation c:\windows\system32\imgutil.dll
imm32 5.1.2600.1106 (xpsp1.020828-1920) 101.50 KB (103,936 bytes) 12/31/2003
3:50 PM Microsoft Corporation c:\windows\system32\imm32.dll
riched20 5.30.23.1211 413.50 KB (423,424 bytes) 12/31/2003 4:00 PM Microsoft
Corporation c:\windows\system32\riched20.dll
wab32 6.00.2800.1123 452.00 KB (462,848 bytes) 3/3/2003 3:57 PM Microsoft
Corporation c:\program files\common files\system\wab32.dll
wab32res 6.00.2800.1106 (xpsp1.020828-1920) 243.50 KB (249,344 bytes)
12/31/2003 4:00 PM Microsoft Corporation c:\program files\common
files\system\wab32res.dll
csapi3t1 1.0.2216 64.07 KB (65,605 bytes) 4/23/1999 10:22 PM Microsoft
Corporation c:\program files\common files\microsoft
shared\proof\csapi3t1.dll
shgina 6.00.2800.1106 (xpsp1.020828-1920) 61.50 KB (62,976 bytes) 12/31/2003
4:00 PM Microsoft Corporation c:\windows\system32\shgina.dll
wiashext 5.1.2600.0 (XPClient.010817-1148) 555.50 KB (568,832 bytes)
12/31/2003 4:00 PM Microsoft Corporation c:\windows\system32\wiashext.dll
gdiplus 5.1.3101.0 (xpsp1.020828-1920) 1.63 MB (1,703,936 bytes) 4/9/2003
5:09 PM Microsoft Corporation
c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.10.0_x-
ww_712befd8\gdiplus.dll
mssp232 1.63.4307 140.00 KB (143,360 bytes) 5/14/1998 12:00 AM Microsoft
Corporation c:\program files\common files\microsoft shared\proof\mssp232.dll
helpctr 5.1.2600.1106 (xpsp1.020828-1920) 725.00 KB (742,400 bytes)
12/31/2003 3:50 PM Microsoft Corporation
c:\windows\pchealth\helpctr\binaries\helpctr.exe
hcappres 5.1.2600.0 (xpclient.010817-1148) 6.50 KB (6,656 bytes) 12/31/2003
3:50 PM Microsoft Corporation
c:\windows\pchealth\helpctr\binaries\hcappres.dll
itss 5.2.3644.0 119.50 KB (122,368 bytes) 1/1/2004 12:40 AM Microsoft
Corporation c:\windows\system32\itss.dll
pchshell 5.1.2600.1143 (xpsp2.021108-1929) 92.00 KB (94,208 bytes) 1/1/2004
12:40 AM Microsoft Corporation
c:\windows\pchealth\helpctr\binaries\pchshell.dll
plugin 6.00.2600.0000 (xpclient.010817-1148) 67.00 KB (68,608 bytes)
12/31/2003 3:59 PM Microsoft Corporation c:\windows\system32\plugin.ocx
vbscript 5.6.0.7426 468.03 KB (479,261 bytes) 12/31/2003 4:00 PM Microsoft
Corporation c:\windows\system32\vbscript.dll
msinfo 7, 0, 0, 0 340.00 KB (348,160 bytes) 12/31/2003 3:59 PM
c:\windows\pchealth\helpctr\binaries\msinfo.dll
mfc42u 6.00.8665.0 972.05 KB (995,384 bytes) 12/31/2003 3:59 PM Microsoft
Corporation c:\windows\system32\mfc42u.dll
riched32 5.1.2600.0 (xpclient.010817-1148) 3.50 KB (3,584 bytes) 12/31/2003
4:00 PM Microsoft Corporation c:\windows\system32\riched32.dll
wbemprox 5.1.2600.1106 (xpsp1.020828-1920) 27.50 KB (28,160 bytes)
12/31/2003 4:00 PM Microsoft Corporation
c:\windows\system32\wbem\wbemprox.dll
helpsvc 5.1.2600.1106 (xpsp1.020828-1920) 687.00 KB (703,488 bytes)
12/31/2003 3:50 PM Microsoft Corporation
c:\windows\pchealth\helpctr\binaries\helpsvc.exe

 

[~ Free Spirit ~]

BTW, if you do decide to delete start.exe, it will go to your recycle bin.
You can always restore it from there quite easily, so leave it there for a day or
two. If you delete the file, run your anti-crapware programs again and see if
you come up clean.

I'm covering eyes

=========================
It's in the recycle bin - I came up CLEAN both before and after I sent it
there.

FS..........

 

[~ Free Spirit ~]

She might be confused. That's the restore application, not the
restore files.

======================
I just don't want to try and do a system restore some day and find I deleted
the program that does it or runs it, restores it or whatever. I have
start.exe in the recycle bin for the moment.

FS.........

 

[GK]

day or


=========================
It's in the recycle bin - I came up CLEAN both before and after I sent it
there.

FS..........

You came up clean before? How is it that you thought or
discovered that it was an infected file? I thought you said
your spybot program was pointing to start.exe as a parasite.

<Scratching head>

 

[GK]

======================
I just don't want to try and do a system restore some day and find I deleted
the program that does it or runs it, restores it or whatever. I have
start.exe in the recycle bin for the moment.

FS.........

No, like David said, the restore app is rstrui.exe. But, if you want to check
for your own peace of mind, simply create a restore point, and restore your
computer to that point. The whole process is pretty simple and quick. Or,
you can just assume everything is ok, which is probably a safe assumption,
based on all that's been discussed.

 

[~ Free Spirit ~]

You came up clean before?

** Because after we "reset the browser button"
(tools/options/programs-reset web settings) it didn't show up again in
Adaware or Spybot.

How is it that you thought or

discovered that it was an infected file?

** Spybot found something called "Secret-Crush" but couldn't remove it as it
said it was currently in Memory, and so I rebooted. After the reboot Spybot
again found it but it was again in memory and couldn't be removed. Someone
sent us to a "bug website" and we followed their directions and "reset" the
browser button.

I thought you said

your spybot program was pointing to start.exe as a parasite.

** YES! Start.exe was the LAST thing on the string or tree.... they all
looked like this in Spybots report:

Secret-Crush: Autostart Item (file fixing failed) C:\Documents and
Settings\Local Service\Start Menu\Startup\\start.exe

There were about 20 more - all very similar. All starting with
Secret-Crush and all ending in \\start.exe.

FS.........

 

[~ Free Spirit ~]

No, like David said, the restore app is rstrui.exe. But, if you want to check
for your own peace of mind, simply create a restore point, and restore your
computer to that point. The whole process is pretty simple and quick. Or,
you can just assume everything is ok, which is probably a safe assumption,
based on all that's been discussed.

==========================
We set a restore point yesterday. I hope all is well now. <wiping brow>

FS........