Daniel Y
2009-07-18 08:36:39 UTC
ComboFix 09-07-14.08 - HP_Administrator 7/2009 Fri 22:23.1.2 - NTFSx86
执行位置: c:\documents and settings\HP_Administrator\Desktop\ComboFix.exe
* 成功创造新还原点
.
/wow section - STAGE 完成项目——3
The syntax of the command is incorrect.
/wow section 未完成
((((((((((((((((((((((((( 2009-06-18 至 2009-07-18 的新的档案 )))))))))))))))))))))))))))))))
.
2009-07-18 03:19 . 2009-07-18 03:19 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP
2009-07-18 02:35 . 2009-07-18 02:35 17584 ----a-w- c:\documents and settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\APTemp\AP1.exe
2009-07-18 02:31 . 2009-07-18 02:31 72053 ----a-w- c:\documents and settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\APTemp\AP0.exe
2009-07-18 00:23 . 2009-07-18 00:22 102664 ----a-w- c:\windows\system32\drivers\tmcomm.sys
2009-07-18 00:22 . 2009-07-18 00:24 -------- d-----w- c:\documents and settings\HP_Administrator\.housecall6.6
2009-07-17 22:51 . 2009-07-17 22:51 2 --shatr- c:\windows\winstart.bat
2009-07-17 22:50 . 2009-07-17 22:50 34760 ----a-w- c:\windows\system32\drivers\Partizan.sys
2009-07-17 22:50 . 2009-07-17 22:50 32480 ----a-w- c:\windows\system32\Partizan.exe
2009-07-17 22:50 . 2009-07-17 20:45 12752 ----a-w- c:\windows\system32\drivers\UnHackMeDrv.sys
2009-07-17 22:50 . 2009-07-17 23:20 -------- d-----w- c:\program files\UnHackMe
2009-07-17 22:41 . 2009-07-17 22:41 2 ----a-w- c:\windows\0101120101465752.dat
2009-07-17 21:28 . 2009-07-17 21:28 -------- d-----w- c:\documents and settings\HP_Administrator\Application Data\ScanSpyware
2009-07-17 21:28 . 2008-09-07 22:22 8704 ----a-w- c:\windows\system32\ssbtsr.exe
2009-07-17 21:28 . 2009-07-17 21:28 -------- d-----w- c:\program files\ScanSpyware
2009-07-17 20:38 . 2009-07-17 21:41 180934 ----a-w- c:\windows\system32\wisdstr.exe
2009-07-17 20:10 . 2009-07-17 20:10 8192 ----a-w- c:\windows\system32\braviax.exe
2009-07-17 19:20 . 2009-07-17 19:20 -------- d-----w- c:\documents and settings\HP_Administrator\Paypal
2009-07-17 03:38 . 2009-07-17 03:38 15000 ----a-w- c:\windows\system32\ghaf8jkdfd.dll
2009-07-17 02:58 . 2009-07-17 03:48 -------- d-----w- c:\windows\cfig
2009-07-16 02:40 . 2009-07-16 02:41 -------- d-----w- C:\Perl
2009-07-15 02:16 . 2009-07-15 02:16 -------- d-----w- c:\documents and settings\All Users\Application Data\OptiTex
2009-07-15 02:08 . 2009-05-11 18:38 4608 ----a-w- c:\documents and settings\HP_Administrator\Application Data\DAZ 3D\Studio3\DAZ Built-in Content\Runtime\libraries\!DAZ\w9xpopen.exe
2009-07-15 02:08 . 2009-05-11 18:38 348160 ----a-w- c:\documents and settings\HP_Administrator\Application Data\DAZ 3D\Studio3\DAZ Built-in Content\Runtime\libraries\!DAZ\MSVCR71.dll
2009-07-15 02:08 . 2009-05-11 18:38 36 ----a-w- c:\documents and settings\HP_Administrator\Application Data\DAZ 3D\Studio3\DAZ Built-in Content\Runtime\libraries\!DAZ\DzCreateExPFiles-V4.bat
2009-07-15 02:08 . 2009-05-11 18:38 2341923 ----a-w- c:\documents and settings\HP_Administrator\Application Data\DAZ 3D\Studio3\DAZ Built-in Content\Runtime\libraries\!DAZ\DzCreateExPFiles.exe
2009-07-15 02:07 . 2009-07-15 02:07 -------- d-----w- c:\documents and settings\HP_Administrator\Application Data\DAZ 3D
2009-07-15 02:07 . 2009-07-15 02:07 -------- d-----w- c:\program files\Common Files\DAZ
2009-07-15 02:07 . 2009-07-15 02:07 -------- d-----w- c:\program files\DAZ 3D
2009-07-06 23:04 . 2009-07-06 23:04 -------- d-----w- c:\program files\Nsasoft
2009-07-06 22:59 . 2009-07-06 22:59 -------- d--h--w- c:\windows\PIF
2009-07-06 22:54 . 2009-07-05 23:37 15688 ----a-w- c:\windows\system32\lsdelete.exe
2009-07-06 22:01 . 2009-07-06 22:01 -------- d-----w- c:\program files\Password Recovery for Windows Live
2009-07-05 23:35 . 2009-07-05 23:35 -------- dc-h--w- c:\documents and settings\All Users\Application Data\{7972B2E5-3E09-4E5E-81B7-FE5819D6772F}
2009-07-05 23:35 . 2009-03-12 08:17 2902048 -c--a-w- c:\documents and settings\All Users\Application Data\{7972B2